[Pkg-samba-maint] [samba] annotated tag debian/2%4.1.3+dfsg-1 created (now 5f49ac8)

Ivo De Decker idd-guest at moszumanska.debian.org
Mon Dec 9 23:01:10 UTC 2013


This is an automated email from the git hooks/post-receive script.

idd-guest pushed a change to annotated tag debian/2%4.1.3+dfsg-1
in repository samba.

        at  5f49ac8   (tag)
   tagging  4fb311762ededb8a807e54e1504fb440bb046ef5 (commit)
  replaces  debian/2%4.0.13+dfsg-1
 tagged by  Ivo De Decker
        on  Tue Dec 10 00:00:40 2013 +0100

- Log -----------------------------------------------------------------
samba Debian release 2:4.1.3+dfsg-1

Abhidnya Chirmule (1):
      To set file create/birth time in GPFS. Signed-off-by: Abhidnya Chirmule <achirmul at in.ibm.com>

Abhidnya Joshi (2):
      s3:winbindd/autorid multiple range support
      docs-xml: manpage update for autorid multirange support

Abhidnya P Chirmule (4):
      s3: Add access_mask to the flock VFS call
      File BirthTime test
      File winattr test
      s3: Add a vfs_time_audit module

Adrian Bunk (1):
      rely on sys/inotify.h for inotify

Alban Browaeys (1):
      Fix bug #8341 - libsmbclient segfault when feed the root of a mounted share via an uri

Alejandro Escanero Blanco (1):
      s3:auth/server_info: the primary rid should be in the groups rid array (bug #8798)

Alexander Bokovoy (348):
      Fix typo in WIFSIGNALED (as per Waider's report)
      Add support for krb5-config from recent MIT and Heimdal. And fallback to traditional guessing only if krb5-config was not found.
      When checking for tgetent, include libtinfo from recent Ncurses as well
      Merger krb5-config and libtinfo to SAMBA_3_0
      Third-party configuration scripts may produce undesirable additions to CFLAGS/CPPFLAGS
      Merge from head CFLAGS/CPPFLAGS and LIBS/LDFLAGS sanitizing
      Improve detection of iconv(3) for various platforms. M4 code is similar to what I use in Midgard for past few years, modified for Samba needs.
      Fix SGML errors in development documents
      Merge cifsntdomain.sgml fixes from 3.0 branch
      Merge encryption.sgml fixes from HEAD
      Merge more SGML strictness fixes from HEAD
      Fix missing tag pairs
      Fixed opened-but-not-closed listitem/varlistentry for LDAPADMINDN
      Fix another opened-but-not-closed tag
      Document results of smb.conf(5) inspection. We have 13 undocumented parameters for HEAD
      Tidy XML formating
      Add new framework for smb.conf(5). Please read README before trying to compile.
      1. Fix  generate-file-list.sh to produce a list sorted by parameter name, not parameter section.
      Reflect current conversion status
      Fix vfs to work with P_LIST-ed lp_vfsobj() -- the traversal is reversed. Based on patch from Metze
      Convert 'Security' section of smb.conf to new format
      Update doc-status
      Fix some mixture of FLAG_GLOBAL|FLAG_SHARE in synonyms
      Convert more parameters to new smb.conf(5) style. Document found occurences of non-documented parameters in doc-status
      Finish conversion of Printing parameters
      Update smbmount to include unicode and lfs capabilities options -- smbfs supports this already
      Update smbmount to include unicode and lfs capabilities options -- smbfs supports this already
      Next batch of conversions: File names.
      Finish conversion of Filenames
      Convert Logon parameters.
      Finish conversion of Browse options
      Finish conversion of WINS options
      Finish conversion of Locking options
      Finish conversion of LDAP options
      Finish conversion of VFS options. This section is not complete yet -- we miss documentation for parametric options and new modules stuff
      Finish conversion of Winbind options. Only Misc section left!
      Fix typos in printing
      Fix current status of conversion
      Update docs-status
      Convert a part of Misc section. More to come after a sleep
      Convert another group of options in Misc section
      Convert another group of options in Misc section
      Fix some minor typos
      Final bits of smb.conf(5) are converted!
      Final touch:
      Fix smb.conf.5.xml and friends:
      Fix a typo spotted when working on PDF version
      Fix typos
      Fix SGML/XML incompability before starting conversion to XML
      Docbook XML conversion: devdoc
      Docbook XML conversion: faq
      Docbook XML conversion: manpages
      Docbook XML conversion: projdoc
      Remove strip-links.pl, not needed anymore
      Docbook XML conversion: XSLT and build infrastructure
      Fix FAQ build
      small fixes
      Rebuild docs
      Fix ulink in winbind section
      Ignore generated file
      Fix VFS layer:
      Add new files needed for VFS fixes.
      Add NT quota support. Patch from Stefan (metze) Metzemacher
      Small fix for HAVE_SYS_QUOTAS usage, spotted by build farm
      Small fix for HAVE_SYS_QUOTAS usage, spotted by build farm
      Better isolate quota stuff
      Forgot to actually change default for quotas to -no- in configure.in
      Forgot to actually change default for quotas to -no- in configure.in
      Wrap into WITH_QUOTAS yet another place in trans2
      Fix a wrong define check.
      GCC accepts unnamed initalization of sub-structure. Let's see how AIX behave with this. Previous fix was incorrect.
      Eliminate NULL pointers from VFS interface. All hooks now really callable, producing either correct result or returning error if the feature isn't supported in the configuration
      Prefix VFS API macros with SMB_ for consistency and to avoid problems with VFS_ macros at system side. We currently have one clash with AIX and its VFS_LOCK. Compiled and tested -- no new functionality or code, just plain rename of macros for yet-unreleased VFS API version. Needs to be done before a24 is out
      Evolve quotas configure check more. Patch from Stefan (metze) Metzemacher. Now we are defaulting to --with-quotas=no but anyway trying to test them in configure. This is done to get information about as much quota API variations as possible -- when --with-quotas=no this does not affect build but provides us with more detailed information on build farm.
      This was actually a24 release (fixed changelog entry), add note about VFS API changes
      Fix macros for next and opaque quota ops. Spotted by metze
      Fixed linkend problems with some links in passdb
      Make inter-paragraph space in latex targets 1.5\baselineskip and do not indent paragraphs
      Sync VFS API changes for vfs_nt_*get_acl. Patch from Stefan Metzmacher <mezte at metzemix.de>
      Fix compiler warnings for vfstest. Patch from Stefan Metzmacher <mezte at metzemix.de>
      First version of VFS API developers documentation. Needs work on both formatting and content.
      Move VFS example skel.c to two different examples: one for opaque operations and one for transparent. Also add configure support for compiling third-party modules. Patch from Stefan Metzmacher <metze at metzemix.de>
      Update WHATSNEW.txt with information from release branch
      Document name resolve order suggested settings for security=ads as mentioned by Jerry
      Propagate changes to WHATSNEW.txt from release tree so that they would not be out of sync with reality.
      Fix memleak in groupdb. Spotted by Metze
      Small documentation fixes from Metze
      Add mandir to installdir target. Otherwise installman fails for clean DESTDIR
      Fix cut&paste bug in strdup() usage example. Found by Metze
      Accept --with-expsam=no as valid option (do nothing on it). Simplifies automatic option generation for spec files
      Add support for MSG_SMB_CONF_UPDATED and MSG_SHUTDOWN to all daemons (smbd, nmbd, winbindd). Reviewed by jerry and tridge.
      Fix comment
      Rise debug level to 5 for not-found-nt-quota message (quota setting for user wasn't found)
      Add a macro to check whether module-specific data set already or not. Returns True or False. Should support further encapsulation of VFS-specific structs
      Add NT quotas support. Users allowed now to manage quotas on systems with sysquotas interface detected (Linux at least) using native Windows tools. Also move default quota support for NT quotas to VFS module default_quota. Code by Metze
      Return proper error when it is impossible to change quota flags
      Mention security=ads in introductory paragraph too
      Add vfs_readonly module which allows to enforce periodic read-only limit on a share based on a specified start and end dates according to date(1) format
      Fix syntax error.
      Use path relative to source/ for modules/getdate.h
      VFS layer should be TRANSPARENT, not OPAQUE
      ntlm_auth should be installed as well. It is now of use by Squid and Midgard and is stable enough so it make sense to provide it in a Samba Team's binary packages
      Try to honor predefined CPPFLAGS when finding correct iconv flags
      Fix charset detection code in configure.
      Do not cache iconv checks because we are looking for it now in different places and negative result does not mean we don't have iconv unless we checked everything
      Fallback to our defaults (CP850/ASCII/UTF8) if there is no native iconv on the platform. This allows to compile and complain about it at runtime
      Ignore modules/*.c in make proto
      Ignore only getdate.* in modules/, not the whole directory. Fixes static builds of modules
      Fix for #150.
      Fix typo in configure.in for libsmbclient
      Ignore smbiconv binary as well
      Add CAP VFS module from Monyo. Primary purpose of this module is to provide CAP-compatible encoded file names for CJKV
      skel_ -> cap_
      Refactor charset plugins a bit and add CP437 module.
      Remove cap_set_quota as it is the same as default one
      Fix CP437 and CP850 syntax for old compilers removing ANSI C99-specifics
      Proper fix for #380 -- use different algorithm to generate codepages
      Now that CAN-2003-0689 is published officially, we need to make possible
      Support for CAN-2003-0689 port from SAMBA_3_0
      Back out --with-good-getgrouplist patch
      Back out --with-good-getgrouplist patch
      Alias charset 646 internally as it is same as ASCII. Should solve Solaris problems where ASCII was not detected and 646.so were requested through dynamic loading
      Alias charset 646 internally
      Update WHATSNEW.txt with information from release branch, SAMBA_3_0 talks only about RC3 while release branch explains RC3->RC4 differences
      Fix scripts to generate correct tables for compilers which have character constants as signed chars instead of unsigned
      Fix warnings on Sun cc Workshop Compilers 5.0. Reported by "Richard Bollinger" <rabollinger at comcast.net>. Also fixed script/gaptab.awk to produce compatible tables.
      Fix pdb_mysql. Jelmer will look into details tonight.
      Merge latest fixes from the release tree for WHATSNEW.txt
      Fix segfault in mount.cifs helper when there is no options specified during mount
      Fix segfault in mount.cifs helper when there is no options specified during mount
      Update WHATSNEW.txt with proper version from release branch
      Update WHATSNEW.txt with text from release branch
      Fix #558 -- support ISO-8859-1 internally. Makes Solaris users a bit happier
      Fix #558 -- support ISO-8859-1 internally. Makes Solaris users a bit happier
      Fix uninitialized variable in passdb code. Reported by Andy Polyakov <appro at fy.chalmers.se>
      Fix uninitialized variable in passdb code. Reported by Andy Polyakov <appro at fy.chalmers.se>
      Fix string overflow due to wrong size calculation
      Fix string overflow due to wrong size calculation
      Fix build after Jeremy -- yet another place where convert_string() wasn't updated
      Fix build after Jeremy -- yet another place where convert_string() wasn't updated
      Fix problems with very long filenames in both smbd and smbclient.
      Fix problems with very long filenames in both smbd and smbclient.
      Fix check_path_syntax() for multibyte encodings which have no '\' as second byte.
      Fix check_path_syntax() for multibyte encodings which have no '\' as second byte.
      r76: Fix smbfs problem with Tree Disconnect issued before smbfs starts its work.
      r516: On GNU/Linux distributions which allow to use both 2.4 and 2.6 kernels
      r517: Remove wrong commit I did by mistake
      r4704: Fix encoding while receiving of a message which was actually sent using STR_ASCII. Patch from Grigory Batalov <bga at altlinux.org>
      r12935: After discussion with Volker fix bug #3397 using a variant of the patch by Alex Deiter (tiamat at komi.mts.ru).
      r13695: Make code consistent with documentation. :-)
      r14158: Fix coverity CID #147 -- do not dereference pointers before checking their existence
      r15152: Fix a case when target is offline. Jerry, this needs to be in 3.0.23pre1
      r16136: By default, rootsbindir relies on SBINDIR so import it here
      r16138: By default, rootsbindir relies on SBINDIR so import it here
      r17198: Fix wins_nss dependencies
      r17338: Add support for multiple shares test inspired by Samba 4 torture's --unclist option. Triggered by -b sharelist_file option.
      r17353: Add support for JFS2 NFS4/AIXC and GPFS acls based on NFSv4 ACLs.
      r17354: Revert -r 17353 per Volker request while gpfs compatibility layer code will be released.
      r17358: Re-add JFS2 NFS4 ACLs support, move readme for it into AIX-specific examples directory.
      r21467: Add GPFS-provided DMAPI support based on their GPL library
      r21885: Chown logic should be activated only if nfs4:chown=yes
      r22172: FSCTL_RECALL_FILE is 0x90117 according to my traces. Record it here.
      r22505: Fix build
      r22840: Add -pie support to Python's setup.py. This should fix build of python libs on recent distributions that take care of security.
      r22867: With Samba4's IDL, we now have two new flags for share types: STYPE_TEMPORARY and STYPE_HIDDEN
      r22973: Apparently, 3.0.25 broke smb4k badly ;-)
      r23302: Refactor vfs_gpfs module, fix problems with chmod Tridge has found during ctdb tests
      r23831: Fix vfs_readahead: transparent modules should always pass through
      r4799: comparison_fn_t is under __USE_GNU on GNU systems, therefore, we need _GNU_SOURCE defined in the test
      r5169: As provisioning script generates everything under $newdb/ directory, put generated domain zone there as well
      r5173: Refer to a proper zone file name in resulting message
      r5538: Fix typo in comment -- non-existant constant name mentioned
      r5646: state->loadfile might be NULL after allocation so this is really
      r6352: Two new composite calls:
      r6597: Make use of libblkid (part of e2fsprogs) for reporting volume GUID, if possible.
      r6599: Fix formating using 'linux' C style
      r8830: Fix provision script after data split
      r8831: Clarify data wipe-out statement
      r9320: Fix premature dereference bug found by Coverty and also get rid of non-used memory context
      r9321: Fix potential bug found by Coverity. src_len has to be int but later we do pass it as size_t. In case src_len is negative, we need to register a failure and return to the caller
      r9476: Make intention to ignore result of receiving excplicit. Fixes warning found by Coverity
      r9478: Fix NTVFS POSIX module to work with EA and blkid after build system changes
      r9479: More fixes for explicit ignoring of returned result to fix Coverity warnings
      r14548: fix build after generated prototypes
      r15036: Add out of tree build support and see how buildfarm will respond to make constructs
      r15051: Remove directory creation from this rule; we use script/buildtree.pl for external build dir instead
      r15052: Do not add builddir variants into include paths when building in-tree
      r15061: Use $(PERL) to run cflags.pl as actual perl binary might not be in /usr/bin
      r15062: Theoretically, this should allow NetBSD make to handle VPATH-like lookups
      r15063: Theoretically, this should allow NetBSD make to handle VPATH-like lookups
      r15064: Remove the change until I find proper solution
      r15099: An attempt to fix BSD make portability issues. With these changes Samba 4 builds successfully on NetBSD 3.0
      r15206: Heimdal is always compiled with _GNU_SOURCE enabled (in its configure.in it is defined unconditionally).
      r15208: Change _GNU_SOURCE propagation to apply only to generated files as Andrew B. suggests
      r15211: REQUIRED_SUBSYSTEMS for binaries are gone, use PRIVATE_DEPENDENCIES here
      r17478: Add BENCH-READWRITE test to simulate read/write workload from simultaneous async clients. This code is based on concept from Mathias Dietz <mdietz at de.ibm.com>
      r23505: Use RAW_READ_READX, not RAW_READ_READ in BENCH-READWRITE test (we already write with RAW_WRITE_WRITEX). Noticed by Gomati Mohanan
      r23506: Turn back to RAW_READ_READ because buildfarm fails. Investigating.
      r23529: When using READX, fill in readx fields. Thanks to Metze for spotting it.
      r23540: Continue fixing bench-readwrite. We need to initialize state->readcnt not only when file is written but at initial write as well.
      r23862: Explain who requested unknown dependency. Helps a lot in chasing dependency hell when trimming down s4 platform
      Correctly free memory in regfio paths
      Fix pam_smbpass build
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      Fix codepagedir to follow predefined libdir when using FHS. Fixes x86_64 build.
      Fix crash in winbind clients: instead of talloc-based pointer we passed address of a local variable.
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      Fix crash in winbind clients: instead of talloc-based pointer we passed address of a local variable.
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      Merge CTDB-related fixes from samba-ctdb 3.0 branch (http://samba.org/~tridge/3_0-ctdb)
      Add support for offline files support, remote storage, and Async I/O force operations to VFS
      Merge latest fixes to vfs_gpfs and NFS4 ACLs from Samba 3.0 CTDB branch (from http://samba.org/~tridge/3_0-ctdb)
      Support GPFS prealloc interface
      Merge a variant of Shadow Copy module for exposing snapshots to windows clients as shadow copies from Samba 3.0 CTDB
      Add offline storage support with Tivoli Storage Manager Space Manager
      idmap TDB2 backend, used for clustered Samba setups.
      Enable building of VFS modules: vfs_tsmsm, vfs_shadowcopy2 and IDMAP module idmap_tdb2
      Fix build for pam_smbpass
      Fix build for pam_smbpass
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into ctdb-merge
      Convert old sid-string handling in idmap_tdb2 to a new one
      Merge branch 'ctdb-merge' into v3-2-test
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      Fix more VFS API mixup with offline files
      Rework of VFS is_offline() function to only return boolean offline/online result for a file.
      Remove is_remotestorage() call from VFS. We already have statvfs() there to handle FS capabilities.
      Merge DMAPI fixes from CTDB Samba
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into ctdb-merge
      Merge branch 'ctdb-merge' into dmapi-integration
      Merge DMAPI fixes from Tridge
      Fix BOOL introduced by last commit
      Fix typos and replace statvfs call with fs_capabilities()
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into dmapi-integration
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into dmapi-integration
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into dmapi-integration
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into dmapi-integration
      Allow actual call to set file offline
      Change the file time before we change the file mode.
      Allow broader range of HSM systems in vfs_tsmsm
      Destroy DMAPI session when main smbd daemon exits.
      Use more error-prone form of testing dm_destroy_session() return code after discussing with Tridge
      Ignore Emacs' semantic.cache
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      Fix samba-docs build after svn conversion and Samba3 By Example addition.
      Fix Development documentation as well
      Change 'release' target: remove 'htmlfaq' (outdated) and add 'guide'
      Document --require-membership-of={SID|Name}
      Another round of fixes (projdoc -> howto) for images
      This really should be 'max stat cache size', not stat cache
      Fix a dangerous bug in Makefile which actually allows 'make release' to skip
      Code in Samba 3 states "use sendfile = false" so documentation must reflect it
      Document async I/O options
      Fix Samba documentation build for manpages
      Fix another bunch of samba-docs bugs. Use <literal> to escape slashes with text
      And more fixes for slashes: use <literal/> in <command/> and <value/> automatically
      Embed db2latex as interim solution before migration to dblatex
      - Activate embedded db2latex
      Add man page metadata fields that are used by temprorary manpages XSLT
      Refresh our XSL templates to work with current docbook xslt for manpages
      Insert space inside this very long string. It is arguable how to fix it properly but at least man pages good now
      Fix typo
      Fix more entries with back slashes that need to use literal formatting
      Forgot to add these macros to a samba-docs repository
      Attempt to add DTDs as svn external repository for build
      Add first cut at networkless build instructions for samba-docs
      Add small preface to a VFS guide. More to come.
      Prettify attributions
      Remove smbconfexample check from test index.xml, it is not used anymore
      Switch to SVG and Inkscape to generate pictures instead of Dia.
      Fix numbering in the Samba3 developer's guide
      Use indexterm instead of term in expansion xslts
      Use title from a linked item to show up as text of the link if there is no endterm or content in the link itself
      Next update of VFS modules development guide
      Fix documentation build: manpages, links in the HTML documents.
      Ignore intermediary documentation files in git
      Fix yet another set of documentation links
      Fix link for Using Samba
      Fix breakage for connect function after API change (connect -> connect_fn)
      Pass absolute file paths to Inkscape when transforming .svg files
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s3-rpc: Decrypt with the proper session key in CreateTrustedDomainEx2.
      WAF: Add support for stopping processing before end of wscript{_*}
      s4-libnet: split export_keytab in a separate python module to avoid pulling in HDB dependency
      wafsamba: add support for separate rules in stages
      s4-auth: Make sure ldb context is initialized even if not passed by Python code
      waf: samba-specific methods should have capitalized names, change process_separate_rule to follow
      waf: move krb5 checks to a separate waf file
      waf: rename SAMBA4_INTERNAL_HEIMDAL to SAMBA4_USES_HEIMDAL
      Make sure krb5_principal_get_num_comp is identified as present for Heimdal build
      lib/replace: split out GSSAPI from lib/replace/system/kerberos.h into lib/replace/system/gssapi.h
      s4:ntvfs: add missing headers to vfs_ipc
      Avoid using Heimdal-specific tests in MIT build
      s4:torture: auth/pac.c: use Kerberos wrapper for krb5_keyblock_init
      s4:auth/kerberos: don't do tracing in MIT build
      lib/krb5_wrap: implement krb5_cc_get_lifetime for MIT Kerberos
      dns: fix comments and make s4/libcli/resolve dns resolver working
      s3-passdb: add unixid_from_uid/unixid_from_gid/unixid_from_both API
      auth-credentials: Support using pre-fetched ccache when obtaining kerberos credentials
      s4: samba-tool is usable without export-keytab command, make sure it does not break
      Introduce system MIT krb5 build with --with-system-mitkrb5 option.
      libcli/dns: make 'clidns' private library out of DNS code in WAF build
      wafsamba: ensure TO_LIST does not fail with empty string
      s3-autoconf: fix typo after migrating DNS resolver code to lib/addns
      blackbox: fix samba4.blackbox.kinit test
      auth/credentials: 'workgroup' set via command line will not drop existing ccache
      s4/scripting: in MIT build do not install samba-tool, it is not usable yet
      s3-smbldap: Add API for external callback to perform LDAP bind in smbldap
      waf: for MIT krb5 build require kerberos version above 1.9
      s3-configure.in: when ADS support is disabled, unset HAVE_GSSAPI
      dns_hosts_file: move to a separate subsystem
      freebsd9: support both WAF MIT krb5 build and autoconf build against MIT krb5
      waf-mitkrb5: enable dcerpc_server library to support OpenChange client code
      waf: check for krb5_create_checksum and krb5_creds.flags for some Heimdal versions
      Revert "waf-mitkrb5: enable dcerpc_server library to support OpenChange client code"
      auth-kerberos: avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute()
      waf: support --without-ad-dc for Heimdal (embedded and system) as well
      waf: fix parsing krb5-config --version for MIT krb5
      s3-rpcclient: support all known netr_LogonControl2 variants properly
      wafsamba/samba_abi: fix signature parsing for structures
      gen_abi.sh: filter out symbols not needed for ABI
      wafsamba/samba_abi: allow negative matches in abi_match
      s3-passdb: wrap secrets.tdb accessors used by PDB modules
      s3-passdb: convert pdb_ldap to use secrets wrappers
      s3-passdb: convert pdb_ipa to use secrets wrappers
      s4-torture: dns torture test depends on AD DC build
      s3-waf: avoid exporting init symbols from statically linked modules
      s3-smbldap: use smbldap_ prefix for all functions
      s3-smbldap: use smbldap_ prefixed functions
      s3-smbldap: make smbldap public library and maintain its ABI
      s3-passdb: update abi_match and ignore more statically linked functions
      s3-pdb: filter out more symbols only used in ldapsam internals
      lib/krb5_wrap: when deleting default realm, pass char*, not char**
      s3: make ldapsam-related functions a smbldaphelper subsystem
      s3: make smbldaphelper subsystem an internal library
      docs-xml: convert smb.conf.5 build to waf
      docs-xml: fix build of winbindd- and krb5 locator-related manpages
      Fix release script to build full set of documentation
      wafsamba: Make sure md5 is really work before using it or overriding the hash function
      wafsamba: replace try:except: case with explicit comment about FIPS mode
      PIDL: fix parsing linemarkers in preprocessor output
      source3/wscript: support 'pdb_ldap' module in configure
      autoconf: rename pdb_ldap module to pdb_ldapsam
      Make systemctl reference indirect in packaging/NetworkManager/30-winbind-systemd
      wafsamba: fix samba_abi for default catch-all case
      s3-waf: filter out ldapsam internal init functions
      PASSDB: add support to set and enumerate UPN suffixes associated with our forest
      s3-netlogon: enumerate UPN suffixes from PASSDB when available

Alexander Werth (16):
      s3:vfs/gpfs: Have inherited deny ACE's show up in ACLs
      s3:Really ignore unknown special ids in NFSv4 ACLs.
      vfs: Fix compile of vfs_gpfs.c.
      vfs: Add inheritance emulation to vfs_nfs4acl_xattr.
      s4-smbtorture: Set result message when failing the inheritance test.
      s3: Move up declaration of params struct and related function.
      s3: Change smbacl4_get_vfs_params to use connection_struct instead of fsp.
      s3: Add params parameter to smbacl4_nfs42win function.
      s3: Mapping of special entries to creator owner in mode simple.
      s3: Mapping of cifs creator owner to nfs owner@ ace.
      s3: Add changes that keep nfs4:mode special behavior.
      s3: Use mode bits in some cases in mode simple.
      s3: Update README.nfs4acls.txt
      s3: Update vfs_gpfs man page with new nfs4:mode help text.
      s4-smbtorture: Run tests for nfs4:modes simple and special.
      s3: Remove old mode special substitution.

Alexander Wuerstlein (3):
      Set RFC2307 attributes in samba-tool create
      Tests for 'samba-tool user create' with RFC2307 attributes
      Warn when setting UID/GID without idmap_ldb:use rfc2307 = Yes

Alexander Zagrebin (1):
      Missing break in conversion function prevents tdb password database update.

Alexandre Oliva (28):
      implemented du and tar -n
      major autoconf clean-up
      replace getpass() with getsmbpass() if getsmbpass.c compiles
      check whether system type is the same as stored in the cache (full
      wait_keyboard must still be defined if readline is not available
      automated generation of .dummy files for each subdirectory;
      added WITH_SMBMOUNT
      get away with dummy and .dummy files
      optimize creation of directories in build tree
      fix directory creation mechanism; the optimized version would not work :-(
      added stamp-h
      Avoid the message `make: [.deps/.P] Error 1 (ignored)'
      bin/cvsignore: deleted, so that bin can be removed from the repository
      Speed up directory creation for the common case (i.e., it exists already)
      added 64-bit file support
      rm object files created by mkdir probes
      just try to rmdir bin after removing bin/.dummy, in realclean
      revert 64-bit file support; it's hard-coded already
      added Solaris 2.5
      modify dependency tracking code so that it:
      looks like someone forgot to commit these...
      do not print garbage just because someone does not want dependencies :-)
      * client/client.c (dir_total): use SMB_BIG_UINT
      use double instead of SMB_BIG_UINT for dir_total and ttarf
      declare ttarf as double, as in client.c
      Use ${1+"$@"} instead of $*
      Avoid multiple ``Updating dependencies'' messages before .deps/.stamp
      Make sure that the stamp file is newer than configure.in

Amin Azez (6):
      Fix sending of large nttrans responses.
      Samba4 poor mans debug_ctx()
      Fix open file tracking in vfs_cifs so that oplock breaks can propagate
      Use 32 bit storage for nttrans counts
      Re-order smbsrv_recv_smb_request and smb_messages
      Flag smb messages array with AND_X and LARGE_REQUEST

Amitay Isaacs (320):
      samba-tool: Reimplement GPO functions in python
      ldb: Expose ldb_handler_fold() funcion
      ldb-samba: Allow --show-binary flag on defaultSecurityDescriptor
      s4auth: Remove duplicate assignment of structure variable
      s4auth: Fix the object names for PyCredentials and PyCredentialCacheContainer
      s4auth: Fix the object name for Py_Security
      samba-tool: Added python version of samba-tool
      samba-tool: Replace C version of samba-tool with python version
      samba-tool: Display Usage line and list commands alphabetically
      samba-tool: Raise exception on errors and report using base class
      samba-tool: Display usage for main commands and list them alphabetically
      samba-tool: Catch exceptions at top-level and exit with correct return value
      s4-param: Fix object names for python objects PyLoadparm and PyLoadparmContext
      samba-tool: For samba-tool-c, help lists commands implemented only in C
      s4-libcli: Added python interface for file I/O using SMB
      samba-tool: Python routine to find writable/ldap-capable DC
      s4-libnet: py_net - Remove parsing for credentials argument
      s4-libnet: py_net Add change_password() python command
      samba-tool: Add user password command to change user's own password
      test-blackbox: Rearrange the arguments in required order for samba-tool time
      test-blackbox: Remove 'domain\' from username for samba-tool user setpassword
      test-blackbox: Rearrange arguments for samba-tool user setpassword command
      test-blackbox: use python version of change password command
      tests-blackbox: Revert the test to use user-level change password command
      s4-libcli: Initialize stack structure variables to zero.
      samba-tool: Change samba-tool gpo semantics (use gpo name instead of dn)
      samba-tool: Added gpo fetch command implementation using python smb module.
      s4-libcli: Added python SMB methods for mkdir(), rmdir(), chkpath()
      s4-policy: Expose gp_ads_to_dir_access_mask() function
      s4-policy: Add python wrapper for ads_to_dir_access_mask() function
      samba-tool: Addd functions to print GPO flags and GPlink options
      samba-tool: Rename copy_directory_recurse to copy_directory_remote_to_local
      s4-policy: Use the correct local directory for stat.
      s4-libcli: Replace smb_composite_connect() with smb_full_connection()
      s4-libcli: Check if short_name is not null, before converting to python string
      s4-libcli: get_acl and set_acl require raw_open to set security descriptor
      samba-tool: Add functions to create directories and copy files over SMB share
      samba-tool: Add implementation of gpo create command
      samba-tool: Remove C version of samba-tool
      samba-tool: Rename samba-tool command gpo2 --> gpo
      s4-libcli: Fix the fd leak. Close open file descriptor before return.
      samba-tool: Remove gpo setacl command
      waf: Add SAMBA3_PYTHON context to build python wrappers in samba3
      passdb: Add a function to expose loaded backend list.
      passdb: Add a function to read secrets db from a specified path
      passdb: Added python wrapper to passdb
      passdb: Call with correct backend methods instead of default methods
      passdb: Allocate talloc stackframe before calling in pdb functions.
      s3-param: Make sure we have talloc stack frame before calling in s3 code
      s4-dsdb: Provide additional method to connect to specified database path
      s3-passdb: Fix the error messages and return correct NTSTATUS
      s3-passdb: Connect to specified samdb if location is provided, otherwise use default
      s3-param: Add python wrapper for s3 parameters
      py-samba3: Create samba3 python package to hold other modules
      passdb: Move python wrapper for passdb in samba3 python package
      s3-passdb: Return dom_sid and guid with correct python types.
      s3-passdb: Added python method to get_global_sam_sid
      tests: Update test for s3 to s4 upgrade with two cases
      upgrade: Add missing bits for the s3 to s4 upgrade script
      s3-passdb: Replace SMB_MALLOC_ARRAY()/SAFE_FREE() with talloc equivalents.
      s3-passdb: Python wrapper for passdb
      s3-passdb: Added python wrapper for passdb methods
      s3-passdb: Make arguments for python wrapper enum_group_mapping() optional
      s3-passdb: Return list of sids from python wrapper enum_group_members
      s3-passdb: Fix call for search_aliases(). It returns bool and not NTSTATUS.
      py_security: Fix comparison between two dom_sid objects
      samba3-python: Add methods to get any entry (user/group) and its sid from idmap
      provision: Add idmap database handle to the result of provision
      s3upgrade: Add idmap migration, users/groups import
      s3-passdb: Use pdb_get_nt_passwd() to get nt passwd.
      s3-passdb: Display username when reporting error on add_sam_account.
      python-samba3: Secrets file loaded from private dir, not lib dir
      s3_upgrade: Do not add administrator and root accounts from s3 to s4
      s3-passdb: Fix the get/set routines for pw_history for samu
      s3_upgrade: Set the administrator password on upgrade
      s3_upgrade: Add document strings for python methods
      s3_upgrade: Let python generate backtrace for unknown exceptions
      s3-param: Add a dump() method to output parameters
      s4-param: Use s3 dump method if s3 context is defined
      script: Fix the name of the script in autogenerated header file
      s3-passdb: Convert lm_pw and nt_pw to python string using length
      s3-passdb: Return assigned number of hours and not MAX_HOURS_LEN
      s3-passdb: Make domain_sid argument optional for search_aliases method
      py-samba3: Use passdb/param wrapper for samba3 module
      s3_upgrade: Update commandline options and use updated samba3 python module
      testdata: Set netbios name in the samba3 configuation
      py-samba3-test: Set lock directory to the datadir
      s3_upgrade: Set lock directory to correct directory
      samba3dump: Update the code using modified samba3 module with passdb api
      py-samba3-test: Copy sample database in tempdir before running test
      s3-param: Allocate talloc stackframe before calling s3 param routines
      s3-passdb: Allocate talloc stackframe before calling pdb_get_group_sid()
      s4-kcc: Fix the list of NCs for DRS replica information
      samba-tool: Add --filter option to ldapcmp to ignore specified attributes
      build: Replace mkbuildoptions-waf awk script with waf target
      s4-provision: Extract dns account creation as separate ldif
      s4-provision: exit is not imported directed, use sys.exit
      s4-provision: Add DNS backend option to provision
      s4-provision: LDIF files to set up AD DNS schema
      s4-provision: Reworked DNS provisioning to support AD DNS schema
      s4-provision: Make DNS entries consistent with dns_update script
      s4-provision: Fill msDS-NC-Replica-Locations attribute in DNS provisioning
      s4-test: name attribute remove from Command class, so test not required
      samba-tool: Correctly handle sys.exit() called from subcommand
      samba-tool: max() with key option is available in python >= 2.6
      samba-tool: Provide feedback if synopsis is not defined for a command
      samba-tool: epilog option to OptionParser available in python >= 2.6
      s4-provision: Enable SPNs for DNS
      s4-provision: Add Seperate instructions for BIND 9.7.x and 9.8.x.
      s4-provision: Add named.conf template for BIND9 with DLZ support
      s4-provision: Remove dupliate creation of dns/spn_update_list files
      s4-provision: Generate appropriate named.conf file depending on dns_backend
      s4-s3-upgrade: Check for common user/group names before provisioning
      s4-provision: Create private dir for dns in a separate function
      s4-provision: Fix the informational message from dns provisioning
      s4-s3-upgrade: Check for duplicate sids before provisioning
      samba-tool: Add "domain samba3upgrade" subcommand
      dnsp: Added typedefs to interpret dnsProperty attribute for dnsZone objectclass
      ldb-samba: Added handler to decode dnsProperty attribute
      s4-dns: Added more data types for dnsserver implementation
      s4-dns: Added support for multiple DNS_RPC_RECORDS structures
      werror: Added missing DNS error codes
      s4-provision: Provision DNS records with correct rank
      s4-dns: Added DCERPC dns server for DNS management
      samba-tool: Added dns command for DNS management
      s4-selftest: Add tests for RPC dnsserver
      s4-dns: Update serial number for zone on dns updates
      ldb: ldb_errstring() takes ldb_contxt as an argument
      samba-tool: Enable comparison of DNS naming contexts in ldapcmp
      samba-tool: Improve the description of dns subcommands.
      s4-dnsserver: Set DNS_DP_AUTOCREATED flag for the zone information
      s4-dnsserver: Compare two dns names using last uncommon name components
      s4-dnsserver: List dns zones matching the search filter
      s4-dnsserver: Build a dns name tree for correct enumeration
      s4-dnsserver: Handle the case when the dns name is NULL
      s4-dnsserver: Check the raised exception with assertRaises
      s4-drepl: Search for application partitions in addition to main ones
      dsdb: Handle the case when extended rights string is NULL
      s4-dnsserver: Fix enumeration of zones in ComplexOperation RPC call
      s4-dnsserver: Test forward zones are not listed in reverse zone search
      param: Remove duplicate initialization of 'share backend' parameter
      s4-provision: site is passed as an argument to setup_ad_dns()
      s4-provision: Set security descriptor for DNS records
      s4-provision: Create ldap records for DNS partitions similar to windows
      py_passdb: Cannot steal an item pointer from an array
      s3-s4-upgrade: do not add description if it is empty string or none
      provision: Set the security descriptor while creating partitions
      param: Add "domain logons" and "domain master" parameters
      s3-param: Add "server role" as global parameter
      roles: Add ROLE_AUTO to indicate that the server role is calculated
      py-param: Add python interface to get server_role
      param: Check if server role and security parameters are conflicting
      s4-dsdb: Remove unsed variable
      ldb: Add handy macros for reporting error inside ldb module
      socket_wrapper: Added python interface to socket_wrapper
      s4-s3-upgrade: Fix the minimum and maximum password age calculation
      samba-tool: Fix the domain account policy max_pwd_age calculation
      s4-s3-upgrade: Fix idmap types ID_TYPE_UID/ID_TYPE_GID instead of UID/GID
      s4-s3-upgrade: Add --verbose option to print extra details
      s3-passdb_test: Policy values are converted to signed integer
      dsdb: Fix the password expiry calculation
      s3-py-passdb: Fix handling of uninitialized gid values
      s4-dsdb: Remove LDB_SEQ_HIGHEST_TIMESTAMP sequence number support
      s4-dsdb: Return ldb_result context in dsdb_module_extended
      s4-dsdb: use dsdb_module_extended instead of duplicate code
      s4-dsdb: Added metadata to partition module for global sequence number
      s4-samdb: seqence_number() operation must be in a transaction
      s4-test: Remove metadata and ldb.d directory on clean up
      s4-provision: Extract security descriptors in separate file
      s4-provision: Create a samdb copy for access by dlz_bind9 module
      dlz_bind9: Use the sam database in dns/ as default
      dlz_bind9: Added access check to verify dynamic update
      s4-provision: Make BIND9_DLZ as the default backend for DNS
      s4-repl: Check if GC SPN exists before using it for replication
      s4-provision: Fix the security ace for DnsAdmins group on DNS records
      dlz_bind9: For creating a child entry, use only SEC_ADS_CREATE_CHILD
      dlz_bind9: Use client supplied credentials for DNS record update
      dlz_bind9: Set debugging output to stderr
      dlz_bind9: Add command line options for URL and debug
      s4-cldap: Set DS_DNS_CONTROLLER bit if we are running RPC dnsserver
      s4-provision: CN=MicrosoftDNS,CN=System container is in forest and not domain
      tdb: Fix python documentation for tdb module
      s4-provision: Extract common utility routines in separate file
      s4-param: Added bin_dir(),sbin_dir() methods to get compiled in dirs
      s4-provision: Do not guess partition file names, use @PARTITION record
      setup: Fix phpldapadmin configuration for version 1.2.x
      samba-tool: Remove duplicate code of dsacl to fsacl conversion
      samba-tool: gpo: fix a typo
      samba-tool: Fix DN for GPO entries
      tdb2: Fix python documentation for tdb.Tdb object
      s4-netlogon: Revert patch f02e4ebfafa6e5911e3fe744b1780527ab12c970
      s3-net: Fix the return codes. 0 on success, -1 on failure
      samba-tool: Add transaction wrapper for creating GPO
      param: Fix the data type for bAvailable
      param: domain_logons and domain_master are of type enum_bool_auto
      s4-provision: Set dNSProperty attribute for dns zones
      samba-tool:dns: Add support for reverse names (PTR records)
      s4:rpc-dnsserver: For PTR records, use dns_name_equal instead of strcmp to compare
      s4:rpc-dnsserver: If a zone is reverse zone, set the fReverse flag
      s4:rpc-dnsserver: Cache DNS partition information
      s4:rpc-dnsserver: Implement EnumDirectoryPartition operation
      idl:dnsserver: Add DNS_DP_STATE enumeration for diretory partition state
      s4:rpc-dnsserver: Use cached zone information to get rootservers
      s4:rpc-dnsserver: Fix the enumeration of DNS records
      s4:rpc-dnsserver: Implement DirectoryPartitionInfo RPC operation
      s4:rpc-dnsserver: Use handy macros for error checking
      s4:rpc-dnsserver: Add multiple DNS records in a single operation
      s4:rpc-dnsserver: Implement zone management RPC operations
      s4:rpc-dnsserver: Make sure that zone information is filled in
      s4:rpc-dnsserver: Add comments
      ldif-handler: Fix the case for attribute dnsproperty
      samba-tool:dns: Add zone create/delete commands
      samba-tool:dns: Fix a typo
      test:dnsserver: Add zone creation and deletion test
      s4:rpc-dnsserver: Set the rank for the new DNS record correctly
      s4-provision: Fix the problem of DnsProperty values not being set correctly
      dlz_bind9: create session info from PAC using auth context
      s4-rpc:dnsserver: Do not replace @ with zone_name in update operation
      samba-tool:dns: Check through all the DNS records for a match
      s4-rpc:dnsserver: DNS names are case insensitive
      samba-tool:dns: DNS names are case insensitive
      selftest: Do not run symbol check if setting up testenv
      autobuild.py: Catch only true exceptions in except statement
      python: Change except: statement to except Exception:
      dlz_bind9: for authenticated user, set the AUTHENTICATED USERS sid in token
      s4-torture: For authenticated users, add AUTHENTICATED USERS sid
      build: Add missing dependencies on popt
      s4-s3-upgrade: Use lowercase hostname as hostname for provision
      s4-s3-upgrade: Check if there are duplicate sids for users and groups
      tevent: Fix python documentation strings
      selftest: Fix the exit code of make test when run in buildfarm
      samba-tool dns: Re-add support for option groups
      samba-tool sites: Re-add support for option groups
      mkversion: Add quotes around various version strings
      s4-dsdb: Check if metadata.tdb exists, before trying to open it
      lib/tdb2: Do not include config.h in (to-be) public library, use replace.
      lib/tdb2: Mark public function as such
      lib/tdb2: Fix wscript
      lib/tdb2: Convert tdb2 to a standalone library
      lib/tdb2: 2.0.0 ABI
      dlz_bind9: Do not remove LDB record in subrdataset and delrdataset
      samba-tool: dns: Add MXRecord type to add/update mx records
      samba-tool: dns: Convert dns data in a string to DNS record
      samba-tool: dns: Convert dns data into a dns record for comparison
      samba-tool: dns: Add support to add/update/delete MX and SRV records
      samba-tool: dns: Add extra references for string objects as workaround
      samba-tool: dns: Fix the output display of DNS records
      samba-tool: dns: Update the copyright
      dlz_bind9: Fix the log message level
      s4-provision: dns: Refactor population of dns data code
      s4-provision: dns: Do not re-calculate ntdsguid, use from names
      s4-provision: dns: Add txt DNS record
      upgradedns: Upgrade DNS provision from BIND9_FLATFILE to AD based DNS
      upgradedns: Missing rename from upgradedns to samba_upgradedns
      testsuite: Replace deprecated bzero with memset
      s4-provision: Use "state directory" from lp, as it is always set
      dlz_bind9: This fixes the problem with adding/deleting rdataset
      ndr: Fix the error messages, add correct data type name
      ndr: Fix NDR push function for dnsp_string
      idl: dnsp: Add dnsp_string_list data type for TXT DNS record
      ndr: Add NDR pull, push, print functions for dnsp_string_list
      dlz_bind9: Fix handling of TXT records with multiple quoted strings
      idl: dnsserver: Add DNS_RPC_RECORD_STRING data type for TXT DNS record
      ndr: dnsserver: Add pull and push functions for DNS_RPC_RECORD_STRING
      provision: dns: TXT Records need a list of strings as input
      samba-tool: dns: Copy string data when creating DNS_RPC_RECORD
      samba-tool: dns: Add support for handling TXT records
      s4-rpc: dnsserver: Update data type for TXT DNS records
      upgradedns: Fix import of TXT DNS records
      s4-dns: Fix handling of TXT DNS Record
      dlz_bind9: Match PTR records as DNS names and not just strings
      s4-rpc: dnsserver: Fix the typo in comparing two DNS records
      s3-ctdb: Enable CTDB readonly support only if CTDB supports it
      s4-libcli: pysmb: Fix typo in secinfo_flags
      autobuild: Enable standalone tdb2 tests
      s4-dsdb: Fix the case for attribute name msDS-hasMasterNCs
      build: Fix build issue on OpenBSD 5.x
      build: Do not use --export-dynamic flag on OpenBSD 5.x
      s4-upgradedns: Allow fixing of dns provision after domain join
      s4-rpc: dnsserver: Fix IPv6 reverse zone handling
      s4-upgradedns: Add DNS partitions in msDS-hasMasterNCs in NTDS settings
      s4-upgradedns: Make sure the attribute exists before accessing it
      lib/tdb: Add/expose lock functions to support CTDB
      lib/tdb: Update ABI
      s4-upgradedns: Fix the fqdn for forest dns zone
      dlz_bind9: changes to make dlz_bind9 work with BIND 9.9.0
      dlz_bind9: Build shared libraries for both BIND versions 9.8 and 9.9
      s4-provision: Update configuration lines for dlz_bind9
      s4-upgradedns: Update serverdn with only the attributes that have changed
      s4-dns: Build BIND DLZ modules with correct private library
      samba-upgradedns: Use the correct magic incantation of sys.path.insert()
      dlz_bind9: Fix the named crash on reloading named
      dlz_bind9: Make the talloc destructor static and return 0.
      dsdb: Fix error checking conditions in partition_metadata module
      dbwrap: Rename dbwrap_fetch_uint32->dbwrap_fetch_uint32_bystring
      s4-pysmb: Parse security info as an unsigned integer
      samba-tool: gpo: Fix creation of filesystem ACL from directory ACL
      samba-tool: gpo: Fix policy DN
      samba-tool: gpo: Correct the attribute name from gPlink to gPLink
      samba-tool: gpo: Use gpo (id) instead of gpo_dn (DN)
      samba-tool: Fix indentation
      s4-pysmb: Add deltree() method to remove directory and its contents
      samba-tool: gpo: Add utility functions get_gpo_containers and del_gpo_link
      samba-tool: gpo: Refactor code using utility functions
      samba-tool: gpo: Use utility function dc_url() to set the connection url
      samba-tool: gpo: Add listcontainers subcommand to list containers using given GPO
      samba-tool: gpo: Add del subcommand to delete GPO
      samba-tool: gpo: Improve error messages
      samba-tool: gpo: Update copyright
      s4-dns: dlz_bind9: Ignore zones that are not used by BIND9 DLZ plugin
      s4-rpc: dnsserver: Ignore DNS zones that are not used by RPC dnsserver
      s4-dns: Fix format string vulnerability in an error message (bug #9354)
      samba-tool/dns: Fix a typo in ttl variable name
      s4-dns: Print/Set minimumTTL value in SOA record
      s4-rpc: dnsserver: Fix removal of trailing '.' in soa mname
      s4-rpc: dnsserver: dns_name_equal() returns boolean
      s4-rpc: dnsserver: When updating SOA record, use the specified serial
      s4-dns: Support update of SOA records
      samba-tool/dns: Pass on additional flags when creating zones
      samba-tool/dns: Set secure zone update flag after creating new zone

Anand Avati (4):
      check_parent_exists() can change errno. Ensure we preserve it across calls.
      building RPMs on RHEL fail because of a typo.
      vfs_glusterfs: Samba VFS module for glusterfs
      vfs_glusterfs: Implement proper mashalling/unmarshalling of ACLs

Anatoliy Atanasov (72):
      Handle schema reloading request.
      dsdb_create_prefix_mapping() implementation checks for existing prefix maping in ldb.
      Fix for schemaUpdateNow command
      Test for schemaUpdateNow command
      Fix for DSSYNC test against Windows 2003
      Fix the dsdb_syntax_OID_ldb_to_drsuapi function
      First attempt to implement dcesrv_drsuapi_DsGetNCChanges
      Fill the meta data vector in the responce struct.
      Fix up-to-dateness vector creation.
      Fix up-to-dateness vector creation.
      Add drs_security_level_check for dcesrv calls security checks
      Move replmd_drsuapi_DsReplicaCursor2_compare to a common place.
      Handle dsdb_class_by_lDAPDisplayName returned values in schema_inferiors.c
      Add tests for MS-ADTS:3.1.1.5.1.2 Naming Constraints
      Add support in the ldb_dn.c code for MS-ADTS:3.1.1.5.1.2 Naming Constraints
      Move the check above the talloc
      s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_CRITICAL_ONLY req in getncchanges
      idl: regenerate idl
      s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_FULL_SYNC_PACKET in getncchanges
      s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_ASYNC_REP in getncchanges
      s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_SPECIAL_SECRET_PROCESSING in getncchanges
      s4/drs:kccdrs_replica_get_info_obj_metadata implementation
      s4/drs: add DRSUAPI_ATTRIBUTE_options attribute
      s4/rodc: change the libnet_become_dc code to do RODC join
      s4/libnet: Fix misleading comment
      s4/rodc: Implement samdb_rodc with ldb context
      s4/rodc: RODC FAS initial implementation
      s4/rodc: Implement msDS-isRODC constructed attr
      s4/test: Implement tests for msDS-isRODC constructed attribute
      s4/rodc: Fix the callbacks up the stack to handle referrals on modify requests
      s4/rodc: Support read-only database
      s4/waf: ABI update for lib/ldb
      s4-rodc: Fix provision warnings by creating ntds objectGUID in provision
      Revert "s4-rodc: Fix provision warnings by creating ntds objectGUID in provision"
      s4-rodc: Cache am_rodc flag
      s4-rodc: Set am_rodc flag during provision
      s4: check the sacl and dacl pointers on the old sd
      s4:auth/session.c - free "group_string" when not needed
      s4:schema/schema_set.c - free LDB message diffs
      s4/schema: remove unnecessary deletion of dsdb_schema cached pointer
      s4/vampire: update dNSHostName for the Server object
      s4/drs: update repsFrom only when we are not in getncchanges extended op
      s4/fsmo: Added python tests for schema master transfer op
      s4/fsmo: Fix callback declaration
      s4/fsmo: Change return type from NTSTATUS to WERROR for drepl_takeFSMOrole
      s4/fsmo: Remove empty new lines
      s4/fsmo: Handle infrastructure, pdc and rid extended ops
      s4/fsmo: Extended fsmo test with infrastructure, pdc and rid roles
      s4/fsmo: Naming master support added
      s4/drs: Added the rest of the enum drsuapi_DsNameFormat values
      s4/drs: use type enum drsuapi_DsNameFormat in DsCrackNames code
      s4/fsmo: Create separate function for retrieving fsmo role dn and owner dn.
      s4/dcdiag: Handle ListRoles command for dcdiag:KnowsOfRoleHolders test
      s4/dsdb:kcc: cleanup and improve readability
      s4/eventlog6: Add idl for EventLog6 RPC
      s4/eventlog6: Add endpoint server for EventLog6 RPC
      s4/eventlog6: Build and hook EventLog6 RPC endpont mapper and idl
      s4/eventlog6: Add dummy implementation for calls 0x5 and 0xB
      s4/irpc: Add function to add security token to the binding handle
      s4/irpc: Add security token to the binding handle when doing irp call forwarding
      s4/test: Added test for simple bind with machine account
      s4/auth: Add logon_parameters to authenticate_username_pw
      s4/syntax: Add tests for DN+String and DN+Binary
      s4/test: Add bind.py to make test
      s4/test: Expand BindTest
      s4/ldap: ldap_syntaxes.py cleanup
      s4/operational: Fix swapped parameters for ldb_msg_copy_attr
      s4/ldapcmp: Fix the parsing of the second set of credentials
      s4/ldapcmp: Check if creds2 is actualy set by the command line
      Revert "s4/ldapcmp: Check if creds2 is actualy set by the command line"
      Revert "s4/ldapcmp: Fix the parsing of the second set of credentials"
      s4/ldapcmp: Correct fix for creds2

Andreas Schneider (1279):
      Remove trailing slashes from service name
      Don't restart winbind if a corrupted tdb is found during initialization.
      Prevent winbindd from segfaulting due to corrupted cache tdb.
      Windows 2008 (Longhorn) auth2 flag fixes.
      Fix Windows 2008 (Longhorn) join.
      Add variable to define if a share should be hidden.
      Rename the 'hidden' variable to 'administrative share'.
      Rename the 'hidden' variable to 'administrative share'.
      Fix saving of the config file in SWAT; [#5516].
      Fix empty input fields in SWAT; [#5515].
      Add krb5 support for the testbrowse example.
      Add documentation for kerberos support in libsmbclient.
      Release still reachable memory if the smbclient context is freed.
      The buf in the smbclient write function should be const.
      Simplify samba_version_string.
      Use the macro to call samba_version_string().
      Update the developers documentation for the new vendor version options.
      Remove trailing withespace from wbinfo -m which breaks gdm auth.
      Set the right return value if wbc_status is set to an error.
      Delete the krb5 ccname variable from the PAM environment if set.
      Create a function out of pam_sm_close_session to delete the credentials.
      Improve the Gemand pam_winbind translation.
      Fix circular dependency error with autoconf 2.6.3.
      Move the doxygen comments of wbclient to the header file.
      Fix a segfault if ? is there but the options are NULL. This is the case if SMBC_parse_path is called by SMBC_stat_ctx.
      Avoid flooding of syslog with failing pam_putenv messages.
      Document default of the printing config variable.
      Add a synopsis section to the pam_winbind manpage.
      Document the try_first_pass option in the pam_winbind manpage.
      Dcoument the PAM data exports in the pam_winbind manpage.
      Move pam_winbind to the right manpage section (8).
      Fix the section of the pam_winbind manpage.
      tsocket: Fixed typo in LGPL header.
      tsocket: Fixed documentation for tsocket_address_bsd_sockaddr().
      tsocket: Fixed tsocket_guide.txt asciidoc syntax.
      s4-kdc: Migrate to tsocket_address.
      s4: Fixed the programming guide to reflect the current tree.
      s4-gensec: Added remote and local setter/getter using tsocket.
      s4-gensec: Replace gensec_set_my_addr() with new tsocket based fn.
      s4-gensec: Replace gensec_get_my_addr with new tsocket based fn.
      s4-gensec: Replace gensec_set_peer_addr with new tsocket based fn.
      s4-gensec: Replace gensec_get_peer_addr with new tsocket based fn.
      s4-gensec: Remove obsolete socket_address vars and fns.
      s4-kdc: Migrate tcp connections to tsocket.
      tsocket: Added complete doxygen documentation.
      tsocket: Added doxygen config file.
      s4-ntp_signd: Migrate to tsocket.
      s4-torture: Migrate ntp_signd test to tsocket.
      s4-winbind: Migrated winbind connection to tsocket.
      s4-libcli: Fixed a talloc_reference error.
      talloc: Documented talloc with doxygen.
      talloc: Added doxygen config file.
      Move the talloc details to the mainpage.
      s3-print: Remove obsolete signal type cast.
      s3-passdb: Remove obsolete signal type cast.
      s3-pam_smbpass: Remove obsolete signal type cast.
      s3-nmbd: Remove obsolete signal type cast.
      s3-libads: Remove obsolete signal type cast.
      s3-lib: Remove obsolete signal type cast.
      s3-smb: Remove the obsolete signal type cast.
      s4-smbd: Remove obsolete singal type cast from the thread process model.
      libutil: Remove obsolete signal type cast.
      libreplace: Remove the obsolete signal type cast.
      s4-smb: Migrate named_pipe_server to tsocket.
      tstream: Added a typedef for the function prototype.
      tsocket: Improve the tsocket_address_bsd_sockaddr documentation.
      s4-smb: Migrate named_pipe_server to tsocket.
      s4-kdc: Fixed the memory context of tstream_bsd_existing()
      s4-ntp: Fixed the memory context of tstream_bsd_existing()
      s4-winbind: Fixed the memory context of tstream_bsd_existing()
      s4-winrepl: Migrated the wins replication server to tsocket.
      s3-rpc_server: Document rpc_pipe_open_internal.
      s3-rpcclient: Leave setprinterdata directly if not enough args were passed.
      s4-gensec: Fixed wrong usage of error_string.
      Fix developer build, remove malloc
      s3-smbd: Don't close stdout if we want to log to stdout.
      s3-selftest: Don't log to stdout, use logfiles instead.
      s3-spoolss: Added a function to open a regkey using the winreg pipe.
      s3-spoolss: Added a set_printer_dataex function using the winreg pipe.
      s3-spoolss: Added a get_printer_dataex function using the winreg pipe.
      s3-spoolss: Added a enum_printer_dataex function using the winreg pipe.
      s3-spoolss: Added a delete_printer_dataex function using the winreg pipe.
      s3-spoolss: Added a enum_printer_key function using the winreg pipe.
      s3-spoolss: Added a delete_printer_key function using the winreg pipe.
      s3-spoolss: Fixed winreg_printer_openkey to be used in a more generic way.
      s3-spoolss: Added a winreg_enumforms1 function.
      s3-spoolss: Added a winreg_addform1 function.
      s3-spoolss: Added a winreg_deleteform1 function.
      s3-spoolss: Added a winreg_setform1 function.
      s3-spoolss: Added a winreg_getform1 function.
      s3-winreg_nt: Fixed QueryValue with data=NULL to get the length.
      s3-time: Added a function to get the startup time of the server.
      s3-spoolss: Use const values for notify functions.
      s3-spoolss: Added missing return value to winreg_printer_enumforms1 docs.
      s3-spoolss: Fixed return values of winreg_printer_deleteform1.
      s3-spoolss: Added winreg helper functions to write registry values.
      s3-spoolss: Added a function to update the ChangeID of a printer.
      s3-spoolss: Added a function to get the ChangeID from a printer.
      s3-spoolss: Added a winreg function to query a dword.
      s3-spoolss: Added more winreg hepler functions.
      s3-spoolss: Fixed winreg_delete_printer_key if key is NULL or emtpy.
      s3-spoolss: Added a winreg_update_printer function.
      s3-spoolss: Added a winreg_create_printer function.
      s3-spoolss: Added a winreg_get_printer function.
      tsocket: Fixed the documentation of tsocket_address_bsd_sockaddr.
      s3-lib: Create a sec_desc_merge and sec_desc_merge_buf function.
      s4-torture: Fixed spoolss dsspooler printername test.
      s4-torture: Added the printername to the AddPrinter comment.
      tsocket: Added the warning again to tsocket_address_bsd_sockaddr.
      s3-libsmb: Fixed a recursion in cli_pull_print.
      tevent: Added basic doxygen documentation.
      tevent: Add doxygen tevent config file.
      tevent: Create a typedef for the debug function callback.
      tevent: Document the missing tevent async request callback functions.
      tevent: Document missing callback typedefs.
      tevent: Document the tevent helper functions.
      tevent: Document the tevent_queue functions.
      tevent: Started a tevent_queue tutorial.
      libwbclient: Fixed doxygen errors.
      s3-spoolss: Added missing Printer Driver in winreg_{update,get}_printer.
      s3-spoolss: Added missing servername option to winreg_{create,get}_printer.
      s3-spoolss: Added a sharename arg to winreg_update_printer.
      s3-spoolss: Fixed memory error in winreg_get_driver.
      s3-spoolss: Added a function to create a default spoolss_DeviceMode.
      s3-spoolss: Added a generic spoolss_create_default_secdesc function.
      s3-spoolss: Added a winreg_printer_query_binary function.
      s3-spoolss: Migrated winreg to spoolss_create_default_secdesc.
      s3-spoolss: Added winreg security descriptor functions.
      s3-spoolss: Fixed the DeviceMode handling in winreg.
      s3-spoolss: Create default DsSpooler values.
      talloc: Documented the missing string functions.
      talloc: Fixed a doxygen problem with PRINTF_ATTRIBUTE.
      tevent: Fixed a doxygen problem with PRINTF_ATTRIBUTE.
      tevent: Added an introduction to the tevent_queue tutorial.
      tevent: Added a description for tevent queue.
      s3-spoolss: Sorted the builtin forms alphabetically.
      s3-spoolss: Added EN ISO 216, A0 and A1 to builtin forms.
      s3-spoolss: Use better names for set_last_from_to.
      s3-spoolss: Create a spoolss_map_to_os2_driver function.
      s3-spoolss: Use the spoolss_map_to_os2_driver to modify drivername.
      s3-spoolss: Added EN ISO 216, A0 and A1 to builtin forms.
      s3-net: Created a migration tool for printing TDBs.
      s4-torture: Try to fix the winreg tests.
      s4-torture: Disable the security descriptor tests.
      s4-torture: Improved the winreg symlink test.
      s3-auth: Added a function to get the server_info from the system user.
      s3-waf: Fixed dependencies of the the avahi subsystem.
      s3-smbd: Remove unneeded dependency of map_username to globals.c.
      s3-auth: Moved smbd user functions to a generic place.
      s3-rpc: Seperate rpc_srv_register for plain connection.
      s3-rpc: Create a file with all functions for a internal named pipe.
      s3-waf: Build rpc_server/srv_spoolss_util.c too.
      s3-winbind: Fixed setting default sequence number.
      s3:misc make use of server_[event/messaging]_context directly
      s3-spoolss: Provide a memory context for clean_up_driver_struct().
      s3-tdb: Added missing out of memory check in rename_file_with_suffix().
      wbinfo: Document the deprecated sequence option correctly.
      doc: Remove the documentation of the sequence command of wbinfo.
      s3-registry: Added a db upgrade function to normalize the key delimiter.
      s3-registry: Convert registry key delimiter from slash to backslash.
      nss_wrapper: Fixed a possible NULL pointer problem.
      librpc: Use switch in GUID_from_data_blob().
      s3-passdb: Make sure that we don't assign garbage.
      s3-libsmb: Make sure that finfo is initialized.
      s3-nmbd: Leave the sync function if there are no syncs.
      s3-lanman: Make sure that job_info is not undefined.
      s3-passdb: Make sure we don't call free on a garbage pointer.
      s3-passdb: Make sure dn is initialized and don't free it.
      s3-vfs: Make sure that retval isn't used uninitialized.
      s3-lanman: Make sure count is not used uninitialized if we jump to out.
      s3-smbd: Make sure that status is initialized when used.
      s3-registry: Fixed keyname delimiter in KEY_CURRENT_VERSION_NORM.
      s3-eventlog: Fixed the keyname delimiter for the registry key.
      s3-net: Make sure that the data blob is initialized.
      s3-librpc: Fixed GUID_from_data_blob() with length of 32.
      s3-net: Use talloc_asprintf and return if file is in wrong format.
      s3-net: Make sure we don't call free on garbage.
      s3-winbind: Make sure we crash if domain is really not found.
      s3-client: Make sure we only write to an opened file.
      libcli: Fixed a build warning for a missing prototype.
      s3-winbind: Free some memory which isn't needed anymore.
      s3-rpc_client: Use the right memory context for array elements.
      s3-winbind: Initialize the server_info on winbindd start.
      s3-winbind: Added a skeleton for samr based functions.
      s3-winbind: Implemented samr backend function sam_query_user_list.
      s3-winbind: Implemented samr backend function sam_enum_dom_groups.
      s3-winbind: Implemented samr backend function sam_query_user.
      s3-winbind: Implemented samr backend function sam_trusted_domains.
      s3-winbind: Implemented samr backend function sam_lookup_groupmem.
      s3-winbind: Implemented samr backend function common_enum_local_groups.
      s3-winbind: Implemented samr backend function common_name_to_sid.
      s3-winbind: Implemented samr backend function common_sid_to_name.
      s3-winbind: Implemented samr backend function common_rids_to_names.
      s3-winbind: Implemented samr backend function common_lockout_policy.
      s3-winbind: Implemented samr backend function common_password_policy.
      s3-winbind: Implemented samr backend function common_lookup_usergroups.
      s3-winbind: Implemented samr backend function common_lookup_useraliases.
      s3-winbind: Implemented samr backend function common_sequence_number.
      s3-winbind: Replace the passdb backend with a samr/lsa based backend.
      s3-winbind: Rename winbindd_rpc.c to winbindd_msrpc.c.
      s3-winbind: Added a common rpc_enum_dom_groups function.
      s3-winbind: Use rpc_enum_dom_groups in msrpc.
      s3-winbind: Use rpc_enum_dom_groups in samr.
      s3-winbind: Added a common rpc_query_user_list function.
      s3-winbind: Use rpc_query_user_list in msrpc.
      s3-winbind: Use rpc_query_user_list in samr.
      s3-winbind: Added a common rpc_enum_local_groups function.
      s3-winbind: Use rpc_enum_local_groups in msrpc.
      s3-winbind: Use rpc_enum_local_groups in samr.
      s3-winbind: Added a common rpc_name_to_sid function.
      s3-winbind: Use rpc_name_to_sid in samr.
      s3-winbind: Added a common rpc_sid_to_name function.
      s3-winbind: Use rpc_sid_to_name in samr.
      s3-winbind: Added a common rpc_rids_to_names function.
      s3-winbind: Use rpc_rids_to_names in samr.
      s3-winbind: Added a common rpc_query_user function.
      s3-winbind: Use rpc_query_user in msrpc.
      s3-winbind: Use rpc_query_user in samr.
      s3-winbind: Added a common rpc_lookup_usergroups function.
      s3-winbind: Use rpc_lookup_usergroups in samr.
      s3-winbind: Use rpc_lookup_usergroups in msrpc.
      s3-winbind: Added a common rpc_lookup_useraliases function.
      s3-winbind: Use rpc_lookup_useraliases in samr.
      s3-winbind: Use rpc_lookup_useraliases in msrpc.
      s3-winbind: Added a common rpc_lookup_groupmem function.
      s3-winbind: Use rpc_lookup_groupmem in samr.
      s3-winbind: Added a common rpc_sequence_number function.
      s3-winbind: Use rpc_sequence_number in samr.
      s3-winbind: Use rpc_sequence_number in msrpc.
      s3-winbind: Rename common_lockout_policy to sam_lockout_policy.
      s3-winbind: Rename common_password_policy to sam_password_policy.
      s3-winbind: Added a common rpc_trusted_domains function.
      s3-winbind: Use rpc_trusted_domains in samr.
      s3-winbind: Use rpc_trusted_domains in msrpc.
      s3-winbind: Rename lookup_groupmem to msrpc_lookup_groupmem.
      s3-winbind: Create all logfiles in the same directory.
      s3-winbind: Make sure we close all policy handles in sam.
      s3-winbind: Make sure that the policy handles are closed.
      s3-winbind: Fixed debug messages of open_internal_lsa_pipe().
      s3-winbind: Use same format for all msrpc debug messages.
      s3-winbind: Handle aliases in rpc_lookup_groupmem().
      s3-build: Add a gdbtestenv environment for Samba3.
      s3-winbind: Set status before we leave in some msrpc functions.
      s3-winbind: Don't cache queries to builtin and own sam domain.
      s3-waf: Fixed the build.
      s3-rpc_client: Fixed a segfault in rpccli_samr_chng_pswd_auth_crap().
      s3-rpc_server: Don't register the same rpc commands twice.
      s3-rpc_server: Added callbacks for init and shutdown of a rpc service.
      s4-torture: Disable setting REG_BINARY printer data with size 0.
      s3-registry: Init all needed registry keys for printing.
      s3-registry: Redirect KEY_CONTROL_PRINTERS to KEY_WINNT_PRINTERS.
      s3-spoolss: Migrated spoolss_SetPrinterDataEx to the winreg functions.
      s3-spoolss: Migrated spoolss_GetPrinterDataEx to the winreg functions.
      s3-spoolss: Migrated spoolss_EnumPrinterDataEx to the winreg functions.
      s3-spoolss: Migrated spoolss_EnumPrinterKey to the winreg functions.
      s3-spoolss: Migrated spoolss_DeletePrinterDataEx to the winreg functions.
      s3-spoolss: Migrated spoolss_DeletePrinterKey to the winreg functions.
      s3-spoolss: Migrated spoolss_EnumForms to the winreg function.
      s3-spoolss: Migrated spoolss_AddForm to the winreg function.
      s3-spoolss: Migrated spoolss_DeleteForm to the winreg function.
      s3-spoolss: Migrated spoolss_SetForm to the winreg function.
      s3-spoolss: Migrated spoolss_GetForm to the winreg function.
      s3-spoolss: Migrated spoolss_Forms to use the winreg changeid function.
      s3-spoolss: Migrated spoolss_AddPrinter and spoolss_SetPrinter.
      s3-spoolss: Removed unused function convert_printer_info().
      s3-spoolss: Removed unused function printer_info2_to_nt_printer_info2().
      s3-spoolss: Migrated spoolss_OpenPrinter to create defaults with winreg_create_printer.
      s3-spoolss: Migrated spoolss_GetPrinter and spoolss_EnumPrinters to winreg_update_printer.
      s3-spoolss: Migrated spoolss_DeletePrinter to cleanup winreg keys.
      s3-spoolss: Set c_setprinter always to 0.
      s3-spoolss: Fixed the driver unc strings for dependent files.
      s3-spoolss: Don't return the printer devicemode in spoolss_EnumJobs.
      s3-spoolss: Use the existing memory context for winreg_get_printer.
      s3-spoolss: Use a temporary talloc context in update_printer.
      s3-spoolss: Create and update DsSpooler values.
      s3-spoolss: Removed the last free_a_printer() call in spoolss_nt.c.
      s3-spoolss: Moved shared printing functions to nt_printing.h
      s3-spoolss: Removed wrong comment.
      s3-printing: Removed unused get_a_printer functions.
      s3-printing: Removed unused mod_a_printer functions.
      s3-printing: Removed unused free_a_printer function.
      s3-printing: Removed unsuded c_setprinter functions.
      s3-printing: Removed unused nt_forms.
      s3-printing: Removed unused security descriptor functions.
      s3-printing: Remove unused printer registry key functions.
      s3-printing: Moved remaining prototypes to nt_printing.h.
      s3-spoolss: Create winprint print processor key.
      Revert "s4-smbtorture: skip driverName and printerName DsSpooler tests for now."
      s3-printing: Move all tdb upgrade functions to a separate file.
      s3-printing: Added automatic migration of printing tdbs.
      s4-torture: Enable tests with keynames including a slash.
      s3-spoolss: Remove unused MAGIC_DISPLAY_FREQUENCY
      s3-spoolss: Remove the program global current_user_info.
      s3-lib: Make the standard_mapping parameter const.
      s3-spoolss: Move the standard mappings to spoolss.
      s3-printing: Added automatic migration of printing tdbs.
      s3-spoolss: Correctly set the default values.
      s3-spoolss: Fixed FILL_DRIVER_STRING leading to wrong results.
      s3-lib: Remove redefinition of RL_COMPLETION_CAST.
      pidl: Use struct pipes_struct.
      s3-rpc_server: Use struct pipes_struct.
      s3-dfs: Use struct pipes_struct.
      s3-dssetup: Use struct pipes_struct.
      s3-echo: Use struct pipes_struct.
      s3-eventlog: Use struct pipes_struct.
      s3-initshutdown: Use struct pipes_struct.
      s3-lsa: Use struct pipes_struct.
      s3-netlogon: Use struct pipes_struct.
      s3-ntsvcs: Use struct pipes_struct.
      s3-rpc_pipe: Use struct pipes_struct.
      s3-samr: Use struct pipes_struct.
      s3-spoolss: Use struct pipes_struct.
      s3-srvsvc: Use struct pipes_struct.
      s3-svcctl: Use struct pipes_struct.
      s3-winreg: Use struct pipes_struct.
      s3-wkssvc: Use struct pipes_struct.
      s3-uid: Use struct pipes_struct.
      s3-winbind: Use struct pipes_struct.
      s3-include: Use struct pipes struct and get rid of the typedef.
      s3-rpc: Use struct pipes_struct.
      s3-spoolss: Fixed debug statements and increased level.
      s3-spoolss: Increased debug level for trace output.
      s3-spoolss: Use a stackframe to allocat memory.
      s3-spoolss: Fixed some C++ build warnings.
      s3-spoolss: Move some debug message to a higher level.
      s3-spoolss: Fixed a segfault if a value has no data.
      idl: Fixed a possible crash bug.
      s3-popt: Only include popt-common.h when needed.
      s3-spoolss: Use the correct value for the data length.
      s4-torture: Fixed the winreg EnumValue test against Windows.
      s3-torture: Correctly cleanup the winreg volatile key test.
      s3-torture: Improve the winreg deletekey torture comments.
      s3-spoolss: Fixed setting driver version correctly.
      s3-spoolss: Make sure we convert a 4 byte value to uint32_t.
      s4-rpc_server: Fixed the build of the dcerpc_server library.
      s3-smbd: Make sure the event context is initialized.
      s3-smbd: Cleanup the order of the init functions.
      s3-loadparm: Added some comments to lp_load_ex calls.
      s3-smbd: Fixed indent.
      s3-smbd: Regroup some init functions.
      s3-smbd: Move rpc services init to smbd parent.
      s3-smbd: Publish nt printers.
      s3-test: Try to fix the build farm subunit parsing.
      s3-auth: Remove obsolete 'update encrypted' option.
      s3-auth: Remove docs about obsolete 'update encrypted' option.
      s3-waf: Fixed the build.
      s3-waf: Fixed the rpc_client build.
      waf: Generate the ntprinting ndr functions.
      s3-waf: Create a variable for LIBNDR_NTPRINTING_SRC.
      s3-waf: Try to fix the idl build.
      s3-waf: Added missing client option to pidl list for wbint.
      s3-samr: Fixed some build warnings.
      s3-samr: Correctly fix the transition from enum to uint32_t.
      s3-printing: Rename jobs_changed functions to jobs_added.
      s3-printing: Added function to update the queue.
      s3-lib: Fixed a possible crash bug.
      s3-build: Add a test-buildfarm target to stay UNIX Makefile compatible.
      s3-build: Use a wrapper script to run the tests.
      s3-build: Don't paste the summary.
      s3-auth: Use SamInfo3_for_guest to create guest server_info.
      s3-passdb: Added a pdb_try_account_unlock function.
      s3-passdb: Try to unlock the account if it is locked out.
      s3-auth: The unlock of the account is now done by the get_sampwnam call.
      s3-spoolss: Fixed a possible crash bug.
      s3-spoolss: Move spoolss winreg to new dcerpc client funtions.
      s3-spoolss: Fixed some build warnings.
      s3-auth: Added get_server_info_system function.
      s3-rpcint: Make auth_serversupplied_info const.
      s3-msdfs: Make auth_serversupplied_info const.
      s3-printing: Make auth_serversupplied_info const.
      s3-spoolss: Make auth_serversupplied_info const.
      s3-spoolss: Use systerm server_info for winreg connection.
      s3-printing: Make missing auth_serversupplied_info const.
      s3-spoolss: Don't leak memory on the session counter list.
      s3-printing: Document the printer list functions.
      s3-rpc_server: Added new parametric option 'rpc_server'
      s3-rpc_server: Use talloc_stackframe.
      idl: Added EPMAPPER_STATUS_CANT_PERFORM_OP.
      s3-waf: Link smbd against RPCECHO.
      s3-spoolss: Fixed print_access_check server_info.
      s3-spoolss: Fixed print job access.
      s3-winbind: Fixed the build of idmap_rid.
      s3-rpc_server: Make auth_serversupplied_info const.
      s3-rpc_server: Normalize rpc_pipe_open_interface pipe name.
      s4-gensec: Add dependency on com_err to GENSEC_KRB5.
      s3-winbind: Fixed init order.
      s3-smbd: Call all the rpc services in the right order.
      s3-build: Remove broken RPC modules support.
      s3-smbd: Call the rpc service shutdown functions.
      s3-waf: Fixed the static rpc service build.
      s3-rpcecho: Only register rpcecho in the developer build.
      s3-rpc_client: Added dcerpc_lsa_open_policy.
      s3-rpc_client: Added dcerpc_lsa_open_policy2.
      s3-rpc_client: Added dcerpc_lsa_lookup_sids and dcerpc_lsa_lookup_sids3.
      s3-rpc_client: Added dcerpc_lsa_lookup_names.
      s3-netlogon: Move to new dcerpc client funtions.
      s3-rpc_client: Fixed the dcerpc_lsa_LookupSids3 lookup_options.
      s3-rpc_client: Fixed the dcerpc_lsa_LookupSids3 client_revision.
      s3-rpc_client: Fixed the dcerpc_lsa_LookupNames4 lookup_options.
      s3-rpc_client: Fixed the dcerpc_lsa_LookupNames4 client_revision.
      s3-auth: Fixed account lockout check.
      s3-rpc_client: Fixed return values of dcerpc_lsa_lookup_sids_generic.
      s3-rpc_client: Fixed status check of dcerpc_lsa_lookup_sids_noalloc.
      tdb: Added doxygen documentation.
      s3-smbd: Fixed a possible null pointer dereference.
      s3-param: Fixed code block in max_open_files().
      s3-rpc_client: Added header information to cli_lsarpc.h.
      s3-rpc_client: Added header information to cli_samr.h.
      s3-rpc_client: Added dcerpc_samr_chgpasswd_user.
      s3-rpc_client: Added dcerpc_samr_chgpasswd_user2.
      s3-rpc_client: Added dcerpc_samr_chng_pswd_auth_crap.
      s3-rpc_client: Added dcerpc_samr_chgpasswd_user3.
      s3-rpc_client: Rename get_query_dispinfo_params.
      s3-rpc_client: Added dcerpc_try_samr_connects.
      s3-lib: Fixed a missing return value in tldap.
      s3-modules: Fixed the for-loop code block.
      s3-utils: Fixed possible resource leak in smbfilter.
      s3-utils: Fixed possible resource leak in smbget.
      s3-utils: Fixed possible resource leak in net_usershare.
      s3-utils: Fixed a resource leak in smbta-util.
      s3-utils: Fixed a resource leak in net_afs.
      librpc: Added support to accept netbios names.
      idl: Added missing endpoint mapper defines.
      s4-selftest: Mark epmapper as knownfail.
      s4-torture: Start with a clean epm_Insert_noreplace test.
      s4-torture: Added test_LookupHandleFree.
      s4-torture: Added a clean test_Lookup_simple.
      s4-torture: Added a clean test_Lookup_terminate_search.
      s4-torture: Added a clean test_Map_simple.
      s4-torture: Comment out the test_InqObject.
      s4-torture: Use binding handle in epm_Delete test.
      s4-torture: Added a test_Insert for epmapper.
      s4-torture: Added a full epm_Map test.
      s4-torture: Reorder the epmapper tests.
      replace: Try to fix broken sys/capabilites.h on Linux.
      s3-epmapper: Added a endpoint mapper skeleton.
      s3-epmapper: Added epm_Insert function.
      s3-epmapper: Added epm_Delete function.
      s3-epmapper: Added epm_Map function from Samba4.
      s3-epmapper: Added arg to match uuid in build_ep_list().
      s3-epmapper: Implemented epm_LookupHandleFree.
      s3-epmapper: Implemented epm_Lookup.
      s3-epmapper: Improved the epm_Map function.
      s3-epmapper: Commented unimplemented functions.
      s3-librpc: Added dcerpc register endpoint functions.
      s3-librpc: Added dcerpc_binding_vector_create function.
      s3-rpc_server: Only allow registering endpoints on priviledged pipes.
      s3-smbd: Added a function to setup rpc services.
      s3-smbd: Disable the endpoint mapper by default.
      s3-selftest: Enable RPC-EPMAPPER tests.
      s3-rpc_client: Added dcerpc_winreg_int_openkey().
      s3-rpc_client: Added winreg query dword helper.
      s3-rpc_client: Added winreg query binary helper.
      s3-rpc_client: Added a winreg set dword helper.
      s3-rpc_client: Added a winreg set sz helper.
      s3-rpc_client: Added a winreg set expand sz helper.
      s3-rpc_client: Added a winreg set multi sz helper.
      s3-rpc_client: Added a winreg query multi sz helper.
      s3-rpc_client: Added a winreg add multi sz helper.
      s3-rpc_client: Added a winreg helper to enum keys.
      s3-rpc_client: Added a winreg query sz helper.
      s3-rpc_client: Added a winreg set binary helper.
      s3-rpc_client: Added a winreg set security descriptor helper.
      s3-rpc_client: Added a winreg query security descriptor helper.
      s3-rpc_server: Migrated eventlog to winreg.
      s3-rpc_server: Added a winreg based eventlog registry init.
      s3-util: Moved eventlog_add_source to admin util.
      s3-smbd: Init the eventlog registry on service startup.
      s3-registry: Remove obsolete reg_eventlog.
      s3-services: Migrated svcctl registry functions to winreg.
      s3-rpc_server: Added a svcctl shutdown function.
      s3-rpc_server: Added a winreg based svcctl registry init.
      s3-smbd: Init the svcctl registry keys on service startup.
      s3-services: Remove obsolete services_db.c.
      s3-rpc_server: Migrated spoolss to dcerpc_winreg_enum_keys.
      s3-rpc_server: Migrated spoolss to dcerpc_winreg_set_sz..
      s3-rpc_server: Migrated spoolss to dcerpc_winreg_set_dword.
      s3-rpc_server: Migrated spoolss to dcerpc_winreg_set_X.
      s3-rpc_server: Migrated spoolss to dcerpc_winreg_set_X.
      s3-rpc_server: Migrated spoolss to dcerpc_winreg_query_dword.
      s3-rpc_server: Migrated spoolss to dcerpc_winreg_set_multi_sz.
      s3-perfcount: Create the directory on tdb open.
      s3: Added missing files in .gitignore.
      s3: Added file for clang complete support in vim.
      s3-rpc_server: Fixed possible segfault with client_id.
      s3-rpc_server: We need a messaging context for rpc.
      s3-rpc_server: Fixed possible segfaults in svcctl server.
      s3-rpc_client: Fixed winreg int documentation.
      s3-rpc_client: Added dcerpc_winreg_int_openkey() which dectects the hive.
      s3-rpc_client: Fixed an uninitialized variable.
      s3-librpc: Only register NCACN_NP.
      s3-rpc_server: Rename named_pipe_read_packet().
      s3-rpc_server: Create a common ncacn listen state.
      s3-rpc_server: Pass tevent_context to dcerpc endpoints.
      s3-rpc_server: Rename srv_rpc_register.
      s3-rpc_server: Rename srv_rpc_register.c.
      s3-rpc_server: Added function to setup tcpip listener!
      s3-rpc_server: Added port option to _rpc_ep_register.
      s3-rpc_server: Added event and msg ctx to _rpc_ep_register.
      s3-rpc_server: Let enpoint mapper listen on port 135.
      s3-rpc_client: Move client pipe functions to own header.
      s3-smbd: Pass tevent context to messaging functions.
      s3-librpc: Added tcpip support for dcerpc_binding_vector_create.
      s3-librpc: Free memory we don't need.
      s3-rpc_server: Added tcpip listener for each rpc service.
      s3-rpc_server: Set client and server connection info.
      s3-rpc_server: Added server address to pipes struct.
      s3-epmap: Return the correct ip address.
      s3-rpc_server: Added prototype to setup a ncalrpc socket.
      s3-rpc_client: Added DCERPC_AUTH_TYPE_NCALRPC bind.
      selftest: Added ncalrpc dir to config.
      s3-librpc: Register endpoints using ncalrpc.
      s3-rpc_server: Created an Endpoint Mapper Daemon.
      s3-rpc_server: Start the Endpoint Mapper Dameon if enabled.
      s3-rpc_server: Introduce transport in pipe_struct.
      s3-rpc_server: Only allow epm insert and delete on NCALRPC.
      s3-rpc_server: Fixed ncalrpc connection accept.
      s3-rpc_server: Remove unneeded ncacn wrappers.
      s3-rpc_server: Improved the dcerpc_ncacn_accept switch.
      s3-rpc_server: Add server support for NCALRPC system user pipe.
      s3-rpc_server: Create the ncalrpc endpoints.
      s3-librpc: Register NCALRPC pipes.
      s3-rpc_server: Fixed the accept() for named_pipe_listener.
      s3-rpc_server: Fixed the accept() for tcpip_listener.
      s3-rpc_server: Fixed the accept() for ncalrpc_listener.
      s3-winbind: Fixed the accept() for new_connection.
      s3-rpc_server: Free unused memory.
      s3-rpc_server: Added IPv6 support for epmapper.
      tevent: Fixed tevent_wakeup_send code example.
      s3-smbd: Increase debug level von context messages.
      s3-rpc_client: Don't ask endpoint mapper for its own port.
      s3-rpc_server: Change irritating debug message.
      s3-rpc_server: Add tevent based endpoint setup functions.
      s3-rpc_server: Use the new endpoint register functions.
      s3-rpc_server: Remove unused _rpc_ep_register.
      s3-rpc_server: Rename system_user to ncalrpc_as_system.
      s3-epmapper: Use DCERPC_AUTH_LEVEL_CONNECT for ep ncalrpc.
      s3-epmapper: Added a cleanup function.
      s3-epmapper: Shutdown the embedded epmapper cleanly.
      s3-epmd: Cleanup endpoint mapper correctly.
      s3-librpc: Leave the epm registration connection open.
      s3-rpc_server: Added a memory context to the ep regsiter state.
      s3-rpc_server: Implement an endpoint monitor loop.
      s3-rpc_server: Rename req to subreq.
      s3-rpc_server: Added disconnect callback function.
      s3-epmapper: Added function to delete endpoint entries.
      s3-epmd: Cleanup endpoints on service pipe disconnect.
      s3-epmapper: Remove unregister on shutdown.
      s3-epmapper: Setup epm in smbd to forward np requests.
      s3-epmapper: Log error if we can't register the endpoint.
      s3-epmapper: Increase debug levels.
      s3-epmapper: Use strcmp instead of strequal and check IPv6.
      s3-epmapper: Refactor the cleanup of endpoints.
      librpc: Added a dcerpc_binding_dup() function.
      s3-epmapper: Make sure we work on a description duplicate.
      librpc: Return an error if we a broken floor.
      s3-spoolssd: Fixed reopening of logs.
      s3-spoolssd: Pass down event and messanging context.
      s3-spoolssd: Added missing include.
      s3-spoolssd: Fixed logfile creation.
      s3-epmap: Make rpc_ep_setup_register an internal function.
      s3-spoolssd: Register spoolssd endpoints.
      s3-spoolssd: Start the spoolss service correctly.
      s3-rpc_server: Only allow embedded, daemon and external server type.
      s3-rpc_server: Fixed rpc_pipe_open_internal documentation.
      s3-winbindd: Use the correct enums for samr_QueryDomainInfo.
      s3-smbd: Added a change_to_user_by_session() function.
      s3-smbd: Added a become_user_by_session() function.
      s3-printing: Use become_user_by_session() function.
      libsmbconf: Introduce a sbcErrType.
      libsmbconf: Added a sbcErrorString() function.
      libsmbconf: Convert smbconf_init() to sbcErr.
      libsmbconf: Convert smbconf_open() to sbcErr.
      libsmbconf: Convert smbconf_drop() to sbcErr.
      libsmbconf: Convert smbconf_get_share_names() to sbcErr.
      libsmbconf: Convert smbconf_create_share() to smbErr.
      libsmbconf: Convert smbconf_get_share() to sbcErr.
      libsmbconf: Convert smbconf_delete_share() to sbcErr.
      libsmbconf: Convert smbconf_set_parameter() to sbcErr.
      libsmbconf: Convert smbconf_get_parameter() to sbcErr.
      libsmbconf: Convert smbconf_delete_parameter() to sbcErr.
      libsmbconf: Convert smbconf_get_includes() to sbcErr.
      libsmbconf: Convert smbconf_set_includes() to sbcErr.
      libsmbconf: Convert smbconf_delete_includes() to sbcErr.
      libsmbconf: Convert smbconf_transaction_*() to sbcErr.
      libsmbconf: Convert smbconf_get_config() to sbcErr.
      s3-waf: Create a registry private library.
      s3-waf: Create a public libsmconf.
      libsmbconf: Document smbconf_backend_requires_messaging().
      libsmbconf: Document smbconf_is_writeable().
      libsmbconf: Document smbconf_shutdown().
      libsmbconf: Document smbconf_changed().
      libsmbconf: Document smbconf_drop().
      libsmbconf: Document smbconf_get_config().
      libsmbconf: Document smbconf_get_share_names().
      libsmbconf: Document smbconf_share_exists().
      libsmbconf: Document smbconf_create_share().
      libsmbconf: Document smbconf_get_share().
      libsmbconf: Document smbconf_delete_share().
      libsmbconf: Document smbconf_set_parameter().
      libsmbconf: Document smbconf_set_global_parameter().
      libsmbconf: Document smbconf_get_parameter().
      libsmbconf: Document smbconf_get_global_parameter().
      libsmbconf: Document smbconf_delete_parameter().
      libsmbconf: Document smbconf_delete_global_parameter().
      libsmbconf: Document smbconf_get_includes().
      libsmbconf: Document smbconf_get_global_includes().
      libsmbconf: Document smbconf_set_includes().
      libsmbconf: Document smbconf_set_global_includes().
      libsmbconf: Document smbconf_delete_includes().
      libsmbconf: Document smbconf_delete_global_includes().
      libsmbconf: Document smbconf_transaction_start().
      libsmbconf: Document smbconf_transaction_commit().
      libsmbconf: Document smbconf_transaction_cancel().
      libsmbconf: Define a doxygen group for libsmbconf.
      s3: Added waf build header locations for clang complete.
      s3-spoolss: Get the printer location from cups.
      s3-printing: Remove obsolete and unused cups_pull_comment_location().
      waf: Enable Samba3 torture tests in top level build.
      s3-rpc_server: Force ncalrpc dir to be mode 755.
      s3-epmapper: Fixed endpoint registration.
      s3-rpc_server: Added syntax id to pipe_rpc_fns struct.
      s3-rpc_server: Store the ndr syntax id in the pipe context.
      s3-rpc_server: Move the context functions to own file.
      s3-rpc_server: Use the correct context syntax.
      s3-rpc_server: Use the correct syntax id in api_pipe_bind_req().
      s3-rpc_server: Use the context syntax id in api_pipe_request().
      s3-rpc_server: Migrate init_pipe_handles() to new syntax.
      s3-rpc_server: Use the correct syntax id for debugging.
      s3-rpc_server: Remove guessing of the syntax id.
      s3-rpc_server: Don't segfault if there are not handles to free.
      s3-rpc_server: Fix debug messages.
      s3-rpc_server: Fixed debug messages for rpc_handles.
      s3-rpc_server: Fixed debug messages of srv_pipe_hnd.
      s3-rpc_server: Remove syntax from pipes_struct.
      s3-rpc_server: Remove unused variable pipes_open.
      s3-epmapper: Register ports on IPv4 too.
      s3-waf: Fix pthreadpool build which needs librt now.
      s3: Update .clang_complete
      s3-winbind: Fix paranoia checks in winbindd_samr.c.
      s3-rpc_client: Fix some valgrind warnings.
      s3-spoolss: Fix some valgrind warnings.
      s3: Added missing includes to .clang_complete.
      s3-auth: Only reload the config file.
      s3-util: Add a get_remote_hostname() function.
      s3-rpc_server: Add local and remote address to pipes struct.
      s3-rpc_server: Migrate rpc function to tsocket_address.
      s3-auth: Added remote_address to ntlmssp server.
      s3-auth: Pass the remote_address down to user_info.
      s3-auth: Remove global smbd_server_conn from auth_unix.c.
      s3-rpc_server: Remove unused client_id in srv_pipe.c.
      s3-rpc_server: Replace client_id in dcerpc gssapi server.
      s3-samr: Replace client_id in samr server.
      s3-spoolss: Replace client_id in the spoolss server.
      s3-epmapper: Replace server_id in the epmapper.
      s3-smbd: Replace client_id in smbd process.
      s3-smbd: Replace client_id in smbd connection.
      s3-smbd: Exit cleanly if we can't create an address string.
      s3-smbd: Replace client_id in smbd reply.
      s3-smbd: Replace client_id in smbd service.
      s3-smbd: Replace client_id in smbd session.
      s3-smbd: Replace client_id in smbd session setup.
      s3-vfs: Replace client_id in smbta.
      s3-vfs: Replace client_id in exand msdfs.
      s3-smbd: Remove obsolete smbd_set_server_fd().
      s3-smbd: Remove client_address from smbd_server_connection struct.
      s3-rpc_server: Remove client_id and server_id from pipes struct.
      s3: RIP 'struct client_address'.
      s3-waf: Fix linking bugs causing segfaults.
      s3-waf: Don't link LIBNTLMSSP twice.
      s3-auth: Fix account check over ncalrpc.
      s3-epmapper: Fix adding tcpip endpoints.
      s3-smbd: Create ev_ctx and msg_ctx and use it.
      s3-smbd: Pass ev_ctx to smbd_parent_loop().
      s3-smbd: Pass ev_ctx and msg_ctx to open_sockets_smbd().
      s3-smbd: Pass ev_ctx and msg_ctx to smbd_accept_connection().
      s3-smbd: Pass ev_ctx to smbd_setup_sig_chld_handler().
      s3-smbd: Pass msg_ctx to smbd_accept_connection.
      s3-smbd: Pass ev_ctx to remove_child_pid().
      s3-smbd: Pass event and messaging context to smbd_parent_housekeeping().
      s3-librpc: Pass messaging context to dcerpc register functions.
      s3-rpc_server: Pass event and messaging context to accept function.
      s3-rpc_server: Fixed segfaults in rpc daemons.
      s3-rpc_server: Add my copyright.
      s3-rpc_server: Fix messaging context in the pipes struct.
      s3-rpc_server: Free the np dir.
      s3-rpc_server: Duplicate the pipe name.
      s3-rpc_server: We need to copy the session_info for external pipes.
      s3-rpc_server: Remove unused endpoint information.
      s3-rpc_server: Fixed header define.
      s3-rpc_server: Pass msg_ctx to make_base_pipes_struct().
      s3-rpc_server: Copy correct local tsocket address.
      s3-rpc_client: Close hive if opening of the key fails.
      s3-rpc_client: Close the hive handle before we open it again.
      s3-rpc_client: Close policy handles before creating defaults.
      s3-rpc_client: Fix memory context in winreg_enum_printer_dataex().
      s3-spoolss: Free local in winreg_printer_binding_handle.
      s3-spoolss: Use tmp_ctx in winreg_delete_printer_key_internal.
      s3-spoolss: Use tmp_ctx in winreg_printer_update_changeid_internal.
      s3-spoolss: Use tmp_ctx in winreg_printer_get_changeid_internal.
      s3-spoolss: Use tmp_ctx in winreg_get_printer_internal.
      s3-spoolss: Use tmp_ctx in winreg_create_printer_internal.
      s3-spoolss: Use tmp_ctx in winreg_update_printer_internal.
      s3-spoolss: Use tmp_ctx in winreg_set_printer_dataex_internal.
      s3-spoolss: Use tmp_ctx in winreg_enum_printer_dataex_internal.
      s3-spoolss: Use tmp_ctx in winreg_get_printer_dataex_internal.
      s3-spoolss: Use tmp_ctx in winreg_delete_printer_dataex_internal.
      s3-spoolss: Use tmp_ctx in winreg_get_driver_internal.
      s3-spoolss: Use tmp_ctx in winreg_get_driver_list_internal.
      s3-spoolss: Use tmp_ctx in winreg_del_driver_internal.
      s3-spoolss: Use tmp_ctx in winreg_add_driver_internal.
      s3-spoolss: Use tmp_ctx in winreg_get_printer_secdesc_internal.
      s3-spoolss: Use tmp_ctx in winreg_set_printer_secdesc_internal.
      s3-spoolss: Use tmp_ctx in winreg_printer_enumforms1_internal.
      s3-spoolss: Use tmp_ctx in winreg_printer_getform1_internal.
      s3-spoolss: Use tmp_ctx in winreg_printer_addform1_internal.
      s3-spoolss: Use tmp_ctx in winreg_printer_setform1_internal.
      s3-spoolss: Use tmp_ctx in winreg_printer_deleteform1_internal.
      s3-spoolss: Use tmp_ctx in winreg_enum_printer_key_internal.
      s3-spoolss: Use tmp_ctx everywhere in _spoolss_DeletePrinterDriverEx.
      s3-spoolss: Free the info2 structure in _spoolss_GetPrinter.
      s3-spoolss: Use get_session_info_system().
      s3-spoolss: Use existing handle in printer_driver_in_use().
      s3-spoolss: Use existing handle in printer_driver_files_in_use().
      s3-printing: Add forward declaration for dcerpc_binding_handle.
      s3-rpc_server: Added common function to create tcpip socket.
      s3-rpc_server: Move the endpoint registration to own file.
      s3-rpc_server: Rename to rpc service setup.
      s3-librpc: Add dcerpc_binding_vector_new().
      s3-librpc: Add dcerpc_binding_vector_add_np_default().
      s3-librpc: Add dcerpc_binding_vector_add_port().
      s3-librpc: Add dcerpc_binding_vector_add_unix().
      s3-librpc: Add dcerpc_binding_vector_dup().
      s3-librpc: Add dcerpc_binding_vector_replace_iface().
      s3-rpc_server: Add RPC socket helper functions.
      s3-rpc_server: Use binding vector in rpc_ep_try_register().
      s3-librpc: Remove obsolete dcerpc_binding_vector_create().
      s3-epmd: Use rpc_setup_tcpip_sockets().
      s3-torture: Run epmapper as daemon and the tests over ncalrpc.
      s3-rpc_server: Disable listening on tcpip ports by default.
      s3-rpc_server: Add rpc_epmapper_mode().
      s3-rpc_server: Use rpc_epmapper_mode().
      s3-rpc_server: Enable endpoint mapper as daemon by default.
      s3-rpc_server: Add rpc_spoolss_mode().
      s3-rpc_server: Use rpc_spoolss_mode().
      s3-rpc_server: Only setup tcpip ports if epmapper is enabled.
      s4-librpc: Fix double free.
      s3-rpc_server: Free the children of p->mem_ctx.
      s3-smbd: Pass tevent context to smbd_server_connection_loop_once().
      s3-rpc_server: Fix sending of packets over named pipe proxy.
      s3-spoolss: Fix prototypes warnings.
      selftest: Always test the spoolss deamon.
      s3-rpc_server: Fix include order in srv_pipe_hnd.c.
      s3-rpc_server: Check explicit for external and daemon server type.
      s3-rpc_server: Make dcerpc_ncacn_accept() public.
      s3-prefork: Fix cast warning.
      s3-spoolssd: Check if we were able to create the prefork pool.
      s3-lsasd: Create a lsa service daemon.
      s3-rpc_server: Correctly register lsa, samr and netlogon.
      s3-smbd: Start lsasd as deamon.
      selftest: Enable testing of the lsa service daemon.
      s3-winbind: We need to use internal rpc connections in winbind.
      s3-waf: Fix build with lsasd.
      rpc_server: Add forward declaration for dcerpc_transport_t.
      s3-rpc_server: Increase epm monitor wait time.
      s3-rpc_server: Add create_dcerpc_ncalrpc_socket().
      s3-lsasd: Add missing ncalrpc listeners.
      s3-lsasd: Listen on \PIPE\lsass.
      s3-id_cache: Move id caches mgmt out of smbd
      s3-id_cache: Use better names for id cache management ops
      s3-passdb: Keep caches coherent
      s3-passdb: Remove always the user from getpwsid cache.
      s3-passdb: Only delete 1 entry from memcache.
      s3-lib: If we create a pipe socket, don't start to listen.
      s3-rpc_server: Make sure we switch always the connecting user.
      doc: Reflect the latest changes to the rpc_server option.
      s3-rpc_server: Disable epmapper by default.
      s3-rpc_server: Handle services with multiple pipe names.
      s3-rpc_server: Add missing rng_fault_state in epmapper.
      s3-spoolss: Fix bug #8236 empty notify servername.
      s3-spoolssd: Remove stale printers only on a valid pcap update.
      s3-smbd: Rename reload_printers() and add documentation.
      s3-spoolss: Fix bug #8351 forms migration.
      rpc_server: Improve debug message for sys_getpeereid().
      s3-samr: Remove fstring in samr.
      uid_wrapper: Add uwrap_setreuid().
      uid_wrapper: Add uwrap_setregid().
      uid_wrapper: Add uwrap_setresuid().
      selftest: Fix plugin_s4_dc configuration.
      s3-netlogon: Fix setting the machinge account password.
      replace: Make sure we compile without uid_wrapper.
      replace: Add checks for setreuid and setregid.
      uid_wrapper: Fix prototypes.
      uid_wrapper: Make sure we have initialized the wrapper.
      uid_wrapper: Handle euid and egid 0.
      uid_wrapper: Fix build on UNIX platforms.
      uid_wrapper: Add uwrap_setresgid().
      nsswitch: Disable uid_wrapper in libwbclient.
      s3-waf: Don't link uid_wrapper more than once.
      Include uid_wrapper correctly.
      s3: Include uid_wrapper where it is missing.
      replace: Add don't include unistd.h directly and add uid_wrapper.
      s3: Enable uid wrapper.
      s3-build: Add .clang_complete.
      s4-torture: Add domain_handle to test_join struct.
      s4-torture: Add torture_delete_testuser().
      s4-torture: Add a samr privilege check.
      s4-torture: Add a user creation check.
      Add systemd service files.
      systemd: Fix dependencies.
      s3: Use autotools to set the winbind socket directory.
      docs: Make clear to use the workgroup name not the realm.
      s3-winbind: Increase the negative cache entry timout.
      s3-winbind: Make sure the map is clean.
      s3-winbind: Don't fail on users without a uid.
      s3: Fix wbinfo socket dir path.
      s3-winbind: Remove unused keys from list.
      s3-winbind: Add an update function for winbind cache.
      s4-librpc: Fix NETLOGON credential chain with Windows 2008.
      s4-torture: Fix schannel test against win2k8.
      s4-torture: LookupSids3 is only available over NCACN_IP_TCP.
      s3-libsmb: Don't duplicate kerberos service tickets.
      s4-librpc: Fix netlogon schannel client connect.
      s4-provision: Fix tdbdump path lookup in make test.
      s3-winbind: Move finding the domain to it's own function.
      s3-winbind: Fix segfault if we can't map the last user.
      s3-waf: Create a smaller samba3util subsystem.
      s3-waf: link SECRETS3 only against samba3util.
      s3-waf: auth_netlogond depends on tldap.
      lib: Remove dead mszip code.
      s3-waf: Link netapi only against needed subsystems.
      s3-waf: Link smbclient only against needed subsystems.
      s3-waf: Link nss_wins only against needed subsystems.
      s3-waf: Replace LIBMSRPC_GEN just with ndr-standard.
      s3-waf: Remove unneeded PARAM_UTIL dependency.
      s3-waf: Add missing depcendencies to smbconf.
      s3-waf: Link param only against needed subsystems.
      s3-waf: Don't link param_service against USER_UTIL twice.
      s3-waf: Link samba3core against needed subsystems.
      s3-waf: Remove LIBSMB_ERR completely.
      s3-waf: Link LIBNTLMSSP only against needed subsystems.
      s3-waf: Link libsmb only against needed subsystems.
      s3-waf: Link smbd_base only against needed subsystems.
      s3-waf: Link LIBNET only against needed subsystems.
      s3-waf: Link LIBNET_DSSYNC only against needed subsystems.
      s3-waf: Remove dead subsystem LIBNBT.
      s3-waf: Link trusts_util only against needed subsystems.
      s3-waf: Link tdb-wrap3 only against needed subsystems.
      s3-waf: Link errors3 only against needed subsystems.
      s3-waf: Link libcli_lsa3 only against needed subsystems.
      s3-waf: Link nmbd only against needed subsystems.
      s3-waf: Link winbindd only against needed subsystems.
      s3-waf: Add missing dependencies to LOCKING.
      s3-waf: Add missing dependencies to PASSCHANGE.
      s3-waf: Link swat only against needed subsystems.
      s3-waf: Link rpcclient only against needed subsystems.
      s3-rpcclient: Remove debug_dsdcinfo_flags() call.
      s3-waf: Link smbclient only against needed subsystems.
      s3-waf: Link net only against needed subsystems.
      s3-waf: Link profiles only against needed subsystems.
      s3-waf: Link smbspool only against needed subsystems.
      s3-waf: Link testparm only against needed subsystems.
      s3-waf: Link smbta-util only against needed subsystems.
      s3-waf: Link smbstatus only against needed subsystems.
      s3-waf: Link smbstatus only against needed subsystems.
      s3-waf: Link smbtree only against needed subsystems.
      s3-waf: Link smbpasswd only against needed subsystems.
      s3-waf: Link pdbedit only against needed subsystems.
      s3-waf: Link smbget only against needed subsystems.
      s3-waf: Link nmblookup only against needed subsystems.
      s3-waf: Link nmblookup only against needed subsystems.
      s3-waf: Link smbconftort only against needed subsystems.
      s3-waf: Link maketest only against needed subsystems.
      s3-waf: Link msgtest only against needed subsystems.
      s3-waf: Link smbcacls only against needed subsystems.
      s3-waf: Link smbcquotas only against needed subsystems.
      s3-waf: Link eventlogadm only against needed subsystems.
      s3-waf: Link sharesec only against needed subsystems.
      s3-waf: Link locktest only against needed subsystems.
      s3-waf: Link pdbtest only against needed subsystems.
      s3-waf: Link vfstest only against needed subsystems.
      s3-waf: Link locktest2 only against needed subsystems.
      s3-waf: Link smbfilter only against needed subsystems.
      s3-waf: Link versiontest only against needed subsystems.
      s3-waf: Link ntlm_auth only against needed subsystems.
      s3-waf: Link rpc_open_tcp only against needed subsystems.
      s3-waf: Link test_lp_load only against needed subsystems.
      s3-waf: Link dbwrap_tool only against needed subsystems.
      s3-waf: Link dbwrap_torture only against needed subsystems.
      s3-waf: Link split_tokens only against needed subsystems.
      s3-waf: Link vlp only against needed subsystems.
      s3-waf: Reduce libnetapi dependencies.
      s3-waf: Reduce libsmbclient dependencies.
      s3-waf: Add missing dependency to RPC_WINREG.
      s3-waf: Add missing dependency to LIBNET.
      s3-waf: Fix cups dependency in PRINTING.
      s3-waf: Reduce dependencies of smbd_base.
      s3-waf: Reduce dependencies of winbindd.
      s3-waf: Add missing dependency of pdb_wbc_sam to wbclient.
      s3-waf: Add missing dependency of ntlmssp to wbclient.
      s3-waf: Create a subsystem for SERVER_MUTEX.
      s3-lib: Fix util_cmdline which doesn't use popt.
      s3-libsmb: Remove dead gssapi code.
      s3-libsmb: Remove dead prototype.
      s3-waf: Link against tdb_compat instead of tdb.
      s3-waf: Link tdbsam against needed libraries.
      s3-net: Don't use an internal krb5 for kdc lookup.
      s3-libsmb: Remove obsolete smb_krb5_locate_kdc.
      s4-heimdal: Remove the execute flag of cfx.c.
      waf: Make sure libraries are installed with the execute flag set.
      s4-python: Remove execute flag of upgradehelpers.py.
      s4-python: Remove env from non-executable samba scripts.
      s4-python: Remove execute flag from netcmd scripts.
      s4-python: Remove env from non-executable netcmd scripts.
      s4-python: Remove env from non-executable test scripts.
      s4-python: Remove execute flag from ndrdump blackbox script.
      s4-python: Remove env from non-executable blackbox test scripts.
      s4-python: Remove execute flag from non-executable rpc_talloc script.
      s4-python: Remove env from non-executable dcerpc scripts.
      s4-python: Remove env from non-executable samba_tool scripts.
      s4-python: Remove env from non-executable webserver script.
      s4-python: Add missing python source file encoding.
      s3-rpc_server: Increase debug level for policy handle.
      s3-rpc_client: Add debug message for printer dataex errors.
      s3-printing: Make printer a const char *.
      s3-printing: Check for browseable too.
      s3-spoolss: Check return codes in update_dsspooler.
      s3-spoolss: Check return type of update_dsspooler().
      waf: Add autoconf --target support.
      systemd: Add samba service file.
      s4-smb2: Fix a talloc crash bug.
      s3-waf: Fix client/smbclient dependencies.
      s3-waf: Add possibility to build with system libsmbclient.
      waf: Add possibility to build with system libwbclient.
      waf: Use Logs.info() instead of print.
      s3-waf: Cleanup smbregistry.
      krb5samba: Add a smb_krb5_cc_get_lifetime() function.
      s4-auth: Use smb_krb5_cc_get_lifetime() wrapper.
      waf: Fix com_err detection with MIT krb5.
      doc: Fixes for the talloc context tutorial.
      doc: Fixes for the talloc stealing tutorial.
      doc: Fixes for the talloc dynamic type system tutorial.
      doc: Fixes for the talloc destructor tutorial.
      doc: Fixes for the talloc pool tutorial.
      doc: Fixes for the talloc debugging tutorial.
      doc: Fixes for the talloc best practices tutorial.
      talloc: Update doxygen config.
      s4-auth: Use smb_krb5_make_pac_checksum.
      krb5samba: Add smb_krb5_make_pac_checksum.
      s3-spoolss: Set DWORD values correctly.
      s3-auth: Don't lookup the system user in pdb.
      s3-auth: Rename to init_system_session_info().
      krb5samba: Add smb_gss_oid_equal wrapper.
      gse: Use the smb_gss_oid_equal wrapper.
      s3-spoolss: delete_drivers should be called as the connecting user.
      s3-winbind: Remove obsolte idmap_adex.
      doc: Remove documentation about idmap_adex.
      s3-printing: Remove deprecated lp_printer_admin().
      doc: Remove all references to 'printer admin' option.
      s3-passdb: Remove obsolte ldapsam_compat support.
      doc: Remove documentation for obsolete ldapsam_compat.
      s3-smbd: Remove deprecated 'share modes' option.
      doc: Remove references to deprecated 'share modes' parameter.
      s4-torture: Fix build warnings in lsa test.
      s4-torture: Use test_LookupSids3 function.
      s4-torture: Test LookupSids3 and LookupNames4 only over tcpip.
      s4-torture: Make sure ncacn_np tests are only called over the a pipe.
      s4-torture: Make sure lsa_OpenPolicy fails over TCP/IP.
      s4-torture: Make sure lsa_OpenPolicy2 fails over TCP/IP.
      s4-torture: Test LookupSids3/LookupNames4 over np and tcpip.
      s3-selftest: Run lsa tests over np and tcpip.
      s3-rpc_server: Make it possible to use more rpc exceptions.
      s3-rpc: Return the correct ntstatus depending on the transport.
      s3-lsarpc: Restrict the transport for ncacn_np functions.
      s3-lsarpc: Restrict lsa_LookupSids3 to ncacn_ip_tcp connections.
      s3-lsarpc: Restrict lsa_LookupNames4 to ncacn_ip_tcp connections.
      s3-lsarpc: Enforce a secure connection for LookupSids3 and LookupNames4.
      s4-torture: Add a lsarpc test_LookupSids3_fail function.
      s4-torture: Add a lsarpc test_LookupNames4_fail function.
      s4-torture: Add a lsarpc test_OpenPolicy_fail function.
      s4-torture: Add a lsarpc test_OpenPolicy2_fail function.
      s4-torture: Add a lsarpc test_GetUserName_fail function.
      s4-torture: Don't consider NONE_MAPPED an error in LookupNames4.
      s4-torture: Don't consider NONE_MAPPED an error in LookupSids3.
      s4-torture: Call lsarpc tests over the correct pipe.
      s4-libnet: Skip calling lsarpc functions over a wrong pipe.
      s4-selftest: Don't plan lsa.secrets tests over tcpip.
      s4-selftest: Don't run lsarpc requiring a named pipe over tcpip.
      selftest: Update knownfail list for samba4.rpc.lsalookup.
      s4-lsaprc: Don't call lsa_OpenPolicy2 in lsa_LookupNames4.
      s4-lsarpc: Don't call lsa_OpenPolicy2 in lsa_LookupSids3.
      s4-lsarpc: Restrict LookupNames4 to crypto connections only.
      s4-lsarpc: Restrict LookupSids3 to crypto connections only.
      s4-lsarpc: DCERPC_FAULT_ACCESS_DENIED for np
      s4-lsarpc: DCERPC_FAULT_ACCESS_DENIED for tcp
      s4-torture: Add DCERPC_SCHANNEL_AES tests.
      s4-torture: Improve samlogon test.
      s4-librpc: Add capabilities check for AES encrypted connections.
      s4-auth: Make sure we use the correct credential state.
      s3-rpc_client: Add capabilities check for AES encrypted connections.
      s3-rpc_client: Fix updating netlogon credentials.
      Enable AES in winbind.
      s3-winbind: Fix bug #9052 resolving our own "Domain Local" groups.
      doc: Remove build/ from doxygen config or it will not work in brew.
      s3-smbd: Fix flooding the logs with records we don't find in pcap.
      libkrb5: Fix build with MIT Kerberos.
      selftest: Define the log directory for s3fs.
      file_server: Fix spoolss support with s3fs.
      selftest: Add missing printing options for plugin_s4_dc.
      selftest: Remove spoolss tests from knownfail.
      s3-winbind: DON'T PANIC if we couldn't find the domain.
      s4-dns: Fix linking the dns service.
      wafsamba: Add support for manpages in SAMBA_MODULE.
      wafsamba: Add a CONFIGURE_FILE option.
      waf: Create catalog file for manpage generation.
      docs: Remove old ldb manpages.
      docs: Remove old tdb manpages.
      waf: Rename nmblookup manpage to nmblookup4.
      waf: Fix bug #8801 - build s3fs manpages.
      docs: Move idmap manpage to there old location.
      docs: Bump version up to 4.0.
      wafsamba: Add a SAMBAMANPAGES function.
      docs: Build manpages correctly.
      s3-rap: Open printers with the right access mask.
      docs: Fix generating idmap manpages.
      s3-printing: Increase debug level for info that the db is empty.
      s3-smbd: Don't segfault if user specified ports out for range.
      s3-spoolss: Fix builtin forms order to match Windows again.
      s3fs-smbd: Move housekeeping to the background process.
      waf: Build pam_smbpass module only if enabled.
      s3fs-smbd: Make sure the registry is set up before we init printing.
      s3fs-printing: Fix RAW printing for normal users.
      packaging: Add config for systemd-tmpfiles.
      packaging: Add support for reloading systemd services.
      s3fs-printing: Simplify the comment and location handling.
      BUG #9295: Build standard auth modules as internal modules.
      wafsamba: If we define a realname and a soname create a symlink.
      waf: Create a libnss_winbind.so symlink.
      waf: Create a libnss_wins.so symlink.
      ntlm_auth: Increase debug level if we use config domain name.
      packaging: Move smbprint to a comman location.
      BUG 9326: Fix net ads join message for the dns domain.
      packaging: Add NetworkManager dispatcher script for winbind.
      s3fs-net: Use talloc for memory allocation.
      s3fs-utils: Free the popt context in smbcacls and smbquotas.
      s3fs-popt: Add function to burn the commandline password.
      s3fs-client: Burn commandline password of client utils.
      torture: Fix smb2.create.blob test.
      s3:winbind: BUG 9386: Failover if netlogon pipe is not available.
      BUG 9436: Fix leaking sockets of SMB connections to a DC.
      s3-reg: Fix copy and paste error in debug message.
      torture: Fix copy and paste error.
      torture: Fix copy and paste error in debug message.
      libnet: Fix copy and paste error in dbsync error message.
      util: Add a UNIX platform independent samba_getpass().
      wbinfo: Use new samba_getpass() function.
      smbclient: Use new samba_getpass() function.
      util: Use new samba_getpass() function.
      torture: Use new samba_getpass() in locktest2.
      torture: Use new samba_getpass() in smbtorture3.
      torture: Use new samba_getpass() in masktest.
      net: Use new samba_getpass() function for 'net ads'.
      net: Use new samba_getpass() function for 'net rpc'.
      net: Use samba_getpass() function in net util.
      ntlm_auth: Use new samba_getpass() function.
      util: Use new samba_getpass() function for passwd util.
      smbget: Use new samba_getpass() function.
      cmdline: Use new samba_getpass() function.
      ntlm_auth4: Use new samba_getpass() function.
      replace: Remove deprecated getpass() support.
      BUG 9459: Install manpages only if we install the target.
      winbind: Make the code more readable in trustdom_list_done().
      s3-registry: Check return code of push_reg_sz().
      s3-rpcclient: Check return value of add_string_to_array().
      s3-net: Check return value of string_to_sid().
      s3-net: Check the return value of strlower_m().
      idl: Fix spoolss check for the size of the struct.
      s3-printing: Don't call talloc_free on an uninitialized pointer.
      vfs: Make sure we don't call talloc_free on an uninitialized pointer.
      s3-netapi: Fix zeroing policy handles in NetLocalGroupAdd_r().
      torture: Fix torture_rpc_spoolss_printer_teardown_common().
      s3-netapi: Initialize group_handle of NetUserSetGroups_r.
      s3-auth: Make sure we work on valid data_blobs.
      s4-netapi: Initialize group_handle of NetGroupGetUsers_r().
      s3-netapi: Initialize group_handle of NetGroupSetUsers_r().
      util: Don't use the pid ret value uninitialized.
      dfs_server: Don't allocate a subcontext twice.
      misc: Add a config for clang complete.
      tdb: Fix possible crash bugs in the python tdb code.
      tdb: Improve the documentation of tdb_reopen() and tdb_close().
      winbind: Use talloc in resolve_alias_to_username().
      winbind: Use talloc in resolve_username_to_alias().
      s3-lib: Remove unsused variable from sys_get_nfs_quota().
      s3-nmbd: Cleanup code to make it more readable.
      s4-libnet: Don't call talloc_get_type() for the same struct twice.
      nsswitch: Cleanup code in parse_wbinfo_domain_user().
      nsswitch: Remove unused variable in _pam_winbind_change_pwd().
      nsswitch: Fix pam_get_{item,data} build warnings.
      s3-utils: Cleanup code in wait_replies().
      s4-client: Make sure we have a valid count if we goto cleanup.
      s3-utils: Correctly handle getenv() for the later system() call.
      s4-libcli: Fix comparison of chosen_oid.
      s3-libsmb: Fix possible comparsion problems.
      torture: Make sure we use the correct size for cxd.
      s3-ctdb: Make sure addr.sun_path is null terminated.
      s4-socket: Make sure unix socket addresses are null terminated.
      s3-registry: Fix counters_directory() dir creation.
      s3-printing: Correctly create the printing cache path.
      s3-lib: Don't close the listener twice if we goto failed.
      util: Remove unused fde_stdin in samba_runcmd.
      s4-libnet: Fix setting the group handle and return codes.
      s4-client: Check return codes in do_connect().
      s3-smbd: Check return code of SMB_VFS_{L}STAT.
      s4-lib: Use directory_create_or_exist() to create messaging dir.
      s3-winbind: Check if we created the directories correctly.
      s4-regsitry: Check return value of ldb_msg_add_empty().
      s3-eventlog: Make sure the eventlog directory exists.
      s3-nmbd: Check if we created the directories correctly.
      s4-libnet: Checkr return codes in samsync_ldb_handle_domain().
      ndr: Check return code of ndr_pull_advance().
      librpc: Check return codes of ndr functions.
      param: Correctly create directory and create common function.
      s3-net: Check return values of push_reg_sz().
      s3-utils: Check return value of secrets_init().
      libcli: Check schannel state return value of tdb_transaction_commit().
      nsswitch: Fix wbclient BAIL macros.
      krb5_wrap: Remove dead code in smb_krb5_renew_ticket().
      s4-librpc: Remove dead code in smb_send_request().
      s3-tldap: Fix dead code in tldap_sasl_bind_send().
      s3-lib: Fix push_ucs2() for-loop.
      s3-libads: Fix copy&paste error in ads_keytab_add_entry().
      s3-rpc_server: Fix useless check if we still have a valid string.
      libwbclient: Fix null check in process_domain_info_string().
      libcli: Fix smb2cli_ioctl_send() if clause.
      s3-vfs: Fix typo in readonly_connect().
      s3-rpc_server: Fix a possible null pointer dereference.
      s3-vfs: Fix a null pointer deferference in vfs_media_harmony.
      s3-winbind: Fix null pointer dereference in store_memory_creds().
      s3-rpc_server: Fix null pointer derefs in rpc_pipe_open_interface().
      s3-libsmb: Fix a possible null pointer dereference.
      s3-netapi: Add missing break in NetUserSetInfo_r().
      s3-lib: Make it clear that we want to fall trough here.
      s3-rpc_server: Make it clear we want to fall trough here.
      s4-dsdb: Make it clear that we want to fall trough here.
      libgpo: Make it clear that we want to fall trough here.
      s3-lib: Cleanup transfer_file_internal() a bit.
      s4-libcli: Use a do-while loop.
      s3-rpc_server: Fix username and remote check.
      s3-libsmb: Remove check if array is NULL.
      s3-prefork: Directly fail if tevent_req_is_unix_error() fails.
      s3-idmap: Check return value of string_to_sid().
      s3-rpcclient: Fix cmd_eventlog_readlog() null pointer passing.
      s3-rpcclient: Fix cmd_eventlog_loginfo() null pointer passing.
      s3-net: Fix rpc_service_list_internal() null pointer passing.
      util: Add a strict directory_create_or_exist function.
      Use the new directory_create_or_exist_strict() function.
      s3-lib: Use new strict directory create function in create_pipe_sock().
      printing: Create default architecture directories on init.
      BUG 9574: Fix a possible null pointer dereference in spoolss.
      ldap: Remove obsolete convertSambaAccount script.
      waf: Fix pdb_ldap which cannot be built as a module.
      Rename pdb_ldap to pdb_ldapsam
      waf: Make sure we link against samba-util.
      winbind: Make domain_name const in wcache_ndr_key().
      messages: Use uint8_t type.
      winbind: Use uint8_t type and use const where needed.
      winbind: Correctly cast name to messaging_send_buf().
      ndr: Comparing an array to null is always true.
      libsmb: Fix possible null pointer dereference.
      torture: Fix samsync domain_name checks.
      nmbd: Fix request data data processing.
      s4-libcli: Add null check for ndr functions in rap.
      s3-tldap: Make sure we don't deref a null pointer.
      librpc: Add NULL check for ndr functions for epm bindings.
      s4-libcli: Check return code of smbcli_request_setup().
      ndrdump: Check return value of ndr_pull_init_blob().
      pyauth: Check return value of lpcfg_from_py_object().
      s4-libcli: Check return value of smbcli_request_setup().
      pdb: Fix array overrun by one.
      torture: Fix array access in spoolss test.
      torture: Fix memcmp of short buffer.
      torture: Make sure we don't overrun the buffer.
      s4-client: Don't leak resource handle.
      s4-client: Don't leak file descriptor.
      s3-net: Don't leak username.
      s3-spoolss: Don't leak memory.
      s3-lsasd: Don't leak file descriptors.
      s3-param: Don't leak file descriptor.
      s3-vfs: Don't leak file descriptor.
      torture: Don't leak file resource handle in spoolss test.
      s3-smbd: Don't leak subcntarr array.
      winbind: Don't leak memory on return.
      wbinfo: Fix several memory leaks.
      s3-torture: Don't leak memory.
      s4-client: Don't leak memory.
      winbind: Don't leak centry memory.
      s4-registry: Don't leak memory on error.
      s4-registry: Don't leak file descriptor.
      s4-cifsdd: Don't leak memory.
      s4-policy: Fix memory leaks in push_recursive().
      smbget: Fix file descriptor leak.
      smbpasswd: Don't leak memory.
      ndrdump: Don't leak plugin handle on error.
      s3-libsmb: Don't leak memory on error.
      s4-lib: Don't leak plugin handle on error.
      s3-vfs: Don't leak file descriptor on error.
      lib-util: Don't leak file descriptor on error.
      s3-rpc_server: Make sure that fd is really closed on error.
      winbind: Use talloc for allocating domain, dns, forest and dc name.
      winbind: Correctly use names in the domain struct.
      winbind: Fix samba3.winbind.struct test.
      waf: Correctly check for prctl in just one place.
      lib: Add prctl_set_comment to utils.
      s3-daemons: Set the comment field of the daemons.
      krb5_wrap: Make sure we don't dereference a NULL pointer.
      winbind: Fix no memory check in _wbint_PingDc().
      s4-client: Make sure entry is a valid string.
      s4-libregistry: Make sure we don't dereference a NULL pointer.
      s4-libregistry: Fix path check and improve while loops.
      gensec: recv_handler can't be NULL at that point.
      dsdb: Check for pointers before we deference them.
      s4-libregistry: Improve NULL handling of name.
      Make sure to set umask() before calling mkstemp().
      pidl: Add skip option to elements.
      ndr: Add ndr_ntprinting_string_flags() function.
      idl: Add flags for strings in ntprinting idl.
      ndr: Pass down string_flags in ndr_pull_ntprinting_printer().
      s3-net: Add encoding=<CP> to 'net printing migrate'.
      s3-net: Add encoding=<CP> to 'net printing dump'.
      torture: Add ntprinting latin1 test.
      torture: Update ndr README.
      BUG 9735: Fix winbind seperator in upn to username conversion.
      epm: Increase debug level for already registered endpoints.
      BUG 9758: Don't leak the epm_Map policy handle.
      BUG 9699: Fix adding case sensitive spn.
      BUG 9139: Fix the username map optimization.
      BUG 9766: Cache name_to_sid/sid_to_name correctly.
      BUG 9817: Fix 'map untrusted to domain' with NTLMv2.
      waf: Create a better wscript for finding ncurses.
      regedit: Don't panic if we can't open the file.
      regedit: Remove talloc leak report.
      regedit: Improve the while loop.
      regedit: Use color only when available.
      krb5wrap: Move mask to the right position.
      s3-libads: Print the debug string of a failed call with LDAP_OTHER.
      tevent: Link the tutorial on the mainpage.
      tsocket: Pass the full port number to getaddrinfo().
      tsocket: Pass the full port number to getaddrinfo().
      torture: Fix comparsion of uninitalized bytes.
      torture: Don't segfault in raw.session on error.
      torture: Don't segfault in smb2.session on error.
      selftest: Fix domain name of plugindc.
      selftest: Add a newline to root entries in the nss files.
      selftest: Use higher ip numbers.
      s3-winbind: Allow sec_initial_uid() to store creds.
      torture: Fix comparsion of uninitalized bytes.
      torture: Don't segfault in raw.session on error.
      torture: Don't segfault in smb2.session on error.
      selftest: Fix domain name of plugindc.
      selftest: Add a newline to root entries in the nss files.
      selftest: Use higher ip numbers.
      s3-winbind: Allow sec_initial_uid() to store creds.
      s3-winbind: Do not delete an existing valid credential cache.
      s3-waf: Rename regedit to samba-regedit.
      docs-xml: Remove obsolete swat manpage and references.
      nsswitch: Add OPT_KRB5CCNAME to avoid an error message.
      s3-libads: Print a message if no realm has been specified.
      s3-winbind: Fix a segfault passing NULL to a fstring argument.
      Followup patch for BUG: https://bugzilla.samba.org/show_bug.cgi?id=10082
      s3-winbind: Don't set a default directory for DIR.
      s3-winbind: Add support for the kernel krb5 keyring buffer.
      doc: Update documentation of pam_winbind krb5 support.
      idl: Add a new message for winbind domain states.
      s3-winbind: Add functions for domain online/offline handling.
      s3-winbind: Register handlers for domain online/offline messages.
      s3-winbind: Send online/offline message of the domain to the parent.
      vfs: Fix building the glusterfs module.
      vfs: Fix some build warnings in glusterfs.
      util: Remove 32bit macros breaking strict aliasing.

Andrew Bartlett (8035):
      Remove warning about trapdoor systems for non-root mode.
      Added the basic tests of smb functionality for HEAD
      Changed some of the tests around, made failures for parts actualy count
      Add the generic funcions file for the basicsmb tests
      Jigger around with the tests a bit more
      This should return the build to normallity.
      Make smbtorture return status values for use in the build_farm tests.
      Not all OSs have setbuffer, so we better check for it.
      Start of smbtorture based testing.  Not all of smbtorture's facilites
      We need strict locking to pass LOCK4
      Fix the torture test, we had the wrong file-name in the tests
      This fix from Eelco Vriezekolk <eelco at nexus.com.na> is for a SIG11 bug where we
      Running torture-RANDOMIPC on the build farm doesn't go down as a 'good idea' as its logsfiles are BIG!
      See if we can stick to slightly valid C..
      This brings HEAD into line with SAMBA_2_2, they now both use bindir.
      Allow us to vary the log-level, so we can run at level 1 normally,
      Allow user to specify CFLAGS even when using configure.developer
      Update smbtorture in line with SAMBA_2_2
      You can't dump_data() a function pointer...
      Add backend encryption support for NTLMv2.
      Add a new paramater:  add machine script
      Fix the loading of configuration files using the include syntax.
      This removes unused paramaters from various authtication functions, and should
      Update tests, start testing password server code, now I have it working and
      Try to avoid clashes with OpenSSL when built --with-ssl, they also have md5.h,
      This fixes security=domain, which has been broke since the big charset
      Fix tree breakage, the last change was entirly non-portable, and we already
      This backs out my last change, which broke some of the finer points of RPC
      I think this was just a typo...  If there was some method to the madness then
      Some minor doco on what the build_farm dir does
      This should fix the build, I think tpot just missed the file for his CVS
      This patch fixes up a few issues where we would do lookups in the local system
      This is my 'Authentication Rewrite' version 1.01, mostly as submitted to
      This is the fix for the PAM bug I probably introduced in the previous commit,
      Record the NT_STATUS constant rather than its number in the logfiles
      Some better debugs for our security=server code.  I want to track down why
      Try to set the socket options early for some OSs (like Sol 8) where they
      This patch does a number of things, mostly smaller than they look :-)
      Kill of idra's extra become_root()/unbecome_root() now I have fixed the actual
      One less getpwnam() call...
      Style cleanup for the last vuid change.
      smbd/auth_server: Doco, we want to use cli_nt_error here soon
      Restore a debug I think I dropped earlier
      Move read only check into a helper funcion.  Ensure conn->service is set
      Move admin user check into a helper function.
      Move the claim_connection stuff till a little later in the process.
      OK, so not freeing these was a mistake.  I'll try to be less exuberent next
      Add comment to clarify why we call this twice.
      Add a new option to disable our paranoid server check.
      A few changes:
      Fix up some unused variables  and functions, fix up formatting
      Fix to only send the status32 error for status32 clients, not to other
      As per plug-fest discussions this paramater no longer defaults to the value
      Fix up some compile issues.  We can't have C99 comments and add a smattering
      Change the description on --with-pam_smbpass to make it clearer - some peope
      Finally commit my fix to this little mess...
      Now that we always get back an NTSTATUS code actually pass it on to the
      Update manpage for new 'add machine script' paramater
      Actually fill in the status for sainity checks
      Restore the profiling data shmem parinoia.  This whole area needs to be
      Fix up NTSTATUS stuff in rpcclient's help function
      This looked suspicious now we are attempting to to NTLMv2.
      Oops...  For reference, NTLMv2 passwords are > 24 chars in length, while
      update for .proto.stamp
      Kill off the //server/share%user hack in share level security.
      Looks like it missed these.  make_connection now no longer takes a 'username'
      Kill off the dangerous passwd program default, as its both very
      Start pushing the NTSTATUS stuff out to the wire for session setups.
      Fix up workstaion and kickoff time checks, moved to auth_smbpasswd.c where
      Minor tidy-up.
      Fix (I hope) for a number of little compile warnings found by the IRIX
      Fix compile warnings on IRIX's cc.
      Reverse some of the breakage I commited a day or two ago, as we need to
      fix debug
      Fix (I hope) compile on HP-UX.  Found by the build farm.
      Remove the ugly hacks to get around the Get_Pwnam() calls in pass_check.c by
      passdb/pampass.c and passdb/pass_check.c are not passdb related at all,
      Use lp_private_dir() not magic on the lp_smb_passwd_file() output.
      This isn't used anymore
      printf() -> d_printf()
      Add the ability to display Samba's build options with smbd -b and as a level 4
      Adding the appropirate files might help...
      typo
      Reran autoconf, autoheader
      Try to fix up the shell syntax
      - Fix up to use sampass->username insted of user_info->smb_username
      Revert this one:  The NTLMv2 checks need the original username as found
      Fix for MiXed and UPPER case usernames with plaintext PAM passwords.
      Add and modify some of the various tests I have had sitting around here for a
      Rearrange the ordering of the checks in make_connection().  The new order has
      Check 'hosts equiv' and 'use rhosts' compatability with 'hostname
      Fix up the test for some of the quirkier hosts on the farm, and enable one
      We are not meant to touch the username, so use the pass->pw_name output rather
      Move pass_check.c over to NTSTATUS, allowing full NTSTATUS from PAM to wire!
      These are RIDs not Unix UIDs so make this clear in the feild names.
      Fix up NT_STATUS return for session setups, Win2k objects to anything other
      Zero out these pstrings before we start: makes for much easier debugging.
      Lets call an NTSTATUS an nt_status, not an ecode.
      Add .headers.stamp
      If we disable hostname lookups we can at least get a uniform answer for testing
      Try to fix up manpage installation
      Change ./configure.developer to stay in effect across a
      Fix up the ./configure for the BSDs:
      Don't segfault when deleting accounts not in /etc/passwd.  The RID we want is
      Finish Jeremy's passdb merge :-).
      Update build_options.c in line with new configure options.
      We don't use a modified 'user' in any case, so don't modifiy it.
      More updates to prevent account-guessing.
      Add a new interface pdb_set_plaintext_passwd() to the passdb.  This simply
      Fix up pdbedit to initialise its structures with the standard functions,
      Fix up TDB_SAM with repect to case sensitvity.  (need to use unix_strlower)
      Fix the uninitialised variable, but more importantly fix the SEGFAULT.
      Make use of the pdb_set_plaintext_passwd() update to vastly simplify
      Update for new pdb_set_plaintext_passwd() interface.
      Fix this to use the plaintext password code directly, like SWAT does.
      Rearrange the order of the checks in auth_smbpasswd.c, always check passwords
      Process the workstation trust account code INSIDE the authenticaion subsystem,
      Kill of the reply.c end of the workstaion trust account mess.
      Fix memory leak in get_sampwd_entries(), reindent for clarity.
      Kill unused variables
      Major update to pdbedit's import and export code, in line with reqests for it
      How the heck I missed this I don't know, but somehow I got a copy-and-paste
      Add a few const statements to various odd bits of the tree.  (Fixes some
      Fix up a number of intertwined issues:
      This is the passdb section of the previously mentioned commit.
      Finally kill off the SMBENCRYPT() macro.
      Make header comment clearer, these are RIDs, not UIDs.
      Small changes to register_vuid ahead of a larger restructure.
      Don't try to write the LM password in the NT password feild.
      move libsmb/domain_client_validate.o around in the makefile again, it really is
      Fix up indenting in out SAM password check code.
      Fix for compilation on non-krb5 systems
      Restore the intended behaviour for .headers.stamp
      samba-bugs at samba.org -> samba at samba.org
      A few spelling fixes from Vance.  <vance at digital-host.net>
      Fix up the Makefile for now (thanks herb).
      This commit is number 1 of 4.
      This commit is number 2 of 4.
      This commit is number 3 of 4.
      This commit is number 4 of 4.
      This patch applied, except without the structure changes to nmblib.c
      More spelling and grammer from Vance. <vance at digital-host.net>
      Add a bit of 'const' for the data_blob code.
      Fix up auth_smbpasswd.c to use the password interface, rather than the
      Fix up smbpasswd -e/-d  so that it doesn't change the password under you any
      Spnego on the 'server' end of security=server just does not work, so set the
      Parionia to ensure people don't install libsmb based programs setuid root.
      Small 'const' updates ahead of some AuthRewrite merging.
      SPNEGO works perfectly well with security=domain, so don't exclude it.
      More const.
      This is a farily large patch (3300 lines) and reworks most of the AuthRewrite
      Small changes for guest authenticated pipes.
      ... and clean up the unused variables.
      Fix up domain logons.  Tested with NT4.
      When you make a data_blob() then you probably need to free it too...
      This should fix up the compile with krb5.
      Various post AuthRewrite cleanups, fixups and tidyups.
      Return 1 (rather than 0) on failure.  This may well help get the build farm
      Move the test for non-SPNEGO session setups when using SPNEGO, becouse its a
      Minor cleanups/fixes in the NTLMv2 code
      anonymous logins are guest logins, so mark them as such. (Otherwise they can
      Fix up pdbedit so that it at least compiles without warnings.
      Fixup for accounts without a local /etc/passwd entry.
      Fix up authenticated pipes in line with vuser changes.  This ensures that global
      Fix segfault. sup_tok might not always be with us.
      Initilising these variables before appending the domain groups to them
      UGLY HACK to get machines to join tdbsam domains again.
      Change to guest logon code.
      This change updates lp_guestaccount() to be a *global* paramater, rather than
      Remove built-in support for clear-text kerberos authentication.
      autoconf
      Minor updates.  A small dose of const.
      This extra check isn't needed, we can only get here if secuirty=domain
      make sam_account_ok static.
      Add back the not null checks in a better place.
      Fix up some DEBUG()s
      Kill off 'restrict anonymous' becouse it is useless in its current form.
      Code duplication is bad.  So add an add_signiture() function and just refernce
      Fix up the build again...
      Update some of the error mapping, based on on-the-wire observations of an NT4 server.
      Kill off that crazy copy_sam_passwd().  You simply can't do that if the
      This is another rather major change to the samba authenticaion
      And add the winbind module I missed in the last run.
      Fix ./configure --enable-developer warnings (shadow of global)
      Unless the error is exactly NT_STATUS_OK, we might not have a server info, so
      Add a new torture test to extract a NT->DOS error map from an NT member of a
      oops, I forgot to include the header file
      Add the PDC end of the smbtorture test for creating an NT_STATUS -> DOS error
      This compleats the of the authenticaion subystem into the new 'auth'
      And delete domain_client_validate.c...
      Fix up the build farm again.
      prevent proto from picking up this as a defintion for 'main()' becoue it conflicts with nmbd's definition.
      A number of things to clean up the auth subsytem a bit...
      Fix debug
      Fix --enable-developer shadow warning
      Some random updates for the ADS-HOWTO
      Allow kerberos to work on RedHat and other non /usr systems again
      Make better use of the ads_init() function to get the kerberos relam etc.
      Fix up the ./configure tests for kerberos.  This ensures a more consistant
      This is another major rework of the 'net' command.
      Forgot this one with the last commit...
      This change reworkes the connection code for both rpcclient and net new
      This comment no longer applies.
      Fix up funtion name, as this finds local, not domain master browsers.
      Some changes to the name resolution code in 'net' to allow us to find a
      Add 'net rpc join' to match the ADS equiv.
      smbpasswd is *ugly*!
      Const religion for some of the RPC code.
      Ditto on the const religion.
      Add a mechinism to allow for sane porting of rpcclient components into the new
      Follow herb's suggestion and don't strdup a string to itself.
      Follow herb's suggestion and don't strdup a string to itself
      Split out the name resolution code into a seperate function
      Make it easier to construct anonymous connections with a new flag and helper
      Add a new flag for anonymous connections
      Ensure we fill in the %U for NTLMSSP connections
      Add a couple of extra debugs for the secrets.tdb stuff
      OK.  Smbpasswd -j is DEAD.
      Ensure that 'use spnego' restricts, rather than just advises our clients.
      Leak less memory.
      Fix segfault, and add a comment.
      By popular demand: a new config.guess and config.sub
      Make Samba compile on RH 6.2 again.
      Fix the compile on systems without a full kerberos kit.
      Finish idra's cleanup of the RPC remote shutdown code.
      Finally remove these files, which moved (by cvs backend magic) to source/auth
      Add a pile of doxygen style comments to various parts of Samba.  Many of these
      Allow this to build without LDAP, as per the example below it.
      Make --with-tdbsam compile again, given the new 'am I setting a default' flags.
      Give the main loop talloc context a name (using mbp's new talloc naming
      Fix up the comment in the copyright header
      Add 'net rpc shutdown' and 'net rpc abortshutdown'.
      Ensure the output cli can't have spurious values if the connection fails...
      Named constants are always much better than magic numbers...
      Fix up C99 comment.
      Add a specialised version of tpot's libsmb samlogon code for use with
      A farily large commit:
      Further rpc_client removal, this time from winbindd.
      Now that winbind doesn't rely on this, we may as well remove it...
      Allow usernames in the form of 'NT_STATUS_....' to map to that as the error
      Add a function to convert 'NT_STATUS...' strings back into their actual error
      This brings the NT->DOS error mapping into better line with what NT does.
      Minor update to make the output 'real C'.  (The output is intended to be a C
      Another touch of 'const'
      Actually enforce the passdb API.
      We go to a lot of effort to avoid strcpy() in Samba, but its not much use if
      Re-add bail on failure.
      Workaround some 'smarts' in Win2k.
      A few changes to always output the erorr mapping even when the error was
      Make a couple more of the warnings also be C comments
      Update the NT_STATUS -> DOS error table.
      Add a touch of const
      One line fix to get smbmount working again.
      Add a comment on how this error map was derrived.
      Add a talloc varient of the data_blob functions.
      I've decided to move the auth code around a bit more...
      Fix up the SPNEGO segfault.
      Some more SPNEGO fixes.
      Get this code back to where it belongs...
      This changes the winbind protcol a bit:
      Return the winbind separator over the socket, so programs don't have to parse
      Take a stab at keeping the doco current :-)
      Fix up 'net ads join' to delete and rejoin if the account already exists.
      Back out the crazy notion that the NTLMSSP flags actually mean anything...
      The DC is meant to be sent the *unmapped* username...
      Make this error match Win2k.
      Move all the pdb_get...() and pdb_set...() functions to a new file.
      Thanks to vance for spotting the missing Makefile.in commit.
      Many thanks to Alexander Bokovoy <a.bokovoy at sam-solutions.net>.
      I'm doing some things towards the NamedPipes game with lckl and he has asked me
      Re-indent these two functions to make it actually possible to understand their
      A couple of coding syle updates to follow the re-indent.
      Fix a segfault in auth/auth_domain.c error cases.
      Initialise cli variables and try not to do a cli_shutdown() of uninitialsed
      I like --enable-developer, but I find it rather usless when all it gets me is a
      rerun autoconf
      Change the passdb interface to use allocated strings.
      Commit the auth associated changes I missed from the last commit.
      For some reason I wasn't thinking about failure cases this morning...
      Move the bang (!) command back to the bottom of the list, allowing smbclient
      A nice *big* change to the fundemental way we do things.
      This is the 'winbind default domain' patch from Alexander Bokovoy
      Don't do tridge's crazy 'am I a trusted domain' lookup for guests.
      Update the build farm's test runlist and make it a bit easier to read.
      Fix up runlist botchup.
      This patch makes the 'winbind use default domain' code interact better with
      This is the current patch from Luke Leighton <lckl at samba-tng.org> to add a
      Fix a couple of memory leaks in the cli_establish_connection() code's failure
      Add a touch of 'const' to some auth components, and move the simple plaintext
      Kill off the old varient of 'check_plaintext_password' (new version just
      Fix up an embarrsing bug I introduced when I moved the id21/id23 -> SAM_ACCOUNT
      Kill off another ugly wart from the side of the passdb subsystem.
      This is another *BIG* change...
      Try to see if we can get these tests working...
      Vance and his eagle eyes spotted a copy and paste error in my smb.conf updates.
      A couple more little fixes for the domain security tests.
      This should get the oldstyle domain join tests working again.
      Also echo the smbpasswd command line
      Fix the negation of the extra parinoia check on machine password changes.
      Inititialise the gid to what standard_sub_advanced wants for 'no value'.
      Add the -s command to keep smbpasswd quiet during the tests.
      One less Get_Pwnam_Modify call!
      getpwnam -> getpwnam_alloc
      getpwnam -> getpwnam_alloc
      Change the order of this a bit - as unix password change can fail.
      getpwnam -> getpwnam_alloc.
      Oops...
      Bring auth_winbind into line with the protocol changes
      Fix a 'const' warning.
      Passdb changes:
      Change this code so that we don't do a lookup_name() on root.
      Add some information tidbits to an error DEBUG().
      Try to move towards slightly sane linking for Samba by removing some pdb_...()
      Try to get the compiler not to complain about assignments and truth values...
      These changes commited on a 'no less broken' basis.
      The new plugable password backend system needs to be initialised after
      fix typo
      Fix up a security issue with the way we handle domain groups retuned on the
      This always points at a string literal, so it probably should be 'const'.
      Remove the 'direct to winbind' hacks, as they should (if I understand
      Allow a winbind client to obtain the server's domain name.
      Change the winbind interface to use seperate 'domain' and 'username' feilds for
      local_lookup_name() doens't acutally use its 'domain' argument, so drop it and
      We may as well not use these temporary variables - they are only used once and
      Move the lsa code across to the changed args for lookup_name, and surround it
      Add the become_root()/unbecome_root() wrapper around the lookup_name() call,
      Rework lookup_name() to take seperate username/domain args, and to remove
      Make a talloc'ed copy of this strings so we can pass the right kind of pointer
      Bring this code into line with new winbind_lookup_name() interface.  I think
      Back out some of the less well thought out ideas from last weeks work on
      - Provide sid->name lookup support for non-unix accounts.
      Give pdbedit a -D paramater for setting the DEBUGLEVEL (makes debugging passdb
      Patch from Kevin Stefanik <kstef at mtppi.org> to do some more error checking for
      Yes, dev is an 'input/output' paramater...
      Some more 'winbind default domain' support patches from Alexander Bokovoy
      Name another talloc.
      An attempt at producing the correct Makefile magic for wrepld_proto.h to be
      Back out herb's changes (to allow smbpasswd -x to work on accounts outside
      Initialise some SAM_ACCOUNT structs to NULL, and add some more error checking.
      Make smbgroupedit a little easier on the user.
      A new simpiler syntax demands a new simpiler HOWTO.  (This can all be reverted
      Drastic impromvents to pam_winbind.
      See if we can get slightly valid C for the non-PAM case here.
      Fix use of uninitialsed variable in PAM code
      Try to get this finally working.  (Note to self: *always* check build farm...)
      Fix up some of the DEBUG lines in winbind_pam.c
      Do the reverse DNS lookup, but only if 'hostname lookups = yes'
      Fix up some braindamage in the testsuite.
      A few small winbind updates:
      Winbind cleanup.
      Subject:
      Try not to malloc -1 bytes (apx 4GB) when the data is already in error.
      dont strdup() possibly null values.
      in dos_unmangle() the only function call was to *mangle()*.  Adding the
      Patch from Hasch at t-online.de (Juergen Hasch) to add UTF-8 as an explict
      Thanks to David Edward Shapiro <David.Edward.Shapiro at btitele.com> for spotting
      This fixes a bug (spotted by Rafal Szczesniak <mimir at diament.ists.pwr.wroc.pl>)
      Try to catch the compilers that don't handle immidiate structures as well as we
      rerun autoconf
      Add the pdb_plugin module from Jelmer Vernooij <jelmer at nl.linux.org>.
      Also add the matching example pdb module.
      Get rid of the unused WL variable from the previous patch.  I think these were
      We can't build shared libs on sco, so no point attempting to export dynamic
      Rerun configure
      Make this function static
      This apparently makes winbind work on Solaris again
      "user doesn't exist" isn't worthy of a level 1 debug.  Make it level 3.
      This should fix up the level 0 'convert_string' debug messages that we have
      This should kill off the 'cannot convert' error messages on non-iconv hosts.
      Fix up the pull_utf8_fstring/pstring functions, and add their push eqivilants.
      Move wbinfo over to d_printf().  Patch by Hasch at t-online.de (Juergen Hasch)
      Various comment fixes from Rafal Szczesniak <mimir at diament.ists.pwr.wroc.pl>
      See if we can get a slight chance of this actually working...
      use the variable passed as a paramater, not just one randomly in our namespace.
      Another comment fix for mirmir
      The beginning of trusted and trusting domain support from
      Missed the Makefile.in update...
      SECURITY FIXES:
      Add a dash of const here and there...
      And a little more const.
      Fix up the trusted domains secrets code so as to have a slight chance of
      Missing include file update for the secrets.c trustdom changes
      Remove util_list.h, as its matching .c file has already gone, and nobody is
      Allow Samba to trust NT4 Domains.
      more const
      This patch merges my private LDAP tree into HEAD.
      This is now unused
      Move these inside the #ifdef to fix the compile on non-LDAPsam systems.
      This patch allows NT4 domains to trust Samba.
      Matching header files for the last netlogon cleanup.
      Some more fixes to enusre we execute the same code pathes as before this
      Move the directory creation process outside the 'installbin.sh' script, and
      I don't need my name on this twice :-)
      Fix typo in copyright
      Ensure we never use "" as a domain name (Win9X apparently does this for 'net use' duirng login).
      Actually include some *information* in the mangle debug messages.
      Allow us to see the difference between these two errors.  (We need to chase
      Fix a double-free bug in wbinfo -t's call in winbindd.
      Allow a zero rid in pdb_smbpasswd.  When given a zero rid the pdb backend
      Make ldapsam compile again.
      Make sure to initaliase SAM_ACCOUNT pointers to NULL, otherwise pdb_init_sam()
      Don't leak memory on failure.
      There is no reason we can't join a domain with secuirty=user.  In fact we
      Join as a server trust account if the server role is either PDC or BDC.
      Various winbind updates:
      Minor fixes:
      Patch from Hasch at t-online.de (Juergen Hasch) to add allocate and talloc
      Update some of the DEBUG()s in Get_Pwnam_internal()
      Make a number of the lookup tables 'const'.  I'm told this assists in sharing
      rerun autoconf
      Correctly store the hostname of the remote machine if so configured.  If the
      Extra parinoa and DEBUG()s for the make_user_info_map() code.
      Documentation updates.
      add {push,pull}_ucs2{allocate,talloc}() functions.
      More winbind for HPUX updates from Don Mccall.  I think JRA has already
      Fix up major logic reversal flaws in pdb_ldap.
      Reintroduce the 2.2 name mangling code, until we get are more flexible solution.
      Add a become_root()/unbecome_root() pair to allow acces to the passdb for
      Much better support for both non-algorithic RIDs (where the RID is stored in
      Remove : from the list seperators, as this is used to seperate out components
      Make our atomic increment code actually do this during its first/second run.
      This is the 'multiple pdb backends' patch from ctrlsoft, aka Jelmer Vernooij
      Better handling of uid/gid -> RID and RID -> uid/gid code.
      More updates from ctrlsoft. (Jelmer Vernooij <jelmer at nl.linux.org>)
      Doco update from Hasch at t-online.de (Juergen Hasch)
      Fix the compile-bug in pdb_ldap from my last patch.
      Patch for arbitary smb.conf paramaters (to make the life of plugin maintainers
      Fix the build on platforms that use our internal popt.
      As always, vance looks after the grammer... :-)
      Partly based on the work by mimir (Rafal Szczesniak
      Extra file for the tdb search code (linked list definition).
      Another patch from jelmer:
      Spelling fixes from vance
      Allow -c to specify the location of the config file, and fix up some handling
      Get the sco boxes compiling again - use the sys_ intefaces for all the dl*
      more dl* -> sys_dl* for sco
      Update the doco for the LDAP options in smb.conf, in line with code changes
      This removes --with-ssl from Samba.
      A few more trusted domains updates from mimir.
      indent
      Make Get_Pwnam use getpwnam_alloc() in an attempt to make it segfault rather
      Check paramters for NULL.
      Add a touch of const
      Make non-static for some later work (pushing the info3 across the winbind
      This is meant to be accessed via the helper fn, not directly.
      Make --with-ldapsam 'go away'.  This is now a standard, stable, feature
      A few things in this commit:
      As per rsharpe's request, require only a Masters in Astrophysics to
      Make smbpasswd at least slightly sane.  This kills off some of the
      Include the extra #define for the last set of smbpasswd mods.
      Passdb:
      Remove const from some functions to match the changed prototype in a
      Oops, I missed commiting this earlier.
      Move client_receive_smb to clientgen.c as a static, as proposed by Elrond.
      Remove unused files.
      Keep the compiler happy
      Updates for sane storage of ldap root DN passwords (tested, with upgrade
      Commit the header file for the LDAP/secrets  changes
      Fix a silly memory (getpnam_alloc()) leak spotted by Elrond, and move
      Cleanups!
      Add a bit more const, and kill of (finally!) sys_getpwnam and sys_getpwuid.
      Nobody uses this function, and there really doesn't seem much point to
      Given Jeremy's positive response, and a lack of one from tpot, I'll commit
      Nobody uses this, and its really just a layer of internal implementation.
      This function is unused, and doesn't make any sense to me anyway.
      Make function match the defintion require for assignment as a function
      Don't duplicat this here, use the existing function prototype.
      Move the authenticaion subsystem over to the same 'module:options' syntax
      Remove the password length paramater from cli_full_connection - it really
      Some of the updates from ctrlsoft's 'Various' patch:
      Some grammar fixes picked up from the bugs.debian.org, submitted by
      Name the authentication modules, and therfore fix up both the build farm
      Remove unused variable, fix functions to match prototypes in the various
      Only reterive the attributes we are actually going to use - rather than
      Clean up a few unused functions, add a bit of static etc.
      Update some of the LM hash code to better respect the seperation between
      Add support for NTLMv2 (tested!) with NTLMSSP.
      Updates to better report some NTSTATUS errors into PAM, and update to PAM
      Update the SAMR pipe for more use of NTSTATUS and to talloc the stored list of
      A couple of updates for the SmbEncrypt code, and some of its users.
      Add flags2 for security signitures
      Move the code from lib/util_sid.c that deals with the global_sam_sid into
      Globally replace 'global_sam_sid' with get_global_sam_sid(), a self
      Fix comment
      This (hopefully) fixes a bug reported by Kai Krueger <kai at kruegernetz.de>
      This paragraph is irrelevent and misleading  (needs fix for 2.2 as well)
      Fix up comment on netbios scopes, and remove paragraph about international
      With this file being automaticly regenerated, and cleaned up with 'make clean'
      Remove "sids.h" as it really wasn't being used anywhere, and was exporting
      Latest patch from metze <metze at metzemix.de> to move most of samba across
      Add const, kill of useless casts and therefore eliminate warnings.
      Patch (from ctrlsoft <jelmer at nl.linux.org>) to poptify testparm, and the
      Patch from ctrlsoft to make the pluggable passdb subsystem use an lp_list
      Add some comments on writing new pdb modules. (from ctrlsoft)
      Convenience function to allow a SID to be specified as a string.
      Kill useless cast
      Debug fixes from ctrlsoft
      Some updates from ctrlsoft <jelmer at nl.linux.org> to return failure if *any* of
      It looks like we never tested the 'cleanup' code, so when I triggered it
      Patch from ctrlsoft to use the pdb_sethexpwd function in smbpasswd - instead
      Allow non unix accounts to be added to an ldap directory without NUA accounts
      Add a touch of const to this - helps with some yet-to-be-commited changes
      Add back sys_getpwnam() and freinds to the system.c interface, but don't
      It appears that to match NT we should not use the 'samstrict' behaviour,
      Add another 'trivial' built in authentication module - this one is a
      This patch does 2 things:
      Add the missing makefile from previous commit
      Update the netlogon code to better cope with trusted domains, where things
      Rework much of the service.c code:
      Unsused function since last commit
      Simplify this code further.  Just substitute %H, and let the normal code
      When adding popt to an application, you need to ensure it builds on non-popt
      Fix up some of the SMB signing code:
      Two things:  Check how many paramaters that the LDAP libs take for the
      Further updates to the service.c code.  authorise_login() is now a bit simpiler
      Cope with the requirement for constant initialisers on some unix C compilers.
      make the echo'ed command match the actual command run.
      Raise some debug levels.
      Add module versioning to the passdb module system
      Try to get security=domain at least slightly working.
      Add a couple more DEBUG()s to winbindd.
      Break up samba's object dependencies, and its prototype includes.
      Kill off unnecessary cast.
      Add a .cvsignore file
      And another .cvsignore
      Update cli_full_connection() to take a 'flags' paramater, and try to get a
      Try to avoid infinite loops when reteriving users - even from broken servers.
      I'm going to try and check this against Win2k shortly, but I'm certain that
      Fix the smbmnt compile.
      And fix another missing ubiqx...
      Qualify some of the hexidecimal responses with 0x
      Another bug fix from metze.
      We don't use SSL any more...
      Jelmer has been keeping on top of the typos.
      Kill off codepage related stuff, now we don't use codepages any more.
      Remove invalid comment - these are all 'unix' strings now.
      Fix the forword prototype to be a static for this static function.
      Fix the spelling in the LDAP attributes
      Add my copyright (which I should have added months ago...)
      Make these functions static.  These are not mentioned in the external header,
      Break up the passdb objects (to allow RPC clients to link without brining in
      Always free_conn() after all the DEBUG()s etc.
      Patch to add security descriptors to the SAMR pipe.
      More code from "Kai Krueger" <kai at kruegernetz.de>, this time starting to make
      Fix debug comment.
      Increse the maximum non-unix-account ID (becouse the Compaq Test Drive systems
      Copy the NT_TOKEN to the pipe, so the SAMR can use it for access control.
      Updates to the 'name -> sid' code:
      (this should have been part of the previous commit)
      Jerry:  Sorry if I am stepping on toes here, but this should fix the compile on
      Fix const warning
      Kill off const warnings - add a pile of const to various places.
      Make it clear that the debug comment is the same as the command being tested
      If we get a SID from group mapping, no need to check it's prefix.
      This makes smbcacls a bit easier to use and debug.
      Make smbpasswd behave like all the other backends, where a NULL or invalid
      I just noticed that I never added my copyright when I messed with this
      Make smbmnt a standalone program from a linker point of view.  Hopefully this
      make this a ZERO_STRUCTP for consitancy with the rest of Samba.
      Move nttrans.c into the NTSTATUS age.
      Fix up a botched prevoius commit.
      Apply patch from "Kai Krueger" <kai at kruegernetz.de> to make it easier to
      Show the account flags in the 'verbose' listing of pdbedit.
      NT_STATUS_UNSUCCESSFUL just gets clients confused - move to NO_LOGON_SERVERS
      Add a wrapper for dup2() to our system.c
      Update the usage for smbgroupedit to document -d for 'description'.
      Add support for a weird behaviour apparently used by Win9X pass-through
      Add support for duplicating stderr into our logfiles.
      Move some startup time initialisation to server.c, so it is all in one place.
      If we can't connect, make sure its a level 0 so we see it, and the reason.
      Fix up char/uchar casts etc.  Fix up comments on some of the password hash
      Update the smbd reply code a little:
      Make it clear that the 'service' isn't to be touched.  (Make it const).
      Add some const to try and get less warnings.
      Try to fix up warnings - particularly on the IRIX 64 bit compiler (which had a
      correctly declare global_myworkgroup to be the right size.
      More fixes towards warnings on the IRIX compiler
      Oops, my bad.  I forgot to assign this, so lookupnames wasn't doing much :-)
      And a little more 'const'.
      Compilers do find bugs :-)
      More use of intermediate variables to avoid issues with pointer size and casts.
      Looks like I missed this earlier.  We should connect as the specified workgroup
      Tpot missed one...
      Another smattering of static and const
      Add some const & static, remove unused functions.
      More cleanups, and add a comment/hint not to clean somthing up in future :-)
      Give an idea what service didn't have the directory.
      Add another message rather than 'internal module error'
      We must be root to access the passdb, so ensure all calls to local_lookup_sid()
      Actually check the return value of the account_policy_get() call.
      Make it possible to query account policy values from pdbedit (set to come soon).
      If lp_add_home() fails, don't go any further, just return -1.
      Clarify this comment.
      I think this makes the debug statement clearer.
      Mimir has been busy with patches again, and sent in the following
      (another patch from mimir)
      Rafal 'Mimir' Szczesniak <mimir at diament.ists.pwr.wroc.pl> has been busy
      This should fix a nastly little bug where if a user had already done one
      Update the rebind code in pdb_ldap.
      A very long time ago (actually 6 months ago) I promised to commit this code
      Clean this code up a little.  If it's alrady asprintf()ed, I see no
      It seems I didn't need to write a dup2() wrapper - as we already use it a
      Another item off my long-term todo list:
      Warn about n^2 algorithm with utmp=yes.
      Fix a missing 'no memory' return in last night's svrsvc code, and use
      Add the ability to set account policies too.
      This patch does two things:
      We don't need this silly unix username stuff.  NT username is basicly unused,
      Add quotes so we can see 0 length strings.
      These are not critical errors, they should not be a level 0.
      These pointers should be for the service we just cloned, not the new service
      Make some of the charconv code a bit easier to read and work with - when we
      Update a pile of Samba's SID lookup code to ensure:
      Only allow 'security=ads' when we HAVE_ADS.
      fix debug, at idra's suggestion.
      Don't accidenity mess with the wrong domain's sids.
      Rework parinioa to ensure we never get passwords longer than MAX_PASS_LEN, nor
      Winbind updates!
      Let everybody enjoy my new toy - make it the default!
      Add the current working document on the interface to the tree that we have
      Now that I got the function arguments sane, remove the silly (void **) casts
      Try to make this easier to debug - display the username that failed.
      I must have missed this when I was adding 'const' to these earlier...
      Back out idra's change (at his request) - the values in the tdb *should* be
      Try to bind with LDAPv3 if possible.
      Add const to a pile of const to *DOM_SID paramaters.
      Add some more const :-)
      Add 'const' to the function prototypes to match the recent commit.
      Patch from Steve Langasek <vorlon at netexpress.net> to split up our -l
      Samba dependency hell claim's another victim...
      Fix the %m security bug again - and try to make it harder to reintroduce in
      Make 'remote_machine' private to lib/substitute.c, and fix all the user to use
      Fix segfault in the new NTLMSSP code.  jmcd:  can you look at this - what
      Add some const to the 'in' paramaters for these functions.
      Make the 'guest account' always have a RID of DOMAIN_USER_RID_GUEST.
      Return the error if get_group_domain_entries() fails.
      Rework the 'guest account get's RID 501' code again...
      The idea of this function is not to touch the argument, so make it const too...
      Becouse of changes to the meaning of this feild over time, this doesn't
      Add 'const'.
      Add const.
      Move tridge's getgrouplist() replacement function from replace.c to a new
      Quick hack to get around the inadequacy of pdb_smbpasswd.  This should make the
      Change which session key we negotiate.  This uses the NT-based session key that
      Based orginally by work by Kai, this patch moves our NT_TOKEN generation into
      Handle wrap-around on this number by making it unsigned.
      Fix pam_smbpass to always check the return value of pdb_getsampwnam() to
      Use the 'init' flag to determine if the UID is set, rather than testing the
      Cope with non-unix accounts - we just won't get the groups for those users.
      This is like jht's (abortive) patch for showing only non-default testparm
      Add tridge's backtrace script - it should at least work for systems with
      More hacks for 'guest account' to get it to show up with the right rid...
      Move comment
      A few fixes towards libsmbclient and rpcclient - get pointer types right and
      Make samsync use popt
      Ensure we don't change to a user that we can't get an NT_TOKEN for.
      We need to return the value here...
      Fix from kai to correctly decode ntlmssp flags.
      Patch from mimir to back out idra's attempted DOS mitigation patch.
      Use a function that actually exists for the keepalive send.
      Steve Langasek <vorlon at netexpress.net> has again attempted to simplify Samba's
      Clarify function comments
      Try to support non-root-mode systems without getgrouplist().
      Our 'guest' login still requires an entry in the SAM - and build farm machines
      Updates!
      Header file change from last commit.
      Some fixes for SMB signing.  I can now get Win2k to correctly respond with a
      I think this should fix the compile on some of the CUPS based machines.
      We don't need the RTLD_GLOBAL.
      paranoid server security defaults to yes
      Add a fix for 'query_disp_info level 2', which should return all machines in
      Avoid writing unitialised bytes to the wire (and consequent valgrind warnings)
      Add a bit of 'const' and move a lot of our 'repeditive' DEBUG() statements to
      Add a dash of static.
      Set default ACB attributes on 'unixsam' accounts.  This means that machine
      Only cache the user list on the SAMR handle for a particular
      Move the fancy NT_STATUS macros to a new file, so we can include them earlier
      Detect and use syslog.h or sys/syslog.h corretly.  Fixes lack of prototype for
      One less user of Get_Pwnam_modify()...
      Add some DEBUG()s to some libads failure modes.
      Oops...
      Patch from "Stefan (metze) Metzmacher" <metze at metzemix.de>
      Revert accidental commit - I'll need to do a fair bit more testing before I
      patch from metze:  add a 'vfs' debug class
      This commit includes part of the patch from metze posted to the list, and a few
      Updates to sam_skel from metze, add sam/group.c and add a DEBUG() to the
      Make it possible to actually build these modules - process the Makefile.in at
      Get our consts back in line with current norms - only for pointer protection.
      Fix some missing ; on the end of our SAM_ASSERT()...
      This is the 'easy' parts of the trusted domains patch n+3 patch from
      Seems I missed commiting this when I added the rest of metze's ADS patch.
      As per the 'OK' at CIFS2002, only use the readline headers (and this crasy
      Winbind client-side cleanups.
      Don't leak file desciptors in this (impossible?) error case.
      This is the 'main' inclue for for winbind clients - all clients should include
      Fix typo.
      Avoid a segfault in net join when you have not done an kinit, and it's falling
      Move to common user token debugging, and ensure we always print both the
      If adding a user to ldap, make sure we have the 'account' structural class, or
      Actually pick up the kerberos libs in RedHat - the previous shell construct
      Header files should not include includes.h - therein lies maddness, particuarly
      Another patch from metze, towards his work on sam_ads.
      Kill of Get_Pwnam_Modify and smb_getpwnam().  The latter assumes some things
      At least try to get this function picked up by the autoprototyper
      This patch from "Stefan (metze) Metzmacher" <metze at metzemix.de> cleans up
      Whenever we deal with adding machine/trusted domain accounts, always reset the
      Metze claims that without this his win2k server gets horribly confused looking
      Fix the circular dependency that was preventing 'domain master = auto' (the
      Make it clear what this if statement applies to, and what it doesn't
      Patch from "Stefan (metze) Metzmacher" <metze at metzemix.de> to do a *much*
      Patch from "Kai Krueger" <kai at kruegernetz.de> to get some more of our access
      Readd the 2.2 --with-ldapsam paramaters so as to allow a smooth upgrade path to
      When compiled --with-ldapsam, make ldapsam the default passdb backend.
      Fix typo
      I missed committing this - all updates to configure.in adding --with-foo
      Some small cleanups to the libads code (mainly error checking), and give a
      Minor updates:
      Vance picked up a pile of typos etc at the CIFS confernce, and finally got them
      Doco patch from metze.  This reformats the 'ldap ssl' docs, and add doco for
      Move a number of ADS related functions out into utility libs, so that things
      Back our volker's patch as was breaking the build.
      Add const.
      This needs to be #ifdef HAVE_LDAP.
      Add const.
      Add the beginings of sam_ads to the tree.
      Second stab at Volker's 'make shadow passwords work' patch.
      Back out one of the API changes, now I recall how it was meant to work.
      Forgot to commit this in the patch changing back the create_user API.
      Try to compile as much as possible with only ldap, but not kerberos.
      Updates for sam_ads by metze - add the start of domain policy searching, and a
      Remove sam/api.c.
      Fix the compile issue in bin/samtest, and make the 'system' token just have the
      Updates from Samba HEAD:
      We are going to need to track the SAM sequence number too.
      Patch from Steve Langasek <vorlon at netexpress.net> to use nice big integers when
      Another patch from Steve Langasek <vorlon at netexpress.net>, again from the
      Patch from Steve Langasek <vorlon at netexpress.net>:
      VFStest uses all of smbd's .o files, so needs -lpam and crypt.
      We already set LDAPv3 at connect time, no need to set it again.
      Nice *big* patch from metze.
      It seems that I'm meant to be using the helper function here, not the struct
      Updates to winbind's PAM client and server - make the debug logs
      Make sure that we always return False if the password change never returns.
      One more step towards to better PDC.
      Try to catch up on the code I've put into HEAD that should be in 3.0:
      Fix a nice little memory leak in our uid changing code.
      Merges from HEAD:
      Fixes for pdb_ldap:
      Return the result code, not false (0 == success) on error...
      Merge passdb from HEAD -> 3.0
      Add a 'ldap trust ids' option that lets pdb_ldap check for posixAccount
      Clean up this a little - add comments describing a bit of what is going on
      Fix typo
      Merge of my 'ldap trust ids' patch from HEAD.
      Extra little fix to vl's patch.  Make sure the passdb and testparm messages
      Any conversion to POPT must *always* add @BUILD_POPT@ or it just won't work on
      Try to fix popt dependencies - we were linking to popt before we built with it.
      Move to the use of the 'initialised' flag, rather than the fact the pointer is
      Fix debug
      Allow 'normal' accounts in the non-unix-account range for smbpasswd - I hope
      Becouse lib/popt_common.c uses POPT, we must not include it in LIB, we must
      VFStest already has pop_common via smbd, so don't link it twice.
      Merge vl's 'algorithmic rid base' patch, and my changes to pdb_smbpasswd's NUA
      Make smbpasswd tell people to use 'net join', not 'net rpc join' now we have
      Make it easier to track things down here - add some debugs on failure.
      Make smbpasswd use the group mapping, and fix spelling in ldapsam.
      Compleatly remove support for logfile truncation.  All logs are opened for
      Merge from HEAD:
      Fix bug where not specifying '-S PDC' in 'net join' would cause it to attempt
      Merge fix for uninitialised IP variable from HEAD
      Kill append_log from smbmount (thanks vance for reminding me).
      Merge append_log fix from HEAD
      - Add some more warning flags for --enable-developer.
      Undo the new --enable-developer flags that caused breakage on gcc != 3.2, and
      Try to bring libsmbclient in line with the new global_myname stuff
      Merge from HEAD
      Updates to the build farm tests:
      Add const to DEBUG() macro.
      When testing for /usr/include/heimdal, don't include /usr/heimdal/include
      Rerun autoconf
      Merge from HEAD:
      Add the rename torture test.
      patch from aedil at alchar.org to correctly detect solaris workshop CC's ability
      Small auth updates:
      Include the hostname we are trying to match with $@, to allow easier debugging.
      Add const to PACKS()
      Add samdump and vampire to 'net rpc help'
      Updates from HEAD:
      Remove the assumption that all Solaris has -lsendfile.
      /bin/sh on solaris swallows the failure code, so exec this directly.
      Merge from HEAD:  Remove assumption that all solaris has -lsendfile
      Merge from HEAD - updates to the build farm, /bin/sh can swallow return values,
      Add support for 'restrict anonymous=2' and make the doco give a slight hint
      Restrict anonymous=2 support merged from HEAD
      Add ntlm_auth, a new program to provide a stable interface to winbind's
      No need to #include smb.h, when we already #include include.h
      Remove silly ideas about taking the LM or NT hash as a password in pam_smbpass.
      Try to twiddle with the makefile to avoid having a trailing \ when we
      Move from NT_STATUS_UNSUCCESSFUL to NT_STATUS_NO_SUCH_USER, and other slightly
      Add support to switch between Squid 2.4 and 2.5 protocols - squid doesn't
      Instead of walking the entire group database, grabbing all members of each
      Having waited for *way* too long, this is mimir's namecache and trusted domain
      After consultation with tpot, remove the 'winbind_domain' environment
      Merge tridge's fixes to pdb_ldap (don't look for number of results in a
      Patch from Paul Green to detect exe extensions, needed for Stratus VOS.
      POSIX indicates that this is always in network byte order, so we don't need the
      Merge from HEAD - Patch from Paul Green to detect exe suffix for Stratus VOS.
      Merge from HEAD, struct in_addr is always in network byte order, so we don't
      Make it clear that we might not be talking to a PDC here.
      Dereference the correct thing here, so we don't segfault
      Remove extra headers, and ensure that we correctly bail out of winbindd if we
      No need for fstring manipulation here (Tcon&X), just use string pointers.
      Link less with smbmnt and smbumount.  Also change from a pstrcpy() to a
      As per Jeremy's request back this out, so as to re-gain the implicit length
      Add a new VFS module, that just fiddles the file permissions.  Still need to
      Move our password change code along a little - use NTSTATUS, and implmenet
      BIG patch...
      Add a dash of static.
      Call me parinoid, but I don't like the idea that we could ever have dbf point
      Add PRINTF_ATTRIBUTE() to a few more printf() style functions.  Aids in
      debugparse is a seperate utility, no need to include it in the main ubiqx
      Becouse these functions return a size_t, they can't return negitive numbers.
      We already have one function to move unistr2 -> multibyte-static, so we
      Merge from HEAD - remove silly 'NT or LM# as password' stuff from pam_smbpass.
      Merge from HEAD - tridge's new timegm() that actually works on solaris.
      Merge from HEAD - add PRINTF_ATTRIBUTE to a few more functions.
      Merge from HEAD - make Samba compile with -Wwrite-strings without additional
      Fix another pstring/fstring typo
      Merge from HEAD - idra's fix for the fact that the shutdown command takes two 1
      Missed from previous commit - merge from HEAD the changes to the remote
      Merge from HEAD - move user password changes into the NTSTATUS era, and add
      Merge from HEAD - mimir's new gencache based namecache code.
      Merge from HEAD - baseless parinoia about never having a closed dbf (the debug
      Merge from HEAD - don't base RID on a name being the lp_guest_account(), let
      Merge from HEAD - extract user's list of SIDs from their NT_TOKEN and return
      Merge from HEAD - we already have one function for converting a unistr2 to a
      Make it clear that the credentials are being setup on the NETLOGON channel, and
      Merge from HEAD - do an nt_errstr(nt_status) *after* assiging nt_status with
      The winbind in Samba 3.0 doesn't use the 'proof' for ntlm_auth_crap, so don't
      Merge from HEAD - vl's fix to my const patch.  Also update the 'not have_krb5'
      Merge from HEAD - whitespace :-)
      The last of the merge of idra's shutdown changes from head...
      Even when I can't manage to do QA, at least the build farm will catch some of
      Merge from HEAD - get the test the right way around, so that we can change
      Clear up the auth_sam password checking code (the core of our password checking
      Merge from HEAD - updates to correctly recognise LMv2, and NT# in LM feild.
      Fix a segfault when we don't correctly load a VFS module (don't keep it in
      Merge from HEAD - handle VFS module load failures, change some error returns to
      No point having this for both parts of the 'if' statement.
      Return the 'freindly' NT error message if at all possible.
      Patch from Nik Conwell <nik at bu.edu>.  Don't reference free()ed data when trying
      Fix a number of client-side fstring/pstring mixups.
      Remove an unused paramter for our old LM-only password change code, and fix a
      A couple more fstring/pstring issues - and move from sizeof(fstring) to
      Use size_t for the counter vars, to match the type they are assigned from
      While the usage is most bisarre, this fixes up another fstring/pstring mixup.
      Make the 'service' in make_connection() use an fstrcpy(), and an fstring,
      Oops, this is the change to use an fstring for the incoming service buffer -
      Keep all the const warnings in one place, by adding a utility function to
      Ensure we do not pass uninitialised data to the kernel.  (Picked up by
      Don't force the DOS password into a 14 char space, as this would imply null
      Fix to debian bug #171071 - we had the wrong dereference on the pointer to be
      Accessing data after it's been free()ed really is a no-no...
      Updates to our NTLMSSP code:
      Patch from ab, to make findsmb omit -r most of the time.
      Patch from metze to to make testparm show values for 'workgroup', 'netbios
      Patch from metze to add what he feels is the correct semantics for a Domain
      Fix typo, and the build.
      Always initialise this variable - and don't set the 'must change now' if it was
      A couple more pstcpy/fstrcpy mixups - doing an fstrcpy into a pstring is
      The last of the fstring/pstring mixups, and an extra 'static'.
      Commit my (disabled) fstring/pstring mixup detection code.
      Merge indirection, signed/unsigned and uninitialiased-value fixes from HEAD.
      Merge from HEAD - eliminated unused arguments.
      Merge from HEAD:
      Merge from HEAD:
      Merge from HEAD:
      Merge from HEAD - patch by metze to fill in 'workgroup' etc in testparm output,
      Fix some debug lines, and add a bit more info to help track down ldap
      Crash fixes:
      Fix warnings by getting the function into a shape the autoprototyper will
      Doing a malloc(strlen(s)) then a pstrpcp(y, s) is just silly, make it a strdup
      Refactor the NTLMSSP code again - this time we use function pointers to
      Missed auth_ntlmssp.c in last night's checkin.  Also keep track of the current
      Fix a signed/unsigned warning.
      Updates to the NTLMSSP code again - moving the base64 decode fuctionality out
      Add LIBSMB_OBJ for the new ntlm_auth functionality.
      (missed in last commit)
      Factor out common code in the NTLMSSP/SPNEGO code.
      The previous patch (NTLMSSP common code factoring) was missing a minor detail -
      Make this an fstrcat(), as this seems to fix some weird issue with the server
      As per a comment by herb a little while back, this should be >=, not == to keep
      Merge from HEAD:
      Make the vampire code use just pdb calls - allowing better operation on systems
      Fix to findsmb by Waider
      Merge from HEAD - fix to findsmb by Waider
      Clear up the winbind doco on ADS support, and specify 'net join' not 'net rpc
      Clarifications for the ADS docs.
      Minor doco updates - with a slightly bigger change to the
      A couple more signed/unsigned issues.
      Make it clear that the magic value is (size_t)-1.
      Clarify that 'use spnego = yes' is fine in all known situations.
      More doco updates, in particular the fact that you must configure the smb.conf
      Always escape ldap filter strings.  Escaping code was from pam_ldap, but I'm to
      More ldap parinoia - if we ever get more than one result, bail.  The order we
      Prompted by RedHat bugzilla bug #77999, convert the user's username and
      Non-error connection numbers are always positive
      One more signed/unsigned fix
      Makefile.in change for ldap escaping fixes
      Bitmap offsets and counts are always positive.
      Merge of signed/unsigned fixes from HEAD.
      Merge from HEAD - convert username/password to unix before checking them in
      Merge LDAP filter parinoia from HEAD, a few other pdb_ldap updates and some
      We now have client-side SMB signing support!
      More signing updates - start checking that the server isn't being spoofed.
      Send the user's session key in the SAMLOGON reply, so that a member server can
      Merge from HEAD: Send the session key to the client, allowing it to perform SMB
      Add some return values, and don't attempt signing for NTLMSSP yet (it uses a
      Patch from Edmund Lam <epl at unimelb.edu.au> to fix braindead Tru64 behaviour:
      Merge from HEAD: avoid braindead #define on Tru64.
      Actually checking both the account and password tests would be a good idea...
      Merge HEAD: check both the account and password...
      Add autogen.sh from distcc via mbp.
      Merge autogen.sh from HEAD - to allow removal of configure.
      Remove configure and config.h.in from CVS.
      (merge from HEAD)
      .cvsignore for configure and config.h.in
      Ensure we don't get problems between FILE and X_FILE buffers - always use the
      Merge from HEAD - don't mix FILE and X_FILE - fixes debian bug
      One more fix for the difference between FILE and X_FILE.
      merge from HEAD - x_fileno, not fileno on an XFILE
      (only for HEAD at the moment).
      Some cleanups:
      Failure to find a CUPS printer, when auto-adding printers is not a level 0 error.
      Use safe_strcpy() instead of pstrcpy() for malloced strings.
      perl might not be in /usr/bin/perl, so try and find it in the path.
      As metze mentioned, this is the proper way to find perl...
      Cleanups:  (merge from HEAD)
      Clean up our NTLMv2 code by moving the grunt work into a helper function.
      Patch from Anthony Liguori <aliguor at us.ibm.com> to remove scandir() portability
      Merge from HEAD: Patch by Anthony Liguori <aliguor at us.ibm.com> to replace scandir() with portable readdir() calls.
      Prevent NULL-pointer induced segfaults.
      Merge from HEAD: Fix NULL pointer de-reference in arguments to tdb_pack.
      Match Samba 2.2 by chosing the correct desired access, and getting cupsaddsmb
      merge desired_access for open_printer_ex from HEAD, allowing cupsaddsmb to
      Further extract our NTLMv2 code into smbencrypt.c, prior to merge into our
      NTLMSSP parinoia - we really don't want to run over the end of our blob,
      Oops, forgot the header file changes.
      Move our NTLMSSP code into easily seperated peices, not relying on the whole
      Antti Andreimann <Antti.Andreimann at mail.ee> has done some changes to enable
      Move our NTLMSSP client code into ntlmssp.c.  The intention is to provide a
      Don't return NULL pointers for now.
      Add the 'session key' output of the NTLMSSP exchange to the cli struct, so
      Merge from HEAD - allow "" as a domain in the NLTMv2 hash calculations.  Fixes
      People were being tripped up by the fact that we havn't updated acconfig.h
      People were being tripped up by the fact that we havn't updated acconfig.h
      If we didn't make the server_info correctly, then don't segfault trying to
      Try to make our getgrouplist replacement better match the 'real' implemenations.
      Set the length back to zero when we free the data_blob.
      Don't leak a session_key worth of memory at the end of the NTLMSSP auth.
      This patch fixes one of my longest-standing pet hates with Samba :-).
      This is a very nice way to detect pstrcpy() into a malloc()ed string, but
      The cli_send_tconX code already determines to send \\server\share to port 139
      Patch from vorlon at debian.org to split out our -lacl dependency to only smbd
      Only do a kinit if we got told to use kerberos.
      Fix logfile formatting, we were missing a "\n"
      After a talloc_zero(), we don't need to ZERO_STRUCTP too..
      Move to a in-memory ccache for winbind, and replace setenv() properly.
      Check return values of various join-related functions, and ensure we always
      Now we have setenv() in replace.c, we don't need a seperate copy here.
      Missed one use of SETENV.  (Compat macro no longer needed, as we have a
      Merge minor library fixes from HEAD to 3.0.
      Merge from HEAD: We don't need this any more, setenv() is in replace.c now
      for some (very weird) reason, the domain I was testing aginst would not
      Like for NTLM logins, lookup the 'winbind' user first, then the 'local' user.
      For a number of months now, support for being a domain member without also
      Fix a DEBUG() formatting, add some more debug to our SID pulling code and
      First check if the user is in the passdb, then check Get_Pwnam().
      Remove 'unixsam' from the default passdb backends.
      With assuptions about unixsam gone, we can forget about looking up
      Add static
      Fix comment - the other bits of code don't call this any more.
      Fixes from Paul Green and vorlon at debian.org for building shared libraries
      More signed/unsigned fixes (yes, I run with funny compiler options) and
      See if I can make this look slightly like C.  It compiled locally, honest...
      Make sure we set the error code to indicate failure...
      Fix 2 off-by-one bugs in the use of malloc()ed strings and safe_strcpy().
      Add const
      Merge of server-side authentication changes to 3.0:
      Missed one in the previous merge - user_ok() and user_in_group() now take
      Merge from HEAD client-side authentication changes:
      Merge off-by-one fix from HEAD (caused crash with --enable-developer)
      Missed a couple of files from the client-side kerberos merge
      Makefile updates for the client-side auth/kerberos merge.
      Merge doxygen, signed/unsigned, const and other small fixes from HEAD to 3.0.
      Fix a small stuffup in the HEAD -> 3.0 merge
      Merge paramaters for client-side-auth updates.
      Merge crypt(), ACL lib and shared lib changes from HEAD.
      Signed/unsigned fix from HEAD
      Iconv as seperate library fixes from HEAD
      Cleint-side-auth/kerberos fixes from HEAD, and don't connect to a share
      Make sure these values are never uninitialsised.
      Always initialise
      Fix off-by-one bugs, and move to strdup() rather than malloc()/strcpy().
      If it's a pstring, use pstrcpy().
      setenv takes 3 arguments...
      Patch from Luke Howard to add mutual kerberos authentication, and SMB session
      typo
      Move off-by-one buggy malloc()/safe_strcpy() combination to strdup() instead.
      Finish removing setenv replacements from smbwrapper.
      Clean up non-krb5 breakages from my modifications to luke howard's patch.
      Whenever we have a password, use the in-memory ccache.  This fixes a bug where
      Fix a really nasty bug where some users in AD domains (particularly child
      tokenGroups are SIDs, so dump them as such.
      For some reason some attributes in ADS do not appear (and are not available)
      After some comments from tridge, clean the new usergroups code into a helper
      Kill RID-only and domain+RID madness from winbind.
      Netlogon-unigroup changes needed for the winbind RID-to-SID conversion.
      Add -Wwrite-strings to our --enable-developer settings.
      Merge adding -Wwrite-strings to our CFLAGS when --enable-developer is set
      Fix possible memory leak on failure.
      Add const
      Fixes to the vfs_fake_perms modules - we only need to specify the VFS
      Try the PASSWD environment variable if we don't have one from the command line.
      Another pstrcpy() into malloc()ed buffer fix.
      Fix another 'off by one' bug with safe_strcpy().  It is unclear if the intent
      This file has not been maintained for a while - if we really want this
      also ignore the autom4te-2.53.cache
      Add a test for a useful property of the compiler - we can get link-time
      A couple more fixes for fstrcpy() into a malloced region.  In this case it's
      Use new configure test to turn on this automated test for correct string
      More safe_strcpy() off-by-one bug fixes. (mostly moves to pstrcpy()/fstrcpy())
      more off-by-one safe_strcpy()
      Make smbtorture use the same cli_full_connection() framework as the rest of
      safe_strcpy() -> fstrcpy() fix, and a cleanup to how rpcclient calls the
      Limit the number of SIDs that may be looked up, in line with existing code
      Make it clear that this is a fstrcpy().
      Make sure that the 'remote' machine name can only be set once.  For some weird
      Testparm needs the extra arg to set_local_machine_name() too.
      This is C, not C++
      Don't fault on error returns (ptr == 0) for this LSA query.
      Change the way we sign SMB packets, to a function pointer interface.
      Try not to clobber the session request.
      Further work on NTLMSSP-based SMB signing.  Current status is that I cannnot
      Makefile.in for NTLMSSP singing update
      Don't segfault on make_server_info_guest() failure - instead return the
      After 'consultation' with idra, this is how I think the server roles should work...
      Some further tought on the server role issue - try not to break it compeatly.
      security=domain and domain logons = yes should be a BDC (of sorts).
      This patch attemptes to clean up winbindd's mutex locking.
      Patch from Ken Cross <kcross at nssolutions.com> to take a username in the form
      - Fix a double-free (I can't say I understand the code, but it matches the other
      Add const
      Found by metze with the clobber-region check - if it's a pstring, use pstrcpy().
      Now that mimir has done the grunt work, I'll fix up the comment
      strictly, you can't #if on somthing that may or may not be defined.
      Found by my new checking code (yet to be commited):
      Clean up the VFS module loading logic by making the parameter an P_LIST,
      If it's an fstring, use fstrcpy().
      Add const, and a signed/unsigned fix.
      client-side smbpasswd fixes - use pstrcpy_base to avoid clobber_region bugs
      Be parinoid, malloc an extra SAFETY_MARGIN on the client's inbuf and outbuf.
      Specify buffer sizes
      If the server went away, don't segfault by attempting to FD_SET -1.
      specify the size of these buffers
      Truncate the machinename manually, so as not to generate level 0 debugs for
      Fix off-by-one bug in safe_strcpy size paramater.
      String handling parinoia fixes.
      signed/unsigned fix
      Fix signed/unsigned issues - mostly 'i' counters.
      Remove an unused function and fix the build.
      Minor fixes.
      Fix the non-DEVELOPER case of my macro madness...
      Fix the 'non-optomizing compiler' case...
      Fix non-gmake syntax error.
      A hack to get us building on a slightly older heimdal kerberos.  It appears
      More work on my macro mess - we need function prototypes of different types,
      Changes to help the kerberos change password code work on systems that
      Fix nmbd under -DDEVELOPER (pstrcpy on not-pstring).
      New statcache internals - this time it's actually possible to follow what's
      Try to avoid dereferencing a null pointer.
      - Make ReadDirName return a const char*.
      Add const.
      Make sure we mark the assumption of a fstring parameter for 'devicetype'
      Missed one when I move 'share_sanity_checks' to use an fstring for 'dev'.
      Fix memory leaks and add parinoioa code to our stat() cache.
      Fix a memory leak - 'smbcontrol smbd pool-usage' is your freind!
      More statcache fixes - and add a bit more doco.
      Add const.
      Fix const warnings.
      Brain fart - make sure we truncate the right string...
      Fix invalid SAFE_FREE() of talloc()ed memory.
      Add copyright.
      Merge new statcache.c from HEAD.
      Merge from HEAD:
      pstrcpy_base merges for client-side smbpasswd.
      merge from HEAD - dump tokenGroups as sids.
      Merge from (earlier) HEAD - doxygen.
      Mege from HEAD - doxygen.
      Merge from HEAD - doxygen
      Merge from HEAD - sync up SessionSetup code to HEAD, including Luke Howard's
      The kerberos_verify compoenent of the SessionSetup sync with HEAD.
      Merge from HEAD:
      Merge from HEAD:
      Merge from HEAD:
      Merge from HEAD - make winbindd locking sane again:
      Add const.
      Add an extra parameter to our 'set_remote_machine_name' and
      Merge whitespace to match HEAD.
      Fix segfault on FD_SET() when we have an fd of -1
      One more on set_local_machine_name() taking a new 'perm' argument.
      Merge signed/unsigned fix from HEAD.
      Jeremy merged across my string parinoia fixes, but forgot to enable them! :-)
      NTLMSSP updates from HEAD.
      NMBD string parinoia and memcpy() parinoia fixes from HEAD.
      Merge from HEAD:
      Parinoia fixes from HEAD - malloc() some extra room after the allocated
      Makefile updates for new SMB signing code.
      Add const.
      Give volker a hand, and let domain joins with existing user accounts work
      (merge from HEAD)
      Patch from colo (on IRC) to get libsmbclient building due to pstring/fstring
      Clobber our SMB buffers between packets.  I hope this will help find bugs
      Clobber the 'SAFETY_MARGIN' in libsmb.
      Patch from Jianliang Lu <j.lu at tiesse.com> to set the 'minimum password age'
      Merge from HEAD - patch from Jianliang Lu <j.lu at tiesse.com> to set the
      Thanks to volker, merge passdb changes from HEAD:
      Merge fixes to libsmbclient (fstring/pstring) from HEAD.
      It seems that this causes some problems on some linux platforms - it's a
      This caused problems on the build farm.
      Fix compile on IA64 by noting that this should be the integer, not a pointer
      Fix compile on IA64 by noting that this should be the integer, not a pointer
      Small clenaup patches:
      Revert bogus part of previous patch.
      (merge from HEAD)
      Valgrind found a few memory leaks!
      (merge from HEAD) Valgrind found some memory leaks!
      Patch from waider to update our samsync (net rpc vampire) code:
      Merge of patch by waider to our samsync code.
      NTLM Authentication:
      Fix compile.
      (merge from HEAD)
      Make these functions static, keep them out of proto.
      Fix debug (thanks metze)
      local_gid_to_sid() could use pdb_ldap, which for now requires ROOT.
      pdb_ldap may require ROOT privilages to access the group mapping. (yes, it's ugly :-)
      Allow the new modules system to function with builtin vfs modules.
      Try to get meaningful errors out of ldap more often - get the error string
      Merge from HEAD - get better error strings from the ldap server in pdb_ldap.
      Don't modify the incoming packet when checking the signiture.
      Merge from HEAD - leave the SMB buffer untouched when checking it's SMB sig.
      smbpasswd -> net
      Don't try and dlsym or dlclose a NULL pointer.
      Success is not a level-0 issue...
      NT4 is particularly fussy about getting this right.
      Fix a botched merge from appliance-head...
      OHKAWA Yuichi (kuri at makino.ecei.tohoku.ac.jp) points out that using
      Don't set zero length for the base64 decoded string (fixes swat auth).
      Fix a crash bug if LDAP doesn't fill in ld_error.
      Clean up ntlm_auth a bit, and add a --diagnositics swtich, to check that
      error_string, not error_message...
      Update ntlm_auth and winbind manpages.
      Print out the 'freindly' error message from winbind.  Also print useful
      Map a useless error code to a useful one...
      Ensure we don't segfault if ldap doesn't fill in the ld_error string (merge from HEAD).
      Fix bigballofmud.so, and add a test to show a bug I'm having with push_ucs2.
      If the string does not convert back, print the buggy result.
      Don't bail if we have a badly formed record, just move on to the next one.
      Fix memory leak of the key.
      SMB signing updates - this gets NTLMSSP signing workin to the point where I
      Fix the interface of pull_ucs2_charcnv() to take a (char **) arg, not a (void **)
      Clean up error messages on cli pipe disconnection, including adding the message
      Restore previous behaviour to update on pdb_unix (auto-upgrade to new account)
      Merge from HEAD - restore previous behaviour of pdb_unix (auto upgrade to
      Merge the ntlm_auth updates (refactor, add --diagnostics) into Samba 3.0
      Winbind merges from HEAD:
      Make this match head.
      Only warn about short packets if we are already 'doing signing'.
      We never actually got an 'ads' auth module, so don't send the auth subsystem
      Cause the winbind auth module to call the ntdomain module if winbind is not
      Make this code actually compile (--with-ldapsam).
      Store the type of 'sec channel' that we establish to the DC.  If we are a
      NTSTATUS strings are much more use than raw numbers...
      Put this comment in a better place...
      Add some static and #ifdef DEVELOPER
      Expand this magic number into the #defines it is made up of.
      This code is no longer referenced - moved to the new libsmb/ldap.c
      Adjust comment to respect change to no longer use unixsam by default...
      Merge valgrind header usage from HEAD.
      We changed 'net' so change the torture tests that use it.
      Up the debug level for the second run of the test (client side)
      Fix segfault by getting this the right way around
      I've changed 'net rpc join', so I should doco it...
      Use fstrcpy/pstrcpy when that's what we really mean...
      Remove unused (#ifdef'ed) code.
      For NTLM2 (not yet even close to real implementation) we must use the
      Merge SMB signing, cli buffer clobber and NTLMSSP signing tweaks from HEAD.
      Header updates for smb signing merge
      Merge whitespace and const from HEAD
      Add const, static and fix a double free() (merge from HEAD).
      Merge from HEAD - save the type of channel used to contact the DC.
      The 'net' syntax has changed, so update the testsuite.
      Make it easier to select which domain to show the sid for.
      Use the -W domain option to select the SID to show
      Fix up bugs in the new 'store sec_channel type' code - we were always joining
      Merge from 3.0 - fix domain joins not to always join as BDC.
      Make our 'get DNS domain name' code try a bit harder - if gethostname() doesn't
      Bail out early when we fail on the rw_torture test.
      Merge from 3.0 - try harder to get our real DNS domain name, and send this
      Oops...
      Start merging mimir's trusted domain code from HEAD to 3.0.  (for HEAD trusting
      Merge comment with HEAD
      Make the mangleing code actually use a common prefix, not just the same
      Always initialise this, to assist callers doing loops over this call.
      Merge mimir's trusted domain code from HEAD -> 3.0, plus some memory
      Merge (HEAD->3.0) mbp's fixes to our charcnv code - don't use a staic buffer,
      Make pdb_ldap use a random factor in deciding how long we need to sleep.
      Add configure test for previous ldap modifications - we now check if the
      This is meant to be initialised to the size of the buffer.
      Remove ldapsam_search_one_user_by_uid from pdb_ldap.
      Merge idra's fix for pdb_tdb segfaults from HEAD to 3.0 - sombody changed
      - Merge a memory leak fix from HEAD
      Now that Volker fixed the real issues with ldapsam and adding null attributes
      Don't leak the session identifier string when we shut down a vuid.
      Try to avoid setting *SMBSERVER as a 'local name'.
      Fix this for both *SMBSERVER and *SMBSERV as per comments in loadparm.c.
      Try to keep existing behaviour for our printing code - never return
      Merge torture tests from HEAD - it looks like we had rather an incomplete
      Start testing a few more things out of smbtorture in the build farm.
      Add a check to ensure that the server returns the correct device type, not
      add test file for FDSESS
      This const isn't quite vaild C.
      Make this safe for -DDEVELOPER checks.
      Parinoia for compleatly broken SMB servers that don't send back the right
      Add some more info to the diags output.
      Fix up non-constant initialisers for Sun's CC.
      This define does not always seem to be present, so define it if need be.
      Make the variable name match the comment.
      Don't try to continue if initialisation fails (merge from HEAD)
      Merge case handling table changes from 3.0 to HEAD.
      Merge HEAD's winbind into 3.0.
      We don't have IDMAP in 3.0 yet.
      Merge the 'safe' parts of my StrnCpy patch - many of the users really wanted
      StrnCpy -> safe_strcpy() on a over-malloced struct.
      More fun with Sun CC needing constant initializers
      Patch by Metze to ensure that we always at least initialize our output string
      Patch by Vance Lankhaar <vlankhaar at linux.ca> to automaticly regenerate the
      Thanks to a reminder from vance - delete build_options.c from CVS, now
      This is really trying to be a StrnCpy (most names will overflow the 10 char
      When possible, store the IP address of the connecting client, not just the
      Add vfs_fake_perms to Samba 3.0
      Make sure that we don't compile pdb_ldap on systems with ldap.h, but without
      Irix CC reminds us that this is non-standard.
      Merge auth changes from HEAD:
      Merge from HEAD - always initailise this to zero - helps callers in loops.
      Use the kerberos error from ads_kinit_password() in the return value from
      Revert patch - we need to try the NTLMSSP code below...
      This function is a duplicate.
      Based on a patch by Alex Deiter <tiamat at komi.mts.ru>, make sure that we convert
      After a quick run with the 'weird' charset, squash a few bugs in our new
      Remove the unpopular pdb_unix, which has served it's time well.
      Merge compile and other fixes from 3.0 to HEAD.
      Merge compile warning fixes from 3.0
      Merge memory leak fixes in our trusted domain list from 3.0 to HEAD
      inet_pton isn't portable, so use interpret_addr2.
      A new pdb_ldap!
      Guenther Deschner <gd at suse.de> notes that I missed out setting the default
      The RID must be 'SET', not 'DEFAULT' or we won't set it into LDAP, and try
      The caller must always set the RID on the SAM_ACCOUNT, so don't try and guess
      We don't use 'non unix account range' any more
      In HEAD, idra removed _nua and renamed it to 'idmap uid'
      Add cast for compiler
      Use current 3.0 paramater names
      Remove extra file
      Fix for format string warning from vance
      Use a common function to create the SAM_ACCOUNT being used to add accounts
      Merge 3.0's change to how we add users onto HEAD, including a few other bits
      Merge Samba 3.0 pdb_ldap from 3.0 into HEAD, so as to allow idra to continue
      Some passdb backends really don't like having no primary group - so always
      Sun CC requires constant initialisers, so use a static here.
      Get pam_smbpass to compile again (it probably won't link or run, but at least
      pam_smbpass will need at least IDMAP.
      Fix for AIX - you can't qualify a return type as const, when it's not a
      Trailing , is non-standard (warning from IRIX)
      Try to fix IRIX build - add quotes and never call libns_winbind by name - we
      Merge from HEAD - the usual popt-needs-static for Sun CC.
      Turn down some DEBUG()s and remove some duplicate code spotted by dfenwick.
      Fix use of uninitialised value in TCONDEV test - found by sun1 on the build farm
      Add a comment about the use of string functions in the modules code, and
      configure.in updates:
      Fix up the setting up of the build_farm smb.conf from the templates in their
      Add doco to our SMB signing code.
      Patch from Ken Cross to allow an ADS domain join with a username of the form
      Add some more tests to the ntlm_auth diagnositics package.
      Allow the NTLMv2 functions to spit out both possible varients on the session
      Add some comments.
      We also get back the LM session key on pure 'NTLM' logins.
      Domain Controller -> Domain Member Server.
      Set our 'global sam name' in one place.  For domain controllers, this is
      SMB Signing with NTLMv2 works!
      Fix the spinning bug for 'net rpc user' as well - there are more errors in
      Always initialise this - it helps callers who use this in a loop...
      When checking if a SID is in a domain, make sure that indeed the user RID is
      Elsewhere, we use a #define for this environment variable name, so do the
      Make sure we always have some client data, not just the hash.  An NTLMv2 or
      Fix comment - we now have 5 types of error...
      Finally get NTLMv2 working on the client!
      Cleanups.  My NTLMv2 changes also changed the preference from using an implicit
      Makefile changes to allow new NTLMv2 patch to work.
      Using /dev/urandom for determining an ldap server backoff is a waste of system
      As discussed on samba-technical - move to 'primaryGroupSid' insted of
      Fix compile.
      Make it possible to actually use --user-SID and --group-SID on a standard command line.
      Give up on the idea of avoiding lp_load() in ntlm_auth....
      Fix up a bit of my sloppy C.
      Fix up the build-farm testsuite again - I forgot to move some files into the
      Try to fix up some code in pdb_smbpasswd that assumed we still had a 'uid'.
      Fix non-constant initialiser for Sun CC.
      Restore a number of fixes that idra removed when he merged his
      David Lee <t.d.lee at durham.ac.uk> provides some corrections to the comments
      Well spotted typo by Marco Berger <MARCOB at voelcker.com>
      Get 'add user script' working again for Samba 3.0.
      Add samstrict_dc from metze (been sitting in HEAD for way to long waiting for
      Update the doco on 'restrict anonymous' (note that 'guest ok' kills off the
      No matter how special this session key is, it's not worth a level 0.
      Don't assume that the SAM knows the unix home directory - look it up by
      Try to fix memory leaks found by valgrind in pdb_ldap code.
      Rework our smb signing code again, this factors out some of the common
      Make sure that we use schannel (if configured) when checking for a valid
      Enforce 'client plaintext auth', 'client lanman auth' and 'client ntlmv2 auth'.
      Fix some memory leaks and extra cache startups/shutdowns from the trusted
      This patch modifies 'net rpc vampire' to add new and existing users to both
      This patch works towards to goal of common code shared between idmap_ldap
      Always initialize.
      This patch fixes some issues with idmap_tdb as raised by bug #181
      This removes the StrCaseCmp() stuff from 'net idmap' and 'net
      (fixing bug in my last commit)
      Fix pdb_ldap segfaults, and wrong default values for ldapsam_compat.
      Patch to move functions directly from pdb_ldap.c into lib/smbldap.c
      Make smbpasswd use the higher log level for the second run - this should
      Grr, the order of these arguments matters
      This patch takes the work the jerry did for beta2, and generalises it:
      Missed this in the previous patch - we now have a seperate idea of the
      This patch cleans up some of our ldap code, for better behaviour:
      Update WHATSNEW with the further LDAP schema changes in previous commit.
      Don't allow RIDs (in our domain) below  1000 (or algorithmic rid base) to be
      Clear up the difference between 'smb signing' and 'sign&seal' - which has to
      Allow modification of an existing entry.
      PAM should operate on the Unix username, not the NT username (which might not
      Fixes to our LDAP/vampire codepaths:
      Add some debug statments to our vampire code - try to make it easier to track
      Fix comment
      This parameter is unused.
      This changes our Unix primary GID behaviour back to what most people expect:
      Fix ldapsam_getsampwsid to correctly only say 'no such user' when indeed there
      Jeremy requested that I get my NTLMSSP patch into CVS.  He didn't request
      Fix SMB signing when using NTLMSSP...
      Fix compile error noticed by Ken Cross, use the utility function instead
      SPNEGO SMB signing is now fixed for NTLMSSP, with kerberos to follow shortly.
      Fix up our auth_pipe code to always cope with fragmented datagrams,
      In the presense of RPC fragments, schannel is not strictly request/reply,
      Fix StrCaseCmp() to avoid calling smb_panic() on invalid multibyte strings.
      Schannel, once setup, may be used on *ANY* TCP/IP connection until the
      Some small fixes to our charset conversion code:
      Use push_ucs2_allocate(), rather than convert_string_allocate() directly.
      When removing an 'unused' function, it helps to remove the 'unused' callers...
      If we strupper_m after the alpha_strcpy() we know that it is less likaly
      Try again to fix up 'session request' name exchange.  This time we actualy
      Allow the stat cache to better handle invalid multibyte strings, by using
      Use the specified workgroup in 'net ads'.  (Defaults to lp_workgroup()).
      the testsuite lib needs dummyroot too.
      Fix comment
      Fix comment
      As described in http://davenport.sourceforge.net/ntlm.html add NTLM2
      Change Samba to always use extended security for it's guest logins, (ie,
      Win2k never returns 'no such user' here, so when we do it, the clients freak
      Break up 'cli_full_connection' to allow for the session setups to be done
      - Fix the kerberos downgrade problem:
      - Make 'net' use a single funciton for setting the 'use machine account' code.
      We now know a lot more about SMB signing, and this comment no longer applies
      Start to put some real 'meat' into the ntlm_auth docs.
      Remove duplicate function (now in rpc_parse/parse_prs.c) and fix a RPC debug
      Match Samba 2.2, and make ACB_NORMAL the default ACB value.
      Match Samba 2.2, and make ACB_NORMAL the default ACB value.
      Add newline to debug message
      Remove compleatly wrong comments.  (There were correct, 2 years ago...)
      I agree with vl's #if 0 here, and am not quite sure what I was
      Merge from 3.0:
      Changes all over the shop, but all towards:
      (merge from 3.0)
      Add support for variable-length session keys in our client code.
      Add server-side support for variable-length session keys (as used by
      Patch by emil at disksites.com <Emil Rasamat> to ensure we always always
      Merge from 3.0:
      (Merge from 3.0)
      Do not add NTLM2 to the NTLMSSP flags unconditionally - allow the
      Add a comment, and a useful debug message.
      Merge from 3.0:
      Match Win2k and return 'invalid parameter' for creating of a new account with
      My first stab at Samba4 IDL!
      Without 'non unix accounts' we can't test security=domain on the build farm.
      Picked up by the build farm - despite all my efforts, security=server was
      Merge from 3.0:
      Thanks to Serassio Guido for noticing issues in our Squid NTLMSSP
      (merge from 3.0)
      Fix bug 916 - do not perform a + -> space substitution for squid URL encoded
      (merge from 3.0)
      ldap rebind sleep -> ldap replication sleep
      (merge from 3.0)
      Based on patch by Petri Asikainen <paca at sci.fi> fix bug #387 and #330.
      Show the error message for failure to set the ldap password.
      Check the return value of string_to_sid in a few more places.  (But
      This patch corrects some errors in the NTLMSSP implementation, that
      Shutting down the connection closes outstanding sessions, so we don't need
      Add the alignment required before all 2-byte quantities in NDR.  Allows us
      Refactor our authentication and authentication testing code.
      Move our basic password checking code from inside the authentication
      Remove testing hack
      Make the name of the NTLMSSP client more consistant before we lock it in stone.
      Try to gain a bit more consistancy in the output of usernames from ntlm_auth:
      Get the DOMAIN\username around the right way (I had username\domain...)
      auth/auth_util.c:
      Jerry rightly complained that we can't assume that the first domain is
      Forgot to commit this for the 'get our primary domain' change.
      Changes to our PAM code to cope with the fact that we can't handle some
      JHT came up with a nasty (broken) torture case in preparing examples for
      Having no members of a group is a perfectly valid (if unusual) situation.
      Under certain error conditions (a talloc() failure above) this would cause
      Match Win2k, and return NT_STATUS_INVALID_PARAMETER
      There is not a particularly good excuse for complaining to the *client* that
      Even if the 'device type' is always an ascii string, use push_string to get
      Automaticly initialise the signing engine, if we have a session key.
      Make it clear that we cannot sign if we don't have a session key.
      Add a utilty function for converting a sid to a DN.
      Make arbitary binary data unsigned char.
      We can't possilby get 'ok' here, as the if statement above just checked for it.
      I'm not quite sure what happened here - but replace the ads_sid_to_dn
      Fix for bug 707, getent group for huge ads groups (>1500 members)
      rpc_client/cli_lsarpc.c:
      Change (unused) structure parameter for cli_ds_enum_domain_trusts() cleanup.
      There is some memory corruption hidden somewhere in our winbind code.  If I
      Add const.
      Change our Domain controller lookup routines to more carefully seperate
      Correctly handle per-pipe NTLMSSP inside a NULL session.  Previously we
      Always call the auto-init funciton - this avoids tdb segfaulting under
      Show the sid type in name->sid translatons in a way that can be easily
      Grumble... grumble... fix the build...
      Try to keep vl happy - shorten some of these lines.
      shorten some more lines.
      Don't free the encrypted_session_key early - that causes the subsequent
      Fix more cases to ensure that as a server, we don't complain to the client
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      rpc_client/cli_lsarpc.c:
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      Ensure that for wbinfo --set-auth-user, we actually use the domain.
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      Merge winbind from Samba 3.0 onto HEAD.
      (merge from 3.0)
      GUID is struct uuid in HEAD.
      Merge NTLMSSP fixes from 3.0 to HEAD.
      merge torture changes from Samba 3.0 -> HEAD
      Patch by Stefan Metzmacher <metze at metzemix.de>:
      Fix segfualt caused by incorrect configuration.  If lp_realm() was not set,
      (merge from 3.0)
      Don't duplicate pulling the 'IPC' username from secrets.tdb, instead
      Machines are people too!
      The correct test for 'is our primary domain' is domain->primary
      Move more of winbind to use 'find_our_domain()' rather than the dangerous
      Make it clearer that the domain here is the domain of the user for
      In tdb_allocate(), we would create a new record by writing a local variable
      This merges in my 'always use ADS' patch.  Tested on a mix of NT and ADS
      use SAFE_FREE(), not free().
      We might not have the 'samba' directory in the samba_3_0 build.
      Add a new type of name lookup 'ads'.  This seperates this from normal
      Romve debugging assertions (oops...)
      First stab at cracklib support (password quality checking) in Samba 3.0
      On systems without a working cracklib, ensure we don't include the header
      Finish adding cracklib support - this adds the configure test to enable
      Remove duplicate comment.
      Fix for debian Bug#225328 by LaMont Jones <lamont at debian.org>, where
      (merge from 3.0)
      (merge from 3.0)
      A Samba DC is nothing special these days - so every domain controller
      (merge from 3.0)
      Fix removal of attributes in LDAP - we would not actually remove the old
      If we are providing strndup(), ensure we provide a prototype too.
      Fix the initialisation vectors for NTLM2, so that they at least make sense,
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      Patch by Luca Bolcioni <Luca.Bolcioni at yacme.com>.  Ensure we always
      (merge from 3.0)
      Add a few more NTSTATUS <=> PAM error mappings.
      This adds client-side support for the unicode/SAMR password change scheme.
      (merge from 3.0)
      Revise our server-side password change code to cope with the various
      (merge from 3.0)
      Clarify comment on set_effective_uid()
      (merge from 3.0)
      If we are setting the NT or LM password to NULL, remove the attribute
      (merge from 3.0)
      Merge the 'use cracklib' parameter from HEAD back to 3.0
      Always at least try to compile in cracklib support.
      (merge from 3.0)
      This would appear to restore smbtorture to be able to use the syntax
      This should be the correct fix for the lack of a prototype for
      (merge from 3.0)
      Fix const warning
      I should have done this years ago...
      Bug found by gd - the new range-reterival code did still had 'member'
      Make get_dc_list static - we only ask for a sorted list externally.
      Remove unused utility function.
      Make this table static const.
      Another static function.
      Remove more unused functions - this time parts of the 'password cache'.
      Remove more unused portions of the 'password cache'.
      Samba hasn't used this function for ages - it's now handled deep in the
      Make more functions static, and remove duplication in the use of functions
      Add some help for 'net rpc password'.
      Make it possible to 'net rpc samdump' of any domain you are currently joined
      More 'static' work.
      Add static, and assert that we will never overflow the static fstring
      When we set a domain sid, force get_global_sam_sid() to do it's work again.
      nsswitch/winbindd_util.c:
      Add more static...
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      (merge from 3.0)
      Actually remove this (now empty) file from the repository.
      Found by Fabien Chevalier <fabien.chevalier at supelec.fr> and
      (merge from 3.0)
      I *hate* global variables...
      (merge from 3.0)
      Fix bug in previous global_sam_sid() commit.  I broke the 'read from
      (merge from 3.0)
      JRA's recent strstr_m work really badly broke our string_sub code.
      Given how core this code is, I figure it should have it's own testsuite.
      Merge fixes and tests for jra's broken strstr_m() function from 3.0
      Commit to HEAD the updates to smb signing code that I was propsing for 3.0.
      Given how often a panic has to do with malloc() problems, don't tempt
      As I raised (without objection) on the mailing list a while back, this
      Ensure we correctly set cli->nt_pipe_fnum on failure to correctly open the
      Merge from HEAD the SMB signing patch that I developed a couple of weeks
      Make it clearer that this error refers to the peer, as this code is in both
      Based on the detective work of Jianliang Lu <j.lu at tiesse.com>, allow yet
      Add a few comments explaining KEY_EXCH
      Revert bogus part of smb signing commit - when Win2k supports singing/SPNEGO,
      Let the comment match the function...
      Fix most of bug #169.
      r21: Ensure 'net' follows the behaviour of all other samba client tools,
      r49: Support SMB signing on connections using only the
      r69: Global rename of 'nt_session_key' -> 'user_session_key'.  The session key could
      r84: Implement --required-membership-of=, an ntlm_auth option that restricts
      r85: Update the winbind interface version, as I just extended the struct.
      r86: This function was moved to lib/nterr.h
      r104: Fix ntlm_auth by adding the new strhex_to_data_blob() call.
      r148: Ensure we do not dereference a null pointer when we return the user
      r171: Continue the 'rename nt_session_key' work.  This attempts to rename
      r175: Move this comment to the right place...
      r176: Improve our fallback code for password changes - this would be better
      r177: Split ntlm_auth --diagnostics into a seperate file, so as not to clutter
      r188: Add a new 'helper protocol' to ntlm_auth.
      r191: Only send the ntlm_auth 'ntlm-server-1' helper client a '.' after the
      r201: Fix bugs in the --helper-protocol=ntlm-server-1 implementation.
      r240: I'm pretty happy with the 'ntlm-server-1' helper protocol now, and as
      r780: Fix segfault in ntlm_auth --diagnostics
      r936: Fix a rather weird error that crippled my site, when we upgraded to
      r1121: Fix memory leak in the trans2 signing code.
      r1122: As spotted by lha at stacken.kth.se we don't actually use this variable any more.
      r1124: ntlm_auth memory leak fixes by James Wilkinson - jwilk at alumni.cse.ucsc.edu
      r1125: Remove bougus comments. (The real fix was to the sealed pipe padding)
      r1126: Allow more flexible GSS-SPENGO client and server operation.  The
      r1127: Finding trusted domains is not so important as to require a DEBUG(1).
      r1128: The end-of-file is not the end of the world, so don't make a load DEBUG() about it.
      r1428: Remove *completly bogus* memset.  (No doubt my bug, too...).
      r1487: Remove unused parameter for the client-side signing functions.
      r1492: Rework our random number generation system.
      r1581: 'NULL' NTLMSSP is both a pain to get right, and compleatly and utterly
      r1582: On failure, print the length of the right variable.
      r1583: Patch by Fabien Chevalier <fabien.chevalier at supelec.fr>
      r1612: Fix bug #1571 found by Guenter Kukkukk <guenter.kukkukk at kukkukk.com>
      r2137: This is a patch I've been running at Hawker for a while.
      r2147: Fix utility name in error message (pre-emptivly merged to trunk ;-)
      r2157: This parameter in loadparm appears compleatly unused.
      r2755: Fix NTLMv2 for use with pam_winbind, the plaintext ntlm_auth modes,
      r2761: Print the decrypted, not encrypted key.
      r2762: Remove silly conversion to and from UTF8 on the winbind pipe.  Fix the
      r2779: Some fixes to pam_winbind.c.:
      r2865: Add static and remove unused functions that only cload the blame-game
      r2868: Well, I'm not quite sure what I'm doing back in Samba 3.0, but anyway...
      r3616: Merge for 3.0.8.
      r4337: Produce a slightly different error message is lanman authentication is
      r4976: Try to scare people off from trying to write authentication modules
      r5455: Remove bogus DEBUG messages (dump for a failure to parse NTLMSSP,
      r5536: Avoid intermediate copy of NT and LM responses in NETLOGON client.
      r8912: Samba 3.0 was failing from a Vista client, because it was using 'raw'
      r8913: Fix memory leak in -r 8912: Free the right thing, rather than blob1 'twice'.
      r15492: Without this patch, the LDAP client libs will call abort() in
      r17005: Add a new helper mode to ntlm_auth: ntlm-change-password-1
      r17007: Increment winbind protocol version number.
      r17216: From Kai Blin <kai.blin at gmail.com>:
      r17487: Allocate some OID space for Samba4, so we don't trip on each other.
      r20402: Fix spelling: samba bug #4292 debian #402392
      r20403: Cleaning out my Samba 3.0 tree:
      r20996: Build fix from Kai Blin
      r22020: Make it more clear that both the vuser struct and it's contents are
      r22022: - Clarify the comments
      r22023: I don't like this cache, but I think Jeremy is right, the consequences
      r22024: Don't leak, actually use the provided memory context...
      r22026: Missed in my last commit, another case where we need to copy, not reference.
      r22071: Make the error message for incorrect use of '-c' show the parameter as used.
      r25049: Set new, more secure defaults for Samba 3.2.
      r443: Update Samba4 to the auth and NTLMSSP code from Samba3.
      r448: Fix 'auth' in Samba4, by making 'auth methods' a normal smb.conf
      r451: More NTLMSSP work.
      r607: When our code is looking for an 'empty' data blob
      r610:  - Merge the Samba3 'ntlm_auth --diagnostics' testsuite to Samba4.
      r611: Fix breakage from my last commit:
      r613: Fix the RPC-SAMR torture test, for my session_key changes.
      r614: Clean out the POSIX assumptions from the Samba4 auth subsystem.
      r619: Remove more code that is no longer called.
      r620: Remove more ununsed code.
      r683: Remove the trailing ; from this macro, so it can be used in an 'if' expression.
      r684: Note the fact that NTLMv2 provides a weath of futher testcases...
      r685: The SAM is dead!  Long live the new SAM!  ;-)
      r707: Chainsaw work - SAM_ACCOUNT can die, along with passdb
      r708: Clean up copyright headers, to reflect code that has come and gone
      r715: Finish the ldb conversion for the auth_sam module.
      r719: Follow the trend - remove more unused functions.
      r743: Start on a NETLOGON server in Samba4.
      r745: Move netr_ServerPasswordSet up with the other secure channel
      r751: Fix debug message to print the right variable.
      r752: Remove debugging hack (make sure the cleanup test account after we
      r754: Implement the SetPassword operation on the netlogon pipe.
      r816:  - Make use of tridge's new samdb_result_sid_prefix() helper function.
      r831: These functions duplicate the push/pull charcnv interfaces that we use
      r874: This patch is a pile of work on NTLMSSP:
      r877: This attempt at IDL was accidently included in the pervious commit.
      r892: Actually add the NTLMSSP self-check torture code this time...
      r929: Remove more unused code from util_sid.c (the old-style sid code is
      r1009: Make all users of NT and LM passwords use the samr_Password structure.
      r1019: Push the auth subsystem away from using typedef, and over to the 'all
      r1020: Add an (untested, until the other end is hooked in) method for
      r1021: Because auth_serversupplied_info is not reference counted, this may
      r1023: Prepare the auth subsystem interfaces for netlogon SamLogon to use.
      r1024: Use samr_Password for the machine password here - this ensures we can
      r1025: Rename (across the samr and netlogon pipes, so far)
      r1027: More rename:
      r1028: More consistancy fixes, which should also fix the build.
      r1031: Move more code dealing with passwords to struct samr_Password.
      r1058: The start of work on the SamLogon call for NETLOGON.
      r1061: The start of the SamLogon call for the NETLOGON pipe.
      r1063: userdom_struct dies!
      r1064: Remove the unused userdom_struct from the user_context struct
      r1080: Make sure to initialise all the returned elements in the SamLogon
      r1123: Make all lp_ string functions return 'const char *'.
      r1129: Remove unused function.
      r1142: I think this should fix the interactive logins for tridge - don't take
      r1161: Include a few more self-check NTLMSSP examples.
      r1163: Add const.
      r1169: Some more updates to the NTLMSSP NTLM2 code:
      r1170: Remove bogus part of previous commit - session keys, even in NTLMSSP
      r1173: A quick little test to show that we cannot bind twice to a single endpoint.
      r1186: Clarify why this is a 'bogus' negitive test.  If we pass it, we may
      r1187: * Remove testing hack (actually check signatures on NTLM2).
      r1189: Now that we use a common 'base' return structure for the SamLogon
      r1196: Remove unused pstring/fstring functions.
      r1197: Fix my build breakage, variables at the top of a block only...
      r1198: Merge the Samba 3.0 ntlm_auth, including the kerberos and SPENGO parts.
      r1199: Make talloc_asprintf_append() work on a NULL source string as if it were
      r1200: Add 'gensec', our generic security layer.
      r1250: We no longer use these #defines
      r1292: Add const to the subsystem/module registration code.
      r1293: Indent
      r1294: A nice, large, commit...
      r1305: Grrr, fix my build breakage...
      r1352: Add a 'peek' function to our ASN1 code, so we can safely perform the
      r1353: Fix compile with new ASN1 peek code.
      r1354: Make it clear that the first gensec_update takes a NULL data_blob.
      r1355: Add const (I missed this when I changed the function prototype earlier)
      r1356: Fix logic bugs in ntlm_auth.
      r1357: Work on GENSEC:
      r1358: Re-indent the SPENGO implementation, and work on the basis of a
      r1372: Remove the 'default' case from the SPENGO state machine, and fix up
      r1418: Merge Samba 3.0's recent kerberos changes into Samba4.  None of this
      r1422: StrnCaseCmp now needs to be non-static.
      r1423: Make sure to destory the mem_ctx.
      r1426: Fix some of my silly compile errors...
      r1434: Merge this function in from Samba 3.0, but use a mem_ctx rather than
      r1435: talloc_steal is very useful - add a function to do it with a DATA_BLOB
      r1436: Move GENSEC across to config.mk
      r1437: Intermediate commit of krb5 for GENSEC.
      r1438: Record the principal name we are sent in the SPENGO mechListMIC in a
      r1439: Once we are authenticated, always return NT_STATUS_OK. (Makes SPENGO
      r1440: GENSEC improvements:
      r1441: Indentation and comment fixes.
      r1442: I was going to rename kerberos.c -> kerberos_kinit.c, but didn't.
      r1443: More changes towards Kerberos in Samba4's GENSEC.
      r1445: Ensure get_auth_data_from_tkt doesn't get into proto.h
      r1446: Another funciton to avoid in proto.h
      r1447: Fix compile.
      r1448: Indent this so proto doesn't pick it up.
      r1452: Thanks to Volker for spotting that this code was certainly not tested...
      r1456: Rename this parameter to avoid shadowing a badly-named GTK global.
      r1457: Add the GSSAPI layer to our gensec_krb5 code.
      r1458: Add a new configure option, to make it possible to both find errors,
      r1460: Avoid a compile warning.
      r1461: ntlm_check.c is a server-side peice of code, so it belongs in AUTH.
      r1462: GENSEC Kerberos and SPENGO work:
      r1474: It is useful if talloc_strdup() behaves like strdup()
      r1475: More kerberos work
      r1476: Don't print messages about the CCACHE not being found - this is normal.
      r1498: (merge from 3.0)
      r1521: Updates to our SMB signing code.
      r1522: Oops - I forgot this file in the prvevious commit.
      r1604: Samba4 avoids memcpy() as much as possible - we don't need to make a copy here.
      r1605: GENSEC krb5 updates - fix a valgrind found uninitialised variable, and
      r1685: Add the ability to lookup RPC auth types for the RPC-MGMT torture test.
      r1686: Don't use a void* for the context inside the SMB signing code.
      r1687: Fix bogus requirement for SMB signing on guest connections.
      r1723: Make sure we bail out on error in reading a OID.
      r1724: Add a new function to return the list of available OIDs.
      r1725: Remove a silly 'utility' function.
      r1726: Fix up the comments and indenting.
      r1727: SPNEGO session setup replies need to include the blob, even on error
      r1729: Make the SMB signing code more generic (to share more between client and servers).
      r1730: We cannot dereference c->tree here, as there is not a tree yet.
      r1731: Add server-side SPNEGO support to Samba (disabled, until SMB signing
      r1735: Clean up SMB signing - we don't have more than one 'real' way to sign
      r1745: More work on cleaning up SMB signing.
      r1746: Remove more cruft from the SMB signing code.
      r1752: Fix compile bugs on C (rather than C++) tolerant compilers.
      r1762: Ensure that a user (as opposed to guest) cannot login without SPNEGO,
      r1768: Add some debugs to assist in SMB signing debugging.
      r1769: Add a new torture test to check vuid properties, and SPNEGO/non-SPNEGO games.
      r1795: Fix the multiple session setup torture tests.
      r1796: Enable server-side SPNEGO, now that I have fixed the server-side SMB
      r1990: Fix breakage caused by the recent talloc changes.  (Failure to process
      r1991: After finding a talloc inconsistancy is a very good time to smb_panic(),
      r1992: Make the NTLMSSP torture test show more detail, and return failure etc.
      r1993: Allow WinXP domain logon to progress a bit further (it seems broken for me).
      r2035: Fix spelling.
      r2041: Fix NTLMSSP RPC sealing, client -> win2k3 server.
      r2047: Warn on 'declaration after statement' (breaks non-gcc).
      r2053: All RPC sessions 'want' a session key.  Of course, the key they
      r2054: Fix compile warnings/build failures on non-gcc.
      r2055: Add PRINTF_ATTRIBUTE to many more parts of the code, and a new
      r2056: Allow the compiler to check this format string.
      r2062: Fix a couple more of the printf warnings (real bugs).
      r2063: Ensure the first argument to a printf() like function (talloc_init()
      r2096: Enable use of NTLM2 for connections that do not got on to be NTLMSSP
      r2098: The first 8 bytes of this sig is not used in the 'is it correct' calculation.
      r2099: Get rid of another private ARCFOUR implementation from the codebase.
      r2119: Noticed by jra:
      r2220: Updates to the NETLOGON torture test.  This copes with 'long'
      r2281: Add a few comments.
      r2282: Remove one more magic constant from the source, replace with sizeof().
      r2283: Change from tridge (in his ntlm2 patch).
      r2284: Thanks to some great detective work by tridge, NTLM2 signing now works.
      r2285: Remove more static data, fix spelling in a comment.
      r2286: Fixes towards krb5 logins into Samba's CIFS server.
      r2287: Add static.
      r2288: Remove the claim/yield connection code - this will need to be redone
      r2290: Fix 'lsakey' for the server-side, it is static for
      r2307: Fix the use of 'raw' NTLMSSP to hosts that support extended security,
      r2313: Make these attributes case insensitive in the default provision.ldif
      r2504: Add printf attribute, for format argument checking.
      r2505: Remove unused function.  If/when we implement plaintext authenticaton
      r2506: Add more printf attributes for format checking.
      r2507: Allow a case-insensitive lookup when converting strings into NTSTATUS
      r2512: Remove unused stub functions.
      r2513: Avoid strupper/strlower when you can.  This developers module
      r2514: Remove unused funcions, and add static.
      r2515: Fixes from smbtorture - these session keys are not individually encrypted.
      r2534: Change NTLMSSP parsing to avoid a seperate str_chrnum() call - storing
      r2535: Make certain, that even if we have invalid ASN.1 here, and the caller does not check the return value, that we don't return uninitialised memory here.
      r2536: This is a classic case for the use of our new talloc code, and
      r2537: Add static and use strlen_m instead of str_charnum().
      r2541: Add a TODO:  This is one place we can grab the remote netbios name.
      r2542: I really don't like the 'substitute' code, and I particularly don't
      r2543: Catch one more use of sub_get_remote_machine().
      r2544: (missed from the last commit)
      r2545: str_charnum -> strlen_m.
      r2546: Remove another strupper_m() that we don't need.
      r2547: Another place to use convert_string_talloc().
      r2550: survive our own BASE-NEGNOWAIT torture test.
      r2551: Add const.
      r2552: Character set conversion and string handling updates.
      r2611: Try to make Samba4's ntlm_auth more consistant with Samba 3.0.
      r2612: Ensure ntlm_auth always logs to stderr.
      r2859: It seems useful to allow the seal/unseal functions in gensec to pass
      r3073: Fix bug in the handling of null-terminated ASCII strings in RPC.
      r3074: Add in a new 'field present' flag samr.idl for the Account Flags
      r3075: Initialise (and check for intialisation) of the private pointer to
      r3076: Fix memory leak.
      r3077: Add initial handling of Account Flags in SAMR user info level 21 and 25.
      r3078: Allow more things to be set as command line options to provision.
      r3079: make code more pretty :-)
      r3080: Make the Samba4 SAMR server pass the new, nasty torture test (now that
      r3104: My Win2k3 server, with current updates, still sends the LM key for level 6.
      r3109: Give krbtgt and our machine account a random password in provision.
      r3110: Fix the krb5 client and server, so that it doesn't segfault.  There
      r3115: Bugfixes and extra debug in our kerberos verify code.
      r3128: Return the correct error code for a secrets/kerberos login, but
      r3170: Add winbind client support back into Samba4.  This is to allow
      r3175: Add winbind back into includes.h (spotted by tpot)
      r3185: Machines can login with krb5, so we need to allow them to map to a unix account.
      r3186: Use the properties of the new talloc() system to handle the auth
      r3187: This 'optional' part of the ASN.1 in SPNEGO is required by Samba3 (but
      r3190: When we don't have a PAC, do a lookup in the local ldb instead.
      r3358: Try to put all the basic struct dom_sid manipulation functions in one
      r3359: Add magic auto-initialisation hooks here, to match the rest of
      r3361: Allow Samba4 (I'm interested in ntlm_auth in particular) to use
      r3362: Change netlogon.idl so we can parse the 'info3' seperate from it's surroundings, and rename user_id -> rid, as it could be a user or group id.
      r3364: Add parameter to fix the compile.
      r3365: Fill in the user and primary group SIDs into the 'server info' before
      r3394: Give the user a clue why we are blasting them with the usage brick.
      r3519: Include time headers to fix the build.
      r3524: Remove unused variable.
      r3541: Add support (to be verified with the squid team) for the Squid 3.0
      r3542: Re-indent, and fix a use-after-free by doing the talloc_destroy just a
      r3553: Allow talloc_reference to take a NULL pointer for the "ptr" argument.
      r3554: Use the new talloc_reference changes to simply the conversion of
      r3555: Fix auth_winbind to work with the new auth_util conversion code.
      r3556: Remove --enable-krb5developer and --enable-gtkdeveloper, as the new
      r3557: Use a switch, not a series of if/else if statements.
      r3558: We don't seem to need these as [public] any more.
      r3565: Move PAC parsing into the session_info generation, and out of the
      r3570: Export the user's group list from ntlm_auth, via a new command 'UG'
      r3572: Thanks to tridge for his patience with my build breakage.
      r3609: Lets spew out a few less error messages for tridge, and hope to get
      r3612: This appears to be the 'offical' way to initialise this struct.
      r3651: Add a new configure option --with-eparserdir
      r3652: Fix malloc-history dependent failures in smbtorture.
      r3653: Move Interactive login tests up with the rest of the logon tests.
      r3654: Add static and fix indentation.
      r3655: As required by the new torture test, add the LM session key output
      r3657: More netlogon torture.  We now test both function calls (SamLogon and SamLogonWithFlags).
      r3676: Add a negitive test for NTLM2 session security (which should not
      r3677: Seperate the SamLogon tests from the main RPC-NETLOGON test into a
      r3678: Remove testing code accidentily commited.
      r3679: We now know a few more of the Netlogon negotiate flags.
      r3680: Move the multiple runs of this test into a loop.  Also check that no
      r3686: The results of some work on the NETLOGON pipe:
      r3687: Gaah - I forgot to add the new file for the RPC-SAMSYNC test...
      r3716: Improvements in the RPC-SAMSYNC tests:
      r3721: We cracked the NTLM2 puzzle long ago, and set the flags elsewhere.
      r3723: Now that timestring() always returns talloc'ed memory, we don't need
      r3724: Rename a number of structures, for better consistance between SAMR and
      r3725: The new RPC-SAMSYNC test, complete with SAMR comparisons.  This is
      r3804: Add more comparison tests in RPC-SAMSYNC.
      r3805: Fix the LSA portions of the RPC-SAMSYNC test - I was not using the LSA
      r3807: Cross-check the basic attributes for groups and aliases in RPC-SAMSYNC.
      r3808: Put these in the same order as the IDL, to make it easier to spot what's unimplemetned (tests of the group members)
      r3885: Add security descriptor comparison to our RPC-SAMSYNC test.  We now
      r3904: * Add new LSA calls to open trusted domains
      r3905: (oops, missing file: samsync.c)
      r3907: * Rename lsa_Name to lsa_String
      r3908: We know that this field is a flag of some kind, and matches the output on LSA.
      r3909: Fix cross-reference test for trusted domains.
      r3917: A few more LSA RPCs found in my wanderings (for trusted domains, these
      r3919: Add more info levels to the QueryTrustedDomainInfo structures, with
      r3921: Cross-test SIDs in RPC-SAMSYNC, fix the build.
      r3922: Add yet another NETLOGON RPC.  This is another varient of SamLogon,
      r4342: Fix a memory leak in init_globals().
      r4349: Start to fix the long-standing pain that --with-krb5 would be ignored if krb5-config was in the path.
      r4354: The ldb databases do not go in lib/private, but in private/ under PREFIX
      r4355: More work from the elves on Christmas eve:
      r4356: Allow anonymous connections to use NTLMSSP.  The silly bugs that
      r4357: Return a more sensible error code if a NULL (as opposed to the valid
      r4358: At metze's request, the Christmas elves have removed gensec_end in
      r4379: Merge more Kerberos related configure checks (by jra, gd and Lars
      r4384: Try again to fix compiling against a specified KRB5 library.
      r4385: Set the correct target service.
      r4386: Grr, fix copy-and-paste bug.
      r4400: Pass rootdse.ldif past the subst code.
      r4441: gensec_krb5 update:
      r4459: GENSEC refinements:
      r4460: Add a new GENSEC module: gensec_gssapi
      r4470: Try not to have GSSAPI built unless we detected krb5.  We should split
      r4494: Allow gensec_gssapi to use the SPNEGO mech provided by Heimdal (off by
      r4499: Almost make our Samba4 server pass the RPC-SAMLOGON torture test.
      r4500: Allow GENSEC modules to be disabled by setting a flag on their module
      r4504: Setting
      r4510: Some more tests for RPC-NETLOGON, checking the idea that we could
      r4530: Start adding a bit of Doxygen compatible documentation comments to GENSEC.
      r4531: Include the OID locally, as it seems to be hard to get the includes
      r4565: Make the order of the initialisation more sensible.
      r4566: Fix Samba4 to pass it's own RPC-SAMLOGON torture test.
      r4567: Fix the build for metze.
      r4590: Make RPC-SAMSYNC pass againt Win2k3.
      r4594: Add more testes to the standard 'passes against win2k3' script.
      r4603: Test creating local and global secrets over LSA.
      r4610: You can't join as a BDC and test against trusted domains.  This test
      r4614: Fix RPC-SAMLOGON, to use the workstation context (forgot to globally replace).
      r4635: Fix NTLMSSP to return NT_STATUS_OK when it has constructed the auth
      r4636: Per tridge's wish (and probably correct behaviour), don't key off a
      r4641: Push a few more details into the schannel ldb, and into the
      r4657: This really should be made a structure, so we can't get it wrong, but
      r4658: (grr, commited wrong file last time).
      r4659: Revert -r 4657 committed by mistake, until I review and test the
      r4660: Test what we should return for a secret that does not exist.
      r4667: Don't follow a NULL pointer for an idle event handler.
      r4671: Expand the RPC-LSA test to set secret values twice.
      r4673: Fix the IDL for the QuerySecret LSA call.
      r4674: Test SetSecret behaviour for local and global secrets, when setting
      r4675: Prevent global warming, and save tridge's sainity by short-cutting the
      r4678: Add some const to LDB.
      r4679: Remove the void* from samdb.  We now use structures without full
      r4680: Make more efficient use of memory in SAMR:
      r4681: Another entry for structs.h
      r4682: A LDB-based secrets implementation in Samba4.
      r4691: Make the DCE-RPC bind code compleatly generic to the number of passes
      r4692: Make the client SPNEGO code bail out in a couple more cases.
      r4693: Add another test (RPC-MULTIBIND) that should always pass.
      r4694: 'fix' the behaviour for setting only the old, but not the new secret.
      r4695: Leave less memory handing around on long-term TALLOC_CTX.
      r4698:  - Initial implementation of trusted domains in LSA.
      r4699: Move the test_EnumTrustDom() test into the test_CreateTrustedDomain
      r4703: Add support for EnumTrustDomain, and expand the testsuite.
      r4706: Fix the build, after I renamed these elements in the IDL.
      r4708: Comparing with LDAP, it is clear that these 'flags' are in fact the
      r4713: Add initial support for QueryTrustedDomainInfo on LSA.
      r4720: Reformat, rename, and convert to enums parts of the LSA IDL specification.
      r4721: Changes to libnet_passwd to take advantage of the new easier to call
      r4722: Start to add 'net join' to Samba4.
      r4762: Store the results of a 'net join' in the LDB.
      r4763: Join Samba4 to itself during the provision process.
      r4764: Add some more structs to keep the proto.h compile happy.
      r4766: Add another useful helper function: samdb_msg_set_value()
      r4768: Until I can prove it, we should not have these elements marked as
      r4774: It appears the SensitiveData contains the password history, as the
      r4776: Add more debugs to SamSync test.
      r4890: Try to cope with mechanism mismatch in the client speaks first version
      r4893: Move to using secrets.ldb for the Kerberos verify, instead of
      r4895: I missed this in my previous 'use secrets.ldb' commit.
      r4897: Unbreak the LDAP server.  Somehow the generic service structures
      r4914: Fill in the realm for the self-join.
      r4923: Avoid using krb5-config in the path if a krb5 prefix was already set.
      r5086: Fix list of binaries to install:
      r5088: Push some of the heimdal tests into a 'if we didn't have krb5-config' block.
      r5089: Fix indentation.
      r5090: Fix up the IDL for LogonGetDomainInfo in NETLOGON.
      r5091: The Kerberos secrets are queried by realm
      r5092: Add a bit more const - moving it further into the LDB layer.
      r5093: Make debugs less confusing when a 0 NTTIME is printed.
      r5330: Remove #include <sys/time.h> from includes.h.
      r5334: Bah, it's all to hard...
      r5667: Move schannel state into libcli/auth (as it belongs with schannel,
      r5668: Add tests to RPC-SAMLOGON to test for user at REALM style logins.  These
      r5783: Test renaming of accounts in the RPC-SAMR test, and add support into
      r5876: Add a test account for the duration of the samsync - to ensure we have
      r5877: It is not an error to have a zero-length secret, after decryption.
      r5878: Be clear which machine name (We have one worksation, and one BDC) we
      r5879: Rename SAMR_FIELD_WORKSTATION to SAMR_FIELD_WORKSTATIONS - it is a list.
      r5895: Remove old auth_domain code - to be replaced with entirely new implementation.
      r5898: Handle errors in the 'sync' name and IP address handling code.
      r5899: Fix spelling.
      r5900: Use flatname to specify the netbios domain name (matches what win2k3
      r5901: Add another option to the test script - the realm, which must match
      r5902: A rather large change...
      r5903: While I can't test IPv6, metze asked me to commit a matching change
      r5941: Commit this patch much earlier than I would normally prefer, but metze needs a working tree...
      r5942: A couple of small changes to fix things up with the new credentials
      r5983: Start support for being a domain member in Samba4.
      r5984: Add index and attributes to default ldif for secrets.ldb
      r5985: Actually adding auth_domain.c in -r 5983 would probably have been a
      r5988: Fix the -P option (use machine account credentials) to use the Samba4
      r5992: Rename schannel.c -> schannel_sign.c.  The rest of the schannel code
      r6010: Change the testing order, so we test all transports for each binding
      r6024: Some of the ordering constraints on the popt callbacks were getting
      r6025: Remove unused variables.  This code will be modified again for the new
      r6026: Update the kerberos keytab code to match Samba3 again.
      r6027: Add copyright, and add a useful debug message.
      r6028: A MAJOR update to intergrate the new credentails system fully with
      r6030: Missing from previous commit, a small header file to link
      r6032: Fix up SetServerPassword2 on NETLOGON for [bigendian].  Clearly nobody
      r6033: Patch from 'lifeless' to clarify behaviour with NULL pointers.
      r6078: Correctly fix the failures for NT1 (not SPNEGO) session setups in the
      r6079: Add inline documentation on the credentials context API.
      r6094: Work on the Kerberos code recently merged from Samba 3.0.  This fixes
      r6113: Move GENSEC and the kerberos code out of libcli/auth, and into
      r6270: Move the VUID handling to a IDR tree.  This should avoid O(n)
      r6271: Don't zero the cli_credentials structure - instead allow valgrind to
      r6272: For 'programmed' use of an anonymous account, we should use
      r6286: Add back metze's test of setting a trust password to ''.  I removed
      r6309: Remove this file it is empty and unreferenced.  (In preperation for
      r6310: Rename password.c to session.c, and remove the linked list of all
      r6312: Metze reminds me this header is no longer required.
      r6313: Much better handling of LogoffAndX when the vuid is invalid (ie, don't
      r6314: A more complete RAW-CONTEXT test.  This Samba4 currently fails, but it
      r6315: Allow sane session setup behaviour on SPNEGO regarding VUIDs.
      r6451: Ensure we correctly initialise the credentials structure in the schannel test.
      r6452: This particular credentials feature needs to be NULL by default.
      r6453: Move verbose errors for the schannel 'not in the DB, or DB corrupt' error cases.
      r6454: Start to migrate NTLMSSP away from it's own API to just use GENSEC.
      r6455: Remove wrapper functions, and ntlmssp_end (which is well handed by talloc() now).
      r6456: The RPC-SCHANNEL test is an important test that passes against Win2k3 (well, not SP1, but we are working on that detail).
      r6457: Simply the RPC server code for the choice of GENSEC mech - it's just
      r6458: Split up NTLMSSP into a new directory, and into seperate files for the
      r6460: Push the client credentials into NTLMSSP, allowing logins of the form
      r6462: Move the arcfour sbox state into it's own structure, and allocate it
      r6463: Move NTLM2 and NTLM (v1) specific variables into a union for DCE/RPC.
      r6464: Remove the last of the Samba3 NTLMSSP API.  This removes the rudundent
      r6465: Use talloc_zero for the gensec_ntlmssp_state structure, as the history
      r6467: keep the compiler quiet with another entry in structs.h
      r6468: Fix LOCAL-NTLMSSP test with new NTLMSSP structure.
      r6498: Add comments in line with those I already added to 3.0.
      r6522: I have no idea why this change was made, but it not only breaks
      r6523: Another string that isn't filled in.  I wonder why this is, but for
      r6524: Fix the error we print when the RPC-ECHO test fails.
      r6525: Remove incorrect comment.
      r6526: Rename this RPC fault.  Everybody else calls this ACCESS_DENIED, and
      r6534: Patch from lieschen to fix our vital user creation tools :-)
      r6544: Use common structures between SAMR, NETLGON and the Krb5 PAC.
      r6565: Cludge, cludge, cludge...
      r6573: Start on my project to implement an NT4 compatible BDC in Samba4.
      r6582: Remove the hack that metze needed because Samba4 didn't have a samdump
      r6598: Make it easy to point the test_echo.sh at remote servers, without
      r6603: More work on the samdump puzzle.  This implements a function pointer
      r6698: Our domain join code requires that the secureChannelType be set.  Type
      r6699: Windows clients seem to ask for CIFS/, ie in upper case, so match it.
      r6700: Upper case realms in kerberos-specific parts of the code, as this is
      r6701: Updates to our server-side ticket verification code, we now use the
      r6702: Revert -r 6699, as I think this is a win2k v win2k3 issue.
      r6711: Clarify that we are dealing with a salting principal in the kerberos
      r6714: We can only ask GENSEC questions if we are authenticated.
      r6727: One more step down the long march to the 'Kerberos domain join'.
      r6728: Microsoft relies very strongly on getting the OIDs it expects, so we
      r6729: Fix silly copy-paste bug spotted by metze.
      r6736: Revert metze's -r 6734, as metze and I made the same changes at the
      r6737: Explain these error returns a bit better.
      r6738: My version of the patch by metze that I just reverted (-r 6734).
      r6791: My early notes on the particular things I have discovered as I learn
      r6792: Allow a mech to fail on the first pass at the packet, and still fall
      r6793: Move auth_sam to use the dnsDomain rather than the
      r6796: Remove the gensec_gsskrb5 module, which had had all of it's special
      r6798: Valgrind pain is not something I look forward to - if we ever fall
      r6799: Remove a rudundent variable from the context structure - we can figure
      r6800: A big GENSEC update:
      r6801: It appears that krb5_make_principal, while convenient, is not portable.
      r6803: Try to bring in the correct GSSAPI headers for the krb5 mech.  This
      r6806: Try again to fix the build on various kerberos libs.
      r6811: Another attempt at better kerberos/gssapi headers.
      r6819: More notes on krb5 requirements
      r6879: Another attempt at including the 'right' kerberos headers on
      r6882: Put in configure tests and #ifdef to keep Samba building on older Heimdal.
      r6883: Move to what simo assures me is the 'correct' way to find the NetBIOS
      r6902: Turn the LDAP server on by default.  It is no worse than the others...
      r6927: Make it easier to program with the SamSync callback interface, perform
      r6928: Add support for printing trusted domain names, sids and passwords in
      r7043: Patch from Julien Kerihuel <j.kerihuel at openchange.org> to reenable
      r7203: Fill in the error message and fail if we can't open the secrets database.
      r7204: Also fall back to different password set methods on WRITE_FAULT, as
      r7218: Don't use an uninitialised variable in an error message.
      r7219: Don't allow 'binding' to be used uninitilaised.
      r7220: Fix comment
      r7221: Add the start of a KDC service (to be built on a 'libkdc' from a to be
      r7226: Forgot file to disable building the new kdc
      r7240: Don't call our fancy error message routines on a null context.
      r7241: The KDC almost links...
      r7257: Ensure the error message can never be uninitialised.
      r7258: Fix the final linking error with libkdc - we need to link libhdb as well.
      r7259: Move the recv handler out into a seperate function (suggestion from
      r7269: talloc_steal() is preferred where possible, as it can't fail and does
      r7270: A big revamp to the way we handle kerberos errors in Samba4.  We now
      r7285: It appears that MIT Kerberos does not have the log redirection
      r7291: Additional notes on what we require from a kerberos implementation.
      r7292: Fix up the build system support for derrell's sqlite3 ldb backend.
      r7293: Turn sqlite3 support off by default, use --with-sqlite3 to re-enable.
      r7304: Make the libkdc actually work:
      r7306: Use a consistant #define for detecting support for the Heimdal krb5
      r7367: Replace the list of what our internal heimdal can do with data from a
      r7378: Lowercase netbios name when forming the DNS name of the DC in the
      r7508: Fix memory leak of outgoing packets in the KDC.
      r7509: With the update to Heimdal 20050612 we no longer need krb5_freelog(),
      r7520: Fix memory leak in hdb-ldb.c
      r7521: Remove useless loops from SAMLOGON test, which speeds it up a lot.
      r7525: Unify lp_load(), load_interfaces and logging setup into popt().
      r7530: Simply calling convention of lp_load().
      r7531: Finally fix lp_load().  I had left hooks in place which restricted us
      r7637: Another useful Heimdal feature we need.
      r7651: Only convert SERVER requests to KRBTGT requests.
      r7673: With current Heimdal we don't need this (correct) fix.
      r7674: Fix the printf() attribute suggestion by correctly prototyping, then
      r7675: Use correct memory context for anonymous session setup auth context
      r7676: Make VUID and TID choice random, as this gives us protection against
      r7680: Move to using our own private enum for the principal type inside the
      r7681: This #define is unused.
      r7682: Move the properties of our heimdal build from heimdal_build/config.h
      r7683: The other file from the last commit.  And it's include/system/kerberos.h that I'm putting the #defines in...
      r7684: Add a test aimed at checking we have agreement between client and
      r7685: Simply the test for session key logic, so we pass against NT4.
      r7686: Check for a type of invalid account name.
      r7687: Some more tests that must be done only when krb5_config is absent.
      r7688: Fix the internal heimdal build - push one #define back to
      r7689: Add new file from previous commit (seperate file for session key test).
      r7690: Move the NT hash generation into the credentials system, rather than
      r7756: Don't segfault by trying to search for the NULL DN, if the wrong
      r7757: Add NTLMv2 support to the NT1 Session setup (ie, not SPNEGO/NTLMSSP)
      r7758: When not running on the build farm, print out the failed command line again.
      r7765: Thanks to Maurice Massar <massar at unix-ag.uni-kl.de> for spotting that
      r7827: Add in-memory keytab to Samba4, using the new MEMORY_WILDCARD keytab
      r7843: Use the new Heimdal gsskrb_acquire_creds API.  This has the right
      r7862: Updates to the Kerberos notes, based on recent changes and discoveries.
      r7935: auth_unix now uses crypt(), so depend on -lcrypt.
      r7965: Remove the GENSEC password callback structure members, as these are no
      r7966: We need a better way to do this, but enable the KDC by default, if we
      r7967: We don't have the ms_krb5 stuff any more.
      r7968: Pull the PAC from within GSSAPI, rather than only when using our own
      r7969: It seems reasonable that our tickets be marked renewable, in the
      r7970: This SMB signing code (merged from 3.0) turned out to be bogus.
      r7971: structs.h update
      r7978: A start again on PAC verification.  I have noticed that the kerberos
      r7979: Metze reminded me to try one more combination, and we can now verify
      r7980: Forgot to add kerberos_pac.c to this config.mk file.
      r7986: Fix the compile, thanks to HotaruT.
      r7988: Store the KVNO for the machine account, and set it up in the provision.
      r7989: Allow the use of hashed passwords in the kerberos client and server,
      r7990: An attempt at documenting the current state of cludges required to get
      r7991: I forgot to free the keyblock once we are done with it.
      r7993: Further work on the Krb5 PAC.
      r8000: It seems make proto is required, for reasons I can't explain.
      r8001: Also fill in the krbtgt checksum, and make sure to put the right
      r8013: Remember to add the header containing the prototype for the pac
      r8016: Get the keyblock arguments correct.  (the context struct changed, but
      r8108: Fix indentation, and remove a discard_const_p() that we don't need any more.
      r8109: Try to print out more helpful debug messages on DCERPC server-side
      r8110: More PAC work.  I still can't get WinXP to accept the PAC, but we are
      r8112: Remove extra headers, and add #ifdef to allow the 'not yet using
      r8161: Update Samba4 for the new Heimdal update.
      r8162: Revert my pad8 hack.
      r8181: Allow host/foo.realm/realm at REALM requests, assuming that the realm
      r8245: Add const.
      r8246: Don't try and set the element after the end off the array to NULL.
      r8248: Make these comments more accurate.
      r8249: Clarify (with a comment) why we are playing these games here.
      r8250: More PAC work.  We now sucessfully verify the KDC signature from my DC
      r8252: Steal metze's thunder, and prove that with a few small tweaks, we can
      r8511: This 'can't happen', but GCC gives warnings because it thinks it can.
      r8644: This is a more useful error than unsuccesful.
      r8650: Use the timestamps and a new objectguid module rather than placing
      r8660: Use templates for the initial provision of user and computer accounts.
      r8662: Revert change to CN=Cert Publishers, this group still needs to
      r8663: Since simo constructed the samdb module, he and tridge have worked on
      r8664: I got caught out not testing...
      r8666: The same fix as the last commit, I was caught out on a move from a
      r8667: Further simply the provision script, by removing the 'name' attribute.
      r8669: The objectguid module belongs in Samba's ldb module collection, not in
      r8670: Remove GUID code from SAMR, it is handled lower down now.  I notice
      r8674: With the rdn_name module, we don't need this duplication in the samdb
      r8677: The first part of the domain name may not be equal to the netbios domain name.
      r8699: removed invalid comment
      r8700: Propmted by tridge's need to do plaintext auth in ejs, rework the
      r8701: Fix up auth_developer for recent changes.
      r8706: My previous patch oversimplied the previous change to session setup -
      r8738: Test (using ejs!) the basic operation of the ldb modules.
      r8740: Extend the rdn_name module to handle adding the rdn as an attribute.  ie:
      r8741: Kill warnings about enums not fully enumerated, as we will never use
      r8744: Split 'net samdump' out into a separate file
      r8752: With all the infrustructure done, details like a SamSync migration
      r8771: Extend the SamSync code out to groups and aliases, as well as deleting.
      r8772: Include the ldap ejs test in the standard 'make test'
      r8775: More SamSync work.  This is really just mechanical...
      r8790: Finish the migration of aliases and privilages with SamSync, by adding
      r8791: (missing from previous commit)
      r8792: Clarify comments
      r8820: Push this common block of code into the caller.
      r8823: I don't know why I added this test, it appears bogus.
      r8824: Fix indentation, and don't send 'invalid' LM password.
      r8844: Actually, both types of provision wipe the DB.  But we do need a way
      r8846: Test yet more NTLMv2 combinations.
      r8847: Rework the Samba4 'net join' code.  I'm trying to get this closer to
      r8854: #if 0 out the right things this time.  (Sorry about the build breakage)
      r8855: Share this enum (describing the SamSync databases) between nbt and netlogon.
      r8901: Fix ntlm_auth segfault (invalid free()).  We have moved to talloc
      r8939: Do an open domain in the schannel SAMR test.  This should test some of
      r8952: Partial work commit to find the DN of the new machine account - we
      r8970: Add 'ADS' join support to Samba4.
      r8980: Make Samba4 honour account control flags (we were asking for a
      r8981: Add comments, fix typos (in attribute names) and check for errors in
      r8982: "name" is not the netbios name, but the RDN.  Return the correct
      r8983: The KVNO (Kerberos key version number) should be incremented with
      r8984: Use the correct cross-reference search in DRSUAPI, rather than making
      r8986: As far as I can tell, given the ldif I get from behind this, we have a
      r8998: More work on the RPC server code to avoid abusing the name attribute
      r8999: Use the timestamps module to ensure we update times.
      r9011: Remove more references to "name" as a netbios name, using the
      r9015: Fix access to BUILTIN again.
      r9016: More work to avoid abuse of the "name" attribute, this time on
      r9022: One more step in the game of whack-a-mole with the PAC.
      r9084: 'resign' the sample PAC for the validation of the signature algorithms.
      r9085: Missing structs.h entry.
      r9165: Fix inverted error check in untested code path.  (My untested code...)
      r9166: This checks more of auth subsystem in the PAC test.
      r9167: Further PAC parionia:  ensure the checksum fails if we modify it.
      r9217: Add 'make clean' hooks to the ans1 depedency generator.
      r9221: Try to merge Heimdal across from lorikeet-heimdal to samba4.
      r9233: Ensure that the output variable is initialised in this conversion from
      r9234: Ensure we always change the end of the PAC, no matter what it is.  Fix
      r9235: Remove attribute search we no longer reference.
      r9305: Use the check-var.m4 from roken to really, really detect h_errno correctly.
      r9396: ntlm_auth updates, including again support for the NTLMSSP client
      r9406: Add const.
      r9411: Ensure we don't send a challenge without first getting a negotiate in
      r9412: Simplfy this NTLM authentication code by requiring the caller to
      r9413: Bring Samba4 back up to date with lorikeet-heimdal.
      r9414: Fix failure to find own domain info due to recent ldb_dn upgrade - we
      r9415: Remove old kerberos code (including salt guessing code) that has only
      r9416: Cleanups inspired by jra's work to migrate Samba4's NTLMSSP code back
      r9417: Ask for the ASYNC_REPLIES feature, as will want that.
      r9418: SPNEGO fixes:
      r9419: Silly, silly, untested mistake...
      r9420: Fix the SPNEGO system again: Update the state position after
      r9421: Move arcfour code into it's own file, in lib/crypto.
      r9422: Include crypto.h header.
      r9490: Fix typo
      r9505: Work on GENSEC and the code that calls it, for tighter interface
      r9516: Try a full-on matrix test of all the combinations in DRSUAPI
      r9547: A pile more completeness testing for DsCrackNames.
      r9678: Remove unused variables.
      r9680: Update Heimdal to current lorikeet-heimdal (which was itself updated
      r9681: We don't need the full smb_krb5_context here, so just pass the krb5_context.
      r9693: Move the smb_krb5_context setup code to use the new pattern of
      r9696: Update prototypes for new name of short parsing function.
      r9701: Provide correct parameters.
      r9727: A simplier test I can aim at passing when I get the cracknames code done.
      r9728: A *major* update to the credentials system, to incorporate the
      r9731: Fix typo
      r9733: Test conversion from known sids in CrackNames.
      r9772: Make credentials callbacks more consistant with the abstraction
      r9778: Test for particular error returns, rather than just OK/not OK.
      r9859: Enable (blocking) KDC resolution with DNS.
      r9861: I need to convert this to table-driven, but anyway...
      r9877: Merge from lorikeet-heimdal, to try and fix build failures.
      r9878: This is getting a bit out of control, but a few more tests.
      r9927: Extend copyright for all the hard work I've done this year.
      r9928: ncName is a DN, and needs to use DN matching rules.
      r9929: Fix indentation
      r9930: Use a single samdb_base_dn() function rather than lots of silly
      r9931: Make use of new 'norealm' parsing functions rather than strchr(p '@').
      r9940: When guessing, don't make DEBUG(1,... errors.
      r9941: Update the CrackNames test, and provide a much improved server-side
      r9942: CN=Configuration is always under the database-wide base dn, so don't
      r10021: More kerberos notes.
      r10022: Merge tpot's fix for IRIX and AIX_rea build problems from lorikeet-heimdal
      r10035: This patch removes the need for the special case hack
      r10044: Microsoft has defined this bit:
      r10045: metze reminded me to use the correct enum entry, rather than 0 for the
      r10066: This is the second in my patches to work on Samba4's kerberos support,
      r10072: Fix mismerge weridness in error handling.
      r10145: Allow a variable length signature, so we can support signing with
      r10146: Clarify which test is failing in error messages.
      r10148: Use samdb_base_dn() to find the local domain.
      r10149: Update Samba4 to current lorikeet-heimdal.
      r10153: This patch adds a new parameter to gensec_sig_size(), the size of the
      r10155: Add more notes on required gsskrb5 functions.
      r10171: This seems to work for encoding/decoding a PAC at the buffers only
      r10174: This patch implements generic PAC verification, without assumptions
      r10286: This patch is ugly and disgusting, but for now it works better than the other
      r10291: The patch optionally (off by default, not available in all cases) allows
      r10292: This is set below from lp_server_role().
      r10314: Apply the controvertial 'server role =' patch after discussion on the list:
      r10337: This grubby little hack is the implementation of a concept discussed
      r10345: Add more add-hock tests.
      r10364: Turn gensec:gssapi on by default, except for a login of the form
      r10372: Having gone to all the effort to uppercase the realm, actually set the
      r10373: Fix segfault in LookupSids.
      r10382: In the absence of client support for the full KDC-side
      r10383: This patch is on the road to implementing servers (such as kpasswd) that
      r10386: Merge current lorikeet-heimdal into Samba4.
      r10387: By exporting KRB5_CONFIG pointing at a file of our choosing, we can
      r10398: Don't do DNS lookups on short names (no .).
      r10402: Make the RPC-SAMLOGON test pass against Win2k3 SP0 again.
      r10440: Start passing against Win2k3 SP1 again, with the NTLMv2 changes
      r10464: Use more consistant names.
      r10486: This is a merge of Brad Henry's 'net join' rework, to better perform
      r10488: (Missing file from previous commit, adding a new RPC-JOIN test)
      r10520: The join is a nice quick RPC test.
      r10561: This patch takes over KDC socket routines in Heimdal, and directs them
      r10562: Ensure we initalise the error table with hdb errors.  This ensures we
      r10563: a null 'join' is a no-op.
      r10564: Make the RPC-SCHANNEL test use the libnet_join code via torture_join_domain
      r10565: Try to make Kerberos authentication a bit more friendly.
      r10566: Clean up error messages to provide more accurate info.
      r10593: Add printf attribute
      r10595: Use a server name of 'localtest' not 'localhost', so we can move to
      r10596: Move the credentials code into it's own subsystem, and push it under auth/
      r10597: And add the .mk files for the new credentials subsystem.
      r10598: Factor out common code, in preperation for a move elsewhere.
      r10599: Use localhost again for now, until I trace where we are leaking name lookups.
      r10670: Add notes on things that are TODO in Samba4 kerberos land.
      r10695: strupper() of NULL should be NULL, not panic.
      r10696: Return the realm to the caller, not NULL...
      r10697: Change the torture join code to return a credentials structure, as
      r10701: Ensure we return the right user handle.
      r10702: Fix a silly error that caused a rejoin/delete in the torture code to fault...
      r10703: Add a new user account, change the password and test it in the SAMLOGON test.
      r10711: An error of 'user exists' is not an error, just an indication of how
      r10712: Use data_blob_talloc, thanks to valgrind for finding the errors.
      r10763: PROOF of the single, easily understood cause of all of our schannel PAIN!
      r10764: To match Win2k3 SP1, we need to set an anonymous user token for
      r10791: Add copyright, fix comments (this isn't the timestamps module any more)
      r10796: Make getting an anonymous session info a utility function.
      r10800: Indent
      r10803: Remove a duplicate krbtgt test, and add a test looking for the
      r10804: Move the DRSUAPI cracknames test into a seperate file, and collapse
      r10805: Move RPC-SAMLOGON to C99 initialisation
      r10806: Add missing file.
      r10807: Make the split-out files actually compile...
      r10809: Add struct decl
      r10810: This adds the hooks required to communicate the current user from the
      r10811: Revert accidental commit, I still need to finish the displayName and
      r10812: Fix capitalisation (thanks tridge).
      r10820: Use talloc_get_type as suggested by tridge.
      r10844: Add challenge-response authentication to Samba4's winbindd for VL.
      r10845: Add new function to decrypt the session keys in samlogon responses.
      r10847: Fix up new 'decrypt samlogon reply' routine to be more robust, and use
      r10855: Put the domain SID in secrets.ldb by default, and add http as a
      r10945: Free the salt after we are done with it.  May need a merge to similar
      r10946: Use the right name for the remote workstation, and always initialise it.
      r10950: More cracknames variations (including expected values) than you can
      r10953: Add a new function to form a canonicalName out of a DN to ldb_dn.c
      r10956: Tridge thought some comments might be a good idea :-)
      r10980: Use ldb_attr_cmp and ldb_dn_escape_value
      r10981: Pull code to decide between and implement NTLMv2, NTLM and LM
      r10982: Move credentials.h into auth/credentials, and add flags needed by
      r10983: Another case were we want to avoid DNS for unqualified names.
      r10985: To aid in testing, this allows us to easily force kerberos to use UDP or TCP.
      r11106: Make the KDC handler plugable, as I want to drop kpasswdd into exactly
      r11194: Use the special ldb attribute "canonicalName" (therefore testing that
      r11195: Add a new helper function (needed by my kpasswdd work, but hooked in
      r11196: Clean up memory leaks (pointed out by vl), and handle the case where
      r11197: indent
      r11198: The recent changes to netlogon changed this from a RID to a SID.
      r11199: Push an objectSid into the schannel state database, to match the new header.
      r11200: Reposition the creation of the kerberos keytab for GSSAPI and Krb5
      r11201: New filters for searching in secrets.ldb
      r11202: Add more structs to structs.h
      r11203: Use different variable names to make it easier to tell which assert fired.
      r11204: Allow us to read credentials from secrets.ldb without a
      r11205: Another test for cracknames.
      r11206: It appears to me that any account may operate as a server.
      r11207: Correct principal search define
      r11208: Add DNS entries for finding the kpasswd server to the default zone.
      r11209: We can't read the priorSecret unless we ask for it.
      r11212: Enable sealing of data with raw krb5, consolidate some code into the
      r11215: Remove no-op prompter intended to work around bugs in old kerberos libs.
      r11216: Upgrade to gd's PAC extraction code from Samba3.  While I still want
      r11217: Ensure the realm is substituted in UPPER case.
      r11218: Always return the mutual authentication reply (needed for kpasswd),
      r11219: Now that we have the credentials hooked in here, we have a much more
      r11220: Add the ability to handle the salt prinicpal as part of the
      r11221: I don't quite know how I tested this before, but clearly I didn't.
      r11222: Small provision fixes: canonicalName is now generated, and the DC=
      r11223: Only pass around the ldb handle (make this code easier to seperate
      r11225: Remove pointless goto.
      r11226: Cope with Samba3's behaviour on LDAP with GSS-SPNEGO.
      r11239: Use ${REALM} for the realm in rootdse.ldif
      r11270: Move the core CrackNames code from rpc_server/drsuapi to dsdb/samdb.
      r11272: In trying to track down why Win2k3 is again rejecting our PAC, ensure
      r11273: Initialise the new server_info->logon_server element.
      r11282: Fix memory leak in LOCAL-PAC test.
      r11287: Understand the new behaviour of the LSA pipe on ncacn_ip_tcp in Win2k3 SP1.
      r11288: Fill out LSA LookupNames4 and LookupSids3, including a server-side
      r11289: Fix comment.
      r11290: Make it clear that Heimdal is always included, no need for the test
      r11291: Fix implementation of LookupNames4.
      r11293: Use the right search when forming the data for the PAC.
      r11294: Update Heimdal in Samba4 to lorikeet-heimdal (which is in turn updated
      r11297: Move the RPC-SCHANNEL test to using the credentials system for
      r11298: Consolidate the 'short' samlogon tests, and move to using the
      r11310: Free the 'if_relevent' portion of the PAC when we build it.
      r11312: Make it clear we are looking at the 'domain ref', not the domain
      r11313: Typo
      r11314: Use a patch from lha to have the kerberos libs extract the PAC, rather
      r11315: Sorry gd, I just removed all of your code that I just merged...
      r11316: Kill off a bit more of the old secrets system...
      r11317: An ugly hack to setup the global gssapi_krb5_context early, when we
      r11321: Fix typos in warnings.
      r11322: Start moving towards using the cracknames code in the KDC.
      r11325: Fix up some kerberos notes.
      r11333: Push service principal lookups into the cracknames code, rather than
      r11334: Print error status in debug.
      r11339: Fix the build by adding the serviceprincial name cracknames helper.
      r11342: Remove unused variables.
      r11348: Fixes for 'net join':
      r11349: Actually add all the new spns...
      r11350: Add some debugs to assist tracking down kerberos issues in future.
      r11351: Another add-hoc test.
      r11352: Add newly discovered (via the radiator lists) flags for controlling
      r11355: Test for error returns when we don't specify the newly discovered
      r11356: More cracknames work. This copes with a lookup for a
      r11357: Add more standard 'servicePrincaipalName' entries to our host account
      r11358: Ensure domains are always upper-case as well.  Helps NTLMv2.
      r11359: More lovely cracknames tests...
      r11360: Pass down a flag indicating that this is an 'old password', and to
      r11361: Test user at DOMAIN userPrincipalNames
      r11366: Pass around the flags which indicate if we should support plaintext
      r11367: Ensure to intialise the new logon_parameters (0 for session setups).
      r11370: Samba4 now passes it's own RPC-SAMLOGON test again.
      r11371: Fix the ntlm_auth build.
      r11372: Now RPC-SAMLOGON works, place it into the default 'make test'.
      r11373: Handle an apparent alias in NBT ntlogin replies.
      r11374: On request from VL, put the plaintext auth patch in.
      r11393: Avoid error messages and get more correctness with long plaintext passwords.
      r11394: Allow KDC unreachable as another 'forget about gssapi' error on SPNEGO.
      r11399: Add another case where we need to fallback, if the KDC isn't there.
      r11401: A simple hack to have our central credentials system deny sending LM
      r11402: In response to comments by volker, expand our Netlogon DsRGetDCName
      r11404: Another torture test and a new WERR.
      r11405: Ensure we can never have secret4 be uninitialised.  Found after
      r11406: Clean up uninitialised value warnings found by -01.
      r11407: Push 'recreate account' logic into libnet/libnet_join.c.  We don't
      r11409: The use of 'password server = ' here is still bogus, but for now at
      r11410: Fix rejoin as a BDC by modifying, rather than trying to recreate, the
      r11411: Add to Samba4 the Samba3 patch I just posted for machine account
      r11412: These comments may not be much, but my eyes scan code with even
      r11413: More comments, plus always check (and update) the credentials chain,
      r11414: Add passing around of logon_parameters to Samba4 auth_winbind
      r11437: Fix (valid!) use of uninitialised value warnings.
      r11438: Move enum samr_RejectReason into misc.idl so I can use it in a global
      r11439: Make presedence on strcmp comparison clear, and fill in
      r11440: Actually check the right thing for 'is this a machine account' (thanks metze).
      r11441: Remove the auth_domain module from Samba4, as we will only do things
      r11442: Don't use BASE-NEGNOWAIT any more.  It is a mostly meaningless test.
      r11452: Update Heimdal to current lorikeet, including removing the ccache side
      r11453: Fix warning, for a case that just can't happen.
      r11462: Fix the build:  somehow I lost the header for this samba-specific hack.
      r11466: Clear up some memory leaks in smbclient.
      r11468: Merge a bit more of init_sec_context from Heimdal CVS into our
      r11469: Fix typo, and use the correct (RFC4120) session key for delegating
      r11470: To a server trusted for delegation (checked for in the gss libs),
      r11471: Describe how kerberos forwarding works with the ntvfs.
      r11477: This seems really nasty, but as I understand it an attacker cannot
      r11497: Don't name parameters 'floor'.  Rename fl and floor to epm_floor for
      r11512: fix typo
      r11513: Add the ability to use the local machine account instead of a static
      r11514: Fixup debug message
      r11520: indent
      r11521: Add in client support for checking supportedSASLmechanisms, and then
      r11522: Add support for delegated credentials and machine account credentials
      r11523: Working towards having Samba3 join Samba4, this allows the SASL
      r11524: More work on our hdb backend in the KDC.
      r11525: Move lookups (including the attribute search) for users from
      r11529: Disable DNS lookups for forwarded credentials, unless really, really
      r11536: Add a hook for client-principal access control to hdb-ldb, re-using
      r11537: Make the authsam_account_ok routine callable by external users (the KDC).
      r11538: More notes on things we need.
      r11540: Some notes to myself on RFC complience.
      r11541: More logical (I think...) delegation semantics.
      r11542: Add the netbios name type.  We will need it when we start to handle
      r11543: A major upgrade to our KDC and PAC handling.
      r11544: Allow delegation in a Samba4 realm.
      r11545: Remove old #define.
      r11568: Debuging aids: Let the administrator know when a key/entry expired,
      r11572: Add support for accountExpires and password expiry (should cause the
      r11928: More Kerberos musings...
      r11929: Add static, comments.
      r11930: Add socket/packet handling code for kpasswdd
      r11931: Add a short README explaining what this directory is all about.
      r11940: Love has clarified why this code does what it does.
      r11987: Clarify the accountExpires behaviour in the KDC.
      r11988: Setup the sessionInfo just before the connect, rather than earlier
      r11989: Rather than grabbing the machine account details at this point, grab
      r11990: Set the password set time as 'now', so it isn't expired back in 2004.
      r11991: Null termainte the list of backends.  (Makes it easier to walk the list).
      r11992: Potentially allow SPNEGO to be disabled (as occours on WinXP
      r11993: As well as making an in-MEMORY keytab, allow a file-based keytab to be updated.
      r11994: This function no longer needs a special declaration.
      r11995: A big kerberos-related update.
      r12000: Update to current lorikeet-heimdal, including in particular support
      r12035: Fix memory leaks in the KDC.
      r12036: Fix more KDC memory leaks (and there are probably still more...).
      r12037: Fix malloc corruption caused by double-free(), where realloc(ptr, 0)
      r12056: Some clarification fixes for the keytab code, and use the right
      r12058: Set an anonymous fallback, if the machine account isn't available.
      r12059: Use random keytab names (so we get different keytabs, rather than
      r12060: Work towards allowing the credentials system to allow/deny certain
      r12061: Add missing file to previous commit.  This provides a hook on which to
      r12062: SASL negotiation now requires a gensec_security context, so that we
      r12178: Make ldb_ildap work against localhost again, by setting the event
      r12179: Allow our KDC to use LDAP to get to the backend database.
      r12227: I realised that I wasn't yet seeing authenticated LDAP for the ldb
      r12232: I hate SWAT code being outside 'source'.  Add in code to push the
      r12252: With this change (hack) we can now do an provision onto Samba4's LDAP
      r12267: Try to avoid segfault in kerberos libs, because we talloc_free()'ed
      r12268: Use transactions to ensure that the schannel db is consistant.
      r12269: Update to current lorikeet-heimdal.  This changed the way the hdb
      r12310: Link simple bind support in our internal LDAP libs to LDB and the
      r12320: Add command-line processing hooks for simple bind DN, and password callback.
      r12327: ENT_TYPE_ANY isn't used anywhere in Samba4, so don't implement it in hdb-ldb.
      r12360: Add simple bind support into our LDAP server.
      r12361: Add a new function: ldb_binary_encode_string()
      r12362: Along with a cracknames change in the previous commit, this should
      r12373: Add RPC-JOIN as a test to always run.
      r12381: Try not to segfault on an anonymous LDAP bind, and map to a guest login.
      r12382: Ensure to return OK on anonymous mapping.
      r12383: Fixes for Apple's AD client.  Don't segfualt in the KDC, and they
      r12384: I can't spell...
      r12411: Add 'net samdump keytab <keytab>'.
      r12421: Handle the case where we are a joining as different account types far better.
      r12422: Some kerberos comments and clarifications.
      r12423: Remove DEBUG(0) printouts in favor of more information to the caller.
      r12427: Move SAMR CreateUser2 to transactions, and re-add support for
      r12430: Clarify libnet_join code. Add/fix comments.
      r12432: Re-indent and consistantly cancel the transaction.
      r12433: Add comment describing this function.
      r12436: Fix Samba4 as a server to Win2000 for the domain join.
      r12439: No need to keep walking this list if we find the match.
      r12502: A bit of work on the RPC-SAMR torture test.  Prove that ridToSid is
      r12503: This function was just too simple to leave unimplemented.
      r12504: Fix one more transaction cancel bail-out path, and correct comments.
      r12505: Cope better with NT_STATUS_PASSWORD_RESTRICTION (due to minimum
      r12506: Fix up issues shown up by the expanded RPC-SAMR testsuite, and add ldb
      r12507: This file has had my grubby paws all over it ;-)
      r12533: Get the ldb.errstring() out to the user on failure.  It helps a lot
      r12534: Make the transaction code fill the error string on failure.
      r12538: Clarify why we are doing the delete here.
      r12540: Provide more information in the ldb error string.
      r12553: Steal the error string onto this context, so that the caller doesn't
      r12594: Jelmer pushed some proposed header reductions to the list today.  This
      r12595: There was no comment on the mailing list, so kill the 'ldapsrv:samdb'
      r12596: This variable is unused.
      r12597: One less void *
      r12598: Make the 'objectClass' part of the templating process actually work.
      r12599: This new LDB module (and associated changes) allows Samba4 to operate
      r12600: Add a new module to sort the objectclass attribute on store.  The
      r12601: Syncronise both copies of dlinklist.h.
      r12625: More 'useful' names for the DNS zone.
      r12627: This magic comment keeps minimal_includes.pl from suggesting the
      r12629: Add a comment so minimal_includes.pl doesn't try and remove this.
      r12630: Remove attributes which should be automaticly generated.
      r12631: Now we have fixed the provision script, we don't need to work around
      r12632: Build fixes from Brad Hards <bradh at frogmouth.net>
      r12681: Allow an entry to have no kerberos keys.  This occours when an entry
      r12682: This patch finally fixes our kpasswdd implementation to be compatible
      r12683: Fix declaration and initialisation placement.
      r12684: A better error code for SAMR transaction failures.
      r12685: Add comments on builtin LDAP and KDC.
      r12686: Push the real SASL list into the rootdse.
      r12687: Push the real list of supported GENSEC mechanisms out on
      r12708: This is equivilant, but doesn't cause a warning.
      r12710: Fix socket_wrapper: Make sure to fill in the socket family on the
      r12716: Tridge points out that the request argument to ldb_next_request must
      r12717: Always compile the skel module, so we know when we break it.
      r12718: We don't use unicodePwd directly any more.
      r12719: Rename unicodePwd -> sambaPassword.
      r12720: By metze's request, rename the ntPwdHistory attribute to
      r12728: Revive testparm.
      r12729: Implement the --section-name option, for dumping only one section.
      r12730: Reimplement --parameter-name, and bring in common samba options.
      r12731: Simplify and re-implemenet support for --parameter-name=foo
      r12732: This option does nothing.
      r12738: Use a talloc_reference to ensure this doesn't get free()'ed too early.
      r12739: Add support for using credentials in the provision process.
      r12744: For correctly written scripts, we don't need this anymore.  Only use
      r12746: An initial version of the kludge_acls module.
      r12747: Add a couple more token tests, used by the kludge ACL module.
      r12749: Fix the newuser script.
      r12750: Clean up more asn1 generated files (pointed out by <HotaruT>).
      r12751: Another make clean fix.
      r12752: Clean up compile_et and asn1_compile as well.
      r12753: Try to fix the build after a 'make clean'.  (the wildcards will not
      r12762: Simo correctly asked that the policy logic (which attributes contain
      r12763: Oops.  If you call ldb_search from within an ldb module's search
      r12782: Don't segfault if we cannot setup messaging.
      r12804: This patch reworks the Samba4 sockets layer to use a socket_address
      r12807: I'm wondering if this might fix AIX on the build farm...
      r12808: Actually, with that we can avoid roken compleatly.
      r12813: Remove unused file to avoid confusion.  We now go via the auth
      r12816: Ugly hacks to the auth_unix code to make a SYSTEM token for root.  If
      r12817: Create a ESP variable with the struct socket_address * in it, so we
      r12818: When denying an operation, include what we think the username is in
      r12819: Fix swat authentication again.  We need to pass the socket_address
      r12820: Remove duplicate entry caused by merge.
      r12821: Fix typos.
      r12822: Given that talloc gives us this extra level of safety, use it.
      r12823: Fix up the provison and newuser code in SWAT.  This also cleans up the
      r12824: Another typo.
      r12826: The base DN is very tied to the realm.  Allowing it to be changed here
      r12858: This moves the libnet_LookupPdc code to use a GetDC request to find
      r12859: Make Samba4 match the Samba3 winbindd interface.  trunk has moved too
      r12860: Remove unused function.  (we handle this in the password_hash module).
      r12861: Cope when we are not supplied the messaging context.  This is just
      r12862: Need to trim spaces off the end of the node status reply.
      r12863: As lha suggested to me a while back, it appears that the
      r12864: Fix valgrind errors in NET-API-LOOKUP* tests.
      r12865: Upgrade the librpc and libnet code.
      r12866: This removes the abstraction layer in winbindd intended to deal with
      r12867: Remove deleted header.
      r12868: Remove unused code.  This has moved to libcli/finddcs.c.
      r12869: I have removed this hack.  We now just do the lookups (netbios for now).
      r12872: Add some more detail to debug message.
      r12873: Fix valgrind-found uninitialised value.
      r12874: Try to give the startup a few more seconds, so that hosts with
      r12881: Hard-coded defaults are silly.  We have smb.conf for a reason.
      r12882: Allow the netbios name to be specified at all times.
      r12883: Fix the build...
      r12886: Rename 'secure_channel_type' parameter to domain join as 'join_type'.
      r12887: Add the icon from samba.org to SWAT.
      r12891: We no longer manually set the 'name' attribute.
      r12892: Add a 'Migrate from Windows' page to our installation section in SWAT.
      r12893: Filling in *error_string is critical for SWAT, as the errors otherwise
      r12894: Add more detail to error messages.
      r12895: Error strings save lives.
      r12902: Fix 'make quicktest'.
      r12903: Factor out a new routine libnet_RpcConnectDCInfo, to both connect to
      r12918: Don't tell the user the difference between 'no such user' and 'wrong
      r12919: Ensure we never 'extend' the session key length, or fill in past the
      r12926: Syncronsise GUIDs on users and domains from the server.  These also
      r12927: Fix typo.
      r12928: This patch improves the interaction between the vampire and provsion code.
      r12929: Fix more implict global and shadowing variables.
      r12930: Fix ADS join:  I wasn't filling in the flag 'realm' variable any more.
      r12931: Remove some prefixes.  We have:
      r12943: Generate a SID for the domain join account using the modules, rather
      r12944: Update scripts in setup to match changes in the provision.js
      r12945: Try to move closer to getting Samba3 import working again.
      r12976: Patch from Brad Henry <j0j0 at riod.ca>:
      r12979: Grr, I forgot to commit this file (from Brad Henry's libnet_site
      r12995: Don't allow overrides on "name" from above, as it can't be correct.
      r12996: Restrict this search to domain objects.
      r12997: Feed the right event context to libnet in ejsnet and the auth code.
      r12998: A big update to samldb.c
      r13018: Fix (correct) warning about mixing C/js interface function types.  I
      r13019: Again protect us against format string mismatches, with the new split
      r13031: A first stab at some release notes.  Much work needed.
      r13033: Thankyou very much to Brad Henry for fixing up many aspects of the
      r13034: A couple of clarifications on the release notes.
      r13103: Walk the names in the node status request, so I can find a server
      r13104: Migrate and set secrets keytab values in the 'net join' code.  This
      r13107: Follow the lead of Heimdal's kpasswdd and use the HDB (hdb-ldb in our
      r13144: This seems to be required for Samba4 to talk to Samba4, and to get the
      r13149: DEBUG is a bad choice for 'net', it should print to stderr
      r13150: Correct comment.
      r13152: Jelmer assures me that this won't break anything, but does make it
      r13153: Try to move closer to FHS.  This probably breaks everything...
      r13203: Make this comment clearer.
      r13204: Remove extra newline we don't need.
      r13205: Add another useful comment.
      r13206: This patch finally re-adds a -k option that works reasonably.
      r13207: Use the new API for using/not using kerbeors in hdb-ldb.c
      r13239: Silly little patch:  make the order of declaration match the order of use.
      r13240: Make the test scripts use the new smb.conf location (in PREFIX/etc).
      r13244: Allow control of the location of the Samba3-compatible winbindd pipe
      r13245: Don't segfault if we don't have a credentials structure on this gensec
      r13246: Print winbindd pipe location correctly.
      r13247: Try to make better use of talloc in the auth/ and auth/gensec code.
      r13250: I missed a couple of talloc_free()'s
      r13252: Cleanup, both in code, comments and talloc use:
      r13253: More work to ensure that we don't keep data on long-term contexts.
      r13256: Free temporary memory on error cases, and try to clean up what's left
      r13258: Fix the talloc heirachy for ldb_tdb.
      r13265: Clarify how delegation works with the remote RPC backend.
      r13269: ${prefix} is a special case in the autoconf/build system, and should
      r13281: Use TALLOC_CTX * not a void *, and use tmp_ctx as the name for consistancy.
      r13282: Indentation, and ensure we handle the talloc_free in the right place
      r13317: Create a new function messaging_client_init() which can be used when
      r13320: Fix kpasswd's use of the local HDB.  /dev/null was a bad idea, we want
      r13321: Bind to each interface and to the 0.0.0.0 interface on the KDC.  This
      r13334: Add comments describing what these functions do.
      r13339: Propogate more error infomation into the error packet and reformat the
      r13340: The gensec_init() needs to be after the popt processing, as it
      r13341: Trivial.
      r13342: Make the GSSAPI SASL mech actually work, by (shock horror) reading the spec.
      r13344: Trust SASL to have subtle distinctions between NULL and zero-length
      r13380: Drop the socket, then try SAMR operations secured with netlogon on the new socket.
      r13381: Test the SamLogonEx SamLogon call in the schannel test.  This is only
      r13402: Make Samba4 pass a nastier RPC-SCHANNEL test.
      r13403: Try to better handle a case where SPNEGO isn't available (allow us to
      r13404: Comments, whitespace.
      r13405: Allow a fallback if SPNEGO is somehow disabled in the client, to just NTLMSSP.
      r13466: Make it easier to understand what this function actually does.
      r13467: Add new parametric options (for testing) controlling LM_KEY and 56-bit
      r13470: Thanks to a report from VL:
      r13471: With more 'try all options' testing, I found this 'simple' but in the
      r13472: After Volker's advise, try every combination of parameters.  This
      r13479: Return the joined domain SID and user SID as structures, not strings.
      r13480: Explain a little about how these credentials structures should be used.
      r13481: As far as I can tell, my changes in -r 12863 were dangerously untested.
      r13516: We can't bind to both 0.0.0.0 and specific network interfaces at the
      r13551: Add an accessor function for the user sid.
      r13582: Indent
      r13583: Realise that the member server name appears in all calls that use the
      r13584: Another try at SPNEGO stuff.  I need to write a better testsuite for this.
      r13605: Use $BASEDN to ensure this works outside of the 'make test' rig.
      r13606: An attempt to fix #3525.
      r13616: Add new ldb functions: ldb_msg_add_steal_string() and
      r13850: Test (and fix) not using SPNEGO at all, but instead using raw NTLMSSP.
      r13907: By ordering things this way, we allow the password_hash module to set
      r13908: Improve the RPC-SAMSYNC test to cross-check some attributes I wasn't
      r13909: Make this code clearer.
      r13910: Fix the 'your password has expired' on every login.  We now consider
      r13911: Make these debug messages clearer.
      r14058: Try to make the continuation on the list of password set mechs clearer.
      r14180: The PAC isn't so special that it deserves a level 0 debug any more.
      r14181: This doesn't need level 1 debug, it happens whenever the DNS name is looked up.
      r14198: Update Samba4 to current lorikeet-heimdal.
      r14199: This isn't pretty, but it makes the network interface detection work again.
      r14200: Now we have real USN support, don't force the values in the provision
      r14201: I don't think including roken is going to be a good solution.  Let's
      r14202: Oops.  When removing a header, we need to replace it.
      r14203: Include less private heimdal headers.
      r14312: Formatting and comments.
      r14313: Add comments describing some of the dependencies here.
      r14494: Add comments to clarify that we deliberatly fall though here
      r14502: Supply both needed arguments for the backend logoff processing.
      r14589: This morning, I think I can spell...
      r14598: 'logfile' may be a poor choice for a global variable name, but for now
      r14635: - Remove lex.c from SVN (it is built anyway, and having it in SVN
      r14636: Print an error on torture connect failure.  (Helps with debugging).
      r14637: Extend the ACB -> userParameters flag mapping based on the ovbious connections.
      r14662: To allow the RPC-SAMR test to pass, we need to look for both domains
      r14665: More testing in RPC-SAMR.  It looks like we will probably need another
      r14671: We don't really need this in our releases...
      r14673: Don't double-free conn, it is below 'c' free'ed by
      r14700: Fix spelling, and change these informational messages to debug level 5.
      r14701: Allow, with non-default options, NTLMSSP to access the LM session key,
      r14702: Accept our netbios aliases as valid names in the SPOOLSS server.
      r14707: Initialise default value (the rest of this function sets it to 1 if
      r14708: Add a (bogus) UUID and a comment to the PAC defintion.
      r14712: Do not proceed in event of failure to obtain a policy handle.
      r14713: For testing, it is sometimes useful to specify a hostname for kerberos
      r14714: On DCE/RPC, we need the name of the remote server used on the socket,
      r14715: Correct the definition of the DCE/RPC bind_nak, per the OpenGroup spec.
      r14716: Remove username from debug message, it just causes valgrind assertions.
      r14717: Don't provision the system as 'localhost', but instead list localhost
      r15176: Ensure we don't segfault when we try and delete @FOO records.
      r15192: Update Samba4 to use current lorikeet-heimdal.
      r15199: Try to make these prototypes match, to get the build on S390 linux going.
      r15219: Look for gai_strerror in more places, so we don't conflict with the
      r15221: We don't need to have these rcsid strings in Samba's use of Heimdal.
      r15222: Use more standard UUIDs.  Should help AIX build.
      r15225: Use talloc_zero() to avoid use of uninitialised values later on.
      r15316: I don't understand quite why this function was ever like this, but we
      r15317: Because LDB is now async, there are more places were we might run the
      r15329: I'm sick of this patch being in my local tree...
      r15330: Add comment for IBM checker.
      r15356: Remove unused 'flags' argument from socket_send() and friends.
      r15357: Fix the build on systems without GNUTLS.
      r15372: Don't look at possibly undefined controls in failure cases.
      r15400: Move the TLS code behind the socket interface.
      r15415: Use Jelmer's new credentials 'wrong password' code to give the user 3
      r15416: Point out that this doesn't work, but for servers this old, I just
      r15420: Add a new function to print a the 'unparsed' string format for usernames.
      r15421: Correct function comments.
      r15426: Implement SPNEGO as the default RPC authentication mechanism.  Where
      r15433: Add a todo.
      r15480: Patch from lha, to ensure we don't leave a free()'ed element in the
      r15481: Update heimdal/ to match current lorikeet-heimdal.
      r15482: Don't shadow the global function pipe() with a local variable name.
      r15484: Make accept_security_context() more compatible with how Samba3 (and
      r15485: This 'fake' GSSAPI doesn't do the extra SASL negotiation correctly, so
      r15486: Ensure that our Samba3-like implementation of fake-GSSAPI is tested.
      r15491: Always initialise is_cfx (found by Valgrind)
      r15497: I'm not really sure this is correct in terms of how we should be responding to
      r15498: Initialise the callback_running field, and get the flag set/clear the
      r15499: This test can't run if the remote server won't let us open a policy handle.
      r15500: Add support for interactive prompting on bad passwords to the RPC libraries.
      r15501: Allow interactive password prompting on kerberos as well.
      r15503: I may shortly have to revert all of this, but be clearer about how we
      r15504: Revert -r 15500 and -r 15503 until I'm awake, and can get my head
      r15510: As discussed on samba-technical, move the VERSION system back to a
      r15511: Using this name causes less warnings on the IBM checker, due to using
      r15515: Syncronsise with current lorikeet-heimdal.
      r15999: password_hash module changes:
      r16007: If no error string was setup by the backend, ensure that we always get
      r16028: Re-add the objectclass module, in the new async scheme.
      r16051: Move the XATTR compatability code into a new file, so I can use it for
      r16052: Add .m4 file for XATTR detection (from ntvfs/posix/config.m4)
      r16053: Allow entries without an objectClass.  We need this to permit the
      r16056: Fix errors found by trying to use our kpasswd server and the Apple client.
      r16061: Prove that removing the objectClass list in the samldb module breaks things.
      r16062: objectCategory is a DN, and needs to be matched as such.
      r16063: Make is clearer when we can't write to the smb.conf
      r16066: The OSX AD plugin uses objectCategory searches a lot, and uses them
      r16067: Remove const, it isn't required and just causes a warning.
      r16068: Check against the correct result in the ldap.js test
      r16069: Remove unused destructor and an unused variable.
      r16072: Do basic wildcard searching in the ejs LDAP test.
      r16073: On an incoming wildcard search, it is critical that the size be
      r16082: Index objectCategory like objectClass, as it is searched on a lot.
      r16083: Make it possible to initialise a backend module, without it setting up
      r16084: Add private prototype for new ldb_connect_backend() function.
      r16085: Set the error string if we fail to find a valid op to execute.  Helps
      r16086: Ensure we can never dereference NULL pointers, and that describe what
      r16087: Fix silly cut-and-paste typo that cost me much of my afternoon...
      r16108: Fixes from working with the partition module.
      r16109: Make this module simpiler, don't intercept operations we are not going
      r16110: Start some simple rootDSE LDAP tests in ejs.
      r16125: Add another helpful utility function: samdb_msg_add_int()
      r16129: Further clean up the samldb module.
      r16159: Even more work on samldb error reporting.  Make sure to get the
      r16166: Remove hexidecimal constants from the Samba4 provision files.
      r16167: Add tests for the changes to use hex digits, including some tests
      r16168: Make the example match the actual function.
      r16172: Translate the ldb error codes into appropriate messages for the
      r16218: If a connection is forced as 'anonymous', don't treat it as
      r16226: Fixes for various segfault bugs found against a buggy Samba4.  With
      r16227: Don't segfault if the ldb_search() fails.
      r16232: Avoid searching on domainDns, as it is not an AD attribute in the
      r16234: Set the request timeout from the LDAP search.  Without this, the
      r16235: Don't update minor_status when cleaning up on error.  This restores
      r16236: Add a proper baseDN to a large number of queries.  Searching the NULL
      r16237: Use an appropriate basedn for these searches, so they occour into the
      r16238: Use a baseDN for the auth_sam searches, to allow continued function
      r16239: Search for the domain in the correct partition, so this will work with
      r16240: Add better error reporting in the password_hash module
      r16262: Another basedn fix.
      r16263: A number of these searches need to be under the partitions DN, and the
      r16264: Add, but do not yet enable, the partitions module.
      r16265: Fix 'newuser' command.
      r16489: Because the torture/ui.h file isn't automaticly generated, the
      r16768: Add a simple script to set a user's password.  This should grow into a
      r16769: Working on fixing the RPC-SAMR test against Samba4.  This fixes
      r16770: Get closer to having Samba4 pass some of the RPC-SAMR test, by
      r16771: Add const and some better debug messages.
      r16772: Clarify comment.
      r16773: Fix one more RPC-SAMR test (an alias level), and make it clear that
      r16774: This patch modifies the tdb API to allow the logging function to be used
      r16794: Make Samba4 pass it's own RPC-SAMR test, at least in part.  There are
      r16795: Fix crash found by Dave Fenwick <djf at samba.org>.
      r16825: Make ldb_sainity_check() set an error string.  This makes it much
      r16826: Ensure we don't segfault if the remote server fails to set a password
      r16827: Factor out some code into common samdb functions:
      r16828: Add RPC-LSA as a test that passes, and remove RAW-ACLs until someone
      r16829: Fix a number of issues raised by the IBM checker, or gcc warnings.
      r16830: Fix IBM checker and GCC warnings.
      r16831: Use a valid memory context (found by the IBM checker).
      r16832: I should be more careful (and test!) when trying to make compilers and
      r16833: Add a base DN to more search calls, we need to look for an ID over the
      r16835: Remove RPC-SAMR from the test, until I can clear up the unexplained failure.
      r16846: Try not to segfault if the domain SID isn't there, or the search
      r16847: Add the parts of the SAMR test that pass back into 'make test'.
      r16850: Disable NBT-WINSREPLICATION-OWNED until it always passes (currently it still has intermittant failures).
      r16851: Put a clue in as to which domain might have failed, due to the length
      r16852: I thought we passed RPC-SAMR-PASSWORDS, but we don't.  Disable that
      r16854: Fix the RPC-SAMR-PASSWORDS test.  It failed because we allocated users
      r16858: The RPC-SAMR-PASSWORDS test now passes.
      r16860: Fix (and reactivate) the RPC-SAMR test.  We need to allow these sids
      r16908: Set an error string if we can't find a backend for an operation.
      r16914: Add more tests for the partition module.
      r16916: Implement metze's proposed changes to the tdb logging API.
      r16917: Fix compile errors found by the testing of tdb on the build farm.
      r16932: Consistanly use the macro for these DNs and attributes.
      r16933: Sort the partitions in order from most, to least specific.
      r16934: Expand the ldb test to demonstrate partition behaviour, including the
      r16936: Correct comment in this comparison function
      r16937: Add const, to make it clear that it is invalid to talloc_free() the DN
      r16938: Fix breakage of TDB on VOS (declaration after statement)
      r16961: Merge 'seperate policy from logic' changes from Samba3.  The 56-bit
      r16964: Remove extra debugs no longer required in a working KDC
      r16965: Take a better stab at comparison functions between string and binary
      r16966: Fix compile warnings.
      r16967: Test another NTLMSSP flags combination.
      r16972: Replace the sequence_number function pointer in ldb with the ldb flags.
      r17031: When I first revived the objectclass sorting module, simo complained
      r17103: Big updates to the not-yet-enabled partitions module.  It now services
      r17104: Rename function parameters and variables to avoid shadowing global
      r17167: indent
      r17168: Now that TLS (and soon SASL) is below the socket layer, we need to
      r17169: Test LDAP with testnonblock.
      r17170: Catch some more out-of-memory cases, and provide some clues when
      r17171: Add a gensec function to determine the maximum negotiated buffer size,
      r17173: Check for oversize output, not oversize input, and fix the GSSAPI mech
      r17174: Enable gnutls code, which requires the HAVE_GNUTLS CPP macro.
      r17196: Clarify that SSL is used for LDAP as well as SWAT.
      r17197: This patch moves the encryption of bulk data on SASL negotiated security
      r17215: Prepare the SASL socket before actually settting it.  This allows
      r17221: Add some integer wrap parinoia to data_blob_append().
      r17222: Change the function prototypes for the GENSEc and TLS socket creation
      r17223: In some protocols it is not possible to negoitate off some features,
      r17224: Accept the start-tls extended request.  Getting OpenLDAP to recognise
      r17225: Fix the build by fixing the spelling of START-TLS.
      r17250: Fix comment, the Samba3 winbind protocol uses the host byte order here.
      r17286: Simply fail the tls_initialise if we don't have TLS compiled in.
      r17287: Add the local_password module to the tree, so it doesn't get lost in
      r17288: Don't mess with entries in the local password prefix, and fix const
      r17289: Fix the build: I havn't commited this module yet.
      r17297: Some compilers don't seem to like the ;;
      r17298: Fix up the local_password module to the current LDB API, and build it by default.
      r17299: Improve the partition module to replicate attribute records into all
      r17300: Try to fix some segfaults in ldb_ildap module, when the remote server
      r17301: Add a new function to copy a list of attributes, while adding one to
      r17302: Testing!
      r17303: More testing results: Don't try and call a NULL callback, and use the
      r17304: Improve ldb_tdb error strings a bit more.
      r17330: Enable the partitions module.
      r17331: Oops, how did I commit this empty file...
      r17332: May as well make this a round number
      r17349: We can't just return sucess here, modules below us expect the async
      r17351: Remove extra LDB partition we don't actually use (these are in the
      r17352: Don't do a modify on the objectClasses, as OpenLDAP doesn't like
      r17368: Add 'const' to ldb_match_msg().
      r17377: This attribute is maintained by the modules, don't override it.
      r17379: Pre-generate DH parameters, to avoid doing this at runtime in our testsuite.
      r17380: An expanded test, cross-referencing the global catalog to the main port.
      r17394: Pregenerate all the files for TLS.  Make the 'make test' startup *much* faster.
      r17395: Add some more time to the default runtime.   Now 7.5 mins.
      r17396: Bump the time up again.  RPC-SAMR can slow, I probably need to break
      r17397: Add const, and use a more local memory context.
      r17411: Try and compile on older versions of GnuTLS.
      r17473: Split loading a list of modules and initialising them into a seperate
      r17474: Allow the partitions module to load modules for specific backends.
      r17499: Open the main database only the minimum times during a provision.
      r17517: Fix declaration after statement, which breaks the build on older GCC.
      r17520: If the blkid library fails, I don't see any reason to return more of
      r17522: Fix another declaration after statement.
      r17523: FIXME is a macro (I think) on some platforms (AIX), and this caused pain.
      r17524: Lets see if we can try and get the socket_wapper includes to be
      r17525: This is a merge from the Google Summer of Code 2006 project by Martin Kühl
      r17526: Move timestamp generation into the objectGUID module.  It probably
      r17527: Don't duplicate the entire test setup just to allow testing of the new
      r17528: This is an additional item of schema we require.
      r17529: Simo doesn't like the use of the internal ldb_errstring in functions
      r17530: Watching the build farm mails carefully pays off...
      r17534: Try another group for 'wheel' on True64.
      r17542: In using ldb_map, I ran across some very odd behaviours when we search
      r17543: Patch from Martin Kühl <martin.kuehl at gmail.com> to extend the
      r17544: Add execute bit to js script.
      r17545: I forgot to commit this file, a source file for the the samba3sam
      r17546: Test the loading of per-partition modules.
      r17547: Add test by mkhl for some of our variable substituion behaviour.
      r17548: It is a good idea to commit the fix (from mkhl) before the test that
      r17553: Actually enable the samba3sam module.  Should help 'make test'.
      r17577: Patch from Kai Blin <kai.blin at gmail.com>:
      r17580: Add a new tools to convert back from AD-like schema to OpenLDAP.
      r17581: Add tool to convert AD schema back to OpenLDAP's schema formatting.
      r17582: Fix dependenies for oLschema2ldif.
      r17598: Patch from Martin Kühl <mkhl at samba.org> to update the samba3sam test
      r17599: Improvements to the AD-like to OpenLDAP format schema conversion utility.
      r17600: Finish the schema conversion tool, and add a mapping file, used to map
      r17601: Fix declaration after statement.
      r17609: Kill one more use of the fake dnsDomain attribute.
      r17633: Return NULL at the end of the file, or else we can't tell the
      r17634: Kill off another case where we used dnsDomain, and point it again at
      r17639: Martin Kuhl noticed that we loaded an incorrect value for
      r17646: Use authentication if specified.
      r17661: A patch from Martin Kuehl:
      r17682: Add newline to end of file
      r17690: Demonstrate how we can read the schema to find out details needed for
      r17691: Make the structure more public, so we have somewhere for calling
      r17694: Don't use printf() in a module...
      r17698: The original code assumed that &data->context was a valid talloc
      r17699: Remove more printf calls.
      r17700: Despite our best hopes, the way module initialisation tends to happen,
      r17703: Fixes to enable the entryUUID module to work for it's objectClass ->
      r17704: Add comments suggesting how to get the LDAP backend working.
      r17705: Use the paged_searches module by default against the LDAP backend, if
      r17707: Match the output (aside from dividers) the output of
      r17870: This module (for the moment) handles the modifyTimestamp generation.  For that, it needs to hook into the modify operation.
      r17871: Add an option to make the system account behave as anonymous on the
      r17876: Require one less patch for the LDAP backend to work.
      r17925: Another class we need.
      r17954: Avoid including \n in error strings (left over from DEBUG() conversion).
      r17955: Don't search for the dnsDomain attribute, it is invented (not in the
      r17956: LSA Cleanup!
      r17967: Somewhere along the line we lost unixName here, and so lost the
      r17968: Consolidate the DSSETUP and LSA pipes into a single file, as DSSETUP
      r17982: One final hack...
      r17983: Use the UTF8-correct strcasecmp_m call for sorting these entries,
      r17986: Add a copy of the Heimdal licence to our source tree, to make it very
      r17987: Make the LSA pipe listen on the \pipe\netlogon interface.
      r17988: Add 'not for Samba4' hacks into the RPC-NETLOGON torture test.
      r17989: Add RPC-NETLOGON as a test we now run against Samba4.
      r17991: Implement a few more calls (with not implemented :-).
      r18021: Add ldapi support to our LDAP client.  To be used for testing an
      r18022: Increment number of records converted, and print number of records skipped.
      r18023: Add support infrusructure for testing against an OpenLDAP server.
      r18024: The %c sscanf format I'm using doesn't null terminate.
      r18025: Don't try to set a target host if there isn't one (such as with ldapi://).
      r18068: This splits the handling of multiple SASL packets between the GENSEC
      r18072: Really delete things in the base partition, after we changed where the
      r18155: Add my work in progress, a module to link with Cyrus-SASL, for a
      r18198: Fix callbacks to use allocated or constant memory, not the stack.
      r18240: Make it clearer when we store the plaintext password.
      r18242: The cyrus-sasl encode/decode routines process the entire input.
      r18245: Ensure we don't keep the rootdse record around (steal it onto the
      r18246: Let our openldap slapd.conf include the magic to have DIGEST-MD5 on
      r18248: Bail out with a error message if this search fails for some reason.
      r18249: Keep trying to start an GENSEC mech from the list until one actually
      r18250: Add an ordering of GENSEC modules, so we do preferred modules first.
      r18252: Make sure to NULL terminate these lists of attributes.
      r18253: Turn Cyrus-SASL DIGEST-MD5 off by default for now.
      r18255: Remove the SMB_ASSERT(), as these are not talloc()'ed structures.
      r18257: Order the GENSEC modules, with unknown modules last.
      r18354: It seems safe to enable the DIGEST-MD5 module now.
      r18357: Convert more crypto tests from using function results as initialisers.
      r18361: Invert the way we handle LookupSids2/LookupSids3 and LookupNames3/LookupNames4
      r18362: Make LookupSids map onto LookupSids2, as they both take a policy
      r18363: Found a rather nasty bug in our fragment handling.
      r18364: Get us closer to schema compliance.  The corrent names for "secret"
      r18365: When adding a new structure member, always remember to fragment it.
      r18367: When converting to entryUUID, ensure we don't double-convert a
      r18368: Don't list GENSEC mechs that only have client implementations in our
      r18408: Only output a message if the async request fails.
      r18409: Make sure to print a DEBUG message if this LDB search fails.
      r18410: Reduce noise in the ldb_ildap backend.  We regularly search for things
      r18416: We need to look for both builtinDomain and domain, in the OpenDomain call.
      r18433: Make sure to search below the partitions baseDN for the netbios name.
      r18434: Fix typo...
      r18441: Allow searching for the high bit in these bitfields, when the client
      r18459: Set access to test LDAP server as system to anonymous, but also note
      r18495: More work on the LDAP backend (which now passes a lot of our tests!)
      r18498: While passing stack values into torture_tcase_add_test is bad, values
      r18504: Handle mappings for RENAME and KEEP attributes better.  We don't need
      r18770: Avoid crashes and fix up other issues in the client-side paged_searches module.
      r18774: This allows an automated way to setup the test environment in a shell,
      r18775: Performing an ldb op of 'do nothing' is pointless, and breaks against
      r18779: Not simo's fault, this is actually a bug I introduced a week ago, when I fixed the previous bug in this code.
      r18781: Move the usnCreated and usnChanged handling around again.
      r18786: I moved the usnChanged code around, and it now loaded in a different
      r18826: Allow 'enterprise' principal names to log in.
      r18827: I forgot to commit this:
      r18828: Export some more useful environment varibles, particularly for use in
      r18829: Print a nice welcome message when we enter the test environment.
      r18933: Add helpful emacs marker
      r18977: Seperate these asserts, so we know which fired.
      r18978: Fix bug found by:
      r18979: With these extra indexes (also added for the normal case) and a
      r18989: Fixes found by these two LDAP testsuites:
      r19115: Add the mapping required between Samba4's AD schema OIDs and what
      r19216: Merge from SAMBA_4_0_RELEASE:
      r19217: Merge from SAMBA_4_0_RELEASE:
      r19225: 30 seconds is too short for a Samba4 provision to finish.  Make the
      r19258: Don't delete the contents of the partitions twice, and in particular
      r19261: Fix use of unitialised variables.  (The binding string is used, if not
      r19262: Don't DEBUG() an unitialised variable
      r19264: Clarify behaviour in ldb_search_callback() and provide more
      r19265: It is not an error to set the target hostname to NULL.
      r19266: Add a target_hostname element to the binding struct.  This allows us
      r19308: Merge samsync fixes from SAMBA_4_0_RELEASE
      r19309: Split out checks for LDB_SUCCESS from checks for the expected number
      r19310: Add another conflicting oid
      r19311: Try to keep the schema map files fairly similar (hope for less weird bugs).
      r19315: Record some OID allocations.
      r19318: Because we don't test the vampire code in SWAT very regularly, it bit-rotted.
      r19321: Merge from release branch:
      r19336: Merge from release branch: new Mapped OIDs, in own subtree.
      r19462: This isn't an encrypted attribute.
      r19463: Make it clear what argument is incorrect
      r19464: Reject passwords that cannot be converted into UCS2.
      r19465: Rather than use the non-standard API for determining the signature
      r19478: Remove unused functions, and make static functions used only in this
      r19479: Remove more unused functions.  These are handled via authentication
      r19520: Try not to read past the end of the ldb buffer.
      r19521: Fix memory leak.
      r19522: Remove gensec and credentials dependency from the rootdse module (less
      r19523: Remove unused functions.
      r19538: This is getting silly, but I needed an easy way to run 'make testenv'
      r19566: Predeclare some useful structures.
      r19567: Make it easier to control the debug level in the test scripts, by not
      r19568: When we get back a skew error, try with no skew.  This allows us to
      r19589: Because we what we really wanted was coverage of seal and non-seal,
      r19590: Make it less noisy to run the session_key test outside 'make test',
      r19595: Seperate debug messages between database failure and simple lack of
      r19597: Ahead of the merge to current lorikeet-heimdal:
      r19598: Ahead of a merge to current lorikeet-heimdal:
      r19603: Make it easier to control the debug level of smbd.
      r19604: This is a massive commit, and I appologise in advance for it's size.
      r19606: Remove generated files
      r19628: This hint via Love at the IETF meeting:
      r19629: No need to special case use of DCE_STYLE sign and seal away any more...
      r19632: This got missed in the heimdal merge.  Without this, we don't keep the
      r19633: Merge to lorikeet-heimdal, removing krb5_rd_req_return_keyblock in favour of a more tasteful replacement.
      r19635: It appears that under CFX, different keys are used in each direction
      r19644: Merge up to current lorikeet-heimdal, incling adding
      r19649: Fix indentation.
      r19650: Allow Samba to use Heimdal's SPNEGO code.  Currently this can only
      r19660: Forgot to tell gsskrb5 not to canonicalize hostnames.  Shoudl fix
      r19681: Update to current lorikeet-heimdal.  I'm looking at using the realm
      r19682: Fix comments.
      r19683: Guard GUID_from_string from walking off the end.
      r19731: Modify the ldb_map infrustructure to always map from requested
      r19732: The 'res' from ldb_search is only valid if the call returns LDB_SUCCESS.
      r19733: More work to fix ldb_map.  With the wildcard present,
      r19757: Don't do the strrchr twice.  Pointed out by Martin Kuhl.
      r19759: Allow a join to occour against ncacn_ip_tcp again (useful for torture
      r19760: Create a DC account for the drsuapi tests to work on, rather than
      r19761: This may need work, but here is an initial implementation of
      r19805: Add the (harmless, but apparently default)
      r20099: Add some comments, and correct others.
      r20102: Do not reference remote_ldb before we initialise it.  This should fix
      r20113: Update the DRSUAPI CrackNames test to explore a few more cases, and in
      r20134: The IBM Checker correctly notes that *p cannot be \0 and still satisfy
      r20149: Remove the smb.conf distinction between PDC and BDC.  Now the correct
      r20152: Commit missing files from last night's commit.  We no longer maintain
      r20294: Without this we don't do the ADS join against Win2k3 SP1
      r20295: Add a couple more tests to the CrackNames test.
      r20297: Finally got to the bottom of why we were failing the RPC-CRACKNAMES
      r20314: I think some hosts need this to get the right ASN1 header deps
      r20315: Implement the server side of DsGetDomainControllerInfo.  This is a
      r20352: Use the common function to find the DN for a domain.
      r20353: Restructure the DRSUAPI DsGetDomainControllerInfo test, because as
      r20354: Trusted domains don't have a surname, I think we want 'cn' here.
      r20369: Remember to break if we find a match.
      r20373: When adding a base to a "" DN, don't precede it with a comma (,)
      r20374: It's still 2006 (just...).   Add copyright.
      r20375: Work to improve our CrackNames implementation.
      r20377: Rework the CrackNames implementation to handle some of the BUILTIN sid
      r20395: Decode more unknowns in the IDL.  These are language and codepage IDs!
      r20396: Missed one user of the renamed elements.
      r20397: Another user of the DsCrackNames call needs a rename following IDL clarification.
      r20398: Revert this patch, which caused failures in the samba3sam.js build farm test.
      r20406: Metze's change in -r 19662 broke Kerberos logins from Win2k3.
      r20455: Apply some of the patches from Martin Kuehl <kuehl at univention.de> to
      r20456: Rename variables to avoid shadowing global function names.
      r20457: Print more information before asserting
      r20458: This data is invalid, and causes the samba3sam test to fail, because
      r20459: LDB map cleanup:
      r20460: Simplfy the handling of password hashes in the samba3sam module.
      r20464: Make it clear what does the process group stuff
      r20467: Don't segfault if we don't have an OID map
      r20468: Patch from Martin Kuehl <kuehl at univention.de> to make it easier to load
      r20492: Add in instructions/sample LDIF to setup Fedora DS as a backend.
      r20493: Add support for the 'Netscape' varient of GUID formatting, used in the
      r20494: Dave CB <davecb at spamcop.net> found some stray characters in the docs,
      r20495: Further notes on joining with fedora DS.
      r20505: I had the wrong ldif name here.
      r20622: Add in a hack to avoid permitting searches on the value of protected
      r20639: Commit part 1 of 2.
      r20640: Commit part 2/2
      r20642: This bit of autoconf causes us pain.  Revert back to how we had things
      r20643: Remove generated files accidentilly committed.
      r20645: Commit the build system changes to allow scripts in config.mk files.
      r20648: Closer to a build...  Add missing header file.
      r20949: Looking over some lcov output, try and walk some error paths.
      r20958: Inspired by the lcov output, check the PASSWD_FILE and
      r20964: Show the domain name we figured out, rather than a null pointer (in
      r20984: Try to ensure we can't have sig_state dissapear before se.
      r20988: Call out to Heimdal's krb5.conf processing to configure many aspects
      r20997: Add in more certificate and key blobs, to enable PKINIT.
      r21008: We added a new argument to the provision() function, but I forgot to
      r21022: Trying out a new style for some of our WHATSNEW and README
      r21023: Brad Henry pointed out some typos.
      r21026: Add a helpful script to do the things we need to do to make a release
      r21027: Print the name we fail on.  I need to fix Samba4 to pass this.
      r21039: Test some more failure paths (trying to increase the lcov score).
      r21043: Work towards allowing Fedora DS to backend Samba4 in 'make test'.
      r21068: Code to configure, start and stop Fedora DS.
      r21069: Try to split up the mktestsetup.sh script into parts to deal with each
      r21071: Move some of the key path variables into the mk-keyblobs.sh script.
      r21103: This seems to do the 'right thing' in applying the correct access
      r21135: Instead of having hooks to update keytabs as an explicit thing, update
      r21175: Fix the kerberos keytab update code to handle deletes.
      r21179: Anything more complex than this causes the keytab never to be updated...
      r21255: Add a debugging option to avoid rid decryption in the samsync output.
      r21305: Change the skel module a little, so make it names clearer.
      r21491: Verify that the DNS domain name is filled in on GUID searches in the
      r21496: A number of ldb control and LDAP changes, surrounding the
      r21497: Pass more of the RPC-CRACKNAMES test by using the new search_options control.
      r21513: I don't know how long this has been wrong, but fix this up so we can
      r21553: Remove bogus comment.
      r21554: Use a snippet from tridge's junkcode to cause us to wait for smbd to
      r21649: Update self test scripts to start Fedora DS.  This requires current
      r21686: Do enable TLS, as we have solved the key setup problems, and we need
      r21687: Always test LDAP and LDAPS
      r21689: Try to walk a bit more of the param/loadparm.c functions, as well as
      r21692: Test with LDAP, but without the non-block testing.  This is not
      r21693: Fix the RPC-SCANNER test.  Share some code with the RPC-MGMT test to
      r21696: Run the RPC-COUNTCALLS test to try and walk some of the NDR layer for
      r21697: Try to cover the 'bad session key' codepaths too.
      r21698: Check for talloc failures.
      r21699: Because TALLOC_CTX is a void*, I didn't get a compiler warning about
      r21719: Try to cover more of the server-side password processing.
      r21720: Try to make 'TEST_LDAP=yes make test' work again.  These recent
      r21721: Push the 'Success!  Your new directory server instance was created'
      r21727: Walk some more of the error branches in the ChangePasswordUser server.
      r21728: Perhaps we don't need this on recent OpenLDAP servers.  This overlay
      r21736: Fix the smbclient test to do something more interesting with the last
      r21737: Print the error strings in the ejs ldb test.
      r21739: Make it easy to change the log level for the slapd processes, and have
      r21741: Like starting smbd, ensure we have acutally started slapd, and it is
      r21743: Always use the 'escaped' LDAPI path.
      r21744: Test more talloc failure cases.
      r21745: indent
      r21746: We don't link in this file any more.
      r21751: These 2 tests pass for me, so add them to the standard test script.
      r21760: Try to pin down were some errors are coming from.  Ensure we at least
      r21761: - Give more detail on LDAP client library failures (make it clear
      r21771: We just don't need to test this on more than one transport.
      r21789: We do actually need this, to get a contextCSN attribute, which we need
      r21790: Setup the socket_wrapper_dir when we set the environment variable.
      r21791: This test is still just as valid without as much CPU time wasted.
      r21805: Add PAC_TYPE_CONSTRAINED_DELEGATION to the PAC_TYPE enum.
      r21806: I've been working over the last week to fix up the LDAP backend for
      r21836: Assume that if an OpenLDAP system is 'modular' then everything is a
      r21970: Ensure that Fedora DS can be shut down correctly with the stop script:
      r21971: Fill in some more values in config files from variables, so we can
      r22075: Configure the bitwise match plugin, until it becomes accepted upstream.
      r22076: Fill in short and long domain names into the generated krb5.conf
      r22086: Bail out early on some of these failures.
      r22088: export PIDDIR to make the smbd pid show in 'make testenv' again.
      r22115: I don't like the DOMAIN environment variable.  It really isn't a good
      r22116: Only query by SID if we have a SID
      r22118: Add another RPC-CRACKNAMES test, but allow a way to skip sub-parts of
      r22119: Where we get a request to 'crack' a user principal name from a
      r22120: Expand the RPC-CRACKNAMES test, to test more values and expose patterns.
      r22121: The RPC-CRACKNAMES test now passes against Samba4.  This should help
      r22160: Only use test environment names that actually exist (get make
      r22161: Clarify exactly where the socket_wrapper should be handled (early),
      r22162: get the TEST_LDAP mode working again
      r22166: Stop heimdal from trying to prototype innetgr in roken, now we don't
      r22167: This seems to get Fedora DS to run the tests again.
      r22168: Ensure we actually run all the transports for the slow tests
      r22170: To get the smbclient blackbox test to pass again, we need to get the
      r22171: At least walk over the test_SetupCredentials2 before bailing as 'we
      r22176: Make the LOCAL-MESSAGING test pass again.  Messaging sockets are in
      r22177: Restore the PIDDIR mapping for the client 'pid directory', as this is
      r22180: Re-add testing of the CIFS backend.
      r22182: Skip a few tests that will not pass against the ntvfs/posix layer,
      r22183: Perl might not be in /usr/bin/perl, so use $(PERL) from the makefile
      r22184: On some hosts, parsing a compleatly invalid principal causes heimadal
      r22187: Test kerberos logins in the smbclient blackbox tests, including with a
      r22191: Add a samba4kinit binary to the build, so I can test using an existing
      r22208: Print the target principal name, to help with kdc unreachable errors.
      r22233: Allow 'REALM' as a global environment variable in the tests.
      r22235: Test kinit, and PKINIT functionality by means of a new blackbox test.
      r22236: Update to Heimdal's socket_wrapper, which supports IPv6.
      r22238: Because these utilities compile in socket_wrapper.ho, they may need
      r22284: Make this script executable
      r22288: Somehow, Jelmer lost a few capital letters.  I'll send him a new batch.
      r22290: Fedora DS is incredibly picky about newlines...
      r22292: Start the LDAP server inside the same fifo as smbd, as OpenLDAP (like
      r22293: Try to make it more clear what failed to parse.
      r22294: Lock the delegated credentials to being kerberos only, we just don't
      r22295: Use delegated credentials and kerberos to test the pass-though
      r22322: Cut timelimits for BENCH tests run in quicktest.
      r22333: Use kerberos and the ntvfs/cifs backend for just one test, in the
      r22427: Abort in a few more cases of failure to provision.
      r22443: It isn't fatal to get the case wrong on this stuff.
      r22474: If ldb does not return sucess, then the res variable may not be valid.
      r22475: Rather than segfault, show the name of the malformed entry.
      r22476: The OID match is used very oddly in AD, as it is often used for fields
      r22477: When an invaild base is specified to ldb_search, it should return
      r22478: Update the LDAP backend code to handle initialisation of multiple
      r22494: Skip subSchema again, but we will need to remap this objectClass.
      r22497: Support renaming objectclasses and attributes for the LDAP backend.
      r22498: The initial LDIF import into Fedora DS didn't work, so just push this
      r22521: Don't fail the module load just because we don't have a schema yet.
      r22522: Print why we can't find these entries.
      r22523: Give a hint why this test fails (helped debugging backend issues).
      r22531: Fix up OpenLDAP schema map to almost pass 'make test'.
      r22556: Make the slapd command valid.
      r22557: Simo has long bugged me that the paths in the sam.ldb partitions were
      r22558: Move to a static list of enctypes to put into our keytab.  In future,
      r22559: Make the ad2OLschema tool case insensitive.
      r22572: Don't manually set objectGUID values
      r22582: Cleanups towards making winbind work again.  We still have a long way to go, as this has bitrotted over the past months.
      r22594: This helped coax out valgrind errors last night, but we don't need it any more.
      r22612: Fix more cases where we have uninitialised values in the
      r22756: Make it easier to setup an LDAP replica.  Provision with
      r22838: Add in an explority test for what QFSINFO operations are valid on IPC$
      r22873: Make the RAW-QFILEINFO-IPC test pass against Win2k3.
      r22874: Expand the RPC-QFILEINFO-IPC test, and add a server implementation to match.
      r22875: We want to skip this test, it will fail unless run against IPC$ (which the pattern does not).
      r22877: Remove stray 'l'
      r22882: It seems entirly reasonable to follow metze's suggestion and check for
      r22883: Indentation.
      r22884: Be consistant with the case of these constants.
      r22921: This index saves another 7 seconds off a 'make quicktest', and is a common search operator.
      r22966: Make sure to return LOGON_FAILURE if the user's kerberos password is
      r22967: Move to the TCP packet interface for the krb5_send_to_kdc plugin.
      r22983: This should ensure that torture_create_testuser() can be called,
      r22987: Clarify how the events are handled in the kerberos code, and
      r23026: Add groupPolicyContainer, as we now require this schema element.
      r23027: Make sure the parent object always exists.
      r23028: I've now got a patch to Fedora DS to make it only install the very base schema.
      r23032: Remove calls to println(), and ensure we print the ldb errstring().
      r23034: Thanks to metze for providing some vital clues in the 'kerberos ccache
      r23035: We don't need to add this entry, and I hope to figure out how to avoid
      r23063: Make sure to invalidate the ccache when we set a
      r23064: Clarify comment and indent
      r23089: This is upstream now, so we don't need to add it manually.
      r23132: Resolve an issue where we would use the ccache after we free()ed it.
      r23133: I felt pity on Kai, as he starts work on winbind in Samba4, so I
      r23134: Set the event context onto the cli_credentials.
      r23136: Set the event context onto the credentials in more places.
      r23141: Use the finddcs() library call rather than a winbind-specific version.
      r23149: Fix up the trusted domain lookup code to use the new structures.
      r23176: Note that we only return one DC from this call at the moment.
      r23177: Add in a new provision-backend script.  This helps set up the OpenLDAP or Fedora DS backend.
      r23189: Work towards a totally scripted setup of LDAP backends, so others can
      r23191: Use the new provision-backend script to setup Fedora DS for make test.
      r23232: Add in some extra files required by the new provision-backend.
      r23233: Use the schema and basedn files generated by the provision-backend script.
      r23235: Don't do a seperate LDAP provision step.  Instead, everything we need
      r23257: Newer OpenLDAP versions don't seem to need this, so simplfy.
      r23261: Merge WHATSNEW back into the main branch.  Comments/omissions greatly
      r23262: Fix mkrelease.sh to work in the right directories
      r23264: Make it more clear what this is actually setting up
      r23281: Ensure we wipe all the right things in distclean.
      r23286: In SWAT, it was not possible to use a domain name other than the default.
      r23325: Remove items from menu that have been removed from SVN long ago, with
      r23351: Merge from SAMBA_4_0_RELEASE:
      r23361: Merge from SAMBA_4_0_RELEASE:
      r23365: Try to make Windows Vista join again.  On my new test environment, it
      r23373: Fix spelling...
      r23412: We don't need hdb.h here any more
      r23455: These buffers may not be null terminated. Ensure we don't run past the
      r23456: Update Samba4 to current lorikeet-heimdal.
      r23503: use hdb_dbc not hdb_openp.
      r23551: Change data_blob_equal to data_blob_cmp, suitable for sorting with qsort().
      r23557: Ensure that we don't reorder the objectClass list, if we don't have
      r23558: MMC seems to ask for this, so I think we need to include it in our schema.
      r23560: - Activate metze's schema modules (from metze's schema-loading-13 patch).
      r23677: When I removed data_blob_equal, I clearly didn't test the PIDL code.
      r23678: Update to current lorikeet-heimdal (-r 767), which should fix the
      r23679: invocationID is a GUID too.
      r23680: Make it easier to setup a domain member server - the 'server role'
      r23693: Give the process a chance to write out it's coverage data, before we
      r23695: By not using the NULL context for these large structures, we don't
      r23703: Start to get Samba4 to again work with LDAP backends, after I turned
      r23715: Make the provision-backend script print out the exact commands to run,
      r23716: Clarify LDAP Manager DN and fix slapd startup syntax.
      r23717: We need to remove the _ in LDAP_MANAGERPASS for the
      r23718: Make Samba4 work against the LDAP backend again.
      r23719: ejs being case sensitive, while LDAP is not is a real pain when
      r23720: Allow the member server to work against an LDAP Backend.  Another case
      r23737: Validate that we object to duplicate values in an add or replace.
      r23754: Make sure to check the status return before we de-reference the
      r23762: Fix DN renames over LDAP, and instrument the partition module.  Add a
      r23809: Don't give users the fantasy that we can control choice of GENSEC
      r23810: Make things static, and remove unsued code.
      r23811: Try to ensure struct nbt_name is always pre-declared.  Might fix the
      r23812: Remove more code found as dead by the find_static script, and make
      r23815: Thanks to Matthias Wallnoefer <mwallnoefer at yahoo.de> for pointing out
      r23816: A little more static, but leave the dead code testjoin.c as documentation.
      r23848: Thanks to derrell for pointing out that I had not finished my patch to
      r23849: ldap_server:  Provide more info in debug traces
      r23852: Merge Samba 3.2's wbinfo into Samba4, so Kai can use it for testing.
      r23859: Work to have Group Policy work 'out of the box' in Samba4.
      r23875: As pointed out by mwallnoefer at yahoo.de:
      r23880: Don't crash when we run wbinfo -a against our own winbind when we are a DC.
      r23881: A quick fix from davecb at spamcop.net to be more portable to non-GNU
      r23890: Allow wbinfo -a to work against Samba4's winbind.
      r23905: SATOH Fumiyasu <fumiyas at osstech.jp> points out that we want &&, not ; here...
      r23907: Fix bug 4790 reported by mwallnoefer at yahoo.de:
      r23912: We always accept / as a seperator, and it is far less confusing
      r23960: Don't destory the 'reason' for terminating the service before printing it.
      r23961: Allow SWAT to operate on x86_64 machines.
      r23964: Update blackbox selftest scripts to cover more code, and to more
      r23965: Add testing the 'net time' command to the script.
      r23966: It isn't great, but at least now we have some access control in SWAT
      r23982: Fix use-after-realloc() found by valgrind and mwallnoefer at yahoo.de.
      r23993: Attempt to fix bug #4808, reported by mwallnoefer at yahoo.de.  The issue
      r23994: Finish my work to ensure that non-root and non-administrator users
      r23995: Work to allow mimir's libnet code to be called from winbind.
      r24010: Fix warning for the function paramter to qsort().
      r24011: Keep the connect handle around in libnet, in case we want it.
      r24012: Remove duplicate code block (from bad merge).
      r24052: Fix some of the NT4 usrmgr.exe portions of bug 4815.
      r24053: Ensure we filter EnumDomainUsers with the supplied mask.
      r24059: Fix bug 4822 reported by Matthias Wallnöfer <mwallnoefer at yahoo.de>.
      r24060: Fix bug #4806 by Matthias Wallnöfer <mwallnoefer at yahoo.de>: We need to
      r24061: Anther part of bug #4823, which is that until now Samba4 didn't parse
      r24074: Test both permitted logon hours and permitted workstations in the
      r24075: As suggested by metze, match the behaviour of ntvfs_posix, and remove
      r24076: Make ldap.js pass against Win2k3 again (looks like we don't match AD
      r24080: Set the primary group (matching windows) when creating new users in
      r24081: Domain Controllers are also shown in this enumeration.
      r24082: Following the removal of a fanstsy condition from the SAMR testsuite,
      r24083: Don't fail the test (looking for the user in the enum) if we didn't
      r24110: I hate seeing callers manually filling in the composite context.  Use
      r24111: Untested code is broken code, untested code is broken code...
      r24112: Complete initialistion of the libnet_ctx when setting up the domain.
      r24118: Start fixing #4842 (usrmgr polcies menu not working) by removing range
      r24127: Set the Domain SID into the libnet context, and have libnet_UserInfo
      r24146: It is not an error for a Win2k3-only server not to support the NT4
      r24245: Fix bug #4828 - we need to set the samba LDB debug handler early, so
      r24246: Avoid the annoying 'probable memory leak in ldb' messages, by fixing
      r24247: Remove extra newlines from ldb_debug() calls - it already adds one.
      r24248: Attempt to fix bug #4830 by <mwallnoefer at yahoo.de>.  If there is no
      r24249: Thse generated attributes should not be pushed this far down the stack
      r24259: Rework the objectclass module to use the new schema, rather than the
      r24260: Ensure we always override any existing values for these generated
      r24261: Fix the standalone ldb build after I moved the objectclass module out.
      r24262: Set the objectCategory by default in the objectclass module, rather than using templates.
      r24263: Fix bug 4846 (unable to copy users in MMC Active Directory Users and
      r24273: Fix bug #4817 by <mwallnoefer at yahoo.de>.  (Unable to add a computer
      r24277: Tidyup as requested by metze.
      r24282: Try to fix the occasional Samba4 crash in BASE-BENCH-READWRITE, as
      r24285: A number of machines on the build farm fail because while they use
      r24286: (missed from previous commit)
      r24300: Try to get the LOCAL-EVENT test to pass on hosts with epoll() in
      r24301: The less escape characters the better.  This changes the winbind
      r24390: Another attempt to find out why we fail the LOCAL-EVENT test on some build farm hosts.
      r24459: Fix up ldap.js and test_ldb.sh to test the domain_scope control, and
      r24479: Typo fix - this makes 'make test' pass against OpenLDAP again.
      r24502: More work to get LOCAL-EVENT passing on all platforms:
      r24503: Make 'make test TEST_LDAP=yes' pass on Fedora 7, by trying more
      r24504: Try to return more useful error information on why a bind failed.
      r24566: Remove trailing newlines in ldb_debug(), these are not required.
      r24567: Try much harder not to leak memory when comparing objectCategory entires.
      r24568: Fix the build, caused by a conflict betwen mimir's work and metze's bulk rename.
      r24611: Following up on the re-opening of bug 4817 is it pretty clear that
      r24612: Revert this part of -r 24611.  This isn't related to my SAMR password
      r24613: Missed this in my recent commit -r 24611.  We don't discriminate on
      r24614: Merge with current lorikeet-heimdal.  This brings us one step closer
      r24631: Fix up format warnings, found on my Fedora 7 x86_64 workstation.
      r24633: Try to start on a set of release notes for Samba4 alpha1.
      r24640: Add a suggested BIND configuration snippit, to help with DNS configuration.
      r24648: Found out the meaning of a few more flags.
      r24655: Fix bug 4919 reported by Matthias Wallnöfer <mwallnoefer at yahoo.de>:
      r24690: Further fix to bug 4919: Ensure we don't supply a NULL URL argument to
      r24693: Test search options in ldb blackbox testing.
      r24694: Remove objectCategory entries from the setup templates.  These can be
      r24695: Now the Samba4 passes this test, remove the skip...
      r24696: Fix bug 4918 reported by Matthias Wallnöfer <mwallnoefer at yahoo.de>
      r24697: Excelent patch and detective work by Matthias Wallnöfer
      r24698: Patch from Andrew Kroeger <andrew at sprocks.gotdns.com> to fix Bug
      r24729: First try and publishing a DNS service account, for folks to play with.
      r24730: Allow secrets entries to be for service principals.
      r24731: Remove unused code - if we hit these error conditions, then we are
      r24760: Ensure we base64 encode any password being put into LDIF, to avoid
      r24761: Permit subtree renames in Samba4.
      r24793: The subtree_rename module is a work of fiction.  An resemblance to a
      r24822: Merge from SAMBA_4_0_RELEASE:
      r24819: We are preparing for alpha1, so update the mkversion script to cope with that.
      r24859: Merge from SAMBA_4_0_RELEASE:
      r24909: Patch from Andrew Kroeger <andrew at sprocks.gotdns.com> on the slow road
      r24911: Make better use of substituted variables in example named.conf
      r24913: Fix typo
      r24914: In response to bug #4892 by Matthias Wallnöfer <mwallnoefer at yahoo.de>,
      r24915: Try to quiet down this warning - the 'classic' share code doesn't
      r24918: Fix the build (forgot to include dcesrv_lsa.c in the previous commit)
      r24941: Simplify samdb_result_nttime(), and remove nttime_from_string()
      r24942: Patch from Matthias Wallnöfer <mwallnoefer at yahoo.de> and a testsuite
      r24945: The behaviour of the SAMR server on a member server is worth testing
      r24959: Merge back changes from release branch, and set new VERSION on main tree.
      r24971: Test more combinations for resetting the account expiry.
      r24972: Try to rat out this SAMR failure with some more cross-tests, and
      r24973: Try to make it really clear we are dealing with 64 bit numbers here.
      r24985: Start to revert us back to the old-style SWAT, while trying not to
      r24986: LDB has a function for comparing things that must meet the rules of
      r24987: Clarify error conditions in secrets handling, before I add ACLs to
      r25048: From the archives (patch found in one of my old working trees):
      r25051: Move SWAT back to the old-style form-submit modal.
      r25052: This missing 'break' caused problems on 32 bit platforms only, due to
      r25053: Show the user class alongside the username.
      r25071: Add some more testcases for RPC-DRSUAPI-CRACKNAMES, proving I can't
      r25073: Correct test name so make test can pass again.
      r25194: A major rework of the Samba4 LSA LookupNames and LookupSids code, with
      r25196: Thanks to id10ts on IRC for finding some typos in my well-known names
      r25203: Don't use subclasses in Samba4, as we always fill out the full
      r25204: Patch by Andrew Kroeger <andrew at sprocks.gotdns.com> fixing bug #4958 -
      r25218: After discussion with Simo, remove the subclass support from LDB.
      r25249: Thanks to Andrew Kroeger for pointing out this silly typo (calling
      r25268: Thanks to Andrew Kroeger for pointing out on IRC that this is
      r25299: Modify the provision script to take an additional argument:  --server-role
      r25300: Update howto.txt with modified provision syntax.
      r25303: Print out the options the provision script generated.  This should
      r25304: Thankyou to Amin Azez <azez at ufomechanic.net> for pointing out that I
      r25354: Thanks to Amin Azez <azez at ufomechanic.net> for finally getting me to
      r25383: Patch from Amin Azez <azez at ufomechanic.net> to give better message
      r25450: Make it easier to test with a particular version of OpenLDAP, by
      r25451: Rework the display of provision options to use printf syntax, and
      r25452: Move the creation of the server entry to the self join, as this makes
      r25596: It isn't valid to take the address of an array on the stack, and this
      r24821: Update the mkrelease.sh script and mkversion.sh to make releasing correct
      r24823: Without any better ideas as to how to fill out the WHATSNEW, I've
      r24858: Make the 'vampire' code work again - clearly nobody uses this...
      r24910: Merge named.conf patch by Andrew Kroeger <andrew at sprocks.gotdns.com>
      r24912: Merge 'use more substituted variables' patch to release branch.
      r24916: (merge to release branch)
      r24917: More thoughts on Samba4 release notes, readme etc.
      r24919: Merge build fix and improved error strings to release branch.
      r24944: Merge acct_expiry fix to release branch.
      r24947: Forgot to merge this to release branch, so we got weird subs in
      r24958: This is the final text, and the final version. I'll send the release
      r25616: Fedora DS now has a way to install the schema and extra configuration
      r25618: I'm sick of the fstring warnings turning up here. Let's see how much
      r25619: As perhaps could have been expected, the CFLAGS hack broke all non-gcc
      r25660: Add a new interface 'generate_secret_buffer()', to be used when we
      r25661: We don't actually need to know with DEBUG(0, ... every time we ask for
      r25693: Implement the rest of subtree renames, now that tridge waved his magic
      r25694: Move subtree_rename above the partitions module. The next step is to
      r25701: Clarify comment
      r25702: Clarify comments and make this module more strict on objectclasses.
      r25703: Use less entropy by using the pointer value as a process-unique token.
      r25704: Handle the chicken-and-egg problem of setting up the LDB before we get
      r25705: Ensure we return the out value to the caller.
      r25710: Finally fix subtree renames. Untested code is broken code and in this
      r25723: Add a check to prevent deletion of entries with children. Sadly MMC
      r25729: Fix silly regression in the subtree_rename - I broke normal renames.
      r25747: Implement linked attributes, for add operations.
      r25748: Don't segfault if we don't have a schema yet.
      r25749: Add function required by linked_attributes module.
      r25750: Update the objectclass module to improve consistency in Samba4.
      r25753: Move cn=rootdse to @ROOTDSE to avoid being caught up in schema restrictions.
      r25754: More work on normal forms for ldb input.
      r25755: Fix a couple of memory leaks, in particular a new leak onto the NULL
      r25759: catch up the samba3sam tests with the change from cn=rootdse to @ROOTDSE
      r25760: Test out relative distinguished name behaviour under renames.
      r25761: Rename to be a DN to be a child of itself wasn't being checked for.
      r25762: This test belongs best with the other checks for a valid parent, in
      r25763: Handle modifies, in the easy case (add/delete of elements), for the
      r25781: Handle and test linked attribute renames.
      r25786: Add function required by linked_attributes module (We need a list of
      r25787: Assert that we handle the group membership updating correctly,
      r25788: Use a single routine to handle the creation of modify requests in the
      r25825: Don't print the user's password hash at level 0.
      r25826: Prove that adding a user or computer via LDAP doesn't magicly give
      r25856: If the search fails, it is not valid to steal 'res'.
      r25857: Indent
      r25891: Test that we get the correct return value when we attempt to reference
      r25921: Now also listen on ldapi by default in the LDAP server
      r25922: Make it easier to bind to a unix domain socket, without messing with
      r25923: Make sure to install phpldapadmin-config.php
      r25933: LDB: Don't free errstring until after the printf, in case it is one of
      r25934: Handle a LDB_ERR_NO_SUCH_OBJECT return value when looking for the
      r25938: We don't need the CLDAP server unless we are a DC.
      r25939: Rework the CLDAP server not to use gendb_search but to call ldb_search
      r25940: Rework the samldb and templates handling.
      r25941: Use samdb_relative_path() (new function in samdb.c) in the partitions
      r25942: Make various ldb modules handle an LDB backend that enforces validity
      r25948: Fix up the samba3sam test (which is very fragile) to work with the new
      r25949: Make error messages clearer and more correct.
      r25950: Enable seperate module to prevent subtree deletes.
      r25952: Add in new data file required by samba3sam test.
      r25957: Rework the cracknames code to use less gendb_search() and instead call
      r25958: Callers of gendb_search_dn() don't expect to get
      r25959: Add a new special DN to LDB: @OPTIONS
      r25960: Enable checks on the validity of the search base on sam.ldb in Samba4.
      r25961: Add new tests to verify basedn validation in LDAP searches.
      r25962: Move to more modern ldb functions loading module list.
      r25964: Fix comment and use talloc hirachy in ldb_tdb initialisation.
      r25965: Remove duplicate block - thanks metze!
      r25966: Don't force an 8 byte width to generated SIDs, as this can actually
      r25981: Don't create an ldb_request on NULL.
      r26131: Ensure we show the right errors in the NULL base DN case. Based on
      r26135: Remove samdb_add(), samdb_delete() and samdb_modify(), which were just
      r26137: Rename the entryUUID module to better match it's purpose: being a
      r26138: Don't talloc_free() res if an error occoured.
      r26139: Based on a report by Theodor Chirana, don't assert() on invalid
      r26140: Add a new test for searches by distinguieshedName and dn, and
      r26182: Extend our linked attribute testsuite to cover many more possible
      r26183: The idea of a self-seeding secrets.ldb is nice, but in practice we do
      r26192: Handle, test and implement the style of extended_dn requiest that MMC uses.
      r26193: In the LDAP server, use the new 'controls_decoded' element to
      r26244: Add a module (sans tests for the moment) that implements ranged
      r26245: Make it easier to handle the LDAP backend, with it's differing needs,
      r26246: Make it easier to debug assert()s in the provision, if messages are
      r26282: These modules expect errors, but if we don't wipe the error string, we
      r26283: fix typo
      r26284: Rather than just debug, push the error back up the stack as the error
      r26297: Correct error message. This function verifies attributes, not
      r26298: Use metze's schema loading code to pre-initialise the schema into the
      r26299: Print out which module failed to initialise.
      r26300: Don't segfault when called from the ntptr libs.
      r26301: Collapose ldb_next_init() into being a caller of ldb_init_module_chain
      r26302: Print the error string for failed rootdse searches.
      r26303: Fix up error reporting during the delete of previous entries in the
      r26304: More work to remove silly error printouts.
      r26305: Update template files and testsuite to try and work with current
      r26324: Fix includes for Jelmer.
      r26354: In trying to chase down why we have reports that WinXP won't join
      r26361: Ensure this test cannot proceed if the pipe connection failed.
      r26362: Fix segfault in NET-API-DELSHARE torture test.
      r26365: This will now be the alpha3 tree (once I release alpha2).
      r26386: We need to test in more than just 'interactive' mode...
      r26389: Merge SWAT changes from alpha2 back into main Samba4 tree.
      r26412: Add comments and refactor to reuse common code.
      r26419: Add a module to implement 'ambigious name resolution' by munging the
      r26420: Don't print a blow-by-blow description of every search we do, just the
      r26424: Patch and hits from Howard Chu <hyc at symas.com> for our automated setup
      r26479: Further test behaviour of 'attribute or value exists'.
      r26485: Fix indent, remove left-over debug.
      r26488: Implement tests for the ranged_results module.
      r26529: Indeed, this belongs in the schema module. Ranged results need to use
      r26364: Branch Samba 4.0 for an alpha2 release.
      r26387: Merge logfile segfault into alpha2 branch.
      r26388: Fix up SWAT provision (again...), after changes I made to the
      r26390: Start on a WHATSNEW for the alpah2 release.
      r26489: Merge fixed ranged results module to release branch.
      r26490: Update WHATSNEW. Unless some fancy new words arive soon, this is what
      r26501: Merge kblin's updated README
      r26541: Mark this as the release
      r26556: Make Fedora DS consistant use FEDORA_DS_ROOT, now we use OPENLDAP_ROOT.
      r26557: sync WHATSNEW with release branch of Samba4
      r26609: Try a few more variatations to get the selftest to run against
      r26610: Write out a memberof.conf, to run the memberof plugin on all linked
      r26611: Tridge didn't write this...
      r26612: Tests show that we don't need to use a callback.
      r26613: Add a function to write a DATA_BLOB into an LDAPString.
      r26635: The OpenLDAP folks have been very accommodating, and their memberof plugin allows the error being returned to be adjusted.
      r26636: Remove useless 'backend' parameter, and make the memberof overlay use global.
      r26647: Mark 'valgrind_run' as executable
      r26648: Move detection of global catalog captability to a central function, so
      r26649: Only claim to be a PDC if we are a PDC.
      r26679: It is very bad to free the ldb handle when you didn't create it...
      r26680: Don't always advertise GC functionality.
      r26681: Use fewer magic numbers.
      r26682: Move CLDAP to the modern torture system, and add value checking.
      r26683: Add another testcase. I still don't know what's wrong here.
      r26684: Trivial cleanup from Matthias Dieter Wallnöfer, from bug 5090
      r26685: Fix bug 5137 by Mark Ridley. The RPC-ATSVC test is not tested, so was
      r26686: Fix bug 5143 by Jason Tarbet. This prevented an easy cut-and-paste of
      r26697: Leak less memory into the ldb context.
      Native move servers will refuse these SamSync operations, so don't
      Return 'not implemented' on more RPCs.  (easy way to 'pass' the
      Merge commit 'origin/v4-0-test' into 4-0-local
      Make Samba4 and Fedora DS happier
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Add in new module to normalise DNs being returned from OpenLDAP.  This
      Fix segfault when sorting LDAP replies on the client.
      Rework ldbsearch to avoid segfault when remote LDAP server returns
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Remove 'dn' from mapping, it isn't a valid attribute in AD, and causes
      Use 'dn' less, as this is not a valid attribute in AD, and I want to
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Rework control handling to remove the 'domain_scope' control
      Make ldap.js test easier to re-run in failure cases, by deleting more
      Test the behaviour of mixed domain_scope and search_options controls.
      Make the Fedora DS LDAP backend 'aci' actually work, with better quoting.
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Start generating a configuration for the refint overlay.  This
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-abartlet
      Allow the 'extra' objectclass added to objectClass attributes by
      Rework linked_attributes module for the REPLACE case.
      Print out the reason we can't delete the user in SAMR.
      ldb_map objectClass munging: Don't hard-code 'extensibleObject'.
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      OpenLDAP backend: Place the refint overlay after the memberof overlay
      provision: simplfy by removing old code to manually create baseDNs.
      Add in a new module to handle instanceType
      Correct authorship of instanceType module
      Remove --ldap-base from the python provision script
      Search for memberOf when clients ask for a wildcard against OpenLDAP
      Use syncrepl on all OpenLDAP databases (creates contextCSN attribute)
      Don't manually specify instanceID in the template files.
      Add showInAdvancedViewOnly to every new object
      Merge commit 'origin/v4-0-test' into 4-0-local
      Don't set 'name' in the LDIF, this is handled by the rdn_name module.
      Only set showOnlyInAdvancedView: TRUE when adding default values.
      Remove default 'showInAdvancedViewOnly' values.
      Be sure to pass iconv handle down to compression subcontexts (fixes
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-abartlet
      ranged_results: fix use of uninitialised variable (end)
      Make ranged results tests in ldap.js easier to debug.
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Fix segfaults in codepaths only tested by the NET-API-BECOME-DC test.
      Fix DRSUAPI replication test - NET-API-BECOME-DC.
      Get more information from ldb when reporting a failed replication.
      Remove useless subs from the ejs provision
      Kill another sub that the modules will handle for us.
      Use the repl_meta_data module by default.
      Make the repl_meta_data module the default for domain controllers.
      Ensure we set subobj.BACKEND_MOD for the 'partitions only' case.
      Tidy up the last regresesions on the python smbscript, from my work
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-abartlet
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-abartlet
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-abartlet
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-abartlet
      Rework service init functions to pass down service name.  This is
      Rework cluster_id() to take an additional argument, as we need
      Rework process_single.c to take advantage of cluster_id() now taking an additional argument.
      Remaining changes to implement the prefork process model
      Remove useless layer of indirection, where every service called
      Fix a few more breakages from our recent changes to the server_id
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-abartlet
      Clarify nomaclature of socket names in process_single and process_prefork
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-abartlet
      Ensure expected errors do not leak up to the application.
      Fix LDAP backend with python provision
      Remove unused ldap_backend argument from provision.py
      LDAP backend provision now works with python.
      Remove unused argument to provision().
      Revert to ejs for 'provision'
      Fix syntax in LDAP test
      Reset error strings
      Fix LDAP backend with python
      LDAP now works with the python provision!
      Remove unused parameter from provision()
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      From a request from Peter Huang, include IPsec sechema.
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Make the provision test more real, use a foo.example.com for the realm.
      Give a more useful error when the templates.ldb can't be found.
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Remove the forced 'krb5' from the NET-API-BECOME-DC test.
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      A couple more ipsec classes for the schema.
      Explain that these OIDs are DNs
      To partially simplfy our gcov handling, move to the new --coverage option.
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-abartlet
      Simpler specification of CFLAGS and LDFLAGS
      Until the new ldb changes land, make ldb_wait set the error string.
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Be consistant about --ldap-backend-type
      Make use of smbpython clear.
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Remove more cruft about smbscript.
      Do not re-randomise in an individual test.
      Extend the ldap.js test
      Fix rdn_name errors.
      Reorder modules to have rdn_name before objectclass.
      Users and computers now share the same template.
      Generate ACB_PW_EXPIRED correctly
      Check for and reject invalid account flags.
      Fix up the libnet tests.
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Ensure we don't try and set the acct_flags if they are 0 (meaning
      Simplify the 'password must change' logic
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Prove that not supporting ldapi is a bit problem.
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      fix typo
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Fix failure to re-provision.
      Don't hardcode objectCategory into the schema, even in the schema.
      The DN in objectCategory should, if possible, be returned pretty...
      Try to return sane ldb error strings
      Make Samba4 pass the NET-API-BECOMEDC test against Win2k3 (again).
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-abartlet
      Ensure we get this option from the command line, not the internal
      Fix typo
      Start to rework provision for LDAP backends
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Fixup the NET-API-USERMOD test.
      Rework provision scripts for more testing
      Try to fix up part of the upgrade test.
      Make error handling in ldb more consistant.
      Extend testsuite to cover specifying a domain SID.
      Fix provision script to work without smb.conf location specified.
      Upgrade provision-backend to python.
      Don't talloc_free() the UUID before we return.
      Update the provision scripts and selftest for LDAP
      Merge branch 'v4-0-test' of git://git.samba.org/samba into 4-0-local
      Don't segfault on invalid objectClass input.
      Rework to have member server 'domains' be CN=NETBIOSNAME
      Don't search the whole tree for the domains's sid
      Correctly normalise records against OpenLDAP.
      Bail out, rather than segfault on no domain sid.
      Report binding in libnet failure message.
      Show why a LookupName fails (help debugging)
      Don't use 'dn', this attribute does not exist with the LDAP backend,
      Rework SAMR functions to avoid gendb_search()
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Check for Administrator as a Alias (copy&paste bug)
      Rework our SAMR test and SAMR server.
      Allow more 'domain' objects when looking for a unqiue SID.
      Rework memberof handling in slapd.conf (used for OpenLDAP backend)
      Don't require users of credentials.h to have krb5.h and gssapi.h
      Merge lorikeet-heimdal -r 787 into Samba4 tree.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Merge branch 'v4-0-logon' of git://git.id10ts.net/samba into 4-0-local
      Supply HDB_DB_DIR macro
      More safety around ldb_dn C functions in python bindings.
      Remove unused variable.
      Indent
      Extend the ldap.js test to prove faults with the LDAP backend.
      More kludge ACLs!
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Explain why this attribute should be skipped.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Remove useless extra argument to samdb_result_account_expires().
      Remove pointless cast
      Clean up the ldb python bindings to be 64 bit safe.
      Remove old js versions of newuser and provision.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Prepare for Samba4 alpha3.
      Make oplocks a per-share option.
      Merge with metze's change for oplocks to be on by default
      Fix references to ntvfs share config
      Actually call into lp_oplocks() in share_classic backend.
      Fix how we initialise the oplocks parameter.
      Add change about account expiry
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Make the setup/newuser and setup/setpassword scripts actually work...
      Merge branch 'v4-0-local' of git://git.id10ts.net/samba into 4-0-local
      Remove references to the new SWAT.
      Add tool for enabling accounts
      Fix 'oplocks' in loadparm.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Don't specify what should be a default option in the generated smb.conf
      No longer install SWAT files
      Fix and test python scripts and kerberos
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Finally found the magic string to skip the python registry tests.
      Fix some valgrind issues.
      Fix more valgrind issues.
      Merge branch 'v4-0-test' of git://git.id10ts.net/samba into 4-0-local
      Don't leave release trees hanging around
      Add a few more safety catches to the mkrelease.sh script.
      Rework 'compleated' message in provision to be more useful.
      Merge branch 'v4-0-local' of git://git.id10ts.net/samba into 4-0-local
      This is Samba4 alpha3!
      Mark as GIT snapshots again
      On our way to alpha4...
      Remove references to setting the host GUID, as the repl_meta_data
      Fix merge of my host GUID removal and the IPv6 addition to provision
      Fix conflicts in setup/provision script.
      Clean up provision and rootdse module to hard-code less stuff.
      Pass discovered server DN down to provision.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Extend credentials python API to include set_machine_account.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Rework talloc hirarchy for C provision setup.
      Re-add support for the --ldap-backend-port option to provision-backend
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Start implementation of real 'net vampire' code.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Be consistant in using ${SEVERDN}.
      Remove dns_name element
      Factor out filling in the secrets database.
      Don't fill in the secrets DB unless we make the entries.
      Link the new vampire code togeather.
      Fix up provision to specify SERVERDN in more places.
      Set a netbios name into provision, and zero the rest.
      Fix merge errors on C provision interface after jelmer's good work.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Far less cryptic traceback when you have an existing smb.conf
      Use the python-provided ldb and lp_ctx pointers in libnet_vampire.c
      Don't reopen the sam.ldb again
      Don't specify the ntds_guid to the C -> python provision interface
      Reuse the lp_ctx and samdb returned by the python provision.
      Actually test the different 'fill levels' in the provision process.
      Add in a way to get at the private_path() function from python
      Fix newuser and setpassword scripts, and port to idmap.
      Re-run SWIG
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Include the smbconf parameter to the provision
      Ensure we initialise s->lp_ctx for the way into the provision.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Add blackbox test for ndrdump, to ensure it at least does not
      Test a few more bits of smbclient
      Test password change with 'net password change'.
      Fix provision-backend script
      Fix winbind to check machine account.
      Fix some of the winbind tests.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Re-add 'db' subdirectory for LDAP backend provision
      Now that we don't create a new event context, don't free it.
      Fix wbinfo --trusted-domains.
      Fix struct_based winbind test for 'check machine account'.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Adjust the expectations of the struct based winbind test.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Use the struct based winbind tests, but mark as known fail.
      Skip strcmp() on 2 NULL pointers.
      Run more tests that were previously skipped.
      Fix the expectations on the unixinfo test.
      Fix build not to always use code coverage.
      Run samba3sam.js with bin/smbscript explicitly.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Fix samba3sam test.
      Don't exclude all tests mentioning 'samba3', but only those actually
      Fix bug in registry test on big-endian machines.
      More work to avoid endian bugs in registry tests.
      Fix typo
      More endian fixes in the registry
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Fix samba3 protocol to correctly include the NULL terminator
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Add in a nice big comment explaining why SamLogonEx matters.
      Having killed it from Samba 3.0 and trunk, kill 'unicode' from samba-docs.
      The whole point of the 'privileged' pipe is that it is not world accessible...
      See, I really can write documentation when I put my mind to it...
      It appears that <program> isn't valid here, but <command> is.
      Add links to squid, and mod_ntlm_winbind.
      Add a note warning against the use of wbinfo -a for authenticacation
      Explain that winbind does not cache authentication requests.
      Remove bogus comment from 'client use spnego'.
      Clarify that turning off lanman authentiation applies to password
      Address some inaccracies (such as BDC solutions that might have
      Fix debian bug #404702 and clarify some points about 'net rpc vampire'
      Clarify that you don't want to use %m in 'add machine script'.
      Update docs to match the new defaults in Samba 3.2.0 and later.
      Remove unused KANJI and terminal code options.
      Add documentation to session token functions.
      Add comment explaining why io.in.workgroup isn't important.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Remove vampire.py as the 'net' binary is the right interface.
      When a test harness program fails, make the testsuite fail.
      Don't compile files twice when the compilation fails.
      Make the composite 'connect to server' code useful for security=server
      Revert to using the old CIFS connection API.
      Fix dependencies on gensec_krb5 and the NTLMSSP code.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Reorder this function in the file, so it reads bottom-up.
      Allow an NTLM response to be specified into the auth subsystem.
      Add a new implementation of security=server.
      Move NTLM authentication details into auth/ntlm
      Fix the build after the auth/ -> auth/ntlm/ rename
      Cope with an empty mapping file in ad2oLschema
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Remove JavaScript provision-backend script
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Rework the CLDAP and NBT netlogon requests and responses.
      Put back the old netlogn parsing code - for the request only
      Test the use of the domain SID on the NETLOGON mailslot
      Convert the CLDAP server to use the new netlogon structures.
      Make the IRPC GetDC request use SAM_LOGON packets.
      Explain that the sid must be absent on the NTLOGON mailslot.
      Show that the NTLOGON and NETLOGON mailslots are *very* similar.
      Modify the LDAP-CLDAP test for better coverage.
      Handle netbios domains in the CLDAP server too.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Ensure we don't send a reply if we couldn't push the CLDAP blob
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Don't regenerate pam_errors.h any more.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Add the core of the new CLDAP/NBT 'netlogon' parsing library.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Fix prototype generation in new syntax for netlogon.c
      Revert addition of 'mailslot' parameter.
      Fix number of arguments to IRPC getdc callback.
      Fix irpc GetDC requests.
      Further tests show NTLOGON and NETLOGON to be identical.
      Re-add alignment removed by metze in 0e2f6d481b3e35ed392b2b3340b244c77593819c
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Extend the 'netlogon' CLDAP and NBT implementation.
      Manually handle the NETLOGON_SAM_LOGON_REQUEST too.
      Extend the NBT-DGRAM torture test again.
      Include flags.h into samdb.h
      Fix creation of sockaddr in netlogon datagram generator.
      Merge branch 'v4-0-local' of git://git.id10ts.net/samba into 4-0-local
      Correct an assertion in the testsuite.
      Start an 'NTP signing server' in Samba4.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Bring up the ntp signing deamon
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Fix dependency list for NDR_TABLE
      Try adding a stub to fix the build
      Install the ntp_signd NDR headers...
      Another (useless) header to install
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Don't make the NTP signd headers public.
      Final fixes to for a functional NTP signing deamon.
      Allow the ntp_signd socket to be set from configure.
      Add in an enum for two future NTP signing ops.
      Merge branch 'v4-0-local' of git://git.id10ts.net/samba into 4-0-local
      Print prefixMap in a human-readable format.
      Finish the LDIF parsers for the prefixMap attribute.
      Remove extra spaces on prefixMap input and output.
      Remove test from samba4-skip, it is avoided in samba4_tests.sh
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Fix up provision and samdb tests.
      Don't pass an smb.conf to provision tests.
      Reorder the linking of objects into a binary.
      Fix rpcecho test.
      Place the NTP signd socket in the selftest area
      Fix the samba4.dcerpc.bare.python test.
      Skip the samba4.samdb.python test.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Revert Jelmer's CFLAGS commit e2b71a0ecbf10a78a59a8ec6371bdee57b1bfa6c
      First draft of a WHATSNEW for a new release.
      Fix WHATSNEW.
      Clarify that our build farm status really sucks at the moment...
      Mark as the real Samba4 alpha4 release.
      I probably should warn about GnuTLS bad mojo...
      Remove outdated README
      Merge branch 'v4-0-stable' of ssh://git.samba.org/data/git/samba into 4-0-local
      On the road to alpha5...
      Align the Python and EJS ldap tests.
      Tone down the warnings in the WHATSNEW.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Without stdlib.h we don't get a prototype for free().
      Merge branch 'v3-3-test' of ssh://git.samba.org/data/git/samba into 3-3-abartlet
      Don't sign NTP packets to disabled accounts
      Add a blackbox test for the provision-backend script.
      Remove old ldap.js test, we have replicated it in python now.
      Fix segfault caused by talloc_free() being called while still processing
      Change detection of objectCategory short fomm
      Depend on NDR_DRSBLOBS explicity.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Fix installation of Samba4 into an empty tree.
      Fix the wbinfo test on the LDAP backend.
      Tone down the language in BUGS.txt
      Place the Fedroa package into Samba4's GIT tree
      Update WHATSNEW towards an alpha5 release.
      More work to use %{name} rather than 'samba'
      Use a configure-specified directory for the winbind priv pipe
      dynconfig changes for 'winbind privileged dir' changes.
      selftest changes for 'winbind privileged dir' change.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Loosen ldap.py tests on the LDAP backend.
      Relax the ldap.py tests so that they pass against OpenLDAP CVS.
      Rework samdb handling for 'netlogon' packets.
      Update Fedora packaging per feedback on review ticket.
      Fix small formatting details in WHATSNET for an alpha5 release.
      Mark as alpha5 release
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Prepare for alpha5 tarball.
      Mark as 'not a git snapshot'.
      Ensure we install smbd as well...
      More updates for spec file, for alpha5
      Merge branch '4-0-local' into v4-0-stable
      Merge branch '4-0-stable' into 4-0-local
      On the way to alpha6!
      A couple more package updates
      Create PREFIX/var/lib and PREFIX/var/run in 'make install'.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Collapse auxillary classes in LDAP schema conversion.
      Fill in the auxiliary classes into the dsdb_schema.
      Move ad2oLschema and oLschema2ldif into Samba4, out of LDB
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Make ad2oLschema even simpler, by moving the heavy work into dsdb.
      Avoid the use of extensibleObject in ldap mapping backend.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Use common code to fill in allowedAttributes in kludge_acl.
      rename sambaPassword -> userPassword.
      Remove C++ keywords from events.h header.
      Fix 'make gdbtest-enb' and the GDB_PROVISION option.
      Try to make NTLMSSP less fussy for unimportant messages.
      Allow ldap credentials to be (optionally) stored in secrets.ldb
      Use secrets.ldb to store credentials to contact LDAP backend.
      Cleanup ldap_bind_sasl.
      Add a standard filter for finding the LDAP secrets.
      Make up a full hostname for ldapi connections.
      Connect to the LDAP backend with SASL credentials.
      Rework provision to handle both simple and SASL binds.
      Fix asking for credentials for non-LDAP provisions.
      Kill of some bogus debugs for the world who does not use the LDAP backend
      Revert Fedrora DS backend to use extensibleObject.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Lock down the LDAP backend - only samba may read or write
      Simplify the contextCSN determination.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Don't keep an extra ldb around forever.
      Ignore and handle more NT Create & X options.
      Reorder whitespace in generated slapd.conf
      Fix the build - this element was renamed.
      Another kludge to let the OpenLDAP backend catch up.
      More 'must be ignored' options from the MS-SMB doc.
      Put the memberof template into a seperate setup/ file.
      Make a seperate template for the refint configuration too
      Make invalid 'member' detection work again.
      Fix ldb_map to add/remove the same 'extra' objectclass
      Sleep longer in the hope that the OpenLDAP backend might catch up
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Remove bogus test in 'enum trusted domains' LSA server.
      Rename structures to better match the names in the WSPP IDL.
      Fix winbindd not to sit in a busy loop...
      Install'named.txt' to private/ as documentation.
      Explain where some other OIDs are allocated.
      Remove the 'accoc_group_id' check in the RPC server.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      The SMB session key must not be more than 16 bytes in SAMR (and
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Clarify how we are doing the 'this is a rootdse query' check.
      Complain if we are told to use an ldap backend, without the type
      Try to avoid a memory leak if we re-set the global schema
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Make a new define to ensure the accoc_group_id we use is always in common.
      Per feedback, remove epoch and ldconfig requires.
      Fix warnings in new prefixMap code
      Remove unused function and make sensitive directories private.
      Remove unused variable
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Always print the slapd startup command
      Make it even clearer what to do next in the LDAP backend setup
      We don't use EXTENSIBLEOBJECT any more.
      Update trustAuthInOutBlob in line with MS-ADTS 7.1.6.8.1
      Start implementind domain trusts in our KDC.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Don't fail if the domain has a trust already.
      Use the cldap reply to avoid segfaulting in RPC-DSSYNC
      Print trustAuthOutgoing and trustAuthIncoming in RPC-DSSYNC
      Update to a working trustAuthIncoming and trustAuthOutgoing parser.
      Start implementind domain trusts in our KDC.
      We can't use ndr_pull_struct_blob_all in combinatin with relative pointers
      More work towards trusted domain support in the KDC.
      We can't use ndr_pull_struct_blob_all in combinatin with relative pointers
      Clarify comment
      Always set a session key, even for the 'no password' case.
      Clarify comment
      Always set a session key, even for the 'no password' case.
      Merge branch '4-0-abartlet' into pac-verify
      Only allow trust accounts access to the NTP signing service.
      Add GenericInfo level for SamLogon calls from the WSPP IDL.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Rework the trustAuthInOutBlob with the help of a hand parser.
      Assert on failure to join domain in NBT-DGRAM
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Don't segfault in RPC-ATSVC.
      Paramaterise the seperator in ad2OLschema
      Rework generation of the objectClass and attributeType lines.
      Generate the subSchema in cn=Aggregate
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Trusted domains implementation for the KDC.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Fix the build, after the ad2oLschema changes.
      Merge the two attribute syntax tables.
      Remove references to the unused @SUBCLASS feature.
      Ensure we fail to proceed if the schema won't load.
      Fix segfaults when loading the schema fails.
      Allow attributes to be overwritten, not just added to
      Note the ldb syntax for attribute syntaxes in the table.
      Fix templates.ldb reprovision handling.
      Fix up new OpenLDAP MMR code.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Update OpenLDAP MMR configuration per comments by Oliver Liebel
      Remove last traces of the old 'subclass' feature
      Split schema_init.c into smaller bits.
      Add schema search flags from MS-ADTS
      Apply attributes (and their syntax) from the schema into ldb
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Use the new SEARCH_FLAG_ANR define
      Don't maniplate control entries in samldb
      Don't allow a NULL syntax
      Correct anr search commants and error messages in ldap.js
      Don't hardcode attributes to be treated as a DN
      All these syntaxes are now handled by the schema.
      Set both attributes and indexes into the database on schema load.
      The index handling is now configured from the schema load, not by a
      Handle error cases in attribute handlers better.
      Validate input in the CLDAP and DGRAM 'netlogon' responder.
      Stop every ldb startup doing a write to the database.
      Push loading the objectGUID and objectSID handlers earlier.
      Don't walk past the end of ldb values.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
      Update RPC-LSA to (almost) pass against Windows 2008.
      Only allow the trust in the correct direction (per the flags).
      Fix LSA server to pass more of RPC-LSA and match Windows 2008
      Implement matching logic to Windows 2008 on handling of secrets.
      Make RPC-LSA test deterministic with an msleep(200).
      More LSA server and testuite work.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into pac-verify
      Don't use lsa_Delete any more, as smbd now refuses it.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into pac-verify
      Add definition for NT_STATUS_DOWNGRADE_DETECTED
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into pac-verify
      Fix the build on Win32, and use NEGOTIATE security (to allow kerberos)
      Put the internal gensec_gssapi state into a header.
      Add a test to explore Netlogon PAC validation
      Add missing file - netlogon.h
      Don't wipe the PAC checksums, the caller may actually need them.
      Heimdal provides Kerberos PAC parsing routines.  Use them.
      Further rework the RPC-PAC test.
      Update packaging per suggestions on the review
      It turns out that the Netlogon PAC verification is encrypted.
      Start implementing the server-sde NETLOGON PAC verification.
      Follow MS-LSAD 3.1.4.7.12 and set defaults when creating a trust.
      Share IDL between the LSA and drsblob representations of trusts
      Start testing CreateTrustedDomainEx2
      Test a few more error cases in RPC-PAC
      Merge krb5_cksumtype_to_enctype from Heimdal svn -r 23719
      Implement NETLOGON PAC verfication on the server-side
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Merge commit 'origin/v4-0-test' into trusted-domains
      More work to implement LSA CreateTrustedDomainEx2
      With a windows 2008 client, even anonymous requires signing...
      Move our DC to implement mandetory signing.
      Update copyright, I've been working here many long years...
      Update copyright
      Add a new error code
      Make SMB signing work with Windows 2008 and kerberos.
      More work towards trusted domains support in Samba4's LSA
      Don't expose passwords, even to the administrator.
      Try to implement the right logic for systemFlags
      Simplfy SetSecrets behaviour in line with RPC-LSA and Win2008.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into trusted-domains
      Move blackbox.smbclient to test against the member server.
      Add definition for SYSTEM_FLAG_ATTR_IS_RDN
      Make it clear that the MMR password can differ from the admin passsword
      Fix bug #5713 by correcting the generated schema.
      Fix reversed test trying to fix bug #5713
      Return the same privilaged winbindd socket as we actually use.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
      Fix failures in the winbind struct-based test.
      Make cn=aggregate output less pretty, by more like Win2008.
      Remove the complexity of transactions from the attributes-setting code.
      Fix failure to load the schema on read-only DB.
      Skip strcmp() on 2 NULL pointers.
      This torture test and skipping of the server-side check was bogus.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-devel
      Test re-setting the challenge after an auth3 in RPC-NETLOGON
      Explain why we use signing for DCs, but not file servers
      Remove unused variable
      Remove unused parameter from decode_pw_buffer and fail on invalid
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-devel
      NetApp found that we never set the smb signing flags2.
      Rename hdb_ldb to hdb_samba4 and load as a plugin into the kdc.
      Use the new 'samba4' name for our internal hdb plugin.
      Fix parsing of the trust passwords in LSA CreateTrustedDomainEx*
      Rework to match new trustDomainPasswords IDL
      Fix Domain Trust creation with Windows 2008 (and many other tools)
      Remove DESCRIPTION from generated schema lines.
      Remove compleatly bogus rename test in partitions module.
      Implement 'type unknown' names in the CrackNames code.
      Clarify use of manual parsers in trustInOutBlob (drsblobs.idl)
      Add in secure channel type used by AD trusts
      Make RPC-LSA test for enumeration conditions more strict
      Store trusted domain passwords in the LSA server
      Start implementing AD-style trusted domains in Samba4's NETLOGON server
      Use the trust password version as kvno for trusts in Kerberos.
      Allow the PAC to be passed along during cross-realm authentication
      Fix cross-realm authentication in Samba4's KDC.
      Set default trust kvno to -1
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-devel
      Assert that the server provides allowedAttributes (etc) on each entry
      Move the password_hash module up the module stack.
      Create a 'straight paper path' for UTF16 passwords.
      Fix errrors in new password handling code found by RPC-SAMR.
      Improve RPC-SAMR tests to check random passwords
      Add a test to RPC-NETLOGON for random machine account passwords.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel
      Add samba4kpasswd and rkpty binaries
      Ensure the hdb_method structure is not on the stack.
      Actually test the kpasswd server
      Mark clearTextPassword as a privilaged attribute
      Make the updated RPC-LSA pass against Win2008, and Samba4 to match
      Rework mkrelease.sh to exclude Samba3 files
      Clarify the linked attribute module behaviour with comments
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel
      Fix use of wrong union arm in linked_attributes module
      Use ldb_dn_from_ldb_val to avoid possible over-run of the value.
      Give a better error when ldb_dn_from_ldb_val fails
      Re-add support for supporting the PAC over domain trusts.
      Use ldb_dn_from_ldb_val() to create a DN in the SAMR server
      It is not valid to talloc_free() ldb_dn_get_linearized()
      Add a new function to parse a DATA_BLOB into a GUID
      Always validate a DN when constructing from a string in python
      Remove restrictions on number of DN components in LDAP server
      Use new GUID_from_data_blob
      The samba3sam test does not really need the extended_dn module
      Print unconvertable ldb element values as base64.
      Improve debug when SASL search fails
      Remove timeout event once we are calling the callback.
      Add helpful function for comparison of DATA_BLOB elements
      Run the original operation before we update linked attrs
      Use the direct pointer to the syntax
      Don't treat the DN+binary syntax as a DN.
      Add AD schema from Microsoft's WSPP documentation.
      A more-commented version of rpc_server crash fix, matching closer the
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-devel
      Fix sequence number generation against OpenLDAP
      Make greater use of 'GUID_from_data_blob'
      Add hint to use passwordAttributes in @KLUDGE_ACL in future
      s4:ldb: add infrastructure for extended dn handlers
      s4:ldb_ildap: try to pass extended DNs to the server
      s4:libcli/ldap: split out a ldap_decode_attribs_bare() function
      s4:dsdb: add support for DSDB_OPENLDAP_DEREFERENCE_CONTROL
      s4:ldb: use try to print the extended dn in the ldif output
      s4:ldb.i: hang the dn on the NULL context as the python destructor will free it
      s4:samldb: improve error strings
      s4:samldb: make use of dom_sid_split_rid()
      s4:ldb-samba: register samba specific extended dn handlers
      s4:ldap_server: return the extended dn to the LDAP client if available
      s4:torture: add ldb tests
      s4:setup: don't set objectCategory: CN=Domain-DNS,${SCHEMADN}
      s4:setup: fix cut-n-paste error Builtin-Domain => Samba4-Local-Domain
      s4:selftest: lower debug level for slapd
      s4:ldb: make it possible to return per entry controls
      s4:rootdse: fix the logic to indentify a rootdse search
      s4:dsdb: Make the linked_attributes module set an extended dn
      s4:dsdb: split extended_dn into extended_dn_in, extended_dn_out and extended_dn_store.
      s4:provision: use extended_dn_out_ldb or extended_dn_out_dereference depending on the backend
      s4:dsdb: remove normalise module
      s4:ldb: add some python tests for extended dns
      s4:testprogs: improve extended dn testing of the ldb blackbox tests
      Rename ldb index pointer wrapper function
      Print error strings when transactions fail in ldb tools
      Parse options (and open the database) before starting transactions
      Handle different failure modes when we wipe the db in provision
      Fix failures setting a random password
      Move aggregate schema stub to it's own file
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel
      Fix compiler warning when parsing a SID in a data blob
      Now store the GUID and SID from a DN over DRSUAPI into ldb.
      Don't trust sscanf not to run off the end of the string
      Treat DN+STring as a binary string for now
      Corrections to Microsoft's schema and the OpenLDAP mapping file
      More work to have OpenLDAP accept the full AD schema
      Initialise 'flags' in new python ldb binding for ldb_connect
      Ensure libreplace is included into the tevent python bindings
      Raise a python exception when the ldb search fails
      Use new error constant (missing from 6efb7ff9)
      Only do special DN tracking for normal DNs in OpenLDAP backend.
      Fix error message in mkrelease to refer to source4, not source
      Don't give fatal python errors when guessing the realm
      Delete more Samba3-specific files
      Print more useful suggestion for the main provision command line
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-devel
      Remove auth/ntlm as a dependency of GENSEC by means of function pointers.
      Push sam_get_server_info_principal into the auth subsystem
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel
      Remove useless invocation of messaging_init() in RPC-PAC test
      paper over failure to reprovision with os.unlink()
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel
      Make the 'modules.conf' generation in the LDAP selftest simpler
      Tolerate more whitespace errors
      Don't parse the schema data twice
      Add the new, updated AD schema file from Microsoft
      Prepare for a quick alpha7 release to help simo meet Fedora deadlines
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel
      Work around ndr_unpack failing on structures with relative pointers.
      Credit tridge's work on fixing GnuTLS
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel
      A simple hack to avoid the segfault in #6138
      Mark as the Samba 4.0 alpha7 release
      Allow 'net vampire' to work without an existing smb.conf
      Don't print the admin password if we don't set one.
      Pull in all the schema information during DRS schema fetch
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-devel
      Update talloc version so we don't fail on system talloc 1.2.0
      Remove parse_control from header, long after the function was removed
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into wspp-schema
      Remove ad2oLschema, insted call it directly from provision-backend
      Sort output of schema for OpenLDAP during conversion
      Load the schema for provision-backend in a transaction
      Load the schema with a more efficient single search
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into wspp-schema
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into wspp-schema
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into wspp-schema
      s4:provision  load_schema in provision.py no longer takes a hostname
      s4:schema Don't rely on objectCategory 'magic' when loading the schema
      s4:password_hash Only store the LM hash if 'lanman auth = yes'
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into wspp-schema
      s4:ldb Fix the paged_searches module
      s4:ldb Ensure to pass down options to LDB from python
      s4:minschma Fix aggregate schema generation in minschema
      Add minschema like tool to extract and dump the full schema from AD
      s4: Remove autogenerated attributes from minschema and fullschema output
      s4:ldb Allow paged_searches to be mixed with other controls
      s4:fullschema Use server-side sort to make the output deterministic
      s4:schema Remove 'cn' from the final output of ms_schema.py
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into wspp-schema
      Add parentGUID as an allowed attribute in samba4Top
      Remove minschema generated schema - we now generate from setup/ad-schema/
      s4:schema Update Windows 2008 schema from Microsoft to latest version
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into wspp-schema
      s4:schema Don't free mem_ctx before it is initilised
      s3:smbldap Remove smbldap_get_dn
      s3:printing Convert nt_printer_publish_ads() to use talloc better
      s3:libads Make ads_get_dn() take a talloc context
      s3:smbtorture Convert charcnv torture suite to use push_ucs2_talloc()
      s3:kerberos Rework smb_krb5_unparse_name() to take a talloc context
      s3:smbldap convert the easy cases to push_utf8_talloc()
      s3:charcnv Remove unused ucs2_to_unistr2()
      s3:charcnv Remove unused unistr2 functions
      s3:rpc_parse remove unused prs_unistr2()
      s3:charcnv Remove unused unistrcpy() and unistrlen()
      s3:lib Use push_ucs2_talloc() in ms_fnmatch()
      Rework util_strlist prototypes to use a bit more and less const
      Make the schema_inferiors generation code to compile
      s4:ldb Make it possible to re-run ldap.py again
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel
      Solve some of the conflict between Samba3 and Samba4 push_string
      Convert Samba3 to use the common lib/util/charset API
      Add some harmless use of talloc_tos() in ntlm_auth
      s3:charcnv remove now unused malloc() based conversion functions
      Move libcli/auth to the top level
      Move DRSUAPI per-attribute decryption into a common file
      Move MSRPC-PARSE into the common libcli/auth
      Rework trivial msrpc parser to use convert_string_talloc()
      Merge smbencrypt.c between Samba3 and Samba4
      Rework Samba3 to use new libcli/auth code (partial)
      Move ntlm_check.h into the common libcli/auth
      Port Samba4 to the new combined libcli/auth functions
      libcli/auth Don't compile against un-needed Samba4 headers
      Adapt to common crypto functions: sam_pwd_hash() -> sam_rid_crypt()
      More work to adapt to merged libcli/auth function prototypes
      Use common samsync delta decryption functions in libnet_samsync.c
      Push schannel_state.c into the top level.
      Rework netlogon credentials for the top level
      Rework Samba4 to use the new common libcli/auth code
      Make Samba3 use the new common libcli/auth code
      libcli/auth Push schannel check into common libcli/auth
      Link in the common samsync decryption code
      Rework to use new API for common netlogon credential chaining
      s3: Fix ntlm_auth and winbindd to use new common libcli/auth APIs
      common:libcli/auth Add missing samsync config.mk
      Add missing header, remove generated header
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into libcli-auth-merge-without-netlogond
      Fix Samba4 build errors with common libcli/samsync
      Fix building the common libcli/samsync code
      Fix building the now common msrpc_parse code
      Use an absolute path to ensure that we can always regenerate tables.c
      Fix crash bug in NTLMSSP caused by msrpc_parse() moving to talloc
      s3:ntlmssp Fix segfault: msrpc_gen now uses talloc()
      s3:auth Fix segfault: Always initialise returned session keys
      Remove unused headers
      libcli/auth: Don't pass back lm_sess_key as the same pointer as user_sess_key
      s3:ntlmssp Remove use of talloc(NULL) in NTLMSSP code
      libcli/auth Ensure we cancel the transaction when schannel not detected
      Remove use of talloc_reference in cli_rpc_pipe_open_schannel_with_key()
      Merge commit 'origin/master' into libcli-auth-merge-without-netlogond
      Fix to use modified cli_rpc_pipe_open_schannel_with_key API
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into libcli-auth-merge-without-netlogond
      python/rpc: Add custom GUID.__str__, GUID.__repr__, GUID.__init__ and GUID.__cmp__.
      python/dcerpc: Custom implementations of policy_handle.__init__ and policy_handle.__repr__
      Add str() for policy_handles.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-devel
      Revert "pidl/python: Add explicit casts, fixing implicit cast warnings."
      Add the implicit [ref] to the connect_handle in EnumDomains
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-devel
      s4:samr Use ldb_context * rather than void *
      s4:test Fix 'make lcov' in Samba4
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-devel
      s4:test Include 'source4' in directories to find lcov in
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-devel
      s4:torture use common libcli/auth crypto code
      More lcov code coverage generation work
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-devel
      s4:torture Add tests for prefixMap custom attribute handler
      s4:torture Fix segfault in RPC-SAMSYNC
      Add new functions and tests: str_list_make_empty(), str_list_make_single()
      s4:torture Use str_list_make_single where appropriate
      dsdb:schema Use str_list_make_empty() to create an empty list
      s4:libnet Use str_list_make_single() in resolv code
      s4:nbtd Use str_list_make_single() to turn iname->wins_server into a list
      Add extensive tests for str_list function behaviour
      Add support for sendmsg() in socket_wrapper
      Don't use crossRef records to find our own domain
      Add DOMAIN_RID_KRBTGT define to security.idl
      Handle the krbtgt special case by looking for RID -514
      Detect missing 'witch' before detecting missing autoconf
      Fix incorrect RID for KRBTGT.  (was incorectly 514, should be 502)
      Fix incorrect RID for KRBTGT.  (was incorectly 514, should be 502)
      s4:torture Make the RPC-SAMR-PWDLASTET more efficient
      s4:client Match Samba3 and remove smbmount from the distribution
      Explicitly list RPC-SAMR-PASSWORDS-PWDLASTSET and RPC-SAMR-USERS-PRIVILAGES as slow
      s4:torture Half the repeditive tests run by RPC-SAMR-PASSWORDS-PWDLASTSET
      s4:torture Clean up users and groups added in RPC-SAMR-LARGE-DC
      s4:torture Don't run QueryDisplayInfo test for SAMR-USERS-PRIVILEGES
      s4:setup Remove generated attributes from provision_configuration
      s4:torture Don't try to Close a Deleted handle
      Win2k3 don't allow creating of domain trust accounts over SAMR
      s4:torture Make Samba4 build on hosts with an older libnetapi
      Don't run the RPC-SAMR-LARGE-DC test multiple times
      socket_wrapper Cope with SOCK_CLOEXEC and SOCK_NONBLOCK flags
      s4:torture assert that we get a Mailslot allocated before we dereference
      s4:torture Cut the RPC-SAMR-LARGE-DC test down to size
      pidl Fix samba4.pidl.typelist test after addition of 'double'
      Update WHATSNEW for an alpha8 release this week.
      Remove copy of kerberos-notes.txt added in incorrect location
      Don't recurse in reopen_logs().
      Fix build of recurusion fix in reopen_logs()
      s4:heimdal: import lorikeet-heimdal-200906080040 (commit 904d0124b46eed7a8ad6e5b73e892ff34b6865ba)
      Add supportedCapabilities to our rootDSE
      Add const to cast, to fix warning
      Require the new tdb 1.1.5 (for performance reasons)
      s4:gensec Print GSSAPI error message when unable to find PAC
      s4:setup Add an option to 'setpassword' to force password change at next login
      s4:kdc Allow a password change when the password is expired
      s4:libnet Allow 'net password change' to work on expired passwords
      s4:testprogs Don't specify a username/password when checking the ccache
      s4: Add tests and 'must change password' flags in setpassword and newuser
      Bump the ldb version and the version Samba4 requires.
      Remove unused variable
      s3:netlogon Cope with recent rename in netlogon.idl
      s4:ldb Add test for integer normalisation behaviour
      Partially revert restriction of socket_wrapper to 1500 byte writes
      s4:ldapsrv Place the 'privilaged' ldapi socket under an #ifdef
      Partially revert restriction of socket_wrapper to 1500 byte writes
      Mark as release version
      On our way to alpha9!
      Allow developers access the the privilaged ldapi socket for the moment
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel
      Revert "s4:debug: make setup_logging() a bit more compatible with samba3"
      Fix ndrdump to use a common setup_logging() API
      s4:dsdb Explain the parsing steps for userPrincipalName cracknames calls
      Rework hdb-samba4 to remove useless abstractions.
      s4:kdc Only get the lp_ctx once for a LDB_fetch()
      s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookups
      s4: dsdb Avoid using the internal ldb_private.h header
      s4:ldb Allow rootdse module to build without ldb_private.h
      s4:param use talloc_unlink() to free iconv context holding references
      s4:ldb Fix talloc hirarchy in LDIF parsing code
      s4:ldb Rework use of talloc and ldif objects in python wrapper
      s4:net Move net_vampire() to net_vampire.c
      s4:auth It is easier to copy the session key than get talloc right.
      Add const
      s4:dsdb Allow unicodePwd to be set when adding a user
      Add a way to set an opaque integer onto a samdb
      s4:dsdb Handle dc/domain/forest functional levels properly
      s4:gensec Allow mutual auth to be turned off in 'fake_gssapi_krb5'
      s4:heimdal The implied GSS_C_MUTUAL_FLAG depends on AP_OPTS_MUTUAL_REQUIRED
      s4:gensec Rework gensec_krb5 mutual authentication defaults
      s4:heimdal: import lorikeet-heimdal-200907152325 (commit 2bef9cd5378c01e9c2a74d6221761883bd11a5c5)
      s4:kdc Initialise new hdb function pointers.
      s4:kdc rename functions from LDB_ to hdb_samba4
      s4:kdc Rework KDC to pull in less attributes for krbtgt lookups
      s4:heimdal: import lorikeet-heimdal-200907162216 (commit d09910d6803aad96b52ee626327ee55b14ea0de8)
      Revert "s4:heimdal_build: predefine GSSAPI_DEPRECATED depending on the compiler version"
      s4:kdc Add in a simple check for constrained delegation to self
      s4:provision Fix provision on FreeBSD
      s4:kdc Tidy up hdb_samba4 some more
      s4:heimdal Extend the 'hdb as a keytab' code
      s4:setup add 'cn' attribute to Samba4 local schema
      s4:kdc Push context to hdb_samba4 by way of the 'name' of the DB
      s4:kerberos Add 'net export keytab' command for wireshark decryption
      s4:kerberos Add test to show that we actually export the keytab
      s4:kerberos Add 'net export keytab' command for wireshark decryption
      s4:kerberos Add support for user principal names in certificates
      s4:tls Enable GnuTLS back to version 1.4 (an into the future)
      s4:libnet Add in a 'credentials' parameter for python libnet_Join
      Fix compile of py_net.c
      s4:provision We no longer add krbtgt or kpasswd account into secrets.ldb
      s4:samba3sam Remove extra newlines that broke samba3sam test
      Use smbclient binary for the test file in smbclient test
      s4:torture rework LDAP sort test
      s4:netlogon Fix warnings and segfault in GetDomainInfo call
      s4:ldif_handlers Allow a binary nTsecurityDescriptor when parsing LDIF
      Add const
      s4:torture Make RPC-NETLOGON pass against ncaclrpc servers
      s4:dsdb Don't cast an ldb_val into a const char * for schema lookups
      s4:ldb initialise e->values[i].length before use in python bindings
      s4:heimdal: import lorikeet-heimdal-200908050050 (commit 8714779fa7376fd9f7761587639e68b48afc8c9c)
      s4:heimdal: import lorikeet-heimdal-200908052208 (commit 370a73a74199a5a55188340906e15fd795f67a74)
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel
      s4:ldb Make error message in rnd_name more useful
      s4:torture Add test for the NTP signd server
      s4:provision Assume the OpenLDAP backend can find it's own modules
      s4:provision Make the --ol-slapd paramter take the full path to slapd
      s4:selftest Make OpenLDAP guess it's own modules from now on
      s4:selftest Don't start the slapd for the provision, only for the run
      s4:provision Allow provision-backend to not run slapd for 'make test'
      s4:ldap_server Don't talloc_steal (with references) in ldap_backend
      s4:ldap_server Remove another talloc_steal (with references)
      s4:ldap_server Correct removal of talloc_steal()
      s4:schema Provide a way to reference a loaded schema between ldbs
      s4:provision  Remove the ACI element from the provision templates
      s4:schema Allow a schema load on an unconnected database
      s4:python Push some helper functions from SamDB into samba.Ldb
      s4:setup Don't manually set @ATTRIBUTES any more
      s4:provision Move helper functions back to provision
      s4:provision Rework provision-backend into provision
      s4:provision A crude update of the OpenLDAP backend HOWTO
      s4:provision Keep a single transaction for the erase and rebuild
      s4:python Allow 'no such object' on the delete of the DN
      s4: Re-add --ldapadminpass as an option to provision
      s4:selftest Confirm that there isn't a listener on the ldapi:// socket
      s4:provison Print the LDAP backend admin username/password
      s4:provision Make sure that we don't use Kerberos to our LDAP backend
      s4:install Remove provision-backend script from 'make install'
      s4:provision Fix existing ldapi:// backend detection exception
      s4:libcli/ldap Explain why we set a hostname for ldapi:// connections
      s4:selftest Remove the 'subunit filter' from make testenv etc
      s4:ldb Remove obsolete comment about ldb_tdb's sequence num
      s4:provision Avoid one more call to ltdb_reindex
      s4:provision Add comments to the provision script
      s4:kerberos Use MIT compatible names for these enc types
      s4:ldb Use length-limited printf to avoid walking off end of strings
      s4:ldb Python requires that a 'compare' handler return -1, 0 or 1
      s4:ntp_signd Fix bug 6656 - Set protocol version to 0, as used by ntpd
      s4:dsdb use talloc_strndup() in GET_STRING_LDB() rather than walk off the end
      s4:dsdb remove unused variable
      s4:dsdb Add const
      s4:ldb Add python binding and test for ldb_msg_diff()
      s4:dsdb Use talloc_strndup() to ensure OIDs are null terminated
      s4:dsdb Rework show_deleted module not to liniearise the LDAP filter
      s4:python Fix the reprovision test by deleting 'deleted' objects too.
      s4:dsdb Use helper function to add 'show deleted' control
      s4:dsdb Rework dsdb_write_prefixes_to_ldb() to take a schema
      s4:scheam quiet a 'const' warning
      s4:provision Only create references to our server DN after the self join
      s4:provison Add prefixes to ldb using same code a later modify will use
      s4:schema Rework dsdb_write_prefixes_from_schema_to_ldb() to use talloc
      s4:ldb Add hooks to get/set the flags on a ldb_message_element
      s4:ldb Add ldb_ldif_write_string() and python wrappers
      s4:provision Ensure that @OPTIONS is mirrored into each partition
      s4:python Add helper to get at the domain SID
      s4:ldb Don't sleep(100) in this error case, but debug the LDIF
      s4:setup Add DisplaySpecifiers from Microsoft.
      s4:selftest Fix 'make testenv-gdb' and 'make valgrindtest' etc
      s4:idl Add generated code for netlogon.idl changes
      s4:provision Don't reference provision_backend when using LDB
      libcli:drsuapi Add function to encrypt data for transport over DRSUAPI
      s4:provision Only delete SASL mappings with Fedora DS, not OpenLDAP
      s4:setup Updated Display Specifiers from Microsoft (with #s)
      s4:rpc_server netgotiate max xmit size with RPC client
      s4:kdc In the kpasswd server, don't use the client address in mk_priv
      s4:heimdal_build Love pointed me at the --one-code-file option to asn1_compile
      s4:heimdal_build Fix build breakages caused by asn1compile change
      s4:provision Prevent some invalid combinations of realm and domain
      libcli:nbt make the lmhosts parsing code and dependicies common
      s4:schema Add code to provide an index into the subClass tree
      libcli:nbt put util_net.c protos in new header file
      s4:utils Explian fix for testparm -v
      libcli:nbt move prototypes of lmhosts functions to libnbt.h
      s4:dsdb Print the partition we failed to suggest replication for
      s4:utils Remove typo...
      s4:provision split provision of DNS zone and self join keytab
      s4:ldb print out which LDB the transaction is still active on.
      s4:provision Use code to store domain join in 'net join' as well
      s4:py_security Add missing header
      s4:provision Make us Windows 2008 level by defualt again
      s4:provision Make our default salt match our server behaviour
      s4:kerberos Fix the salt to match Windows 2008.
      s4:dsdb Run the new 'descriptor' module by default.
      s4:ldb Add 'single-value' support to LDB.
      s4:ldif_handlers Fix memory leak in objectCategory LDIF handler
      s4:Ensure the selected RDN is the right one per the schema
      s4:ntvfs Don't attempt to follow NULL in unixuid_setup_security()
      s4:ldb-samba Use temp talloc contexts and talloc_steal avoid leaks.
      s4:ldb Fix ldb_list_find() folowing the change from char * to TDB_DATA
      s4:ldb always talloc_free() the ldb_ldif_write context, even on success
      s4:ldb Remove LTDB_PACKING_FORMAT_NODN
      s4-ldb: merged with master
      s4:provision Ensure we add the schema with the 'relax' control
      s4:ldap_server Ensure we don't segfault when sent a NULL new RDN
      s4:dsdb Add 'lazy_commit' module to swallow the 'lazy commit' OID
      s4:dsdb Don't allow creating of new objects with an isDefunct schema class
      s4:dsdb rework instanceType module - put instanceType in provision
      s4:dsdb Fix crash from LDAP login of DOM\\
      s4:dsdb Pass down the exact error code on failure in repl_meta_data
      s4:dsdb Return correct error on invalid attribute
      s4:ldb Don't allow modifcation of distinguishedName
      s4:ldb Don't allow RDN to be modified with an LDB modify message
      s4:dsdb Add objectClass and RDN constraints to objectClass module
      s4:dsdb add systemPossibleInferiors to schema code
      s4:dsdb Use possibleInferiors to restrict creation of child objects
      s4:provision Remove unused parameters from provision scripts
      s4:param Remove duplicate argument to python provision
      s4:drs-development Scripts to assist testing of DRS replication with AD
      s4:provision Clarify that we set, rather than modify, objectGUID values
      s4:provision Remove all references to samba4LocalDomain
      s4:dsdb Add new functions to help modules do an ldb_search()
      s4:dsdb Search for the schema with dsdb_module_search(), in schema_fsmo
      s4:ldb Allow a module string of ""
      s4:ldb Reload the 'ltdb_cache' when @OPTIONS changes
      s4:dsdb Make dsdb_read_prefixes_from_ldb static
      s4:schema Add some error checking to the schema load
      Allow (and ignore) distinguishedName on special records
      s4:ldb Allow a NULL module list
      s4:heimdal A real fix for bug 6801
      Revert "s4:hdb-samba4 - Don't double-free "db""
      s4:dsdb Rework modules create new partitions at runtime
      s4:provision Set @OPTIONS in the provision_init.ldif
      s4:dsdb Set 'notification' after the success of a change.
      s4:dsdb Be strict in selecting on-disk names for partitions
      s4:dsdb Fix tests for samba3sam to pass after partitions module changes
      s4:dsdb Fix partition_create not to return early
      s4:dsdb Don't try and casefold DNs during startup for partition load
      s4:Handle reprovision with existing partitions
      s4:dsdb Split 'set per-partition metadata' into it's own function
      s4:provison Allow the NTDS guid on the command line (for testing)
      s4:provision Test ability to set GUIDs from provision command line
      s4:dsdb Reload partition metadata if the main db updates
      s4:dsdb Only reload partition metadata on search and transaction start
      s4:dsdb Load new partitions in a running LDB if metadata changes
      s4:ldb Add function to add controls to an LDB reply
      s4:dsdb In partitions module, tell the caller what partition was used.
      s4:repl Pass schema as argument to replmd_update_rpmd()
      s4:dsdb Use 'partition modified' information to update @REPLCHANGED
      s4:dsdb Remove workaround for two partition head records
      s4:dsdb Remove default instanceType from repl_meta_data
      s4:provision Use schema to casefold partitions on 'upgrade'.
      s4:dsdb Allow creation of new partitions
      s4:epmapper Create a proper talloc tree of endpoint floors
      librpc Make talloc tree in binding tower match the floors
      s4:samr Don't leak the whole user onto the long-term handle
      s4:ldb Add new function to create a cut down list of controls
      s4:dsdb Remove potentially confusing 'partition' control from result
      s4:rpc_server Ensure we talloc_free handles when we delete objects
      s4:ldb Put ltdb_private under the 'module'
      s4:dsdb talloc_steal the backend module to under the partition
      s4:ldb_map Fix use-after-free of memory in ldb_map
      s4:dsdb Make the 'relative path' code in partitions handle tdb://
      s4:dsdb Allow loading of old-style partition records
      s4:dsdb Add note explaining about the partition format upgrade
      s4:dsdb Add default modules list to samba3sam
      s4:dsdb Use the 'correct' case for the namingContext values in rootDSE
      s4:torture Silence const warning by use of data_blob_const()
      s4:dsdb Set partitions metadata as soon as it is set up.
      s4:dsdb Split schema loading and schema data management
      util:ldb Allow multiple entries to be added in one LDIF snippit
      s4:gensec Use an index on computerName in schannel.ldb
      s4:secrets Look for LDAP secret with a name that is indexed
      s4:setup Mark 'cn' in secrets as case insensitive
      s4:dsdb Do less allocation when searching for partitions modules
      s4:dsdb Remove unused variables
      s4:dsdb Add error string in 'no such object' because of 0 replies case
      s4:dsdb Fix samba3sam test again.
      s4:dsdb 'attrs' must be static (otherwise segv with async)
      s4:dsdb Remove partition_extended_schema_update_now
      s4:ldb Add additional tracing of the ldb API
      s4:dsdb Rework partitions module for better tracing
      s4:ldb Add detail to failures in the indexing code
      s4:ldb Remove debug traces duplicated by the new generic trace code
      s4:credentials Put the 'secrets.keytab' in the same directory as secrets.ldb
      lib/util Add rfc1738 escape/unescape code from Squid
      lib/util Use rfc1738.c from Squid for all our URL encode/decode needs.
      s4:dsdb Revert back to using DN:filename in the partitions record
      Remove special case logic in 'samdb_relative_path'.
      s4:provision Rework provision to always have a ProvisionBackend
      s4:provision Make 'linked_attributes' and 'dnsyntax_attributes' a property of the Schema
      s4:provision Move 'Schema' into it's own file
      s4:provision Fix samdb test with new provision code
      s4:provision Inline 'ldap_backend_shutdown' for clarity
      s4:provision Split ProvisionBackend out of the main provision script
      s4:provision Remove LDB backend files in provision
      s4:dsdb Fix up after the MAP_ constants became LDB_MAP_
      lib/util Fix comments in rfc1738.c.
      libcli/nbt Move more of lmhosts lookup into common code
      lib/util Split data_blob_hex_string() into upper and lower
      s4:ldb Add a helper function for 'canonicalise' both strings base compares
      s4:dsdb Add new dsdb_dn to handle DN+Binary and DN+String
      s4:ldb-samba Use new ldb_any_comparison helper function in ldb-samba
      s4:dsdb Use new dsdb_dn code in LDB modules and Samba4 schema
      s4:ldb Remove DN+Binary code from the core ldb_dn
      s4:dsdb Add extensive tests for the behaviour of dsdb_dn
      s4:ldb Add Well Known GUID (WKGUID) tests to ldap.py
      s4:dsdb Ensure we allow 'odd' lengths for DN+String
      s4:dsdb Cosmetic fixes found by metze in review of dsdb_dn changes
      s4:vampire Print error message when we fail on the CLDAP ping
      s4:dsdb/schema Simplify schema loading from ldb messages
      s4:dsdb/repl Split the 'convert' or 'commit' stages in the DRS import
      s4:provision Remove unused 'sambadn' parameter
      s4:provision Add C binding to get at the generate schema
      s4:Fix regression in dsdb_dn code - all parses of the DN would be rejected
      s4:dsdb Add expected value tests for most DRS syntax conversions
      s4:torture Convert RPC-DSSYNC test to use LDB rather than raw LDAP
      s4:ldb Change ldb_request_add_control to the normal 'for loop' pattern
      s4:ldb Don't segfault if we somehow get an unknown extended dn element
      s4:dsdb/schema Allow a schema set when bound against a remote LDAP server
      s4:ldb Allow ldb_msg_canonicalize to handle empty elements
      s4:torture Add const
      s4:torture/dsdb Add verification of the push-to-LDB functions in RPC-DSSYNC
      s4:torture Remove _drs_util_verify_attids() from RPC-DSSYNC
      s4:dsdb Improve debug message in extended_dn_out
      s4:torture Use (some) torture_assert() calls in RPC-DSSYNC test
      s4:dsdb/schema Add more unit tests for DN+Binary syntaxes
      s4:repl_meta_data Parse linked attributes with schema syntaxes
      s4:libcli/ldap Add 'relax' OID to known network representations
      s4:selftest Mark the RPC-DSSYNC test as knownfail for now
      s4:dsdb Make callbacks in extended_dn_out clearer to follow
      s4:heimdal: import lorikeet-heimdal-200909210500 (commit 290db8d23647a27c39b97c189a0b2ef6ec21ca69)
      s4:heimdal: import lorikeet-heimdal-200911122202 (commit 9291fd2d101f3eecec550178634faa94ead3e9a1)
      s4:heimdal Import generated files from heimdal tree
      s4:SAMLDB module - Add support for required and generated schema attributes
      s4:dsdb LDB attribute lists must always be a static const char **.
      s4:dsdb Add 'dsdb_flags' to dsdb_module_search() to enable often-used features
      s4:dsdb Break up 'parse a DN from DRSUAPI' into a subfunction
      s4:dsdb Use the new flags to dsdb_module_search in schema_load
      s4:dsdb Load objectGUID and extended DN defaultObjectCategory into the schema
      s4:provision Generate a random objectGUID for each schema record
      s4:dsdb Rework samdb code to use 'storage format' DNs for defaultObjectCategory
      s4:schema Add the GUID to each defaultObjectCategory when loading from LDIF
      s4:provision Split up reference creation, load schema earlier in the stack
      s4:dsdb With these workarounds, we now pass the RPC-DSSYNC test
      s4:heimdal: import lorikeet-heimdal-200911170333 (commit b532c294d974cead40a1183c71be644c6ccc2832)
      s4:provision Simplify the module list
      s4:dsdb Move module configuration from each ldb into samba_dsdb.c
      s4:provision Remove 'operational' from secrets.ldb module list
      s4:dsdb Add function to return the CN=Aggregate schema DN
      s4:dsdb Return the subSchemaSubEntry operational attribute on every object
      s4:dsdb Use new helper function to obtain CN=Aggregate schema DN in schema_data
      s4:ldap.py Add tests for subSchemaSubEntry
      s4:operational LDB module - Prevent the modification of operational attributes
      s4:provision Move secrets.ldb over to .c file module lists, like sam.ldb
      s4:provision Don't bother with a template for the LDAP backend startup script.
      s4:provision Move exceptions into a new file
      s4:dsdb Handle LDAP backends correctly with new samba_dsdb system
      heimdal Fix invalid format string
      s4: update valgrind suppressions for use on build farm
      s4:dsdb Make samba_dsdb easier to use in upgrades - assume default values
      The start of a WHATSNEW for Samba4 alpha9
      Fix path to upgradeprovision
      s4:provision Make setting the domain SID in the self join optional
      s4:ldb Provide bindings for ldb_transaction_prepare_commit()
      s4:upgradeprovision Rework script, and reset machine account pw
      s4:selftest Add tests for upgradeprovision
      s4:upgradeprovision Use mkdtemp to create unique tempoary directory names
      s4:upgradeprovision add 'exit $failed' to blackbox test
      s4:dsdb Don't segfault with ldb_transaction_prepare_commit() without begin()
      s4:upgradeprovision Rework update_machine_account_password() tranactions
      s4:WHATSNEW Nadezhda's acl module handles modifies
      s4:ldap.py Add test of namingContext behaviour after tridge found a bug
      s4:setup Adjust upgradeprovision blackbox test now we don't have --targetdir
      This is alpha9
      Improve upgrade instructions
      Fix build of Samba4 from tarball generated by mkrelease.sh
      On our way to Samba4 alpha10!
      Merge commit 'origin/master' into abartlet-devel
      s4:dsdb Hide the LM password by default too
      s4:build torturedir and -DTORTUREDIR is unused
      s4:dsdb Make parentGUID handler use dsdb_module_search_dn()
      s4:dsdb Make primaryGroupToken calculation more efficient and correct
      s4:ldap.py Improve testsuite for primaryGroupToken behaviour
      s4:ldb Add a function to match a message against an objectClass
      s4:dsdb Use ldb_match_msg_objectclass in operational.c
      s4:build Bump ldb and tdb required versions.
      A WHATSNEW for alpha10
      This is alpha10
      s4: On the way to alpha11
      Merge commit 'origin/master' into abartlet-devel
      s4:provision Give a more useful error message in guess_names
      Samba4 and LDB requires talloc 2.0.1
      s4:auth generate the prototype file in the right place
      s4:auth Change 'get_challenge' API to be more like Samba3
      s4:gensec Don't give a warning when Windows client connects with NTLM
      libcli/auth Make gd's NDR NTLMSSP parsers helpers common
      s3:ntlmssp: rename enum NTLMSSP_ROLE into enum ntlmssp_role
      s3:ntlmssp: move to C99 integer types in ntlmssp.h
      s3:ntlmssp: remove the typedef NTLMSSP_STATE
      s3:ntlmssp: only include ntlmssp.h where actually needed
      release notes for Samba4 alpha11 (to be released this week)
      This is Samba4 alpha11!
      more WHATSNEW4
      and we move on towards Samba4 alpha12!
      Merge remote branch 'origin/master' into alpha11release
      s4:provision Just 'do the right thing' with empty smb.conf files
      s4:provision Be more polite to long-suffering Samba testers.
      s4:param Modify secrets_get_domain_sid to give more useful errors
      s4:winbind Make the 'no SID found' message even more detailed
      s4:rpc_server Record the remote connections association group ID
      misc.idl:  Add reference to the slightly odd representation of if_version
      s4:selftest Add infrastructure for testing against an RPC proxy
      s4:selftest Add test for the RPC proxy
      librpc When sending endpoint mapper requests, include the minor if_version
      s4:rpc_server Add a 'if_version' parameter to the bind operation.
      s4:credentials Add hooks to extract a named Kerberos credentials cache
      librpc/ndr Remove unused macros
      s4:scripting/devel Allow tmpfs script to be re-run
      s4:install Fix bug #7149 reported by JHT.
      s4:ldb Fix segfault in ldbsearch store_referral callback
      s4:python Add bindings to set GENSEC flags on credentials in python
      s4/rpc_server Don't segfault over replPropertyMetaData contents
      Move prototype to header of common code for set_sockaddr_port
      s4:lib/socket Add function to set a port on the socket address
      s4:libcli/resolve Use a more robust way to return the string address
      s4:lib/socket Don't go via a string when resolving addresses in connect_multi
      s4:samba_dnsupdate Add a 'file based' mode to samba_dnsupdate
      libcli/nbt Add parser for a 'hosts' file that takes DNS record types
      s4:libcli/resovle File based lookup module for DNS name types
      s4:libcli Use integrated name resolution when connecting SMB
      s4:provision Improve the handling of provision errors
      Explain why we don't use certain characters in the generated pw
      selftest: Remove dns_host_file every time we start
      s4:selftest Add file based DNS resolver to selftest environment
      s4:dsdb Don't error out if we can't get the Aggregate schema DN yet
      s4:dsdb Add a memory context for dsdb_get_schema()
      s4:dsdb/acl Reduce calls to dsdb_get_schema() and add memory context
      s4:dsdb Fix warnings in DEBUG() by casting to unsigned long int
      s4:dsdb Change dsdb_get_schema() callers to use new talloc argument
      s4:dsdb Show more detail in failure to compute the aggregate DN.
      s4:dsdb Move rdn_name down the stack
      s4:dsdb Don't load the schema unconditionally
      s4:dsdb Add 'const' to some struct dsdb_schema variables
      s4:dsdb Remove unused 'dsdb_make_schema_global' call from pyglue
      s4:schema Expand the schema structure
      s4:dsdb Move dsdb_save_partition_usn() to be a module helper function
      s4:dsdb Rework schema loading and add schema reloading
      s4:dsdb Add a shortcut sequence number for schema reloads
      s4:ntlmssp Ensure that we always negotiate signing if we negotiate sealing.
      s4:cmdline Add --sign and --encrypt options to our common command line
      s4:selftest Test --sign and --encrypt options to ldbsearch
      s4:kdc Add support for changing password of a servicePrincipalName
      s4:selftest Add testing of kpasswd password set on servicePrincipalName
      s4:heimdal: import lorikeet-heimdal-201001120029 (commit a5e675fed7c5db8a7370b77ed0bfa724196aa84d)
      s4:heimdal New files and supporting logic for heimdal update
      s4:testprogs Fix kinit test for updated Heimdal
      s4:heimdal: import lorikeet-heimdal-201003262338 (commit f4e0dc17709829235f057e0e100d34802d3929ff)
      s4:testprogs Update test to match current Heimdal
      s4:heimal Update generated files (cp from Heimdal)
      s4:heimdal_build Remove forced HAVE_STRERROR_R
      s4:heimdal Use correct variable to advance past -- options in kpasswd
      tsocket_bsd: Always use a real length for the sa_socklen, and keep it around
      pidl:python Allow 'nopython' to work
      librpc/idl Use [nopython] on some drsblobs.idl 'functions' as an example
      s4:credentials talloc_free() any previous salt_principal
      s4:credentials Add the functions needed to do S4U2Self with cli_credentials
      s4:heimdal Add hooks to check with the DB before we allow s4u2self
      s4:kdc Add functions to hdb-samba4 for the new s4u2self callback.
      s4:heimdal Create a new PAC when impersonating a user with S4U2Self
      s4:schema Try to fix OpenLDAP backend after schema reload support.
      s4:rpc_server Add all SIDs into the netlogon SamLogon reply
      s4:provision Don't make the 'slaptest' call produce errors
      s4:rpc_server Fix segfault in modified SamLogon handling
      s4:ldif_handlers tokenGroups are SIDs
      s4:dsdb Improve error message in extended_dn_in
      s4:rootdse Implement "tokenGroups" in the rootDSE
      s4:dsdb Don't return operational attributes on special DNs
      s4:dsdb Don't use the permissive modify control on schemaInfo updates
      s4:auth Remove event context from anonymous_session()
      s4:auth Allow the simple 'struct auth_session_info' generator for all users
      s4:auth Change auth_generate_session_info to take an auth context
      s4:provision Pass in the invoication ID and NTDS Settings DN to Schema()
      s4:provisionbackend Print the command we failed to start slapd with
      s4:provision Use more reasonable values for DB_CONFIG
      s4:dsdb Revert accidentilly commited change for LDAP backends
      s4:OpenLDAP-backend Use the new rdnval module in OpenLDAP
      s4:selftest Ensure we don't fsync() all day in the LDAP backend test
      s4:provison Pass nosync in for the OpenLDAP cn=config too
      s4:ldap-backend Fix LSA test failures with OpenLDAP backend - convert SIDs
      s4:provision Make OpenLDAP backend more robust
      s4:provision Remove moduleload for 'hdb' (wrong name).
      s4:kerberos Give a better error message than "Could not allocate memory"
      s4:gensec Use a different form of 'name' in GSSAPI import_name()
      s4:provisionbackend Don't loop forever waiting for OpenLDAP
      s4:howto Improve OpenLDAP backend instructions
      s4:libnet Make 'net vampire' more robust to command line arguments
      s4:dsdb Fix use of memory after free in repl_meta_data
      s4:credentials Make the CCACHE in credentials depend on the things that built it
      s4:dsdb Use replPropertyMetaData as the basis for msDS-KeyVersionNumber
      buildtools: Add 'make testenv' to Samba4 make targets
      s4:dsdb Provide an intelegent fallback if not CN=Subnets is found
      s3:kerberos Return PAC_LOGON_INFO rather than the full PAC_DATA
      s3:auth Make get_ntlm_challenge more like Samba4
      s3:winbindd Remove call to namecache_enable().
      s3:smbd Remove calls to namecache_enable()
      s3:libsmb/namecache Remove namecache_enable()
      s3:winbindd Rename 'children' to 'winbindd_children' and make static
      s3:Winbindd Move winbindd_event_context to a different file
      s3:winbindd Split helper functions to allow s3compat to call them
      s3:winbindd Provide a winbindd_register_handlers() helper function for s3compat
      Revert "s4: remove unused references to swat"
      waf: Make waf handle IDL files from Samba3
      s4:ntvfs Prepare for a possible future sharing of notify.idl
      s4:credentials Allow setting of an empty Kerberos CCACHE
      s4:process_modals Add another process modal - 'onefork'
      s4:process_model Fix process_standard and process_onefork not to use
      s4:winbindd Rework some winbind structures to make s3compat easier
      s4:gensec expose gensec_set_target_principal for use outside GENSEC
      s4:auth Make it clear to the callers the talloc lifetime.
      s4:provision Remove unused 'account_name' parameter
      s4:credentials Add in tracking of the password last set time
      s4:winbindd Record the privilaged pipe dir
      s4:ntvfs Prepare for a possible future sharing of notify.idl
      pidl: Allow new property 'no_srv_register'.
      s3:winbind use no_srv_register to avoid needing rpc_srv_register
      s3:split secrets.c to put machine account secrets in a new file
      s4:dsdb disable tokenGroups until end of rewrite
      s4:auth Move BUILTIN group addition into session.c
      s4:torture Add tests to demonstrate S2U4Self in the RPC-PAC test
      s4:auth Allow the operational module to get a user's tokenGroups from auth
      s4:auth Add dependency from the operational module onto auth
      s4:auth Push check for messaging context into winbind backend
      s4:auth Change auth_generate_session_info to take flags
      s4:auth handle addition of nested aliases of domain groups.
      s4:auth Error out when a memberOf DN does not have a SID
      Revert "Make -k a simple non-bool option."
      s4:auth Fix previous commit - segfault in determinging a user's groups
      s4:auth Remove un-needed headers.
      s4:libcli/ldap Rename ldap.h to libcli_ldap.h
      s3:passdb Remove use of uint8 uint16 and uint32 in favour of C99 types
      s3:dom_sid Global replace of DOM_SID with struct dom_sid
      s4:libcli/ldap Update headermap.txt (autotools build) and wscript_build for libcli_ldap.h
      s4:ntvfs rename notify.idl to s4_notify.idl until we can merge this IDL
      s4:dsdb Allow a NULL search expression in dsdb_search()
      s4:samr Split the guts of samr_CreateUser2 into a helper function
      s4:samr Split most of samr_CreateDomainGroup into a helper function
      s4:samr Move most of samr_CreateDomAlias into a helper function
      s4:samr Push most of samr_QueryGroupMember into a helper function
      s4:samr Push most of samr_LookupRids into a helper function
      s4:idmap Seperate idmap structures from winbind.idl and match to source3/ idmap
      s4:idmap Adjust code to new idmap structure names and layout.
      s4:winbind Fix up includes after seperation of idmap.idl from winbind.idl
      s4:winbind Change include guard so as not to conflict with idmap.h in source3
      s4:winbind Change idmap API to match that used by the source3/ idmap subsystem
      s4:winbind Give more detail on the parameters when reporting idmap failure
      waf Read VERSION file inside WAF to set package version
      s4:kdc Remove special talloc_free of the ldb context
      waf Add DIST_BLACKLIST to list files that we cannot include in a release
      s4:waf Exclude the autotools based build environment from a Samba4 release
      waf Provide release signing capability in 'waf dist'
      s4:build use autotools for mkrelease.sh
      s4:build Don't automatically mark as 'not a git snapshot'.
      s3:smbd split smbd/server.c into smbd/server.c and smbd/server_exit.c
      s3:smbd split reload services/printers functions from server.c
      s3:smbd move messaging_context and memcache into globals.c
      s3:lib split out global workgroup and netbios name functions.
      s3:lib s3:lib move get_global_sam_name to util_names.c
      s3:winbind Kill amusing but un-used winbindd_kill_all_clients
      s3:auth Fix segfault when the user cannot be found by getpwnam()
      s3:auth Make AUTH_NTLMSSP_STATE a private structure.
      s3:auth Remove AUTH_NTLMSSP_STATE typedef.
      s3:ntlmssp Add two unused variables to match the Samba4 ntlmssp.h
      ntlmssp: Make the ntlmssp.h from source3/ a common header
      s3:ntlmssp Use a TALLOC_CTX for ntlmssp_sign_packet() and ntlmssp_seal_packet()
      s3:ntlmssp Move ntlmssp_sign.c from source3 to common code.
      Revert "s3:winbindd Split helper functions to allow s3compat to call them"
      s3:winbind tidy up connecting the winbind sockets.
      s3:winbind Make state->mem_ctx a talloc child of state
      s3:winbindd move reinit_after_fork() back out of winbindd_register_handlers
      s3:param Add helper function to get at Gobals.iDomainMaster
      s3:param Put 'server_role' functions in another file.
      s4:ntlmssp Merge ntlmssp structures with version from source3/
      s4:ntlmssp Use the new common ntlmssp.h
      s4:ntlmssp Use common code for ntlmssp_sign.c
      s3:auth Rename wksta_name -> workstation_name in auth_usersupplied_info
      s3:idmap Use idmap.idl defined structures and constants
      s3:winbind Ensure we always init idmap_passdb before we use it
      s3:auth Rename user_info->smb_name -> user_info->client.account_name
      s3:auth Rename user_info->internal_username -> user_info->mapped.account_name
      s3:auth fix header comment for internal_username -> mapped.account_name
      s3:auth Rename user_info->client_domain -> user_info->client.domain_name
      s3:auth Rename user_info->domain -> user_info->mapped.domain_name
      s3:smbd Fix segfault if register_existing_vuid() fails
      named_pipe_auth Always lower case the incoming pipe name
      s3:smbd Give the kerberos session key a parent
      s3:named pipe proxy Improve error messages when named pipes fail to forward
      s3:auth Change auth_ntlmssp_server_info API to return NTSTATUS
      s3:auth add hooks to indicate if signing or sealing is desired with NTLMSSP
      s4:dsdb Put back the reference and set_attributes in dsdb_reference_schema
      s4:dsdb Add more debugs to help track down failures to parse the prefixmap
      s4:dsdb Provide a function to convert from DRS prefix maps to the LDB prefixmap
      s4:dsdb Allow a binary prefix map to be specified in the LDIF
      s4:provision Allow both additional and override prefixmaps in Schema
      s4:dsdb Simplfy match of objectclass in dsdb_schema_set_el_from_ldb_msg
      s4:dsdb Add debug
      s4:dsdb Allow calling dsdb_convert_object_ex() directly
      s4:libnet Make the libnet_vampire default callbacks non-static
      s4:libnet Steal ldb and lp_ctx from python result into correct structures.
      s4:torture Rework NET-API-BECOMEDC test to use libnet_vampire callbacks.
      s4:dsdb Use the schema from our local provision to decode the schema
      s4:dsdb Allow the setting an override on the schema
      s4:dsdb Keep the DRS-based prefix map for use in provision-based schema
      s4:provision Allow a specific prefix map to be loaded into a new schema provision
      s4:dsdb Rework the vampire schema handling to convert 3 times.
      s4:selftest Remove becomedc tests from knownfail, these should now pass
      s4:selftest Remove unused basedn specification in selftest env setup
      s4:dsdb Add const to dsdb_dn functions that operate on an ldb_val.
      s4:dsdb Move linked attribute restrictions to objectclass_attrs
      s4:dsdb Add control for signaling between repl_meta_data and linked_attributes
      s4:dsdb Handle backlinks for Windows 2000 level linked attributes
      s4:dsdb use dsdb_module_modify() rather than ldb_next_request()
      s4:selftest Add vampire_dc test environment
      s4:provision Allow functional level 2000 to be chosen
      s4:provision Add import for DS_DOMAIN_FUNCTION_2000
      s4:selftest Add test environment for functional level 2000
      s4:dsdb Assert that we can't get backlinks as input in linked_attributes
      s4:dsdb Fix linked_attributes to cope with the Feb 2010 changes to DLIST
      s4:libnet Remove 'ads min function level' checks.
      s4:selftest Change domain name for functional level 2000 DC
      s4:dsdb Allow renames with (now removed) linked attributes
      s4:ldif-handlers Add a custom handler for DNs that knows about deleted values
      s4:kdc Use msDS-SupportedEncTypes in our KDC
      libds:common Remove DS_DC_* domain functionality flags
      s4:libnet When joining a domain, update msDS-SupportedEncryptionTypes
      s4:provision Remove am_rodc from Schema
      s4:provision Raise default max functional level to 2008R2
      s4:net Remove warnings for 2000 native mode and Samba4.
      s4:selftest Add 2003 and 2008R2 test environments and tests
      s4:selftest Change netbios aliases to shorter names.
      s4:selftest For the moment the server role '2008_R2' is case sensitive
      s4:selftest Fix up netbios names for rpc_echo test
      libcli/auth make open_schannel_session_store() public
      s4:schannel Open the schannel_store.tdb at startup
      s3:schannel Open the schannel_state.tdb at startup
      schannel Change to TDB_CLEAR_IF_FIRST to reduce fsync()
      s4:provision Add an msDS-SupportedEncryptionTypes entry to our DC
      s4:libnet_join Fix typo in msDS-SupportedEncryptionTypes
      s4:kerberos Add functions to convert msDS-SupportedEncryptionTypes
      s4:auth Query LDB for msds-SupportedEncryptionTypes for the KDC
      s4:kdc Rework the 'allowed enc types' calculation
      s4:selftest Split out PKINIT tests from test_kinit.sh and test enc types
      s4:secrets Ensure secrets.ldb uses the same hooks as the rest of Samba
      s4:dsdb Fix possible schema segfaults for DRS-replication based schema
      s4:dsdb Ensure we free old schema copies
      s3:smbd Fix segfault if register_existing_vuid() fails
      s3:smbd Give the kerberos session key a parent
      s3:auth Change auth_ntlmssp_server_info API to return NTSTATUS
      s4:testprogs Prove kerberos still works after a password change
      s4:pyldb Fix memory handling for ldb_message_element
      s4:pyldb whitespace fix
      s4:provision Handle machine account password changes while keeping keytab
      s4:testprogs Show that we no longer delete the old keytab entries
      s4:testprogs Operate the blackbox kinit and net tests using the :local config
      s4:ntlmssp Adjust Samba4 ntlmssp code to look more like the code in Samba3.
      s4:ntlmssp Always setup the session keys and signing state
      s4:ntlmssp Re-add gensec_ntlmssp wrapper to allow merge with source3/
      s4:ntlmssp Merge more aspects of the source3/ NTLMSSP layer
      libcli/auth Move some source3/ NTLMSSP functions to the common code.
      s3:ntlmssp Redirect lp_lanman_auth() via 'allow_lm_key'
      s3:ntlmssp Add extra DEBUG() message for auth system failures
      s3:ntlmssp Don't use the lm key if the user didn't supply one.
      s3:ntlmssp Don't reply with the LM_KEY negotiation flag when not available
      s3:ntlmssp Don't permit LM_KEY in combination with NTLMv2
      s3:ntlmssp Don't use talloc_tos() for NTLMSSP blobs for now
      s3:ntlmssp Always call ntlmssp_sign_init()
      s3:ntlmssp Split the NTLMSSP server into before and after authentication
      libcli/auth Make the source3/ implementation of the NTLMSSP server common
      s3:libnet Add other required headers for libnet_samsync_keytab.c
      s3-krb5 Only build ADS support if arcfour-hmac-md5 is available
      s4:auth Move struct auth_usersupplied_info to a common location
      s3:auth Make Samba3 use the new common struct auth_usersupplied_info
      s3:auth Whitespace fixes after auth merge
      s3:auth Change 'make_user_info' to be talloc based
      s3:auth Change winbindd -> auth interface to more standard structures
      s3:auth Add error paths for invalid password_state values
      s4:security Bring in #defines for the user and primary group token location
      s4:ntvfs Don't treat the user SID and primary group SID special for idmap
      s4:security Remove use of user_sid and group_sid from struct security_token
      s4:auth Remove special case constructor for admin_session()
      s4:auth Remove the system:anonymous parameter used for the LDAP backend
      s4:auth Remove system_session_anon() from python bindings
      s4:auth Avoid doing database lookups for NT AUTHORITY users
      s4:auth Change {anonymous,system}_session to use common session_info generation
      s4:ldap_server use talloc_unlink() to avoid talloc_free() with references
      s3:selftest This test does not fail anymore (Samba4's smbtorture has been fixed)
      s3:param Clarify parameter name on init_globals()
      s3:pdbtest Fix command name of pdbtest
      s4:security Change struct security_token->sids from struct dom_sid * to struct dom_sid
      s3-auth Rename NT_USER_TOKEN user_sids -> sids
      s3-auth Rename NT_USER_TOKEN privileges -> privilege_mask
      s4:provision Allow OpenLDAP backend to provision again
      s4:dsdb Don't reload the schema against OpenLDAP backend
      s4:dsdb Make the dereference control critical if input is critical
      s4:dsdb Fix attribute being searched for in dereference against Fedora DS
      s4-setup Make krb5.conf use DNS by default
      s4-dsdb Change debug levels for startup messages
      s3:privileges Change SE_PRIV to be just a uint64_t
      s3:Change SE_PRIV to uint64_t
      s3:privs Change to new host endian neutral privilages tdb format
      privs Move privilege bitmasks to security.idl
      s3-privs Further changes to remove SE_PRIV
      s4-privs Remove link between enum sec_privilege and the privilege bitmap
      s3-privs Use constants from security.idl
      s3-privs Remove comment already moved to security.idl
      security.idl clarify which privilages are LUID and bitmap values
      privs Add my Copyright
      s4-privs Add a lookup by index of privilages
      s3-privs Only store low bits of luid in privileges table
      security.idl Update Windows privileges list to Win2008R2
      security.idl Add comments
      s3-auth Change type of num_sids to uint32_t
      s3-auth Change struct nt_user_token -> struct security_token
      s3:auth Remove NT_USER_TOKEN
      s3-privs Rename mask -> privilege_mask to be more clear
      s3-privs More clarity in variable names
      s3-privs Rename structure elements for greater clarity
      s3-privs Move source3/ privileges implmentation into common
      libcli/security Use true and false, not True and False
      libcli/security Use C99 types
      libcli/security Use talloc_realloc() not TALLOC_REALLOC_ARRAY()
      s3-privs Inline dump_se_priv into callers now that it's just a uint64_t
      s3-privs Move manual prototypes to common privileges.h
      libcli/security Move source4/ privileges code into the common libcli/security
      libcli/security Make the two privileges tables share a common struct definition
      libcli/security Fix and clarify privilege manipulation function comments
      libcli/security Use ARRAY_SIZE() consistantly.
      libcli/security Don't memcpy a uint64_t value, just assign it.
      libcli/privileges Simplify get_privilege_luid() to return just the enum
      libcli/security Return number of entries in the old source3 list
      libcli/security Merge privilege lists from source3 and source4
      s3-lsa Use sec_privilege_id() to lookup name to LUID
      libcli/security Don't export privs[] as a global variable
      s3-privs Remove a pointer indirection from revoke_privilege()
      s3-privs Call security_token_set_privilege() rather than manual assignment
      s3-privs Remove pointer indirection from se_priv_to_privilege_set()
      s3-privs Remove a pointer from grant_privilege()
      s3-privs Convert from user_has_privileges() -> security_token_has_privilege()
      libcli/security Improve dump of privileges:  Just walk the table
      libcli/security Add an invalid LUID privilege value
      s3-privs Directly manipulate the privileges bitmap.
      libcli/security Remove luid_to_se_priv() and luid_to_privilege_name()
      s3-privs Rework privilege enumeration to also use new DB format
      libcli/security Rename all privilege bitmaps constants
      s3-privs Rework access_check_object() to take two privileges
      libcli/security Remove unused functions and constants.
      libcli/security make sec_privilege_id() return SEC_PRIV_INVALID on failure.
      libcli/security Expose sec_privilege_mask()
      s3-privs Make privilege_enum_sids() take an LUID, not a bitmap
      s3-privs Hide the bitmap-based grant_privilege and revoke_privilege
      s3-privs Overhaul PRIVILEGE_SET handling, avoid dealing with the bitmap
      s3-privs Remove unused function
      libcli/security Remove unused declarations from privileges.h
      libcli/security Make sec_privilege_from_index() return SEC_PRIV_INVALID on failure
      s3-privs Remove extra pointer on privilege mask
      s3-privs Add const
      libcli/auth Failure to find the cached session key for SCHANNEL isn't level 0
      s4-rpc_server Put all 'logon failure' messages at the same debug level 4
      s3-util_sid Tidy up global struct security_token
      libcli/security Remove 'always true' return from se_priv_put_all_privileges
      s3-samr Explian better the use of two privileges in this call
      libcli/security Move 'private' privileges functions to another header
      libcli/security Remove unused SE_NONE define
      s3-krb5 Fix Kerberos on FreeBSD with Samba4 DCs
      s4-privs Seperate rights and privileges
      libcli/privileges Fix comment
      libcli/security Use talloc_zero when making a struct security_token
      security.idl Clarify that this is not a network structure
      s4:gensec Put the "NTLM" string for NTLMSSP's SASL name in a header
      s3-auth Fix typo in comment
      s4-privs Fix enum privileges in LSARPC server
      s3-dom_sid Use C99 types in dom_sid handling
      s3-util_sid Accept S-1-5 as a SID
      s3-util_sid use ARRAY_SIZE() to ensure we never overflow the dom_sid
      libcli/security Merge source3/ string_to_sid() to common code
      libcli/security Use sid_append_rid() in dom_sid_append_rid()
      s3-util_sid Use the NDR parser to parse struct dom_sid
      s3-torture Add tests to show that the dom_sid parsing was faulty.
      libcli/auth/ntlmssp Be clear about talloc parents for session keys
      s4-torture assert that we get a temp datagram socket.
      torture/raw Allow one more 'not implemented' status return as a valid response
      s4-winbind Add a proxy method to update DNS records with a read-write DC
      libcli/ldap Add const to ldap_encode_ndr_dom_sid()
      s3: Replace sid_binstring and sid_guidstring with PIDL-based alternatives
      s3-uuid Remove unused smb_uuid_pack()
      s3-libads call common GUID_from_ndr_blob()
      s3-lib/util Remove unused smb_uuid_unpack()
      s4-kerberos Fix kerberos_enctype_bitmap_to_enctypes()
      s4-libnet Remove libnet_samdump_keytab() and net samdump keytab
      s4-kerberos Move 'set key into keytab' code out of credentials.
      s4-libnet_join Use header constant for 'all encryption types' in msDS-SupportedEncryptionTypes
      s4-selftest Run slow tests less often
      selftest Don't run 'speed' tests for very long
      s4-kerberos Rework keytab handling to export servicePrincipalName entries
      s4-kerberos Don't segfault if the password isn't specified in keytab generation
      s4-dsdb Fix segfault in error case in rootdse module
      s4-kdc Use msDS-SecondaryKrbTgtNumber to fill in the full KVNO
      s4-kdc Add function to determine if a hdb entry is a RODC
      s4-dsdb Make samdb_reference_dn() use dsdb_search() and DSDB_SEARCH_ONE_ONLY
      s4-dsdb Add ldb_reset_err_string() when we set error codes.
      s4-kdc Add common setup, handle RODC setup case
      heimdal Add support for extracting a particular KVNO from the database
      heimdal Add an error code for use in the RODC
      s4-kdc Handle the case where we may be given a ticket from an RODC in db layer
      heimdal Fix DNS name qualification to not mangle IP addresses
      heimdal Use a seperate krb5_auth_context for the delegated credentials
      s4-kdc Ensure that an RODC may act as a server (needed to fill
      heimdal: added verbose logging of hemimdal crypto errors
      heimdal use returned server entry from HDB to compare realms
      s4-auth Allocate domain SIDs under the sids array, not server_info
      s4-auth Add make_server_info_pac() to include 'resource domain' groups
      s4-kdc Rework 'allowed encryption types' handling in the KDC
      s4-kerberos Don't regenerate key values for each alias in keytab
      s4-gensec Always honour the set server principal
      s4-heimdal_build fix up build after heimdal import
      s4-heimdal We don't need HDBDIR any more
      s4:heimdal: import lorikeet-heimdal-201010022046 (commit 1bea031b9404b14114b0272ecbe56e60c567af5c)
      Add new files for sha512 support
      s4-kdc Fix up after import of new lorikeet-heimdal
      s4-kdc Remove special case kerberos restriction in the KDC
      s4-libnet_vampire use a linked list to handle schema objects pending conversion
      s4-kerberos Remove unsued variable
      s4-kerberos Remove unused parameter
      s4-param Refactor secrets code to not require an event context.
      s4-credentials Add explicit event context handling to Kerberos calls (only)
      s4-smbd Remove event_context_set_default()
      s4-tevent Remove event_contex_find() and event_context_set_default()
      s4-ldb Don't use talloc_autofree_context() in ldb
      s4-ldb Allow a NULL event context in samba_ldb_init()
      ldb The use of a private event context isn't a hack
      lib/torture:  Add function to clean up the output directory
      s4:smbtorture Create a new random output directory each time, and delete it
      libcli/security Move most of security_token.c to common code.
      lib/debug Add DEBUGC and DEBUGADDC as dummies
      libcli/security Add debug class to security_token_debug() et al
      s4-libcli/security Use seperate subsystem for session related functions
      s4-credentials Allocate ldb result on correct memory context
      libcli/security Use common security.h
      libcli/security Provide a common, top level libcli/security/security.h
      s3 Replace is_sid_in_token() with security_token_has_sid() from common code
      s3-auth use security_token_has_sid() from the common code
      s3-auth Use security_token_debug() from common code
      s3-util_nttoken.c Also copy the rights_mask when copying a security_token
      s3-acl Merge source4-supported privileges into se_access_check
      s3-acl Use uint32_t for counting the ACEs
      s4-acl Merge sec_access_check() with se_access_check() from source3/
      libcli/security Move source3/lib/util_seaccess.c into the common code
      libcli/security Define traditional constants in terms of IDL macros
      libcli/auth Merge source4/libcli/security and util_sid.c into the common code
      libcli/security Use static SIDs rather than parsing from strings
      Revert "s4:dsdb - make the RELAX control private"
      dsdb simple_ldap_map depends on LDBSAMBA
      s4-provision Use --ldap-backend-nosync rather than just --nosync
      s4-openldap-backend Don't set 'dbnosync' on cn=config
      ldb Ensure we mark ongoing LDAP requests as PENDING
      s4-selftest Make GDB_PROVISION work again
      s4-ldb Add LDB_REQ_SET_LOCATION to help track handler use
      s4-provision Remove serverdn parameter from Schema()
      s4-provisionbackend Allow a fixed URI to be specified for LDAP backend
      s4-gensec Don't upgrade all DIGEST-MD5 connections to seal
      s4-gensec Don't give more to sasl_encode() than it will permit
      s4-auth Add DEBUG() for invalid DNs and errors expanding user groups.
      s4-dsdb Allow LDB_ERR_INVALID_DN_SYNTAX in dsdb_load_partition_usn
      s4-dsdb Add module to send only 'simple' DNs to OpenLDAP backends
      s4-dsdb Reset the error string after 'expected' errors.
      s3-waf Use LIBSECRUITY subsystem from the common wscript_build
      libcli/ldap Don't try and encode a control with a NULL OID
      s4-dsdb extended_dn_out: Move lazy dereference control creation to lazy-init
      libcli/security Remove unused sec_acl_equal()
      s3-smbd Remove manual override of DEBUGELVEL during exit
      librpc Make ndrdump use printf() rather than having to mess with DEBUG()
      auth/credentials Give a sensible behaviour for resetting the krb5 context
      lib/util Remove setup_logging_stdout()
      s4-torture Remove torture/locktest2.c (no longer compiled and unused)
      lib/debug Use vdprintf rather than manually allocate
      s3-debug Impove setup_logging() to specify logging to stderr
      s3-debug Remove 'AllowDebugChange' and use lp_set_cmdline() instead
      s3-debug Remove last direct assignements to DEBUGLEVEL
      s3-debug Convert from x_file to real file descriptors.
      s3-debug Move 'load_case_tables()' before lp_set_cmdline() and popt calls
      s3-debug Clarify the handling of invalid state.fd values in debug.c
      debug Explain the behaviour of setup_logging() more clearly
      s3-libsmbclient-examples Add tests for debug behaviour.
      s3-libsmbclient Add comments to describe the behaviour of DEBUG()
      s3-libsmbclient Don't store 'debug_stderr' on the libsmbclient context
      s3-param Fix up lp_set_cmdline() not to re-store cmdline options on each reload
      heimdal Add handling for PAC signatures over all encryption types
      s4-selftest Allow weak crypto so we can test DES-only behaviour.
      s4-torture Add tests for DES-only accounts PAC behaviour/validation.
      s4-process_model Fix valgrind-found use of un-initialised variable
      s4-selftest Run RPC-PAC against all the DC environments.
      s4-dsdb Fix urgent_replication test not to set an invalid userAccountControl
      s4-ldap_server Don't DEBUG() at level 2 every time a caller disconnects
      s4-kerberos Mention the remote address we fail to contact the KDC on
      s4-selftest fix indentation
      s4-dsdb Explain why we may not use the GC name in some situations.
      s4-auth Supply more useful error messages on Kerberos failure
      heimdal Add clock-skew handling to DCE-style GSSAPI
      s4-dsdb Return an error if we can't convert UTF16MUNGED -> UTF8
      s4-dsdb Convert new krbtgt_xxx password into UTF16
      s4-dsdb Remove incorrectly declared ** variable used as *.
      s4-provision UTF16 encode the password in sam.ldb, not secrets.ldb
      heimdal Don't dereference NULL in error verify_checksum error path
      heimdal Return HDB_ERR_NOT_FOUND_HERE to the caller
      s4-kdc Return HDB_ERR_NOT_FOUND_HERE on un-revealed accounts on an RODC
      s4:heimdal: import lorikeet-heimdal-201011102149 (commit 5734d03c20e104c8f45533d07f2a2cbbd3224f29)
      Add attribute macros for Heimdal to use
      heimdal regenate lex and yacc files
      heimdal Extra files required for merge up to current heimdal
      s4-kdc Remove use of heimdal private headers in kpasswd server.
      s4-kdc update startup routines after heimdal update
      auth/gensec Handle incorrect username or password in Kerberos client code
      s4-kdc Fix realm handling in our KDC
      heimdal Fix handling of backwards cross-realm detection for Samba4
      s4-gensec Indicate if GENSEC is in client or server mode in the debug
      heimdal Fetch the client before the PAC check, but after obtaining krbtgt_out
      s4-kdc Don't always regenerate the PAC
      s4-kdc Don't regenerate the PAC for cross-realm tickets
      s4-kdc Add 'flags' parameter to db fetch calls
      s4-kdc use 'flags' to only create the 'admin data' elements when requested
      s4-kdc Fix the realm handling again, this time pay attention to the flags
      heimdal Build ticket with the canonical server name
      s4-test_kinit Add tests for lowercase realm combinations
      s4-ldif_handlers Add handler for printing supplementalCredentials
      samba-tool pwsettings Allow setting 'store cleartext'
      samba-tool Add test for --store-plaintext
      s4-kdc Rework supported encryption type logic to match Microsoft
      wintest Force krb5.conf for BIND so we use the one generated for this test
      wintest Set the virtual machine IP to match it's dynamic IP, but don't use DHCP
      wintest Allow substitute to cope with objects like pexpect.EOF
      wintest example configuration file for a KVM based wintest
      wintest Explian that this is my KVM/libvirt configuration
      wintest Improve wintest's handling of IP addresses and add more auto-setup
      wintest Evolve wintest to handle it's own BIND nameserver
      s4-setup correct the require BIND version for Dynamic DNS
      wintest Don't connect to localhost or unqualified hostname, bind interface only
      lib/debug Add clarifying comments
      s3-netapi Add libnetapi_net_init(), don't double-init common Samba subsystems
      s3-libnetapi Add function header comments
      s3-libnetapi Load case tables earlier
      s4-dsdb Remove mem_ctx argument from dsdb_module_find_dsheuristics().
      s4-dsdb Add 'block anonymous' checks to the rootdse module
      s4-dsdb Remove rootDSE and anonymous checks from acl_read
      s4-objectclass Use a specific local variable name, not 'value'
      s4-dsdb Reorganise and clarify the LSA objectClass check (forbidden on LDAP)
      s3-param Fix lp_set_cmdline() to set the flag on alias values too
      s4-librpc Handle all types of GUID in the GUID() initialiser
      s4-smb_server Return why the ntvfs_connect() failed.
      wintest Add more VMs and correct titles
      wintest Add automatic dcpromo is the host isn't a DC yet
      wintest Fix case of BASEDN variables
      wintest Add a function to shut down all the managed VMs at the start
      wintest Set WIN_LCREALM and WIN_BASEDN automatically
      wintest Make the new --vms option default to running all tests.
      s4-samba-tool Show when we have created the user successfully
      wintest Allow 'samba-tool newuser' to run a few times waiting for the RID Set
      wintest Add more retries and fix up RODC handling after auto-dcpromo
      wintest Another way to work out if a Windows machine is a DC
      wintest Wipe the BIND data directory just before we restart bind
      s4:heimdal: import lorikeet-heimdal-201012010201 (commit 81fe27bcc0148d410ca4617f8759b9df1a5e935c)
      wintest Move stopping of BIND into a new step
      s4-provision Add an invalid names check for 'domain == netbiosname'
      s4-provision Always run slaptest to convert the config file
      libcli/auth bring ADS_IGNORE_PRINCIPAL in common
      s4-spnego use "not_defined_in_RFC4178 at please_ignore" if no principal specified
      s4-param Allow +foo syntax in smb.conf list parsing
      s4-client Use NTLMv2 by default in the Samba4 client.
      s4-tests Workaround new default of 'client ntlmv2 auth = yes' in tests
      s4-lsa Implement kerberos ticket life policy
      s4-spnego Match Windows 2008, and no longer supply a name in the CIFS Negprot
      wintest Remove the password expiry as the first step
      s3-libads Default to NOT using the server-supplied principal from SPNEGO
      s3-smbd Don't send SPNEGO principal (rfc4178 hint) by default
      s3-client Use NTLMv2 by default in the Samba client
      s3-docs Explain change to NTLMv2 by default in the client
      s3-docs Add docs for 'client use spnego principal' and 'send spengo principal'
      s3-libsmb Don't ever ask for machine$ principals as a target.
      s3-winbind Don't send the LM password to the server, ever
      s3-winbind Improve memory handling in NTLMv2-backend plaintext authentication
      wintest Share more of the S4 test code with the s3 test
      s3-net Allow 'net ads dns register' to take an optional hostname argument
      wintest More work to make test-s3.py work
      s3-dns Don't use SEQUENCE_FLAG in DNS update, Windows 2008R2 does not like it
      s3-dns Don't use DELEG_FLAG in DNS update, Windows 2008R2 does not like it
      wintest flush DNS on Windows clients to improve reliablity
      s3-libsmb Improve error message when denying LM encryption
      wintest Add testing of kerberos connections to Windows members of an AD domain
      libcli/security Add sid_blob_parse() to directly parse a binary SID blob
      s4-dsdb Use sid_blob_parse()
      s4-dsdb Don't talloc_free() ares on failure, as LDB might free it later
      lib/ldb Remove talloc_free() that causes double-free in callbacks.
      Revert "s4-dsdb Don't talloc_free() ares on failure, as LDB might free it later"
      s4-auth Remove obsolete comment
      s4-auth Remove event context from privilage database handling
      s4-auth rework session_info handling not to require an auth context
      s4-auth Remove duplicate copies of session_info creation code
      s4-auth Ensure that we always copy across domain groups
      s4-heimdal_build Remove talloc dependency from hdb-glue.c
      s4-heimdal_build Remove talloc dep for krb5-glue.c
      nsswitch Add talloc depencency for nsstest
      s4-ldap_server Allow multiple binds on LDAP server
      s4-dsdb Implement tokenGroups expansion directly in ldb operational module
      s4-auth use new dsdb_expand_nested_groups()
      s4-auth Add function to obtain any user's session_info from a given LDB
      s4-auth Add get and set methods for auth_session_info python wrapper
      pyldb Simplify python wrappers for struct ldb_val (LdbValue)
      libcli/security Add python bindings for se_access_check
      s4-samba_tool Added ACL checking to python GPO management tool
      s4-gensec Don't steal the auth_context, reference it.
      s4-pyauth Use py_talloc_get_type() for greater talloc binding safety
      s4-pyauth Add bindings for auth_context_create() as AuthContext()
      s4-pygensec Add bindings for server_start() and update()
      s4-pyldb Fix tp_basicsize for PyLdbDn
      s4-torture Remove unused temp dirs from the RPC-PAC test.
      s4-pygensec Fix indentation of py_gensec_start_mech_by_name()
      s4-auth Extend python bindings to allow ldb and message to be specified
      s4-gensec Extend python bindings for GENSEC and the associated test
      s4-gensec Remove special case 'for SASL' that is not required any more.
      s4-dsdb Add a test of the tokenGroups behaviour on the user's DN.
      s4-auth Allow NULL methods to be specified to auth_context_create_methods()
      s4-pyauth Fix AuthContext wrapper
      s4-dsdb Add PAC validation test to tokengroups test.
      s4-dsdb Don't use None as the input to the GENSEC loop in tokengroups test
      s4-selftest Remove knownfail for tokengroups test
      libcli/auth move ntlmssp_wrap() and ntlmssp_unwrap() into common code.
      s4-gensec Add prototype for gensec_ntlmssp_init()
      s4-auth Remove special case for account_sid from auth_serversupplied_info
      s4:heimdal: import lorikeet-heimdal-201101310455 (commit aa88eb1a05c4985cc23fb65fc1bad75bdce01c1f)
      Remove unused installmisc.sh script, from old build system
      s4-python Remove unused missing.py (used by old build system)
      waf: Replace python installation rule to allow PYTHONARCHDIR and PYTHONDIR
      s4-python Ensure we add the Samba python path first.
      s4-python Remove manipuation of python path from samba module
      s4-waf Don't install any Samba packages into PYTHONDIR
      wintest Return debug info when dcpromo fails from the log
      s4-dsdb Fix generation of rootDSE domainControllerFunctionality
      s4-dsdb Add tests to ensure we don't break the rootDSE function levels again
      s4-waf Don't include ../librpc in paths
      s4-provision Remove setup_path, setup_dir and find_setup_dir
      s4-waf Add PYTHONDIR and PYTHONARCHDIR to the 'different on install' list
      s4-python Don't force "bin" into the python sys.path
      s4-wintest Use top level build for wintest
      s4-auth Add auth.idl to encode auth subsystem structures in IDL
      s4-auth Rework auth subsystem to remove struct auth_serversupplied_info
      s4-selftest Fix valgrind and gdb options for top level build
      s4-auth Fix setting of bad_password_count in auth_convert_user_info_dc_sambaseinfo()
      s4-waf Remove source4 build system.
      waf Remove debugging hacks left in the top level build
      auth Move auth_sam_reply into the top level.
      libcli/named_pipe_auth Remove support for unused levels 0-2.
      auth.idl fix size_is() reference in IDL
      libcli/named_pipe_auth Change from 'info3' to auth_session_info_transport
      s3-auth Rename cryptic 'ptok' to security_token
      s3-auth Remove unused pam_handle
      waf Fix dependencies for .pc (pkg-config) files
      s3-auth Fix memory leak in security=share and force user =
      wintest upper case the --vms paramter arguments to wintest.py
      Add support for testing a Win2k3 domain member
      heimdal Pass F_CANON down to the hdb layer for servers in AS-REP as well
      s3-cluster Always fill in the clustering vnn element
      s3-cluster remove more CLUSTER_SUPPORT #ifdef stuff
      lib/util/charset add functions isupper_m and islower_m
      lib/util/charset use a path to dynconfig.h that works in s3 and s4
      lib/util/charset split codepoints.c into it's own subsystem
      lib/util/charset use get_dyn_CODEPAGEDIR(), which is in common
      lib/util Make UTIL_LDB conditional on an s4 build
      s3-waf use lib/util/wscript_build, and avoid duplicate subsystems
      s3-libads Remove MIT-specific krb5_princ_realm macro calls.
      charset Remove use of {isupper,islower,toupper,tolower}_w functions
      librpc push NDR_SECURITY and NDR_DCERPC to the top level wscript files
      librpc make ndr-standard a common library
      lib/util/charset Use top level iconv.c in source3
      lib/util Remove #if _SAMBA_BUILD_ == 4 that isn't required any more
      s3-charcnv Don't genreate valid_table on the fly, rely on valid.dat
      lib/util/charcnv Move iconv handle setup in common
      lib/util/charset Add back setlocale(), but only when called from binaries
      Add tests for various s3 auth modes
      s3-tests use $PREFIX to ensure tests don't work outside the test area
      selftest move selftesthelpers to a top level helper script
      selftest split $PERL into multiple arguments for Test::More check
      s3-selftest convert tests.sh to python
      smbtorture Remove random file name before we start RW2
      selftest pass in srcdir into Samba3 target module
      selftest: Improve gdb_backtrace to run in batch mode
      s3-auth Rename auth_serversupplied_info varaiables: server_info -> session_info
      s4-auth Move libcli/security/session.c to the top level
      selftest the raw.mux test is flaky:
      heimdal_build omit #line statments to allow valgrind to work again
      lib/util/time: Merge time functions from source3/lib/time.c
      s3-build __FUNCTION__ is always available, always use it
      s3-debug Always use C99 true/false rather than True and False
      lib/util move debug.[ch] out of the way
      lib/util: new merged debug system
      s3-rpc_server Handle session key as a constant buffer
      pidl Add support for uid_t and gid_t types
      librpc/idl Add helper structures for use by samba3 in auth_session_info
      s3-auth struct security_unix_token replaces UNIX_USER_TOKEN
      libcli/security Add unix_token and unix_info to auth_session_info too
      s4-dsdb: Ensure we permit multi-valued backlinks on single-valued attributes
      librpc/ndr use hyper for uid_t/gid_t rather than udlong
      s3-lib Remove the clobber_region() code.
      s3-safe_str: Futher simplify the macros by removing indirection
      s3-safe_string: Add checked_strlcpy()
      s3-lib prepare Samba3 to use common codepoint based string functions
      lib/util: Merge basic string length and comparison functions
      s3-charcnv Add convert_string_error()
      lib/util/charset rename iconv_convenience to iconv_handle
      wintest New snapshot for my wintest VMs
      s3-selftest unconditionaly include subunit.sh
      s3-selftest Add tests for security=server
      s3-selftest Allow LM passwords and turn of NTLMv2 for security=share test
      s3-selftest Fix test_smbclient_auth.sh
      lib/util/charset Remove pointless static bool initialised
      s3:lib make lazy_initialize_conv() static
      lib/util Move base64 functions into lib/util/base64.c
      lib/util/charset Add tests for convert_string_talloc_handle()
      lib/util/charset correct calculation of UTF8 character sizes
      lib/util/charset Add wrapper to allow testing of strlen_m_ext()
      lib/util/charset Add tests for strlen_m_ext() and convert_string_talloc()
      lib/util/charset smb_panic() on incorrect use of strlen_m_ext
      lib/util/charset Add tests for strcasecmp_m(), talloc_strupper() et al
      s3-selftest Disable log rotation in 'make test'
      s4-credentials Add a command line hook to set the kerberos credentials cache
      s3-selftest Add testing of kerberos login
      s3-selftest Remove more instances of /tmp in test_smbclient_s3.sh
      s3-auth consolidate create_local_token() into make_server_info_krb5()
      s3-rpc_server Remove comment, yes the key is correct.
      s3-auth use create_local_token() to transform server_info -> session_info
      s3-auth Rename user_session_key -> session_key to match auth_session_info
      s3-selftest Look only under source3 for smb.conf files
      librpc/idl Add [nopython] to krb5pac ndrdump functions
      pidl: Add support for the [ignore] property
      s4-auth: Always talloc_zero() the struct auth_session_info
      auth: Move auth_session_info into IDL
      kdc: always ldb escape the realm
      s3-auth: Make server_info const in create_local_token()
      libcli/nbt Cope with blank lines in DNS hosts file
      s3-selftest names into DNS hosts file to avoid NBT lookups
      s3-librpc Fix creation of in-memory keytab for previous password
      s3-selftest Add tests to show kerberos works across a password change
      samba_dnsupdate: Don't use subprocess.check_call, it isn't in python 2.4
      wintest Allow changing the telnet settings to fail, we might not be admin
      s3-wintest Add test of 'net use' against the Samba3 member
      wintest Allow setting of the firewall to fail
      s3-selftest Fix use of the 'fake DNS' file
      s3-selftest actually wait for smbclient to connect
      Revert "s3-test: disable ktest for now"
      s4-samba_dnsupate Fix syntax error
      s3/selftest Tear down the environment if we fail to connect
      libcli/ldap pull LIBCLI_LDAP_MESSAGE and LIBCLI_LDAP_NDR into a library
      lib/util make UTIL_TDB a library
      libds: Make flag_mapping a library
      s3-lib: Remove unused pull_ucs2_fstring()
      s3-charcnv: make pull_ucs2 static
      s3-lib Remove more unused fstring.c functions
      s3-lib Correct comment in strlen_w()
      s3-lib: Remove unused _w functions.
      s3-lib Remove unused skip_unibuf()
      s3-lib Remove unused #define
      s3-lib make static and remove more _w functions
      s3-lib Move isvalid83_w to mangle_hash.c
      s3-lib Move strdup_w to it's only user in mangle_hash.c
      lib/util/charset Move source3/lib/util_unistr.c to the common code.
      lib/util Move simple string routines into common code.
      lib/util ucs2_align is identical, put it in common
      lib/util: Make string_replace from s3 common
      s4/torture Fix calls to charcnv functions to always supply converted_size
      lib/util/charset Fix and add public interface for convert_string_error_handle
      lib/util/charset Add expected values for upper/lower case tests
      lib/util/charset Add tests for convert_string_error_handle
      lib/util/charset Preserve 'pull' errors even when converting via UTF16
      lib/util/charset Add more tests for convert_string_error_handle()
      lib/util/charset Rename convert_string test to allow a 'non_handle' test
      s3-selftest Add workaround for RAP test failure
      lib/util/charset Make ASCII conversion validate it's input
      lib/util/charset Add convert_string_error()
      lib/util/charset Add many more charset tests
      libcli/auth Use convert_string_error to check LM hash calculation.
      s3-charcnv: Move convert_string() et al to lib/util/charset
      s3-build Remove distinct LOCALEDIR subsystem
      build: Bring DYNCONFIG into samba-util library to avoid symbol duplication
      libcli/ldap Re-add ldap_ndr.h as a public header
      s3-lib Move strisnormal to it's only user in mangle_hash.c
      s3-lib Remove unused str_ascii_charnum()
      s3-lib Move unix_strlower and unix_strupper to their only users.
      s3-lib Remove unused string_append
      s3-lib Remove very unused (#if 0) strncpyn
      libcli/auth Move krb5 wrapper functions from s3 into common
      s3-auth Rename smb_krb5_open_keytab to avoid a conflict with s3
      lib/util Move alpha_strcpy() from s3 into common code
      libcli/auth Fix compile on hosts without krb5
      s3-krb5 Move #ifdef HAVE_KRB5 above #include of libcli/auth/krb5_wrap.h
      selftest: Provide a single bindir_path function across all targets
      selftest: Remove unused BUILDDIR_ABS environment variable
      selftest: Remove duplication between BUILDIR and BINDIR
      selftest: Start using the binary mapping at the python layer as well
      selftest Add binary mappings for samba3 selftest
      selftest: Move Samba4 selftest wscript to the top level
      selftest Remove selftest of the test subsystem
      s4-heimdal_build: Add extra HAVE defines needed for the source3 krb5 code
      selftest: Allow the top level build to run the samba4 or samba3 tests
      s3-gse Allow GSSAPI wrapper to compile against Heimdal
      s4-heimdal: Allow any kvno to match when searching the keytab.
      lib/socket_wrapper: allow up to 32 interfaces for a bigger 'make test'
      selftest: put the target on the environment
      s4-selftest: Stop creating netbios aliases everywhere
      s3-selftest Rename s3 DC environment to s3dc
      s4-selftest: Avoid duplicating the servers IP in the provision() sub arguments.
      selftest Add combined 'Samba' target module
      s3-selftest Fix interface localktest6 listens on.
      s4-selftest: Move Samba4 test interfaces out of the way of the Samba3 tests.
      s4-selftest Rename Samba4 'member' test environment to s4member
      selftest: Add hooks to enable a combined selftest run.
      selftest Test for socket_wrapper support in combined samba target as well
      selftest: Don't specify SELFTEST_TARGET as an env variable
      selftest: move warning about invalid environments up to selftest.pl
      selftest Consolidate server wall clock time limits
      build: Move Heimdal/MIT compat build rules to heimdal_build
      lib/util Define samba-util-common only for s3-waf
      build: Invert --enable-s3build into --disable-s3build
      libcli/dns Improve dns_hosts_file, using Samba3's struct dns_rr_srv
      s3-libads Remove KRB5_DNS_HACK
      libcli/auth Allow parsing of a PAC that is already verified.
      libcli/auth Move Samba4's gssapi_error_string from GENSEC to libcli/auth
      selftest: Make bindir_path much less complex
      s3-libads Don't start a DEBUG with 'time'
      s3-libsmb Use 'resolv:hosts file' as a DNS emulation when specified.
      auth/kerberos: Create common helper to get the verified PAC from GSSAPI
      auth/kerberos Move all the PAC handling functions to auth/kerberos
      s3-gse: Don't release the mech OID from gss_accept_security_context
      s4-gensec: Use new common 'obtain the PAC' functions.
      auth/kerberos Add check for gss_inquire_sec_context_by_oid
      build: Add lib/replace as a default include path
      s3-waf Don't enable profiling by default
      s3-test Make samba3.blackbox.net.local.registry.roundtrip reliable
      dynconfig: Have only one dynconfig.o in the common code.
      s3-winbind Use get_dyn_WINBINDD_SOCKET_DIR() to get the winbind pipe dir
      Remove outdated S4 OpenLDAP backend HOWTO.
      s3-rpc_server Fix compile without kerberos
      lib/util/charset Fix string termination conditions for UTF16 strings
      lib/util/charset use convert_string.c in common
      lib/util/charset Add tests for srclen=-1 behaviour.
      lib/util/charset Add copyright headers
      lib/util/charset Merge talloc-based pull and push charset functions
      s3-selftest: Use default name resolution methods (now that dns is emulated)
      s3-libads Pass a struct sockaddr_storage to cldap routines
      selftest: Make overwrite of $env->{target} optional
      s3-libads: Use ldap_init_fd() to connect to AD server in socket_wrapper
      selftest: s3member admember test to confirm s3/s4 interopability
      selftest: Don't die() when the join fails
      selftest: Print a better warning warning message when smbcacls fails.
      selftest: Fix combination of Samba3 and Samba4 test lists
      selftest: Make combined test the default when s3build is enabled
      s4-selftest: Don't use a hardcoded target DC name
      s3-ldap Move ldap prototypes to inside #ifdef HAVE_LDAP_H
      build: Fix kerberos build issues in top level build
      s3-libads Move variables into if (socket_wrapper_dir()) where they are used.
      libcli/smb Move FILE_ATTRIBUTE defines to the top level
      s3-smb Use FILE_ATTRIBUTE_READONLY intead of aRONLY
      s3-smb Use FILE_ATTRIBUTE_HIDDEN intead of aHIDDEN
      s3-smb Use FILE_ATTRIBUTE_SYSTEM intead of aSYSTEM
      s3-smb Use FILE_ATTRIBUTE_VOLUME intead of aVOLID
      s3-smb Use FILE_ATTRIBUTE_DIRECTORY intead of aDIR
      s3-smb Use FILE_ATTRIBUTE_ARCHIVE intead of aARCH
      s3-client Add TALLOC_CTX argument to attrib_string().
      libcli/smb Move attrib_string in common
      s4-param Rename lock_path() -> lpcfg_lock_path()
      s4-param Remove config_path() -> lpcfg_config_path()
      s4-param Rename private_path() -> lpcfg_private_path()
      lib/util/charset Move strstr_m() to the top level
      lib/util Re-merge the string_sub() and all_string_sub() from source3
      s4-param Rename volume_label() -> lpcfg_volume_label()
      s4-param Rename unused lp_ functions to match param.h
      s4-param Rename lp_destructor() -> lpcfg_destructor() for consistency
      selftest: Restore the s3member environment by avoiding smbcacls
      build: put doserr.c into it's own subsystem, so it's no longer a duplicate
      s3-ldap Only prototype ldap_init_fd() when we have found it in the libraries
      s3-waf: Add dependency on popt to fix build on FreeBSD
      kerberos: Only include gssapi/gssapi_krb5.h when available
      s3-lib: Rely on uint64_t in conv_str_size()
      lib/util Rename conv_str_size() -> conv_str_size_error()
      s3-build Add popt dep to fix build on FreeBSD
      s4:cluster Rename .id to .pid in server_id
      s4-cluster: Remove const from cluster_id_string()
      Remove reference to Samba4 LDAP backends
      selftest: Update README
      s4:Remove outdated doc on Samba4 upgrade
      s4-cluster Rename server_id.node -> vnn to match Samba3
      s3-ctdb Rename packet file and files to ctdb_packet
      lib/util Move more network utility functions from source3 into lib/util
      s4-lib/socket Merge updated set_socket_options from Samba3 -> Samba4
      lib/util Move set_socket_options() into common code.
      s4-torture Remove unused and uncompleated test
      s4-libcli Remove resolve_name() as it conflicts with Samba3.
      s4-messaging Rename messaging -> imessaging
      Remove strlower_m() and strupper_m() from source4 and common code.
      s3-lib make push_ucs2() static
      lib/util/charset Use push_string and talloc_strupper/strlower from common code
      s4: fix arguments to safe_strcpy()
      lib/util Use compiler-checked safe string macros in top level code.
      lib/util Use lib/util/util_str.c in common, including strequal()
      s4-param Rename secrets_init() -> randseed_init()
      lib/util make string_wrappers.h a public header
      s3-ctdb Fix duplicate function name due to packet -> ctdb_packet rename.
      lib/util Move source3 tdb_wrap_open() into the common code.
      s3-lib Remove unused dos error codes from errmap_unix
      errors: Merge ntstatus -> DOS error table between Samba3 and Samba4.
      errors: Merge source3/ werror_to_ntstatus() code to source4/
      libcli/util Merge ntstatus_to_dos() ntstatus_to_werror() to the top level
      s3-smbd ntstatus_to_dos() pulls the DOS error codes out internally
      nterr: Add mem_ctx for return string from get_nt_error_c_code()
      libcli/util Move NTSTATUS table to the top level
      errors: Remove unused unix_to_werror()
      lib/util Rename ms_fnmatch() to ms_fnmatch_protocol() to avoid dup symbol
      lib/util Use lib/util/ms_fnmatch.c in common for gen_fnmatch()
      libcli/smb Move cifs posix helper functions and headers in common
      lib/util don't use enum protocol_types in ms_fnmatch_protocol
      s4-ntvfs: Rename brl_*() -> brlock_*() to avoid conflict with brlock_init in s3
      s4-auth Rename auth -> auth4 to avoid conflict with s3 auth
      auth: allow auth_common.h to be included multiple times without error
      selftest Use die() less often, as it fails to allow cleanup
      s3-utils Set dyn_CONFIGFILE from -c on smbpasswd command line
      Improve debug messages when creating socket directories
      s4-param Don't set variables such as the debuglevel unless global
      s4-lib merge get_interfaces() from Samba3 to Samba4
      s4-lib/socket Samba4 is not IPv6 compatible
      lib/socket move interfaces code to the top level
      s3-lib Use common lib/socket code for get_interfaces() et al
      s4-interfaces Rename interfaces code so not to conflict with source3/
      lib/socket: Remove outdated comment
      build: Allow the C code to know if this is a waf build
      s4-param cope with doulbe-parsing of -foo and +foo lists
      s4-samr Remove incorrect transaction_cancel() in error path
      s4-dsdb Add transactions to dsdb modify helpers
      s3-passdb Redirect domain GUID and SID queries to the passdb stack
      s3-passdb: added pdb_samba4
      s3-auth Add auth_samba4 module
      selftest: Add plugin_s4_dc environment
      ncalrpc: Force ncalrpc dir to be mode 755 in all users
      selftest: Make the ncalrpc dir common between Samba4 and Samba3.
      s4-selftest Add tests for proxy_samba4_dc
      selftest: don't override just-added username in plugin_s4_dc test
      selftest: Test both users created in plugin_s4_dc environment
      s3-build: Move generated config.h and config.h.in to include/autoconf
      build: Remove --disable-s3build so we can rely on these subsystems
      s3-gse: Allow the GSSAPI wrapper to load a keytab using gss_krb5_import_cred()
      libcli/auth: Move more kerberos wrapping in common
      libcli/auth Move PAC parsing and verification in common.
      lib/util/charset create _handle functions for convert_string() et al
      lib/util/charset Always set *converted_size even on failure
      lib/util/ Fix crash bug caused by gfree_debug()
      s3-libnetapi Don't create a talloc_stackframe() in a global variable
      s3-netapi Initialise global variables in libnetapi
      lib/util/charset Move built-in charset modules to the top level
      build: Move NDR_DSSETUP and NDR_SPOOLSS into ndr-standard
      s3-build: use ndr-standard in msrpc3
      s3-param Deprecate a number of security parameters for 3.6
      selftest: Don't skip Samba3 tests in the top level build
      s4-selftest: gensec test is finished, don't skip
      waf-build: Add more libraries to avoid duplicate symbols
      build: Expand dcerpc-samba grouping library
      build: Make msrpc3 a library
      build: Make auth_sam_reply a library
      build: Add depenencies needed by Samba3 subsystems
      build: Add rpc_client grouping library
      build: Make util_reg subsystem in libcli/registry a library
      librpc/ndr Merge ndr_print_sockaddr_storage() into common code
      build: Make POPT_SAMBA3 a library
      build: Add 'cap' as a dependency of samba3core
      s4-libnet: Remove libnet_Join and create libnet_Join_member
      s3-param: remove unused share_iterator functions
      s3-param: Remove unused snum2params_static
      s3-lib Replace StrCaseCmp() with strcasecmp_m()
      s3-lib Replace StrnCaseCmp() with strncasecmp_m()
      s3-selftest Remove unused sambalib.py from comfychair test system
      lib/util/charset Don't allow invalid 'dos charset = utf8'
      s3-testparm Warn more on incorrect use of 'password server'
      selftest: Re-enable strings.py from source3/stf as a python subunit test
      lib/util/charset use talloc_stackframe() rather than talloc_tos()
      s3-selftest Remove unused and unimplemented info3cache test
      lib/util/charset: Remove unused strcasecmp_w and strncasecmp_w
      lib/util Add Volker's asn1_Integer test into code that runs in 'make test'
      selftest: Make knowfail/skip files consistent, always use ^prefix
      docs: Clarify the 'security=server' fails for NTLMv2
      s4-provision Use correct tkey-gssapi-credential
      docs: Rewrite 'password server' documentation
      s3-param Depricate 'password server = foo:12389' syntax
      s3-testparm Warn about incorrect use of 'password server'
      s3-smbd provide struct smbd_server_connection * to conn_snum_used
      s3-lib Move string_init functions into their own file
      s3-build: Move user_util.c into it's own subsystem
      s3-smbd Split conn.c into 3 files
      s3-param split service.c into param and smbd components
      heimdal_build: Don't use heimdal's getprogname() and setprogname()
      heimdal: Remove getprogname and setprogname from the heimdal import
      s3-globals Remove smbd_event_context() (use server_event_context())
      libcli/security: move secdesc.c to the top level libcli/security
      s3-param Move init_iconv() to loadparm.c
      s3-lib Move sstring_sub() to it's only user and make static
      s3-lib Move realloc based string substitution functions out of util_str.c
      s3-lib Move free_namearray() into it's own file
      s3-build Add dependency on 'ldap' and 'ber'
      s3-build: Rearrange build system to seperate out simple libraries
      s3-build Create dbwrap_util subsystem
      s3-build Move dbwrap_rbt into dbwrap_util subsystem
      s3-build Add util_sec subsystem
      s3-build Make smbregistry depend on more of the subsystems it needs
      s3-build Specify more of the smbconf dependencies
      s3-lib: Use ARRAY_SIZE() to walk the error mapping tables
      s4-libcli Merge error map order with source3 errmap_unix.c
      s3-lib Improve indentation of errmap_unix
      s3-smbd Fix conn_msg.c:  Cannot return in a void function
      lib/util Move sys_memalign into lib/util/system.c
      s3-lib Move source3-specific malloc replacements into a seperate file
      s3-build Put memcache in a standalone library
      libcli/util Remove ntstatus_check_dos_mapping
      s3-build Don't allow undefined symbols in pam_smbpass.so
      s3-libsmb remove ldap_err2string() as common nterrs[] has the constants
      librpc/ndr: Use converted_size to determine if NULL termination was sent
      s3-param prepare for some lp_ functions to return const
      s3-param Make lp_passwordserver() const.
      s3-param Make charset parameters const
      s3-param Make lp_smb_ports() const
      s3-param Make lp_smb_passwd_file() and lp_private_dir() const
      s3-param Make lp_lockdir() const
      s3-param Make lp_statedir() const
      s3-param Make lp_cachedir() const
      s3-param Make lp_piddir() const
      s3-param Make lp_utmpdir() and lp_wtmpdir const
      s3-param Make lp_name_resolv_order() const
      s3-param Make lp_realm() const
      s3-param Make lp_dedicated_keytab_file() const
      s3-param Make lp_ncalrpc_dir() const
      libcli/util Remove prototype for ntstatus_dos_equal()
      s4-param Remove 'sam database' parameter
      s4-param Remove 'secrets database' parameter
      s4-param Remove 'idmap database'
      s4-param Remove 'sid generator'
      s3-param always allow the realm parameter
      s4-param make lpcfg_sam_name() cope with PDC and BDC roles
      s4-param Add hook between Samba3 and Samba4 loadparm systems.
      s3-lib Remove unused lib_path()
      lib/util use modules_path(), data_path() and shlib_ext() from source3
      s4-param Remove 'modules dir'
      s4-modules Remove lp_ctx from init functions that no longer need it
      s3-passdb use new loadparm_init_s3 rather than reloading the smb.conf
      s3-s4-param: Add hooks for parametric options in the s3/s4 glue layer
      s4-auth Move default auth methods back into auth.c
      s3-auth Use loadparm_init_s3() to get an lp_ctx for auth_samba4
      s3-docs Add documentation for ncalrpc dir
      selftest: Fix 'make quicktest' on systems without LDAP development support
      s4-credentials Allow use of file-based credentials caches for debugging.
      s4-credentials Don't use expired Kerberos or GSSAPI credentials
      s4-gensec bring GSS_S_CONTEXT_EXPIRED into it's own error handler
      s3-talloc Remove unused TALLOC zeronull functions and macro definitions
      s3-talloc Change TALLOC_REALLOC_ARRAY() to talloc_realloc()
      s3-talloc Change TALLOC_ARRAY() to talloc_array()
      s3-talloc Change TALLOC_P() to talloc()
      s3-talloc Change TALLOC_ZERO_P() to talloc_zero()
      s3-talloc Change TALLOC_ZERO_ARRAY() to talloc_zero_array()
      s3-talloc Change TALLOC_MEMDUP() to talloc_memdup()
      s4-cluster Use task_id instead of id2 to clarify server_id structure
      s3-server_id Add task_id to server_id to match Samba4
      s3-server_id change pid to hyper
      server_id.idl: Bring server_id.idl in common
      librpc/idr Use the Samba3 notify.idl in common.
      s3-lib Read and write the full struct server_id (except the unique_id)
      lib/util Bring procid_str() into lib/util as server_id_string()
      s4-param add const to loadparm_init_s3 s3_fns
      s3-lib Use domain in credentials file for domain in credentials
      s3-libsmbclient Use workgroup from libsmbclient caller for domain in credentials
      s3-param Remove special case for lp_workgroup()
      s3-param Remove special case for global_scope()
      server_id: Change format to vnn:pid.task_id, pid.task_id or pid
      s3-selftest Add a test for 'message command'
      s3-lib Add myhostname_upper()
      s3-param Remove special case for global_myname(), rename to lp_netbios_name()
      s3-selftest Add test for smbclient --authentication-file
      s4-librpc Remove unsued server_id4.idl
      s3-param Avoid strupper_m() where possible.
      s3-param Remove 'time offset' from smb.conf
      libclu/util: Move get_friendly_nt_error_msg() in common.
      errors: reorder error codes for easier s3/s4 comparison
      s4-errors: Import error maps from the source3/ unix -> ntstatus mapping
      s4-build Change default paths and --with flags for a 4.0 release
      build: Put lockdir and cachedir in FHS-like locations by default
      s3-winbind Move winbind privileged socket dir into state_path()
      s3-libcli Remove unused error mapping tables
      libcli/util Bring samba4 unix -> nt_status code in common.
      libcli/util Rename common map_nt_error_from_unix to avoid duplicate symbol
      lib/util Make unused d_vfprintf() static
      s4-param Add my authorship to this script
      s3-param Put &Globals in the FN_ macros, rather than in each entry
      lib/util: Use common d_printf() in the whole codebase
      lib/util: allow parmlist.c to compile under s3 includes.h
      lib/util Remove samba-util-common!
      s4-cmdline: Rename popt tables to avoid symbol conflicts
      build: disable -Wl,--as-needed to try and fix the build
      s4-torture Enable libnetapi and libsmbclient tests using combined build
      selftest: Run tests for libsmbclient and libnetapi
      s4-param Autogenerate the loadparm_globals and loadparm_service tables
      build: move dynconfig for top level build up
      lib/util Remove display_cd from d_printf()
      lib/util: Restore CH_UNIX as source charset for d_printf()
      s3-build: Provide a run-time shim to work around duplicate symbols
      lib/util/charset: Remove 'display charset'
      lib/util/charset: Remove autodetection of charset from LOCALE
      s3-swat Remove d_printf() calls
      s3-net: Bind our gettext results to 'unix charset'
      param: Remove "announce as" parameter
      s3-param Remove 'announce version' parameter
      build: Add a script to install python and Samba with one command
      s3-param Remove %(DomainSID) support
      s3-build: Remove SECRETS3 as a samba3core dep
      s3-build: Require fully defined symbols for all public libraries
      s3-build Require fully defined symbols in ALL libraries by default
      param: Remove remaining references to announce as and announce version
      s3-selftest Remove unused gdb_backtrace
      selftest: Remove %PROG% argument from 'panic action'
      selftest: Cope with no binary argument being supplied to gdb_backtrace
      build: Remove blacklist now we have a common build
      s3-build Add dep on popt to fix FreeBSD build
      Update WHATSNEW.txt with news for Samba 4.0 alpha16
      release Samba 4.0 alpha16
      build: Remove blacklist now we have a common build
      Update WHATSNEW.txt with news for Samba 4.0 alpha16
      release Samba 4.0 alpha16
      VERSION: on the road to alpha17
      Merge 2610c05b5b95cc7036b3d6dfb894c6cfbdb68483 as Samba-4.0alpha16
      s3-buildoptions Show compiled-in location of the new ncaclrpc and nmbd sockets
      s3-autconf Move nmbd socket directory to PREFIX/var/nmbd
      s3-param make lp_passdb_backend() a normal lp_ function again
      s3-param Remove lp_parm_string
      s3-param Rename struct service and struct globals
      s3-smbd Remove set but unused variables
      s3-param use lp_parm_ptr() rather than parm.ptr directly
      s3-param use .offset rather than .ptr (renames)
      s3-param Remove .offset == 0 checks as 'valid' will have offset 0
      s3-param Use .offset rather than .ptr when defining parameters
      param: Merge struct parm_struct definitions
      s3-param Remove unused FLAG_DOS_STRING
      s4-param Merge struct parm_struct with version from source3/
      s4-param Match source3's param: use C99 initialisers
      s3-param Convert sDefault to C99 initialisers
      s3-param use C99 boolean for true
      s3-param use C99 boolean for false
      param: Merge param headers into lib/param/loadparm.h
      s4-param Handle BOOLREV parameters
      s4-dsdb Allow a servicePrincipalName of machine$
      s4-dsdb guard principalName parse for invalid inputs
      s3-param Remove unused bUpdateEncrypt
      s3-param remove unused bIdmapReadOnly
      param: Finish conversion from lp_wins_support() -> lp_we_are_a_wins_server()
      s3-param Generate parameter tables
      s3-param Remove #defines already in common loadparm.h
      s4-param Remove unused 'announce version'
      s3-build Prepare to require fully defined modules
      s3-build Require fully defined modules by default
      s3-samr Send IP address only to PAM remote hostname hook on password set
      s3-lib Move event_add_idle() to source3/lib/events.c
      s3-auth libauth no longer requires undefined symbols
      s3-build allow_undefined_symbols=False is the default now
      s3-build link passdb modules against libpassdb
      s3-build add tevent depencency on libsmb
      build: Add missing dep on UTIL_TEVENT
      build: Add missing depencency on NDR_NBT
      build: remove mktowscript
      ldb: make ldb a top level library for Samba 4.0
      ldb: set -Wl,-no-undefined only on standalone build
      build: Re-enable the -Wl,--as-needed flag
      librpc/ndr remove _SAMBA_BUILD_ conditionals
      build: Remove _SAMBA_BUILD == 4 from libgpo
      libcli/smb move enum protocol_types to a common header
      libcli/smb move FILE_TYPE constants in common
      s3-build We no longer require to redefine _SAMBA_BUILD_
      build: we no longer put #if _SAMBA_BUILD_ == 4 in public headers
      s3-param Remove lp_set_passdb_backend()
      s3-param: calculate default_server_announce at runtime
      s3-lib use True and False in bitmap.c
      param: Add hooks to s3 parm_struct and the parameters void * pointer
      lib/util Move bitmap.c to lib/util
      s3-param check for aliases with both p_class and offset
      s4-param Also check the p_class matches when comparing offset
      s4-param change to struct bitmap to match s3-param
      s4-param Remove offset != -1 checks
      param: Move per-share parameters into a seperate file, to share with s3
      s3-param use common struct parmlist_entry to hold parametric options
      lib/param: Merge struct loadparm_service into common
      s4-dsdb Don't process deletion of member attributes here.
      s3-param Plug 'netbios aliases' via the parameter bridge
      s4-param cope with parameters of type char
      s4-param finish services hooks for s4->s3 loadparm context
      s3-lib Remove unused get_cmdline_auth_info_copy
      s4-winbind handle all values for server role
      lib/util Change debug priority order: DEBUG_STDOUT now overrides DEBUG_FILE
      debug: log early messages to stdout, and keep it open
      s4-param Handle P_CHAR and P_BOOLREV in pyparam
      Add my copyright
      s3-auth Restore nss_token behaviour by reading from server_info
      auth: Preserve guest flag on transition via netr_SamInfo3
      s3-auth Add const to indicate input elements
      s3-auth Add struct auth3_session_info to aid transition to auth_session info
      s3-auth Use struct auth3_session_info outside the auth subsystem
      s3-auth Use *unix_token rather than utok in struct auth3_session_info
      auth: include auth.idl structures into common_auth.h
      s3-auth Use struct auth_user_info_unix for unix_name and sanitized_username
      auth: Put 'guest' and 'system' booleans into auth_user_info_unix
      s3-auth Use guest boolean in auth_user_info_unix
      s3-auth Use system boolean in auth_user_info_unix
      s3-auth remove unused copy_serverinfo
      s3-auth: Remove unused lm_session_key from auth3_session_info
      s3-auth Remove unused nss_token variable
      s3-auth assert that security_token is present in the copy, and explain why nss_token can be skipped
      s3-auth Clarify inputs and ouptuts by using elements from server_info
      s3-auth remove extra from auth3_session_info
      s3-auth use a cached auth_serversupplied_info in make_server_info_guest()
      s3-auth inline copy_serverinfo_session_info into only caller
      s3-auth Add comments to copy_session_info_serverinfo_guest()
      s3-auth Avoid redundant copies in create_local_token()
      s3-auth import auth3_session_info into IDL
      s3-auth Remove pointless destructor
      auth: use char * pointers in auth.idl
      s3-auth reimplement copy_session_info via NDR pull/push
      s3-rpc_server read and write the unix_token and unix_info across named_pipe_auth
      s3-auth use auth_user_info not netr_SamInfo3 in auth3_session_info
      s3-auth Use the common auth_session_info
      s3-rpc_server remove per-element copies of auth_session_info
      auth: Split out make_user_info_SamBaseInfo and add authenticated argument
      auth: Move make_user_info_SamBaseInfo() to talloc_strdup and out of memory checking
      auth: remove now unused auth3_session_info from auth.idl
      selftest: Pass lsass and epmapper across the named pipe proxy to the AD server
      selftest: Add tests to verify that the named pipe proxy works.
      auth: Set NETLOGON_GUEST and use it to determine guest status
      s3-auth Remove seperate guest boolean
      security.idl: Use gid_t for gid in security_unix_token
      s3-auth inline make_auth_session_info into only caller
      s3-auth Remove pointless destructor in make_server_info
      s3-auth Fix spelling
      s3-auth Replace True with true in auth_util.c
      s3-auth Replace False with false in auth_util.c
      s3-auth fix dummy function in the not-with-kerberos case
      s3-gse Allow printing the partial error string
      s3-gse Work around the MIT 1.9 gss_krb5_import_cred
      nbt: fix WinXP S3 domain join: alignment of nbt_netlogon_response_from_pdc
      s4-debug: Start with DEBUG_DEFAULT_STDOUT, so we can log to a file in deamons
      s4-lsa Use the supplied handle in LsaLookupNames2
      selftest: explain how the message command test works
      nbt: Add comment explaining that these responses are manually encoded
      selftest: Avoid being run over by armies of the undead
      s3-selftest Add tests for 'map to guest = bad user'
      ntvfs: Use security_unix_token from auth.idl
      gensec: Add a way to request a unix token from GENSEC
      s4-auth Move conversion of security_token to unix_token to auth
      s4-auth Fill in the remainder of the unix info in auth_session_info
      gensec: split GENSEC into mechanism-dependent and runtime functions
      gensec: Remove mem_ctx from calls that do not return memory
      gensec: clarify memory ownership for gensec_session_info() and gensec_session_key()
      s3-auth Move map to guest to directly after the check_password calls
      s3-auth Use else if in do_map_to_guest_server_info
      s3-rpc_server use session_info to print user details
      s3-ntlmssp Remove unused auth_ntlmssp_get_client
      s3-ntlmssp Remove unused auth_ntlmssp_get_domain()
      s3-ntlmssp Use auth_ntlmssp_*() functions in more places
      s3-auth Allow auth modules to provide an initialised GENSEC context
      s3-ntlmssp Add mem_ctx argument to auth_ntlmssp_get_session_key()
      s3-ntlmssp Add hooks to optionally call into GENSEC in auth_ntlmssp
      s3-ntlmssp NTLMSSP sealing implies signing, so set both flags
      s3-ntlmssp Add mem_ctx argument to auth_ntlmssp_update
      s3-ntlmssp Remove calls to auth_ntlmssp_and_flags from the server
      s3-ntlmssp Remove auth_ntlmssp_or_flags
      s3-auth Add hook to start a GENSEC mech to auth_samba4
      selftest: use the s4 winbindd in plugin_s4_dc test
      selftest: Test encrypted RPC pipes against plugin_s4_dc
      s3-ntlmssp Remove rpccli_get_pwd_hash and auth_ntlmssp_get_nt_hash
      s3-ntlmssp Remove auth_ntlmssp_and_flags()
      gensec: Don't keep a second copy of the auth4_context in gensec_ntlmssp_state
      s3-ntlmssp Split calls to gensec plugin into prepare and start
      s3-ntlmssp Split auth_ntlmssp_start into two functions
      s3-auth set session_info->sanitized_username in create_local_token()
      s3-auth remove sanitized_username from auth_serversupplied_info
      s3-auth clarify the role of these session keys
      s3-smbd Ensure we do not read past the end of a possible NTLMSSP blob
      s3-smbd clarify behaviour by not passing an OID that will not be used
      s3-auth Add function to start any GENSEC mech by OID
      s3-auth use auth_generic_start to get full GENSEC in Samba3 session setup
      selftest: Add kerberos tests to plugin_s4_dc tests
      s3-smbd Be consistent with %U subs on guest logins
      selftest: print %U in smbclient -L output to allow testing
      s3-auth rename auth_ntlmssp_steal_session_info()
      s3-auth directly return the result of make_server_info_guest()
      ldb-samba: Explain the current behaviour of ldif_canonicalise_objectCategory
      s3-ntlmssp Remove auth_ntlmssp_state_destructor, use the talloc tree instead
      s3-ntlmssp clarify session key behaviour after create_local_token() changes
      selftest: test plugin_s4_dc against all ncacn_np tests
      s3-ntlmssp Remove a level of nesting in if/else statement
      s3-ntlmssp Remove rudundent comment
      ntlmssp: Add ntlmssp_blob_matches_magic()
      s3-ntlmssp void function cannot return value
      s3-waf: Fix build on FreeBSD when sunacl.h is found
      build: provide tevent-util as a public library
      build: rename rpcommon to dcerpc-binding an make a public library
      build: Make credentials a public library for OpenChange to use
      s4-dsdb Remove unused schema function
      move schema_fill_constructed() call to dsdb_setup_sorted_accessors()
      s4-dsdb clarify that failure to load the schema items from DRS is expected
      s4-dsdb Add flag to set DSDB_BYPASS_PASSWORD_HASH control
      s3-passdb Make pdb_element_is_changed available to all passdb modules
      s4-dsdb Add ability to force a particular SID in the upgrade case
      s3-passdb Add support for pdb_add_sam_account() and password hashes to pdb_samba4
      s4-scripting Rename passdb upgrade routine to avoid conflict with upgradeprovision
      s4-dsdb Give a less worrying error message on failure to get a transaction
      s4-dsdb ensure we honour the hash_values control, even for really odd hashes
      param: Add smb.conf loading support to s3/s4 loadparm bridge
      s4-param Set szConfigFile even for s3 loadparm contexts
      s3-smbd Avoid races creating 'ncaclrpc dir' with epmd in a child process
      s4-provision Add support for fixing the DC rid to a particular value
      ldb: Remove use after free in error case
      s3-passdb: Fix python < 2.6 build errors in passdb python wrapper
      s3-passdb Use supplied pdb_methods in default passdb search handlers
      build: link pys3param against pytalloc-util not pytalloc
      s3-passdb pdb_samba4 handles PDB_PWHISTORY already
      s4-provision set passdb backend to 'samba4' in template smb.conf files
      selftest: skip all plugin_s4_dc tests if we do not have LDAP libs
      set passdb backend in Samba4 make test environments too
      s4-provision Use samba.dns_name_to_dn
      s4-dsdb Return ACL errors as ldb_errstring()
      build: Add dcerpc-binding to dcerpc.pc
      selftest: Allow a krb5.conf to be generated that covers multiple realms
      s4-messaging ensure we do not segfault on a NULL msg context in cleanup
      s4-drsuapi Allow DsAddEntry of normal objects
      wintest: update snapshots
      s4-provision cope with SID_NAME_WKN_GRP mappings in upgrade.py
      s4-provision Allow a missing idmap DB in upgrade.py
      s4-provision Add realm to DC configuration in upgrade_from_s3 test
      s4-provision Use ProvisioningError and the eadb
      s4-dsdb Print clearer error messages when invalid account flags are specified on add
      s4-provision Fix type error on existing idmap entries in s3 upgrade
      s4-provision handle a number of invalid but real-world upgrade cases
      s4-schema consolidate schema handling
      s4-s3-upgrade Fix error handling in add_users_to_group
      heimdal: Try to handle the PAC checking when we are in a cross-realm environment
      s4-s3-upgrade Fix group member addition
      s4-s3-upgrade Handle expected errors, error out on unexpected ones
      lib/addns: Remove unused TALLOC_ macros
      s4-s3-upgrade: convert password age policies to the negative NTTIME format
      libgpo: call security_token_has_sid() directly
      librpc: put NDR_NTPRINTING into ndr-samba grouping library
      build: make LIBWBCLIENT_OLD and auth_unix_token libraries
      build: netapi does not depend on TOKEN_UTIL
      build: Add duplicate symbol checking as part of make test
      s4-param void function cannot return value
      s4-s3-upgrade do not convert min password length as a time
      build: a more robust zlib test
      s4-s3-upgrade Do not use python 2.6 style exceptions
      lib/util/charset: add back loading of charset modules
      lib/util/charset Run charset sets with and without the system iconv
      lib/util/charset: Improve toture assertions in iconv test
      lib/util/charset Use name of ISO-8859-1 that matches our internal implementation
      lib/util/charset: the comparsion must be against our charset modules
      s3-selftest: Set path to bin/net and bin/wbinfo in command line to test scripts
      start Samba 4.0alpha17 release notes
      s4-s3-upgrade Remove upgrade_from_s3 script, use samba-tool domain samba3upgrade
      doc: suggest samba-tool dbcheck in upgrading-samba4.txt
      Release Samba 4.0 alpha17
      start work on Samba 4.0 alpha18
      s4-provision Add initial support for joining as a new subdomain
      s4-provision Split addition of users and well known principals
      s4-join supply the NTDS GUID to the provision
      s4-provision Perform 'modify' operations as system
      s4-join Add a partitions DN when we join a subdomain
      selftest: add test for subdomain support
      s4: add createtrust tool for testing
      s4-subdomain more work on sub-domain join
      script/librelease.sh: automate Samba4 alpha releases
      s3-selftest use a more portable shell syntax
      s4-s3-upgrade Improve samba-tool domain samba3upgrade behaviour
      s4-provision Add initial support for joining as a new subdomain
      lib/util/charcnv: Remove broken internal CP850 and CP464 modules
      lib/util/charset: remove charset module loading
      build: avoid util.h as a public header name due to conflict with MacOS
      build: Fix waf build on MacOS X
      s3-pdb_samba4: Remove unused attribute from domain search
      s4-ldap_server: Fix segfault on startup failure of ldap server
      s3-messaging Ensure that the message is of the correct legnth
      s3-messaging Do not ever send a kill to -1
      build: Add dep on tdb-wrap3 to get tdb headers
      s4-dsdb Allow repl server to start even when no master NCs are present
      dsdb: fix double-free in replication failure case on RODC
      dsdb: Do not attempt to resolve conflicts on an RODC
      s4-dsdb: Do not assume that all deleted objects have an objectCategory and sAMAccountType
      s3-module allow libreplace to provide dlopen replacement
      lib/util: consolidate module loading into common code
      lib/util: Remove unused module loading functions
      lib/util: Use only init_module_fn typedef in module loading
      modules: standardise on samba_init_module as the hook symbol to resolve
      lib/util: consolidate module loading
      build: Reduce build systems to just top level waf and autoconf
      autobuild: Remove s3-waf from autobuild
      build: Remove _SAMBA_WAF_BUILD_
      build: Remove obsolete --enable/disable-merged-build
      build: ndrdump is only built with waf
      ldb: use ldb directly rather than via a copy
      s3-param use Auto define for lm_announce default
      param: Use a bool to hold boolean parameters
      s3-param: inline octal_string into caller to allow code merge
      s3-param Remove odd formatting to allow code merge
      s4-param copy print_parameter and equal_parameter in from source3
      build: s3 public headers appear to be correct now
      build: remove double-setting of build_public_headers
      build: build wbinfo only once in the waf build
      lib/param move source4 param code to the top level
      libcli/smb Move CSC_POLICY_* definition to smb_constants.h
      lib/param: Remove unused #include of lib/socket/socket.h
      lib/param Avoid the use of the name service_ok() which is used in the s3 param code
      lib/param Avoid the name string_set as this is already used in the s3 param code
      lib/param Use talloc_strdup rather than strdup as strdup is banned in the s3 includes.h
      lib/param Use strcasecmp_m rather than strcasecmp as this is banned in the s3 includes.h
      lib/param Avoid dyn_ defines that are not provided by the autoconf build
      s4-s3-upgrade: Allow import (just without a uid mapping) where getpwnam fails
      auth: move credentials layer to the top level
      auth: move gensec_start.c to the top level
      auth/credentials Declare remaining functions are public interfaces and put into credentials.h
      gensec: trim header includes back to what is actually required
      build: use lib/param loadparm code in source3 to get at lpcfg_ functions
      lib/param Add 'use mmap' parameter to control tdb use of mmap
      lib/param Print error when mkdir of lock path fails
      libcli/auth: Provide a struct loadparm_context to schannel calls
      s4-messaging: Pass the loadparm context, not just the messaging path
      lib/util: Add back control of mmap and hash size in tdb for top level build
      lib/param reduce the cost of loadparm_init_s3()
      build: only regenerate param files when required
      build: clean new generated param headers
      build: run perl generators at autogen.sh time
      add lib/param files to .gitignore
      Revert "s4:selftest: skip flakey samba4.nbt.winsreplication for now"
      Revert "s4: Mark the winsreplication test as knownfail"
      s4-selftest When testing for a credentials cache, do not specify a domain
      credentials: Prioritise command-line specified options above defaults from smb.conf
      s3-auth Add my copyright
      s4-s3-upgrade: Give a better clue when we cannot open secrets.tdb
      build: compile gensec_start.c and credentials.c in the autoconf build
      ntlmssp: Move ntlmssp code to auth/ntlmssp
      ntlmssp: Prepare gensec_ntlmssp_start() for broader use
      ntlmssp: Put members from auth_ntlmssp_state into gensec_ntlmssp_state
      gensec: an event context is no longer mandetory
      s3-ntlmssp Implement the server-side auth_ntlmssp code as a GENSEC module
      s3-smbd Give the nt error string when failing to set up encrypted transport
      gensec: Assert that we have not been subject to a downgrade attack in DCE/RPC clients
      s4-auth: match the new s3 gensec client and always negotiate SIGN with SEAL
      gensec: Refuse to seal if we did not negotiate to sign
      ntlmssp: Refuse to seal if we did not negotiate to sign
      gensec: move event-using code to gensec_update() hooks out of gensec_start*()
      s3-auth fix comment after s3 ntlmssp gensec module
      gensec: move event context from gensec_*_init() to gensec_update()
      s3-auth: use typedefs in auth.h
      ldb: Output more error information when a connect fails
      lib/param: Remove parameters for wins and spoolss databases
      s3-rpc_client remove cli_auth_ntlmssp_data_destructor
      s3-ntlmssp split auth_ntlmssp_client_start() into two parts
      s3-libsmb Use a gensec module to provide the ntlmssp client in ntlmssp_wrap.c
      s3-auth move the s3 auth context onto gensec_ntlmssp once we start
      s4-smb_server do not set credentials on gensec twice
      s4-s3-upgrade Fix samba3upgrade code to cope with a missing wins.dat
      s4-s3-upgrade test upgrade without a wins.dat
      s4-s3-upgrade fix format string for secrets.tdb exception
      s4-s3-upgrade rename samba-tool domain samba3upgrade --libdir to --dbdir for clarity
      Revert "selftest: Avoid being run over by armies of the undead"
      examples: compile libsmbclient tests using just SAMBA_BINARY
      s3-netapi Compile (but do not install) netapi tests
      build: compile (but do not install) all the libsmbclient tests
      build: compile (but do not install) netapi examples
      s3-auth remove auth_ntlmssp_session_info()
      s3-ntlmssp Remove auth_ntlmssp_update wrapper
      s3-ntlmssp Remove auth_ntlmssp_negotiated_sign() and auth_ntlmssp_negotiated_seal()
      s3-ntlmssp use gensec_{seal,unseal,sign,check}_packet
      s3-seal use gensec_[un]wrap() instead of gensec_[un]seal_packet()
      s3-ntlmssp Remove auth_ntlmssp_want_feature()
      s3-ntlmssp Remove auth_ntlmssp_session_key()
      s3-ntlmssp Remove references to auth_ntlmssp_context from the smb sealing code
      s3-seal Remove struct smb_srv_trans_enc_ctx
      s3-ntlmssp Remove references to auth_ntlmssp_context from the rpc code
      lib/util/charset Remove unused header smb_common.h
      libcli/smb Move smb_seal.h include to files that use it.
      torture: Remove unused smbiconv
      build: always include talloc with <talloc.h>
      build: always include tevent with <tevent.h>
      examples: rework wscript to use a loop
      s3-torture remove unused t_asn1.c
      s3-torture remove unused t_push_ucs2.c t_strcmp.c t_strstr.c
      selftest: Remove --target option and the ability to run 'samba4 only' tests
      selftest: Have only one set of selftest knownfail and skip files
      s3-torture Fix t_strappend test
      s3-torture Run t_strappend test for less time
      s3-torture run t_strappend tests as LOCAL-sprintf_append
      s3-selftest: Add LOCAL-sprintf_append
      s3-torture Remove t_stringoverflow as fstrcpy now uses strlcpy
      s3-build: Remove libbigballofmud.so
      s3-selftest Add all the LOCAL-* smbtorture tests to make test
      gensec: Add parinoia about integer wrapping
      lib/util Rename init_module_fn to samba_init_module_fn
      lib/util Rename run_init_functions -> samba_init_module_fns_run
      lib/util Rename load_samba_modules -> samba_modules_load
      lib/util Split samba-modules library into public and private parts
      lib/util Rename samba_init_module_fn -> samba_module_init_fn
      lib/util Rename samba_init_module_fns_run -> samba_module_init_fns_run
      lib/util Rename samba_init_module -> samba_module_init
      lib/util Rename samba_modules_load -> samba_module_init_fns_for_subsystem
      lib/util Add ABI to the samba-module library
      s4-dsdb Remove LDAP backend credentials support
      selftest: Remove the 'all' environment as it is just too slow to start up
      s4-smb_server No longer follow the security=share smb.conf directive
      s4-s3-upgrade Add my copyright
      s4-provision Remove options for LDAP backend to reduce user confusion
      s3-passdb Initialise the correct level of pointer dereference
      s3-py_passdb Ensure that group mapping list input is initailised
      s4-setup Remove servicePrincipalName: DNS/${DNSDOMAIN} from new installations
      param: make server role list common and include auto (for the new default)
      s3-param remove lp_domain_logons(), always use IS_DC
      param: calculate server role from security, and security from server role
      s4-s3-upgrade Add test of net getlocalsid after the upgrade
      param: move server role helpers into loadparm.h
      param: Move enum values into a common (included) .c file
      param: Add tests for automatic server role guessing
      s4-provision permit server role to be the ROLE_ strings from s3
      param: Connect lp_security to the lib/param code to allow tests
      lib/param: Add tests for security= behaviour now it operates with server role
      param: use lp_is_security_and_server_role_valid()
      libds: Make server role values explicit for easier debugging
      docs: Add documentation for server role
      lib/param simplify server role values specified in smb.conf
      s3-net Do not look for a local SID when we are a DC
      s4-s3-upgrade Test getdomainsid as well
      s3-nmbd Remove AD netlogon response from s3 nmbd server
      s4-s3-upgrade now look for -1 as the special 'not set' value
      s4-auth log details about any token we fail to convert to a unix token
      s4-samba-tool: Add --principal argument to samba-tool domain exportkeytab
      build: TDB_ERR_NESTING is used unconditionally
      s4-kdc: Add hdb plugin for samba4, to allow kadmin to work
      auth: Allow a NULL principal to be obtained from the credentials
      s4-dns Use match-by-key in GSSAPI server if principal is not specified
      pydsdb: provide a am_pdc hook like am_rodc to python scripts
      s4-dnsupdate: Do not attempt to add the PDC names if we are not a PDC
      Remove outdated information from the README
      clarify Roadmap, as the shape of Samba 4.0 is much clearer now
      s4-kdc: only build hdb plugin if we build against system Heimdal
      s4-selftest re-enable nsstest on libnss_winbind.so
      selftest: samba4.samba-tool.domopen now passes, so do not skip
      s4-lsarpc Fix segfaults found by the samba4.rpc.lsa.forest test
      torture: do not reuse bindings between pipes
      s4-lsarpc handle more info levels in SetInfoTrustedDomain calls
      testsuite: Remove unused and unlikely to be revived DejaGNU tests
      s4-torture: Fix comment
      s4-torture Modify rpc.lsa.forest.trust test to progress further FL Win2003 R2
      s4-torture cope with servers earlier than Windows 2008
      s4-torture Do not use a fixed password for forest trust tests
      HEIMDAL: Supply krb5_context to _krb5_internal_hmac to allow logging
      s4-selftest Give local.resolve a real name to look up
      s4-selftest: Add test of RPC to a netbios alias
      s4-resolv: fix dns_ex so as to fail correctly when a name does not exist
      lib/param: Set s4 "host msdfs = true" by default
      s3-rpc_server: Remove old comment
      s3-rpc_server: Add my copyright for my previous work here
      s3-auth Restore shortcut for guest security token
      s3-rpc_server request the DCE_STYLE feature in ntlmssp_server_auth_start
      s3-auth rename auth_ntlmssp_state -> auth_generic_state
      s3-auth rename auth_ntlmssp_prepare() -> auth_generic_prepare()
      s3-auth remove auth_ntlmssp_start(), call auth_generic_start() directly
      s3-rpc_server request both sign and seal for clarity
      s3-auth split the auth_generic functions into a seperate file
      s3-rpc_server remove unused header
      s3-rpc_server rename ntlmssp_server_auth_start() -> auth_generic_server_start()
      s3-rpc_server rename NTLMSSP functions to auth_generic..()
      s3-rpc_server: Rename dcesrv_ntlmssp.[ch] to dcesrv_auth_generic.[ch]
      s3-rpc_server: rename pipe_ntlmssp_verify_final() to pipe_auth_generic_verify_final()
      s3-rpc_server: Allow gensec mechanisms to return NT_STATUS_OK
      s3-rpc_server: Rework pipe_ntlmssp_auth_bind() to be generic
      s3-librpc Use gensec_sig_size() instead of a fixed NTLMSSP_SIG_SIZE
      gensec: Allow an alternate set of modules to be specified
      s3-auth: Remove protype for already-removed auth_ntlmssp_start
      s3-auth Fix talloc parent for s4 event context in auth_samba4
      s4-ntlmssp Do not allow LM key without a LM password
      credentials: Always honour the return value of E_deshash()
      auth/kerberos: Move gssapi_parse.c to the top level
      s4-gensec: Allow a PAC to be obtained from any GSS mech
      s4-auth Remove unused auth_context_create_from_ldb()
      auth/kerberos: Make pac_data_out in kerberos_decode_pac() optional
      s4-gensec: fix cyrus sasl module after update() protype change
      s4-gensec: Move parsing of the PAC blob and creating the session_info into auth
      s4-pyauth: Make sure event context allows nesting
      s4-gensec: Pass the auth context in during gensec test
      s4-torture: Demonstrate handling of the PAC in a custom auth_context
      s4-gensec Remove fallback for simple privileges
      s4-gensec remove auth_session dep from gensec_gssapi.c
      auth/kerberos: Rename memory contexts for greater clarity
      s4-auth: Rename memory contexts for greater clarity
      s4-gensec: Rename memory contexts in gensec_gssapi for greater clarity
      s4-gensec: Rename memory contexts in gensec_krb5 for greater clarity
      s4-gensec: Rename memory contexts in gensec_util for greater clarity
      s4-toture: Rename memory contexts in rpc.pac for greater clarity
      s3-librpc Use gsskrb5_get_subkey() where available to get the session key
      s3-libads Factor out a new routine kerberos_get_principal_from_service_hostname()
      s3-librpc store the sign/seal flags we got in the gssapi client
      s3-selftest: Add test for rpcclient, including kerberos authentication
      s3-auth supply s3 ntlmssp module via gensec_settings
      s3-auth Add TALLOC_CTX * to auth_generic_prepare()
      s3-auth re-create the auth context in the s3 ntlmssp server module
      s3-auth Set remote address for both AD and s3 gensec modes
      s3-auth use gensec directly rather than via auth_generic_state
      s3-auth Remove ntlmssp_wrap.h which is no longer required
      s3-auth remove unused ntlmssp.h
      s3-auth Remove more unused headers
      s3-librpc remove unused headers
      s3-auth remove outdated comment
      s3-auth Rename make_auth_ntlmssp() -> make_auth_gensec()
      s3-libsmb Use gensec_settings to set s3 ntlmssp client backend
      s3-libsmb Make auth_ntlmssp client more generic
      s3-libads Use NTLMSSP via auth_generic/gensec
      s3-torture convert smb2 test to use auth_generic/gensec for NTLMSSP
      s3-winbindd: convert cached credentials to use auth_generic/gensec for NTLMSSP
      ntlmssp: merge initial packet implementations
      s3-ntlmssp Remove unused ntlmssp_set_hashes() and do not set an invalid LM hash
      s3-selftest Hide smb4torture_possible inside plansmbtorturetestsuite()
      s3-selftest: remove smb4torture_possible and add have_ads_support
      s3-build: smbtorture4 can be built regardless of use_ads
      s3-build SAMBA4SHAREDIR is unused in make test
      s3-build SMBTORTRUE4 variable is unused in make test
      s3-selftest: Add test for smbclient kerberos support
      s3-libsmb: match the rest of Samba3 in kerberos name selection in smb sealing
      s3-selftst Add encrypted CIFS testing with kerberos
      s3-sefltest Make krb5 tests contain the word krb5
      s3-libsmb: Do not look up FQDN or use host/ for krb5 encrypted CIFS
      auth/credentials Remove debug that prints in normal operation
      s3-build: Remove unused hooks to set smbtorture4 and test args
      krb5: Require krb5_c_enctype_compare is available to build with krb5
      krb5: Require krb5_c_verify_checksum is available to build with krb5
      krb5: Require krb5_get_host_realm and krb5_free_host_realm be available to build with krb5
      krb5: Require krb5_fwd_tgt_creds to be available to build with krb5
      krb5: Require krb5_get_init_creds_opt_alloc/free for build with krb5
      krb5: Remove now unused checks for krb5_verify_checksum
      krb5: Require krb5_get_renewed_creds be available to build with krb5
      krb5: Require krb5_principal_compare_any_realm be available to build with krb5
      krb5: Require krb5_set_real_time is available to build with krb5
      krb5: Require krb5_string_to_key be available to build with krb5
      krb5: Require gss_get_name_attribute or Heimdal's PAC parsing to build with krb5
      s3-librpc Return user principal name on supplied mem_ctx
      auth/kerberos: Remove unused headers from gssapi_parse.c
      auth: make auth4_context common to provide access to generate_session_info_pac()
      gensec: move gensec_util.c to the top level
      s3-librpc Rename create_ntlmssp_auth_rpc_bind_req() to be more generic
      s3-librpc Rename and rework cli_rpc_pipe_open_ntlmssp() to be generic
      s3-librpc Set target service and server into gensec
      s3-librpc: rename get_ntlmssp_auth_footer to be more generic
      s3-libsmb: split out auth_generic client functions into auth_generic.c
      s3-librpc: Rename spnego_ntlmssp_init_client and make generic
      s3-librpc Supply target service and server to spnego_generic_init_client()
      gensec: make gensec_gssapi.h common
      gensec: Rename want_flags and got_flags in gensec_gssapi
      gensec: Make sure to check the optional auth_context hooks before using them
      s4:auth: Make sure to check the optional auth_context hooks before using them
      s4-kdc: use IDL constant NETLOGON_GENERIC_KRB5_PAC_VALIDATE
      s4-kdc Do the KDC PAC checksum validation in the Samba plugin
      auth/kerberos: Remove unused TALLOC_CTX argument to check_pac_checksum
      heimdal: remove checking of KDC PAC signature, delegate to wdc plugin
      use ETYPE_DES3_CBC_SHA1 for the verify step in verify_mic_des3
      make hmac-md5 the keyed checksum type for arcfour-hmac-md5
      Revert "make paranoia check less paranoid" - check that key types strictly match
      s3-selftest The krb5 encrypted CIFS test was wrong
      s3-auth Add auth hook for PAC parsing
      s3-auth Match session setup handling of krb5, store the PAC
      s3-gse: Add gensec wrapper for gse GSSAPI client
      s3-build: Rework object lists to allow gse gensec module
      s3-gse Make gse available as a gensec client module
      s3-libsmb Use the gse_krb5 gensec module as client
      s3-librpc Call GSSAPI via the auth_generic layer and gensec
      s3-librpc Allow spnego_generic_init_client to handle kerberos too
      s3-librpc Call SPENGO/GSSAPI via the auth_generic layer and gensec
      s3-librpc: Simplify SPNEGO code now that all mechs use a struct gensec_security
      s3-librpc Remove layer around struct gensec_security
      s3-librpc Remove unused dcesrv_gssapi.[ch] functions
      s3-gse Remove or make static unused/local-only GSE functions
      s3-gse Add const
      s3-gse Move GSS_C_DCE_STYLE backup definition to gse.c
      s3-librpc Remove special case for spnego dcerpc sign/seal
      s3-librpc Remove special case for spnego session key
      s3-gse Make seal parameter a boolean for clarity
      s3-librpc Make cli_rpc_pipe_open_spnego_ntlmssp() generic
      s3-rpcclient: pass struct ndr_interface_table down
      s3-utils/net: pass struct ndr_interface_table down
      s3-librpc: pass struct ndr_interface_table down to cli_pipe_open_generic/spnego()
      s3-gse Rename delegated_creds to match gensec_gssapi_context
      s3-gse Rename gss_ctx to match gensec_gssapi_context
      s3-gse Rename gss_c_flags and ret_flags in gse
      s3-gse remove special more_processing hook from gse
      s3-gse Remove authenticated flag from gse
      s3-gse: Make gensec_gse cope with non-DCE GSSAPI
      s3-gensec: Add hook to allow gensec to know if kerberos is permitted
      s3-gse: align common elements between gse_context and gensec_gssapi_state
      auth/gensec: align common elements between gse_context and gensec_gssapi_state
      build: Add -lz to wbinfo to fix build on some hosts
      s3-libcli Change krb5 smb sealing to call via gensec and gensec_gse
      s3-libsmb: use struct gensec_security directly
      s3-libsmb: Remove unused smb_tran_enc_state_gss and gssapi headers
      s3-libsmb: Always allow SMB_TRANS_ENC_GSS to be defined
      param: handle P_BYTES in more places
      dsdb: Allow DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OID to be specified as a flag
      s3-passdb: Use DSDB_PASSWORD_BYPASS_LAST_SET flags in pdb_samba4
      s3-passdb: Fix pdb_samba4 setting of plaintext passwords
      selftest: Add test for smbpasswd against pdb_samba4
      s3-build: Remove FIXME, bigballofmud is no more
      s4-rpc_server: Fix search for existing trust to actually look for the dns name
      s3-libsmb Do not limit read replies to NBT packet sizes
      s3-selftest: Add test for posix large reads and writes
      auth: provide private pointer and do not return original PAC signatures
      auth: Make check_password and generate_session_info hook generic
      s4-auth: Return NT_STATUS_NOT_IMPLEMENTED if the challenge cannot be obtained
      gensec: inline gensec_generate_session_info() into only caller
      s3-auth: Remove duplicate check for NT_STATUS_IS_OK(nt_status)
      s3-smbd: Use gensec_spnego in smb seal server
      s3-libsmb: Use gensec_spnego in smb seal client
      s3-libsmb: Remove unused enum smb_trans_enc_type
      libcli/smb: Convert struct smb_trans_enc_state to talloc
      selftest: Remove unused support for --exeext
      s3-auth Remove unused nt_status_squash from auth_context
      s3-build use common VERSION file for all builds
      s4-messaging: fix pymessaging docstring
      s3-auth Add const to make_user_info_map
      auth: rename ntlmssp.c to ntlmssp_util.c
      s3-docs: Remove references to long-gone smbmount utilities
      s3-passdb: Remove #if _SAMBA_BUILD_ == 4 from pdb_samba4
      s3-build: remove EXEEXT from Makefiles
      smbwrapper: Remove smbwrapper
      credentials: Show returned error_string in debug message
      heimdal: Re-run lexyacc.sh
      heimdal_build: omit #line statments
      heimdal: Re-run lexyacc.sh to remove #line statements
      build: Add --enable-coverage option to build with gcov support
      charset: Remove unused iconv_talloc()
      s3-charcnv: Remove unused pull_string_fn
      s3-registry: Remove unused prs_uint8()
      s3-lib: Remove unused pid_path()
      s4-cmdline: Remove unused popt_common_dont_ask()
      s4-lib/tls: remove unused tls_support()
      charset: Remove unused strcmp_w()
      lib/util: Remove unused str_format_nbt_domain()
      s4-lib/samba3: Remove unused smbpasswd_decode_acb_info()
      s3-param: Remove unused share_defined()
      s3-libsmb: Remove unused smb_krb5_mk_error()
      s3-charcnv: Remove unused rpcstr_push()
      s3-lib: Remove unused is_myworkgroup()
      s3-libsmb: Remove unused kerberos_compatible_enctypes
      s3-libsmb: Remove unused kerberos_set_creds_enctype()
      s4-nbt_server: remove unused winsdb_get_seqnumber()
      Revert "gensec: Fix a memory corruption in gensec_use_kerberos_mechs"
      gensec: set flag to continue in outer for loop in gensec_use_kerberos_mechs
      gensec: explain gensec_use_kerberos_mechs() logic
      auth: Pass in the SMB username (for %U) into generate_session_info
      s3-lib/addns: Move to system/kerberos.h and HAVE_KRB5
      s3-libads: Move to using only the HAVE_KRB5 define
      s3-build: expliticly require gssapi for HAVE_KRB5 and remove HAVE_GSSAPI
      selftest: Allow setup_env() to signal that an environment name is unknown
      s3-selftest: Do not assume $USERNAME is the same as $DC_USERNAME
      s3-nmbd: Initialise newly non-static variables
      wintest: connect to correct hostname in test_net_use
      wintest: Retry joining the domain a few times
      wintest: Allow access denied when turning off the firewall
      wintest: Update VM used for W2K8R2A
      wintest: s3 moved smb.conf to /etc
      wintest: Cope with nc not timing out even when -w 1 is specified
      wintest: Samba is now all version 4.0
      wintest: Give the Windows VM a little more time to start back up
      wintest: Change Windows 7 VM
      wintest: update WinXP-1 snapshot
      selftest: Make plugin_s4_dc set the cached environment correctly
      selftest: Do not start up an already-running test environment
      s3-selftest: Require SMB signing for ktest environment
      selftest: skip targets that are not compiled in if we do not have ADS
      selftest: Run nsstest against more environments
      selftest: skip plugin_s4_dc if we do not have ADS
      s3-smbd: Avoid starting log lines with the word 'error'
      selftest: Remove 'if have_ads_support:' from tests.py
      s3-selftest: Remove .posix_s3 from s3 test names
      s3-librpc: make gensec result handling more generic
      s3-librpc: Remove unused bool gensec_hook
      s3-gse: Use the session key type, not the lucid context to set NEW_SPNEGO
      s3-librpc: Use gensec_spnego for DCE/RPC authentication
      s3-smbd Remove unused code now we always have SPNEGO via gensec
      s3-param Remove off-by-default and unused "send spnego principal"
      s3-librpc: Remove gse_verify_server_auth_flags
      lib/util: Remove unused sys_select_signal()
      lib/util: Remove sys_poll as it is no longer needed
      wintest: Allow Windows VM to have no default route
      wintest: use net rpc to put authenticated users into TelentClients if we need to
      wintest: give host longer to register the SRV record
      s3-gse: Remove unused OID declaration
      s3-librpc: Remove backup declaration of GSS_C_DCE_STYLE
      s3-gse: Fix OID to read for kerberos key type
      s3-gse: Allow kerberos key type OID to be optional
      auth/kerberos: Move gse_get_session_key() to common code and use in gensec_gssapi
      wintest: Update Win2003 VM
      build: Add exceptions for callcatcher unused function detection
      s3-build: Use credentials_ntlm.c in the autoconf build as well
      s3-auth Hook checking passwords and generating session_info via the auth4_context
      auth: Move the rest of the source4 gensec_ntlmssp code to the top level
      auth: Cope with NO_USER_SESSION_KEY from security=server
      s3-auth: Add extra error messages on authentication or authorization failure
      s3-auth: Use common gensec_ntlmssp server functions for more of gensec_ntlmssp3_server
      s3-auth Use the common gensec_ntlmssp_update in gensec_ntlmssp3_server
      s3-auth: Inline ntlmssp_server_start() into gensec_ntlmssp3_server_start()
      s3-auth: Only allow LM_KEY cryptography when extra options are set
      auth: Set NTLMSSP_NEGOTIATE_SIGN when session key support is required
      s3-auth: Remove a layer of indirection and reorder to match gensec_ntlmssp_server_start()
      s3-auth: Use the lpcfg_ wrapper calls to set some variables
      auth: Rearrange ntlmssp code for clarity
      s3-auth: Allow NTLMSSP features to be disabled with smb.conf options for testing
      auth: Provide a way to specify the NTLMSSP server name to GENSEC
      s3-auth: Use the gensec-supplied DNS domain name and hostname.
      s3-auth: Use common gensec_ntlmssp_server_start
      s3-auth: Use common gensec_ntlmssp
      auth: Make more of the ntlmssp code private or static
      auth: Allow the netbios name and domain to be set from winbindd in ntlm_auth3
      s3-registry Remove unused dup_registry_value() and free_registry_value()
      s3-lib Remove unused sys_fseek()
      s3-lib Remove unused sys_fcntl_long()
      s3-lib: Remove unused standard_sub_conn()
      lib/util: Remove unused sys_gethostbyname()
      lib/util: Remove unused sys_inet_makeaddr()
      lib/util: Remove unused sys_recv()
      lib/util: Remove unused sys_sendto()
      selftest: Fix selftest to check ADS functionalty again
      auth: Reorder arguments to generate_session_info
      s3-build: allow gcov testing by linking timelimit with --coverage
      s3-secrets: Remove unused secrets_delete_machine_password()
      s3-secrets: Remove unused secrets_delete_generic()
      s4-selftest: Avoid running kinit for each new connection
      s3-winbindd: pass logon parmeters down to check_sam_security()
      s3-ntlm_auth: allow ntlm_auth --diagnostics to pass again
      s3-selftest: Add test for ntlm_auth --diagnostics
      s4-smbd: Show time event was expected to run, as well as the current wall clock time
      build: Add libbsd as a dep for LIBREPLACE_HOSTCC
      selftest: test member server tests in security=ads
      nsstest: Allocate the correct sized buffer for initgroups
      s3-rpc_server Remove unused function auth_generic_server_start()
      s3-libsmb: Remove unused spnego functions
      wintest: Change to a new Win2008R2 VM
      s3-utils: Remove unused connect_to_ipc_krb5()
      s3-libads: Remove unused ads_pull_sids_from_extendeddn()
      s3-libads: Remove unused ads_set_machine_password()
      s4-provision: Fix typo in 9b9fdeefb47f2657c9bb4c2f48318550da510209
      selftest: Do not skip environments that fail to start up
      s3-auth: Add a way to get an auth4_context from the auth stack
      auth: Rename some elements of auth4_context
      s3-auth: Provide helper routine to check password and return session_info
      s3-ntlm_auth: Convert ntlm_auth to use gensec_ntlmssp server-side
      s3-libsmb: Remove unused ntlmssp_server_start()
      auth: consolidate gensec_ntlmssp_server wrapper functions
      auth: Remove plugable password-check functions from gensec_ntlmssp
      s3-selftest: run ntlm_auth against winbindd in make test
      s3-selftest: Verify GK and GF flag behaviour
      s3-libsmb: Remove unused spnego_parse_auth_and_mic
      prepare WHATSNEW for Samba 4.0alpha18 release and mark as release.
      on our way with Samba 4.0alpha19
      s3-auth rename vuid_serverinfo to session_info
      s4-netlogond: Fix use of uninitialised value dns_name
      selftest: plugin_s4_dc can now handle kerberos properly
      s3-param: Align lp_{max,min}protocol with lib/param names
      s3-selftest: avoid running LOCAL- tests twice
      selftest: up the default log level in s3
      s4-smb_server Remove inetd-mode samba3 hook
      s4-winbindd: Do not ask for a tree that we will not use
      selftest: Do not run chgdcpass test on the main DC
      selftest: skip the troublesome samba4.rpc.unixinfo test
      selftest: change plugin_dc to test using s3fs
      selftest: add more tests for plugin_s4_dc
      build: link heimdal krb5 against execinfo if found
      build: look for backtrace_symbols in libexec
      s3-ntlm_auth: Add --target-service and --target-hostname options
      s3-ntlm_auth: Wrap kerberos token in GSSAPI
      s3-ntlm_auth fix up gss-spnego-client so as to work with gss-spnego
      s3-selftest: Add more tests for ntlm_auth
      s3-selftest: make ntlm_auth test more robust to bad input
      s4-libnet: Move to talloc_get_type_abort()
      s4-libnet: Remove set but unused variables
      s3-libsmb: Initialise ticket to ensure we do not invalid memory
      selftest: Establish a registry of socket wrapper IPs
      s3-rpcclient: Ensure interfaces are loaded after smb.conf
      s3-selftest: Add tests for ntlm_auth gss-spnego client and server
      selftest: Put stdin pipe on the environment
      selftest: close stdin and wait with waitpid() for a safer exit
      selftest: Rework samba4.blackbox.bogusdomain to use a temporary user
      change low FDs are handled in Samba
      s3-nmbd: Add stdin handler for nmbd
      s3-winbindd: Add stdin handler for winbind
      selftest: Use fork()/exec() rather than system()
      selftest: Fix waitpid termination test
      selftest: Rework Samba4.pm process termination.
      selftest: Rework Samba3.pm process termination
      s3-auth: Remove security=share (depricated since 3.6).
      s3-auth Add make_session_info_from_pw to avoid multiple getpwnam() calls
      s3-rpc_server: consolidate rpc server init routines
      s3-smbd: vuser and session_info cannot be NULL here
      selftest: remove unused config.h check
      selftest: forward rpcecho to Samba4 in plugin_s4_dc
      selftest: start to run more dcerpc tests against plugin_s4_dc
      selftest: Reduce time in cleanup loop, try waitpid on all 3 children
      selftest: run smbtorture_s3 tests against the ntvfs file server
      selftest: Reduce declarations of smbclient_auth tests by moving into a loop
      s3-lsasd: Fix debug messages on registration failure
      s3-rpc_server: Only init and register embedded RPC services in dcesrv_ep_setup()
      s3-rpc_server: Remove remaining code for embedded endpoint mapper
      s3-smbd make change_to_user_by_session static
      selftest: Only run s3dc with a forked lsasd
      s3-rpc_server: Do not setup ncalrpc pipes and TCP for embedded rpc servers
      s4-smb_server: Put error from share_get_config() into the logs
      s3-rpc_server: Register embedded RPC services after starting lsasd and spoolssd
      s3-rpc_server: Do not register embedded ncacn_np endpoints by default
      selftest: add more tests for different authentication codepaths
      s3-auth: Follow auth_ntlmssp and use auth4_context for Session Setup
      s3-auth: Remove single-implementation plugin layer
      lib/util: Add a callback facility for debug messages
      dlz_bind9: Log Samba DEBUG() messages to the bind9 logs
      wintest: continue turning over VMs...
      auth/kerberos: Ensure we do not print invalid memory in failure case
      auth/kerberos: Fall back to gsskrb5_get_subkey if we did not get the key type
      auth/ntlmssp: Remove gensec_security element from gensec_ntlmssp_state
      auth/ntlmssp: Remove reference to struct ntlmssp_state
      s4-librpc: Remove unused new_ev
      selftest: fix running additional smbclient test for non-spnego session setup
      s3-spoolss: Consistently fail OpenPrinterEx with "" printername
      build: Ensure that we clean build objects from auth/ as well
      selftest: test wbinfo --authenticate and --krb5auth
      wintest: test wbinfo --krb5auth
      s3-krb5: Remove GSS_WRAP_IOV conditional
      build: param must require cups to get the cups headers path in -I
      build: Do not build with utmp when we do not have utmp.h
      s3-winbindd Only use SamLogonEx when we can get unencrypted session keys
      wintest: test demote of DC
      s3-build: gss_krb5_export_lucid_sec_context is no longer used in the s3 build
      s4-dsdb: use constant-time search for descriptor -> get_last_structural_class()
      lib/util: Add smb_load_module that returns DEBUG(0) errors on failure
      s3-smbd: Inline init_modules() into only caller
      s3-vfs: Use new smb_load_module for better diagnostics
      s4-ntvfs: Rename xattr_tdb.c to posix_eadb.c and make more generally useful
      s3-vfs: initial work on posix:eadb module
      file_server: Move vfs objects initialisation into file_server.c smb.conf wrapper
      lib/util: charset modules do not exist any more
      s3-ntlm_auth Use GENSEC for gss-spnego server
      s3-ntlm_auth: add ntlm_auth_generate_session_info_pac()
      s3-auth: Order GENSEC mechs by priority, krb5 before NTLMSSP
      s3-ntlm_auth: use manage_gensec_request for squid-2.5-ntlmssp
      build: Reduce deps of ntlm_auth
      s3-libsmb: Remove unused spnego_parse_krb5_wrap()
      s3-libads: Rework kerberos_return_pac() to use GENSEC for the server-side
      s3-libads: Remove ads_verify_ticket() as it is now unused
      s3-krb5: Remove unused get_principal_from_tkt
      s3-krb5: Remove unused krb5_rd_req_return_keyblock_from_keytab
      s3-krb5: Remove unused get_authtime_from_tkt
      s3-krb5: remove unused get_auth_data_from_tkt
      s3-krb5: remove unused unwrap_pac()
      s3-krb5: Remove unused get_key_from_keytab
      s3-krb5: Remove unused smb_krb5_get_keyinfo_from_ap_req()
      s3-krb5 Remove unused get_enctype_from_ap_req
      s3-krb5 Remove unused get_kvno_from_ap_req()
      build: Remove unused check for HAVE_KRB5_TKT_ENC_PART2
      build: Remove checks for krb5_decode_ap_req, free_AP_REQ and KRB5_TICKET_HAS_KEYINFO
      lib/replace: Add getconf LFS_CFLAGS support to autoconf build
      build: use only standard _FILE_OFFSET_BITS=64 macro for large files
      build: Add getconf LFS_CFLAGS support to waf build
      build: Require 64-bit files support and do not define HAVE_EXPLICIT_LARGEFILE_SUPPORT
      build: Remove configure tests for *64 functions and types
      build: do not use HAVE_EXPLICIT_LARGEFILE_SUPPORT and *64() fucntions any more
      build: Fix configure test that was declaring an off64_t
      Remove off64_t declarations
      build: #ifdef LARGE_SMB_OFF_T as off_t is now always 64 bits
      vfs: Remove -D_LARGEFILE64_SOURCE from vfs examples Makefile
      build: combine off_t 64 bit and largefile test
      build: Remove sys_ftruncate wrapper
      build: Remove sys_lseek wrapper
      build: Remove sys_ftell wrapper
      build: Remove fallback call to sys_open as HAVE_CREAT is not actually checked for
      build: Remove sys_creat wrapper
      build: Remove sys_open wrapper
      build: Remove sys_fopen wrapper
      build: Remove sys_opendir wrapper
      build: Remove sys_readdir wrapper
      build: Remove sys_seekdir wrapper
      build: Remove sys_telldir wrapper
      build: Remove sys_closedir wrapper
      build: Remove sys_rewinddir wrapper
      build: Remove SMB_STRUCT_DIRENT define
      build: Remove SMB_STRUCT_DIR define
      build: Remove SMB_STRUCT_FLOCK define
      build: Remove SMB_F* locking defines
      build: Fix sys_open() removal by including system/filesys.h
      build: Remove unused GLIBC_HACK_FCNTL64
      build: Add more assertions that fcntl locking works 64-bit
      build: Restore configure summary checking
      build: Fix bitrotted configure summary, we now also test HAVE_IFACE_GETIFADDRS
      build: Add configure summary checking to waf build
      s3-vfs: Remove unused lgetxattr call from VFS modules, system.c and configure
      s3-vfs: Remove unused llistxattr call from VFS modules, system.c and configure
      s3-vfs: Remove unused lsetxattr call from VFS modules, system.c and configure
      s3-build: Remove unused configure checks for xattr functions
      s3-vfs: Remove unused lremovexattr call from VFS modules, system.c and configure
      s3-build: Remove unused configure checks for xattr functions
      build: Remove SMB_OFF_T, replace with off_t
      autobuild: Also test a distribution-style build with external libs
      Revert "ldb: Permit desactivation of autocomit for every ldb_xxx_ctrl function"
      ldb: Detect failures in ldb.base again
      ldb: Allow access to the line number while reading ldif from a file
      ldb-tools: Place the whole of an ldif file in a transaction
      build: Add tevent deps for users of tevent calls
      build: search for talloc, tdb, tevent in non-standard system locations
      .gitignore: ignore MYMETA.yml
      buildtools: Add --enable-debug option
      remove --enable-developer from recursive waf build in autoconf build
      remove --enable-developer from samba4-libs autobuild
      ccan: Fix failtest on Fedora 16 as stdlib.h does not imply malloc.h
      prepare WHATSNEW for Samba 4.0alpha19 release and mark as release.
      on our way with Samba 4.0alpha20
      lib/tdb_compat: Do not define BUILD_TDB2 if we are not building tdb2
      build: use include paths for pkg-config found libraries
      build: Fix spelling of tevent
      param: Merge common param elements by adding .flags
      param: harmonsise logfile parameter
      make _lp_readraw() and _lp_writeraw() static
      param: Change from _lp to lp__ as the prefix for internal parameter wrappers
      s3-param: make FN_GLOBAL macros consistent, add lp_ using the macro
      param: Merge common param elements by adding .flags
      lib/param: swap preferred name for 'lock dir' to match s3
      param: harmonise wins parameters
      param: leave realm as a normal string, handle upper/lower case in handle_realm
      build: Remove more of the s3 special cases in waf: only pidfile.c needs -DCONFIGFILE
      s3-dbwrap: Add talloc_stackframe() calls
      s3-dbwrap: push lp_ctx up another layer in the stack
      lib/util: Move map_nt_error_from_tdb to the top level
      s3-build: Add missing samba3-util dep to tdb-wrap3
      dbwrap: Add dbwrap_tdb to private dbwrap library
      s3-build: move file_id.c into samba3-util and create a private header
      s3-lib: Add file_id_string()
      s3-xattr_tdb: make xattr_tdb a private library, for use outside vfs_xattr_tdb
      s3-xattr_tdb: Be nice to xattr_tdb_getxattr callers, return the full blob
      s3-xattr_tdb: Use talloc_stackframe() more to allow calling from common code
      s4-python: Add python wrapper for xattr_tdb format xattr storage
      s3fs: Use xattr_tdb format for xattr storage
      s4-s3upgrade: Ignore (with warning) groups that are listed but we cannot list members for
      s4-s3upgrade: Do not ever set a domain-wide maxPwdAge of 0
      s4-samba-tool: Fix samba-tool fsmo seize
      dbcheck: Add a check that every FSMO role has a valid owner
      s3-passdb: Remove unused sampass->pass_must_change_time
      s3-dbwrap: Remove dead code: talloc_stackframe() cannot fail
      s3-xattr_tdb: Remove dead code: talloc_stackframe() cannot fail
      s4-provision: Always give the warning if we are using eadb.  It really should be for testing only
      s4-python: Ensure we handle the no-eadb case for system xattrs in get/setntacl
      libwbclient: bump version to 0.9, and add this version to .pc file
      wafsamba: allow certain public libraries to be forced to be private
      selftest: Add extra info on what is failing in wbclient tests
      dlz_bind9: Also produce and install binary plugin for bind 9.9
      s3-dbwrap: A void function can not return a value
      s4-libnet: Fix segfault shown by wbinfo --group-info=administrator
      s4-libnet: Fix continue_groupinfo_opengroup to check correct state info
      selftest: Add test for bug #8884: wbinfo --group-info=administrator segfaults s4-winbindd
      build: Remove support for system libwbclient
      build: Remove support for a system libsmbclient
      s4-libnet: Fix continue_groupinfo_openuser to check correct state info
      s4-libnet Always return after composite_error()
      s4-libnet Always return after composite_error()
      s4-s3upgrade: print the error message from passdb.error exceptions
      s4-torture: enable raw.composite test again, and convert to new style test
      s4-messaging: Use generate_random() to get a unique ID for messaging clients
      selftest: push --target selection into plansmbtorturetestsuite
      s4-torture: never return false in the raw.composite torture test
      selftest: Remove silly space before unit test name
      selftest: Place the test environment at the end of the failure lines
      selftest: Add test to ensure that bug #8872 does not come back
      s4-torture: Move various samba3 tests to the torture_suite_add_1smb_test wrapper
      s4-torture: move samba3 tests to use torture helper functions
      s4-torture: convert samba3misc tests to use torture_failure and torture_assert
      s4-messaging: Fill in the whole server_id in all use cases
      s3-lib Add a way to allocate the task_id value in server_id
      s3-auth_samba4: use new_server_id_task() to allocate server id values
      s4-libnet: Add mem_ctx to libnet_Lookup calls (bug #8889)
      s4-libnet: Add mem_ctx to libnet_DomainOpen calls (bug #8889)
      s4-libnet: Add mem_ctx to libnet_DomainClose calls (bug #8889)
      s4-libnet: Add mem_ctx to libnet_rpc_groupinfo calls (bug #8889)
      s4-libnet: Add mem_ctx to libnet_rpc_useradd calls (bug #8889)
      s4-libnet: Add mem_ctx to libnet_rpc_userdel calls (bug #8889)
      s4-libnet: Add mem_ctx to libnet_rpc_usermod calls (bug #8889)
      s4-libnet: Add mem_ctx to libnet_rpc_groupadd calls (bug #8889)
      s4-libnet: Add mem_ctx to libnet_rpc_groupdel calls (bug #8889)
      prepare WHATSNEW for alpha20 and mark as release
      move VERSION to alpha21
      s3-smbd: Use security_session_user_level() rather than nt_token_check_sid()
      selftest: Enable ACL testing against the s3dc environment
      selftest: attempt to test samba3hide in a different environment
      selftest: prepare to run smbtorture tests against plugin_s4_dc
      selftest: run plugin_s4_dc with 'acl_xattr xattr_tdb streams_depot' VFS modules
      selftest: Add hideunread share to plugin_s4_dc
      selftest: Use same pattern for path to share as Samba3.pm
      file_server: forward dssetup, but use embedded svcctl for s3fs
      file_server: use embedded eventlog server
      file_server: use embedded ntsvcs server
      file_server: Use the embedded winreg server
      file_server: use embedded srvsvc
      selftest: change knownfail to cope with running plugin_s4_dc as well
      selftest: add knownfail entries for plugin_s4_dc tests
      selftest: mark samba3.raw.acls.inheritance(plugin_s4_dc) as flapping
      selftest: mark samba3.raw.samba3checkfsp as flapping on plugin_s4_dc
      selftest: add hooks required for printing to Samba4.pm
      selftest: Do not start samba4 srvsvc in plugin_s4_dc mode
      selftest: Run smbtorture tests being run against s3dc against plugin_s4_dc as well
      selftest: run more raw.samba3 against secshare simple file server
      file_server: set 'store dos attributes = yes'
      s4-provision: set 'dcerpc endpoint servers' but not 'vfs objects'
      selftest: 'store dos attributes = yes' is now set in fileserver.conf
      testsuite/libsmbclient: Remove unused and expensive-to-link testsuite
      s4-provision: Fix --use-s3fs to parse correctly
      s4-wintest: --use-s3fs in wintest
      s4-provision: Fix up --use-s3fs to create the directory for xattr.tdb
      s3-passdb: Change pdb_sid_to_id() to return struct unixid
      s3-passdb: Rename legacy_sid_to_id -> legacy_sid_to_unixid for clarity
      s3-passdb: Use struct unixid in sids_to_unix_ids
      s3-winbindd: Do not use WBC_ types internally in winbindd
      s3-idmap: Rework idmap_cache to store ID_TYPE_BOTH values
      s3-idmap: convert most idmap_cache callers to unixid API
      s3-idmap: remove (now) unused function idmap_cache_set_sid2both()
      s3-passdb: Add extra debug on ID mapping failures
      s3-pypassdb: remove unused variable
      s3-pypassdb: add wrapper for enum_group_memberships
      s4-s3upgrade: Try harder to get group memberships on upgrade
      s4-s3upgrade: Force ldapsam:trusted = yes
      s4-samba-tool: make new samba-tool group listmembers use samAccountName
      s4-dsdb: Use strcasecmp_m() to compare possibly multibyte strings in samldb
      s4-dsdb: Use data_blob_string_const and add explaination for open-coded function in samldb
      s4-s3-upgrade: Max/min password age policy is in seconds, not days
      s3-python: Add python bindings for posix ACL layer
      s4-provision Ensure we have posix ACLs before we permit a s3fs-based Samba4 to be configured
      lib/util: Map 0x7fffffffffffffffLL as 0x7fffffffffffffffLL in time conversion
      s3-lib: Fix indentation in sys_acl_to_text()
      s3-vfs: Show the invalid ACL when we say it is invalid for set
      s3-lib: Add const to sys_acl_to_text
      s3-lib/sysacls: Do not include an embedded \0 between ACL entries in sys_acl_to_text()
      s3-smbd: Fix the creation of duplicate SMB_ACL_GROUP entries
      build:ignore solaris _GLOBAL_OFFSET_TABLE_ in duplicate symbol checker
      build: Avoid printing the ABI signature normalisation during the default build
      lib/socket_wrapper only enable python_socket and socket.py with socket_wrapper
      selftest: Remove tests for security=server
      build: Add explicit mention of --abi-check-disable to ABI checker
      s3-smbd: Do not merge UID ACE values with GID ACE values for posix ACL
      We need to split things up into a new helper function add_current_ace_to_acl() in order for there to be more posix ACL elements than NT ACL elements (so a group SID can own a file, but also get the group permissions that will be honoured)
      s3-smbd: Handle ID_TYPE_BOTH by mapping to both a group ACL entry and file ownership This will allow groups, such as domain administrators, to own files while correctly handling the rest of the ACL permissions.
      s3-smbd: Consider a group with the same SID as sufficient duplication
      s3-smbd: Avoid creating a UID ACL entry for SIDs that are mapped as ID_TYPE_BOTH The GID ACL entry is what will be mapped in most cases, and so is sufficient.
      build: Move generated version.h to a waf-invisible location
      build: Move generated files out of the normal build tree
      autobuild: Run ABI check on samba4-libs as well.
      s4-torture: Fix rpc.samr.priv test to use torture_assert() macros
      build: Also look for iconv in /usr/local by default
      s4-torture: provide correct torture failures for failure to connect
      s4-torture: Always use torture_assert() to handle failures
      s4-torture: Improve torture test boilerplate, use torture_assert()
      s4-selftest: Always delete the user at the end of test_passwords.sh
      s4-provision: Make s3fs the default way to install a new Samba4 DC
      WHATSNEW: Move to document changes for beta1
      selftest: Run only the samba3 tests on builds without the AD DC
      s4-selftest: Demonstrate the correct behaviour between specified usernames and kerberos ccache
      doc: Explain our build systems for Samba 4.0
      wintest: s3fs is now the default in provision
      WHATSNEW: update for alpha21, and mark as release
      move VERSION to alpha22
      s3-libads: Map LDAP_TIMELIMIT_EXCEEDED as NT_STATUS_IO_TIMEOUT
      s3-winbindd: Always map the LDAP error code to an NTSTATUS
      s3-libads: Use a reducing page size to try and cope with a slow LDAP server
      s3-utils: Use ads_do_search_retry in net ads search
      s3-build: Remove build of libaddns.a from the autoconf build
      build: Remove all references to libuuid
      build: Remove unused release scripts for talloc
      build: Remove unused release scripts for tdb
      build: Remove unused release scripts for tevent
      build: Provide .pc file for libnetapi
      build: Provide .pc file for libsmbsharemodes
      s3-iconv: Remove unused script/gen-8bit-gap.sh
      s3-build: Remove build of libtalloc.so from the autoconf build
      s3-build: Remove build of libtdb.so from the autoconf build
      lib/param: Harmonise 'password server' parameter between s3 and s4
      lib/param: Add .flags to wins parameters to match s3
      lib/param: Add .flags to max/min protocol to match s3
      param: Sort global param functions macros to ease the s3/s4 merge
      param: mark realm parameter as const
      lib/param: Mark a few more parameters const (matching s3)
      lib/param: Import s3 parameters into lib/param to allow the parameter lists merge
      s3-param: Rename lp_dns_proxy() -> lp_wins_dns_proxy() for clarity
      s3-param: Import parameters from lib/param to make this list common
      s3-param: Use same variable names as lib/param
      s3-param: Use same function name for "max xmit" as lib/param
      lib/param: Add a few more s3 parameters
      lib/param: Put common FN_ macros into param_functions.c
      s3-build: We do not have CHARSET modules any more
      s3-loadparm: Swap synonyms of max/min protocol to server max/min protocol
      lib/krb5_wrap: Move krb5_princ_size helper to source4 as it is only used there
      build: Make gss_wrap_iov mandatory for krb5 build
      s3-build: Fix configure checks for Heimdal
      s4-provision: Use the s3fs file server by default in migrations
      build: Add automatic compare of config.h files to recursive waf build
      .gitignore: remove already-gone gen-8bit-gap.sh
      lib/replace: Copy lib/system.c xattr wrappers to lib/replace
      lib/replace: DEBUG is not acceptable here, as this may not be linked into Samba
      lib/replace: We cannot use strchr_m in lib/replace
      lib/replace: xattr wrappers in lib/replace rather than source3/lib/system.c
      s4-xattr: Use libreplace xattr functions directly
      lib/replace: Merge remaining xattr test details from lib/util
      build: Always attempt to build posix ACLs
      lib/replace: Relicence xattr.c to LGPLv3
      build: Check correctly for sendfile (missing .h in header)
      libreplace: Fix autoconf build on platforms needing xattrs
      libreplace: Add missing tests for HAVE_MREMAP and HAVE_SHARED_MMAP
      ccan: fix autoconf test for isblank()
      build: Show extra configure results found by WAF as well
      build: Remove check for res_ninit (Revert "s3: Check for res_ninit")
      libreplace: Solaris needs system/dir.h for that xattr wrapper implementation
      libreplace: Fix build on MacOS where we have the same fn name but more arguments
      libreplace: Use true rather than True in xattr.c
      libreplace: Link libreplace against attr when required
      s3-build: Remove finddead
      libreplace: Fix up MacOS xattr functions
      s3-libnetapi: Cope with popt versions without POPT_TABLEEND
      lib/replace: Undo change of 0 -> NULL
      librepace: put #defines after #include "sys/xattr.h"
      lib/krb5_wrap: Remove unused smb_krb5_get_creds
      build: Match autoconf build and disable ACLs on MacOS (darwin)
      libreplace: Ensure we link xattr.c on MacOS
      libreplace: Remove autoconf build system
      libreplace: Add copyrights to ease tracking of this file in future
      Remove Manifest.  The information here was outdated
      s3-smbd: Remove support for protocols before LANMAN1
      VERSION: prepare for beta1 by setting and parsing the beta version
      WHATSNEW: Update for beta1
      s4-provision: Place xattr.tdb in the actual state directory
      s4-provision: Test for posix ACLs in the actual sysvol path
      WHATSNEW: Note FreeBSD improvements
      WHATSNEW: Mention trouble with DNS replication
      WHATSNEW: mention FreeBSD getaddrinfo() issue
      wintest: Fix test-s3.py to use smbclient3 under the name smbclient
      WHATSNEW: Add details on NTP and DNS as new protocols we cover
      Roadmap: Clarify that 4.0 is our next release
      build: Remove unused check for HAVE_UNSIGNED_CHAR
      build: Add test for HAVE_BROKEN_POSIX_FALLOCATE to waf build
      build: Add newlines for clarity
      VERSION: Mark release as beta1
      VERSION: mark as beta2 as we move on to the next release
      lib/replace: Fix snprintf() override for systems with a broken snprintf()
      build: Rationalise AIO support in configure, ensure on by default
      s3-libsmb: Fix error messages to correctly mention PLAINTEXT not LM
      build: Add missing deps and make MESSAGING a private library
      s4-libcli: Remove unused finddcs_nbt
      build: Tidy up broken posix_fallocate tests
      ccan: Only build ccan-failtest when we are in developer mode
      s4-selftest: Test samba-tool drs replicate --local --full-sync
      s3-smbd: Remove unused branches in negprot since security=share was removed
      pyldb: Ensure that the ldb argument is really an ldb before we dereference
      lib/param: simplfy lp_find_security()
      file_server: Use samba4 auth module for guest logins as well
      debug: Do not constantly rename logs when max log size = 0
      s3-auth: Give the SYSTEM token all privileges
      s3-auth: Fix system token generation not to dereference pointer as an integer
      s3-auth: Fix system info3 return to be just SID_NT_SYSTEM
      s3-auth: Merge SEC_DOMAIN and SEC_ADS cases in creating the default auth module list
      lib/param: Create a seperate server role for "active directory domain controller"
      lib/param: make security=domain and security=ads conflict with being a DC
      lib/param: Use server role = 'standalone server' to be consistant with member server
      s3-auth: rework default auth methods around the lp_server_role() parameter
      docs: document new server role values
      s3-lib: Convert lib/events.c to modern tevent names
      s3-build: Do not write loadparm generated files into the build tree
      s3-lib: Fix conversion of lib/events.c to modern tevent names
      build: Remove support for non-64bit sendfile()
      selftest: Add targetdir and tdbrestore parameters to undump.sh
      s4-dbcheck: Always specify the dhcheck control
      s4-selftest: Add tests for dbcheck on an old database that needs repair
      s4-idmap: Add mapping using uidNumber and gidNumber like idmap_ad
      s4-s3upgrade: improve idmap import to use posixAccount and posixGroup entries
      s4-s3upgrade: Add my wins.dat and fix the parsing error
      s4-s3upgrade: Assert that administrator has a SID of -500, and only skip root if it is -500
      s4-lib/param: FLAG DAY for the default FILE SERVER
      s4-classicupgrade: Use "samba classic" description for samba3 NT4-like domains in samba3upgrade
      WHATSNEW: Bump the version and announce the s3fs default
      s4-classicupgrade: Also ask testparm for 'smb passwd file'
      s3-passdb: Remove pdb_ads
      s3-auth: Remove auth_netlogond
      s3-auth: Fix system token as just being SID_NT_SYSTEM
      auth: Use only security_token_is_system to determine that a user is SYSTEM
      s3-auth: inline make_session_info functions into only callers
      s3-auth: make_new_system_info_session() not query passdb
      s3-auth: make_new_system_info_session() now does not query nss
      Revert "s4-libcli: Remove unused finddcs_nbt"
      s4-provision: Remove last unused remenants of the 'sid generator' configuration
      s4-provision: Remove --slapd-path option
      s4-idmap: Add parameter 'idmap_ldb:use rfc2307' and correct implementation errors
      WHATNEW: Update for the beta2 release
      VERSION: Mark as the beta2 release
      VERSION: Move on to beta3!
      s4-torture: Change the unix.whoami test to use torture_assert()
      s4-torture: Expand whoami test to confirm the user token.
      s4-provision: Give better clues on what Samba needs for s3fs ACL support
      s4-drepl: Ensure that the op->source does not get deallocated too early
      s4-classicupgrade: Allow DNS backend to be specified
      selftest: Test unix.whoami with kerberos on plugin_s4_dc
      s4-join: Import DNS zones in AD DC join
      s4-samba_upgradedns: Do not set DNS account for internal server
      s4-join: Setup correct DNS configuration
      s3-pdb_samba4: Allocate and free a talloc_stackframe() in pdb_samba4_replace_by_sam()
      s3-pdbtest: Report and handle errors in pdb->getsampwnam()
      s4-samldb: do not talloc_steal() the elements of the original request
      s3-pdbtest: Fix pdbtest to compare the same fields
      s3-pdbtest: show mis-matching times
      selftest: Add extra users to nss_wrapper
      selftest: allow NSS_WRAPPER_* vars to be exported to the environment
      s4-dsdb: Remove hooks for non-directory password handling
      s4-dsdb when setting DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OID make it non-critical
      s4-selftest: Test login with a password expired user
      lib/ldb: Print trace messages for modify correctly
      s3-pdb_samba4: Fix time handling, use nt_time_to_unix()
      s3-pdb_samba4: Add support for lastLogon and lastLogoff
      s3-pdbtest: Initialise more elements for testing
      s4-selftest: expand passdb testing
      s3-pdb_samba4: Remove dupliate profilePath handling
      s3-param: Rename loadparm_s3_context -> loadparm_s3_helpers
      librpc/ndr: Initilaise the remainder of struct dom_sid after a pull
      selftest: use a loop rather than declare tests for both dc and s3dc
      selftest: run pdbtest against s3dc as well
      file_server: add [globals] to generated smb.conf
      selftest: Give Samba4 processes a little longer to clean up
      auth/gensec: Remove unused gensec_security parameter
      auth: Remove .get_challenge (only used for security=server)
      s4-dns: Remove dynamic DNS instructions for bind 9.7
      s4-bind: Remove patches now incorporated into bind9
      s4-dns: Remove refernece to BIND 9.7 supporting GSS-TSIG
      WHATSNEW: Update with fix for smbd-fileserver.conf.pid startup failures
      WHATSNEW: Mention Exchange 2010 support
      VERSION: Mark as the beta3 release
      VERSION: Move on to beta4!
      build: Run distcheck in the correct directory
      WHATSNEW: Spell out version, avoid samba4 except to refer to the past
      ldb: bump version due to header and internal implementation changes
      s4-dsdb: Use parent_object_guid to find the correct parent for new objects
      s4-dsdb: Give a much better error message when parentGUID generation fails
      s4-samba-tool: Provide a samba-tool domain dcpromo that upgrades a member to a DC
      s4-selftest: Test samba-tool domain dcpromo
      s4-classicupgrade: Demote any other 'BDC' accounts back to a member server during upgrade
      pyldb: Fix dn concat operation to be the other way around
      s4-pydsdb: Improve PyErr_LDB_{DN,}_OR_RAISE to use py_check_dcerpc_type
      s4-pydsdb: Add bindings for dsdb_find_nc_root()
      pyldb: Add bindings for ldb_dn_remove_base_components
      pydsdb: Add bindings for dsdb_wellknown_dn()
      s4-dsdb: Remove unused variables in py_dsdb_get_partitions_dn
      s4-dbcheck: Check for an object without a parent
      s4-selftest: do a dbcheck on our two vampire DCs
      lib/ldb: Bump ldb release due to pyldb changes
      s3-auth Remove confusing reference to global_machine_password_needs_changing
      s3-auth Remove unused global_machine_account_needs_changing
      lib/util: Allocate enough space to reference blob->data[len]
      s3-auth_samba4: Explain that check_samba4_security is actually unused
      s3-secrets: Use C99 types
      s4-param: Use a unique header name
      auth/credentials: Look in the secrets.tdb for the machine account
      pytdb: Check for errors parsing strings into TDB_DATA
      pytdb: Check if the database is closed before we touch it
      WHATSNEW: prepare for 4.0 beta4
      VERSION: Mark as the beta4 release
      VERSION: Move on to beta5!
      s4-dsdb: Ensure we never write read-only objects onto a read-write replica
      s4-dsdb: Allow dbcheck to correct an incorrect instanceType
      dsdb: Allocate new OID to allow updates of a read-only replica
      s4-dbcheck: Check for and correct incorrect instanceType values
      s4-librpc: Ensure we do not call call the decrpc timeout handler during gensec_update()
      s4-lib/tls: Try socket_send() multiple times to send partial packets
      s4-torture: Also print GID values in whoami test
      s4-torture: Allow unix.whoami to test against a member server
      s4-torture: Move check of map-to-guest above SID list check
      Revert "s3:auth make sure the primary group sid is usable"
      selftest: Run unix.whomai against the machine acccount as well
      auth/credentials: Remove extra newline
      s3-rpc_server: Remove make_server_info_info3() call from make_server_pipes_struct()
      s3-auth Use correct RID for domain guests primary group
      lib/param: bring lp_time_server() into common
      lib/param: Add my copyright
      s4-param: Remove unused "idmap trusted only"
      s3-param: Make lp_name_resolve_order() return a list
      lib/param: bring lp_smb_ports() into common by making it a list everywhere
      s3-param: Remove special case for lp_ctdbd_socket(), set CTDB_PATH as default
      build: Add -Werror=address to the developer build
      param: Make the 'unicode' parameter common
      param: Make internal handler for 'server role' common
      s3-param: Merge a number of s4 parameters from lib/param to make this table common
      s3-param: fix indent on cups encrypt
      s3-param: Merge parameter varaibles with lib/param
      lib/param: Remove "ntptr providor" and hard-code in s4 spoolss server
      lib/param: Remove 'case insensitive filesystem'
      lib/param: Rename param_enums.c to param_table.c
      lib/param: Move all enum declarations to lib/param
      lib/param: Make lp_usershare_max_shares() a common parameter
      lib/param: Merge handling of security/domain master/domain logons/server role
      lib/param: Add handler overrides
      lib/param: Re-arrange TLS parameters into their own section
      lib/param: Rearrange AD DC options to make a merge with the source3 table easier
      lib/param: Merge DNS parameters with source3 param
      lib/param: Merge Winbind parameters from source3 into lib/param
      lib/param: Merge VFS and MSDFS parameters from source3 into lib/param
      waf: Update to newer upstream snapshot.
      lib/param: Merge "Miscellaneous Options" section from source3/param
      lib/param: Merge "EventLog Options" section from source3/param
      lib/param: Merge "Ldap Options" section from source3/param
      lib/param: Merge "Locking Options" section from source3/param
      lib/param: Merge "WINS Options" section from source3/param
      lib/param: Merge "Browse Options" section from source3/param
      lib/param: Merge "Logon Options" section from source3/param
      lib/param: Merge "Domain Options" section from source3/param
      lib/param: Merge "Filename Handling" section from source3/param
      s3-build: Make recursive waf build a developer build again (to build developer test facilities)
      lib/param: Merge "Printing Options" section from source3/param
      lib/param: Merge "Tuning Options" section from source3/param
      lib/param: Merge "Protocol Options" section from source3/param
      s3-param: Merge "log file" parameter with lib/param
      lib/param: Merge "Logging Options" section from source3/param
      lib/param: Merge "Security Options" section from source3/param
      lib/param: Merge in source3 parameters into parmeter table
      lib/param: Merge parameter tables into a common file
      param: Make socket_address common, Revert 611ef42053eb99f4c29d4efa86eaea9f1ca06286
      docs: Mark "socket address" as deprecated
      lib/param: Remove unused "paranoid server security"
      lib/param: Mark lpcfg_cachedir and lpcfg_statedir as const char *
      lib/param: Remove use of lp{cfg,}_socket_address outside the NBT client and server
      lib/param: Rename "socket address" to "nbt client socket address" to clarify role
      s4-dbcheck: Add lastKnownParent when moving an object to lostAndFound
      s3-libsmbclient: Add missing talloc_stackframe() calls
      s4-repl: Use NULL for pointer test when checking for ldb_msg_new() failure
      s4-repl: Use ldb_dn_new() to create the rootDSE DN
      s4-librpc: Fix private context for dcerpc_connect_timeout_handler
      s4-dsdb: Provide a way to handle conflicts due to rename
      s4-dsdb: Provide a way to force incoming renames to take priority
      s4-dsdb: Change move to lostAndFound to use container in this partiion and add debugging
      s4-dsdb: Do not strip base components off DN before searching for NC root
      s4-dsdb: Fill in lastKnownParent when moving to lostAndFound
      s4-samba-tool ldapcmp: Add ridNextRID and rIDPreviousAllocationPool as per-DC attributes
      s4-samba-tool ldapcmp: Fix synopsis
      auth/kerberos: Do not do pointer arithmatic on a void *
      lib/ccan: Fix format string errors found by -Werror=format in ccan failtest
      lib/ntdb: Fix format string errors found by -Werror=format in ntdb tests
      lib/tdb: Fix format string errors found by -Werror=format in tdb tests
      s4-torture: Fix format string errors found by -Werror=format
      build: Add more -Werror flags now the tree is clean of these errors
      s3-utils: Add cast to fix error found by -Werror=format
      ldb: Add parameter to avoid NULL format string flagged by -Werror=format
      s4-dsdb: Request extended DN and show deleted when searching for a possible parent
      lib/ldb: Ensure rename target does not exist before deleting old record
      s4-dsdb: Handle rename conflicts in both directions
      s4-dsdb: Improve tracing in repl_meta_data
      s4-dsdb: Replace any existing lastKnownParent attribute during delete
      s4-repl: Add tests for add replication conflicts and use of LostAndFound
      WHATSNEW: prepare for 4.0 beta5
      VERSION: Mark as the beta5 release
      VERSION: Move on to beta6!
      s3-pypassdb: Fix wrapper for pdb_domain_info to return correct dns_{domain,forest}
      s3-pysmbd: Add set_nt_acl() function based on parts of vfstest
      s3-pysmbd: Add my copyright
      s3-pysmbd: fix DEBUG
      s3-pysmbd: Add hook for get_nt_acl()
      build: fix typo
      lib/param: Also enable vlp when --enable-selftest is specified
      build: Remove duplicate declaration of --enable-selftest
      Rework recursive waf build to be a selftest-enabled not a developer build
      build: Make -Werror=format check only run where NULL is still accepted
      Revert "ldb: Add parameter to avoid NULL format string flagged by -Werror=format"
      s3-pysmbd: Add talloc_stackframe() to smbd_set_simple_acl wrapper
      s3-passdb: Simplify idmap wrapper in pdb_samba4
      s3-pysmbd: Use talloc_zero()
      s3-pysmbd: Try opening as a file, then as a directory
      s4-smbd: Check for failure of irpc_add_name
      s4-scripting: Remove unused variables from ntacl tests
      s3-param: Remove never-reached condition for opt_list == NULL
      s3-param: Remove never-reached condition for popts == NULL
      build: Remove pdbtest from the autoconf build
      s3-torture: Extend pdbtest to also run an authentication unit-test
      selftest: Rename samba4.blackbox.pdbtest to samba.blackbox.pdbtest
      s4-dsdb: Reduce calls to the ldb layer by reloading less often
      s4-dsdb: simplify migration of old-style seqence numbers to metadata.tdb
      s4-dsdb: Remove ldb_sequence_type argument from partition_primary_sequence_number
      s4-dsdb: Change talloc parent
      s4-pydsdb: Provide control of if we should write index attributes when reloading a schema
      s4-dsdb: Ensure we have indexing enabled during the provision
      s4-dsdb: Do not reload partition metadata except on transaction start
      s4-dsdb: Remove strcasecmp() fallback in replmd_ldb_message_element_attid_sort
      lib/ldb: Use tdb_exists() rather than tdb_fetch()/talloc_free()
      s3-events: Do not vasprintf() the tevent debug messages that will not be shown
      s4-events: Do not vasprintf() the tevent debug messages that will not be shown
      lib/ldb: Do not vasprintf() the tevent debug messages that will not be shown
      s4-ldb_wrap: Do not vasprintf() the ldb debug messages that will not be shown
      lib/ldb: Use tdb_parse_record and a callback rather than tdb_fetch()
      s4-dsdb: Explain better what records are written during schema set
      nsswitch: add ABI checking and symbol versions to libwbclient
      s3-smbd: Create a shortcut for building the token of a user by SID for posix_acls
      s3-smbd: Convert posix_acls.c to use struct unixid internally
      s3-smbd: Merge ACE entries based on mapped UID/GID not SID
      s3-nfs4acls: Remove lookup_sid and sidmap from NFSv4 ACL mapping and check gid first
      s4-dsdb: Use only the replication USN for schema reload.
      s4-dsdb: Remove support for per-partition sequence numbers
      s4-dsdb: Take more care in handling of global schema memory
      s3-vfs: Put vfs_aixacl_util.c helper functions into a header file
      WHATSNEW: prepare for 4.0 beta6
      VERSION: Mark as the beta6 release
      VERSION: Move on to beta6!
      s4-dsdb: Add const
      s4-dsdb: Improve memory handling in kccsrv_find_connections() by adding a tmp_ctx
      s4-dsdb: Improve memory handling in kccsrv_add_connection()
      s4-dsdb: Improve memory handling in dsdb_schema_from_ldb_results() by adding a tmp_ctx
      s4-dsdb: Add mem_ctx argument to samdb_ntds_settings_dn
      s4-libnet: Improve debugging of libnet_BecomeDC LDAP errors
      s4-libnet: Prepare libnet_BecomeDC for samdb_reference_dn() returning an extended DN
      s4-dsdb: Use ldb_dn_copy() rather than talloc_reference()
      s4-dsdb: Add helper function samdb_reference_dn_is_our_ntdsa()
      s4-repl: Use samdb_reference_dn_is_our_ntdsa()
      s4-dsdb: Use samdb_reference_dn_is_our_ntdsa()
      s4-dsdb: Add samdb_dn_is_our_ntdsa()
      s4-dsdb: Use samdb_dn_is_our_ntdsa()
      s3-passdb: Silence scary DEBUG(0) message on first use of secrets.tdb databases
      selftest: Add knownfail for samba3.winbind.wbclient.wbcPingDc2
      s3-smbd: Change allocation of smb_acl_t to talloc()
      pidl: Add mode_t as an alias so we can marshall posix ACL structures
      s3-smbd: Move smb_acl_t declaration to smb_acl.idl
      s3-smbd: Call sys_acl_get_perm() directly rather than via the VFS
      s3-smbd: Call sys_acl_get_permset() directly rather than via the VFS
      s3-smbd: Call sys_acl_get_tagtype() directly rather than via the VFS
      s3-smbd: Call sys_acl_get_qualifier() directly rather than via the VFS
      s3-smbd: Call sys_acl_free_qualifier() directly rather than via the VFS
      s3-smbd: Call sys_acl_get_entry() directly rather than via the VFS
      s3-smbd: Call sys_acl_free_qualifier() directly rather than via the VFS
      s3-smbd: Call sys_acl_free_acl() directly rather than via the VFS
      s3-smbd: Call sys_acl_init() directly rather than via the VFS
      s3-smbd: Call sys_acl_clear_perms() directly rather than via the VFS
      s3-smbd: Call sys_acl_add_perm() directly rather than via the VFS
      s3-smbd: Call sys_acl_create_entry() directly rather than via the VFS
      s3-smbd: Call sys_acl_set_tag_type() directly rather than via the VFS
      s3-smbd: Call sys_acl_set_qualifier() directly rather than via the VFS
      s3-smbd: Call sys_acl_set_permset() directly rather than via the VFS
      s3-smbd: Remove unused conn argument from convert_permset_to_mode_t()
      s3-smbd: Remove sys_acl_*() VFS wrapper functions
      s3-sysacls: Remove sys_acl_free_acl() and replace with TALLOC_FREE()
      s3-sysacls: Remove sys_acl_free_qualifier() as it is a no-op
      librpc/idl: Make smb_acl_t public so we can pull/push it as a blob
      s4-selftest: Fix test name for samba.tests.dcerpc.bare
      s3-vfs: ensure we strictly free the talloc_stackframe
      s3-vfs: Avoid loops in VFS modules: call _NEXT functions in xattr emulation
      s3-vfs: Set errno in xattr emulation
      fix printf warning in net connections
      s3-selftest: convert stream_depot vfstest driver into a subunit test
      s3-selftest: convert xattr-tdb-1 vfstest driver into a subunit test
      librpc/idl: Fix acl array definition in smb_acl_t
      s3-vfs: Add new VFS module to fake setting an ACL
      s3-vfs: Continue to make vfs_xattr_tdb non-recursive
      selftest: Extend xattr-tdb-1 vfstest to call stat
      s3-smbd: Do not check no_acl_syscall_error(errno) after sys_acl_init()
      s3-torture: Initialise fsp fully in vfstest open
      s3-torture: Use talloc more in vfstest
      s3-torture: Add ACL commands to vfstest
      s3-selftest: Add a seperate test for ACL tests using vfstest
      s3-torture: Allow vfstest to set ACLs on a directory
      s4-dsdb: Ensure we always free tmp_ctx in schema refresh check
      build: Ensure -Werror=format works with -Wformat=2 on NULL format strings
      s4-kcc: Avoid use-after-free of dn and add tmp_ctx
      s4-dsdb: Use tmp_ctx in kccsrv_check_deleted to avoid leaking memory onto part->dn
      s3-vfs: Allow vfs_xattr_tdb to work without a connected share
      s4-ntvfs: Ensure we do not attempt to write EAs on streams
      s4-ntvfs: Add TODO on ea_size
      s3-smbd: Push smb_fname into estimate_ea_size
      s3-smbd: Do not look for EA information on a stream
      s3-smbd: ensure we give appropriate errors for EA requests on streams
      s3-vfs: Use the system. namespace for fake ACLs
      s3-vfs: Correct the implementation of fake_acls_sys_acl_delete_def_file()
      s3-vfs: Add lstat and lchown hooks to the vfs_fake_acls module
      s3-build: Enable vfs_fake_acls when in developer mode or on the build farm
      build: Do not put a .distversion file into the GIT tree
      WHATSNEW: Remove over-caution on s3fs and explain browsing better
      doc-BUILD_SYSTEMS.txt: The grand rename is complete
      s4-torture: Improve raw.streams test to cover EAs and to use torture_assert()
      s4-torture: Show that we cannot have extended attributes on streams
      s4-torture: Show that we cannot list extended attributes on streams
      selftest: Use new fake_acls module
      s4-torture: Use torture_fail() in the unix.unix_info2 test
      build: Remove accidentily added line in samba_version.py
      build: Remove special case for the build farm
      s3-pysmbd: Add hook for a VFS chown()
      s3-passdb: Allow pdb_sid_to_id to work on any SID
      s3-pysmbd: Correct comments in python VFS bindings
      s3-pysmbd: Add get/set functions for the posix ACL layer
      build: Create bin/ when doing 'waf dist' from a fresh checkout
      s3-vfs: Make vfs_aio_fork erratic timing behaviour a run-time option
      selftest: Add tests for vfs_aio_fork
      s4-provision: pass use_ntvfs from C wrappers and set to true in tests/vampire
      s4-classicupgrade: Add --use-ntvfs option
      selftest: Specify --use-ntvfs to provision in test scripts
      selftest: Pass --use-ntvfs to provison in renamedc test
      s3-vfs: Remove extra calls to SMB_VFS_HANDLE_GET_DATA
      s4-python: complete python bindigns for smb_acls.idl
      s3-pysmbd: Correct the python type for smb_acl_t
      s4-python: Complete python bindings for idmap.idl
      selftest: Specify --use-ntvfs for the chdcpass environment
      selftest: Specify --use-ntvfs when testing the LDAP backend init code
      selftest: Specify --use-ntvfs when testing the newuser code
      selftest: Specify --use-ntvfs when testing the group code
      selftest: Set --use-ntvfs for rodc, vampire_dc, promoted_vampire_dc and subdom_dc
      s4-upgradeprovision: Use ntvfs in reference provision
      s4-dsdb: Do not use a possibly-old loadparm context in schema reload
      s4-dsdb: Remove unused variables
      file_server: Move default VFS module settings to loadparm.c
      s4-provision: set POSIX ACLs to for use with the smbd file server (s3fs)
      s4-scripting: Redefine getntacl() as accessing via the smbd VFS or directly
      selftest: Add a test of the NT ACL -> posix ACL mapping layer
      selftest: Extend posixacl test to check the actual ACL
      selftest: Cope with the multiple possible representations of -1 in posixacl.py
      selftest: Add a test of the NT ACL -> posix ACL mapping layer to selftest
      s4-samba-tool: Add 'samba-tool ntacl sysvolreset' tool
      s3-pysmbd: Allow a mode to be specified for the simple ACL
      s4-provision: Fix internal documentation
      s3-pysmbd: Fix error message
      param: Add startup checks for valid server role/binary combinations
      s4-selftest: Add testing of samba-tool ntacl sysvolreset
      s3-smbd: Add talloc_stackframe() to get_nt_acl_no_snum()
      s3-pysmbd: Fix return type of smbd.get_nt_acl
      s3-smbd: Add security_info_wanted argument to get_nt_acl_no_snum
      s4-samba-tool: Add samba-tool ntacl sysvolcheck command
      s4-selftest: Add test for samba-tool ntacl sysvolcheck
      s4-selftest: Always set vfs objects in selftest smb.conf
      s3-param: Avoid assert on use of talloc_tos() without stackframe
      examples: Remove security=share and security=server from example smb.conf
      s4-libnet: Ensure termination of enctype array in libnet_export_keytab()
      lib/krb5_wrap: Bring list of all enc types into krb5_wrap
      lib/krb5_wrap: Move kerberos_enctype_to_bitmap() into krb5_wrap
      s4-classicupgrade: Use s3param.get_context() instead of result.lp
      s4-classicupgrade: Do all the queries of data before the provision()
      s4-classicupgrade: Read WINS DB before the provision
      lib/krb5_wrap: Move enctype conversion functions into a simple helper file
      s3-secrets: Add helper function to set machine account password from secrets_tdb_sync
      s3-secrets: Handle all valid ROLE_ values in get_default_sec_channel()
      s3-secrets: Use talloc_stackframe() in secrets_init_path()
      s4-dsdb: Add secrets_tdb_sync - an ldb module to keep secrets.tdb in sync
      s4-dsdb: Remove double-free in update_keytab module
      auth/credentials: Expand secrets.tdb fetch of secrets to preserve workstation and realm
      selftest: Add test of smbclient --machine-pass against and using both s3 and s4
      auth/credentials: Rework credentials handling to try and find the most recent machine pw
      s3-passdb: Allow reload of the static passdb from python
      s4-classicupgrade: Do the setting of the sysvol ACLs last, after idmap is configured
      selftest: Fix comment in blackbox_s3upgrade.sh
      WHATSNEW: prepare for 4.0 beta7
      VERSION: Mark as the beta7 release
      VERSION: Move on to beta8
      s3-vfs_shadow_copy2: Also accept a sscanf result
      s3-vfs: Try to be consistent about localtime vs GMT handling in vfs_shadow_copy2
      s3-vfs: Indicate the symlink destination when failing check_reduced_name
      lib/ldb: Bump ldb version to 1.1.11
      s3-classicupgrade: Fix import from ldap
      auth/credentials: Avoid double-free in the failure case
      selftest: Add a test for smbclient --machine-pass without secrets.tdb
      auth/credentials: Improve memory handling in cli_credentials_set_machine_account
      auth/credentials: Better integrate fetch of secrets.tdb and secrets.ldb records
      auth/credentials: Remove unused, and un-declared cli_credentials_set_krbtgt()
      lib/ldb: Avoid printing secret attributes in ldb trace logs
      s4-dsdb: Avoid printing secret attributes in ldb trace logs
      s4-libnet: Fix passing samba_all_enctypes as a fn rather than the encrypt array it returns
      lib/krb4_wrap: Add const to kt_copy_one_principal
      s4-torture: Add start of a test to confirm winbindd PAC parsing
      auth/credentials: Support match-by-key in cli_credentials_get_server_gss_creds()
      WHATSNEW: prepare for 4.0 beta8
      VERSION: Mark as the beta8 release
      VERSION: Move on to beta9
      auth/credentials: Do not print passwords in a talloc memory dump
      s4-libnet: Fix memory leak of lsa_RefDomainList and lsa_String onto libnet_ctx
      s4-kdc: Give information on how long the password history is
      s4-dsdb: Remove unused tmp_ctx leaked onto long-term ldb_context
      s4-kdc: Improve grammer and clarity of password change failure messages.
      s4-dsdb: Remove unused variables
      selftest: skip tests if the tarball did not include the alpha13 provision
      build: Only make bin/ if it does not exist
      s4-classicupgrade: Show more clearly what is wrong with the Adminstrator SID
      build: skip shipping the alpha13 provision in the release tarballs
      docs: Remove docs for removed parameter 'parinoid server security'
      docs: Remove references to security=share and security=server from the smb.conf docs
      docs: Fix undocumented target to find smb.conf directives in the right place
      remove extra tab from Makefile
      docs: Remove docs for removed parameter 'display charset'
      docs: Remove merged-branches.txt
      docs: Update Roadmap
      docs: Move Samba4 HOWTO link into README
      s3-passdb: Rename pdb_samba4 to samba_dsdb and autoconfigure when we are a AD DC
      s4-samba-tool: Ensure we also sync the SACL as well as the DACL during sysvolreset
      file_server: Clarify code by avoiding a goto
      s4-selftest: Try to make ntacl unit tests better match their names
      s4-selftest: Try a more complex ACL - this example from a GPO
      build: remove unused HAVE_NO_ACLS define
      file_server: Run task_server_terminate when smbd exists
      build: vfs_fake_acls does not need the acl lib
      build: Remove references to charset modules - we no longer have these
      build: sync the waf ACL checks with configure.in
      file_server: Remove explicit set of passdb backend in fileserver.conf
      build: Remove unused deps from vfs modules
      s4-provision: Fix error message to contain the string SSDL of the failed-to-match ACL
      samba_tool: Fix ntacl get to correctly output in sddl
      samba_tool: Improve samba-tool ntacl get/set to use the local sam.ldb SID
      selftest: Add python blackbox tests for samba-tool ntacl get/set
      s3-printing: Restrict printing=cups to systems with cups development headers at build time
      join.py: Only replicate DNS zones if the source DC had DNS zones
      selftest: Add tests for the dlz_bind9 module
      selftest: Test configure stage of dlz_bind9
      build: Do not compile lib/sysquotas*.c files as part of configure
      build: Remove Unicos support (quota in particular)
      s3-configure: Only use sysquotas by default
      s3-smbd: Remove Linux support from old (pre-sysquotas) code
      s3-smbd: Remove BSD support from old (pre-sysquotas) code
      s3-smbd: Remove HPUX support from old (pre-sysquotas) code
      s3-smbd: Remove IRIX support from old (pre-sysquotas) code
      s3-smbd: Remove remaining references to removed OS support in old-style quota code
      torture: Add discard_const_p() to work around dlz_create prototype
      provision: Only give the "no posix ACLs" exception if we could not set the SD
      smbd: Print ACL used to create hash in vfs_xattr_common
      smbd-posix_acls: Use a IDL union to store the ACL entry
      smbd: Remove pre-allocation of ACL array in sys_acl_init()
      smbd: Add extra VFS hooks to get the posix ACL as a blob
      dns_server: Attempt to SET and UNSET the sessionInfo to match the incoming user
      dns_server: Remove parameter 'dns recursive queries' and base this on 'dns forwarder'
      wintest: Rework support for the internal DNS server
      wintest: Fix --use-ntvfs handling
      docs: Update docs to the modern age of Samba 4.0
      docs: Remove distinction between server and domain accounts
      docs: remove references to security=server
      docs: update for modern kerberos libs
      build: Fix build on systems without ldap development headers
      docs: Remove confusing reference to smb signing and client use spnego
      docs: Remove references to old kerberos behaviour
      docs: Remove references to Subversion, replace with wiki link
      docs: Remove out of date links to pserver.samba.org and old tarballs
      docs: Remove referenece to autogen.sh and document waf build instead
      docs: Remove referenece to old Red Hat Linux habits on winbindd
      docs: Update BDC docs to recognise the AD DC and to exclusivly recommend LDAP
      docs: Remove reference to inetd startup, it is not recommended
      docs: Clarify TOSHARG-Bugs for 2012
      docs: Update FastStart: remove security=share, avoid disable spoolss
      docs: Remove very outdated TOSHARG-Portability section
      docs: Remove very outdated TOSHARG-Other-Clients section
      docs: Remove references to sysv-style CUPS from TOSHARG-CUPS-printing
      docs: Remove references to mulitple passdb backends
      docs: Remove references to specific windows versions, instead mention Home/Professional/Server
      docs: Remove another reference to security=share
      ldb: bump version to 1.1.13 so the 4.0 release can get the isprint fix
      libwbclient: bump ABI to 0.11 as wbcAuthenticateUserEx now provides PAC parsing
      auth/kerberos: add HAVE_KRB5 guard to fix non-krb5 build after winbindd pac changes
      build: Try not build with LDAP if we do not have ldap.h
      build: Fix enabled handling for HAVE_LDAP, we need to use bld.CONFIG_SET
      ntdb: Try to fix the build on Solaris which does not have err
      lib/replace: Try to fix build on HP-UX for os2_delete test
      build: Remove unused IRIX and IRIX6 defines
      lib/util: Remove unbuilt file util_getent.c and BROKEN_GETGRNAM
      build: Rework waf STAT_ST_BLOCKSIZE to match autoconf, with 512 as the default
      build: Make waf configure match autoconf for HPUX ACLs
      lib/replace: Remove unused nap and therefore the SCO define
      build: Remove unused define UNIXWARE
      lib/replace: Improve mkstemp test in autoconf and waf
      lib/replace: Look for special flags needed for c99
      build: Add missing dep on tdb_compat
      torture: tidy up rpc.lsa OpenPolicy2 test to more clearly use torture_fail()
      torture: use torture_assert rather than return false in rpc.lsa
      torture: More torture_assert() calls in rpc.lsa
      build: Fix detection of quotas on macos
      client: Fix talloc_stackframe() free order assertion in developer mode
      docs: Update TOSHARG-Install
      docs: Remove references to default paramters in TOSHARG-PDC
      docs: Explain the no-domain-logons restriction applies to all HOME editions
      docs: Add mention of AD DC support in TOSHARG-PDC
      docs: Remove Win9X/WinMe mentions from TOSHARG-PDC
      docs: Fix typo in TOSHARG-Passdb
      docs: Remove mention of auth methods in TOSHARG-Passdb
      docs: Change TOSHARG-VFS to avoid suggesting VFS modules are Linux/IRIX only
      lib/util/charset: Try to find iconv on HP-UX
      lib/util/charset: We do not use fucntions from wchar.h any more
      selftest: Remove invalid security=share and rename secshare to simpleserver
      samba_dnsupdate: Move to using tmpfile/rename to keep the dns_hosts_file consistent
      samba_dnsupdate: Safely update/create names for Samba3 targets as well
      build: Add waf configure support for non-linux quotas
      build: Remove unused samba_cv_sysquotas_file variable from autoconf configure
      build: Set HAVE_SYS_QUOTAS and WITH_QUOTAS if we have any supported sysquota backend
      build: Remove unused --with-sys-quotas option
      nsswitch: Add waf tests for solaris special cases
      lib/replace: Add test for what flag we need for -Werror behaviour
      build: Fix quota tests, including move of sysquotas.c to the top level
      build: Remove duplicate check for struct getquota_rslt member getquota_rslt_u
      selftest: use an array when starting testenv with system()
      selftest: Always build a linux-style nss_winbind for nss_wrapper
      nsswitch: Build nss_winbind on all supported platforms
      wintest: bump version to 4.1
      wintest: Add config file for a second host
      wintest: Give netdom join more time to complete
      wintest: Give dcpromo more time
      samba-tool: skip chown in sysvolreset when it would fail on a GID
      posixacls: Add IDL changes for vfs_acl_xattr using hash of the sys acl
      build: Add vfs_media_harmony to the waf build
      smbd: Add mem_ctx to sys_acl_init() and all callers
      smbd: Add mem_ctx to {f,}get_nt_acl VFS call
      vfs: Remove type parameter from sys_acl_blob_get_{fd,file}
      vfs: Implement a sys_acl_blob_get_{fd,file} for POSIX ACL backends
      vfs: Use a blocking function in vfs_afsacl for system ACL blobs
      vfs: Use posix_sys_acl_blob_get_file in vfs_aixacl
      vfs: Use posix_sys_acl_blob_get_file in vfs_aixacl2 for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_default for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_fake_acls for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_gpfs for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_hpux for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_irix for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_posixacl for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_solarisacl for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_tru64acl for posix ACLs
      vfs: Use a blocking function in vfs_zfsacl for system ACL blobs
      examples: Re-indent and reformat skel VFS modules
      vfs: Improve formatting of vfs_default
      vfs: Improve formatting of vfs_fake_acls
      vfs: Fix alternative posix and no-op sys acl implementations to take a mem_ctx
      vfs: Remove irixacl module (all the fucntions in it are unimplemented)
      build: Remove --disable-shared
      rpc_server:srvsvc Remove psd variable that was no longer set by SMB_VFS_FGET_NT_ACL
      smbd: Always free the talloc_stackframe() before leaving smbd_do_query_security_desc
      dns_server: Try and use the dns-SERVER account if we were configured with it
      provision: No longer use the wheel group in new AD Domains
      build: Assert that auth_domain, auth_builtin, auth_sam, auth_winbind are builtin
      vfs: Fix compilation of ACL support on solaris
      lib/replace: Fix detection of rpcsrv/yp_prot.h on FreeBSD
      lib/replace: Fix detection of prctl
      lib/replace: Fix configure on FreeBSD: define_ret is not correct here
      build: Add #define FREEBSD on FreeBSD
      dsdb-cracknames: Always use talloc_zero()
      dsdb-cracknames: Return DRSUAPI_DS_NAME_STATUS_NO_MAPPING when there is no SID
      pysmbd: Fix pysmbd octal mode handling
      selftest: Add many more tests for our posix ACL handling
      selftest: Cover one more NT ACL invalidation case and improve comments
      selftest: Cover the important non-Samba invalidation of the NT ACL
      selftest: Always unlink the tempf in posixacl test
      dbwrap: use talloc_stackframe() in db_tdb_log_key()
      python-ntacls: Cope with ACL revision 4
      pysmbd: Add hook for unlink() so python scripts can remove xattr.tdb entries
      pysmbd: Remember to close files after setting the NT ACL
      pysmbd: Set umask to 0 during smbd operations
      vfstest: set umask(0) in vfstest
      provision: Fix comments in checksysvolacl
      sefltest: use TestCaseInTempDir and setUp/tearDown for posixacl.py temp file
      lib/replace: Return size of xattr if size argument is 0
      build: Remove support for IDL-generated files in git tree
      pidl: Remove depends_on=PIDL_MISC as it sets -I/ into CFLAGS
      imessaging: Add irpc_all_servers() to list all available servers
      pymessaging: Use the server_id IDL structure rather than a tuple
      pymessaging: Add irpc_servers_byname() and irpc_all_servers()
      samba-tool: Add samba-tool processes subcommand
      ldb: Change ltdb_unpack_data to take an ldb_context
      ldb: Remove no-longer-existing ltdb_unpack_data_free from ldb_tdb.h
      ldb: Add ldbdump, based on tdbdump
      file_server: put set create mask and directory mask in fileserver.conf
      s3-param: Move the options needed for running smbd in the AD DC to loadparm
      vfs_acl_common: In add_directory_inheritable_components allocate on psd as parent
      selftest: Add skip for DIR1 test which loops on 64 bit ext4
      libads: Always free the talloc_stackframe() on error path
      buildtools: Remove extra space from global: line
      selftest: check that samba-tool gpo works for basic operations
      wintest: Try harder to recover from apparent failure to dcpromo
      provision: Also walk directories checking ACLs
      provision: Make dsacl2fsacl() take a security.dom_sid, not str
      samba-tool: Rework ldap attribute fetch in classicupgrade for missing attributes
      selftest: Make samba.tests.ntacl also use TestCaseInTempDir
      pysmbd: Add SMB_ACL_EXECUTE to the mask set by make_simple_acl()
      selftest: Add tests for expected behaviour on directories as well as files
      selftest: Avoid test cross-contamination in samba.tests.posixacl
      ntp_signd: move socket directory to var/lib not var/run for permissions change
      ntp_signd: Only allow group access to the ntp signd directory.
      selftest: Avoid returning errors (rather than failures) in gpo test
      Revert "selftest/skip: add samba.tests.samba_tool.gpo until it's stable"
      selftest: Add --tmpdir to 'samba-tool gpo create' test
      Ensure we Correctly set fsp->is_directory before dealing with ACLs.
      smbd: Correctly set fsp->is_directory before dealing with ACLs
      Change get_nt_acl_no_snum() to return an NTSTATUS, not a struct security_descriptor *.
      smbd: Remove NT4 compatability handling in posix -> NT ACL conversion
      ntvfs: Fill in sd->type based on the new ACL being added
      scripting ntacls: Do not place a SACL in the GPO filesystem ACL
      samba-tool: Add new samba-tool gpo aclcheck and test
      s3-param: Handle setting default AD DC per-share settings in init_locals()
      dsdb: Make secrets_tdb_sync cope with -H secrets.ldb
      lib/replace: Do not use STRERROR_R_PROTO_COMPATIBLE as only roken.h sets this
      build: Use ntlm_auth from source3 as the only ntlm_auth installed on the system
      torture: remove source3 locktest and masktest
      build: Be consistent with the name of smbtorture binaries
      build: Remove --enable-smbtorture, require bin/smbtorture (from waf) for make test
      packaging: Remove long-gone --disable-merged-build from RHEL-CTDB packaging
      build: Do not install testing binaries
      scripting: Handle missing LDAP entries in samba-tool domain classicupgrade
      build: Install .po files for SWAT intl support
      smbd: Split create_conn_struct into a fn that does not change the working dir
      smbd: Fix calls to create_conn_struct_cwd to be correctly indented.
      pysmbd: Convert pysmbd to take an optional service to connect to
      scripting-ntacls: Optionally allow the service to be specified.
      scripting-provision: Set sysvol ACLs on the sysvol share
      pysmbd: Change to keyword based arguments
      samba-tool Add --service argument to samba-tool ntacl get/set
      smbd: Rework create_conn_struct to use conn_new()
      selftest: show that Samba honours "write list" and valid users
      build: Remove bashism from SAMBAMANPAGES rule
      vfs: Fix compilation of solaris ACL module
      passdb: Add discard_const_p() to pdb_samba_dsdb
      swat: move russian swat files alongside ja and tr
      build: Make install_with_python.sh executable
      build: In install_with_python.sh force using the python from the install we just made
      build: Make install_with_python.sh more portable
      build: Set LD_LIBRARY_PATH in install_with_python.sh
      s4-dbcheck: Allow forcing an override of an old @MODULES record
      dsdb-acl: give error string if we can not obtain the schema
      selftest: Add test for rfc2307 mapping handling
      s4-idmap: Remove requirement that posixAccount or posixGroup be set for rfc2307
      samba-tool classicupgrade: Do not print the admin password during upgrade
      scripting/samba_upgradedns: Only look for IPv4/IPv6 addresses if we actually them
      selftest: skip base.dir2 tests as they just spin on modern ext4
      dsdb: Make linked_attributes module GUID based for renames
      libcli/security: Ensure to fill in remaining_access for the initial case (bug #9554 - CVE-2013-0172)
      dsdb-acl: Run sec_access_check_ds on each attribute proposed to modify (bug #9554 - CVE-2013-0172)
      dsdb: Add test for modification of two attributes, one permitted, one denied (bug #9554 - CVE-2013-0172)
      drs-fsmo: Improve handling of FSMO role takeover.
      selftest: also skip raw.search as it also spins
      dsdb: Do not hold the transaction over the IRPC call to perform a role transfer
      torture: Fix fsmo test to use correct -H samba-tool syntax
      printing: Free talloc_stackframe() on all exit paths
      heimdal_build: Try again to sort out the strerror_r mess
      dsdb-acl: Add helper function dsdb_get_structural_oc_from_msg()
      dsdb-acl: Use dsdb_get_structural_oc_from_msg() in acl_modify()
      dsdb-acl: Use dsdb_get_structural_oc_from_msg() in acl_rename()
      dsdb-acl: use dsdb_get_structural_oc_from_msg() rather than class_schemaid_guid_by_lDAPDisplayName
      dsdb-acl: ask for the objectClass attribute if it's not in the scope of the clients search
      dsdb-acl: Remove unused get_oc_guid_from_message()
      dsdb-acl: Pass the structural objectClass into acl_check_access_on_attribute
      dsdb-acl: Use the structural objectClass in acl_check_access_on_attribute()
      libcli/security: handle node initialisation in one spot in insert_in_object_tree()
      libcli/security: remove useless if (root->num_of_children > 0) statements
      dsdb: Ensure "authenticated users" is processed for group memberships
      dsdb: Explain ordering constraints on the ACL module as well.
      libcli/auth: fix void function cannot return value error
      gensec: Allow login without a PAC by default (bug #9581)
      bug9598: s4-process_single: Use pid,fd as cluster_id in process_single just like process_prefork
      ldb: Ensure to decrement the transaction_active whenever we delete a transaction
      pymessaging: Use correct unsigned types for server ID tuple elememnts
      pymessaging: Pass around the server_id struct to python callbacks rather than the tuple
      s4-process_single: Use pid,task_id as cluster_id in process_single just like process_prefork
      selftest: Add test of upgradeprovision using the old alpha13 tree
      vfs: Add helper function hash_blob_sha256 to vfs_acl_common.c
      vfs: Implement an improved vfs_acl_common that uses the hash of the system ACL
      vfs: Whitespace fix only to get_nt_acl_internal indentation
      vfs_acl_common: Do not fetch the underlying NT ACL unless we need it
      idl: Provide a common wrapper for the data to hash for a non-POSIX ACL
      vfs: Add helper function for non posix ACL modules
      s4-nbt: Ensure source4/ nbt client and server honour 'disable netbios'
      samba_upgradeprovision: Remove options to fix FS ACLs
      scripting: Make tdb_copy use the python subprocess module
      scripting: Make tdb_copy a common util function in samba.tdb_util
      samba_upgradeprovision: Do not update privileges.ldb any more (unchanged since 2009)
      samba_upgradeprovision: Use tdb_util.tdb_copy not shutil.copy2
      build: Remove unused includes.h reference to avoid build-time talloc dep
      build: Remove includes.h dep in winbind client libraries
      ldb: Add missing dependency on replace for ldb
      torture-drs: Make the samba4.drs.repl_schema.python emit failures, not errors on add failure
      torture-drs: Fix comment in replica_sync test
      dsdb-descriptor: Spell out security descriptor flags as constants
      dsdb-descriptor: Avoid segfault copying an SD without an owner or group
      build: Do not force a specific perl from ${PERL} when running pod2man
      build: Rename samba_python waf node to avoid duplicate name
      build: Change bin/default/python -> bin/python symlink to bin/default/python_modules
      samba-tool dbcheck: fix comment on err_wrong_sd
      samba-tool domain classicupgrade: Print a better error when the ldap backend PW was not found
      samba-tool domain classicupgrade: Fix typo in error path for multiple account flags
      samba-tool ldapcmp: Add --skip-missing-dn to not error on DNs present in one DB but not the other
      subunit: Add a sh macro for skipping a test
      scripting: Correct parsing of binary DN
      samba-tool dbcheck: fix msDS-HasInstantiatedNCs attributes to match instanceType on our ntdsDSA
      samba-tool ldapcmp: Add support for checking DNSDOMAIN and DNSFOREST by default
      selftest: Do an ldapcmp run against the upgraded domain
      selftest: Add in a provision from 4.0.0 to run tests against
      selftest: Add ldapcmp to ensure upgradeprovision of a fresh DB is a no-op
      selftest: Run dbcheck and improved upgrdeprovision tests against release-4-0-0
      selftest: Rename samba4.blackbox.upgradeprovision.py to samba4.blackbox.upgradeprovision.current
      samba_upgradeprovision: Remove auto-detection of pre-alpha9 databases
      scripting: Rework samba.upgradehelpers.get_diff_sddls to be get_diff_sds
      samba_upgradeprovision: Remove inherited ACEs before comparing the SDs
      samba_upgradeprovision: Remove unused checkKeepAttributeOldMtd
      samba_upgradeprovision: Remove alwaysRecalculate, this is too dangerous
      samba_upgradeprovision: only run rebuild_sd in --full mode
      samba_upgradeprovision: do not maintain dnNotToRecalculate as a list
      samba_upgradeprovision: Do not reset every DN when changing an SD
      selftest: Remove output directories to save disk space
      s4-lib/socket: Return the original EMSGSIZE when sendto() and setsockopt() both fail
      tsocket_bsd: Attempt to increase the SO_SNDBUF if we get EMSGSIZE in sendto()
      selftest: Fix specification of --machinepass to actually set a unique password
      net ads join: Add support for specifying the machine account password
      docs: Add documentation for osName and osVer
      param: Remove incorrectly added defaults in AD DC allowing WORLD WRITABLE files
      smbd:posix_acls Remove incorrectly added lp_create_mask() and lp_dir_mask() calls
      Revert "Ensure the masks don't conflict with the ACL checks."
      scripting: No longer install samba_upgradeprovision
      ccan: Cast getpid() result to unsigned int for GNU/Solaris build
      ntdb: Cast getpid() result to unsigned int for GNU/Solaris build
      lib/util: Cast mode_t result to unsigned int for GNU/Solaris build
      s4-ntvfs: Cast getpid() result to unsigned int for GNU/Solaris build
      s3-lib/server_prefork: Cast pid_t result to unsigned int for GNU/Solaris build
      s3-smbd/process.c: Cast pid_t result to int for GNU/Solaris build
      spoolssd: Cast getpid() result to unsigned int for GNU/Solaris build
      dbwrap: Cast getpid() result to unsigned int for GNU/Solaris build
      vfs_smb_traffic_analyzer: Cast mode_t to unsigned int for GNU/Solaris build
      s3-epmd: Cast getpid() result to unsigned int for GNU/Solaris build
      s3-lsad: Cast getpid() result to unsigned int for GNU/Solaris build
      examples/libsmbclient: Cast mode_t to unsigned int for GNU/Solaris build
      vfs-btrfs: Fix build on 32 bit platforms by using long long types
      build: Remove the forced use of only the first part of the compiler string
      build: Do not pass CPP="" to pidl, skip the env variable entirely
      scripting: Move the list of well known SDs to samba.provision.descriptor
      scripting: Fix documentation comment on upgradehelpers.py:get_clean_sd
      scripting: Make samba.provision.descriptor.get_wellknown_sds() return ldb.Dn objects
      scripting: Move samba.provision.descriptor to samba.descriptor
      scripting: Modify samba.descriptor.get_wellknown_sds() use samdb calls only
      scripting: Move get_diff_sds from samba.upgradehelpers to samba.descriptor
      samba-tool dbcheck: Add --reset-well-known-acls
      samba-tool dbcheck: Allow dbcheck to correct an nTSecurityDescriptor without an owner or group
      scripting: Modify samba.descriptor.get_diff_sds() to cope with a missing reference owner
      selftest: Add tests for samba-tool dbcheck --reset-well-known-acls
      samba-tool ldapcmp: Remove the GUID -> name mappings
      scripting: Fill the ProvisionNames hash with strings, not ldb.MessageElement or Dn
      auth/ntlmssp: Avoid use-after-free of user_info after logon failure at log level 5
      build: Replace #!/usr/bin/env python with passed in PYTHON=
      build: Remove extra space in shebang
      python-samba-tool domain classicupgrade: Make failure to connect directly to the LDAP backend fatal
      build: Raise minimum python version to 2.5.0 for samba build
      scripting-provision: Do not enforce domain != realm if we are joining an existing domain
      build: Move nfs4acl to the top level
      vfs: Add vfs_handle_struct argument to smb_set_nt_acl_nfs4 and the callback
      vfs: Allocate SMB4ACL_T on an explict memory context
      vfs: Remove unused security_info argument in vfz_zfsacl.c
      vfs: Add new VFS module vfs_nfs4acl_xattr to use nfs4acl.idl
      build: Add vfs_nfs4acl to the autoconf build
      librpc: Add special owner/group/other constants to nfs4acl.idl
      selftest: Run raw.acls test against the nfs4acl_xattr module
      vfs: Allow CREATOR GROUP to be used with vfs_zfsacl
      build: Add missing dep from vfs_nfs4acl_xattr to NDR_NFS4ACL
      build: Blacklist the release-4-0-0 provision as well
      gensec: Make the no-hostname status message much less scary
      s3-rpc_server: Ensure we are root when starting and usiing gensec
      build: Do not set PATH in install_with_python now we set $PYTHON
      python-samba-tool domain classicupgrade: Skip machine accounts that do not end in $
      python-samba-tool domain classicupgrade: Actually Skip domain trust accounts
      pdb_ldap: Do not skip accounts without a sambaAcctFlags value
      python-samba-tool domain classicupgrade: Correct message about re-promoting BDCs
      samba-tool dbcheck: Use dsdb.DS_GUID_DELETED_OBJECTS_CONTAINER rather than the literal value
      python-samba-tool domain classicupgrade: Use transactions when adding users/groups/members
      dsdb-repl: Allow the name attribute (and name-based schema lookups) to be skipped in dsdb_repl_make_working_schema()
      dsdb-schema: Print clear debug message when we find a OID in our local DB we cannot convert
      rpc_server-drsuapi: Include the failing DN when unable to convert DB objects to DRS
      autobuild.py add ntdb to the samba-libs task, to ensure it works as an external library
      dsdb: Expand on what the error finding the ntSecurityDescriptor was in acl_read
      auth: Ensure auth_sam is not used on the AD DC
      build: Update md5.h detection in waf and autoconf to use sys/md5.h and -lmd
      docs: Remove out of date and unmaintained Speed page from the HOWTO
      docs: Remove TOSHARG-HighAvailability which is made obsolete by CTDB
      docs: Fix small errors in TOSHARG-Compiling
      lib/replace: Set BROKEN_STRNLEN and BROKEN_STRNDUP on all AIX
      build: Build all of samba in autoconf make test
      build: Remove binaries and libraries build groups
      build: Rework BSD_STYLE_STATVFS check to match autoconf build
      examples: Move example smb.conf over to "server role"
      examples: Remove default printing form example smb.conf
      examples: Remove password server from example smb.conf
      examples: Remove browser and DC settings from example smb.conf
      smbd: Fix build on platforms that will not support var = {} initialisation
      build: Do not always regenerate the version.h file
      build: Remove old create-tarball release script
      build: Remove unused expand-includes.pl
      lib/replace: Remove unused install-sh
      build: Remove mkinstalldirs
      build: Remove duplicate call to bld.SYMBOL_CHECK()
      docs: Remove all references to testprns
      build: Install smbtar in waf build
      autobuild: Remove samba3 and samba3-ctdb targets to allow autoconf removal for 4.1
      build: No longer run autogen.sh during tarball creation
      build: Remove autoconf build system
      build: Remove unused install-sh
      build: Remove unused script/mkversion.sh
      build: Remove autoconf directory no longer needed
      Remove stub ldb_version.h and source3/include/autoconf as no longer needed
      Remove now-unused s3-selftest.sh wrapper
      build: Remove unused build_idl.sh
      Remove lib/netapi autoconf build system, this is now build with waf
      build: Remove unused build_idl.sh
      build: Remove unused install*.sh scripts
      build: Remove unused uninstall*.sh scripts
      build: Remove unused revert.sh script
      build: Remove unused linkmodules.sh script
      build: Remove unused preproc-dummy.c
      docs: Document removal of the autoconf build system
      param: Remove _SAMBA_BUILD_ checks from now the autoconf build is gone
      lib/util/modules.c: Remove #if SAMBA_BUILD_ == 3 now we only have the waf build
      nsswitch: Remove #if SAMBA_BUILD_ >= 4 now we only have the waf build
      passdb-machine_account_secrets: Remove #if SAMBA_BUILD_ == 4 now we only have the waf build
      build: Remove autoconf build system from examples/VFS
      selftest: VFSLIBDIR is not needed, the waf build knows where to find modules automatically
      build: Remove unused credentials_samba3.c
      build: Remove feature tests for variables now always provided
      build: Remove unused tool for config.h comparison
      build: Remove unused mkbuildoptions.awk
      dsdb-linked_attributes: Do not crash if the target GUID can not be found
      dsdb-repl_meta_data: Handle renames better, considering only the RDN as given, and then the parent as given
      torture: Add tests of rename behaviour to replica_sync.py
      dsdb-repl_meta_data: Move TODO comment about conflicts and missing parents
      .gitignore: Tidy up after removal of the autoconf build
      Revert "s4-dsdb: Remove strcasecmp() fallback in replmd_ldb_message_element_attid_sort"
      auth: Remove "password level"
      docs: Do not encourage unix passwords, and remove reference to password level
      Remove remaining references to "password level" in the tree
      python samba-tool drs: Correctly print KCC references to deleted servers
      dsdb: Allow dsdb_find_dn_by_guid to show deleted DNs
      dsdb: Fix behaviour for when to update the USN when there is no change
      dsdb-tests ldap.py: Fix quoting of print statements
      dsdb-tests ldap.py: Add test for usn behaviour on certain changes
      dsdb repl_meta_data: Use dsdb_request_add_controls()
      build: Build with system md5.h on OpenIndiana
      s4-winbind: Add special case for BUILTIN domain
      ldb: Ensure not to segfault on a filter such as (mail=)
      build: Remove the struct MD5Context conf file check.
      ldb: Cope with substring match with no chunks in ldb_filter_from_tree
      ldb: bump version to allow a depencency on the substring crash fix
      libcli/ldap: Cope with substring match with no chunks in ldap_push_filter
      torture: Add tests for LDAP substring search with no strings provided
      heimdal_build: Add missing dep on samba4kgetcred
      dsdb-ridalloc: Fix RID pools - RID numbers increase too quickly
      s4-lib/socket: Allocate a the larger sockaddr_un and not just a sockaddr_in in unixdom_get_peer_addr()
      dsdb-descriptor: Do not do a subtree search unless we have child entries
      dsdb: Rework subtree_rename module to use recursive LDB_SCOPE_ONELEVEL searches
      dsdb-ridalloc: Rework ridalloc to return error strings where RID allocation fails
      selftest: Ensure the DC has started and and got a RID set before we proceed
      dsdb: Add assert in drepl_take_FSMO_role
      rpc_server-drsuapi: Improve comments and DEBUG lines
      selftest: ensure samba4.rpc.samr.large-dc.two.samr.many is always tested
      torture/drs: Expand an error message to aid debugging
      dsdb: Prune deleted objects of links and extra attributes of replicated deletes
      dsdb: Ensure we always force deleted objects back under the deleted objects DN
      dsdb: Improve DRS deleted link source/target handing in repl_meta_data
      dsdb tests: Add member/memberOf checking to delete_objects testing
      dsdb: Include MS-ADTS doc references on deleted object contstraints
      samba-tool dbcheck: Correctly remove deleted DNs in dbcheck
      service_stream: Log if the connection termination is deferred or not (bug #9820)
      s4-winbindd: Do not terminate a connection that is still pending (bug #9820)
      scripting/join.py: Handle creating the dns-NAME account during a DC join
      scripting/samba_upgradedns: Tighten up exception and attribute list handling
      selftest: Test creation of the dns-SERVER account during selftest
      selftest: Start internal DNS server on domain provisioned for BIND9_DLZ
      selftest: Add a basic test of samba_upgradedns
      torture: Ensure that GSSAPI and SPNEGO packets are accepted by dlz_bind9
      python-samba-tool fsmo: Do not give an error on a successful role transfer
      python/drs: Ensure to pass in the local invocationID during the domain join
      dsdb-repl_meta_data: Check for a NULL invocationID and do not proceed
      dsdb: Refuse to return an all-zero invocationID
      dsdb-repl_meta_data: Do not re-delete the Deleted Objects DN during replication
      dsdb-repl_meta_data: Make handling of Deleted Objects DN clearer in delete
      dsdb: Use WERR_DS_ATT_NOT_DEF_IN_SCHEMA for failed schema lookups
      Remove confusing TODO file
      Remove NEWS file containing confusing information
      smb.conf: Fill out the ntvfs handler smb.conf page from source4/NEWS
      dsdb: Refuse to replicate an all-zero invocationID GUID in replPropertyMetaData
      dbcheck: Look for and fix the all-zero invocationID in replPropertyMetaData
      selftest: Add script to assist in writing out a tree undump.sh can restore
      selftest: Only run referenceprovision and ldapcmp for the 4.0.0 test
      selftest: Add release-4-1-0rc3 saved provision
      selftst: add tests based on 4.1.0rc3 to check for zero invocationID in replPropertyMetaData
      dbcheck: Ensure to always increase the error_count
      pydsdb: Give KeyError when we fail a schema lookup in python
      pydsdb: Raise a more useful exception when dsdb_wellknown_dn fails.
      dbcheck: Add back the elements that were wrongly removed from CN=Deleted Objects
      dsdb: Convert the full string from UTF16 to UTF8, including embedded NULLs
      dfs_server: Use dsdb_search_one to catch 0 results as well as NO_SUCH_OBJECT errors

Andrew Klaassen (1):
      media_harmony VFS module: Add and build by default.

Andrew Klosterman (1):
      s3:smbd: Fix bug 6690, wrong error check

Andrew Kroeger (77):
      registry: Properly check return values from ldb_*() functions.
      When Windows initially creates a new value, the value name is "New Value #1".
      When Windows attempts to create a new key, it looks for an available key name
      registry: Implement recursive deletes for ldb-backed registry.
      registry: Implement recursive deletes for dir-backed registry.
      registry: Implement recursive deletes for regf-backed registry.
      registry: Add an explicit test for recursive deletion.
      torture/rpc-winreg: General fixes for a number of tests.
      torture/rpc-winreg: Modify test cases to work with recursive key deletion.
      torture/rpc-winreg: Split out the security descriptor tests.
      samba4-knownfail: Only the "*-security" rpc-winreg tests are expected to fail.
      Fix blackbox.kinit test by issuing new certificates good for 25 years.
      ldb_wrap: Debug at derived samba_level, not the level of the ldb debug enum.
      accountExpires: Windows default is 9223372036854775807, not -1.
      Add samdb_result_account_expires() function.
      Update account expiration to use new samdb_result_account_expires() function.
      Enhance mappings of NTSTATUS to KRB5KDC errors.
      Treat maxPwdAge == 0 as passwords never expire.
      heimdal: Add parameter to windc_plugin to allow extended return codes.
      kdc: Provide extended error information in AS-REP error replies.
      WHATSNEW: Update information in preparation of Alpha3.
      provision: Increase max NetBIOS name length from 13 to 15.
      Convert some more files to GPLv3.
      Merge branch 'v4-0-test' of git://git.samba.org/samba into v4-0-local
      mkrelease: Update to work with Git instead of SVN.
      mkrelease: Add checks to ensure run from top-level directory of repository.
      howto: Clarify differences when working from a tarball instead of Git.
      Makefile: Allow "make" with no arguments to build all that will be installed.
      howto: Simplify the commands needed and remove reference to removed script.
      provision: Add support for IPv6 (bz #4593).
      howto: Update git clone command to something that actually works.
      provision: Allow DNS GSS-TSIG updates to work.
      provision: Create instructions for enabling DNS GSS-TSIG updates.
      subunit.sh: Properly capture and pass on the command output.
      gitignore: Ignore some output files from make test.
      provision: Generate krb5.conf template separate from named.conf template.
      enableaccount: Use correct command name in usage output.
      GPO: Do not provision Default Domain Policy as initially enforced. (bz #5480)
      provision: Add missing string parameter token when assigning ldap_backend.
      howto: Remove smbpython.
      s4:provision: Update DisplaySpecifiers (#5139).
      s4:Added Extended-Rights and subentries.
      s4:provision: Added ComPartitionSets entry.
      gitignore: Ignore additional auto-generated files.
      s4:ldb:modules: Correct typos.
      s4:ldb_modules: Correct typos.
      s4:tevent: Increase trace debug level to 50.
      s4: Add additional well-known SID's/RID's.
      s4: Add additional 2-letter SID/RID mappings.
      gitignore: Ignore additional auto-generated file
      s4:mkproto: Add NET_API_STATUS return type.
      s3: Call va_end() after all va_start()/va_copy() calls.
      s4: Call va_end() after all va_start()/va_copy() calls.
      ldb: Properly handle NULL when copying attr lists.
      selftest: Account for 0-based months in date parsing and printing.
      util:tests: Correct time tests for negative UTC offsets.
      s4:setup: Change license headers to LDIF comments.
      s4:setup: Added script to parse Microsoft DisplaySpecifiers document.
      s4:setup: Use ms_display_specifiers script for provision.
      s4:setup: Updated comment to reflect new DisplaySpecifiers location.
      s4:setup: Remove display_specifiers.ldif.
      gitignore: Ignore additional auto-generated files.
      s4:pwsettings: Correct off by factor of 10 for ticks.
      s4:pwsettings: Added --quiet option.
      s4:pwsettings: Run all updates as a single modify() operation.
      s4:pwsettings: Don't assume a value for pwdProperties.
      s4:pwsettings: Added validation.
      s4:pwsettings: Add 'default' option for password complexity.
      s4:pwsettings: Show default values in help messages.
      testprogs:subunit.sh: Add function for expected failures.
      s4:pwsettings: Added blackbox tests.
      s4:srvsvc: Fix logic on error checking.
      s4:ldb_map: Don't free ares too early.
      s4:provision: Update schema version number to W2K8.
      s4:provision: Show domains and forests are W2K8 DC capable.
      s4:torture: data_blob_hex_string() output is now lowercase.
      s4:provision: Make gc._msdcs DNS entries A/AAAA records

Andrew Tridgell (10241):
      updated README for new samba.anu.edu.u alias
      use the new issafe() macro instead of isalnum() and strchr()
      move the dot_pos calculation down a bit
      fix a netgroup bug (innetgr() was being called with the args in the
      - use issafe()
      fix a dst bug, we had a sign wrong in the calculation :-(
      updates to wall.perl from michal at ellpspace.math.ualberta.ca
      removed obscene comment added by Dan
      - close the listening socket in the child process when running as a daemon
      change version number to 1.9.16p2
      removed old -S option from nmbd manpage
      documented -W option
      ignore some files
      - handle CORE protocol better
      handle being passed a dptr of -1 to mean "close all open dir handles".
      turn on KEEP_PASSWORD_SERVER_OPEN by default
      move quotas support out of server.c
      - fix a bug hanlding very log filenames
      - added hostname support to smbstatus
      made dptr_num signed to handle -1 from OS/2
      fixed version number (again!)
      cleaned up the way the max log size stuff works and fixed a potential
      added comments about trapdoor uids
      cleanups to make thinsg compile cleanly
      fixed a typo
      handle errors from receive_smb better, and print error string
      - added an entry on WinDD to samba.faq
      comment out the code that tries to handle the NT bug where the 2nd
      add my private makefile to the ignore list
      Lots of changes!
      - moved the uid handling to uid.c
      a huge pile of changes :-)
      add dummy quotas fn
      Did more integration of Lukes code ready for the first release.
      - changed some debug levels in clientutil.c
      - remove some incorrect prototypes from server.c
      add sunos private makefile to .ignore
      fix a bug that meant alpha6 couldn't compile.
      added some notes on the new "interfaces" option
      - added interface.c and removed all the references to myip, bcast_ip
      - added predict.c, moving the routines from util.c
      - added comments to byteorder.h explaining how it works.
      patches fromk Luke putting in symbolic names for time constants
      moved MSBROWSE into nameserv.h
      changes from Luke
      fixed the apana MIRRORS entry
      more changes from Luke
      updates from Luke to rename "domains" more accurately to "subnets"
      moved some more locking routines to locking.c, and moved replacement
      documented the "max disk size" option.
      got rid of a lot of redundent header files as we now globally generate
      a cleanup of the receive_smb() usage, adding timeouts in some places
      minor patch to allow host announcements to remote subnets
      demo of cvs - ignore
      - change date as a demo for john
      - moved the protocol defs in the client to keep sill C compilers happy
      fix Makefile - remove Lukes private stuff :-)
      fixed conflict with global variable updatecount
      fixed conflict between two variables called d
      generated new proto.h
      removed some debug stuff from luke
      minor cleanups ready for another release
      fix up problems with "smbclient -L". It now uses a generic
      minor debug output fix
      added a bunch of comments to Lukes docs.
      added lots of comments to the docs that Luke wrote on the internals of
      removed the remote interfaces stuff.
      the client now loads the smb.conf config file so it can get the
      minor cleanups
      fix a bug that we've had for a long time where we don't handle EOF
      minor fix to write_data() for EOF handling
      new docs for japanses extensions from Fujita
      - added docs on new "printer driver" option
      - sequent-ptx support from bressler at iftccu.ca.boeing.com (Rick
      don't allow newlines in printer status messages
      - add the 0x1c name for all interfaces if we are a logon server
      doc updates
      added the validchars package written by tino at augsburg.net. This
      minor cleanups
      disabled SETFS (which was only enabled for Linux) until we resolve a
      fixed an obvious bug that meant that DosPrintQEnum could never
      changed "unsigned long" to "uint32" in several places (for IP
      added notes on the new FAST_SHARE_MODES code
      - added FAST_SHARE_MODES code
      change email address
      added Printing.txt and Tracing.txt
      SVR4 startup scripts from Timo Knuutila (knuutila at cs.utu.fi)
      added support for the Bull Operating System (BOS)
      - document the "remote announce" option
      documented the new syntax of lmhosts
      - added the "remote announce" option
      fixed installscripts.sh so it no longer creates ] and [ directories
      - added support for Amiga-unix (based on BSD I think)
      added a note about the homes share and WinDD
      - made FAST_SHARE_MODES standard for Linux
      a bunch of man page cleanups from a kind contributor
      - added "netbios name" option in smb.conf to make controlling the name
      fix a bug in the new chaining code
      add a bit more about the "trapdoor uid" messsage
      - fix a bug in NetServerEnum where counted and total were not counted
      - add NMB_REG_REFRESH capability to initiate_netbios_packet(). I think
      - removed ServerComment and instead set the comment string in nmbd
      update "server string" docs
      give names more time when refreshing
      - new faxing doc from Gerhard Zuber <zuber at berlin.snafu.de
      - new handling of ST_TYPE bits, they are now consolidated much more in
      - remove the date markers from the man pages. I never keep them uptodate
      - bit a bit manipulation bug in find_name_search()
      fix compiler warning
      handle sigpipe better for server security
      update the docs ready for a new release
      - fix a bug handling readraw packets that caused the timeout to be 30
      minor fixes to docs
      - add timeouts to connect() for password server connections. This
      minor doc fix
      - fix client for pathworks 4 access
      added debug info
      - accept either NT or lanman passwords in tconX
      - a huge pile of changes from Luke which implement the browse.conf
      backout all the changes to nmbd.
      - fix the EALREADY bug so connections to slow hosts with smbclient get
      - changed the umask handling. We now set the umask to 0 and explicitly
      - added a new support entry
      - use workgroup from smb.conf in smbclient
      - added docs on the new "fake oplocks" option.
      I have fixed quite a few important bugs in this commit.
      - added a mirror entry and added a new Support.txt entry
      - replace the base36 function with one that works on more systems
      - use waitpid for ultrix
      add DEBUGLEVEL to replace.c
      - added an entry to the MIRRORS list
      - changed the default nmbd loop timout to 10 seconds (2 seconds was much
      - continue when failing to load config file in nmblookup and smbclient
      - revert to old idle dir code (marty pointed out a problem with the
      - updated the ENCRYPTION.txt stuff to point to the newer des
      - correctly handle non-encrypted share mode session-setup. We were
      - set default printer driver string to "NULL"
      - fixed listproc mail address in faq
      - added support for TMPDIR env variable
      added a new type to mkproto.awk so it can handle shmem.c
      fixed a bug in the printjob encoding/decoding. We weren't doing it for
      cgi.c is a simple set of CGI manipulation routines
      some minor modifications to loadparm.c to support the necessary
      add the stdout parameter to lp_dump()
      prototype updates for new functions
      fix a couple of "declaration shadows previous local" warnings.
      This is a written from scratch DES implementation. I couldn't find a
      This commit does 3 main things:
      no longer needed
      rewrote md4.c from scratch. This implementation should be portable and
      - change a lot of occurances of errno to use strerror(errno). We can't
      - if the user already exists then ignore the -add command
      bug fix in the new des code.
      - change generate_challenge() to use md4 instead of des
      add a cast
      change the encryption instructions to reflect the fact that the code
      John asked the other day about using the tar feature in smbclient to
      added some debug stuff
      add error string reporting to clitar
      change the semantics of hosts allow/hosts deny so that a global
      change a debug level in reply.c
      add "static" to a couple of functions that are only used locally.
      This is all the NT error codes less than 1000. I extracted them using
      a little hack to smbclient to support extracting NT error codes
      a bit of bounds checking
      fix some "shadows global" errors.
      get rid of SIGCLD_IGNORE for HPUX. A user reported it causing lots
      increase the debug level in the "added interface" debug line
      bracket some macros
      an implementation of the NT domain credentials protocol
      fixed the log wrapping bug.
      remove { and } from the list of illegal characters in filenames. The
      updated the "comment =" entry a bit
      reverted a change made by Luke at his request.
      force the salt to be a maximum of 2 characters long in calls
      fixed a stack overflow bug in api_lsa_req_chal()
      fixed the freeze on logout bug. The fix has several parts:
      added loopback_ip. This is used to detect packets from ourselves
      add the port number to a debug statement
      the usual proto.h update
      fixed the problem that browsing breaks if you put quote marks around
      add ERRDOS/67 ERRnosuchshare to the client.c list of error strings
      added -a "append log" option
      document -a "append log" option
      fix the handling of negative name query responses and the handling of
      remove a spurious error message from nmbd. The message was:
      put the new example config file in here as well
      add a note about running testparm after modifying smb.conf
      add a section on encryption and change the formatting a bit
      update the timestamp on config files in our linked list when we notice
      move calls to smbhash() inside smbdes.c (for legal reasons)
      I am removing these from the source code in preparation for an
      casting cleanups
      a major share modes reorganisation.
      add some debug info
      get rid of the KEEP_PASSWORD_SERVER_OPEN define
      This is a set of generic SMB client routines. I needed this in a hurry
      rewrote the password server code using the new clientgen.c client
      some cleanups in the clientutil.c code.
      prototype updates
      added a note about which netbios name is use in server level security
      add a note on how to map usernames with spaces in them
      fix the order of become_uid() and become_gid() in become_root(). This
      don't check lp_alternate_permissions() in the new utime workaround
      check for EPERM or EACCESS in file_utime()
      damn, I spelt EACCES wrong.
      don't send any statistics in the node status reply
      Implemented asynchronous DNS lookups in nmbd.
      shared memory code cleanups (partly preparing for a possible sysV
      The browse synchronisation code in nmbsync.c now uses the clientgen.c
      fix some casting errors in smbencrypt and some multiply-defined errors
      added -U option to nmblookup. This is similar to -B except that it
      Fixed 2 oplock bugs:
      also disable read prediction in 1.9.18
      change the default file permissions on the SHARE_MEM_FILE* to
      refuse pathworks type R connect (patch from Stephen Tweedie)
      SYSV IPC implementation of fast share modes.
      define USE_SYSV_IPC on a bunch more systems.
      define USE_SYSV_IPC on sunos4
      lower the default hash size if SEMMSL isn't defined
      define semun for broken solaris sysvipc
      fix cast
      fix for broken sunos4 includes (doesn't have SHM_R)
      need includes.h to compile on some systems (eg. sunos4)
      enable sysv ipc and fast share modes on OSF1
      clean up the hash entry code a bit. Got rid of lp_shmem_hash_size()
      - don't allow locking to initialise twice
      damn. We need root privilages to do semaphore operations even if we
      moved ubi_ modules back into the ubiqx directory.
      Chris will be pleased to know that mkproto.awk no longer runs on the
      - cleanup some warnings
      removing the files that are now in rpc_pipes
      this is now in the rpc_pipes directory
      no Makefile needed here either
      pm_process() never closed the file (a memory and file descriptor leak)
      OSF1 doesn't define union semun either.
      define NO_SEMUN for svr4
      change from * to ^ in hashing of device/inode. Using * meant that if
      re-initialise the timezone on each new connection. This means you
      some locking code cleanups
      don't use SEM_UNDO because of ridiculously small undo limits on some
      change a debug level
      a simple SMB torture tester. This will allow us to evaluate locking
      set O_CREAT on lock file
      minor async DNS cleanups
      don't print the progress so often - it slows down the client too much
      to avoid any possibility of the pipe getting full and blocking we now
      fix comments
      got rid of redundent rpc_pipes/rpc_proto.h
      convert the credentials code back to uchar[8] from uint32[2]
      fix some uchar/char conflicts
      add NO_SEMUN for HP
      no asm/signal.h for linux as this is not portable
      change from %D to %m/%d/%Y in timestring(). This doesn't really matter
      added two more sets of tests to the smbtorture test. The tests I added
      a few more tests added, including one that tests whether the server
      auto-create the locks directory on startup
      fixed a bug which caused nmbd to core dump.  The problem was incorrect
      added code to test the cli_NetServerEnum() function in clientgen.c
      don't do the 255.255.255.255 mapping for group names if the name type
      fixed typo
      changed nmblookup to only set recursion_desired in queries if the -R
      added some debug lines to the rename code
      use LocTimeDiff() not TimeDiff() to ensure that longdate conversion is
      added true enumerated types in loadparm.c. Now we don't need all those
      the usual :-)
      fixed some typecasts of (char *) to (unsigned char *)
      this new cgi code includes the ability to act as a mini web server,
      added a test for the NT SMBgetatr bug in smbtorture
      minor wsmbconf and cgi changes
      test SMBsetatr as well
      added some QPATHINFO and QFILEINFO tests into smbtorture.
      added a SMB_QUERY_FILE_ALL_INFO test into smbtorture
      added cli_rmdir and cli_mkdir
      get rid of stat command (it is a hangover from an old experiment)
      oh no! my favourite hack is broken. You can't do:
      fixed a very nasty oplock bug. We could send oplock break requests on
      there was a bug in my oplock bugfix :-)
      get_entries is an int not a bool
      pass the mailslot name to process_logon_packet()
      added a sent_oplock_break element to Files[] as a paranoia check so we
      use -1 not 0xffffffff in SIVALS() macros
      don't display locks for dead processes in smbstatus
      the logon script example should use %U.bat not %u.bat
      dont try getpeername() when Client isn't initialised
      get rid of some things out of smb.h that are already in local.h
      HPUX trusted systems need to use bigcrypt() not crypt()
      the default GUEST_ACCOUNT should be here not in smb.h
      changing the comment in find_new_file() to say why a base of 1 is used
      add the null string to SMBsetatr calls
      fixed the help message for -p (someone complained!)
      fix toupper(c) on a already uppercase char and tolower(c) on an
      hopefully handle "ready and waiting" messages in print queue output a
      I'm slowly getting though the todo list :-)
      make the "printing" option a per share option rather than global. When
      allow users to disable the NetWkstaUserLogon call in server level
      add a warning if the timezone is not a multiple of 1 minute. This
      allow local_machine and remote_machine (%L and %m macros) to contain
      change the "username map" option to allow the user to stop the
      applied a patch from Norm Jacobs to allow "printcap name = lpstat"
      put the default PRINTCAP_NAME def in includes.h not local.h so that
      slight cleanup to the linked list handling
      Makefile.lib does nothing, so remove it
      don't use free and alloc as structure elements
      added optonal MEM_MAN code
      got rid of the WRAP_MALLOC code - mem_man does it better
      allow for zero size reads in asyncdns. These can happen after a signal
      catch signals in the async dns daemon and allow it to auto-restart if
      fix a bug that sometimes prevented smbclient from connecting with
      allow name_type 0x20 as well as name_type 0x0 in dns proxying
      give out file handles differently on each new connection because of a
      - handle ENOSPC in shmem init.
      use _exit to exit a child
      fixed a couple of illegal uses of scanf() in the nmbd wins code. They
      fixed another couple of minor type errors (they could cause incorrect
      a dummy change to shmem_sysv.c to try and break CVS out of a problem
      avoid the ~ operator in netmask operations as apparently it causes
      *** empty log message ***
      *** empty log message ***
      *** empty log message ***
      propogate my cgi changes to the main branch
      always align both the parameter and data bytes on a 4 byte boundary in
      fixed typo
      make the initial logfile names consistent. This should mean that smbd
      Jeremy is going to hate me ...
      allow for non-authenticated SWAT for demo purposes
      - remove redundent strstr()
      added Date and Expires headers in the mini web server so clients know
      added a "home" icon
      added status page to SWAT. Similar to smbstatus output but in a HTML
      report the max size of raw reads as 65536 not 65535 (this now matches
      use FSTYPE_STRING not "SAMBA" for filesystem type
      add FLAG_HIDE to "config file" option (so it can't be set in swat)
      these have been replaced by swat
      add swat to .cvsignore
      use password_ok() instead of calling crypt()
      move setup_groups() into password.c so that swat can link without
      moved cgi.c and swat.c into a source/web/ directory. Note that you
      some initial help and images files for swat
      added an install target for SWAT
      a brief description of how to install and run SWAT
      remove an unnecessary #ifdef
      fixed instructions in installswat.sh (thanks to Herb again!)
      removed a redundent return statement
      fixed support for running swat via cgi-bin
      another fix for running under cgi-bin
      updated to give instructions on running via cgi-bin
      another makeover of loadparm to support new stuff in swat and
      - added separators
      added another pathetic looking icon
      prototype updates
      if a local parameter is changed at the global level then propogate the
      added the ability to start/stop the server from SWAT.
      new files to support starting/stopping the server
      put in the longer welcome blurb
      updated blurb
      updated blurb some more
      added a background image based on Pauls SAMBA logo but manipulated a
      a smaller background
      install jpeg files
      - added the ability to kill off individual connections from SWAT (from
      safer killing of connections - it ensures the process is still a valid
      - claim the null connection after the session request to mak sure we
      updated the images
      changed the date formatting
      changed the default "keepalive" value to 300 seconds.
      changed the default MAXSTATUS from 1000 to 100000
      fixed call to execl() to get argv[0] right (thanks to Herb)
      show full path in ps by setting it in argv[0]
      - added "Full View"/"Normal View" on the "view config" page
      this isn't a big commit, it just looks like it :-)
      when CGI_LOGGING is on log the host name and IP
      oops, I got the sense of the show_defaults parameter to lp_dump()
      changed the method used for auto-reload on the status page to use
      moved the refresh script to the end of the page so that silly things
      don't set the Expires header on any page generated from a POST. This
      - added a check for broken RH5 include files. With the standard RH5
      a pointless commit to check on a problem Luke reported with CVS
      the default for old style accounts should be workstation trust
      support O_SYNC in opens for smbtorture
      if the resolve order is blank then assume "host"
      support O_SYNC at open time in files (previously we only supported it
      some hacks to the torture code
      minor reformatting of debug messages (so people don't think there is a
      fixed a memory leak in close_file(). Each time a file was opened
      improved the secret buffer generation a bit. It now uses /etc/shadow
      many systems don't have /etc/shadow but do have another system for
      much faster pstrcpy() and fstrcpy()
      changed to use slprintf() instead of sprintf() just about
      changed to use slprintf() instead of sprintf() just about
      include includes.h in all the ubiqx files. I know Chris won't like
      don't use system functions as arguments to qsort() as otherwise you
      a new slprintf() function. This one is totally portable but a bit of a
      we don't need a typedef for string
      initialise a variable
      test for overflow in nmb name parsing code
      initialise some variables (stops warning)
      fix slprintf for sunos4 in head branch
      added:
      point people at the main web site for a up to date list of mirrors
      merge from the autoconf2 branch to the main branch
      some merge cleanups
      checkin configure again in order to get permissions right
      still trying to get permissions right - CVS doesn't commit permissions changes it seems
      hopefully permissions are right now
      updated the UNIX install instructions to include ./configure
      removed some feedback request comments - we get enough email :)
      get rid of the runtime test for broken getgroups() and add a compile
      added Makefile to .cvsignore in the hope that this will prevent people
      ignore the auto-generated dummy file
      test for a broken inet_ntoa and replace it if necessary (for
      fixed a bug in the replacement inet_ntoa
      updated prototypes
      fixed a make proto bug pointed out by Chris.
      fixed sin_len test for FreeBSD
      added HAVE_FUNCTION_MACRO test
      added test for getpwanam().
      added --with-nisplus-home option
      we have to have the test for -lsocket before the test for some
      new directory structure in configure.in
      the autoconf scripts are now converted to the new directory structure
      these dummy files are needed for autoconf processing
      added ignore rules for the dummy files
      another dummy file
      removed the if statements from the DEBUG() macro definitions.
      this gets smbd compiling and linking correctly with the new layout.
      close to having nmbd linking (just a bit of repository hacking to go)
      nmbd compiles and links. I had to do some ugly stuff, putting files in
      swat compiles, with some even uglier hacks. we really have to do
      a few more things compile.
      the rest of the binaries now compile and link
      fixed the installation scripts for the new layout
      smbtorture now compiles
      moved username.c into lib/ so we no longer $(PASSDB_OBJ) in most
      split the system password checking routines out of smbd/password.c and
      moved access.c into lib/ from smbd/ as it is needed by testparm. I
      make sure that a fault cannot occur twice. The new Debug1() code is
      fixed a nasty bug in debug.c
      fixed the nested comment - Jeremy, do you want that unbecome_user() or
      define INADDR_NONE if not already defined
      remove an unused variable
      this is the bug change to using connection_struct* instead of cnum.
      moved the printing related files to a separate printing/ directory.
      some more dummy files to ignore
      use user instead of this_user to prevent global shadowing
      this checkin gets rid of the global Files[] array and makes it local
      changed find_free_file() to file_new().
      server.c: fixed a bug in close_file() with the new files.c handling code
      got rid of the Files[] array completely (previously I'd just made it
      added include of sys/resource.h
      fixed some bugs in the locking_slow code caused by the recent changes.
      - some tidying up in files.c
      I think it is pretty much decided that the next major version will be
      some cleanups from the conversion of Pipes[] to a linked list. I also
      much cleaner chain pointer handling for both files and pipes.
      converted the policy code to use a linked list and bitmap. This saves
      moved connection_struct handling code into smbd/conn.c and changed it
      reduced the memory footprint a bit by changing some large static int
      added some optimisation for the case where the number of open files is
      now that we have no global arrays we can start to split up the monster
      more splitting of server.c
      this completes the splitup of server.c.
      move soem variables from server.c that don't belong there.
      removed some of the rough edges from the splitup
      added a test for a working setresuid
      testparm now prints a warning if the lock directory doesn't have 0644
      fixed a bug in trans2_qfilepathinfo() where we used the length of the
      silly me.
      and get the message right ...
      added a macro ZERO_STRUCT() which is useful for initialising
      use ZERO_STRUCT() to initialise lots of structures.
      added new smb.conf option "panic action". see my samba-technical
      don't attempt to answer QFILEINFO/SMB_QUERY_FILE_STREAM_INFO queries -
      expanded MAX_LOOKUP_SIDS to 30 (I saw 21 in a packet)
      added ASSERT() and ASSERT_ARRAY() macros and sprinkled them liberally
      changed the default permissions code to do this:
      some smbtorture hacks (random IPC calls)
      proto changes
      note that "alternate permissions" is deprecated in man page
      added a warning when loading a parameter that is deprecated
      took all the rpc includes back out until we can work out _why_ freebsd
      get includes right for systems that use getpwanam()
      use a separate ZERO_ARRAY() macro instead of ZERO_STRUCT() for
      nmbd would core dump if a large number of netbios aliases is set. The
      don't exit on a SIGPIPE
      got rid of calls to update_protected_database(). It was causing core
      added some defensive programming to nmbd. This mostly means zeroing
      changed the size of a char array in the userdata_struct from 1 to 16
      added a function zero_free(void *, int size) that zeros an area of
      - zero shared memory before freeing it
      allow smbclient to connect to IPC$ as an IPC service
      changed the format of the wins.dat file slightly.
      don't put two spaces at the start of lines if logging to stdout
      include our netbios names list and our workgroup in the wins.dat hash
      changed the way that name query records are sorted in replies. They
      we we have successfully done a query on *<1b> from a wins server and
      This should fix the zombie problem that luke noticed.
      finished the asynchronous browse synchronisation code. It even seems
      a couple of debug lines
      added a dest_port parameter to send_mailslot() so we send replies to
      bounds check next_token() to prevent possible buffer overflows
      cast the qsort to prevent warnings
      set a maximum name refresh time of 20 minutes.
      updated the WHATSNEW in preparation for an alpha release
      fixed a comment
      I realised that my DMB<->DMB sync code has the property that the
      if an address is ipzero in cli_connect() then do a name query
      minor fixes to the DMB<->DMB sync code. We now get the dmb name from
      I looked at the refresh issue a bit more and discovered that Samba
      check that a valid pipe is passed before doing a pipe close.
      fixed a bug in the base64 hanlding that led to auth failures for some
      spruced up SWAT a bit - it now uses the new Samba logo at the top and
      need to istall new files
      Matthew is no longer wokring on SWAT
      use /swat/ prefix in both inetd and cgi modes, to enable a static header.html
      changed ref to samba.gif to use /swat/ prefix
      we are never interested in SIGPIPE so just ignore (block) it
      fixed a bug in the name mangling code. It implicitly assumed that
      we were setting the strings 1 too long in make_srv_share_info1_str()
      changed the SMBtrans reply code to align at the same alignment as
      got rid of interpret_security(). Thanks to Jean-Francois for pointing
      tridge the destroyer returns!
      ahh, the joy of deleting large chunks of code that someone else has
      some people are foolishly running ./configure from other than the
      some cleanups to use ZERO_STRUCT() and friends
      expand the sysv shmem test to look for semaphores as well as shared
      added a configuration summary at the end of ./configure. It also
      fixed a stat cache bug (the one found by Matthew Geier).
      add a "stat cache" boolean smb.conf option. (defaults to on)
      fixed a bug in the wins database writer that caused the database to be
      fixed a potential problem with wins_write_database() child processes.
      fixed a typo in my last commit
      fixed the nmbd fork bomb. It was a silly mistake, as
      fixed another potential fork bomb where the wins file becomes
      got rid of some #ifdef LARGE_XXXX stuff and got rid of non-portable LL
      fixed a usage of off_t that should have been SMB_OFF_T
      removed another use of the LL suffix. Hopefully this is the last one
      fixed a typo (LLARGE_SMB_OFF_T instead of LARGE_SMB_OFF_T)
      added a SMB_OFF_T_BITS define, allowing us to get rid of most of the
      gto ri of a bunch more #ifdef LARGE_SMB_OFF_T checks by introducing a
      got rid of SMB_STRUCT_STATVFS. I don't think we should be defining
      oops ... I got the filenames wrong in my cleanup of the wins database
      add a define for SMB_SEARCH_BITS and change comment on FSTYPE_STRING
      added a per-share parameter "fstype" that allows you to select the
      3 changes:
      lp_fstype() proto
      look at the CAP_NT_SMBS bit in the client capabilities to determine if
      some changes to the autoconf support
      automatically detect changes in the system type and exit, telling
      I've disabled the conversion of null filenames to "." until we solve
      changed the default filesystem type to NTFS (from Samba)
      fixed the docs for "domain controller" parameter.
      made bad boolean values stand out a little better
      got rid of the memcpy() prototype and used includes.h instead.
      set the default fstype for IPC$ to "IPC". I'm not sure if this will
      got rid of USE_FILES_ARRAY code (it was unused)
      makefile support for smbwrapper
      a couple of mode for smbwrapper
      use sys_stat() not file_exist() for codepages. (we don't want dos
      added sys_getwd()
      several clientgen mods to support smbwrapper. In particular added
      the guts of the smbwrapper code. I may change the layout of this at
      some changes in smbtorture as a result of clientgen interface changes
      added capabilities ab win95 fields to client structure. Used for
      - remove .p files in make clean
      updated prototypes
      - ignore *.p files
      - ignore *.p files
      - ignore *.p files
      lots of improvements to smbwrapper. It now works with Samba, Win95 and
      ignore *.p files
      added unlink() and rename() support to smbwrapper
      added basic chmod(), chown() and utime() support (not fully
      added lseek
      define O_ACCMODE if not defined
      updated prototypes
      - always open for reading (otherwise getattrE won't work).
      use O_ACCMODE
      added lseek() to smbwrapper
      fixed a bug in name_len() (thanks to kooros at kooros.netrack.net)
      added lseek() support for directories
      added a bit more to the docs
      added simple device/inode number support based on a checksum of the
      added mkdir() and rmdir() support
      support getcwd() in smbwrapper
      fixed wrapper for access(). This gets xedit working.
      fixed vi on smbwrappper (it was a problem in cli_read())
      added fchdir() support
      don't call functions that aren't there yet. (Luke had the code
      fixed initialisation bug in rpcclient (stdout is not a constant)
      fixed a authentication problem with non-encrypting servers
      drat.
      use __XXXdir() instead of __libc_XXXdir()
      we need to do a load_interfaces() at startup to support broadcast
      simplied the layout of the smbwrapper code. All those 3 line files
      use const char
      support a few more function types (like ino_t and off_t)
      - split smbw directory code into smbw_dir.c
      more smbw cleanups.
      use dummy file descriptors opened on /dev/null to ensure that the smbw
      modified cli_read() and cli_write() to issue multiple outstanding
      fix an error code in cli_error()
      refuse symlinks to or from a smb path
      set a default 16k client buffer size
      use CLI_BUFFER_SIZE instead of BUFFER_SIZE
      add support for dup() and dup2()
      added support for printing via smbwrapper
      add support for unlink() on printer shares in smbwrapper. unlink()
      use *SMBSERVER convention in smbwrapper to allow us to connect to
      support using #xx at end of netbios name to connect to the specified name type
      support NetServerEnum in smbwrapper. You can now do a ls in /smb/ and
      - modified resolve_name() to take a name_type
      started basic support for solaris 2.5 in smbwrapper.
      don't list the IPC$ share in directory listings (it causes infinite
      fixed some stuff for Linux that porting to Solaris broke
      warn user if LIBDIR isn't set right
      ignore .po files
      more solaris 2.5 fixups. It now seems to be working pretty well.
      drat. We can't include sys/fcntl.h because that gives
      we need to use __readdir() in preference to SYS_readdir for systems
      don't define creat() under linux until we get the CREAT_BITS stuff
      some tests for stat64() and friends
      reran autoconf
      tests for readdir64
      this gets smbwrapper working under Solaris 2.6. Not tested much yet.
      added a function set_maxfiles() to set our file rlimit to the max
      added pread pread64 pwrite pwrite64 and open64
      - added pread pread64 pwrite pwrite64 and open64
      handle ENOTDIR errno in cli_error()
      removed requirement of having a smb.conf for smbwrapper to work.
      it's a bit dangerous to use rm -rf
      test for loff_t and offset_t to support llseek() on Solaris and Linux.
      get type of callback right
      updated README
      got rid of all assembly code and gcc special features. I'm hoping to
      need to use SYS_open64 not _open64 for solaris 2.6 or stdio doesn't
      IRIX uses -shared for shared libray creation.
      new file realcalls.c
      fixed typo in getgroups code
      ported smbwrapper to SunOS4. It seems to work. pity so many binaries on
      handle systems that are missing either SYS_utime or SYS_utimes
      test for creat64()
      this gets it compiling under IRIX 6.4. Doesn't work yet though.
      fixed Makefile for IRIX make (it doesn't know %.o=%.po, leaving off
      got smbwrapper working on IRIX 6.4. Things got a bit tricky,
      reran autoconf for IRIX changes
      fixed a cast warning
      new prototypes
      - fixed cast warnings
      fixed some cast warnings from "cc -64" on IRIX
      ignore *.po32 files
      - keep IRIX cc -64 happy
      - fixed errno return in smbw_open()
      the IRIX make is very fussy amount comment lines. If a comment line
      tell the user we are producing -32 code for the .32.so library
      clean needs to delete po32 and .so files
      set HOST_OS after canonical system test
      use smbw_errno() not smbw_error()
      remove unused arguments from some static functions.
      removed unused variable
      added SMBW_PREFIX environment variable (allowing you to specify root
      implemented attribute mapping and chmod. file attributes are mapped in
      fixed a bug in time setting (utime() call)
      added a wrapper for fork()
      implemented unix semantics for rename in smbwrapper
      fixed rename error code from NT servers
      do an anonymous login if the username/password is rejected.
      put #if BROKEN_CODE around all the bits of code in rpc_parse.c that
      somehow "in_client" got included twice in two places.
      added some comments
      added a document on how to port smbwrapper to a new system
      some changes for OSF1 support in smbwrapper (just preliminary changes,
      fixed a bug in real_seekdir()
      fix typo
      reran autoconf
      - no getdents on OSF1
      test whether seekdir() returns void or not
      more OSF1 changes as well as changes to allow us to use the standard
      won't need wrapper.h anymore
      possibly use __sys_llseek()
      detect __sys_llseek()
      fix the SEEKDIR_RETURNS_VOID test
      not needed any more
      yet another attempt at making this stuff portable. This time I use
      return type cleanups for IRIX
      remoevd a misplaced comma
      fixed __xstat() under linux
      fixed facl() bug for solaris
      - updated docs to say OSF1 works
      more solaris acl fixes
      fixed fork() on SunOS4
      use double for dummy arrays to ensure alignment
      fixed a warning on SunOS
      SunOS doesn't need any ld flags
      we need realcalls.h in realcalls.c
      restore errno after smbw initialisation
      compile to .po.o first then mv to .po in order to make the sun
      don't prototype the acl() functions
      removed lukes acl check in configure (not needed)
      added some comments
      fixed a problem with fchdir() that broke "cvs -d" in smbsh
      use 1 second resolution calls if possible
      auto-detect the right flag for the compiler to produce PIC code
      removed extra comma (some compilers don't like it).
      add "smbtorture" alias for building smbtorture
      - fixed a bunch of warnings and minor errors
      - don't generate 0 params in torture
      fixed a warning
      really fixed the warning this time :)
      fixed a bug in the readline support
      fixed bug pointed out by Herb.
      made smbsh a standard binary
      smbsh launch program is now in C
      use level 0 for DEBUG() of malformed password entry in smbpasswd
      set recursion desired for bcast name query
      use the username GUEST if no other username is available
      - use large buffers for netshareenum
      only do the MAC extensions if we are a NTFS filesystem
      changed some debug levels
      added maxfid test
      add an option to enable/disable nt pipes
      check for lp_nt_pipe_support() in open calls
      redid proto.h
      - added smbrapper/shared.o
      - don't use env variables for passwords and usernames (yeah!)
      removed an incorrect comment
      return the resolved IP on a cli_connect() call so it can be cached
      prototype new functions
      improved session reestablishment
      added command line options to smbsh
      removed my badly-done attempt at handling compilers that don't handle
      add -Bshareable for *bsd*
      fixes for solaris
      new prorotypes
      removed setenv(), replaced with smbw_setenv()
      fixed a connection bug in torture test
      use putenv() more portably
      oops, I ot the return type of putenv() wrong
      at the interop Isaac (at least I _think_ it was Isaac) said that if a
      make the shared variable stuff slightly more sophisticated
      fixed problems with PWD - we no longer use the PWD env variable
      don't use SMBW_PWD_ENV any more
      don't enable smbsh/smbwrapper on systems where we can't work out how
      make sure that apps can't close one of the internal smbw file
      volker was concerned about unique inode numbers and smbsh. This set of
      handle the case of an intermediate binary not loading smbwrapper.so
      fix for John.
      added a couple more error codes to cli_error()
      report ourselves as HTTP/1.0 not HTTP/1.1
      added a vsnprintf() implementation from cvslock. See the notes on the
      add ifdef for "long double"
      fixed handling of %.0f in replacement snprintf.c
      use abort() instead of exit() in smb_panic()
      fixed problem with snprintf.c and mkproto
      yet another person asked me where the name Samba came from, so I put
      added copyright notice from Patrick Powell
      took out Lukes change as it breaks domain logons for Win95 clients
      don't core dump in smbstatus if we can't open the shmem system
      check return value of locking_init()
      don't bother trying QFILEINFO/QUERY_FILE_ALL_INFO with win95 as it
      converted smbclient to use clientgen.c rather than clientutil.c
      I talked to Dave Miller and he thinks that we should have TCP_NODELAY
      changed is_root() to am_root() to prevent clash with variable names.
      largely rewrote smbpasswd so that the code is understandable. This
      char -> uchar fix
      extracted the password change code from smbpasswd and used it in swat
      fixed demo mode
      show all buttons in demo mode
      handle null usernames
      remove my name from welcome page so I don't get mail about it.
      please remember to check that code compiles before checkin!
      changed the fonts in the images a bit to be readable at a higher
      no longer needed
      we don't have any jpeg images any more
      %\ is an interesting printf argument, but I prefer %s
      fixed compile for FreeBSD
      fixes for OSF1 compilation
      reverted includes change for FreeBSD as it breaks IRIX
      removed information on installing via cgi
      remove code that allows installation via cgi
      allow all user to view the config
      - new prototypes
      prompt for password on smbclient -L
      - handle servers that don't support getattrE (ie. NT)
      fixed setmode in smbclient
      automatically uppercase server and share names (win95 won't handle
      support.txt is now maintained solely on the web pages
      compile with optimisation by default on all compilers
      change ROUNDUP to SMB_ROUNDUP to prevent conflicts with system macros
      fixed lmhosts parsing. We were using sizeof(name) where name was char*
      use bindir not sbindir in Makefile to ensure that we don't break
      formatting change
      add a error code when failed to get lock
      try to use *SMBSERVER to connect to password server if the first
      make SWAT obey the global "hosts allow" and "hosts deny" settings.
      global change from samba.anu.edu.au to samba.org
      use http://samba.org/ not http://samba.org/samba/
      deleted some old DEBUG() code that wasn't used
      changed string_sub() to replace " ; and ` in the inserted string with _
      replace ' with _ as well
      updated SWAT README to remove cgi-bin instructions
      got rid of a dangerous message command example
      re-ran yodl
      install all html docs in yodl help directory
      better layout of password options.
      - removed smb.conf.5.html as it now comes as part of htmldocs
      make the help links appear in a separate window, so you can read the
      don't allow ".." in service name when doing "default service"
      removed include of net/route.h because it prevents compilation under
      replaced the icons in SWAT with real icons
      fixed pidfile handling to check for a lock on the file, so we can be
      oops - lock test was the wrong way around
      fixed a link to testparm.1.html
      fixed warnings (and potential errors) due to integer overflow when
      removed the SID stuff from the head branch as well.
      on Linux force fcntl/mmap based shared memory and on other systems
      and in head branch:
      Ken McDonell from SGI was interested in adding some profiling
      new files needed by profiling code
      damn, new files need to be added to the head branch first, I've told
      fixed a typo
      open_socket_in() takes a different number of parameters in the head
      use /dev/urandom not /dev/random in head branch.
      first pass at updating head branch to be to be the same as the SAMBA_2_0 branch
      2nd phase of head branch sync with SAMBA_2_0 - this delets all the files that were in the head branch but weren't in SAMBA_2_0
      util_sec.c from 2.0.6
      interfaces.c from 2.0.6
      interfaces.h from 2.0.6
      printing/print_cups.c from 2.0.6
      lib/fnmatch.c from 2.0.6
      client/smbspool.c from 2.0.6
      update version to pre-3.0.0
      more files from 2.0.6
      added basic nsswitch support - this allows you to use a "wins" entry
      first pass at the database code for Samba. This also includes a test
      this was left out from the 2.0.6 merge
      first cut at using the tdb code for the connections structure, the
      converted all our existing shared memory code to use a tdb database
      changed message is connections.tdb doesn't exist
      changed %g to %3.1f to be friendly to our poor snprintf() code
      expanded the tdb documentation
      when no shares are returned the *shares pointer must be set to null
      added some paranoia code
      fixed a bug in the handling of tdb version number upgrade
      improved error message in case the lock list is truncated
      fixed locking code
      fixed more locking bugs - all seems OK now
      a useful locking tester - it uses lots of simultaneous writers
      - optimise tdb_store() a little
      show test result in ops/sec
      - added tdb_flags option to tdb_open()
      updated docs
      don't close the database after each claim_connection()
      fixed active shares display
      drop the alignment to 4 bytes - this makes tdb more space efficient
      added the unexpected packet database (unexpected.tdb)
      the bulk of the unexpected packet handling code is in here
      got rid of mem_man
      ignore a few files
      added suppport for unexpected udp/138 packets
      use a minimal hash size in the unexpected packet database. A large
      lower the default hash size a bit
      implemented talloc() as described on samba-technical. This fixes the
      - patch from Rusty to neaten up the code a bit
      don't require readline
      don't use strcpy
      this looks like a big commit, but it isn't really :)
      added "netbios scope" docs
      remove scope parameter here too
      always restart nmbd and smbd when asked, even if they appear not to be
      netbios scope is a DOS_STRING
      the -i options are gone from nmbd and smbd - use the smb.conf
      fixed a comment
      improved the error checking
      added a DENY test that tests deny mode handling. It produces a matrix
      cli_open() wasn't handling DENY_FCB or O_WRONLY correctly.
      fix a error in access_table revealed by the new deny test in smbtorture. We now exactly match NT for normal files. We still don't match for *.exe files though
      extent smbtorture to test with both an exe file and a dat file
      don't treat a packet as a oplock break unless it is a request, not a
      I'm currently designing a new locking system (using a tdb database!)
      added locking/brlock.c, a byte range locking system
      defined br_off as a type for byte range offsets. For now I've set it
      new prototypes
      added Enosuchshare and a lock_type enum
      the lock routines now take a enumerated type for read/write locks, and
      the bulk of the new byte range locking coode
      changes to reflect the new syntax of the locking calls.
      greatly expanded the lock4 locking test. we now pass all but one test
      some more work on the byte range locking
      we now pass all byte range locking tests
      damn, Solaris already has a "enum lock_type"
      casts and defines to make solaris happy
      make a br_off a SMB_BIG_UINT
      make string_init() static
      fixed a formatting error
      added code to allow traversal of the byte range lock database
      use string_set() instead of string_init()
      rewrote the access_table() code to get it right for *.exe, *.dll,
      a consequence of the access_table() fixes is that we can't treat
      proto update
      use GET_DENY_MODE() macro instead of the bit shift
      as obelix would say "these romans are crazy"
      use GET_DENY_MODE() macro
      renamed DENY to DENY1
      made access_table() a pure logic function - makes it simpler to apply
      fixed some typos in access_table() which, amaziingly enough, make no
      we need -lc when making shared objects or glibc doesn't do its magic
      added masktest to head branch, in preparation for another assault on
      update masktest for new make_nmb_name() syntax
      the beginnings of a fnmatch() based wildcard matching routine
      damn, masktest now needs the mangle code from smbd
      load smb.conf and interfaces in masktest (to allow for netbios name
      merge from tng ...
      when doing a "secure nbns" wack response and check with owner for a
      fixed the hanlding of recursion desired when sending packets from
      the final part of the nmbd merge between head and tng - this gets the
      changed the definition of dos_PutUniCode
      damn, the test was the wrong way around for short_resuest
      I finally got sick of configure being run automaticaly when I run make
      utmp compile fix from peter at cadcamlab.org
      don't echo warning messages twice
      split out the lpq parsing code into a separate file
      removed the read prediction code from the head branch. I think the
      got rid of the file_fd_struct structure completely.
      the first of a bunch of changes to code with getting rid of the fd_ptr
      rather than doing print file open processing in open.c we now handle
      the bulk of the changes to get rid of fd_ptr and move print open
      new prototypes
      initialise fsp->fd to -1
      two minor bugfixes for SCO UnixWare. The first is to catch SIGPIPE so that putmsg() inside their send() doesn't kill swat and the scond is to open /dev/null to replace stdin after we close that
      added a cheap and nasty skip_unibuf() fn to allow easier merging from
      finally got sick of the "extern int Client" code and the stupid
      new prototypes
      some updates to the process logon code to reflect lukes latest
      add an align4() function
      add a comment
      prototypes
      use interpret_addr2() instead of inet_aton()
      use open() not fopen() on codepage files.
      a quick hack to reduce the size of the unicode map table headers from
      don't need this monster any more
      use macros for table boundaries
      added standard_sub_snum() function for modules that don't have
      The following series of commits are for the new tdb based printing
      the fsp needs a jobid in it now
      the new file_lines_load() and file_lines_free() routines. Very useful!
      the bulk of the changes. Also split the loadparm related code into printing/load.c
      JF and Jeremy - please have a look at what I did to the spoolss
      the changes to the main smb code
      added tdb_get_int() and tdb_store_int()
      - put the job status in english not french!
      added helper fns to change from internal status codes to nt spoolss codes
      use some symbolic names for print queue status
      improved the error handling and added queue pause and resume
      removed old comments
      added fdprintf()
      got rid of all the FILE* calls in the NT print system.
      got rid of FILE* in the unix name mapping code
      converted a bunch more functions to use a fd instead of a FILE*
      converted a couple more functions to use a fd instead of a FILE*
      moved standard_sub() and friends into a separate module
      removed some obsolete configure tests (sysv ipc etc)
      got rid of some more old configure tests and includes
      fixed some crash bugs in the nt forms parsing
      don't parse blank lines
      updates from the TNG branch
      - got rid of the "passive" option
      patch from luke to split out lanman code from ipc.c into lanman.c
      split fsusage() into a separate module (to fix linking problems with
      use sys_fsusage() not disk_free() in printing.c
      fixed uninitialised snum
      fixed overlapping strcpy() found by insure
      don't copy a null groups list
      return NULL for a zero size memdup
      if using insure then don't close fd 2
      fixed a prs memory leak (weren't freeing input buffer)
      avoided a memory leak in the ubi code by deleting a mangled cache
      insure caught an uninitialised memory reference - ensure it starts as
      trick to get full stack trace when using the free version of insure
      fixed two uninitialised memory references
      split fsp specific routines out of printing.c to fix linking problem
      Makefile.in change for split of printfsp.c
      check for a valid snum when running a printing command
      we can't pass a fstring to a routine expecting a pstring
      split out standard_sub_basic() again to fix a bug where %p was being
      fixed a memory leak I caused last week with my lines[] changes
      fixed another spoolss memory leak
      another fstring/pstring fix
      don't close high fd's in smbrun when using insure (prevents closing
      fixed a locking database bug - it was actually harmless except that
      more pstring/fstring errors found by insure
      moved the INSURE hook into util.c
      fixed a parameter bug found by insure
      fixed another memory leak
      moved INSURE hook into util.c
      use an size_t not a ssize_t when checking for out of bounds errors
      dump in a binary format
      don't qsort a list less than 2 entries
      fixed a memory leak of devmode in spoolss
      fixed a memory leak in nmblookup
      added TDB_MODIFY flag - patch from from luke
      split clientgen.c into several parts
      moved trans2.h and nterr.h into includes.h with all our other includes
      quick hack to get smbtorture working again
      put tdb utility functions in a separate file
      YIPEE!!!!!
      - removed all our old wildcard matching code and replaced it with a
      changed masktest to test the internal algorithm against one server,
      we don't need fnmatch.c any more
      some cleanups
      added cli_list_old() to allow for old style directory listing from
      - get the findclose code right
      fix handing of ascii_to_unistr
      fixed our smbsearch code. We now store the mask with the dptr, this
      go back to ascii in SMB_FIND_FILE_BOTH_DIRECTORY_INFO
      removed more cruft from our old wildcard matching code
      handle the special rule of *.* for old style listings when old_list is
      fixed parsing of broken NT short name
      fixed dptr_wcard handling (need to use strdup)
      - added some error checking
      added TDB_INTERNAL, TDB_NOLOCK and TDB_NOMMAP flags.
      fixed typo
      allow a DEFAULT_PRINTING to be specified in CFLAGS
      handle tabs in printcap files
      fixed a memory leak
      fixed a memory leak (calling hash_table_init twice)
      and yet another memory leak - this one in the client
      split the username in the vuser structure into a separate
      added support for deleting printers into the spoolss system
      added a nasty lock testing program
      - clear dead locks at startup
      improved the lock test program
      added ability to present lock tests
      fixed a uninit memory read that insure found
      found a much simpler case that kills the posix locking
      added -A analyze mode to locktest - it can now automatically prune
      if the stat cache is off then don't initialise it
      fixed message text
      more locktest improvements
      need LOCKING_OBJ in locktest now
      - use full_name instead of real_name
      an even simpler example of NT gettings its locking code wrong. This
      added a test for the NT byte range lock into smbtorture
      parameterize the lock timeout
      a minimal change to get appliance mode to work with winbindd
      example of broken posix lock behaviour
      nasty hack to print posix locks
      make debug easier to read
      make debug easier to read
      signed/unsigned fixes so we can handle a lock base close to 2^32
      fixed a vfs crash bug
      added winbindd options in head branch, so it is possible to combine
      added secrets.tdb and changed storage of trust account password to use
      the beginnings of a description of how to setup a Samba appliance
      added some rules for winbindd and pam_winbind
      brought the winbindd code into head
      brought across some rpc header files from tng
      don't attempt to build rpcclient in the head branch
      the beginnings of a new scheme I've working on to allow an easier
      fixed some winbind cache bugs
      - use smb_gwtpwnam() in another couple of places
      - add some reserved space to every tdb, this will be
      more merging
      more merging voodoo
      patch from Dominik Kubla <dominik.kubla at uni-mainz.de>
      remove autoloaded printers that are no longer in /etc/printcap when we
      formatting fix
      I found a better way of handling deleted auto printers
      fail a print start on a deleted auto printer
      check for sighup on each packet - otherwise it can take a _long_ time
      proto rebuild
      when creating the database zero the reserved space
      treat a blank "password server =" line as a "*" if in domain security
      in head as well ...
      updated appliance Makefile
      - changed smb_getpwnam() to use winbind style usernames
      an imcompatible tdb format change (sorry!)
      updated the appliance README
      use our primary domain trust account for trusted domain authentication
      add winbind manual in SWAT welcome page
      use gcc not insure by default in tdb build
      fixed a problem with appliance operation
      fixed a typo
      added winbindd man page to spec file
      don't install winbind man page twice
      fixed error code for buffer_too_large in trans reply
      exclude CVS files from rpm build
      fixed tar command line
      added packaging section to README
      updated appliance Makefile
      build in /usr/src/redhat
      use "winbind separator" in tng as well
      compile with -O2
      use "winbind separator" option for domain/user separator character
      fixed two uninitialised variables
      - added example config section to winbindd man page
      added spool_io_printer_driver_info_level_6()
      changed uniarray_2_ascarray to uniarray_2_dosarray
      rebuilt proto
      this is a awk based code generator. Very primitive at the moment, but
      preliminary support for unions
      renamed the harness program to vluke (for "virtual luke")
      removed old files ready for new awk parser
      vastly improved awk based code generator
      moved *.tpl templates into templates/ subdirectory
      add uint16 support, start to parse more of spoolss
      make prs_dump() store up to 100 variants of each msg type
      add prs_dump() at the top level rpc switch
      added grow_size to prs structure
      use grow_size to determine size of dump
      align at the end of every structure parser
      need to allocate the union pointer
      addd grow_size to prs_struct so we know how much data is actually in
      update grow_size in prs_grow
      don't call prs_dump() here
      call prs_dump() on every input and output packet so we have plenty of
      started update to handle arbitrary arrays
      another awk parser update
      added the ".trailer" type, to mark where a packet turns into a trailer
      take the sructure name to run through vluke on the command line
      the vluke program now takes a structure name on the command line
      a useful script, just go "./build foo.struct" and you get a full
      minor parse updates
      - added typedefs
      added primitive define macros
      started converting matty's srvsvc.idl to a .struct file
      error check in vluke.c
      more aparser stuff - we now handle everything but the idl headers in srvsvc.idl
      use lp_workgroup()
      use lp_workgroup()
      use \\ in front of filenames
      a fairly big change in spoolss.
      a fairly big change in spoolss.
      a fairly big change in spoolss.
      got rid of lp_revalidate()
      added tdb_pack() and tdb_unpack()
      added -u hide_unlock_fails option
      we don't do "revalidate = yes" any more
      new prototypes
      removed lp_revalidate()
      minor fixes
      move srandom to after connect so random stuff in clientgen doesn't
      fixed bugs in fdpass tests
      fixed call of firstkey/nextkey to traverse driver database
      fixed return from nt_printing_init()
      getting and setting security descriptors on printers now works
      fixed a couple of bugs in the driver return code
      fixed return error code that had 0xC with not enough zeros
      don't free a driver structure from the stack!
      don't build cli_reg in rpc client library until we merge that from tng
      init_unistr takes a const 2nd arg
      updated proto.h
      don't return a passwd struct for usernames that don't
      fixed some more crashes
      if the tdb stored driver isn't formatted right then return a default
      moved secrets handling into secrets.c
      added %J and %T to run_print_command()
      moved secrets fns into secrets.c
      moved secrets fns into secrets.c
      fixed some ptr declarations
      new protos
      someone forgot a !
      added a MANGLE_DRIVER_PATH define to chooose whether we stuff with the
      fixed the pack/unpack of the devicemode
      added some debug code to track down pack/unpack problems
      some printer parameters are getting corrupted, possibly by the client
      sec_desc_size() needs to handle a null secdesc
      no space was being reserved for the security descriptor in the parse
      we no longer need the code to cope with setprinter having corrupted
      added -O (use oplocks) option to locktest
      fixed a off by one bug in ntforms read from the database
      added locktest2
      don't ue nasty /proc/locks hack by default
      simple increment bug in uniarray_2_dosarray
      fixed!!
      fixed sizeof() typo
      - changed HAVE_KERNEL_OPLOCKS to HAVE_KERNEL_OPLOCKS_IRIX
      started adding support for relative, plus options for autoalignment
      split some of the irix kernel oplocks code into a function
      some templates needed for the new aparser stuff
      the Linux F_GETLEASE value has changed
      clean up oplock capability code ready for Linux code
      continued the split of the kernel level oplocks code into a more
      continued the split of the kernel level oplocks code into a more
      a first pass at Linux kernel oplocks support
      Linux kernel oplocks now seem to work, but need a _lot_ of testing
      fixed Linux capabilities handling
      a better test for oplocks being enabled in this kernel
      split all the change notify code out into a separate module
      fixed comments at top of module
      fixed a bug in BlockSignals() for systems that don't have
      totally rewrote the async signal, notification and oplock notification
      enable the Linux change notify code and change some notify debug code
      forgot to checkin select.c
      always use the DN_CREATE mask (NT expects file creation always to
      fixed the change notify bit definitions
      use DN_ATTRIB kernel change notify attribute
      added -L switch to tell smbtorture to use oplocks
      add some brackets
      allow posix locking database to be opened read-only (for smbstatus)
      allow for lots of connections per server
      argv parsing fixes
      proto update
      fixed autoconf test for kernel change notify support
      allow the notify implementation to choose the select timeout change
      add -d debuglevel option
      added support for kernel level share modes. These are a (small) hack,
      open files with O_NONBLOCK when available. This is necessary to
      use the right MMAP flag
      - use read locks when possible
      support both read and write locks inside the tdb
      reverted lukes changes in param/
      fixed two minor bugs in new sys_select()
      fixed size alignment in talloc
      slightly saner defaults
      simpler configure test
      got smbw to compile again on Linux
      added -L option
      wrote a little sample smbw program
      don't need shmem any more
      the smbw sample prog
      new protos
      if the sids are not the same pointer and either of the sids are NULL
      fixed help string
      added printer admin option
      add printer admin docs
      got error code right for printer update/add failure
      - fixed the %U macro so that the old (and documented) semantics work
      arrgh.
      made reopen_logs() always re-open logs, not try and be smart about not
      yipee!
      fixed "admin users" option with new security code
      make sure a couple of variables are initialised
      the first cut of the internal messaging system.
      a simple test program I use to test the debug message system
      debug messages now work for nmbd
      much nicer message interface. We now register dispatch functions,
      we should not lowercase the username we receive in
      - changed the msg_type to be an int instead of an enum so that it is
      - fixed some memory leaks in the messages code
      fixed a race in the pipe() setup in sys_select()
      first cut at smbcontrol program. It currently allows syntax like:
      don't show equivalent enum options in swat
      added cli_lock64() and cli_unlock64()
      fixed a harmess mixup of bitops and a boolean
      use the 64 bit locking interface in locktest
      added a hack to get 64 bit locking working with the broken fcntl()
      new prototypes
      don't use gets() !
      added tdb_lock_bystring() and tdb_unlock_bystring()
      got rid of tdb_writelock() and instead lock a chain. tdb_writelock()
      an attempt to get the handling of fields in printer info structures
      use process_exists() not kill(pid, 0)
      the duplicate checking code will cause unaligned accesses on non-intel
      save and restore errno in select
      support smbcontrol sending messages to itself (for testing purposes)
      fixed the problem with messages not getting through
      we don't need the separate lp_status() connection records any more
      fixed a potential locking deadlock in tdb
      fixed messaging bug - use strlen() instead of sizeof() in key length
      change the split threahold for the free list to prevent freelist
      split the RPC_PARSE object into two pieces. The first is included as
      - added client support for nttrans calls
      a prootype program for querying/setting a security decsriptor on a
      new proto
      make sure we don't duplicate object files
      added basic ability to dump remote file acls
      getting/setting acls now works. The SIDs are still numeric, the next
      - better parsing
      changed an error message
      cleaner parsing and default handling
      new protos
      - added help
      - with -D only delete first match
      fixed SACL bug
      no longer pass the type to make_sec_desc(), instead the type is
      new proto
      fixed acls set bug
      c++ style comments are NOT allowed
      signed/unsigned warning fixed
      in cli_session_setup() accept usernames of the form DOMAIN/USER or
      document -U change
      removed SACL support (as it doesn't work with w2k if you ask for
      fixed indentation
      fixed setting ACLs on directories
      pass the desired access into cli_nt_create()
      fixed the parsing again and got setting acls working with w2k
      added a comment
      fixed a typo
      exposed the broadcast name resolution routine outside namequery.c
      added support for browsing the list of workgroups at the top level in
      new prototypes
      first version
      This commit was generated by cvs2svn to compensate for changes in r2,
      - fixed FlattenHash bug
      added a comment
      fixed help
      added header generation
      beginnings of the C parser generator
      changed auto-generated comment for headers
      implemented a much nicer name_status() interface. It now returns a
      removed unnecessary process_exists() call in message_send_pid()
      fixed pipe in smb.conf description
      reverted *.* patch until someone explains to me what the test case is
      initial client side unicode support (needed for netapp filer)
      pipe opening now works with unicode
      playing with CAP_NT_SMBS
      optimise by default
      setup workgroup when found
      up the debug level of the debug level change msg
      converted cli_mkdir()
      converted cli_list()
      converted cli_chkpath()
      converted cli_open()
      - neater setting of bcc
      converted nt_create and setatr
      converted a bunch more fns
      yipee! client unicode now works well with nt
      don't need _uni hack now
      added support for a CLISTR_ASCII flag so we can use a uniform
      reverted richards cli_NetServerEnum changes - they broke lots of things
      the unicode conversion of our client code is complete enough to be
      fixed a crash bug in smbpasswd
      converted the last couple of functions in libsmb to be unicode
      make ascii_to_unistr always use little-endian. This fn is never used
      rpc_parse_samr.c doesn't exist in head ...
      but it is needed for linking ...
      cope better with broken filer expectations
      make sure we don't free non-allocated data
      cope with filer/NT/samba all in one binary. yeah.
      - workaround filer lsa lookup bug for unknown sids
      fixed character set init in smbw_sample
      don't crash on null acl sort
      - fixed the sort_acl bug, sorting now works right
      cast the qsort
      make sure denied aces are first
      the -m option to the client is back
      neater negprot code using the new cli_setup_bcc() call
      use cli_list_old() when negotiating the older protocols
      a snapshot of my attempts to get wildcard matching right for LANMAN1
      add cli_list_new() for forced new protocol listing
      fixed a bug in non-terminated unicode strings with clistr_pull()
      made some progress in masktest
      updated prototypes
      made some LANMAN1 wildcard progress
      I have now found that despite initial appearences the lanman1 wildcard
      almost there with lanman1 wildcards. We now seem to correctly handle
      remove some test code
      better handling of '.'
      to use the same macros in the client and server rename the CLISTR_
      started support for unicode on the wire in smbd. Using a very similar
      converted reply_open, reply_open_and_x and reply_fclose
      this patch does a number of things:
      converted findnext to unicode
      - convert chkpath
      added STR_ASCII flag to srvstr_pull()
      converted a bunch more server functions to unicode
      converted reply_tcon()
      simpler and more correct srvstr_push()
      converted a bunch more fns to unicode
      fixed srvstr_push() call
      converted a bunch more trans2 calls for unicode. This got quite tricky :(
      converted the smb messaging code to unicode
      simpler clistr interface which handles individual packets having
      don't need srvstr_push_size or srvstr_pull_size
      enable unicode on the wire by default in smbd
      added STR_ASCII support to clistr_pull()
      converted reply_search
      converted reply_printqueue
      converted the nttrans code to unicode on the wire
      finished the conversion to unicode of the last of the trans2 fns
      fixed volume_name(). It used dos_to_unix() which uses a static buffer,
      don't need to force unicode strings in flg2 anymore
      removed useless debug msg
      ADMIN$ is an IPC share, not a disk share
      fix this in rpc calls as well
      much better readline support from Simo Sorce, with some mods from me
      fixed some compilation errors with IRIX cc
      much simpler readline code
      fixed unused variable
      added basic command completion support
      fixed rpcclient readline code
      added option "enhanced browsing"
      added "enhanced browsing" option docs
      latest attempt at lanman1 wildcard matching
      added -E option (for exit on errors)
      a much simpler talloc() implementation. This version has the following
      started converting some of the only-ascii code to use srvstr_*
      test commit for jeremy
      hide unreadable patch from idra
      merge from 2.2
      new files for head
      merge from 2_2
      merging from 2.2 to head
      a couple of minor merges from 2_2
      merge from 2_2
      merge some of the nsswitch code from tng to head
      added solaris wrapper from tng
      fixed typo
      added test for C99 compliant vsnprintf
      added much better snprintf code, plus new function asprintf
      C99 test for snprintf
      got asprintf defn right
      added asprintf test
      use asprintf for hideunreadable option
      - added test for vasprintf
      don't need slprintf.c any more
      - fixed some compiler warnings
      fixed %u/%U example
      make clean should remove PROGS
      fixed comment-in-comment
      fixed some uninitialised variables
      added more complete C99 snprintf test
      added error msgs to fcntl_lock test
      added sys/wait.h to fcntl_lock test
      use O_EXCL for fcntl_lock.c test in case some fool runs on /tmp
      merge from 2.2
      clearer tdb_mmap code
      add an alarm to fcntl test to stop tru64 from freezing on the test
      allow env variable TESTDIR for directory for fcntl_lock test
      replace modf so we don't need the math library
      new mput code from idra that doesn't need a call to find
      fix interfaces.c for aix 3.2.5
      merge some fixes from 2.2
      rebuild proto.h
      removed need for scandir in client.c
      latest config.guess and config.sub from gnu.org
      statcache initialisation fix
      make the max_connections code less horrendously inefficient
      remember to close tdb after use
      make sure that when a tdb expands we fill the expanded area, otherwise ENOSPC could be very bad
      ran make proto
      - added ability for swat to run under CGI. This needs
      added utmp.o to NECESSARY_BECAUSE_SAMBA_DEPENDENCIES_ARE_SO_BROKEN_OBJ
      return an error code on password attack, rather than exiting.
      try to make the tailer code much more robust. When a record
      make sure the umask is set in swat
      more portable TDB_LOG macro
      added a tdb_open_log() function that opens a tdb and enables logging
      - fixed an off-by-1 bug in the delayed deletion code that I believe
      use the new tdb_open_log() fn on connections database
      make swat recover from previously bad umask from xinetd
      new proto.h
      added list function to tdbtool
      merged fix for tdb_unpack from 2_2
      - added AC_HAVE_DECL() macro to aclocal.m4, so we can easily add
      fixed asprintf declaration
      removed SHLIBS until someone has time to get it to compile on more platforms (Richard?)
      use LDSHFLAGS not -shared in several places
      fixed solaris compilation error (don't add to a void*)
      don't use c++ style comments
      added a oplock break handler hook to the client code, this allows for more complete testing of oplocks from smbtorture and would also be essential if a client app ever really did want to use oplocks properly
      torture code is moving to its own directory
      moved all our torture code to a separate directory
      added a torture target for building all torture progs. Fixed a typo in locktest
      added a close-share smbcontrol message that forcibly closes a share in smbd (to allow unmount)
      Added STR_NOALIGN flags to clistr and srvstr fns. Yes, NT actually does
      next_token() was supposed to be a reentrant replacement for strtok(),
      added some comments to make the cli read code clearer
      the BAD_PTR idea in talloc.h is actually a bad idea - it means callers have no way of telling if the call really failed
      auto-build proto.h if its not there, but don't make it depend
      add an ignore on proto.h
      added the ability to test smbd safely as an ordinary user. The way it works is
      - make the regresison test mode code build in by default. This should
      added a -L option to smbpasswd to force it to run locally so we can test smbpasswd as non-root
      make sure we have BOOL in autoconf usage of util_sec.c
      fixed usage of socklen_t and also tidied up SIG_ATOMIC_T, using a typedef instead of a define
      got rid of the date headers off all text docs
      fall back to "unsigned" for uint32 on systems that don't have one
      fixed build
      handle EISCONN in socketpair_tcp
      on sco2 socketpair_tcp needs a bind
      temporarily made smbclient a non-error target so that builds will succeed when it fails. This will give richard a chance to fix problems without breaking the tree
      fixed guest account for build farm boxes
      cli_read() was reading too many bytes.
      fixed socketpair_tcp for OpenBSD
      check for bad usernames early in session setup
      removed some debug code
      The big character set handling changeover!
      strchr and strrchr are macros when compiling with optimisation in gcc, so we can't redefine them. damn.
      missed a couple of strchr calls
      we don't need the codepages any more
      we don't need the codepage sources any more
      fixed uninitialised variable
      got rid of __FUNCTION__ debug
      portability fixes
      more portability fixes
      added builtin support for UTF8
      make sure we reset the shift state on error for charsets like SJIS
      optimised the 7 bit case for utf8 conversion
      use alpha_strcpy on the domain as it comes off the wire
      use alpha_strcpy on DNS names
      fixed compilation of masktest on AIX
      fixed a bug in the parameters SMBctemp uses in open_file_shared()
      added line-feed at end of templates
      this fixes the failure of MS office on VFAT partitions on Linux
      removed an unreachable statement
      added some comments and removed an unnecessary check
      fixed inetd operation as non-root
      got rid of insanely verbose debug messages on startup
      fixed bug where we looked at the first byte of a password to determine
      fixed a silly bug in the internal UTF8 implementation
      check for initialisation in convert_string()
      formatting fixes
      fixed strrchr_m
      fixed some unicode and LANMAN2 bugs in trans2 find first
      fixed some unicode and LANMAN2 bugs in trans2 find first/next
      fixed the auto-initialisation of the iconv descriptors
      added sec_initial_uid() function so we can ask if a file is owned by
      formatting fix
      allow winbindd to run as non-root so we can test it more easily
      improved the command line parsing of rpcclient
      removed remnants of libtool
      fixed anonymous login in rpcclient
      added winbind_exclude_domain() so smbd can tell the winbind client
      much better handling of broken DNS servers
      removed some unnecessary code
      the nss and pam modules in winbind don't have strchr_m() yet, so use
      switch from UCS2 to UCS-2LE
      changed the iconv interface to go via ucs2 for all conversions. This
      if EILSEQ doesn't exist then use EIO. It doesn't really matter what
      build smbtree by default. It's a very useful utility.
      added a --with-libiconv=BASEDIR/ option to allow easier use of an
      a better test for unix domain sockets
      ucs2 is always a multiple of 2 bytes
      nicer smbtree output
      got rid of INFO: msgs at debug level 1
      - don't try to print pointers
      need to push smb_search strings in client charset
      we need to pull passwords in client charset for crypto to work
      removed unused file
      removed unused file
      a bunch of fixes from the sflight to seattle
      added -b option
      allow for the NULL in make_nmb_name()
      two fixes for NT clients -> share level Samba server
      string terminate in mkdir
      a fix for directory listing with the dave/thursby client
      minor bug fixes to smbtorture
      added ERRbadmcb
      added port 445 support to our client code
      the beginnings of a TRANS2 scanner
      better error reporting for servers that don't do port 445
      use 32 bit locking if client doesn't do 64 bit
      more minor torture updates
      fixed shortname length in trans2 list
      0 byte lock ranges ARE valid
      flush on a invalid fsp should give an error
      allow for 0 range locks in locktest
      tests for 0 length locks
      fixed handling of 139/445 in clients
      fixed level2 find first for unisys clients
      we now have all but the dreaded 0/0 lock working
      converted smbd to use NTSTATUS by default
      started converting NTSTATUS to be a structure on systems with gcc in order to make it type incompatible with BOOL so we catch errors sooner. This has already found a number of bugs
      forgot to commit the scanner code
      converted another bunch of stuff to NTSTATUS
      fixed typo
      more NTSTATUS changes
      use a name not a number for ERRinsufficientbuffer
      updated copyright for Michael Sweet
      the next step in our error code handling change
      tidied up some unused vars in JFs new fns
      more NTSTATUS/WERROR conversion
      the next stage in the NTSTATUS/WERROR change. smbd and nmbd now compile, but the client code still needs some work
      it now all compiles - so try enabling it by default and see what explodes on the build farm
      a fix for fussy compilers
      cope with pam being off
      fixed compilation of torture
      don't do pointer arithmetic on void* (some compilers can't do it)
      fixed a bunch of compilation errors on Solaris, mostly people getting NSS_STATUS and WINBINDD error codes mixed up
      more warning fixes on solaris
      fixed some compilation errors in cli_netlogon.c - tim, you need to rerun configure to get the new NTSTATUS stuff right
      added filename to error_packet()
      use cli_is_error() instead of looking in smb_rcls, otherwise NT status
      fixed formatting to make the code vaguely readable. It's still a dogs
      when you update the share mode in the db you must also update
      2nd DELETE_ON_CLOSE_FLAG fix ...
      use NTSTATUS not BOOL in do_lock()
      it turns out that XP agrees with the samba head branch over the right
      enable strict locking by default. This will be slow, so now we just
      actually obey the "use mmap" smb.conf option
      use a different test tdb name for tdbtest and tdbtorture
      flush stdout in test logging fns
      - fixed proto.h build on systems using a parallel make
      got rid of USE_TDB_MMAP_FLAG as its not needed any more
      added "display charset" option in smb.conf, along with d_printf()
      convert more code to using d_printf
      fixed missing const on d_printf declaration
      removed pointless parameter from readfile()
      fixed typo
      replaced stdio in many parts of samba with a XFILE. XFILE is a cut-down
      added xfile
      passdb/smbpassfile ain't needed any more - it only provided migration from an ancient file format, not relevant for Samba 3.0
      made a couple of local fns static
      kill a dead fn and make a local one static
      more static/dead fns
      declare dbf in one spot
      convert more code to use XFILE
      convert more code to use XFILE
      - enable MSDFS by default, there seems no reason not to have it enabled
      added a new global option "hostname lookups = yes/no"
      fixed compilation error in smbw
      fixed compilation of groupdb
      fixed ctemp in server and client. It turns out that ctemp on NT is completely broken, and it's pointless to emulate their brokenness completely in this case, but at least this makes us use approximately the same packet format. The spec is complelet wrong in this case
      don't try to initgroups in non root mode
      got rid of bogus write list substitution error messages
      *llist being NULL is not an error
      added a hook to reopen all tdb's after the server fork
      removed anti-race code that could cause a classic ABBA deadlock
      fixed character set for user name pull
      fixed the error code handling in can_delete() by converting it to
      fixed the Makefile so we don't rebuild libsmbclient and build_env.h
      convert all POST variables from display to unix charset
      tdbtorture updates from when I was trying to track down the hp tdb bug
      fixed bug in POST var handling
      fixed a silly off by 1 bug
      added cli_qpathinfo_alt_name() for fetching the 8.3 name of a file
      allow all ucs2 chars in utf8, rather than mapping some to a single
      added a little smbtorture test for dumping the unicode table of a
      fixed a typo
      fixed the really awful performance problem with the stat cache when it
      fixed compilation of tdbtorture
      make strupper() and strlower() not modify the string if it doesn't
      - fix handling of 0 last_change_time and must_change_time
      honor the ACB_PWNOEXP flag in smbpasswd
      the CASETABLE torture target now generates the complete unicode
      better method of generating the case equivalence table
      switched over to a new method of handling uppercase/lowercase mappings
      removed old unused files
      set ACB_PWNOEXP by default on new accounts.
      fixed basic ucs2 operation on big endian boxes. Still a bit more to
      fixed lame valid table
      initial kerberos/ADS/SPNEGO support in libsmb and smbclient. To
      profile.h is now known as smbprofile.h due to a conflict with badly
      first step in converting the head branch to use lang_tdb.c instead
      fixed some memory leaks, started adding asn1 decoder for server side
      added a ASN.1 parser, so now I can properly parse the negTokenInit
      improve the error handling in the ASN1 code a bit
      added NTLMSSP authentication to libsmb. It seems to work well so I have enabled it by default if the server supports it. Let me know if this breaks anything. Choose kerberos with the -k flag to smbclient, otherwise it will use SPNEGO/NTLMSSP/NTLM
      moved some OIDs to the ASN.1 header
      fixed two bugs in the NTLMSSP code
      fixed NTLMSSP with XP servers (who don't send the duplicate challenge
      minor Realloc() fix - pedantic
      bit neater talloc_asprintf() implementation
      the next step in the intl changeover. This should get us compiling agian,
      return of vsnprintf doesn't include termination
      forgot to add intl.h
      fixed typo
      fixed the --with-krb5=dir option.
      include more libs needed for kerberos5 on some systems (eg. solaris)
      removed unused gettext code
      always install swat language files
      split session setup code out of reply.c in preparation for adding
      - renamed *.po message files to *.msg
      updated copyright notices
      fixed finding the resolv library
      fix linking of k5crypto library on openbsd
      fix heimdal compilation
      added basic NTLMSSP support in smbd. This is still quite rough, and
      removed some debug code
      the beginnings of kerberos support in smbd. It doesn't work yet, but
      got rid of start_background_queue()
      quick fix for krb5 compilation. I've told vance how to fix this module
      fixed LDSHFLAGS when using non-standard lib locations
      don't need KRB5_DIR define
      removed an unused variable
      add non_root_mode() check
      finished auth when we get a valid kerberos ticket
      better krb5 error handling (thanks andrewb!)
      crude fix for anonymous session setup with extended security
      fixed the spnego detection code in session setup
      support both old and new kerberos OIDs
      made smbclient cope better with arbitrary principle forms
      change smbd to use HOST/hostname principle form until I work out how
      change smbd to use HOST/hostname principle form until I work out how
      patch for neater output() function from vance
      - fixed link order of krb5 libs
      a quick fix to get rpcclient working again. This just disables
      zero the data, not a pointer to the data ...
      remove {} from default valid char list
      get the string lengths right in domain logons
      free the negTokenInit structure
      fix the tree so it compiles again
      - make sure we use a non-zero session id so we can have multiple conns
      add asn1 integer handling ready for the ldap netjoin code
      fix locktest default parameters
      fix maxfd test to start deleting at right file
      add a hook to save the krb5 PAC
      added strlcpy() and strlcat()
      added ANS1 integer define
      added the beginnings of ADS support in smbd
      forgot this file
      forgot a file
      rewrote net.c
      removed unused function
      added "net join" command
      better auto-selection of realm and ldap server
      stop popt from doing its own intl stuff
      made a "net ads" command, currently with "net ads join" and "net ads leave"
      added "net ads status" command
      added "net ads user" and "net ads group" commands
      use generate_random_str()
      better help
      check for liblber separately
      added HAVE_LDAP_H check
      move popt out of proto objs
      add popt build dependency
      fixed typo
      portability fixes
      added 'security=ADS'
      fixed spnego, non-kerberos negprot
      use DEBUG() not d_printf() in libraries
      we can safely give NO_SUCH_USER if the ticket decodes but the local
      updated server_role for ADS
      add SEC_ADS auth method
      basic ADS HOWTO
      increment the value not the pointer
      don't die with a FPE if there are no DCs
      automatically look for /usr/kerberos to make redhat happy
      don't try to auto-change the trust password unless we are in domain
      fix sense of lp_allow_trusted_domains()
      prevent a memory leak of cli structures
      unable to open smbpasswd on initial create should only be a warning
      more memory leak fixes
      added -i option to nmbd, giving interactive mode (like winbindd)
      prevent a bogus insure wild ptr message
      fixed another memory leak
      another memory leak bites the dust
      fixed leak in free_user_info()
      reverted incorrect patch
      sigh.
      fixed the panics on basicsmb-sharelist on sun1
      allow printing of NULL pointers with internal snprintf
      added test for krb5.h
      don't use /dev/null for a smbpasswd file
      up the log level for server level security to try to track down the
      always send an OID list until we handle raw (unwrapped) NTLMSSP
      fix a bunch of places where we can double-free a cli structure
      turn off the insure xterm hack for now
      fixed a core dump in server level security
      minor update
      fixed some krb5 ifdefs
      fixed lame char tables on big endian machines
      2nd attempt at fixing lame char tables on big endian machines
      fixed toupper_w() and friends on big-endian
      fixed typo
      define LDAP_PORT when not available
      ads->realm must not be NULL
      we need to look for liblber before libldap
      more specific DNS instructions
      not used any more
      The beginnings of alternative backends for winbindd
      init group db before use
      re-enabled insure backtrace, calling /usr/bin/backtrace
      split winbindd_enum_dom_groups into the new backend structure
      fixed the nsswitch initgroups code
      fixed default location of libnss_winbind.so
      added nsstest target
      added a basic ADS backend to winbind. More work needed, but at
      make proto should build winbindd_proto.h as well
      added another ATYPE_
      const religion
      added name_to_sid to the backend
      put sid_to_name behind the winbindd backend interface
      changed query_dispinfo to query_user_list
      when using non-encrypted password ignore the ntpass variable to
      const religion in talloc calls
      typo fix
      added a query_user backend
      moved init_account_policy() to the right place
      moved lookup_usergroups() into the backend structure
      allow for passwords other than "samba2"
      added ads_search_dn() and ads_pull_sids()
      added lookup_groups() to the ads backend
      fixed an off by 1 bug in talloc_asprintf()
      added functions that convert a ads binary blob to a string (for
      finally worked out how to do ldap lookups by binary blobs, so I can
      added the last winbindd/ads backend function
      plugged most of the memory leaks
      more memory leak fixes
      added very basic ads connection cacheing
      fixed another leak - memory usage now seems to be quite small
      paranoia fixes in based ldap routines for potential memory leaks
      don't double free ldap message lists
      moved the sequence number fetch into the backend, and fetch the
      added timeouts and retries to ldap operations
      auto-init secrets.tdb
      added a REALLY gross hack into kerberos_kinit_password so that
      handle ldap server down better
      fix link error
      fixed a memory leak
      fixed a minor password memory leak
      fixed a return value
      added a propoer kerberos_kinit_password call
      allow a MAX_DEBUG_LEVEL setting in local.h (or the Makefile)
      put the winbindd krb5 credentials cache in the lock directory
      allow nsstest to test any nss module
      added a "use spnego" option
      added internal sasl/gssapi code. This means we are no longer dependent on cyrus-sasl which makes the code much less fragile. Also added code to auto-determine the server name or realm
      fix a DEBUG() line
      check for gssapi_generic.h
      fixed used of string after free
      fixed type passed to ads_search
      - use accountype not accountcontrol
      - check for correct error codes
      better error checking in nsstest
      set return value to total errors
      added a simple tdbdump utility
      add smb_xvasprintf() panic wrapper around vasprintf
      completely new winbindd cache infrastructure
      removed a debug line
      explicitly encode NULL strings in the cache
      make sid_binstring available without HAVE_ADS
      added some comments
      moved the domain sid lookup and enumeration of trusted domains into
      added some comments
      switch off level 100 debug for server security
      cleanup a little namespace pollution
      shrank the winbindd_cache.tdb somewhat
      winbindd backends can now be marked "consistent" or "inconsistent"
      use objectCategory instead of objectClass for faster searching
      robustness fixes and moved ccache location into winbindd_ads code
      moved ccache location change into winbindd code
      reinstated all the rap commands as top level commands until we get the
      got rid of start_ndx from query_user_list()
      removed the start_ndx parameter from group enumeration
      allow overriding the local time in kerberos_kinit_password()
      detect attempts to connect to names of the type NAME#xx and do a
      added a net time command. Allow display or set of system time based on
      added a comment about /bin/date
      better error handling
      handle a NULL hostname in cli_connect()
      handle systems without setenv()
      prevent double free
      allow join of already joined domain
      ads howto update
      pam_smbpass updates from a.bokovoy at sam-solutions.net
      added "net time zone" command to show the timezone on a computer
      improved error message from failed connect
      try the PDC for our workgroup if we can't find the ldap server
      better error handling
      make sure we find NSS_STATUS struct
      added "net ads info" to fetch basic ADS info without any auth
      -Insswitch/ breaks the build by preventing include of <nss.h> from working
      don't use -u switch to /bin/date - too many systems don't honor it
      removed unused variable
      obey "use mmap" on case tables
      allow selection of the organisational unit when joining a realm
      fixed handling of empty or dead domain in wbinfo -g
      fixed sid_compare_domain()
      better nsstest error checking
      - added initial support for trusted domains in winbindd_ads
      added trusted realm support to ADS authentication
      we only have gss_ fns on a krb5 capable box
      much better ADS error handling system
      add support for mixtures of ADS/NT4 domains, as long as the primary
      use "ads server" option if set for primary domain
      net ads password and net ads chostpass commands from Remus Koos
      mark '.' as a valid character
      much better auto-init of valid_table[]. This should just about remove
      fixed long filenames on win98
      net now sends its debug to stderr so its output can be relied upon in
      added net lookup command
      forgot to commit this file from remus
      support "map to guest" with spnego
      don't use server_info after its been freed
      fixed sscanf() of gid_t values
      fixed warnings on irix and crash bug on big endian machines
      fixed more warnings on irix
      added ads_domain_sid() function
      make sure we store the domain sid when joining a ADS domain
      check for a winbindd username when doing a kerberos auth
      lp_setup_logfile() doesn't exist any more
      fixed a typo in vsyslog()
      updated ldap test to test for less common function
      try to handle end of packet for not null terminated domain strings
      - handle kerberos session setup reply with broken null termination
      - portablitity fixes for cc -64 on irix
      more irix -64 portability fixes
      cope with systems that don't have full gssapi libs
      added a simple test to see whether building shared libraries actually
      renamed ans1.h to asn_1.h to prevent conflict caused by krb5 headers
      try to handle broken const in headers on cray unicos
      fixed ERRMAPEXTRACT torture to work with win2k
      added nTSecurityDescriptor field to host acct dump
      print the timezone in the same format as 'date +%z' - much better for scripting
      simple fix for creating blank data blobs
      fixed another DATA_BLOB constructor
      - use CFLAGS when linking shared libs (for things like -64 on irix)
      - fixed my breakage of CPPFLAGS
      make sure resolve_name() only returns valid IP addresses
      cope with direct IP addresses in resolve_name()
      make the winbind sequence number code more robust
      force the time difference in cache comparisons to be unsigned to cope
      fixed a crash in merge_aces()
      fixed a crash bug in domain auth caused by an uninitialised nt_status
      don't try to allocate zero bytes
      much better support for organisational units in ADS join
      don't use O_NONBLOCK in open(). This was added erroneously for kernel
      fixed a typo in the error map for WRONG_PASSWORD
      handle filenames like .bashrc better in the new mangling code
      this fixes the problem of not being able to add a SD to a file on a
      added 'wbinfo --sequence' to show sequence numbers of all domains
      reduced memory usage in winbindd with a rpc backend by using a
      fixed a bug in qpathinfo client code
      support double functions
      check for empty parameters in qpathinfo
      rewrote smbtorture to use the new dbench 2 format and methods
      fixed the directory removal for when the dir doesn't exit
      - only show 1 cleanup msg per client
      got rid of a silly '*' in printout
      when a trusted domain is down an ADS server will return a success on a
      reverted tims patch that broke configure
      serialise all domain auth requests
      fixed a memory leak thanks to dleducq at arkoon.net
      we definately don't want RCS $id tags in Samba. They make merging much
      fixed the gssapi lib configure test to not do the test twice
      enable large readwrite by default
      added cli_qfilename(), used in trans2 torture test
      this fixes the security tab on mapped drives for unicode clients.
      added a cli_qfilename() test to the trans2 tests
      don't do an ADS init when not in ADS mode
      made the domain secret key in secrets.tdb domain specific. This allows
      added a "XCOPY" test that simulates the open calls made by xcopy /O
      This fixes 4 info levels in a trans2 find_first that should not be null
      This is a nasty hack to fix "xcopy /o" from win2000 on a Samba share
      this allows us to support foreign SIDs in winbindd and smbd
      enable locking on the idmap database to make it safe to dump/restore
      fixed -c option to NBENCH test
      handle clock skew in getatr test
      make default unix charset UTF8
      added -k options for kerberos to smbtorture and locktest
      allow setting of lock range and base in locktest
      fixed NBENCH code for NT4 server ntcreatex semantics
      added -M option for minimum lock size
      show a progress bar during the deny tests
      accept the 0/0 lock but don't treat it in any sort of special way
      nicer message for --sequence when the server is disconnected
      get the right return code for batch vs exclusive oplocks
      added a tdb backup utility
      added -v and -s options
      build tdbbackup by default
      don't use -pg by default when building standalone
      added a bunch of explanation about tdbbackup
      better detection of dead ADS connections, so we have some chance of
      prevent a segv when a trusted domain is unavailable at startup
      a more informitive debug message when a SID can't be validated
      removed bogus prepend_domain() call which was screwing up getpwuid()
      make sure we use consistent keys in secrets.tdb by uppercasing domain
      rewrote the machine sid storage code to store the SID in secrets.tdb
      return the correct SID and domain name for the samr enum_domain and
      prevent bogus compiler complaints about comments in comments
      remove an unused variable
      add a note about the meaning of global_sam_sid
      try to use our workstation account password for ADS leave
      yipee! Finally put in the patch from Alexey Kotovich
      forgotten file, oops
      make tdbbackup more portable
      better handling of a zero timeout in cli_lock
      this attempts to handle the rather bizarre lock cache semantics in
      added -E and -Z options, and allow for the 2 servers to have different
      failed timed locks always give LOCK_CONFLICT not LOCK_NOT_GRANTED
      a bit more portability for tdbbackup
      added cli_locktype() for testing different lockingX lock types
      make sure we give an error for unknown lockingX locktype bits
      added a LOCK6 test for weird lockingX lock type bits
      expanded the lock6 test a bit to try lsarpc as well
      put in the ADS DNS hack, but commented out
      only try an ordinary file in lock6
      always make winbindd try for the PDC first before trying for a BDC
      get the test for disconnection the right way around!
      fixed 2 reconnection bugs in the ADS backend support
      fixed mapping of SIDs for local users
      if we know that the SID is local then don't try via winbindd
      detect SIZELIMIT_EXCEEDED in ldap queries and truncate
      lower the debug level of failing to map a file
      this tdb was being opened without locking, which is unsafe for shared
      added a -h usage option to winbindd
      enable locking on the winbindd cache tdb so it can be backed up and
      nicer output from "net rpc user add"
      the SEC_DOMAIN tests also apply to SEC_ADS
      if our lock spin code fails then return the first error code, not the
      fixed paged controls on my box. The problem seems to be incorrect
      added a ads_do_search_all() call, which is a more convenient interface
      updated winbindd to used paged ldap searches for all ldap queries
      make "net ads user" and "net ads group" also use the new paged interface
      the beginning of a test to determine and display a servers properties
      fixed the secondary group mappings for ADS users
      make net ads info work with -S
      a dodgy fix for a dodgy race condition in smbtorture child startup
      reverted Herbs smbpasswd commit as it completely broke setting a
      cope with a missing PAM define
      try to get the summary test working on OpenBSD
      not all versions of gcc support -rdynamic
      fixed a return value for a help function
      This split the mangling code up to allow for the possibility of multiple
      this adds a completely new hash based mangling scheme
      some optimisations to the new mangling system
      added some more comments
      - tidier flag checking code
      don't treat '.' as FLAG_ASCII, instead handle it separately
      a few debug statements (disabled)
      - the 36^6 hash space gives 31 bits, not 32 bits. We need to mask the
      possibly fix the 15000 user problem
      don't try to return a void
      added strndup() for systems that don't have it
      - added a mangling test suite that measures the collision rate on
      better mangling test. We now test that we can create by long name and
      nicer measurement of failures and collisions
      set the default hashing scheme in head to "hash2"
      merged the mangling test and passdb bugfixes into SAMBA_3_0
      fixed the display of the 'size on disk' property of files from w2k.
      when background printing wasn't enabled printing was completely broken
      two time handling bugfixes
      modified the ADS backend to accept either the long or short versions
      hanle the case where the win2000 username is completely different from
      pull_username() is a local function
      win2000 does not check the permissions on the share directory on
      it looks like it is possible for a w2k client to send a spnego auth without sending the negotiate - try to cope
      by using a prompter function we can avoid the bug in the MIT kerberos
      better handling of DOS LANMAN2.1 protocol
      this fixes the displaying of free disk space for DOS6 clients. Win2000
      make sure that we leave the tree unused after disconnecting
      make sure we don't walk past the end of the current SMB buffer when
      i forgot to commit these parts of the string handling patch earlier. Sorry.
      fixed the handling of STR_TERMINATE
      reran configure after adding a test for strnlen()
      ignore a few more files
      fixed a problem with the smb_buf() macro on some compilers
      stricter conditions on termination in strings
      make suure we get the return value from the pull_*() functions right
      disabled the traversal of the brlock database at startup and
      - fixed the is_mangled() interface to handle multiple components
      nicer strndup() function
      fixed the fallback to a BDC for ADS connections
      fixed a namequery bug caused by my recent string length patches
      fixed trust relationships in ADS winbindd after breaking them with my BDC changes ...
      try to cope better with the take ownership operation for foreign SIDs
      prototypes for some systems that don't have them
      a new "dual daemon" operating mode for winbindd
      made a couple of variables static
      main() needs to be indented to make sure it doesn't generate a
      damn! I forgot to commit winbindd_dual.c
      patch from Alexander Bokovoy needed for dlopen on bsd systems
      auto-recover from the fairly common case of a non-clean tdb shutdown
      added a 'net ads search' command, similar to 'ldapsearch' but using the
      fixed a spelling mistake
      fixed some debug messages
      put the ifdef for HAVE_VA_COPY in one place rather than in lots of
      a useful script for finding global variables or functions that could
      when nmbd starts up it is possible that dhcp hasn't started the local
      much better findstatic script
      fixed a bug in handling select in the main daemon - this stops the daemon spinning if a signal is received at an inconvenient moment
      reverted some bogus test code that jeremy accidentally committed
      fixed 3 bugs in jeremys trans2 merge. Hopefully it now works.
      - completely rewrote the wins_srv.c code. It is now much simpler, and
      fixed we_are_multihomed() to cope with dynamic interfaces (ie. don't
      mumble ... fix typo ... mumble
      made the wins list handling a littler clearer
      removed the wins name registration code from libsmbclient
      we never pass any userdata when doing name registrations on the
      This commit finally gives us multiple wins server groups. We now
      resolve_wins() now needs to be a public function
      The next phase in the WINS rewrite!
      fixed a link problem with global_in_nmbd
      don't warn on the loading of zero length files. This fixes the
      don't warn on non-existant files in map_file(), let the caller handle any warning
      make net join a bit less verbose
      don't backup to a newer file
      fixed a makefile syntax error that was breaking the build on some
      fixed a bug handling startup when the ads server is not contactable
      sort name query responses by how far they are from our interface
      bias the lookup sorting towards directly reachable IPs
      don't start the async dns process unless we actually need it!
      fixed multi-homed re-registration of names when we are a WINS
      ads_mod_ber should be static, not public
      used findstatic.pl to make some variables static and remove some dead
      fixed a prototype problem in client.c
      fixed our winreg parsing to handle a diifferent form given to us by
      the last WINS update broke self registration when we are a WINS
      fix declaration of global_in_nmbd
      make sure we disable referrals in all ldap searches - they are badly
      this fixes the ads dump code
      this implements a completely new strategy for fetching group
      fix setting machine passwords in the case where a user account of the
      - fixed a crash bug for 'print -'
      fixed a stdin bug in XFILE that prevented 'print -' from working
      fix directory listing on win9x.
      added --machine-pass option to net. This allows you to authenticate as
      added useful 'net rpc info' command
      move opt_machine_pass to keep some compilers happy
      removed some meaningless const casts that were causing thousands of
      this is a trick to work around the fact that posix does not supply
      after thinking about the env variable hack for avoiding group membership
      don't report the faiilure of non-blocking locks. They are supposed to
      fixed a problem with getgroups() where it could include our current
      don't use C++ comments in C - it doesn't work on many compilers
      fixed a call to get_current_groups()
      updated the 3.0 branch from the head branch - ready for alpha18
      checking for NULL really is counter-productive, and this one was also
      enum_group_mapping takes an enum not an int
      fixed a number of real bugs found by warnings on the 64 bit irix compiler
      more bug updates from head
      new files from HEAD
      fixed line buffer mode in XFILE
      fixed a segv in net time when the host is unavailable
      removed the freebsd getgroups check now that we don't use it
      added LDAP_SET_REBIND_PROC_ARGS in acconfig.h
      reran configure
      implemented getgrouplist() for systems that don't have it and use it
      reran configure
      I had forgotten to commit this after running configure
      fixed typo
      fixed logfile location to honor configure
      fixed man install
      partial apply of samba-patches 960
      good security patch from Timothy.Sell at unisys.com
      fix minor nits in nmbd from adtam at cup.hp.com
      make sure async dns nmbd child dies
      this is an interim fix for nmbd not registering DOMAIN#1b with WINS
      fix for smbtar filename matching
      minor portability fix
      an initial fix for handling sparse files in smbd
      introduced a get_file_size() macro in trans2.c to make it easier to
      - if we are in ADS mode then avoid an expensive netbios lookup to find
      removed a gratuitous standard_sub_basic() on the 'password server'
      2nd try at a fix for netbiosless connections to a ADS DC. This also
      a couple more minor tweaks. This now allows us to operate in ADS mode
      always include the (void) for void fns ...
      this fixes plaintext passwords with win2000
      net ads info now reports the IP of the LDAP server as well as its name - very useful in scripts
      make sure that 'net ads info' gives info on the server we specify, not
      the ads_connect() here doesn't need to actually succeed, as its only
      added support for smbd listening on port 445 and 139. It now listens
      fixed a net crash bug if we can't find a DC in a 'net rpc' command
      added 'disable netbios = yes/no' option, default is no
      make sure we zero the unusued elements in a SID when parsing
      fixed multi-line strings for portability
      support netbiosless search for the DC using ADS in the winbindd AUTH
      fixed the length checking for plaintext passwords (thanks to andrewb
      make sure we null terminate plaintext passwords
      fixed a bug where we were truncating the returned names in a netbios
      This fixes a number of ADS problems, particularly with netbiosless
      fixed wbinfo -t for netbiosless domains
      added 'net rpc testjoin' and 'net ads testjoin' commands
      fixed a memory corruption bug in the wins code
      fixed a memory corruption bug in ads_try_dns()
      when using netbios lookup methods make sure we try any BDCs even if
      fixed 'net ads chostpass' for new ads structures
      amazing! we've had a reversed comparison in our blocking lock code
      get the error code right in case of a blocking lock timeout.
      be a bit more paranoid about not getting duplicate domain names (can
      make the LOCK1 test randomise the time for the blocking lock test
      nicer locking timeout test
      added exact timing semantics on blocking locks
      round lock timeouts in lockingX upwards to multiples of 1 second, so a
      added a 'net ads lookup' command that does a CLDAP NetLogon query to a
      we now receive and parse the main cldap netlogon reply.
      we now parse the cldap reply and print its contents. There are a
      added a generic print_guid utility, and get the byte order handing
      make rpcclient use print_guid()
      print out the GUID in the CLDAP reply
      the SMBD_SELECT_TIMEOUT_WITH_PENDING_LOCKS macro isn't needed any more
      fixed memory corruption in cli_full_connection()
      added a useful unistr2 display function
      added a 'net rpc samdump' command for dumping the whole sam via
      a few minor cleanups in the cldap request
      made the CAP_UNIX test a bit cleaner
      don't use spnego in the client unless enabled in smb.conf
      a ASN.1 fix from anthony
      added smb_xstrndup()
      slprintf() takes a size argument
      show builtin groups in samdump
      fix connecting to a BDC when the PDC is down but in WINS and no bcast
      fix connecting to a BDC when the PDC is down but in WINS and no bcast
      removed a debug line
      ensure that we unlock in case we hit a tdb error
      convert the LDAP/SASL code to use GSS-SPNEGO if possible
      don't use ENCTYPE_ARCFOUR_HMAC unless the kerberos lib supports it
      initial mem_ctx to NULL
      added gencache implementation from mimir - thanks!
      another const cleanup
      more const cleanups
      disable stat cache when case sensitive
      Add clock skew handling to our kerberos code. This allows us to cope with
      allow --with-krb5 to override the location of the kerberos libs on
      change ADS negprot to match more closely the options used by w2k. This
      enable 'map hidden' and 'create mask' to allow the new OPEN test to
      fixed 3 bugs in the wins server code related to precedence of ! and &
      .NET likes both forms of servicePrincipalName in the machine account
      support all permitted encoding types in tickets. This allows us to
      only set UF_USE_DES_KEY_ONLY if we are using krb5 libraries that can't
      fixed a crash bug on 64 bit systems. Thanks to Anton Blanchard for
      - we need to rescan the trusted domain list regularly to cope with
      a space is a standard valid character in a filename
      reverted an incorrect fix. What I was trying to do was fix a problem
      add a 'mangle prefix' option to allow people to tune the number of
      fixed a possible segv when dealing with a blank password
      if trusted domains are disabled then we should not try to connect to
      much simpler code to choose a DC to contact in winbindd. We now always
      added a timegm() function for systems that don't have it
      make_server_info_guest() can need root for the ldapsam backend
      when doing a 'net rpc vampire' a pdb_init_sam_pw() is used to create a
      fixed some formatting errors and improved some debug statements in
      make sure that if kerberos fails we can fall back on NTLMSSP for SASL
      make sure we don't try to decode any null password buffers during a
      the change in the way %U is handled to use current_user has broken
      a better for for using %U in smb.conf
      more %U fixes for head
      merged the %U changes to 3.0
      fixed a number of places where we can try to free a wild pointer or
      a working timegm() function for systems that don't have it
      the 'padding' field in the query domain info reply is not a padding
      add help text for 'net ads lookup'
      clearer debug message when the user is already in the ldap db
      query_alt_name takes a forced unicode string in win2000. It is not
      merge alt_name patch from head
      added cli_lsa_enum_account_rights() call. Note that this is in
      allow a couple of LSA functions to take a username instead of a SID,
      fix some undefined behaviour with increments in C. In theory a
      the 'static' keyword here is useless as we are not declaring a
      This removes the 3rd argument from init_unistr2(). There were 240
      reverted this patch till I sort out the craziness with UNIHDR
      cleaned up the lsa_enum_acct_rights function and added a
      added LsaRemoveAccountRights
      added the LSA privileges server backend stubs. Right now they just log
      ignore configure in cvs
      ignore config.h.in in cvs as generated by autoheader
      make sure we don't run over the end of 'name' in unix_convert()
      merge from head
      added the 'lsaenumacctwithright' command to rpcclient. This allows you
      added server stubs for lsa_enum_acct_with_right
      removed a duplicate copy of smb_io_sid_array()
      pull_ucs2_talloc() should pull to a char**, not a void**
      add a note about a better method for finding netbios name of workgroup
      add a note about relative opens with blank paths - its a re-open!
      setup the %U substitution in winbindd for the homedir template
      initial server side privileges implementation, using a tdb. This needs to be hooked into pdb, and we need some access control on changing privileges. That's next
      - added help on -P option
      fixed a crash bug in the new winbindd 'sids rule!' code
      the new DEVELOPER checks for string overflows have (as expected)
      i forgot to commit the privilege db init call
      added -i option for ignoring dot errors in masktest
      fixed use_oplocks and the timeout in smbtorture startup
      make sure we have an empty directory when we start the utable test
      fixed the MANGLE smbtorture test with the new paranoid string code
      having sticky create times is not a bug
      fixed a strcat noticed by metze
      fixed a strcat noticed by metze
      win2000 can take much longer than the specified time to respond to a
      fixed the unmarshalling of the queryaliasmem SAMR call
      show which files we fail to create in the casetable test
      removed a duplicate lump of module stuff in configure.in
      its VFS_NETATALK_OBJ not VFS_NETATALK
      it is possible for some of the real time signals to be used by glibc,
      merged real time signal fixes from head
      added a simple test for the old SMBtcon interface
      updated the TCON test so that win2000 passes. Samba now fails this
      fixed the -U option in nmblookup
      fixed the -B option as well
      added simple tests for SMBchkpath and SMBioctl
      reversed the sense of the TCON test, now that we know that win2003
      changed the order of checking whether a SID is a UID or a GID in posix
      don't rely on realloc() working on NULL
      strequal() returns True for equal, not an int
      fixed the popt option handling in nmbd, so that -i now works
      we weren't filling in the keylength in LANMAN1 and LANMAN2.1 negprot
      merge LANMAN1/LANMAN2.1 fixes from head
      installman needs to depend on installdirs, to fix parallel
      installman needs to depend on installdirs, to fix parallel
      fixed the ALL_INFO and ALL_INFORMATION trans2 QFILEINFO levels. The
      added the COMPRESSION_INFO trans2 QFILEINFO level and fixed the
      fixed the arbitrary 256 limit on the size of aliases in parse_samr
      shouldn't null terminate trans2 qfileinfo all_info/name
      fixed the termination of several trans2 strings
      removed the 'valgrind fix' that (although it may well remove a
      fixed the layout of the FULL_DIRECTORY_INFO trans2 findfirst level
      fixed the string alignment of the QUERY_EA_SIZE trans2 findfirst level
      - the 8.3 name in BOTH_DIRECTORY_INFO is supposed to be always unicode
      fixed a pstrcpy() that is not on a pstring
      make the allocation_size consistent between trans2 QFILEINFO and SMBgetattrE
      - the ALL_INFO trans2 QFILEINFO level uses a forced UCS2 name
      2 more places where win2003 forces UCS2
      SMBlockingX timeouts are in units of 2 milliseconds, not 1
      changed 'winbind uid' to 'idmap uid' in build farm tests
      mark the HEAD branch as deprecated. Nothing that a determined
      applied patch from bug#140
      when creating aliased parameters in loadparm.c you *must* place the
      don't call a function error_message() as that conflicts with a
      added an auth flag that indicates if we should be allowed to fallback
      use ZERO_STRUCT() instead of memset
      - fixed the bug that forced us not to use the winbindd cache when we
      use lp_realm() to find the default realm for 'net ads password'
      fixed smbtorture LOCK1 test to know about the correct multiplier for
      fixed libsmb code to set correct timeout in cli_state when waiting for
      removed editreg from standard build until it is portable. Right now it
      on AIX FD_ZERO() is defined in terms of bzero(), so we can't have
      i'm getting rather sick of this
      several places in client.c rely in commands[i].name == NULL being a
      made a debug statement more useful
      another improved debug statement
      reverted locale patch put in by jht (originally from vorlon).
      we need to call ads_first_entry() before using a ldap result,
      fixed a bug found by volker
      lp_security() is a function not an integer
      - added LOCALE patch from vorlon at debian.org (Steve Langasek) (bug #122)
      fixed the pstrcpy() bug in directory recursion properly
      this fixes a bug where Samba would under some circumstances return
      make sure we don't allow the creation of directories containing
      fixed segv in calls to pstrcpy() in cliprint.c
      This is a critical bug fix for a data corruption bug. If you
      CVAL_NC() doesn't need the (unsigned) fix and breaks the IRIX build
      first public release of samba4 code
      This commit was generated by cvs2svn to compensate for changes in r30,
      use the \\server\share form of tconx to work with servers that don't
      add support for 32 bit pid using the PIDHIGH field. This allows the
      check for an invalid TID in reply_exit()
      make sure we give the chosen workgroup in gentest
      - cope with servers that don't properly implement SMBexit
      added config.guess
      put config.guess in the right place!
      - added SMBntrename test suite
      disabled autoconf 2.53 requirement until we know exactly why it is
      process_model.h is not used at all - hangover from earlier design
      - expanded the ntrename test
      - added test for position_information via paths
      - added a raw smb scanner
      added read/write seek testing
      added seek to gentest
      added SMBopen to gentest
      added the ancient SMBcreate operation to the testsuite and client lib
      fixed allinfo bug reported by metze
      test resume by name before resume by flags
      don't give detailed errors for levels that fail
      nicer formatting in getattre
      fixed a comment typo
      some servers don't return a fs_type and dev_type
      try to cope with servers that return a blank alt_name field
      a few build fixes to try to get irix building
      fixed some places where we don't brace (flags & STR_UNICODE)
      fixed an enumerated type error found on irix
      more fixes from the IRIX compiler (thanks herb!)
      more fixes from the IRIX compiler (thanks herb!)
      fix handling of parametric smb.conf parms with embedded spaces
      - patch to fix a memory leak from metze
      ascii/unicode fixes in ascii mode found by smbtorture
      fix a segv when server doesn't support ATTRIBUTE_TAG_INFORMATION
      expanded the RAW-READ test to make it clearer that all locks conflict
      I think I've finally got the ascii/unicode issues right in trans2 find
      thanks to ntfsd and some google searches I worked out what the unknown
      - use deltree to setup base directory
      better child synchronisation at startup in NBENCH
      when we don't have a working iconv library we must default to using only builtin charsets. Defaulting to CP850 when we have just determined that it doesn't work just guarantees that Samba won't work at all (in fact it just seg faults at startup). This fixes Samba on AIX, and I expect on a bunch of other platforms.
      fixed snprintf.c for systems that have only some of the *printf() family of functions
      fixed spinlocks in tdb
      fixed a number of bugs and memory leaks in the AIX winbind shim
      the beginnings of a samba4 programming guide
      added some NTVFS info, and started the process model section
      much better synchronised startup in smbtorture - this allows us to run
      parameterise the listen backlog in smbd and make it larger by default. A backlog of 5 is way too small these days.
      - a few portability fixes from Jim Myers
      a major revamp of the low level dcerpc code in samba4, We can now do a
      we only want the per-call stub data
      started adding RPC-ECHO torture cases
      added a helper function to make building rpc functions a bit easier
      actually use the passed parameters!
      added rpcecho EchoData test
      added SinkData and SourceData tests for rpcecho
      added fragmentation support on receive for dcerpc packets. I have
      added support for fragmented sends
      yipee! we can now do lsaOpenPolicy() via the new interfaces, without
      lsa_OpenPolicy2 now works
      lsa_EnumSids() now works
      fixed some error found by valgrind
      fixed another error found by valgrind
      finished off the ndr_sec.c module
      allow qfsinfo to continue with just 10 levels supported in the server
      updated pidl to auto-generate the ndr_push_*() functions for the
      another major bit of restructuring of rpc in Samba4. Mostly moving
      a bit of a tidy up before I add the ndr_pull_*() side of things
      - generate both the pull and push side
      - corrected some lsa idl
      - more generation fixes
      - include includes.h
      added fixes for the pushing of arrays and handling non-ref pointers in
      added idl, generated code and test code for lsa_LookupSids
      check for pidl.pl in path, not $HOME/pidl/
      added support for arrays as function arguments and for unistr_noterm
      lsa_LookupNames now works
      get rid of some prototypes that aren't needed any more
      use a more consistent style for the client stubs
      - handle void functions
      converted the rpcecho pipe to use IDL
      added a module for auto-generating the client calls. We can now go
      - added the rest of the LSA calls as stubs
      i forgot to commit the rpcecho idl file
      added a test for lsa_Close()
      added lsa_EnumPrivs idl and test code
      added lsa_EnumTrustDom
      - fixed lsa_EnumTrustDom
      much cleaner handling of the different types of variables
      added IDL and test for lsa_EnumPrivsAccount()
      added IDL and test for lsa_EnumAccountRights()
      added idl and test code for lsa_LookupPrivName()
      - added support for the pull side of unions
      started adding support for lsa_QueryInfoPolicy
      automatically generate ndr_print_*() functions for every IDL
      automatic printing of unions
      start using automatic union printing
      fixed handling on pointers to arrays of structures in unions
      support lsa_AuditEventsInfo
      fixed the NDR structure alignment rules
      added QueryPolicyInfo/PrimaryDomainInfo idl and test code
      added support for 8 byte aligned HYPER_T
      added 9 more info levels to lsa_QueryInfoPolicy
      added support for "make pch" to build a precompiled header. Note that
      a small include file rearrangement that doesn't affect normal
      handle constant sized arrays
      lsa_PrivilegeSet seems to be a very strange beast indeed. It has a
      I think we now handle conformant arrays in structures correctly - the
      * fixed conformant arrays in structures
      more dfs work
      removed a bunch of the old rpc code in preparation for replacing it all with auto-generated code
      removed some obsolete .cvsignore files
      fixed rpcecho EchoData debug code
      * differentiate between pointers and non-pointers in switch_is union
      fixed the handling of unions of pointers
      we can now do a level1 NetDfsEnum()
      fixed another problem with pointers to arrays in structures
      * fixed lsa_LookupPrivName
      * added levels 4, 200 and 300 to NetDfsEnum. 200 and 300 don't work
      * make pidl.pl exit with an error on a parse error
      added the dfs_GetInfo all - all levels
      it turns out that all MS servers ignore the artifact struct_len fields
      added lsa_QuerySecObj() and the necessary sec_desc_buf supporting code
      added the first couple of calls from samr as IDL
      support a new value() attribute that allows us to auto-fill certain
      run LookupDomain on each domain returned from EnumDomains in samr
      added samr_OpenDomain() and samr_QueryDomainInfo() level 1
      fixed alignment of the buffers part structures
      added another 11 levels of QueryDomainInfo
      added samr_EnumDomainGroups and samr_EnumDomainUsers
      added samr_OpenUser, samr_EnumDomainAliases and samr_QueryUserInfo level 1
      added support for varying conformant arrays (needed for samr
      added samr_UserInfo2 and samr_UserInfo3
      added samr UserInfo levels 4 to 20
      added UserInfo level 21
      don't encode my own servers name in the test :)
      added OpenGroup and QueryGroupInfo levels 1 to 4
      added OpenAlias and QueryAliasInfo levels 1 to 3
      remember to samr_Close() policy handles after use
      the returned policy handle in spoolss_OpenPrinterEx() is pass by
      simple method for auto-building rpc files if idl changes, and
      run the basic build tests on sub-builds like "make torture" as well
      fixed the handling of much more general C expressions in value()
      slightly more efficient strlen setting in lsa and samr strings (calls
      added the "subcontext" attribute for auto-handling of user-marshalled
      use the "subcontext" magic flag for sec_desc_buf
      ignore .pidl files
      added support for "relstr", structure and union properties and public
      added support for level1 of EnumPrinters in spoolss. This uses a
      * the beginnings of non-constant fixed arrays
      use nstring and [relative] to support levels 1 and 2 of EnumPrinters
      better [relative] handling, allowing for nested relative structures
      nicer method of handling spoolss EnumPrinters
      handle non-NTSTATUS return types
      * more info levels for EnumPrinter
      added OpenPrinter and a test function. Note that the Samba3 structure
      call OpenPrinterEx on each printer on the server, and then call
      * support inline arrays
      security descriptors are no longer a "special" type, they are handled
      started documenting the extension to IDL that pidl implements
      use [subcontext] to make GetPrinter a bit easier in smbtorture
      auto-generate functions for printing top-level function
      * add another WERR err code
      added wkssvc.idl and test code
      remove an unused variable
      auto-generate top-level debug print functions when a flag is set on
      * use the new auto-generated debug code method.
      ignore c and h files in the idl dir. This makes it easier to
      support the 'default' case in IDL unions
      fill in skeletons for the rest of the function calls in wkssvc (based
      auto-generate the pipe UUID version and name
      remove some old junk from the Makefile
      use the auto-generated UUID, version and name rather than listing them
      added samr_QuerySecurity() call that displays the ACL for any handle.
      changed wks to wkssvc (suggestion from metze). Started adding samr_CreateUser().
      cope with no printers returned from EnumPrinters
      get rid of the old rpcclient code - it needs to be rewritten to use the new rpc infrastructure
      added samr_CreateUser() samr_DeleteUser(). The test suite creates a
      added another wkssvc info level
      added a thanks to Todd Sabin (with his permission)
      separate the reason and result codes in a bind_ack. This is needed for
      init samr and lsa names so the debug display looks right
      possibly better handling of NULL secdesc (thanks to lukeh)
      fixed country code field in samr_UserInfo5
      change to AuditEventsInfo struct from lukeh
      removed an unused structure
      slightly more accurate structure alignment code - I need to do proper
      after discussions with lukeh, I think we found a alignment bug in old
      as discussed on irc, this is a small patch that allows a few more
      added a wbtest program that shows how to access winbindd extended nss
      srvsvc IDL and test code from metze. Thanks!
      started to expand the echo tests to include more interesting test
      switched to a new way of handling unions, so that we can handle
      switched to a new way of handling unions, so that we can handle
      updated copyright year
      fixed wkssvc idl and test code for TransportEnum
      make the socket send code a little clearer
      * added support for empty case elements (including default cases)
      * changed to midl syntax using [case(x)] instead of case(x)
      some errors are expected in SAMR and LSA tests - don't fail the test
      * added a 'lstring' type for spoolss
      EnumPrinterData in spoolss now works
      make the echo idl match the win32 IDL again
      use strict perl package everywhere for error checking
      damn, "use strict;" in util.pm breaks pidl - but why?
      its LoadStructure() in util.pm that doesn't like strict perl - any
      avoid compiler warnings for unused variables with [relative] pointers
      added samr_LookupNames() and test code
      added samr_LookupRids() and test code
      use a precompiled grammer in pidl. This speeds up pidl by about a
      fixed srvsvc_NetShareEnumAll()
      * cope with pidl not being in $HOME/pidl
      fixed a comment
      a bit neater way of emitting code
      fixed pushing structures containing pointers inside unions
      started on samr_SetUserInfo()
      make sure we don't try to use c++ style variable declaration
      * fixed level2 of QueryUserInfo
      extensive samr_SetUserInfo/samr_QueryUserInfo testing, with
      moved the pidl auto-generated files out of CVS
      * fixed libndr.h header
      added samr_QueryDisplayInfo() (only level 1 so far)
      we now use a copy of pidl inside the samba4 source tree at
      Todd Sabin pointed out that a couple of the values I marked as hyper_t
      ignore generated idl.pm
      added support for 'ascstr', a ascii string in MSRPC !
      added 4 more levels to samr_QueryDisplayInfo()
      only display really verbose packet dumps when smbtorture is run at
      avoid calling the print routines completely if debug level < 2
      * changed the way strings are handled in pidl to a much more general
      print out the UUIDs from the end point mapper
      forgot to commit this, sorry
      don't ignore .h files here
      cleaner handling of relative pointers to strings
      fix a smbtorture memory leak
      fixed a bug with pushing non-pointer unions
      added some explanations for epmapper IDL and dom_sid2
      added Parse::RecDescent module into pidl to ensure we all use the same
      * you can't have two parameters with the same name (pidl doesn't enforce
      a fairly major upgrade to the dcerpc system
      * enable RPC/NDR validation in all smbtorture code
      * fixed NDR flag inheritance across push subcontexts
      dfs torture test now passes
      * fixed handling of relative subcontext unions
      * fixed null terminated string handling
      added the beginnings of an IDL validator, to give clearer errors when
      added support for 'const' in IDL files. This makes it easy to define
      added support for enumerated types in IDL files. This makes unions
      changed to perl for mkproto, patch from vance
      get rid of our awk scripts
      we don't need awk now
      reduced the number of magic types we need in mkproto.pl
      nicer base type handling
      fixed loadparm handling properly
      much faster inner loop and neater code
      final bit of tidyup and speedup
      by using a single proto.h we gain another factor of 4 in the speed of
      get rid of some more unused headers
      save about 35% of the time for "make idl" by processing multiple IDL
      ooh, this is fun!
      fixed the handling of value() attributes on scalars in IDL that
      added a tool called 'ndrdump' that allows you to dump NDR data
      * better diagnostics in ndrdump
      added the dcerpc remote management interfaces as mgmt.idl, and wrote a
      added tests for the remaining calls on the rpc management interface
      make sure we don't try to update a constant
      give far more detail in the EPMAPPER results
      added tests for epm_Map endpointer map calls
      removed the STFS specific flags in the Makefile.
      * prepared the dcerpc subsystem for adding the RPC over TCP transport
      initial implementation of dcerpc over tcp. RPC-EPMAPPER works, now to
      * fixed byte order in epmapper parsing
      added some paranoid checking for enums
      signed DCERPC over TCP now works !
      fixed some memory leaks in the dcerpc use of ntlmssp signing
      added auto-determination of the DCERPC over TCP port number by asking
      use the IDL defined NDR version number
      transfer syntax V2 isn't as magic as I thought
      show an error when the epmapper fails to find an interface
      added a link to opengroup PDU definitions
      by default sign RPC over TCP but not RPC over SMB. I will add command line control soon
      fixed default port handling pointed out by Tom Jansen
      added -m for 'max protocol' as a standard option
      switched to WERROR return codes in the management IDL
      a couple of tidyups
      use EPMAPPER_PORT constant instead of 135
      added an rpc scanner. This prints messages like this:
      more epmapper and mgmt magic
      added auto-generation of the IDL interface tables. This makes two less
      * support multiple interfaces in one IDL file in pidl
      * added a bunch of placeholder IDL files
      make sure there is at least one valid interface in an IDL file
      the beginnings of an automated tool for working out IDL properties of
      fixed some warnings
      got rid of a bunch of unused header files (now replaced with IDL
      more unused headers
      * removed a bunch of unused code
      * got rid of UNISTR2 and everything that depends on it
      got rid of more group mapping code
      removed more old code
      started adding netlogon IDL and test suite
      added netr_ServerReqChallenge and cleaned up byte array printing
      added netr_ServerAuthenticate() and test code
      added netr_LogonSamLogon() and test code
      fixed NTLMSSP_SIGN_VERSION (which I broke earlier today)
      neater credentials handling in netlogon client code
      * another small API change in the credentials code
      * netr_ServerPasswordSet() now works - the test suite changes the
      another big improvement in the credentials API. I think it now
      added netr_DatabaseSync(). It doesn't work as I haven't done schannel
      initial netlogon database sync partly works - needs some IDL tweaks
      netr_DatabaseSync() now works fully for database 0
      netr_DatabaseSync() now works fully for databases 0, 1 and 2
      don't pollute the structure name space so much
      * made some field names more consistent, and worked out that
      netr_DatabaseDeltas() now works. We ask for the deltas associated with
      make sure we can expand the critical versions structure without
      added netr_AccountDeltas(), which w2k3 gives
      added netr_AccountSync(), another NT_STATUS_NOT_IMPLEMENTED call
      added netr_GetDcName() - quite a useful call
      added netr_LogonControl() and netr_GetAnyDCName()
      added netr_LogonControl2() and netr_ServerAuthenticate2()
      added netr_DatabaseSync2()
      added netr_LogonControl2Ex()
      my debian unstable box uses "autoconf2.50" - i wish there were a
      some OSes already have a uint_t
      don't use c++ style comments
      we can't have two functions with the same name
      don't use c++ comments
      * patch based on work by Jim Myers to unify the ioctl handling to be
      * added a debug thread id hook from jim myers
      merged more updates from Jim Myers
      removed an unused file
      fixed a problem with "net rpc vampire" mis-parsing the alias member
      re-wrote pidl to use Parse::Yapp instead of Parse::RecDescent, This
      make pidl a little less verbose
      a bit more speed and better line matching in errors
      don't save the intermediate form to disk unless we need to
      * reduced the number of grammer conflicts a lot using (arbitrary)
      commit idl.pm now, as many build farm machines don't have 'yapp'
      "make proto" now depends on "make idl_test"
      cope with yapp not being installed
      fixed shell scripting error
      some systems don't have "which" and some systems don't have the "-nt"
      remove the tdbsam code for now. I have other plans for SAM backends :)
      * removed some unused code
      initial rpc server side infrastructure
      the rest of the initial rpc server side infrastructure
      more portable array of endpoints code from pidl
      the next step in the dcerpc server code. Added the link between the
      * the RPC-ECHO pipe now works in smbd, as long as the data sizes
      handle the auto-allocation of [ref] output arrays in pidl. This
      added handling of fragmented requests in the rpc server
      we now support pdu fragmentation on both input and output in the rpc
      added the echo pipe test calls
      added support for sending bind_nak replies in the rpc server
      after chatting with jeremy I decided to use a separate directory for
      added a basic dcerpc endpoint mapper to Samba4. Currently only
      added the epm_Map() call.
      rpcdump.exe now works fine against a Samba4 server
      dcerpc over tcp in the samba4 server now works to some extent. It
      make the IO in the dcerpc over TCP server completely async, handling
      completed the linkage between the endpoint mapper and the dcerpc
      add the ntlmssp calls back into smbtorture on rpc over tcp. The samba4
      fixed a bug handling multiple PDUs being read from a socket at one
      fixed some memory leaks in the rpc server code
      fix _ptr_ declaration
      ntlmssp over rpc over tcp now fully works
      fixed fragmented signed connections to our rpc server over SMB
      added auto-generation of the server side boilerplate code for each
      fixed the transfer syntax in the dcerpc bind reply
      zero length echo is not an error
      fixed the handling of zero-length top level arrays in pidl
      switch off the default of ntlmssp on rpc on smb as some windows pipes
      allow the specification of full dcerpc endpoint binding strings on the
      added some ncacn_* binding string examples
      more flexible handling of [] in binding strings
      don't try and build the libclient stuff in samba4 yet
      disable pam in samba4 until someone fixes it (hi andrew!)
      a script fix for the build farm
      "make idl" is now incremental and "make idl_full" is a full idl build
      fixed a typo in the m4 file
      make pidl no longer dependent on Data::Dumper, which isn't installed
      make sure we allow clients to negotiate ntlmssp seal if they want it
      patch from metze with updates to srvsvc and changes to pidl to allow
      fixed srvsvc DiskEnum call
      added "pidl.pl --template" to dump a rough template to save typing
      lots of shells don't have the -nt test, so use hackish find command
      lets see if "cc -E" keeps more of the build farm happy then "cpp"
      use the @CPP@ value from configure if possible when determining cpp in
      cope with different cpp formatting on some systems, and make sure we
      remove a redundent second check for PAM
      make sure we have a value for DEFAULT_PRINTING on all platforms
      don't rely on the ability of perl 5.6.x to remove elements from arrays
      use smb_rwlock_t instead of rwlock_t to avoid conflicts with system
      more portability fixes. We now almost compile on solaris
      some compilers can't handle structures with no elements. Generate
      more mutex portability.
      enable rep_inet_ntoa() for non-pthread builds
      the out substructure is not empty if there is a return from the
      a fairly large commit!
      added support for big-endian ucs2 strings (as used by big-endian
      it turns out that a wire policy handle isn't a blob either, its a
      much better docs on the smbtorture ncacn syntax, including how to
      use bigendian mode to fix the idl for samr_LogonHours
      no longer require the pipe name or tcp port number to be the first
      fixed the RPC-MGMT and RPC-SCANNER tests to work with the new
      added a define for the DCERPC little-endian data representation flag
      fixed formatting of uuids in debug output
      removed some unused functions
      added a smb.conf flag "rpc big endian" that tells our rpc server to
      fixed a bug in the acct_flags checking on CreateUser2 in the RPC-SAMR test
      fixed a segv in RPC-* when debug level > 2
      added code to the IDL validator to check for common errors with
      added a bunch of alias functions in samr.idl based on work by Kai.
      fixed the AddAliasMem test code
      fixed removal of moe than one ncacn_* option from option list
      addition of samr_SetSecurity() from kai
      tim, I'm guessing you really didn't want to add this :)
      latest srvsvc and wkssvc IDL from metze
      wkssvc test updates from metze
      minor updates to make the srvsvc test compile
      remove some unused files
      "subsystems" should be static
      the endpoint mapper now works in bigendian mode
      fixed the rpc epmapper server. This fixes rpc over tcp.
      added dom_sid_string() function
      * fixed a segv when -U is not used in smbtorture.
      make sure we initialise r.out.handle in openeventlog
      avoid a copy of the data being input to the dcerpc server in the most
      dcerpc server output now copes with the client blocking part way
      added code to the RPC-SPOOLSS test that demonstrates that policy
      check for the correct fault code when the server fails a use of a
      cope with a wider range of broken servers in the RAW-QFILEINFO test
      added a little bit of const magic to get rid of the data in librpc/gen_ndr/*.o
      completely rewrote the AIX UESS backend (UESS is the AIX equivalent of
      updated the head branch as well
      the conversion from int to size_t in charcnv did not take into account
      there are places in the samba3 code that don't check properly for
      - modified the dcerpc client security code to be generic, so ntlmssp
      don't always use the same schannel context number
      we can close the netlogon pipe used to setup the schannel session key
      don't force debug in the RPC-MGMT test
      fixed a couple of uninitialised returns spotted by valgrind
      fixed a void return spotted by metze
      fixed a problem with the smb client code spinning when the connection
      added the simple HOLDCON torture test. This is used to establish
      split up the schannel rpc client code into separate key establishment
      fixed compilation with --enable-dmalloc
      fixed two writex client bugs
      in the async socket handling routines in the cifs backend don't assume
      added the "nbench" ntvfs backend. This is used to capture NBENCH load
      fixed a typo
      fixed the label for search requests
      greatly improved NBENCH netbench simulator
      handle incomplete load files
      don't check return fields (like search count) on an expected failure
      make sure the tags in the NBENCH test match the tags in the generated
      added the -C option to smbtorture
      added a 5% warmup time to NBENCH to make the results more consistent
      add config hints for cifs backend
      make the warmup and execute phases clearer
      as a special case don't check the status of the create of \clients -
      nicer way of handling \clients
      readx reply packets can be over-sized
      put the "max xmit" option back into Samba4
      fixed the handling of level II oplocks in samba4, especially when
      use client1, client2 not client0, client1 to better match netbench
      - use a linked list for the ftable in the nbench load generator. This
      - moved some of the base tests into torture/basic/
      copy with a null volume name in a trans2 QFSINFO call
      removed the state parameter to tdb_traverse and the TDB_MODIFY flag
      added a private pointer to tdb_traverse() to allow callers to supply
      added a TDB_MODIFY flag to tdb_store() that says "if the record
      after discussion with the copyright holders tdb is now under the LGPL
      switch from SIG_ATOMIC_T to sig_atomic_t
      merge some recent tdb changed from samba3
      merge tdb changes from samba4 - this means tdb is now under the LGPL, as discussed and agreed previously
      make a more recent snapshot of ldb available to interested
      building with Makefile.ldb now works
      added lsaCreateAccount() and a test in the RPC-LSA test suite
      allow "struct TDB_DATA" as well as just "TDB_DATA"
      added the rest of the ldb_modify() code, which required a fairly large
      added idl and test suite for lsa_CreateTrustedDomain()
      added IDL and test suite for lsa_CreateSecret()
      added IDL and test for lsa_OpenSecret()
      r59: revert session key problem
      r426: fixed bug noticed by wim.delvaux at adaptiveplanet.com in handling of timeout in socket connections
      r2160: fixed the uuid pack/unpack routines (they could go past the end of the UUID structure)
      r2163: converted samba3 to use the new utf-16 aware iconv code. Also changed
      r2233: fixed 3 places where == is mistakenly used instead of = in bourne
      r2778: merged the new samba4 ms_fnmatch code to Samba3. Thanks to Rusty
      r2824: restored the is_case_sensitive option to ms_fnmatch() in Samba3. It is
      r3008: when checking for the existance of a lock we are only doing a single
      r3954: bring Samba3 into line with the Samba4 password change code
      r8673: merged from samba4
      r15007: fixed usage of cli_list() in smbwrapper so it compiles. This doesn't get smbwrapper really working again, but at least it will help Timur Bakeyev in his question to make it work
      r17124: fixed a bug which caused resolve_ads() to spin forever if one of the
      r18856: fixed HAVE_IMMEDIATE_STRUCTURES and thus checking of NTSTATUS/BOOL
      r18858: arrgh! - since HAVE_IMMEDIATE_STRUCTURES were last enabled the code
      r18863: the test for immediate structures has moved to lib/replace/
      r18864: merge lib/replace changes from samba4
      r18865: fixed some of the most obvious NTSTATUS/WERROR mixups in Samba3. It
      r18866: Jeremy and Volker have given the go-ahead on the group mapping ldb
      r18867: change the group mapping code to use ldb instead of tdb
      r18868: just in case there is a disaster (with our code? never ...) use a
      r18869: two build fixes for systems without ldap
      r18870: - enable the ldb ldap backend properly based on configure tests for
      r18910: Change ldb_msg_add_string() to not actually add an attribute if the
      r18912: we don't need the special case for comments now in the
      r18938: fixed a group map bug reported by Jerry. The caller in mapping.c
      r18939: don't rely on the umask being right in ldb creation. Both Samba3 and
      r18966: this bug affects Samba3 too. I'm actually surprised nobody has
      r19125: merge from samba4
      r19426: merge nearly all the differences between Samba3 tdb and Samba4
      r19429: moved tdb/common/tdbutil.c into lib/util_tdb.c
      r19430: merge recent ldb changes from Samba4. This includes memory leak fixes
      r19431: merge recent talloc performance improvements from Samba4
      r20690: fix a bug that causes smbd to 'hang' intermittently.
      r21176: merged va_end() changes from Samba4
      r21813: fixed an integer overflow error in the ndr push code.
      r21814: use ndr_push_error in the ndr layer, not just a NTSTATUS failure
      r22784: fixed change notify for delete on close
      r23323: merged ldb changes from 3.0.26
      r23367: check the "use mmap" option for ldb too
      r23783: Processing the UAS change message was causing problems on ppc64 Linux
      r23784: use the GPLv3 boilerplate as recommended by the FSF and the license text
      r23785: use the GPLv3 boilerplate as recommended by the FSF and the license text
      r23786: Use linux/dqblk_xfs.h rather than a private copy of this header in the
      r23787: Remove the pcp example code until SGI have given us approval to use it
      r23788: the pcp Makefile is also GPLv2 only.
      r23789: more pcp files under v2-only
      r23790: LGPLv3+ conversion for our LGPLv2+ library code
      r23791: found some more v2->v3 conversions
      r23793: fixed incorrect v2-only licensing template for debian packaging files
      r23794: convert more code from LGPLv2+ to LGPLv3+
      r23795: more v2->v3 conversion
      r23797: started fixing old FSF addresses. Fixed pcap2nbench COPYING file
      r23798: updated old Temple Place FSF addresses to new URL
      r23799: updated old Franklin Street FSF addresses to new URL
      r23800: LGPL is now called GNU Lesser General Public License
      r23801: The FSF has moved around a lot. This fixes their Mass Ave address.
      r23802: fixed URL in XML
      r23804: here too
      r23: get rid of def_finfo
      r34: a test commit
      r35: a test commit - 2
      r65: added support for file streams in the simple NTVFS backend
      r66: fixed a segv when printing an error from a session setup failure. This
      r67: added a destroy hook in the policy handle -> wire handle code to allow backends
      r99: make sure we reap child processes in the standard process model
      r100: remember the user session key during session setup so it can be used in various crypto
      r101: added lsa_SetSecret() and lsa_QuerySecret()
      r106: add an idea about SMB UNC names
      r107: a test commit
      r108: a test commit
      r109: a test commit 2
      r112: the simple backend now registers as both "simple" and "default"
      r113: added support for "read only = yes" in simple backend
      r114: - remember to initialise open_files
      r130: added DCERPC_COMMON_OBJS to Makefile.in
      r131: mark some scripts executable
      r132: fill in the correct default case for the WKSSVC GetInfo call
      r133: don't try to do a database deltas with a -1 seq num
      r134:  - added ldb to the build of smbd
      r135: some test ldif for an idea I am playing with to replace smb.conf with a ldb
      r136: I forgot to add config.m4 for ldb in my ldb commit
      r152: a quick airport commit ....
      r157: cope with or without LDAP in ldb sample Makefile
      r158: cope with or without LDAP in samba build of ldb
      r159: nicer usage messages when no URL is given
      r163:  - enable ldap in the sample makefile, and use /usr prefix
      r194: fixed compile with ldap
      r218: added a comment regarding the %c strftime() warning
      r255: added samr_SetDomainInfo IDL and test code
      r256: added samr_CreateDomainGroup() and samr_DeleteDomainGroup() IDL and test code
      r257: added samr_SetGroupInfo() IDL and test code
      r258: added samr_AddGroupMember() IDL and test code
      r259: added samr_DeleteGroupMember() IDL and test code
      r265: fixed a bug in the string to sid conversion code
      r266: modified autoidl to deal with policy handles (this helped me work out
      r267: added IDL and test code for samr_ChangePasswordUser(),
      r268: added IDL and test code for samr_QueryDomainInfo2(),
      r275: added IDL and test code for samr_QueryDisplayInfo3(),
      r287: patch from Richard Renard to add AcctLockStr and the delete user and
      r295: more correct IDL for the netr_AcctLock structure (I hope)
      r305: - added IDL and test code for samr_RidToSid()
      r306: added another define for a DCERPC fault code
      r307: added IDL and test code for samr_GetDomPwInfo(), samr_SetUserInfo2(),
      r322: use the -C option to configure for developers (makes a huge speed difference)
      r323: added rough password quality checking in generate_random_str(), so we generate passwords
      r324:  - don't reseed on every password generate
      r325: added IDL and test code for samr_ChangePasswordUser3().
      r326: tweaks to the RPC-SAMR test code to allow win2003 to pass the test (for example, not filling in extra
      r327: fixed an uninitialised variable found by valgrind
      r335: added much better handling of servers that die unexpectedly during a
      r336: added a -X command line option to smbtorture to enable dangerous or
      r343: added automatic reindexing of the database when the index list changes
      r344: fixed deletion of index records
      r357: added share browsing to smbclient using the SRVSVC MSRPC pipe
      r358: added some more annotation on the samr unknown attributes
      r359: moved the share type definitions to srvsvc.idl
      r360: use the STYPE_* definitions from srvsvc.idl
      r361: allow anonymous browsing
      r362: after setting domain info query it again so we can see what attributes stick
      r363: nicer error handling in pidl
      r364: finally worked out the ancient samr_ChangePasswordUser() interface
      r365: improved the IDL for samr_Connect5()
      r372: automatically create a fake BDC machine account and delete it
      r373: use a much larger default tdb hash size in ldb
      r374: allow for a policy_handle fetch using a handle type of
      r380: make sure that ldbedit -a works with all tdb and LDAP backends
      r381: make the code more C++ friendly
      r387: more C++ friendly changes
      r388: added IDL for 3 more set user info levels (all of which set the
      r389: added a test for set user info level 26 (set password extended)
      r390: added my best guess for how session keys are supposed to work when you
      r392: added IDL for 3 more netlogon Delta levels, thanks to a dump from Richard Renard
      r420: added nicer names for the field bits in userinfo21
      r435: a major upgrade for ldb
      r436: fixed indexing of objectclass with subclasses
      r437: fixed handling of a corner case with multi-valued indexing
      r441: added an example of how to use the remote rpc interface
      r442: fixed some uninitialised variables pointed out by gcc -O3
      r444:  - added the beginnings of a ldb test suite and benchmark
      r445: fixed the bind_nak code
      r452: move from first-fit to best-fit in tdb record allocation. For a
      r453: added a comment about indexing on objectclass
      r454: allow a non-URL form of a filename to be used in ldb_connect(). This
      r456:  - added -i option to ldbsearch
      r457: added some more samr tests to help me work out the right error codes
      r458: this is the (very primitive) beginnings of a SAMR server for
      r459: added an initial provision.ldif - this is temporary, and needs to be
      r462: added an explanation about the rather complex ltdb_key() function
      r463: build ldb with debugging when standalone
      r464: a big improvement to the API for writing server-side RPC
      r465: we need common.h in two more rpc server pipes
      r466: implemented samr_OpenDomain() and samr_GetDomPwInfo() server side calls
      r468: fixed timegm() on broken systems
      r469: considerably improved the ChangePasswordUser3() IDL thanks to an idea from abartlet
      r476: i forgot the argument to get_time_zone()
      r490: - expanded the test suite to test modify and delete operations
      r502: modified ldb to allow the use of an external pool memory
      r503: we don't need to include ldb_parse.h any more
      r504: fixed a bad call to list_union()
      r506: got rid of unused function secrets_get_trusted_domains()
      r507: the new ldb code will use talloc_free() a lot, so I have made
      r508: fixed a place where we used free() on memory from a talloc(). The new
      r509: fixed a memory handling bug that affects ldb with memory pools that
      r510: converted the samdb code to give ldb a talloc context rather than letting ldb use malloc
      r511: fix some const handling
      r513: added a generic ldb debug system to allow the Samba debug functions to
      r514: added a context pointer to the samdb interface, as suggested by
      r549: added support for DOS error codes in NTSTATUS returns. This uses a
      r574:  - another attempt at const cleanliness in ldb
      r575: moved the SID_NAME_USE enum into samr.idl
      r576: added a ldap_timestring() function (needed for fields like whenChanged in SAM db)
      r577: extended the LookupNames test to check for correct handling of unmapped names
      r578: initial server side implementation of samr_CreateUser(),
      r582: added the LMSessKey in SamInfo and SamInfo2, thanks to work by abartlet
      r583: fixed two bugs in the handling of index entry deletion
      r586: removed --clientfns from build_idl.sh (tim removed that code from pidl)
      r587: added server code for samr_EnumDomainUsers, and started adding
      r591: don't need to init non-ref out ptrs (thanks to abartlet for spotting this)
      r593: add a constant for the records size multiplier for max_size in samr_EnumDomainUsers
      r594:  - make sure all users in the domain have the same base sid!
      r595: nicer handling on max_size multiplier
      r596: log all ldb searches at level 4 in samdb
      r601: added the server code for all the samr_SetUserInfo and samr_QueryUserInfo levels except for the password
      r606: added a HIDDEN attribute on fields in ldb (in @ATTRIBUTES). This allows you to mark
      r608: - a couple of very minor fixes to the CreateGroup code
      r609: allow ldbedit to take a list of attributes to edit, just like
      r612: fixed a timezone call typo noticed by abartlet
      r622: removed some unused functions to make smbd compile again after
      r623: setUserInfo level 24 (password set) now works in the SAMR server. This includes all
      r624: all templates should be in class Template
      r625:  - handle passwords longer than length 14 (thanks to abartlet for pointing out the bug)
      r711: don't hide attributes inside the special ldb_tdb records (so the fact
      r712: fixed a bug in the NetShareGetInfo idl, and added another info level
      r713: added a NetShareGetInfo torture test (thanks to abartlet for pointing
      r714: make sure ldb formats are portable between big/little endian machines
      r718: removed some more unused code, and two source files
      r781: added level6 for logon level in SamLogon netlogon.idl
      r782: added torture test for level 6 logon level in netr_LogonSamLogon
      r790: started working on some documentation (manual pages) for ldb
      r791: added ldb man page build to ldb makefile
      r792:  - changed the ldb ldif_* functions to be in the ldb_ namespace
      r793:  - don't make templates members of any class that would make them show
      r796: fixed samr_OemChangePasswordUser2() to replace attributes, not add
      r811: make the ldb_modify REPLACE semantics better match LDAP (ie. no error
      r812: added a new samdb_replace() call that simplifies the code in the main samr server a bit.
      r813: gcc has fixed its huge debug sizes with -g now, so drop the -gstabs,
      r815: include our netbios name in the negprot response (this matches win2003)
      r818: added server side SMB signing to Samba4
      r826: removed a pile of old code, in preparation for a new ACL handling system. I'd like to get rid of DOM_SID completely soon
      r827: remove a few more unused functions that we are unlikely to use again
      r836: get rid of SEC_DESC and related structure definitions
      r837: get rid of some more old rpc headers, and the genparser headers
      r838: got rid of rpc_misc.h
      r839: password set/change in the samr server is complex enough that it
      r867: removed a couple of unused structures
      r868: we should issue a rpc fault OP_RANGE_ERROR not a WERR_NOT_SUPPORTED for
      r870: we should issue a rpc fault OP_RANGE_ERROR not a WERR_NOT_SUPPORTED for
      r871: add a comment about how samdb_set_password() works
      r873: converted samba4 to use real 64 bit integers instead of
      r879: fixed a typo in the password fetch wrapper
      r893: a few more _t conversions
      r894: use _t in generated pidl code
      r895: use _t in base ndr fns
      r896: - use andrews samdb_result_passwords() for the remaining password change mechanisms
      r897: - user/group creation needs to create unique names across both the
      r898: - remove some unused macros
      r900: when DEBUGLEVEL > 10 print the full deocde of all RPC calls in the server
      r901: w2k3 completely ignores the domain name argument to GetDomPwInfo,
      r902: added torture tests for sending rubbish in the domain name field of GetDomPwInfo
      r903: used samdb_result_passwords() in samr_ChangePasswordUser2() and fix the error handling on a bad change.
      r904: - fixed account expiry testing in auth_sam
      r917: - added the start of a LSA server to samba4.
      r918:  - dcerpc endpoint name are case insensitive
      r919: - added lsa_QueryInfoPolicy2() to IDL, test suite and server
      r920: a placeholder lsads.idl file (lack of this is why the build farm is unhappy for samba4)
      r924: got rid of the global well-known SIDs, instead using const defines in misc.idl
      r934: on ascii strings STR_TERMINATE_ASCII should trigger STR_TERMINATE behaviour
      r935: remove unused variable
      r937:  - added a simple QuerySecurity implementation in samr server
      r950: - added netr_ServerAuthenticate3(). This is used by WinXP clients who try to login to Samba4, as
      r951: from w2k3 behaviour, the netlogon server is supposed to give back the negotiate flags it can support.
      r952: fixed schannel from my last commit
      r975: slight improvemet to nt_errstr(), still needs to be fixed properly
      r976:  - added -W for workgroup to locktest
      r995: - renamed many of our crypto routines to use the industry standard
      r1014: change the handling of r->out to auto-zero the structure, and auto-copy
      r1015: commit the schannel session key handling code now, so abartlet and
      r1016: - store the schannel session key after it is established
      r1017: - move to a centralised way of handling talloc/ldb interaction
      r1018: fix a const and unsigned int problem in ldb
      r1029: cope wiith samdb_result_passwords() returning a null machine password
      r1030: added server side schannel support
      r1040: make sure main() doesn't get auto-prototyped
      r1041: - pulled the domain join code out of the netlogon test and made it a separate utility function, to allow
      r1042: added testing of 128 bit schannel session keys
      r1043: allocate signature from the right mem_ctx. Samba4 now passes the schannel torture test.
      r1044: don't use sub_get_remote_machine()
      r1046: initialise a structure element caught by valgrind
      r1048: - moved the schannel definitions into a separate schannel.idl
      r1056: fixed a comment on handling of the initial challenge in the ntlmssp rpc server backend
      r1057: added rpc packet logging for packets that generate rpc faults. This
      r1060: check for an invalid session key in samr_set_password()
      r1130: remove some pointless debug messages
      r1131: remove an error msg for failing to open unexpected.tdb
      r1132: add a PRINTF_ATTRIBUTE to ndr_pull_error() to catch printf style coding errors
      r1133: - add ndr_pull_ptr() as a separate call instead of ndr_pull_uint32()
      r1134: added a TODO regarding schannel credentials
      r1135:  - allow integer function numbers in ndrdump
      r1136: - added IDL for netr_LogonGetDomainInfo()
      r1137: - added torture test for netr_LogonGetDomainInfo() call
      r1138: allow for a user in no groups
      r1139: added IDL and server code for netr_LogonSamLogonWithFlags()
      r1140: added IDL and test code for validation level 6 in sam logon
      r1141: - consolidated the netr_SamInfo structures using a netr_SamBaseInfo
      r1143: fixed spelling of sAMAccountName
      r1144: added logon level 5 for sam logon
      r1145: added server support for logon level 5 in sam logon
      r1146: initially zero server info
      r1148: fixed a minor formatting error in generated code
      r1149: fixed the handling of NDR_SET_VALUES in the debug print of rpc structures in the generated rpc server code
      r1150: - fixed interactive sam logon in the rpc server
      r1151: fixed fill-in of force_password_change field in auth_sam
      r1165: fixed handling of SMBtrans replies that should return STATUS_BUFFER_OVERFLOW when more data is present.
      r1168: fixed a little-endian/big-endian mixup in the rpc server code
      r1464: the recent build changes completely lost the speed advantage of using
      r1465: always do a full C prototype, even if its only (void).
      r1466: the name "oid" is taken by some silly system headers - avoid it in our code
      r1507: fixed the handling of SMB chaining with the new server structure. You
      r1508: simple fix for broken server side signing. This may need more work for
      r1509: in order to interoperate with NT3.1 we need to ignore extra data at the end of RPC PDUs.
      r1510: add a commented out routine I used to test password change on NT3.
      r1511: fixed a free() that should be ldb_free()
      r1512: fixed a bug where we could reference the timer event handler after destruction
      r1517: change event_remove_timed() to remove by structure not by handler.
      r1518: check for ldb_search giving -1 (indicating db corruption)
      r1519: show the ldb_errstring() value in the log for failed ldb calls
      r1520: only call write handler or read handler, not both. This copes with the
      r1523: declaring variables "in" and "out" in every C module is a bad idea!
      r1578: the first stage of the async client rewrite.
      r1602: make sure we honor the use_spnego flag
      r1603: fixed in.size to not overstate the packet size by 4 bytes
      r1606: make the low level socket read/write routines cope properly with non-blocking sockets
      r1618: fixed the receipt of multi-part replies to SMBtrans2
      r1619:  - add support for older systems to cli_list*()
      r1627: make sure we initialise write_time in the deprecated function cli_ctemp()
      r1628:  - fixed the comment on run_deferopen. (I also think that the
      r1629: server_zone needs to be "int" not "int16_t" as it can hold values
      r1630: - fixed the replacement timegm() function to work correctly for DST changes
      r1631: don't use req->transport after req has been destroyed
      r1632: in case of error don't send uninitialised fnums on the wire
      r1633: fixed a couple of async oplock handling errors
      r1634: to get signing right for async requests we must send requests in
      r1635: when a transport dies, setup errors for all pending sends and recvs, plus disalllow any more sends
      r1636: improved the negnowait test so it is standalone (taking advantage of the async APIs)
      r1637: - w2k3 can't handle more than 1000 names in a LookupNames request
      r1644: changed the way [relative] pointers work in pidl, making them much
      r1645: added a debug when a RPC fault is received
      r1646: disable testing of group rename in the RPC-SAMR test, as it leaves the
      r1657: fixed the string types of two strings in svcctl.
      r1662: add a copy of the GPL text to the samba4 svn tree
      r1671: make [relative] pointers in idl much more generic, treating them just
      r1673: using the new [relative] pidl handling, the PAC decode is now much closer
      r1674: fixed a bug in the handling of STR_LEN8BIT flagged strings
      r1675: netlogon deltas IDL update from Richard Renard
      r1676: - improved the handling of username/password in locktest and gentest
      r1677: security descriptors are always little-endian, regardless of DCE/RPC
      r1712: this should fix a bug with a spinning client when a server dies
      r1738: honor the "unicode=yes/no" option in the SMB client library
      r1739: fixed the padding in setpathinfo, noticed when forcing negotiated ascii strings
      r1740: fixed the torture suite for ASCII-only servers
      r1741: fixed padding of setpathinfo in server
      r1749: added some random stuff that captures some discussions volker and I
      r1757: much simpler (and smaller, faster etc) way of doing relative pointers
      r1817: fixed fault code generation for unimplemented functions in epmapper
      r1818: _really_ fixed epmapper this time, it was using more than one old rpc interface method.
      r1819: changed "smb ports" to be a LIST parameter type in loadparm (its a classic case for a list)
      r1820: added a strcmp_safe() that handles NULL pointers. Needed for the
      r1821: fixed reference to "status" that should be "result"
      r1824: nicer handling of NBT session replies, and handling of bad packets
      r1892: this adds talloc_get_context(), which is something I discussed at the
      r1893: add a commented out lump of code to implement the "by the SPEC"
      r1895: added a note about OPEN_BY_FILE_ID to the ntcreatex interface definition
      r1896: stricter check on packet parsing for NBT session replies
      r1897: added a choose_called_name() function that allows us to more sanely
      r1941: - fixed an allocation error with querying security descriptors remotely
      r1972: cmdline_auth_info does not need to be declared global
      r1973: for systems that don't have strtoull() try strtouq(). This should fix
      r1982: i is not initialised or used
      r1983: a completely new implementation of talloc
      r1984: this change is what you should read to understand the new talloc()
      r1985: take advantage of the new talloc in a few more places
      r1989: fixed a couple of bugs in code that assumes sizeof(time_t) == sizeof(int)
      r2003: got rid of next_token_nr(), which involved some horrible globals
      r2029: changed our client side dcerpc padding to match what w2k3 does - a 16
      r2030: quick hack to allow the simple NTVFS backend to handler base directories with mixed case names
      r2031: add a check for a blank secret return in lsa secret tests
      r2036: switched the spnego code to use talloc
      r2037: switched the asn.1 code to use talloc
      r2038: get rid of the optimisation in the dcerpc server that tries to avoid a
      r2039: got rid of the free() ptr in DATA_BLOB
      r2040: fixed a memory handling error in clisocket (caught with valgrind)
      r2042: missed a couple of places that should be talloc_free()
      r2043: data_blob() now returns a talloc'd pointer. If everyone has been
      r2044: fixed two unin
      r2045: fixed a date format push in SMBsearch
      r2046: fixed two server packet format errors found with the RAW-* tests
      r2049: talloc now has destructors and reference counts
      r2050: fixed a case where code assumed you could Realloc the result of a data_blob()
      r2051: switched the samdb over to using the new destructor and reference
      r2052: rewrote the talloc section of the programming guide
      r2074: fixed a typo
      r2100: rework the dcerpc client side library so that it is async. We now
      r2101: fixed a signed/unsigned char warning
      r2102: fixed a race condition when handling dos errors that are in our
      r2103: in the conversion to async rpc I simplified the smb backend to only
      r2104: fixed typo that causes a segv
      r2105: added a TestSleep() operation to the echo pipe and extended the
      r2106: try to cope with a wider range of UTF-16 characters when we are using
      r2107: added a SAMR async test - this one seems to work
      r2118: fixed the receipt of bigendian rpc packets with the new async code.
      r2125: the lp_use_mmap() in map_file() is inappropriate for 2 reasons, so I have removed it.
      r2126: two more lsa functions worked out by richard renard
      r2127: more lsa IDL updates from Richard Renard
      r2128: netlogon DELTA_POLICY fix from rrenard
      r2158: removed a misleading comment (the extra uint16 is just padding)
      r2159: converted samba4 over to UTF-16.
      r2164: put the latest "accept either form" utf-16 iconv code in samba4
      r2165: generalise the charset torture test to add testing of CP850
      r2169: switch core iconv code to use talloc
      r2170: if we don't have a native iconv library then we can't build this test
      r2179: two more lsa torture tests from Richard Renard. Thanks!
      r2180: added RPC flags "padcheck" which enables checking of all received pad
      r2181: an rpc async test on the netlogon pipe
      r2182: force the torture test domain join to happen on SMB to prevent the
      r2184: use the smb.conf socket options for client code too
      r2185: add a callback function to the dcerpc async API
      r2186: setting [ref] output pointers in dcerpc calls is pointless. Removed it
      r2192: removed an erroneous free() call on an error path
      r2199: the unknown 16 bit number in lsa_LookupPrivDisplayName() is a language
      r2200: solved another piece of the lsakey puzzle - the session key for lsa
      r2201: removed an exit I accidentially left in
      r2202: don't close the smb pipe after the puzzle test
      r2203: delete the key after testing, so as not to clutter the server with random keys
      r2204: added [flag(RELATIVE_CURRENT)] to change [relative] pointer behaviour
      r2205: fixed an incorrect cast that broke relative strings in spoolss
      r2206: another (untested) attempt to make RELATIVE_CURRENT work for volker,
      r2207: this bug caued valgrind to consume infinite memory till the kernel killed it :(
      r2209: patch from volker to add EnumPorts spoolss IDL and test code
      r2238: the tdb_debug() function was totally bogus - remove it (you can't
      r2242: some older versions of gcc don't properly handle the
      r2249: got rid of some more mem_ctx elements in structures
      r2250: removed unnecessary mem_ctx
      r2251: forgot to add vfs_posix.h in my last commit
      r2252: don't register the same name twice
      r2266: yay! LSA session keys on TCP now work!
      r2267: we no longer need to force the domain join to happen on NCACN_NP - it
      r2271: fixed the popt argument array for smbtorture, getting rid of some
      r2272: fixed another couple of errors in the popt option arrays
      r2273: disable the async samr tests unless -X option is used, as windows
      r2274: fixed some popt option clashes between smbtorture and the standard options
      r2275: don't crash on a rpc BIND_NAK response ...
      r2280: fixed the session key choice for ncacn_np and ncacn_ip_tcp in the rpc server
      r2293: fixed older NTLM sign/seal in the server
      r2294: this fixes the NTLM2 sign+seal combination. I have now tested:
      r2301: add a server side warning when we receive more RPC data than we
      r2302: added a '--option' option, allowing any global or default option in
      r2303: allow setting of many ntlmssp options from smb.conf or the command
      r2304: fixed a bug in old style NTLM signing
      r2305: a useful test script for trying a wide variety of DCE/RPC options with the echo pipe
      r2306: in lp_set_cmdline(), also set any aliases as having been set by the commandline
      r2308: make talloc_vasprintf() available outside talloc.c
      r2309: make loadparm handling much more consistent, by using do_parameter()
      r2310: fixed some broken if statements in handling --with-krb5
      r2339: my first python commit!
      r2376: added a way to disable krb5 on the command line. Just use
      r2377: added a more generic way of disabling gensec subsystems. For example,
      r2380: nicer error reporting in convert_string()
      r2381: added a -v debugging option to ldbedit
      r2382: considerably improved the Bind and Unbind IDL and test code. We can
      r2383: fixed the handling of sending zero length dcerpc packets (I broke this
      r2384: i missed "nt status support" in my change to the new globals init code
      r2385: the gensec:krb5 test is not needed here any more, as we do it in the registration code
      r2386: fixed some indentation
      r2400: make ms_fnmatch() case insensitive. This is much more efficient than
      r2402: to make ms_fnmatch() case-insensitive we need toupper_w() exposed
      r2403: got rid of a unnecessary mem_ctx in the simple backend
      r2404: the first large lump of posix vfs stuff.
      r2405: expose unix_perms_to_wire() for use by the posix backend, in supporting the UNIX extensions
      r2406: fixed a couple of typos
      r2407: extend mkproto.pl to handle smb_ucs2_t for toupper_w()
      r2430: got rid of StrnCaseCmp and added an accelerated version of StrCaseCmp()
      r2431: got rid of strnequal() in a couple of places
      r2432: more string function updates.
      r2433: attrib_string() is now a generally available library function (it will be used by the new RAW-SEARCH test)
      r2434: separate "attrib" and "ex_attrib" elements for DOS attributes is pointless
      r2435: got rid of another pointless strnequal()
      r2436: the second big lump of posix vfs code.
      r2437: implemented a suggestion from abartlet that if we cannot convert
      r2438: compile on systems without O_DIRECTORY (probably won't work, but I'll get to that later)
      r2454: fixed the accelerated StrCaseCmp() so it compares in the right order
      r2455: don't use the uninitialised sess structure when auth fails
      r2456: got rid of some outdated global macros
      r2457: expanded the RAW-SEARCH test to test for what happens when a directory
      r2459: added STATUS_NO_MORE_FILES nt status code
      r2460: fixed the spnego code that I recently broke
      r2462: added a test for the error code for no matching filename
      r2463: make sure we don't send the password in a tconx unless we really have to
      r2465: modify the autoidl hack to work for DRSUAPI
      r2469: complete overhaul of the old-style RAW_SEARCH_ calls (the OS/2 and
      r2484: allow ldb to build standalone again
      r2485: - add a test case in ldbtest for a bug pointed out by Jon Haswell.
      r2493: allow tdb to build standalone
      r2494: fixed connecting to a share mode server (tested and really works now)
      r2495: cope properly with STATUS_NO_MORE_FILES in old search client code
      r2497: fixed an uninitialised 4 bytes in old style session setup (found with valgrind)
      r2498: added STATUS_NO_MORE_FILES to nt status codes that we can map to a string
      r2499: - use more efficient wildcard delete in smbclient
      r2500: disable the sleep test in echo until we have a win32 echo server that
      r2503: the RAW-SEARCH test now mostly passes against the posix backend
      r2520: - finished implementing the server side of the old style search requests
      r2521: fixed two uninitialised data errors found with valgrind when
      r2524: a simple pvfs rename implementation to make testing easier
      r2553: fixed ldbtest so it passes the ldap schema restrictions and thus can be used on the ldap backend
      r2554: added a test for a bug that jelmer pointed out (handling of -s one)
      r2556: fixed the -s one bug that jelmer pointed out
      r2561: completely redid the ntvfs module chaining code, You can now do something like:
      r2562: got rid of the "reference" backend that never happened - the code is
      r2572: fixed two places where status is not initialised in the nbench backend
      r2573: - added a configure test for nanosecond time resolution in struct stat
      r2577: - I recently found out that charaters below 0x3F are guaranteed not to
      r2580: fixed an uninitialised byte found by valgrind
      r2581: added "hosts allow" and "hosts deny" checking in smbd. I needed this
      r2583: mkproto.pl now treats "int main" as a special case and avoids it.
      r2586: updated the nbench example in the README to reflect the new chaining syntax
      r2587: fixed a couple of authentication memory leaks. There are more to be
      r2588: connect/disconnect is common enough that I don't think a level 0 DEBUG
      r2589: a simple test to help find security related memory leaks. Run valgrind on smbd with
      r2590: fixed one of the server security memory leaks. There are more :(
      r2591: fixed two errors in simple backend found with valgrind
      r2592: this fixes one of the security memory leaks in the server
      r2593: don't crash if the server doesn't know that 0 count searches mean 1
      r2613: use a talloc destructor to ensure that file descriptors are not leaked
      r2614: support CONNECT level DCE/RPC security in both client and
      r2615: fixed a bug in the server side support for CONNECT level security
      r2616: the cascading nature of talloc_free() can lead to some surprises. In
      r2617: add connect testing to the rpc test suite
      r2618: before we had refererence counts in talloc I added a hack in the
      r2621: - now that the client code is non-blocking, we no longer need
      r2622: to implement the SOCKET_FLAG_BLOCK option in the socket library we
      r2623: don't do pointer arithmetic on void*, as it doesn't work with non-GNU compilers
      r2624: - save some system calls by only trying read/write operations that select has indicated are possible
      r2625: use talloc_p, not talloc when possible (when allocating a structure in particular), as it gives us type checking.
      r2626: the symbol gai_error is defined in /usr/include, so don't use that name in our code
      r2627: use the new talloc capabilities in a bunch more places in the rpc
      r2628: got rid of some warnings and converted a few more places to use hierarchical memory allocation
      r2629: convert gensec to the new talloc model
      r2630: I missed a couple of places in the gensec talloc conversion
      r2631: the strchr family of functions should not return const strings.
      r2632: a new approach to handling const errors. We have had huge numbers of
      r2633: fixed some function types in the (unused) print backend
      r2634: use discard_const_p() in a few places
      r2635: mem_ctx cleanups on the lsa and netlogon pipes in the rpc server
      r2638: do lazy initialisation of iconv handles, so we don't initialise a
      r2639: we doon't need the valid_table code, so get rid of it
      r2640: valgrind does a great job on some types of memory leaks, but is slow
      r2641: talloc_p() now produces a named talloc pointer, with the name
      r2642: smb_iconv_t is a pointer, so checks against -1 errors should use a cast
      r2643: convert more of the auth subsyystem to the new talloc methods. This
      r2644: removed an unused function
      r2645: converted the NTLMSSP code to the new style of talloc
      r2646: - use a talloc destructor to ensure that sockets from the new socket
      r2648: - use a destructor on struct server_connection to simplify the
      r2649: - used some cpp tricks to make users of talloc() and talloc_realloc()
      r2650: fixed a memory leak in make_server_info()
      r2653: - data_blob() and data_blob_talloc() now get automatic names
      r2654: fixed some more server memory leaks. We are now down to a single leak
      r2655: fixed an error in the shutdown of the sock->transport->session->tree
      r2656: moved the seteuid configure tests into the posix backend (these tests
      r2657: if we are already fully authenticated in session setup then the vuid is ignored
      r2658: fixed a couple of error codes found with RAW-CONTEXT
      r2659: removed some extraneous debug msgs
      r2660: - converted the libcli/raw/ library to use talloc_increase_ref_count()
      r2661: fixed a client side memory leak in the clilist code.
      r2662: make --leak-check completely silent if not blocks are allocated
      r2663: fix an epmapper server leak - another talloc_realloc(NULL, ) leak
      r2664: fixed the final server leak for normal operation. We now get a clean report from --leak-check
      r2668: steal the cli pointer into the pipe context so a single free destroys the cli context too
      r2669: convert make_user_info() and associated functions from malloc to talloc
      r2670: use a destructor to auto-close the samr ldb when the last user
      r2671: we're getting too many errors caused by the talloc_realloc() API not
      r2672: don't call a variable "dup" as that conflicts with a standard system call name
      r2673: in the rpc server, free up the old call when we decide to extend an
      r2674: I have realised that talloc() should have its context marked const, as
      r2675: added a convenience function
      r2676: add a test of the reference counting logic in the SAMR server into the
      r2677: - fixed a bug in the recursive logic talloc_free() when there are
      r2678: from_name and to_name aren't needed in smb_iconv_t
      r2679: fixed an uninitialised variable found with valgrind
      r2680: switched the libcli/raw/ code over to use talloc_reference(), which simplifies things quite a bit
      r2709: finally solved the talloc reference problem.
      r2710: continue with the new style of providing a parent context whenever
      r2711: added a simple talloc speed tester. I get the following on my laptop:
      r2712: fixed a bug in ldbtest to make it cope with an existing index
      r2713: better handling of binary values in index key creation
      r2716: created a separate detailed talloc_guide.txt document, after volker
      r2717: added talloc_p() docs
      r2718: - added a talloc_unreference() function as requested by metze.
      r2719: an additional note on talloc_unreference()
      r2721: added a -b option to ldbtest so it can be used with the new smbd ldap server
      r2725: fixed ldbtest to give the basedn to ldb_search()
      r2726: added a -r option to ldbdel to allow easy delete of a whole
      r2733: added a note on performance
      r2734: the samdb_destructor can be static
      r2737: fixed up a corner case where talloc_unreference() and talloc_free()
      r2738: free up the session information as soon as it is invalidated in the
      r2742: - fixed a bug in talloc_unreference()
      r2743: fixed some errors in the description of talloc_reference(). Volker
      r2744: ben elliston taught me about gcov today, which allows you to measure
      r2745: added some example talloc reports
      r2763: use no-auth bind on ncacn_np unless we specify at least one of "sign", "seal" or "connect"
      r2773: allow zero sized array talloc
      r2774: get rid of the lanman specific code in masktest, and add a -l option
      r2775: rewrote our ms_fnmatch code to be much more efficient, and to exactly
      r2776: if there are no wildcard characters then use StrCaseCmp()
      r2783: got rid of the unused remote architecture detection code
      r2784: - fixed alignment of ascii directory listings
      r2785: call init_iconv() in smbtorture to ensure we have no memory allocated
      r2786: - match on both long and short name for search posix backend
      r2787: force masktest to use RAW_SEARCH_BOTH_DIRECTORY_INFO so it can obtain the short name
      r2788: prevent a memory leak in the pvfs search backend
      r2791: got rid of talloc_unreference() and instead created talloc_unlink(),
      r2792: got rid of talloc_ldb_alloc() and instead created talloc_realloc_fn(),
      r2793: fixed the handling of primaryGroupID in auth_sam. There were two bugs,
      r2794: a very simple version of the unixuid NTVFS pass-thru module. In
      r2796: - changed ldap attributes "UnixID" to "unixID" and "UnixName" to "unixName" to be more ldap traditional
      r2797: don't free the server_info before using it for anonymous connections
      r2798: get rid of a unnecessary static
      r2799: removed one last occurance of torture_ldb_alloc()
      r2800: removed the warning about using the posix ntvfs handler, as it is now
      r2802: a better provisioning script
      r2803: allow unixuid module to work with foreign security principles
      r2804: - setup some reasonable default SAM to unixName mappings in the provisioning.
      r2808: added auto-detection of unix user and groups names during provision.
      r2833: - added a call to SamrQueryGroupMember for every group, and fix the
      r2836: removed a couple of unused variables
      r2854: added a RPC-COUNTCALLS torture test - a useful varient on the full scanner in RPC-SCANNER
      r2856: fixed a minor memory leak in the auth code
      r2857: this commit gets rid of smb_ucs2_t, wpstring and fpstring, plus lots of associated functions.
      r2871: - got rid of the last bits of non-threadsafe data in util_str.o
      r2872: got rid of a couple of unused (and horrible) functions
      r2893: added very primitive name mangling support to pvfs
      r2900: rusty pointed out to me that discard_const() can be done via a macro
      r2901: if we can't load upcase.dat or lowcase.dat then don't waste 256k
      r2902: make toupper_w() and tolower_w() slightly faster by putting the most common
      r2903: a considerably more efficient (both in terms of CPU and memory)
      r2904: - fixed the old style SMBsearch to return the pvfs shortname, not a truncated long name.
      r2906: fixed a memory leak in the smbclient -L code
      r2907: auto destroy iconv memory handles on exit, to make valgrind leak
      r2909: fix some RAW-SEARCH torture mem leaks
      r2910: I noticed that the samr torture test was doing its own DOS->UNIX
      r2916: longhorn client doesn't bother setting the directory bit in ntcreatex
      r2925: added the definition for a new rpc fault code I am seeing on epmapper from lhorn
      r2926: name->dos.attrib is not valid unless name->exists is true
      r2927: imported the hash2 name mangling code from Samba3 into Samba4, but
      r2928: - fixed the handling of reserved names (rejecting them with ACCESS_DENIED)
      r2929: longhorn does not produce sorted directory listings! This is
      r2930: added a security context cache to the unixuid module. The module
      r2931: use next_codepoint() to ensure we properly handle multi-byte characters in pvfs_unix_path()
      r2932: character expansion in strlower_m or strupper_m is considered fatal
      r2934: - changed the unixuid module to use the nt_user_token instead of the server supplied info structure.
      r2941: added pvfs_flush() implementation to the posix backend
      r2948: added support for the [range(low,high)] attribute in pidl. This allows
      r2949: added some range checks in samr.idl
      r2950: 0x40000 is clearer than 262144
      r2951: fixed the intptr_t test for discard_const()
      r2958: the warnings from the swig code in pidl were totally swamping valid
      r2960: during a lunchtime discussion I found out that all powerpc processors
      r2961: fixed a silly typo
      r2968: fixed the byte order problem with the new RHS parsing on ncacn_ip_tcp
      r2969: inet_ntoa() takes an address in network byte order, so now that we
      r2982: added a test that shows the amount of time a server takes to update
      r2983: report a failure if a server doesn't update the write time at all
      r2984: fixed the error code for a non-terminal component of a path name not existing
      r2985: got rid of the unused tdb_lockkeys() and tdb_unlockkeys() functions
      r2987: added support for signed 32 bit integers in pidl
      r2988: this should fix support for negative switch levels in PIDL
      r2989: fix the printing of unions with negative cases when :print is used
      r3004: removed some unused functions
      r3005: added talloc wrappers around tdb_open() and ldb_connect(), so that the
      r3011: separated the locktest code into a separate module in smbtorture
      r3012: added initial support for byte range locking in the posix vfs. This is
      r3013: added support for unix domain sockets in the generic socket library. I
      r3014: got rid of the old intra-smbd messaging system in preparation for the new one
      r3015: fixed typo noticed by abartlett
      r3016: - converted the events code to talloc
      r3017: nicer memory handling for event_context_merge()
      r3018: handle STATUS_MORE_ENTRIES from socket_recv() in the messaging code
      r3019: make the LOCAL-MESSAGING test a 2 process test
      r3020: better error handling in socket_unix
      r3021: under heavy load the listen queue for messaging unix domain socket can fill up, leading to refused
      r3023: added immediate send of messages when they are first queued. This makes things a bit more efficient
      r3024: run the *_connect() NTVFS initialisation operation as root, to allow
      r3025: don't warn about no path in a service, as some backends (like cifs) don't need a path
      r3026: - added automatic retry to messages when the servers listen queue is
      r3027: got rid of some configure checks we don't need any more
      r3028: use talloc_free() instead of talloc_unlink(), as the
      r3029: implemented byte range lock timeouts.
      r3030: added testing of lock cancel, and some more special offsets (locks
      r3031: added support for lock cancelation, which effectively just triggers an early lock timeout
      r3034:  - fixed a bug in message dispatch, when the dispatch function called messaging_deregister()
      r3035: if the ntvfs layers prior to us have said that we can't perform an
      r3039: This solves the problem of async handlers in ntvfs backends not being
      r3052: added talloc_zero_p() and talloc_zero_array_p() calls, for allocating zeroed memory
      r3053: make the maxfid test use subdirectories, so it doesn't create 64k
      r3054: use talloc_zero_array_p() in a couple of places
      r3055: use talloc_zero_p()
      r3056: added a id -> pointer data structure (a type of radix tree). This is
      r3057: - moved the idtree.c code into lib/
      r3058: we don't use the bitmap code any more, delete it
      r3059: completely get rid of the MAX_CONNECTIONS limit, as a idle tree
      r3061: change a debug to help track down a charset problem
      r3062: handle spaces at the start of options in lp_set_cmdline()
      r3063: our default dos charset is CP850, but some systems don't have that, so
      r3064:  - use UINT8_MAX and UINT16_MAX instead of hex values for idr_get_new() limits
      r3081: several updates to ntvfs and server side async request handling in
      r3082: added a "cifs:mapgeneric" option, which tells the cifs backend to use
      r3083: fixed a couple of generic mapping errors found with RAW-* and cifs:mapgeneric
      r3084: mincnt and maxcnt were the wrong way around in readbraw server code
      r3085: make the RAW-WRITE tests more robust to errors in previous parts of the test
      r3086: fixed smbpid handling in the cifs backend
      r3087: fixed a typo
      r3103: use a destructor to ensure that on abnormnal rpc request termination
      r3105: using __location__ instead of __LINE__ to give info on error locations is more useful
      r3106: don't call a tree disconnect in the cifs backend, as during a smbd
      r3107: slight tweak to the openx -> ntcreatex mapping routine. This mapping
      r3108: try to cope with servers that put FILE_ATTRIBUTE_NONINDEXED on files in the RAW-OPEN test
      r3126: in the brlock code I had used a void* for the brl context as I didn't
      r3127: added the initial code for the open files database. Doesn't do
      r3130: - added a LOCAL-IDTREE test suite
      r3131: - make map_nt_error_from_unix() return NT_STATUS_UNSUCCESSFUL if errno is 0
      r3132: - fixed a type conflict found by talloc_array_p()
      r3133: - more consistent error checking in rename and setfileinfo
      r3134: use struct idr_context * in tid allocation
      r3135: split the "create new" logic out from the "open existing" logic in
      r3142: fill in all the ntcreatex response fields explicitly, rather than
      r3147: added basic share modes support for pvfs (or more precisely, ntcreatex
      r3148: make --failures work for the BASE-DENY1 and BASE-DENY2 tests
      r3149: separate the delete on close test into torture/basic/delete.c
      r3150: printing __location__ is more useful than a operation number
      r3152: reformatted some of the delete test code
      r3153: pvfs now passes the first 9 of the BASE-DELETE tests
      r3154: pvfs now passes all of BASE-DELETE
      r3155: reformat a delete test
      r3159: use easy to recognise file handle numbers for new file, old file and directory
      r3160: recognise RAW_SFILEINFO_DISPOSITION_INFORMATION (fixes temporary files from excel)
      r3161: pvfs now passes the RAW-SEEK test
      r3171: in qfileinfo getattre and standard have identical structures, so
      r3172: much better qfileinfo implementation in pvfs. We now pass RAW-QFILEINFO
      r3173: make the RAW-QFILEINFO test cope better with null strings from the server
      r3174: added pvfs_is_open() to allow us to check for open files on unlink. We
      r3176: added a script to run all the filesystem torture tests that are
      r3177: check for open files on rename
      r3178: honor the write_time on pvfs_close()
      r3179: - fixed error return on utime failure
      r3180: - basic support for SEC_RIGHT_MAXIMUM_ALLOWED in pvfs
      r3181: shutdown the secrets db on exit so we don't constantly get talloc leak warnings
      r3182: separate out the BASE-RENAME test into torture/basic/rename.c
      r3183: moved the unlink of the messaging unixdom socket to the messaging destructor
      r3184: don't setup socket options on unix domain sockets (our smb.conf socket options are really meant for tcp)
      r3188: tidy up the rename test a bit more
      r3189: improved the share_conflict() logic (both in terms of readability and
      r3191: use __location__ in RAW-UNLINK test
      r3192: make sure we don't call pvfs_can_delete() until after we have confirmed that name->exists
      r3193: improved the initial permissions choice for file create, based upon dos attribute
      r3194: fixed an uninitialised variable
      r3195: fill in more of the fsinfo fields, and avoid calling the potentially
      r3197: fixed error code mapping for ENOTDIR
      r3198: check for too many .. components in filenames
      r3199: added a couple more test paths to RAW-CHKPATH
      r3200: - improved the accuracy of openx emulation. We now nearly pass the openx portion of RAW-OPEN
      r3201: we now pass the BASE-OPEN test
      r3202: return a old DOS error code ERRSRV:ERRbaduid for a bad vuid. This means we now pass the BASE-VUID test.
      r3203: moved more test functions into torture/basic/*.c
      r3206: - added the reverse map for ERRbaduid to NT_STATUS_INVALID_HANDLE
      r3207: - reformat error msgs in BASE-DIR* tests
      r3208: fixed permissions of ncalrpc directory creation
      r3210: split lib/replace.o into a separate build subsystem LIBREPLACE, and
      r3223: continue the effort on LIBREPLACE to try to get the ldb tools to
      r3224: add the LOCAL-* tests to test_posix.sh
      r3227: added a per-share option "case insensitive filesystem", that tells the
      r3234: in SMBreadx, if the client asks for exactly 65535 bytes then don't try
      r3235: try readx beyond 64k in RAW-READ
      r3236: test a few more combinations in RAW-UNLINK
      r3237: - allow for readx calls larger than 64k
      r3238: rename null_mtime() to the more accurate name "null_time()", and
      r3239: reads of more than UINT16_MAX bytes should return 0 bytes
      r3240: - update the rules for what error codes should be given on the
      r3241: don't skip the read completely for a zero-length read, as it could give a lock conflict
      r3242: make the RAW-READ test not exercise the 0-0 lock, which is not deterministic
      r3243: read the high offset count in SMBreadx in the server
      r3244: pvfs now passes the RAW-UNLINK and RAW-READ tests
      r3245: use __location__ in RAW-SEARCH
      r3246: new files should get created with FILE_ATTRIBUTE_ARCHIVE
      r3247: FILE_ATTRIBUTE_NORMAL is only a null-op for setattr and setattre, not basic_info
      r3248: don't stop searches on failed fill_search_info()
      r3249: - change_time is closer to ctime than mtime
      r3251: - move the openattr test code into basic/attr.c
      r3252: pvfs now passes BASE-TRANS2
      r3253: - added rudimentary support for ntioctl in pvfs
      r3254: - expanded the RAW-IOCTL test
      r3255: - fixed 2 uninitialised data errors found with valgrind
      r3256: get rid of the unused session_claim() and session_yield() calls
      r3257: make the RAW-SEARCH test less sensitive to the servers directory ordering
      r3258: fixed "don't change" attribute for RAW_SFILEINFO_BASIC_INFO
      r3259: expanded the RAW-SEARCH test some more
      r3260: redid the pvfs_dirlist() interface in preparation for a "keep
      r3261: added seek to RAW-SEARCH test
      r3262: - new pvfs_dirlist code that reopens the directory between search
      r3263: - pvfs now passes RAW-SEARCH
      r3267: make LIBTDB depend on LIBREPLACE. This is needed for building the tdb tools on Solaris.
      r3268: - fixed wildcard handling in new dirlist code
      r3269: fixed return value
      r3270: - added another unlink test
      r3271: use "struct messaging_context *" instead of "void *" in messaging API
      r3276: - allow for more than 256 open old style searches (limit currently set at an arbitrary 5000)
      r3277: don't use the non-portable getaddrinfo() function, instead use
      r3278: - rewrote the client side rpc connection code to use lib/socket/
      r3279: Removed MSG_DONTWAIT flags as many platform don't have it.
      r3280: fixed byte order of rhs IP
      r3281: some compilers can't handle empty structures, so for empty IDL
      r3282: some C pre-processors don't like expressions like
      r3283: converted to quoted uuid() defines in all our IDL. This should help
      r3284: - don't use a enum for bit-fields. It isn't legal C (as C is limited to
      r3285: fixed another IDL typo
      r3286: filled in more missing SV_TYPE_* defines
      r3288: - updated the path processing in pvfs to pass the RAW-CHKPATH test. This
      r3300: initialise *sendlen on failure, to allow for callers to check only for
      r3304: changed the API to lib/socket/ a little.
      r3305: added ncalrpc to the list of rpc transports tested by test_echo.sh, so
      r3306: the main smb server code now handles non-blocking socket receives. I
      r3307: fixed the send side of the smb_server code to be non-blocking. This
      r3312: in the brlock code, we prevent lock stampedes by attempting to not
      r3313: in socket_accept() make the new socket non-blocking unless SOCKET_FLAG_BLOCK is set.
      r3314: added a option "socket:testnonblock" to the generic socket code. If
      r3315: converted the libcli/raw/ code to use the generic socket library. This
      r3316: give the LDAP server a chance of operating correctly non-blocking (it
      r3318: generate random STATUS_MORE_ENTRIES errors (1 in 10 packets) as well
      r3319: fixed a bug in the client library found by the new non-block testing code
      r3320: fixed bugs in the rpc_server code in handling partial packet receives and sends
      r3321: make the test_echo.sh test suite test non-blocking on all rpc transports
      r3322: fixed a bunch of warnings in the build, including one case where it was a real bug
      r3323: more warning reductions
      r3324: made the smbtorture code completely warning free
      r3325: missed one of the torture changes ...
      r3327: fixed another warning
      r3333: added configure tests for ipv6 support
      r3335: better configure support for ipv6 - thanks to a quick tutorial from metze
      r3341: - don't zero the async structure (makes valgrind more useful)
      r3346: - simplified vfs_nbench.c a bit, by using req->async_state->ntvfs inside
      r3347: fixed an uninitialised variable bug. Surprisingly hard to track down,
      r3349: fixed more uninitialised variable problems with the nbench module
      r3350: fixed a bug with sending multiple replies for the one request, as
      r3351: handle far more operations on open directory handles. pvfs was failing
      r3352: make smbcli_read() and smbcli_write() work with very small negotiated SMB buffer sizes
      r3353: don't reference dos.attrib unless its initialised
      r3354: honor "max xmit" and "max mux" from smb.conf in our client code. This
      r3355: fixed the old style search code in smb_server to correctly handle
      r3356: in the standard process model we need to make sure we close all
      r3357: removed the need to use TDB_CLEAR_IF_FIRST in Samba4.
      r3360: improved the deletion of tmp files. smbd now puts all tmp files in var/locks/smbd.tmp/
      r3363: added basic support for SA_RIGHT_FILE_EXECUTE, needed for opening .dll files
      r3366: updates from the junkcode version of talloc.
      r3371: fixed endpoint for browser.idl
      r3372: fixed the initial directory permissions for pvfs_mkdir()
      r3373: added better error reporting in pvfs_open
      r3375: changed the default max xmit until I fix a problem with the SMBtrans multi-part code
      r3380: - changed the default behaviour of server signing. We now have a default
      r3383: avoid multi-part SMBtrans and SMBtrans2 replies until our client library can handle
      r3384: added SA_RIGHT_FILE_WRITE_APPEND, which is a combination of write and append
      r3385: when discarding a unmatched reply print the command type to help debugging
      r3386: - fixed --seed option in smbtorture
      r3387: fixed pvfs to pass the NTDENY tests. The tricky bit was
      r3388: when doing schannel use a anonymous session setup (as the machine acct
      r3389: fixed schannel client side code. RPC-SCHANNEL now works against w2k3
      r3390: fixed schannel server side support. RPC-SCHANNEL now works against Samba4.
      r3391: fixed some memory leaks in the schannel code
      r3392: fixed schannel over ncalrpc
      r3393: added test_rpc.sh. The idea is that this script will test all the
      r3395: added support for "string32" type, to fix the fixed width string
      r3400: - allow callers to control the flags2 field in raw packets
      r3418: added BASE-NTDENY1 and BASE-NTDENY2 to the lists of tests that pvfs passes
      r3419: moved the libcli/raw structures into libcli/raw/libcliraw.h
      r3421: got rid of some unused code
      r3422: allow for subsystems that don't get included in the list of auto-prototype objects, using
      r3423: auto-generate prototypes for all external functions in pidl
      r3424: don't run mkproto.pl on pidl generated code, instead rely on pidl generating the
      r3425: got rid of a bunch of cruft from rewrite.h
      r3426: removed 2 unused files, and some unused variables
      r3427: split the openx logic out from the other open mapping code
      r3428: switched to using minimal includes for the auto-generated RPC code.
      r3441: some include file cleanups and general housekeeping
      r3443: the next stage in the include files re-organisation.
      r3445: made the gtk tooks use minimal includes. This approximately halves the
      r3446: created include/system/iconv.h and include/system/shmem.h
      r3447: more include/system/XXX.h include files
      r3448: some systems don't have stdint.h
      r3449: more include file reduction
      r3450: portability fixes
      r3453: - split out the auth and popt includes
      r3454: moved a few more things out if includes.h into the include/system/ include files.
      r3455: some more portability fixes. We nearly compile on solaris again now.
      r3457: s_addr is a macro on solaris, so we can't use it in structure names. arrgh.
      r3458: more solaris portability fixes, the main one being that we can't use a
      r3461: another place where "open" was used as a structure element
      r3462: separate out the crypto includes
      r3463: separated out some more headers (asn_1.h, messages.h, dlinklist.h and ioctl.h)
      r3464: split out registry.h, rap.h and ldap_server.h
      r3466: split out request.h, signing.h, and smb_server.h
      r3468: split out dcerpc_server.h
      r3470: removed some unused functions (should fix the build on IRIX 6.4)
      r3471: split out capabilities code from lib/system.c - should fix IRIX 6.5 build
      r3472: fixed build of reg_backend_gconf
      r3475: don't pass a ptr to an enum as a ptr to an int (bug found by tcc)
      r3476: fixed some const warnings
      r3478: split out some more pieces of includes.h
      r3480: moved some signal defines into include/system
      r3481: split out client.h and events.h
      r3482: fixed a warning and an error from the IRIX 6.4 build
      r3483: IRIX 6.4 now builds
      r3493: fixed a bug in readx reply where the client specifies an invalid high
      r3494: got rid of include/rewrite.h, and split out the dynconfig.h header
      r3497: removed some include cruft, and split out librpc/gen_ndr/tables.h
      r3499: setting an out param for a non-pointer doesn't do anything (and
      r3500: cleaned up the AS_USER/AS_GUEST stuff in the core smb packet processing
      r3507: - added deferred replies on sharing violation in pvfs open. The
      r3518: fixed some includes to be consistent.
      r3520: minor portability fix (for struct timeval)
      r3522: added async support to most of the ntvfs_map_*() functions, allowing functions like
      r3523: removed a useless level 0 DEBUG()
      r3528: added support for the SMBntcancel() operation, which cancels any
      r3529: fixed signing support for SMBntcancel requests (no reply means seq
      r3530: make sure we match ntvfs_async_state_pop() with ntvfs_async_state_push()
      r3531: add support for RAW_OPEN_MKNEW, RAW_OPEN_CREATE and RAW_OPEN_CTEMP in pvfs
      r3532: make sharing violation delay in pvfs configurable with "posix:sharedelay = usecs"
      r3539: much nicer async open delay code.
      r3540: added testing of SMBntcancel in the open/open/close mux
      r3543: fixed some #include lines to make them more consistent, and fixed
      r3544: fixed some #include lines to make them more consistent
      r3545: initial support for using extended attributes to hold extended dos attributes of files.
      r3546: including includes.h twice causes gcc 3.4 to crash with pch
      r3547: fixed waitpid in fcntl_lock.c (thanks to jbm for pointing this out)
      r3548: removed extra net/if.h include
      r3549: added support for DOS extended attribute lists (name/value pairs)
      r3550: fixed initial attribute on file create (inlusion of FILE_ATTRIBUTE_ARCHIVE)
      r3551: these utils need system/filesys.h
      r3552: fixed sense of ACL test
      r3571: rough guesses at what abartlet really wanted to do in his last commit
      r3573: added trans2open support to smbd and pvfs, and fine-tuned the open->generic ntvfs mapping code.
      r3574: the RAW-OPEN test changes broke a couple of the other tests. This
      r3575: fixed attribute normalisation in xattr code. RAW-SEARCH now passes again.
      r3576: don't consider short share delay timeouts to be an error, so we can
      r3578: a couple of include changes that should help with FreeBSD
      r3579: with the gcc warning flag from abartlet we don't need sys_strftime()
      r3580: - on file overwrite in ntcreatex we need to replace the file permissions.
      r3591: to get a bit more useful info from valgrind I'm disabling the
      r3592: auto-cleanup the test.$$ log files in these test scripts on control-C
      r3593: fixed the trans2 t2open reply to initialise all bytes (bug found by valgrind)
      r3594: continue conversion to __location__ from __LINE__ for error reporting
      r3595: - fixed a talloc_free ordering problem on cleanup with pending requests
      r3596: MODE_INFORMATION tests now pass. Only RENAME_INFORMATION level left to
      r3597: implement a suggestion from abartlet. By taking a refernce to the
      r3598: hopefully fix the build on stratos
      r3599: fixed a couple of memory errors in the rpc netlogon server
      r3600: fixed two debug typos
      r3608: added BASE-DENYDOS test
      r3610: prevent segv with heimdal and password krb5 init
      r3613: fixed a typo
      r3615: split out struct pvfs_file_handle from struct pvfs_file. This is in
      r3618: - this adds the special case for DENY_DOS semantics, as shown by the BASE-DENYDOS test.
      r3631: a couple of tweaks to the talloc hierarchy for async requests in
      r3632: added an index on "member" in default provision. This speeds up my
      r3633: - moved module init functions to after smb.conf and command line
      r3634: - fixed BASE-DISCONNECT test to force the async packets to be sent by
      r3635: fixed the crash from the BASE-DISCONNECT test
      r3656: allow easy testing of the "realloc changes the pointer" type of problem that abartlet
      r3658: use handle->fd == -1 as the primary indicator of a directory. This
      r3694: added support for the RENAME_INFORMATION level of setfileinfo and
      r3698: mark RAW-SFILEINFO as working
      r3699: - split the delayed write testing out of RAW-WRITE, as it is not yet
      r3700: pvfs passes RAW-WRITE but not BASE-DELAYWRITE
      r3717: - expanded the RAW-RENAME test a little
      r3718: added support for the ntrename level in pvfs_rename().
      r3719: pvfs now passes the RAW-RENAME test
      r3720: fixed the pulling of zero length ucs2 strings in smbd. I found this
      r3729: permission changes on directories always include the FILE_ATTRIBUTE_DIRECTORY bit
      r3741: FILE_ATTRIBUTE_DIRECTORY is illegal in open of a file
      r3742: make test-ldap give a sane error message when the openldap schema files are missing
      r3743: auto-support the RH schema location as well
      r3745: fixed the posix backend after the recent build changes (it had lost
      r3746: added RAW-STREAMS and RAW-EAS tests to smbtorture
      r3747: - added some of the infrastructure needed for streams support in pvfs
      r3748: pvfs passes RAW-EAS but not RAW-STREAMS yet
      r3749: don't consider it a failure if we fail to re-encode a codepoint above
      r3791: fixed declaration of torture_rpc_login
      r3792: improved the posix -> nt error mapping, so we get things like
      r3793: add some streams tests that show how the :$DATA suffix is handled
      r3798: added support for alternate data streams in xattrs into pvfs.
      r3799: - added the bit for FS_ATTR_NAMED_STREAMS support into qfsinfo filesystem attribute reply
      r3800: - fixed delete-on-close behaviour for streams
      r3801: added allocation size rounding. This is needed for ifstest.
      r3803: fixed detection of xattr support
      r3806: added support to smb_server and pvfs for the NTTRANS Create call. This
      r3821: added client side code and test code for NTTRANS_CREATE
      r3826: - added testing of ea lists in NTTRANS CREATE
      r3827: fixed copyright notices to remove simo and lkcl who have no code left in this file
      r3828: added testing of opening an existing file with EAs (the EAs are ignored)
      r3829: added a RAW-ACLS test suite that tests query/set of ACLs on a file
      r3830: unified the query/set security descriptor code with the rest of the
      r3831: added nttrans server code for query/set security descriptor. This
      r3832: added NT ACL query/set to the posix NTVFS backend. The default ACL is
      r3833: NTACL is a better xattr name than DosAcl (tpot suggested this)
      r3834: - fixed XATTR_NTACL_NAME
      r3835: - added testing of setting an initial ACL on a file using NTTRANS create
      r3836: - fixed the handling of NT_STATUS_BUFFER_TOO_SMALL in nttrans server
      r3837: added support for LsaLookupSids in the LSA rpc server. This allows the GUI ACL editor on w2k to
      r3838: use "security.NTACL" instead of "security.NTAcl" for the xattr name for ACLs
      r3916: w2k3 does not check the max_setup count in nttrans requests
      r3938: cleaned some old stuff out of loadparm
      r3939: - added "posix:fakeoplocks" option for testing with oplocks forced on
      r3941: make sure we don't keep pounding on a ncacn_ip_tcp connection after it is dead
      r3945: expanded the BASE-PROPERTIES test to print a nicely formatted list of
      r3952: added validation of the lm and nt verifiers to our server side password change code.
      r3953: the lm verifier key in passwoed ChangePasswordUser3 is based on the nt
      r3975: added LFN filesystem attribute bit definition from ethereal
      r3976: changed NBENCH to use the same recording method as the latest dbench,
      r3977: fixed the lmPwdHash change in the rpc server (we were not fetching the
      r3978: added IDL and test code for lsa_LookupSids2() and lsa_LookupNames2()
      r3979: added server side code for lsa_LookupSids2() and fixed authority_name
      r3980: added server side support for lsa_LookupNames() and lsa_LookupNames2()
      r3982: split out the sid -> uid/gid mapping routines into a ntvfs_sidmap
      r3983: posix:fakeoplocks should default to False, not True !
      r3988: made dom_sid_add_rid() allocate the new sid with proper parent/child talloc
      r3989: added a linear algorithmic mapping for uid->sid and gid->sid within
      r3990: take advantage of the uid->sid and gid->sid code to create a much
      r3991: for uid->sid and gid->sid to be efficient we need to index on unixID
      r3992: provide hooks for lsa to lookup sids allocated using the linear id->sid mapping
      r3993: use distinctive fnums in the ipc backend, to make monitoring sniffs easier
      r3994: - removed the unused reference count code in lsa server
      r3995: improved the default ACL mapping from unix perms
      r4010: fixed parsing of null attributes in the ldb ldif parser
      r4011: get rid of rpc_secdes.h and replace it with a single sane set of
      r4012: split out the lsa lookup single name logic into a separate function
      r4013: got rid of a bunch of unused or unmaintained code
      r4014: removed unused MacExtension.h header
      r4015: correct copyright attributions
      r4025: added a sec_access_check() function for checking security descriptors
      r4026: added NT ACL checking on pvfs_open() for existing files. I need to
      r4033: removed a pointless comment
      r4034: add a function security_descriptor_create() which can be used to
      r4035: more effort on consistent naming of the access mask bits.
      r4036: expanded the RAW-ACLS torture test to include tests for the
      r4037: fixed a bunch of "might be uninitialised" warnings after enabling -O1 in my compile
      r4039: added a test for an element > 128 bytes in length, to ensure we test
      r4048: a very simple howto for new developers to tell them how to build and install samba4
      r4049: a simple perl script to add a new user to Samba4 ldb
      r4050: make sure we add objectClass and sAMAccountName
      r4051: use talloc_array() instead of talloc() when allocating arrays in auto-generated ndr code
      r4052: fixed a bunch of code to use the type safe _p allocation macros
      r4053: expanded and fixed a bug in the RAW-ACLS test
      r4054: got rid of Realloc(), replacing it with the type safe macro realloc_p()
      r4055: fixed more places to use type safe allocation macros
      r4056: modified the access check code based on results from RAW-ACLS
      r4058: added a type safe version of smb_xmalloc()
      r4059: moved the ldb -o option parsing to a common routine
      r4060: removed an unused file
      r4061: more additions to the RAW-ACLS test, to help me work out some details for pvfs
      r4062: the RAW-ACLS test now passes. The SEC_STD_DELETE bit is rather strange
      r4065: fixed ntstatus->dos error code for NT_STATUS_NO_SUCH_FILE
      r4066: add a mapping for NT_STATUS_NO_MORE_ENTRIES
      r4067: no matches in findnext is not an error
      r4068: added LANMAN2.1 to list of supported protocols (for OS/2)
      r4069: better error code for SMBwriteBMPX
      r4071: - ldap does allow adding additional attribute values with a modify
      r4072: - changed the names of some of the well known sids to be more consistent
      r4073: - added a set of lsa helper routines to make lsa lookups that are
      r4074: make the RAW-ACLS test use the new lsa helper functions to determine
      r4095: smbsrv_terminate_connection() doesn't exit() in single processor mode, so after we
      r4098: catch null guid string so RPC-DRSUAPI works against my server
      r4101: ignore secondary session requests to cope with a OS/2 bug reported by
      r4109: fixed an uninitialised socket write found by kukks
      r4110: fixed pidl to allow arrays to have size_is() and length_is() elements
      r4111: fixed winreg to use much simpler (and I believe correct) IDL for QueryValue
      r4112: when a pointer is NULL on the wire ensure it is null in the structure
      r4113: modified EnumValue in winreg to take advantage of the new pidl handling
      r4114: added have_features bits to gensec schannel code. This fixes our
      r4115: check for gensec errors before calling memcpy on a set of credentials,
      r4116: fixed compilation of EnumValue code in winreg rpc backend
      r4117: fixed EnumValue in winreg server
      r4118: don't assume that "unsigned int" is the same type as uint32_t
      r4123: set locale to C to ensure ascii string functions work
      r4124: include locale.h to get LC_ALL in include/system/iconv.h
      r4135: improve a debug message
      r4136: when we have a size or switch variable that is a pointer we need to check that the server
      r4138: initialise 'type' in RPC-WINREG EnumValue test
      r4139: 2nd attempt at fixing the null ptr in size_is() problem.
      r4145: make sure we don't set the 32-bit error codes flag unless the client
      r4146: an attempted fix for a OS/2 rename problem found by kukks - seems OS/2
      r4147: converted from NT_USER_TOKEN to struct security_token
      r4148: add a default set of privileges to the core builtin accounts in the
      r4150: - add fns for manipulating the privilege_mask in a security_token
      r4151: added privilege attribute handling on samdb.
      r4159: fixed error return for writebraw
      r4160: fixed the file_type in ntcreatex reply on a named pipe. NT4 requires this to be right.
      r4161: two more fixes for NT4 clients. Bugs found by kukks.
      r4162: this should fix the delete/findnext problem from OS/2 clients. Thanks
      r4163: 2nd attempt at fixing the OS/2 "del *" problem
      r4164: added a test that simulates a OS/2 file delete. This includes seek by
      r4165: added a 100 element name cache to cope with some amount of seeking
      r4170: don't check array size for conformant arrays (they are checked separately)
      r4171: an attempt at better IDL for DsReplicaSync
      r4173: - new t2open code, that can cope with "create with EAs". Many thanks
      r4182: fixed trans2 mkdir, allowing mkdir with an initial EA list
      r4183: expanded the RAW-MKDIR torture test to test creation of EA lists
      r4192: added server side implementation of lsa_EnumAccountRights
      r4193: added server side implementation of lsa_EnumAccountsWithUserRight
      r4194: added server side implementation of lsa_EnumPrivs
      r4195: added IDL, test suite and server side code for lsa_LookupPrivValue
      r4196: - added server side code for lsa_LookupPrivDisplayName
      r4198: - added server side code for lsa_AddAccountRights
      r4199: - added server side code for lsa_RemoveAccountRights (sharing code
      r4202: added smbclient commands "addprivileges" and "delprivileges" for
      r4205: fixed the default acl mapping from posix permissions to use the mapped
      r4206: fixed a status code check in lsa_LookupNames2 that could cause a segv
      r4207: remove "lookupname" and "lookupsid", and instead have a single "lookup" command that
      r4214: possibly fix the "no-EAs" bug from OS/2
      r4227: index the privilege attribute to make lsa privilege calls efficient
      r4228: make sure the caller knows the packet is in error when a signing error occurs
      r4229: - added support for multi-part SMBtrans and SMBtrans2 requests in the
      r4230: now that we set the FLAGS2_EXTENDED_ATTRIBUTES flag, we should mark
      r4232: added server support for multi-part SMBtrans requests, while
      r4242: added support for storing xattrs in a tdb. This allows all advanced NT
      r4243: a sniff from kukks showed that the ea_set interface in trans2 setfileinfo allows
      r4244: add more calls to pvfs_xattr_unlink_hook() on file/dir create, to try to beat race
      r4245: add a note about using a tdb to store xattr information, so you can
      r4246: some very brief notes to myself on solving the case insensitivity
      r4247: two more places that need the unlink hook
      r4261: added the RAW_FILEINFO_EA_LIST trans2 qfileinfo and qpathinfo
      r4262: a sniff from kukks showed that the FILE_ATTRIBUTE_NORMAL handling in
      r4263: added support for the trans2 RAW_SEARCH_EA_LIST information
      r4264: fix acl handling on systems without xattr support
      r4267: fixed the charset code to use the builtin_functions.
      r4269: expanded the note about what you need on linux for xattr support
      r4274: make the prototype RAP netshareenum call return something a bit more sensible.
      r4275: improve the share type info
      r4276: added server side support for lsa_OpenAccount()
      r4277: - added server support for lsa_EnumAccounts()
      r4278: - added server support for lsa_EnumPrivsAccount()
      r4279: added IDL and test code for lsa_AddPrivilegesToAccount() and lsa_RemovePrivilegesFromAccount()
      r4280: added server side support for lsa_AddPrivilegesToAccount() and lsa_RemovePrivilegesFromAccount()
      r4281: fixed an ldb indexing bug in ldb found by volker.
      r4282: removed a spurious error message now we remove index entries in the modify call
      r4283: adding a privilege that an account already has is not an error
      r4284: fixed a problem with very large EA lists and OS/2 clients. These
      r4302: fixed all of the annoying gtk warnings. The code all seems to still work, but
      r4303: a bit more consistent help on privileges commands in smbclient
      r4310: fixed the authority_name field in lsa_GetUserName()
      r4313: fixed a bug in handling new xattrs in the tdb xattr backend
      r4314: added ACL checking on unlink
      r4315: use the remote hosts max_xmit, not the local hosts, in calculating max trans2 data sizes
      r4316: - now that the trans2 code properly supports multi-part requests, we can set
      r4317: check the count of replies in the os2 ea_list torture test
      r4319: make it easy to use valgrind in the test_posix.sh test suite
      r4364: - added support for testing of chained SMB operations in smbtorture
      r4365: added command 'eainfo' to smbclient for displaying binary EA contents
      r4382: check for bad tid in SMBtdis
      r4383: in order to cope with overfilled buffers on trans2 findfirst we need to use 32 bit offsets and lengths
      r4387: added a TODO about the NTCREATEX_FLAGS_OPEN_DIRECTORY flag - it seems to open
      r4388: - allow ACE flags to be specified in security_descriptor_create()
      r4389: added checking for the default inherited ACL, which is used when no ACEs
      r4391: bring the default ACL inline with what w2k3 uses
      r4401: stricter test for correct ACL inheritance in RAW-ACLS
      r4402: use __location__ instead of __LINE__ in the RAW-RENAME test
      r4403: - added ACL inheritance in the pvfs backend. ACLs are now inherited on
      r4404: check for SEC_ACE_FLAG_INHERIT_ONLY in the "maximum allowed" logic
      r4405: added acl inheritance to the mkdir and t2mkdir backends.
      r4406: - don't call the xattr unlink hook on unlink unless the link count is 1, otherwise
      r4407: stricter checking of parameters on hard link creation in the RAW-RENAME test
      r4408: added the remaining access check hooks into pvfs. All calls should now have acl checking,
      r4409: fixed handling of zero access masks for the POSITION_INFORMATION query/set levels
      r4410: pvfs_rename_one() should not check for create permissions, as the rename
      r4411: when checking for create permissions, we need to check the parent, not the child!
      r4412: SEC_FILE_READ_ATTRIBUTE is always granted, even if not requested. This was being done
      r4413: login failure doesn't warrant a level 1 debug (its filling my logs during torture tests)
      r4424: fixed a simple bug in the '|' handling in indexed ldb searches. I'm
      r4427: - added ldb_msg_*() functions for sorting, comparing and copying messages
      r4428: use minimum open permissions in the 'acl' command in smbclient, so the user is
      r4429: the owner of a file always gets SEC_STD_DELETE
      r4430: - fixed the BASE-LOCK* tests to use a subdirectory, and properly setup the directory before each test,
      r4433: added the boilerplate for the new w2k3 LSA functions in preparation
      r4437: added IDL and test code for lsa_LookupSids3() and lsa_LookupNames3().
      r4442: fix lsa_TranslatedSid3 (its a dom_sid2 not a dom_sid)
      r4443: test lsa_LookupNames3() even when lsa_LookupSids3() fails
      r4444: - initialise registry:HKEY_LOCAL_MACHINE to a reasonable default (where
      r4445: put the unlink test in a subdirectory, and ensure it cleans up
      r4446: attempt to fix the build - andrew, can you check I've done this right?
      r4447: implement server side of lsa_LookupSids3() and lsa_LookupNames3()
      r4448: - fixed access_mask checking on acl set
      r4449: fixed the helpstring for LSA IDL
      r4450: the beginnings of IDL for the dssetup pipe. I need this pipe for ACL editing from w2k3
      r4451: added initial RPC-DSSETUP torture test. It works for level1 of
      r4452: the beginnings of a dssetup rpc server.
      r4453: use lp_server_role(), which currently returns 3, for the dssetup
      r4454: This is the patch I use to Samba3 nmbd to allow a WinXP box
      r4455: LSADS was a duplicate of DSSETUP, and is now gone
      r4461: finished the remaining information levels in the DSSETUP pipe. The pipe is now complete!
      r4462: - enable DSSETUP on ncalrpc
      r4463: added testing of the special SID_CREATOR_OWNER inheritance rules
      r4464: added pvfs backend support for the special CREATOR_OWNER and CREATOR_GROUP inheritance rules
      r4465: remove unused file
      r4466: rather than defining "STANDALONE" for building tdb, ldb and talloc
      r4467: - tdb standalone build doesn't need -DSTANDALONE any more
      r4472: improve the discard_const() macro for standalone build of talloc
      r4473: - moved talloc into its own lib/talloc/ area
      r4474: - converted ldb to use talloc internally
      r4475: fixed smbd to work with the small changes in the ldb API (the most important
      r4476: added a little gcov howto for ldb
      r4477: expanded the test suite to increase code coverage a lot
      r4479: added the function talloc_autofree_context() which returns a talloc context that
      r4480: autofree the dcom proxy tables
      r4481: get rid of the last leak
      r4486: fixed some memory leaks in the new ldb code, by ensuring that memory is always
      r4487: fixed the use of ldb_msg_add_*() in the samr password backend
      r4488: removed an unused variable
      r4490: when implementing one rpc server call in terms of another call, you
      r4491: don't dereference q1.out.sam unless we know it is not NULL
      r4492: r.in.info is a pointer that needs to be allocated before use
      r4493: change name of README.gcov so it doesn't get deleted by "make clean" :-)
      r4496: expanded info on testing your filesystem for xattr support
      r4497: fixed a typo
      r4498: arrgh, really fix the typo this time
      r4501: when copying files it is common for clients to copy the ACL. When the
      r4518: added proper support for "typedef enum" in pidl. We can now use enums as types in switch
      r4519: added the enum print function in ndr_basic.c
      r4520: added a enum test function to the echo pipe
      r4521: fixed up the handling of PROPERTIES elements after the change to support enum
      r4522: PROPERTIES are now handled at the typedef level
      r4523: the PROPERTIES change for typedef was not quite as simple as I thought. This puts in a workaround
      r4524: converted a few bits of samr.idl to use enum properly
      r4526: - much simpler (and more accurate!) ndr_size_*() code generation. It
      r4547: - added talloc_new(ctx) macro that is a neater form of the common talloc(ctx, 0) call.
      r4549: got rid of a lot more uses of plain talloc(), instead using
      r4550: talloc() is now typesafe. It is exactly equivalent to the old talloc_p() macro. Use
      r4556: neater (and faster) way of doing alignments and scalars
      r4559: prevent the RPC-EPMAPPER test from looping forever against w2k3
      r4560: - fixed crash bugs in the RPC-SCHANNEL and RPC-NETLOGON tests
      r4563: fixed lsa_EnumAccounts() server side to return all accounts that have privileges, as
      r4564: added a comment on lsa_EnumAccounts IDL
      r4582: finally worked out what is going on with the inherited ACLs test and win2003. It is a
      r4583: print which bit failed in the owner bits check
      r4584: fix pvfs backend to pass the new enhanced RAW-ACLS test. Easy once I really the
      r4585: don't consider LookupSids3 failing with NT_STATUS_ACCESS_DENIED (as w2k3 does) or
      r4586: RPC-LSA now passes against w2k3
      r4587: fixed dcerpc_secondary_connection() for ncacn_ip_tcp
      r4588: fixed the double bind in ncalrpc with dcerpc_secondary_connection()
      r4589: forgot to commit the new NT_STATUS_RPC_PROTSEQ_NOT_SUPPORTED error code
      r4591: - converted the other _p talloc functions to not need _p
      r4592: fixed typo from talloc testsuite fixup for the new syntax
      r4593: don't use the _p function in the testsuite, as when built standalone it doesn't
      r4595: on create check access against parent not child ...
      r4596: added a dynamic inheritance ACLs test. As far as I can tell w2k3 does not do
      r4611: - renamed add_socket() to smb_add_socket() as that is less confusing
      r4612: make the output for the w2k3 acl bug a bit clearer
      r4615: added acl checking on directory search in pvfs
      r4616: the first phase in the addition of proper support for
      r4617: basic alter_context requests now work in our client library. The test
      r4618: - tidied up the alter_context client code a bit
      r4625: added a test that demonstrates that once a context_id is established,
      r4626: Jelmer, can you look at why this init is failing? It is preventing all tools from working
      r4627: - simplified the dcerpc auth code using a common function
      r4630: for ncacn_np if we don't have an explicit request for one of the
      r4631: don't consider an epmapper insert as a failure for the moment
      r4632: added spnego testing and no-auth testing in test_w2k3.sh
      r4638: expose lsa and drsuapi on ncalrpc
      r4640: first stage in the server side support for multiple context_ids on one pipe
      r4642: added support for alter_context in the server for adding new interfaces to an existing pipe
      r4643: RPC-ALTERCONTEXT now passes
      r4644: allow DSSETUP on ncacn_ip_tcp
      r4663: fixed SPNEGO auth in the rpc server
      r4664: SPNEGO auth in our rpc server now works, so add it to the battery of
      r4669: a timeval_to_nttime() function as requested by abartlet. Andrew, its
      r4670: abartlet was worried about floating point precision with my first
      r4672: added the "spnego" flag to the binding string docs
      r4700: first attempt at a composite async function, smb_composite_loadfile(),
      r4710: added a smb_composite_savefile() function, and expanded the test suite a little
      r4711: - deprecate talloc_destroy()
      r4712: slight tidy up in alter_context server
      r4717: fixed our usage of VA_COPY to be more standards compliant
      r4718: don't use the deprecated __va_copy() unless va_copy() is unavailable
      r4719: snprintf.c is used outside of samba, so don't use our special types
      r4744: until we decide what to do about attribute aliasing (see my recent
      r4745: remove the distinguishedName attribute adds from samr. See the
      r4748: removed unnecessary distinguishedName from provisioning
      r4753: added the ability for the generic socket library to handle async
      r4754: tidied up the composite function infrastructure to make it easier to
      r4755: the recent change in the definition of lp_passwordserver() breaks this
      r4756: a slight tidy up in the events code
      r4757: added the ability of the clisocket level of libcli to handle async
      r4758: - added async support to the session request code
      r4765: simplify the async socket code to always go via the event handler
      r4767: handle the different NBT session request refusals, and map them to
      r4769: added a smb_composite_connect() function that provides a simple async
      r4772: fixed checking of the conformant size for dom_sid2
      r4777: added a smb_composite_sesssetup() async composite function. This
      r4778: I forgot to set the session key for the spnego path. Fixed.
      r4779: demonstrate doing 50 parallel loadfile operations, with a callback for completion
      r4781: the tolower() in schema.c is a premature optimisation. I suspect the
      r4782: volker quite rightly pointed out that there is too much of a
      r4783: got rid of another void* in the composite code. This brings us down to
      r4790: added type checking helper macros in talloc. These take advantage of
      r4791: used the new talloc type safety macros to make the "void *private"
      r4792: use type safety int the test suite too
      r4793: minor doc updates
      r4794: - disabled the ntacl command line utilities until they are rewritten to use the same
      r4795: stronget type checking in composite connect function
      r4800: proper fix for the _GNU_SOURCE problem with comparison_fn_t
      r4801: remove the two bogus ctype.h includes
      r4810: fixed anonymous connections with smbclient. Thanks to jbm for pointing this out.
      r4811: now that the event context is at the socket level, the event cleanup
      r4812: removed dependence on Data::Dumper
      r4813: this is a temporary solution to a link problem we have on some
      r4814: cope with perl not being in /usr/bin for idl building
      r4817: ccache was being made ineffective on all the build farm machines
      r4818: missed version.h here
      r4819: its just not my day today ....
      r4828: don't apply the schema until we get it working properly
      r4831: added udp support to our generic sockets library.
      r4832: added simple testing of tcp sockets to LOCAL-SOCKET test
      r4833: added LOCAL-SOCKET to the list of tests that are expected to pass
      r4843: fixed the alignment handling of enumerated types
      r4858: a better fix for alignment of enumerated types (I'm not even sure why
      r4863: schema_find_attribute() should be static
      r4883: support ndr_size_ generation on unions as well as structures
      r4884: - 2nd part of support ndr_size_ generation on unions as well as structures
      r4885: added a new NBT client library. Features include:
      r4886: fixed two places where we process the send side of a socket after the
      r4887: removed a bogus cast
      r4888: use the neater calling convention
      r4889: make sure ndr print flags are initialised in ndrdump
      r4891:  - added a generic resolve_name() async interface in libcli/resolve/,
      r4892: we don't need nameserv.h any more
      r4894: namecache.c is not used any more either
      r4896: make sure the event context doesn't go away while waiting for event completion
      r4898: - removed the unused wins_srv_*() code
      r4899: fixed build
      r4900: build fix for IRIX 6.5
      r4901: a bit more info on nbt packets under high debug level
      r4909: fixed name_trn_id generation (thanks to metze for spotting the bug!)
      r4911: make sure we fill in the transport called name on port 445 as well
      r4915: free temp context _before_ the async callback, as the async callback might destroy our top level context
      r4916: added "host" name resolution using fork() per gethostbyname()
      r4919: if a caller doesn't provide an event context to the resolver library,
      r4922: fixed an infinite loop in the name resolve code when handling a method
      r4924: continue the effort to simplify and generalise the composite
      r4927: parse the NBT session request in the smb server. This gets rid of that
      r4935: fixed a bug where "c->status = xxx_handler(x);" could write to c after
      r4936: moved to a convention where the completion function is only called in
      r4937: simplify the connect code in the same way
      r4938: allow the caller to supply an existing event_context if they want to
      r4939: make a few more private pointers type safe (this might help abartlet
      r4942: converted the cifs backend to not use event_context_merge(). Instead,
      r4943: Smplified the events handling code a lot. The first source of
      r4944: every event_add_*() caller was having to call talloc_steal() to take
      r4945: the te element isn't needed any more
      r4950: removed some excessive debugging messages
      r4951: some of the code dealing with libcli was getting too complex trying to
      r4952: removed a bogus talloc_steal() that was trying to cope with the
      r4953: - enable easy valgrind use in all our test scripts
      r4954: we don't need the separate event_remove_*() calls any more, as you now
      r4955: fixed a couple of minor memory leaks in the auth_sam code
      r4956: - moved the definition of the mangle context structure into a pvfs_shortname
      r4957: the fetchfile _recv() function was neglecting to steal the data and
      r5003: delete old nmblookup.c code
      r5004: add current samba3 nmblookup.c ready for updating to new nbt lib
      r5027: added the IDL license to the IDL directory
      r5032: get rid of the init fns in eparser
      r5034: - added a type mapping function in pidl, so the type names in our IDL
      r5035: fixed composite test to use --num-ops command line option
      r5036: changed HYPER_T to the more standard "hyper"
      r5037: got rid of all of the TALLOC_DEPRECATED stuff. My apologies for the
      r5038: we don't need these defines any more
      r5039: fixed eparser not to generate talloc_p()
      r5040: attempt to get solaris10 building by defining _XOPEN_SOURCE
      r5042: another attempt to get solaris10 building
      r5043: this broke more systems than it helped. Remove it and try to work
      r5048: made the provision.pl script much less error prone (you don't need to
      r5049: updated howto.txt with new provisioning instructions
      r5050: make sure we translate the generic to the specific bits before doing a
      r5051: initialise all elements of an array (thanks to Mike Allan for pointing
      r5052: minor formatting fix
      r5053: - fix up the library dependencies so that tools that need nbt don't
      r5054: added a nmblookup tool, based on the new nbt library
      r5079: don't look for gss_display_status() in libgssapi_krb5 unless we
      r5080: patch from ronnie to make our samr IDL a little more consistent
      r5083: removed the libcrypto test that is forcing the pull in of the MIT krb5 libs when you
      r5084: - handle arbitrary data in the NULL record reply type for nbt name queries
      r5085: add net and nmblookup to installed binaries
      r5102: This is a major simplification of the logic for controlling top level
      r5103: forgot to add two new files
      r5104: - added support for task based servers. These are servers that within
      r5105: removed some unused events functions. These are no longer needed as
      r5106: removed a bunch of unused socket functions. We still need
      r5107: moved the horrible ldap socket code, and the even worse
      r5108: the beginnings of a nbtd server for Samba4. Currently just displays
      r5109: - fixed handling of zero-length subcontexts in the ndr library
      r5114: the nbtd task can now act as a basic B-node server. It registers its
      r5115: enable the nbt daemon by default
      r5116: fixed build of the nbtlist code
      r5117: used a composite function to add 4 stage name registration. We send 3
      r5118: added support for node status replies in nbtd. nmblookup -S now works against Samba4.
      r5119: fflush after talloc reports to ensure they are fully on disk when using tee
      r5120: encode outgoing nbt packets when queueing them rather than in the send
      r5121: added periodic name refresh requests for all our registered names, reporting any
      r5122: fixed name of winbind stream ops
      r5123: fixed a bug in the timed events handling. It was possible for a timed
      r5126: the composite code is no longer client specific or smb specific, so
      r5129: make sure we don't spin chewing CPU time due to my last change
      r5130: added a single NBT name query benchmark. It keeps 10 queries in flight at a time.
      r5155: define ipv4address as a based IDL type, mapped to a "const char *" in
      r5156: started on test driven development of the nbt server. This adds a
      r5170: fixed a bug handling events that have already timed out - they were
      r5171: added support for "bind interfaces only" in nbtd. The solution was to
      r5172: actually bind to the right address for the wildcard interface ....
      r5185: make all the events data structures private to events.c. This will
      r5187: ordered the timed events in the events code, which makes processing
      r5189: fixed a double free bug in the ltdb indexing code
      r5193: make sure we mark the event dead when we free it on a dead connection
      r5194: added support for using epoll instead of select() on systems that have
      r5195: most events don't need the time of the event, so save a gettimeofday() call
      r5196: fixed sily bug (that metze found)
      r5197: moved events code to lib/events/ (suggestion from metze)
      r5198: don't consider failure to remove an epoll event as enough reason to
      r5210: changed server side nbt functions to be prefixed with nbtd_ instead of
      r5211: added broadcast name defense against both registration and refresh
      r5212: added checking for receiving our own packets as broadcasts
      r5213: do our name broadcast refresh requests as register packets not refresh
      r5214: added support for "netbios aliases" in smb.conf
      r5215: register aliases as both client and server node types, so nmblookup can see them
      r5216: don't defend group names against incoming name registration requests
      r5217: avoid epoll_ctl() if the event flags are already set correctly
      r5221: replace the str_list_*() code with new code based on talloc(). This is
      r5222: made the nbtd_self_packet() code more efficient
      r5248: fixed a silly bug in DLIST_ADD_AFTER()
      r5249: don't include ';' in the default list separators for parsing
      r5250: - added low level support for retrying nbt name queries, rather than
      r5251: - renamed the nbtd server side structures to have a nbtd_ prefix, to
      r5252: - fixed nmblookup for the nbt api changes
      r5253: need to pre-declare some structures
      r5259: make sure we give the ip of the interface that a name query comes in
      r5260: - show an error message on nmblookup failure
      r5261: translate nbt rcode errors to NTSTATUS codes
      r5273: fixed another bug in the code that keeps timed events
      r5274: fixed some const warnings by making the str_list_ functions return "const char **"
      r5275: - added support for NBT_OPCODE_MULTI_HOME_REG (opcode 0xf) for WINS name registrations
      r5276: - added support for NBT_OPCODE_REFRESH2 (type 0x9)
      r5277: initialise the multi_homed flag in the name registration test
      r5291: fixed ncacn_ip_tcp against windows
      r5292: ensure we cleanup the epoll_fd on event context destruction
      r5294: - added a separate NBT-WINS test for WINS operations (register, refresh, release and query)
      r5296: - only include the tdb headers where they are needed
      r5297: ensure pstring is not in the generated prototypes
      r5298:  - got rid of pstring.h from includes.h. This at least makes it a bit
      r5299: fixed an include ordering problem
      r5300: more uint32 and system/filesys.h build fixes when developer mode is enabled
      r5301: fixed pthreads build
      r5302: fixed a compilation problem on solaris caused by the recent include
      r5303: fixed build of gconf registry backend
      r5304: removed lib/socket/socket.h from includes.h
      r5305: removed libcli/ldap/ldap.h from includes.h
      r5306: removed all the unused mutex functions from mutex.c. When (if?) we
      r5307: removed db_wrap.h from includes.h
      r5308: trimmed back a lot of the old macros from smb_macros.h
      r5309: removed ads.h from includes.h
      r5310: allow for rounding errors in the sleep test
      r5321: added a program that works out the minimal set of #include lines
      r5322: removed a whole bunch of #include lines that minimal_includes.pl
      r5325: - expanded the NBT-WINS test to include scopes
      r5326: removed the charset conversion from the nbtname code, so we no longer
      r5328:  - allow case sensitive nbt name lookups
      r5329: made the nbt server case sensitive
      r5333: weird, w2k3 always sends a positive name release response, even for names that
      r5346: - a bit more preparation for the WINS server going in
      r5347: fixed the NBT-REGISTER test now that the nbt layer is case sensitive
      r5352: added a function nbt_name_string() that formats a nbt_name structure
      r5356: fixed the hex coding for nbt names
      r5357: added ldb_msg_add_fmt(), for creating formatted ldb record values
      r5358: - added initial WINS server code. It passes most of the NBT-WINS test, but doesn't yet
      r5370: epoll gives more precise event bits like EPOLLHUP instead of just EPOLLIN. We need to map
      r5371: on port 139 the called name needs to be in uppercase
      r5372: fixed the build
      r5374: - changed the dn key code in the ldb tdb backend to correctly honor
      r5375: use a real DN in the WINS database. We now pass the NBT-WINS test.
      r5382: another place where we need to uppercase the called name for port 139 connects
      r5384: for RPC-NETLOGON to pass we need to set the realm as well as the domain to the target
      r5386: added testing of registration of group names
      r5387: - added automatic WINS server record expiry
      r5388: uppercase the server name on ncacn_ip_tcp
      r5389: initialise the WINS ttl max/min values to something sensible
      r5390: use __location__ to make tracking down errors in RPC-SAMSYNC easier
      r5391: cope with w2k3 getting the timeout wrong in wack replies
      r5392: added "secure" WINS server processing. Send a WACK on name
      r5395: fixed some loadparm memory leaks
      r5396: fixed parsing of NBT type 0xc0 compressed name pointers
      r5397: added testing and server support for the special handling required for the 0x1d local master browser name
      r5398: fixed encoding of *SMBSERVER name (thanks to Karl Melcher for spotting this)
      r5401: using talloc_array() is neater here
      r5402: a initial attempt at a IDL definition of the WINS replication protocol
      r5403: a simple WINS benchmarking program
      r5404: allow spaces in the string representation of nbt names
      r5405: try to use NBT name pointers when a netbios name is repeated in a NBT
      r5406: fixed dependencies for the WREPL subsystem
      r5408: - added testing for the behaviour of the special 0x1c name
      r5411: make network interface selection a bit saner
      r5412: don't force initial debug level up in ndrdump
      r5413: enable standard samba command line options in ndrdump (so -d works)
      r5414: - added libcli/wins/, a basic client library for WINS replication
      r5415: added a NBT-WINSREPLICATION torture test. It asks the server for the
      r5416: nicer output when trying to replicate with a server that hasn't been setup as
      r5418: - added version numbers to WINS database records in preparation for adding server side
      r5448: another portability fix for solaris
      r5451: - added separate wrepl_associate(), wrepl_pull_table() and wrepl_pull_names() functions, with reasonable
      r5454: moved the WINS server code into its own directory
      r5664: simo, please look into this. It is possible for the number of elements
      r5665: the data within el2->values can still be used at this point, so don't free
      r5666: winxp will use a NTTIME of -1 to mean "don't change" in setfileinfo
      r5937: - performance improvement to talloc_asprintf_append()
      r5938: - allow NULL string argument to talloc_vasprintf_append()
      r5939: improve talloc_realloc() docs after feedback from lifeless
      r6031: don't try to send errors when the socket has been destroyed
      r6074: fixed non-spnego connections for new credentials code
      r6075: added talloc_enable_null_tracking() (asked for by lifeless)
      r6086: default to stderr for error messages in ldb, so we get errors in ldb_connect()
      r6087: - remove the dlopen code for now (before it goes back, it needs to be
      r6147: The maxfd was being recalculated on every event loop, which made us
      r6150: fixed a few socket_wrapper bugs.
      r6165: fixed up the userinfo composite code. Fixes include:
      r6184: the beginnings of the libcli/dgram/ library, and the dgram
      r6185: added LIBCLI_DGRAM to the list of libs to be built as part of LIBCLI
      r6209: started added code to support mailslot requests over UDP/138
      r6222: fixed the socket wrapper code for getsockname()
      r6223: added a bit more datagram infrastructure and the beginnings of a test
      r6245: receive and parse the GETDC response in the NBT-DGRAM test. The test
      r6246: stop waiting when we get a reply
      r6247: added the server side code for receiving mailslot requests, and
      r6248: added parsing of type 10 UAS announce netlogon packets
      r6287: sorted out a small but surprisingly tricky dependency problem with the
      r6288: the nbt dgram server now responds to GETDC requests. It works with our
      r6320: some minor netlogon datagram fixes - NT4 can now join a Samba4 domain without
      r6321: added IDL and test suite for NBT dgram 'sam logon' request (sent by
      r6323: added server side support for dgram NTLOGON requests. NT4 workstations can now login
      r6331: added IDL and test suite for the ADS style response to a datagram netlogon query.
      r6333: removed an extraneous line (pointed out by metze)
      r6335: at debug level 10, save netlogon and ntlogon packets that fail to parse
      r6338: ADS style GETDC response now works well enough that WinXP can join
      r6339: set the NBT_SERVER_LDAP and NBT_SERVER_KDC bits based on config
      r6340: - added an easy to use function to initialise a temporary ldb with some ldif
      r6341: fixed the schannel idl to handle dotted names correctly
      r6342: fixed a bad union assumption that caused ACLs to fail on 64 bit machines
      r6474: - added a simple talloc web page at http://talloc.samba.org/
      r6479: - added a simple web page
      r6480: fixed whitespace typo
      r6481: change download instructions to include tdb and talloc
      r6509: fixed a crash bug found by a-jutley at microsoft.com in RPC-RAP test
      r6528: - in tdb_fetch() we effectively disallowed zero length records by
      r6529: fixed locktest with new credentials code
      r6530: the server ID of a connection in the single process model should be
      r6531: fixed gentest with new credentials code
      r6541: added double pointer test to win32 echo client
      r6545: some notes and experiments on ref ptrs, testing with midl
      r6549: a simple ldap test script
      r6556: added BENCH-RPC test, useful for simple rpc load testing
      r6557: make srvsvc available on ncalrpc and ncacn_ip_tcp so we can do each
      r6560: added a tdb_chainlock_read() call in ldb_search(). This guarantees
      r6561: re-did the internal message system based on DGRAM unix domain
      r6562: added support for datagram unix domain sockets in the socket library
      r6563: - fixed the local messaging torture test not to fork, as this causes
      r6578: brown paper bag time with the new messaging code ....
      r6579: improved the handling of lock timeouts and cancels in the pvfs locking
      r6580: fixed the bug that caused the truncation of the main file on a stream
      r6581: improved the error message for RAW-LOCK timeouts
      r6604: solved a memory hierarchy ordering problem that led to crashes on
      r6618: only print the netlogon packets we receive if it is an unknown packet type
      r6619: realm should not be forced uppercase
      r6620: the type 23 schannel bind uses a workstation name, not an account name
      r6661: fix up talloc autoconf to have a chance of working on the build farm
      r6662: add an installcheck target for talloc
      r6663: only use -Wall for gcc
      r6687: added a idr helper function for creating random IDs
      r6688: removed unused binary_string() function
      r6689: minor ldap client library work
      r6690: added ndr_pull_struct_blob_all(), which is like ndr_pull_struct_blob() but checks
      r6691: fixed a comment
      r6692: used idr_get_new_random() in the nbt client library
      r6693: first version of cldap client library, with async interface
      r6694: a simple CLDAP torture test
      r6719: pidl need to be told that the external type netr_SchannelType is an enum, otherwise
      r6720: added support for the remaining 2 types of CLDAP netlogon
      r6724: added "cldap port" smb.conf parameter
      r6725: the beginnings of a cldap server
      r6726: support binary search elements in ldap_decode()
      r6740: make gensec_gssapi.c compile again
      r6741: prevent talloc_strndup() from reading one byte past the end of a buffer,
      r6744: added support for reply packets in libcli/cldap/
      r6745: - escape spaces in binary ldap blobs
      r6746: added ndr_push_union_blob() for pushing IDL unions into a DATA_BLOB
      r6747: first working version of cldapd server. It is missing 'sites' support, and
      r6750: some minor tweaks to the cldapd server
      r6751: dnsDomain should be CASE_INSENSITIVE (winxp will sometimes do a cldap query with this
      r6761: - not everyone is in my domain :-)
      r6762: with the zone right we don't need a fully qualified site name at all
      r6763: added functions in libcli/ldap/ to binary encode some NDR structures into
      r6764: added support for DomainGuid, DomainSid, AAC, and User attributes in
      r6765: expanded the cldap test suite to test the usage of the DomainGuid,
      r6766: some more cldap tests ...
      r6776: make the cldap torture test not dependent on the realm being set
      r6802: - fixed CFLAGS
      r6808: - test for gcov not needed
      r6809: ifeq is not portable in make - jelmer, you'll need to find some other way of doing
      r6812: more talloc portability tweaks
      r6814: fill in two more unknown values in cldap responses
      r6815: fill in values in cldap server as well
      r6816: - fixed debug display of ndr netlogon union
      r6817: - fixed empty ldap search elements in filters
      r6829: include the talloc autoconf tests when building ldb standalone
      r6830: put header checks in config.m4 so when it is included by other projects the right
      r6831: talloc now requires config.h (this fixes ldb build)
      r6833: split out the routine that calculates the diff between two ldb messages from ldbedit,
      r6845: make the talloc header align to 40 bytes, which costs us an extra 4
      r6846: make smbd terminate immediately on EOF from stdin
      r6852: implement an idea from kinkie to make the 'make test' target automatically kill smbd
      r6853: again fixed SOCKET_WRAPPER_DIR in 'make test'
      r6869: removed completely bogus BASE-RW2 test
      r6873: fixed exec bit
      r6875: added a BENCH-CLDAP test. Speed of the cldap server isn't all that important, but it does
      r6876: - fixed a memory leak in the cldap server
      r6877: added CLDAP testing to test_ldap.sh
      r6967: fixed the new multi-value dn=@ATTRIBUTES so it actually works :-)
      r6968: fixed a typo in the event macros. I'm surprised this one didn't show up earlier!
      r6980: added data_blob_append(), which I use in the web server
      r6981: first version of the builtin web server for Samba4
      r6982: install the swat pages with 'make installswat'
      r6983: add some sample esp pages to demonstrate the use of some of the features of the server
      r6985: rearranged the directory structure so as to make it possible to support esp include() call
      r6986: added support for <% include("somefile.ejs") %> for including common scripts
      r6987: - make sure esp pages cannot read data outside of the swat directory
      r6988: added a test of esp include() calls
      r6989: - added support for esp style includes (which include a esp file, instead of a ejs file)
      r6990: apparently some systems define UNUSED :-)
      r6997: added a private pointer to the task structure. This is needed by the session data
      r6998: - added support for application[] data, which is global to all clients using the web server.
      r6999: - renamed our html files to esp
      r7000: only keep session data if not empty - this saves us using lots of memory needlessly
      r7001: make sure we install the esp files
      r7002: added support for getting at loadparm config parameters via lpGet() in esp scripts
      r7003: added an example script for fetching smb.conf parameters from esp scripts
      r7004: added support for exceptions generated in the esp library. If the OS
      r7005: added a esp page to demonstrate exception handling
      r7007: try to get ejs compiling again
      r7008: - split out the loadparm type definitions so loadparm internals can be accessed externally
      r7011: when using macros, the parameters should be specified unless its a
      r7012: added smb.conf parameters
      r7013: added tls support to the builtin web server. It auto-detects if the client
      r7014: added Content-Length header to both esp and non-esp output
      r7015: use a scripting trick to force images to be sent with http instead of https, which
      r7016: - added smb.conf parm 'web tls = true/false'
      r7017: added a esp variable server['TLS_SUPPORT'] which tells the script if the server
      r7018: take advantage of the server[TLS_SUPPORT] variable to auto-redirect the home
      r7019: - added esp call lpServices() which returns a list of services in smb.conf.
      r7023: reduced the number of warnings in building ejs and esp
      r7044: vance is right that mixing http and https elements gives a warning in IE
      r7047: rearranged the tls code a bit, and improved the error messages when it fails
      r7048: added auto-generation of TLS self-signed certificates if none exist already
      r7049: auto-create the private/tls/ directory on install
      r7051: remove an unused file
      r7052: added a case insensitive str_list_check_ci() version of str_list_check()
      r7053: added a ldbSearch() call to esp
      r7054: added a example script showing ldbSearch() usage
      r7055: automatically add the dn to all ldbSearch results
      r7056: added links to ejs and esp info pages
      r7067: older versions of gnutls don't have GNUTLS_KP_TLS_WWW_SERVER
      r7071: allow access to the current mpr memory context from ejs calls
      r7072: moved the esp hooks calls to the ejs level, so we can call them from
      r7073: added some simple example scripts for use with smbscript
      r7074: we should load all shares in smbscript
      r7075: added support for ARGV[] in ejs scripts
      r7076: added demos of using ARGV[]
      r7077: pull in a bunch more libs for smbscript. I plan on making a whole lot
      r7078: - fix an uninitialised variable in smbscript
      r7079: remember to register the esp calls
      r7085: fixed a bug in ejs with setting up the arguments[] array
      r7086: make include() recognise the ".esp" extension and include the file as
      r7087: always run the /scripting/preauth.esp page before processing any
      r7088: start on some real structure for the SWAT web pages
      r7089: ensure that headers['HOST'] is setup
      r7090: added back in the showvars test
      r7091: added some more useful links
      r7092: added some js for formatting table results in a nicer fashion
      r7093: - added a new Form() ejs object for producing simple forms.
      r7094: use the Form() object in a few more places
      r7095: more html tidying
      r7096: added support for select lists in forms
      r7097: removed a debug line
      r7101: moved favicon into images/
      r7104: add support into the web server for session[] variables without cookies by using
      r7105: fixed a typo
      r7106: the web interface now works completely with or without cookies. If you have cookies
      r7107: detect when a users session has expired and set request['SESSION_EXPIRED']
      r7108: display a session expired message
      r7124: fixed a bug in array construction (see ECMA standard section 15.4.2.2)
      r7125: demonstrate some bugs in ejs
      r7127: allow for recursive ejs functions
      r7128: added recursion to bugs list
      r7131: support sub-object arrays when displaying objects. This allows the ldb test to
      r7132: - start a convention of making object constructors end in Obj, so we
      r7134: a number of small changes to make the pages HTML compliant. The
      r7135: make typeof() complient with ECMA 11.4.3
      r7136: fixed a typo
      r7162: a test commit to trigger anon update with new svn fsfs backend
      r7163: a 2nd test commit to trigger anon update with new svn fsfs backend
      r7205: added support for sendto() on unix domain sockets
      r7206: changed the messaging library to use sendto instead of a connected
      r7211: - use ioctl(FIONREAD) to remove the artificial limit on messaging size
      r7227: added a socket_pending() call to abstract away the FIONREAD ioctl. It
      r7228: use socket_pending() instead of the direct ioctl in the messaging code
      r7229: use socket_pending() to get rid of the max packet size limits in the
      r7230: use socket_pending() to get rid of the max packet size limits in the
      r7264: fix up the socket handling for abartlet. Still only udp, but it won't
      r7265: fixed d_printf() so it works again.
      r7271: added the ability to specify a target specific set of CFLAGS for
      r7272: this is a sample mk file for building a heimdal library using the
      r7289: split out the list of *.mk files for the build, so you don't need to modify the perl
      r7290: comment out heimdal config for now
      r7294: implemented the irpc messaging system. This is the core of the
      r7295: added an irpc benchmark. It gets about 16k messages/sec on my laptop,
      r7296: avoid two stat() calls per message. This increases the raw message
      r7298: ensure messages are sent in order even when under extreme load. This
      r7309: started adding IDL for nbt management calls. This adds a
      r7320: added support for a private pointer in irpc registered handlers
      r7321: add nbtd statistics serving over irpc
      r7322: the beginnings of a in-tree heimdal
      r7352: the internal heimdal build change. This changes quite a few things:
      r7355: this should fix the link problem metze hit with smbscript
      r7356: fixed the problem mkaplan reported with not being able to run without -i
      r7358: make the irpc test use two messaging contexts, not one, so it better
      r7359: add configure test for strsep (might helps abartlets build of heimdal)
      r7360: added a few more heimdal configure tests
      r7361: fixed the 'file becomes a directory' bug that marc kapland found.
      r7419: when we have both --enable-developer and --enable-debug we don't need -g twice in the
      r7431: this should fix the bug that mkaplan and I noticed which is that
      r7459: fixed pvfs for the RAW-MUX test
      r7460: fixed several problems with the socket wrapper code and unbound sockets
      r7461: this is the start of some code for mapping IDL onto ejs. This is hand
      r7475: removed RPC-SAMLOGON test until we get a lighter version of it. It is
      r7476: ensure dgram sockets are created non-blocking. As they usually skip
      r7478: fixed a problem with a backgrounded smbd looping to handle continuous
      r7483: ensure we try reading from a socket if epoll says we can, and don't
      r7484: the previous bug can also affect the kdc
      r7485: - allow test_xxx.sh to run outside of 'make test' by ensuring $PREFIX is setup
      r7493: add a --maximum-runtime option to smbd. If this time is exceeeded then it exits.
      r7494: added --maximum-runtime to smbtorture as well. I have seen smbtorture
      r7495: used --maximum-runtime=300 for each smbtorture call, to prevent it
      r7496: removed an unused variable
      r7497: add timeouts to all rpc requests. The default timeout is 60
      r7499: ensure that the account we run tests as ("Administrator") maps to the
      r7502: the sleep test in echo is already run on the main rpc test, so no need to run it with every combination in
      r7503: turn off the sleep test here too
      r7504: missed one
      r7506: handle the case where cron does not setup $USER
      r7507: fixed the problem with users being shown too many times in acl
      r7510: fixed error code for using a bad tid.
      r7513: don't try to write to the smbd log file between tests. zeroing a file
      r7514: make the ldb_parse code not depend on a ldb_context, so we can now potentially use
      r7515: merge in the binary encode/decode enhancements from the libcli/ldap/
      r7516: make sure binary decoding gives us something we can run string functions on
      r7517: handle zero length equality tests
      r7518: don't use an uninitialised ldb debug function when failing to load modules in the ldap
      r7519: rip the copy of the ldap expression parser out of libcli/ldap/ and use
      r7522: added a ldb_filter_from_tree() function that takes a ldb_parse_tree
      r7523: blergh
      r7524: make the ldap ASN.1 filter parse code go via a struct
      r7526: make test should depend on the bins
      r7527: - added a ldb_search_bytree() interface, which takes a ldb_parse_tree
      r7528: cleaned up the QueryDisplayInfo_continue test
      r7533: don't show compile flags for each file
      r7557: trigger a probe at tconx time to see if xattrs are really supported by
      r7558: added support in ldb for extended ldap search requests. These are
      r7559: support 64 bit matching in bitops
      r7560: added tests for extended bitop search functions
      r7564: added a test showing the search expression that w2k is actually giving
      r7565: fixed handling of sasl data in ldap server
      r7566: added support for LDAPString types in the asn.1 library
      r7567: added wire parsing of NOT and extended ldap search requests. This
      r7568: enable the NTLMSSP bulk data sign/seal code for out ldap server. This
      r7571: fixed the generation of the filter string for extended filters
      r7572: fixed filter in test suite
      r7593: simplified the memory management in the ldap code. Having a mem_ctx
      r7594: abartlet is right that this hack is not actually necessary, it just
      r7596: next step in ldap cleanup. I'm aiming to get rid of the cut&pasted
      r7597: removed the bogus get_myfullname() and get_mydomname() calls, and put
      r7598: take advantage of struct data_blob and struct ldb_val being the same
      r7599: it turns out we were not using the ldif code in libcli/ldap/ at all,
      r7626: a new ldap client library. Main features are:
      r7633: this patch started as an attempt to make the dcerpc code use a given
      r7650: fixed a typo
      r7652: use event friendly connect in dcerpc socket code
      r7653: when a dcerpc request times out, we need to ensure that if the server
      r7654:  - add a timeout to all smb requests (default 60 seconds)
      r7655: test the evnt friendly socket_connect() in the LOCAL-SOCKET test
      r7656: added testing of rpc request timeouts and destruction
      r7657: test addone again after request timeout and destruction to ensure the pipe is still OK
      r7658: don't timeout at the smb level for rpc requests as otherwise some rpc
      r7659: fixup the ordering of socket destruction for ncacn_ip_tcp so we don't try and
      r7660: improved error handling in socket_connect_ev() (it matters when name
      r7661: patch from tburdi1 at uic.edu to fix autogen.sh on freebsd
      r7665: - added a ildap_*() interface to our internal ldap library. This
      r7666: fixed a memory leak in the ldap ldb backend
      r7667: added a ldb ildap backend, using our internal ldap client library. Next step is to
      r7668: - setup HAVE_ILDAP to enable the ildap backend in ldb
      r7669: removed ldap from our configure tests
      r7670: fixed rootDSE search in ldap server
      r7671: added ldap testing to the set of standard tests
      r7672: this should fix the crypt dependency problem (I hope!)
      r7677: fixed ldap server to honor 'private path'
      r7678: fixed typo
      r7704: - fixed open_nbt_connection() to return NULL when the connection failed
      r7705: prevent SIGPIPE. this is what causes BASE-NEGNOWAIT to sometimes fail
      r7709: - convert ldb to use popt, so that it can interact with the samba
      r7710: new command line handling code for ldb
      r7711: update callers of ldb_connect() for new syntax
      r7712: ldb/common/util.c is gone
      r7713: fixed error display in ildap_search()
      r7714: enable samba credentials handling in ldb tools. So you can now do a
      r7715: ensure we don't print null strings in ldap_errstr()
      r7716: a single wrapped ldap blob can contain multiple ldap messages
      r7717: fixed some typos
      r7719: make the ildap ldb backend use the defaultNamingContext if the basedn
      r7720: - simplify the asn1 decode of ldap_search() a lot, taking advantage of
      r7721: solve a problem with null arguments to testit()
      r7722: when we get a zero read, the connection is dead
      r7723: - fix a mismatched asn1 push/pop on bind
      r7724: added encoding of LDB_OP_NOT search components
      r7725: fixed a bug with partial asn1 frames in the ldap client
      r7726: - removed some unused variables
      r7727: we need to mark some attributes as INTEGER, so that the standard searches
      r7728: handle 64 bit integers in INTEGER match
      r7739: fixed an off by one bug in the base64 decoder for ldb ldif
      r7740: get rid of our duplicate base64 routines
      r7741: fixed the verbose option in ldbedit
      r7742: abstracted out the tls code from the web server, so that our other servers
      r7743: be consistent in how stdin is supported for ldbadd and ldbmodify
      r7744: converted the web server to use the lib/tls/ generic tls code
      r7745: better handling of recv errors in tls library
      r7746: - added TLS support to our ldap server
      r7747: - simplified the ldap server buffer handling
      r7749: some bug fixes from testing with socket:testnonblock
      r7750: handle STATUS_MORE_ENTRIES on send in tls
      r7751: only enable tls on the ldaps port in ldap server, and reject non-tls
      r7753: removed debugging code :-)
      r7754: fixed the local port of accepted sockets in socket_wrapper. This fixes
      r7755: fixed an uninitialised event_ctx found by abartlet
      r7759: allow ldb_errstring() to be used when not connected
      r7760: make client tools get the right config file in 'make test'
      r7763: fixed some circular dependencies
      r7767: fixed ldb dependencies
      r7768: use _ALL_OBJS in clean target
      r7769: added client support in the tls library api
      r7770: added ldaps support to our ldap client library
      r7771: - added ldaps and NTLMSSP testing to ldap tests
      r7772: actually give the auth options to ldbsearch ....
      r7773: fixed the tls code for the non-GNUTLS case
      r7774: put $CONFIGURATION in one more place
      r7775: solaris uses 'lo0' for loopback network, so by using lo* we should cover both
      r7776: add a method for getting arbitrary opaque data into a ldb context, for use by backends.
      r7777: allow for overriding the location of the sam databasein the ldap server, using
      r7778: added talloc_find_parent_bytype() and talloc_find_parent_byname()
      r7779: use the parent event context in ldb_wrap_connect(). See the comment in
      r7780: fixed a bug in talloc_find_parent_byname()
      r7781: finding the parent of a talloc ptr is trickier than it looks due to the two-way
      r7782: fixed an ordering problem with smb requests. I found this when I had "sam database"
      r7783: the whenChanged attribute is now handled by the timestamps module, and
      r7784: give an error in ldb_tdb for invalid modify flags. The "whenChanged"
      r7792: make the allocation size rounding in pvfs configurable
      r7793: allow integers in smb.conf to be specified in octal or hex
      r7795: use a share specific allocation rounding
      r7800: added the same request serialisation logic to our socket based rpc
      r7801: the ldap server needs this logic too
      r7803: added support in ldb for callers to setup ldif read/write functions,
      r7804: added the samba specific ldif handlers into the tree, but don't enable
      r7808: fixed the build of ldb after the binary file support in ldif was added
      r7810: don't give errors when the ldap server sends us reference replies
      r7831: use cn=TEST as base of test DNs so we don't interfere with potentially real records
      r7832: missed one
      r7833: changed ldbsearch and ldbedit to have command line syntax closer to
      r7834: added comment about the "((" search test
      r7854: only enable wrapping in the ldap server if it was negotiated by gensec
      r7855: fixed a typo
      r7856: fixed warning of 'methods' shadowed variable
      r7857: improved the handling of end-of-file on sockets in the smb server
      r7858: removed some unused variables
      r7860: switch our ldb storage format to use a NDR encoded objectSid. This is
      r7863: removed an unused variable
      r7864: fixed some const bugs
      r7865: changed pidl to take a "const void *" instead of a "void *" for the
      r7867: a couple of bug fixes for newuser.pl from kukks
      r7868: canonicalise the message before using ldb_add() in the ldbadd utility.
      r7869: revert the configure changes from jelmers commit for heimdal_build
      r7870: fixed the RPC-SCHANNEL test. It turned out it was my const changes, as
      r7871: setup spoolss, wins and hklm dbs correctly in selftest
      r7872: another place we were relying on the old behaviour of value()
      r7873: hopefully fixed build of ldb_explode_dn() on AIX
      r7874: reverted metzes patch svn 7837 as it is not portable to make on
      r7894: remove portability experiments until its working in the smb-build test project
      r7895: hopefully this will fix the popt build on solaris
      r7896: don't output null rules for blank targets (caued make failure on irix)
      r7898: don't die on bad iconv libs in LOCAL-ICONV test
      r7899: fixed a crash bug in the RAW-CONTEXT test
      r7900: the existing ltdb indexing code does in fact cope with binary fields, so re-enable
      r7901: check if system supports UTF-16LE at all in LOCAL-ICONV test
      r7905: this should fix installswat on FreeBSD. Thanks to nodie for testing this for me
      r7906: some portability fixes for ldap testing on solaris (solaris grep doesn't handle ^)
      r7907: the old solaris perl doesn't handle mkdir() without a mode
      r7909: don't consider not finding a list of network interfaces from the kernel a fatal error,
      r7910: fixed typo in _SAMBA_BUILD_ macro
      r7911: task_terminate() is defined in the macosx headers, so change the name
      r7912: make private_path() recognise a non-relative filename, so we can have
      r7913: prevent recursion in the socket wrapper code
      r7914: - we don't need to override the database locations in selftest any more
      r7915: report the number of failed tests so far when running 'make test' interactively
      r7916: - got rid of the in_client global
      r7917: macosx doesn't have a group called 'users'
      r7918: fixed a crash bug in the ldap server
      r7919: use more portable shell syntax for MALLOC_CHECK_
      r7920: another attempt at making installswat.sh portable
      r7921: fixed newuser script (letting samldb module allocate the sid)
      r7923: removed dependence on Data::Dumper
      r7925: small tidyup (please keep lines at a reasonable length)
      r7926: poptGetNextOpt() returns int, not char
      r7927: fixed an error on partial socket writes in the rpc server
      r7929: yet another attempt at fixing installswat on freebsd 5
      r7930: - added testing of the cifs passthru backend
      r7931: fixed a bug in the cifs backend found with the new test code
      r7933: darn, forgot to add this
      r7939: fix default hostname in provision
      r7940: use local path first for ldbadd in provisioning
      r7941: fixed handling of ASN.1 objects bigger than 64k
      r7977: split up 'make clean' a little more as it is overflowing the command line size limits
      r8002: favor addresses on our local interfaces in NBT name resolution if
      r8003: ensure that we don't try to send a trans request with more than 64k data or params
      r8004: added a maximum EAs size test from Kukks.
      r8005: escape '"' characters in ldap expressions. Makes scripting easier.
      r8006: I have seen w2k3 send multiple encoding syntaxes in rpc bind
      r8009: expanded the ldb test suite. It worried me that some changes I have
      r8010: added testing of wildcard attributes
      r8011: arrgh, commit the right version this time
      r8032: added loop detection into talloc. Robert Collins found a way to make a
      r8033: - add easier valgrind testing
      r8035: added indexing tests. current ldb fails the integer indexing, will be fixed shortly
      r8037: a fairly major update to the internals of ldb. Changes are:
      r8038: - fixed indexing on binary values that need base64 encoding and canonicalisation
      r8039: allow ldb test suite to be run outside of the ldb directory
      r8040: run ldb test suite as part of samba 'make test'
      r8041: remove a mis-spelled debug message :-)
      r8043: increase shell compatibility of ldb tests
      r8051: separate out the MAX EAs test, as it fills disk too much to be run regularly
      r8053: requests from mmc show that the auth info for a bind should be 4 byte aligned, not
      r8055: added canonicalName to our domainDns record
      r8056: make the realm lowercase in our ldb (better matches w2k3)
      r8057: use our defined push/pull types in the validate code (fixes a warning)
      r8058: added testing of delete on close for files and directories
      r8059: fixed handling of delete on close fir directories
      r8065: don't run the LOCAL-ICONV test in selftest. It does cross-checking of
      r8067: added a method for disabling the password prompt in programs that want
      r8068: reduced the verbosity of the EPM code
      r8069: the beginnings of code to allow rpc calls to be made from ejs
      r8070: a (as yet not working) example of how rpc calls might be made from js scripts
      r8071: reduce the size of the default ldb tests. We run on some pretty low powered machines
      r8073: a successful rpc call from ejs!
      r8074: demonstrate calling echo_AddOne() from ejs
      r8104: - added support for our client library to not negotiate nt status codes, controlled
      r8106: the use of a static string for dos error codes was causing problems in
      r8107: now that we properly separate DOS and NT status codes all the places
      r8111: fixed the client library to work against w2k3 with nt status codes
      r8113: this should fix the build on systems without heimdal
      r8114: fixed the build after tpots ejs commit ....
      r8115: added support for 2 more dos error codes found during testing
      r8116: demonstrate a little trick that can be used to track down where an
      r8117: fixed a bunch more dos error code handing.
      r8118: remove a debugging hack that should not have been in the last commit
      r8119: fixed two error code returns in the smb server now that we have
      r8120: added in the newly found DOS locking error codes into the pvfs backend
      r8121: yuck. w2k3 seems to choose ERRDOS:ERRbaduid or
      r8122: more fixes from testing dos error code handling against w2k3
      r8123: fixed the RAW-NOTIFY and RAW-QFSINFO tests against w2k3
      r8124: added a set of file sharing tests that pass against w2k3
      r8125: fixed an error code mapping based on the updated torture tests
      r8126: - moved to 16 byte alignment for talloc. This is in response to a bug
      r8127: fixed code in function error
      r8191: updated the ejs code generator in pidl to generate enough code for
      r8192: updated the glue code for the generated ejs functions from pidl
      r8193: fixed the echo.js example code to work with the new syntax for rpc
      r8194: delete the old hand-written ejs code for echo_AddOne. This is now
      r8195: - fixed handling of simple arrays. To keep the logic simple, I moved to making all push
      r8196: - added testing of the EchoData interface in the echo test script
      r8197: added testing of echo_SinkData() and echo_SourceData()
      r8198: - handled push/pull of simple strings in ejs
      r8199: - we don't need to pre-declare 'var status;' everywhere
      r8200: - added stub functions for union pull/push
      r8213: I've started to understand the LEVELS stuff in pidl much better now,
      r8214: added testing of echo_TestCall2(), which tests the union push code
      r8215: switched the pull side of the ejs generator over to the recursive LEVELS based approach.
      r8216: - handle union pull in ejs pidl generation
      r8217: added testing of echo_TestSleep() and echo_TestEnum() in echo js code
      r8218: added testing of echo_TestSurrounding() and
      r8220: added auto-generation of ENUM constants in ejs wrapper. So we can now use the enum name
      r8230: prevent authentication dying on a NULL domain
      r8233: - added support for more base types in pidl ejs
      r8234: started on testing samr calls from ejs. So far it only does samr_Connect()
      r8236: fixed support for arrays of structures
      r8237: expanded the samr.js test to do a samr_Connect(), samr_EnumDomains() and samr_Close()
      r8238: - fixed handling of NULL pointers from ejs
      r8239: - added testing of LookupDomain, OpenDomain and EnumDomainUsers
      r8240: support comparing pointers in ejs. This allows for
      r8241: - take advantage of pointer comparison
      r8242: support bitmap constants from ejs calls
      r8243: fixed indentation of generated ejs interface code
      r8244: need to be careful about local vs global variables in js
      r8247: remove the free of fullname in nbtname.c for now.
      r8251: fixed a couple of valgrind errors in the unix auth code. Simo, can you
      r8253: fixed two crash bugs in ejs. I will send these fixes off to the appweb guys soon.
      r8254: fixed a valgrind error in the unix auth code
      r8255: enable access to the ejs constants generated by pidl from the web server esp pages
      r8256: - allow rpc calls from non-command line ejs contexts by creating a set
      r8257: add a samr rpc test page in the web server. It lists all level3
      r8260: added an init based registration system for the generated ejs rpc code, so
      r8261: charset style strings in pidl should be const, just like old style ndr strings
      r8262: - simplify the dependency handling for ejs modules
      r8267: re-generated the yapp parser with correct paths
      r8268: added the 'needed' logic to ehs generation, so we don't generate
      r8269: added automatic testing of rpc calls from ejs in 'make test'
      r8271: make the ejs test scripts directly executable scripts using:
      r8272: added the hooks for adding a name to a messaging context, so we will
      r8273: fixed some memory leaks in smbscript. This required converting
      r8275: possibly a more portable way to export symbols in perl?
      r8276: fixed the remaining memory leaks in smbscript. We can now loop doing
      r8277: filled in the code for finding irpc server ids by name, storing the
      r8278: this should fix the heimdal h_errno warnings
      r8279: make sure we hold a lock when manipulating the irpc names db
      r8280: - added irpc_connect() for connecting to a irpc server by name
      r8281: pass the callnum and rpc interface table directly from the generated
      r8282: make the deletion of the smbd.tmp directory recursive. This cleans up the messaging
      r8283: make sure we build constant variables for both pull and push side of enums
      r8284: - fixed some uninitialised variables in the irpc code
      r8285: generate some real stats in the nbt server for the irpc client code to look at
      r8286: it makes more sense to combine the refresh count with the register count, as they
      r8287: yay! finally irpc calls from ejs are all working.
      r8289: fallback to the group 'other' for users
      r8295: turn off the delete on close test in the build farm until someone gets
      r8296: - split out the ejs auth functions into a separate file
      r8297: add libinclude() function in ejs, which is like include() but searches a js library
      r8298: - started building a library of js routines in scripting/libjs/
      r8299: make the samr swat test use the samr.js lib
      r8300: get the js include path right in selftest
      r8301: use ncalrpc: for ejs tests, to avoid name resolution timeouts as smbd is just starting up
      r8303: a workaround for forcing HEIMDAL_EXTERNAL to build.
      r8305: another attempt at getting heimdal building in the farm
      r8306: some more heimdal configure checks
      r8307: try to cope with flex and bison not being installed, in a similar fashion to yapp for pidl
      r8308: use the configured C compiler, instead of forcing gcc in external heimdal tool build
      r8309: more heimdal configure checks needed for FreeBSD
      r8310: replace the heimdal networking interface scanning code with glue code that uses the Samba
      r8311: krb5 uses ENOMEM for out of memory
      r8312: fixed some heimdal header checks from watching the build farm failures
      r8313: moved PRINTF_ATTRIBUTE to replace.h to try to get irix building with heimdal
      r8314: - added an 'installmisc' target for installing miscellaneous files.
      r8315: fixed the generation of the serial number in the dns zone file (bind9
      r8316: give full access to the popt command line parsing in ejs scripts, including
      r8317: convert the example scripts over to the new GetOptions() call
      r8318: added a bunch more ejs calls.
      r8319: the start of a provision script in ejs. This is why I've been adding
      r8320: make sure all our returned objects are full objects, which means they
      r8331: added split(), join() and FileLoad() functions to ejs.
      r8332: not done yet, but a lot closer
      r8333: merged with latest upstream ejs sources
      r8334: fixed a ejs bug that prevented functions variables from being called in local context
      r8335: removed some duplicated code
      r8336: enable 64 bit integer support in ejs
      r8337: - use 64 bit access functions in ejs calls
      r8338: - added a substitute_var() js library function for doing hash driven
      r8339: added ldbAdd(), ldbModify(), ldbDelete() and ldbRename() to ejs ldb functions
      r8340: - added sys_gmtime()
      r8341: enable floating point support in ejs
      r8342: allow ldb_ldif_read_string() to continue in the string, so you can
      r8343: removed a debugging message
      r8344: added a "setup directory" smb.conf parameter, pointing at the setup template files
      r8345: make the dn on the hklm ldif valid
      r8346: added a sprintf test suite for ejs
      r8347: replace the perl provision script with a ejs script
      r8348: switch selftest to use the new provision script
      r8349: as we don't use standard dirs, we need to create smb.conf before we run provision
      r8350: fixed the --root option to provision
      r8352: we need to override "setup directory" for the build farm hosts
      r8354: work around a js bug found by tpot
      r8355: - added a vsprintf() function
      r8364: fixed a valgrind bug spotted by simo
      r8365: fixed a problem on netbsd
      r8367: another configure test needed by netbsd for heimdal
      r8369: update the configure script I use
      r8372: - split out provisioning logic into a separate ejs library
      r8374: avoid running flex and bison unless needed
      r8397: merged an upstream fix for the expression bug tpot found yesterday
      r8399: move the ejs and esp code closer to the directory layout used by the
      r8400: separate out the mpr code, as it is in the upstream appweb sources
      r8401: add a readme pointing to the upstream sources
      r8404: small upstream merges of appweb code
      r8405: update var.c from upstream
      r8406: make sure we give an error in ldbAdd() if any record fails
      r8407: fixed a bug left over from our old socket code.
      r8408: its quite common in our code to free up a connection when we get an
      r8409: fixed another error found on netbsd.
      r8410: converted the newuser script to js
      r8411: we need to use mprVarToNumber() instead of var->integer now, to cope with
      r8412: cope with some lost messages in the ping test (netbsd gets this)
      r8413: mark exprbug() as fixed, and add a new bug
      r8415: get rid of the last 2 runtime perl scripts
      r8416: added the extra_cflags.txt system from smb-build
      r8417: fixed handling of PRINTF_ATTRIBUTE for heimdal portion of build
      r8418: PRINTF_ATTRIBUTE declaration has to come before it is used :-)
      r8419: in order to use our replace.h, heimdal needs stdarg.h
      r8420: slowly getting my way through some more heimdal portability fixes
      r8421: needed for build on solaris10
      r8422: needed on irix 6.4
      r8423: remove the dependency on the full roken lib for asn1_compile
      r8424: bring in some more of heimdals m4 macros, and remove the hard-coding of several test
      r8425: add err() and errx() functions needed by for compile_et on some systems
      r8439: removed an accidential commit
      r8440: - several build farm hosts were failing 'make clean' as the list of
      r8441: don't build tdbtest by default as there are too many systems that
      r8442: remove tdbtest from our build. If you want it, then do
      r8443: added talloc.3 to the tree to try to allow talloc to build on systems without xsltproc
      r8445: if a system doesn't have "nogroup" then try "nobody"
      r8446: if provisioning fails then don't try to run the test suite!
      r8447: fixed make install in the farm
      r8448: - added a test target for tdb
      r8449: - search for lex and yacc properly
      r8450: more configure tests for solaris. It now builds some binaries, but
      r8451: samba4 finally builds on solaris 8 sparc with heimdal and ejs
      r8452: allow for the ugly hack:
      r8453: my solaris10 box doesn't have math.h
      r8456: avoid double inclusion of roken.h (this was breaking the build on irix 6.4)
      r8458: next target is irix - this gets the socket wrapper code building
      r8459: move to the more portable script execution method
      r8460: removed the unused function krb5_locate_kdc(). It causes a build failure on irix.
      r8461: fixed integer64 handling on bit endian platforms. The ejs code used
      r8462: added a test for %lld support to our snprintf() configure test.
      r8463: more irix fixes. This one adds some missing addrinfo functions
      r8464: the last few functions needed by irix 6.4.
      r8465: once we define socklen_t, then tell other include files we have it. This prevents roken
      r8466: it is not portable to assert() a va_list (it breaks on alpha for example)
      r8467: using both math.h and float.h breaks popt on freebsd 5.4
      r8469: the extra pidl args need to be normal args, not after a --, otherwise pidl tries to compile
      r8470: looks like popt portability is going to be a bit of a fight :(
      r8471: --ejs taking an optional arguments interferes with the pidl extra args
      r8480: fixed a typo
      r8481: switched ldb ejs called over to an OO interface, so you do:
      r8482: gnutls_x509_crt_set_subject_key_id is not available in some versions
      r8483: switched our generated ejs rpc code over to the new OO interface. This
      r8484: switched the sys_*() calls to the OO interface
      r8485: - be friendly to shells other than bash
      r8486: switched to a separate connection operation in ldb interface
      r8487: kfixed a typo
      r8488: after discussions with simo, moved to a full OO interface, so you don't need to keep
      r8489: neaten up the object handling
      r8490: make the ldb tests more portable
      r8491: lower the offset limit that filesystems need to support to pass RAW-WRITE to 2^33
      r8494: fixed a bug in RAW-SFILEINFO that caused inconsistent results on different platforms
      r8495: allow for up 10% change in allocated disk space during QFSINFO tests
      r8496: speed up the test_echo.sh test a lot, while still providing good coverage
      r8497: prevent a fd leak in RAW-SEARCH test
      r8498: more test suite speedups. It's down to 5 minutes on my box now
      r8500: greatly reduce the number of build warnings on x86-64 (every NDR macro
      r8517: fixed a crash bug in ldb_dn_compare_base()
      r8518: ensure all constructed NDR packets are null terminated. This is needed
      r8519: better method of ensuring null termination
      r8520: fixed a pile of warnings from the build farm gcc -Wall output on
      r8522: fixed another couple of size_t warnings
      r8523: match a zero message id in ldap replies to the last request sent. Thanks to simo
      r8525: added two more test targets:
      r8527: found an uninitialised variable in 'make valgrindtest'
      r8532: this miight fix cross compilation for reactos
      r8533: improve --help output
      r8535: no longer rely on seekdir working after a closedir. Instead, keep
      r8536: - use smbd pid file to kill at end of selftest
      r8537: cope better with the small file handle limit on some systems in the build farm
      r8539: $LOGNAME is a common varient of $USER on some systems
      r8540: fixed network interface detection on several hosts
      r8541: this might take a few tries ...
      r8557: expose ldb_errstring() in ldb ejs code
      r8558: move newuser logic into the provision.js lib
      r8560: added a newuser page in swat
      r8561: as with the other ejs subsystems, make nss into a object
      r8562: small merge with upstream
      r8565: put the docs menu on the right
      r8567: fixed the build after the com idl changes
      r8568: change missing templates to warnings, so that provisioning with an existing db
      r8569: delete is a js reserved word, so use del instead
      r8570: delete all records in the old db when provisioning, rather than using
      r8574: added server side irpc calls for listing the current sessions
      r8575: the beginnings of a smbstatus command
      r8576: install scripts from scripting/bin/
      r8577: added management calls to list current tree connects
      r8579: recognise the name 'localhost' as 127.0.0.1. This solves a problem
      r8580: try to fix the build on stratus
      r8581: fixed handling of 64 bit integers in rpc calls from ejs
      r8582: added sys.httptime() call, to display a NTTIME as a http time string
      r8583: nicer smbstatus output
      r8584: added --nbt option to smbstatus for nbt server statistics
      r8586: register the kdc with irpc so we can tell that it is up
      r8587: - fixed ref allocation in irpc replies
      r8588: register wins server with irpc
      r8589: - support --version option to smbstatus
      r8590: added server status utility functions for checking on the status of a task via irpc
      r8591: - added a simple 2 level menu structure to swat. Deryck, I know this
      r8593: register the rpc server with irpc
      r8594: more placeholder pages for server status
      r8598: move provisioning to /install/ directory from /esptest/
      r8599: null terminate the argv list in string C functions
      r8600: fixed null termination on some error messages in ldb
      r8601: fixed null termination in ltdb connect error
      r8602: allow options in ldb connect calls
      r8603: we have to use the same db name as the rest of smbd uses so the ldb connect
      r8624: removed valgrind comment on tdb that no longer applies
      r8625: move the ldb_wrap logic into the ldb code. This logic is meant to
      r8626: fixed a typo
      r8627: fixed a big memory leak in the spnego gensec code in session
      r8628: add retries to the normal paths of nbt name resolution. UDP broadcasts are not 100% reliable :)
      r8629: - moved the getDomainList() call out of smbcalls_auth.c and into libjs/auth.js
      r8630: give a much nicer backtrace on assert() failures in ejs
      r8631: give an error on incorrect argument count
      r8632: use <pre> around displayed exceptions
      r8633: check for valid input to ejs_userAuth()
      r8634: we are still getting occasional test failures due to disk space
      r8635: make object inheritance with the builtin objects easy by allowing
      r8636: fixed the ejs ldb test to work with the new ldb.search() syntax, and
      r8637: added sys.stat() and sys.lstat() calls
      r8638: continue the trend of maknig our C functions true ejs objects by making the string functions
      r8639: moved loadparm calls into an ejs object
      r8640: continue the trend by moving the ejs random calls into an object
      r8642: - fixed install of new swat files
      r8643: - make lp_configfile() work again
      r8645: updated the ldb esp test for the new ldb ejs syntax
      r8646: update install howto for new provision code
      r8648: automatically redirect to provisioning if not yet provisioned when the
      r8649: added smbscript to the list of binaries to install
      r8651: fixed a boolean expression bug (submitted upstream)
      r8652: added a test for the boolean bug just fixed
      r8658: move use of lp_security() and lp_nt_status_support() into the connection structure.
      r8659: return ldif formatted attributes in the ejs ldb search call, so sids show up as strings
      r8661: added strstr() ejs function in string lib
      r8665: fixed a segv at high debug level in the web server
      r8668: fixed a segv during upgrade of a very old ldb.
      r8671: use much shorter names for the selftest directory and socket wrapper
      r8676: attribute lists in ldb searches must be NULL terminated
      r8678: setup for gdb backtrace in 'make test'
      r8679: only call fault setup once (thanks to andrew for pointing this out)
      r8680: try harder to find the binary for gdb in the backtrace
      r8681: if SOCKET_WRAPPER_DIR starts with ./ then strip it internally. This saves us 2 more chars
      r8684: this should fix the panic on x86_64, and possibly alpha
      r8685: an alpha in the build farm is dying with a floating point
      r8696: fixed ejs to more strictly follow the va_list rules. Might fix that
      r8698: attempt to cope with lack of strtoull() on HPUX
      r8702: fixed ntlm_auth build. Andrew, can you check I got this right?
      r8703: cope with null string in interpret_addr()
      r8707: this typedef isn't used, and breaks the build on HPUX, so I've removed it
      r8708: fixed an assert that abartlet found
      r8709: fixed the assumption in RAW-SEARCH that directories are returned in sorted order
      r8710: another attempt at fixing HPUX
      r8711: add m4 for finding return type for signal handlers
      r8712: cleanup old search test code to use talloc
      r8715: - revert the %PRIi64 stuff. Tim, we explicitly check for %llu support
      r8718: try to improve the 2 level menu a bit.
      r8720: split form object out to separate include file, and make it a real
      r8722: make the menu handling considerably saner and easier to follow. The whole
      r8723: fix esptest menu
      r8724: some boilerplate installation text
      r8725: redirect to the base install page not the provisioning page on first
      r8726: increase default session timeout to 15 minutes to be less painful for developers
      r8729: make the RAW-SEARCH test more robust to servers with hash based directory ordering
      r8734: fixed the wins server for the new ldb DN restrictions.
      r8735: added NBT and WINS testing to 'make test' so we will know if it breaks again
      r8736: this fixes the ldb speed (raises BENCH-WINS from 15 ops/sec to over 4000)
      r8742: fixed handling of zero length names in mprObject()
      r8743: automatically find the basedn in ldap.js
      r8745: make ldap.js cleanup after itself
      r8746: replace opendir/readdir/telldir/seekdir/closedir on systems where they
      r8747: remove unused code
      r8748: fixed build. Andrew, please check.
      r8749: for completeness, add rewinddir() and dirfd()
      r8750: drat, on some systems dirfd() is a macro
      r8753: fixed directory handling on systems that do not return . and .. as the
      r8773: fixed another dependency on directory ordering in RAW-SEARCH
      r8774: make some gensec errors a bit less verbose
      r8776: fixed SMB connections for IP addresses, even when name resolve order
      r8777: make sure that the tree connect is a child of the return cli state structure.
      r8778: index on nCName in sam.ldb. This was costing us about 75% of the time in each smb login
      r8780: make numops controllable in BASE-DISCONNECT
      r8781: - fixed a memory leak in BASE-SECLEAK (ironic, isn't it). There is
      r8817: - fixed return result from LOCAL-MESSAGING test
      r8818: - fix LOCAL-IRPC test for new ref-alloc semantics of irpc
      r8819: fixed a memory leak in irpc_call()
      r8821: continue the trend to move to a more OO style of interface for our js
      r8822: fixed number of arguments in samr lib
      r8852: fixed the build
      r8853: fixed path to smb.conf
      r8857: please don't get fancy with embedded boolean statements in js
      r8858: just to make sure it works on the main trees, deliberately break the samba4 build
      r8859: having been successfully mailbombed by build at samba.org, fix the build again
      r8879: more expansion of the irpc test to try to uncover the ia64 mystery
      r8882: - enable the domain master
      r8884: valgrind error logs only matter if non-zero in size
      r8885: fixed shell syntax
      r8887: fixed the irpc error that caused ia64 to fail the LOCAL-IRPC test
      r8893: fixed the valgrind error on stream termination due to prototol errors
      r8895: work around broken glibc strrchr function that gives valgrind errors on some boxes
      r8905: don't try to do DNS lookups on interface names with wildcards
      r8923: put the IRPC default timeout back to 10s (I didn't mean to commit this, it was
      r9002: a workaround for the current build problems. I hope this will allow
      r9003: add testing for non-empty directory delete on close
      r9006: expanded RAW-UNLINK test to test directory delete on close with non-empty directory,
      r9007: fixed error code for setting delete on close on a non-empty directory
      r9008: check the return status for the directory handle creations
      r9009: directory not empty is not an error on failure to delete directory in delete on close
      r9010: forgot to commit the change to create_directory_handle()
      r9042: fixed the valgrind error in the RAW-SFILEINFO test
      r9043: fixed return code in RAW-STREAMS test
      r9044: added a comment so you can see what this test does :-)
      r9045: be friendly towards servers that don't understand the 'share' form for tconx, instead of the \\server\share
      r9046: fixed display of privileges in RAW-ACLS test
      r9047: show the order of the server/correct output to make it easier to demo this test ;)
      r9048: added a new DOS error code (thanks to EMC)
      r9054: removed incorrect paranoia check on opening streams (this caused RAW-STREAMS to fail)
      r9059: add a basic credentials object for mimir
      r9074: cope with a null ntvfs context in disconnect, so the destructor that
      r9082: added the ECMA functions encodeURIComponent() and
      r9119: added a lp.categories() call in the loadparm js object, to allow
      r9120: added the BASE-DISCONNECT test to our set of standard tests
      r9121: use the older non-passthru level for setting delete on close
      r9122: cope with trailing garbage in POST contents in the web server
      r9131: started adding the server side code for "AJAJ" (asynchronous javascript and javascript)
      r9132: 'pointer' is better for typedef than 'C pointer'
      r9133: a huge import of the qooxdoo infrastructure. I decided to import all the widgets to make experimenting easy during development. We can trim this back later to only the pieces we use
      r9134: added the client side js library code for handling remote 'AJAJ' calls
      r9135: added a sample page that demonstrates using AJAJ to make remote calls
      r9136: made the 'AJAJ' code portable to IE and Opera
      r9137: fixed installswat to handle the deep directory structure of qooxdoo
      r9139: cleanup the layout a bit
      r9140: fixed a typo
      r9146: - enable winreg pipe from ejs
      r9153: added a sample program for enumerating winreg via js
      r9159: abstract the winreg js functions into a nice library interface
      r9160: use the winreg lib in the test program
      r9171: - support putting a credentials object in a rpc pipe object to allow authentication
      r9172: - fixed a nasty bug in the 'deep copy' mpr code that caused variables
      r9173: catch ep->local being NULL
      r9174: ejs does not include the special variable 'length' in for loops over objects,
      r9175: simplify the example code a bit
      r9176: added a much neater method of calling printf on the server from client side js. Just
      r9177: setup a credentials object in authinfo on login
      r9178: remove the old server printf code
      r9179: cope with simultaneous web requests using the same session variable
      r9183: more workarounds for the global variables in ejs. I will discuss getting rid of these
      r9209: - fixed the ldb registry backend to work with the new provision ldif
      r9210: fixed support for a credentials element in a rpc object in ejs to not
      r9211: don't try to encode functions in the AJAJ object encoder
      r9212: the beginnings of a registry editor in SWAT, using client side javascript and AJAJ
      r9213: some improvements to the registry editor code
      r9218: make the winreg library code handle arbitrary paths more efficiently
      r9219: by default be a DC, as the provisioning scripts assume that in other parts
      r9226: make sure we catch rpc faults in the ejs rpc wrappers
      r9227: cleanup and simplify the AJAJ code
      r9228: cleanup and simplify the AJAJ code - part 2
      r9298: pull non-array elements before array elements to overcome the problem
      r9299: fixed the evaluation of pointer expressions that evaluate to boolean
      r9300: cope with zero length in ndr_pull_charset()
      r9319: updated newuser script for new OO style for nss object
      r9335: only copy the in side of an array to the out side of an array when the
      r9337: defer the checking of array sizes until the end of the
      r9338: fixed the winreg IDL to be correct for the EnumKey and EnumValue
      r9339: treat arrays of uint8 values as a special DATA_BLOB type in the ejs
      r9340: print the [in] contents when debugging even if the marshalling
      r9341: updated the winreg test program to take advantage of the new EnumValue
      r9342: removed extra libinclude of base.js
      r9344: started adding calls for manipulation of data blobs in ejs
      r9345: used the data blob functions in the echo.js test code
      r9346: allow test_ldap.sh to be called when $CONFFILE is not set
      r9347: this array bounds checking is harder than it looks ...
      r9355: return the EnumKey and EnumValue list we have so far when we get a rpc fault
      r9356: a better way of coping with NULL arrays in the array bounds checking. This copes with the
      r9358: - opening a winreg key of "" is the same as re-opening the hive. The
      r9359: don't check for size overflow if value is NULL
      r9360: fixed the IDL for winreg_SetValue()
      r9369: an attempt to fix the build on HPUX. This is based on work by Don
      r9370: need a configure test for setresuid()
      r9374: HPUX is also missing setegid()
      r9377: made winreg a user tool (I find it quite useful). I expect it to get the ability
      r9378: initialise the last_mod attribute in the ldb backend. Better to return
      r9379: the valgrind test box is now just going past the max 30 minute smbd
      r9383: remove unused file
      r9384: added a debug to show the dcerpc fault code for any calls we fault
      r9386: OpenKey with a bad name must return WERR_BADFILE (w2k3 regedit relies on this)
      r9387: regedit uses "New Key #nn" for newly created keys, which conflicts with the stricter
      r9388: we should fault bad handles given to winreg_GetVersion()
      r9389: handle errors reading from files in web server
      r9390: fixed mixing of code and data
      r9409: fix a problem that volker noticed with web page timeouts causing smbd
      r9410: - a winreg_CloseKey() should return a zero key on success (zeroing the
      r9434: moved the registry editor into a common js library. Deryck, does this
      r9464: fixed a problem with child pointers copied into non-allocated mpr variables. We
      r9465: handle encoding and decoding of pointers, representing them as a
      r9466: add display of values as well as keys in the registry editor
      r9470: non-working attempt to add a little table for values to the reg editor
      r9491: fixed up a few scripts that need to be updated for the new GetOptions syntax. Mimir, its
      r9492: it is more usual to return 'undefined' instead of 'false' on a call failing (unless the
      r9493: our test scripts need to use testok at the end or the errors don't annumulate between scripts
      r9495: - added an enum for winreg key types, making it easier to read the debug logs
      r9496: added a regToVar() function that converts a registry blob variable to a ejs variable.
      r9497: - converted the winreg library to a more OO style of interface
      r9498: converted the SWAT regedit backend code to use the OO calls
      r9499: added error checking to the userAuth() call. SWAT is still failing, but at least it now
      r9500: userAuth() takes a creds object, not a general object now ...
      r9501: fixed the SWAT login page for the changes to the userAuth() function that Mimir made
      r9503: removed duplicate REG_* defines from registry.h now that they are
      r9504: use some low level ejs hackery to give much better exception error messages in both
      r9566: fix an uninitialised variable
      r9567: fixed the winreg IDL for CreateKey, including a security
      r9568: updated the winreg js library for CreateKey, and add a --createkey
      r9569: fixed an uninitialised variable
      r9573: fixed a comment
      r9574: - made the sec_info fields in lsa and samr use a IDL bitmap
      r9575: more automatic cleanup code in winreg test
      r9578: fixed an endless loop and memory leak in the QueryMultipleValues test
      r9580: put the libinclude() after the GetOptions so the smb.conf is loaded to
      r9599: fix formatting of echo output
      r9600: fixed the intermittent failures we were getting with ejs in the build
      r9603: allow the LOCAL-PAC test to use keys and pac data from the command line
      r9608: don't validate the hard-coded sid for an external pac file
      r9610: use a list of allowable extensions for unauthenticated access rather than
      r9643: fixed samsync code for the new dn explode semantics
      r9644: add LOCAL-PAC to the list of 'make test' tests
      r9645: fixed the ejs GetOptions() call to look at the first option passed (this is what broke --help)
      r9646: fixed error message
      r9647: saved_pac is binary data, so prevent any possible portability problems with signed chars
      r9648: this fixes the krb5 based login with the pac. The key to this whole saga was
      r9649: missed a spot .....
      r9671: patch from Kai Blin fixing a bug in our base64 encoder
      r9674:  r9678 at blu:  tridge | 2005-08-27 16:32:30 +1000
      r9702:  r9680 at blu:  tridge | 2005-08-27 18:45:08 +1000
      r9703:  r9683 at blu:  tridge | 2005-08-27 18:56:05 +1000
      r9704:  r9684 at blu:  tridge | 2005-08-27 19:38:31 +1000
      r9705:  r9685 at blu:  tridge | 2005-08-27 19:43:44 +1000
      r9706:  r11042 at blu:  tridge | 2005-08-28 12:40:09 +1000
      r9707:  r11080 at blu:  tridge | 2005-08-28 12:41:12 +1000
      r9769:  r11592 at blu:  tridge | 2005-08-30 10:40:19 +1000
      r9773:  r11599 at blu:  tridge | 2005-08-30 11:55:57 +1000
      r9774:  r11605 at blu:  tridge | 2005-08-30 12:02:19 +1000
      r9775:  r11607 at blu:  tridge | 2005-08-30 12:16:19 +1000
      r9776:  r11609 at blu:  tridge | 2005-08-30 12:20:11 +1000
      r9791:  r11611 at blu:  tridge | 2005-08-30 21:48:22 +1000
      r9794:  r11627 at blu:  tridge | 2005-08-30 22:55:27 +1000
      r10192:  r11631 at blu:  tridge | 2005-08-30 23:06:37 +1000
      r10193:  r11632 at blu:  tridge | 2005-08-30 23:08:27 +1000
      r10199: added a LOCAL-RESOLVE torture test, useful for measuring the overhead of
      r10200: added a composite_trigger_done() call that allows a composite function
      r10213: fixed a memory leak in the ldap client and server code spotted by Karl
      r10216: Chris Samuel pointed out that we should note the need to run provision
      r10252: a recent checkin from simo changed the handling of BASE and SUBTREE
      r10253: a fairly large tdb cleanup and re-organise. Nearly all of this change
      r10368: when building the epm tower, don't put host names in the ip address
      r10370: only validate the re-generated binding string for hostnames with IPs
      r10384: add _GNU_SOURCE in tdb configure
      r10385: removed obsolete comment
      r10403: fixed the basedn for testing, and add a debug showing the size of the test in ldbtest
      r10404: make sure we use the right smb.conf in the ldap testing
      r10405: added transactions into tdb, and hook them into ldb. See my
      r10406: added --nosync option to all ldb tools, so that you can control if
      r10407: the schannel database does not need to be synchronous (and thus crash
      r10408: now that we are using tdb transactions we don't need any additional
      r10409: allow smb.conf override of ldb synchronous transactions with "ldb:nosync = yes/no"
      r10410: blindly update the scons file for tdb. I'm not sure how this works,
      r10411: we don't need the 10 times retry on rid allocation now, as
      r10421: following on discussions with simo, I have worked out a way of
      r10422: ldb_search() can now use tdb_traverse_read() to ensure it can run in
      r10423: minor changes to the ldb test suite to allow it to work correctly with
      r10424: for caller convenience, automatically turn a tdb_traverse() into a
      r10459: fixed some portability problems
      r10460: fixed portability of transaction code to systems with integer
      r10461: fixed tdb build on systems without stdint.h
      r10462: cope better with compilers that don't put the object file in the same directory
      r10463: consider it an error if tdbtorture produces any log messages
      r10465: separate out a read_only db from a read-only traversal to ensure we
      r10466: work around missing pread/pwrite declaration on openbsd
      r10467: aix doesn't like zero length malloc :(
      r10468: - terminate tdbtorture quickly when an error is detected
      r10469: use the older style of structure initialisation for tdb to make it
      r10470: solaris8 has a problem with tdbtorture with 3 processes. To see if
      r10471: stratos doesn't have getpagesize(), so guess 8k on systems that don't
      r10475: make sure we report failures in tdbtorture (ie. get the exit status right)
      r10483: fixed some uninitialised variables warnings
      r10484: try to fix the pread/pwrite declaration problems
      r10485: run autoheader before autoconf
      r10489: added the ability for irpc server to defer replies instead of replying
      r10490: - allow deferred irpc replies to set the status
      r10492: work around a bug in solaris which cases lock upgrades to fail with
      r10493: we need sys/select.h to enable select() in the solaris workaround
      r10494: - don't generate a tdb log message for any type of failed lock probe
      r10495: older redhat boxes need sys/time.h for select()
      r10496: - added configure test for sys/time.h
      r10522: finally got the locking working on solaris10. This adds a read lock on
      r10523: fixed timegm() to not depend on get_time_zone(), so it works in lib/replace/
      r10524: SAFE_FREE() in tdb does not need the discard_const_p()
      r10525: change from AC_CHECK_TYPES() to AC_CHECK_TYPE() for intptr_t, so the
      r10526: BASEDIR must be set or we end up installing most of the binaries into lib/
      r10527: don't attempt self gdb attach if running under valgrind. This was
      r10535: fixed the pidfile code (it didn't survive the recent pstring changes)
      r10603: neaten up the ldb module initialisation code
      r10641: fixed the error handling on search errors in the ildap backend
      r10643: increase smbd max runtime when using valgrind
      r10665: fixed some crash errors and an error encoding AND and OR operations in the expression parsing code
      r10666: - reverse the ildap ldb backend so tree based searches go through
      r10667: cope with a NULL tree for base searches in ldb_search()
      r10668: added a ildap_search_bytree() function
      r10669: reverted jelmers commit 10663 as it was causing lots of panics in 'make test'
      r10682: force the free of the fd event first when a stream terminates. That ensures
      r10699: fixed the dcerpc code so that you can shutdown the pipe safely from
      r10700: removed volkers temporary timer hack now that freeing the netlogon
      r10704: don't try to free the netlogon pipe twice
      r10705: fixed a crash bug in the getdcname irpc server for winbind. The
      r10706: split out the irpc server functions in the NBT server, so the mainline
      r10708: a bit more error checking in the idap ldb backend
      r10709: fixed a crash bug rather similar to the one volker found in the dcerpc
      r10726: fix to talloc_parent() from Michael O'Brien
      r10752: make sure we set the exist status correctly for the tdb tests
      r10753: don't require every ldb module to implement both a search_bytree() and
      r10754: fixed a valgrind error for unmatched SMB replies
      r10755: fixed the construction of expressions from subtrees for SUBSTRING searches
      r10756: another fix for the construction of expressions from subtrees for
      r10757: remove the proxy module (it is not complete yet)
      r10759: make modules easier to write by allowing modules to only implement the
      r10790: allow updating of existing ldb opaque values (thanks to abartlet for
      r10856: we need aclocal.m4 in ldb for standalone configure
      r10889: make searches for dn's less of a special case, and much faster when
      r10891: I noticed that the secrets.db was not being backed up on my system due
      r10892: - improved the handling of the special distinguishedName attribute
      r10893: add configure test for utime (needed for the previous utime patch)
      r10894: make the handling of dn/distinguishedName much closer to real
      r10895: allow 'dn=string' searches to work again. Windows doesn't allow these,
      r10896: added a strcasestr() replacement function
      r10897: added in a hackish ldb proxy module that I am using to experiment with
      r10912: added a test for supporting batch oplock upgrades
      r10913: This patch isn't as big as it looks ...
      r10914: moved the ldap time string functions into ldb so they can be used by
      r10915: added a standard attribute handler for a ldap UTC time string
      r10916: - finished the 'operational' ldb module
      r10917: copy the element name in a ldb_msg_rename_attr() and ldb_msg_copy_attr() to ensure
      r10918: - fixed standalone ldb build
      r10919: fixed the ldb test for the new operational module
      r10920: in case of a accept() failure just failing and trying again is no
      r10954: added support for canonicalName in the operational module, using the
      r10955: finally worked out why our computer accounts were being identified as users in mmc.
      r10957: make a comment clearer
      r10990: the beginnings of a program designed to work out the minimal schema
      r11109: fixed the error code return from most ldb functions (the change to use
      r11110: make ldb_oom() also set the ldb error string
      r11111: fixed a talloc error in the dn shortcut code
      r11112: listen on the global catalog ldap server port as well if we are a
      r11113: fixed two small bugs in newuser
      r11114: - fixed error handling on bad bind in ildap client
      r11285: fixed winreg.js for the recent change to winreg.idl
      r11353: a bit of an improvement to the ldb_tdb error handling
      r11354: - generate a ejs error on bad ldif to add/modify
      r11363: fixed a problem with provisioning when hklm already exists (the
      r11364: added a ldb_attr_dn() function for testing if an attribute name is
      r11365: fixed a comment typo
      r11403: improved the error handling in the ildap ldb backend. Now passes
      r11408: fixed the mapping of ldb errors to ldap errors in the ldap server
      r11436: this is work in progress for generating the schema we need for our ADS
      r11447: fixed a problem with the ldap server spinning using CPU time
      r11456: fixed a ejs parser bug for delete() statements
      r11457: fixed the winreg IDL and torture code so key and value enumerations
      r11458: fixed our ejs smbscript interfaces to use arrays where appropriate. In
      r11459: display a schemaIDGUID as a guid in ldif, making it easier to work
      r11463: more progress on the schema generator. mmc now accepts all parts
      r11467: yay! mmc now accepts our schema. The trick was to get all the OID
      r11472: use talloc_get_type() to try to catch an intermittent failure I'm seeing in the ldb winreg backend
      r11474: - enable ldb transactions from ejs
      r11475: removed a extraneous ldb_delete() call (i had it there for debugging)
      r11476: finally fixed the intermittent registry server bug! This has been
      r11496: add a minimal ads-compatible schema into our sam.ldb setup. This is
      r11498: added an optional extra argument to split to limit the number of
      r11499: added a minimal set of display specifiers for mmc to use to display
      r11500: fixed a bug in the variable substition code using the new limit argument to split()
      r11501: change provision code to use the new display specifiers
      r11592: fixed a crash bug from the ldb_result changes (res was being used after being freed)
      r11593: added a data_blob_realloc() function
      r11594: ensure ldb_search() sets *res to NULL on failure (some of the updated
      r11595: added a helper layer to parse streams into individual packets. This is
      r11596: switched the libcli/raw/ code over to using the lib/stream/ generic
      r11598: fixed strhaslower() and strhasupper() to not falsely recognise
      r11602: added packet_set_serialise() to allow the generic packet layer to
      r11603: converted the smb server to use the new generic packet code
      r11604: converted the kdc code to use the new packet lib. Andrew, I'm not sure
      r11605: added handling of the send queue to the generic packet handling code
      r11606: use the generic packet send code in libcli/raw/
      r11607: switched the smb server to use the generic packet send code
      r11608: switched the kdc to use the generic packet send code
      r11609: fixed handling of one way requests with new send code
      r11618: added a generic '32 bit length prefix' full packet helper to the packet code
      r11619: use the 32 bit length helper in the kdc.
      r11620: switch the ldap client code over to using the generic packet code
      r11621: some minor fixes from comments by metze
      r11622: convert the ldap server to the generic packet code
      r11623: convert the dcerpc socket layer to the generic packet code
      r11627: give the caller much more control over the stream to packet process,
      r11628: fixed a valgrind error in the rpc echo test
      r11629: fixed a bug found with the socket:testnonblock code. With randomised
      r11630: another fix for over-reading in the packet code. This time get the
      r11631: fixed a signed/unsigned warning
      r11632: removed 2 unused functions
      r11636: a bit neater solution to the nt_cancel problem
      r11638: fixed handling of null volume name in RAW-QFSINFO test
      r11639: fixed some create_time tests that should be change_time tests
      r11659: allow the max runtime for smbtorture and smbd to be controlled on a
      r11660: - the libcli/raw/ lib no longer uses the SMBCLI_REQUEST_SEND state, or
      r11662: the beginnings of a SMB2 client library. Very hackish, meant for experimentation
      r11663: start of a SMB2 torture test. Just does a negprot and prints some fields for now.
      r11664: forgot to commit the structs.h change
      r11665: started to put some meat on the structure used for the SMB2 library
      r11666: filled in the basic session setup. Vista happily accepts the first
      r11668: yay! we get a successful session setup with SMB2, and get back a 64bit uid
      r11674: SMB2 tree connect now works. We do 2 session setups and 2 tree
      r11679: opening/creating files in SMB2 now works. Lots of unknown parameters
      r11680: added smb2_close(). This also demonstrates that file handles are 16
      r11681: filled in a few more smb2_create() fields
      r11682: filled in access_mask in tcon reply
      r11683: fixed create call
      r11687: filled in 3 more fields in the close reply
      r11691: added reply buffer code checks and oplock flags for create request/reply
      r11692: added a full composite (async) spnego session setup for SMB2. This
      r11693: added a full async composite function for SMB2 that does:
      r11694: fixed 2 valgrind errors
      r11695: added SMB2-SCAN torture test for scanning for active SMB2 opcodes
      r11696: added a few more opcode names
      r11697: - added a generic SMB2 getinfo call
      r11698: added some more level names
      r11699: use create_complex_file() to setup a file with a wide range of
      r11700: added structure definitions for many of the getinfo structures
      r11710: added function iface_same_net()
      r11711: fixed the nbt server to use the right interface for outgoing requests
      r11712: avoid changing the fde flags unless really needed
      r11713: separate out the setting of the fde in the packet context from the
      r11714: put in a workaround for a winbind problem volker asked me about. The
      r11715: added SMB2 read and write requests
      r11716: added a read/write test
      r11730: added parsing and tests for a bunch more SMB2 getinfo levels
      r11731: fixed typo noticed by metze
      r11735: fixed the ALL_EAS smb2 level parsing
      r11736: display EAs and streams in smb2 torture tests
      r11737: use _smb_setlen2() to allow for 24 bit lengths in SMB2 packets
      r11738: test larger read/write calls. If you run smbtorture with -X (to enable
      r11751: fixed the req->out.size calculation (it needs to be the complete
      r11752: setup the dynamic pointer for incoming packets too
      r11753: change the getinfo scanner to scan with both a file and a directory, and to use files
      r11754: make the SMB2 blob push routines take offsets, so they fit better with
      r11755: added names for all of the SMB2 qfs info levels (they all map exactly
      r11756: split out the parsers for the pass-through levels of QFSINFO and
      r11758: unified the parse code for the SMB and SMB2 qfsinfo and qfileinfo calls
      r11771: - split out the setinfo blob construction in the libcli/raw code
      r11772: - setfileinfo needs a smb2_handle for SMB2 support
      r11773: added a SMB2-SETINFO test suite. This tests the following levels:
      r11775: added support for creating files on SMB2 with initial EA lists and an ACL
      r11776: no need to call out to SMB to setup test files for SMB2 any more
      r11777: display the security_descriptor in torture_smb2_all_info()
      r11780: it turns out that the MxAc tag isn't a security descriptor, its a
      r11791: simplify the SMB2 connect code following some suggestions from volker
      r11794: - fixed a valgrind error in libnet, caused by using a stack variable
      r11795: used a couple more of volkers composite helper functions. They
      r11800: - filled in unknown fields in SMB2 all_info level
      r11801: - added basic SMB2 find support
      r11816: this fixes some of the problems with the recent async rpc changes and
      r11817: fixed the problem with the RPC join tests. The problem was that
      r11818: - changed the option torture:echo_TestSleep=yes/no to the more generic
      r11819: simplified the async rpc bind code a little.
      r11820: fixed some problems with the socket socket.c code.
      r11821: got rid of two more unnecessary variables and made the variable names
      r11822: reworked the socket_connect_multi() code so it is built on top of
      r11823: make the socket_connect_send() context a child of the local state
      r11824: fixed a valgrind error in the dcerpc_smb code
      r11838: lower the default numops in smbtorture. When people want lots of
      r11843: fixed a valgrind error in the RPC-SAMLOGON test
      r11848: separate out the info levels common to SMB and SMB2 for raw_search
      r11849: added mapping between SMB2 and SMB find/search levels
      r11850: added a test suite for the SMB2 find calls
      r11870: fixed the problem volker reported with the RPX-XPLOGIN test. The
      r11871: fixed a problem volker found with the async bind code, and a callback
      r11872: another attempt at fixing the data_blob_free in async dcerpc bind,
      r11888: - added SMB2 trans support
      r11889: added support for dcerpc ncacn_np over SMB2. You use it by giving the
      r11890: added tests for the last few fields in SMB2 find requests
      r11891: - added pipe_flags field in smb2_trans
      r11892: forgot to commit these changes
      r11893: fixed a dependency problem
      r11894: fixed SMB2 trans code for pipe_flags
      r11901: added smb2_logoff() support (metze correctly guessed opcode 2 was
      r11902: added smb2_logoff() testing
      r11903: added smb2_tdis() (opcode 4)
      r11904: added smb2_tdis() testing
      r11905: added SMB2_FLUSH as opcode 7. Thanks to metze and volker for help
      r11906: opcode 13 appears to be keepalive. Metze guessed this one :-)
      r11907: added testing of SMB2 keepalive
      r11949: make sure we ask gensec to give us a session key
      r11952: added a rootdse module. This will replace the existing rootdse code in
      r11953: enabled the rootdse module in the ldb modules code
      r11954: add the static rootdse content to the sam ldb,and enable the rootdse
      r11955: got rid of the old rootDSE code in the ldap server.
      r11956: removed the old rootdse.ldif, and the provision.js code that uses it
      r11957: fixed up code meant for debugging
      r11958: - fixed memory leaks in the ldb_result handling in ldb operations
      r11969: got rid of the very annoying 'failed to open /secrets.tdb'
      r11970: fixed a valgrind error. The auth info from the alter_context reply was
      r11980: ronnie worked out that opcode 0xb in SMB2 is in fact ioctl, and that
      r11981: we should allocate request specific memory in ldb modules off the
      r11982: ensure the fde event gets freed before the socket itself, as otherwise
      r11983: make talloc LGPL. This makes more sense given that ldb depends on
      r11984: LGPL on header and testsuite as well
      r12004: added some SEC_ADS_* security flags. Needed for a SDDL parser.
      r12005: added a SDDL (Security Descriptor Description Language) parser. Not
      r12006: don't require callers to fill in pad bytes in SMB2 calls
      r12007: fixed a valgrind error in the SMB2-SETINFO test
      r12008: added a simple LOCAL-SDDL test suite. Only one example so far. Will be
      r12009: made the LOCAL-SDDL test less verbose by default, and add it to the
      r12010: - added support for domain specific SID codes in SDDL strings
      r12011: fixed another 'mixed code and declarations' bug
      r12016: fixed a valgrind error
      r12057: fixed authentication in ldb client tools
      r12063: fixed the krb5 client code to handle ICMP port unreachable errors, and
      r12064: pass back the socket level error correctly (so we get
      r12082: fixed a valgrind error found by kukks in the transs server handling
      r12084: added a comment on what is appropriate for parameter_control
      r12085: wkssvc.idl updated based on work by Ronnie Sahlberg to bring the
      r12086: reverted the utf8string change in xattr.idl. See the discussion on
      r12116: got rid of composite_trigger_done() and composite_trigger_error(), and
      r12136: fixed a bug in NetWkstaTransportEnum() from the recent merge with ethereal idl
      r12137: added sddl_encode(), the reverse of the sddl_decode() function added a
      r12138: added use of 2 letter SID codes in sddl_encode_sid()
      r12139: - fixed up the ace object flags checking
      r12156: added samdb_domain_sid(), a routine to get the domain sid by looking
      r12157: ldb_dump_results() is useful to call from within gdb, so you can see a
      r12158: added ldif handlers for the ntSecurityDescriptor attribute, so when
      r12322: automatically use cmdline_credentials if the ldb object doesn't have
      r12323: fixeed the use of options.get_credentials() for ldb
      r12324: use command line credentials if available in ldap.js
      r12363: minor fixes for win2000 join/login
      r12531: 'make quicktest' was taking 15 minutes on my system due to failing DNS
      r12532: log a message giving the IPs of non-partner clients trying WINS replication
      r12535: - simplify string list handling in a couple of places using str_list_add()
      r12536: kerberos is on port 88, not port 389
      r12537: finally found the difference between us and w2k3 that caused w2k
      r12549: fixed the problem with serialisation and the RAW-OPLOCK test
      r12550: - fixed 'make pch' to always rebuild the gch file. The dependencies
      r12551: fixed oplock serialisation problem in gentest as well
      r12554: get rid of the pesky NTLMSSP warnings about being called after processing is finished
      r12556: added 'make gdbtest'
      r12626: some systems need time.h here (for asctime())
      r12633: expose talloc_vasprintf_append()
      r12634: make the [validate] binding string switch also check to see if the
      r12635: use the new [validate] value() checking to fix the string types for
      r12636: fixed some torture code for the changed lsa string types
      r12637: test CLDAP with both NULL and non-NULL user
      r12783: add a comment about matching more than 1 handler per message (andrew
      r12785: make the iface_*() functions return strings which do not get
      r12811: valgrind on RPC-ECHO with validate is extremely slow - speed it up if
      r12812: speed up RPC-ECHO with validate some more, and re-enable it under
      r12947: added some error checking that I stumbled across while testing domain migration
      r13069: adding a hack on instructions from andrew
      r13075: tell the admin what needs to be done to finish the install
      r13076: catch a easy to make error during vampire install
      r13078: fixed the ldb comparison function for objectSids
      r13096: explain what YOURDOM and YOUR.REALM are (in case people confuse the
      r13097: move the creation of the default sam name -> unix name mappings into
      r13098: make check for workgroup and realm case insensitive
      r13099: allow shares that point to /
      r13100: removed unused menu item
      r13102: fixed the vampire code to correctly setup foreign sids and default
      r13268: fixed typo noticed by Aaron Seigo
      r13276: start to work towards the BASE-DELETE test passing. This change
      r13277: print a useful error message when test 17 fails
      r13278: remove a silly strcasecmp() replacement
      r13283: added two optimisations to the tdb transactions code. The first is to
      r13358: removed some unused functions and make some local functions static
      r13401: remove the rename of the snprintf functions that simo accidentially
      r13504: add back in a comment noting fred as the contributor of the address
      r13505: allow servers to bind to non-broadcast interfaces. Servers now
      r13699: restore the system/select.h include, as otherwise we don't detect
      r13700: added highestCommittedUSN, uSNChanged and uSNCreated support, using
      r13701: removed some unnecessary casts
      r13707: expanded the delete on close test some more, and make it easier to
      r13738: added support for a "pointer" type in pidl. This will be used in the
      r13739: a fairly major overhaul of the opendb code to allow the BASE-DELETE
      r13740: the BASE-DELETE test now passes, and is a quick test
      r13741: make the pointer type in pidl handle any size pointer, just in case we
      r13745: remove some code I was experimenting with and forgot was there when I
      r13803: fixed two errors found with 'make valgrindtest'
      r13853: fixed the BASE-NEGNOWAIT test to not fail with a sigpipe if the server
      r13854: we now pass BASE-NEGNOWAIT
      r13856: fixed a misleading comment
      r14011: - added a ntvfs_notify op to allow backends to support change notify
      r14012: added support for the SMBntcancel operation in the cifs ntvfs
      r14013: added construction of the notify reply buffer in the nttrans server
      r14016: use type safe talloc when constructing operation structures in smb server
      r14059: change notify is quite a bit more complex than we thought. These tests
      r14141: fixed bugzilla 2921, forcing correct alignment when in ascii mode
      r14142: fixed ascii padding of nttrans create in server too
      r14208: removed use of req->flags2 inside the ntvfs layer. This should help
      r14209: don't timeout notify requests in the cifs backend, as they are
      r14288:  - make the snprintf call in talloc portable to older solaris boxes
      r14293: fixed some errors found with beam
      r14294: conditionally define _PUBLIC_, so you can disable it easily with -D_PUBLIC_=
      r14295: make sure we return a valid data blob
      r14296: added an abort() to SMB_ASSERT() so that static analysers know it doesn't return
      r14297: make sure we can go through the loop for than once
      r14305: fixed a memory leak and a break error
      r14306: fixed two break errors
      r14307: fixed dereference of my_address->addr when NULL
      r14308: fixed an out of range shift and an uninitialised error
      r14309: make sure ret is initialised
      r14310: length needs to be initialised
      r14311: canon needs to be initialised
      r14409: quieten warnings
      r14410: init a var
      r14411: mark smb_panic() as a noreturn function using gcc attributes, which
      r14412: init a var
      r14413: don't do memcpy of length 0
      r14414: added some error checks
      r14415: remove an unusued var
      r14420: arrgh, make sure I test compile even little patches ....
      r14422: ensure that domain_attrs does not refer to a stack variable in a freed
      r14423: don't die on no controls
      r14424: another empty controls case
      r14425: fixed an hmac-md5 error for keys longer than 64 (using deallocated
      r14426: ensure res is initialised
      r14427: don't reference short_princ after it is freed
      r14429: charset_t cannot be used to loop over charset_t, as otherwise it can
      r14430: ret can be NULL at the end of this loop
      r14431: don't call qsort with a null array
      r14433: sort_result must be initialised when we call do_result
      r14434: use the right enum type
      r14435: return after an error
      r14436: mixing of boolean expressions and integers isn't allowed
      r14539: get rid of a pointless union layer in struct smb_notify
      r14612: added strncasecmp_m() and fixed strcasecmp_m() for invalid codepoints
      r14613: fixed ntvfs_notify_next()
      r14614: handle zero timers in pvfs_wait()
      r14615: add notify to unixuid ntvfs module
      r14616: added notify change support to the posix backend
      r14755: the change notify code now passes most of the RAW-NOTIFY test. Still
      r14792: when we enable fake oplocks, give out batch oplocks not exclusive oplocks
      r14793: the RAW-NOTIFY test now passes. Next I need to make it efficient, and
      r14794: added a test to see what happens when you send a notify request on a
      r14795: queue notify requests on the same handle
      r14796: handle overflows in the notify buffer. The pending events are dumped
      r14797: added checking of the filter in notify requests
      r14799: added a tdb_get_seqnum() call, and the TDB_SEQNUM flag. This allows
      r14800: use tdb_get_seqnum() in the change notify code to avoid reloading the
      r14803: copy with the root directory, which has /. on the end of the path
      r14805: use tdb_lock_bystring() to prevent race conditions in notify add/remove
      r14807: fixed the format of notify responses (forgot to commit this earlier)
      r14808: added notify_trigger() calls for rename and setfileinfo calls
      r14835: split out the config rules for the ntvfs/common/ directory
      r14837: fixed build error
      r14838: fix the build. Looks like I still haven't quite got the hang of the
      r14845: expanded the number of info levels tested for continue in the
      r14876: added ENOSYS to unix error mapping
      r14877: added support for the kernel inotify mechanism. This passes basic
      r14902: change charcnv code to fail the conversion when it hits bad
      r14903: rewrote ndr_push_string() to be much simpler, and correctly handle
      r14904: fixed LIBNDR_FLAG_STR_CHARLEN (thanks to Metze for noticing this)
      r14916: print errno so I can work out why OpenBSD is failing the test for tdb
      r14917: fixed length strings don't count any trailing nulls in the length
      r14918: cleaner handling of systems without inotify
      r14919: disable the BASE-DEFER_OPEN test until it gets fixed (it sleeps for
      r14920: allow a notify backend to separately specify if it has handled the
      r14921: I forgot to commit the IDL change for the subdir_filter
      r14924: when handling recursive change notify, the client expects a windows
      r14925: trigger NOTIFY_ACTION_OLD_NAME and NOTIFY_ACTION_NEW_NAME events for
      r14926: change the inotify backend to implement the rather unusual semantics
      r14927: expand the RAW-NOTIFY test to test recursive and rename handling
      r14928: demonstrate that the completion filter is only set on the first notify
      r14932: ensure that we send a NOTIFY_ACTION_OLD_NAME and
      r14933: fix the handling of notify filters to be much closer to the behaviour
      r14934: greatly expand the RAW-NOTIFY testing of completion filters. We now
      r14935: try to avoid a race condition in the recursion test
      r14936: remove a duplicate line
      r14937: fix a crash that can be caused by a notify triggering during a share
      r14938: add smbcli_fsetatr() as a convenient interface to a setfileinfo for
      r14941: a rename of a file (but not a directory) triggers 3 events. The first
      r14942: make the RAW-NOTIFY test check the strange file rename semantics. Also
      r14943: bring the inotify backend up to date with all the strange rename
      r14945: allow the notify backend to be specified per share
      r14946: added a smbcli_ftruncate() call, useful for torture testing
      r14947: add support for file truncate events
      r14948: add testing of truncate events, and add truncate support to inotify
      r14949: re-add the two lex.c files for heimdal, these are needed for systems
      r14956: change the notify search to be much more efficient by using a
      r14957: fixed shell syntax for config.h creation, and move after AC_OUTPUT
      r14958: fixed big-endian dcerpc connections for the new string handling code
      r14959: allow change notify to be disabled completely using
      r14960: don't declare variables mid-function
      r14962: fixed a valgrind error
      r14963: check talloc returns
      r14969: ensure that even on slow machines we leave plenty of time for a series
      r14972: fix an uninitialised warning from ibm checker
      r14973: req cannot be NULL in smb_raw_t2open_recv() (found by IBM checker)
      r14974: work around an ibm checker bug
      r14975: use the magic comment recognised by the IBM checker for deliberate
      r14976: another use of the magic comment recognised by the IBM checker for
      r14977: more IBM checker fixes
      r14978: fixed a print of NULL
      r14979: avoid a null ptr deref
      r14980: fixed several IBM checker errors in gentest and masktest
      r14981: fixed a use of a wild ptr in regshell
      r14982: mark a deliberate missing break
      r14983: fix an uninitialised var
      r14984: marking mprBreakpoint() as a __noreturn__ function should reduce the
      r15014: added a simple batch oplock benchmark
      r15015: add an explanation for this test
      r15016: add a test for a 2nd open with an exclusive oplock. It does not cause
      r15029: fixed the detection of inotify
      r15032: change BENCH-NBENCH to always break to none, rather than accepting a
      r15033: expanded the RAW-OPLOCK test to include the different cases where the
      r15048: started on the server side implementation of oplocks. The code is not
      r15049: for really efficient oplock handling with thousands of open files we
      r15050: fixed a double free in the new messaging code.
      r15517: fixed the segv in provision. The problem was that SAMBA_VERSION_STRING
      r15518: the 'password' option in POPT_COMMON_CREDENTIALS was conflicting with
      r15524: fix a problem with rpc faults from bind and alter context
      r15530: added testing of generic CLDAP requests, looking at the rootDSE. Jerry
      r15731: module init functions should return NTSTATUS, not void
      r15794: fixed a problem with DOS status codes - found by kukks (thanks!)
      r15796: this talloc_reference() was causing a memory leak on every NTVFS
      r15797: fixed a notify bug, where a notify_remove() is beyond the current max
      r15798: shortcut the lookup of "localhost" in the ipv6 backend
      r15799: fixed the problem with BASE-DISCONNECT after the recent memory leak
      r15824: fixed a subtle talloc bug to do with memory context loops. When you
      r15825: there are quite subtle semantics with change notify events being sent
      r15826: ensure we don't dereference sec when NULL
      r15827: fixed a spelling error
      r15828: a talloc steal optimisation spotted by metze
      r15830: fixed two kdc memory leaks
      r15831: fixed a memory leak in the netlogon server
      r15832: put a talloc leak report in the log file at the end of each test run
      r15833: fixed two delete on close memory leaks
      r15834: fixed a memory leak in the session code
      r15835: fixed locking in the client library
      r15849: ensure we don't try to talloc_steal() an invalid error_string in
      r15850: another spot where r->out.error_string can be uninitialied
      r15851: the conversion of loadparm to BOOL broke all big-endian platforms as
      r15852: patch from Rusty to make talloc_set_destructor() and talloc_steal()
      r15853: started the process of removing the warnings now that
      r15854: more talloc_set_destructor() typesafe fixes
      r15855: more talloc_set_destructor() typesafe fixes. nearly done ...
      r15856: fixed talloc_asprintf_append() on solaris
      r15859: fixed a crash bug in the ldb password_hash module. This one is quite
      r15879: strtok_r() replacement, for solaris
      r15880: the ntvfs_handle changes broke rpc on big-endian boxes, as the
      r15881: fixed the RAW-ACLS test for 64 bit systems (was failing on ppc64)
      r15882: I forgot to add in this prototype for strtok_r()
      r15896: we're getting a lot of crashes on the build farm due to people
      r15897: switch to d_printf() in the libnet_share test, and neaten up the code
      r15898: use d_printf() in some more places to fix more torture seg faults on
      r15902: more test code that should be using d_printf()
      r15950: another printf() crash on solaris
      r15953: our timegm() replacement still doesn't work, so grab the one from
      r17255: fixed BENCH-NBENCH for new smb_raw_find_first() syntax
      r17578: in standalone talloc build ensure we get intptr_t if available (which
      r17579: make ldb build g++ friendly
      r17644: change the ldap server to always use the single process model. We are
      r17645: gcc 4.1.x has started producing "value computed is not used" warnings
      r17647: the init fns should not take a mem_ctx
      r17656: some systems (like older solaris) don't return ENOTEMPTY on rmdir()
      r17658: several replacement snprintf() fixes.
      r17659: cope with systems without the x509 gnutls functions
      r17660: fixed configure test
      r17674: fixed a problem on with our configure logic on systems that have
      r17675: increase max torture test runtime - we have some v slow hosts in the
      r17678: don't free result message twice
      r17679: - fix 'make test-ldap' to skip ldb specials
      r17680: make standalone tdb support building and testing in a different
      r17681: fixed standalone talloc build to support building in a separate
      r17683: to pick up config.h we need -I. as well for talloc
      r17684: and we need -Iinclude for tdb
      r17685: talloc.pc is in the build directory
      r17686: tdb.pc is in the build directory
      r17687: remove circular dependency
      r17688: the commit/test cycle for getting this to work in the build farm sure
      r17689: build works, this should fix install ....
      r17692: - don't try and run ldap tests unless we have slapd
      r17693: only install man pages if we have managed to generate them with
      r17695: added installcheck target
      r17696: attempt to allow ldb to use an external popt directory, so we can
      r17697: - enable test for slapd
      r17701: doxygen (if installed!) needs to be run in the src directory
      r17702: test for gcc, and only enable gcc flags if true
      r17706: remove the dependence on gnu make in the standalone build
      r17708: make the automated testing of the ldb ldap backend more portable
      r17718: don't consider a slapadd failure in the ldap backend tests as a ldb
      r17719: ldb_cmdline needs to be static for cc on solaris
      r17720: in standalone ldb build, some systems need sys/stat.h and a defn of
      r17721: fixed the dlopen and MODULESDIR handling in the standalone build
      r17722: better to use talloc_vasprintf() than vasprintf() directly, as it
      r17724: don't rely on strnlen() as MacOSX 10.4 doesn't have it. Someday apple
      r17725: VPATH and builds out of the source directory causes problems with the
      r17726: not having slapd installed isn't a ldb test failure
      r17729: remove the dependence on an internet connection for building
      r17730: cast dlsym result to try to avoid a compiler crash on hpux
      r17731: try to cope with freebsd handling of .a dependencies
      r17732: after some help from Jelmer, changed builddocs.sh not to rely on
      r17733: doxygen is way too noisy to build every time, and it doesn't do
      r17734: tru64 needs these for standalone build
      r17735: a (probably useless) attempt to workaround stupidity in HPs version of
      r17737: fixed a 'declaration in code' error
      r17738: solving the seemingly trivial problem of timegm() being missing on
      r17739: forgot to add replace/*
      r17740: get rid of dependence on asprintf(), using talloc_asprintf() instead
      r17741: tru64 uses inttypes.h not stdint.h.
      r17745: got rid of the final asprintf() in ldb
      r17746: the automatic archive creation in make breaks on 3 platforms. Lets try
      r17749: more HPUX madness
      r17750: these have moved to ldb/replace/ now
      r17762: HPUX needs setenv
      r17763: moved setenv to ldb/replace/
      r17764: more portable setenv() replacement
      r17765: fix handling of old solaris /bin/sh in ldb build/test
      r17768: This merges in the current version of Brad Henry's windows testing
      r17769: only look for dlopen in -ldl if not found in libc. Needed for us4
      r17770: don't force -L/usr/lib, it breaks us4
      r17771: add a comment explaing the odd cast
      r17820: simplify the code flow a little
      r17821: changed ldb_search() and the ldbsearch command line utility to
      r17822: the ildap ldb backend doesn't need the auto rootDSE logic any more
      r17823: get rid of most of the samdb_base_dn() calls, as they are no longer
      r17824: add a wrapper for the common partitions_basedn calculation
      r17825: I broken cracknames in my last patch - fix it up
      r17828: set the auto_baseDN opaque even on failure to fetch rootDSE. That
      r17978: make the ldap backend test for ldb work both with and without modules
      r17980: handle NULL arguments without crashing in strcasecmp_m() and
      r17990: added timeout checking on dcerpc connection establishment. This should
      r17992: reverted r17842
      r17993: as metze pointed out, the composite_error() already calls the async
      r18026: patch from Brad allowing the windows testing to be configured
      r18032: added a 'make distclean'
      r18033: added install-sh, needed for standalone libreplace build
      r18034: fixed build of libreplace outside of source directory
      r18035: - fixed 'make clean' to remove test objects
      r18037: added 'make installcheck' target
      r18038: make test fns static
      r18041: started on the bodies of the testsuite functions for libreplace
      r18042: testsuite needs to link to libreplace.a :-)
      r18043: added strlcpy() test
      r18044: timegm.c needs to be in a separate file
      r18051: - add gcc warning flags
      r18052: discard_const_p() isn't part of the libreplace API, so we can't use it
      r18053: the sig_atomic_t test needs to be in libreplace for getpass.c to
      r18054: snprintf.c needs to use replace.h to get the rep_vasprintf and related
      r18055: aix needs time.h for timegm.c to compile
      r18056: includes needed for O_CREAT
      r18057: fixed an #ifdef
      r18058: we don't actually need __VA_ARGS__ yet (its another C99 feature which
      r18059: another cpp error
      r18060: use gmake for libreplace if available
      r18061: this should fix the libreplace build on us4 with gcc
      r18067: some tweaks for irix and hpux
      r18073: next step in grab libreplace plan - see IRC logs for very detailed
      r18074: config.m4 is now libreplace.m4
      r18075: with the new scheme, we now use config.h again (thanks jelmer!)
      r18076: convert talloc to the new libreplace system
      r18077: move some configure tests out of talloc that are now in libreplace
      r18078: these tests came from talloc
      r18079: fix for in-tree build with samba4 dir layout
      r18080: added distclean target to talloc
      r18081: libreplace now uses config.h again
      r18082: bring talloc in line with new conventions
      r18083: i should sleep more ....
      r18084: we don't need the double sinclude() any more
      r18085: using m4_include() instead of sinclude() means we get an error if the
      r18086: here too
      r18108: move tdb to use the same build methods
      r18109: move ldb to use the same build methods
      r18110: renamed config.m4 for popt
      r18111: base inclusion of replacement printf fns on function existance, not
      r18112: really make use of libreplace in ldb
      r18115: comparison_fn_t is defined in libreplace now
      r18117: first steps in making samba4 use libreplace
      r18118: its the job of libreplace to handle things like this
      r18119: forgot to commit this
      r18129: moved the system includes into libreplace - this gives much more
      r18130: the move to system/ in libreplace broke some things ... should be
      r18131: fixed tdb subsystem to use right tdb.h
      r18132: getpass can't depend on fns in lib/util/
      r18133: ad2oLschema needs ctype.h on some systems
      r18134: the lib/replace/system/filesys.h in this patch should be
      r18135: almost there ....
      r18137: more LIBREPLACE deps
      r18139: irix needs system/network.h here
      r18140: and this reduces warnings about toupper()
      r18141: an accidental nested C comment!
      r18143: the 'showflags' convention from Samba is useful for the other packages
      r18146: we need signal.h in some places
      r18154: try to get the heimdal_build code to use libreplace in a better way
      r18156: fix platforms that need timegm replacement
      r18160: - pread and pwrite replacements need to be non-static
      r18176: reg_util.c needs LIBREPLACE for strndup
      r18178: another place needs LIBREPLACE to get strndup
      r18202: moved the overrides for HAVE_xxx from heimdal_build/config.h to
      r18203: rearranged the overrides in heimdal_build/*.h to avoid the use of
      r18204: darn, compilers always look in the directory the source is in for
      r18205: need rep_ macros for seteuid and setegid
      r18206: need rep_ macro for setlinebuf
      r18207: not all readline libs have rl_event_hook
      r18208: Mac OS X also doesn't have history_list()
      r18209: fix the ifdef for HAVE_HISTORY_LIST
      r18211: wct is not a size, so don't use size_t
      r18216: a special override for the broken HP-UX C compiler. It does support
      r18218: setenv() is guaranteed by libreplace
      r18219: move some more portability checks out of samba4 and info lib/replace
      r18221: moved more configure checks into lib/replace/
      r18243: when setting up a composite continuation, if the context has already
      r18244: more portable shell scripting
      r18247: more shell portability fixes
      r18251: skip pidl tests unless the platform has Test::More
      r18254: reverted r18231
      r18256: use the right status variable
      r18258: need to use .priority not .order here
      r18277: on some of our slower hosts we need more than 2700 seconds for smbd to
      r18278: move more header checks and _GNU_SOURCE into libreplace
      r18279: libreplace.m4 needs to come first or autoconf complains, as libreplace
      r18280: more portability tidyups, ensuring we use libreplace everywhere
      r18281: a workaround for an infinite dependency loop in the dependency
      r18282: dynconfig.o build rule needs cflags.pl too
      r18283: libreplace.m4 needs to be early in configure.ac in other packages too
      r18284: enable _XOPEN_SOURCE_EXTENDED to fix a HP-UX bug with the definition
      r18285: tdb now needs install-sh
      r18286: ldb now needs install-sh too
      r18287: add support for the -qlanglvl=extc99 and -qlanglvl=stdc99 flags,
      r18288: autoconf already has a C99 test builtin!
      r18289: don't check for inline till we've worked out the main compiler flags
      r18290: finally worked out why we were failing tests on solaris. It has
      r18295: pass write type for packet_size
      r18298: fixed mmap failure test
      r18299: POPT_CREDENTIALS should depend on LIBPOPT
      r18300: fixed a type bug in heimdal - lha, you happy with this upstream? It
      r18301: I discovered how to load the warnings from a build farm build into
      r18302: fixed test_cifsdd.sh - the unnecessary sum operations were breaking on
      r18304: fixed misuse of size_t in dopr()
      r18307: fixed a warning
      r18308: get this right ....
      r18309: FreeBSD 6.1 has a symbol ldap_new_connection() in the system ldap
      r18319: fixed the directory search resume code on IRIX
      r18320: the raw write size limit test hurts too many hosts. Limit it to 2^33
      r18321: fixed some warnings on AIX
      r18322: fixed a compilation problem on AIX caused by lex not putting config.h
      r18323: this function returns a pointer, not a bool
      r18324: fixed a uninitialised variable
      r18325: more warnings and one compile error on aix fixed
      r18327: 'struct token' is defined on some hosts
      r18328: when we bail out early, set *offset to 0
      r18330: don't mix pointer types in RPC replies
      r18331: fixed a warning
      r18332: added back in our shared mmap test code
      r18334: AIX 5.1 doesn't have any of 'users', 'guest', 'other' or 'unknown'
      r18335: more portable bool tests
      r18336: autoconf tries to force on C89 mode on HP-UX, using the -Ae
      r18337: more -Ae tests in check_cc.m4
      r18339: need these checks for roken.h on hpux
      r18340: some HPUX boxes don't have ptrdiff_t
      r18341: ooh this gets subtle - this needed for xfs on linux
      r18342: a bit more explanation of these strange values
      r18343: fixed setlinebuf() prototype, added test for it, and use it in two
      r18346: make sure we kill off the slapd process
      r18347: run slapd in the foreground so timelimit can kill it
      r18348: fixed a valgrind error in RPC-SRVSVC
      r18349: don't do validation when using valgrind. It's way too slow (can be
      r18350: we have to check for lstat() to keep roken happen on hpux
      r18351: functions as initialisers in structures doesn't work on some compilers
      r18352: printf("%s") is not safe for NULL strings on all platforms, but
      r18353: try to fix the assumption of NULL being handled in printf()
      r18355: increase the delays waiting for all events to propogate in the
      r18356: doing 1000 of these requests can take over an hour under
      r18358: handle errors in the RPC-LSA async test
      r18359: better handling of child process killing in standard mode
      r18360: better handling of child process killing in standard mode
      r18370: allow system inotify to be disabled
      r18371: made the directory depth notify test independent of timing
      r18372: don't use the system inotify until in the build farm until we work out
      r18374: don't go past the end of this array
      r18375: Volker noticed that this is in fact an 8bit number - well spotted!
      r18376: added iconv:native=false option to turn off native iconv. Needed under
      r18377: disable native iconv with valgrind
      r18378: try enabling _OSF_SOURCE to see if it fixes the tru64 build problems -
      r18400: move MAP_FAILED define to lib/replace/system/shmem.h
      r18401: some of our code also relies on fprintf() handling C99
      r18406: disable local iconv test as well when iconv:native=false
      r18407: test for epoll.h and select.h
      r18431: use this to suppress things on fort in the build farm
      r18432: ensure roken doesn't try to include both inttypes.h and stdint.h. The
      r18435: added a function talloc_move() which is like talloc_steal(), but is
      r18436: converted ldb to use talloc_move() instead of talloc_steal() when
      r18437: added a 'make valgrindtest' target for ldb
      r18438: I should have examined these uses of talloc_move() more
      r18439: 2nd try at a talloc_move() api. This type with the ** ptr interface
      r18488: we have to make sure any extensions flags also make it into
      r18489: dlopen is so amazingly broken on linux
      r18490: on irix _XOPEN_SOURCE_EXTENDED needs to be defined to 1, not just
      r18491: fixed a warning
      r18492: an attempt at replacing readdir() with something based on
      r18493: another "blind coding" attempt at a getdirentries() based readdir()
      r18494: don't count 'DWARF2 CFI reader' messages as valgrind failures
      r18496: yet another dlopen valgrind suppression
      r18497: fixed crash bug in irpc test - the torture_tcase_add_test() call
      r18516: I'm surprised that compilers allowed this at all
      r18517: I find it less confusing if tests are run in the order they are
      r18518: we replace snprintf() if its not C99, so we should also add the rep_
      r18521: implement volkers suggestion for avoiding the type punning warnings
      r18528: work around what appears to be a compiler bug in gcc on irix. It
      r18535: move the AC_CANONICAL_HOST and host specific flag tests into
      r18536: fixed the loading of external binary files from ldif into ldb
      r18537: after testing for poptGetContext, if the test fails, don't try to use
      r18538: we need a pipe here, not a logical OR
      r18539: 'make distclean' should delete config.cache
      r18540: show the additional smbd output from each test, rather than only
      r18541: with 100 old style searches we can run out of file descriptors on some
      r18563: - move more of the header checks into lib/replace/
      r18566: fixed the winreg pipe and winreg tests
      r18567: fixed the winreg js code for the new names of the fields in winreg.idl
      r18568: this warning is not needed now that it is the job of the unixuid ntvfs
      r18569: add really simple testing of the 'simple' ntvfs backend, so we know
      r18571: try to make it a lot more obvious when 'make test' or 'make quicktest'
      r18573: disable the echo.js testing of echo_TestCall() for now.
      r18574: re-enable the echo pipe in smbscript. I suspect disabling this was an
      r18575: - use the right variable to teststatus
      r18576: unfortunately our current build farm results are a bit too good!
      r18577: reduce the number of tests run in 'make quicktest' again, so it
      r18578: steve, I think you may have forgotten to commit test_cifsposix.sh ?
      r18579: fixed boolean parameters on big endian hosts which have
      r18580: map the PVFS_FLAG_READONLY bit in the posix backend onto
      r18581: also check for SEC_STD_DELETE, and split out the check into a separate
      r18582: disable synchronous ldb in the build farm. Some hosts have very slow
      r18583: a nasty hack to allow me to monitor the number of open file
      r18584: found one of the fd leaks. The registry backend was using a
      r18585: 50 open searches is still too many for some of the build farm hosts,
      r18586: fixed a potential fd and memory leak in the socket_wrapper code
      r18587: fixed a potential memory leak in libnet
      r18588: save one more character in the socket wrapper path - seems it still
      r18589: make inclusion of net/if.h conditional. It breaks HPUX with gcc.
      r18594: fail the configure step if the required library is not found for tdb,
      r18595: try an experiment of adding a RPC test into the windows testing
      r18596: removed superfluous semicolon
      r18599: the netr_CryptPassword structure needs to use a uint8, as the data is
      r18600: - fix shell syntax in tests for libraries
      r18601: updated web page for new talloc build method
      r18602: updated web page for new ldb build method
      r18604: fixed shell syntax
      r18715: 0x8 style status returns should also fail here (thanks metze)
      r18716: put in a commented out useful hack for some RPC servers
      r18805: make error message match function name
      r18806: fixed two spelling errors
      r18807: don't overtax the imaginations of servers that can't do mkdir on \\dirname\\
      r18808: added SMB2-MAXWRITE test and SMB2-DIR tests
      r18824: fixed a bug in cifsdd when the file is exactly a multiple of the block
      r18825: speed up the test_cifsdd.sh test by using a smaller file. It was
      r18830: ensure backends aren't added twice (needed for samba3)
      r18831: minor build changes for samba3. The logging changes will be removed
      r18832: fixed standalone build
      r18833: darn, forgot to commit this
      r18834: get the log context code right
      r18835: expand IO limits on SMB2. Samba4 now tops out at 16.7MB IOs.
      r18838: make sure we cleanup after SMB2-MAXWRITE (it creates a large file)
      r18839: align all directory search blobs on an 8 byte boundary to keep the
      r18840: make these compatible with g++ warnings
      r18859: finally worked out what is going wrong with immediate structures. The
      r18860: fixed some code that bitrotted while we didn't have the safety check
      r18861: merge from samba3
      r18862: as andrew pointed our on irc, if we are going to define _TRUE, then
      r18872: when converting IDL to use out,ref pointers, you also must fix any
      r18910: Change ldb_msg_add_string() to not actually add an attribute if the
      r18913: an attempt to get tdb/ldb working on the HPUX box 'gwen'. This idea
      r18914: this bug fix needs to be for just hpux 11.11
      r18916: fixed the messaging layer on *BSD systems. When a socket was full we
      r18917: having 255 virtual interfaces available in socket wrapper means we
      r18936: hopefully fix the test for negative enum values. When a compiler
      r18939: don't rely on the umask being right in ldb creation. Both Samba3 and
      r18942: add a ldb_set_create_perms() function in ldb. I didn't call it
      r18943: Samba4 wants its databases private to root. I know some of them could
      r18965: fixed the bug with RPC-NETLOGON and solaris sparc machines. This bug
      r18968: EWOULDBLOCK should also be mapped to STATUS_MORE_ENTRIES
      r18970: avoid strndup and strnlen on AIX. They are quite broken. See
      r18971: avoid strndup is a few places. Fixes a minor memory leak, and should
      r18972: we don't need this now all builds in the build farm are limited to 150
      r19009: ensure that data values from ldap libs are null terminated, to allow
      r19111: fixed basic web server operation
      r19112: fixed a checker warning.
      r19113: fixed another checker warning.
      r19114: fixed another checker warning and a possible error on allocation
      r19116: fixed a checker warning
      r19117: I've changed the checker wrapper on snab to allow for a
      r19118: get rid of a bunch of bool misuse warnings
      r19120: silence a warning about a test function
      r19199: split out the xattr NTACL code into a separate part of the posix
      r19252: - fixed 'erase' argument to setup_ldb()
      r19253: its not so useful to index on objectclass. Much better to search on
      r19273: - fixed error handling with the ldap backend
      r19274: fix ldbdel and ldbmodify to return an error if the underlying ldb call
      r19282: make the recent qooxdoo work that Derrell has done available via the
      r19289: fixed a memory leak in ldb_dn_string_compose()
      r19294: a little speed tester for ldb/tdb
      r19296: added a leak detector to ldb_wrap_connect()
      r19297: fixed a leak in the ejs ldb interface
      r19298: make sure torture_fail() gives a useful message
      r19322: fix a minor memory leak in the ltdb cache code
      r19323: fixed a leak in the ldif parse code
      r19324: fixed a leak on deleting records when no index is in place
      r19325: leak fix from lha
      r19326: don't leak a ndr_push structure on ndr_push_struct_blob()
      r19327: fixed a leak in ldif_canonicalise_objectCategory()
      r19328: another leak plugged ....
      r19329: fixed a leak in the password hash module
      r19360: improve the ldb leak detector - it now takes into account the number
      r19361: added a comment
      r19362: - don't need to store the baseinfo message after cache load
      r19363: - don't need to store the baseinfo message after cache load
      r19365: fixed a memory leak in the ldb attribute handling
      r19366: don't fail async echo tests due to rounding errors
      r19400: fixed a valgrind error in the directory registry backend (name was
      r19401: make tdb_lockall() much more efficient, and add a tdb_lockall_read()
      r19402: - use the new tdb_lockall_read() to make ldb_search() more efficient,
      r19403: try to fix the crashes in the buildfarm related to timegm
      r19404: fixed the LOCAL-ICONV test
      r19405: the talloc speed test suite was not giving an accurate picture of the
      r19408: I think tm_mon is ending up as -1 on some platforms
      r19410: - fixed checker error
      r19411: sigh - we can't call close here as its mapped to swrap_close() in the
      r19412: some rather strange looking changes to talloc that gain us about 50%
      r19423: merge some tdb changes from SAMBA_3_0 to SAMBA_4_0
      r19425: two more tdb functions from samba3
      r19428: moved tdbutil.c from lib/tdb/common/ to lib/util/util_tdb.c
      r19433: Metze, please take a look at this one!
      r19434: we need to force line buffering as the new torture code doesn't create
      r19435: fixed the subunit code on platforms with small pipe buffers, and use
      r19436: fixed stderr in piped_child() as well
      r19437: don't run the LOCAL-ICONV test on systems that don't have CP850
      r19438: try to fix up the build breakages on BSD systems due to incorrectly
      r19439: revert my change to a torture assert - expected is a bool
      r19440: merged from samba3
      r19441: work in progress support for NFS4 ACLs in Samba4 on Linux. Still work
      r19498: the autofree test cannot be run as part of smbtorture
      r19501: fix the hangs in the build farm in RPC-SECRETS
      r19502: fixed the RPC-SECRETS test with kerberos. Andrew, can you look at this
      r19503: it only makes sense to run the LOCAL-ICONV test on 'known good'
      r19504: - fixed a free error in file_lines_parse
      r19505: fixed a valgrind error
      r19506: fixed remaining parts of RAW-READ and RAW-WRITE tests to check for
      r19508: fixed SMB2-SETINFO
      r19548: this talloc_free() is definately wrong.
      r19549: fixed some indentation
      r19550: the sense of this test was wrong
      r19563: - make --num-progs a valid smbtorture option again. It's commonly
      r19564: testing build farm scripts, apologies for the noise
      r19565: the scripts do work :)
      r20059: james was asking about CAP_LARGE_READX and reads close to the 64k
      r20077: support large readx replies, as done by samba3 (and the snia spec),
      r20078: support the large samba3 reads in RAW-READ test
      r20091: remove blank lines at the end of text lines loaded from a file
      r20092: added a locking benchmark that should be good for benchmarking
      r20104: this is a alternative events backend, which uses a hybrid of aio and
      r20234: metze pointed out that we are re-loading the cache records on each
      r20301: add an option torture:readonly which allows the NBENCH test to be run
      r20302: added support for 64 bit file offsets in NBENCH
      r20351: ensure these variables are set in the right place in the Makefile
      r20539: - split the common timer related events code into events_timed.c
      r20540: darn, also need to fix this event_context reference
      r20621: - enable the aio events backend on systems that support it
      r20623: change where the smb.conf parm event:backend is checked to ensure it
      r20624: added AIO read to pvfs backend
      r20646: first preparations for cluster enablement. This changes "
      r20647: add cluster code
      r20649: fixed strlower_talloc() and strupper_talloc() to end with right size,
      r20650: revert a bunch of code I didn't mean to commit yet
      r20665: put in my version of aio.h
      r20698: added AIO writing support
      r20886: fixed a valgrind error
      r20887: allow the registration of multiple cluster backends
      r20888: local cluster backend
      r20889: import ctdb cluster backend from bzr
      r20890: spelling fix
      r20891: enable multiple brlock backends. The tdb backend is the default. The
      r20892: add parameter for enabling ctdb self connect
      r20893: brlock notifies are currently disabled in the ctdb backend. Use a #if
      r20894: the new brlock.c is needed (seems a svn rename + new file didn't make
      r20895: enable ctdb backend at startup (if configured)
      r20896: make the maximum lacount configurable in smb.conf
      r20918: a bit more debugging, and remove the hackish /dev/null writes I used
      r20919: add a function cluster_tdb_tmp_open() which can be used in a cluster
      r20920: use cluster_tdb_tmp_open() in ntvfs backend code
      r20928: added signal events to lib/events
      r20929: fixed typo
      r20930: use sigaction() instead of signal()
      r20938: use a double counter trick to avoid the need for atomic increment
      r20939: reduce the amount of static state for signal handlers from 96k to 1.2k
      r20940: allow SA_SIGINFO signals to be oneshot. Why you would ever want this
      r20941: avoid races in the block/unblock code
      r20943: use offsetof() instead of sizeof() - 1 for the packet length
      r20944: if a call has been destroyed before a reply comes in then discard the
      r20945: fixed the bug causing locktest to fail with the ctdb backend after a
      r20946: fixed another couple of bugs in the brlock ctdb backend. It now
      r20947: fixed a bug in the unlock logic in the brlock tdb backend
      r20948: a very simple example on how to setup and test ctdb
      r20960: attempt to fix a valgrind error in the signals backend.
      r20989: don't mark epoll as set until after the io_submit() succeeds
      r20990: check for errors from event_loop_once()
      r20991: use relative includes for ctdb headers. This works with both
      r21044: - merge struct ctdb_call API changes from bzr tree
      r21045: every call in brlock_ctdb ended up neededing a 32 bit status code, so
      r21139: make the RAW-MUX test fail if the locking subsystem doesn't trigger
      r21140: enable the pending lock notify code in the ctdb backend so that timed
      r21171: fixed a bug related to recursive event handling.
      r21172: fixed a comment
      r21173: - keep the ctdb queue when reconnecting (this will need to be more
      r21174: many thanks to Paul Wayper for pointing out that C99 requires a
      r21206: - a couple more nttrans places were a memcpy() should be used
      r21208: fix a crash bug caused by r21205
      r21211: fixed 3 places that assumed that torture_fail() didn't call
      r21212: detect if the kernel does not support integrated epoll/aio when the
      r21213: the build farm seems to show that FreeBSD 6.2 has two different error
      r21214: fixed a valgrind error that can be caused by a semi-async call inside
      r21215: extend the RAW-MUX test to test cancelling a async lock request using
      r21216: fail the RAW-BENCH-LOCK test if the locking doesn't happen evenly
      r21230: added the hooks needed in the cluster layer and the messaging code for
      r21232: added a raw ctdb messaging api - allowing ctdb applications to take
      r21233: first version of samba4 messaging using ctdb is working. This means we
      r21234: fixed a subtle bug with talloc reference counting and async ntvfs
      r21256: - msg_type is not needed in the cluster messaging API
      r21535: - fixed a crash in the RAW-ACLS test. When a dcerpc_pipe is created
      r21570: added a RPC-HANDLES test that tries to show that rpc policy handles
      r21571: added RPC-HANDLES test to make test
      r21618: an attempt to fix the problem with lcov and yacc generated C code
      r21620: commit updated versions (with correct paths)
      r21735: skip the smbclient test until jelmer can take a look at it. The
      r21740: this fixes the real cause of the large log files we had. The problem
      r21742: reenable the smbclient test now that the d_printf bug is fixed
      r21807: modularise the opendb code, so different backends can be
      r21811: fixed a queueing error in the dcerpc client code. WHen the
      r21812: fixed an integer overflow error in the ndr push code.
      r21814: use ndr_push_error in the ndr layer, not just a NTSTATUS failure
      r21835: fixed a rpc server bug where we failed to remove a call from one
      r22021: use the pid specified in the individual locks, not the request pid, in
      r22025: patch from Ronnie to make locktest also test the behaviour of pid
      r22070: merge in the changes from the bzr ctdb tree, and convert the brlock
      r22072: in order to implement the opendb ctdb backend, I've found that the
      r22081: transaction_brlock() should be static
      r22082: merged the ctdb changes from bzr
      r22083: opendb backend to ctdb now passes simple tests
      r22084: use a TDB_INTERNAL tdb for the local ctdb tdb for now
      r22085: correct copyright on opendb_ctdb.c
      r22087: added a RAW-BENCH-OPEN test that can be used to stress out a clustered
      r22089: check the return value of interpret_addr2()
      r22090: fix error handling in cldap client library to cope with bad host names
      r22098: merged from bzr tree
      r22114: merge from bzr tree
      r22117: merged from bzr
      r22165: merge transaction fix from samba3
      r22231: merge from bzr ctdb tree
      r22232: add a special message handler ID meaning "all messages please"
      r22234: merge test suite changes from bzr tree
      r22237: this init fn doesn't exist yet
      r22242: ctdb init now takes a process model
      r22421: merged in latest ctdb changes from bzr
      r22422: merged tdb changes from ctdb
      r22423: don't need popt here
      r22424: fixed the bad merge (thanks to metze for pointing out)
      r22616: allow the unclist file to not specify a share name, and instead
      r22632: merged volkers select events fix
      r22634: make the events system much less dependent on the samba4 build system
      r22670: changed the RAW-NOTIFY test to support clustered testing (two nodes)
      r22813: improve error messages in RAW-NOTIFY test
      r22829: system/select.h needs to bring in epoll.h for epoll usage in
      r22830: merged the latest lib/events updates from ctdb to Samba4. This
      r22831: take advantage of EVENT_FD_AUTOCLOSE in the inotify code
      r22832: merged the latest tdb changes from ctdb to Samba4
      r22833: use EVENT_FD_AUTOCLOSE in our event test suite
      r22834: fixed a memory leak in the torture_open_connection() code, and removed
      r22835: it's useful to see how much time is remaining in this test (so we can
      r22836: started adding auto-reconnect logic to lockbench. This needs to be
      r22837: make RAW-BENCH-LOCK reconnect asynchronously when one of its servers
      r22876: - try to reconnect once per second, not continously
      r22881: show number of connected clients
      r22885: now we use kernberos more, we need to index on userPrincipalName
      r22887: and servicePrincipalName ....
      r22959: cope with a rather interesting interaction between epoll() and
      r22960: added a SOCKET_FLAG_NOCLOSE to allow us to tell the socket layer that
      r22961: use EVENT_FD_AUTOCLOSE and SOCKET_FLAG_NOCLOSE to fix up some hairy
      r22962: show progress separately for each client in RAW-BENCH-LOCK, this is
      r22963: fixed the epoll/fork interaction in the epoll and aio backends
      r22964: log an error on epoll_create failing on reopen
      r22965: changed RAW-LOCK-BENCH to remove the scheduling uncertainty. We should
      r22968: andrew bartlett pointed out that the parent process could add a fd to
      r22969: fix some more places where we could end up with more than one event
      r22970: the events code calls close(), which needs to use socket_wrapper.h in
      r22971: fix build on systems without epoll
      r22972: added the basic ldif needed to support group policies in Samba4. WinXP
      r22984: not everyone uses tridgell.net (fortunately)
      r22985: don't do checkins late at night ....
      r22988: fixed 2 bugs in our unsetenv() replacement code
      r23011: initialisation functions must return NTSTATUS, otherwise we get bus
      r23012: we need a POLICYGUID in provision
      r23013: fixed a bug in the string_replace_w() test that caused OpenBSD to die
      r23017: fixed the warning we have been getting for a long time:
      r23018: fixed a memory leak in our server side session setup code for failed
      r23019: revert r23018 - this will require more thought.
      r23020: a better fix for the memory leak - this one doesn't stuff up spnego :)
      r23021: test some boundary conditions for idtree, after I saw some suspicious
      r23029: fixed formatting
      r23030: finally fixed up our asn1 code to use better memory allocation. This
      r23031: removed bogus event_loop_once() calls in RAW-CONTEXT test - they could
      r23036: error checking on asn1_init() failure
      r23056: added automatic reconnect to RAW-BENCH-OPEN, similar to RAW-BENCH-LOCK
      r23057: only call the async recv function for the first pending receive, not
      r23058: the cldap code was getting too intimate with the internals of struct
      r23059: reject_free needs to be initialised
      r23060: use #include <roken.h> consistently. Using "roken.h" in this directory
      r23061: keep the RAW-BENCH-OPEN test balanced
      r23062: make sure one node doesn't get ahead of the others at the start
      r23090: a test showing two netlogon pipes open at once, using the LogonEx ops
      r23138: added a raw interface for SMBecho operations
      r23139: use echo operations once a second in lockbench and openbench to ensure
      r23140: send send echos while disconnected
      r23142: added error checking and reconnect on echo replies
      r23143: error found by valgrind
      r23152: fixed some async retry issues in openbench
      r23153: a first cut at a fix for the dgram flood problem that volker
      r23180: auto-reconnect on both NT_STATUS_END_OF_FILE and NT_STATUS_LOCAL_DISCONNECT
      r23181: prevent attempts to reopen the connection twice at the same time
      r23182: fixed valgrind error
      r23237: update lib/replace from ctdb
      r23238: merged transaction lock changes from ctdb
      r23301: merged from ctdb
      r23364: add LDB_FLG_NOMMAP flag
      r23519: added libcli code for fetching shadow copy information
      r23520: display shadow copy information in 'allinfo'
      r23521: NT_STATUS_OBJECT_NAME_NOT_FOUND is not an error either
      r23531: added optional latency reporting in BENCH-NBENCH. To use it, you need
      r23532: added lp_parm_double()
      r23533: added --option torture:targetrate=rate to target a particular
      r23534: honour the targetrate even for loadfiles with timestamps
      r23535: accept numeric ntstatus codes in nbench load files (ronnies wireshark
      r23696: added the create mask and related share permissions options to Samba4,
      r23697: use the file perm options in the posix backend
      r23698: fixed notify:backend so it actually works again
      r23699: when we create the global schema, remember to set the ldb opaque so we
      r23700: pre-open the sam in the parent smbd. This has the effect of loading
      r23701: when we create a new socket with socket_accept(), clear any flags that
      r23702: fixed a "falling back to select" error in the standard process
      r23792: convert Samba4 to GPLv3
      r23794: convert more code from LGPLv2+ to LGPLv3+
      r23795: more v2->v3 conversion
      r23796: main COPYING file for samba4, plus some formatting varients
      r23797: started fixing old FSF addresses. Fixed pcap2nbench COPYING file
      r23798: updated old Temple Place FSF addresses to new URL
      r23799: updated old Franklin Street FSF addresses to new URL
      r23800: LGPL is now called GNU Lesser General Public License
      r23801: The FSF has moved around a lot. This fixes their Mass Ave address.
      r23802: fixed URL in XML
      r23805: this directory is not used any more
      r23806: update Samba4 with the latest ctdb code.
      r23807: added hex_encode_talloc()
      r24274: - merge from ctdb bzr tree
      r24275: - setup the connection to the ctdb daemon
      r24276: don't mark a stream readable until after the messaging setup is
      r24283: added a dbwrap API for temporary databases, based on the one from the
      r24284: change brlock_tdb.c to use the dbwrap API. This actually makes the
      r24585: put in the right state variable when doing a SMBecho - this caused the
      r24586: same bug in RAW-BENCH-OPEN
      r24587: the elements of the array are not talloc pointers
      r24588: use the right type
      r24641: fixed several memory leaks in the brlock code
      r24642: prevent recursion with fetch_locked
      r24643: add a ctdb_fetch() function to the ctdb client code
      r24644: add a ctdb_fetch() function to the ctdb client code
      r24645: add in the ctdb dbwrap backend
      r24646: fixed the handling of case insensitive paths with wildcards
      r24647: this passes now
      r24700: added auto-reconnect to BENCH-NBENCH. Used for testing cluster
      r24765: added a RAW-HOLD-OPLOCK test. This is a manual test, meant to be used
      r24766: forgot to commit this before. It is needed as this never terminates.
      r25351: disable swig for now to get the build working
      added a syncops VFS module for filesystems which do not guarantee meta-data operations are immediately committed to disk in stable form. Essential for clustered Samba setups
      r25676: fixed a valgrind error in the epoll event backend. The linked list
      r25689: test with a non-zero size file
      r25690: - only use a readonly traverse in ldb_search when not in a transaction. When we are in a transaction then we could be in a top level modify operation (such as rename), so we must use a writeable traverse so that the async callbacks can do the modifies while the search is progressing.
      r25691: make "server role" case insensitive
      r25692: fixed another example where the free of fde and the free of the socket
      merged tdb fix from ctdb tree
      samba3 already has tdb_validate()
      merged tdb from ctdb bzr tree
      merged tdb changes from ctdb
      merged changes from v3-2-test
      merged changes from v4-0-test
      Added PFIF notice to Samba 3.2 tree
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      Added PFIF notice to Samba 4.0 tree
      added a offline file torture test BASE-OFFLINE
      more useful output
      this is in seconds
      added latency reporting
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      merged tdb transaction fix
      merged tdb transaction fix
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      make the multiplier in the RAW-OFFLINE test settable
      merge growing tdb for tdb_wipe_all() fix from ctdb
      merge growing tdb for tdb_wipe_all() fix from ctdb
      merge tdb changes from ctdb
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      merge tdb changes from ctdb
      fixed up the .in side of SMB2 negprot
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      added some helper functions for GUID handling
      converted the out side of SMB2 negprot handling
      converted SMB2 session setup to use WSPP protocol field names
      updated SMB2 header defines to match WSPP docs
      fixed crash when 0 dialects (thanks metze!)
      updated SMB2 tcon as per WSPP docs
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      updated SMB2 create operation to match WSPP.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      missed a spot in the SMB2 create conversion
      missed another spot in the SMB2 create conversion
      Convert SMB and SMB2 code to use a common buffer handling structure
      Fixed SMB2 rename operations from Vista clients
      we need to refuse a root_fid in rename on SMB but not SMB2
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      A better way to handle the different format of RenameInformation in SMB2
      updated SMB2 code for getinfo according to WSPP docs
      fixed loadparm handling in standalone tests
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      add some info on running tests
      added blackbox testing for locktest
      converted locktest to use popt and cmdline utility code
      fixed masktest to use popt, and fixed the incorrect pstring conversion
      added a blackbox test for masktest
      fix typo
      make sure lp_ctx is initialised
      convert gentest to use popt and the cmdline library
      added blackbox testing of gentest
      fixed some options that could not be overridden on the command line
      remove redundent code
      fixed handling of zero sized buffers versus NULL buffers in
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      fixed RAW-READ after the bufinfo changes. Thanks to Metze for spotting
      handle pushing of zero length smb2 strings
      3 places where the VFS backend doesn't handle NULL strings.
      open a root handle in SMB2 should use a NULL filename, not a zero length
      disable the EAS level in SMB2-GETINFO test until we get some feedback
      [samba-3-0-ctdb.tridge @ tridge at samba.org-20070602053809-kpw5kjkcyjs8yjbl]
      Fixed a crash bug in unixuid module on failed ID mapping
      show what type of idmapping has failed
      fill in unknown fields in SMB2 READ call
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      fixed an unitialised write warning in valgrind
      fixed a valgrind error in id mapping
      make the SMB2 negotiated read and write size settable in smb.conf
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      fixed popt handling on 64bit boxes in gentest
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      make smb2 read and write size configurable
      use uintptr_t instead of intptr_t where appropriate
      fix the overflow/wrap checks in Samba4 for new gcc optimisation behavior
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      change the default idmap range to 3M -> 4M
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      fixed a double free in winbind
      merge in spec file from Michael
      fixed version in spec file
      started new vfs_smb2 module
      use a newer fsinfo level in smbclient, to support larger disks
      update some SMB2 find flags
      better match WSPP doc name for find flags
      added handlers for connect, search_first and fsinfo.
      merge build changes from Mathias
      fixed file_index reference
      fixed warning
      added SMB2 proxying for unlink
      started adding SMB2 composite functions that emulate common SMB calls
      - added a composite_wait_free() call
      declare composite_wait_free()
      build the smb2 composite calls
      private -> private_data for struct smb2_request
      added mkdir to SMB2 proxy
      Merge commit 'origin/v4-0-test' into vfs_smb2
      added SMB2 proxying of rmdir
      Merge commit 'origin/v4-0-test' into vfs_smb2
      remember the server time fields on negotiate. Needed for gentest
      added some SMB2 utility functions
      check the creation options where the client can require a path to be a
      moved these util functions into libcli
      first version of gentest_smb2. Only generates create and close so far.
      added SMB2 setpathinfo composite wrapper
      specify which server failed to deltree
      added smb2_util_setatr
      added read and write handlers. Fixed --analyse
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      fixed SMB2 locking
      fixed SMB2 flush call, and added flush to gentest_smb2
      fixes to the SMB2 lock test after recent SMB2 locking changes
      badly formed SMB2 packets get NT_STATUS_INVALID_PARAMETER
      added SMB2 gentest generation of SMB2 echo packets
      fixed parsing of the SMB2 ALL_INFO qfileinfo level
      minor cleanup in SMB2 getinfo test
      added --maskindexing and qfileinfo testing
      added EAs in the generated SMB2 create operation
      added testing of SMB2 setfileinfo in gentest_smb2
      Merge commit 'origin/v4-0-test' into v4-0-test
      check for invalid file attribute values in create
      added a define for all valid file attributes
      pass in the required alignment to the EA construction routines
      added a --noeas option to gentest_smb2
      fixes for EAs and filename in gentest_smb2 results
      SMB2 read returns NT_STATUS_END_OF_FILE on read past end of file
      Merge commit 'origin/v4-0-test' into v4-0-test
      fix make test for EAs again
      allow larger streams using the TDB backend
      fill in reserved field on SMB2 flush
      check use of mincnt past EOF in SMB
      stricter checks for valid inputs in SMB2 open and lock
      remove temporary test code
      the start of a SMB2 create test suite
      don't alter the in blobs in a SMB2 create, otherwise two calls in a
      check invalid create options in the right order
      cleanup some warnings and add --skip-cleanup
      cope better with read only files in smb2_deltree
      add a mask of invalid security bits
      Vista returns ACCESS_DENIED here
      check for some more invalid bits in smb2 create
      expanded the SMB2 create testing
      SEC_STD_SYNCHRONIZE is only invalid on SMB2
      make the SEC_STD_SYNCHRONIZE test more specific
      another gentest derived test
      disable the SEC_STD_SYNCHRONIZE test until we know what it means
      it seems that lock flags are only validated when UNLOCK is set
      another attempt at the damn SEC_STD_SYNCHRONIZE flag
      added some SMB2 locking tests from gentest
      added support for the output fields of SMB2 close
      enforce lock ordering in SMB2
      re-enable some tests
      added a basic SMB2 read test suite
      ensure that we honor SMB2 read min_count properly
      fixed file_attributes test
      fixed uninitialised variable
      make sure we send a reply packet for bad create options
      fix error code for read on a directory
      fixed error code for write on a directory
      added --skip-cleanup to gentest
      added --valid option to gentest_smb2
      answer SMB2_ALL_EAS qfileinfo
      add exceptions for some of the strange windows SMB2 locking behaviour
      expanded the SMB2-READ test, including the windows position bug
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      added support for all of the known SMB2 create tags in our client
      expose a function for pushing all SMB2 create blobs
      implement the documented SMB2 create blobs in the server
      added testing of SMB2 create blobs
      ensure we don't change the incoming blobs in a SMB2 create
      added some of the new SMB2 create tags to gentest_smb2
      test unknown tags and bad tag lengths
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      added a newline at the end of the IDL
      add testing of creating a file with an initial ACL on SMB2
      don't allow a file to be changed to a directory with setfileinfo
      generate security descriptors in gentest_smb2
      added testing of some strange read semantics on windows
      check that we can't change a file to a directory
      updated comment based on MS-SMB2 docs
      SMB2 doesn't have NAME_INFORMATION level
      added --noacls options and checking for same mismatch in backtracking
      fixed create_action for truncated files
      fixed current_op.mismatch for more cases
      check the set of file attributes which are ignored
      fixed offset for maximal access response
      SEC_FILE_READ_ATTRIBUTE is only automatically granted on SMB, not SMB2
      querying the ACCESS_INFORMATION is always allowed
      added support for returning the maximal access MXAC tag in SMB2 create
      test the maximal access return
      check maximal_access here too
      fix from WSPP SMB2 test 11
      fixed the error code for bad SMB2 ioctls
      merged gentest.c and gentest_smb2.c
      don't mask out SEC_FILE_READ_ATTRIBUTE on SMB2
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      don't emulate broken SMB2 locking behaviour from windows
      the docs shows that this is a o16s32 blob
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      fixed a segv in the python messaging code on 64 bit systems
      two more places where the wrong type is passed to PyArg_ParseTupleAndKeywords()
      implemented client side SMB2 signing
      more useful output in scan
      check for requested buffer size in getinfo call
      fixed a warning
      updated some info levels based on WSPP docs
      smbpid needs to be 32 bit now to cope with SMB2
      smbpid is 32 bit, and update SMB2 locking per MS-SMB2
      remove unused macros
      remove a pstring
      more updates for new info levels
      it is not valid to set a UNLOCK flag on a lock request
      setpassword should be executable
      SMB2 signing now works. The spec was wrong (and will be fixed in the
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      copied the Heimdal sha256 functions into lib/crypto to avoid a link
      fixed SMB2-LOCK test for new semantics (from docs)
      another SMB2-LOCK fix now that we know that the UNLOCK flag is only
      ensure we don't end up with a partially initialised EA structure
      handle NULL fields in blob comparison
      added server side SMB2 signing
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      fixed mandatory signing
      make signing per session in the SMB2 client library
      fixed for per session session_key here too
      Change our module code to not use the special symbol name init_module()
      make parametic options case insensitive
      fixd a bug in the signal handling code - we could get phantom signals
      fixed spelling error
      make sure we initialise query_maximal_access
      initialise query_maximal_access here too
      we can't query the ACL on a new file till it exists!
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      fixed a fd leak when trying to regain contact to a domain controller
      fixed permissions on ctdb databases
      ensure we give an error code to any routines above that are looking
      I found lots of places where we assume error will be set when calling
      update configure.rpm for clustered Samba usage
      keep compatibility with v3-0-ctdb name for fileid:mapping option
      got rid of the redundent cache database
      first cut at adding full transactions for ctdb to samba3
      cleanup debugging and fix handling of empty transaction
      samba3 can't handle NOREPLY yet
      fixed fetch of empty records
      use transactions in idmap_tdb2
      all persistent databases now do all stores via automatic transactions
      removed more unused code
      we need to commit, not cancel, on record destruction
      put a limit on the number of retries. I found a case where a recovery
      mark this release as a transactions test release
      handle two special cases
      up release number
      cope with the control failing completely without returning a status
      don't leave a dangling transaction on retry error
      fixed lots of places that paniced on a failed transaction_commit,
      up release to transactions3
      use CTDB_CONTROL_TRANS2_COMMIT_RETRY to prevent the counter getting
      drop retries to 5
      update to transactions4 release
      update to ctdb.42 release
      allow nested ctdb transactions in the same manner that they are
      increase version to 43
      update configure.rpm
      register the ctdbd reconfigure message
      log unclean shutdowns
      fixed child exit handling and IP release handling
      ensure we exit with non-zero status on EOF on socket, so the parent
      added a explanatory comment on tcon check
      up to release 44
      disable the DNS update code, as it breaks clustering
      up to release 45 now
      up release to 46
      cope with not knowing the kdc key
      cope with arbitrary unknown pac buffer types, so when MS adds
      expanded the SMB2-CREATE and RAW-OPEN tests to explore more of how the
      added some comments at the request of a frustrated abartlet
      added a LDB_ATTR_FLAG_FIXED so the schema module can mark attributes
      Merge commit 'origin/v4-0-test' into v4-0-test
      don't overwrite fixed attributes with @ATTRIBUTES
      fixed error handling in ANR code
      fixed a problem with length limited ldap values
      Merge branch 'abartlet-4-0-local' into v4-0-test
      fixed a speellling erra
      fixed the GUID and objectSID canonicalisation functions
      Merge commit 'origin/v4-0-test' into v4-0-test
      fixed the DomainDNS searches in the netlogon code
      now that ldap integers are 32 bit, we need to put the right 32 bit
      disable the anr== tests until they are understood
      don't use zero data for the first file in RAW-OFFLINE
      show the bad data in RAW-OFFLINE
      fixed the data in SAVEFILE op in RAW-OFFLINE
      fixed tsmsm_sendfile(). The logic was totally broken.
      fixed an errno handling bug that could lead to an infinite loop
      Avoid a race condition in glibc between AIO and setresuid().
      become root for AIO operations
      EINVAL is also a valid error return, meaning "this filesystem
      Handle arbitrary new PAC types
      ldb: Fix permissions of group_mapping.ldb.
      added a simple script for setting password expiry
      Add a setexpiry operation in samdb.py
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      added some debug code
      fixed readonly handling in deltree
      fixed a memory error in change notify handling in gentest
      added FULL_EA_INFORMATION setea call
      test setinfo FULL_EA_INFORMATION in gentest
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      fixed problem with ACLs with an empty DACL list
      stricter checking of SMB2 echo body (per the spec)
      fixed error code for bad keepalive
      support NT_STATUS_XX:NT_STATUS_YY syntax in ignore files
      fixed uninitialised variable bug
      fixed setpathinfo in gentest to not zero the filename/handle
      check error code for zero desired_access in SMB2 create
      be friendlier in smb2_deltree to some of the SMB2 implementations that
      added the structure for LINK_INFORMATION setfileinfo call
      - use the current dialect first, for servers that only look at the
      - SMB2 uses INVALID_PARAMETER not BUFFER_TOO_SMALL for buffer size
      zero access mask should give ACCESS_DENIED
      the offset is 16 bits in SMB2 fileinfo
      check for a 0 byte in the buffer in SMB2 read
      cope with body_size zero in SMB2 receive
      log stream termination
      record highest seq number in SMB2 to check for seqnum going backwards
      - add reserved field in basic_information level
      for use in python we need to use global_loadparm
      we should terminate the connection on a bad negprot packet size
      empty access mask is only denied on SMB2
      fixed expansion of $USERNAME in signing tests
      we need different error handling for truncated packets in NETPROT and
      fixed segv on startup with trusted domains
      removed unused variables
      fixed a segfault on the ctdb destructor code
      fixed an (unlikely) memory leak
      re-added "winbind:ignore domains" patch
      make the schannel creentials persistent
      added some more well known SIDs - thanks to the WSPP LSAT test suite
      unmapped SIDs should be rid 0 not rid -1
      we need to return NT_STATUS_INVALID_PARAMETER for bad levels in
      WSPP docs say we need to check that root_dir is NULL
      added new level for lsalookupnames2
      return a more useful error message when no name resolution methods are
      setup the loadparm context for ldb in testjoin
      merged a bugfix for the idtree code from the Linux kernel. This
      The author of the upstream code asked for this code to be GPLv2+ not GPLv3
      - make bcast name resolution match other name resolution modules for
      cope with NULL attr
      check call status not rpc fault code when calling to different levels
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      fixed a number of places in our LSA server where we should return the
      handle NULL strings in strchr_m() and strrchr_m()
      add a test for a LSA lookupnames with a NULL string
      we need to listen on all interfaces in the CLDAP server as the windows
      fixed a talloc error in the rpc handle desctructor - destructors
      fixed the sense of ldb base dn comparisons in two places, and use a
      fixed the partition module and the GC handling
      Merge commit 'master/master'
      fixed the ldb blackbox test to work with non-bourne shells (as needed
      expanded the netlogon test to better simulate the WSPP NRPC test that
      updated the LSA and NETLOGON servers with fixes resulting from the AD
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      removed some debug lines I left in the last commit
      remove dependencies on my home domain
      use glibc sys/inotify.h header
      use glibc sys/inotify.h header
      added a new charset for string2key
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      finished adding UTF16_MUNGED charset
      use the new CH_UTF16_MUNGED charset for utf16 password buffers
      we need to remove the pidl Makefile on "make clean" to handle upgrades
      don't give errors when an empty modules list is given to ldb
      fixed options argument to ldb connect in python
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      make tdbbackup use transactions
      imported the tdb_repack() code from CTDB
      use transactions in ldbadd, ldbmodify and ldbedit
      repack the ldb after re-indexing
      an experimental patch for fixing ldb bloat
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      added support for stream renames in Samba4
      fixed two problems with the DsRGetDCNameEx2 call, as used by
      added a workaround to the handling of unicodePwd for Win7-beta
      fixed some of the TLS problems
      Worked around a problem with select/poll/epoll and gnutls
      added a missing linefeed
      fixed the event context for net vampire
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      added a test that triggers a bug in the Samba3 notify code
      fixed a bug in message handling for code the change notify code
      removed leading spaces from embedded ldif
      fixed more embedded spaces in LDIF
      use a base64 encoded password when changing passwords
      added support for parentGUID
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      fixed a logic bug in the tevent nesting code
      use the tevent nesting code to avoid the uid problem in the VFS
      flush after showing the prompt in smbclient
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      the start of a possibleInferiors test suite
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      fixed possibleinferiors.py so it matches windows behaviour
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      added a --wspp option
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'master' into wspp-schema
      added basic testing of tdb_transaction_prepare_commit() in tdbtorture
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      up the version to 1.1.4 with the addition of
      added support for a prepare_commit() op in ldb modules
      use the prepare_commit op in the partition code
      change ldb version number (as ldb_module structure has changed)
      Merge branch 'master' into wspp-schema
      possibleInferiors is a generated attribute - we can't pull it over DRS
      Merge commit 'master/master' into wspp-schema
      major upgrade to the ldb attribute handling
      Merge commit 'abartlet/wspp-schema' into wspp-schema
      added a str_list_append() function
      fixed internal handling of attribute deletion
      don't load @ATTRIBUTES if we have an override handler in place
      first cut at a C version of the possible inferiors code
      added str_list_unique() and str_list_show()
      hook the new possibleInferiors calculation into the schema
      slightly nicer output in our possibleInferiors test code
      fixed the possibleInferiors calculation so it now passes the test
      we should not be supplying a generated attribute in our schema
      added _const versions of some of the str_list_*() functions
      make the memory usage of possibleInferiors much more efficient
      enable testing of possibleInferiors generation
      Merge branch 'wspp-schema'
      cope with lanman auth being disabled in old password change code
      fixed the client side password change code
      fixed interpretation of ACB_PWNOTREQ
      added some more speed tests to tdbtool
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      use domain_dn not ncname
      make TDB_NOSYNC affect all the fsync/msync calls in transactions
      enable one-level indexing in sam.ldb
      fixed one-level indexing
      a useful debugging tool
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      fixed tdbbackup to give tdb error messages
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      when comp_num is zero, the case folded DN is always ""
      auto-repack in transactions that expand the tdb
      overallocate all records by 25%
      fix uninitialised use of samctx
      added support for unique indexing in ldb
      mark samAccountName, objectGUID and objectSID as unique indexed
      we don't need the unique checks in the samldb code now
      use the unique flag on ldb attributes to optimise & clauses
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      add NT_STATUS_HAVE_NO_MEMORY_AND_FREE()
      add gendb_search_single_extended_dn()
      fixed ldb rename now that we have unique indexes
      changed the auth path to use extended DN ops to avoid non-indexed searches
      fixed handling of change notify buffer overruns
      fixed socket wrapper to determine family from the right structure
      work around conflict in pidfile() prototype for heimdal on NetBSD5
      try to get PICFLAG right for HP-UX with gcc
      It seems that IRIX doesn't have IOV_MAX
      fixed server side sorting of case-insensitive strings
      fixed server side sort control
      added asn1 functions for handling booleans in a simple context
      fixed the encoding/decoding of the reverse attribute for server side sort
      fixed some places where RPC-SECRETS needs to be changed to RPC-LSA-SECRETS
      always enable RPC debugging with a debug level >= 100.
      avoid crashes in ndr_print_*() calls
      two more NT status codes that we get on DRS with w2k8-R2
      Revert "avoid crashes in ndr_print_*() calls"
      added a sample script for the "idmap script" option
      added some basic documentation for the idmap script option
      fixed rpc smb code to not reply on talloc_free being a function pointer
      fixed the use of talloc_steal in ntlmssp_server
      removed a redundent talloc_steal
      fixed the reference to the global_schema
      use a talloc_unlink() as ops may have a reference
      fixed use of reference in pytalloc
      py_talloc_import now uses a steal, so this free is incorrect
      use py_talloc_reference instead of py_talloc_import
      another case that should use py_talloc_reference
      A rather strange varient of talloc_unlink
      gensec_start now steals the auth_context
      changes to remove the ambiguity in talloc_free() and talloc_steal()
      use the new talloc_reparent in two places
      use a talloc_reparent in a very ugly way
      removed a generated file
      a talloc_realloc() to zero size needs to use an unambiguous free
      fixed the talloc testsuite for the recent changes
      LDB_ERR_INVALID_DN_SYNTAX doesn't exist ...
      the settings structure needs to be initialised
      fixed the pull of drs schema elements
      Changed ldb.ERR_NO_SUCH_OBJECT to LDB_ERR_NO_SUCH_OBJECT.
      change talloc to 2.0.0
      decrypt all objects in a DRS record, not just the first one
      we can't use the unique index code for samAccountName
      show attribute values in sorted order to make comparison easier
      fixed support for readx greater than 64k
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      added a uid_wrapper library
      make the UID_WRAPPER skip checks at runtime
      skip the readbraw tests if the server does not support it
      fixed the sense of the pvfs_acl uwrap check
      s4 now supports the large readx extension
      fixed a uid_wrapper bug that caused a segv in the RAW-ACLS test
      handle large directories in smb2_deltree()
      fixed a problem with group policy writes causing policy corruption
      on buffer overflow windows gives SMBSRV:ERRerror here
      changed BCC handling for SMBwriteX to handle broken MacOSX client
      define uwrap_enabled() on Samba3
      set uidwrappersrcdir
      deliberately break the build
      Revert "deliberately break the build"
      make sure we never look past the end of either string in ldb_comparison_fold()
      fixed several places that unnecessarily take a reference to the event context
      use talloc with the global schema consistently
      prime the sam ldb schema in the parent samba process
      ensure that child tasks die when the parent dies
      fixed another ambiguous talloc call
      print server log on stderr as well as to log file
      Allow selection of the samba4 process model for 'make test'
      raise the debug level for a common message
      no need to shout about getting an oplock
      when we get an NDR error in the logs, it is useful to know where it happened
      try to give some hint as to what is causing NDR string errors
      fixed TESTS= in make test to allow multiple tests
      fixed the updateNow schema test to use a canonical OID
      make sure we update the current schema->prefixes when we add a new prefix
      fixed up some provision errors from the recent changes
      skip the autoidl test
      more fixups from provision changes
      fixed up add_foreign again
      sigh - still not right
      fixed the build
      fixed make test reporting success when provision fails
      we need the Deleted Objects container for replication
      added basic support for rename in DRS replication
      fixed getpass m4
      make lib/replace more usable in standalone builds
      updated talloc guide for recent API changes
      added talloc_set_log_* documentation
      updated XML source for talloc man page
      LIBREPLACEOBJ now contains the full path
      fixed typo in talloc doc XML
      note the semantic change in talloc_free from 2.0
      fixed a double free bug on error in net export
      fixed DRS rename of deleted objects
      added ldb_ldif_message_string()
      fixed spelling
      add a ref to the WSPP docs
      Wrap DRS changes in a transaction
      Display ldif formatted versions of all DRS changes at log level 4
      don't allow two controls to be added with the same OID
      change the dsdb_control_current_partition to not include internal variables
      add the partition_control control to replication requests
      added ldb_cmdline_help()
      use ldb_cmdline_help() in ldbsearch
      wrap the entire vampire operation in a transaction
      move the repl_meta_data module up the ldb module stack
      s4:dsdb rewrite the linked_atrributes code to commit in the end_transaction hook
      repl_meta_data should only be included when we are a DC
      traverse the ac list in reverse order
      show the full set of command line options for ldb tools
      support config files in the current directory
      fix the ndr print routines for samba4
      added dsdb_find_dn_by_guid()
      tell the server that we support linked attribute replication
      add the the linked attributes elements to the repl structure
      fixed transaction handling in linked_attributes module
      change repl_meta_data to process linked_attributes structures in end_transaction
      allow setting of the debug level in python from C
      added dsdb_find_guid_by_dn()
      always use prepare_commit in ldb transaction commits if possible
      show more reasonable object counts during a vampire
      greatly simplify the transaction processing in the partition module
      hook on prepare_commit instead of transaction_end
      another large change to the linked_attribute module
      report the location of the original talloc_free on double free
      s4: fixed a missing NULL termination in a attribute list passed to ldb_search
      ldb: ensure we cancel a ldb transaction
      ldb: make ldb module programming less error prone
      s4:python  fixed subunit tests of dcerpc
      s4: the secrets.ldb module needs the loadparm opaque setup
      s4: fixed the secrets.ldb construction in libnet
      s4: bring nsupdate-gss into the s4 tree
      s4:nsupdate-gss allow forcing of the realm
      s4:setup_dns.sh fixed the update of the GUID CNAME
      s4: fixed some shadowed variable warnings
      s4: removed an unused variable
      s4: fixed a unsigned printf warnings
      s4: 'index' is a libc function
      s4/ldb: fixed spelling
      s4: implemented server side of DSUpdateRefs call
      s4: fixed updaterefs options bitmap
      s4: added the structure for repsTo
      s4: commit generated DRS changes
      s4/ldb: added --show-binary command line option
      s4/ldb: don't line wrap ldif when --show-binary is used
      s4/ldb: expose the ldb flags with ldb_get_flags()
      s4/ldb: added ldif handler for repsFrom/repsTo
      s4/ldb: allow printing ntSecurityDescriptor in full
      s4/ldb: allow prefixMap to be shown as NDR
      s4/ldb: support NDR printing for 2 more replication types
      s4: allow repl:RODC=true/false to set ourselves as a RODC
      s4: fixed format of repsTo in samdb
      s4/repl: added refresh of repsTo
      s4/repl: implement DsReplicaSync
      s4:drs split addentry and getncchanges into separate files
      s4:drs level_out is a pointer
      s4/drs: broke out the core of the getncchanges code
      s4:drs match the meta_data and attributes array
      s4/vampire: fixed i/j index mixup in vampire code
      s4/drs: when we don't find an attribute use zero values
      s4/drsuapi: tech the IDL about some more key attribute names
      s4/schema: don't crash if we don't have subClassOf
      s4/schema: teach the schema_syntax code how to encode/decode more attributes
      s4: regenerate drsuapi IDL
      s4/torture: don't mix declarations and code
      s4/provision: another fix for breakage from b1dabb1133
      s4: fix spelling
      s4/drs: correctly fill in the GUID of DRS objects
      s4/drs: changed the UpdateRefs server to use the dn instead of the GUID
      libcli: added a drsuapi attribute encryption function
      s4/repl: give a useful error message if we can't decode an object
      s4: kludge_acl needs to be above repl_meta_data
      s4/drs: enable attribute encryption
      s4/torture: fixed lots of crash bugs in the DRS tests
      s4/libcli: when we get a DNS lookup failure show the name
      s4/drs: parentGUID needs to be specififcally asked for
      s4/provision: add the nTDSDSA GUID based DNS entries and SPNs
      s4-drs: add the magic DRS SPNs on AddEntry
      s4-drs: actually call the new drsuapi_add_SPNs() code
      s4-provision: use DNS name, not domain name
      s4-ldb: don't remove a message element beyond the end of the array
      s4-repl: don't add the RDN if it is already there
      s4-repl: on every ldb modify we need to update replPropertyMetaData
      s4-idl: added the IDL for the DsReplica* calls
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s4-repl: don't update replPropertyMetaData for non-replicated attributes
      s4-kcc: add a very simple KCC
      s4-idl: added the IDL for the DsReplica* calls
      s4-repl: don't update replPropertyMetaData for non-replicated attributes
      s4-kcc: add a very simple KCC
      Merge branch 'master' of /home/tridge/samba/git/combined
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-repl: refresh the partitions on each cycle
      s4-provision: revert _gc_tcp priority
      s4-drs: fixed the ldap SPN in AddEntry
      s4-vampire: cope with no invocationID when vampiring the schema
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-kcc: we should only add to the repsFrom if it doesn't already exist
      s4-repl: we should only update uSNChanged when replication data changes
      s4-repl: use common functions to simplify updaterefs.c
      s4-drs: fixed the cursor generation to always be filled in
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-kcc: we should only add to the repsFrom if it doesn't already exist
      s4-repl: we should only update uSNChanged when replication data changes
      s4-repl: use common functions to simplify updaterefs.c
      s4-drs: fixed the cursor generation to always be filled in
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-samdb: internal s4 ldb modules should be GPL not LGPL
      s4-repl: don't be too eager to allocate new sequence numbers
      s4-drs: spelling fix, and simpler search expression
      s4-drs: return objects with uSN > highest_usn
      s4-drs: also fill in tmp_highest_usn
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-ndr: fixed memory leaks in ndr_pull_*_blob()
      s4-repl: fixed memory leaks
      s4-drs: change debug level
      s4-samdb: make it possible to ask for the sequence number of a partition
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-scripts: allow setup_dns.sh to take a PRIVATEDIR
      Merge branch 'master' of /home/tridge/samba/git/combined
      ndr: added --ndr64 flag to ndrdump
      idl: added DsExecuteKCC IDL
      idl: rebuild drsuapi.idl
      idl: added DRS GetNCChanges level 10
      s4-repl: keep a @REPLCHANGED object on each partition
      s4-sam: allow a search to specify a partition
      s4-dsdb: added dsdb_load_partition_usn and dsdb_save_partition_usn
      s4-repl: use the new dsdb partition uSN helper fns
      s4-drs: fixed search expression
      s4-repl: added a preiodic notification check to the repl task
      s4-repl: fall back to repsFrom if repsTo not set
      s4-repl: fixed a memory error handling linked attributes
      s4-drs: allow replication of renames
      s4-repl: handle rename in repl_meta_data
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-repl: add a debug to make it easier to monitor replication
      talloc: when we enable NULL tracking, reparent the autofree context
      s4-ldb: cope better with corruption of tdb records
      s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-repl: add a debug to make it easier to monitor replication
      talloc: when we enable NULL tracking, reparent the autofree context
      s4-ldb: cope better with corruption of tdb records
      s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()
      s4-repl: make sure we marshal the replPropertyMetaData after the last change
      s4-drs: filter based on local_usn
      Merge branch 'master' of /home/tridge/samba/git/combined
      tdb: allow reads after prepare commit
      s4-repl: don't do double replication
      s4-ldb: expose ldb_transaction_prepare_commit() in ldb
      s4-ldb: ldap attribute names can contain a '.'
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-libnet: use updated dsdb commit function
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-repl: add a debug to make it easier to monitor replication
      talloc: when we enable NULL tracking, reparent the autofree context
      s4-ldb: cope better with corruption of tdb records
      s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()
      s4-repl: make sure we marshal the replPropertyMetaData after the last change
      s4-drs: filter based on local_usn
      tdb: allow reads after prepare commit
      s4-repl: don't do double replication
      s4-ldb: expose ldb_transaction_prepare_commit() in ldb
      s4-ldb: ldap attribute names can contain a '.'
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-repl: add a debug to make it easier to monitor replication
      talloc: when we enable NULL tracking, reparent the autofree context
      s4-ldb: cope better with corruption of tdb records
      s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()
      s4-repl: make sure we marshal the replPropertyMetaData after the last change
      s4-drs: filter based on local_usn
      tdb: allow reads after prepare commit
      s4-repl: don't do double replication
      s4-ldb: expose ldb_transaction_prepare_commit() in ldb
      s4-ldb: ldap attribute names can contain a '.'
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-security: added a new security level SECURITY_DOMAIN_CONTROLLER
      s4-drs: lock down key DRS calls
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-rpc: added a module for forwarding RPC requests
      s4-repl: take advantage of async RPC forwarding
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't exist
      Merge branch 'master' of /home/tridge/samba/git/combined
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s4-repl: raise a debug level
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't exist
      s4-repl: raise a debug level
      Merge branch 'master' of /home/tridge/samba/git/combined
      libreplace: added likely()/unlikely() macros for gcc
      util: use likely/unlikely for NT_STATUS_* macros
      ndr: added support for NDR64
      s4-rpc: added NDR64 support
      s4-pidl: add support for NDR64
      idl: recompile our IDL
      ndr: split out ndr enum functions
      ndr: num_auths is an array size, thus a uint3264
      ndrdump: fixed help
      s4-sam: add a note about the solaris client
      idl: regenerate IDL for NDR64 changes
      Merge branch 'master' of /home/tridge/samba/git/combined
      libreplace: added likely()/unlikely() macros for gcc
      util: use likely/unlikely for NT_STATUS_* macros
      ndr: added support for NDR64
      s4-rpc: added NDR64 support
      s4-pidl: add support for NDR64
      idl: recompile our IDL
      ndr: split out ndr enum functions
      ndr: num_auths is an array size, thus a uint3264
      ndrdump: fixed help
      s4-sam: add a note about the solaris client
      s3-rpc: samba3 needs the DCERPC_NDR64 define
      talloc: don't crash if f is NULL in talloc_report_*
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-drs: cope with dupliate linked attributes
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-kdc: ignore unknown keytypes
      s4-server: kill main daemon if a task fails to initialise
      s4-pipes: convert pipe names to lowercase and validate
      s4-resolve: fixed a crash bug on timeout
      s4-netlogon: implement dcesrv_netr_DsRAddressToSitenamesExW
      pidl: update expected output for NDR64 changes
      s4-rpc: remove some unnecessary #include lines
      s4-rpc_server: removed remaining unnecessary #includes
      s4-testparm: fixed -v option
      s4-smbd: minimise includes in smbd/ and smb_server
      s4-scripts: make minimal_includes handle our -I overrides
      s4-smbd: removed unnecessary includes
      tdb: increase minor version
      more include minimisation
      s4-ldb: bump minimum version in ldb too
      s4-repl: need param.h for lp_parm_bool
      s4-ldb: display an error if we can't decode a NDR blob
      s4-drs: security checking on DRS needs to default to on
      s4-auth: add SID_NT_ENTERPRISE_DCS is a server trust account
      talloc: fixed talloc_disable_null_tracking()
      s4-selftest: disable RPC-COUNTCALLS
      s4-selftest: disable RAP-SCAN test
      s4-dsdb: fixed a printf format warning
      s4-ldb: add support for extended DNs in the rootDSE
      s4-ldap: default edn type is 0
      s4-ldb: add a LDB_FLG_ENABLE_TRACING for full ldb tracing
      s4-ldb: add --trace command line option to ldb tools
      s4-schema: don't trace the schema load (too verbose)
      s4-samdb: enable ldb tracing when log level >= 10
      s4-ldb: fixed O(n^2) string handling in ldif debug print
      s4-ldb: bit prettier output
      s4-ldb: don't show timestamps on every line of ldb traces
      s4-ldb: only show the outer level of ldb ops when tracing
      s4-rpc: remove two unused functions
      s4-rpcserver: run all RPC operations in a single task
      s4-rpcserver: added shared association groups
      s4-lsa: added support for QuerySecurity on LSA
      s4-rpcserver: added support for shared handles
      s4-torture: add some debug info to RPC-HANDLES
      s4-util: windows only accepts lowercase hex encodings for extended DNs
      s4-ldbmodules: allow instanceType to be specified by clients
      s4-ldb: when tracing, show ldb_set_debug messages
      s4-ldb: added a bunch more debug for DC join
      s4-ldb: fixed call argument order for ldb_dn_from_ldb_val
      s4-ldb: server side sort args are const char *
      s4-drsserver: sort by DN to give tree order
      s4-nbt: added NBT_SERVER_DNS_FOREST
      idl: fixed string termination for netlogon GetDomainInfo
      s4-cldap: return domainFunctionality from SAM
      s4-netlogon: make GetDomainInfo response match w2k8
      regenerate IDL
      s4-netlogon: always set the dNSHostName in GetDomainInfo
      s4-drs: ignore zero value elements in DRS add operations
      fixed spelling
      s4-drsserver: fixed addition of sort control
      s4-dsdb: added dsdb_find_sid_by_dn()
      s4-dsdb: cope with windows sending extra pad bytes
      s4-drs: fill in more guids and SIDs, plus filter rDN
      s4-libnet: avoid a steal with references error
      s4-libnet: allow the functional level of becomeDC to be specified
      s4-drs: add SHOW_DELETED control on dsdb utility calls
      s4-drs: include deleted objects in getncchanges reply
      s4-drs: fixed the size of DN binary blobs on the wire
      s4-ldb: add instanceType in repl_meta_data module
      s4-ldb: sort replPropertyMetaData by attid
      s4-drs: add defines for replication flags on attributes
      s4-drs: regenerate IDL after ndr size change
      s4-drs: el may not be a talloc pointer
      s4-drs: fixed sorting of replPropertyMetaData
      libds: fixed spelling error
      s4-acl: fixed SD creation
      s4-dsdb: make dsdb_search_dn_with_deleted public for repl_meta_data module
      s4-dsdb: ask for an extended DN in dsdb_find_dn_by_guid()
      s4-repl: use GUID to resolve target in linked attributes
      s4-samdb: free the linked_attributes list on prepare commit failure
      s4-repl: free the la list on prepare commit failure
      s4-samdb: when UF_SERVER_TRUST_ACCOUNT is set mark object as critical
      s4-ldap: fixed spelling
      s4-drsutil: allow NULL filter
      s4-dsruapi: plugfest updates
      s4-drsuapi: state variable for getncchanges
      s4-drs: removed debug code that replicated a maximum of 10 objects at a time
      s4-dsdb: fixed searching for GUID based DNs between partitions
      s4-dsdb: update replPropertyMetaData on linked attribute source attributes
      s4-dsdb: removed extraneous debug messages
      s4-libnet: fixed debug formatting
      s4-make: add libds to etags/ctags source list
      s4-dsdb: don't return the partition root objects
      s4-kcc: remove stale repsFrom entries in kcc run
      s4-kcc: fixed corruption of repsFrom records by kcc
      pidl: added union padding for NDR64
      idl: ntsvcs.idl depends on misc.idl, not winreg.idl
      idl: use common netlogon bit definitions
      s3-ads: removed 3 unused defines
      ds-flags: use the new name DS_DNS_FOREST_ROOT
      s4-cldap: match w2k8-r2 for cldap netlogon bits
      s4-ldb: Add support for binary blobs in DNs
      s4-ldb: accept the binary DN OIDs in extended DN modules
      ndr64: added support for trailing gap alignment
      s4-libnet: give sane error messages when functional levels don't match
      idl: rebuilt the IDL for the build farm
      s4-samr: fake up a samr_ValidatePassword response
      s4-torture: added a very simple samr ValidatePassword test
      pid: update ndr testsuite for new union alignment
      pidl: fixed unit tests for trailer alignment
      s4-pygensec: a bit closer to working
      s4-test: skip python gensec test until its finished
      s4-samdb: added some debugging
      s4-samldb: the samldb module requires that the primary group exists
      s4-ldb: overallocate idxptr to reduce memory fragmentation
      s4-ldb: fixed a memory leak
      s4-winbind: support the Samba3 TXT form of the info3 for wbinfo -a
      s4-winbind: support the s3 response flags on krb5 auth too
      Revert "s4-ldb: fixed a memory leak"
      Revert "s4-ldb: overallocate idxptr to reduce memory fragmentation"
      Revert "s4-ldb: merged with master"
      Revert "s4:ldb Remove LTDB_PACKING_FORMAT_NODN"
      Revert "s4:ldb always talloc_free() the ldb_ldif_write context, even on success"
      Revert "s4:ldb Fix ldb_list_find() folowing the change from char * to TDB_DATA"
      Revert "s4:ldb-samba Use temp talloc contexts and talloc_steal avoid leaks."
      pidl: added int3264 as a base type
      idl: some lsa vars are uint3264
      ndr: rebuild lsa IDL after recent change
      s4-seftest: skip hold.oplock for SMB2 as well
      s4-repl: added RELAX control and fix transactions
      s4-ldb: fixed error on single value error
      s4-drs: open samdb with system credentials when authorised
      s4-drs: fixed error message for drs_security_level_check
      s4-drs: take advantage of system session auth in dsbind
      s4-drs: added some debug lines to DsAddEntry()
      s4-provision: match win2003 functional level
      pidl: get the alignment right for uint1632 enums (NDR64)
      idl: recompile IDL for uint1632 change
      pidl: update PIDL tests for uint1632 enums
      tdr: teach TDR about uint1632 enums
      s4-torture: removed an accidental commit of a local test hack
      torture: disable the ValidatePassword test
      s4-drs: fixed a memory error introduced yesterday
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s4-drs: make DsBind a bit less verbose
      scripts: handle non-C files in minimal_includes.pl
      torture: fixed socket leak in BENCH-TCON test
      s4-selftest: don't run benchmarks on the build farm hosts
      pidl: don't warn for compatible scalar types in unions
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s4-repl: check that a DsGetNCChanges is a continuation, and fix sorting
      s3: Fix vfs_shadow_copy2 to allow in-path @GMT-xxx
      idl: added WSPP DrsOptions bit names
      libds: added nTDSDSA options flags
      s4-dsdb: added samdb_rodc() and samdb_ntds_options()
      drs: improved error checking
      ldb: fixed display of replUpToDateVector
      s4-drs: implement more of DsUpdateRefs
      s4-drs: support DRSUAPI_DRS_ADD_REF flag
      s4-devel: for devel scripts its better to use bin/ than $PREFIX/bin
      s4-script: flush DNS after adding new addresses
      s4-ldb: removed bugus RDN length check
      s4-ldb: removed incorrect rDN length test
      s4-dsdb: implement limit on rDN length
      s4-ldap: test the rDN size limit
      s4-ldaptest: "testgroup" is a bit too common
      s4-pvfs: fixed handling of SEC_FLAG_MAXIMUM_ALLOWED
      s4-smb: declare root_fid as a file handle
      s4-pvfs: implement root_fid support in posix backend
      s4-torture: catch bad command line options
      s4-libcli: fixed structure element bug in ntcreatexreadx
      s4-smbserver: fixed root_fid in nttrans create
      s4-selftest: mark some CIFS backend tests as known fail
      s4-smb: fill in fnum as well for root_fid
      idl: added bit definition for privilege masks
      s4-torture: take privileges into account in BASE-MAXIMUM_ALLOWED
      s4-pvfs: fixed mask handling for SEC_FLAG_MAXIMUM_ALLOWED
      s3: fixed krb5 build problem on ubuntu karmic
      s4-winsrepl: don't put in attributes with no elements
      added NT_STATUS_NOT_OK_RETURN_AND_FREE()
      s4-privileges: moved privileges to private/privilege.ldb
      s4-torture: show the sid we are basing privilege tests on
      s4-provision: removed the old privilege attributes
      s4-provision: added the default privileges db
      s4-lsasrv: make sure only admins can alter privileges
      s4-torture: add a special check for administrators and privileges
      s4-security: honor more of the privilege access bits
      s4-pvfs: use privileges rather than "uid == 0" in unix access check
      s4-torture: cleanup after the MAXIMUM_ALLOWED test
      s4-torture: the BASE-CREATEX_ACCESS test is broken for non-administrators
      s4-acl: SEC_FLAG_MAXIMUM_ALLOWED doesn't auto-apply privilege access masks
      s4-pvfs: don't auto-apply privilege bits in unix acl handling either
      s4-schema: We should not need Samba4TopExtra now
      s4-torture: minor debugging enhancements
      s4-torture: fixed the default ACL for s4
      s4-pvfs: when uwrap is enabled, ignore chown errors
      s4-smbserver: removed bogus initialisation of two union arms
      s4: fixed howto for new binary name
      smb2-torture: samba4 allows SEC_FLAG_SECURITY to be used with privileges
      s4-pvfs: change the handling of access checking on create
      s4-smb2: fixed SMB2 find commands
      s4-pvfs: more fixes for ACLs on file creation
      s4-pvfs: fixed update of stream sizes
      s4-pvfs: the STREAM_INFORMATION calls don't need any access flags
      s4-pvfs: when reporting the file name, don't include the :$DATA suffix
      s4-pvfs: rename with full name gives SHARING_VIOLATION
      s4-streams: fixed handling of stream rename and overwrite
      s4-torture: fixed the streams tests for Samba4
      s4: spelling error
      s4-test: SMB2 oplocks in s4 are a mess
      s4-test: the ldap secdesc test is expected to fail for now
      s4-pvfs: fixed uninitialised variable
      s4-pvfs: another uninitialised variable
      s4-test: removed duplicate knownfail entry
      selftest: fixed filter to know about a "error" result
      s4-selftest: move secdesc.python test to skip list
      Revert "selftest: fixed filter to know about a "error" result"
      s4-pvfs: fill in alignment_requirement (valgrind error)
      s4-libnet: fixed privilege handling in samsync to use the right db
      s4-idmap: the idmap database should be indexed
      s4-pyldb: fixed 64 bit issues
      s4-selftest: fixed 'make testenv'
      util: fixed generate_unique_strs() to be portable
      selftest: try to get the valgrind errors showing again in the build farm
      tdb: fixed the intermittent failure of tdbtorture in the build farm
      lib-util: check for too many combinations in generate_unique_strs()
      s4-idl: don't call a variable 'stat'
      s4-dsdb: fixed empty structure error on solaris8
      s4-selftest: skip the trans2.scan test
      s4-torture: fixed a fd/mem leak in the RPC-LSA-SECRETS test
      s4-selftest: skip two more scanners
      s4-script: cleanup tmp files in minimial_includes.pl
      s4-torture: ran minimal_includes.pl over source4/torture
      s4: ran minimal_includes.pl on source4/winbind
      s4: ran minimal_includes.pl on source4/rpc_server
      s4: ran minimal_includes.pl on source4/client
      s4: ran minimal_includes.pl on source4/auth/ntlm
      s4: ran minimal_includes.pl on source4/auth/ntlmssp
      s4: ran minimal_includes.pl on source4/auth/gensec
      s4-selftest: the secleak test is not designed for automated running
      s4-torture: fixed a pipe leak
      s4-ldb: allow for non-null terminated ldb_val in ldb_dn_from_ldb_val
      s4-ldb: ldb_oom() for modules
      s4-ldb: ldb indexing rewrite - part1
      s4-ldb: when taking a list intersection, the result can be as long as the first list
      idl-drsblobs: mark some more reserved values as value(0)
      util: fixed place where we could look one byte past end of string
      selftest: make python run unbuffered
      s4-ldb: fast path for equal pointers
      s4-ldb: expose ltdb_err_map and ltdb_delete_noindex
      s4-ldb: do more validation of idxptr lists
      s4-ldb: delete empty index records
      s4-ldb: fixed tdb error handling in ldb_index.c
      s4-ldb: over-allocate index records to save on realloc costs
      s4-ldb: ensure new dn_list elements are not owned by caller
      s4-selftest: removed raw.unlink from quicktest
      s4-ldb: don't try to index non-indexed attributes
      s4-ldb: fixed some memory leaks in new indexing code
      s4-ldb: added a TODO about checking the indexlist
      s4-lsa: fixed the lsa server to cope with the new tests from gd
      s4-torture: fixed double free in libnet_group test
      s4-lsa: fixed breakage of lsa server
      s4-dsdb: create a static system_session context
      s4-dsdb: add a static samdb_credentials
      s4-ldbwrap: added re-use of ldb contexts in ldb_wrap_connect()
      s4-server: pre-open the main ldb databases in the server
      s4-server: call the ldb_wrap_fork_hook() after a fork()
      s4-ldb: added ldb_transaction_cancel_noerr()
      s4-ldb: use ldb_wrap_fork_hook() to cancel child transactions
      s4-ldb: move the tdb_reopen_all() calls to ldb_wrap.c
      s4-samdb: make sure the static credentials are never freed
      s4-selftest: lower some of the timeouts during make test
      s4-python: we need to include Python.h first
      s4-python: fixed annoyance where control-C doesn't kill our python scripts
      s4-ldb: fixed re-index during a complex transaction
      s4-ldb: don't allow modifies outside a transaction.
      tdb: detect tdb store of identical records and skip
      s4-dsdb: ensure that new partitions inherit any transaction
      s4-ldb: fixed string length handling on index records
      s4-ldb: ensure DNs pass validity tests in indexing
      s4-samdb: reduce the number of samdb opens at startup
      s4-ldb: allow for unescaped '=' in a index DN
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s4-ldb: fixed request handling for schemaUpdateNow op
      s4-ldb: '+' can also happen in base64 encoded index DNs
      s4-dsdb: always cancel transactions on all partitions
      s4-dsdb: call dsdb_make_schema_global() from ldb_wrap
      s4-hdb: go back to a separate samdb for the KDC
      s4-samdb: remove the rDN size constraint of 64
      s4-ldb: make DN escaping/unescaping consistent
      s4-ldb: changed the DN checks for \n to warnings
      fixed the build
      s4-ldb: allow ldap.py test suite to run directly against a file
      s4-ldb: fixed an issue in rename/modify indexing
      s4-ldb: make ldb tools line buffered
      s4-ldb: when -v is specified, show progress of ldbadd/ldbmodify
      s4-ldb: added a double-rename test
      s4-dsdb: make sure mod_usn list is zeroed on each transaction
      s4-dsdb: removed attributes that should not be displayed by default
      s4-ldb: added a warning about ldb_msg_add_dn
      s4-drs: we need to specifically ask for ntSecurityDescriptor
      s4-dsdb: some more attribuutes that we should only give if asked for
      libcli: allow ntstatus.h to be used by openchange
      s4-install: fixed install path for python scripts
      s4-smb2: check for an invalid lock flags combination
      s4-smb2: check for invalid SMB2 lock ranges
      torture: fixed SMB2-LOCK valgrind error
      s4-smb2: sequence numbers are not checked in SMB2_OP_CANCEL
      s4-smb2: SMB2 uses NT_STATUS_CANCELLED for cancelled locks
      s4-ldb: better to test for valid arguments in ldb library than commandline
      s4-ldb: improve detection of whether the server has a GC port
      s4-pvfs: fixed access check failure in SFILEINFO test
      s4-drstest: don't use getenv("LDB_URL") in test suites
      s4-torture: fixed expected error codes for s4 in SMB2-LOCK
      s4-ntvfs: move valid lock range test from smb2 layer to generic code
      s4-torture: mark s4 as doing valid lock range tests on SMB
      s4-selftest: s4 passes this test now
      s4-ntvfs: win7 does not check for the NONE smb2 lock flag on unlock
      s4-torture: fixed error code for s4 in SMB2-LOCK test
      s4-selftest: s4 passes all the SMB2-LOCK tests now
      s4-install: old systems don't have sed -i
      s4-drs: cope with bogus empty attributes from w2k8-r2
      s4-ldb: make it much easier to use common ldb controls
      s4-dsdb: don't call ldb_next_init() twice in objectclass module
      s4-ldb: check for -ve value for page size
      s4-ldb: the '1' form of extended_dn search is easier to read
      s4-drs: fixed updating of uSNChanged in replmd_modify
      s4-drs: fixed UDV and overlapping sync calls in DRS
      s4-drsutil: fixed a memory leak in samdb_search_count
      s4-ldb: fixed show_deleted module not to corrupt parse trees
      s4-selftest: don't consider spoolss failures to be an error in s4
      s4-ldb: fixed ldbdel with -r (recursive deletion)
      s4-drs: use -r to ldbdel in unvampire devel script
      s4-heimdal: fixed a use-after-free heimdal bug
      s4-selftest: show the test summary at the end of 'make test' in the build farm
      s4-dsdb: fixed steal of parentGUID for empty msg
      s4-dsdb: use dsdb_module_search_dn in repl_meta_data
      s4-ldb: added a missing ltdb_unlock_read()
      s4-ldb: fixed nested searches inside ldb modules
      s4-drs: use parentGUID attribute in getncchanges
      s4-drs: ensure we fill in ncRoot_dn in getncchanges
      s4-dsdb: added dsdb_functional_level() helper function
      librpc: split out a separate GUID_from_ndr_blob() function
      s4-dsdb: use GUID_from_ndr_blob() to create dsdb_get_extended_dn_guid()
      s4-libcli: use new GUID functions in libcli
      s4-smb2: use new GUID function in smb2 negprot
      s4-dsdb: simplify schema code using new GUID functions
      s4-dsdb: simplify linked attributes code using GUID functions
      s4-dsdb: simplify samdb_result_guid()
      s4-ldb: simplify ldif handlers using new GUID functions
      libndr: added a GUID_to_ndr_blob() helper function
      s3-ldb: use GUID_to_ndr_blob()
      libcli: use GUID_to_ndr_blob()
      s4-server: use GUID_to_ndr_blob() in cldap and smb servers
      s4-libcli: use GUID_to_ndr_blob()
      s4-libnet: use GUID_to_ndr_blob()
      s4-ldb: use GUID_to_ndr_blob()
      s4-dsdb: use GUID_to_ndr_blob()
      util: added binsearch.h for binary array searches
      s4-schema: use binsearch.h
      s4-schema: use GUID_to_ndr_blob()
      s4-libcli: GUID_from_ndr_blob() is strict about the blob size
      s4-ldb: fixed 2 bugs in ldb_dn_set_extended_component()
      s4-ldb: sort the linearized extended DN by component name
      s4-ldb: added a new "reveal" control
      s4-ldb: added a function to filter extended components of a ldb_dn
      s4-ldb: added new ldb_dn extended components for linked attributes
      s4-dsdb: use the reveal control to hide/show extended DN components
      heimdal: work around differences between GNU and XSI strerror_r()
      s4-dsdb: return a zero guid on error in samdb_result_guid()
      s4-loadparm: call reload_charcnv() also for a missing smb.conf
      s4-devel: support vampire_ad.sh with no initial smb.conf
      s4-dsdb: added REVEAL_INTERNALS flag to dsdb_module_search_handle_flags()
      s4-ntvfs: try to fix bug 6989
      s4-dsdb: added dsdb_dn_is_deleted_val()
      s4-dsdb: use dsdb_dn_is_deleted_val()
      s4-dsdb: added dsdb_module_dn_by_guid()
      s4-dsdb: rename dsdb_module_search_handle_flags to dsdb_request_add_controls
      s4-dsdb: dsdb_flags should be unsigned
      s4-dsdb: fixed dsdb_module_dn_by_guid()
      s4-dsdb: added dsdb_module_modify()
      s4-dsdb: added a dsdb_module_rename() call
      libds: added GUIDs for wellknown AD objects
      s4-dsdb: added dsdb_wellknown_dn()
      s4-dsdb: added dsdb_find_nc_root()
      s4-dsdb: added dsdb_get_deleted_objects_dn()
      ldap: give a debug error when we don't know a control
      s4-ldb: added --show-deactivated-link command line option
      s4-ldb: fixed a transaction error on prepare_commit
      s4-ldb: show the OID of any unhandled critical controls
      s4-dsdb: don't actually remove the sd_flags control, just mark it non-critical
      s4-dsdb: when the SD_FLAGS control is set, don't remove nTSecurityDescriptor
      s4-dsdb: it is a better pattern to mark a control as done than remove it
      s4-dsdb: also mark the relax control non-critical when done
      s4-ldb: canonicalise the message on ldb_add
      s4-scripts: add a enablerecyclebin script
      s4-ldb: display msDS-OptionalFeatureGUID as a GUID
      s4-dsdb: fixed the sort in dsdb_find_nc_root()
      s4-dsdb: added ldb_dn_update_components()
      s4-dsdb: declare ldb_dn_update_components()
      s4-dsdb: greatly simplify the subtree_delete module
      s4-ldb: fixed a valgrind error in ldbtest
      s4-dsdb: stop warnings about unknown struct GUID in prototypes
      s4-dsdb: give us an invocationID when in standalone mode
      s4-provision: added a note about where invocationIDs come from
      s4-dsdb: added two new dsdb_get_extended_dn_*() helper functions
      s4-dsdb: use varargs expression in dsdb_module_search()
      s4-dsdb: added dsdb_get_extended_dn_uint64()
      s4-dsdb: added DSDB_MODIFY_RELAX flag to the dsdb_module_*() calls
      s4-dsdb: don't use a non-constant format string for a printf format
      s4-repl: lower debug level of a common message
      librpc: fixed the GUID_compare() function
      s4-drs: another two unsigned comparison bugs
      s4-schema: a unsigned comparison bug in the schema code
      s4-torture: another unsigned comparison bug
      s4-repl: only try to replicate for NCs that we are a master for
      s4-kcc: don't crash with a NULL ntds connection list
      s4-repl: give a reason why the prepare commit failed
      s4-torture: update uuid_compare test for new behaviour
      s4-schema: fixed the sorting of schema attributes
      s4-net: fixed pwsettings command
      s4-testpasswords: fixed CONFIG and quoting
      s4-net: fixed finddcs to use empty SID instead of NULL sid (NDR error)
      s4-dsdb: add support for storing linked attribute meta data in extended DNs
      s4-dsdb: add a TODO item for linked attributes in extended_dn_out
      s4-dsdb: implemeneted replmd_modify_la_replace()
      s4-dsdb: added support for backlinks in repl_meta_data
      s4-dsdb: linked_attributes_modify no longer handles modifies
      s4-dsdb: add a comment on the use of ldb_rename()
      s4-dsdb: repl_meta_data now replaces objectguid in all cases
      s4-dsdb: the linked_attributes module no longer handles deletes
      s4-dsdb: added replmd_delete, based on Eduardos work
      s4-dsdb: add linked attributes meta_data handling to replmd_add
      s4-dsdb: remove linked_attributes_add
      s4-dsdb: some backlinks can be processed immediately
      s4-dsdb: do the rename after the modify in replmd_delete
      s4-dsdb: simplify the linked_attributes module
      s4-dsdb: handle links with no backlinks in replmd_delete
      s4-dsdb: split RMD_USN into RMD_LOCAL_USN and RMD_ORIGINATING_USN
      s4-dsdb: allow the component name to be specified in dsdb_get_extended_dn_guid()
      s4-dsdb: add REVEAL_INTERNALS in the search for linked_attributes
      s4-dsdb: store full meta data from DRS for linked attributes
      s4-dsdb: minor cleanup in DRS replicated objects code
      s4-dsdb: ask for REVEAL_INTERNALS in getncchanges
      s4-drs: added linked attribute replication to getncchanges
      s4-dsdb: auto-upgrade w2k formatted linked attributes when modified
      s4-ldb: use the RELAX control to disable single value checking on replace
      s4-dsdb: added dsdb_dn_is_upgraded_link_val()
      s4-drs: handle mixtures of old and new style links in getncchanges
      s4-dsdb: added dsdb_check_single_valued_link()
      s4-dsdb: move checking for single valued links to samba modules
      s4-dsdb: fill in the correct version number of links that come over DRS
      s4-drs: some useful debugging options for getncchanges
      s4-drs: fixed the UDV return in getncchanges
      s4-dsdb: use a common method for finding a link pair
      s4-ldb: added ldb_module_get_ops()
      s4-dsdb: added DSDB_FLAG_OWN_MODULE
      sd-schema: order DRS classes on the wire in reverse order
      s4-schema: don't fill in the extended DN with a zero GUID
      s4-drs: give a reason when an AddEntry commit fails
      s4-drs: we are doing the sorting for getncchanges in the app code now
      s4-drs: implemented sorting functions based on replication flags
      s4-drs: use the extended linearized form for DRS replication
      s4-drs: send all linked attributes at the end of a replication cycle
      s4-drs: update highwatermark after successfully encoding the object
      s4-drs: treat a zero GUID as not present in replmd_add_fix_la
      s4-drs: give an error message in repl_meta_data if we don't get a partition control
      s4-drs: cope better with NULL GUIDS from DRS
      s4-drs: use dsdb_module_guid_by_dn()
      s4-drs: fixed typo for uSNCreated
      s4-drs: update comment to refect only forward link in this fn
      s4-drs: use DSDB_FLAG_OWN_MODULE
      s4-drs: isRecycled only exists in FL W2K8-R2
      s4-drs: don't try to remove backlinks directly
      s4-dsdb: fixed valgrind error in replmd modify
      s4-ldb: show the error code as well as errstr
      s4-drs: set flag to indicate that we do support linked attributes
      s4-dsdb: added parse functions for DRS linked attribute blobs
      s4-drs: use dsdb linked attribute parse functions
      s4-drs: use dsdb_module_rename()
      s4-drs: re-resolve the DN in linked attribute processing
      s4-drs: sort linked attributes
      s4-ldb: added ldb_val_to_time()
      s4-dsdb: use ldb_val_to_time() instead of ldb_string_to_time()
      s4-dsdb: use safe length limiting in string->integer conversion
      s4-ldb: use safe length limited conversions for int64 and time
      s4-ldb: declate ldb_val_to_time()
      s4-ldbmodify: show the error code as well as error string
      s4-ldb: allow modules to override error return values
      s4-ldbtest: fixed message element in modify
      s4-dsdb: added dsdb_set_extended_dn_guid()
      s4-drs: make sure the DNs we put in the db have a extended GUID
      s4-ldb: show an error string, as well as error message
      s4-ldaptest: need to use MessageElement for modify messages
      s4-dsdb: allow system to remove deleted objects
      s4-dsdb: added dsdb_tombstone_lifetime()
      s4-dsdb: make sure 'whenChanged' is set on modify
      s4-ldb: fixed valgrind error: ares can be freed by callback
      s4-dsdb: fixed samdb_create_foreign_security_principal() to use the wellknown GUID
      s4-dsdb: fixed several memory leaks
      s4-kcc: added a preiodic task to remove deleted objects
      s4-dsdb: switched to using RMD_FLAGS instead of DELETED in extended DNs
      libreplace: some systems don't have memmem()
      s4-sddl: DRS replication needs REVISION_ADS for SDs
      s4-drs: don't give an error on repsTo delete if add is also specified
      s4-dsdb: force REVISION_ADS for new and updated ACLs in dsdb
      s4-dsdb: added samdb_reference_dn()
      s4-ldb: added nice ldif display of 64 bit ranges for RIDs
      s4-provision: added an initial RID Set
      s4-dsdb: added samdb_rid_set_dn()
      s4-provision: the DC object itself needs a fixed objectSID
      s4-samldb: use RID Set to allocate user/group RIDs
      s4-dsdb: move the RID allocation logic into ridalloc.c
      s4-provision: allow provision modifies to add records
      s4-dsdb: added dsdb_module_add()
      s4-dsdb: added dsdb_module_reference_dn()
      s4-dsdb: added dsdb_module_constrainted_update_integer()
      s4-dsdb: added dsdb_next_callback()
      s4-dsdb: use dsdb_next_callback()
      s4-dsdb: implement creation of the RID Set object
      s4-provision: don't hard wire the creation of the RID Set object
      s4-dsdb: implement refresh of RID Set pool for a local RID Manager
      s4-dsdb: fixed usage of rIDAllocationPool and rIDPreviousAllocationPool
      s4-dsdb: clarify who is responsible for each attribute
      s4-dsdb: added dsdb_module_set_integer()
      s4-ridalloc: copy with missing rIDNextRid and rIDAllocationPool
      s4-dsdb: added dsdb_find_guid_attr_by_dn()
      s4-repl: added request for RID allocation in drepl task
      s4-messaging: added a new msg type MSG_DREPL_ALLOCATE_RID
      s4-dsdb: send a message to the drepl task when we need another RID pool
      s4-dsdb: the dsdb ldb modules now need messagiing
      s4-repl: allow for callbacks when a repl operation completes
      s4-repl: implement MSG_DREPL_ALLOCATE_RID
      s4-dsdb: added an extended operation for allocating a new RID pool
      s4-dsdb: added support for DRSUAPI_EXOP_FSMO_RID_ALLOC
      s4-event: added s4_event_context_set_default()
      s4-drs: added some debug messages
      s4-dsdb: improve error messages in schema and pdc_fsmo modules
      s4-ldb: improve error handling in indexing code
      s4-provision: RID 1000 is consumed by the machine account
      s4-provision: re-open sam.ldb after creating the schema
      s4-devel: a useful script to setup bin/ and st/ as tmpfs filesystems
      s4-partition: don't ignore errors from other modules
      s4-libnet: better error messages in libnet_vampire.c
      s4-idl: added some more wellknown attributeIDs
      s4-idl: regenerate DRS IDL
      s4-schema: make ldb_val to string comparison safer with nul termination
      s4-schema: added dsdb_attribute_by_lDAPDisplayName_ldb_val
      s4-schema: added generic attributeID conversion functions
      s4-provision: do a self join for all server types
      s4-dsdb: no longer need special invocationID handling for standalone servers
      s4-dsdb: added DSDB_FLAG_TOP_MODULE
      s4-dsdb: ensure we will in all the attributes for RID Set
      s4-dsdb: poke the RID Manager when completely out of RIDs too
      s4-drs: we need to wrap extended operations in transactions
      s4-smbd: setup the default event contexts for other process models
      s4-scripting: we need to use a base search for the NTDS GUID
      s4-partition: fixed selection of partitions on exact match
      s4-dsdb: squash some unknown structure warnings
      s4-dsdb: added dsdb_module_am_system()
      s4-dsdb: allow specification of a SID if we are system
      s4-dsdb: use dsdb_module_am_system() in acl module
      s4-dsdb: fixed const misuse in acl module
      s4-samba3samtest: use system credentials for creating users
      s4-secdesc: fixed the sec_descriptor.py test
      s4-acl: fixed acl.py test to use correct ldif
      s4-dsdb: added a samba3sid module
      s4-samba3sam: use samba3sid module
      s4-samba3sid: the sambaNextRid attribute is actually the previous RID
      s4-samba3samtest: force workgroup so the domain is right
      s4-samba3sid: fixed error returns when res->count != 1 and oom
      s4-samba3samtest: we need to force netbios name as well
      s4-provision: added W2K8-R2 schema as provided by WSPP
      s4-schema: added some debug for bad attributes
      s4-schema: added adminDisplayName and adminDescription
      s4-schema: switch to W2K8-R2 schema
      s4-schema: fixed attributes of aggregate schema
      s4-schema: added msDS-NcType to schema container
      s4-schema: fixes for W2K8-R2 schema
      s4-drs: added two more SPNs in addentry
      s4-ldb: validate the type of the ldb argument to ldb_dn_new()
      s4-drs: fixed usage of ldb_dn_new()
      s4-messaging: fixed a memory leak in messaging_path()
      s4-messaging: remove only usage of debug_ctx()
      s4-debug: removed debug_ctx(). It didn't catch on :-)
      s4-drs: fixed the NC in the getncchanges RID alloc reply
      s4-idl: give a enum for attribute cn and a 'NONE' attribute
      s4-drs: added filtering by udv in getncchanges
      s4-drs: be less verbose when we filter objects by UDV
      s4-drs: calculate and send a uptodateness_vector with replication requests
      s4-drs: need to set the getncchanges extended_ret on success too
      s4-libnet: dsdb_wellknown_dn() in vampire code
      s4-drs: moved the DsWriteAccountSpn call to its own file
      s4-dsdb: added samdb_ldb_val_case_cmp()
      s4-drs: fixed writespn to ignore add/delete errors
      s4-drs: having no SPNs to change is not an error
      s4-drs: base is_nc_prefix on instanceType
      s4-drs: give DN of failed replication partition
      s4-drs: add a local UDV entry even when no replUpToDateVector present on NC
      s4-schema: fixed the SDDL for the schema root security descriptor
      s4-samldb: fixed primaryGroupID when promoting a machine to a DC
      s4-debug: lower the verbosity of a couple of common log messages
      s4-drs: instanceType is always sent, regardless of UDV values
      s4-dsdb: added samdb_domain_sid_cache_only()
      s4-ldb: display security descriptors with correct SDL for known SIDs
      s4-test: fixed make test without having done make install
      s4-selftest: when a command fails show both normal and expanded command
      Revert "s4:provision_users.ldif - Add objects for IIS"
      Revert "s4:provision_users.ldif - Fix memberships regarding the denied password RODC replication group"
      Revert "s4:provision_users.ldif - Remove foreign security principal S-1-5-17 for now"
      Revert "s4:provision_users.ldif - Import all essential groups for Windows Server 2008 mode"
      s4-idl: update the DRS_OPTIONS bits based on the latest WSPP docs
      s4-drepl: switch drepl over to using the generic DRS options flags
      s4-torture: switch to generic DRS options flags
      s4-drs: switch the DRS server to the generic DRS options flags
      s4-torture: switch smbtorture to the generic DRS options
      s4-idl: get rid of the operation specific DRS options flags
      s4-ldb: cope with bad ptr alignment in ldb_index.c
      s4-dsdb: added isGlobalCatalogReady
      s4-drs: give better debug info on unsupported DRS calls
      s4-drs: framework for DsGetReplInfo(), includes the DS_REPL_INFO_NEIGHBORS infoType.
      s4-dsdb: require admin access for DsReplicaGetInfo
      s4-drs: better debug info when security checks fail
      s4-kcc: squash a warning
      s4-kcc: simplify the ReplicaGetInfo implementation a bit
      s4-dsdb: added dsdb_load_udv_v2() and dsdb_load_udv_v1()
      s4-dsdb: use dsdb_load_udv_v2() in repl task
      s4-drs: use dsdb_load_udv_v2() in getncchanges code
      s4-dsdb: add our local cursor and sort in dsdb_load_udv_*()
      s4-dsdb: take advantage of local cursor and sort
      s4-kcc: added support for CURSORS info level in DsReplicaGetInfo
      s4-idl: in DsReplicaGetInfo unknown2 is actually an enumeration_context
      s4-kcc: added DsReplicaGetInfo CURSORS2 level
      s4-provision: added "check-names ignore;" to allow for _msdcs A records
      s4-devel: added rebuild_zone.sh
      s4-provision: added w2k8r2 ldap capabilities
      s4-kcc: added DsReplicaGetInfo pending ops call
      s4-torture: fixed DsReplicaGetInfo elements
      s4-kerberos: raise the general kerberos debug level to 3
      s4-dsdb: isGlobalCatalogReady should be shown by default
      s4-drs: allow for security bypass for DsReplicaGetInfo
      idl: switched to using the WSPP names for the 'neighbour' DRS options
      s4-ldbtest: fixed python import
      s4-torture: handle NT_STATUS_CONNECTION_RESET
      s4-ldb: fixed api.py selftest
      s3-brlock: add a minimim retry time for pending blocking locks
      s3-brlock: we don't need these MSG_SMB_UNLOCK calls now
      s3-smbd: add a rate limited cleanup of brl, connections and locking db
      s3-events: make the old timed events compatible with tevent
      s4-registry: fixed byte order assumptions
      talloc: fixed doc typo
      nbt: don't reference the event_ctx in nbtsock
      s4-torture: more useful error message in SMB2-DIR
      s4-torture: allow host-only in unc lists in smbtorture
      s4-ldb: update ldb_tdb to use new DLIST_ macros
      s3-nmbd: update nmbd to use new DLIST_ macros
      s3-ldb: update the old ldb in s3 to use new DLIST macros
      s3-memcache: update memcache to use new DLIST macros
      s3-libsmb: update libsmb to use new DLIST macros
      s3-locking: update to use DLIST_ADD_AFTER()
      s3-perfcount: update to use new DLIST macros
      s3-registry: update to use new DLIST macros
      s3-smbd: update to use new DLIST macros
      util: rewrite dlinklist.h so that DLIST_ADD_END() is O(1)
      test:local added LOCAL-DLINKLIST testsuite
      s4-provision: move zone file to dns subdirectory
      s4-provision: pre-create a named.conf.update file
      libreplace: added replacements for dprintf() and vdprintf()
      util: added file_compare() utility function
      s4-provision: cope with umask in creating private/dns
      s4-dns: added a dns update task
      s4-selftest: don't run rndc reload in selftest
      s4-dns: don't leave behind a tmp file
      s4-net-drs: fix some coding style issues
      libds: added recyclebin feature GUID
      s4-pyldb: null terminate string ldb message elements from python
      s4-script: make enablerecyclebin use system_session
      s4-provision: fixed --function-level option to provision
      s4-build: avoid finding python symlinks
      s4-provision: import the R2 functional level
      util: added TYPESAFE_QSORT() macro
      libreplace: add fdatasync() if not available
      tdb: use fdatasync() instead of fsync() in transactions
      s4-dsdb: use TYPESAFE_QSORT() in dsdb code
      s4-auth: use TYPESAFE_QSORT() in gensec
      s4-socket: use TYPESAFE_QSORT() in netif code
      s4-ntvfs: use TYPESAFE_QSORT() in notify code
      s4-rpcserver: use TYPESAFE_QSORT() in rpc servers
      s4-torture: use TYPESAFE_QSORT() in smbtorture
      s4-wrepl: use TYPESAFE_QSORT() in wins repl code
      s4-ldb: added LDB_TYPESAFE_QSORT()
      s4: use LDB_TYPESAFE_QSORT() instead of ldb_qsort()
      s4-rpc: be more careful about DCERPC auth padding
      s4-smbd: fix crash in notify code on client termination
      s4-ldb: use TYPESAFE_QSORT() in the rest of the ldb code
      s3-includes: enable TYPESAFE_QSORT() in s3
      lib: use TYPESAFE_QSORT() in lib/ and libcli/
      s3-lib: use TYPESAFE_QSORT() in s3 interfaces code
      s3-libsmb: use TYPESAFE_QSORT() in namequery code
      s3-lib: use TYPESAFE_QSORT() in remaining s3 library code
      s3-vfs: use TYPESAFE_QSORT() in s3 VFS modules
      s3-nmbd: note TODO item for qsort
      s3: convert registry and printing code to TYPESAFE_QSORT()
      s3-locking: convert brlock to TYPESAFE_QSORT()
      s3-rpc: convert wkssvc to use TYPESAFE_QSORT()
      s3-smbd: convert lanman and notify code to TYPESAFE_QSORT()
      s3: last part of TYPESAFE_QSORT() conversion
      util: update three other copies of our dlinklist.h macros
      a4-dcerpc: another attempt at dcerpc auth padding
      s4-rpcserver: teach the rpc server to cope with bad sig_size estimates
      s4-dsdb: added dsdb_modify_permissive()
      s4-drs: use a permissive modify in addentry
      s4-drs: replace manual checks with dsdb_modify_permissive()
      s4-test: minor fixes to urgent_replication.py
      s4-ldb: fixed permissions on urgent_replication.py
      s4-test: use local ldb for urgent_replication test
      s4-dsdb: don't change replPropertyMetaData if the value hasn't changed
      s4-kcc: remove C++ comment
      s4-rootdse: we don't need DSDB_FLAG_OWN_MODULE here
      s4-dsdb: move dsdb_request_add_controls() into dsdb/common/util.c
      s4-dsdb: replace dsdb_modify_permissive() with dsdb_modify() and dsdb_flags
      s4-dsdb: change samdb_replace() to dsdb_replace() and allow for dsdb_flags
      s4-dsdb: change dsdb_search_dn_with_deleted() to dsdb_search_dn() with dsdb_flags
      s4-dsdb: replace dsdb_find_dn_by_guid() with a dsdb_search() call
      s4-dsdb: added dsdb_search_one() and cleanup dsdb_find_dn_by_guid()
      s4-dsdb: removed gendb_search_single_extended_dn()
      s4-kcc: remove search_onelevel_with_deleted() in kcc
      s4-samdb: use dsdb_search() in cracknames
      s4-dsdb: return LDB_ERR_CONSTRAINT_VIOLATION on num_recs != 1
      s4-dcerpc: fixed auth padding to be relative to the stub, not packet
      s4-rpc: don't use auth padding in rpc bind requests as it breaks s3
      s4-kcc: remove a qsort() that snuck into the new topology code
      s4-rpc: paranoid check for auth_length
      s4-provision: fix permissions on generated DNS zone file
      examples: add bind9 patches for TSIG-GSS support
      util: added samba_runcmd()
      s4-param: added "rndc command" smb.conf option
      s4-dnsupdate: use samba_runcmd() in the dns update task
      s4-provision: freeze the DNS zone before creating the zone file
      s4-config: add dyn_SBINDIR
      s4-param: added "dns update command" smb.conf option
      s4-dns: call out to the dns update command every 10 minutes
      s4-pyglue: added interface_ips() call
      s4-dns: improved logging, and run name check at startup
      s4-selftest: disable rndc and dns update in build farm
      Revert "s4:AD content - adequate some revision levels to match Windows Server 2008"
      s4-dsdb: fixed the fetch of the server site name
      dns: dummy samba_dnsupdate script
      dns: install samba_dnsupdate
      s4-krb5: propogate errors from a lot more kerberos functions
      pyglue: don't return 127.0.0.0/8 IPs in interface_ips()
      pyglue: added py_samdb_ntds_invocation_id()
      py-samdb: added get_invocation_id() method
      pyglue: added py_samdb_server_site_name()
      py-samdb: added server_site_name method
      samdb: added get_ntds_GUID() method
      s4-param: added 'nsupdate command' option, default to /usr/bin/nsupdate -g
      s4-provision: fixed port number for gc ldap DNS SRV entry
      s4-dns: add automatic dynamic DNS updating script
      dns: auto-delete incorrect SRV entries for our hostname
      s4-provision: if we aren't doing variable substitution then don't check for vars
      s4-provision: setup the dns_update_list at provision time
      s4-provision: added dns_update_list
      s4-dns: use a loadparm list for samba_runcmd() commands
      s4-dns: fixed CNAME automatic DNS updates
      s4-provision: also create the dns_update_list when running net vampire
      s4-provision: fixed use of rndc command from python
      devel: get the ownership of the directories right in tmpfs.sh
      s4-posix: allow change ownership of files if the user has the right privileges
      dns: make dns update script use unbuffered IO
      s4-messaging: use auto-close on the socket
      s4-dns-ex: use autoclose on the dns child pipe
      s4-python: allow us to have samba copies of python libraries we depend on
      s4-dns: use samba.external to pull in the dns.resolver library
      s4-python: import a copy of the python dns library
      s4-python: only install external python libs that are missing
      s4-torture: fixed commas separating C statements
      s4-rpc: don't use s->credentials after it is freed
      s4-pvfs: move the private ntcreatex flags to private_flags
      s4-pvfs: log more error conditions in NTVFS backend
      s4-privs: add root_privileges_original_uid()
      s4-pvfs: added new pvfs flag PVFS_FLAG_PERM_OVERRIDE
      s4-pvfs: new pvfs_sys module
      s4-pvfs: use pvfs_sys_*() functions to wrap posix calls
      replace: added get_current_dir_name()
      s4-pvfs: use O_FOLLOW one level at a time for security overrides
      s4-pvfs: set default for perm override based on system features
      s4-pvfs: use pvfs_sys_fchmod()
      s4-pvfs_sys: talloc_free should be before errno restore
      s4-pvfs_sys: build on systems without O_NOFOLLOW or O_DIRECTORY
      charset: fixed a problem with the global use of the iconv_convenience structure
      subunit: keep total error and failure counts
      subunit: fixed reporting of unexpected failures
      build: useful shell vars for setting up selftest
      build: fixed nss_wrapper on solaris
      s4-provision: solaris uses the group "other"
      s4-provision: FreeBSD uses 'staff' for users
      libreplace: fixed declaration of dprintf() on FreeBSD
      python: use '#!/usr/bin/env python' to cope with varying install locations
      s4-ldb: removed unused command line options -I and -O
      s4-ldb: fixed command line parsing in oLschema2ldif
      tsocket: not all systems have IPV6_V6ONLY
      libreplace: strerror_r() is needed by heimdal on solaris8
      libutil: moved the networking defines to util_net.h
      util: on FreeBSD true is in /usr/bin. Use execvp to find it
      tevent: added tevent_re_initialise()
      s4-smbd: use tevent_re_initialise()
      s3-event: switch s3 to using tevent_re_initialise()
      s4-selftest: use CONFIG_H environment variable to find config.h
      s4: added a simple implementation of bin/samba -b
      talloc: testsuite should use <talloc.h> not "talloc.h"
      pytalloc: allow for using a system libtalloc-dev with pytalloc
      s4-waf: use the libreplace strerror_r if needed
      s4-heimdal: a better way of handling dirfd()
      charset: look for the codepages in the right place
      s4-heimdal: for use of libreplace setegid and seteuid
      s4-heimdal: use the HAVE_INET_* functions from libreplace
      s4-test: oLschema2ldif doesn't take -H any more
      selftest: reason may be None
      replace: allow memmem() with an empty string to return NULL
      s4-torture: using typeof() is not portable
      s4-torture: removed more uses of typeof()
      talloc: limit the depth that talloc will go for talloc_is_parent()
      talloc: change talloc minor version to 2.0.2
      talloc: add a define for TALLOC_MAX_DEPTH
      talloc: a useful bit of debug code
      debug: enable talloc logging
      pyrpc: do the pipe connect on a real memory context
      s4-pyglue: setup talloc logging in python modules
      s4-python: added --debuglevel to our python scripts
      s4-rpc: fixed a talloc loop in continue_ntlmssp_connection()
      socket-wrapper: not all systems have FIONREAD defined
      build: a first attempt at waf build for talloc and libreplace
      build: updates to waf scripts for replace and talloc
      build: renamed autoconf.py to wafsamba.py and added SAMBA_*() functions
      build: added waf build for tdb
      build: more binaries for waf tdb build
      build: added some comments for tdb build
      build: added waf to the tree, so everyone uses the same version
      build: neater way to find libreplace and start on tevent waf build
      build: added target directory options
      build: added recursive library handling
      build: some more config checks
      build: added waf build rules for ldb
      build: tdb does not depend on talloc
      build: moved lib -> shared
      build: SAMBA_BUILD_ENV() is now in conf.*
      build: added ADD_CFLAGS() and started of Samba4 build
      build: first attempt at a script to auto-convert config.mk files to wscript
      build: add dummy flags for auto-generated scripts
      build: s4 wants config.h in include/
      build: more developer flags
      build: allow override of config.h location
      build: put config.h in top dir by default
      build: added top level script
      build: LIBLDB alias
      build: added autoproto stub
      build: recognise manpages keyword
      build: added BUILD_SUBDIR() wrapper
      build: added public_headers support
      build: use runonce for config checks
      build: more header checks
      build: simpler BUILD_SUBDIR
      build: death to singletons
      build: check for circular build dependencies
      build: auto-remove circular dependencies
      build: improve the wscript generator
      build: on the fly dependency checking
      build: LIBLDB hack not needed any more
      build: fixed handling of heimdal_build/internal.mk
      build: add libresolv
      build: add heimdal_build
      build: don't distinguish system and local libs in wscript files
      build: added LIBREPLACE_NETWORK
      build: auto-strip empty dependencies
      build: auto generate ASN1 and ET rules
      build: added ASN1 and ERRTABLE build targets
      build: run the lib/replace rules first
      build: add LIBREPLACE_EXT
      build: added gettext/libintl to libreplace
      build: make CHECK_FUNCS_IN() smarter about mandatory libraries
      build: heimdal_build waf support
      build: DEFUN->DEFINE, and fixed CFLAGS handling
      build: recursive dependency calculation
      build: added build groups
      build: added svn version of waf. It has better exception display
      build: added ASN1, PIDL and ET build rules
      build: cope with empty source lists for libs
      build: moved wafsamba.py to buildtools
      build: aded wafsamba README
      build: started to split up wafsamba.py into separate modules
      build: add output_type and realname for mit_samba library
      build: another missing subsystem .....
      build: split out the extension based build patterns
      build: fixed --includedir options for PIDL
      build: added librpc build script
      build: dynconfig build rules
      build: mail IDL build rules
      build: fixed location of gen_ndr files
      build: rewrote PIDL rules, breaking them into a separate waf tool
      build: using deps= for deps is clearer
      build: source= is clearer for source lists
      build: fixed formatting
      build: fixes from ita
      build: added heimdal_build table rules
      build: add README to explain gen_ndr, and ensure directory exists
      build: result of hack session with ita
      build: use shell for TDR rule, as -- confuses the build rule
      build: allow selection of build group in HEIMDAL_AUTOPROTO()
      build: moved main autoproto rule into samba_autoproto.py
      build: a useful example of a debug technique in waf
      build: added generation of version.h
      useful tools for finding missing configure steps
      build: check for pkgconfig
      build: waf build for lib/tls
      build: added define and always options to CHECK_VARIABLE()
      build: more headers and variables in configure
      build: h_errno for heimdal
      build: ignore the bin/ directory
      build: useful test script
      build: ignore some waf files
      build: add_headers flag to CHECK_HEADER()
      build: ntvfs/sysdep configure checks
      build: another typo
      build: check for backtrace
      build: return values for autoconf-like tests
      build: backtrace and crypt tests
      build: added CHECK_DECLS()
      build: improve autoconf macros
      build: smarter list splitting
      build: added CHECK_SIZEOF()
      build: check signal functions
      build: check size of types
      build: check for offset_t and pw*_r functions
      build: more config checks
      build: check for volatile
      build: added help on fns
      build: check xattr and frsize
      build: check freeaddrinfo
      build: added CHECK_CODE_COMPILES()
      build: more config checks
      build: expand CHECK_CODE() function
      build: added interface checking and nicer snprintf checking
      build: gcrypt functions
      build: move gettimeofday check to libreplace
      build: check immediate structures
      build: fixed iuserok test
      build: zlib checks
      build: define HAVE_LIBxxx when we find a library
      build: check for pam
      build: check for libgpg-error
      build: fix name of libs with - in them
      build: check for libsasl2
      build: new waf version
      build: added CHECK_CFLAGS()
      build: more libreplace config checks
      build: fixed winsize check
      build: check for xattr support
      build: fixed cflags in CHECK_CODE()
      build: iconv checks
      build: fixed sockaddr_in6 test
      build: new waf version - fixes mkstemp problem
      build: fixed _Bool va_copy and VA_ARGS tests
      build: added IPV6 test
      build: check for RETSIGTYPE
      build: added wrapper options
      build: added local_include option to CHECK_CODE()
      build: added statvfs64 test
      build: emulate autoconf PACKAGE_* variables
      build: fixed LDB_MODULESDIR
      build: added SUBST_ENV_VAR()
      build: make CONFIG_PATH() understand absolute paths
      build: added getpass() tests
      build: added ENFORCE_GROUP_ORDERING()
      build: back to stricter deps
      build: enable ENFORCE_GROUP_ORDERING()
      build: saner CFLAGS handling for defines
      build: fixed heimdal include lists
      build: use export_incdirs
      build: much nicer pidl rules
      build: assert on missing dependency
      build: better target name for lib link
      build: nearly there on samba4 build
      build: separate out dependencies and python rules
      build: commit all the waf build files in the tree
      build: waf quicktest nearly works
      build: waf test now works (at least for some tests)
      build: need the sample ldb module for our testsuite
      build: waf test now depends on build
      build: added ldb 'skel' module
      build: fixed group for heimdal autoproto
      build: added test targets for make
      build: default to waf -p
      build: fixed cflags in CHECK_CODE
      build: use a plain build, at request of metze :)
      build: fixed termcap build
      build: fixed samba_deps.py for python 2.4
      build: updates for current master build
      build: cope with the common gen_ndr files being in the git tree
      build: allow shared and python staging areas to be referenced in build tree
      build: check that the symlink doesn't exist before creating
      build: fixed the build without sasl libraries
      build: updated waf version
      build: more efficient pidl rules from ita
      build: try faster includes processing
      build: allow waf to cache include lists more efficiently
      build: an optimisation for includes file handling
      build: remove hacks from top level wscript
      build: we don't need varients in samba, so we can optimise a bit more
      build: fixed init function sentinal for python modules
      build: added a lot more options to waf test
      build: fixed some more missing targets
      build: go into system includes for dependencies on configure
      build: allow configure -C to work again
      build: removed unused file
      build: don't use -W warning option for developer build
      build: optionally enable builtin popt
      build: enable pytdb
      build: don't remove Makefile
      build: enable com library
      build: added a cflags_end SAMBA_SUBSYSTEM() option
      build: fixed the build of the com.so library
      build: only enable pytdb on s4 build
      build: teach samba_pild.py about the --com-header and --dcom-proxy options
      build: don't need the S4 in the PIDL prefix
      build: added 'waf etags' target
      build: alias the libiconv target name for subsystems that depend on 'ICONV'
      build: compatibility makefile targets
      build: disable WAFCACHE by default
      build: new waf version (fixed python install bug)
      build: cleanup the ASN1 rules a bit
      build: split build and install libraries/binaries
      build: fixed the install name for python modules
      build: ensure that the 'build' command appears in waf --help
      build: fixed config.h generation when we have source -> source4 symlink
      build: default to 1 job in make, to be build farm friendly
      build: fixed st_done test completion code
      build: python modules need the libs from broken lib loops too
      build: make bin/sambadeps depend on samba_deps.py modtime
      build: trim whitespace from CC options
      build: use RUN_COMMAND() to wrap os.system()
      build: fixed git version in samba -V
      build: don't default to WAFCACHE in configure
      build: install codepage files
      build: more optimisations from Thomas
      build: rename samba_includes.py to samba_optimisation.py
      build: updated waf-svn (lower preproc recursion limit)
      build: added SUBST_VARS_RECURSIVE()
      build: use SUBST_VARS_RECURSIVE() for install_path
      build: fixed includes paths for CHECK_CODE()
      build: don't install talloc_testsuite and ldbtest
      build: don't install the heimdal compilers
      build: install samba in sbin
      build: added --enable-gccdeps option
      build: tool to find missing install components
      build: check for pam headers
      build: conditionally enable inotify
      build: spelling fix, and syntax highlighting fix
      build: don't assume bash in configure.waf
      build: added WORDS_BIGENDIAN test
      build: gccdeps fixes from ita
      build: also need to put stripped CC in conf.env
      build: fixed REPLACE_GETPASS
      build: check libc first for several libraries
      build: don't add curses.h to incremental confdefs.h
      build: more non-incremental headers
      build: these cause problems incrementally too
      build: don't look for gettext twice
      build: cope with multiple checks for the same function/library
      build: cope with multiple libs in CHECK_FUNCS_IN()
      build: ensure all libs in CHECK_FUNCS_IN() get a target type
      build: lib needs to take a list when more than 1
      build: inet_n*() are normally in libc
      build: libreplace now depends on nsl and socket
      build: compile_et needs lib/com_err includes
      build: cope with double check for functions
      build: more functions that are in -lsocket -lnsl on some systems
      build: CONFIG_SET() takes conf argument
      build: more careful library list handling
      build: fixed check for pthread_create()
      build: fixed gnutls check
      build: don't use gcc warnings during configure
      build: if a library is found, but not the fn, still define the library
      build: fixed ifaddrs.h for heimdal (from template)
      build: tevent_epoll.c is conditional on HAVE_EPOLL
      build: 'makefile' (lowercase) is now a generated file
      build: cope with subsystems with no enabled modules
      build: removed testing cflags
      build: support systems without rpath
      build: fixed issue with CC="ccache cc" on solaris
      build: fixed libcli/ndr_netlogon.c dependency rules
      build: commented the missing subsystems
      build: optimise and re-enable check_duplicate_sources
      build: added --disable-shared option
      build: enable real cacheing with waf configure -C
      build: fixed build of heimdal/lib/roken/err.h
      build: rkpty should not directly include socket_wrapper.c
      build: more complete implementation of waf configure -C
      build: check if a simple C program runs
      build: added etags and ctags make targets
      build: mark wafsamba as unbuffered, so stdout and stderr are better in sync
      build: don't use double binaries/libs if not needed
      build: fixed handling of full dependencies for --disable-shared
      build: expand indirect syslibs after loop unrolling
      build: sun c compiler wants a newline
      build: python 2.4 doesn't support multiple union arguments for sets
      build: added CHECK_C_PROTOTYPE() configure function
      build: added checks for solaris getXXent_r() functions
      build: fixed prototype test
      build: rewrote the autoconf-like macros to be more consistent
      build: updated configure checks or new syntax
      build: fixed headers for C prototype check
      build: added --with-selftest-prefix
      build: socklen_t is in sys/socket.h
      build: configure fixes for opensolaris
      build: finer grained rpath checking for binary/install
      build: add additional libreplace conditional sources
      build: sys_lease_linux needs to be conditionally enabled
      build: setnttoken depends on libreplace
      build: test all the developer cflags before adding them
      build: add cflags from pkg_config results to header/function tests
      build: added msg argument to CHECK_TYPE()
      build: use shell=True for SAMBA_GENERATOR
      s3-waf: added build subdir for dynconfig generation
      s3-waf: more configure tests and minor fixes
      s3-waf: the start of the main build for s3
      build: use gzip for waf packing, to try to make it work on irix
      build: split out the base waf rules into buildtools/wafsamba/wscript
      build: fixed the cflags for pkg_config libs
      build: honor both --enable-gnutls and --disable-gnutls
      build: need to mark disabled libraries as DISABLED
      build: cope with systems that don't have md5 in python
      s4-waf: don't hardcode python path
      s4-waf: disable_gnutls is gone
      build: fixed case of system library deps
      build: a few more build rules that should have on_results=True
      s4-waf: remove the need for some of the lib aliases
      build: attempt to fix md5 problem on solaris8
      build: need to set h_file on Utils
      build: we need to replace md5 in Task as well
      build: old versions of perl don't understand the -W option
      build: honor existing LD_LIBRARY_PATH settings when adding shared lib paths
      build: solaris8 doesn't honor the -f flag to ln.
      s4-waf: replace stdint.h and stdbool.h on systems that don't have them
      s4-waf: update torture for new ndr/drsblobs.c tests
      s3-waf: modulesdir is in the base set of options now
      build: support variable expansion in source= arguments to build rules
      s3-waf: use new variable expansion feature
      build: started a library of common config tests for s3/s4
      build: a better way of calculating syslib dependencies
      build: much better rpath test function
      build: improved exception handling for systems without rpath
      build: fixed copy_script typo
      s4-waf: cope with systems with zlib versions that are too old
      s4-waf: another place where broken ln -f on solaris8 matters
      s4-waf: added checks for all the different statvfs varients
      s4-waf: look for libiconv before checking libc
      libreplace: add a replacement for strerror_r (needed on solaris8)
      s4-waf: added rap/rpc.c
      s4-waf: fdatasync is in librt on solaris8
      s3-waf: fixed tests for charsets
      build: added quote option to conf.DEFINE()
      s3-waf: charsets needs to be quoted as strings in config.h
      s3-waf: build version.h
      s3-waf: added options for static/shared module building
      build: these chdir() calls break waf on HPUX. They are not needed
      build: fixed EXPAND_VARIABLES() for env expansion
      s4-waf: started adding auto-install of include files
      s4-waf: forgot these files
      s4-waf: test/simple.c is not needed any more
      s4-waf: set CONFIG_H variable for selftest
      build: support wildcard mappings for header_path
      s4-waf: install the rest of the headers
      s4-waf: install pidl
      build: install build python modules correctly
      build: support wildcard excludes in INSTALL_WILDCARD()
      s4-waf: install the rest of our python files
      s4-waf: install PIDL modules
      build: only depend on the actual pidl source files in the pidl rule
      build: a hack to get perl to put its generated blib files in the build directory
      s4-waf: build and install the PIDL manpages
      s4-waf: only build the pidl manpages if we have MakeMaker.pm
      build: added support for pc_files= for pkgconfig files
      s4-waf: enable the pc_files in the build rules
      s4-waf: enable the configuration and options for pidl
      build: fixed destination name for pc_files
      s4-waf: install dcerpc_atsvc.pc
      build: fixed the python path in installed python scripts
      build: substitute @VAR@ variables in pkgconfig .pc.in files
      s4-waf: move the gnu dirs check to the generic wafsamba code
      build: throw an error on all bad variable substitutions
      s4-waf: ensure all the ldb.pc.in vars are set
      build: mark python rules as being part of the "main" group
      s4-waf: mark the wscript files as python so vim/emacs knows how to highlight them
      build: fixed build group for the PIDL tables generation
      build: add an ls -lR blib/ to the pidl build to help debug things in the build farm
      ldb-waf: rename libldb.so to libldb-s4.so if built as part of s4
      build: added support for controlling library types
      s4-waf: set the bundled library extension for some libs
      s4-waf: don't auto-include bundled library headers
      build: better waf test script
      build: better control over bundled library extensions
      s4-waf: set default for bundled libraries
      s4-waf: fixed some deps now we don't auto-include tevent and replace
      s4-waf: we need a recent version of perls MakeMaker module
      s4-waf: support the use of system libraries
      s4-waf: cleanup use of LIBPOPT vs popt dependency
      s4-waf: cleaned up tevent dependency
      build: only add -fPIC if it is supported
      build: auto-detect platforms which don't support shared libs
      s4-waf: more dependencies on talloc
      s4-waf: change bundled extension to 'samba4'
      waf-pidl: don't need this debug ls any more
      s4-waf: merge in the latest changes from master
      build: fixed popt subsystem on systems without popt
      build: work around missing defaults from gnu_dirs.py
      s4-waf: added libreplace dep for the conditional heimdal modules
      s4-waf: fixed dirfd() detection for heimdal
      s4-waf: added auto-detection of perl manpage extensions
      s4-waf: more places missing libreplace
      s4-waf: sys_lease depends on talloc
      build: tidy up the wafsamba rules a bit
      s4-waf: heimdal wants to look for dd_fd in DIR
      s4-waf: get the sense of the tests for the HAVE_INET_* replacements right
      s4-waf: ensure we don't end up with mixed versions of talloc/tdb/tevent
      build: move waf into buildtools/bin
      build: use 'Compiling foo.c' and 'Linking foo' like old build system
      build: fixed progress display
      pidl-waf: re-enable the pidl man pages
      build: reuse SAMBA_LIBRARY() to build python modules
      build: override PACKAGE_VERSION in pkg-config generation for libraries
      build: nicer progress display for a standard build
      s4-waf: added pydoctor and wafdocs targets
      build: added pattern option for recursive_dirlist
      ldb-waf: ldb needs HAVE_CONFIG_H for building a bundled popt
      build: fixed missing nodes display on errors
      talloc-waf: don't build the talloc testsuite in s4
      build: fixed the on_results problem with SAMBA_AUTOPROTO()
      s4-waf: added --enable-fhs configure option
      s4-waf: updated for new perl subunit options and filter name
      s4-waf: added rules for rebuilding the yapp parser in pidl
      s4-waf: removed the AUTOGENERATED markers
      s4-waf: install in /usr/local/samba by default
      s4-waf: added implied_deps for system libraries
      build: fixed a configure error with a totally clean tree
      s4-waf: don't assume perl takes -W option
      s4-waf: use the versions of perl/python found by configure
      build: removed debug line
      build: new waf version with local patches replaced by upstream changes
      s4-waf: show the fully expanded test command
      build: tweak the strategy for finding functions
      s4-waf: added a --enable-selftest option as a shortcut
      s4-waf: added test for dlopen prototype
      build: don't link when checking a C prototype
      build: added functions for compound configuration testing
      build: fixed install target for systems with rpath disabled
      build: expand indirect includes to fix disable-shared build
      s4-waf: add getaddrinfo.c replacement if needed
      s4-waf: look in libintl for dgettext()
      s4-waf: fixed some of the group ordering
      build: add require_headers option to CHECK_BUNDLED_SYSTEM()
      build: python libs need to be built shared, regardless of --disable-shared
      build: add python library object reduction
      build: finally got LIBRARY<->LIBRARY reductions working
      s4-waf: we don't need strerror_r from roken
      build: don't define vars in config.h for CONFIG_PATH()
      build: sys.exit is better than raise here
      s4-waf: use cflags for LDB_MODULESDIR
      s4-waf: remove PYTHONDIR from config.h
      build: refactor the object reduction code
      build: enable 'nothreads' when JOBS=1
      s4-waf: set JOBS=1 during configure.waf
      build: fixed the task counter when nothreads is used
      s4-waf: disable MAKEMAKER until a dependency problem is solved
      build: fixed the dependencies of the install targets
      build: enable nothreads workaround only with WAF_NOTHREADS=1
      build: only link install targets at install time
      build: much simpler and faster rpath install handler
      s4-waf: updates for the new python installer from jelmer
      s4-waf: filter-subunit has been renamed
      s4-waf: added new install system for external python libs
      s4-waf: format-subunit and filter-subunit are in python now
      build: a bit more information for tracking --target deps
      s4-waf: fixed install location of external python libs
      s4-waf: create a blank __init__.py in samba/external
      build: nicer display of command type for prototypes and generators
      build: make sure the directory exists in TOUCH_FILE()
      build: loop until all object reductions are complete
      talloc-waf: match version number with main build
      build: don't depend on the blib/ files in SAMBA_PIDL()
      pidl-waf: build pidl man pages and parsers separately
      pidl-waf: better handling of the man page generation
      pidl-waf: disable pidl manpages
      build: initial version of a tru64 compiler module
      build: added 'generic' cc support and a simple irix cc support module
      build: update wav-svn
      build: try the generic C compiler on hpux if gcc not found
      build: use waf from waf-svn.git repo
      build: try to fix the python link problem on SerNet-imini
      build: waf update to fix macos build error
      build: fixed DESTDIR for TOUCH_FILE()
      build: fixed the expansions in pkgconfig files
      talloc-waf: install talloc.pc if standalone
      build: removed some unused imports found by pyflakes
      s4-waf: added 'waf dist' to build the tarball
      s4-waf: added 'waf dist' to our standalone libs as well
      s4-waf: allow standalone tarball build of libraries
      build: nicer error msg when git ls-files fails
      s4-waf: avoid having to run waf configure before waf dist
      ldb-waf: fixed buildtools path
      s4-waf: fixed finding of buildtools and srcdir
      s4-waf: move to a universal method of recursing into subdirs
      s4-waf: use a common pattern for finding buildtools and libs
      s4-waf: new autogen-waf.sh
      s4-waf: autogen-waf.sh for the standalone library builds
      build: fixed LOAD_ENVIRONMENT for out of tree builds
      s4-waf: added python_dsdb from merge with master
      s4-waf: added simple 'waf test' support for tdb, talloc and ldb
      s4-waf: fixed waf distcheck for our standalone libs and s4
      build: simpler symlink_bin and symlink_lib methods
      s4-waf: replace TOUCH_FILE() with normal install rules
      build: update version of waf to add subdir argument to distcheck
      s4-waf: add subdir argument to distcheck for source4
      build: run distcheck in testwaf.sh
      s4-waf: don't need TOUCH_FILE() any more
      build: cope with binaries with subdir prefixes (for s3 waf build)
      build: use a target_in_list() function for more flexible builtin control
      s4-build: remove any 'makefile' that may have been left by the waf build
      build: make the handling of relative paths a bit saner
      build: the exceptions here are not useful
      build: we need this isinstance() check for distcheck
      build: added --picky-developer and --fatal-errors
      build: no need to re-create the lib and bin symlinks if they exist
      s4-waf: added --gdbtest option for waf test
      build: nicer error message on missing file in waf dist
      build: use Logs.error() and Logs.info() instead of print()
      s4-waf: only enable the python uuid module if python <= 2.4
      build: added --minimum-library-version configure option
      build: cope with symlinks between build components in waf dist
      build: use a common autogen-waf.sh for all builds
      s4-waf: move the KRB5_DEPRECATED check into lib/replace
      build: allow target upgrades from EMPTY to SYSLIB
      s4-ldb: fixed a crash bug for non-UTF8 strings
      build: added cross-compilation configure options
      s4-ldb: enable waf build of ldb without ldap backend
      build: cope with existing binaries in bin/ left over from the old build
      build: fixed a typo that prevented --bundled-libraries from working correctly
      build: check the type of implied dependencies
      s4-tevent: up tevent version number
      build: allow cross-builds to use shared libraries
      build: cope with spaces in options passed to ./configure
      build: added autoconf compatible configure options
      talloc-waf: added the manpage generation and talloc1-compat generation
      build: for unbundled libraries install devel link too
      talloc-waf: the talloc1-compat lib depends on talloc
      tdb-waf: added build of manpages and config options for RPM build
      tevent-waf: added man page and pkgconfig file
      s4-waf: don't try to use the system lib for the library build
      s4: prevent the autoconf build from removing source4/librpc/gen_ndr/README
      build: try to honor MAKEFLAGS from make
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      build: check that the user is not using an old /usr/bin/waf
      build: make the 'wrong version of waf' message even clearer
      build: ensure we don't recreate library loops in expansions
      s4-waf: removed a duplicate declaration of python_netbios
      build: throw a fatal error for duplicate target declarations
      s4-test: check that a weak password is rejected by kpasswd
      s4-test: added KRB5_CONFIG to selftest-vars.sh
      s4-net: nicer error message (and no exception)
      s4-net: allow a username to be displayed in setpassword errors
      s4-rpc: fixed the build with the old build system
      build: added a script for generating ABI signatures from shared libraries
      build: added ABI checking to the WAF build
      s4-waf: put the --xxx-wrapper options in 'developer options' group
      libreplace: added _PUBLIC_ and _PRIVATE_ to replace.h
      replace-waf: hide symbols in libreplace if a builtin library
      talloc-waf: added ABI checking for talloc
      talloc: mark public functions as _PUBLIC_
      tdb-waf: added ABI checking for tdb
      tevent: mark backend init fns as _PRIVATE_
      tevent-waf: enabled ABI checking in tevent
      ldb: mark the tdb backend in ldb as _PRIVATE_
      ldb-waf: enable ABI checking in ldb
      build: added abi type maps for _Bool and __va_list_tag
      s4-waf: rebuild signature files with the api type maps
      build: don't depend on the word size of nm output
      build: added abi_type_maps for FC12 struct va_list
      build: more adjustments for the ABI type name maps
      build: support make V=1 for verbose build
      build: fixed install of binary targets that are in subdirs
      s4-waf: removed the unused installdir= option to SAMBA_BINARY()
      build: cope with perl not being in /usr/bin/perl
      build: more dependencies on /usr/bin/perl -> ${PERL}
      build: expanded testwaf to include cross-compiling and python versions
      build: fixed a python-3 indent error
      s4-python: PyErr_SetString() will crash on NULL strings
      s4-dev: expanded selftest-vars.sh to match current testenv
      build: added --cross-answers support
      runcmd: use tevent_re_initialise() to close sockets
      s4-param: set SMB_CONF_PATH when we load a smb.conf
      s4-dns: use neater python for reading lines
      s4-test: we don't need -s set for samba_dnsupdate
      s4-waf: fixed WINBINDD_SOCKET_DIR for wb_common in s4
      build: make compare_install.sh also check for missing directories
      s4-waf: install some missing empty directories
      build: update waf from svn
      s4-waf: follow the configure directories for the empty install dirs
      build: allow "waf --abi-check" to force a re-check of the ABI
      build: quote cross-answer strings
      build: include uninitialised data in the ABI symbols
      tdb: update tdb ABI to use hide_symbols=True
      talloc: there is no ambiguity when freeing a ptr with a null parent
      pytalloc: ensure talloc_ctx is directly after PyObject_HEAD
      s4-dynconfig: added dyn_PYTHONDIR
      s4-python: added PYTHONDIR to python search path
      s4-net: show a list of commands when someone runs "net" with no arguments
      s4-net: don't show a full python exception when you can't open sam.ldb
      util-runcmd: ignore spurious ECHILD errors
      build: added uname display and SYSTEM_UNAME define
      s4-netlogon: fixed dc_unc and dc_address_type
      s4-pynet: accept None for target_dir in vampire
      s4-devel: allow extra net command line options and gdb
      s4-python: accept --option arguments in python cmdline parsing
      s4-schema: allow revision numbers of zero
      s4-provision: set "setup_dir" to the right path
      s4-python: added --realm option to python scripts
      s4-waf: create the smbd.tmp/messaging directory
      s4-provision: cope with --realm being in getopt.py
      s4-drs: accept zero revision in drs selftest
      s4-upgradeprovision: fixed --realm option duplicate in upgrade_from_s3
      build: fixed uname output to be on target machine when cross compiling
      s4-server: show build host in samba -b output
      waftest: updated the cross compilation environment I test with
      build: make python development headers not mandatory in standalone libs
      s4-waf: python devel headers are mandatory for the source4 build
      build: added --nonshared-binary=LIST option
      build: recalculate project deps when NONSHARED_BINARIES changes
      build: added --enable-auto-reconfigure
      s4-dsdb: moved rodc schema validation to samldb.c
      build: we don't need this makefile magic any more
      s4-dsdb: added dsdb_get_extended_dn_sid()
      s4-dsdb: added dsdb_validate_invocation_id()
      s4-dsdb: removed an unused variable
      s4-drs: only allow replication with the right invocationId
      s4-drs: removed dsdb_validate_client_flags()
      s4-libnet: fixed two compiler warnings
      s4-torture: fixed a initialiser
      s4-net: fixed two compiler warnings
      s4-drs: added new SECURITY_RO_DOMAIN_CONTROLLER level
      s4-drs: validate RODC credentials via the user_sid
      s4-cldap: we should set the w2k8 flags even if not the PDC emulator
      build: use 'waf distclean' for make distclean
      build: give a more useful error when the source dir has moved
      build: cope with duplicates in source lists
      build: use option_group() not add_option_group()
      build: a library is only empty if it has no deps
      build: normalise paths in unique source checking
      s4-heimdalbuild: remove LIBNETIF dependency from HEIMDAL_GSSAPI
      build: automatically run autogen-waf.sh when needed
      s4-drs: make links to foreign partitions non-fatal
      build: cope with realname for install of non-python libs
      s4-drepl: don't send an UpdateRefs unless its a plain replication
      s4-drs: don't send uninstantiated objects in getncchanges
      s4-drs: allow getncchanges requests to non WRIT_REP partitions for extended ops
      s4-ddb: don't create partitions with the UNINSTANT flag set
      s4-repl: don't delete repsTo entry on DsReplicaSync
      s4-repl: end repl request when not doing an UpdateRefs
      s4-repl: on a failed request, clear the current ptr
      s4-repl: these messages are common, and don't deserve debug level 1
      s4-getncchanges: honor DRSUAPI_DRS_REF_GCSPN
      s4-drepl: don't setup a repsFrom from a DC that isn't a master for a NC
      s4-drs: add entries to repsTo based on calculated repsFrom
      s4-dns: fixed dc.dc duplication in DNS update list
      s4-repl: added a workaround for WERR_DS_DRA_NO_REPLICA DsReplicaSync errors
      s4-vampire: show main CLDAP response attributes during vampire
      s4-drsdevel: support sites in drs developer scripts
      s4-netlogon: fixed breakage of dcesrv_netr_GetAnyDCName in sites patch
      s4-libnet: cope with an empty client site name from CLDAP
      s4-dns: cope better with comments in dns_update_list
      s4-dns: explain what the file is for
      s4-dsdb: added samba_spnupdate
      s4-param: added a "spn update command" option
      s4-dns: call spn update command alongside dns update
      s4-dns: install samba_spnupdate
      s4-provision: setup spn_update_list in provision
      s4-test: make spnupdate work without make install
      s4-torture: not all platforms have defines like AF_AX25
      s4-netlogon: fixed getDcNameEx2 for blank inputs
      build: added enabled=True/False option to SAMBA_BINARY()
      s4-waf: added --enable-build-farm configure option
      s4-idl: added generated files from rap.idl
      idl: we only need ndr_rap.[ch] and rap.h
      s4-ldb: use a parent context in the ldb utils
      build: uname on opensolaris returns 1 for success
      s4-waf: switch Samba4 over to the waf build by default
      s4-waf: fixed symlink path for autogen.sh
      build: fix for combined configure/build in one command
      build: added a check for group ordering within target dependencies
      s4-waf: fixed target group for SOCKET_WRAPPER
      build: use the waf patterns for RPATH
      build: allow use of target names as commands in waf
      s4-script: added a --waf option to minimal_includes.pl
      s4-waf: fixed indentation for python 3.1
      build: fixed wildcard handling for python 3.x
      build: enable python 3.0 and 3.1 in testwaf.sh
      idl: removed the generated gen_ndr/ files from pidl
      s3-idl: removed gen_ndr files from source3/ as well
      .gitignore: simplify the .gitignore after gen_ndr removal
      s4-waf: we don't need the symlink hack for gen_ndr any more
      s3-idl: auto-build IDL files in Samba3
      s3-idl: rebuild IDL files based on all outputs
      s3-idl: update the 2nd build_idl.sh script
      s4-ldb: add msg saying which build system is being used
      build: exit with an error if waf configure fails
      build: mark cloned task generators as not posted
      build: added a distcheck target
      build: use the wrapper commands in testwaf.sh
      build: update version of waf
      build: added configure test for inline
      s3-build: don't rebuild/link on every make run
      s4-ldb: check for ldap_initialize
      build: added a reconfigure target
      s4-devel: a useful script for giving DRS replication demos
      s4-devel: auto-delete any leftover IPs
      build: treat a blank --build or --host as not a cross-compile
      build: fixed pc file variable substitution
      s4-devel: a very useful script when dealing with library/linking issues
      s4-dynconfig: make dynconfig more compatible with s3
      s3compat: use right variable for STATEDIR
      s3-waf: All sorts of nasty hacks to finally get smbd to build/link
      s3-waf: correctly handle cups dependencies when cups development packages are not installed
      s3-waf: correctly handle the libcap dependency when libcap is not installed
      s3-waf: Add enable selftest configuration option
      s3-waf: move the KRB5_DEPRECATED check into lib/replace
      s3-waf: merged auth subsystem changes from master
      s3-waf: fixed SWATDIR to match old build
      s3-waf: fixed install path for sbin binaries
      s3-waf: install swat files
      build: get the SONAME right for installed libraries
      s4-python: python is not always in /usr/bin
      build: check if the manpages stylesheet is available locally
      s4-ldb: use CHECK_XSLTPROC_MANPAGES()
      build: allow always=True/False on SAMBA_GENERATOR()
      build: allow LOAD_ENVIRONMENT() to pass when no configure has been run
      build: only use git when found by configure
      s4-dsdb: fixed spelling of supportedSASLMechanisms
      s4-dsdb: fixed use after free of sasl mechanisms opaque
      s4-ldb: fixed the parsing of references in the openldap backend
      s4-ldb: fixed error handling in openldap backend
      s4-ldb: added ldb_options_find()
      s4-ldb: added support for simple binds on ldb_ldap backend
      s4-ldb: added ldb_error() and ldb_operr()
      s4-dsdb: use ldb_operr() in the dsdb code
      s4-net: the net binary depends on the auth subsystem
      s4-loadparm: change lp_*() to lpcfg_*() and provide s3 compatibility lp_*()
      s4-loadparm: 2nd half of lp_ to lpcfg_ conversion
      waf-idl: put the gen_ndr/README file for source3 back
      waf: make the error msg when gen_ndr directory is missing clearer
      lib: added samba-util.pc creation
      dns: first version of dsnRecord parser
      s4-ldb: added ldif handler for the dnsRecord attribute
      pidl: added a new type dnsp_name
      s4-dns: expanded the DNSP code to handle more record type
      s4-dns: fix dnsp for old build
      s4-dns: ndr_dnsp helper functions
      s3-printing: cope with missing printers in print migration
      s4-build: use @PACKAGE_VERSION@ in s4 pc.in files
      dnsp: dnsp_name is 2 byte aligned
      ndr: allow ndr_print to print DATA_BLOB
      s4-build: fixed library name in dcerpc_server.pc.in
      waf: enable gccdeps in developer mode
      s4-ldb: add some comments explaining the ltdb_index_idxptr() function
      s4-ldb: fixed the ldb 'displayName=a,b' indexing bug
      s3-provision: cope with the policy directory already existing
      s4-ldb: test the 'displayName=a,b' bug
      s4-ldap: use common functions for ldap flag controls encode/decode
      s4-dsdb: added support for LDB_CONTROL_RODC_DCPROMO_OID
      s4-ldapserver: support controls on ldap add and rename
      s4-dsdb: fixed test for LDB_CONTROL_RODC_DCPROMO_OID
      s4-dsdb: support LDB_CONTROL_RODC_DCPROMO_OID for nTDSDSA add
      s4-ldb: use LDB_FLAG_MOD_TYPE() to extract element type from messages
      s4-ldb: added LDB_FLAG_INTERNAL_MASK
      s4-ldb: added LDB_FLAG_INTERNAL_DISABLE_VALIDATION
      s4-dsdb: set LDB_FLAG_INTERNAL_DISABLE_VALIDATION for msDS-SecondaryKrbTgtNumber
      s4-dsdb: cope with cracknames of form dnsdomain\account
      s4-dsdb: added support for UF_PARTIAL_SECRETS_ACCOUNT
      s4-drs: fixed check for SECURITY_RO_DOMAIN_CONTROLLER
      s4-drs: added domain_sid to DRS security checks
      s4-drs: allow getncchanges from RODC with WRIT_REP set
      s4-dsdb: check the type of session_info from the opaque
      s4-net: use an encrypted ldap session when setting passwords
      s4-netlogon: added SEC_CHAN_RODC
      s4-rpcserver: log unknown RPC calls at debug level 3
      s4-ldbwrap: ensure session_info in ldb opaque remains valid
      s4-ldb: ensure element flags are zero in ldb search return
      s4-drs: added sam_ctx_system on DRS bind state
      s4-drs: implement RODC attribute filtering override
      idl: added the RODC allow/deny secrets RIDs
      s4-dsdb: fixed dsdb_get_extended_dn_sid()
      s4-drs: bring us much closer to the docs for DRS secret replication
      s4-drs: fixed the error code for EXOP_REPL_SECRET getncchanges calls
      s4-ldb: added support for rodc_control in ldb
      s4-pysamdb: fixed get_domain_sid()
      s4-dsdb: the RODC_JOIN control also changes samAccountName
      pidl: added a __ndr_print__() method on python NDR objects
      pidl: cope with bad type conversions in unions
      pidl: give the varible name for bad type in python calls
      pyldb: do type checking on the list form of ldb add
      librpc: add python bindings for the netlogon pipe
      s4-net: better error message on net setpassword
      s4-waf: re-use SAMBA_LIBRARY() in building shared modules
      libreplace: fixed the strptime() waf test
      pidl-python: fixed the docstrings for ndr_print, ndr_pack and ndr_unpack
      s4-python: added ndr_print() method in ndr
      s4-libnet: added join type constants to python interface
      s4-net: moved the net join command to python
      s4-libnet: show the DN when DsAddEntry() fails
      s4-libnet: split libnet_Vampire() into two parts
      libnet-s4: added replicate() command in pynet
      s4-net: added initial implemention of RODC join
      s4-drs: removed the warning on WRIT_REP being set
      s4-drs: show the user sid that does the GetNCChanges call
      s4-net: role should be case insensitive for join
      s4-event: event_context_find() should use s4_event_context_init()
      s4-pyregistry: use s4_event_context_init()
      s4-pyrpc: use s4_event_context_init()
      s4-devel: added a getncchanges developer script
      idl-nbt: fixed typo
      s4-libnet: added libnet_vampire_replicate_init()
      s4-pynet: added replicate_init() and replicate_chunk() calls
      s4-rodc: next step in RODC join code
      s4-dsdb: added get_attid_from_lDAPDisplayName() on samdb
      s4-dsdb: add more DS flags to the dsdb module
      s4-rodc: added REPL_SECRET exop replication of accounts
      s4-rodc: broke up RODC join into separate functions
      s4-dsdb: make more of the UF_* flags available on pydsdb
      s4-pytalloc: use better names for python talloc objects
      s4-repl: load RODC partitions using msDS-hasFullReplicaNCs
      s4-pyglue: added talloc_report_full() and talloc_enable_null_tracking()
      s4-rodc: setup secrets database at end of RODC join
      s4-pyglue: pyglue now depends on pytalloc
      pytalloc: fixed py_talloc_steal()
      s4-python: reference substructures onto the parent structure
      s4-rodc: removed python memory workaround
      s4-pyglue: added talloc_total_blocks() python call
      s4-pyrpc: added a test for talloc behaviour in pidl python code
      s4-pynet: some systems don't have Py_TYPE()
      s4-pyrpc: convert rpc_talloc.py test to unittest framework
      s4-drs: split out drs utility python functions
      s4-net: added "net rodc preload" command
      s4-net: fixed docstring on spn command
      s4-devel: added enumprivs developer script
      pidl-python: ensure we allocate ref ptrs before use
      s4-pynet: pynet depends on pyrpc_util
      s4-net: use CommandError() in net rodc
      pytalloc: treat a NULL ptr as Py_None
      pidl-python: cope with NULL pointers in more places
      pynet: fixed ref count error on Py_None
      doc: patched bind9 is no longer needed
      pidl: cope with dom_sid28 in python generator
      s4-pidl: added a test for all generated rpc interfaces
      s4-resolve: add a default domain for unqualified names in file backend
      s4-selftest: try DNS before bcast in selftest
      s4-auth: make the disabled acct messages a bit less verbose
      s4-resolve: added resolve_name_ex_send()
      s3-param: added lp_set_cmdline() and --option= parameter
      util: added samba_start_debugger()
      waf: fixed make test with TESTS="test1 test2"
      selftest: run client tests with log level 1
      torture-lsa: cope with STATUS_SOME_UNMAPPED errors
      s4-process: fixed the thread process model so it compiles
      s4-packet: make packet_recv_disable() a lot more efficient
      s4-ldapserver: serialise ldap server operations
      waf-abi: fixed small uninitialised data on PPC64
      librpc: bitten by the strncasecmp define again
      s4-rodc: s->schema need initialisation
      s4-pydsdb: expose samdb_partitions_dn() as get_partitions_dn() in python
      s4-provision: fixed error format string
      pyldb: expose PyLdbDn_FromDn()
      s4-rodc: get the domain name from the partitions DN
      s4-test: added a RODC to our testing
      s4-test: added a RODC test using rpcecho
      s4-rodc: cope with missing searchFlags
      s4-fsmo: update FSMO changes for recent IRPC work
      privileges: privilege luids are not all below 64
      s4-lsa: privilege IDs should use the enum, not an int
      s3-privileges: add handling of both old and new formats in database
      s4-credentials: get all attributes in cli_credentials_set_secrets()
      s4-param: move back to auto-generation of loadparm prototypes
      s4-param: removed the lp_ varients of the functions
      winbind-waf: the installed name is libnss_winbind.so.2
      nss-waf: use the right winbind pipe path
      s4-anr: check for allocation failure before use
      s4-dsdb: defer ac->msg after check for NULL ac
      s4-dsdb: free right context on failure
      s4-dsdb: fixed use after free for RODC
      s4-rootdse: setup length after NULL check
      s4-dsdb: check for invalid backend type
      s4-smb: smbsrv_blob_push_string() can return -1
      s4-kcc: removed redundent loop check
      s4-messaging: add support for no_reply in irpc messages
      s4-rodc: add a trigger message for REPL_SECRET to auth_sam
      talloc: fixed spelling errors in comment
      s4-smb: serialise session setup operations
      s4-auth: allow multiple active auth backends
      s4-schannel: fixed reference to context after free
      s4-auth: set the RODC bit for RODC schannel
      s4-auth: when we are a DC enable winbind auth
      s4-secrets: fetch secure channel type with domain SID
      s4-libnet: converted finddcs call to tevent_req
      s4: fixed some printf format errors
      s4-dns: fixed lookup of SRV records using dns_ex
      s4-resolve: added resolve_name_multiple_recv()
      cldap: use ipv4 not up for unbound cldap sockets
      s4-secrets: fixed shadowed variable warning
      s4-finddcs: added finddcs_cldap()
      s4-cldap: don't set the writable bit when we are a RODC
      s4-libnet: use finddcs_cldap() in libnet_lookup
      s4-winbind: use finddcs_cldap() in winbind
      s4-finddcs: rename finddcs to finddcs_nbt
      s4-libcli: change finddcs.h -> finddc.h
      s4-pynet: added finddc call
      s4-rodc: use python finddc code to avoid the need for --server
      s4-join: give a clear error when using short domain form
      s4-selftest: use the full domain name in joins
      s4-finddc: use NBT lookup for a 1C name if joining a short domain name
      s4-netlogon: fixed logic for setting DS_SERVER_WRITABLE
      s4-repl: use consistent API calls for getting DN GUID
      s4-finddcs: show required server type bits on failure
      s4-resolve: the file backend should not look at the name type
      s4-libnet: force IDL printing for high debug levels
      s4-libnet: print the domain name on domain open failure
      tsocket: we return -1 on error, not fd
      s4-rpc: fixed double free in RPC proxy
      s4-selftest: enable logging in valgrind server xterm
      s4-finddcs: ensure we free previous cldap requests before starting a new one
      s4-server: check the return of irpc_binding_handle_by_name
      cldap: prevent crashes when freeing cldap socket
      s4-rpcserver: set unbind method to NULL in remote server
      s4-repl: cleanup getncchanges extended op calls
      s4-repl: split out the extended op handling
      s4-pyrpc: added py_return_ndr_struct()
      s4-drs: get lpcfg_dnsdomain() instead of lpcfg_realm()
      s4-pyjoin: fill in the dns name in the python replication method
      s4-pynet: return the full netlogon response from python finddc
      s4-pyjoin: use new pynet finddc interface
      s4-repl: cleanup the extended op calls in repl server
      s4-repl: added repl_secret handling
      s4-repl: added min_usn to extended replication call
      s4-repl: add partial attribute set to getncchanges calls for RODCs
      s4-repl: if we are an RODC don't set WRIT_REP in replication
      s4-pydrs: fix for python 2.4
      s4-test: enable valgrind on wbinfo tests
      s4-drs: removed a debug print in repl secret
      s4-drs: initial skeleton for DrsReplica{Add,Del,Mod} calls
      s4-drs: make debugging DsUpdateRefs a bit easier
      s4-credentials: added ability to control forwardable attribute on krb5 tickets
      s4-pycredentials: expose forwardable setting via python
      s4-kerberos: obey the credentials setting for forwardable tickets
      s4-dns: use a non-forwardable ticket in samba_dnsupdate
      pidl: prevent ndr_print_*() dying on NULL pointers
      s4-rpcserver: allow saving of bad RPC packets
      s4-netlogon: added IDL for netr_DsrUpdateReadOnlyServerDnsRecords
      s4-kdc: prevent segfault on bad trust strings
      tdb: added TDB_NO_FSYNC env variable
      wbclient: paranoid check for double free
      wbclient: gr_mem can be NULL
      s4-winbind: fixed two valgrind errors
      idl: build python interfaces for winbind and idmap IDL
      s4-pyrpc: allow python to access irpc interfaces
      s4-devel: developer script for adding DNS entries via netlogon RPC
      s4-pydsdb: don't force am_rodc unless it is set by caller
      s4-pydsdb: added am_rodc() method on samdb
      s4-finddcs: added some debug messages on failure
      s4-rodc: added RODC DNS update support to samba_dnsupdate
      s4-cldap: improved debug msgs in finddcs_cldap()
      s4-libnet: use the right domain name in libnet_lookup
      s4-dns: added --all-names option to samba_dnsupdate
      s4-dns: fixed the dns_domain_info_type for netlogon DNS calls
      s4-rodc: override client site from cldap response
      s4-rootdse: mark registered controls as non-critical
      s4-kcc: a bit more debug info on repsFrom creation
      s4-rodc: fixed repsFrom store on RODC
      s4-pyrpc: fixed build on python 2.4
      s4-drepl: use the partition UDV and hwm for extended getncchanges ops
      s4-kcc: pass the service context into the kcc connection code
      s4-kcc: added service->am_rodc
      s4-gensec: fixed a GSSAPI SASL negotiation bug
      s4-gensec: prevent a double free in the error path of GSSAPI auth
      s4-drs: we don't need to decode to utf8 in python dcerpc strings any more
      s4-gensec: fixed a client side bug in GENSEC/SASL/SSF negotiation
      s4-kcc: the kcc should not be setting the repsTo attribute
      lib-subunit: fixed build on systems without subunit devel library
      torture: fixed a valgrind error in SMB2-CREATE
      s4-repl: use dreplsrv_partition_source_dsa_by_guid to find source dsa
      s4-repl: force on WRIT_REP when we are a writable replica
      s4-repl: use namingContexts from rootDSE to initialise partition list
      s4-pycredentials: avoid a tallloc_free on ref
      s4-repl: don't store repsFrom on DNs other than NC heads
      s4-finddcs: allow override of server IP address
      s4-libnet: added server_address option in libnet context
      s4-pynet: added server keyword to Net() initialisation
      s4-net: added --ipaddress option to net commands
      s4-repl: make getncchanges a bit less verbose
      ldb: added request location tracking
      s4-dsdb: added tagging of requests in dsdb modules
      ldb: mark the location of a lot more ldb requests
      script: added autobuild.py automatic build test script
      autobuild: added --rebase option
      autobuild: added a EDITOR script to mark successful autobuilds
      autobuild: added --rebase-master and --push-master
      autobuild: added --fix-whitespace option
      autobuild: enable ccache
      s4-provision: switch to dns-HOSTNAME instead of dns
      s4-dns: the DNS/${HOSTNAME} SPN should be on the DNS account only
      autobuild: added --retry option
      s4-spn: don't try to do SPN updates as a RODC
      s4-drs: use the system sam_ctx for updaterefs
      idl-pac: add a decoder for the pac info ctr
      s3-selftest: added samba3.posix_s3.rap.printing as a knownfail
      autobuild: fixed detection of master changes
      s4-auth: fixed the SID list for DCs in the PAC
      autobuild: exit immediately if no changes from master
      autobuild: use killbysubdir if available
      s4-provision: fixed the generation of the krb5.conf for vampire
      s4-dns: use the generated krb5.conf in samba_dnsupdate
      s4-gensec: fixed a valgrind error in gensec
      s4-drs: fixed comment in getncchanges code
      s4-ildap: fixed a talloc_steal with references error
      heimdal: avoid DNS search domain expansion
      s4-dns: avoid search domains expansion in DNS resolver
      s4-drs: make getncchanges debug less verbose
      s4-kcc: don't print "Testing kcctpl_create_intersite_connections"
      s4-ildap: two more places that need talloc_reparent()
      s4-auth: removed unused variable dom_sid
      s4-dsdb: added samdb_find_site_for_computer() and samdb_find_ntdsguid_for_computer()
      s4-kcc: fixed a incorrect context to kcctpl_get_all_bridgehead_dcs
      s4-ldb: removed an unused variable
      s4-kdc: added ifdef guards in kdc.h
      pidl: added ifdef guards around ndr headers
      s4-dns: added --update-list option to samba_dnsupdate
      s4-netlogon: added RODC DNS update call fwded to dnsupdate task
      s4-dns: implemented RODC DNS update in dns update task
      s4-provision: fixed the authority response for our SOA record
      filter-subunit: added a --fail-immediately option
      s4-selftest: added a --fail-immediately option to s4 test
      waf: we don't need the preprocessor recursion limit any more
      s4-drs: moved the drs_ObjectIdentifier handling to dsdb_dn.c
      s4-drs: use drs_ObjectIdentifier_*() calls in getncchanges
      ldb-tdb: ignore failure to register control on rootdse
      s4-drs: added support for DRSUAPI_EXOP_REPL_OBJ
      selftest: enable FAIL_IMMEDIATELY in autobuild make test
      autobuild: use git notes for autobuild messages
      ldb-dn: don't crash on NULL in ldb_binary_encode_string()
      s4-sam: fixed termination of krbtgt_attrs (comma and NULL)
      heimdal: fixed timegm UTC/GMT bug
      s4-kdc: RODC DCs should be able to produce forwardable tickets
      s4-provision: simplify our generated krb5.conf
      s4-kerberos: use TZ=GMT when we are invoking krb5 code in helpers
      s4-drsutils: expose DsBind() call in drs_utils.py
      s4-spnupdate: when we are a RODC we need to use the WriteSPN DRS call
      libds: added more UF_ -> ACB_ flags mappings
      s4-sam: added DOMAIN_RID_ENTERPRISE_READONLY_DCS for RODCs in the PAC
      util: added BINARY_ARRAY_SEARCH_V()
      s4-drs: added drs_security_access_check_nc_root()
      s4-drs: implement PAS checks and access checks for getncchanges
      s4-devel: added new options to getncchanges script
      s4-samldb: also set a password on the krbtgt_NNNN account
      s4-dns: send A record updates via TKEY
      idl-drsuapi: fixed another replica_flags that should use the bitmap
      s4-kcc: fixed the replica_flags in repsFrom in the kcc
      s4-drepl: fixed the checking of replica_flags in the drepl server
      s4-drepl: don't call UpdateRefs on a RODC
      s4-drs: added support for level 10 of getncchanges
      autobuild: fixed exit status
      autobuild: added much better email reporting
      s4-dsdb: silence the domainFunctionality not setup warning
      s4-libnet: wipe the old keytab when exporting
      s4-drs: put the GCSPN flag into the repsTo if requested
      s4-rodc: fixed the keyVersionNumber on the RODC account in secrets.keytab
      s4-provision: wipe the old keytabs when provisioning
      autobuild: push of ref/notes/commits isn't allowed in master
      selftest: fixed a selftest error on sn
      s4-spn: don't try and send an empty SPN list
      s4-rodc: don't set SPECIAL_SECRET_PROCESSING on EXOP_REPL_SECRET
      autobuild: fixed the --tail option for new log locations
      s3-selftest: added samba3.posix_s3.rpc.spoolss.printer to knownfail
      s4-dsdb: fail the transaction instead of asserting on error
      s4-rpmd: fixed a use after realloc bug
      autobuild: cwd is needed on all command types
      autobuild: fixed the tuples in the retry_task
      autobuild: disable the subuit changes for now - they break error checking
      autobuild: revert a bit more of the subunit changes
      s4-auth: fixed a vagrind error when creating keytabs
      autobuild: fixed tuple count for retry
      s4-kcc: remove stale repsTo entries in the KCC
      s4-drs: fixed comparison login in replicated renames
      s4-dsdb: added dsdb_search_by_dn_guid()
      s4-rpc: added target_principal binding handle option
      s4-repl: use the GC principal name for DRS replication connection
      autobuild: include autobuild.log in logs.tar.gz
      autobuild: show top commit in emails
      script: added bisect-test.py git bisect script
      bisect: more bisection options
      s4-selftest: fixed up exit codes on signals for make test
      s4-selftest: added --screen option for test
      s4-server: exit with status 127 on SIGTERM
      s4-ldif: get rid of the ndr_pull_error message on startup
      s4-test: silence the Failed to chown message in make test
      s4-test: silence a tap2subunit error
      s4-selftest: silence warnings about bind chown
      s4-selftest: support 'make testenv SCREEN=1'
      s4-kcc: silence "Testing kcctpl_create_intersite_connections" message
      autobuild: override the editor when marking the commit
      waf: workaround for the 'make install' breakage
      s4-test: changed the gentest test to use a fixed seed.
      waf: fixed the problem with com_err on Ubuntu 9.04
      s4-heimdal: disable using the system compile_et for now
      waf: update to waf version 1.5.19
      waf: fixed some python3.x portability issues
      autobuild: only add autobuild.log if it exists
      s3-spoolss: added another intermittent failure to knownfail
      waf: allow for commands like "make bin/smbtorture"
      s3-build: use the simpler "make bin/smbtorture" for s4 torture
      maintainers: added initial MAINTAINERS.txt
      maintainers: delete the old MAINTAINERS file
      waf: fixed exit status of test suites
      script: improvements to bisect-test.py
      s4: mark us as not supporting python3 yet
      autobuild: add an extra blank line before the autobuild markers
      autobuild: send email failure if rebase fails
      ldb: when running from build directory, use the build modules
      s4-dynconfig: use the build modules when running from build directory
      autobuild: do make install after make test
      s4: don't rebuild all of heimdal when dynconfig options change
      s4-torture: fixed uninitialised variable error
      s4-torture: zero all of trans before the test starts
      s4-ldb: added an optional operator_fn in the schema syntax
      s4-ldb: implement an operator_fn for the ldb-samba syntaxes
      s4-ldb: use operator_fn syntax function in ldb_match code
      s4-schema: don't name variables after standard libc functions
      s4-ldb: take advantage of ldb_match_msg_error() in more places
      ldb: raise minor version number for new ldb_msg_match_error() function
      s4: show samba version in bin/samba -b
      security: ensure the merge of libcli/security doesn't change s3 behaviour
      s4-heimdal: fixed some trailing commas in heimdal build
      s4-waf: automatically remove stale C and header files
      s4-net: fix the dependence on command line ordering
      s4-finddcs: better debug messages to help track down DNS problems
      script: the --tests option has been replaced by --test-command
      s4-net: exit with a failure when a command is unknown
      s4-test: fixed test_kinit.sh time command test
      s4-test: fixed a typo in test_kinit.sh
      replace: cope with systems that have fdatasync(), but don't have the prototype
      readline: fixed the test for history_list()
      waf: automap shared library names from .so to the right extension
      waf: don't save deps on install
      waf: put -Wl,-no-undefined only in the linker flags, not when compiling C
      s4-ldb: added ldb_req_mark_untrusted() and ldb_req_is_untrusted()
      s4-ldb: added --relax cmdline option
      s4-ldb: cope with NULL oid in controls
      s4-dsdb: filter unregistered controls in the rootdse module
      s4-ldap: mark all ldap:// requests as untrusted
      s4-ldb: increase minor version for 2 new functions
      selftest: terminate selftest if we can't setup the environment
      s4-dsdb: register the DCPROMO_OID control with the rootdse
      s4-mailslot: fixed handling of random collision in temporary mailslot names
      autobuild: create an autobuild.pid file
      waf: added --show-deps and --show-duplicates
      waf: rework expand_subsystem_deps()
      waf: allows libraries to be marked as private_library=True
      waf: fixed expansion of direct_objects and direct_libs
      libcli: make the LIBSECURITY subsystem into a private library
      s4-dsdb: make SAMDB_COMMON into a private library
      waf: re-work the module alias code
      wrapper: make socket_wrapper, uid_wrapper and nss_wrapper private libs
      libcli: make LIBCLI_NBT a private library
      s4-ndr: make NDR_TABLE a private library
      replace: make libreplace a private library
      s4-auth: make auth a private library
      s4-libcli: make LIBCLI_LDAP a private library
      waf: cope with libraries with a specified version number
      build: subunit and popt need to be marked as private libraries
      s4-build: fixed some formatting
      waf: added the concept of a grouping_library
      waf: replace the is_bundled option with private_library
      s4-waf: removed dependencies on missing subsystems
      waf-build: create a samba_sockets grouping library
      waf-build: create a NDR_SAMBA grouping library
      s4-build: make LIBSAMBA-NET a private library
      s4-waf: make NDR_STANDARD a grouping library and add NDR_SAMBA4
      s4-dsdb: moved a bunch of fuctions from schema/schema_info_attr.c to samdb/ldb_modules/schema_util.c
      s4-lib: make SMBPASSWD a private library
      s4-libcli: make LIBSAMBA-ERRORS a private library
      lib: add UTIL_TEVENT to samba_sockets grouping library
      nsswitch: make LIBWBCLIENT a private library
      nsswitch: make LIBWINBIND-CLIENT a private library
      s4-dsdb: make ldb_password_hash depend on hdb not HEIMDAL_HDB_KEYS
      s4-kdc: make DB_GLUE a private library
      s4-events: make LIBEVENTS a private library
      s4-socket: make LIBNETIF a private library
      s4-libcli: make LIBSECURITY_SESSION a private library
      waf: prevent the global deps list creating depenency loops
      s4-waf: removed the XATTR and SASL aliases
      s4-waf: don't depend directly on python modules
      waf: raise an error on a dependency on a python module
      s3-waf: mark some libraries as private
      s4-param: added a libshares grouping library
      s4-python: added a samba_python grouping library
      librpc: added NDR_XATTR and NDR_UNIXINFO to the NDR_SAMBA grouping library
      waf: added pyext option to SAMBA_LIBRARY()
      lib: make WRAP_XATTR a private library
      librpc: added RPC_NDR_SAMBA grouping library
      s4-ldb: make pyldb_util a private library
      librpc: added a few more NDR_* targets to NDR_SAMBA
      s4-waf: removed the dependency loop between ntvfs and dcerpc_server
      waf: show duplicate objects in python modules as well as libraries
      s4-python: python_samba needs pyext
      s4-rpc_server: split out DCERPC_SHARE as a separate subsystem
      s4-events: LIBEVENTS depends on LIBSAMBA-UTIL
      s4-dsdb: fixed depenencies for -no-undefined
      libcli: LIBSECURITY depends on NDR_SECURITY
      s4-librpc: fixed depenencies for libcli/security
      waf: fixed the handling of -Wl,-no-undefined
      waf-python: make the pyext flag add the pyembed features for libraries
      waf: loosen the restriction on depending on python libs
      s4-ldb: make ldb_options_find() public
      s4-dsdb: force LDB_ERR_NO_SUCH_ATTRIBUTE on missing schemaInfo
      waf: check the linker accepts a set of ldflags before using them
      waf: RPC_NDR_WINBIND is samba4 specific
      autobuild: don't cleanup the pid file within the retry loop
      s4-waf: we don't need the smbtorture.static for s3 any more
      s3-waf: fixed waf configure for recent changes
      s3-waf: fixed paths in s3 waf build for rpc_server
      waf: moved the -Wl,-no-undefined flags to source4 and ldb
      waf: quote subsystem names to make them clearer
      s3-waf: fixed the s3 waf build
      waf: sped up the project rules checking
      s4-ldb: create a private library ldb-cmdline
      replace: create a private replace-test library
      s4-heimdal: fixed the use of error_message() in heimdal
      s4-heimdal: removed the use of signal.c from roken
      s4-kdc: create a 'pac' private grouping library
      waf: added suncc_wrap
      waf: added env.DEVELOPER_MODE flag
      waf: display the paths in library loops
      waf: separate out get_tgt_list()
      waf: cope with rules with no inputs
      waf: use Utils.WafError() instead of raising an AssertionError
      waf: build all libraries after all object files
      waf: added --symbol-check option
      waf: don't auto-depend on subsystems
      waf: cope with subsystems with no static modules
      waf: give a better error on a bad grouping library
      waf: save the samba_deps_extended
      s4-smbd: don't initialise process models more than once
      s4-smbd: make our process models into real modules
      s4-torture: simplify the depenencies for TORTURE_DRS
      s4-modules: remove LD_SAMBA_MODULE_PATH
      s4-rpc: split the dcesrv reply code out of dcerpc_server
      zlib: use the real library name 'z' instead of ZLIB
      s4-ldbwrap: split ldb-wrap out from the LDBSAMBA subsystem
      s4-ldb: add explicit depenencies on ldb library in ldb modules
      s4-credentials: make a private library from CREDENTIALS subsystem
      s4-auth: make KERBEROS subsystem into authkrb5 private library
      s4-tdb: make tdb-wrap into a private library
      s4-replace: make libreplace a private shared lib in s4
      s4-cluster: make cluster a private shared lib
      s4-dns: make the dns update task an external module
      s4-cmdline: make cmdline-credentials a private library
      s4-ndr: make ndr-table a subsystem
      s4-build: removed some unnecessary dependencies
      waf: get rid of target aliases in wafsamba
      s4-test: don't override modules dir
      s4-waf: added a lexyacc.sh script that manually rebuilds the heimdal parsers
      s4-heimdal: lex_err_message() should not be static
      waf: fixed building of non-shared binaries that contain modules
      s4-smbd: leave the single process model as internal
      s4-smbd: initialise process models in smbtorture before use
      s4-auth: added a dependency on com_err
      s4-server: avoid using environ as it is not portable
      waf: added module_init_name parameter to SAMBA_MODULE()
      s4-ldb: support a new type of ldb module loading
      s4-ldb: convert the ildap module to the new type of ldb module
      s4-ldb: convert the openldap ldb backend to the new style of module
      s4-dsdb: convert the extended_dn_out module to the new ldb module style
      s4-dsdb: convert the simple_ldap_map module to the new module style
      waf: added automatic prototyping of static module init functions
      s4-process_model: use the static module prototyping
      s4-ldb: convert the rest of the ldb modules to the new style
      s4-ldb: removed the old ldb module loading style
      s4-test: we don't need to set LDB_MODULES_PATH any more
      s4-dsdb: convert the rest of the ldb modules to the new module type
      waf: removed the module aliases code
      s4-modules: get rid of the remaining static prototypes for modules
      s4-ldb: it is not an error for the modules directory to not exist
      s4-ldb: added an override flag to ldb_register_backend()
      s4-ldb: added support for general ldb hooks in modules
      s4-ldb: moved the ldb_ildap backend into lib/ldb-samba
      s4-ldb: added samba_extensions ldb module
      s4-ldb: added ldb command line hook support
      s4-ldb: convert existing ldb tools to use new command line hooks
      s4-ldb: fixed build of oLschema2ldif
      s4-ldb: fixed build of paged searches
      s4-ldb: added support for ldb module version checking
      s4-ldb: enable ldb module version checking
      s4-ldb: enable version checking in dsdb ldb modules
      s4-ldb: use ldb_set_modules_dir() to load additional ldb modules
      s4-ldb: removed ldb_includes.h
      s4-ldb: expose some more ldb module functions
      s4-dsdb: removed the use of ldb_private.h from s4
      s4-ldb: give the user a hint as to what may be wrong
      waf: fixed wildcard build
      waf: rerun deps calculation on LDFLAGS or CFLAGS change
      waf: fixed wildcard build for full paths
      s4-build: use -Wl,--as-needed if supported
      waf: split pkgconfig logic into a separate module
      waf: ensure pkgconfig files depend on the prefix
      waf: added reconfigure targets to our libraries
      s4-ldb: make ldbtest depend on ldb
      waf: more agressively expand subsystem syslib deps
      s4-test: if using a system version of ldb, override the ldb modules path
      s4-ldb: fixed sorting of module names
      s4-server: cleanup allocation of process models
      build: a more portable way of finding waf in makefiles
      debug: fixed default debug settings
      s4-auth: unconditionally set previous_ev
      s4-test: fixed quoting in deletetest.py
      Move the checking of single valued attributes back into the tdb backend.
      s4-ldb: honor controls on search in ldbedit
      s4-ldb: don't load modules from the same directory twice
      s4-ldb: implement LDB_FLAG_INTERNAL_DISABLE_SINGLE_VALUE_CHECK
      s4-dsdb: use LDB_FLAG_INTERNAL_DISABLE_SINGLE_VALUE_CHECK in dsdb
      s4-dsdb: use LDB_FLAG_MOD_REPLACE for isDeleted
      compression: fixed an uninitialised data but in lzxpress
      compression: added a simple lzxpress test
      s4: don't run etags over .inst files
      pidl: use a union assignment instead of memmove
      s4-pydsdb: added DsReplicaAttribute()
      s4-pydrs: added rodc option to python drs replication
      s4-join: added DC join to the python join code
      s4: net -> samba-tool
      s4-ldb: show the reason for module initialization failure
      s4-drs: reduce the memory usage of the getncchanges server
      s4-ldb: much more memory efficient msg filtering
      s4-cldap: print all the DNS servers found
      s4-join: don't print all the NDR packets by default
      s4-join: fixed secure_channel_type
      samba-tool: deprecate samba-tool vampire command
      s4-join: switch over to the new DC join in make test
      s4-join: fixed SPNs, invocationId and dnshostname and python join
      s4-cldap: fixed debug message to match content
      s4-dsdb: give the DN on a shema attribute failure
      s4-drs: allow override of the replica_flags
      s4-join: modify join behaviour according to domain level
      s4-pydrs: validate the DsGetNCChanges response
      s4-ldb: better error message when we try to register a module twice
      waf: prevent us from modifying non-install libs during make install
      waf: fixed tabs/spaces for python3.0
      s4-dns: ensure we get the right case on the grant rule for administrator
      waf: fixed the names of the installed libraries after the last change
      waf: go back to the previous method of handling .inst. rules
      s4-ldb: don't give an error if a module is already registered
      s4-debug: lowered the debug level of some unimportant messages
      fix
      s4-repl: fixed replication notifications to RODCs
      s4-drs: allow bypass of writespn checking for some SPNs
      heimdal: fixed a shadowed variable warning for error_message
      s4-drs: reduce verbosity of dreplsrv_out_connection_attach
      s4-test: make sure the selftest prefix exists
      s4-join: raise mininum password length to 32 in new join code
      s4: point to the wiki howto for s4
      s4-server: move the creation of the IPC$ share into ntvfs
      s4-loadparm: fixed dumping of non-default parms with testparm
      s4-join: use the command line loadparm in provision during a join
      s4-test: use IPC$ instead of ADMIN$ for srvsvc NetShareGetInfo test
      s4-devel: useful script for testing join with empty smb.conf
      s4-provision: include command line provision options in the generated smb.conf
      s4-loadparm: fix the FLAG_DEFAULT settings on specially handled parameters
      s4-kdc: rename kdc/kdc.h to kdc/kdc-glue.h
      s4-kdc: we don't need the special include handling now
      s4-kdc: split the kdc process return into a tri-state
      s4-kdc: added proxying of kdc requests for RODCs
      s4-test: we need to import testtools before subunit/python
      s4-drs: fixed a crash in writspn
      s4-auth: fixed crash in krb5 auth
      s4-auth: fixed infinite loop in krb5 auth
      samba-tool: fixed crash in "samba-tool drs showrepl"
      s4-server: make server sockets a child of the task context
      s4-kdc: if "bind interfaces only" is false, then also listen on wildcard
      s4-dns: fixed registration of multiple IPs in samba_dnsupdate
      s4-dns: added --fail-immediately option to samba_dnsupdate
      waf: fixed configure again on RHEL5
      s4-devel: a script to test the Samba4 HOWTO
      s4-join: not all versions of w2003 have msDS-SupportedEncryptionTypes
      waf: added --git-local-changes configure option
      s4-eventlog: fixed dcerpc handle return
      s4-spoolss: fixed warning in call to torture_warning()
      s4-test: fixes for test-howto.py
      s4-loadparm: fixed a memory leak in handle_realm()
      s4-loadparm: set debuglevel and logfile in tables
      s4-join: enable NDR printing at debug levels >= 5
      s4-join: show a reasonable error on DsAddEntry() failing
      s4-join: fixed join to w2k3
      s4-test: added testing of w2k3 DC join to test-howto.py
      s4-dns: catch more expections in samba_dnsupdate
      s4-provision: add log messages about IP lookup
      s4-provision: use the command line lp in provision
      s4-gensec: zero the gssapi_state
      s4-heimdal: implement KERB_AP_ERR_TYPE_SKEW_RECOVERY
      s4-test: updates to test-howto.py
      heimdal: added HEIM_BASE_NON_ATOMIC option
      s4-heimdal: ask for non-atomic heimdal
      s4-provision: don't try to autodetect xattr is posix:eadb is set
      developer: only do the C++ reserved name checking on Linux
      s4-provision: setup posix:eadb using lp.set()
      s4-provision: don't test for xattrs if posix:eadb is set
      s4-doserr: telling our users to "see Windows help" doesn't seem right
      s4-kcc: fixed result_last_attempt in showrepl
      s4-repl: ensure we don't starve pending replication ops
      s4-repl: save the result of the last replication in repsFrom/repsTo
      s4-repl: removed the syncall_workaround code
      s4-wintest: added wintest.py library
      s4-test: rename scripting/devel/howto to scripting/devel/wintest
      s4-test: added greater control over tests to run
      s4-dns: added support for --fail-immediately for RODC netlogon dns updates
      s4-spnupdate: only enable NDR print at log level above 5
      s4-test: use --fail-immediately for samba_dnsupdate testing
      s4-test: added --rebase and --clean options
      s4-wintest: remove files in var/ when reprovisioning
      s4-drs: fixed a typo
      s4-join: initially disable the machine account
      s4-rodc: enable the DRS_GET_ALL_GROUP_MEMBERSHIP flag for RODC replication
      s4-wintest: reliability and usability improvements
      talloc: added TALLOC_FREE_FILL environment variable
      wintest: moved to top level
      wintest: rename test-howto.py to test-s4-howto.py
      wintest: move conf files to conf/
      wintest: added del_files, write_file and casefold
      wintest: the start of a S3 testing script for wintest
      s4-rpc: make rpc connect less verbose
      waf: fixed the build with a space in the source directory
      pidl: fixed call to cpp with a space in the directory name
      heimdal: fixed the waf build with a space in the directory name
      s4-ldb: fixed the build with a space in the ldb modules directory name
      s4-ldb: added an environment varibale LDB_WARN_UNINDEXED
      wintest: tidyups and new conf variables
      s4-kcc: disable the NDR printing of DRS getinfo requests
      s4-dynconfig: override more paths when running from the build directory
      s3-torture: remove the merged_build tests for building smbtorture4
      s4-devel: we don't need to override these scripts now
      wintest: fixed interface handling and DNS forwarding
      wintest: remove reliance on hostname in /etc/hosts
      wintest: fixed cleanup of /etc/resolv.conf
      wintest: added an IPv6 address, and use fully qualified hostname
      s3-test: try to avoid a problem of CFLAGS propogating to the torture build
      s4-provision: don't try to look for an IPv6 address when not specified
      wintest: make IPv6 optional in wintest
      wintest: fixed "rndc command" option in provision
      wintest: do an initial replication of CN=Configuration to transfer dnsHostname
      s4-provision: fixed eadb automatic and manual setting in provision
      s4-kcc: fixed valgrind errors in drs replicaInfo server side
      wintest: handle missing firewall commands
      wintest: avoid adding a blank line to resolv.conf on each run
      wintest: cope with VMs sometimes not rebooting
      s4-libnet: use the full DNS domain for CLDAP lookups if possible
      s4-samba-tool: fixed "-k no" for disabling kerberos auth
      libds: added mS-DS-ReplicatesNCReason flags
      s4-pydsdb: use cpp macro to simplify flags definitions
      s4-drs: allow DrsReplicaGetInfo as a DC
      s4-pyglue: expose the remaining NTTIME functions from glue
      s4-samba-tool: added python implementation of samba-tool drs commands
      s4-samba-tool: switched over to python version of samba-tool drs
      s4-samba-tool: removed old C implementation of samba-tool drs
      s4-drs: fixed credit for C version
      s4-samba-tool: support help, and show description of commands
      s4-pydsdb: added GPO policy flags
      s4-samba-tool: started on gpo subcommands in python
      s4-pydsdb: two more GPO related flags
      s4-dsdb: give full error message for operational failures
      s4-gpo: started on samba-tool gpo list command
      s4-loadparm: added loadparm_init_global()
      s4-loadparm: use loadparm_init_global() instead of loadparm_init()
      s4-pyglue: added get_debug_level() method
      s4-ldapcmp: fixed exception handling
      s4-ldapcmp: make ldapcmp a samba-tool command
      s4-join: fixed exception handling in join command
      s4-samba-tool: improved exception handling in samba-tool
      s4-samba-tool: fixed ldb exception handling in domainlevel command
      s4-samba-tool: fixed exception handling in subcommands
      s4-repl_schema: fixed ldb exception handling
      s4-samdb: give a better exception if multiple users match in password change
      wintest: cope with the heimdal version of kinit
      s4-dns: catch all DNS exceptions in samba_dnsupdate
      heimdal: fix for w2000 from lha
      wintest: added --vms option
      wintest: make expect calls case insensitive by default
      s4-provision: fixed check for missing msDS-SupportedEncryptionTypes
      s4-build: added a 'make help' target
      waf: added a help target for the other waf builds
      waf: use Logs.warn() instead of print() in the symbol check code
      waf: less verbose message for failing to resolve a syslib path
      wintest: fixed casefold handling in expect calls
      s4-provision: remove the disabled bit in the dns-$HOSTNAME account
      wintest: wait for the windows DC to register its DNS name
      s4-drs: the options attribute is optional on NTDSDSA objects
      wintest: cope with delays in w2k3 starting its DRS server
      wintest: fixed formatting of wintest in emacs python mode
      wintest: we don't need the WIN_BASEDN vars any more
      wintest: make command matching case insensitive by default
      wintest: cope with w2k3 form of dcdiag output
      s4-drs: cope with invalid NTDS DNs from DsReplicaInfo()
      s4-ldap: removed an incorrect talloc_move()
      wintest: added README
      wintest: put most of the main program login in wintest.py
      wintest: autodetect if named supports tkey-gssapi-keytab
      s4-dns: a dlz module for bind9
      s4-dns: added flags support for dlz_bind9
      s4-dns: support Samba command line options to the dlz_bind.so module
      s4-dns: return the correct TTL
      samba-tools: export doesn't need any credentials
      samba-tools: more reasonable defaults for samba-tool commands
      wintest: use --add-ref for RODC replication
      s4-ldb: ensure ldb_register_samba_handlers() is not done twice
      s4-dsdb: register samba handlers in dsdb module
      s4-dns: allow a remote ldap server to be used with dlz_bind9
      s4-ldb: use RTLD_DEEPBIND if available for ldb modules
      s4-dns: use ldb hooks for samba extensions in dlz_bind9
      s4-waf: get the version number right on private libraries
      s4-dns: dlz_bind9 doesn't need to link to gensec any more
      waf: added configure test for -Wl,--version-script
      waf: use -Wl,--version-script if available
      s4-heimdal: enable symbol versioning in heimdal
      s3-waf: fixed version number handling
      waf: make all generators depend on their rules
      waf: added -Wmissing-prototypes to build
      waf: support @LIB_RPATH@ in pc files
      s4-ldb: added @LIB_RPATH@ to the ldb pc file
      waf: added --disable-symbol-versions configure option
      s4-pkgconfig: add @LIB_RPATH@ to our link flags
      waf-abi: auto-generate per-symbol versions from ABI files
      waf: make mkdir_p on a empty string not recurse forever
      waf: use vscripts for our private libraries too
      waf: don't use symbol versioning on our modules
      waf: add a dependency between the library and its vscript
      waf: fixed path to abi_directory
      waf: remove the restriction that private libraries must not have a vnum
      s3-vfstest: fixed paths in vfstest
      waf: the libXX.inst.so file also depends on the vscript
      waf: fixed re-running of build rules
      s4-dns: added basic DLZ writeable support to dlz_bind9
      s4-dns: implemented parsing and storing of DNS records from bind
      dnsp: fixed parsing of dns_name structures
      s4-dns: fixed a crash bug in dlz_bind9 code
      dns: auto-calculate the wDataLength field in DNS records
      dns: fixed the padding for dnsp_name fields in LDAP
      s4-dns: disable segfault handling in dlz_bind9
      s4-provision: removed an incorrect debug message
      s4-dns: return the local hostname as the SOA authority
      dns: cope with trailing '.' in dns_name
      s4-dns: fixed name comparison in bind9 module
      s4-dns: set dwSerial and dwFlags
      dns: fixed dns record format
      talloc: added a test for the use after free Rusty found
      talloc: fixed a use after free error
      waf: ensure "make dist" works from a clean git tree for all libraries
      s4: fixed 'make dist' not to need configure for s4
      autobuild: added "make distcheck" for our libs
      script: added librelease.sh script
      script: tag the releases
      ldb: link to the download directory on the website
      abi: force TERM=none in abi generation
      ldb: added ldb_dn_get_extended_comp_num()
      s4-dsdb: validate number of extended components
      s4-dns: renamed DNS_TYPE_ZERO to DNS_TYPE_TOMBSTONE
      ldb: added ldb_dn_minimise()
      s4-dsdb: minimise the DN in group expansion
      s4-samba-tool: fixed the gpo command to use the right DN for access checks
      s4-auth: fixed status return
      s4-samdb: give a more useful debug when we can't open the privileges db
      s4-test: added a tokengroups test
      s4-kdc: don't ask for an extended DN for krbtgt_dn
      ldb: new ABI file for 0.9.23
      s4-dsdb: fixed filtering of tokengroups
      s4-dsdb: fixed primaryGroupID to use dsdb_module_search_dn()
      s4-dsdb: replaced another use of samdb_search in a ldb module
      s4-dsdb: removed some more samdb_search_*() calls from samldb.c
      s4-dsdb: removed the last use of samdb_search_*() from the dsdb ldb modules
      s4-dsdb: only enforce the extended dn rules over ldap
      waf: new version of waf
      waf: use PYTHONARCHDIR for installing python shared libs
      waf: this script does need bash
      ldb: added ldb_req_mark_trusted()
      s4-dsdb: pass parent request to dsdb_module_*() functions
      s4-dsdb: replaced the calls to ldb_search() in dsdb modules with dsdb_module_search()
      ldb: new ABI sigs file
      pygensec: remove special case handling for None for buffers
      waf: change private libraries to use the same soname as public libraries
      charcnv: removed call to setlocale() (bug 7519)
      waf: samba deps generation depends on EXTRA_INCLUDES
      pidl: support using pidl from top level directory
      s4-heimdal: allow heimdal build scripts to work from top level
      s4-idl: make the source4 idl build independent of build directory
      waf: added top level build rules
      s4-provision: cope with top level directory for provision
      s4-test: allow make test to work from top level directory
      blackbox: removed assumption of build directory
      s4-test: fixed more assumptions of ./setup for setup directory
      s4-loadparm: removed "setup directory" option
      s4-dynconfig: fixed dyn_SETUPDIR to point to the right directory
      s4-test: fixed test_samba4.pl for top level build
      s4-test: fixed setup/ assumption for top level build
      s4-test: fixed hard coded test paths for top level build
      build: added configure.developer for top level build
      build: added placeholder to ensure include/ is available in build dir
      s4-test: fixed ndrdump test for top level build
      s4-test: fixed samba4.policy.python test for top level build
      build: fixed top level etags and ctags target
      s4-provision: removed spurious os.chdir() from upgradehelpers.py
      build: fixed make install for top level build
      s4-dsdb: make subtree_rename errors clearer
      s4-upgradeprovision: renames need a relax to avoid subtree_rename checks
      s4-build: fixed install of version.h from source4 build
      s4-python: get ordering right on python paths
      autobuild: decouple build directories from target names
      autobuild: add a bit more debug info in autobuild
      autobuild: fixed clone source for build trees
      s4-provision: added setup_path() import in two more places
      s4-charset: use dyn_CODEPAGEDIR for location of upcase.dat/lowcase.dat
      s4-build: remove a bunch of unused build scripts
      s3-torture: switch source3 to using top level samba4 build for smbtorture
      autobuild: lib/replace doesn't need autogen.sh
      build: fixed error message for incorrect waf version
      build: removed the old autogen.sh and autogen-waf.sh scripts
      build: removed unused build scripts
      s4-build: fixed uses of os.path.relpath()
      ldb: added a include/ldb_version.h
      ldb: fixed two warnings in the ldb_ldap backend
      ldb: change version number to 1.0.0
      ldb: added ldb 1.0.0 ABI signatures
      s4-krb5: authkrb5 should depend on ldb
      ldb: use #include <ldb.h> for ldb
      s4-torture: not having an output dir is not a fatal error
      s4-auth: install gen_ndr/auth.h, used by public session.h
      s4-build: need EXPAND_VARIABLES() for terminal in make test
      s4-build: fixed export of krb5pac.h, needed by other public headers
      script: sign library releases with Samba Library Distribution Key
      ldb-web: update mailing list info
      s4-ldb: use a helper function for single valued checking
      s4-ldb: added LDB_FLAG_INTERNAL_FORCE_SINGLE_VALUE_CHECK
      s4-dsdb: fixed problem with constrained modification of description attribute
      s4-dsdb: cleanups to the backupkey RPC server
      s4-ldb: fixed a uninitialised el->flags in ldb_tdb
      s4-dsdb: cope with broken exchange schema with single valued backlinks
      idl: naming a structure 'VERSION' is not a good idea!
      s3-waf: move the KRB5_DEPRECATED configure check out of lib/replace
      s4-build: added LOCALEDIR config option
      waf: use Utils.WafError() instead of sys.exit(1)
      waf: added subdir= option in SAMBA_*() rules
      s3-build: allow waf build of s3 IDL files from any top directory
      waf: library_flags() doesn't only operate on conf objects
      build: make ADD_LDFLAGS() returns the flags that were added
      build: added allow_undefined_symbols options for libraries and modules
      build: added subdir option for module building
      build: fixed passing of includes= for modules
      uid-wrapper: handle uwrap_enabled() as a macro
      s3-includes: force _SAMBA_BUILD_=3 in source3 includes.h
      s4-dsdb: operational module does not need auth any more
      s3build: added NMBDSOCKETDIR to dynconfig
      build: remember the flags used for undefined variable errors
      s4-auth: rename 'auth' subsystem to 'auth4'
      waf: give a more sensible error on symlink_bin with missing directory
      waf: added SAMBA3_*() build rules to samba3.py
      charset: allow s3 waf build to use lib/util/charset
      s3-waf: fixed the include paths for samba public libraries
      waf: support building libraries with a directory prefix
      waf: improved error message for bad paths in SAMBA_LIBRARY()
      libutil: make waf rules usable by s3 waf build
      s4-util: removed the valgrind_strlen() routine
      build: put links for libs in the right directory
      s3-waf: use SAMBA3_*() build rules in source3/build
      nsswitch: depend on dl
      s4-idl: rename s4 server_id.idl to server_id4.idl
      s4-ndr: added NDR_WBINT to ndr_tables
      libcli/nbt: allow use of the waf build for nbt in source3
      s3-waf: added a krb5 dependency
      s3-waf: rename POPT_SAMBA to POPT_SAMBA3
      s3-waf: renamed tdb-wrap to tdb-wrap3
      s3-waf: rename 'errors' to 'errors3'
      s3-waf: use common libcli/nbt build rules
      s3-waf: renamed samba-util to samba-util3
      s3-waf: added some more krb5 dependencies
      s3-waf: cope with location of include.h for toplevel build
      s3-waf: make version and build directory conditional
      s3-waf: LIBADS depends on krb5
      s3-waf: use bld.env.suffix3 for differentiating toplevel build
      s3-waf: rename CHARSET to CHARSET3
      s3-waf: find swat files for both toplevel and source3 build
      s3-waf: cope with both toplevel and source3 build
      s3build: recurse into source3/
      s3-waf: make pieces of the source3 waf wscript depends on toplevel_build
      s3-waf: use Logs.warn() not print for configure warnings
      s3-waf: added support for in-tree heimdal in source3 waf build
      s3build: use source3/wscript for s3 configure rules
      s3-waf: work around broken cups-config --libs output
      s4-waf: rename 'param' to 'pyparam'
      s3-waf: convert some subsystems into private libraries
      s4-waf: rename smbpasswd library to smbpasswdparser
      s3-waf: no need to add suffix3 to smbpasswd
      build: we don't need the special case for s3build any more
      s3-waf: build bin/smbclient3 for top level build
      s4-waf: added --enable-s3build configure option
      s4-waf: fixed make test for toplevel
      python: use os.environ[] instead of os.putenv()
      build: enhanced the symbolcheck code
      build: added WHYNEEDED=TARGET:DEPENDENCY
      build: created samba-util-common library
      build: moved more files into samba-util-common
      build: move idtree.c into samba-util-common
      s3-waf: added SYMBOLCHECK support to source3 waf build
      build: duplicate symbols between system libraries aren't interesting
      build: don't display expected duplicate symbols
      build: fixed 'make dist' without configuring
      build: moved libcli/auth/ntlmssp*.c into a common libcliauth.so library
      build: moved schannel_sign.c into a shared COMMON_SCHANNEL subsystem
      build: moved libds/common/flag_mapping.c into a common subsystem
      build: moved lmhosts.c into a common subsystem
      build: moved librpc/rpc/*.c into a rpccommon library
      build: moved spnego_parse.c into a common subsystem
      build: moved util_reg.c into a common subsystem
      autobuild: enabled samba3-waf build
      build: fixed the ELF name for private libraries
      debug: fixed a valgrind error
      s4-rpc: added public APIs for dce_call authentication
      build: added placeholder files for public header directories
      ldb: don't install ldb_wrap.h twice
      build: install public headers in the build tree
      wafsamba: added global_include option
      wafsamba: don't follow symlinks outside the build tree
      wafsamba: keep a list of public headers
      talloc: use public_headers to install talloc.h and pytalloc.h
      tevent: use public_headers for tevent.h
      build: added include/public to the list of include paths
      build: added automated testing of our public headers
      waf: moved header file handling into its own module
      tdb: use system include style for system headers
      tdb: use public_headers to install header files
      talloc: use <talloc.h> not "talloc.h"
      lib: fixed header paths
      waf: build substituted public headers in build tree
      ldb: use include <> form for public headers
      s4-policy: don't make s4 policy.h public
      s4-rpc: make common/proto.h public
      rpc: make ndr/ndr_svcctl.h public
      build: mark some private includes as OK in public headers
      waf: always generate public headers in the build tree
      lib: don't install public headers if a private library
      ldb: only install headers if we are not building as a private lib
      build: force _SAMBA_BUILD_==4 to be true in public headers
      waf: build headers in separate 'headers' build group
      build: fixed cflags for test_header
      waf: make mkdir_p() a bit more robust
      waf: auto-create include paths if needed
      s3-waf: enable public header building in s3
      build: added public_headers_allow_broken option
      build: removed mkdir of public headers directory
      s3-waf: enable public_headers_allow_broken
      build: added simple header handling for our libraries
      waf: ensure that MAKEFLAGS is set before parsing it
      libcli: protect access_check.h against double inclusion
      s4-rpc: added dcesrv_call_account_name()
      libcli: openchange doesn't need these headers any more
      headers: include Python.h first to avoid warnings
      headers: cope with non-system popt in test_headers
      s4-rootdse: improved operations error messages
      s3-fault: removed the cont_fn from fault_setup()
      fault: rename fault.c to fault_s4.c
      fault: moved s3 fault.c to top level
      fault: get fault.c ready for use by s4
      fault: switch s4 to use the common fault.c
      fault: moved fault.c into common library
      fault: fixed call to fault_setup() to use new syntax
      fault: fixed smb_panic() prototypes
      s3-config: say which config file we failed to open
      waf: prevent an error in the symbol checking code
      charcnv: remove the automatic fail on allow_badcharcnv true
      charset: remove another allow_badcharcnv check
      charcnv: removed the allow_badcharcnv and allow_bad_conv options to convert_string*()
      s3-string: moved fstring functions into their own file
      lib: move the string wrappers from source3/include to common lib/util
      lib: remove unused pieces of string_wrappers.h
      s3-lib: make pull_ucs2_base_talloc static
      s3-dfs: removed the last user of sec_len==-1 in pull_*_base_talloc()
      s3-string: sec_len==-1 support is no longer needed
      s3-libsmb: work our correct length for EA strings
      tdb: rename convert_string() to tdb_convert_string()
      libcli: created smb_constants.h
      unistr: moved some UCS2 macros into util_unistr
      s3-includes: fixed CONST_DISCARD() to actually discard const
      charcnv: added convert_string_error()
      s3-string: removed last use of conv_silent
      s3-string: removed the conv_silent global
      s3-charcnv: convert_string_internal() should not display errors
      s3-charcnv: removed unused function
      s3-charcnv: fixed converted_size return in fast paths
      charcnv: ensure convert_string_error doesn't conflict with s3 function
      wintest: ensure we startup the w2k3 DC VM
      wintest: fixed syntax highlighting with emacs
      wintest: added a "ipconfig /flushdns"
      s4-fsmo: samba-tool fsmo takes a URL, not a hostname
      s4-dsdb: only allow administrators to trigger FSMO role transfers
      s4-drs: default hostname in samba-tool drs command
      s4-fsmo: nicer error messages on failed FSMO transfers
      s4-fsmo: make rootDSE modify for FSMO transfer async
      s4-dsdb: perform FSMO transfers asynchronously
      s4-fsmo: samba-tool fsmo transfer now gets full error code
      s4-fsmo: say which role is being transferred
      lib: removed a spurios declaration of 'logfile'
      s4-param: set a default logfile
      s4-cmdline: moved loadparm init after fault setup
      debug: ignore debug_set_logfile() with a blank string
      s4-dsdb: allow modification of linked attribute targets with relax
      ldb: detect eof on ldif files
      s3-torture: a very simple test for convert_string_error()
      s4-dsdb: cope with failed searches in the linked attributes callback
      debug: default debug to stderr
      s4-libnet: honour convention of DEBUGLEVEL>=10 for NDR print
      s4-loadparm: be a bit less verbose about smb.conf processing
      s4-krb5: be a bit less verbose about krb5 packets
      s4-dsdb: added a ldb err -> NTSTATUS mapping
      s4-rpc: improved error mapping for several RPC server calls
      s4-samba-tool: give a bit better error on user delete failure
      s4-dsdb: implemented creation of conflict records
      waf: a better way to detect duplicated symbols
      lib: moved data_blob.c into samba-util-common
      lib: make asn1_util a private library
      tstream: make npa_tstream a private library
      lib/crypto: rename the SHA256_ functions to samba_SHA256_
      s4-test: fixed a problem with very verbose NDR debug
      ldb: fixed --paged option in ldb tools
      s3-test: disable ktest for now
      build: speed up SYMBOLCHECK code
      build: use readelf as a replacement for ldd
      s4-test: added a test for E_deshash()
      build: fixed build problems due to implicit library deps in samba3core
      selftest: we don't get valgrind errors any more with iconv
      lib/util/charset Make fast path from UTF16 to '8 bit' charsets clearer
      s3-test: log to stdout for smbd/nmbd/winbindd
      libcli/raw: use a different ifdef than s3 smb.h
      libds: added roles.h for server roles
      s3-include: use new roles.h
      s4-param: use new roles.h
      s4-socket: rename allow_access() to socket_allow_access()
      s4-auth: removed the password combinations code in auth_unix
      s3-auth: fixed bug with usernames longer than sizeof(char *)
      s3-winbind: another strlcpy()/fstring fix
      s4-auth: remove unused prototype
      libds: moved enum security_types to a common header
      build: allow s3 libraries to be built with no undefined symbols
      s3-waf: expose the server_exit code in the smbd_base library
      s3-smbd: expose smbd_set_server_fd()
      s3-test: build smbtorture with --enable-developer
      s4-interfaces: keep interfaces in the order they were declared
      s3-events: tevent_internal.h is not a public header
      build: fixed a problem with installing scripts in the build tree
      samba-tool: improved user enable error handling
      samba-tool: improved error handling in user setexpiry
      samba-tool: update tests for new 'user enable' syntax
      s4-ipv6: added iface_list_wildcard()
      s4-ipv6: changed the default "socket address"
      s4-ipv6: allow IPv6 addresses in our interfaces list
      s4-ipv6: fixed a warning
      s4-ipv6: added ipv4 functions to interface code
      s4-ipv6: added socket_address_from_sockaddr_storage()
      s4-ipv6: fixed ipv6_listen() to use IPV6_V6ONLY
      s4-ipv6: fixed stream_setup_socket() to handle IPv6
      s4-ipv6: use iface_list_wildcard() to listen on IPv6
      s4-ipv6: use "ip" instead of "ipv4" for servers
      s4-ipv6: only listen on V4 addresses in the NBT server
      s4-webserver: fixed a talloc reference error on startup failure
      s4-ipv6: the wins replication server can only handle IPv4
      s4-gpo: fixed display of GPO version numbers
      s4-ipv6: allow ipv6 to be enabled/disabled in smb.conf
      s4-ipv6: update callers to load_interface_list()
      s4-ipv6: added IPv6 support to samba_dnsupdate
      ipv6: always try to convert as a numeric address first
      s4-ipv6: ensure wrepl server does not use ipv6
      s4-ipv6: don't add link local addresses to DNS
      s4-ipv6: removed an old comment
      s4-ipv6: fixed binding to ipv4 addresses
      s4-ipv6: enable IPv6 by default
      s4-testparm: testparm is now part of samba_tool
      s4-script: install some of the samba scripts in bin/ during build
      s4-ipv6: cope with IPv6 in our async DNS client code
      util-net: added is_ipaddress_v6()
      s4-ipv6: use the server address family
      s4-ipv6: allow for IPv6 in resolver top level calls
      s4-ipv6: allow for IPv6 in dcerpc socket calls
      s4-ipv6: fix the address family for IPv6 string addresses
      s4-ipv6: removed the old unused ipv6 code in dcerpc_sock.c
      s4-ipv6: fill in family when initialising from sockaddr
      s4-ipv6: fix iface_list_best_ip() for IPv6
      s4-netlogon: force an IPv4 address
      s4-dsdb: cope with missing backlinks in rpmd handling
      s4-ipv6: fixed DNS handling with new IPv6 code
      s4-ipv6: fixed iface_list_same_net() for IPv6
      s4-provision: fixed detection of V4/V6 addresses
      s4-build: install a build link bin/provision
      s4-dns: fixed samba_tool -> samba-tool
      s4-ipv6: fixed a crash in the IPv6 DNS code
      s4-cldap: fixed the CLDAP response for IPv6 clients
      s4-interface: raise the debug level for interface discovery
      s4-wins: ensure we only use IPv4 for WINS owner
      s4-ipv6: fill in pdc_ip in DsRGetDCNameEx2
      s4-ipv6: don't default to 127.0.0.1 in provision
      samba-tool: added --local option to drs replicate command
      s4-drs: cope with missing RMD_ADDTIME in linked attributes
      s4-drs: ensure we add a RMD_ADDTIME when upgrading a linked attribute
      s4-drs: added debug lines for missing linked attribute fields
      waf: fixed 'make bin/XXX' for the remaining binaries
      waf-symbols: don't look for symbol lists in GENERATOR targets
      s4-samba-tool: added dbcheck commmand
      pyldb: added validate option to ldb.modify()
      pyldb: make ldb operations more consistent
      samba-tool: disable validation on removing an empty attribute in dbcheck
      build: fixed dependencies on install prefix for pc files and python scripts
      build: fixed development symlinks for libraries in subdirectories
      s4-pydsdb: added dsdb_normalise_attributes() call
      s4-dsdb: if we don't have a remote schema, then use the local one
      samba-tool: added attribute normalisation checks
      samba-tool: report total error count and suggest --fix if needed
      s4-pysamdb: fixed the normalisation of grouptype in group add
      samba-tool: show success message on group operations
      s4-auth: quiet down the krb5 warnings when kerberos is not set to 'MUST'
      talloc: added talloc_stackframe_exists()
      samba-tool: exit with non-zero status on dbcheck failure
      build: only use the git version on install, not in the build tree
      util: moved nt_errstr() into common code
      s3-util: remove the s3 nterr.c
      s4-util: removed the s4 nterr.c
      s3-smbd: longer explanation of smbd_shim code
      s4-dsdb: don't add zero GUID to BINARY_DN
      samba-tool: try to keep dbcheck.py in a logical ordering
      ldb: expose syntax oids to python
      ldb: added extended_str() method to pyldb
      pydsdb: added get_syntax_oid_from_lDAPDisplayName()
      pyldb: added methods to get/set extended components on DNs
      samba-tool: added missing GUID component checks to dbcheck
      s4-dsdb: catch duplicate matches in extended_dn_in
      s4-dsdb: prioritise GUID in extended_dn_in
      samba-tool: expanded dbcheck DN checking
      samba-tool: allow for running dbcheck against a remove ldap server
      s4-dsdb: bypass validation when relax set
      samba-tool: added --quiet option to dbcheck
      samba-tool: make the dbcheck class available outside of samba-tool
      samba-tool: added --attrs option to dbcheck
      dbchecker: when fixing a bad GUID in a DN, search by the string DN
      dbchecker: fixed argument error for -H and DN
      dbchecker: cope with a broken link to Deleted Objects
      s4-dsdb: allow removal of unknown attributes if RELAX set
      s4-pycommon: allow an optional 'all' choice for confirm dialogs
      dbcheck: check for unknown attributes and offer to remove them
      dbcheck: only use a paged search when checking a ldap database
      s4-pycommon: support 'none' as an option in confirm
      s4-dbcheck: support the 'none' option for prompts
      dbcheck: use specified DB schema for non-LDAP URLs
      dbcheck: added confirm_all support for remaining checks
      s4-dsdb: fixed crash bug in extended_dn_in
      s4-dsdb: deleted objects are expected to be missing mandatory attributes
      dbcheck: check all objects, including deleted objects
      s4-provision: use samba.unix2nttime() instead of hard coding NTTIME offsets
      dbcheck: improved error checking in fixup of missing metdata
      dsdb: added get_lDAPDisplayName_by_attid
      dbcheck: use get_lDAPDisplayName_by_attid()
      s4-dsdb: moved checking of duplicate member entries to repl_meta_data.c
      pydsdb: added get_backlink_from_lDAPDisplayName()
      dbcheck: added checking of backlinks
      samba-tool: fixed ldapcmp to run as non-root
      dbcheck: added --reindex option
      dbcheck: fixed ldap check with no database specified
      s4-dsdb: raise debug level for backlink errors
      dbcheck: added checks for missing and orphansed backlinks
      dbcheck: only fix replPropertyMetaData if we included it in the search
      s4-dsdb: fixed modify of ACLs on deleted objects
      s4-provision: fixed the GUIDs in the provision using dbcheck
      s4-test: fixed usage message on renamedc.sh
      dbcheck: only do the provision dbcheck if there are objects to check
      ldb: don't shortcut dn comparison for mismatched special DNs
      ldb: don't return special DNs on non-base searches
      ldb: use base searches for @ special DNs
      ldb: added ldb_val_string_cmp()
      dbcheck: use samdb_schema for getting the backlink
      dsdb: fixed special case of zero NTTIME
      s4-dsdb: another special case for the "member" attribute
      s4-fault: changed to use %d for PID, instead of %PID%
      s4-dsdb: fixed the defaultObjectCategory to have a full GUID
      samba-tool: fixed samba-tool user syntax
      samba-tool: use 'exportkeytab' instead of 'dumpkeys'
      samba-tool: testparm doesn't take any credentials
      samba-tool: nicer error in passwordsettings with no settings
      s4-test: added dbcheck run to test suite
      dbcheck: test the --reindex option
      s4-test: don't fix broken objects during dbcheck test
      s4-dsdb: change the samba3sam test to add the show_deleted module
      pyldb: use dn.is_child_of() instead of dn.compare_base()
      s4-dsdb: added dsdb_delete() function
      s4-kcc: use dsdb_delete() instead of ldb_delete()
      s4-provision: run dbcheck on a minimal set of objects in provision
      dbcheck: use string DN in delete when fixing broken strings DNs
      tdb: remove 'EOF' print from tdbrestore
      s4-selftest: added undump.sh script
      samba-tool: fixed some more calls to samba_tool join to be 'domain join'
      dbcheck: mark the dbcheck as known-fail
      samba-tool: make sure we exit with an error on a bad command
      s4-messaging: fixed the removal of messaging sockets in child tasks
      waf: update to latest waf 1.5 version
      s3-waf: the passdb subsystem needs to be called pdb
      samba-tool: ensure prompting of passwords is in the right order
      ldb: fixed a search expression parse bug
      ldb: added a test for an invalid search expression
      pyldb: added binary_encode() and binary_decode() methods
      samba-tool: fixed binary encoding of usernames in setpassword
      samba-tool: use ldb.binary_encode() on search expression elements
      talloc: added test suite for talloc_free_children()
      pyldb: return a copy of key constant DNs via python interface
      ldb: added ldb_dn_replace_components()
      ldb: added ldb_parse_tree_walk()
      ldb: raise minor version
      ldb: added signatures for 1.1.2
      s4-dsdb: make requests for STORAGE_FORMAT control non-critical
      s4-dsdb: fixed a warning on dsdb_delete()
      s4-dsdb: setup a one_way_link attribute on schema attributes
      s4-dsdb: fixed outgoing one way link DNs
      s4-dsdb: added dn_format attribute of a dsdb_attribute
      s4-dsdb: handle search expressions containing extended DNs
      ldb: changed DN matching rules to obey GUID/SID/string ordering
      ldb: added a new always-fail ldap extended match OID
      ldb: rule_id in ldb_parse_tree should be const
      s4-dsdb: extend the extended_dn_in module to handle DN links
      s4-samdb: save the url in the samdb class
      talloc: check block count aftter references test
      s4-ldb: two DNs only match if they have the same deletion status
      talloc: ensure the sibling linked list remains valid during a free
      talloc: prepare for 2.0.6 release
      pysamdb: move normalise_int32() to common module
      s4-dsdb: use dn_format shortcut to find DN format
      s4-samdb: support relative paths in SamDB() connect
      s4-dsdb: make extended_dn_in a bit more efficient
      s4-pysamba: fixed double conversion of int32
      s4-acl-test: use symbolic names for groupType
      s4-dsdb: ensure we setup the dn_format field in schema attributes
      s4-dsdb: ensure rIDSetReferences is stored as an extended DN
      s4-dsdb: add auto-normalisation of attributes
      s4-dbcheck: enable dbcheck now that backlinks are fixed
      ldb: fix the canonicalisation of booleans
      s4-dsdb: fixed booling conversion to check value length
      s4-dsdb: added SAMDB_INDEXING_VERSION to @INDEXLIST
      s4-dsdb: calculate validFSMOs at runtime instead of pre-computing
      s4-dsdb: remove the naming_fsmo and pdc_fsmo modules
      s4-dsdb: expand dsServiceName from GUID form at runtime
      s4-provision: create dsServiceName in @ROOTDSE in GUID form
      s4-join: make dsServiceName a GUID in @ROOTDSE on join
      s4-dsdb: don't cache the NTDS settings DN
      s4-dbcheck: offer to fix dsServiceName to be in GUID form
      tevent: don't force the nesting flag to false in the destructor
      socket-wrapped: added wrappers for dup() and dup2()
      s4-test: use standard process model for 'dc' server
      s4-test: prevent the utable test from crashing
      s4-samdb: added deleteuser() to samdb
      samba-tool: changed samba-tool user delete to use samdb instead of Net()
      s4-dirsync: use dsdb_module_dn_by_guid() not dsdb_find_dn_by_guid() in modules
      s4-dsdb: added comments and fixed backlink check in repl_meta_data
      s4-dsdb: fixed deletion of backlinks for fl2000 DCs
      s4-test: only check one database in quickcheck
      s4-test: use dbcheck on more of our selftest databases
      pyldb: fixed a warning
      pdb-samba4: use ldb_get_default_basedn() instead of NULL
      s4-dns: when searching all partitions the NULL basedn is OK
      s4-dsdb: fixed all partitions search in cracknames
      s4-dsdb: removed unused function in ACL module
      s4-dsdb: cleanup use of NULL vs base DN in samldb
      s4-kdc: fixed subtree search in KDC
      s4-samr: fixed subtree search
      s4-dns: fixed base search on domain NC
      s4-spnupdate: fixed searches on domain NC
      samba-tool: fixed use of base DNs in ldapcmp
      s4-dsdb: fixed basedn in extended_dn_in module
      s4-dsdb: enforce NULL DN validity in partition module
      s4-dsdb: assert that base DNs are used correctly
      s4-dsdb: added samdb_dn_to_dns_domain()
      s4-dsdb: fixed calls to ldb_val_string_cmp()
      s4-provision: pass the rootDN into guess_names()
      s4-dns: fixed DNS and SPN update lists for multi-domain support
      s4-dsdb: added samdb_ntds_msdcs_dns_name()
      s4-kcc: fixed _msdcs DNS name
      s4-repl: fixed _msdcs DNS name
      s4-samdb: added host_dns_name(), domain_dns_name() and forest_dns_name()
      s4-dns/spn: fixed DNS and SPN scripts to setup forest DNS name
      s4-join: setup DNS forest name on join context
      s4-acl: use dnsforest not dnsdomain for GC names
      s4-libnet: fixed forest DNS name
      s4-drs: fixed msdcs DNS name in getncchanges
      s4-join: fixed DNS hostname
      s4-dsdb: fixed newlines in DEBUG() calls in cracknames
      s4-dns: cope with duplicate entries in dns_update_list
      s4-dns: fixed dns_update_list for multi-domain forests
      s4-dsdb: fixed use of RMD flags in ldb search in dirsync module
      pyldb: added OID_COMPARATOR constants
      ldb: fixed ldbsearch when no baseDN specified and cross-ncs is used
      s4-services: disable the web server by default
      ldb: make the 'spy' code more paranoid
      s4-torture: fixed a ndr string error
      s4-torture: enable password comparison in drsblobs test
      drsblobs: fixed alignment of drs blobs authentication information
      s4-provision: these substitutuons are not used any more
      s4-samdb: added a few function comments for pydoc
      s4-ldb: allow decoding of trustAuthIncoming and trustAuthOutgoing
      ndr: range check on push of dom_sid blob
      s4-cldap: fixed cldap search based on dom_sid
      s4-cracknames: fixed cracknames to use more specific search
      s4-dsdb: fixed compiler warning
      lib: added base64_decode_data_blob_talloc()
      libndr: moved the NDR_* flags to have less overlap
      libndr: add checking to all pull/push functions of base types
      pidl: added checking of NDR flags in generated code
      torture-ndr: added support for testing push functions
      torture-ndr: fixed NDR tests for DFS blobs
      torture-ndr: fixed NDR tests for NBT blobs
      torture-ndr: fixed NDR tests for NTLMSSP blobs
      torture-drs: fixed NDR tests for DRS blobs
      s4-dsdb: prevent crash on bad DN in construct_parent_guid()
      pidl: adjust expected output for new flag checking
      s4-cracknames: use consistent search for crossRef objects
      s4-winbind: added count argument to wb_sids2xids_recv()
      s4-winbindd: fixed handling of extra_data in s3 requests
      s4-winbindd: implement WINBINDD_SIDS_TO_XIDS
      nsswitch: make the wbcSidsToUnixIds() parser more robust
      s3-loadparm: fixed a memory leak in parametric options
      s3-loadparm: fixed re-application of cmdline parametric options
      WHATSNEW: more information on running dbcheck
      s4-subdomain: fixed invocationID and hostIPs in subdomain join
      s4-join: fixed non-subdomain join
      s4-subdomain: use a password length of 128
      s4-subdomain: don't delete account DN not created in subdomain join
      s4-subdomain: fixed domain guid choice for subdomain join
      s4-subdomain: match windows form for trustAuthInOutBlob
      s4-drs: cope with REPL_OBJ getncchanges call for new object
      s4-dsdb: use get_config_basedn() in python tests
      s4-kdc: default kvno for inter-domain trusts to zero
      samba-tool: use get_config_basedn() to get configuration NC DN
      s4-provision: use get_config_basedn() in DNS setup
      pyldb: fixed places where we try to concatenate a Dn with a string
      s4-dsdb: cope with out of sync replication attributes in partition module
      s4-client: added close command in smbclient
      s4-drs: allow replication of the GC partial attribute set
      s4-dsdb: failing to find the object is not an error in dsdb_loadreps()
      s4-dsdb: added support for replicating with GC partial attribute set
      s4-repl: get NCs to replicate from our NTDS object
      s4-dsdb: enable initial replication of partitions via DsReplicaSync
      s4-dsdb: get GUID and SID for DSA from extended DN
      s4-dns: started adding support for auto-creation of NS glue record
      s4-dsdb: added NO_GLOBAL_CATALOG control
      s4-kcc: return partial replica NCs in drs showrepl
      s4-repl: fill in GUID and SID from partition information
      s4-dsdb: load the partialReplica attribute in the @PARTITION object
      s4-repl: remove unused principal_name element
      s4-ldap-server: set the NO_GLOBAL_CATALOG control on non-GC operations
      s4-rpc: show binding string in failed rpc binds
      s4-kdc: set NO_GLOBAL_CATALOG control in kdc
      samba-tool: use show_recycled in dbchecker
      s4-dbcheck: fixed transaction nesting in dbcheck
      libwbclient: added support for WBC_ID_TYPE_BOTH
      wbclient: added support for handling WBC_ID_TYPE_BOTH mappings
      s3-winbindd: add support for idmap type WBC_ID_TYPE_BOTH
      s4-ldb: enable display of partialAttributeSet with --show-binary
      s4-ldap-server: disallow all modifies on global catalog port
      s4-dsdb: added DSDB_REPL_FLAG* to replication
      s4-dsdb: disallow changes based on instanceType
      s4-dsdb: implement DSDB_REPL_FLAG_PRIORITISE_INCOMING
      s4-repl: add FULL_SYNC and PARTIAL_REPLICA flags
      s4-repl: update instanceType in partial_replica replication
      s4-dsdb: update callers to dsdb_convert_object_ex()
      s4-dbchecker: fixed handling of DSDB DNs in dbcheck
      samba-tool: added --full-sync and --sync-all options to samba-tool drs replicate
      samba-tool: cope with GC compares in ldapcmp
      dns: filled in dnsserver.idl
      dns: build python bindings for dnsserver RPC protocol
      dns: added example python script for dnsserver protocol
      drsuapi: added ncName attid in enum
      s4-repl: fixed formatting of some debug messages
      s4-repl: support creation of new NCs via DsAddEntry
      s4-dsdb: allow uninstantiated NC heads
      s4-partition: allow creation of uninstantiated partitions
      s4-dsdb: fixed formatting of a debug message
      s4-dsdb: added DSDB_REPL_FLAG_ADD_NCNAME flag
      s4-drs: added DSDB_REPL_FLAG_ADD_NCNAME to DsAddEntry call
      s4-join: enable cleanup on failed join
      s4-dsdb: added new control DSDB_MODIFY_PARTIAL_REPLICA
      s4-repl: try harder to find the right SPN in replication server
      heimdal: handle referrals for 3 part DRSUAPI SPNs
      s4-dsdb: add the DSDB_CONTROL_PARTIAL_REPLICA when needed
      s4-dsdb: simplify samdb_is_gc()
      s4-kcc: if we are a GC, auto-add partial replicas
      s4-kdc: treat a kvno of 255 as unspecified
      s4-kdc: don't look at global catalog NCs in the kdc
      s4-sam: don't look in GC NCs for user accounts
      s4-auth: rework map_user_info() to use cracknames
      s4-kdc: fixed handling of previous vs current trust password
      s4-ldap: added DSDB_CONTROL_NO_GLOBAL_CATALOG to ldap encoding list
      s4-dns: add all forest DCs to named.conf.update
      s4-lsa: fixed set of trust password with old password
      s4-dsdb: fixed re-join of subdomain
      s4-subdomain: create trust record with forest root DC
      s4-auth: fixed formatting of some DEBUG() lines
      s4-rodc: ensure we load replicated partitions for RODCs
      s4-rodc: use the rodc_replica flag on the partition
      s4-dsdb: allow groupType update on deleted objects
      ldb: fixed memory leak in control string parsing
      ldb: support raw OIDs in control string parsing
      s4-dsdb: added DSDB_CONTROL_DBCHECK
      s4-dsdb: allow deletion of backlinks if DSDB_CONTROL_DBCHECK given
      samba-tool: add support for fixing broken backlinks in dbcheck
      s4-dsdb: fixed the check_optional_feature() call
      s4-dsdb: fixed behaviour of show_deleted and show_recycled control
      s4-dsdb: fixed one_way_link calculation
      s4-dsdb: don't display links to deleted objects
      s4-dsdb: special case for deleted objects one way link
      libsmbclient: add ABI checking and pc file
      libsmbclient: initial ABI signatures
      ldb: fixed a race in ldb initialisation
      build: added deletion of stale .so and .o files
      dsdb: improve debug message
      subunitrun: give more useful help
      s4-dsdb: moved dsdb_Dn() into common.py
      s4-test: added test suite for common.py code
      build: explain the passing of make options to waf
      kcc: fixed tabs/spaces in kcc python implementation
      kcc: fixed program name
      s4-socket: detect NULL server in socket connection code
      s4-test: improved error checking in samba-tool time test
      pyldb: enhanced get() method on msg object
      build: only run symbol checking if running all tests
      pyldb: fixed ldb API test
      test: added -D option to subunitrun
      test: added directory option to planpythontestsuite()
      test: use planpythontestsuite() for ldb.python test
      samba-tool: print samaccountname in samba-tool user list
      test: fixed several tests to use samba.tests
      s4-dns: added --no-credentials option to samba_dnsupdate
      s4-ntvfs: fixed a unix ACL mapping bug
      s4-ntvfs: added allow_override check based on use of NT ACL
      dbcheck: cope with objects disappearing during checking
      dynconfig: added SBINDIR and BINDIR as updated dynconfig variables
      lib/util: added set_close_on_exec()
      genrand: use set_close_on_exec()
      s4-socket: use set_close_on_exec()
      pidfile: use set_close_on_exec()
      loadparm: fixed service list handling
      s3-loadparm: mark a few parameters as having P_BYTES type
      s3-rpc: added "rpc_server:default" config option
      runcmd: use a pipe for stdin to child processes
      runcmd: use set_close_on_exec()
      s4-heimdal: the ASN1 compiler now depends on libreplace
      Revert "s4-drs: do not try to contact for replication servers that are not anymore in reps*"
      build: fixed a link order problem
      idl: wmi and dcom don't need python bindings
      pidl: add more mapped types
      torture: don't check the NOINDEXED bit in attribute comparison
      dbwrap: changed log level for information about lock order
      s3fs: added file_server directory
      selftest: added a pipe on stdin in s3 child processes
      smbd: detect EOF on stdin in --foreground mode
      s3fs: when samba is logging to stdout, ask smbd to also do so
      torture: added samba4-ntvfs target
      ldb: added ldb_msg_element_equal_ordered()
      replace: added ENOATTR define if undefined
      dsdb: added SHOW_DELETED to samldb_member_check()
      dbcheck: added fix for incorrect RMD_FLAGS
      heimdal: fixed -Werror=format error in com_err
      auth: added cli_credentials_failed_kerberos_login()
      libcli: use cli_credentials_failed_kerberos_login() to cope with server changes
      test_chgdpass: added test for kerberos retry
      s4-librpc: use cli_credentials_failed_kerberos_login to cope with stale tickets
      test_chgdpass: use drs bind to test password change on RPC
      ldb: move ldb_pack.c into common
      ldb: fixed callers for ldb_pack_data() and ldb_unpack_data()
      s4-librpc: try a 2nd logon for more error cases
      samba-tool: "drs options" does not need a samdb connection
      s4-librpc: set error code to LOGON_FAILURE on RPC fault with access denied
      s4-ldapclient: cope with logon failure retry in LDAP
      test-chgdcpass: test the ldap case for server password change

Andriy Syrovenko (3):
      Eliminate dependency on an external uuid library.
      build: Add option to specify where gettext is (/usr/local by default)
      Add '--use-ntvfs' option to 'samba-tool domain join'

Andrzej Hajda (4):
      Import WMI implementation from wmi-0.1.12.
      Import IDL for WMI.
      Import DCOM improvements.
      Import WMI changes.

André Hentschel (3):
      net: Add some German translation
      net: Add German translation, specially for the command listing
      net: Add and fix some German translation

Andy Kelk (1):
      Add dirsort module

Anton Blanchard (4):
      io_bufsize was set too large and so full length reads
      need to do codepage_initialise() for smbtorture to work.
      Add missing gcc memory barriers, this bug showed up when doing a
      PPC spinlocks work again. Sorry, my bad.

Aravind (1):
      torture/smb2: Adding SMB2 Directory enumeration torture tests.

Aravind Srinivasan (35):
      s3: Add statvfs implementation to the onefs vfs module
      Have nmbd check all available interfaces for WINS before failing
      s3 OneFS: Add vfs implementation for SMB_VFS_GET_REAL_FILE_NAME
      s4 torture: Add rename test to imitate the way OS X renames files
      s3: Fix streams enumeration bug in OneFS implementation
      s3: Fix OneFS bug opening streams with truncating disposition
      s3: Fallback to the legacy sid_to_(uid|gid) instead of returning NULL.
      s3: Always allocate memory in dptr_ReadDirName
      s3 onefs: Removing an incorrect TALLOC_FREE
      s3: forward MSG_DEBUG from smbd parent to all children
      s3: Add a new VFS op called SMB_VFS_TRANSLATE_NAME
      s3: Major revamp for catia vfs module
      s3: Add catia to the list of modules compiled by default
      s4/torture: convert printf to torture_comment()
      s4/torture: add new SMB oplock tests
      vfs catia: Fix a possible NULL dereference
      vfs catia: Fix the double translation that was happening with createfile and open.
      vfs catia: Fix a NULL dereference when CATIA is loaded with no mappings specified.
      s4/torture: convert printf to torture_comment()
      s4/torture: convert printf to torture_comment() in RAW-OPEN
      s4/torture: Add two new SMB RAW-OPEN tests
      s4/torture: change comments to torture_failures
      s4/torture: Add SMB sharemode/access mask tests
      s4/torture: Ported SMBv1 RAW-STREAMS tests to SMB2-STREAMS
      s4/torture: convert all printf to torture_comments
      s4/torture: Ported SMBv1 RAW-OPEN tests to SMB2-CREATE
      s4/torture: add a new ulong parameteric torture option
      s4/libcli: add a FILE_NOTIFY_CHANGE_ALL macro
      s4/torture: Port SMBv1 Change Notify tests to SMBv2
      s4/torture: add delete-on-close test for directories
      s4 torture: Update RAW-QFILEINFO to only test info levels that are supported by the server
      s4 torture: Add new RAW-SEARCH test to explore strange max count behavior
      s4 torture: RAW-SEARCH: break out some of the old search levels
      s4 torture: RAW-SFILEINFO display warning instead of error on unsupported info level
      s4 torture: Warn on NOT_IMPLEMENTED in addition to NOT_SUPPORTED for RAW-QFILEINFO

Arnaud Faucher (2):
      heimdal: Don't depend on compile_asn1 and et_compile when using system versions.
      Avoid the use of PyAPI_DATA, which is for internal Python API's.

Arvid Requate (5):
      SEGV in acl_validate_spn_value: dnsHostName NULL
      s4:ntp_signd: fix SEGV if SID cannot be found
      s3:smbd: Fix typo in got_duplicate_group check
      s4:samba-tool: Fix samba-tool fsmo --role=schema
      s4-resolve: Fix parsing of IPv6/AAAA in dns_lookup (bug #9555)

Aurélien Aptel (1):
      docs-xml/manpages/smbclient.1.xml: fix case of -T flag in example.

Barry Sabsevitz (1):
      Fix bug 6802 - A created folder does not properly inherit permissions from parent.

Bill Ricker (1):
      Fix Kerberos interop with Mac OS X 10.5 clients.

Bjoern Baumbach (1):
      Make sure that user exists after running add user script before adding sam account.

Björn Baumbach (167):
      s3-nmbd: Fix bug #7875
      s3-rpcclient: Fix bug #7880: cmd_spoolss_deletedriver() returned without checking all architectures.
      s3-docs: Typos in smbclient man page
      s3-docs: Typos in rpcclient man page
      s3-docs: add some long opts to smbclient(1) man
      s3-docs: fix deldriver option
      s3-torture: Fix cli_errstr() usage (part of bug #7864)
      s3-smbclient: Fix cli_errstr() usage (part of bug #7864)
      s3-masktest: Fix cli_errstr() usage (part of bug #7864)
      s3-smbclient: Fix cli_errstr() usage (part of bug #7864)
      s3:selftest: fix Samba3.pm deprecated idmap config
      s3-modules: Fix debug message
      s3-torture: torture.c: Fix cli_errstr() usage (part of bug #7864)
      s3-torture/mangle_test.c: Fix cli_errstr() usage (part of bug #7864)
      s3-libsmb/passchange.c: Fix cli_errstr() usage (part of bug #7864)
      s3-net_rpc_printer.c: Fix cli_errstr() usage (part of bug #7864)
      s3-client/clitar.c: Fix cli_errstr() usage (part of bug #7864)
      s3-torture/nbio.c: Fix cli_errstr() usage (part of bug #7864)
      s3-docs: change eventlog path from lockdir to statedir
      s3-modules: Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4
      examples/VFS: fix shadow_copy_test.c in reference to shadow_copy changes
      examples/VFS: fix skel_opaque.c in reference to shadow_copy changes
      examples/VFS: fix skel_transparent.c in reference to shadow_copy changes
      s3-torture: introduce check_both_error()
      s3-torture: run_simple_posix_open_test: Remove uses of cli_errstr()
      s3-torture: run_shortname_test: Remove uses of cli_errstr()
      s3-libsmb: Remove use of cli_errstr()
      s3-client: Remove use of cli_errstr()
      libcli: remove duplicate of #define NT_STATUS_NO_SUCH_JOB
      s3-libsmb: introduce cli_lock32()
      s3-libsmb: let cli_lock64 return NTSTATUS instead of bool
      s3-torture: let wait_lock() use cli_lock32() instead of cli_lock()
      s3-torture: locktest2: replace cli_lock() with cli_lock32()
      s3-torture: run_locktest1(): replace cli_lock() with cli_lock32()
      s3-torture: run_locktest2(): replace cli_lock() with cli_lock32()
      s3-torture: run_locktest2(): replace check_error() with check_both_error()
      s3: dbwrap_ctdb.c: fix #ifdef CTDB_CONTROL_SCHEDULE_FOR_DELETION issue (bug #8303)
      s3-torture: run_locktest3(): replace cli_lock() with cli_lock32()
      s3-torture: run_locktest7(): replace cli_lock() with cli_lock32()
      s3-torture: run_locktest8(): replace cli_lock() with cli_lock32()
      s3-torture: run_locktest9(): replace cli_lock() with cli_lock32()
      s3-torture: run_oplock2(): replace cli_lock() with cli_lock32()
      s3-torture: run_locktest4(): replace cli_lock() with cli_lock32()
      s3-torture: run_locktest5(): replace cli_lock() with cli_lock32()
      s3-libsmb: remove unused cli_lock()
      s3-libsmb: replace cli_read() with cli_read_old()
      s3-libsmb: introduce new NTSTATUS cli_read()
      s3-torture: rw_torture(): replace cli_read_old() with cli_read()
      s3-torture: rw_torture3(): replace cli_read_old() with cli_read()
      s3-torture: rw_torture2(): replace cli_read_old() with cli_read()
      s3-torture: run_simple_posix_open_test(): replace cli_read_old() with
      s4-param: use "state directory" and "cache directory" options
      selftest: use "state directory" and "cache directory" options
      s3-torture: introduce test_cli_read()
      s3-torture: run_locktest4(): replace cli_read_old() with cli_read()
      s3-torture: run_fdpasstest(): replace cli_read_old() with cli_read()
      s3-torture: run_fdsesstest(): replace cli_read_old() with cli_read()
      s3-torture: run_oplock2(): replace cli_read_old() with cli_read()
      s3-client/clitar.c: replace cli_read_old() with cli_read()
      s3-libgpo/gpo_filesync.c: return on read error
      s3-torture/denytest.c: replace cli_read_old() with cli_read()
      s3-utils/net_rpc_printer.c: return on read error in net_copy_file()
      s3-utils/net_rpc_printer.c: print more info on write error
      s3-torture/utable.c: replace cli_read_old() with cli_read()
      s3-torture/nbio.c: replace cli_read_old() with cli_read()
      s3-libsmb/libsmb_file.c: replace cli_read_old() with cli_read()
      s3-libsmb: finally remove cli_read_old()
      s3-libsmb: rename cli_query_secdesc() to cli_query_secdesc_old()
      s3-libsmb: introduce new cli_query_secdesc() which returns NTSTATUS
      s3-torture: run_nttrans_create(): replace cli_query_secdesc_old()
      s3-client/client.c: replace cli_query_secdesc_old()
      s3-utils/smbcacls.c: replace cli_query_secdesc_old()
      s3-utils/net_rpc_printer.c: replace cli_query_secdesc_old()
      s3-utils/net_rpc.c: replace cli_query_secdesc_old()
      s3-utils/net_rpc_printer.c: fix error message
      s3-utils: add capabilities to dbwrap_tool
      s3-util: dbwrap_tool: add store hex function
      s3-util: dbwrap_tool: add fetch fuctions for hex and string
      s3-util: dbwrap_tool: fix fetch_string function
      s3-printing: fix typo
      s3-utils: net - Fix one error/usage message
      s3-registry: fix upgrade code
      s3-build: add bin/dbwrap_tool to the BIN_PROGS2 dependencies
      s3-selftest: introduce registry upgrade test
      s3-selftest: add new registry upgrade test to test list
      s3-build: Fix inotify detection (bug 8580)
      s3-wafbuild: Fix inotify detection (bug 8580)
      s3-libsmb: introduce option to disable dos error mapping
      s3-torture: replace cli_errstr() with nt_errstr()
      s3-torture: remove all cli_nt_error() calls in torture
      s3-libsmb/clidfs.c: remove cli_nt_error()
      s3-winbindd/winbindd_cm.c: remove cli_nt_error()
      s3-libsmb/passchange.c: remove some cli_nt_error() calls
      s3-printing: Add new printers to registry.
      s4-selftest: fix output of opened connections in torture_holdcon
      s4-scripting: samba-tool: Fix domain info usage message
      s4-provision: add password verification in interactive mode
      s4-provision: don't ask only 3 times for passwd in interactive mode
      s4-samba-tool: add password verification in add user
      s4-samba-tool: add password verification in change user pass
      s3-selftest: introduce new net registry check check
      s3-selftest: Add samba3.blackbox.net.registry.check to test list
      s3-selftest: Remove some unnecessary comma
      s3-utils: add do_reload_printers command to smbcontol
      docs: add reload-printers command to smbcontrol manual page
      docs: remove whitespace in example samba.ldif (fix bug #8789)
      docs-xml: fix default name resolve order (fix bug #7564)
      libcli/smb: move smb2cli_read.c from source3 to the toplevel
      libcli/smb: move smb2cli_write.c from source3 to the toplevel
      libcli/smb: move smb2cli_flush.c from source3 to the toplevel
      libcli/smb: move smb2cli_set_info.c from source3 to the toplevel
      libcli/smb: move smb2cli_query_info.c from source3 to the toplevel
      libcli/smb: move smb2cli_query_directory.c from source3 to the toplevel
      libcli/smb: move smb2cli_ioctl.c from source3 to the toplevel
      s3:vfs_gpfs: add "gpfs:acl" option
      docs-xml: add gpfs:acl option to vfs_gpfs man page
      docs-xml: vfs_gpfs: fix typo
      docs-xml: vfs_gpfs: add comment "per share option"
      wintest: add working bbaumbach.conf file for use with VirtualBox
      wintest: add option to use ntvfs instead of s3fs
      wintest: set nameserver on a more general place
      wintest: add option to select the dns backend
      wintest: set recursive queries for internal dns
      wintest: check netcats exitstatus instead of output
      wintest: extend get_is_dc function with additional expectations
      wintest: get original nameserver for forwarding on a more general place
      wintest: enable dns forwarding for internal dns
      packaging(RHEL-CTDB): fix build dependencies
      docs-xml: fix typos and format in smb.conf server max protocol man
      s3-libpidfile: some more debug output
      s3-libpidfile: fix check for running process.
      wafsamba: samba_version: add samba version suffix to vcs_fields
      s4: samba_spnupdate: fix "if we are DNS server" check
      docs-xml: fix dfree cache time example
      docs-xml: fix pid directory example
      s3: make recursive_rmdir function non-static
      s3: vfs_streams_depot: add delete_lost option
      s4: samba_backup: Fix typos.
      s3-docs: Fix opening and ending tag mismatch in Samba3-HOWTO (Bug #9235)
      s3-docs: add delete_lost option to vfs_streams_depot.8
      docs: fix opening and ending tag mismatch: para
      docs: fix opening and ending tag mismatch: para
      docs-xml: fix use of <smbconfoption> tag (fix bug #9345)
      build(autoconf): fix check for ctdb_private.h
      build(autoconf): check if we have ctdb_protocol.h in the cluster checks
      build(waf): check if we have ctdb_protocol.h in the cluster checks
      s3:ctdb library: fix the build against older ctdb versions
      s3-torture:test_ctdbconn: fix the build against older ctdb versions
      build(waf): Fail "configure --with-cluster-support" if ctdb support is not available.
      samba_dnsupdate: set KRB5_CONFIG for nsupdate command
      smb.conf(5): update list of available protocols (bug #9552)
      docs-xml: add dbwrap_tool.1 manual page
      build(waf): docs-xml: build new dbwrap_tool.8 manual page
      ntlm_auth(1): fix many format issues and and make examples visible
      build(waf)-libreplace: remove redundant check for flistea function
      smb.conf(5): server min protocol: add hint at list of available protocols
      smb.conf(5): client min protocol: add hint at list of available protocols
      wafsamba: use additional xml catalog file (bug #9512)
      docs: smb.conf: fix max read/write/trans default values (bug #9871)
      s4-dfs_server: check for netbios aliases in ad_get_referrals
      s3-lib: fix segf while reading incomplete session info (bug #10003)
      s3-smbstatus: display [u|g]id of -1 as "-1" in connection list
      CVE-2013-4476: lib-util: add file_check_permissions()
      CVE-2013-4476: lib-util: split out file_save_mode() from file_save()
      CVE-2013-4476: samba-tool provision: create ${private_dir}/tls with mode 0700
      CVE-2013-4476: s4:libtls: Create tls private key file (key.pem) with mode 0600
      CVE-2013-4476: s4:libtls: check for safe permissions of tls private key file (key.pem)

Björn JACKE (1):
      autobuild: perfer to use git mail address in autobuild comment

Björn Jacke (473):
      increase log level for this failed setsockopt call. EINVAL is a normal error on Solaris when we do this on an already resetted connection.
      fix some extrasemi compile warnings
      some shells are pickier than others ...
      add AC_TRY_RUN_STRICT support for Sun Studio compiler
      fix an extrasemi compile warning
      Add ldap connection timeout for OpenLDAP and Netscape LDAP libs. This can be controlled via the ldap connection timeout parameter. This fixes fallbacks to secondary LDAP servers in multi LDAP server setups like in #4544
      correct the description of the "ldap timeout" parameter
      fix syntax error in case statement
      quote ' inside '...' and make sure shell isn't eating \ by using perl here.
      quote ' inside '...' and make sure shell isn't eating \ by using perl here.
      give configure check "sub-second timestamps without struct timespec" a chance to succeed
      rather cosmetic fix for failed birthtime configure checks
      add configure check for AIX style sub-second resolution support
      add AIX sub-second resolution timestamp support
      setting mtime setted atime on BSD systems, fix this
      add missing semicolons
      add configure check for Tru64 sub-second timestamp resolution
      add Tru64 sub-second resolution timestamp support
      fix build with external dns_sd libraries
      "test" expects only one =
      fix for commit d96248a9b46 which broke Heimdal builds
      look for nanosleep in librt, some Unix flavours have it there
      enable IPv6 support for NetBSD, FreeBSD
      today valgrind is available on 64bit Linux, too
      tidy up timestamp checks
      There are systems where nanosleep is in libc *and* in librt.
      all BSDs use this evironment variable
      prefer gssapi header files from subdirectory
      don't hardcode python path
      some shells are picky about ^ without quotes
      make man page (un)install more portable
      use test -f, Solaris /bin/sh doesn't know test -e
      don't rely on shebang's perl path, call our $PERL instead
      fix "dubious escape" warning of Studio compiler
      use LIB_PATH_VAR in selftest.sh if we have it
      fix configure check by avoiding main(main(...))
      fix configure check for external talloc libs
      fix build on sles8 and other old popt installations
      to be portable, use options first, arguments last
      clean up lib64 linking paths the same way as lib
      remove needless rpath stuff for default paths as early as possible
      fix some typos
      fix build on old Heimdal based systems
      ѕ3/winbind_pam: fix gcc 4.4 compile warning
      remove non standard way to point to ctdb path
      don't set -O twice
      s3:dsgetdcname: use parentheses in if condition to make negation clear
      s3/pam_smbpass: don't link agains KRB5LIBS
      s3/smbd: don't link against zlib
      s3/swat: don't link against zlib
      s3/cifs: don't link cifs mount helpers agains popt
      s3/ldbtools: don't neddlessly link against wbinbind libs
      s3: ifdef sendfile code that's only used in other ifdef'ed sendfile code
      s3/cups: add encryption support
      s3/cups: add documentation for new cups encrypt parameter
      ѕ4: fix a "not handled in switch" compile warning
      libcli: fix a "not handled in switch" compile warning
      s4:ldb: do talloc_free and return NULL when we have no matches to return
      s4:ldb: fix extrasemi compile warning
      ѕ3/configure: fix regexp for ld version recognition
      s3:configure: "test" only takes one "="
      s3/ldap: also handle DirX return codes
      s3:pam_smbpass: don't call openlog() or closelog() from pam_smbpass
      s3: fix build on systems with struct stat member st_flags
      Revert "s3: fix build on systems with struct stat member st_flags"
      s3: make passdb backend defaults to tdbsam
      s3: update manpage as to the new passdb backend default
      s3:nmbd: fix typo
      s3:torture: fix password timestamp checks on NetBSD
      s3: correct check for usleep value boundaries
      s3: map NetBSD's errno on posix open calls for symlinks
      s4:heimdal: fix build on FreeBSD
      examples:s2→s3-ldif-convert-script: fix objectclass recognition
      s3:dmapi: prefer dmapi libs from gpfs over system libs
      s3:pam_smbpass: fix build error on some Linux distros
      s3:configure: fix syntax error in avahi configure test
      tdb: fix define of tdbdir when srcdir != "."
      heimdal: don't include <ifaddrs.h> without knowing it's there
      s3/s4:build: honor library path from environment
      s3:configure: honor CFLAGS in compile tests
      libreplace: update library search path variables
      s3: QNX doesn't know uint - replace with uint_t
      s3: don't make same innetgr check twice
      s3: make d9c0d58236 better readble and reduce indentation
      s3: allow setting the TCP_QUICKACK socket option
      s3: make linking of rpcclient --as-needed safe
      ѕ4:heimdal: teach heimdal that we have strnlen via libreplcae
      s4:heimdal: teach heimdal we have (v)aѕprintf in libreplace
      s3:examples:ldap: fix some OIDs in various schema files
      s3:examples:ldap: allow substing search on more attributes in nds schema file
      nss_winbind: remove unused variable
      s3: BSD needs sys/sysctl.h included to build properly
      s3: ignore cups-config to tidy up library dependencies
      libreplace: white space cleanups
      s3: build with pam support when possible
      s3: update comment about (deprecated) a6 records
      s3:configure: don't throw away PRINT_LIBS
      s3:Makefile: fix talloc dependencies with static build
      s3:doc: add some detail about lanman auth parameter
      s3:configure: use --aѕ-needed linker option when supported
      s3:Makefile: net utility dependency cleanup
      s3:Makefile: libsmbsharemode dependency cleanup
      Revert "s3:Makefile: fix talloc dependencies with static build"
      s3:Makefile: fix talloc dependencies with static build (2nd try)
      s3:Makefile: fix libtdb dependencies with static build
      s3:Makefile: fix libwbclient dependencies with static build
      s3:Makefile: eventlogadm dependency cleanup
      s3:Makefile: fix libnetapi dependencies with static build
      s3:Makefile: minor clean up
      Revert "s3:Makefile: fix libnetapi dependencies with static build"
      Revert "s3:Makefile: fix libwbclient dependencies with static build"
      Revert "s3:Makefile: fix libtdb dependencies with static build"
      Revert "s3:Makefile: fix talloc dependencies with static build (2nd try)"
      s3:Makefile: another attempt to fix the talloc dependency
      s3:Makefile: another attempt to fix the tdb dependency
      s3:Makefile: another attempt to fix the netapi dependency
      s3:Makefile: another attempt to fix the wbclient dependency
      s3: make linking of libwbclient --as-needed safe
      ѕ3: fix domain trust documentation confusion
      s3:net simplify padding to single printf call
      s3:net: simplify padding to single printf call
      s3: fix outdated proto.h causing build error on AIX
      s3: build pam_smbpass when possible
      s3:configure: fix avahi activation
      s3: allow using different LDFLAGS for internal libs/plugins
      s3: make unresolved symbols in libs throw errors
      s3:configure: add support for Solaris' ld -z ignore
      s3:Makefile: rename LDSHFLAG variables to make meaning more obvious
      s3:Makefile: add some explicit dependencies to libc
      s3:net: fix output of net rpc trustdom list
      ѕ3:ldap: search for account policies in objectclass sambaDomain, not *
      ѕ3:buildsystem: fix depenencies for libreplace
      s3:Makefile: add LIBREPLACE_LIBS for talloc, tdb and wbclient
      s3:ldap: don't search when no values where found
      s3: add support for full windows timestamps resolution on files
      s3/pam: move variable declaration into belonging ifdef section
      pam_winbind: fix a printf type mismatch warning
      s3: prefer posix_fallocate for doing "strict allocate"
      s3:build: fix shared library build on QNX
      s3:build: remove redundant qnx block size definition
      ѕ3: remove superfluous option check
      s3: check if glibc has broken posix_fallocate
      s3: allocate only "new" space, not "old" sparse space in the posix_fallocate path
      s3: make sys_posix_fallocate more generic
      s3:doc: make dos filetimes description less contradictory
      s3:configure: check for lutimes, futimes and futimens
      s3: keep subsecond times on cross-filesystem moves and don't follow links
      s3: add LDAP Alias Dereferencing support
      s3: make own defines for ldap deref types
      s3: add prototype to fix the build
      s3:docs: document ldap deref
      vfs_commit: print warning when no fsync support is there
      ѕ3:configure: use gettimeofday check from lib/util/
      s3:lib/time: remove unused nt_time_equals
      s3:lib/time: remoce null_mtime() - use null_time()
      ѕ3:lib/time: replace make_dos_ and put_dos_ functions with those from lib/util/
      lib/util: move TIME_T_MIN/MAX defines into header file
      s3:lib/time: remove TIME_T_MIN/MAX defines
      ѕ3/i18n/de: fix typo
      s3/i18n/de: improve some German translations
      s3/net: split up some printable stings to ease i18n
      s3: build with dnsupdate support when possible
      s3: fix dnsupdate configure check
      s3/doc: update vfs_shadow_copy2 man page according to new options
      s3:netapi: remove unused variable
      s3: remove unused Variable
      libreplace: fix unused varibale warning on IRIX
      s3:async_smb: remove unused variable
      s3: remove unused variable
      s3: fix detection and flags for using pthread
      Revert "libreplace: fix unused varibale warning on IRIX"
      s3: get pthread detection also on HP-UX right
      s3: syntax fix
      s3: by default don't use pthread pool support
      s3: link thread objects in libsmbclient only and adjust linker flags
      s3:configure: check complete set of EA functions only when we found at least one
      s3:vfs_scannedonly: fix build on HP-UX
      s3: fix build on Tru64 after it broke with deactivating pthread pool support
      s3:nsswitch: also use pthread CFLAGS for the nsswitch modules that might require it
      s3: fix build issue on Tru64
      s3: quiet the unresolved symbol warnings of the Compaq compiler when linking our vfs modules
      vfs_catia: fix return type warnings
      s3: fix some wrong newlines in de translation strings
      s3: change ldap filter to what really was intended
      s3:docs: add some advice for usage of strict allocate
      s3: optimize strict allocate for XFS on IRIX
      s3: add explicit configure option whether or not to enable dmapi support
      s3:vfs_aixacl2: add missing semicolon
      s3: remove cross-device rename support from vfs_default
      s3: add vfs_crossrename
      s3: add man page for vfs_crossrename
      s3: add missing Makefile.in changes for vfs_crossrename
      ѕ4: EDQUOT needs to be mapped to NT_STATUS_DISK_FULL
      s3: add comment about what the FSCTL_QUERY_ALLOCATED_RANGES currently does
      s3/packaging: make rpm build work by overriding strict linker flags
      s3:configure: not simply check for "ld" but for the linker used by $CC
      s3: fix the merged build - it required $LD
      s3:configure: use correct SONAMEFLAG on Solaris depending on which linker is being used
      s3:configure: search fdatasync also in librt
      idl: fix Unix builds by replacing bashism
      idl: get the logic of the prevous commit right
      waf:libreplace: set _OSF_SOURCE to fix build on Tru64
      pidl: fix build on systems that don't have perl in /usr/bin/
      not all versions of env like more than one argument...
      s3:build: don't use pieflags twice - ldflags already have them
      s3:Makefile: position independency is also needed for shared libs
      s3:build: remove CFLAGS from LDSHFLAGS, SHLD has them already
      s3:Makefile: set PIE flags also for nss_winbind
      s3: major overhaul of compiler and linker flags for HP-UX builds
      s3:configure: add Werror_FLAGS for IBM's xlc
      s3:configure: turn "error warnings" into errors
      s3: fix the configure run
      s3:configure: use the right AC_CACHE_CHECK variable
      s3:Makefile: fix a typo in flag variable name
      s3:Makefile: add missing linker flags for smbfilter
      s3: add m4 macro to check if stderr is empty or not
      s3: fix check for pie compiler flags
      Revert "s3: Attempt to fix the non-gnumake build"
      s3: set pthread cflags in a more portable fashion
      libreplace: include sys/file.h only when available
      s3: use autoconf macro to get some debug output in config.log
      s3: final test for working shlib support requires PIE_LDFLAGS
      s3: use PICFLAG instead of PIE_FLAGS
      s3:configre: work around shell problem on HP-UX in AC macro
      ѕ3:Makefile: use PIC instead of PIE flags for shared libs
      s3: fix build on Heimdal based systems like NetBSD5
      s3:build: add shared lib flag for HP-UX compiler
      s3: fix build on platforms without st_blocks and st_blksize stat struct members
      s3: fix calculation of st_blocks in init_stat_ex_from_stat
      s3: fix calculation of st_blocks in streams_xattr
      s3: fix build on HP-UX
      s3: readd h_errno struct member but rename it
      s3:configure: use cc for linking on IRIX and fix shlib usage
      s3:pdb_ldap: change LDAP password before samba password hashes
      Revert "s3: Don't use as-needed"
      s3: add configure swtich to manually disable as-needed
      s3: check for explicit external lib bug in ld's as-needed code
      s3: also run the test prog from the explicit external lib bug check
      s3: not use as-needed by default and auto use if enable-developer is active
      Revert "s3: Use cups-config --libs"
      s3: fall back to cups-config for underlinked libs
      tdb: add TDB_DEPS variable filled with required libraries
      pam: fix unused variable warning
      vfs_smb_traffic_analyzer: fix off by a second bug
      libreplace: move gettimeofday TZ arg check here
      libreplace: move detection of clock_gettime to libreplace
      libreplace/waf: look for clock_gettime
      libreplace: add clock_gettime replacement function for systems that don't have it
      s3: use clock_gettime() in timespec_current()
      s3: we have clock_gettime everywhere, remove ifdefs
      libreplace: make a define for a best effort monotonic clock
      lib/util: add function to query the monotonic clock with the required fallback to the realtime clock
      s4:process_thread: use monotonic time for time deltas
      s3: add TspecDiff macro
      s3: use monotonic clock for time deltas in smbclient
      s3: use monotonic clock for time deltas in smbtar
      s3: use monotonic clock for time deltas in namequery functions
      lib/util: add nsec_time_diff to calulate diffs from timespecs
      s3: use monotonic time in timeout of sys_select_intr()
      s4/ldb: use monotonic clock for time deltas in ldbtest
      s4/torture: use monotonic clock for time deltas in denytest
      s4: use GetTimeOfDay macro instead of gettimeofday
      replace/waf: add rt to deps at this place
      tdb/waf: the deps for rt are provided by libreplace
      s3: use monotonic clock for time deltas in smbget
      s4/heimdal_build: use GetTimeOfDay macro instead of gettimeofday
      s3: use fine grained time in netprot response
      Revert "s4/heimdal_build: use GetTimeOfDay macro instead of gettimeofday"
      s4/ldb: fix standalone build
      lib/util: add time_mono() for monotonic time a la time()
      s3/libads: use monotonic clock for DNS timeouts
      s3/nmbd: tidy up debug message: ttl isn't a hex value
      s3: use monotonic clock for aio timeout
      s3/libads: use monotonic clock for ldap connection timeouts
      s3/ldap: use monotonic clock for timeouts in smbldap
      s3: use time_mono throughout in smbget
      s4/torture: use time_mono for deltas in lock test
      s4/torture: use time_mono for delta time
      s4/torture: use time_mono for timeouts
      s4/ldap: use time_mono for reconnect timeout
      s4/pvfs: use monotonic time for this timeout
      libreplace: clock_gettime sets errno
      s3/winbind: use mono time for startup timeout check
      libreplace: use CLOCK_HIGHRES when available
      s3/profiling: don't use CLOCK_PROCESS_CPUTIME_ID
      s3/profile: remove the magical clock initialization from the profile code
      s3/printing: make clock jump save and use monotonic time for cache timeout
      s3/printing: avoid a possible race condition in the cache timeout
      s3/vfs_scannedonly: use smb_msleep instead of nanosleep
      s3: use nsec_time_diff instead of TspecDiff
      s3: remove TspecDiff macro, we can use the shared nsec_time_diff function
      s3/s4: merge msleep and smb_msleep
      s3: remove TvalDiff macro, we can use the shared usec_time_diff function
      ѕ3: remove smb_msleep prototype from here
      s3: fix order of arguments in nsec_time_diff call
      lib/util: usec_time_diff takes arguments the other way round than TvalDiff did
      s3/winbind: remove unused winbindd_check_cache_size
      s3: don't build krb5 locator plugin if we don't build winbind
      tevent: include libreplace heade before tevent header
      libreplace: fix endless strerror_r has been redefined warnings on AIX
      s3: fix tdbdump build on Solaris and other boxes
      s3/configure: fix typo and warning
      s3/vfs_time_audit: use monotonic clock for time deltas
      s3/time_audit: fix a change that was just for debuggin purposeѕ
      s3/doc: add missing documentation for vfs_time_audit
      s3/vfs_tsmsm: fix debug output for large files
      s3/vfs_tsmsm: remove unneeded cast to off_t
      ѕ3/configue: set Tru64 cc's PIC switch right (none)
      s3/smbtorture: use $MAKE to build to make sure we use the make that makes our build
      librpc: fix builds without IPv6 suport (HP-UX 11.00)
      s3/configure: fix GNU ld version detection with old gcc releases
      s4/waf: add intl dependency for nss_winnbind
      waf/buildtools: use /bin/sh instead of /bin/bash and put ^ in quotes
      waf/buildtools: remove more bash shebangs and fix a == to =
      smbprinting: fix wrong == in shell tests
      fix ѕome == to correct shell test in commented stuff
      tests: avoid bash in shebang and fix wrong "==" in test
      s3/selftest: add some FIXMEs
      s4/ldb: fix shell syntax error in test script
      s4/scripting/ktpass: make shell code portable and eliminate another bash requirement
      s3/net: don't use external "date" to make "net time set" more portable
      s3/net: tz argument should be NULL of course
      s3: add FILE_ATTRIBUTE_SPARSE to get_stat_dos_flags
      s3: remove set_sparse_flag
      s3/vfs_gpfs: map SPARSE attribute to/from WINATTRs, too
      s3:smbd: add file_set_sparse() function
      s3:smbd: implement FSCTL_SET_SPARSE more correctly
      examples/LDAP: delete unmaintained samba-schema-netscapeds4.x
      examples/LDAP: remove overoutdated samba-schema.IBMSecureWay
      Revert "examples/LDAP: remove overoutdated samba-schema.IBMSecureWay"
      s3/vfs_gpfs: s/syncops/gpfs
      ѕ3/configure: move out generic LDFLAGS in the solaris case here
      ѕ3/configure: move out generic CPPFLAGS in the solaris case here
      s3: reply_readbraw_error needs an sconn as argument also in the non-LFS code path
      replace: fix build issues on GNU Hurd (#7998)
      replace: remove waring if IOV_MAX is not defined
      s3/pthreadpool: replace bad portable gettimeofday by clock_gettime
      s4/server: simplify and replace bad portable gettimeofday by time
      s3:vfs_commit: fix build
      s3/swat: use strlcat instead of strncat to fix build on old Linux distros
      s3/ldap: delay the ldap search alarm termination a bit
      s3: make linking of pthreadpooltest work on more platforms
      s3:vfs_prealloc: fix build on SLES8
      s3/ldap: don't continue if we couldn't get the domain info on startup
      s3/doc: add man page for aio_fork vfs module
      s3:Makefile: make DSO_EXPORTS_CMD more portable (#8531)
      s3: allow to set TCP_NODELAYACK socket option on AIX
      s3/doc: document the ignore system acls option of vfs_acl_xattr and vfs_acl_tdb
      s3: fix build on AIX
      s3/ldap: remove outdated netscape ds 5 schema file
      s3: fix compile of krb5 locator on Solaris
      s3: remove dependency on automake for "make everything"
      s3: temporary hack to make the waf build work withouth autotools being required
      s3: enable winbind also for upcoming FreeBSD/NetBSD releases >=10
      util: fix build on platforms without IPv6 support
      build: fix typo that breaks the HP-UX build
      build: try to fix large file support for AIX
      s3: handle non-POSIX compliant Tru64, NetBSD and FreeBSD errno on O_NOFOLLOW symlink open calls
      s3: fix build on systems without O_NOFOLLOW
      s4/pvfs: handle non-POSIX compliant Tru64, NetBSD and FreeBSD errno on O_NOFOLLOW symlink open calls
      s3/test: make dd call more portable
      s3/doc: some spelling fixes
      doc: fix typo uniq → unique
      replace: fix unused variable warning
      s3: fix build without ads support
      Revert "replace: fix unused variable warning"
      replace: fix unused variable warning
      make librpc/build_idl.sh more portable
      Revert "s3: temporary hack to make the waf build work withouth autotools being required"
      s3:test: make shell code more porable by elimnating "local" keyword
      s3:Makefile: use our "$MAKE" instead of "make" in our own Makefile
      s3:test_net_registry_check: eliminate "local" keyword in shell
      s3:test_registry_upgrade: make more portable and eliminate "local" keyword
      Merge suggested fix from bug 7511 and enhance it
      tests: make test_ldb portable, eliminate "local" keyword
      s3:test_net_registry_check.sh: grep -E isn't portable, use egrep
      replace: define INT64_MAX when not defined
      s3: fine tune and clean up statvfs tests
      s3: merge bsd_statvfs and darwin_statvfs
      s3:build: tell linker to use corefoundation on all darwin releases
      s3: fix the logic in bsd_statvfs
      s3:configure: fix numerous compile warnings about implicit declaration of 'exit'
      s3: add sendfile support for Tru64, which is the same as HP-UX's
      s3:waf add sendfile support for Tru64, which is the same as HP-UX's
      s3: if we know a file is immutable, report it to be readonly
      replace: make the INT64_MAX define more portable
      s4/heimdal: fix make-proto.pl with perl 5.16
      s3: evaluate MNT_QUOTA and MNT_RDONLY in statvfs also on darwin
      lib/addns: remove use of uint8 uint16 and uint32 in favour of C99 types
      lib/addns: remove defines we don't need or have for sure via libreplace
      talloc: remove unused variables
      test: fix compile warning on test summary
      s3: make log message of FSCTL_IS_VOLUME_DIRTY more clear
      s3/torture: adjust dependency to fix build when no winbind was build before
      s3:configure: add Darwin sendfile() test
      s3:waf: add Darwin sendfile() test
      s3: add Darwin sendfile support and merge with the FreeBSD code
      s3: use libreplace in pthreadpooltest to fix some builds
      s3/aio_fork: fix build on irix
      buildtools: use egrep when we need the "-f patternfile" option
      s3:vlp: fix build on OS X
      vfs_media_harmony: fix return of void
      vfs_time_audit: Remove some unnecessary return; statements
      vfs_time_audit: Remove unnecessary return; statement
      vfs_full_audit: Remove some unnecessary return; statements
      vfs_afsacl.c: Remove some unnecessary return; statements
      vfs_dirsort: Remove unnecessary return; statement
      build: rename security → samba-security
      tdb/test: fix build on OSF/1
      s3: skip loading vfs modules for printer connections
      libcli: fix value of NT_STATUS_FILE_NOT_AVAILABLE
      s3/registry: fix compile warning on openindiana
      crypto/aes_ccm_128: fix compile warning on openindiana
      s3: fix compile warning on openindiana
      vfs_media_harmony: fix some compile warnings with llvm
      s3: add sysquotas_4B support
      s3: adopt the new sysquotas_4B support for BSD
      s3: remove some duplicate quota code
      waf: add new quota header checks and sysquota_4B source file
      sysquota: we need to list nfs4 as a separate fs name for the sys_get_nfs_quota backend
      s3:quota: don't force the block size to 512
      fileserver:sysquotas: remove wrong cast
      waf: add check for BSD_STYLE_STATVFS
      s3-smbd: Remove OSF1 support from old (pre-sysquotas) code
      s3:sysquota_xfs: check and include the right fs header file for xfs quotas
      s3:sysquota_xfs: fix logic so that we actually use this module on Linux
      s3:quota: clean up and consolidate the xfs quota checks and defines
      build: define _BSD_TYPES on IRIX to have types like u_short
      s3:sysquota-test: include ufs/ufs/quota.h only when found
      rpcserver: fix useless declaration warning
      s3:sysquota_nfs: fix build on Tru64 et alii
      s3:autoconf: look for irix xfs only when if we didn't find the Linux one before
      waf: make checks for different XFS flavours
      waf: add test for HAVE_DQB_FSOFTLIMIT
      waf: add tests for NFS quota stuff
      doc: improve quotacommand man page docu
      s3:quota: don't add the string '"' into the argument list
      s3: fix wrong invocations of talloc_realloc
      s3:quota-nfs: another build fix for the old Unix world
      s3:quota-nfs: add RQ_PATHLEN define for systems that don't have it
      wafbuild: add defines for linux quota and sysquota support
      quota: fix configure test for HP-UX
      s3:proto.h: remove duplicate disk_quotas prototypes
      quota: move function again to its belonging ifdef block
      s3: remove unneeded noquota.c file
      autoconf: fix --with(out)-sendfile-support option handling
      packaging: apply some solaris packaging fixes
      s3: fix the aix acl module
      s3: fix the tru64 acl module
      s3: fix the hpux acl module
      wafbuild: check for dn_expand also in libinet
      autoconf: check for dn_expand also in libinet
      quota: also log which fs type we found
      replace: add some includes for poll.h
      quota: add supprt for gfs2
      replace: fix 520c9b0b0ae33
      wfabuild: fix the -errwarn compile flag test
      wafbuild: merge the missing IBM compiler Werror flag "-qhalt=w" to waf
      wafbuild: reorder the Werror checks so that the ambigous w2 option is being checked last
      ccan/wafbuild: use WERROR_CFLAGS instead of -Werror
      wafbuild: use WERROR_FLAGS in wscript_configure_system_mitkrb5
      wafbuild: use -Wstack-protector if available
      util: remove accidently committed hunk
      build/autoconf: fix check for GNU ld version
      build:autoconf: fix output of syslog-facility check
      build/autoconf: put ld check variable in quotes
      Revert "wafbuild: use -Wstack-protector if available"
      build: use -fstack-protector if available
      winbind/idmap_ad: be verbose about the user that we fail to map
      docs/rpcdaemon: some formating fixes
      doc: some fixes for vfs_full_audit man page
      docs: mention AD prerequirements for using idmap_ad
      xattr: fix listing EAs on *BSD for non-root users

Bo Yang (59):
      Only cache password policy results that worked, otherwise we
      i18n/l10n pam_winbind
      Fix broken msgids in ntstatus_errors
      Fix script installmo.sh when no .po file exists
      clean event context after child is forked.
      Fix broken krb5 refresh chain
      set entry->refresh_time to make ccache_regain_all_now() work correctly.
      Don't set child->requests to NULL in parent after fork
      Fix tevent_common_context_destructor to remove all events instead of just the first one
      Don't send message to any other child in child process.
      Fix bug in get_dc_name_via_netlogon(), null pointer refrence.
      Make libsmbclient work with DFS
      Initialize the id_map status in idmap_ldap to avoid surprise
      More fix to initialize idmap statuses
      Fix careless mistake in winbindd_setup_sig_usr2_handler
      Fix crash in async_smb.c
      s3: fix crash in winbindd
      s3: return proper error code in cli_smb_req_send
      s3: checkin .po for pam_winbind
      Revert "s3: checkin .po for pam_winbind" because of license issue.
      s3:libsmb: return NT_STATUS_CONNECTION_INVALID if the fd is -1
      s3: tevent_req_poll() loops forever when pipe is broken
      s3: Fix request flags in wbinfo when perform krb5 authentication
      s3: set winbindd request flags in ntlm_auth to make it contact trusted domain when krb5 auth is enabled
      s3: Fix onlinestatus msg to return status of all domain instead of omitting trusted domains
      s3: ignore EPIPE error when winbind finally writes to wb client because client might have already closed the socket
      s3: fix building of pam_smbpass.
      s3: Make smbd aware of permission change of usershare. Since usershare are relatively volatile and non-previledge users must disconnect from smbd and reconnect to it to make share permission in effect.
      S3: Small fix to get rid of annoying log message.
      s3: Fix double free in net usershare.
      s3: fix build of pdbedit and net_sam. Guenther, please check. Signed-off-by: Bo Yang <boyang at samba.org>
      s3: Fix crsh in net usershare list
      s3: don't do this, upper callbacks will check it
      s3: compile warning and upn handling
      s3: add failure check.
      s3: check in .po files for pam_winbind.
      Unable to browse DFS when using kerberos
      s3: Fix nss info substitution
      s3: add a test to test libsmbclient
      s3: Don't overwrite password in pam_winbind, subsequent pam modules
      s3: Fix reference to freed memory in pam_winbind.
      s3: Don't fail authentication when one or some group of require-membership-of is invalid.
      s3: Fix crash in pam_winbind, another reference to freed memory.
      s3: Fix kerberos refresh chain.
      s3: Fix crash in free_file_list().
      s3: Fix crash in winbindd;(bug#6879).
      s3: Give the user a chance to change password when password will expire soon.
      s3: Fix build on non-linux platform.
      s3: check for PAM_RADIO_TYPE.
      s3: Fix infinite loop in NCACN_IP_TCP asa there is no timeout. Assume lsa_pipe_tcp is ok but network is down, then send request is ok, but select() on writeable fds loops forever since there is no response.
      s3: Make winbindd_cache.c aware of domain offline to avoid unnecessary backend query.
      s3: List trusted domains from wcache when domain is offline.
      s3: Fix malformed require_membership_of_sid.
      s3: signals are processed twice in child.
      s3: Don't invalidate cache for uninitialized domains.
      s3: Add i18n/l10n strings in pam_winbind.c coming from winbindd.
      s3: Rerun genmsg after adding more strings.
      s3: Fix unnecessary traversing winbindd_cache.tdb in SIGHUP handler.
      s3: Open winbindd_cache.tdb with read/write access.

Brad Hards (34):
      Some cleanups for the ldb doxygen docs.
      Define HAVE_ASM_BYTEORDER at all times
      Update instructions for checking out pidl.
      Avoid using deprecated form of AC_CHECK_TYPE.
      Add support for double type in pidl.
      s4:param remove reference to private header from source4/param/param.h
      Spelling fixes for tdb.
      Spelling fixes for tevent.
      Spelling fixes for popt API documentation.
      Spelling fixes for nss_wrapper.
      Spelling fixes for lib/compression.
      Spelling fixes for tsocket API documentation.
      Spelling fixes for libreplace.
      Spelling fixes in lib/zlib.
      Spelling fixes for libutil
      LDB related spelling fixes.
      Typo fix.
      Spelling fixes for source4/lib/registry.
      Spelling fixes for source4/auth.
      Various source4 spelling fixes.
      More spelling fixes across source4/
      s4-build: added dcerpc_server library
      build fix
      s4-auth Fix typos in samba4 auth code
      Update dcerpc_server.pc library name to match reality.
      Typo fix in KDC parameters.
      talloc: Fix warnings in test code
      s4:ldb: Add prototype header.
      s4:ldb: Make sample module implementation static.
      s4:dynconfig: Add prototypes to match dynconfig.c
      talloc: Typo fix for api docs
      dynconfig: Add extern to header, try to unbreak imini buildfarm host.
      util: Build samba-util without unresolved symbols.
      s4/auth: Trivial spelling fixes.

Brad Henry (25):
      r18414: This README file should help to explain what is needed to setup a Windows VM for testing using this framework.
      r18415: Make the samba-windows test scripts executable so they run a little easier in the build farm.
      r18883: Start including test_functions.sh.
      r18884: client_test.exp getting changed to client_tests.exp was an intentional error that I inserted for testing earlier and forgot to take out before commiting.
      r19277: This commit adds support to run the smbtorture RPC-ASYNCBIND RPC-ATSVC
      r19278: Change the delete_directory() expect function so that rmdir will
      r19279: These setup and cleanup functions are general enough for any test which needs
      r19280: Missed renaming a remove_qfileinfo_test() function call.
      r19281: Generalize what we do for the RAW-QFILEINFO test call so that the same process
      r19432: This way of reverting snapshots is much better than the way I was doing them before.
      r19470: Move common windows test functions into their own script wintest_functions.sh, and remove them from the main windows test script.
      r19471: Move BASE and RAW tests to their own scripts. Run the same set of tests as 'make test' does, at least for those that pass.
      r19472: Move rpc tests to their own scripts. Run the same tests as 'make test' does.
      r19473: Add NET tests in their own script. Run the same set of tests that 'make test' does.
      r19474: Move the Samba server / Windows client test to its own script.
      r19475: fixed a couple of typos.
      r19476: small typo.
      r21473: Added new parameters to test_win.conf that apply only to the DC tests.
      r21475: Updated vm_get_ip.pl to read the name of the environment variable containing the VM path from the command line.
      r21494: Fix 'make wintest' to support command-line changes to 'vm-get-ip.pl' and the revertsnapshot() shell function.
      r21495: Pass the VM .vmx file path to wintest_2k3_dc.sh on the command line.
      r21498: Putting the second parameter in quotes so that we accept spaces in the config file path.
      r21521: Add missing quotes around shell variables which could have spaces.
      r21522: Stop passing the VM config file path to wintest_2k3_dc.sh on the command line.
      r21528: This file gets called by testit(), so it shouldn't call testit().

Brad Smith (4):
      Fix sys_fseek wrapper
      s3: Fix bug 8777, sys_statvfs() wrapper support for OpenBSD/FreeBSD/DragonFly
      s3: Further fix for bug 8777
      s3: Improve statvfs support

Bram (1):
      Bug 7551: Return error of cli_push when 'put - /some/file' is used

Brendan Powers (7):
      Return NULL in strlower_talloc if src is NULL
      s4-dsdb: Add a check to prevent acl_modify from debuging a NULL message
      s4-dsdb: Move get_last_structural class from descriptor.c to util.c
      s4-dsdb: return an error if samAccountName is not specified when creating a user.
      s4-dsdb: fix handling of AUX classes in objectclass_sort
      s4-dsdb: Add a test for adding, deleting, and appending a posixAccount objectClass to a user
      libcli: Fixed a segfault in security_acl_dup when the acl is NULL.

Brian Lu (6):
      s4: Check SUN compiler and remove "-fullwarn" when using it
      librpc/ndr: avoid comparison_fn_t to fix the openchange build on solaris
      s4:tls: fix the build on Solaris
      tevent: create symbol links to shared libraries see https://bugzilla.samba.org/show_bug.cgi?id=6991 for details
      talloc: create symbol links to shared libraries see https://bugzilla.samba.org/show_bug.cgi?id=6991 for details
      tdb: create symbol links to shared libraries see https://bugzilla.samba.org/show_bug.cgi?id=6991 for details

C. Davis (50):
      s3: Wrap calls to the s3 registry API.
      Support s3 local access with the s4 libregistry framework
      regedit: Add regedit main source file
      regedit: First crack at linking to ncurses.
      regedit: Initial import of treeview code
      regedit: Setup a test tree view of HKLM.
      regedit: Make all hives browsable.
      regedit: Print the registry path.
      regedit: List values for the selected key.
      regedit: Print value summary, fix heap corruption and path printing.
      regedit: Don't overwrite the '/' when printing path.
      regedit: Use tab key to switch between key and value sections.
      regedit: Take into account that getch() may return a '\n' instead of KEY_ENTER.
      regedit: Introduce dialog windows.
      regedit: Improve calculation for centering dialogs.
      regedit: Link to ncurses form library
      regedit: Import hex editor.
      regedit: Some work on dialogs.
      regedit: Don't refresh treeview and value list.
      regedit: Value editor changes.
      regedit: Save contents of value editor.
      regedit: Add new value type selection dialog.
      regedit: Really delete value.
      regedit: Don't pass empty value names to new_item().
      regedit: Simplify notice dialogs, don't overwrite existing values.
      regedit: Add an input dialog.
      regedit:hexedit: make sure cursor is updated on physical screen.
      regedit: Initialize hexedit buf with data if available.
      regedit: Edit binary values with hexedit.
      regedit: Delete and add keys.
      regedit: Create subkeys.
      regedit: Handle term resizes.
      regedit: Update dialog position on screen resize.
      regedit: Improve padding for value summary.
      regedit: Uese a pad for path label.
      regedit: Cut off the front of the path when screen width is too small.
      regedit: Prefer copywin() over prefresh() for displaying path.
      regedit: Add help msgs for key and value sections at bottom of screen.
      regedit: Reduce magic numbers in edit dialog, clean up edit dialog creation.
      regedit: Print help on left side of screen instead of the right.
      regedit: Add a general help section.
      regedit: Restore cursor position when user tabs to a field.
      regedit: Enable using tab to cycle thru dialog buttons.
      regedit: Add missing copyright headers to hexedit code.
      regedit: Fix white space and wrap long lines.
      regedit: Simplify the editor dialog input loop.
      regedit: Load values on startup.
      regedit: Handle zero-length buffers better with hexedit.
      regedit: Add an edit binary command.
      regedit: Mark string values if they contain unprintable chars.

Charles (4):
      Add --update option to smbget.
      smbget: Make global variables static.
      Fix return code.
      The attached patch removes some global variables, and make them local to main().

Chere Zhou (2):
      minor memory leak fix
      s3:smbd: Align change notify replies on 4-byte boundary

Christian Ambach (286):
      do not merge ACEs with different SMB_ACE4_INHERIT_ONLY_ACE flag, this leads to wrong inheritance flags in the ACL e.g. (on GPFS) user:10000036:rwxc:allow (X)READ/LIST (X)WRITE/CREATE (X)MKDIR (X)SYNCHRONIZE (X)READ_ACL (X)READ_ATTR (X)READ_NAMED (X)DELETE (X)DELETE_CHILD (X)CHOWN (X)EXEC/SEARCH (X)WRITE_ACL (X)WRITE_ATTR (X)WRITE_NAMED
      reject ACLs with DESC_DACL_PROTECTED on GPFS
      do not log chdir with level 0 if reason is access denied
      changed debuglevel for two messages in the GPFS module from 0 to 10 they spammed the logs on a test machine and they are just debug messages, so let's move them to the level of the other debug messages in the file
      add e2fsprogs-devel as build dependency this is needed for AD because it contains libcom/libcom_err files and headers
      streamline some log levels for invalid servicenames
      update samba schema for IBM Directory Server
      fix a segfault in the notify subsystem
      fix snapshot content display with hide unreadable
      small optimizations for shadowcopy2 module
      s3:vfs:syncops make it possible to specify syncops:onclose per share
      s3:vfs:syncops add option to disable module per share
      s3:vfs:gpfs convert sharemodes/leases parameter
      s3:gpfs: Add support for the gpfs_ftruncate call
      s3:winbind add timeouts to winbind cache
      s3:winbind add wcache_tdc_fetch_domainbysid
      s3:idmap: add a new ID mapping module autorid
      s3:winbind correct a copy&paste error
      s3:vfs fix children cleanup in aio_fork
      s3:vfs aio_fork children do not go away
      s3:registry correct a debug level
      s3:utils enable sharesec for registry shares
      nsswitch: fix a segfault in the krb5 locator plugin
      s3:vfs:syncops add option to disable metasync per share
      s4:smbtorture do not leave output directory around
      s3:idmap:autorid prevent fatal configuration changes
      s3:libsmb only log a dead connection if it was not closed
      s3: Survive an idle child that was killed
      s4:waf-build fix disable-shared build for smbtorture
      s3:autorid make sure we set the mapping status correct on early exit
      s3: use getgrset() when it is available
      s4/libcli: do not announce NT error code support when it is disabled
      libcli: allow exclusion of netbios name in NTLMV2 blob
      s4/libcli: do not use netbios name in NTLMv2 blobs w/o spnego
      s3:vfs use gpfs_lib_init
      s3:libsmb convert user-specified domain to uppercase
      Fix Bug 8152 - smbd crash in release_ip()
      s3:smbd remove unused code
      s3:vfs properly terminate enums in audit modules
      s3:modules properly terminate enums in nfs4 acl code
      packaging(RHEL-CTDB): align configure.rpm to the spec file
      s3:modules fix some non-empty blank lines
      s3:net fix a typo
      s3:vfs cleanup unused code in vfs_recycle
      s3-utils: fix crash in net cache get
      s3:modules fix Bug 8244 - Cannot copy files larger than 2 GB to Samba share
      s3:g_lock: g_lock.tdb should not be executable
      docs: fix a typo
      docs: fix some whitespace
      s3:smbd do not panic when CTDB is unhealthy (Bug #8278)
      s3:smb2 fix smbd crash on premature end of smb2 conn (Bug 8286)
      s3:modules fix non-empty blank lines
      s3:lib fix non-empty blank lines
      .gitignore: add AIX WINBIND nss module
      s3:build fix autoconf build on AIX 5.3
      s3:smbd fix a compile warning on AIX 5.3
      s3-docs: fix a typo in rpcclient manpage
      s3:lib/afs fix the build with --with-fake-kaserver
      s3:lib/afs fix some compiler warnings
      s3:lib/afs_settoken fix some compiler warnings
      s3:utils/net_afs fix compiler warnings
      s3:lib/afs use stdbool types
      s3:lib/afs fix the build with --with-vfs-afsacl
      s3:modules/vfs_afsacl remove some unnecessary whitespace
      s3:modules/vfs_afsacl use stdbool types
      s3:modules/vfs_afsacl fix a compiler warning
      s3:afs make path argument to afs_syscall const
      s3:modules/vfs_afsacl fix a compiler warning
      s3:utils fix a compiler warning
      s3:winbindd remove an unused variable
      s3-waf: fix a libcrypto configure check
      s3:lib change default share security access mask
      s3:modules fix Bug 8330 NFSv4 ACL merging logic is broken
      s3:winbindd fix a return code check
      s3:smb2 fix Bug 8428 - wrong reply to DHnC (durable handle reconnect)
      security.idl add new well-known SIDs
      s3:lib add new well-known SIDs for BUILTIN
      s3:lib add some more well-known sids
      s3:lib add S-1-5-17 to well-known SID list
      s3:lib remove duplicate entry for "Anonymous Logon"
      s3:lib S-1-5-9 is "Enterprise Domain Controllers"
      s3:modules make perfcount_test loadable again
      s3:idmap/autorid add a small alloc pool to autorid
      s3-docs: some corrections for wbinfo
      s3:smb2_create: fix allocation size return value when opening existing files
      Revert "s3:idmap/autorid add a small alloc pool to autorid"
      s3:winbindd/idmap make idmap modules loadable again
      s3:idmap_autorid: use strings as parameter for range allocator
      s3:idmap_autorid: move HWM initialization into a function
      s3:idmap_autorid: add an allocation range to autorid
      s3:idmap_autorid: document allocation pool
      s3:smbd increase a debug level
      s3:docs: some corrections for wbinfo
      s3:docs fix a series of typos in wbinfo manpage
      s3:vfs:gpfs convert syncio parameter
      s3:vfs:gpfs fix some compiler warnings
      s3:vfs:gpfs remove non-working code
      s3:smb2 do not set allow_namespace_caching flag for a share
      s3:smb2 report access_based_dir_enum in tcon reply
      security: add local authority well-known SIDs
      s3:vfs fix up vfs_gpfs after function pointer renames
      s3:dbwrap fix return value of db_tdb_parse
      s3:idmap_autorid: use less transactions
      s4:torture: add some SMB2 renaming tests
      selftest: add smb2.rename to testsuite
      s3:vfs_gpfs: fix a compiler warning
      s3:vfs_gpfs:quieten an expectable warning message
      s4:torture: add another SMB2 rename test
      s3:smb2_server fix a typo
      smb2_constants: add SMB2_WATCH_TREE
      s3:smb2_server: use SMB2_WATCH_TREE
      smb2_constants: fix a typo
      s3:smb2_server use the correct variables for max read/write
      s3:smb2_server: add supports_multicredit to sconn
      s3:smb2_server increase defaults for read/write/trans sizes to 1MB
      s3:smb2_server: announce LargeMTU for SMB2.1
      s3:smb2_server add function to verify creditcharge
      s3:smb2_server verify creditcharge
      s3:smb2_server validate message ids with largemtu
      Fix bug #8807 - dcerpc_lsa_lookup_sids_noalloc() crashes when groups has more than 1000 groups
      s3:smb2_server: fix a compiler warning
      s3:client correct a wording
      s3:vfs_gpfs: correct use of profiling macros
      s3:vfs_gpfs: remove fallback to linux_setlease
      s3:vfs_gpfs: fix some compiler warnings
      s3:param convert kernel oplocks to share parameter
      docs: update kernel oplocks documentation
      s3:smbd add seperate function to initialize kernel oplocks
      s3:smbd only initialize kernel oplocks if they are enabled for a share
      s3:smbd only care about missing level2 support if kernel oplocks are enabled
      s3: switch off kernel oplocks by default
      s3:util add sid_check_is_wellknown_builtin()
      s3:winbindd add idmap_tdb_common file to store common code of TDB idmap backends
      s3:winbindd/autorid use idmap_tdb_common code in autorid
      s3:winbindd/idmap_tdb2: use idmap_tdb_common code
      s3:winbindd/idmap_tdb2: fix logic error in set_mapping_action
      s3:winbindd/idmap_tdb: use idmap_tdb_common code
      s3:torture: add idmap_tdb_common test code
      s3:selftest run LOCAL-IDMAP-TDB-COMMON in make test
      s3:torture fix flakey testcase
      s3:lib fix compiler warnings
      s3:vfs fix compiler warning
      s3:passdb fix a compiler warning
      s3:winbindd/autorid preallocate well-known SIDs
      docs:autorid document how well-known SIDs will be mapped
      s3:winbindd/autorid add support for read-only mode
      docs:autorid document read-only parameter
      s3:winbindd/autorid add ignore builtin parameter
      docs:autorid document ignore builtin parameter
      s3:vfs/shadow_copy2 make descending sort order the default
      s3:vfs/shadow_copy2 fix some compiler warnings
      s3:smbd fix some compiler warnings
      s3:winbindd:autorid check that transaction start did work
      s3:smbd/smb2_read improve debug message
      s3:smbd/smb2_setinfo add a debug message
      s3:smbd/smb2_getinfo add a debug message
      s3:smbd/smb2_find add a debug message
      s4:torture report connection error via torture_fail
      s3:smbstatus fix a compiler warning
      s3:smbstatus rename a function to make its purpose more clear
      s3:smbstatus don't check if process exists twice
      s3:smbstatus add --fast option
      docs-xml: document smbstatus --fast
      docs-xml: document smbstatus --notify
      s3-ctdb: adjust a loglevel
      s3-ctdb: return proper exit code
      lib/param: move enum dns_update_settings to lib/param
      lib/socket_wrapper: writev returns ssize_t, not int
      smbXcli: add some includes to fix compiler warnings
      s4:libcli/smb2/write correct error checking
      s3:vfs_gpfs: make sure parameters are set correctly for leases
      s3:brlock: give traverse_fn a proper name
      s3:vfs_tsmsm only send notifications when file was offline before
      s3:libsmb correctly set isFsctl for snapshot list
      s3:build fix autoconf build on RHEL5
      s3:client use more access bits for snapshot display
      s3:smbd Bump the smbd vfs interface version to 30
      s3:auth fix a compiler warning
      s3:vfs_gpfs: fix build
      s3:libsmb fix a potential crash
      s3:libsmb fix a double free error
      s3:utils/net fix a compiler warning
      s3:rpcclient fix a compiler warning
      s3:pdb_ldap remove unused function
      s3:winbindd fix a compiler warning
      s3:vfs_fake_acls fix a compiler warning
      s3-pylibsmb: move py_tevent_req_wait_exc up in the file
      s3:printing only do printing_subsystem_update when printing is enabled
      s3:winbindd fix a compiler warning
      s3:passdb formatting changes
      s3:nfs4acls pass down fsp instead of just the filename
      s3:nfs4acls filter away inheritance flags on files
      Revert "smb.conf(5): Remove 'idmap config' documentation - the parameter has"
      s3:vfs_gpfs skip local flock when gpfs sharemodes are disabled
      s3:vfs_gpfs remove a trailing space
      s3:vfs_gpfs fix the build
      s3:vfs_gpfs re-indent run-away lines
      s3:smb2_getinfo ensure proper error for not yet present quota support
      s3:docs document shadow:snapdirseverywhere option of vfs_shadow_copy2
      s3:utils fix a whitespace error
      build(waf): support AIX 6.1
      build: add DMAPI configure option and checks
      s3:vfs_gpfs fix memory leaks in gpfs_getacl_alloc
      s3:vfs_gpfs fix memory leak in gpfs_get_nfs4_acl
      s3:vfs_gpfs fix memory corruption in gpfs2smb_acl
      s3:vfs_gpfs fix a memory leak in gpfsacl_get_posix_acl
      s3:modules:nfs4_acls fix memory hierarchy in smb_create_smb4acl
      s3:modules:nfs4_acls remove unused mem_ctx parameter to smbacl4_fill_ace4
      build(waf): fix a typo
      examples: fix build on AIX6
      s3:smbd/aio do not mark file modified during reads
      s3:net_idmap_dump deal with idmap config * : backend config style
      s3:net_idmap_dump remove obsolete support for tdb:idmap2.tdb parameter
      s3:net_idmap_dump add missing braces
      s3:net_idmap_dump support dumping autorid backend
      s3:utils/net remove aclmapset command
      selftest: add a test that demonstrates how new ACL blob code helps
      s3-waf:modules add non_posix_acls dependency to vfs_gpfs
      s3:autoconf introduce NFS4ACL_OBJ
      s3:autoconf add non_posix_acls to NFS4ACL_OBJ
      s3:modules/non_posix_acls: only stat if we do not have it cached
      s3:modules/vfs_gpfs add GPFS_GETACL_NATIVE define
      s3:vfs_gpfs add a generic vfs_gpfs_getacl function
      s3:vfs_gpfs use non_posix_sys_acl_blob_get_*_helper
      s3:torture/vfstest implement sys_acl_blob_get_file
      s3:torture/vfstest implement sys_acl_blob_get_fd
      s3:torture/vfstest add memreport option
      s3:modules use vfs_gpfs_getacl in gpfs_get_nfs4_acl
      s3:modules use vfs_gpfs_getacl in gpfsacl_set_nt_acl_internal
      s3:modules use vfs_gpfs_getacl in gpfsacl_get_posix_acl
      s3:modules remove gpfs_getacl_alloc
      s3:net_idmap_delete do not lock two records at the same time
      s3:auth small optimization in create_token_from_sid
      s3:lib/afs fix the build
      s3:build fix the build with --fake-kaserver
      s3:rpc_client fix a crash
      s3:libnet increase timeout for machine password change
      s3: remove some dead code (for setdir command)
      s3:include bump profile memory area version number
      s3:smbstatus do not print orphaned share entries
      s3:smbd increase a loglevel
      s3:smbd stop working on a dead client socket
      s3:registry increase a debug level
      s3:rpc_server increase a debug level
      s3:locking add NDR debug in share_mode_forall
      s3:utils/dbwrap_tool add exists operation
      docs-xml: document dbwrap_tool exists
      lib/replace: prefer inttypes.h over stdint.h
      lib/replace: add SCNx macros
      s3:lib fix wrong usage of PRIu64 in sscanf
      s3:utils fix wrong usage of PRIu64 in sscanf
      s3:modules/vfs_aixacl2 fix compile errors
      s4:torture fix a build break on AIX
      tdb: include information about hash function being used in tdbtool info output
      s3:include remove non-blank line endings
      s3:lib/dbwrap add missing curly braces
      nsswitch: fix some typos
      waf: only use -fstack-protector when both compiler and linker support it
      waf: build vfs_aixacl2 module by default on AIX
      s3:lib/ctdb_conn make sure we are root before connecting to CTDB
      s3:lib/ctdb_packet use sys_send in packet_fd_write
      s3:utils/net_lookup fix a format-error
      s3:passdb/samba_dsdb fix a compiler warning
      s3:passdb/samba_dsdb fix some compiler warnings
      s3:passdb add idmap control functions
      s3:passdb add pdb_*_is_responsible_for* functions
      s3:lib/util_sid_passdb make use of pdb_is_responsible_for_* functions
      s3:passdb/pdb_samba_dsdb make the module handle well-known
      s3:passdb make pdb_sid_to_id honor backend responsibilities
      s3:passdb/pdb_ldap make the module handle well-known
      s3:passdb/pdb_ldap remove an unnecessary check
      s3:passdb/pdb_tdb add parameter to control handling of BUILTIN
      s3:passdb expose pdb_create_builtin function
      s3:utils/net_sam make use of pdb_create_builtin helper function
      s3:passdb add a gid argument to pdb_create_builtin_alias
      s3:passdb/pdb_util make pdb_create_builtin consider whether backend deals with BUILTIN
      nsswitch: fix a comment
      s3:smbd/aio mark file as modified in the SMB2 case
      s3:lib add mapping for ETXTBSY
      s3:smbd/close use common exit path
      s3:smbd/close remove filesystem lock before removing sharemode
      s3:lib/system fix build on AIX 7
      waf: fix build on AIX7
      waf: add --without-gettext option
      waf: consolidate libintl related checks
      waf: replace dependency to libintl with samba_intl

Christian PERRIER (2):
      s3: Merge French translation for pam_winbind after review
      Spanish translation update

Christof Schmitt (41):
      smbtorture: Do not leak child processes when exiting
      s3-winbind: Remove unused bool "local"
      s3:vfs_gpfs:Fix query of creation time from GPFS
      s3:vfs_gpfs: Export disk_norm function
      s3:vfs_gpfs: add GPFS api calls for quota and free space reporting
      s3:vfs_gpfs: Report disk space and usage on GPFS share according to quotas
      s3:vfs_gpfs: Implement fallocate callback for GPFS
      docs:man:vfs_gpfs: Remove itemized list to fix indentation
      passdb: Do not panic in initialize_password_db
      net: Let get*sid return error from passdb init
      auth: Common function for retrieving PAC_LOGIN_INFO from PAC
      s3:vfs_gpfs: Check softquota before gracetime
      torture: Print SIDs as additional debug output in unix.whoami
      s3-winbind: Pass ping-dc result to client
      s3-winbind: Return the DC name from DC_PING
      libwbclient: Add wbcPingDc2
      wbinfo: Improve output of wbinfo --ping-dc
      libwbclient: Add test for wbcPingDc2
      s3:vfs_gpfs: Fix compile error in gpfs module
      s3:vfs_gpfs: Use directory not file to get fileset id
      s3:dbwrap_ctdb: Add DB name and key to warning message
      s3:doc Fix name of timeout parameter in documentation
      s3:vfs/time_audit: Add back pointer for sys_acl_delete_def_file_fn
      winbind: Extend wbcAuthenticateUserEx to provide PAC
      auth/kerberos: Adjust log level for failed PAC signature verification
      s4-torture: Complete test for winbindd PAC parsing
      s3-winbindd: Move common code for LDAP id mapping to idmap_utils
      s3-winbindd: Move idmap_fetch_secret to idmap_utils.c for reuse
      s3-winbindd: Move code for verifying ADS connection to common helper function
      s3-winbindd: Use common helper function for connecting to ADS
      s3-winbindd: Move connection to AD server from idmap_ad
      s3-winbindd: Add new module idmap_rfc2307
      s3-docs: Add manpage for idmap_rfc2307 module
      s3-net: Allow setting the ldap password for idmap_rfc2307
      packaging(RHEL-CTDB): Add idmap_rfc2307 module
      Add testcase for idmap_rfc2307 module
      winbind: Print error code on connection error in ping_dc
      smbd: Change logging when SET_OFFLINE is not supported
      Initialize the file descriptor in the files_struct before trying to close it. Otherwise, if one of the SETXATTR calls had failed, the close() call will return EBADF.
      vfs_streams_xattr: Do not attempt to write empty attribute twice
      s3:smb2_find: Return that timestamps do not exist as directories

Christoph Zauner (5):
      Fix typos.
      Samba3-HOWTO: Fix typos.
      man pages: Fix typos.
      man pages: Added improvements.
      man pages: Fix typos and add improvements.

Christopher R. Hertel (153):
      nmblookup.c:
      I rewrote the name_mangle() and name_len().
      This is my library of lists and trees.  My hope is to replace all of the
      After generating some discussion, listening to the opinions, and thinking
      After generating some discussion, listening to the opinions, and thinking
      This is the ubiqx binary tree and linked list library.
      I have to admit that I'm not very good at writing Makefiles.
      Added a copy of the LGPL to the samba/ubiqx/ directory.
      Added a very small piece of documentation to describe the binary tree
      First draft of a README file to explain the origins of the "ubiqx" code.
      These are the ubiqx modules, as included with the Samba distribution.
      Added ubi_sLinkList module which manages simple singly-linked lists.
      I got fed up trying to put the tree and list stuff into a subdirectory,
      This code manages a simple doubly-linked list.
      Made changes to the dir cache functions:
      Don't need it any more.
      Moved the LGPL from the ubiqx directory into the samba root directory
      Simply moved the #include for ubi_dLinkList.h from within dir.c to
      The ubi_* modules are under LGPL, not standard GPL.  This README explains
      Modified Files:
      Modified Files:
      While working on a general-purpose caching module (out soon), I thought of
      Adding the cache module.
      Backed out changes that attempted to address a pointer array using -1,0,1.
      Fixed an apparent typo:
      Updates to all of these base level modules.
      This functionality was added to ubi_sLinkList, so is no longer needed as a
      Lint was complaining about the following typedef in smb.h:
      Just fiddled with the README.UBI file.
      I removed a static string that was in there because I planned to do
      Changes include:
      Fixed some typecast and function pointer problems pointed out by a
      Minor change to the wording.  It used to say "files with the prefix 'ubi_'"
      Just changed the date.
      Andrew redefines the free() function to do some memory management testing.
      Along the lines that Andrew suggested, I added a header called ubi_null.h.
      Added a disclaimer regarding the changes Andrew wants.
      Removed all ubiqx includes from includes.h.  So far, this was only a problem
      These two are not being used, and they would cause conflict under Andrew's
      I've put the ubiqx headers back into includes.h, and removed them from
      Changed the mechanism for including the Samba includes.h in the ubiqx code
      It occurred to me that the samba includes.h file should be included in the
      Cosmetic.  Added a cast to (void) to a call to add_name_to_subnet() since
      Added code to generate
      proto.h
      Moved the ubiqx stuff above nameserv.h so that ubiqx typedefs could be
      This is a first step toward moving long namelists into a database.  I
      I've replaced the linked list used to manage the subnet namelists with a
      Removed the "../" from the #include statement.
      Removed directory-relative include references.  This required that I add
      This is the first, small step toward some tweaks that Jeremy and I have
      The function add_name_to_subnet(), in file nmbd_namelistdb.c, returns a
      Minor cosmetic change.  I up-cased internal #defines.
      Added strupper() function call to up-case the scope field in the
      util.c:  I've added a function called mem_dup().  Similar to strdup(),
      To each list type, I added a macro that makes it easier to define and
      Changed the definition of the linked list header used in the directory
      Converted the browser database to a ubi_dLinkList.  This should reduce code
      Noticed that I was using the strlen() of a string that I had strdup()'d
      Cleaned up some testing code and made it more "permanent" looking.  The
      In addition to the HAVE_FUNCTION_MACRO test that Andrew used as an example,
      This is the checkin of the debug changes.
      Debugging functions are now in their own module.
      As per a Andrew's message, I went through and removed the timestring()
      I have fixed some of the autoconfigure problems.  I'm studying the diffs
      This is the remaining set of changes needed to replace the changes lost
      I finished removing timestring() calls from DEBUG() messages.  Also went
      One more minor change to the format of a DEBUG message.  I broke up a
      More formatting changes.  Mostly converted some DEBUG() calls to DEBUGADD()
      I've added a test for lp_loaded() so that timestamps *will* be output
      Removed a stray semicolon in the DEBUGADD() macro.
      Cleaned up some lint warnings (functions with return values that were
      I've come up with a different scheme for doing the DEBUG() and DEBUGADD()
      Quick fix for a small problem.  If you run 'nmbd -?' you'd get the usage
      I've added a dbgflush() function to debug.c.  Calling this will cause the
      Changed a call to fflush(dbg) to dbgflush().
      Debug output formatting change.  I'm trying to combine log lines that
      nmbd and smbd had different behavior with respect to log files.  nmbd would
      Just tweaking.
      Finally got around to updating the man pages for nmbd and smbd to reflect
      I added notes about the changes I've made to 2.0.0.  I put the change to
      Copyright notices written to debug logs are now through 1998.
      Changed the debug calls to use the newer debug macros.  This allowed me to
      I received a bug report from Massimo Campostrini in Pisa.  There are a pair
      Another cosmetic change.
      Minor change.
      Okay, this is really silly but removing one space from one debug statement
      Here is the simple debug parser and the debug2html converter.  Still to do:
      Added info about parsing debug messages.
      Fixed a small bug in debug2html.  It wasn't properly checking EOF.  The
      Just moving things around a bit.
      Still moving things around.  debugparse.h will be removed from the include
      I've moved the debugparse module files into the ubiqx directory because I
      This should have gone with the last batch.
      A while back, Andrew and I talked about making the debug parsing code a
      Sorry that this is going so slowly.
      First go at documentation for debug2html.
      While writing the man page, I realized that it was a bit silly not to accept
      Updated the docs to match the changes I made to debug2html.
      Fuss fuss fuss.
      Bringing these up to date with what I've got on my site.  The fixes include
      Again, just syncronizing.  The a function name was changed in the sll
      Removed a patch that Andrew had added because 'insure' was incorrectly
      If I use nmblookup to search for node ZOOB#1B and there is no such name
      Quick change to short-circuit WINS queries if the WINS server returns a
      Typo.  It said "DEGUG" in the comments.  I dunno how to degug, or gug for
      An improved version of the Negative Query Response fix.  The earlier fix
      I committed this change to the cliffs archive a while back and have heard
      Removed the sanity check on the WINS SERVER parameter because it simply
      First cut toward adding WINS server failover.
      Instead of handing back a string (which might be a DNS name or an IP
      First shot at actually *doing* WINS failover.
      Converted to call lib/wins_srv.c:wins_srv_ip() instead of lp_wins_server()
      Simple cleanup, but I also changed the value of the dlevel parameter passed
      Bug report that on some systems extended characters are being returned as
      The line was:
      Added info to some of the debug messages to get a better handle on a problem
      Very minor cleanup.  I was looking for another problem and found some bits
      Fix from John Malmberg.  When I added the additional information to the
      Andrew B and I were commiting the same fix at the same time in different
      Fussing with debug lines in open_socket_in().  I cleaned up some slightly
      Small changes to get ready for adding WINS failover to smbd and clients.
      Instead of checking lp_wins_server() to see if a WINS server was specified,
      Same as nmbd.c.  These now test wins_srv_count() instead of lp_wins_server
      lp_wins_server() is now lp_wins_server_list().
      Patched to ensure that it won't break HEAD.
      Fuss, fuss, fuss...
      Typo fix per Vance on IRC.
      I told Jeremy at the CIFS conference that I would sort the command list
      I added two lines of comments regarding the include= parameter.  Someone
      My seven-year-old daughter calls me 'Captain Pedantic'.  I don't know which
      Copying commit from HEAD.
      The 17-bit length field in the header contains the number of
      The 17-bit length field in the header contains the number of
      Fixed two very, very minor typos (that sort of just annoyed me).
      Likewise.  Two small typos caught my eye so I fixed them.
      Fixed some simple typos, including one that would have resulted in a
      Fixed some simple typos, including one that would cause the wrong value
      Added code to the handling of the -M option to ensure that we default to
      Added code to the handling of the -M option to ensure that we default to
      The definition of pstrcpy_base(), and the preceeding comments, were given
      The definition of pstrcpy_base(), and the preceeding comments, were given
      The wording described "CIFS" as the successor to SMBFS.  I changed it to
      My last change left the wording a little awkward, so I fiddled it a bit.
      Merged the changes I made in the 3.0 doc tree (wrong place) and
      Fixed test and wording for long share names.
      Fixed test and wording for long share names.
      This is Simo's patch for the NetShareEnum() bug which caused us to return
      Bug report 1079 and fix both from Bert Driehuis.
      r2420: Way back at the 1st SambaXP, Simo pointed out a subtle bug related to the
      r2706: The code that prints the remote MAC address (from the statistics section
      r16570: Corrected the copyright notice.  I had requested and received permission
      vfs_glusterfs: Fix excessive debug output from vfs_gluster_open().

Christopher R. Hertel (crh) (1):
      Rename obscure defined constants.

Corinna Vinschen (3):
      Tiny memory leak in lib/version.c
      Get Samba version or capability information from Windows
      Get Samba version or capability information from Windows

Craig Miskell (1):
      Fix bug #7191 - WINS doesn't respond after > 86 #1c registrations.

Crístian Deives (9):
      added new function "ldb_msg_add_dn"
      s4-drs: Create connection obejct (nTDSConnection)
      s4-ldb: changed ldb_msg_add_dn() to ldb_msg_add_linearized_dn()
      s4-drs: add deletion of old connections
      s4-kcc: initial code for the topology algorithm
      new function kcctpl_color_vertices
      spanning tree computation
      nTDSConnection creation
      use unsigned instead of uint32_t for LDB counters.

Dan Shearer (6):
      Remind them to read the man page about needing to be root.
      Minor spelling, wording changes to intro
      This may be a waste of time, but I thought if we keep nibbling at this it might
      Chris' smb.conf parsing doco
      Put it in the right directory :~)
      Updates for 1.9.18

Dan Sledz (20):
      FreeBSD configure check for backtrace_symbols
      Allow SYSLOG_FACILITY to be modified with a new configure option called --with-syslog-facility
      Fix logging to syslog
      s3: Use strtoul since id types are unsigned
      s3: Use DEBUGADD instead of DEBUG to avoid printing the header
      s3: OneFS unmappable sids support.
      Add two new parameters to control how we verify kerberos tickets. Removes lp_use_kerberos_keytab parameter.
      Fix double free caused by incorrect talloc_steal usage.
      s3: Implement wbcGetpwsid
      s3: Implement wbcGetSidAliases
      s3: Change behavior when seeing an unknown domain.
      Allow building with an external libwbclient library
      Introduce a new authentication backend auth_onefs_wb
      Introduce a new passdb backend: pdb_onefs_sam
      s3: onefs_acl.c cleanup
      s3: Rename auth_onefs_wb and pdb_onefs_sam
      It appears that the first time we see a uid/gid that winbind can't map,
      s3 pdb_wbc_sam: LookupRids should return sAMAccountName, not NT4 names
      s3: Fix a free of an uninitialized variable in winbind_get_sid_aliases
      s3 auth: Make debug message louder and more useful

Daniel Gan-Levi (1):
      s3-ctdb: Fix auto-enabling of CTDB readonly support

Daniel Kobras (1):
      Fix bug #9039 'map untrusted to domain' treats WORKSTATION as bogus domain.

Daniel Liberman (2):
      Extending space for fqdn in wbinfo --trusted-domains in verbose mode
      Fix bug 10162 - POSIX ACL mapping failing when setting DENY ACE's from Windows.

Daniele Dario (2):
      Added number of FSMO roles owned by the server we are trying to demote.
      Correct command help message

Darshan Purandare (1):
      MSG_DEBUG now forwarded to all the winbindd children by parent.

Dave Abrahams (1):
      waf: make "update-waf" script work on Darwin too

Dave Craft (19):
      NTDSConnection and NTDSA Site setting flags
      Standalone samdb_ntds_site_settings_options() helper
      KCC NTDSConnection should utilize NTDSCONN_OPT_IS_GENERATED
      kcc_connection invocation_id added to struct
      Remove static to allow availability to other KCC files
      Add kccsrv_add_repsFrom() possibility of NULL res argument
      Add intrasite code test switch
      python dsdb flag addtions (NTDSSETTINGS, NTDSCONN)
      add python KCC utility classes and methods
      samba_kcc addtion
      Add samba_kcc load parameter
      Add NTDSConnection schedule attr blob
      Add DRSUAPI_DRS_UPDATE_(x) flags
      Add subreq and status to kcc_service struct
      Invocation of samba_kcc from KCC task
      samba_kcc NTDSConnection translation
      Intersite KCC flags
      Intersite KCC flags for python
      KCC importldif/exportldif and intersite topology

Dave Richards (2):
      s3: Add strict lock/unlock calls to the vfs layer to replace is_locked
      s3 OneFS: Add kernel strict locking support

David Bannon (2):
      PDC docs, made from DocBook source, comments ?
      First Release of the DocBook 'source'.

David Binderman (1):
      Fix bug 9065: source3/registry/regfio.c: bad call to memcpy

David Disseldorp (149):
      s3-spoolss: fix spoolss GetPrinterData behaviour
      s3-printing: fix printer_list_traverse()
      s3-printing: reload shares after pcap cache fill
      s3-printing: Initiate pcap reload from parent smbd
      s3-printing: remove old entries in pcap_cache_replace
      s3-printing: remove printer_list_need_refresh
      Looking into printer driver issues, I ran across some peculiarities in
      s3: increase the log level for missing PIDs on SIGCHLD
      s3-printing: fix move_driver_to_download_area() error paths
      s3-printing: clean up get_correct_cversion error paths
      s3-printing: vfs_connect prior to driver/dfs IO
      s3-printing: follow force user/group for driver IO
      s3-printing: remove unneeded local_pcap_copy global
      s3-printing: fix cups pcap reload with no printers
      s3: add two missing vfs disconnect calls
      idl: define printcap IPC message format
      s3-printing: use printcap IDL for IPC
      s3-printing: remove duplicate cups response processing code
      s3-printing: fix memory leak in print_cups.c
      =?UTF-8?q?alpha=5Fstrcpy()=20is=20a=20utility=20function=20which=20reportedly:
      s3-printing: remove cups_pull_comment_location from header file
      s3-printing: fill devicemode size in migrate_printer()
      s3-printing: skip migration of non-existent printers
      s3-printing: fill info2_mask in printer migration
      s3-printing: remove tdb migration invalid printer name checks
      winreg: Use the ntstatus return code for client side errors
      winreg: Ensure server return status is set on success
      Fix bug 8480 - acl_xattr can free an invalid pointer if no blob is loaded.
      s4-torture: remove unchecked read from smb2 create
      s4-torture: add smb2 ioctl test suite
      s3-smb2_server: SMB2_OP_IOCTL doesn't require at least 1 dyn byte
      s3-smb2_server: fix ioctl InputOffset checking
      s4: add SMB2_FSCTL opcodes
      libcli: move ioctl function field defs to smb_constants
      s3: Remove duplicate fsctl function definitions
      libcli: Move smb2 fsctl fn defs into common code
      s3: remove duplicate fsctl fn definitions
      s3: fix typo in net ads join output
      idl: add copychunk and request_resume_key ioctl definitions
      s4-torture: Add tests for the smb2 copychunk ioctl
      s4-torture: split common copychunk ioctl test code into helpers
      s4-torture: add smb2 copychunk ioctl tests
      s4-torture: smb2 copychunk data integrity checks
      s3:smb2_server: remove unused outhdr variables
      ldb: fix compiler warning
      pkg: add comments to the systemd sysconfig file
      s3-perfcount: fix build for example perfcount daemon
      s3-perfcount: fix incorrect array length calculations
      spoolss: fix DPD_DELETE_ALL_FILES error return
      s3-rpcclient: add deldriverex flags argument
      s4-smbtorture: tweak spoolss_OpenPrinterEx devmode
      idl: add parser for the to_null property
      ndr: add ndr_pull_charset_to_null()
      idl: add to_null attribute to the spoolss formname array
      idl: add to_null attribute to the spoolss devicename array
      idl: add to_null property
      s3-spoolss: prefix print$ path on driver file deletion
      s3-spoolss: fix printer driver version deletion
      torture: add spoolss del printer driver test
      torture: confirm printer driver file removal
      s3-spoolss: fix printer_driver_files_in_use() call ordering
      torture: add spoolss overlapping driver deletion tests
      s3-spoolss: fix incorrect error check type
      WERROR type variable being incorrectly checked with a NT_STATUS_IS_X
      lib: use differing NTSTATUS and WERROR struct members
      s3-printing: fix crash in printer_list_set_printer()
      idl: add offload data transfer ioctl types
      build: rebuild idl if the pidl compiler is changed
      idl: add File Server Remote VSS Protocol idl
      s3-rpcclient: add fsrvp commands
      doc: add FSRVP commands to rpcclient man page
      s4-torture: fsrvp test suite
      build: do not run fsrvp tests as part of selftest
      torture: add test for smbd print job spooling
      s3-printing: store print jobid as part of struct printjob
      s3-printing: remove print_parse_jobid() from print_cups.c
      s3-printing: rename queue->job sysjob
      s3-printing: remove print_parse_jobid() calls from printing.c
      s3-printing: remove redundant variable set
      s3-printing: remove print_parse_jobid()
      s3-spoolss: remove duplicate "." in smbd spooler path
      s3-printing: fix potential print db refcount leak
      s3-printing: clean up print_job_pause/resume interface
      s3-printing: return talloced print jobs
      s3-printing: pass a talloc ctx to unpack_pjob
      s3-printing: remove unused print_job_fname()
      s3-printing: pass lpq command to job_submit
      s3-printing: fill print_generic sysjob id on job submission
      s3-printing: use euid for vlp job tracking
      s3-torture: Use static printer for smbd spooler test
      s3-printing: fix broken print_job_get_name() return
      ndr: fix push/pull DATA_BLOB with NDR_NOALIGN
      s3-printing: fix bug 9123 lprng job tracking errors
      tdb: return unpack error on strdup failure
      vfs: fix lock logging in vfs_full_audit
      vfs: fix acl_blob_get* in vfs_full_audit
      vfs: add missing pwrite ops to full_audit
      vfs: check full_audit enum->str mapping on startup
      s3-rpc_server: fix build warning
      pam_winbind: fix segfault in pam_sm_authenticate()
      Revert "s3-winbindd: make sure we obey the -n switch also for samlogon cache access."
      doc: describe samlogon cache caveat for winbindd -n
      doc: list arguments for rpcclient FSRVP commands
      spoolss: fix segfault when "default devmode" is disabled
      selftest: configure printer with default devmode = no
      rpcclient: fix usage docs for rpcclient adddriver
      s3-printing: add missing carriage return to debug str
      smb2_ioctl: split ioctl handlers into separate funtions
      smb2_ioctl: split ioctl handler code on device type
      smb2_ioctl: add FSCTL_SRV_REQUEST_RESUME_KEY support
      s3-vfs: add copy_chunk vfs hooks
      smb2_ioctl: add support for FSCTL_SRV_COPYCHUNK
      smb2_ioctl: remove ioctl error response assumptions
      selftest: enable samba3.smb2.ioctl tests against s3fs
      torture: skip FSCTL_SRV_ENUM_SNAPS test when not supported
      smbd: split out file_fsp_get from file_fsp_smb2
      smb2_ioctl: perform locking around copychunk requests
      torture: add locking tests for copychunk
      torture: replace ioctl failure returns with helper calls
      smb2_ioctl: only pass through to VFS on a valid fsp
      torture: copychunk test suite improvements
      smb2_ioctl: copychunk CHECK_READ and CHECK_WRITE
      smb2_ioctl: track copychunk response output state
      smb2_ioctl: copychunk request max output validation
      printing: Remove invalid free from error path.
      BUG 9378: Add extra attributes for AD printer publishing.
      selftest: skip smb2.ioctl tests on ntvfs
      Revert "selftest: skip smb2.ioctl tests on ntvfs"
      BUG 9633: Recursive mget should continue on EPERM.
      s3-vfs: add vfs_btrfs module
      doc: add vfs_btrfs man page
      ntvfs: support setfileinfo with FULL_EA_INFORMATION
      Bug 9807 - wbinfo: fix segfault in wbinfo_pam_logon
      netcmd/dns: fix typo
      bug 9830: fix panic in nt_printer_publish_ads
      waf: add --with[out]-pie configure arguments
      waf: build position independent executables
      libsmbconf: add smbconf_create_set_share
      waf: build PIEs if supported by the compiler
      printing: explicitly clear PUBLISHED attribute
      Fix bug 9900: is_printer_published GUID retrieval
      torture: add AD printer publishing test
      torture: support printer publish pending responses
      Bug 8997: change libreplace GPL source to LGPL
      libsmb: add ABI/smbclient-0.2.1.sigs
      vfs_catia: use translate direction enum instead of int
      docs/vfs_catia: remove space-char mapping recommendation
      docs/vfs_catia: rework man page
      s3/smbclient: fix incorrect command tab completions

David Koňař (1):
      tevent: Add tevent tutorial files.

David Kwan (1):
      s3 onefs: Change error status to NT_ACCESS_DENIED for errors in SET_SECURITY_DESC

David Leonard (1):
      Fix bug 4516, no IPv6 on Solaris 2.6.

David Losada Carballo (1):
      Extend commit module to help with NFS quotas.

David Markey (2):
      s3-net: Fix Bug #6328: support "net sam rights grant/revoke" with multiple rights.
      Fix bug 6514: net gives unhelpful "lp_load failed" when it's missing smb.conf

David O'Neill (46):
      Changes from APPLIANCE_HEAD (per Tim Potter):
      Changes from APPLIANCE_HEAD:
      - fix "declaration of 'time' shadows global declaration" warning.
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Remove C++ style comments
      Brief documentation on using the virtual printer code
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Merge of documentation updates to HEAD.  These got missed somewhere along
      Sync up packaging updates that didn't make it to HEAD.
      Add SuSE 7.1 packaging (from SAMBA_2_2).
      Sync up smb.conf.default with APPLIANCE_HEAD and SAMBA_2_2
      Changes from APPLIANCE_HEAD:
      Changes merged from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Cleanup of Get_Pwnam().  Adds debugging, cleans up the allow_change
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Small bugfix from Kenichi Okuyama <okuyamak at dd.iij4u.or.jp>:
      Changes from SAMBA_2_2:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from APPLIANCE_HEAD:
      Changes from SAMBA_2_2:
      Changes from APPLIANCE_HEAD:
      Changes from SAMBA_2_2:

Davide Sfriso (1):
      Fix bug #5906 when running winbindd on a Samba PDC. Winbindd crash on 'getent group'

Derrell Lipman (307):
      r6102: add support for opening a file for write with O_APPEND in libsmbclient
      r6108: Added smbsh/smbwrapper for Linux to example/libsmbclient tree; provided more complete libsmbclient testbrowse utility
      r6125: smbc_stat() returned incorrect timestamps IFF it used cli_qpathinfo2() to
      r6126: added utility for testing smbc_stat()
      r6127: Eliminated all compiler warnings pertaining to mismatched "qualifiers".  The
      r6149: Fixes bugs #2498 and 2484.
      r6151: additional examples/tests for libsmbclient
      r6155: Fixes bug #1133
      r6156: Fixes bug #2543.  Properly cache anonmous username when reverting to anonymous login, in libsmbclient.
      r6157: 'editorial changes' to example code
      r6392: - Fixes bug 2564: when smbc_opendir() was called with a file rather than
      r6501: correct deprecated lvalue casts in testsuite/libsmbclient
      r6753: Fixes bug 2663.  cli_getattrE() and cli_setattrE() were not formatting or
      r6757: test for existence of sys/un.h was missing, thus AF_LOCAL support was not found
      r7025: 1 if not all data is available at the time we go to read a packet, retry
      r7153: add better test facilities to testutime
      r7156: file was missing; svn isn't smart enough to even notify me.  sigh.
      r7168: Updating file times from libsmbclient was not working for win98.  Although
      r7172: This is the proper fix for setting file times from libsmbclient.  We now
      r7175: fix incorrect comment
      r7245: bug fixes in libsmbclient, setting time attributes
      r7817: Eliminate use of ctime_r() in libsmbclient DEBUG statement.  It seems that
      r9540: correct comments in struct smbc_dirent (fixes bug 3030)
      r11129:  r10090 at cabra:  derrell | 2005-10-17 15:26:27 -0400
      r11130:  r10092 at cabra:  derrell | 2005-10-17 15:29:03 -0400
      r11582:  r10193 at cabra:  derrell | 2005-11-08 13:12:39 -0500
      r11583:  r10556 at cabra:  derrell | 2005-11-08 13:20:56 -0500
      r12080:  r10673 at cabra:  derrell | 2005-12-05 13:22:34 -0500
      r12081:  r10674 at cabra:  derrell | 2005-12-05 13:31:28 -0500
      r12098:  r10797 at cabra:  derrell | 2005-12-06 12:09:00 -0500
      r12118:  r10805 at cabra:  derrell | 2005-12-07 22:34:55 -0500
      r12119:  r10812 at cabra:  derrell | 2005-12-07 22:44:26 -0500
      r12225:  r11729 at cabra:  derrell | 2005-12-13 22:59:45 -0500
      r12235:  r11738 at cabra:  derrell | 2005-12-14 13:15:14 -0500
      r12236:  r11740 at cabra:  derrell | 2005-12-14 13:16:58 -0500
      r12466:  r12028 at cabra:  derrell | 2005-12-24 20:25:38 -0500
      r12467:  r12029 at cabra:  derrell | 2005-12-24 20:25:59 -0500
      r12468:  r12033 at cabra:  derrell | 2005-12-24 21:03:45 -0500
      r12471:  r12038 at cabra:  derrell | 2005-12-24 23:17:16 -0500
      r12472:  r12040 at cabra:  derrell | 2005-12-24 23:26:55 -0500
      r12485:  r12044 at cabra:  derrell | 2005-12-25 16:46:47 -0500
      r12569:  r12083 at cabra:  derrell | 2005-12-29 09:39:45 -0500
      r12570:  r12084 at cabra:  derrell | 2005-12-29 10:05:16 -0500
      r12576:  r12115 at cabra:  derrell | 2005-12-29 11:16:03 -0500
      r12579:  r12122 at cabra:  derrell | 2005-12-29 12:03:00 -0500
      r12757:  r12126 at cabra:  derrell | 2006-01-03 15:21:36 -0500
      r12758:  r12127 at cabra:  derrell | 2006-01-03 15:22:18 -0500
      r12759:  r12128 at cabra:  derrell | 2006-01-07 15:34:01 -0500
      r12852:  r12150 at cabra:  derrell | 2006-01-11 13:21:14 -0500
      r13212:  r12414 at cabra:  derrell | 2006-01-28 17:52:17 -0500
      r13214:  r12420 at cabra:  derrell | 2006-01-28 19:10:58 -0500
      r13216:  r12422 at cabra:  derrell | 2006-01-28 23:57:35 -0500
      r13761:  r13221 at cabra:  derrell | 2006-02-28 20:40:56 -0500
      r13763:  r13223 at cabra:  derrell | 2006-02-28 20:48:23 -0500
      r14664:  r13868 at cabra:  derrell | 2006-03-22 17:04:30 -0500
      r16353:  r14594 at cabra:  derrell | 2006-05-08 23:59:42 -0400
      r16354:  r14595 at cabra:  derrell | 2006-05-09 00:00:35 -0400
      r16550: Fix bug 3866.  Thanks for the report!
      r16552: Fix bug 3849.
      r18009: Fixes bug 4026.
      r18011: Should fix bug 3835.
      r18012: Should fix bug 4018.
      r18013: Fix for "bug" (enhancement) 3684.
      r18014: revert a possibly unnecessary change
      r19231: I encountered a WinXP/Home system which, acting as the master browser for its
      r19250: Fixes bug 4156.
      r21132: - Fixes bug 4366.  Documentation for smbc_utimes() was incorrect.
      r21133: - Apply patch from ages ago, which should allow following \\server\share\path
      r22130: - Ensure that the libsmbclient example programs link with the libsmbclient
      r22731: - Fix bug #4594.
      r22732: - Testing of libsmbclient against Vista revealed what is likely a bug in
      r22772: - Still working on the fact that readahead() is not declared (on at least one
      r22773: - Clean up the the rest of the cruft from my earlier work on the readahead()
      r22850: - Fixes bug 4601.  smbc_getxattr() would not, in one case, properly return the
      r22914: - Fixes bug 4599.  A missing <code>if</code> statement forced subseqeuent
      r23001: - Fix but #4634.  Type of the size parameter to getpeername was wrong.
      r24388: - ACL retrieval provided incomplete information because the buffer pointer was
      r24410: - I got tricked by function naming.  Contrary to what seemed obvious to me,
      r24462: - Removing all ACEs was causing removal of the DACL entirely.  Win2000 ignored
      r24466: - Sort ACEs according to http://support.microsoft.com/kb/269175 so that
      r24543: Apply missing portion of correction for bug 4750
      r24864: - Correct failure of libsmbclient against a version of Windows found on a NAS
      r24981: - Use the formal syntax for calling functions through pointers.  I've wanted
      r6956: added start of ldb_sqlite3 work
      r6984: added tree representation documentation and utility code, to be used for subclasses of object classes
      r7116: work in progress
      r7133: work in progress, including a HIGHLY revised and simplified schema
      r7260: save current schema before I blow it away to try something different
      r7276: - moved static tdb function ltdb_dn_fold() into common/ so that it can be
      r7280: taking advantage of previous research.  this is documentation on which latest schema is based
      r7281: removing document
      r7282: ldb_sqlite3 work in progress.
      r7283: add sqlite3.m4
      r7284: more build issues for sqlite3
      r7286: add prototype for public connect function in ldb_sqlite3
      r7287: work in progress.  no more time to work on this right now.  save latest changes.
      r7316: work in progress
      r7332: added note to self for required modification
      r7349: work in progress
      r7408: added DN explode function, based on simo's ldap_parse_dn() function.  simo, when you get a chance, please change your license so this can be linked with ldb.
      r7410: minor cleanup
      r7418: work in progress
      r7437: Make Simo happy.
      r7438: work in progress
      r7443: reorg functions for readability
      r7446: add distclean target to generated ldb makefile
      r7449: add ctype.h header to dn expand function
      r7480: ldb_sqlite3 work in progress
      r7498: ldb_sqlite3 work in progress
      r7556: fixed typo in documentation
      r7561: moved OID constants into ldb.h and used manifest constants in ldb_match.c
      r7562: work in progress
      r7586: ldb_sqlite3 making progress.  add and search have indicated a willingness to operate properly on initial testing
      r7601: ldb_sqlite3 work in progress
      r7602: fix some compiler warnings
      r7828: Although there is still plenty to do, ldb_sqlite3 now passes the set of tests
      r7844: eliminate superfluous attribute tables
      r7897: work in progress
      r9824:  r9495 at cabra:  derrell | 2005-08-31 09:33:55 -0400
      r18103: add torture test for 'RAW_OPEN_OPENX without a leading slash on the path', known to fail on NetApp filers
      r18848: Save the json library before I start hacking on it.  I'm going to be
      r18849: a bit of help for the new user, to figure out how to do initial setup
      r18850: add strspn() function i ejs
      r18880: JSON-RPC work in progress
      r18911: add a JSON encoder
      r18925: Add current snapshot of the ejs-2.0 code.  Tridge, will you be incorporating this?
      r19019: Add a parser for javascript literals.  This is implemented for parsing JSON
      r19020: move jsonrpc_include to a more appropriate location in the file, and call the setup function for parsing literals.
      r19021: match the prototype for a trigger function
      r19022: eliminate a warning
      r19048: ensure our memory gets cleaned up even upon exception
      r19051: JSON-RPC server work-in-progress.  It's almost working.
      r19052: clarify what actually does what
      r19055: JSON-RPC is working!  It passes the small qooxdoo JSON-RPC test suite
      r19059: allow dash in URLs
      r19138: add authentication capability; fix typos
      r19139: typos; consitent ordering of operations
      r19140: allow own authentication handling by jsonrpc apps
      r19141: add a reasonable subset of the qooxdoo runtime environment, and example applications
      r19142: ensure no race conditions during installation by having same name in source and swat directory; install new apps and services
      r19165: handle errors better for jsonrpc.  generate an error object whenever possible
      r19166: better bug and reporting and proper authentication tracking
      r19167: - Various JSON-RPC facilities will desire to keep resources open in a
      r19259: An ldb browser.
      r19295: ldbbrowse: the search tab is now doing something vaguely reasonable.
      r19306: ldbbrowse: handle input of Base and Scope in search tab
      r19357: More ldbbrowse work.
      r19382: latest qooxdoo runtime build
      r19383: pass only the base filename of an ldb file to be opened; allow server to prepend path where it's located (private_dir)
      r19384: ldbbrowse now has all basic functionality.
      r19397: Restrict databases which can be opened to a known set (currently only 'sam.ldb')
      r19406: ldbbrowse: done!
      r19407: add a copyright notice
      r19449: ldbbrowse: installation hopefully works now.  "Developer" installations
      r20220: Apply patch from Brad Henry with some additional qooxdoo/json-rpc SWAT
      r20346: This is the beginnings of a framework for a complete SWAT.  It will provide
      r20347: added generic rpc fsm and statistics-specific fsm.  next step: statistics gui
      r20348: don't check in auto-generated code
      r20350: configure svn:ignore values via a .ignore file
      r20364: SWAT updates, part 1
      r20365: SWAT updates, part 2
      r20366: remove auto-genereated file
      r20367: don't re-load API documentation each time the module is selected
      r20376: make module registration substantially cleaner
      r20399: More SWAT updates
      r20414: Start to make SWAT usable by others.  This is just a start...
      r20444: WEB Application framework / SWAT.
      r20445: add README file indicating that the swat directory is no longer relevant
      r20446: rename swat directory to swat.obsolete; keeping it around since there is lots of useful info in it.
      r20515: Continued work on the Web Application Framework.  Until we get all of the
      r20516: svn gets royally screwed up when renaming or relocating files.  attempt to correct.
      r20517: re-add cleaned-up webapps
      r20518: reapply finite state machine mods which got lost in the webapps remove/restore process
      r20519: Web Application Framework
      r20538: Web Application Framework
      r20559: Web Application Framework
      r20569: Web Application Framework
      r20574: reorganization of common modules
      r20600: Web Application Framework
      r20601: Web Application Framework
      r20641: Everything relevant from the old swat (now swat.obsolete) directory has been moved to webapps.  Remove the obsolete directory.
      r20723: Web Application Framework
      r20751: It's unlikely that even 1 in 1000 users of SWAT will be running IE.  That not
      r20752: There's no reason to wait 5 seconds before the first Status and Statistics
      r20753: editorial change
      r20937: Update to latest Finite State Machine with properly-handled blocked events
      r21137: If you change the name of a constant in one file, it helps to ensure that the use of the constant in other files is corrected as well.
      r21167: - Upgrade to latest released qooxdoo.  This is step 1 of the upgrade process,
      r21168: - Step 2: Update swat for the latest qooxdoo version.  The build now copies
      r21169: - Step 3: Upgrade qooxdoo release code with latest qooxdoo svn's Table and
      r21170: Latest qooxdoo required a minor server change
      r21185: Fix PNG images in TreeVirtual, for when using IE
      r21187: - Convert LdbBrowse to use TreeVirtual.  This adds the following capabilities
      r21220: enable 'make source' (and 'make') to work properly
      r21221: 'make build' should be the default target for us
      r21248: - Test for Simo: no change of selected row(s) upon open/close click.  Simo,
      r21285: - Add the new ResizeTableColumnModel and make use of it in TreeVirtual.  This
      r21286: Tree column now resizes wiith splitter adjustment, but scrollbars don't yet update properly
      r21287: Improve user feedback.  Cursor now changes to stopwatch during RPC and module loading.
      r21304: - Get rid of the extra set of scroll bars in the tree.  The tree never grows
      r21321: - Allow pruning all of the children of a node without removing the node
      r21325: delete children in reverse order since the array is manipulated during the recursive delete
      r21326: get rid of old qooxdoo version.
      r21344: ensure that the full range of error values is available to applications.  parameter errors are really server errors.
      r21808: - Fix a nasty bug in the finite state machine that allowed an event from a
      r21809: - If the canvas is never initialized with the tree, the tree will never
      r21810: - The height of a widget is in relation to its enclosing widget.  Specifying a
      Fix compile and linking errors since last this code was tested
      Fix smbc_listxattr() and friends (bug #5189)
      Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-test
      Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-test
      Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-test
      Add a (very!) trivial cache to the example authentication callback.
      Replace GetTimeOfDay() with gettimeofday() in example program.
      Modify testread example to loop using same context.
      Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-test
      Add some additional libsmbclient test programs.
      Fix stat results to be consistent between smbc_stat and smbc_fstat.
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      Add a program to test repeated calls to smbc_getxattr().
      Fix bug 5185: repeated calls to smbc_getxattr() lose sid-name mapping
      stop bothering me about example programs not checked in
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      Fix typo that disabled setting group id.  Thanks, Henrik.
      Allow clearing all settable DOS mode bits.  A mode value of zero is ignored by
      Merge branch 'setxattr-dos-mode' into v3-2-test
      add a function to truncate a file to a specified size
      add 64-bit macros from samba4
      add smbc_ftruncate() to emulate POSIX ftruncate()
      add a test program for the new ftruncate functionality
      update .gitignore with new test program executable
      Initial revamp of the libsmbclient interface.
      Modified revamp of the libsmbclient interface.
      Additional revamped libsmbclient documentation
      Mark smbc_option_{get,set} as deprecated
      Comment was in wrong place
      change variable name from f to fn for function pointers
      Return NULL, not 0, from a function which returns a pointer.
      Update WHATSNEW for libsmbclient changes
      fixed missing white space
      Remove use of deprecated function
      Continued revamping of libsmbclient.
      Missed a few 'deprecated' markers
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      use constant name less likely to cause conflict
      Initial revamp of the libsmbclient interface.
      Modified revamp of the libsmbclient interface.
      Additional revamped libsmbclient documentation
      Mark smbc_option_{get,set} as deprecated
      Comment was in wrong place
      change variable name from f to fn for function pointers
      Return NULL, not 0, from a function which returns a pointer.
      Update WHATSNEW for libsmbclient changes
      fixed missing white space
      Remove use of deprecated function
      Continued revamping of libsmbclient.
      Missed a few 'deprecated' markers
      use constant name less likely to cause conflict
      Check for NULL pointers before dereferencing them.
      Eliminate global variable in_client and a plethora of extern declarations.
      Fix use of AuthDataWithContext capability
      Update libsmbclient examples to match new libraries
      Working on bug #5475
      Remove prototype of unimplemented smbc_chown() function.
      [BUG 5580] Allow access to DFS shares via libsmbclient
      Merge branch 'v3-3-test' of ssh://git.samba.org/data/git/samba into v3-3-test
      Fix typos.
      Static libsmbclient library needs to include all objects
      Merge branch 'v3-3-test' of ssh://git.samba.org/data/git/samba into v3-3-test
      The compatibility function also should have a const buffer pointer
      Fix bug 5805: don't close stdout
      Error return is False, not -1
      Treat file names in POSIX-like case-sensitive fashion by default
      [Bug 6022] smbc_urlencode and smbc_urldecode were not exported
      Determine case sensitivity based on file system attributes.
      eliminate compiler warnings
      [Bug 6069] Add a fstatvfs function for libsmbclient
      ignore new test program executables
      [Bug 6069] Add a fstatvfs function for libsmbclient
      Check for the right error return value
      Ensure consistency of values on stack (caught by AIX compiler)
      The f_fsid field is not always an integer type. Don't set it in that case.
      f_frsize field is not ubiquitous. Check for it.
      It seems some systems use f_flags instead of f_flag. Use the appropriate one.
      Get rid of the warnings I had for testing
      enums are traditionally signed. Avoid use of high bit in bit flags.
      remove accidental white space
      variable grouping: just my OCD desire to keep similar things together
      Make char* parameters const
      [Bug 6228] SMBC_open_ctx failure due to path resolve failure doesn't set errno
      Ensure parameter types match format string
      [FIX Bug 6235] domain enumeration breaks if master browser has space in name
      Replace external thread "once" with an internal implementation
      Don't require external use of internal enum smb_thread_lock_type
      Provide a libsmbclient interface for programs requiring threads
      Panic upon mutex lock or unlock failure
      Optimize smb_thread_once usage by not calling it if known already called
      Use bool instead of int for a boolean variable
      Correct typos; semicolons instead of commas
      Fix broken smb_thread_once function
      Fix broken smb_thread_once function (again)
      Allow a parameter to smb_thread_once's initialization function
      Make the thread functions a bit easier to use
      Take advantage of the easier-to-use thread macros
      Thread-safe protection: libsmbclient initialization
      What to do about debugging in a multi-threaded application?
      [Bug 7345] Incomplete description of function return values in libsmbclient.h

Deryck Hodge (39):
      r5179: Add -P (password-menu-only) option to swat.  Admins can allow users
      r6395: Fix for Bug 2137, from Jay Fenlason <fenlason at redhat.com>
      r6958: Properly display quotes in SWAT. Thanks to Jay
      r6959: Meant to fix this before commiting, just to be consistent.
      r10619: Allow syslog facility and priority to be set via
      r12403: Update url on the docs directory README.
      r13072: Fix segfault in vfstest and smbtorture.
      r15299: Fix import of Python modules.  Fixes Bug #3567.
      r15385: Some work to bring the python code up to date with the
      r15386: Missed some functions in my last commit.
      r15465: Fix segfault in SWAT.
      r15466: Install the images for SWAT.
      r7171: Just learning my way around the new SWAT, and updating some
      r8477: Simplify header/footer handling.  esp variables allow
      r8479: * Sync CSS with current samba.org stylesheets.
      r8504: Temporary fix to #content width/height just to
      r8578: Fix overlapping sections in SWAT.
      r9230: Star out passwords and add confim text input for provisioning.
      r9232: Rename some objects to make code clear.
      r9327: Rename parent to fParent to prevent confusion with window.parent object.
      r9328: Remove background:ThreeDFace from qooxdoo styles to
      r9397: Playing with qooxdoo a bit and saving my work, so I
      r9443: We can now move windows around anywhere on our SWAT "desktop".
      r9469: Add a right-click menu to the SWAT desktop.
      r9471: Rough first pass at a menu system.  It's hacked together, but
      r9579: Desktop SWAT opens now with a little server status window.
      r9635: Seperate window logic from registry js file.
      r9651: Start to group all SWAT specific windowing, widgets, etc. in one
      r9663: Portability fix for IE.
      r9668: Cross-browser fix for IE, when adding scripts on the fly.
      r9710: Filename change for clarity's sake.
      r9759: Create some wrappers for QxWidget.  This gives us some pre-fabbed
      r9761: Move initial widget setup to desktop library.  Now, just by including
      r9763: Add the start bar as a widget from the
      r9779: Add a contextmenu function to be used by all window/widget objects.
      r10212: An IE fix.  Must set initial values in the onload function.
      r10225: Adding back a style rule to qooxdoo that was originally
      r10228: Reorganizing a bit, trying to simplify.  This is an attempt
      Adding info on the '-P' option I added to swat.

Dina Fine (1):
      Fix bug #5908 - Samba 3.0.32 - internal change notify on share directory fails"

Dmitry Butskoy (1):
      Fix bug 6966 - "allow trusted domains = no" not respected in winbind.

Dmitry Karasik (1):
      s4:wmic - Output enhancements

Don Davis (1):
      Rework the kerberos-notes.txt in order and format

Donald T. Davis (2):
      Clarify and expand the Kerberos notes made by Andrew Bartlett in 2005
      Clarify and expand the Kerberos notes made by Andrew Bartlett in 2005

Douglas VanLeuven (1):
      Fix member server provision

Ed Plese (3):
      Add sort parameter to shadow_copy2.
      Add format parameter to shadow_copy2.
      Add localtime parameter to shadow_copy2.

Eduardo Lima (4):
      s4-drs: implementation of some delete test cases
      s4-drs: enable the recyclebin optional feature
      s4-drs: check if an optional feature is enabled
      s4-drs: replmd_delete with the 3 stage deletion recycle bin

Eloy Paris (20):
      Added man page for nmblookup(1)
      Bringing packaging/Debian/ up to date with the current Samba package
      Bringing packaging/Debian/* to a more recent state.
      Adjusting Debian patches so they apply cleanly.
      Fixing Debian-specific patches so they apply cleanly.
      Debian updates.
      Updated Debian patches so they apply cleanly and without warnings at
      Minor Debian updates.
      Debian updates.
      More Debian updates.
      Debian updates.
      Debian updates. Brings files in packaging/Debian on par with the
      Further Debian fixes.
      Sync'ing packaging/Debian/ with the latest files from the official
      Ok, this should put packaging/Debian/ in sync. with rc3.
      Fix problem with the python-samba Debian package.
      Whoops, fix type in comment.
      Bumping up version number of the Debian packages.
      Debian updates in preparation for Samba 3.0.0.
      Updating the Debian packaging stuff in packaging/Debian/. This hadn't

Endi S. Dewata (38):
      s4:provision - replaced linked_attributes with FDS plugins
      s4:auth - fixed problem reading bind DN from secrets database
      s4:ldb - fixed dangling pointer in ldb_request_add_control()
      s4:provision - fixed invalid creationTime format
      s4:dsdb - Fixed attribute dereferencing for FDS
      s4 - Mapped AD schema to existing FDS schema.
      s4:dsdb - Store SID as string in FDS.
      s4:dsdb - Removed redundant domain SID filter.
      s4 - SID allocation using FDS DNA plugin
      s4:provisioning - Fixed minor bugs in provisioning tool and partition module.
      s4:provision - Added initial implementation of FDSBackend and OpenLDAPBackend.
      s4:provision - Added start() method in LDAPBackend.
      s4:provision - Moved provision_xxx_backend() into backend-specific provision() method.
      s4:provision - Added setup() method in LDAPBackend.
      s4:provision - Added constructors for FDSBackend and OpenLDAPBackend.
      s4:provision - Added LDBBackend and ExistingBackend.
      s4:provision - Removed dependency on full Samba 3 schema from FDS
      s4:ldbcli - Added encoder/decoder for relax control.
      s4:kdc - Disable KDC port when it's set to 0.
      s4 - Create default modules directory.
      s4:kdc - Merged kdc_add_kdc_socket() and kdc_add_kpasswd_socket().
      s4:kdc - Merged kdc_tcp_accept() and kpasswdd_tcp_accept().
      s4-provision: Disable populating FDS during instance creation.
      s4-provision: Fixed typos and redundant code
      s4-provision: Added msDS-NcType into samba4Top object class
      s4-libcli: Added NULL handlers for DSDB_CONTROL_DN_STORAGE_FORMAT_OID and LDB_CONTROL_AS_SYSTEM_OID
      s4:provision - Use netbios name for FDS instance name.
      s4:provision - Moved backend-specific variables into backend class.
      s4:provision - Moved setup_db_config() into OpenLDAPBackend class.
      s4:provision - Moved default FDS SASL mappings deletion from post_setup() to init().
      s4:provision - Updated FDS schema mapping.
      lib/util - Removed curly braces from generate_random_password().
      s4:dsdb - Handle INVALID_DN_SYNTAX from OpenLDAP in dsdb_module_load_partition_usn().
      s4/ldb: ldb_msg_el_map_remote() should rename the remote attribute names into local names as defined in simple_ldap_map.c.
      s4/auth: Fixed authsam_expand_nested_groups() to find entry SID if not available in the DN.
      s4/dsdb: Fixed partition_search() not to pass special DN's to LDAP backend.
      s4/libcli: Register LDB_CONTROL_REVEAL_INTERNALS and DSDB_CONTROL_PASSWORD_CHANGE_STATUS_OID controls.
      s4/spnupdate: Fixed spnupdate to use secrets credentials when accessing SamDB.

Endi Sukma Dewata (3):
      s4:provision Fixes for Fedora DS schema mapping with full AD schema
      s4: Use SASL authentication against Fedora DS.
      s4:provision - Remap conflicting thumbnailPhoto and thumbnailLogo OID's.

Ephi Dror (1):
      Correct the netsamlogon_clear_cached_user function.

Eric Cronin (1):
      Missing HAVE_UPDWTMPX check before using updwtmpx().

Eric Sandall (2):
      LDB: Link against both tevent and talloc
      For tevent to install tevent_util.h

Erick Nascimento (1):
      s4-drs: DsExecuteKCC() implementation

Erick Nogueira do Nascimento (5):
      s4-drs: torture test for DsGetReplInfo() (RPC-DSGETINFO test).
      s4-drs: DsReplGetInfo() for DS_REPL_INFO_REPSTO infoType
      s4-drs: DsGetReplInfo() refactoring
      s4-drs: DsGetReplInfo(), infoType = DS_REPL_INFO_METADATA_2_FOR_OBJ
      s4-drs: Torture testcase for DS_REPL_INFO_METADATA_2_FOR_OBJ infoType of DsGetReplInfo()

Ewoud Kohl van Wijngaarden (1):
      Add missing com_err dependencies

Fernando J V da Silva (19):
      s4-drs: Utility functions to deal with GUID
      s4-drs: Synchronous Implementation of generated parentGUID
      s4-drs: Removes stored parentGUID's creation and renaming
      s4-drs: Using dsdb_msg_add_guid() utility function
      s4-drs: Test situations for runtime constructed parentGUID
      s4-drs: Store uSNUrgent for Urgent Replication
      s4-drs: Uses dsdb_load_partition_usn() with urgent_uSN in s4 code
      s4-drs: Reads uSNUrgent and sets Urgent Replication Bit for DS_ReplicaSync when necessary
      s4-drs: Add DRSUAPI_DRS_NONGC_RO_REP bit to DRS_OPTIONS
      s4-drs: Fixes bugs regarding Urgent Replication on wrong situations
      s4-drs: Function for accessing dsdb_load_partition_usn from Python
      s4-drs: Test situations for Urgent Replication
      s4-drs: If we are a RODC then do not send DSReplicaSync messages
      s4-drs: Do not allow system-critical attributes to be RODC filtered
      s4-drs: samdb_is_rodc() function and new samdb_rodc() function
      s4-drs: dsdb_validate_client_flags() function
      s40-drs: Do not send GetNCChanges messages to RODCs
      s4-drs: Do not send RODC filtered attributes to RODCs on GetNCChanges reply
      s4-drs: Use new samdb_rodc() function in s4 code

Frank Lahm (2):
      Add support for VFS op streaminfo chaining in all relevant VFS modules.
      First part of fix for bug #8419 - Make VFS op "streaminfo" stackable.

Galen.Liu (1):
      tevent: fix --disable-python cause configure fails (bug #8718)

Gerald (Jerry) Carter (66):
      [GLUE] Sync tree with SVN r17.
      [GLUE] Rsync SAMBA_3_2_0 SVN r25598 in order to create the v3-2-test branch.
      Set -test in the vendor version
      Copy release notes from 3.2.0pre1
      Adding a draft section for 3.2.0pre2
      Fix a crash in resolve_hosts() caused by an out-of-bounds array reference.
      Fix a crash in resolve_hosts() caused by an out-of-bounds array reference.
      Move the test for the AIX specific interface code to the end.
      Add test for "struct in6_addr" to the HAVE_IPV6 configure test.
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      Correct VERSION and version.c to use SAMBA_VERSION_VENDOR_PATCH
      Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-test
      Fix compile error caused by unknown variable.
      Patch from Debian Samba package maintainers:
      Patch 2 of 3 from Debian Samba packagers:
      Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-test
      Fix build breakage when not specifying --with-fhs.
      Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-test
      Fix for CVE-2007-5398.
      Prevent segv in winbindd running on a DC using the "idmap backend" syntax.
      Fix unresolved symbols in smbumount from addition of talloc_stackframe().
      Allocate a talloc_stackframe() in main() for wbinfo.
      Compile fix to the automount support.  Patch from GlaDiaC.
      Fix a segv in winbindd caused by trying to free an fstring.
      Add files for new LGPL libwbclient DSO implementing the Winbind client API
      De-couple smbd from staticly linking against winbindd client files.
      Compile fix: Correct use of wbcDomainInfo() after function signature change.
      Fix "make test" using the LD_LIBRARY_PATH for selftest script so
      Make sure that wbcLookupSid() and wbcLookupRids() use talloc()'d memory.
      use C99 bool return types (true & false).
      Merge branch 'work/v3-2-test' into v3-2-test
      Fix some C++ warnings (patch was Volker's) - implicit case from void* to char*
      When connecting to an AD DC, use the DsGetDCName variant.
      Ensure that winbindd_getgroups() can deal with a UPN name.
      Add a missing check for dealing with a one-way trust in query_user().
      Fix the inherited trust flags when spidering the trust heirarchy.
      Set the "stable" vendor string in VERSION.
      Merge commit 'samba/v3-2-test' into v3-2-stable
      Merge commit 'samba/v3-2-test' into v3-2-stable
      Add First draf of release notes.
      Merge commit 'samba/v3-2-test' into v3-2-stable
      Add notes from Michael Adam for the commit log in release notes
      Merge commit 'samba/v3-2-test' into v3-2-stable
      Update release notes for vfs_ea_rename to complete the recent merge.
      Fix libtdb some to move back towards allowing out of tree builds
      Ignore port when pulling IP addr from struct sockaddr_storage.
      Work around iconv conversion failure from generated smb.conf.5 on Ubuntu 8.04.
      Add simple script to build docs
      Adding initial copy of "Using Samba (3rd ed)"
      Remove autogenerated html file form using_samba
      nss_winbind: When returning NSS_UNAVAIL, squash errno to ENOENT
      winbindd: Fix crash in cm_connect_sam()
      idmap_gid_to_sid: Fix a cut-a-npaste error.
      Add workaround for docs build and dependency on parameters.all.xml
      winbindd: Add support for name aliasing.
      winbindd: Update the calls to ws_name_XX() to reflect API changes.
      idmap_hash: Add the idmap/nss-info provider from Likewise Open.
      * Allow an admin to define the "uid" attribute for a RFC2307
      idmap: Increment the interface number after Volker's rewrite.
      idmap_adex: Add new idmap plugin for support RFC2307 enabled AD forests.
      libaddns: Use the same prerequisite for DDNS update as Windows XP.
      net_dns: Make "lwinet ads dns register" honor the "interfaces" parameter.
      idmap_adex: Add log messages to dc_add_domain for easier debugging.
      idmap_adex: Add more debugging to the basic search function.
      Fix "allow trusted domain" so it disables trusted domains.
      ads_connect: Return immediately on a failed GC connection.

Gerald Carter (2868):
      fixed an uninitialized variable in lookupsmbgrpgid() and
      Fixed the "You password will expire in 0 days.  Would you like to
      referred reader to NT Domain FAQ for more info (copy of update to 2.0)
      OK.  This code works on a RedHat 6.0 system.  However smbpasswd
      Added mention of the CUPS option for the printing parameter
      just enough to get rpcclient to compile.  Look for #if 0
      first pass at merging rpcclient from TNG to HEAD.  You can get a
      first pass at merging rpcclient from TNG to HEAD.  You can get a
      first pass at merging rpcclient from TNG to HEAD.  You can get a
      first pass at merging rpcclient from TNG to HEAD.  You can get a
      More rpcclient merge issues:
      More rpcclient merge issues:
      Just a few changes due to bringing some partial files back
      included a a new prs_unistr().  Is currently #if'd out (denoted
      Fixed a bug in parsing the command line.
      spoolenum commend (when compiled with the new prs_unistr())
      make proto
      #ifndef RPCCLIENT_TEST
      adding more spoolss command into rpcclient.  They don't all work
      make proto
      Fixed a bug in cmd_interp.c where if user%pass was entered on
      removed prs_data(), prs_free_data(), and prs_realloc_data()
      removed references to loopback RPC connections.
      cleaned up access to prs_struct variables.  Replaced all calls
      More functions merged from TNG for rpcclient.  They don't all work
      a few changes to Makefile.in to clean up dependencies for rpcclient
      reverted a some previous additions.
      Lots of changes but no real progress in functionality.
      Fixed some more SPOOLSS functions.  The following
      Fixed some more client SPOOLSS functions.  The following
      grab functions that return RPC_HND_NODE (declared
      I really didn't like the way generic arrays (lists) were
      fixed a bug (my own) in create_ntc_from_cli_state()
      Fixed some more client SPOOLSS functions.  The following
      Added lib/util_list.[c|o] to Makefile.in
      remove util_list from LIB_OBJS since it broke smbd build
      Fixed unitilized secdesc pointer which was causing spoolgetprinter
      readded util_list.c (just to the RPCCLIENT_OBJ).  I need to split
      make proto
      Added functions for enumerating ports on remote print server.
      Added EnumPorts() and fixed up some problems
      Added EnumPorts() and fixed up some problems
      * Added EnumPorts()
      make proto
      some initial code for AddPrinterEx() project.  Most is ifdef'd out
      make proto
      More work on rpcclient...
      More work on rpcclient...
      make proto
      After talking with Jeremy and JF (and staring at packet traces between
      clunky support for calling AddPrinterEx().  The code currently reports
      make proto
      spoolss_addprinterex() was adding the printer and returning the
      make proto
      Fixed bug in init_unistr2_from_unistr() found by Elrond.
      removed the for() loop to copy the buffer in init_unistr2_from_unistr()
      it is not my day it seems.  :-(
      All changes related to rpcclient...
      cleanup in init_unistr2_from_unistr()
      make proto
      Fixed AddPrinterDriver()
      More work on AddPrinterDriver() and AddPrinterEx() client RPC's
      make proto
      Needed to add the SHARED attribute bit when creating a printer
      talloc returns 0xdeadbeef when asked to allocate 0 bytes
      Deal will NULL UNISTR in unistr_to_ascii
      deal with allocation size of 0 in prs_unistr when UNMARSHALLING
      code formatting cleanup
      working on the unmarshalling of dependentfiles to a DRIVER_INFO_3
      Working on spoolss_getprinterdriver() as it does not display all the
      removed (void) typecast from SMB_ASSERT
      reworked talloc() to in order to help track down invalid
      fixed unistr_to_ascii to deal with NULL src strings
      FIxed some unmarshalling problems with relstr and unistr arrays
      fixes to prs_unistr UNMARSHALLING only.  Problem was due to talloc's
      removed the prs_align in spoolss_smb_io_unistr()  (JF, please check)
      fix for new_smb_io_relarraystr() and new_smb_io_relstr()
      minor formatting fixes.
      fixed a few bugs in new_smb_io_relarraystr().
      fixed error in [public] spotted by Ron Alexander <rcalex at home.com>
      fixed typo.
      fixed unitialized struct bug in enum_users (whatever it is called)
      - fixed memcpy bug in copy_unistr2()
      hack for unmarshalling unistr's on machines with BIG_ENDIAN arch
      added comment for my own memory purposes
      Fix for Win9x driver downloads when information is
      changing some debug message levels
      fixed initialization errors (again!)  I must have forgot to
      fixed an off by one error where I was tromping on memory
      script written by herb for reporting which smb.conf parameters
      fixed typos spotted by Ron Alexander <rcalex at home.com>
      first draft at rpcclient man page for HEAD branch.  Taken heavily
      added the -A <authfile> option for allowing the reading of user
      make rpcclent by default.
      needed to use strwicmp() in smbclient code, so I moved it to util_str.c
      added -A <authfile> option to smbclient for the reading of username /
      fixed previous bug spotted by Elrond in get_printerdrivernumber().
      added a #define for SPOOLSSGETPRINTERDATAEX.  Although we do not
      added -P (for no prompt) and -A <authfile> options
      make proto
      missed removing the static declaration of strwicmp()
      -U% should be an anonymous connection.  Fixed bug where
      spoolgetprinterdriver now returns "Windows NT x86" and "Windows 4.0"
      First draft of new printing doc describing the SPOOLSS support in the
      Added a gew more mods by Patrick Powell (lprng guy)
      fixed typo
      Placeholder for some forthcoming documentation
      Just in case anyone thinks that Win ME is not freally just a
      added some clarifications.
      TDB password backend support written by Simo Sorce <simo.sorce at polimi.it>
      documentation update and general description
      added more explanation about the required permissions (and authorization)
      Large commit which restructures the local password storage API.
      Another large patch for the passdb rewrite.
      make proto
      combined 2 if statments which used the same condition
      o fixed logon script problems (wrong len in reply to net_sam_logon for
      update to reference new documentation in Imprints
      added documentation for 'private dir' parameter
      added passdb editor (rough form with a few bugs) Should work
      updates to the tdbsam implementation.
      update for new pdbedit tool (code from Simo)
      group rid assignment cut and paste error
      new version of Get_Pwnam()
      type for client_info struct
      code review of rpcclient
      subtle bug where files which missed the stat_cache but were added
      more fixes from Simo.  Also fixed the password expiration field
      inverted dword value
      merge from appliance head
      merge from appliance head
      only add the service name and client machine name to list of users names
      increase MAX_POL_HNDS (merge from 2.2)
      fixed typo in debug statement
      getpw[nam|uid] caching patch from "Richard Bollinger"
      merge from APPLIANCE_HEAD (mapping access_required 0x0 to
      add pam_setcred() call to pam_auth().  Patch was submited last Oct.
      replaced inet_aton() with inet_addr() to keep Solaris from complaining.
      merge from SAMBA_2_2
      change pstrcpy() in setup_pwret() to fstrcpy() since we are
      updated comments on using DocBook.
      added SGML/DocBook for samba(7) man page
      autogenated from SGML/DocBook source :-)
      more SGML/DocBook sources
      more autogen files from the latest SGML/DocBook checkins
      save as we go.  Probably last check in for tonight.
      update as we go.  Almost there....
      Whew!  smb.conf.5.yo completely converted to DocBook (only after 2 & 1/2
      clean things up to fix HTML generation
      generated man page and html version of smb.conf(5)
      note about docbook conversion
      housekeeping and a new SGML source file (findsmb)
      generated files
      more converted docs
      more updates.....
      fixed bad link
      and some more....
      fixed typo
      more updates.....
      getting closer
      there is seemingly no end to these man pages....
      while I was at it.....
      save as we go. More pages done.
      make it stop...please, make it stop....
      one more down...
      saving this one while I go eat
      more auto generated....
      add a few, fix a few, add a few, fix a few...
      autogenerated files....
      I'm just checking these in.  There not done.
      more updates.  Conversion almost done.  2 more man pages
      last files converted!!!  Yah!!!! :-)
      more autogen stuff
      removed wrong patch to get_dir_entry().  This was left over from the
      just saving my changes as I go.  These do not work yet....
      couple of updates to remove error message when generating
      playing with autogen files again
      moved rpcclient from section 8 to section 1
      'make man' will generate all man pages now
      'make html` is ugly but it works....
      playing with Makefile and autogen
      dependencies for individual man pages are handled now
      updates to instructions
      used in AC_INIT().  Contains global entities for DocBook files.
      beginning on consolidating individual text files.
      ISO entity files needed for DocBook V4.1 DTD
      DocBook V4.1 DTD so we are all on the same page
      another conversion
      autogen
      more updates and autogen
      some updates and reorganization
      added so that it is not necessary for autoconf to be locally installed
      updated Makefile to generate howto's and the FAQ
      fixed typo
      autogen stuff
      merge of 'lanman auth' and 'min protocol' from 2.2
      move charset_initialize() up in the food chain so that lp_load_services
      patches from Simo.  Couple of snity things
      set of changes in the beginning of bringing rpcclient changes
      make proto
      last make proto got messed up it seems
      more updates.  several spoolss commands added as placeholders
      make proto
      renamed one of the enumprinterdrivers parsing functions
      added getdriver and enumdrivers commands.  Also fixed
      make proto
      added getdriverdir and cleaned up the PRINTER_DRIVER_CTR struct
      make proto
      addprinter and adddriver are working now :-)
      make proto
      whoops...forgot one
      merge from 2.2 (reorder commands in array)
      reverted the rename of new_spoolss_io_r_enumprinterdrivers()
      merge from 2.2
      merge from 2.2
      merge from 2.2.
      make proto
      rename of 16 new_smb_io functions to smb_io_* for consistency sake
      looking towards abstracting the passdb and uidmapping interfaces.
      fix broken links in SWAT due to upper case anchors in the generated
      still working on it
      forgot one thing
      beginning of big merge of docs from 2.2
      syncing up with 2.2
      large sync up with 2.2
      another merge from 2.2
      merge from 2.2
      merge
      meger from 2.2
      merge from 2.2
      bad link
      merge from 2.2
      merge from 2.2
      added Mandrake support from 2.2
      updating changes with 2.2 (comment lines in ./configure --help)
      syncing up changes in 2.2
      syncing up with 2.2
      converted the passdb smbpasswd implementation to using talloc
      removed SMBRUN references
      removed references to SMBRUN
      rpcclient merge from 2.2 (including Jeremy's non-void return fix)
      removing the references to rpc_client_proto.h
      few cleanups to bring in line with 2.2
      fixes from Simo
      make proto
      merge from 2.2 in password_ok() to ensure that we check the
      Patch from Simo:
      removed unused variables
      merge from 2.2 removing the 'domain XXX' parameters.
      added some docs in order to keep track of the Samba private enterprise
      check for valid pointer before calling memset() in samr_clear_sam_passwd
      Should be faliing on False and not True.  Bad check on return value
      update from Simo
      merge from 2.2  DeletePrinterDriver() server side stud coming
      merge from 2.2 (deleteprinterdriver RPC)
      make proto
      merge from 2.2
      merge from 2.2
      merge from 2.2
      syncing up with SAMBA_2_2
      sync with SAMBA_2_2
      forgot one
      beginning of merge with SAMBA_2_2
      sync with SAMBA_2_2
      more syncs with SAMBA_2_2
      final sync with SAMBA_2_2
      syc up docs with 2.2
      merge from 2.2
      sync this function with 2.2 (single check for NULL parameter)
      changed --with-profile to --with-profiling-data to "stop the madness!"
      merge from 2.2
      a few cleanups while mergeing the passdb code into 2.2
      merge from 2.2
      merge from 2.2
      merge from 2.2
      merge from 2.2
      merge from 2.2
      /tmp/cvsVTEaY5
      typo
      fixed typo
      merge from APPLIANCE_TNG
      merge from APPLIANCE_TNG
      merge from 2.2
      merge from 2.2
      merge from APPLIANCE_HEAD
      cut-n-paste error
      merge from 2.2
      merge from appliance_head
      merges from 2.2
      merge from 2.2
      OpenSSL merge from 2.2
      sync up with 2.2
      Don't build make_printerdef in HEAD.  This tool is not needed except
      merge from 2.2
      merge from 2.2
      merge from 2.2
      mega-merge from 2.2
      merge from 2.2
      old merge from 2.2
      merge from 2.2.  Why is STR_CONVERT missing when comparing
      Fixed a few typos and added the opnum for ADDPRINTERDRIVEREX to the
      new Win2k spoolss rpc opnum (unknown right now).
      verified two new win2k rpc's EnumPrinterDataEx() and DeletePrinterdataEx()
      SETPRINTERDATAEX is 0x4d (not 0x50).  My mistake.
      more Win2k RPC opnums (EnumPrinterKey() and DeletePrinterDriverEx())
      WITH_MSDFS is not define anywhere.  It's built by default.
      --with-msdfs wsa removed
      merge from 2.2
      sync up with 2.2
      merge oops fix from 2.2
      remove unused variables
      merge from APPLIANCE_HEAD
      merge from APPLIANCE_HEAD
      commit from 2.2
      merge from 2.2
      merge from 2.2
      merge from appliance_head
      merge from 2.2
      ChangeID fixe from APPLIANCE_HEAD
      merge from 2.2
      couple of updates mentioned on samba at samba.org
      update from Vance
      merge from 2.2
      sync with 2.2
      moving SAM_ACCOUNT to include a bit field for initialized
      merge from 2.2
      removed unused files
      file Samba-LDAP-HOWTO.sgml was initially added on branch SAMBA_2_2.
      pdb_getsampwnuid() merge from 2.2
      some merges from 2.2.  Still need to merge in changes from pdb_tdb.c
      remove samlogon_user
      removed extern samlogon_user
      fix compile error
      reverted to 1.24 and manually merged in changes from 2.2
      fixing compile error
      ooops./  forgot one
      sync up ldap defaults with 2.2
      removed stuff I wasn't using
      sync with 2.2
      merge from 2.2 and regenerate docs
      forgot a few files
      yeah!  I think I figured it out now
      merge from 2.2
      sync up comments with 2.2
      sync getopt() args with 2.2
      entering placeholders for forthcoming documentation
      i **really** hate stuck tags in CVS :-(  Figured out why
      I think I've finally gotten this straighten out in my tree.
      commit some changes for ab, and keep working on the smbgroupedit
      merge from 2.2. of
      merge from appliance_head
      merge from 2.2
      merge from 2.2
      merge from 2.2
      merge from APPLIANCE_HEAD
      merge from 2.2 and regenerate
      make all-docs to make sure everything is up-to-date
      merge from 2.2
      merge from 2.2
      merge from 2.2 and regen
      merge from 2.2
      removed several parameters ("client code page", "valid chars",
      merge from APPLIANCE_HEAD
      doc merge from 2.2
      fixes from 2,2
      merge from 2.2
      merge from 2.2
      merge from 2.2
      merge from 2.2
      merge from APPLIANCE_HEAD
      merge from 2.2
      merge from 2.2
      merge from 2.2 and regenerate
      merge from 2.2
      merge from 2.2
      merge from 2.2
      fix a few defines
      merge from 2.2
      merge from 2.2
      merge from 2.2
      syncing up printing code with SAMBA_2_2 (already done some merges
      resetprinter merge from SAMBA_2_2
      merge from APPLIANCE_HEAD
      OpenPrinter() merge from 2.2
      merge from SAMBA_2_2
      merge from SAMBA_2_2
      * merges from SAMBA_2_2
      some mergee from SAMBA_2_2.  Does compile, but needs some more testing.
      added "list <pipe>" command to display the available commands
      removing unused files....
      specversion merge from SAMBA_2_2
      WERROR merge from SAMBA_2_2
      merge from 2.2
      s/werror_str/dos_errstr/g to fix compile
      removed unnecessary memset
      merge from SAMBA_2_2
      merge from SAMBA_2_2
      merges from SAMBA_2_2
      few fixes and regenerate
      merge from HEAD
      merge from SAMBA_2_2
      printing merge from HEAD
      * merge from SAMBA_2_2
      merging some changes from SAMBA_2_2
      compile fixes; needs testing
      pidfile merge from SAMBA_2_2 (including --with-fhs) and a few other minor things; compiles and shouldnt break, but needs testing
      HP-UX 10.20 compiles fixes from SAMBA_2_2
      couple of PIDDIR merges I missed
      merge from SAMBA_2_2
      merge from SAMBA_2_2: remove -symbolic from pam_smbpass linker flags
      merge from SAMBA_2_2
      merge freom SAMBA_2_2
      merge from SAMBA_2_2
      devmode parsing merge from SAMBA_2_2
      misc merge from SAMBA_2_2
      merge from SAMBA_2_2
      compile fix merge from SAMBA_2_2
      segfault fix merged from SAMBA_2_2
      more solaris compile fixes (for smbwrapper)
      merges from SAMBA_2_2
      merge from SAMBA_2_2
      merge from SAMBA_2_2
      merge from SAMBA_2_2.
      merge from SAMBA_2_2
      merge from 2.2
      merge from 2.2
      merge from 2.2
      merge from 2.2
      enable building of shared libsmbclient
      merge from 2.2
      fix typo
      compile warngin fixes merged from 2.2
      printing merge from SAMBA_2_2.  Ther server code looks to be in sync now.
      forgot new error code from 2.2
      compile fix
      backing out changes for now
      replacing free() with SAFE_FREE() where possible
      sync with the sec_desc parsing fix from APP_HEAD.  I will probably need
      merging some autoconf changes from SAMBA_2_2
      merge of SONAMEFLAG stuff from SAMBA_2_2.  If I stepped on something
      removed compiler warning
      merge from APP_HEAD
      more merges from SAMBA_2_2
      a null grp_sid should have a 0 offset.  Also removed a few more unnecessary
      It's fairly obvious that no one has tried to upload a driver
      fix typo in unix extensions description
      first cut at implementing support for browsing printer and driver driver
      * fix seg fault caused by missing DLIST_REMOVE in free_fn()
      fixed the geyed out registry keys.  Stupid typo on my part.
      * basic implementation of SPOOLSS_DELETEPRINTERDATAEX and
      added parsing routines for SPOOLSS_ADDPRINTERDRIVEREX and
      fix typo
      fixup ADDPRINTERDRIVEREX some more.  unknown uint32 for now.
      8-byte alignment needed for beginning driver_info_level_6.
      intermediate work on DeletePrinterDriverEx().  This call
      all that is left to do is to actually perform the
      last check in for tonight.
      added copyright
      added copyright
      splitting off storage/retrieval routines for abstracting the
      The previous code would not allow things like string_sub(str, "\\", "/", 0).
      virtual registry framework with initial printing hooks.
      merge from SAMBA_2_2 spotted by Simo
      * refactored registry operations some.  subkey lists and
      fixed seg fault in registry frontend caused by trying to
      fixed a logic error in the sorted_tree_find_child() routine
      enumeration of printers keys ( no data yet ) via the registry
      another intermediate checkin on the way to enumerating forms
      fix seg fault due to memory allocation goof.
      * changed structure of REG_R_ENUM_VALUE structure since the BUFFER2
      * fix to display correct form information in REG_BINARY information
      several changes in this checkin
      done!  printer_info_2, devicemode, sec_desc, & printer data all enumerate
      * fix return code so we don't let a client just open any key it wants
      fix parameters for ldap_set_rebind_proc() from OpenLDAP 2.1
      3 things:
      merge from SAMBA_2_2
      simple perl script for retreiving cvs log messages for a file
      hardcode printprocessor name since it is everywhere else
      passing -1 for the src length in rpcstr_pull results in only
      couple of minor formatting fixes to help me see better.
      add another registry rpc (opnum 0x14).  Have no idea what it's real name
      merge from SAMBA_2_2
      printing change notification merge from APPLIANCE_HEAD
      delete printer driver fix from APP_HEAD
      one line merge from APP_HEAD
      unresolved symbols fix for pam_smbpass from Steve L.
      added comment about a new specversion seen from client.
      large set of updates converting some of the textdocs to SGML/DocBook.
      Fairly large change to printing code.
      fix small bug in enumprinterdataex due to my changes (still more lurking
      fix seg fault in _spoolss_enumprinterkey after changes...
      * the printing code should now be back to the working state it was
      * fix Get/SetPrinterDataEx() to work with printer key other
      fixed up a few comments
      * small formatting fixes
      fix to allow EnumPrinterKey() to enumerate multiple levels of subkeys.
      fix GetPrinterDataEx() to work with registry subkeys using a depth > 1
      * Fix DeletePrinterDataEx() to work with arbitrary registry keys
      change notify fix left out of merge by APP_HEAD by accident
      added wrapper for delete_printer_data() that write the printer out to disk.
      add support for the "value,OID" format described in MSDN.
      segfault fixes merged from APP_HEAD
      addform fix from SAMBA_2_2
      fix segfault
      fix a few segfaults
      get the access check in addform() correct this time.
      fix registry editor API for printing backend after I changed
      merge from APP_HEAD
      merge from APP_HEAD
      merge from SAMBA_2_2
      add hook for MSG_PRINTER_DRVUPGRADE that numps the change_id on all printers bound to a given driver
      fix 2 byte alignment/offset bug that prevented Win2k/XP clients
      merge of phant0m key fix from APP_HEAD
      break out REGISTRY_VALUE & REGVAL_CR objects into separate file for
      fix broken dependencies....
      fix proto
      fix up print portion of registry.  Merge from APP_HEAD.
      DeletePrinterDriver[Ex]() fixes from APP_HEAD
      remove inet_aton()
      merge of printer change notify fix from APP_HEAD
      change notify merge from APP_HEAD
      AbortPrinter() fix merged from APP_HEAD.
      removed warning about shadowed globals
      removing compiler warnings about shadowed globals
      DelPrinterDrvEx() fix from APP_HEAD
      merge from APP_HEAD for GetJob()
      printjob merge from APP_HEAD regarding device modes
      CUPS merge from SAMBA_2_2
      reran autoconf
      * fix getpass check
      merge from APP_HEAD
      sync'ing up for 3.0alpha20 release
      sync'ing up for 3.0alpha20 release
      sync'ing up for 3.0alpha20 release
      sync'ing up for 3.0alpha20 release
      fix getpass replacement check (i thought I fixed this a few days
      merge from HEAD
      removed autogenerated file
      updated WHATSNEW for alpha20
      syncing up with HEAD again....
      remove files not in HEAD
      sync with SAMBA_3_0
      sync with HEAD
      syncing with HEAD some more
      set version
      Arrgghhh the release script doesn't use the SAMBA_3_0 branch !!!!
      add -r to usage output
      tagging version as post3.0-HEAD to differentiate from the SAMBA_3_0
      tagging as 3.0alpha21cvs
      This is an initial draft of printing internals.  Not done (not really
      fix logic error in testparm with wins servers
      README.OtherModules
      more details opn change notification
      logic error in checking wins servers--merged from HEAD
      more updates--printing backend inmterface & Print queue tdb's
      * add the Developers guide to the repository
      missed one txt rule.
      * working on Makefile
      * adding some notes on the wins failover stuff
      fixing typos spotted by eagle-eye-vance
      * fixed typos in SGML source
      regenerate
      merge from HEAD
      syncing up with HEAD.  Seems to be a lot of differences creeping in
      mention openantivirus.org
      newly generated docs; removing old ones
      more doc structure updates.  SWAT now on links to the TOC for
      small update from Rainer
      merge sendfile entry from SAMBA_2_2 and fix typo
      fix typos in net.8.sgml so it will compile and
      merge of new client side support the Win2k LSARPC UUID in rpcbind
      merge of new client side support the Win2k LSARPC UUID in rpcbind
      merge of working dsrolegetprimdominfo() client code from APP_HEAD
      merge of working dsrolegetprimdominfo() client code from APP_HEAD
      merge native_mode flag in winbindd_domain struct from app-head
      * merge native_mode flag in winbindd_domain struct from app-head
      fix typo
      fix typo
      missing prs_align()'s
      missing prs_align()'s
      merge from APP_HEAD
      merge from APP_HEAD of winbindd's domain local group fix
      add_printer_hook() fix from APP_HEAD
      add_printer_hook() fix from APP_HEAD
      removed stat() call in  lp_add_home()
      removed stat() call in  lp_add_home()
      print job properties fix from APP_HEAD.  a null devmode is not a failure.
      print job properties fix from APP_HEAD.  a null devmode is not a failure.
      merge from app_head to use GMT in job submission notification
      merge from APP_HEAD to use GMT in job submission notification
      fix from APP_HEAD to commit a re-init'd printer to disk
      merge from app_head to commit re-init'd printer to disk
      NULL enum_local_groups for ads winbindd (temporary workaround).
      NULL enum_local_groups for ads winbindd (temporary workaround).
      updating from SAMBA_2_2
      detect rpm v4.1 (RedHat 8.0)
      removing make_printerdef tool and sources
      merging in changes from HEAD
      sync with SAMBA_3_0
      removed the following parameters
      merge from samba_3_0
      trying to sync with SAMBA_2_2
      Initial build for Samba 3.0.  Not finished, but at least
      installcp script is no longer used...
      sync from HEAD
      removing a few files I missed
      adding missing files
      sync with HEAD some more....
      removing more files...
      merge PURGE_PRINTER fix from APP_HEAD
      PURGE_PRINTER fix from APP_HEAD
      adding roadmap to 3.0 branch
      patches from Urban
      patches from Urban
      defunct winbindd fix from APP_HEAD
      fix for defunct winbindd from APP_HEAD
      remove accidental debug code.
      remove accidental debug code..
      re-enable ffpcn on print server handle
      re-enable ffpcn on print server handle
      deldriver fix
      deldriver fix
      fix for CR 601.  Only call addprinter command when the port, driver, comment, or location field changed
      fix for CR 601.  Only call addprinter command when the port, driver, comment, or location field changed
      enable enumeration of domain local groups using LDAP (and in a native mode domain)
      fix segfault
      enable enumeration of domain local groups using LDAP (and in a native mode domain)
      fix segfault
      use
      formatting fix
      use ${RPM} for rpm v4.1
      sync packaging changes with SAMBA_3_0
      bad date string in specfile
      merge get_friendly_nt_err_msg() from app_head
      merge get_friendly_nt_err_msg() from app_head
      [merge from APP_HEAD]
      [merge from APP_HEAD]
      [print notify fixes from APP_HEAD]
      [print notify fixes from APP_HEAD]
      Doh!  forgot to add this yesterday when merging from HEAD.
      working on alpha21
      fixing install problems with VFS modules
      fix path to compiled VFS libraries
      lining up some spaces in configure.in and reran autoconf
      * fixing RedHat spec file for 3.0
      * finializnig RedHat package for alpha21 release
      fix cli_ds_getprimarydominfo(); merge from SAMBA_3_0
      update docs for "password server" and regenerate
      sync docs with SAMBA_3_0 and regenerate
      last touches on release notes
      removing inet_aton()
      dumping up version number
      syncing packaging files with SAMBA_3_0
      reverted the removal of DESTDIR and adding a comment about it
      merging changes from SAMBA_3_0 relating to RPM packaging
      [merge from app_head]
      [merge from app_head]
      ln -s /lib/libns_winbind.so /lib/libnss_winbind.so.2
      ln -s /lib/libns_winbind.so /lib/libnss_winbind.so.2
      [merge] remove assert(count ==1) for multi-homed PDCs; CR 1277
      [merge] remove assert(count ==1) for multi-homed PDCs; CR 1277
      cleaning up some friendly error messages
      cleaning up some friendly error messages
      change_trust_account_password() must always use the PDC for rpc
      merges from HEAD - change_trust_account_password() must always talk to PDC
      merge of smbpasswd segfault from SAMBA_2_2
      merge of smbpasswd segfault from SAMBA_2_2
      ignore editreg
      merge of get_dc_name()-like code from APP_HEAD; better support password server = DC1 *
      merge of get_dc_name()-like code from APP_HEAD; better support password server = DC1 *
      fix usage message
      fix usage message
      * fix memory leak when constructing an driver_level_6 structure
      * fix memory leak when constructing an driver_level_6 structure
      app_head merge for get_friendly_nt_err()
      app_head merge for get_friendly_nt_err()
      WITH_SENDFILE #ifdef merged from SAMBA_2_2
      WITH_SENDFILE #ifdef merged from SAMBA_2_2
      patch from Andrew Bird to correct a few file/directory checks when building
      patch from Andrew Bird to correct a few file/directory checks when building
      oops.  Use -r, not -f
      make sure we create the PIDDIR and LOCKDIR from installdirs
      make sure we create the PIDDIR and LOCKDIR from installdirs
      patch to include support for daemontools from Michael Handler
      regenerate man pages
      patch to include support for daemontools from Michael Handler
      removed idpool from schema file (experimental) to remove the dependency
      add $(LDFLAGS) to libsmbclient
      a 0 length printer data value is not a memory allocation error; fix CR601
      a 0 length printer data value is not a memory allocation error; fix CR601
      [merge] make sure to updatre print queue cache during timeout_processing() to send notify events; CR 1491
      fix tdb_append() prototype
      fix tdb_append() prototype
      typo from merge
      [merge] make sure to update print queue cache during timeout_processing() to send notify events; CR 1491
      make -i flag work lik eit did in 2.2
      make -i flag work lik eit did in 2.2
      merge: disable [u|g]idPool objects
      removing unused variable and unused file
      [merge] removing unused variable and unused file
      removing unused files from release branch
      * removed unused variable from rpcclient code
      [merge]
      remving more unused files
      more unused files
      merging some rpcclient and net functionality from HEAD
      winbindd merges from HEAD
      sync up ignored files from HEAD
      small merges from SAMBA_3_0; mostly typos, renames, etc...
      *lots of small merges form HEAD
      remove torture tools on make clean
      playing janitor for tpot; remove holding pattern
      add ntlogon directory and files from 3.0
      syncing docs with HEAD
      do not use RCS variables in file
      do not use RCS variables in file
      missed a file
      s/WIFSIGNALLED/WIFSIGNALED/g
      s/WIFSIGNALLED/WIFSIGNALED/g
      * merge fixes for SGML syntax errors (does no one ever regenerate the docs?)
      regenerate docs
      sync with HEAD; link to HOWTO index
      connect to the actual netbios name in smb.conf and not LOCALHOST
      connect to the actual netbios name in smb.conf and not LOCALHOST
      sync WHATSNEW from SAMBA_3_0
      removing extra debug statement
      removing extra debug statement
      adding docs for rpc plugin libs
      only supporting the Net::LDAP module now
      strip any trailing \'s from reg key names in an open
      strip any trailing \'s from reg key names in an open
      sanity checks from Ken Cross
      sanity checks from Ken Cross
      don't free() auto variables; fixes segfault when looking up RefusePasswordChange registry value
      don't free() auto variables; fixes segfault when looking up RefusePasswordChange registry value
      fix for CR 1603; provide description of NT_STATUS_PIPE_NOT_AVAILABLE
      fix for CR 1603; provide description of NT_STATUS_PIPE_NOT_AVAILABLE
      merging [un]signed declaration
      masking an assert error in Tim's wins server checking code; needs a proper fix after I talk to tpot
      sync with tpot's change to gencache_get() in HEAD
      reran autoconf
      CUPS-PRINTER_CLASS patch from Michael Sweet
      CUPS-PRINTER_CLASS patch from Michael Sweet
      performance patch from HP-UX folks (cant remember who)
      performance patch from HP-UX folks (cant remember who)
      added missing file for abartlet
      patch from Paul Green to only build libsmbclient.so on platforms that support shared libraries
      patch from Paul Green to only build libsmbclient.so on platforms that support shared libraries
      playing janitor for abartlet. :-(
      Straus VOS detection patches from Paul Green
      Straus VOS detection patches from Paul Green
      reran autoconf-2.53
      CUPS patch to log client name
      CUPS patch to log client name
      check pointer before dereferencing it
      check pointer before dereferencing it
      autogen - cope with autoconf-2.53/2.13 systems (like RH 7.3)
      autogen - cope with autoconf-2.53/2.13 systems (like RH 7.3)
      adding more descriptions for nt status codes
      adding more descriptions for nt status codes
      off by one bug in string length; CR 1159
      off by one bug in string length; CR 1159
      * set PRINTER_ATTRIBUTE_RAW_ONLY; CR 1736
      * set PRINTER_ATTRIBUTE_RAW_ONLY; CR 1736
      set the various DsSpooler keys that are linked to PRINTER_INFO_2 fields; CR 985
      set the various DsSpooler keys that are linked to PRINTER_INFO_2 fields; CR 985
      patch from Hal Roberts check for a valid [f]chmod_acl function pointer before calling it.  Fixes seg fault in audit VFS module
      patch from Hal Roberts check for a valid [f]chmod_acl function pointer before calling it.  Fixes seg fault in audit VFS module
      couple of merges from APP_HEAD
      couple of merges from APP_HEAD
      s/unistr2_to_dos/unistr2_to_ascii/ to fix compile
      i patched the wrong branch! s/unistr2_to_dos/unistr2_to_ascii/
      Progress on CR 601
      Progress on CR 601
      additional fix for CR 601
      additional fix for CR 601
      don't pass NULL pointers to strcmp()
      don't pass NULL pointers to strcmp()
      and the winner of "i should have just written it in assembly
      and the winner of "i should have just written it in assembly
      don't forget the NULL
      don't forget the NULL
      * CR1868: only send a change notify message if we have something
      * CR1868: only send a change notify message if we have something
      * always report ourselves as a Windows 2000 print server (even
      * always report ourselves as a Windows 2000 print server (even
      updating whatsnew for alpha22
      fixing a few typos
      fixing a few typos & regenerating pages
      preparing for release of 3.0alpha22
      make sure to call autogen.sh
      forgot that i should run autogen.sh as part of release
      changing reference to irc.openprojects.net
      merging some packaging fixes from SAMBA_2_2
      add #define for the max device name length in a DEVICEMODE
      add #define for the max device name length in a DEVICEMODE
      check a pointer before dereferencing it; not sure why userdata == NULL though
      check a pointer before dereferencing it; not sure why userdata == NULL though
      adding some initiaial code to sert %a to Win2K3 (using Native LanMan string from .NET RC2)
      adding some initiaial code to sert %a to Win2K3 (using Native LanMan string from .NET RC2)
      fix WinXP & Win2K3 remote_arch and check pointer in ntlmssp code before dereferencing
      fix WinXP & Win2K3 remote_arch and check pointer in ntlmssp code before dereferencing
      win9x was suffered a case of the blues during a domain logon.
      win9x was suffered a case of the blues during a domain logon.
      cleanup the IPC/LPT:/A: mess I started
      fix up IPC/LPT:/A: devicetype in tcon_and_X
      don't include proto.h during autoconf tests since it doesn't exist yet; fixed getsmbpass replacement test
      don't include proto.h during autoconf tests since it doesn't exist yet; fixed getsmbpass replacement test
      fix CIDR hosts allow/deny notation
      fix CIDR hosts allow/deny notation
      packaging updates from Buchan
      sync packagaing with SAMBA_3_0
      merging packaging changes fro 2.2
      missed a couple of files
      update copyright notice since it we are now almost 4 months into 2003
      update copyright notice since it we are now almost 4 months into 2003
      set version string
      add a few error checks in EnumPrinterData()
      add a few error checks in EnumPrinterData()
      updated passdb backend parameter
      updating release notes for next alpha
      update version number in release notes
      preparing for release of 3.0alpha23
      preparing for release of 3.0alpha23
      removing duplicate listing of files
      fix potential smbd crash when we fail to alloacte a policy handle for a printer open; CR 2102 (reviewed by jreilly)
      fix potential smbd crash when we fail to alloacte a policy handle for a printer open; CR 2102 (reviewed by jreilly)
      fix potential handle leak in _spoolss_open_printer_ex(); final fix for CR2102; reviewed by jra
      fix potential handle leak in _spoolss_open_printer_ex(); final fix for CR2102; reviewed by jra
      set version to alpha24 so we can distinguish from the alpha23 release
      nsswitch/winbind_nss.c doesn't exist
      better method of locating autoconf and autoheader; patch by Willi Mann
      better method of locating autoconf and autoheader; patch by Willi Mann
      fixup extra SAFE_FREE()'s noticed by abartlet
      forgotten merge left on disk; remove extra SAFE_FREE()
      another forgotten merge sitting on my laptop from app_head; only stall open_printer when 2k client opens with admin privs & fix reply for ChangeId printer data reply
      another forgotten merge sitting on my laptop from app_head; only stall open_printer when 2k client opens with admin privs & fix reply for ChangeId printer data reply
      no needed anymore
      no needed anymore
      workaround streams leak on SCO openserver 5.0.x
      workaround streams leak on SCO openserver 5.0.x
      simple fix to hopefully speed up srv_spoolss_replyopenprinter().
      simple fix to hopefully speed up srv_spoolss_replyopenprinter().
      cleanup lanman printing= for win98; device type is LPT1:; patch by Steve L.
      cleanup lanman printing= for win98; device type is LPT1:; patch by Steve L.
      smbcquota patch from metze
      * We must return 0x2 as the majorversion for nt4 to upload drivers
      * We must return 0x2 as the majorversion for nt4 to upload drivers
      add smbcquotas to list of ignored files
      merge in metze' smbcquotas patch from HEAD
      fixing torture build by merging code from HEAD
      fix byte ordering when using CIDR notation in hosts allow/deny; spotted by Eloy Paris
      fix byte ordering when using CIDR notation in hosts allow/deny; spotted by Eloy Paris
      uidPool and gidPool don't use cn anymore (but we don't use thsi anyways)
      uidPool and gidPool don't use cn anymore (but we don't use thsi anyways)
      Merging smbgroupedit into 'net groupmap'.  Not entirely done.
      [merge from SAMBA_3_0]
      remove smbgroupedit from packaging scripts
      * fix segfault when no vfs objects defined
      removing some ifdef'd out code
      merging fixes from SAMBA_3_0
      wrap pdb_enum_group_mapping() in [un]become_root() so LDAP queries can get the credentials from secrets.tdb
      wrap pdb_enum_group_mapping() in [un]become_root() so LDAP queries can get the credentials from secrets.tdb
      another lost merge from 3.0; my fault
      support referencing group by sid in all operations; allow group name to be changed
      support referencing group by sid in all operations; allow group name to be changed
      default new groups to domain groups
      default new groups to domain groups
      update copyright notice that is written to the logs
      update copyright notice that is written to the logs
      don't reset the group type unless specified
      don't reset the group type unless specified
      allow the unix group in a mapping to be changed; doesn't work with LDAP right now but should be ok with tdb's
      allow the unix group in a mapping to be changed; doesn't work with LDAP right now but should be ok with tdb's
      fix SGML syntax errors
      updating group mapping HOWTO.
      update net man page for groupmap options
      remove smbgroupedit entity
      groupmap delet should take a name or a SID
      groupmap delete should take a name or a SID
      fix and if () that should be an 'else if()'
      fix and if () that should be an 'else if()'
      round three of CIDR fixes; spotted by Tomoki AONO
      round three of CIDR fixes; spotted by Tomoki AONO
      removing smbgroupedit manpage
      removing smbgroupedit man page
      readding template files on SAMBA_3_0 branch; not cvs tag
      testing commit
      packaging updates from Buchan
      removing printing = SOFTQ since no one knows what it is
      only call the add_script if the getpwnam_alloc() fails
      removing printing = SOFTQ since no one knows what it is
      don't implement any group mapping functions in the guest sam module
      don't implement any group mapping functions in the guest sam module
      only call the add_script if the getpwnam_alloc() fails
      do not build wrepld by default; package maintainers need to update their files now (john :) )
      remove --with-tdbsam since it is always built now
      sync with HEAD and remove --with-misplussam as well
      add version back to lanman string in sessetup reply
      add version back to lanman string in sessetup reply
      adding ifdef'd code to add alias membership for vampire
      adding ifdef'd code to add alias membership for vampire
      remove convert_smbpasswd and addtosmbpass from tree; people can get them from 2.2. if they still need them
      remove convert_smbpasswd and addtosmbpass from tree; people can get them from 2.2. if they still need them
      smbgroupedit has been replaced by 'net groupmap'
      remove 'devel' option to makerpms.sh.tmpl since we don't use it n the RH packaging anymore and make sure to run autogen.sh if configure doesn't exist (make building from CVS easier)
      more updates from Buchan after we removed some on the old/unstable tools/binaries/scripts
      fixed bug #75; add check for non-zero destlen
      fixed bug #75; add check for non-zero destlen
      fix bug #47; revert registration of workgroup<1b> to 2.2 behavior
      fix bug #47; revert registration of workgroup<1b> to 2.2 behavior
      adding warning about case sensitive parameter
      add new %a strings
      removing total print jobs since it is not used anymore
      removing total print jobs since it is not used anymore
      syncing import/export smbpasswd file scripts from 2.2
      syncing README to go along with scripts
      fixing typos in debug statements
      fixing typos in debug statements
      copied form HEAD to get the compile going.
      fix up packaging for RH9
      *****LDAP schema changes*****
      perl script to convert from sambaAccount to sambaSamAccount; requires Net::LDAP::LDIF
      syncing LDAP schema changes with Samba_3_0
      perl script to convert from sambaAccount to sambaSamAccount; requires Net::LDAP::LDIF
      ignore manpage.[refs|links]
      ignore manpage.[refs|links]
      s/primaryGroupSID/sambaPrimaryGroupSID/
      s/primaryGroupSID/sambaPrimaryGroupSID/
      fix group mapping in LDAP under new schema
      fix group mapping in LDAP under new schema
      readding reverted changes during idmap merge (noticed by Andrew b.)
      readding reverted changes during idmap merge (noticed by Andrew b.)
      working on 3.0alpha24
      fix quota build on non-64bit systems
      preparing for release of 3.0alpha24
      wrap pdb_[nisplussam|xml|mysql] in --with-expsam option & some formatting fixes
      wrap pdb_[nisplussam|xml|mysql] in --with-expsam option & some formatting fixes
      remove WITH_TDB_SAM
      remove WITH_TDB_SAM & USE_SMBPASS_DB
      remove USE_SMBPASS_DB
      better handling of --with-expsam (includes pdb_nisplussam now)
      better handling of --with-expsam (includes pdb_nisplussam now)
      really make sure to include the version in the lanman string; tested spnego using smbclient
      really make sure to include the version in the lanman string; tested spnego using smbclient
      fix for UNICODE plaintext passwords (bug #59) and fix smbclient to send the unicode plain text password if negoitated
      fix for UNICODE plaintext passwords (bug #59) and fix smbclient to send the unicode plain text password if negoitated
      updating version
      fixes bugs 85 & 99 (XP domain logons); don't enable the lsa_query_info2 unless we are trying to be an ADS DC
      fix bug #108; sambaSambaAccount string attributes are case insensitive; don't try to change a string that only differs in case
      fix bug #108; sambaSambaAccount string attributes are case insensitive; don't try to change a string that only differs in case
      moving the sambaAccount objectclass to 'historical' to prevent confusion on which one should be used for new servers.  I'll add a note about uncommenting the older items for ldapsam_compat in the release notes
      merging minor change from SAMBA_3_0 about which pdb modules to build
      sync LDAP schema with SAMBA_3_0
      fixes bugs 85 & 99 (XP domain logons); don't enable the lsa_query_info2 unless we are trying to be an ADS DC
      volker's add_signature() fix; must pass the beginning on the outbuf to get the flags field
      volker's add_signature() fix; must pass the beginning on the outbuf to get the flags field
      volker's fix for crash when my_private_data == NULL
      volker's fix for crash when my_private_data == NULL
      fix bug 118; replace hard coded 'next[User|Group]Rid' attribute names
      fix bug 118; replace hard coded 'next[User|Group]Rid' attribute names
      cut-n-paste error
      cut-n-paste error
      * set winbind cache time to 5 minutes
      * set winbind cache time to 5 minutes
      initial version of idmap_ldap.c; lots of updates to come
      added idmap_ldap to wrong branch.
      working draft of the idmap_ldap code.
      * break out more common code used between pdb_ldap and idmap_ldap
      merge from APP_HEAD.  Push negative connection cache
      removing RCS tags
      syncing RCS tag removal from 3.0 release tree
      compile error
      updates for RedHat packaging
      fix build on systems w/o LDAP libs
      remove yet aother RCS tag
      * add in David Lee's utmp patch (defaults to on if available)
      support LDAP_EXOP_MODIFY_PASSWORD (not experiemental in OpenLDAP 2.1)
      pMandrake/samba2.spec.tmplackaging updates (Buchan)
      applying David Lee's climessage patch to make sending messages more extendable
      add back the winbind uid/gid parameter but mark them as deprecated
      bumping cvs version number to distinguish between SAMBA_3_0 cvs tree
      fix broken link
      check that an attribute is defined and not just non-zero
      fix typo in description
      merge of the netsamlogon caching code from APPLIANCE_HEAD
      * set domain->last_status = NT_STATUS_SERVER_DISABLED on an ads_connect() failure
      fix bug #178; available space in devmode should be int
      fix typo (bug #170)
      wrap group enuemration in brcome/unbecome_root() (bug #110)
      * s/get_dc_name/rpc_dc_name/g  (revert a previous change)
      large change:
      forgot one file
      * fix typos in a few debug statements
      fix build on non-ldap platforms
      ifdef out some functions that are not used when HAVE_ADS is not defined
      fix linking of some things that are not built by default
      cleaning up more build issues.  Tested
      cleaning up after the s/in_addr/ip_service/ switch for the get_dc_list() patch
      add check for NT_STATUS_NOT_IMPLEMENTED in auth check so that
      Here's the code to make winbindd work on a Samba DC
      fix for platforms that don't have unsetenv().
      * rename samstrict auth method to sam
      removing old code
      * cleanup more DC name resolution issues in check_*domain_security()
      * fix the trustdom_cache to work when winbindd is not running.
      * revert change to get_global_sam_name()
      fix typos in log messages and comments.
      fix compile problem with nisplussam
      applying fix for group map conversion (patch from Kristyan Osborne)
      initial draft of changeset
      * fixed volker's wbinfo -a lockup again.  This one was my fault.
      removing nisplussam
      syncing newer files to SAMBA_3_0
      being a responsible developer for a change.  Make sure to
      sync with release branch
      SAMBA_3_0 will now become beta3
      well this was easy...
      fix bug #190; WINS server was getting marked as dead when it was not.
      fix for bug #200.  flush connections if the machine trsut account
      Fix for bug #199 (xp driver uploads).  Needed to support
      and so it begins....
      temporarily disable a sanity check to prevent winbindd from deadlocking
      Cleaning up linking issues.  sam/idmap*.c only links in
      fix some compile problems.  Can't get IDMAP_OBJ our of proto.h
      another compile fix
      fix temporary bug so people can test 3.0 again; make sure to initialize the uid for the server_info struct
      fix some formatting
      fix bone head mistake when setting the uid in the server_info struct.
      standlone servers don't have any trusted domains
      fix linking issues in winbindd with become/unbecome_root() in passdb.c
      more compile fixes for become/unbecome_root()
      Large set of changes to add UNIX account/group management
      i guess i'm the only one this ever annyoed...
      moving more code around.
      fix winbindd init sctipt
      fix unitialised variable
      fix sid_to_[uid|gid] (spotted by Volker).
      patch for domain groups with no members (rpc only) from Ken Cross
      fix cache coherency bug in print handle print_info_2 cache.
      make sure to fallback to rid algoruthm for users not in smbpasswd (e.g. force user = foo)
      remove -B and default to dual-daemon mode (-Y to run as a single process)
      update docs to reflect the change in default behavior for winbindd
      adding docs on hew parameters I added.
      odding some more docs
      Mandrake packaging updates from Buchan
      fix schannel processing on fragmented PDUs.  'net rpc vampire' works again.
      Volker's patch for open_socket_out() to speed up connections
      fixes for 'net rpc vampire'.  I can now take a blank Samba host
      fix typo in debug log
      updating WHATSNEW
      adding another missing doc
      remove outdated doc
      removing outdated scripts
      trying to get HEAD building again.  If you want the code
      ading new files from 3.0
      sync with release tree
      make tdbtool deal with NULL and non-NULL terminated keys
      adding command for moving a record from one tdb to another
      should not have been checked in.  My fault
      fix the build.  Ifdef out some code
      sync from bea3 release
      bumping version string
      removing unused function
      convert snprintf() calls using pstrings & fstrings
      fix typo
      connect to the right realm or domain for trusted AD domains
      connect to the right realm or domain for trusted AD domains
      fix bug config file path in winbind init script (bug #237)
      fix libsmbclientr symlink (patch by Alex Duggan for bug #247)
      call chkconfig --del winbind on removal (bug #238)
      new swat icons from Marc Jacobsen @ HP
      fix some error returns and strings; patch from metze
      fix user_in_list to work with winbind groups again; my bug
      fix case where no realm or workgroup means to use our own
      domain in schannel bind credentials must be the dest domain, not ours
      Fix bug #184; set max_pw_age in account_pol to -1 so the default is never to expire
      fix typo in debug
      remove unnceccsary $; spotted by Lee Taylor
      add support for DsEnumerateDomainTrusted for enumerating all the
      add a few more tidy ups.  Now onto winbindd
      working on transtive trusts issue:
      make sure the domain sid is set when enumerating trusted domains
      only honor the first OID in the sessetup snego negotiate.  Deviates
      fix cut-n-paste error found by abartlet
      make sure to initialize the backend methods when enumerating sequence numbers; reported by Ken Cross
      fix bug #245; local_lookupsid() needed to make a getpwuid() call to get the username instead of making up unix_user.##
      oops; fix typo.  Noticed by gcc warning
      rework winbindd_accountdb_init() to reduce error messages in the log
      fix bug #208; have to get the gid of the user's primary group for %G
      adding generic docs for defining VFS module options
      need to make sure that the connection struct mem_ctx is initialized and destroyed
      need to be able to connect to a domain member as a local account; don't always map to the domain name
      fix 2 bugs:
      updating smb.conf manpage to reflect changes in ./configure options
      fix for BUG #267 (problem with supplementary groups).
      fix MS-DFS (my bug)  stupid return code error that cose me more time
      add --domain=DOMAINNAME to wbinfo
      not used
      adding missing options (mine) to wbinfo
      adding '.' special name to --domain to mean our domain
      fix bug #281 by surrounding pdb_getgrgid() with become/unbecome_root()
      2 fixes
      fix bug #286.
      fix bug 294; win9x driver lookups should always use version 0
      Attempt at fixing bug #283.  There however is no solution.
      fix build
      jeremy foo
      fix compile warnings on IRIX
      possible fix for bug 288 to repcent using an uninitialized cli_state struct
      working draft of release notes
      more change to release notes
      s/OM_uint32//uint32/g
      packagaing fixes from Buchan
      stupid...stupid...stupid....fix bug 294 by looking at the right arch string
      fixing typo
      Fix BUG #314:  api_netUserGetGRoups() was failing prematurely
      no maintainer.  Will be in the Attic if ever needed.  No point
      missed one caldera packaging file
      removing outdated README
      no maintainer for TurboLinux either
      working on fix for BUG #294.  Not done yet, but this at least clears
      updating README a little; (bug 214)
      removing using_samba docs from samba cvs module (not are in a separate cvs module)
      removing using_samba docs from samba cvs module (not are in a separate cvs module)
      missing backtic
      fix small logic error in cm_open_connection() to work with non-krb5 connections
      Fix bug #252.  Implement missing SAMR_REMOVE_USER_FOREIGN_DOMAIN
      fix comments about schema dependencies
      metze's autogenerate patch for version.h
      checlking in initial version of 2.2 scripts so I can start updating them
      adding old NDS schema so I can update it
      actually check in the fix for make torture
      remove unneedced script
      packaging fix for winbind NSS libraries from Brian King
      adding note about change in 'unix extensions' behavior
      fix for BUG 245; make sure we set the sid type when falling back to the rid algorithm stuff
      fix bug 327; make sure to link SMBLDAP_OBJ with PAM_SMBPASS_OBJ
      ensure that 'available = no' works for [homes]; reported by Walter Haidinger
      fix compile problem (stray character)
      revert abartet's change that removed the check for CAP_EXTENDED_SECURITY when decidiing whether or not use ntlmv2 in client connections
      don't complain if the using_samba book is not in the tree
      fixing some packaging stuff for Solaris
      add a quick script to create a tarball for CVS snapshots
      * Fix for bug 290:
      it never amazes me when some new things crawls out of the windows
      make sure the printer data value exists before saying you deleted it
      fix bug #39; save the -W value and restore it after lp_load()
      fix bugs 327 & 340; make sure pam_smbpass.so gets linked with all the neccessary files & libs
      fix bug 289; make sure to reset the offset into a string when reallocating space
      ignore generated smbadduser
      run autogen when making a tarball
      update python libraries for new cli_spoolss_getprinterdriver() call
      make sure we keep the trusted domain cache up to date
      adding some debugs while tracking down a bug
      include enhancements from Buchan Milne to generate LDIF modify output in addition to add
      sync with changes from Jerome Tournier @ IDEALX; should now work with sambaSamAccount schema
      fix bug 230; make sure to set #define SYSV for solaris; do this outside of the checks for shared library support (move the IRIX define as well)
      add --help to script
      fix segfault on empty wins server name registration reply
      renaming some functions for consistency
      Fix bug 327 (again and I think for the last time).  Make sure that
      remove 'ldap trust ids' since there was no way for it to work now
      revert a change to r1.397.2.91 because to operate like the docs; browseable for new home directories should be inheritied from the global defaults, not [homes]
      removing outdated scripts and adding comments about 'ldap password syc'
      remove rcs tag
      fix link and author information for Using Samab 2ed (in SWAT front page)
      sync
      fixing typos pointed out by Vance in WHATSNEW
      getting rid of copmpiler warning
      make sure using_samba 2ed. files get installed ok
      add note about the new edition of Using Samba included in this release
      file was checked in by mistake
      update change log with recent commit messages
      fix order of init scripts and remove references to swat/README
      bumping version
      adding packaging for charset modules
      adding smbcquotas to the list of installed tools
      updating README file after I removed some scripts
      packaging updates; use rpm -E when possible for spec & src dir; also avoid Net::LDAP dependencies
      make changes in the template, not the generated files... :-(
      i know there is an specfile macro for determing the RPM version
      I think this will gracefully get around issues between different rpm
      another round of changes for build on RedHat
      removing debugging statement checked in by mistake
      Check in Andrew's fix for bug #305 (always use lp_realm() )
      updated schema for 3.0 for eDirectory 8.7 and Netscape DS 4.x
      should fix bug 364 & 311:  Retry patch based on suggestion from
      fix bug 397:  use a variant of alloc_sub_basic() for string lists.
      fix some problems with the findsmb script due to changes in smbclient & nmblookup
      reformatting
      fix some output formatting
      updating readme with new links/address and removing outdated packages
      revert the change from r1.414 in HEAD that removed the
      fixes for ads domain membership when only the realm is defined in
      revert retry loops in winbindd_ads as abartket points out, we
      address bug #359.  Andrew B's patch for implementing client
      fix bug 382: make sure to free and reset the cli_state pointer after flushing connections in winbindd_pam_auth[_crap]()
      finish off bug 282.  AAdd extra checks for pointers after
      fix valgrind errors; don't access cli_state pointer after it has been shutdown
      fix compile error on HP-UX 10.20
      copy WHATSNEW from the release branch
      make sure we substitute basic variables in read/write list
      copy from 3.0 release
      samba 3.0 schema filr netscape DS 5.x from Darren Chew
      bumping new version to CVS 3.01pre1; optmistic about RC3
      syncing files from 3.0 into HEAD again
      removing files not in 3.0
      adding missing files from 3.0
      syncing packaging files from 3.0
      syncing packaging files from 3.0
      syncing packaging files from 3.0
      removing unneeded files
      removing unneeded files
      syncing examples
      syncing files
      adding files from 3.0
      syncing files
      sync 3.0 into HEAD for the last time
      removing unused files
      another round of syncs for HEAD that I forget
      add missing file from 3.0
      version.h is autogenerated now
      remove references to 'strip dot'
      remove references to 'strip dot'
      small updates to parameter section
      fix some typos
      merge from 3.0
      remove getpwnam() calls from init_sam_from_xxx().
      fix unitiailized timestamp where merging print_jobs and lpq listing
      packaging updates from Buchan
      packaging updates from Buchan
      insert missing sh-bang
      insert missing sh-bang
      updates to SunOne DS schema from André Fiebach
      updates to SunOne DS schema from André Fiebach
      fix from Brad Langhorst to correctly check if the primaryGroupID has been set
      fix from Brad Langhorst to correctly check if the primaryGroupID has been set
      removing obselete parameter from smb.conf
      removing obselete parameter from smb.conf
      solaris packagaing fixes from Brian King
      solaris packagaing fixes from Brian King
      fix some warnings found by the Sun C compiler
      fix some warnings found by the Sun C compiler
      sync debian package from rc4
      update smbldap-tool sscripts from Jérôme Tournier
      fixing a bug in the retry loop for winbindd_pam_auth[_crap]()
      fixing a bug in the retry loop for winbindd_pam_auth[_crap]()
      syncing up docs, examples, & packaging from 3.0
      more syncs from 3.0
      * sync more files from 3.0
      updating roadmap in docs
      syncing whatsnew from release branch
      syncing files from 3.0
      make sure to install the *msg files for SWAT
      last minute updates from Buchan
      don't write to static pointers; patch from Anthony
      don't write to static pointers; patch from Anthony
      mark 'mangled map' as depcreated and remove 'mangled stack'
      wrap internals of sys_setgroups() so the sys_XX() call can be done unconditionally; bug 550
      merge of parameter changes from 3.0 and fix for bug 550
      remove duplicate smbspool link on SWAT's front page; bug 541
      remove duplicate smbspool link on SWAT's front page; bug 541
      make sure libnss_winbind.so.2 is included in the RedHAT RPMS
      make sure libnss_winbind.so.2 is included in the RedHAT RPMS
      save and restore CFLAGS before/after AC_PROG_CC; this macro seems to overwrite the CFLAGS variable
      save and restore CFLAGS before/after AC_PROG_CC; this macro seems to overwrite the CFLAGS variable
      commit sign only patch from Andrew; bug 167; tested using 2k & XP clientspreviously joined to the Samba domain
      commit sign only patch from Andrew; bug 167; tested using 2k & XP clientspreviously joined to the Samba domain
      fixed for /sbin/mount.smbfs link when using $DESTDIR; bug 525
      abstract UUID parsing code to an individual function; patch from Anthony
      abstract UUID parsing code to an individual function; patch from Anthony
      cleaning out patch list; patch from Steve L. to change the cwd before the postexec script
      cleaning out patch list; patch from Steve L. to change the cwd before the postexec script
      don't call ads_destroy() twice; fixes segfault in winbindd when DC goes down; bug 437
      don't call ads_destroy() twice; fixes segfault in winbindd when DC goes down; bug 437
      4 changes
      default DESTDIR=/
      default DESTDIR=/
      cosmetic fix when DESTDIR=/ (default)
      cosmetic fix when DESTDIR=/ (default)
      make sure to call get_user_groups() with the full winbindd name for a user if he;she has one; bug 406
      make sure to call get_user_groups() with the full winbindd name for a user if he;she has one; bug 406
      removing docs from HEAD
      adding notice about new samba-docs cvs modeule
      removing docs tree from 3.0
      a few cleanups in output from spec file
      bumping version
      make sure to use the escaped DN; patch from Guenther Deschner; bug 592
      make sure to use the escaped DN; patch from Guenther Deschner; bug 592
      updating version in copyright
      updating version in copyright
      * fix some compile warnings in the gums code
      make sure we have a devmode before copying a string to the devicename; patch from metze
      make sure we have a devmode before copying a string to the devicename; patch from metze
      more 2.2.x compatibility fixes - allow user looksup in the kerb5
      more 2.2.x compatibility fixes - allow user looksup in the kerb5
      call initgroups before becomming the user; patch from Fabio Cecchi
      call initgroups before becomming the user; patch from Fabio Cecchi
      bug 696; check for an invalid fid before dereferencing the fsp pointer
      bug 696; check for an invalid fid before dereferencing the fsp pointer
      prompt for password when invoking --set-auth-user and no pw
      set- set-assword when invoking --set-auth-user and no pw
      removing #include <compat.h> in hopes to avoid problems with apache header files; will watch the build farm on this to make sure things don't blow up
      removing #include <compat.h> in hopes to avoid problems with apache header files; will watch the build farm on this to make sure things don't blow up
      added note about stripping comments from LDIF; bug 642
      added note about stripping comments from LDIF; bug 642
      make sure that we expand %H (from vl); bug  612
      make sure that we expand %H (from vl); bug  612
      bug 624; make sure to set the GUEST SID rather than using the PDB_DEFAULT flag
      bug 624; make sure to set the GUEST SID rather than using the PDB_DEFAULT flag
      patch from MORIYAMA Masayuki to save LDFLAGS during iconv detection; bug 570
      patch from MORIYAMA Masayuki to save LDFLAGS during iconv detection; bug 570
      run krb5 logins through the username map if the winbindd lookup fails; bug 698
      run krb5 logins through the username map if the winbindd lookup fails; bug 698
      merge's tpot build fix from 3.0
      don't allow setting of the guest account
      don't allow setting of the guest account
      fix for bug 680 (heads up).  This gist is to map the
      fix for bug 680 (heads up).  This gist is to map the
      working on release notes for 3.0.1pre2
      * only install swat html files once
      * only install swat html files once
      last update to WHATSNEW
      fix crash bug due to empyrt munged dial string; patch from metze
      fix crash bug due to empyrt munged dial string; patch from metze
      show locked files for -u <user>; bug 590
      show locked files for -u <user>; bug 590
      * Fix from SATOH Fumiyasu for bug 660 (failing to view print
      * Fix from SATOH Fumiyasu for bug 660 (failing to view print
      fix more memory leaks in the LDAP backend code; patches from metze
      first draft of release notes for 3.0.1pre3
      fix more memory leaks in the LDAP backend code; patches from metze
      updates from Buchan
      updates from Buchan
      * make sure we only enumerate group mapping entries
      * make sure we only enumerate group mapping entries
      changing versionb to pre4
      make sure we don't append the ldap suffix when writing out the ldap XXX suffix values in SWAT; based on tpot's original patch; bug 328
      make sure we don't append the ldap suffix when writing out the ldap XXX suffix values in SWAT; based on tpot's original patch; bug 328
      Ensure that items in a list of strings containing whitespace
      Ensure that items in a list of strings containing whitespace
      fix winbind ping call so that SWAT correctly determines if winbindd is running; bug 398
      fix winbind ping call so that SWAT correctly determines if winbindd is running; bug 398
      adding a useful debug
      include WWW-Authenticate field in 401 response for bad auth attempt; bug 629
      debug and swat fixes from 3.0
      more access fixes for group enumeration in LDAP; bug 281
      more access fixes for group enumeration in LDAP; bug 281
      patch from Matthias Hilbig for bug 467; use the dns name (or IP) as the originating client name when using CUPS
      patch from Matthias Hilbig for bug 467; use the dns name (or IP) as the originating client name when using CUPS
      strequal() returns a BOOL, not an int like strcmp(); this fixes a bug in check_bind_response()
      strequal() returns a BOOL, not an int like strcmp(); this fixes a bug in check_bind_response()
      allow users to delete jobs with cups printing backend
      allow users to delete jobs with cups printing backend
      use samr_dispinfo(level == 1) for enumerating domain users so we can include the full name in gecos field; bug 587
      use samr_dispinfo(level == 1) for enumerating domain users so we can include the full name in gecos field; bug 587
      don't mistake pre-existing UNIX jobs for smb jobs; patch from SATOH Fumiyasu bug 770
      don't mistake pre-existing UNIX jobs for smb jobs; patch from SATOH Fumiyasu bug 770
      add Replicator and RAS Servers to list of builtin SIDs we resolve; bug 608
      add Replicator and RAS Servers to list of builtin SIDs we resolve; bug 608
      fix inverted logic caused by s/strcmp/strequal/; host allow/deny works again; bug 846
      fix inverted logic caused by s/strcmp/strequal/; host allow/deny works again; bug 846
      another strequal() == 0 fix
      another strequal() == 0 fix
      * fix RemoveSidForeignDomain() ; bug 252
      * fix RemoveSidForeignDomain() ; bug 252
      don't crash on a NULL priviledge pointer; patch from Jianliang Lu
      don't crash on a NULL priviledge pointer; patch from Jianliang Lu
      support munged dial for ldapsam; patch from Aur�lien Degr�mont; bug 800
      support munged dial for ldapsam; patch from Aur�lien Degr�mont; bug 800
      readding schema items that were accidentally deleted
      sync OID with HEAD
      typo in BASEDIR; patch from Darren Chew
      typo in BASEDIR; patch from Darren Chew
      fix debug message
      fix process_incoming_data() to return the number of bytes handled this call whether we have a complete pdu or not; fixes bug with multiple pdu request rpc's broken over SMBwriteX calls each
      fix process_incoming_data() to return the number of bytes handled this call whether we have a complete pdu or not; fixes bug with multiple pdu request rpc's broken over SMBwriteX calls each
      bumping version in preparation for 3.0.1rc1
      updating top 0.8.2-1 of the smbldap tools
      * removing extra file
      removing RCS tags
      create libdir for installclientlib; patch from Bill Knox
      create libdir for installclientlib; patch from Bill Knox
      packaging updates from Buchan
      packaging updates from Buchan
      fix %a variable for Windows 2003 -> Win2K3
      fix %a variable for Windows 2003 -> Win2K3
      make sure we use a real network address in case there are extra non-zero octets in hosts allow/deny
      working on bug 687; protect against null src strings in alloc_sub_basic()
      make sure we use a real network address in case there are extra non-zero octets in hosts allow/deny
      working on bug 687; protect against null src strings in alloc_sub_basic()
      starting on Fedora packaging
      starting on Fedora packaging; reference point to begin with taken from RH 3.0.0-15 packaging files
      fix bug in get_peer_name() caused by --enable-developer and using the same src & dest strings to alpha_strcpy(); reported by Michael Young
      fix bug in get_peer_name() caused by --enable-developer and using the same src & dest strings to alpha_strcpy(); reported by Michael Young
      working on packaging; also fixed some path issues in configure.in & Makefile.in
      working on packaging; also fixed some path issues in configure.in & Makefile.in
      final touches on Fedora Core 1 specfile
      patch from TAKEDA yasuma to bypass any missing language files
      patch from TAKEDA yasuma to bypass any missing language files
      setting version to 3.0.2pre1
      more group lookup access fixes on the neverending bug 281
      more group lookup access fixes on the neverending bug 281
      Fix UNISTR2 length bug in LsaQueryInfo(3) that cause SID resolution to fail on local files on on domain members; bug 875
      Fix UNISTR2 length bug in LsaQueryInfo(3) that cause SID resolution to fail on local files on on domain members; bug 875
      fix bug when installing pam config file on RedHat; remove references to /var/cache/samba in Fedora specfile
      fixed bad formal parameter type in get_static(); patch Andy Polyakov
      fixed bad formal parameter type in get_static(); patch Andy Polyakov
      fix bug that prevent --mandir from overriding the defaults given in the --with-fhs macro
      fix bug that prevent --mandir from overriding the defaults given in the --with-fhs macro
      fixing upgrade bug; fixing PAM config file install bug
      more fixes after moving /var/cache/samba -> /var/lib/samba
      correct problem with pam config install
      make sure we delete the group mapping before calling the delete group script; patch from Jianliang Lu <j.lu at tiesse.com>
      make sure we delete the group mapping before calling the delete group script; patch from Jianliang Lu <j.lu at tiesse.com>
      Make sure we correctly generate the lm session key.
      Make sure we correctly generate the lm session key.
      * add a few useful debug lines
      * add a few useful debug lines
      add well known rid for pre win2k compatible access group; bug 897
      correct typo in delete user script; bug 887
      correct typo in delete user script; bug 887
      add well known rid for pre win2k compatible access group; bug 897
      Move to short lived TALLOC_CTX* for allocating printer
      Move to short lived TALLOC_CTX* for allocating printer
      fix inverted check using krb5_kt_resolve() and HAVE_MEMORY_KEYTAB; bug 912
      fix inverted check using krb5_kt_resolve() and HAVE_MEMORY_KEYTAB; bug 912
      working on new format for relerase notes in 3.0.2pre1
      fix case in objectclass name (not that it really matters); patch from Darren Chew <darrenc at vicscouts.asn.au>
      merging from 3.0
      isolate ldap debug messages to the common smbldap_XXX() functions
      isolate ldap debug messages to the common smbldap_XXX() functions
      * making sure contributors are listed in alphabetical order
      more commit logs
      bumping to 3.0.2pre2
      remove unused seek_file(); don't hardcode '\' when printing the auth-user
      remove unused seek_file(); don't hardcode '\' when printing the auth-user
      more commits logged
      commiting jra's fix for Exchange clear test auth
      commiting jra's fix for Exchange clear test auth
      fix a seg fault caused by abartlet's last checkin; there's no way this could have been tested against an NT4 DC
      fix segfault when sid_ptr == 0 in DsEnumDomainTrusts() reply
      fix segfault when sid_ptr == 0 in DsEnumDomainTrusts() reply
      fix some warnings from the Sun compiler
      fix some warnings from the Sun compiler; also merge some of abartlet's error code changes form 3.0
      starting new version of release notes -- post 3.0.2pre1
      fix formatting
      fixing compile problems due to my recent ads.h changes
      sync HEAD with recent changes in 3.0
      * allow dns lookups to be disabled for DOMAIN#1c (and #1b)
      * allow dns lookups to be disabled for DOMAIN#1c (and #1b)
      * Revert to using rpc for mixed mode AD domains.
      * Revert to using rpc for mixed mode AD domains.
      revert the cracklib changes until post 3.0.2
      syncing abartlet's cracklib tests from 3.0
      bug 660; using byte order safe macros (or tdb_unpack) when reading 2 or 4 byte values from a tdb buffer
      bug 660; using byte order safe macros (or tdb_unpack) when reading 2 or 4 byte values from a tdb buffer; also recognize smbjobs if the jobid < UNIX_JOB_START
      bug 770; correct fix this time;  Make sure that we send the SMBjobid for unix jobs back to the client.  Allows windows client to remove print jobs submitted from lpr
      bug 770; correct fix this time;  Make sure that we send the SMBjobid for unix jobs back to the client.  Allows windows client to remove print jobs submitted from lpr
      Fix initgroups() call nss_winbind on solaris; patch from John Klinger <john.klinger at lmco.com>
      Fix initgroups() call nss_winbind on solaris; patch from John Klinger <john.klinger at lmco.com>
      BUG 972; check pointer in cli_ds_getprimarydominfo() before trying to copy a structure
      BUG 972; check pointer in cli_ds_getprimarydominfo() before trying to copy a structure
      BUG 936: fix bind credentials for schannel binds in smbd (and add a comment to winbindd_cm about this
      BUG 936: fix bind credentials for schannel binds in smbd (and add a comment to winbindd_cm about this
      BUG 958; don't use the -N option when invoking smbclient from the smbtar script
      BUG 958; don't use the -N option when invoking smbclient from the smbtar script
      * BUG 446
      * BUG 446
      adding changelog for 3.0.2rc1
      setting version to 3.0.2rc2
      Bug 381: check builtin (not local) group SID.  Patch from Jianliang Lu <j.lu at tiesse.com>
      Bug 381: check builtin (not local) group SID.  Patch from Jianliang Lu <j.lu at tiesse.com>
      BUG 891 & 949: Fedora Packaging Fixes
      remove unneeded man pages from packages
      fix another bug caused by cli_lsa_query_info_policy() changes
      fix another bug caused by cli_lsa_query_info_policy() changes
      starting WHATSNEW for thepost 3.0.2rc1 release
      include tdbdump man page in file list
      bug 977 - don't create a homes share for a user if a static share already exists by the same name
      bug 977 - don't create a homes share for a user if a static share already exists by the same name
      prepping the SAMBA_3_0 branch for 3.0.3 work
      fix typo in init script
      forgotten commit -- version == 3.0.3pre1
      BUG 570: don't overwrite LDFLAGS; patch from MORIYAMA Masayuki <moriyama at miraclelinux.com>
      BUG 570: don't overwrite LDFLAGS; patch from MORIYAMA Masayuki <moriyama at miraclelinux.com>
      removing more unused parameters
      removing more unused parameters
      initialization fixes
      disable template accounts by default
      merge from 3.0
      more initialization fixes
      more initialization fixes
      disable any account that doesn't have a password and doesn't had the ACB_PWNOTREQ bit set
      disable any account that doesn't have a password and doesn't had the ACB_PWNOTREQ bit set
      fixes for fedora packaging
      fix a few more bugs in Fedora scripts (files not getting installed)
      fix pam config file
      cleanup patch for bug 977 so we don't display incorrect debug messages
      cleanup patch for bug 977 so we don't display incorrect debug messages
      * BUG 101: patch from j.lu at tiesse.com to set the SV_TYPE_PRINTQ_SERVER;
      * BUG 101: patch from j.lu at tiesse.com to set the SV_TYPE_PRINTQ_SERVER;
      remerge andrew's cracklib patch from HEAD and fix a compile warnings
      janitor duty (merges from 3.0) and cleanup compiler warning on SuSE 9 in the end mapper code
      update script to build a tarball from the cvs tree
      fix problems with proto.h
      fix installmodules problem with make on True64
      return NSS_SUCCESS if we have found the max number of gids possible on Solaris; patch from John Klinger <john.klinger at lmco.com>
      move disabling code to context functions instead of backwards compatible wrappers
      bring release notes in the 3.0 branch up to date
      bug 1046 (patch from Bostjan Golob <golob at gimb.org>); fix 20 month old bug where getpwent_list() was overoverwriting the username for entries.  However the code path to the bug was introduced only on January 25
      bug 1046 (patch from Bostjan Golob <golob at gimb.org>); fix 20 month old bug where getpwent_list() was overoverwriting the username for entries.  However the code path to the bug was introduced only on January 25
      merge from 3.0
      add smbget to cvs ignore list
      add smbget to cvs ignore list
      fix more compiler warning after the latest static rampage
      fix more compiler warning after the latest static rampage
      more fixes from the static changes; please move static functions to the top of files to prevent this from happening
      merge fixes from 3.0
      fix from Bostjan Golob
      marking 'only user' as deprecated (based on feedback in bug 66)
      marking 'only user' as deprecated (based on feedback in bug 66)
      BUG 1055; patch from SATOH Fumiyasu  <fumiya at miraclelinux.com>; formatting fixes for 'net share'
      fix broken compile after andrew's changes
      BUG 1055; patch from SATOH Fumiyasu  <fumiya at miraclelinux.com>; formatting fixes for 'net share'
      BUG 900: TAKEDA yasuma <yasuma at miraclelinux.com; fix token processing in cmd_symlink, cmd_link, cmd_chown, cmd_chmod functions
      fix set/getsampwent iterator in tdbsam to use an allocated list
      BUG 900: TAKEDA yasuma <yasuma at miraclelinux.com; fix token processing in cmd_symlink, cmd_link, cmd_chown, cmd_chmod functions
      updates for tdbsam code to help make merge into head easier; needs a bit more testing tomorrow but initial results seem ok
      merge from old APP_HEAD
      fix build of lock tests
      tdbsam & smb_panic merge from 3.0 (initial tests are ok but I'll setup a HEAD PDC tomorrow)
      stupid cut-n=paste error; my fault
      merges from 3.0
      abartlet's pdb_set/changed flag fix for NULL passwords
      abartlet's pdb_set/changed flag fix for NULL passwords
      specfile changes form the 3.0.2 release
      urban's changes for nosuid,nodev
      merging smbmnt fix from 3.0
      merging some fixes from the release branch; more to come later
      fixing error in logic when checking flags changed field on user primary group sid
      comment out server portion of DsEnumerateDomainTrusts() since it causes 2k/xp clients to fail to join the domain (see comments in srv_netlog_nt.c for details)
      remove some unused local variables
      check for <sys/xattr.h>; needed by Debian testing
      sys/xattr.h merge from HEAD
      <attr/xattr.h> & <sys/xattr.h> are mutually exclusive it seems; fix build on SuSE 8.2
      just say no to crack
      <attr/xattr.h> & <sys/xattr.h> are mutually exclusive it seems; fix build on SuSE 8.2
      BUG 1147; bad pointer case in get_stored_queue_info() causing seg fault
      BUG 1147; bad pointer case in get_stored_queue_info() causing seg fault
      BUG 692: patch from SATOH Fumiyasu <fumiya at miraclelinux.com> to correct truncation of share names and workgroup names
      BUG 761: read the config file before initialized default values for printing options
      merging from 3.0
      allow the 'printing' parameter to be set on a per share basis.
      allow the 'printing' parameter to be set on a per share basis.
      BUG 1129: patch from shiro at miraclelinux.com (Shiro Yamada) to install image files for SWAT
      BUG 1129: patch from shiro at miraclelinux.com (Shiro Yamada) to install image files for SWAT
      set log file to smbd.log for interaction with logrotate (BUG 503)
      another fix for bug 761; don't default to bsd printing on linux
      another fix for bug 761; don't default to bsd printing on linux
      BUG 848: don't create winbind local users/groups that already exist in the tdb
      BUG 848: don't create winbind local users/groups that already exist in the tdb
      BUG 1080: fix declaration of SMB_BIG_UINT
      BUG 1080: fix declaration of SMB_BIG_UINT
      BUG 1015: patch from jmcd to fix statfs redeclaration of statfs struct on ppc
      BUG 1015: patch from jmcd to fix statfs redeclaration of statfs struct on ppc
      bring WHATSNEW back up to date
      fix compiler warning
      fix compiler warning
      BUG 488: fix the 'show client in col 1' button and corrctely enumerate active connections
      BUG 488: fix the 'show client in col 1' button and corrctely enumerate active connections
      fix build with gcc 2.96 and --with-developer
      fix build with gcc 2.96 and --with-developer
      BUG 1088: patch from SATOH Fumiyasu <fumiya at miraclinux.com> -- use strchr_m() for query_host (smbclient -L)
      BUG 1088: patch from SATOH Fumiyasu <fumiya at miraclinux.com> -- use strchr_m() for query_host (smbclient -L)
      fix byte ordering problem when storing the updating pid for the lpq cache; was causing an abort in process_exists() on solaris
      fix byte ordering problem when storing the updating pid for the lpq cache; was causing an abort in process_exists() on solaris
      sync small fixes from 3.0 and fix compiler warning in priv code
      include swatdir in 'make showlayout'
      more fixes from 3.0
      removing extra comma in --with-fhs
      removing extra comma in --with-fhs
      BUG 1165, 1126: Fix bug with secondary groups (security = ads) and winbind use default domain = yes
      BUG 1165, 1126: Fix bug with secondary groups (security = ads) and winbind use default domain = yes
      merging print change notify fix from HP appliance.  Also might address some one the issues in BUG 1007
      merging print change notify fix from HP appliance.  Also might address some one the issues in BUG 1007
      BUG 1182: patch from   john.klinger at lmco.com (John Klinger) to reanable the -n 'no cache' option for winbindd
      BUG 979 -- fix quota display on AIX; patch from Heinrich.Mislik at univie.ac.at (Heinrich Mislik)
      BUG 979 -- fix quota display on AIX; patch from Heinrich.Mislik at univie.ac.at (Heinrich Mislik)
      BUG 768 - patch from jpeach at sgi.com (James Peach); accept profileing arg to init script
      BUG 748 - patch from jpeach at sgi.com (James Peach); relax arg parsing to sambalp script
      fix overlapping memory bug when copying username
      merges from 3.0
      BUG 758 -- patch from jpeach at sgi.com (James Peach); fix pdma build
      BUG 758 -- patch from jpeach at sgi.com (James Peach); fix pdma build
      asu/syntax/pc_netlink doesn't fill in the pipe name in the rpc_bind response so dont check for it
      asu/syntax/pc_netlink doesn't fill in the pipe name in the rpc_bind response so dont check for it
      updating release notes in preparation fro 3.0.3pre1
      BUG 932: ulrich at holeschak.de (Ulrich Holeschak); fix local password change using pam_smbpass
      BUG 932: ulrich at holeschak.de (Ulrich Holeschak); fix local password change using pam_smbpass
      wrap cli_tdis() in check to make sure we have a valid cnum
      cleaning up a few compiler warngings
      updating release notes & merging Derrel Lipman's libsmbclient patch from HEAD
      bumping version to 3.0.3pre2
      add --with-libdir and --with-mandir (patch from Guenther Deschner)
      add --with-libdir and --with-mandir (patch from Guenther Deschner)
      missed some of Derrel's changes
      removing working when install swat since the installswat.sh is fixed now
      BUG 417: fix %UuGg variables expansion in include lines setging the current_user_info struct in register_vuid() -- shouldn't be any more broken than we were
      starting WHATSNEW for 3.0.3pre2
      removing duplicate smbprint example script
      bug 1195: add flag to ADS_STRUCT so we know who owns the main structure's memory (not the members though)
      BUG 1185: use 'winbind cache time' as the reconnect period when seq_num == -1 rather than multiplying it by 8 (the default cache time is 5 minutes now)
      missed one on BUG 1195; make sure to set the private * to NULL
      remove unused variable
      adding commit messages for recent changes
      fixes for prnadmin.dll API
      jra's patch -- fix anonymous self referral code to check that a share is an msdfs root first
      source code fix for bug 1095 -- honor the '-l' option
      BUG 1023: surround get_group_from_gid() with become_unbecome_root() block
      r22: release notes for 3.0.3pre2
      r39: * importing .cvsignore files
      r73: bumping version to 3.0.3pre3
      r75: patch from Cal Heldenbrand <calzplace at yahoo.com> for 'pam_smbpass migrate'
      r115: finally checking in tridge's winbindd_schannel patch for connections
      r116: volker's patch for local group and group nesting
      r118: adding some recent checkins to commit list
      r119: missed a file in volker patch
      r155: real for for BUG 761 -- allow printing parameter to set defaults on a per share basis
      r185: fix linking prob surrounding --with-fake-kaserver and -lcrypto
      r195: adding files to ignore list
      r196: merging struct uuid from trunk
      r197: mistaken merge from trunk
      r242: adding 'cups options' parameter to allow raw printing without changing /etc/cups/cupsd.conf -- documentation to follow
      r252: add backtrace to examples so people know about it (slight change from lars @suse)
      r283: removing --with-cracklib after discussion with abartklet @ sambaXP
      r288: combination of BUG 1081 and patch from J. Klinger -- added remove_duplicate_gids() to smbd and winbindd
      r289: BUG 1246 -- fix syntax error
      r291: adding printer and driver migration shell script from Kurt Pfeifle
      r292: removing some outdated files and directories (I love subversion!)
      r293: keeping a single default smb.conf to maintain
      r294: checking in volker's winbindd patches; tested on domain members (Samba and AD) as well as on a Samba DC
      r296: patch from j.lu -- don't force an upper case domain name in the ntlmssp code
      r299: updating release notes
      r333: other half of fix for winbindd crask from gd at suse.de
      r376: BUG 1288: resolve any machine netbios name (0x00) and not just servers (0x20)
      r393: BUG 1141: patch from timur at com.bat.ru (Timur Bakeyev) for nss*.so names on FreeBSD 5.x
      r395: BUG 1232: patch from landonf at opendarwin.org (Landon Fuller) to fix
      r397: BUG 1199: check logfile before writing debug output
      r455: fixing a couple of bugs inthe specfile; (a) merge tpot's libsmbclienbt permissions fix from trunk, (b) fix typo when installing smbusers file
      r470: BUG 1302: fix seg fault by not trying to optimize a list of invalid gids using the wrong array size
      r485: fix compile
      r486: BUG 1309: fix seg fault caused by trying to strdup() a NULL pointer
      r487: fixing some compile issues with the IBM AIX compiler reoported on the ml -- now to watch the build farm some more
      r492: BUG 483: patch from Michel Gravey <michel.gravey at optogone.com> to fix password hash creation in SWAT
      r494: patch from Stephan Kulow <coolo at kde.org> to fix a cut-n-paste error in strlen which caused Konqueror to crash
      r496: fixing swat welcome page -- added links to example guide, devel guide, and howto (all in multi page format)
      r519: fix bug in authorise_login() that broke security = share
      r541: fixing segfault in winbindd caused -r527 -- looks like a bug in heimdal; also initialize some pointers
      r543: possible fix for BUG 1293 -- initialize pointer to NULL to ensure the failure check is valid
      r551: BUG 1293: fix double free in printer publishing code
      r557: another patch from Stephan Kulow <coolo at suse.de> -- check cli * before dereferencing it
      r568: setting version to 3.0.5pre1
      r573: fixing packaging
      r632: pulling in release notes from 3.0.4 and getting ready to start 3.0.5pre1
      r647: fix for setting the called name to by our IP if the called name was *SMBSERVER and *SMBSERV -- fixes issue with connecting to printers via \ip.ad.dr.ess\printer UNC path
      r689: removed unneeded forward declarations
      r704: BUG 1315: fix for schannel client connections to server's that don't support 128 bit encryption
      r783: fix bug in reading printer data from disk;  all ow valuenames with embedded '\'s
      r795: paranoia checks
      r799: BUG 1259 -- add 'printcap cache time' patch from Lars
      r844: bumping version
      r878: fixing bug in packaging that crep back in
      r881: BUG 1357: add pam-devel to build requirements
      r885: more packaging fixes
      r907: fixing browse.dat bug -- don't include the resouce byte from the netbios name when pulling a string from a packet (jra, please double check this
      r925: add changes frpm trunk (r841 and r842) -- enable background queue update process and allow printers to have different sharenames from printernames
      r966: fixing package dependencies
      r991: Allow winbindd to use the domain trust account password
      r993: BUG 703 -- finishing patch by Eric Boehm <boehm at nortelnetworks.com> for netgroup case lookups
      r1011: fix bad merge (from a few months ago) and ensure that we always use tdb_open_log() instead of tdb_open_ex()
      r1087: BUG 1221: revert old change that used single and double quotes as delimters in next_token(), and change print_parameter() to print out parm values surrounded by double quotes (instead of single quotes)
      r1212: small change to prevent home directories added during the SMBsesssetup&X tfrom being removed as unused services
      r1230: (merges from HP PSA) fixing a couple of caching bugs in the printing code. (a) make sure to clear jobs_changed list when deleting a job and, (b) invalidate the printer handle cache when we get a notification that something has changed on that printer
      r1361: patch from Guenther Deschner <gd at sernet.de> to ensure that REG_SZ values in the SetPrinterData actually get written in UNICODE strings rather than ASCII
      r1368: fix configure check so that if you set --enable-cups[=yes] and don't have the devel files, the configure script will exit with an error
      r1370: BUG 1297 - prevent map_username() from being called twice during logon
      r1380: adding debug message when encouting an ASU specific bug in an rpc_bind reply
      r1381: fixing behavior found by gd at sernet.de; we must use the userPrincipalName value (host/hostname at REALM) and not the servicePrincipalName (host/fqdn at REALM) in the SASL binds
      r1384: ensure we remove the tdb entry for a job in the spooling state
      r1399: applying heimdal krb5 fixes from Guenther and fixing compile warnings in libadskerberos_keyatb.c
      r1407: revert change that broke the build on systems w/o krb5 files
      r1410: fix another bug caused by the docs target directories change
      r1484: BUG 1520: work around bug in xp sp2 rc2 where the client sends a fnpcn() request without previously sending a ffpcn().  Return what win2k sp4 does
      r1500: BUG 1516: manually declare ldap_open_with_timeout() to workaround compiler errors on IRIX
      r1561: iconv detection fix from James Peach <jpeach at sgi.com>
      r1570: merging changes from 3.0.5
      r1572: setting version to 3.0.7pre1; I will pull back changes into 3.0.6rc2 manually
      r1663: fixing syntax error in OID for sambaUnixIdPool, sambaSidEntry, & sambaIdmapEntry
      r1668: fixing bug in spec file when installing libsmbclient
      r1789: compiler warnings from SuSE
      r1833: patch from James Peach to get swat to look for index.html by default when given a trailing directory/
      r1834: prevent infinite recusion in reopen_logs() when expanding the smb.conf variable %I
      r1885: tighten the cache consistency with the ntprinters.tdb entry an the in memory cache associated with open printer handles; also make sure that register_messages_flags() doesn't overwrite the originally registers flags
      r1921: Mandrake packaging fixes
      r1924: missed adding a few files
      r1931: fix broken documentation links
      r1962: fixing schema file; synching with trunk; trying to prevent this from happening again
      r1964: more schema fixes syncing between branches
      r2013: BUG 1658: little bit of const (patch from :    Helmut Heinreichsberger <helmut.heinreichsberger at chello.at>)
      r2014: BUG 1656: rename auto.a to auto.smb
      r2018: updating syntax for enable-cups check
      r2077: fix logic bug in the check for creating a user's home directory in register_vuid(); add a few extra debug lines
      r2086: fix bug with winbindd_getpwnam() caused by Microsoft DC's not filling in the username in the user_info3
      r2090: fix formatting that was bugging me
      r2091: only use sAMAccountName and not userPrincipalName since the breaks winbindd (lookup_name() only works with the sAMAccountName) -- *please* test this change.  My tests all pass but there is probably something I missed
      r2133: Several fixes:
      r2135: BUG 1464: make sure that printing commands are initialized even if the 'printing' parameter is not explicitly set
      r2177: use the correct counter when copying group rids from the user_info3 struct; patch from Dimitri van der Spek <dwspek at aboveit.nl>
      r2188: adding some initial checks for DragonFly (same as FreeBSD 4.1)
      r2189: adding some comments to the schema file
      r2190: disable 'winbind enable local accounts' by default (had to be done doctor)
      r2191: ensure that we assign our pid to print jobs (and not our parent's pid); ensures that spooling jobs from dead smbds are removed from the tdb
      r2261: fix getdc mailslot checks; testing with Windows 98se, WinME, WinNT 4.0/200x/XP
      r2292: changing version to 3.0.8pre1
      r2450: don't limit the number of groups returned by winbindd_getgroups()
      r2564: resurrecting smbd/tdbutil.c
      r2567: Patches from Lars Mueller <lmuelle at suse dot de>:
      r2569: Patch from Rob Foehl <rwf at loonybin.net>:
      r2570: minor fix with Rob's patch.  use dos_errstr() instead of W_ERROR_V() when using %s in the format string
      r2768: BUG 1519: save the hostname used in the open_printer_ex() for later reuse when filling in the spolss replies (also gets rid of get_called_name()
      r2770: oops; internal_resolve_name() should stay static in 3.0
      r2918: BUG 1907: fix getprinterdriverdir_1().  have to make sure we don't add unnecessary double slashes to the servername
      r2943: solaris packagaing updates from Darren Chew <darrenc at vicscouts.asn.au>
      r2955: fixing a segfault uncovered by the changes for BUG 1519
      r2996: readability fix for length check; no semantic changes
      r3049: fixing some calls in the printing code to stanard_sub_basic(); fix standard_sub_snum() to use the current user's gid;  add some (snum == -1) checks to standard_sub_advanced()
      r3065: BUG 1519 (more): apparently the server_name notify request is used to fill in the title bar of the port monitor window and unless we get it right, you cannot open the printer properties from the port monitor window
      r3066: BUG 1519: fix segfault caused by double free of a printer
      r3067: patch based on volker's initial work in trunk that fixes the queu update problem when using the background daemon
      r3069: add 'force printername' service parameter for people that want to enforce printername == sharename for spoolss printing
      r3088: update nds schema file from Uli Iske <iske at elkb.de>
      r3140: * try to ensure consistent usage of the username map.
      r3230: swat/lang/*/include/*html are no installed anymore
      r3264: fix lmhosts lookup so that we don't say we found something when we really didn't
      r3298: turning sendfile back off by default
      r3326: BUG 1782: reorder loadparm.c to prevent testparm from displaying synonyms; patch from Luke Mewburn <lukem at NetBSD.org>
      r3398: fixing up solaris packaging for 3.0.x
      r3399: a few more packaging fixes
      r3417: BUG 350: patch from Matt Selsky <selsky at columbia.edu> to use autoconf feature preopcessing header file only (3 problematic headers on solaris)
      r3420: install smbwrapper and add the include directory in the package
      r3604: fix bug in Fedora packaging scripts
      r3638: solaris packaging fixes
      r3639: patch from Martin Zielinski <mz at seh.de> to add DeleteDriverEx() function to rpcclient
      r3682: fix seg fault in lanman printing code caused by uninitialized variable
      r3683: BUG 2017: fix testparm reporting for the passwd program string
      r3685: setting the 3.0 branch to 3.0.10pre1-svn
      r3688: fix output of smbstatus to make the man page; fix -L, -p, & -S and the -u <username> functionality
      r3697: BUG 2027: fix multiple declaration of MD5_CTX (do we really care about DOS compilers?).  Will watch build farm though.
      r3707: 2028: avoid false error messages when copying a long printer name to the device mode
      r3708: BUG 1838: patch from Gavrie Philipson <gavrie at disksites.com> to remove stale printers when reloading after a sighup
      r3710: fix another safe_strcpy() warning SPAM with the printer drivcename
      r3772: BUG 2006: patch from Michel Gravey <michel.gravey at optogone.com>; fix build when using gcc 3.0
      r3778: BUG 2023: patch from Buchan Milne <bgmilne at mandrake.org> fix mandrake packaging for Samba 3.0.9 -- still need to review this libsmbclient install location
      r3923: BUG 2073: fall back to smb_name if current_user_info is not available in lp_file_list_changed()
      r3924: fix installswat once again after the image target location had changed in the docs
      r3925: patch from Thomas Bork <tombork at web.de> to fix configure.in with GNU ld versions that don't output a date string in the --version
      r4018: * move claim_connection from the netbios session request
      r4019: better error logging in register_message_flags() from Rob
      r4028: * prevent the background LPQ daemon from updating
      r4029: solaris packaging fixes from Rob
      r4030: patch from Rob -- don't force the cups printer-make-and-model tag as the comment for autoloaded printers
      r4043: BUG 2091: don't remove statically defined printers in remove_stale_printers()
      r4083: consolidate printer searches to use find_service rather than for loops
      r4089: fix logic error in add_a_form() that only compared N characters instead of the entire form name
      r4094: BUG 2107: fix memory bloating caused by large numbers of print_queue_updates() requests sent via messages.tdb
      r4134: check the setprinter(3) based on the access permissions on the handle and avoid the call to print_access_chaeck()
      r4350: bumping version to 3.0.11pre2
      r4525: fix Fedora specfile to include pam_winbind(8) man page
      r4539: patch from Rob -- adding real printcap name cache function to speed up printcap reloads
      r4575: adding extra debug to cm_prepare_connection()
      r4579: small changes to allow the members og the Domain Admins group on the Samba DC to join clients to the domain -- needs more testing and security review but does work with initial testing
      r4645: patch from Rob to fix the build breakage in vfstest after the reload_printers() cleanup
      r4668: allow the caller to invoke init_unistr2() with a NULL buffer to match previous behavior; more checks to come tomorrow
      r4724: Add support for Windows privileges in Samba 3.0
      r4736: small set of merges from rtunk to minimize the diffs
      r4739: require membership in Domain Admins to be able to set privileges
      r4740: allow SE_PRINT_OPERATORS to have printer admin access
      r4742: add server support for lsa_add/remove_account_rights() and fix some parsing bugs related to that code
      r4746: add server support for lsa_enum_acct_rights(); last checkin for the night
      r4805: Last planned change to the privileges infrastructure:
      r4809: * include SeDiskOperatorPrivilege and SeRemoteShutdownPrivilege
      r4820: add beginnings of 'net rpc rights' for managing privilege assignments
      r4821: finish off 'net rpc rights [list|grant|revoke]'
      r4822: fix return code when you ask for a non-privileged SID via one of the privileges RPC calls
      r4823: remove -O1 from --with-developer
      r4824: wrap the shutdown and abort_shutdown calls in check for the SE_REMOTE_SHUTDOWN privilege
      r4825: Printing changes
      r4827: add 'net rpc rights list accounts' & update help text
      r4848: fix build; gd please check and make sure this is ok
      r4849: * finish SeAddUsers support in srv_samr_nt.c
      r4852: merge simo changes to srv_srvsvc_nt.c from trunk
      r4855: add some smb.conf script for add/delete/change share and addprinter hooks
      r4856: after testing a simple add printer script, i realized that you still have to be root to send the message to all smbds that the config file has been updated
      r4860: fix silly limitation in ldapsam and tdbsam.  Expand variables in the profile path, logon home and logon script values
      r4867: Removing smbldap-tools from the svn tree.  I'll include
      r4871: BUG 603: patch by Daniel Beschorner <db at unit-netz.de>.  Correct access mask check for _samr_lookup_domain() to work with Windows RAS server
      r4873: example delete printer script for use with cups
      r4874: add DOmain Admins (Full Control) to the default printer sd if we are a DC
      r4902: please note that cupsDoRequest() deletes the request* so don't call ippDelete(request) *ever*
      r4905: patch from abartlet to remove storing the auth-user credentials from the cli* in cm_prepare_connection().  using credentials from a domain other thanour primary domain will cause the schannel setup to fail
      r4907: remove unreached code
      r4913: fixing 'perl requires' filters for RPM packaging on RedHat/Fedora
      r4965: comment out some unused attributes and oc's
      r4966: don't enumerate the drivers for the same architecture string more than once
      r4995: fail set_privileges() if 'enable privileges = no' to prevent confused admins who never read what I write :-)
      r4996: sync up copytights with trunk
      r5000: 5000th post! w00tsvn diffsvn diff :-)
      r5012: fix segfault caused by using a ipp_t * after calling cupsDoRequest()
      r5015: (based on abartlet's original patch to restrict password changes)
      r5020: bumping the 3.0 tree to 3.0.12pre1 since there will not be a full sync for the 3.0.11rc1 release
      r5028: * check acb_info mask in _samr_create_user instead of the last character
      r5029: after talking to Rob, ensure that we set the NETIOSNAME.domainname
      r5046: mark 'winbind enable local accounts' and testprns as depcrecated
      r5056: * correct STANDARD_RIGHTS_WRITE_ACCESS bitmask define
      r5060: BUG 2286: fix typoe on sambaConfig oc definition
      r5131: BUG 2290: don;t call mkversion.sh since we don't have it in this directory
      r5132: netscape DS 5.2 schema update from Richard Renard <rrenard at idealx.com>
      r5140: (a) fix problem with enumerating domain trusts in security = ads; (b) fix a segfault in rpcclient's dsenumdomtrusts
      r5150: consolidate the samr_make.*obj_sd() functions to share code
      r5157: BUG 2266: conditionally include rpc/nettype.h to work around missing header onf FreeBSD4
      r5158: BUG 2263: patch from Timur Bakeyev <timur at com.bat.ru> to guard base64_encode_data_blob() against empty blobs
      r5159: BUG 2262: add support to detect *freebsd6* (same as *freebsd5* currently)
      r5162: BUG 2264: remove shutdown and abortshurn commands from rpcclient since they are stable in 'net rpc' (to avoid fixing portability bugs)
      r5165: BUG 2295: always use get_local_machine_name() rather than digging in the gloval variable 'local_machine'
      r5174: ensure that we consistently use the current_user_info.smb_name vs. smb_name when parsing smb.conf and reloading config files
      r5191: BUG 2299: better logrotate configuration from Levente Farkas <lfarkas at lfarkas.org>
      r5192: missed one packaging fix for BUG 2299
      r5203: additional changes for BUG 2291 to restrict who can join a BDC and add domain trusts
      r5205: more fixups for BUG 2291
      r5207: patches from Jay Fenlason @ RedHat (scooped from their Fedora packages)
      r5227: removed SuSE spec file @ Lars' request and updated read to point to package download areas
      r5233: fixing some typos
      r5263: bug 2249: patch from Manuel Baena <mbaena at lcc.uma.es> to print error message in fullpath()
      r5265: ensure that the Fedora RPMS build with cups support
      r5269: BUG 858: fix order of popt args evalution so we don't crash when given no command line args
      r5270: fixing some bashism's in autogen.sh
      r5271: patch from S Murthy Kambhampaty <smk_va at yahoo.com> to add idmap_rid.so to the Fedora and RedHat packaging
      r5272: BUG 2132, 2134: patch from Jason Mader <jason at ncac.gwu.edu> to remove unused variables
      r5278: BUG 2327: fix compile bug in idmap_rid.c
      r5295: fix compile issue with MIT 1.4 due to broken gssapi.h
      r5336: BUG 2329: fix to re-enable winbindd to locate DC's when 'disable netbios = yes'
      r5337: BUG 1439: make sure to initialize pointer to prevent invalide free()'s on exit
      r5359: BUG 2333: use the lpq command to pass in the correct printer name for cups_queue_get().  See comments in code for details
      r5383: add missing checks to allow root to manage user rights
      r5385: when operating in security = domain, allow domain admins to manage rigths assignments
      r5431: couple of cimpile fixes from Jason Mader <jason at ncac.gwu.edu> -- BUGS 2341 & 2342
      r5432: compile fixes from Jason Mader <jason at ncac.gwu.edu> -- BUGS 2340
      r5436: small merges from trunk
      r5462: BUG 1549: patch from SATOH Fumiyasu <fumiya at samba.gr.jp> to fix trunction of service names
      r5495: * add in some code from Mike Nix <mnix at wanm.com.au> for the SMBsplopen
      r5517: code cleanup; rename the sorted_tree to pathtree (used by registry code)
      r5518: Add initial msdfs support to smbclient.  Currently I can only
      r5519: fix msdfs support for [m]get and [m]put
      r5520: fix last remaining dfs issues with smbclient.
      r5521: allow smbclient to follow multiple leveles of dfs referrals (no loop checking currently)
      r5542: fix a few more msdfs bugs in smbclient against both smbd and 2k dfs root
      r5545: move cli_cm_XXX() connection handling code to clidfs and out of client.c;  client.c still maintains a pointer to the first connection so the change is fairly reansparent to other smbclient functions such as -L and -M
      r5560: make sure session setup message is displayed after changes to client.c
      r5562: * bump version to 3.0.12pre2
      r5565: fix breakage on gcc 2.96
      r5568: fix more breakage on gcc 2.96
      r5571: fix another breakage on gcc 2.96
      r5577: get recurse; dir working across single level dfs referrals
      r5578: get 'recurse; dir' working across multiple levels of dfs referrals
      r5596: BUG 2394: fix nmbd linking issue on IRIX
      r5597: full fix for BUG 2394 (unresolved symbols on IRIX)
      r5605: only display the publish check box on printer if
      r5608: BUG 2399 - removing dead code (not finished with bug yet).
      r5614: fix proto for copy_fn() after changes to cli_list()
      r5683: BUG 2363: allow 'in use' driver to be removed as long as one 'Windows NT x86' driver remains'
      r5684: BUG 2405: patch from Torsten Werner <torsten.werner at assyst-intl.com> to define 'lpstat' printcap output on HPUX
      r5685: BUG 1881: only define PRINT_SPOOL_PREFIX if it is not already defined
      r5691: wrapping the pause/resume/purge printer commands in
      r5696: BUG 2355: use bsd style commands for 'printing = cups' but \!defined(HAVE_CUPS)
      r5707: BUG 2425: remove ubran legend wrt to win98 and the DFS_PATHNAMES capability bit
      r5708: BUG 2424: patch from Vince Brimhall <vbrimhall at novell.com> to ensure that uidNumber and gidNumber use match the rfc2307 schema
      r5717: BUG 2215: horrible code in nmbd_winsproxy.c;  gcc folks at redhat claim its in violation of the C spec.  It's so horrible I believe them
      r5726: merge LsaLookupPrivValue() code from trunk
      r5729: partial fixes for BUG 2308; libsmbclient patches from Derrell Lipman <derrell.lipman at unwireduniverse.com>
      r5735: rest of derrel's patch for BUG 2308; had to move the options structure from the _SMBCCTX to the internals structure to maintain binary compatibility (derrel, we should talk more about this)
      r5738: fix my build breakage; fix a few compiler warnings
      r5740: setting version in 3.0 development branch to 3.0.13pre1
      r5746: remove unneeded header that caused problems on rh73
      r5749: fix some build issues
      r5751: fix another (correct) compiler warning
      r5752: implement derrell's solution for binary compatibilty in the _SMBCCTX structure; note that we break compat with 3.0.11 but are ok with earlier versions
      r5805: merging spoolss parsing changes from trunk and cleaning up resulting segvs
      r5806: * fix a couple more segvs in spoolss
      r5807: fix segfault after compiler warning clean up (and cleanup another warning)
      r5808: removing unneeded structure field from RPC_BUFFER
      r5809: try to catch NULL pointers during developerment for rpcbuf_move()
      r5851: BUG 2456: reported by Jason Mader; remove non standard pragma (my fault); should fix some builds with non-gcc compilers
      r5884: require cups to build and install; remove restruction from winbindd.init to have 'idmap [g|u]id' range set in smb.conf
      r5926: setting version to 3.0.14pre1-svn
      r5943: remove unneccessary se_priv_copy()
      r5944: cleaning up compiler warnings reported by Jason Mader
      r5945: BUG 2516: fix compile issue on True64
      r5946: BUG 2497: fix bug in rpcclient's deletedriverex when asking to delete all versions of a driver
      r5948: more compile cleanups from Jason Mader
      r5950: more compiler warning's from Jason Mader
      r5951: gotta love that SGI compiler :-)  (thanks Jason)
      r5952: BUG 2469: patch from Jason Mader to cleanup compiler warning when not using krb5
      r5953: more compiler cleanups; moved SID_LIST from smb.h to privileges.c to cleanup the name space
      r5955: BUG 2517: use the realm from smb.conf for 'net ads info' when 'disable netbios = yes'
      r5956: more compile warngin fixes from the Mr. Mader
      r5957: BUGS 2478, 2093: compiler warning patches from Jason Mader
      r5958: BUG 1843: patch from james peach to fix quotas (with no soft limits) on IRIX
      r5961: final round of compiler warning fixes based on feedback from Jason Mader
      r5968: derrell's large file fix for libsmbclient (BUG 2505)
      r5993: compiler warning fix
      r5994: proper fix for smbclient and win98 file servers; check the WCT value in the tcon&X reply before setting the cli_state->dfsroot flag
      r6014: rather large change set....
      r6029: adding files necessary to support 'net rpc service' functions; will fill in tomorrow
      r6036: patch from Lin Li <linl at xandros.com> to ensure trusted domains are initialized whenenumerating users and groups
      r6037: little cleanup of unused vars and unnecessary codepaths
      r6038: adding more flesh to 'net rpc service'
      r6039: add CLI_DO_RPC macro for cookie cutter code; no new functionality to 'net rpc service'
      r6040: finish out 'net rpc service list'
      r6041: cleaning up output from 'rpc service list'
      r6046: $ net -S block -U % -W VALE rpc service status spooler
      r6051: finish off
      r6062: work around autoconf setting the CFLAGS="-g -O2" by default in AC_CACHE_CHECK
      r6071: * clean up UNISTR2_ARRAY ( really just an array of UNISTR4 + count )
      r6154: fix winbindd <-> Windows 2003 sp1 issue.
      r6158: fix some misleading error messages
      r6218: * fix a segv in EnumPrinters():rpc_buffer_alloc when the caller does not provide an
      r6220: cleaning up spoolss header; removing unused structures
      r6221: format cleanup (got tied of looking for related structures)
      r6228: remove BUFHDR2 and clean up LsaEnumTrustedDomains()
      r6231: Herb,  I think this checkin was a mistake.  Are you sure this is
      r6232: more cleanups; remove BUFFER3; rename BUFFER4 -> RPC_DATA_BLOB; rename REG_CREATE_VALE -> REG_SET_VALUE
      r6237: fix my breakage of WinXP sp2 msdfs support.
      r6242: after talking to jeremy, we can actually consolidate
      r6243: Yes.  I *will* hate myself in the morning for this one.
      r6290: and now the development tree becomes 3.0.15pre1
      r6291: BUG 2588: force smbclient messages to port 139 unless someone set the -p option
      r6296: add message about known interoperability issue with Windows 2003 SP1 DCs
      r6311: setting version to 3.0.15pre2
      r6358: merging SMB_ASSERT() changes from the release branch
      r6372: removing outdated Mandrake packaging files and pointing at Mandriva cooker (after clearing with Buchan)
      r6373: minor changes to solaris packaging readme to bring it up to date
      r6388: BUG 2626: ensure that the calling_name is set to something after parsing smb.conf (if not set via -n)
      r6421: use add machine script when creating a user (ACB_NORMAL)
      r6450: * fix typo in htlm_auth help message
      r6490: BUG 1998: patch from Olaf Imig <Olaf.Imig at bifab.de>; fix byte ordering bug when storing 16-bit RAP print job ids
      r6491: BUG 2653: patch from Olaf Imig <Olaf.Imig at bifab.de>; allocate memory for user1* in make_spoolss_q_open_printer_ex()
      r6493: we're at 3.0.15pre3 now
      r6566: fix a couple of local group bugs.
      r6601: fixing query and set alias info calls (level 1 from the
      r6634: merge smbmount malloc checker fixes from trunk
      r6642: BUG 2686: shouold fix the group_setinfo() failures; similar to alias_setinfo() patch from last week
      r6643: fix some build issues on IRIX;l patch from james peach
      r6678: fix python python after talloc() shakeup
      r6679: BUG 2684: abartlett's patch for check the per service hosts allow/deny on printers when connecting via MS-RPC
      r6680: event log patches from Marcin
      r6681: updating copyrights (see bug 2546)
      r6682: patch from Qiao Yang <qyang at stbernard.com> to use out own DC when getting the SID for a domain
      r6683: remove log messages about unknown specversions since I think we are fairly safe at this point
      r6684: BUG 1780: patch from Rodrigo Fernandez-Vizarra <Rodrigo.Fernandez-Vizarra at Sun.COM> to add kerberos supsport to smbspool
      r6685: smbclient fixes
      r6686: strip the directory path from cups printin defaults
      r6706: * fix bug that prevented smbclient from creating directories
      r6712: BUG 2362: fix quota support on DragonFly (Joerg Sonnenberger <joerg at leaf.dragonflybsd.org>)
      r6713: another talloc() fix. This time in pdb_xml.c
      r6755: removing domain_sid() since it is not referenced anymore
      r6782: rename for consistency
      r6785: deprecating the printer admin parameter
      r6940: fixing debug messages
      r6942: * merging the registry changes back to the 3.0 tree
      r6943: missed in last sync
      r6992: syncing printer permissions changes from trunk
      r6995: * fixing segfault when writing out registry values of zero length
      r7020: fixing printer ace values and getting rid of false compiler warning about unitialized variable
      r7024: reverting mistaken commit
      r7038: * upgrade version of nt*tdb files.  Have to fix
      r7041: compile fixes....long day I guess
      r7126: fixing paranoid malloc checker failures
      r7130: remove 'winbind enable local accounts' code from the 3.0 tree
      r7139: trying to reduce the number of diffs between trunk and 3.0; changing version to 3.0.20pre1
      r7140: removing aparser directory since it is obselete in light of pidl
      r7142: removing 'ldap filter' smb.conf option
      r7143: removing unused file
      r7197: fix build failure when running 'make torture' without
      r7335: patch from Joerg Sonnenberger <joerg at britannica.bec.de> to fix dragonfly detection
      r7339: only check for dfs proxy referrals when the server supports dfs
      r7372: abartet's patch for BUG 2391 (segv caused by free a static pointer)
      r7374: BUG 1261: remove unusable libbiconv after discussion with Timur (FreeBSD Samba maintainer)
      r7395: * new feature 'map to guest = bad uid' (based on patch from
      r7396: cleaning up vestiges of winbind local accounts code
      r7398: commiting abartlet's patch for kerberos authentication when using a keytab and security != ads
      r7415: * big change -- volker's new async winbindd from trunk
      r7440: * merge registry server changes from trunk (so far) for more
      r7450: fix my bone head mistake with ntlm authentcation and 'map to guest = bad uid'; make sure the authentication suceeds
      r7454: couple of winbindd fixes
      r7470: fix block size caculation error when request size > 4096 bytes
      r7472: fix smbpasswd user password change (still worked by bad error messages) due to trying to strdup a NULL pointer
      r7547: removing unused fields in the REGISTRY_KEY structure associated with open handles
      r7563: svcctl patches from Marcin; have cleaned up formating and am checking the code in to snapshot it before I start changing more things
      r7573: you can't make an omlette without break a few eggs....start reworking the svcctl code
      r7576: implement access checks for open_scm and open_service
      r7577: switching to macro for IS_DC
      r7578: use global well known DOM_SID objects when possible
      r7581: fix bad merge
      r7583: * more rearranging and renaming of functions
      r7584: cleanup the default printer security descriptor
      r7595: start trying to split out the svcctl functions into separate files for better maintenance; add SERVICE_CONTROL_OPS for spoolss service
      r7603: * fix a bug in the SERVICE_ALL_ACCESS security mask
      r7610: can successfully stop and start the 'spooler' service by setting the state for the 'disable spoolss' parameter in memory for an individual smbd
      r7613: small changes to _svcctl_open_service() and create_open_service_handle() to prevent invalid service names from being accepted; printmig.exe now migrates drivers successfully
      r7614: convert move_driver_to_download_area() to return WERROR in order to provide better error messages to clients when a AddPrinterDriver[Ex]() call fails
      r7620: when adding a new printer driver, we should copy the files
      r7624: * removed unmatched tdb_lock_by_string() call (should fix build farm issues)
      r7645: adding server stubs for RegCreateKey() and RegSetValue()
      r7647: add access checks to the top level hive open calls; will need to pass the open request through the backend access check for the subkey open calls
      r7648: adding REGISTRY_HOOK->reg_access_check() for authprization checks on RegOpenKey(); passing it off to the backend code for a given path
      r7649: * fix compile breakage (sorry, should have done a make clean before the
      r7664: add access check hooks to _reg_open_entry which are passed off
      r7691: * add .gdbinit to the svn:ignore files
      r7692: start versioning the registry.tdb file since it can be modified now
      r7698: * clean upserver frontend for RegDeleteKey()
      r7789: fix overparanoid assert() call when checking spolss buffer pointers
      r7822: fixing specfiles after removing testprns
      r7825: Fedora packaging fixes after docs change
      r7829: fix unitialized printer status field that was breaking migration of print queues
      r7830: fix directory typo with testprns manpage
      r7838: lie about the printer status when doing the queryvalue() registry call.  Note that if you migrate a printer to a Windows server, the win spooler will remove any printers that have an invalid status value in the registry
      r7839: remove C++ style comment
      r7878: mostly just a rename of REG_INFO to REG_QUERY_VALUE for better clarity
      r7879: fix compile issue caused by not statoc value for intializing cpp macros
      r7880: fix a typo and memleak on failures cases (patch from marcin)
      r7887: 3.0.20pre2-SVN
      r7890: * add Reg[SG]etKeySec() server stubs
      r7908: * change REGISTRY_HOOK api to use const (fix compiler warning
      r7938: * move the hardcoded registry value names from _reg_query_value()
      r7944: BUG 2808: don't try to install manpages if they are not present
      r7983: clean up some use of un-initialized variables found by valgrind
      r7987: map generic bits to specific bits in open requests
      r7995: * privileges are local except when they're *not*
      r7997: Pointers don't kill people, people with pointers kill people...
      r8007: * cleanup unused structure from reg_objects.h
      r8008: * start adding logic for restricting subkey paths
      r8022: * implement default actions rather than having to define functions
      r8025: *how* can this code have been around so long and
      r8026: * more fixes to the printing registry interface
      r8027: driver information is now back via winreg
      r8061: * mostly cleanup and refactoring for better readability
      r8064: * add the REG_XXX error codes to the pretty error messages
      r8066: * had to modify the printer data storage slightly in ntprinters.tdb
      r8089: successfully delete printer subkeys via the registry....now for values
      r8140: adding missing module
      r8141: Update volker's valgrind fix in r8097.  Same effect, just helps me
      r8152: * remove commented out structure
      r8184: fix build issue on Solaris in smbclient
      r8322: * get RegSetValue() working for printer subkey values
      r8323: * convert RegSetValue() calls immediately beneath the printer
      r8324: * initial cut at creating printers via the registry API
      r8325: * punt....don't normalize the printer name in the RegCreateKey().
      r8326: factor out the delete printer code to a delete_printer_hook() for reuse
      r8327: * don't use unitialized variables
      r8330: moving onto 3.0.20rc1-SVN
      r8384: merging clutter fixes from release branch
      r8387: moving wins_hook to scripts directory
      r8388: fix typo in installman script
      r8472: abartlet's patch for parallel ntlmssp supporttrunk/source/smbd/sesssetup.c
      r8475: BUG 2872: fix cut-n-paste error when checking pointer value in ntlmssp_set_workstation()
      r8478: remove unused printmode command from smbclient (noticed by kalim at samba.org)
      r8501: * disable printer handle object cache (was mostly used
      r8506: BUG 2853: don't strip out characters like '$' from printer names
      r8507: BUG 2557: don't give and rpc fault when you get an unsupported SetPrinter() level
      r8510: Don't include the valgrind headers on 64bit linux systems.
      r8543: merge volker's nt_printing_init() fix from trunk (r8526)
      r8604: BUG 2890: fix unitialized variable reported by Jason Mader <jason at ncac.gwu.edu>
      r8606: BUG 2899: fix compiler warning in regfio routine
      r8607: BUG 2900 more compiler warnings
      r8654: merging cli_spoolss_XX() updates from trunk
      r8697: BUG 2908: make sure to allow for the trailing NULL
      r8716: adding 'username map script' which if defined takes precendence over
      r8755: more malloc fixes
      r8795: fix our perpetual motion maching in strncpy_w()
      r8796: disable schannel on the lsa client pipe for now to deal with Windows 2003 sp1 and Windows 2000 SP4 SR1
      r8799: disabling schannel on samr and lsa until I figure out
      r8800: grr...get logic right when checking #define
      r8834: fixing SWAT install after docs changeswat/help/welcome.html
      r8835: fixing SWAT install after docs change
      r8840: fix fedora packaging for FC4
      r8899: various compiler warning fixes reported by Jason Mader <jason at ncac.gwu.edu>
      r8900: fix typo thyat broke compile in my last commit
      r8916: should fix the valgrind invalid read of size 1 onthe
      r8943: Fix segfault in enum_service_status
      r8956: fix segfault caused by trying to parse a UNISTR2
      r8990: First trivial example of 'make test'
      r8992: More make test work.  Adding a way to order tests (might change
      r9040: revert pointer checks that I had removed; fixes crash in calls to enumprinterdata()
      r9086: * fix invalid read in parse_spoolss when writing a devmode to
      r9087: change version to 3.0.21pre1 since I will start cherry picking patches for the final 3.0.20
      r9098: fix another usrmgr.exe crash when viewing user properties at debuglevel 10
      r9114: removing gratuitous debug messages
      r9115: using #define for reg paths rather than typing the string
      r9186: comment out 'make check'; to be replaced by 'make test'
      r9194: do not enumerate privileges when they are not enabled
      r9195: setting log level to 2 instead of 0
      r9264: fix valgrind invalid write error in enumprinterdata()
      r9266: fix help links in swat editor after doc layout changes
      r9304: BUG 3001: don't use C style comments in configure.in (thanks Jason)
      r9322: fixing debug log and ensuring that we set the right winbind_methods
      r9330: Remove the classic dual daemon since it was not being used.
      r9361: patch from Ed Plese to fix a faulty error in winbindd
      r9362: formatting cleanup
      r9366: patch from Toomas.Soome at mls.ee to include hosts lookups via the winbind pipe on solaris
      r9486: ensure that the registry hash records are sorted by original subkey name and not the 4 character hash key
      r9548: more additions to make test; better checks for starting and stopping smbd
      r9562: successfully get the samba 3 smbtorture working (as a test case for infrastructre)
      r9582: a few makefile fixes for 'make test'; get the dependencies and cleanup right
      r9583: ensure that Samba was with with --enable-socket-wrapper for running 'make test'
      r9585: update test #1
      r9588: remove netsamlogon_cache interface...everything seems to work fine.  Will deal with any fallout from special environments using a non-cache solution
      r9590: forget to remove this from the 3.0 tree
      r9593: fix enumerated group name (should be full name (i.e. mapped name) and not unix name)
      r9594: return the mapped name in enum_dom_groups()
      r9613: remove TMPDIR from 'make test' scripts (after comments by Don Watson)
      r9615: trying a 3 second timeout on smbcontrol
      r9618: adding get/put tests from Don Watson
      r9628: rewrite profiles tool to use the regfio code.
      r9653: adding common popt args to profiles tool (needed for debuglevel to regfio lib)
      r9656: fix bug in sk record list with next offsets
      r9657: fix final issue with regf sk_records; profiles now successfully rewrites
      r9658: cleanup a few debug messages
      r9660: real fix for group enumeration bug in 3.0.20;  only affected the ldapsam code
      r9661: fallback to cn attribubte if displayName is not available
      r9739: conver the reg_objects (REGSUBKEY_CTR & REGVAL_CTR) to use
      r9752: figured out why talloc_steal() is a bad idea for SEC_DESC*
      r9758: make sure to lower case usernames in winbindd's getpwnam()
      r9787: BUG 2998: patch from Humberto Diogenes <virtual.spirit at digizap.com.br> to include 'net rpc service' help in net rpc usage output
      r9788: more compiler warnings from Jason Mader
      r9790: remove 'set but not used' variables (reported by Jason Mader)
      r9893: fix REG_CREATE_KEY_EX parsing error caused by WinXP clients
      r9894: Add new registry key expected by Windows XP clients.
      r9895: fix typo in registry path
      r9913: fix some build breakage on solaris with --enable-socket-wrapper
      r9914: key ordering in hash list is case insensitive
      r9947: fix build breakage on Status VOS (build farm)
      r9956: Ensure accounts with the SeAddUsersPrivilege can modify domain and local group attributes (posted to samba ml and confirmed fix)
      r9971: starting maintainers file
      r9998: starting content for maintainers file
      r10001: adding in libmsrpc from Chris Nicholls (SoC project).  not built by default per conversation with Jeremy until the rpc changes from trunk are merged back
      r10003: in the rush for 10k, I forgot to run add the rest of Chris' libmsrpc files
      r10005: forgot to remove one object file
      r10012: fix build breakage caused by forgotten commit in local tree
      r10053: testing commits
      r10064: BUG 3052: adding OpenBSD timespec patch from Steve Williams <steve at celineandsteve.com>
      r10176: adding smbctool from Kalim's SoC project; requires make bin/smbctool
      r10221: add "free pass for root" in svcctl and default winreg access checks
      r10243: fix net rpc shutdown (missing alignments and sending an invalid UNISTR4 for this request)
      r10264: reverse order of 'root free pass' checks in service and registry access_checks()
      r10278: more fixes for bug 3080.  Ensure the length on the message string is correct.  Windows 2000 is very senstive io this apparently
      r10431: fix segfault when the pip open fails in 'net rpc' commands
      r10432: BUG 3080: fix 'net rpc shutdown' for XP clients
      r10451: add $(LDFLAGS) to tdb command line tools to fix build issues
      r10454: * prevent privilege code from storing an empty SID
      r10554: * BUG 3057: assume x64 drivers are v3 drivers
      r10555: a few compile warnings from jason Mader
      r10556: BUG 3083: patch from Alex Deiter <tiamat at komi.mts.ru> to fix checking trusted account for winbindd running on a Samba PDC
      r10585: variation of fix in trunk for root-free-pass in registry access checks
      r10590: merging lost fix from the release branch
      r10606: pdb_*sql patches from
      r10656: BIG merge from trunk.  Features not copied over
      r10657: remove missing header file
      r10676: reverting bad merge for install manpages script
      r10781: merging eventlog and svcctl code from trunk
      r10819: merging a couple of fixes from trunk
      r10822: updating copyright info
      r10901: BUG 3145: Fix build issue regarding quota support on Solaris
      r10904: build patches from Marc Balmer <marc at msys.ch> when builddir!=srcdir
      r10921: BUG 3070: fix crash bug in qfsinfo when retrieving quota info
      r10927: bug 1473 & 3090: quota compile fixes on Solaris
      r10933: include mount.cifs in Fedora spec file (based on patch from smk_va at yahoo.com)
      r10960: merging changes to specfile from 3.0.20b release
      r10961: remove unused variables (patch from Jason Mader)
      r10964: BUG 1051: store the directory path so we can send the full name in the unlink call (del tmp\foo)
      r11054: patch from Brian Moran; fix error code return in _srv_net_name_validate()
      r11060: merging new eventlog code from trunk
      r11063: merging missing error code for event logs
      r11065: rename wr_eventlog to eventlogadm
      r11066: adding eventlogadm to packaging files
      r11069: make sure to zero memory when allocating a a REGVAL_CTR struct
      r11072: add routines for converting REG_MULTI_SZ to and from char**
      r11073: safety checks on pointers to prevent crashing when converting REG_MULTI_SZ
      r11123: * patches from Brian Moran for creating new eventlog
      r11124: Commit Chris' fixes for libmsrpc after the rpc_client
      r11125: remove unused variables
      r11126: adding libmsrpc to solaris, redhat, and fedora packaging
      r11127: patch from S Murthy Kambhampaty <smk_va at yahoo.com> to not start nmbd is 'disable netbios = yes'
      r11131: updating indent resource file from trunk
      r11133: updating maintainers file
      r11135: should fix seg fault in addprinter code reported by Marcin.  Allocate memory in convert_printer_info() if necessary
      r11136: patches from Brian Moran for eventlogadm utility
      r11147: Fedora packaging fixes for libmsrpc
      r11150: fix solaris acl linking problem on sunos5.9; not quite sure how this got broken
      r11152: fix some regressions caused by the trunk->3.0 merge when install docs with SWAT
      r11158: more RedHat spec file fixes; I think this is the last one for 3.0.21pre1
      r11161: another regression from merge; make sure to build vfs_full_audit modulebranches/SAMBA_3_0_RELEASE/source/configure.in
      r11163: fix installation of libmsrpc
      r11164: solaris packaging fixes
      r11165: deparate the library install commands from the logic of whether to build the library at all.  Still needs some more cleanup but this works for now
      r11166: missed a specfile fix for redhat
      r11167: -lsec should be include in $ACL_LIBS and not $LIBS on solaris
      r11169: removing duplicate 'map read only' entry
      r11170: root free pass on eventlog open access check
      r11227: patch from brian moran to fix typo in eventlog message file registry value name
      r11235: fix segfault in addprinter due to mixing talloc() and malloc()'d memory
      r11240: * fix invalid read reported by valgrind in the
      r11275: patch from Chris to remove the empty struct in libmsrpc.h (fix build with Sun compiler)
      r11280: BUG 3201: make sure request structure is cleared prior to sending the request to winbindd (prevents the WB_RECURSE flags from accidentially getting set
      r11292: Missed merge from Samba 2.2 many years ago....
      r11295: new service hashing code has assumign that the service
      r11296: removing unused variable and ifdef'd out code
      r11301: why would you look for printf in -lnsl[_s]?  Fixing configure checks
      r11332: eventlog API uses NTSTATUS, not WERROR for return codes
      r11548: adding simple script to tail syslog and write to eventlog tdb
      r11549: fixing GPL notices
      r11577: adding perl interpreter she-bang to top of parselog.pl script
      r11579: syncing up perf counter code cfrom trunk
      r11580: fix an uninitialized variable that was causing winbindd to die in winbindd_dual_getsidaliases()
      r11591: bumping version 3.0.22pre1
      r11613: fixing versions
      r11617: fix typo
      r11645: mklogon updates from Ricky Nance
      r11651: After talking to Jeremy, commit my winbindd "Do the Right Thing" patch.
      r11652: Reinstate the netsamlogon_cache in order to work
      r11655: Two small fixes
      r11661: Store the INFO3 in the PAC data into the netsamlogon_cache.
      r11685: reverting Lar's change to nistallman from r11224 since it breaks 'make installman' outside the source tree; will fix up after the rc1 release
      r11725: build smbget by default
      r11760: fix sequential reads in the eventlog; event viewer is behaving better now as well but needs more testing
      r11761: * fix clearing of event logs by truncating the tdb.
      r11762: fix my build breakage
      r11763: fix more build breakage
      r11770: BUG 2718: don't use qpathinfo_basic() call when remote server is Win9x or the do_cd() call will fail
      r11830: patch from Rashid N. Achilov <shelton at granch.ru> to add descriptions for some common services
      r11833: fix build issues in smbget with the Sun compiler. Reported by Richard Bollinger
      r11855: patch from Aruna Prabakar for checking that the spooler si running on HP-UX
      r11860: BUG 3156: don't use find_service() when explicitly looking for a printer as the username map might get in the way
      r11863: BUG 3196: patch from Alex Deiter <tiamat at komi.mts.ru> to compile against the Sun LDAP client libs.  But not for AD support; just ldap support
      r11864: fix build breakage with solaris LDAP patch (my fault)
      r11867: attempt at fixing the compile issue with nss_winbind.so on HP-UX caused by Solaris specific return codes
      r11942: patch from Marcin to fix the mkdir() in perfcount daemon
      r12002: patch from marcin to allow for the creation of a File value in the eventlog registry keys so that file properties can be displayed
      r12027: changing version to 3.0.22pre1 since 3.0.21 is frozen now
      r12040: merging packaging fixes from release branch
      r12173: doing some service control work
      r12174: Simple patch to work around the current lack of BUILTIN
      r12176: fix type mismatch after rpc structure change in rpc_svcctl.h
      r12177: last of outstanding patches in my queue to deal with MMC.
      r12196: patch from Krishna Ganugapati <krishnag at centeris.com>
      r12224: adding more characters to the invalid share name string
      r12262: * patch from Brian Moran to fix segv in eventlogadm when not eventlogs
      r12281: adding a note about WINS and NetLogon not being remotely manageable
      r12393: cleaning up swat bugs.  *no one* tests swat it seems.  This has been broken since r10656
      r12398: adding Guenther's account policy migration fix
      r12400: one line patch for Sun LDAP libs pointed out by Nicholas Brealey <nick at brealey.org>
      r12541: patch from Oliver Schulze L. <oliver at samera.com.py> to check for rpm  v4.3 (CentOS)
      r12593: packaging fixes missed from the 3.0.21 build
      r12794: BUG 3340: patch from William JoJo <jojowil at hvcc.edu> to fix automatic inclusion of aio support on AIX
      r12870: fixing net rpc registry enumerate from overwritnig the open subkey handle
      r12889: BUG 3380: fix crash when changing printer drivers caused by accessing a previously freed pointer
      r12912: patch from Tony Mountifield <tony at softins.co.uk> for BUG 3327 (fix bad access to gencache.tdb after fork() in smbmount
      r12913: missed merge to fix BUG 3391; ensure we can lookup account policies
      r12914: adding query/set ops for security descriptors on services.
      r12915: protect against changing the SCM security descriptor
      r12916: use rpcstr_pull() instead of unistr_to_ascii() when validating share names
      r12946: fix a segfault in nmbd when 'wins support = yes' caused by double free
      r12967: BUG 1061: don't corrupt the file name when reading an lmhosts file (-H) in nmbd.  Patch from    Andrew Esh <Andrew_Esh at adaptec.com>
      r12990: BUG 3329: patch from David May <mayd at cygnus.uwa.edu.au> for Solaris shell script portability issues in 'make test'
      r12991: some fixes for BUG 3331 - solaris packaging
      r13047: specfile updates from John T.
      r13048: trying to fix the confusion over packaging platforms
      r13081: correct fix for the segv in nmbd caused by a double free on namerec.
      r13082: revert an accidentally commited patch (still in progress)
      r13083: patch suggested by Adam Nielsen for better smbstatus formatting
      r13085: hook the max connections spin box in the share properties MMC plugin
      r13086: hooking max connections into 'add share' as well (although the WinXP UI doesn't give you a way to set the value on add
      r13089: quick fix to work around building ilbnss_winbind.so on SOlaris when --enable-developer is specified
      r13093: adding vendor patch level string as announced on samba-technical ml
      r13110: remove an invalid debug message about call get_share_mode_lock() with a NULL service path and fname (we do it all the time internally)
      r13124: working on RHEL/Fedora packaging for 64-bit platforms and general cleanup
      r13127: more spec file fixes for RHEL
      r13133: patch from Makr Proehl <m.proehl at science-computing.de> for dumping server role when calling 'testparm -s' (BUG 1336)
      r13229: * fix bad comparison caught by the AIX compiler in wbinfo code
      r13231: apparently strncat() is converted to strcat() on RH7.3 and similar systems.  Fix the build on those boxes
      r13232: defensive programming in an attempt to prevent crashes due to a PDC rebooting
      r13233: build fixes for smbmnt; remove unused variable; ready to ship 3.0.21b now
      r13235: fixing RedHat 7.x packaging
      r13286: changing target file in another branch
      r13287: removning readme file
      r13288: readding readme file
      r13310: first round of server affinity patches for winbindd & net ads join
      r13316: Let the carnage begin....
      r13318: remove an unused file
      r13326: fix bad path in RHEL spec file; going to have to rebuild Fedora packages
      r13376: break docs out to a separate package; cleanup /var/cache/samba -> /var/lib/samba
      r13382: added server affinity cache stores for 'net rpc join' and trusted domain code
      r13383: pulling in swat-welcome patch from SuSE packaging
      r13384: Adding in some more SuSE patches
      r13392: check gcc version before trying 'make pch'.  remove some historical actions
      r13393: Do not initialize the lp_svcctl_list() value since it is handled
      r13460: by popular demand....
      r13509: remove unnecessary sql flags
      r13510: plug memory leak in WINS server code.
      r13511: Fix bug in the samr dispinfo enumeration code.
      r13512: Rewrite tdbsam code to use a reference count based open/close
      r13513: Changing defaults:
      r13514: fix small glitch in the update procedure from /var/cache/samba mishap
      r13515: Make sure to store the correct domain name in the server affinity cache.
      r13541: we have to wrap pen_enum_group_memberships() in become/unbecome_root()
      r13545: A patch which I think it's time has come.  VOlker, we can talk about
      r13546: NSS soname merge from trunk
      r13547: add earlier checks to deny deleting a printer driver.  The previous
      r13550: remove pdb_guest
      r13571: Replace all calls to talloc_free() with thye TALLOC_FREE()
      r13573: removing wrepld from SAMBA_3_0.  The Samba 4 work is more current and any integration into Samba 3 would most likely be from scratch
      r13574: fix build; talloctort.c should not use the TALLOC_FREE() macro
      r13576: This is the beginnings of moving the SAM_ACCOUNT data structure
      r13589: Make sure we only try to close the tdbsam file in endsampwent() when we
      r13590: * replace all pdb_init_sam[_talloc]() calls with samu_new()
      r13591: I really have no idea how this code ever worked.  And I have
      r13593: consolidate pdb_set_sam_sids() into samu_set_unix() which
      r13600: Move functions local to tdbsam to pdb_tdb.c
      r13601: * Remove unused code from pdb_ldap.c
      r13671: fix return value in (void)fn()
      r13675: * patch from Bjoern JACKE <samba at j3e.de> to remove the
      r13676: have to return a value from a non-void function
      r13677: patch from Max N. Boyarov <m.boyarov at sam-solutions.net>
      r13679: Commiting the rm_primary_group.patch posted on samba-technical
      r13756: use samu_new() rather than calling talloc() directly.
      r13765: Fix bug reported by jra.  Don't check for a group SID when storing
      r13766: Patch from Arek Glabek <aglabek at centeris.com>:
      r13771: BUG 3534: ignore lines in the username map file with no right hand list rather than bailing out
      r13772: More default changes
      r13794: If you are going to go, go big.  That's what I always say.
      r13815: "Into the blind world let us now descend,"
      r13820: * Start fleshing out the XcvDataPort() server implementation
      r13821: replacing some strings with macros
      r13824: * add api table for Xcv TCPMON and LOCALMON calls starting
      r13829: From the "It's not pretty but it works" category
      r13878: move PORT_DATA_1 to use static sized UNICODE strings as per MSDN
      r14042: check that create_local_nt_token() succeeds before dereferncing the NT_USER_TOKEN*
      r14075: * add support for long variable names in smb.conf in the form of %(....)
      r14077: fix build breakage
      r14112: * fix checks on return code from register_vuid() which could actually
      r14403: * modifies create_local_nt_token() to create a BUILTIN\Administrators
      r14421: This does two things
      r14432: Give in and grant BUILT\Administrators all privileges
      r14448: * protect against NULL cli_state* pointers in cli_rpc_pipe_open()
      r14449: fix the build (sorry everyone)
      r14450: Fix more get_md4pw() breakage caused by missing "breaks"
      r14451: In order to get pdb_ldap searching for SID_NAME_ALIAS
      r14452: Sorry.  Need more coffee....
      r14457: Add a few more special cases for RID 513 in the samr code.
      r14475: patch from Oliver Schulze L. <oliver at samera.com.py> for BUG 3580.  Make RHEL makerpms.sh script more verbose and add some additional options to the rpmbuild process
      r14482: Fixes for spoolss code (after coverity fixes) when the
      r14512: Guenther, This code breaks winbind with MIT krb1.3.
      r14515: fix soname breakage caused by mad merge from trunk (missed replacing a AC variable)
      r14530: removing unused 'winbind max idle children' parameter
      r14577: BUG Fixes:
      r14578: fix incorrect comment in fill_sam_account().  This function is called from multiple places now (krb5, winbindd auth and domain_client_validate()
      r14580: add 'net sam createbuiltingroup' to map BUILTIN local groups to a gid
      r14634: Many bug fixes thanks to train rides and overnight stays in airports
      r14698: Make sure we expand our own local groups and not
      r14699: allow 'net sam addmem' to accept a SID for the member
      r14748: store the name/ip address combination when we doa reverse look up in case future forward lookups would fail
      r14825: add support for max connections parameter
      r14855: Various fixes:
      r14868: I will not write code when changing to Daylight Savings Time.
      r15003: patch based on code from Arkady Glabek <aglabek at centeris.com> to ensure that global memory is freed when unloading pam_winbind.so (needs more testing on non-linux platforms)
      r15053: fix portabilities issues between 32-bit winbind clients and a 64-bit winbindd server
      r15072: Last bit of 32/64 bit portabilities fixes for winbind
      r15074: Remove -lcap from pam_winbind (not needed)
      r15086: Get defensive about creating user accounts when winbindd
      r15154: bump version to 3.0.23pre2
      r15163: packaging updates for RHEL/Fedora and break out 'pre' tag to the RPM release number
      r15165: updates for RH 9 packages (merged from RHEL fixes)
      r15168: last minute spec file fix for some change with the using_samba install path
      r15169: openldap2-devel is a suse package (not on RHEL)
      r15170: don't check for ccache
      r15309: normalize printing keys when deleting
      r15310: only store lanman passwords on a change if 'lanman auth = yes'
      r15311: look at the NT password (not lanman one) when determining if smbpasswd -e should probably for a password
      r15380: default eventlog tdbs to mode 0660 to allow easier access by BUILTIN\Administrators
      r15393: remove extra call to fallback user creation on member servers; it's handled by the smb_getpwnam() call deeper in
      r15462: replace the use of OpenLDAP's ldap_domain2hostlist() for
      r15463: compile fix for new DNS code for machine using Bind 4 libs (old IRIX host)
      r15464: fix dns build breakage on IRIX and OpenBSD
      r15525: fix compile error on HP-UX reported by Ryan Novosielski
      r15543: New implementation of 'net ads join' to be more like Windows XP.
      r15544: make sure to define NS_PACKETSZ for Bind 4 interfaces (fix build on us4)
      r15547: say goodbye to --with-ldapsam (although the ldapsam_compat passdb backend still exists
      r15548: remove unused 'wins partners'
      r15549: removing rhosts and 'hosts equiv' authentication features
      r15550: make sure to pick up the -lresolv libs on systems without -lldap to pull it in
      r15560: Since the hotel doesn't have Sci-Fi and no "Doctor Who"....
      r15561: Should re-fix older systems without RC4-HMAC support
      r15597: more ads join fixes -- we can only set the PWDNOEXP and DES_ONLY acb flags on the setuserinfo(),  not the createuser info call
      r15679: fix some popt warnings
      r15680: use the user creds when calling net_set_machine_spn()  rather than the machine creds (just like WinXP)
      r15681: fix segv in 'kinit && net ads join'
      r15701: change 'net ads leave' to disable the machine account in the domain (since removal implies greater permissions that Windows clients require)
      r15712: BUG 3435: patch from volker to fix 'msdfs root = yes' in [homes]
      r15717: BUG 3711: patch from    Leonid Kabanov <lkabanov at mail.ru> for some solaris sheel scripting bugs with 'make test'
      r15842: patch from volker to instruct winbindd to find a trusted DC on its own when runing on a Samba DC (since we don't implement the getdcname() call that well
      r15863: trying to fix a compile issue on HP-UX 11.x caused by conflicts of int16 and int32 definitions in internal and system headers
      r15864: build fixes for IRIX 6.4 in the build farm; only enable the C++ reserved word check when we selecte --enable-developer
      r15906: smbpasswd help text for -W option (patch from Aruna Prabakar <aruna.prabakar at hp.com>
      r15975: Only call the printer publishing calls if 'security = ads'
      r16078: Patch from Aleksey Fedoseev <fedoseev at ru.ibm.com> to correctly
      r16079: How embarassing. :-(  Broke the build.
      r16130: fix a shell portability issue for Solaris sh in installman.sh
      r16131: fix RedHat 9 spec files
      r16193: fix packaging dependency on RH platforms for the Unicode::MapUTF8 perl module (caused by upgarde in smbldap-tools)
      r16195: starting development for 3.0.24pre1
      r16205: Fix 'make install' when srcdir != builddir
      r16206: Don Meyer <dlmeyer at uiuc.edu> pointed out that RHEL4 rpms use 'Epoch: 0' so work around that
      r16219: BUG 3836, 3837, 3004: compile warning fixes from Jason Mader.
      r16255: Fix 'net ads join' when the workgroup is set incorrectly
      r16470: remove ntlm_auth_proto.h and passwd_proto.h in 'make clean
      r16471: Bug reported by Vitaly Protsko <villy at sft.ru> in 3.0.23rc1.
      r16478: small cleanup to make pam_winbind.so build and iniparser
      r16486: fix RedHat init scripts to rely on OS provided killproc() function
      r16510: fix from Nicholas Brealey <nick at brealey.org> for building pam_winbind.so
      r16528: Self-confidence is plummeting.  How could one person goof
      r16701: Fix segv when adding a printer caused by not initializing the
      r16713: BUG 3904: fix broken smbwrapper compile
      r16749: BUG 3905: don't fail in create_local_nt_token() when a
      r16751: The precompiled header should really be in the $(buildir) and
      r16752: remove the 'socket options' setting from the shipped default smb.conf
      r16785: BUG 3908: Fix rpc bin authentication failure which broke user password changes
      r16845: Properly report the error during join when the set password fails
      r16927: back merge of a packaging fix for release numbers (from 3.0.23)
      r16952: New derive DES salt code and Krb5 keytab generation
      r16953: Don't allow groups to be renamed to an existing user or other group
      r16954: Volker reminded me we already have code to do this check.
      r16957: fix cut-n-paste error.  The check for 'if (\!salt)' make no sense when fetching the DES salting principal
      r16997: Simo's patch (based on repotr from Seth Elssworth of Quest) to try to be more robust in the precense of more broken /etc/hosts files when determining our fwdn
      r16998: patch from Paul Griffith <paulg at cs.yorku.ca> to fix compile of the test.c pdb file
      r17017: BUG 3916: fix pam config file parsing in pam_winbind.
      r17021: remove unsupported smbwrapper code
      r17023: security = server should not be considerd ROLE_DOMAIN_MEMBER
      r17110: revert a bad merge from the old trunk
      r17111: cleanup the idmap_ad initialization after review by gd
      r17122: remove unused global var from idmap_ad
      r17123: Fix 32bit/64bit portability issues again.
      r17146: Starting to cleanout my local tree some
      r17147: Install fixes for libraries
      r17148: the wins service should not accept any controls so that a GUI can grey it out as not remotely manageable
      r17149: Fail the join if we cannot set any SPNs for the machine account.
      r17150: MMC User & group plugins fixes:
      r17151: revert a few accidental commits to the Makefile
      r17158: Add two new options to 'net ads join'
      r17159: Bug 3920: Restore wnibind use default domain behavior for domain groups.
      r17162: Fix typo small typos noticed by Paul Green.
      r17183: LsaLookupSids() shoudl return the string form of a SID when
      r17217: Fix a couple of "smbldap_open(): Cannot open when not root" bugs
      r17239: BUG 3959: patch from William Charles <william at charles.name> to fix a segv in the DNS SRV lookups dur to calling rand()
      r17242: BUG 3957: make sure to zero memory in the SRV hostlist in case there is not an A record for each SRV name
      r17246: BUG 3964: lower case username prior to getpwnam() call in smbpasswd
      r17258: Cleanup the 'net ads help join' output and document createupn
      r17260: remove extra ;SAMBA_3_0_23/source/utils/netlookup.c
      r17271: Fix a regression in the ldapsam uri syntax.
      r17383: Patch from Michael Adams <ma at sernet.de> to catch
      r17386: fix inverted logic pointed out by Volker.  When deleting a printer return access denied if the printer still exists after the delete_printer_hook() is called
      r17401: BUG 3855: remove bits of XML and SQL checks from aclocal.m4
      r17403: add a helpful debug msg
      r17444: put pam and nss libs in samba-common on RHEL for compatibility with system provides rpms
      r17445: fix bad PAM file on 64 bit boxes
      r17669: Remove RID algorithm support from unmapped users and groups
      r17672: remove duplicate description on NT_STATUS_INVALID_PARAMETER (from Michael Adam <ma at sernet.de>)
      r17673: volker's patch for re-adding Getpwnam() lookups to smbpasswd backend (I hate username level)
      r17709: Fix cut-n-paste error with the name of gid_to_unix_group_sid().
      r17710: Thanks to Thomas Bork for testing and continued feedback on this.
      r17723: * BUG 3969: Fix unsigned time comparison with expiration policy from AD DC
      r17736: Apply the Unix group patch when creating the token for a
      r17760: The DNS SRV lookup already sorts by priority and weight so don't
      r17795: Finally track down the "ads_connect: Interrupted system call"
      r17797: Just say "ok" when trying to rename a local group to its same name.
      r17798: Beginnings of a standalone libaddns library released under
      r17799: Start fixing the building carnage.  Only include calls to
      r17801: bad merge ?  No sure how the second half of the LIBNDR_OBJ value got cut...
      r17802: trying to fix more build farm hosts
      r17803: finally get the new libaddns code to build on Solaris 9
      r17813: Remove another instance of manually setting the group SID.
      r17815: Revert Volker's change in 16014.  I really do not believe
      r17909: ensure we do not call map_username() twice on Krb5 session setups
      r17910: remove incorrect comment (code has already been fixed)
      r17934: allow srcdir != builddir for 'make test'
      r17971: Disable storing SIDs in the S-1-22-1 and S-1-22-2 domain to the SID<->uid/gid cache.  FIxes a bug in token creation
      r17972: revert accidental commit to ads_verify_ticket()
      r18182: only grant privs to Administrators if privileges are enabled to avoid bopgus error messages
      r18185: add librpc/idl and relevant IDL files from SAMBA_4_0
      r18187: Replace copy of idl files with a svn:externals link.
      r18193: Not quite to autogenerated NDR but closer thanks to Jelmer's
      r18195: remove hardcoded path introdiced by pidl
      r18197: compile fixes
      r18229: regenerated unixinfo files and add a few header stubs.  Almost autogenerated now
      r18235: stub header to get past compile issues with pidl ndr output
      r18236: fully autogenerated unix info files
      r18237: include dcerpc.h here to fix compile of autogenerated unixinfo files
      r18271: Big change:
      r18274: Cleanup unnecessary empty headers and add a comment
      r18275: add auto generated dfs code
      r18387: remove echo of pidl command line (was used for debugging)
      r18393: get the data size and not offset when initializing a data blob from a prs structure
      r18394: get the lsa client code to link
      r18395: have the ndr layer alloc outgoing structure members for us
      r18396: regenerate unixinfo files after metze changes to the IDL
      r18397: Change rpccli_lsa_close() as a wrapper for the autogenerated
      r18404: * swap from POLICY_HND to the struct policy_handle from ndr/misc.h
      r18405: Now that POLICY_HND == struct policy_handle, we can
      r18429: fix a regression renaming local group introduced by trying to handle renames to the same name
      r18560: * Add in the winreg and initshutdown IDL files
      r18562: quick build fix rather than rolling back (I didn't actually intend the previous commit but got confused between Samab 3 & 4 branches)
      r18616: fix breakage after DLIST_ADD_END() changes for --with-pam
      r18617: fix unixinfo call after change to IDL (change from pointer)
      r18618: * remove svn:externals
      r18623: starting on eventlog IDL
      r18641: Checking in the wkssvc files after updating the [out]
      r18642: convert [out] parameters to pointers in Spooler IDL
      r18666: checking in generated netlogon files
      r18684: pdb_get_group_sid() has to use the Get_Pwnam_alloc() call
      r18694: prevent -O and -g from being set at the same time (by default)
      r18711: Replace the following hand code client routines:
      r18712: Forgot to remove cmd_reg.o from Makefile
      r18714: fix the build after replaceing rpccli_reg_abort_shutdown()
      r18717: remove old defines in preference of the flags in librpc/gen_ndr/srvsvc.h
      r18718: Change a few out parameter to ref pointers and regenerate
      r18725: Replace out one wkssvc call (wkssrv_GetInfo()) with autogenerated
      r18727: set the winreg_AbortSystemShutdown() server * to NULL rather than a dummy placeholder
      r18728: revert previous commit until I fix the wkssvc_nt.c changes
      r18729: readd missing files
      r18730: readd missing files (one more)
      r18739: * Get the wkssvc patch right this time.
      r18747: replace rpccli_lsa_close() with rpccli_lsa_Close()
      r18755: remove accidental commit
      r18756: cleanup copyrights after moving to new wkssvc implementation code
      r18788: updating the IDL for QueryValue
      r18789: Replace the winreg server code with the libndr parsing code.
      r18790: Correct the IDL (still a bug in pidl) for QueryValue()
      r18791: print the error string and not the raw value
      r18792: small fix for server QueryValue code
      r18794: Make ENumKey() work again in the registry server
      r18803: remove unused function
      r18811: rename stat field to avoid compiler warnings about
      r18896: * Fix out of tree builds after libreplace merge
      r18899: remove check for root when running configure since it does not appear to be used anymore
      r18904: * Revert previous fix for building out of tree and
      r18905: I'm not really proud of this but I don't want to maintain
      r18906: Fix 'make clean' to deal with new lib/ldb/ directory structure.
      r18919: * Get the new rpccli_winreg_XXXX() functions into the tree
      r18927: Fix build.  *please* compile the code at least once before checking it in.
      r18929: * Clarify QueryValue IDL and regenerate code
      r18931: * Fix the IDL for QueryInfoKey.  teh Classname in an
      r18932: In RegEnumvalue() and RegQueryValue(), the output buffer
      r18934: fix a segv in CreateKey()
      r18937: Protect against segc in the idmap winbindd child process
      r18940: Fix a few memory corruption bugs to make CreateKey() and DeleteKey() work
      r18954: Fix segv in QueryValue and Enumvalue.  regedit.exe now
      r18959: reformat using indent
      r18962: * Add IDL for SaveKey() and RestoreKey() and regenerated
      r18963: * Move parts of registry headers that were still in
      r18964: fix 'net rpc registry save' to use the new wnireg client code
      r18981: * cleanup some vestiges of old cli_reg.c code and mark some TODO
      r19006: Final cleanups for the winreg libmsrpc functions.
      r19007: reformat service control manager IDL
      r19417: BUG 3856: patch from Timur Bakeyev <timur at com.bat.ru> to include setting the nss soname version on FreeBSD
      r19419: BUG 4109: Patch from Timur Bakeyev.  Fix bug causing smbd to turn off
      r19420: Remove strequal and use strcmp() instead.  Meant to
      r19421: BUG 3868: Patch from Timur Bakeyev <timur at com.bat.ru> to prevent
      r19497: Thought I already fixes the etags target.  Ignore .svn
      r19579: BUG 4075: patch from Dmitry Butskoy <dmitry at butskoy.name>.
      r19754: * When using a krb5 session setup, we don't fill in the server_name
      r19758: remove the LDAP_SCOPE_ONELEVEL define (not needed after svnup)
      r19762: libaddns/*[ch] code fixes donated by Centeris Corporation
      r19764: set version in 3.0 branch to 3.0.25
      r19800: * Remove exmpty aix directory
      r19808: remove old smbwrapper references
      r19809: remove winbind blacklist parameter
      r19921: Add license and copyright info
      r19939: ,fix compile warning about unused functions when not using heimdal
      r19977: * Fix a crash in the secure DNS update code.  Don't free
      r20170: Fix secure DNS updates to work against
      r20173: DNS update fixes:
      r20287: Allow a NULL sid when setting up the list of trusted domains.
      r20485: Add select with a 10 second timeout when reading DSN update responses.
      r20486: Always upper case the "host/<sAMAccoutnName>" entry in the keytab file
      r20487: Remove the unused dn2ad_canonical() call
      r20488: When joined to a child domain in a multi-domain/single domain tree,
      r20489: Missed patch ofthe forest_name patch for lookupname
      r20884: patch from Michael Adam <ma at sernet.de> to add new sambaTrustedDomainPassword object class
      r20903: Replace the hardcoded "smb.conf" string with the dyn_CONFIGFILE
      r20904: This is a placeholder fix.   Apparently Windows 2000
      r20905: Windows 2000 returns NT_STATUS_ACCOUNT_RESTRICTION if the pw
      r20911: Fix copyright message in winbindd to use the macro from smb.h
      r20951: Remove the DOM_SID field in the struct idmap_domain and bounce
      r20985: leave room for terminating NULL when printing password hashes via 'pdbedit -L -w'
      r20986: Commit the prototype of the nss_info plugin interface.
      r20987: fix build farm breakage when ADS support is not present (caused by nss_info_methods API)
      r20992: another attempt at fixing the build breakage
      r20993: temporary build fix to get things going again on non-ADS systems
      r21001: * Use a simple '#define LDAPMessage void' to fix the build
      r21009: Patch from Danilo Almeida @ Centeris (via me).
      r21010: fix the pstring change in ntlm_auth for require-membership-of in ntlm_auth
      r21011: Another patch from Danilo Almeida @ Centeris (via me):
      r21012: Patch from Danilo Almeida @ Centeris (via me):
      r21013: * Remove "inline" keyword
      r21014: move some functionss to winbindd_group.c and make static
      r21015: fix typo that breaks the build
      r21036: Fix the ad nss info backend to not abort the search when called outside the idmap daemon
      r21046: Backing out svn r20403 (Andrew's krb5 ticket cleanup
      r21070: * Add the new boolean 'winbind normalize names' option as discussed
      r21112: fix const compile warning
      r21130: Don't mix SAFE_FREE() and TALLOC_FREE().
      r21151: applying patches for CVE-2007-045[34]
      r21180: fix backwards compatible idmap backends parameter parsing
      r21182: * Refactor the code to obtain the LDAP connection credentials
      r21188: bumping passdb version number to make sure this is different than the 3.0.25 branch
      r21250: Partial fix for BUG 4093: Make %a expand to "Vista"
      r21258: Fix for connecting printers from Vista by storing
      r21262: Final part of BUG 4093: fix %a with Windows XP 64bit
      r21273: * Protect the sasl bind against a NULL principal string
      r21284: Fix some unitilized variable warnings pointed out by Volker.
      r21453: use the tdb mapping file for groups by default for compatibility with the 3.0.25 tree (for now)
      r21505: make sure mlock()'d memory is aligned on a page boundary
      r21507: Fix some "cannot access LDAP when no root" bugs.
      r21525: Go ahead and checkin the mlock() & memalign() fixes so
      r21526: Fix stray character in sys_memalign() that is only
      r21610: put libraries preceeding the @SONAMEFLAG@ variable as on AIX this ends up commenting out the remainder of the line and we have missing libraries in the link
      r21611: I'm not entirely sure about this patch but it is working.
      r21612: Make pam_winbind do the same username fixup on AIX as the WINBINDD
      r21613: perform variable subsitution on home directories and shells provided by the nss_info backend
      r21614: The memset() called on aligned memory was causing crashes
      r21615: don't wait until the last second to try to renew a Krb5 ticket as it is took late
      r21616: Delay initialization of idmap and nss_info backends until necessary
      r21622: Fix bad merge caught by James.
      r21626: Fix memory leak on error path noticed by
      r21632: Remove ununsed variable
      r21633: First real fix from me found during the bug hunt.
      r21635: Don't free talloc()'d memory.  I wish people would check the callers
      r21636: Was almost right before.  We have to specify the short domain name to get the
      r21848: add a comment about gss_import_name() and when to free the krb5 principal data
      r21860: Fixes for "winbind normalize names" functionality:
      r21861: Pull the comment and location from CUPS if we don't have one
      r21862: add the cups comment and location lookup to get_a_printer_2_default() as well
      r21875: BUG 3275: Patch from Andy Polyakov <appro at fy.chalmers.se>
      r21884: * Blacklist BUILTIN and MACHINE domains from the
      r21888: Add the osname and osver options to 'net ads join' as discussed
      r21905: Rename
      r21908: update with the 3.0.25 packaging
      r21913: fix one bug in build 717: correctly check the return from sid_peek_check_rid() when trying to find a matching domain
      r21918: Reverting this change as it is now causing aborts() in
      r21933: Change the write_sock() call in pam_winbind_request()
      r21940: Sorry Volker,  I have to revert your revert in r21935.
      r22061: Fix the krb5 user ticket refresh event timeout in winbindd
      r22066: Ensure that winbind can resolve SIDs in the S-1-22-{1,2}
      r22069: BUG 4447: Fix compile failure on AIX 5.2 (patch from William Jojo <jojowil at hvcc.edu>)
      r22095: BUG 4484: Add more checks to set %a for Vista clients (based on absence of native OS and Lanman strings in the session setup request)
      r22101: remove RedHat 9 packaging files after annoncement on the samba ml
      r22104: BUG 4439: Fix the object picket on x64 WIndopws XP/2003.
      r22110: don't cache the S-1-22-{1,2} domain SID/uig/gid lookups in idmap_cache
      r22149: BUG 4500: patch from Jorge Santos <jorge_a_santos at hotmail.com>
      r22158: BUG 4501 (partial): Fix a crash caused by not using the
      r22159: BUG 4501 (second half of fix): Just disable the
      r22173: BUG 4491, 4501: Additional fixes for protecting against
      r22175: sync packaging changes from SAMBA_3_0_25
      r22283: Remove very old bug where we assigned the online mode of
      r22321: BUG 4509: Makefile fix linking the sfu.so and rfc2307.so
      r22340: Fix another segfault in idmap_ldap.c caused by setting the iterator
      r22390: Patchset sent to samba-technical to address the winbind
      r22430: Add SID validate to sid2uid() and sid2gid() public entry points in winbindd
      r22444: * Validate a SID before trying to convert it to a uid/gid via the public
      r22447: Patch from Ying Li <ying.li2 at hp.com> to default tdb idmap
      r22473: Correct fix for setting a default compat tdb idmap backend.
      r22509: Fix some memory corruption caused by calling free()
      r22630: Revert svn r22576 (parse change to enum_aliasmem().  Original code was correct
      r22654: And this is now Samba 3.0.27pre1-SVN
      r22700: Add a simple wcache TRUSTDOM api for maintaing a complete
      r22701: Fix the krb5_nt_status error table and add the "no DCs found" mapping
      r22702: Convert both lookup name and lookup sid to follow the
      r22703: Convert winbindd_getgrgid() and winbindd_getgetpwnam()
      r22704: Implement three step method for enumerating domain trusts.
      r22705: Implement new set_dc_type_and_flags() called based on the
      r22706: missed one reference to domain->native_mode in the previous commit
      r22707: missed merge from local tree: pass the correct state to the domain when calling the async lookupsid() routine
      r22708: disable saving the trusted domain list as we want to the parent daemon to manage the complete trusted domain cache
      r22709: we can only use tschannel when commectcing to our primary (might need some fixing here for a Samba DC)
      r22710: Support one-way trusts.
      r22711: Fix a compile warnign in query_user().  Ensure that user_rid
      r22712: Inform the user when logging in via pam_winbind
      r22713: Offline logon fixes for idmap manager:
      r22714: Prevent DNS lookup storms when the DNS servers are unreachable.
      r22715: When our primary domain does on or offline, make sure to send a msg
      r22716: Clarify comment in winbindd_domain structure
      r22717: Add Everyone and AuthenticatedUsers to the user's token
      r22719: Missed change for one-way trust support.  Ignore password policy
      r22720: Fixes for offline auth when using krb5_auth = yes in pam_winbind.
      r22724: Call an nss_info backend's init() function if the
      r22725: * Don't try to update the sequence_number when offline
      r22726: When performing an offline logon for a user in a trusted domain,
      r22727: remove outdated comment about templatre shell and homedir
      r22728: Patch from Danilo Almeida <dalmeida at centeris.com>:
      r22729: add help text for osver and osname options to 'net ads join' (patch from Dnailo A.)
      r22730: Fix password changes via pam_winbindd when using "winbind normalize names"
      r22852: merge fixes for CVE-2007-2446 and CVE-2007-2447 to all branches
      r22975: BUG 4616: Don't return a dns or forest name when replying to the
      r22977: Trim noise by removing redundant WARNING log message that
      r22978: Don't use current_user to prep the security ctx in change_to_user
      r23046: Few missing merges from cleaning out the Centeris winbindd tree.
      r23048: Simo is correct in that winbind_lookup{sid,name}_async() needs
      r23054: Move the check for the lookup_domain of S-1-22-{1,2} before the
      r23074: Remove duplicate code blocks from bad merge
      r23075: more duplicate code blocks from bad merge
      r23192: Remove fallback to looking up group mappings by the
      r23194: cherry pick two fixes from SAMBA_3_0_26
      r23206: remove unreachable code
      r23207: merge net help test fix from SAMBA_3_0_26
      r23242: BUG 4671: Fix Makefile syntax error when SMBMOUNT_PROGS is not defined
      r23244: Fix loop with nscd and NSS recusive calls.
      r23248: Merge echo pipe implementation chanegs from SAMBA_3_0_26
      r23249: another sync from 3.0.26 for the echo work to rpcclient
      r23251: whoops!  Fix compile error
      r23268: Rename some variables in the svcctl.idl to prevent
      r23269: Regenerate svcctl files after IDL fixes
      r23271: merge service control pidl change for CloseServiceHandle() from SAMBA_3_0_26
      r23274: merge CloseEventlog() pidl conversion from 3.0.26 && fix a few init call renames for svcctl in the previous commit
      r23321: remove unused variable (due to mad merge from Centeris patches)
      r23377: Patch from Bjoern Jacke <bjoern at j3e.de> to deal
      r23471: Here's a rough patch for expanding domain group membership
      r23472: add missing default setting for 'winbind nss info' (merge from  3.0.26)
      r23474: Here's a small patch that disables the libkrb5.so replay cache
      r23477: Build farm fix: Use int rather than MIT's krb5_int32 when setting context flags.
      r23496: Fix logic error in getgrnam_recv() that broke
      r23497: Disable building of libaddns (no defined API) and
      r23597: add a few utility scripts for code formatting
      r23598: Add script for running indent and remove .indent.pro file
      r23599: Add new version of indent script copied from the the Linux
      r23601: BUG 4579: Don't mark the SAM domain on a Samba DC as an internal domain or else all network connections from the local winbindd will fail
      r23619: Fix compile warning in fill_grent_mem() caused by mismatched counter size.
      r23632: Correctly return the new_group list pointer from expand_groups
      r23633: Fix a couple of crash bugs pointed out by Volker caused by an old
      r23636: Adding coding style guide for Samba 3.0 branches (no differences from Tridge's prog_guide.txt so we should have a similar style throughout the project)
      r23645: add examples and try to answer some common questions in the coding style guide
      r23689: Squashed commit of the following:
      r23694: Make sure that when builddir != srcdir, we can still find the exports
      r23730: Squashed commit of the following:
      r23776: Setting version in 3.2 branch to 3.2.1pre1-SVN
      r23777: Set template release note files
      r24055: Remove a reference to the outdated samba-docs mailing list.  This entire
      r24158: SE_GROUP_RESOURCE in the other_sids list apparently means a
      r24722: Squashed commit of the following:
      r24745: Merge Simo's shared lib build fix from svn r22842 that was lost
      r24788: Cleanup some linking msgs and remove references to libmsrpc
      r25099: Commit fix for CVE-2007-4138 from 3.0.26 release.
      r25156: Update coding guiding wrt to primitive data types
      r25380: Remove the groupdb:mapping parameter as discussed in the following thread:
      r25393: Removed unused variable
      r25400: Windows 2008 (Longhorn) Interop fixes for AD specific auth2 flags,
      r25401: BUG 4982: Don't delete lanman hashes on invalid logins when
      r25402: BUG 4997 (3.2 only): Fix enumration level for smbtree
      r25405: Fix formatting as per metze's comments
      r25407: Revert Longhorn join patch as it is not correct for the 3.2 tree.
      r42: importing .cvsignore files
      r891: fix compile
      r5282: merging autogen fixes from 3_0
      r16100: Patch from Michael Wood <mwood at icts.uct.ac.za>: s/then/than/ for correct grammar
      r18238: add SID_NAME_COMPUTER to the enum lsa_SidType type
      r18561: Fix [out] pointers in winreg IDL
      r19049: Samba 3 client fixes
      adding the THANKS and history files back after talking to jht
      add 'html' to release target so as to include output/devel/*
      adding docs for 'cups options'
      put default and example parameters in the right place
      fix default install locations for swat in manpage
      updating cups options entry based on feedback from Lars M. @ SuSE
      removning html-single from the release target
      adding docs for 'printcap cache time' -- patch from Lars
      BUG 1367 -- fix typo
      document that 'printing = ...' resets the printing commands to default values
      adding docs for force printername
      fix a few typos
      fix another typo
      add entry for 'enable privileges'
      fix a few typos
      fix typos
      adding basic docs to net(8) about 'net rpc rights'
      adding note about these options not being supported in security = share
      BUG 1767: change documentation to reflect current hash2 inplementation
      BUG 1496: --authentication-file (not --authfile)
      fix typo that broke a few specific parameters
      BUG 2431: fix documented default value for strict locking
      adding documentation on the 'allocation roundup size' option
      fix xml syntax error
      correct '[abort] shutdown script' explanation (has been in 3.0.x
      update %a values
      cleanup typos in the %a description (mentioned by <HotaruT> on IRC)
      removing 'ldap filter' smb.conf option
      updating docs for new 'map to guest' option and missing 'enable asu support' option
      cleaning up vestiges of winbind local accounts code
      fix typo after changes to 'map to guest' options
      clarifying 'map to guest = bad uid'
      fix bad link
      * addminf username map script docs
      clarifying ldap suffix options
      one more round of clarifications
      add note about print admin being deprecated
      remove the printmode documentation since the command itself was previously removed
      fixing up some links in the html documentation
      adding dpcs for 'eventlog list' and 'svcctl list'
      remove unknown tag
      fix typoe in 'map to guest' entry
      fixing typo in the 'map readonly = permissions' explanation reported by Thomas Bork
      femoving outdated registry file to prevent confusion
      updating default values for several parameters
      updating my changes for new/removed/modified parameters in 3.0.23pre1
      removing docs for removed parameters
      fix a typo
      smbpasswd -W docs patch from Aruna Prabakar <aruna.prabakar at hp.com>
      BUG 780: fix typo
      correct ambiguities pointed out by Thomas Bork
      fix passdb backend description for 3.0.23 behavior
      bug 3980: should fix typo else its a bug in the man page generator
      eventlog list uses lockdir and not libdir (pointed out by Eric Hall).
      make the + syntax for [in]valid users clearer
      clarify when the 'add machine script' is applicable
      BUG 4343: Clarify the intent of ldapsam:trusted = yes
      Adding docs for new 'winbind normalize names' option.
      adding template file for individual manpages
      man page updates for new idmap options (still a work in progress)
      fix bad ending tag
      more idmap option updates
      add references id idmap uid/gid to the new idmap parameters
      add more idmap alloc smb.conf entries
      fill in the idmap_tdb man page
      Fill in the idmap_ldap man page and clean up a few things
      more idmap doc updates
      fix a typo in idmap_ldap man page
      add idmap_nss man page
      add stubs for idmap_{ad,rid}.8
      Jeremy says not to set the length.  Just use defaults
      "reset on zero vc" is a global option.  Make docs
      add docs on idmap_ad:schema_mode
      fix a few typos pointed out by James
      add smb.conf entry for 'winbind expand groups'
      revert svn r1129.  FOr some reason this breaks the html generation
      Add comment about the %o variable not generally being available
      Add rfc2307 as a valid value for winbind nss info parameter.
      Adding WinXP64 and Vista as documented values for %a in smb.conf(5)
      Document --verbose option to wbinfo
      idmap_adex: Fix usage of talloc_stackframe().

Gerald W. Carter (43):
      Adding basic script to help in the creation of tarballs for release.
      Merge branch 'v3-2-test-merge' into v3-2-stable
      Use the correct domain name when looking up the trust password.
      Always trust the domain flags in the wcache trusted domain cache.
      Restrict the enctypes in the generated krb5.conf files to Win2003 types.
      Allow NULL request and/or response pointers to be passed to wbcRequestResponse().
      Fix a return value from sync_eventlog_params() (patch from Volker)
      Make make_way_for_eventlogs() static
      Fix macro name (no 's' in ifr_addr).
      Fix macro name (no 's' in ifr_addr).
      Fix a bug in the output from print_canonical_sockaddr() fix from 36f8bafbd3dee66a8....
      Don't fill password policy structure for any domain other than our own.
      Only add WBFLAG_PAM_CONTACT_TRUSTDOM when performing a krb5 auth request.
      DIsplay the short domain name in "wbinfo -m " by default.
      Fix enumeration of forest trusts from our root domain.
      Patch from Nicholas Brealey <nick at brealey.org> to distinguish between WinXP and WinXP64.
      Fix out of tree build.  Remove the embedded srcdir path from talloc and tdb.
      Follow error code name convention in libwbclient.
      Add wbcListTrusts() API call to libwbclient.so
      Convert "wbinfo -m" to use wbcListTrusts() API call.
      Remove unused variable from wbcCheckTrustCredentials().
      Merge commit 'samba/v3-2-test' into wbc-test
      Moving docs tree to docs-xml to make room for generated docs in the release tarball.
      Adding DTD from svn:externals link in samba-docs SVN repo
      Rename WBC_DOMAIN_XXX domain flags to WBC_DOMINFO_DOMAIN_XXX
      Mark a domain offline in the wbcDomainInfo structure using the domain_flags.
      Use wbinfo --online-status in make test rather than --sequence
      Setting version to 3.3.0pre1
      BUG 5429: Clarify log msgs re: failure to create BUILTIN\{Administrators,Users}
      BUG 5107: Fix handling of large DNS replies on AIX and Solaris.
      Winbind: Prevent cycle in children list when reaping dead child processes.
      Manually port Steven Dannenman fix for using the correct machine domain when
      Manually merge Steven Danneman's patch for SPNEGO auth to a trusted
      Release scripts: Update create-tarball to include docs and other packaging details.
      winbindd_cm: Replace the use of lp_realm() with our_domain->alt_name.
      libads: Add API call to connect to a global catalog server.
      Return NULL in sitename_fetch() if gencache_init() fails.  Not false
      idmap_ad: Fix a segfault when calling nss_get_info() with a NULL ads structure.
      Document how to enable the name aliasing support in Winbind.
      Document the new hash and adex idmap/nss_info plugins.
      idmap_adex: Fix the nss_info install link.
      idmap_hash: Fix the nss_info link during "make install"
      idmap: Fix typo is gid2sid() that was caching using idmap_cache_set_sid2uid()

Geza Gemes (4):
      Fix bug 6136: New AFS syscall conventions
      s4:wscript - install the two missing files "dlz_bind9.so" and "named.conf.dlz"
      s4-provision: Provide YP/NIS subtree to allow ADUC to see and set rfc2307 attrs
      s4-classicupgrade: Add unix attributes during upgrade

Giampaolo Lauria (80):
      samba-tool: fix summary of the fsmo command to be clearer
      samba-tool: added setpassword to user
      samba-tool: removed setpassword.py
      samba-tool: update test suite for add setpassword
      samba-tool: created domain object, moved pwsettings to user passwordsettings
      samba-tool: removed pwsettings
      samba-tool: update test suite for the new domain object
      samba-tool: moved machinepw to domain machinepassword
      samba-tool: removed machinepw as it has been moved to domain machinepassword
      samba-tool: moved domainlevel to domain level
      samba-tool: removed domainlevel as it has been moved to domain level
      samba-tool: updated test suite to reflect the move from domainlevel to domain level
      samba-tool: moved export to domain dumpkeys
      samba-tool: removed export as it has been moved to domain dumpkeys
      samba-tool: updated test suite for the new domain dumpkeys option
      samba-tool: moved join to domain join
      samba-tool: removed join as it has been replaced by domain join
      samba-tool: update vampire.py message
      samba-tool: fixed prog name in samba-tool
      samba-tool: removed the assignment to parser.prog
      samba-tool: moved takes_optiongroups definition to Command base class
      samba-tool: fixed synopsis on all "user" commands
      samba-tool: fixed synopsis on user commands
      samba-tool: fixed drs commands synopsis
      samba-tool: added error handling for the user command
      samba-tool: improved Option list for all user commands
      samba-tool: Fix error handling in SuperCommand class
      samba-tool: fixed __doc__ in base classes
      samba-tool: Improved --help functionality
      samba-tool: Fixed bugs to determine min and max # of allowed arguments
      samba-tool: removed synopsis code in base class
      samba-tool: Fix __doc_ in base classes
      samba-tool: Remove password as it has been moved to "user setpassword"
      samba-tool: update test suite to reflect the move from password to "user setpassword"
      samba-tool: add -H or --URL where necessary
      samba-tool: Changed "user add" implementation
      samba-tool: updated test suite to account for newuser change
      samba-tool: Removed newuser
      samba-tool: Removed attribute name from Command class
      samba-tool: Removed SuperCommand usage method
      samba-tool: Redefined samba-tool as a SuperCommand
      samba-tool: Add long_description and epilog to Command class
      samba-tool: Moved command definition to sambatool command
      samba-tool: Formatted subcommand list output
      samba-tool: Expanded acronym descriptions
      samba-tool: Changed fsmo implementation
      samba-tool: Added "dsacl" command
      samba-tool: Added "ntacl" command
      samba-tool: Removed "acl" command
      samba-tool: Fixed "time" command synopsis
      samba-tool: Fixed "delegation" command syntax
      samba-tool: Fixed "spn" command syntax
      samba-tool: Fixed "domain" subcommands syntax
      samba-tool: Fixed "drs" subcommands syntax
      samba-tool: Fixed "dsacl" command syntax
      samba-tool: Fixed "group" subcommands syntax
      samba-tool: Fixed "ntacl" subcommands syntax
      samba-tool: Fixed "rodc" syntax
      samba-tool: Fixed "user" command syntax
      samba-tool: Fixed "testparm" syntax
      samba-tool: Moved _get_user_realm_domain fcn to common
      samba-tool: Fixed "dbcheck" subcommand syntax
      samba-tool: Fixed "ldapcmp" command synopsis
      samba-tool: Improve getopt.py error handling
      samba-tool: Improve getopt.py error handling
      samba-tool: Improve getopt.py error handling
      samba-tool: Improve getopt.py error handling
      samba-tool: Fix "delegation show" command  synopsis
      samba-tool: Improve "delegation" command error handling
      samba-tool: Improve "delegation" command error message
      samba-tool: Improve "delegation" command error handling
      samba-tool: Fix --quiet option in domain samba3upgrade
      samba-tool: Fix short description and error msgs in domain level
      samba-tool: Fix domain machinepassword name search
      samba-tool: Fix domain machinepassword secret db search
      samba-tool: Change internal argument name in domain machinepassword
      samba-tool: Added "user list" command
      samba-tool: Added new "user disable" command
      samba-tool: Remove "domain machinepassword" command
      samba-tool: Don't set UF_PASSWD_NOTREQD flag on "user disable"

Giovanni Bajo (1):
      s3-lanman: Allow a level2 descriptor for a level1 NetShareGetInfo

Gordon Ross (1):
      Fix Samba3 on OpenIndiana.

Gregor Beck (207):
      s3: registry: fix query empty valuenames
      s3: registry: let test_setvalue use getvalueraw instead of enumerate
      s3: registry: add tests with empty valuename
      s3-docs: document net registry
      s3-lib: add cbuf, a talloced character buffer
      s3-lib: add srprs, primitives to build simple recursive parsers
      s3-registry: handle registration entries (.reg) files
      s3-net: let rpccli_winreg_Connect optionally return WERROR
      s3-net: add command registry import
      s3-net: add command registry export
      s3-net: add command registry convert
      s3-net: add command rpc registry export
      s3-net: add command rpc registry import
      s3:registry: proposed aix build fix for reg_parse_internal
      s3-net: add roundtrip tests for registry import/export
      s3:net: remove unused net_idmap_help
      s3:net add option --db
      s3:net idmap restore: fix segfault on missing input file
      s3:net factor out net_idmap_dbfile
      s3:net idmap dump: use net_idmap_dbfile
      s3:net idmap: implement net idmap delete
      s3: add functions to flush the idmap memcache
      s3: add functions to remove entries from idmap memcache
      s3: add functions to remove entries from idmap cache
      s3: smbcontrol to notify smbd about idmap changes
      s3: remove superfluous debug messages from msg_idmap
      s3: adjust loglevel for idmap_cache
      s3-docs: manpage for "smbcontrol xx idmap"
      s3-docs: manpage for "net idmap delete"
      s3: fix cbuf_swapptr
      s3: add function dbwrap_trans_traverse
      s3: add function dbwrap_traverse
      s3: add function cbuf_print_quoted
      s3: add function srprs_quoted to parse strings written with cbuf_print_quoted
      s3-net: add command "net idmap check"
      s3-net: fix the usage output of "net idmap check"
      s3-net: document "idmap check"
      s3-net: "idmap check" ignore __db_sequence_number__
      gpfs.so: Add gpfs:syncio option
      s3:smbcacls: fix parsing of multiple flags
      nfs4_acls: pass ACE_FLAG_INHERITED_ACE up to the client
      nfs4_acls: pass ACE_FLAG_INHERITED_ACE down from the client
      s4:torture: fix SEGFAULT in raw.acl.dynamic
      s3:net: registry: add new command enumerate_recursive
      s3:net: registry: use recursive implementation for enumerate
      s3:net: registry export: close key after recursion returns
      s3:net-man: missing dot
      s3:net-man: registry deletekey & deletekey_recursive
      s3:net-man: registry enumerate_recursive
      s3:smbldap: use smbldap_state as memory context for idle event
      s3:smbldap: free the idle event scheduled in smbldap_open in smbldap_close
      s3:smbldap: let smbldap_free_struct do what it claims to
      s3:smbldap: add a destructor to smbldap_state, just in case
      s3:smbldap: make smbldap_connect_system self contained
      s3:testparm: avoid spurious warnings about dos mode mapping and create mask if store dos attributes is set
      s3:registry avoid leaking an old regsubkey_ctr on regsubkey_ctr_init
      s3:registry avoid pruning the sequencenumber while flushing the regsubkey_ctr
      s3:registry avoid updating keys which are going to be deleted in
      s3:smbconf let drop leave the smbconf key in place to match a virgin registry.tdb
      s3: avoid reading past the end of buffer in tdb_unpack 'P' if zero termination is missing
      s3: avoid reading past the end of buffer in tdb_unpack 'f' if zero termination is missing
      s3: let g_lock_unlock() return more specific status codes on failure
      s3:dbwrap_ctdb: improve error message in transaction destructor
      s3:registry: reg_format: handle unterminated REG_SZ blobs
      s3:dbwrap: add function dbwrap_exists()
      s3:dbwrap: add specific dbwrap_exists() implementation to dbwrap_tdb
      s3:dbwrap: factor out db_rpt_search_internal()
      s3:dbwrap: add specific dbwrap_exists() implementation to dbwrap_rbt
      s3:dbwrap: add function dbwrap_parse_record()
      s3:dbwrap: dbwrap_parse_record() should always return -1 on "not found"
      s3:dbwrap: allow NULL parser for dbwrap_parse_record()
      s3:dbwrap: implement dbwrap_fallback_exists() with dbwrap_parse_record()
      s3:dbwrap: add specific dbwrap_parse_record() implementation to dbwrap_rbt
      s3:dbwrap: add function dbwrap_wipe()
      s3:dbwrap: add specific dbwrap_wipe() implementation to dbwrap_tdb
      s3:dbwrap: add specific dbwrap_wipe() implementation to dbwrap_rbt
      s3:dbwrap: fix db_rbt_traverse() to return the record count on success
      s3:smbcacls pretty print acl control field
      s3:smbcacls get_domain_sid for sddl parsing/formating from lsarpc
      s3:smbcacls add option domain-sid
      s3:smbcacls fix possible SEGFAULT
      s3:smbcacls fix leaking talloc stackframce on tcon failure
      s3:dbwrap: traverse records created within this transaction.
      s3:dbwrap: remove m_all marshall buffer from ctdb transaction.
      s3: fix id_cache_kill to delete the the id-mappig from caches
      s3: factor out messaging_send_to_children()
      s3:smbcontrol: let smbd pass the idmap msg to its children for convenience
      s3:utils change data_blob_dup_talloc() to take a DATA_BLOB by value
      s3:registry add function srprs_hive()
      s3:net: factor out interact_edit()
      s3:net: add command registry check
      s3:doc manpage for "net registry check"
      s3:net: avoid unnecessary initialization of the registry.
      s3:smbcacls: fix violation of coding conventions
      s3:net registry check: do not silently replace separators
      s3:net registry check: fix a case where automatic and read only mode take the wrong action
      s3:net registry check: improve console output
      s3:lib fix output of hex escapes > 0x7F with cbuf_print_quoted
      s3:dbwrap: do not burden the user of db_open_ctdb with ifdef voodoo
      s3:registry: write INFO/version if we create registry.tdb
      s3:dbwrap_torture: code cleanup
      s3:net registry check: handle missing version info
      s3:net registry check: adapt to new semantic of dbwrap_fetch
      s3:net registry check: adapt to new semantic of dbwrap_fetch with rbt
      s3:net: adapt idmap check to new dbwrap_fetch behavior not to return success if not found
      s3:registry: do not use regdb functions during db upgrade
      lib/util: factor out tdb_data_is_empty
      s3:registry: do not write empty value lists to registry.tdb
      s4:torture: avoid reporting error on failure of smb2.acls tests
      s4:torture: avoid reporting error on failure of smb2.streams tests
      s4:torture: avoid reporting error on failure of smb2.setinfo test
      s4:torture: avoid reporting error on failure of smb2.getinfo test
      s4:torture: avoid reporting error on failure of smb2.ioctl tests
      selftest: mark smb2 tests knownfail failing in 3.6
      selftest: samba3.smb2.compound.invalid2 works
      selftest: mark samba3.smb2.durable-open reopen tests knownfail
      selftest: mark samba3.smb2.durable-open.oplock test knownfail
      selftest: mark samba3.smb2.ioctl tests knownfail
      selftest: skip samba3.smb2.hold-oplock because its not a test
      selftest: skip samba3.smb2.session because it hangs
      s4:torture: cleanup after smb2 getinfo scan
      s4:torture: cleanup after smb2 setinfo scan
      s4:torture: use different filenames for smb2 setinfo and getinfo scan
      s4:torture: print ntstatus on failure of setup complex file in smb2 setinfo/getinfo scan
      s4:torture make a suite for smb2.*scan
      selftest: remove samba3.smb2.*scan from knownfail
      selftest: skip samba3.smb2.scan because they are no tests
      s3:selftest: ask smbtorture4 for smb2 tests
      s4:libcli/smb2: allow smb2_session_setup_spnego to handle reauth
      s4:torture/smb2: add simple smb2.session.reauth test
      s4:torture: smb2.getinfo test return status of stream creation
      s3:registry: remove usage of reg_objects from libads/ldap_printer.c
      s3:registry: remove usage of reg_objects from srv_spoolss_nt.c
      s3:eventlogadm reimplement addsource using reg_api
      s3:eventlogadm make a transaction for addsource
      s3:registry: remove usage of reg_objects from cmd_spoolss.c
      s3:registry: remove usage of reg_objects from net_rpc_printer.c
      s4:torture: add a raw.session suite with a raw.session.reauth test
      s3:registry: compile reg_create_path() & reg_delete_path()
      s3:registry: silence net_deletekey_recursive
      s3:registry: add functions to conveniently create registry_values
      s3:registry: improve debug output in reg_parse
      s3:registry: fix possible double free in import
      s3:net registry: fix output of dwords with sign bit set
      s3:net registry import: check return values + codecleanup
      s3:registry: add function registry_value_cmp()
      s3:net registry import: add option --precheck
      s3:net registry: fix violation of coding conventions
      s3:lib:dbwrap: fix return value of db_ctdb_traverse[_read] for non-persistent dbs
      s3:conn_tdb: add a function connections_fetch_entry_ext() that also takes the cnum
      s3: add a tool "cclean" to cleanup orphaned entries from connections.tdb
      packaging(RHEL-CTDB): make makespec.sh aware of new location of version.h
      packaging(RHEL-CTDB): package cclean tool
      s3:cclean: fix memory allocation
      s3:cclean avoid segfault in case of ctdb missbehaviour
      lib/dbwrap: rewrite lock order check to ease debugging
      s3:net add command "connections cleanup"
      s3:doc manpage for "net connections cleanup"
      s3:utils: remove standalone cclean tool
      s3:lib: use includes.h with cbuf and srprs
      s3:dbwrap: let dbwrap_fetch_uint32 distinguish between "not found" and "wrong format"
      s3:dbwrap: remove unused args from db_open_file()
      libtorture: factor out simple ui backend
      s3:dbwrap_ctdb: set errno = ENOSYS if clustering is not supported
      s3:auth: use const in smb_pam_xxx_session()
      s3:rpc_server/srvsvc: remove function net_enum_pipes()
      s3:lib: remove unused function connections_traverse()
      s3:smbcontrol: don't do stack_trace by connection but by server_id.
      s3:count_current_connections: do not clear orphaned entries from connections.tdb
      s3:net_status_shares: use connections_forall_read for a read only traversal
      s3:smbd: pass smbXsrv_session instead of user_struct to session_claim() and session_yield()
      s3:smbd: remove smbd_server_connection argument from session_claim()
      s3:smbd: initialize session->global before calling session_claim
      s3:smbd: use session_global_id as session number for pam and utmp
      s3:smbXsrv_session: add smbXsrv_session_global_traverse()
      s3:smbXsrv_tcon: add smbXsrv_tcon_global_traverse()
      s3:build: move sessionid_tdb.o and conn_tdb.o to SMBD_OBJ_BASE
      s3:smbd:setup_new_vc_session: traverse sessions instead of connections to shutdown other smbds
      s3:smbd/connection: use smbXsrv_tcon_traverse to count connections
      s3:lib: implement sessionid_traverse_read with smb2srv_session_traverse_read
      s3:smbd: don't use (fill) sessionid.tdb in session_claim/yield any more.
      s3:net_serverid: remove sessionid_traverse from "net serverid wipedbs"
      s3:lib: remove unused sessionid_*() functions
      s3:net_serverid: remove connections_forall from "net serverid wipedbs"
      s3:lib: remove function connections_forall()
      s3:lib/conn_tdb: implement connections_forall_read() based on smbXsrv_*_global_traverse()
      s3:smbXsrv_session: pass record in smbXsrv_session_global_traverse()
      s3:smbXsrv_tcon: pass record in smbXsrv_tcon_global_traverse()
      s3:smbXsrv_open: add smbXsrv_open_global_traverse()
      lib/util_tdb: factor out tdb_data_talloc_copy()
      s3:net: new implementation of "servid wipedbs" with smbXsrv_*
      s3:registry accept windows like long hivenames
      util_tdb: add function tdb_data_string()
      s3:net registry check: use tdb_data_string()
      s3:smbXsrv_open: factor out smbXsrv_open_global_parse_record
      s3:smbXsrv_open: add function smbXsrv_open_cleanup()
      s3:locking:brlock: use serverids_exist to validate_lock_entries
      s3:locking:brlock: let validate_lock_entries keep entries for disconnected servers in traverses
      s3:locking:brlock: add function brl_cleanup_disconnected()
      s3:locking: no need to make a file_id passed by value a constant
      s3:locking: improve debug output of parse_share_modes()
      s3:locking: add function share_mode_cleanup_disconnected()
      s3:smbd: add a scavenger process for disconnected durable handles
      s3:smbd: call scavenger_schedule_disconnected() from close normal file for durable handles
      s4:torture:smb2 delete temp memory context in test_durable_open_oplock_disconnect
      security.idl: add new security_secinfo bits
      Fix bug 9678 - Windows 8 Roaming profiles fail

Guenter Kukkukk (15):
      Fix some cut-and-paste and spelling in debug messages
      Fix the build: net_serverid.c has 3 wrong format strings for 64bit vars
      vfs_catia: add debug class for that module
      vfs_catia: fix the translation to "vfs_translate_to_windows"
      vfs_catia: fix the completely outdated manual page
      vfs_catia: add a sample for filename mapping to the manual page
      vfs_catia: add my copyright
      vfstest: fix the "-c" multiple-command option
      vfs_catia: write a testcase - add a translate command to vfstest
      vfs_catia: testcase - implement vfstest additions
      vfs_catia: testcase - add missing pieces
      vfstest: update the manual page
      samba-tool - MX records cannot be deleted (error in called C-program)
      samba-tool - MX records cannot be deleted (part2)
      s4-dns: set TTL value in the NS server part of the SOA record

Guenther Deschner (8):
      Display ace_objects in security descriptors.
      Merge commit 'origin/v3-2-test' into my_branch
      Merge commit 'origin/v3-2-test' into my_branch
      Rename krb5 locator plugin to "winbind_krb5_locator".
      Merge commit 'origin/v3-2-test' into my_branch
      fix a obscure compiler warning
      Vista SP1-rc1 appears to break against Samba-3.0.27a
      s3-winbind: Fix idmap initialization debug message.

Guy Harris (1):
      Use ENC_ values for proto_tree_add_item() calls.

Günther Deschner (1):
      winbindd: add event based machine password change.

Gémes Géza (1):
      Add a --random-password option to user create command.

Günter Kukkukk (3):
      Latest ipv6 changes broke (deprecated) smbmount, smbmnt and smbctool
      Don't try and delete a default ACL from a file.
      Fix bug 8305 - nmbd segfaults - when using "smbtree ..."

Günther Deschner (7430):
      r1692: first commit :)
      r1698: fix build.
      r1720: Show correct help for net groupmap commands.
      r1721: Get rid of compiler-warning.
      r1887: Fix deadlock loop in winbind's required_membership_sid-verification.
      r1888: Bring the same level of "required_membership"-functionality that
      r1965: add cli_setattrE (inspired by samba4-code). needed for further
      r1966: further work on and cleanup of the net-migration-tool.
      r1967: Fix a couple of krb5-DEBUG-messages.
      r1971: move counter.
      r2009: compile-fix for #1626 (spotted by Olaf Flebbe
      r2015: Reverting fix for #1474.
      r2016: Add message to ease access-control-debugging.
      r2022: Add net_copy_fileattr as a separate function to copy just ACLs, attrs
      r2057: Although rarely used, prevent "net lookup kdc" from segfaulting when
      r2067: Prevent nameless $LIBDIR/printing/.tdb from beeing created.
      r2068: Use SMB_ASSERT to track down empty printername (thanks jerry).
      r2073: Adding getprinter level 7 to rpcclient.
      r2079: Clear the publish-bit from the attributes-mask when migrating
      r2080: Remove last traces of static migration to localhost. Needed to allow a
      r2472: Fixed krb5_krbhost_get_addrinfo()-parameters and make failure
      r2474: (re-)fix memleak (initially found by jra).
      r2475: A more helpful debug-message when a connection to a dfs-proxy-share is
      r2476: now that PRINTER_ATTRIBUTE_PUBLISHED does not get reset anymore, migrate
      r2477: Document "--destination" for "net rpc [printer|share] migrate".
      r2715: Swat-i18n-Patch from Björn Jacke <bjacke at sernet.de>:
      r2732: Fixed typo.
      r2746: Fix typos in net's usage-output.
      r2752: Fix the paranoia-check to ensure the ldap-attribute and the
      r2753: Workaround for the (rather broken) _samr_query_useraliases rpc-call.
      r2771: Second (and last) part of Swat-i18n-Patch from Björn Jacke
      r2772: Check correct string length when verifying password-policies. Do not
      r2819: Make 'password history'-behaviour in ldapsam more consistent.
      r2821: Adding "Windows x64" as architecture string and driverdir "x64" for the
      r2832: Readd WKGUID-binding to match the correct default-locations of new
      r2837: Fix printer-migration w.r.t. to new naming-convention for
      r2852: Oh. Allow to migrate win2k3/xp-drivers as well.
      r2923: Fix some obvious copy/paste leftover debug-messages.
      r2942: Add client-side support of triggering ads printer publishing over msrpc
      r3137: Do not simply ignore failing idmap-module init for remotemaps.
      r3145: Add experimental idmap_rid-Plugin.
      r3146: Some cleanup for idmap_rid:
      r3151: Add the "no warranty"-section in the licence header.
      r3436: Fix build with recent heimdal-versions (0.6.3) as pointed out by Luke
      r3437: fix the build.
      r3438: fix some kerberos-related prototype warnings
      r3439: Finally fix build for platforms without kerberos.
      r3469: Fix build of smbmount.
      r3495: Fix the build (recent kerberos-changes).
      r3496: Fix calling of get_acl_group_bits().
      r3498: Optimisation of idmap_rid init: Avoid calling a DC for the domain-sid
      r3627: Allow to add dummy-form in rpcclient.
      r3628: A typo and a compile-warning.
      r3645: Allow deldriverex in rpcclient to delete drivers for a specific
      r3649: Fix a couple of rpcclient spoolss commands (setprinter, setprintername,
      r3650: Allow to call spoolss-server as "localhost".
      r3668: Fix unresolved symbols in libsmbclient.so.
      r3673: Do not fail on setting file attributes with acl support enabled.
      r3681: Fix build of libsmbclient on x86_64.
      r3709: Allow to build testsuite for libsmbclient when libsmbclient.so is
      r3711: Fix KRB5_SETPW-defines, no change in behaviour.
      r3868: Fix reverted logic of detecting HAVE_WRFILE_KEYTAB (Bugzilla 2059)
      r3875: Allow to look up at least or own sid in _lsa_lookup_sids.
      r3911: typo.
      r3912: More fixes to have proper german in swat.
      r3918: Allow to set OWNER- and GROUP-entries while setting security descriptors
      r3940: typo.
      r4127: vampire munged_dial.
      r4130: add bad_password_count and logon_count to vampire (inspired by a patch
      r4216: fix segfault in idmap_rid
      r4221: when in the multi-mapping mode of idmap_rid:
      r4226: display infolevel 12 in query_dom_info.
      r4258: strlower username, not (non-existing) domain_username.
      r4285: Allow -v or -l for displaying verbose groupmap-listing as well as
      r4286: Give back 8 byte lm_session_key in Netrsamlogon-reply.
      r4287: Vampire SAM_DELTA_DOMAIN_INFO.
      r4289: Close LDAP-Connection before retrying to open a new connection in the
      r4311: 'Document' the -L switch when adding groups with "net rpc group".
      r4312: Marking "min password length" as depreciated (to be removed in one of
      r4331: Implement SAMR query_dom_info-call info-level 8 server- and client-side,
      r4336: Apply some other samba4 SAMR idl that is just too obvious. Don't hard
      r4343: forgot to add info-level 8 to SAMR_UNKNOWN_2E as well.
      r4351: Vampire Logon-Hours. Update Logon-Hours only when they have changed.
      r4352: Base64-encode munged-dial with correct length in 'net rpc vampire'.
      r4353: Finally get length of munged_dial correct.
      r4633: Finally give rpcclient a port-command.
      r4646: Allow Account Lockout with Lockout Duration "forever" (until admin
      r4839: Allow to set acb_mask in rpcclient's enumdomusers (for debugging).
      r4840: * Add more generic root-dse inspection function to check for given
      r4847: Hand over a acb_mask to pdb_setsampwent in load_sampwd_entries().
      r4850: Fix remaining pdb_setsampwent-calls.
      r4851: Preleminary fix for ldapsam_enum_group_memberships when
      r4866: Add createdomgroup to rpcclient (needed to generate huge amounts of
      r4868: Add "net rpc user RENAME"-command.
      r4869: Display sam_user_info_7 in rpcclient.
      r4870: Make multi-domain-mode in idmap_rid accessible from outside (can be
      r4877: When vampiring account policy AP_LOCK_ACCOUNT_DURATION honour "Lockout
      r4925: Migrate Account Policies to passdb (esp. replicating ldapsam).
      r4926: Use LDAP_SCOPE_ONELEVEL instead of OpenLDAP's LDAP_SCOPE_ONE-scope.
      r4931: Add get_user_info_7 in SAMR. This just gives out the username. (In
      r4932: Forgot to increase version with the account-policy-commit.
      r4963: It is actually a very bad idea to use KRB5_CONFIG in the
      r4964: Fix our lsa lookupsid $OURDOMAINSID-500.
      r4972: Fix a warning and some debugging-outputs.
      r4988: After speaking with Jerry, remove old lp_admin_users to
      r4989: Display failed LDAP-server-uri.
      r4994: Patch from abartlet:
      r5058: Due to the fragileness how windows reacts on unmapped sids sometimes,
      r5180: Call the "add machine script" to create all kinds of trust accounts
      r5234: Do not use the "Local Unix Group"-default description for all kinds of
      r5235: Fix compile warning.
      r5262: Fix server_role in the samr_query_dom_info calls. When we are a BDC we
      r5264: Log with loglevel 0 when account-administration scripts fail.
      r5349: After talking with Jerry, reverted the addition of account policies to
      r5379: Build-Fix (#2343)
      r5444: Add adssearch.pl utility (on volkers request).
      r5511: Fix pipe-mismatch for NETDFS.
      r5522: Better handling of LDAP over IPC connections that have expired on the
      r5527: Allow own netbios name to be set in smbclient's session setup.
      r5528: Expand the invalid-workstation-scheme. Workstation-Names with leading
      r5541: Fix crash bug in the client-spoolss enumdataex-call.
      r5546: Fix some comments in "net rpc printer migrate settings"
      r5547: Fix compile warning.
      r5556: Fix the build on AIX.
      r5743: Add perl-script to check for multiple LDAP-entries on request of Richard
      r5760: Be more verbose on listing forms.
      r5776: Fix typo (found by lieschen).
      r5891: Make enum- and getform use the same form_display-function.
      r5954: Fix some compiler warnings and add missing exclude-block in "net rpc
      r5971: Check for the correct cli-struct when copying files.
      r6117: Close handles after group-creation as well.
      r6166: Derell, I'm reverting this part of -r4917 because it modifies the keys
      r7145: reuse the WINBIND_REQUIRED_MEMBERSHIP constant.
      r7391: - Added client-support for various lsa_query_trust_dom_info-calls and a
      r7529: Apply some const, remove unused variable.
      r7532: compile fix.
      r7534: Add missing cli_srvsvc_net_share_set_info-function and
      r7537: Print passwords in display charset.
      r7606: add WERR_NET_NAME_NOT_FOUND. This is what windows returns when
      r7607: Some minor fixes (typos, const)
      r7632: Cleanup "net share migrate"-code.
      r7636: Docu for "net rpc share migrate security" is now valid.
      r7807: Allow to touch mtime in vfs-recycle with
      r7876: Now that we have "net rpc share migrate security" completly remove the
      r7992: Adding PADL's idmap_ad plugin (taken from the latest
      r7994: This adds support in Winbindd's "security = ads"-mode to retrieve the POSIX
      r8019: Better give a hint that we are failing share-manipulation due to missing
      r8048: Replace "done" with "failed".
      r8133: Got approval from Luke Howard (PADL) to change the company copyright to
      r8143: Fix generate_parm_table.py:
      r8144: remove unused parameter leftover.
      r8145: When inventing a new parameter for SFU-support, be aware of Volker's
      r8155: ops, add missing function.
      r8205: try to improve readability of smbldap_search_domain_info()
      r8207: Fix my NT_STATUS_IS_OK mismatch.
      r8396: fix some compile warnings.
      r8398: Fix segfault in the client addprinterex-call. Found with "net rpc
      r8402: allow to build with --enable-aio-support.
      r8427: Printerdb has been moved into a tmp branch.
      r8428: some more old printerdb stuff.
      r8454: Fix Bug #2502
      r8493: According to MSKB 141714 the %LOGONSERVER% variable should be
      r8538: honour CC in python build.
      r8542: - (re-)add better search-semantics: look for Interdomain trust accounts
      r8675: fix some compile warnings.
      r8686: Revert %LOGONSERVER%-substitution. The substition is done on the client,
      r8786: Fix amazing and long-standing bug where user-accounts are just crippled
      r8787: Make enumeration of builtin-aliases work again.
      r8797: avoid unset rids for builtin-aliases.
      r8911: cosmetic fixes.
      r8937: allow to use non-default smb.conf in rpcclient
      r8938: fix querydispinfo search semantics.
      r8971: Fix querydispinfo (still need to look at enumdomusers) to allow to list
      r9021: Fix smbd-crash bug in openprinter (found by samba4 smbtorture
      r9029: Another crash bug when enumerating privileges.
      r9041: typo. Thanks jerry.
      r9076: fix two other issues invented along the
      r9163: Rename UNKNOWN_TYPE_10 to PAC_LOGON_NAME (merge from samba4)
      r9229: merge from trunk:
      r9522: Give better error-message when "NDS Universal Password" change fails.
      r9523: Fix password history for eDirectory
      r9736: be a little more verbose on error.
      r9897: fix build with --enable-socket-wrapper
      r9944: fix python build
      r9945: fix typos.
      r9946: allow the priv-based chown (se_take_ownership) to chown to other users
      r9952: Adapt better to the Windows way of taking and assigning ownership:
      r9953: get rid of compiler warning.
      r9955: Fix misleading comments.
      r9958: revert last commit.
      r10154: Fix crash bug on security descriptor upgrade (as seen on x86_64).
      r10170: Fix for #3056:
      r10205: fix obvious typo in the NET_USER_INFO_3 parsing
      r10210: Fix memleak.
      r10211: Fix another memleak (this time in the kerberos keytab code)
      r10261: Don't bother to peek rids in builtin-sids.
      r10262: * Fix for getgrnam not returning builtin group (which is done by getent
      r10263: Fix debug which got more instead of less confusing.
      r10270: lowercase groupnames and groupmembers again.
      r10474: We better ignore builtin SIDs from the Active Directory DC to prevent
      r10710: Fix uninitialized variable. (Thanks to Chengjie Liu
      r10782: Only parse the group rid_array in net_user_info3() when num_group is > 0.
      r10907: Handle the case when we can't verify the PAC signature because the
      r10908: Fix PIPE mismatch to make wbinfo -m work again
      r10976: Fix the build with openssl-0.9.8a.
      r10977: Get rid of tons of new warnings when building with OpenLDAP 2.3.7 or higher.
      r11183: add small helper function to return a PAC_LOGON_INFO.
      r11213: Fix the build
      r11242: use LDAP bitwise machting rule when searching for groups in ADS.
      r11790: Avoid infinite retry to gather a connection.
      r11846: Destroy the TALLOC_CTX on error in the Kerberos session setup and give a
      r11847: Fix typo.
      r11851: Display correct error string.
      r11852: Fill in samr_get_dom_pwinfo based on Samba4.
      r11853: Add Dsr_GetSiteName (handy for experimenting with GPOs).
      r11854: Remove unused DOM_SID.
      r11856: Replace unknown1 with group_attr.
      r11857: Fix the build.
      r11858: Fill in the clientside TRUSTED_DOMAIN_INFO_EX query.
      r11859: Another place where the SE_GROUP constants read better then "7".
      r11874: Merge LDAP connection setup in lib/smbldap.c and pdb_nds.c.
      r11875: Allow to use START_TLS (by manually setting "ldap ssl = start_tls") for
      r11876: When we are using START_TLS to secure the LDAP connection, we *have* to
      r11960: add 'wbinfo --separator' to get the currently active winbind_separator.
      r11963: add rpccli_samr_chgpasswd3 from samba4.
      r11964: rename flag to password_properties in SAM_UNK_INFO_1 because that's what
      r11966: fix the build\n\nGuenther
      r12015: When smbspool tries to connect to a printer shared on a standalone
      r12106: Fix return value
      r12130: display domain GUID.
      r12131: Fix it really, this time :)
      r12193: Fix some typos.
      r12273: Fix copy paste error.
      r12336: A couple of fixes and enhancements for adssearch.pl (espc. to debug
      r12338: add ifdef DEBUG_PASSWORD before printing clear text password.
      r12341: add DEBUG statement.
      r12406: Since w2k3 sp1 we fail to create user accounts using e.g. "net ads user
      r12407: Fix returning wrong error codes and better sort out errors and stdout
      r12414: Remove the unnecessary SMB_STRDUP in server_role_str() + reuse the role
      r12415: Forgot newlines.
      r12441: Fix python build.
      r12452: Fix Bug #3053 to allow esp. older eDirectory releases to load our LDAP
      r12714: Fix segfault in pdb_nds.c.
      r12742: Don't write null sid mappings into the winbindd_cache.tdb.
      r12787: Revert last commit that removed our logic of memorizing negative
      r12788: Since we have agreed on the case of winbindd names, we can store a
      r12853: Fix segfault in "net rpc vampire|samdump" (Bugzilla #3390).
      r12900: Merge from trunk:
      r12901: Fix netfileenum returning WERR_BUF_TOO_SMALL.
      r12904: Fix #3264, allow to load idmap_ad with "idmap backend = ad".
      r13020: Prevent cli_krb5_get_ticket of getting into an infite loop. This whole
      r13024: Add is_null_sid.
      r13162: Allow to set the flags for a ds_enum_domain_trusts query in rpcclient.
      r13290: Adding Account Policy LDAP attributes for eDirectory schema.
      r13375: Match XP behaviour: Don't force 'Administrator' to change an expired
      r13377: Fix from Volker: Make offline authentication work with NT4 as well
      r13391: Only fall into password change when ACB_PWNOEXP is not set
      r13408: Remove C++ comments (# 3494)
      r13409: No functional changes, just some DEBUG cleanup.
      r13410: Dump a netbootGUID as a GUID.
      r13442: Implement samr_chgpasswd_user3 server-side.
      r13443: Fix the build.
      r13444: Add REJECT_REASON_OTHER for samr_chgpasswd_user3
      r13445: We already made the decision whether to include the dominfo and
      r13448: Fix the build (again).
      r13451: Fix build warning.
      r13492: As noone objected on the mailing-list:
      r13495: Derell, I'm removing that double setup_logging(), just a typo.
      r13522: Add SAMR_GET_USRDOM_PWINFO client-side.
      r13523: Fix indent.
      r13566: Fix EA support for AIX.
      r13581: Correctly parse a non-null terminated, little-endian UCS2 string in the
      r13622: Allow to rename machine accounts in a Samba Domain. This still uses the
      r13625: Now that Heimdal 0.7.2 is released, we reenable our strict checking for
      r13639: Never overwrite the acct_flags in rpccli_netlogon_sam_network_logon().
      r13657: Let winbindd try to obtain the gecos field from the msSFU30Gecos
      r13660: Attempt to better handle the failure that we cannot find our sid upon
      r13711: * Correctly handle acb_info/acct_flags as uint32 not as uint16.
      r13720: Only lockout Administrator after x bad password attempts in offline-mode
      r13861: Avoid "net rpc join" segfaulting when storing the servername in the
      r13864: Some cleanup and the samr set security object function client-side.
      r13945: Move display_sec.c to lib/ (as suggested by Volker).
      r13965: Make sure we always reset the userAccountControl bits when re-joining
      r14049: Found some more MSV1_0 bits and their behaviour;
      r14050: Add the ACB_PWEXPIRED bit abartlet has found.
      r14051: Add remaining (documented) userAccountControl bits, thanks to Luke
      r14060: Only set the last rebind timestamp when we did rebind after a non-read
      r14061: Some debugging for the new LOGON/ACB-flags.
      r14062: Forgot those in the uint16/32 acb_info switch.
      r14074: Some cleanup; there is no point in declaring and mapping
      r14076: When the backends trusted_domains call comes back with no trusts the
      r14129: Add the group sids from the Kerberos PAC to the user token.
      r14130: Remove make_server_info_pac alltogether, make_server_info_info3 does
      r14144: allow to set sec_info in rpcclients lsa_query_secobj.
      r14145: Add missing WITH_KCM hunks from my local tree.
      r14146: Just some typos.
      r14148: Removing the not very well tested krb5 ticket refresh handling activated
      r14321: When we have libnscd and winbindd comes (back) online, try to flush the
      r14329: Fix the build on systems without libcom_err.
      r14368: Remove redundant set of logon flags (now in rpc_netlogon.h).
      r14392: Use KRB5_TGS_NAME.
      r14443: rework get_md4pw() to ease debugging. The only functional change is that
      r14467: Reverting 13660. This needs to be fixed differently.
      r14468: Better fix to avoid winbind panic when we have an inproper configuration
      r14474: Also flush the nscd caches before entering the main winbindd loop.
      r14493: There is no point in falling back to a samlogon when a krb5login has
      r14495: Allow to play with the logon_param flag when testing samlogons.
      r14496: Add WBFLAG_PAM_GET_PWD_POLICY bit to only callout for domain password
      r14503: Fix principal in debug statement.
      r14505: Rename the timed_event to lockout_policy_event.
      r14506: Remove remaining references to a KCM credential cache type.
      r14507: Re-disable accidentially re-enabled paranoia check. This should make
      r14508: Return PAM_SUCCESS in pam_sm_close_session when there is no KRB5CCNAME
      r14513: Fix winbindd_chauthtok: only fallback when the chgpasswd3 call is not
      r14514: Fixing last commit. Thanks Volker.
      r14576: Skip remaining keytab entries when we have a clear indication that
      r14579: Add REJECT_REASON_OTHER in the rpcclient chgpasswd3.
      r14585: Tighten argument list of kerberos_kinit_password again,
      r14597: Merge DCERPC_FAULT constants from Samba 4.
      r14611: Fix init_creds_opts issue jerry discovered when using MIT krb5 1.3:
      r14643: Merge dcerpc_errstr from Samba 4.
      r14645: No idea how this happened, fixing the build.
      r14646: Adding samr querygroup infolevels 2 & 5.
      r14674: Further cleanup for cached logins, only dump hashes with DEBUG_PASSWORD.
      r14675: Protect against null sids and rids in the cached credentials functions.
      r14682: Small cleanup in ads_verify_ticket.
      r14753: Fix the kerberized pam_auth: As we could have created a new credential
      r14756: Make smbpasswd -a root work for eDirectory where there is no "account"
      r14757: Make sure we only send out a CLDAP request to an connected AD server.
      r14758: Fix broken LDAP search filter.
      r14841: Fix IRIX build --with-pam.
      r14940: Remove pam_winbind's ability to create home directories on it's own.
      r15037: Adding iniParser (http://ndevilla.free.fr/iniparser/), a free inifile
      r15038: Replace all code in pam_winbind that relied on access to samba
      r15040: Stripping the parametric options in pam_winbind and use
      r15041: Adding rpc client calls to manipulate auditing policies on remote CIFS
      r15043: Only build our copy of iniparser when the system doesn't have one.
      r15044: Fix the build. (void returning non-void).
      r15058: Add sample pam_winbind.conf file.
      r15080: As discussed with Jerry, remove the CAP_LIBS again (we don't need that
      r15123: Don't even try to join with an inproper configuration.
      r15150: Adding winbind debug class to the main daemon.
      r15194: We need to be able to join as PDC as well. Thanks to Andrew Bartlett.
      r15198: Mention the auditing tool in "net rpc help".
      r15228: Fix -n winbind option which has become meaningless with the persistent
      r15229: Save useless roundtrips in pam_auth (fallback to samlogon) when we know
      r15240: Correctly disallow unauthorized access when logging on with the
      r15243: Sorry for the breakage:
      r15244: Fix debug typo.
      r15250: dump some more sids.
      r15251: Adding PreWin2kAccess builtin sid.
      r15305: Let winbind search by sid directly (or in windows terms: "bind to a
      r15306: Be consistent between rpc and ads winbind backend: let the ads backend
      r15307: Ignore builtin groups we're a member of on the DC as those memberships
      r15308: Fix the build, sorry.
      r15392: In most cases, this mapping is more appropriate. (I know, it is still a
      r15396: Cleanup credential caches from winbind's linked list.
      r15398: Attempt to send the correct warning when a password change was attempted
      r15399: Fix the build, sorry, Jerry :)
      r15411: Small debug fixes for the PAM module.
      r15417: Don't use cached credentials when changing passwords.
      r15428: Add "smbcontrol winbind onlinestatus" for debugging purpose.
      r15438: Fix samrQueryDomainInfo level 5 where we returned our netbios
      r15441: cleanup older unused padding.
      r15442: Add some more client rpc for the querydominfo calls (from samba4 idl).
      r15443: Purely cosmetic reformat, no functional changes.
      r15452: Again purely cosmetic reformat of the samr query domain info calls.
      r15453: Process all the supported info levels in the samr_query_domain_info2
      r15454: As testing, documentation and samba4 idl indicate that there is no known
      r15455: Add rpccli_samr_query_dom_info2() and return the comment string in
      r15460: Prefer to use the indexed objectCategory attribute (instead of
      r15461: Free LDAP result in ads_get_attrname_by_oid().
      r15519: Fix segfault.
      r15523: Honour the time_offset also when verifying kerberos tickets. This
      r15526: Avoid double \n.
      r15528: Make the existance of the /etc/security/pam_winbind.conf file
      r15541: Only ever store a user's password in a WINBINDD_CCACHE_ENTRY struct when
      r15542: Close the LDAP connection and free the struct, regardless whether the
      r15546: When debugging is enabled be just a little more verbose in logging in
      r15552: Fix segfault...
      r15553: minor rpcclient cleanup: length is already set in data_blob.
      r15558: Do not wait endless for a CLDAP reply when the LDAP server is
      r15559: Smaller fixes for the new cldap code:
      r15632: Remove length limitation from the winbind cache cleanup traversal.
      r15633: Minor smbldap/pdb_ldap cleanup
      r15634: Prevent passwords of winbindd's list of credential caches from beeing
      r15649: Allow to store 24 password history entries in ldapsam (same limit as on
      r15696: Free LDAP search result.
      r15697: I take no comments as no objections :)
      r15698: An attempt to make the winbind lookup_usergroups() call in security=ads
      r15703: Fix d_printf call.
      r15704: Prefer LDAP error codes in ads_search_retry_sid().
      r15976: Set our internal domains to "online" by default in winbindd.
      r15977: Fillup the password_policy method in winbindd for winbindd_passdb. This
      r15980: Correctly destroy talloc_ctx when the LDAP posix attribute query has
      r15982: Fix confusing order of DEBUG statements in winbindds pam_auth.
      r15983: Honour the krb5 principal name change (of the new ads join code) in the
      r15984: Correctly handle the case when there is no configuration file for
      r15985: Adding "own-domain" switch to wbinfo which is handy from time to time.
      r16080: Re-add accidentially excluded in-forest domain trusts (fixes bug #3823).
      r16114: Make winbindd's group enumeration (set|get|endgrent) work again (when
      r16115: Make "net ads changetrustpw" work again.
      r16117: Make winbindd work again in security=ads.
      r16121: Fix a eDir related memory leak.
      r16122: As we use 'inetOrgPerson' as structural objectclass for new accounts for
      r16154: Fix winbind function table typo.
      r16187: Fix memleak.
      r16190: Fix more memleaks.
      r16192: Fix timeformats in the winbind response struct.
      r16221: No need for friednly error messages at log level 10.
      r16222: Fix DEBUG statements.
      r16253: Fix another host/ UPN case in (the currently unused)
      r16261: Smaller fixes for net ads password.
      r16268: Add TCP fallback for our implementation of the CHANGEPW kpasswd calls.
      r16269: Fix the build.
      r16272: Fix memleak.
      r16344: Allow to set passwords directly when creating users via "net rpc user
      r16345: Improve the chance that our users can discover one of the coolest 'net'
      r16346: Allow to exit a "net rpc shell" with 'quit' or 'exit'.
      r16349: Another fix to make winbind more robust in large domains:
      r16350: Fix the build.
      r16415: Also delete object files from iniparser.
      r16452: Fix memleak in the CLDAP processing (found by valgrind).
      r16453: Fix another memleak.
      r16458: Increase debuglevel of cli_rpc_pipe_close().
      r16473: There is no point in calling set_dc_type_and_flags() before each
      r16474: There is no point in figuring out lockout policies if we do not allow
      r16475: destroy talloc ctx when we weren't able to collect onlinestatus
      r16479: When dcip_to_name failed to get the name of the ip in saf_servername we
      r16480: (Ugly) workaround before the set_dc_type_flags & friends cleanup:
      r16521: Fix different extended_dn handling for win2k/2k3 (thanks to Frederic
      r16719: Automatically chase referrals, support LDAP fast bind exended operation
      r16790: Fix memleak.
      r16797: Add msdfs proxy junctions in the netdfs rpc enumeration.
      r16799: Fix remote smbd crash bug by removing half-implemented info level 4
      r16823: Allow to call wbinfo --domain-info="" or --domain-info="." to get domain
      r16836: When receiving a CLDAP reply make sure that we always store the correct
      r16861: Fixing crash bug when passing no domain/realm name to the CLDAP request.
      r16862: Reverting accidential changes in ads_try_connect() from previous commit.
      r16939: Still clear the winbind_cache.tdb when offline logons are not enabled.
      r16940: libnscd sets errno, use that to display error message.
      r16941: Fix crash bug when the pam conversation receives an empty token.
      r17086: Re-add ability to contact remote domain controllers with the "net ads"
      r17102: Fix segfault in libnss_wins [bugzilla #3937].
      r17365: Fix memleak.
      r17366: Save the logon script path from the info3 in the PAM session allowing
      r17453: Fix msdfs RPC management (this broke with the autogenerated dfs rpcs).
      r17454: Adding dfs_EnumEx for rpcclient (Samba4 IDL to follow).
      r17677: There is no need for a 2nd krb5_to_nt_status function, is there?
      r18158: Stop winbindd from accumulating memory creds infinitely when doing
      r18162: Close socket when the CLDAP request has failed.
      r18165: Fix memleaks.
      r18167: Adding DEBUG() to winbinds refresh seqnum to track down a failure.
      r18170: Make sure to actually get the printing data before trying to publish it
      r18172: Just a little more verbosity in this debug statement.
      r18174: Do not return "success" when we failed to write in the CLDAP code.
      r18175: Forgot to call asn1_free() in previous commit.
      r18177: Some build- and memleak-fixes for the (not build by default) ADS GPO
      r18259: Fix the non-krb5 builds.
      r18422: Use LDAPMessage in idmap_ad as well.
      r18425: Fix ads_ntstatus(). LDAP_SUCCESS should really map to NT_STATUS_OK.
      r18484: Start some cleanup on pam_winbind's syslogging:
      r18508: A query for the LDAP schema can never be done anonymously against AD.
      r18510: Protect against storing null-sids in the winbind cache.
      r18511: Ops, fix the build.
      r18512: Add krb5conf file environment to debug statement.
      r18619: Add rpcclient helper for samr_querydispinfo2|3 for testing.
      r18620: Fallback to non-paging LDAP searches in ads_do_search_retry_internal()
      r18621: Fix samr server build.
      r18622: Fix at least the python bindings *build*, I'm sure there is much more to
      r18670: Fix memleaks.
      r18677: quickly add samr_GetDisplayEnumerationIndex for debugging to rpcclient.
      r18678: Fix the build. (never commit before breakfeast).
      r18679: Fix the build.
      r18680: Fix last struct uuids (in uncommented code).
      r18681: Although we have commandline completion in rpcclient, just also allow
      r18697: Make sure that adssearch.pl does not
      r18703: Fix the annoying effect that happens when nscd is running:
      r18707: Fix the build when you have libnscd installed (which apparently no host
      r18710: Prevent that our offline cache can get outdated after a password change.
      r18732: Fix build warning as pointed out by Volker.
      r18799: Prepare query_disp_info to use the next idx from the last result entry
      r18801: Fix (at least the build of) python bindings.
      r18816: Fix some build warnings.
      r18817: Enable the build of the gpo tool but do not make it available yet.
      r18818: Forgot header file.
      r18819: Fix build without LDAP.
      r18820: Comment out some unused functions.
      r18841: Protect against potential event loop when someone is using "winbind
      r18842: Protect against "winbind cache time = 0" on two other occasions.
      r18852: Fix compiler warning (thanks Volker).
      r18853: Fix remaining warnings. Volker, should be fine now.
      r18871: Fix copy/paste mixup.
      r18879: Fix crash for "net ads gpo list".
      r18902: Also dump mS-DS-CreatorSID.
      r18921: Fix some c++ warnings.
      r18922: Apply some const.
      r18923: Fix more memleaks.
      r18924: Minor cleanup.
      r18926: Add some useful macros.
      r18928: Some more const for iniparser.
      r18935: Make "netshareenum" work again. There is most probably a better way to
      r18941: Minor cleanup in ads_parse_gpo().
      r18969: Fix typo.
      r18982: Move the gpo related functions to "libgpo".
      r18983: Add some comments for the LDAP based GPO routines.
      r18984: Removing ads_gpo_get_sysvol_gpt_version() which was just doing stupid
      r18985: Add parse_gpt_ini() to parse GPT.INI files using iniparser.
      r18986: Add some more GPO download helper functions.
      r18987: Add some usage prints for "net ads gpo".
      r18988: Check and refresh expired GPOs.
      r19002: Add a very simple synchronisation function to download the full GPO.
      r19003: Finally activate "net ads gpo".
      r19039: Do not segfault in "net ads printer info" when a requested printserver
      r19094: Fix debug statement.
      r19095: Fix some compile warnings.
      r19143: getdcname on the NETLOGON pipe returns WERROR, not NTSTATUS.
      r19160: Add new WERR codes seen by working with NETLOGON getdcname.
      r19161: Add NET_GETANYDCNAME (getdcname only gives the PDC while getanydcname
      r19189: No display name is normal for some GPOs.
      r19206: Jeremy, for some reason storing a value-less entry in TDB does not work
      r19243: Fix debug statement.
      r19254: Make sure to also wait 35 seconds to receive a Netlogon GETDC reply
      r19255: Add blacklist of accounts when NSS initgroups calls are coming in and
      r19263: Be more accurate in telling what the sitename problem is in this DEBUG
      r19340: Wait longer then 10 seconds for a samr_query_groupmem lookup to succeed.
      r19345: Allow better rootdse searches.
      r19348: Fix uninitialized dictionary handle, found by valgrind.
      r19349: Fix invalid free on the PAM_WINBIND_PWD_LAST_SET data.
      r19351: Also export the info3 profilepath via the PAM_WINBIND_PROFILEPATH data
      r19353: Add "timeout" command for rpcclient.
      r19354: adjust usage printf for rpcclient's timeout command.
      r19355: Add getdispenumindex2 wrapper for rpcclient.
      r19368: Use WINBINDD_CACHE_TDB_DEFAULT_HASH_SIZE whereever the winbindd tdb is
      r19371: Add two missing refresh_sequence_number calls where they are missing
      r19391: Fix crash bug within the winbind caching method.
      r19394: When we fail to get the list of trusted domains, make sure to return
      r19414: gencache is getting really important now, make sure that lp_lockdir
      r19415: oh la la, always compile before commit, I'm very sorry.
      r19416: Fix some c++ warnings.
      r19493: There is no point in prompting for a user's password in "net ads" when
      r19494: When building with a static Heimdal, make sure not to link against
      r19524: Stop "net ads user delete" from doing funny things.
      r19525: Fix the same error in "net ads group delete".
      r19526: Fix minor memleak.
      r19527: Fix double free in "net ads group add".
      r19528: Fix container handling for "net ads user" and "net ads group" functions
      r19646: Fix memleak in the default_ou_string handling. Thanks to David Hu
      r19651: Fix interesting bug with the automatic site coverage in Active Directory:
      r19652: Trying to track down which caller tries to store a 0 length domain name
      r19745: For the fun of it, add an CLDAP client written in perl.
      r20171: Don't delete the krb5 credential if others still reference to it.
      r20183: Fix the build.
      r20186: Fix winbind crash bug in WINBIND_GETGROUPS.
      r20239: Parse the configfile for pam_sm_setcred as well
      r20240: Be a little more verbose about the credential flags when the debug flag
      r20241: Slightly improve readability of the pam_vsyslog replacement function.
      r20249: Fail when parsing invalid options in _pam_parse.
      r20254: The pam_chauthtok needs to go through the async interface as well.
      r20273: Map KRB5_KDCREP_SKEW to NT_STATUS_TIME_DIFFERENCE_AT_DC.
      r20279: Fix winbind segfault in winbindd_getsidaliases.
      r20304: Smaller fixes for pam_winbind:
      r20512: Fix typo.
      r20536: In the offline PAM session close case the attempt to delete a
      r20630: Fix some trivial memleaks.
      r20651: Fix "password expires soon" warning message for pam_winbind.
      r20687: Implement grace logons for offline authentications in pam_winbind.
      r20828: Fix the build with libnscd.
      r20848: Minor typo.
      r20860: Adding some small tweaks. When we have no sitename, there is no need to
      r20861: We only use sitespecific DNS lookups when looking for DCs or KDCs, not
      r20862: When in disconnected mode there is no need to try a fallback to a site
      r20874: We need to distinguish client sitenames per realm. We were overwriting
      r20970: Allow to define workstation for samlogon in rpcclient (for testing).
      r21003: Display LDAP base in debug statement.
      r21016: Fix pam_sm_setcred again.
      r21018: Removing the set_domain_online_request again in trustdom_recv().
      r21019: Fix typo.
      r21020: Some pam_winbind fixes:
      r21021: Fix memleak.
      r21033: To make the logs a bit more readable let the winbind dc connect child
      r21056: Moving the set_domain_online_request to fork_domain_child() (formerly
      r21098: When get_dc_name_via_netlogon() in get_dcs() fails to find a trusted DC
      r21105: Quick fix for CLDAP reply without NetLogon attribute.
      r21106: We neither need a account lockout policy handler nor a check domain
      r21110: Fix kinit with Heimdal (Bug #4226).
      r21117: Add rpccli_samr_chgpasswd_user to rpcclient for testing.
      r21122: Simplify code in pam_winbind a bit.
      r21143: Fix wrong check for pam error codes for getpwnam and lookup winbind
      r21144: Create more accurate warning message when the pam_winbind chauthtok has
      r21145: Convert some int to BOOL in pam_winbind (only in 3_0).
      r21146: Fix debug typos.
      r21149: Only say we are a groupmember for the optimized (rid 513) membership
      r21152: Correctly omit pam conversations when PAM_SILENT has been set by the
      r21154: Add PAM_WINBIND_LOGONSERVER, also merge the various pam_set_data calls.
      r21155: Forgot one _PAM_LOG_STATE_DATA_STRING call (only in 3_0).
      r21158: Add _pam_setup_krb5_env() and _pam_warn_logon_type() functions for
      r21159: Cleanup pam_sm_chauthtok() in pam_winbind:
      r21160: Some more pam_winbind fixes:
      r21161: Another fix for pam_winbind: Move the entire pwd expiry handling into
      r21237: Forgot configure checks in 3_0 (3_0_25 is fine) for heimdal kinit fix.
      r21238: Fix tab indent in self-written krb5.confs.
      r21240: Fix longstanding Bug #4009.
      r21308: Fix some typos and ensure to null terminate the correct strings.
      r21309: Add PRINTF_ATTRIBUTE checks for log statements.
      r21310: Fix invalid printfs in pam_winbind.
      r21318: Fix Bug #4225.
      r21320: Display query_user info level 16 in rpcclient.
      r21336: Fix indent (as pointed out by Volker).
      r21345: Smaller fixes for adssearch:
      r21349: Fix memleak in ads_upn_suffixes().
      r21352: Let ads_upn_suffixes() return a pointer to an array of suffixes.
      r21353: In the turn of tracking down nss_winbind related bugs on Linux:
      r21357: Fix typo.
      r21358: Some more debugging for _nss_winbind_initgroups_dyn() on Linux.
      r21382: Important fix for winbind when using non-AD domains.
      r21387: Another important fix for non-AD domains:
      r21393: Fix typo.
      r21394: Prevent nscd crash due to potential NULL pointer dereference in
      r21450: No need to TALLOC_FREE twice here.
      r21454: Fix debug typo.
      r21500: Fix inappropriate creation of a krb5 ticket refreshing event when a user
      r21517: Fix build warnings.
      r21536: Fix copy/paste typo.
      r21537: Avoid to trigger the confusing "cached entry differs." warning when
      r21540: Fix Bug #3713 and readd reporting what the profiles tool does (when
      r21543: Fix 64bit build warning.
      r21556: Remove superfluos return check in ads_keytab_verify_ticket().
      r21557: indent only fix. No code change.
      r21558: Safe more indent, again no code changes.
      r21560: Convert name_to_fqdn to BOOL.
      r21561: It makes absolutely no sense to call krb5_kt_resolve() two times
      r21774: Fix the build with Fedora Core 6.
      r21822: Adding experimental krb5 lib locator plugin.
      r21854: Add gfree_interfaces() to gfree_all().
      r21855: Fix a memleak in the krb5 locator and comment out gfree_all() which doesn't
      r21857: Stop pretending to be Vista in the %a macro towards Samba clients.
      r21858: Fix typo.
      r21887: Fix annoying bug where in a pam_close_session (or a pam_setcred with the
      r21998: Fix tdb keynames in netsamlogon_clear_cached_user().
      r22056: Adding some missing proto_exists calls (for PAM and NSS modules)
      r22058: Add test_nss_modules to check NSS modules for unresolved symbols.
      r22376: Make sure we use krb5 when we identify just an older heimdal lib (0.6.x)
      r22402: Fix build warning.
      r22459: Adding ads_get_dn_from_extended_dn(), in preparation of making ranged LDAP
      r22460: Adding a generic ads_ranged_search() function.
      r22461: Use ranged LDAP queries in lookup_usergroups_member() and start to optinmize
      r22463: Add prototype.
      r22465: Last attempt to fix the build before dinner.
      r22466: Fix build warning.
      r22467: Adding configure check for -Werror-implicit-function-declaration and use it in
      r22468: Fixing implicit declaration of krb5_set_default_tgs_ktypes (which is hidden by
      r22479: Add "net ads keytab list".
      r22480: Remove accidentially comitted getpeereid hunks again.
      r22483: Attempt to fix the build.
      r22484: Check for the talloc_strdup to succeed.
      r22511: Remove unused LDAPMessage.
      r22524: Fix memleak.
      r22636: Fix logic bug.
      r22643: Don't clear cached U/SID and UG/SID entries when we want to logon offline.
      r22644: Fix memleak.
      r22647: Avoid leaking a full info3 structure on each winbindd cached login by making
      r22655: Call correct free-macros in netsamlogon_cache_get() error paths. Forgot those
      r22663: Restructure kerberos_kinit_password_ext() error path.
      r22664: When we have krb5_get_init_creds_opt_get_error() then try to get the NTSTATUS
      r22666: Expand kerberos_kinit_password_ext() to return NTSTATUS codes and make
      r22737: Fix crash bug (info3 is now talloced).
      r22794: Add "debug_state" and "silent" to pam_winbind.conf template. Honor the silent
      r22796: Add security descriptor to GROUP_POLICY_OBJECT structure (in preparation of
      r22797: We are only interested in the DACL of the security descriptor, so search with
      r22798: Add the "apply group policy" access bit (as seen in type 0x05 ALLOWED OBJECT
      r22799: Fix the build.
      r22800: Add GPO_SID_TOKEN and an LDAP function to get tokensids from the tokenGroup attribute.
      r22801: Pass down the token to add_gplink_to_gpo_list().
      r22802: Add dummy gpo_apply_security_filtering() call.
      r22803: Add some more flesh to the GPO security filtering (still very basic).
      r22901: When an AD account has UF_DONT_REQUIRE_PREAUTH set we need to fallback to ntlm
      r22903: Now that we have the on-disc trustdomaincache with type flags we can better
      r22904: Fix indent.
      r22928: Use better success error code.
      r23121: Fix Bug #2727 and let pam_smbpass at least link and dlopen correctly again.
      r23127: Fill in some more netlogon dsgetdcname flavours (netr_DsRGetDCNameEx,
      r23128: Fix typo.
      r23210: Very funny, we thought to use netr_GetDcName (e.g. in winbind) but were using
      r23354: Fix build warning.
      r23355: Fix some more build warnings.
      r23380: netr_getdcname returns WERROR not NTSTATUS.
      r23484: When chasing AD referrals make sure to honor the base returned from the server.
      r23562: Add dump_event_list() for debugging the event list.
      r23563: Add dump-event-list command to smbcontrol.
      r23564: Handle MSG_DUMP_EVENT_LIST only in winbindd for now.
      r23565: Avoid double NULL pointer checks.
      r23568: Remove last traces of Heimdal KCM support (and don't misuse wbinfo where a
      r23569: Also dump fd_event in dump_event_list().
      r23582: Fix event based krb5 ticket refreshing in winbindd.
      r23586: Fix heimdal path in the krb5 renew routine when we need to compose the tgt
      r23587: Cleanup redundant code in the krb5 renew function.
      r23588: Some more cleanups and error checks in the krb5 renew function.
      r23607: Add legacy support for Services for Unix (SFU) 2.0.
      r23608: Just inline comment cosmetics.
      r23609: Removing more redundant codepaths out of smb_krb5_renew_ticket().
      r23621: Merge samba4 dfs rpc idl.
      r23622: regenerate dfs rpc gen_ndr.
      r23623: Fix rpcclient and rpc_server with new DFS idl.
      r23624: Merge dos error code from samba4 (returned from dfs_Enum against w2k3 as soon
      r23625: Reformating WBFLAGs, just a cosmetic change.
      r23627: Allow to pass down the lookup-level to rpccli_lsa_lookup_names().
      r23628: Add LSA lookupnames_level to rpcclient.
      r23630: Found out what LSA_LOOKUP_NAMES level 5 means:
      r23646: Generalize our internal keytab handling to support a broader range of default
      r23647: Use smb_krb5_open_keytab() in smbd as well.
      r23648: Allow to list a custom krb5 keytab file with:
      r23649: Fix the build (by moving smb_krb5_open_keytab() to clikrb5.c).
      r23650: Fix remaining callers of krb5_kt_default().
      r23651: Always, always, always compile before commit...
      r23654: Remove misleading inline comment.
      r23672: Allow msrpc_name_to_sid() to be called without a domain_name and just a name.
      r23766: Add GTYPE_SECURITY_UNIVERSAL_GROUP define.
      r23767: Add GTYPE_SECURITY_UNIVERSAL_GROUP to adsearch.pl as well.
      r23770: Some minor cleanups in libgpo
      r23771: Merge useful W_ERROR_NOT_OK_RETURN macro from samba4.
      r23772: Add ads_find_samaccount() helper function.
      r23817: Dump some more guids in adssearch.pl.
      r23818: support LDAP_SERVER_SEARCH_OPTIONS_OID in adssearch.
      r23820: Display security_ace_object in LDAP security descriptors for debugging.
      r23824: Add ls alias for lazy typers like me.
      r23825: Add ".." command as an alias to "cd ..".
      r23826: Fix gpo security filtering by matching the security descriptor ace's for the
      r23827: Fix schema dump.
      r23829: Add ads_get_attrname_by_guid().
      r23833: Document ads_find_samaccount().
      r23834: Allow to pass an ADS_STRUCT pointer down to the dump function callback in
      r23835: Pass down a struct GUID to ads_get_attrname_by_guid() directly.
      r23836: Add ads_config_path() and ads_get_extended_right_name_by_guid().
      r23837: Pass ADS_STRUCT and TALLOC_CTX down to ads_disp_sd.
      r23838: Allow to store schema and config path in ADS_STRUCT config.
      r23839: Try to get the attribute name from schema GUIDs or the display name from
      r23840: Fix the build.
      r23841: Show all acl types when displaying a security descriptor.
      r23842: Attempt to fix the build with LDAP.
      r23861: Fix return code in ads_find_samaccount().
      r23869: Protect against partial security descriptors.
      r23870: Use GPO_LINK_TYPE in GROUP_POLICY_OBJECT struct.
      r23871: The snapin handler needs to have the full struct GROUP_POLICY_OBJECT.
      r23872: Dump all GPFLAGS in dump_gpo().
      r23873: Make use of ads_find_samaccount().
      r23874: Some more minor edits for net ads gpo.
      r23920: Fix debug statement.
      r23921: Remove GPO_SID_TOKEN struct and use nt_user_token instead, that already has
      r23928: Merge all "copy-info3-groups-to-sid-array" blocks to a sid_array_from_info3()
      r23929: Deleting gpo_sd_check_trustee_in_sid_token() as nt_token_check_sid() is what we
      r23937: Use ads_config_path() when we need to know the configration context.
      r23951: Fix segfault.
      r23968: Harmonize net's password prompts.
      r23969: Some helper routines to retrieve a PAC and PAC elements.
      r23970: Allow to set the debuglevel at which to dump the PAC logon info.
      r23971: Prevent build failures.
      r23973: For debugging, add (undocumented) net ads kerberos commands (kinit, renew,
      r23976: Move authdata.o to LIBADS_SERVER_OBJ.
      r24023: Correctly support REG_BINARY in registry_push_value() and
      r24024: Minor cleanup in ads_parse_gp_ext().
      r24066: Fix memleak found by Volker. We don't leak keys now with MIT and Heimdal.
      r24250: Merge W_ERROR_HAVE_NO_MEMORY macro from Samba 4.
      r24251: Neverending fun:
      r24252: Dump guid of msExchMailboxGuid when returned.
      r24360: Make ndr_print_debug_helper() output readable.
      r24413: Minor edits for libgpo.
      r24416: Some more minor edits for libgpo, mostly reformatting and moving of functions.
      r24418: Adding reg_deleteallvalues().
      r24419: Hm, I think this protoype is not required here.
      r24420: Pure pedantism: the talloc_init could have failed...
      r24421: Ignore long #defines (like for registry keys).
      r24424: Fix the build.
      r24432: Expand kerberos_return_pac() so that it can be used in winbindd.
      r24434: Simplify winbindd_raw_kerberos_login().
      r24435: Fix typo.
      r24437: Remove "done" in winbindd_raw_kerberos_login() as well.
      r24438: Use dump_data_pw() instead of dump_data() on sensitive data in winbindd.
      r24573: Fix build without LDAP. Thanks Volker for pointing this out.
      r24578: Fix build warning.
      r24579: Merge error reporting to the end of winbindd_pam_auth().
      r24583: Make sure we don't accept invalid request options.
      r24584: Merge all pam post-processing code (in particular all extra_data code) into
      r24615: Say for which domain the getdcname request failed.
      r24632: Fix build warnings.
      r24654: Adapt to coding conventions.
      r24711: Remove unused talloc context from query_user_list rpc.
      r24713: Fix obvious error in enum_dom_groups. We were returning NT_STATUS_OK when the realloc failed.
      r24714: Fix confusing indent.
      r24733: Add support for storing DATA_BLOBs in gencache.tdb (including torturetest).
      r24734: Move nss_err_str() to a more public place.
      r24737: Remove older TODO: Convert internal_resolve_name() and friends to NTSTATUS.
      r24739: With resolve_ads() allow to query for PDCs as well.
      r24740: Fix the build.
      r24742: Add experimental DsGetDcName() call (will be used by krb5 locator for fine
      r24743: Fix build warning.
      r24746: As the winbindd pipe is officially broken since a while: split out request
      r24747: Add WINBINDD_DSGETDCNAME call.
      r24748: Remove all dependencies to samba internals and convert the krb5 locator plugin
      r24749: Increase debuglevel.
      r24752: Make sure to return properly when the locator is called from within winbindd.
      r24769: Merge error handling for locator plugin.
      r24776: Remove accidentially commited flag checks.
      r24778: Make sure krb5 locator requests go to a separate locator winbind child.
      r24781: Fix build warning.
      r24783: Remove unused off_t type.
      r24785: Put checks in parentheses.
      r24786: Fix another build warning.
      r24797: Fix logic in dsgetdcname().
      r24799: Prefer IP address to dns name when replying in winbindd dsgetdcname.
      r24801: When told to ignore the winbind cache also do so while trying to store entries.
      r24804: As a temporary workaround, also try to guess the server's principal in the
      r24805: When we can build the locator, build it.
      r24806: Fix the build, sorry...
      r24807: Add WINBINDD_LOCATOR_KDC_ADDRESS env which will be used for the case when the
      r24832: In the winbind-locator recursion case, try to pick up the kdc from the
      r24833: Move locator to nsswitch (does not belong to libads anymore).
      r24838: Now for real: build the locator, if we can.
      r24841: The locator has no dependencies to ldap libs anymore. Also fix the build.
      r24842: Fix build warning.
      r24920: Reformatting.
      r24952: Set the kdc locator env vars. This makes the krb5 locator plugin fully
      r24954: Fix the build without krb5.
      r25068: Older samba3 DCs will return DCERPC_FAULT_OP_RNG_ERROR for every opcode on the
      r25080: Once we decrypted the packet but have timing problems (closkew, tkt not yet or
      r25108: Make ifdef labyrinth in sasl code a bit more readable.
      r25109: Remove obsolete argument from ads_guess_service_principal().
      r25133: Fix sasl wrapping (for ldap sign&seal).
      r25134: Fix Bug #4968 and make dns updates work with heimdal as well (again,
      r25135: Remove one END_PROFILE(SMBntcreateX) from call_nt_transact_create() which
      r25148: Adapt to coding conventions.
      r25257: When dumping eventlist, display full timestring.
      r25313: dd HKEY_CURRENT_USER to rpccli_winreg_Connect().
      r25314: Add HKEY_CURRENT_USER to reg_hive_key().
      r25325: Rename some defines.
      r25326: Free the context from the talloc_stackframe.
      r25328: When using ldap sasl wrapping with gssapi it's important to receive warnings
      r25362: Add "NT Authority\System" with Full Access to the default registry security
      r25370: Allow to delete registry keys recursively without deleting the final key.
      r25396: Very obvious fix from Martin Zielinski.
      r25416: Add registry debug class.
      r25417: Use DBGC_REGISTRY class.
      r25525: Add "net rpc registry getsd <keyname>" to display security descriptors.
      r25526: Fix usage output.
      r25575: Document S-1-5-12 (restriced code sid).
      r25592: Allow to set sec_info for registry security descriptor queries.
      r25593: Add missing security_secinfo bits as seen while managing security descriptor
      r2058: Merge heimdal krb5_locate_kdc-fix over from trunk/3_0 although
      r3981: Use correct access-mask when querying aliases.
      r4057: unknown5 represents the account policy "Users must logon to change
      r5011: Do not use KRB5_CONFIG internally as it is used by MIT and Heimdal to find
      r5266: This is a nice typo ;-)
      r5611: Add EnumPrinterDataEx-test (for now just for PrinterDriverData, we need
      r7394: rename LSA_TRUSTED_DOMAIN_INFO_5 to LSA_TRUSTED_DOMAIN_INFO_BASIC.
      r9888: add IDL for lsa_QueryDomainInformationPolicy to query Kerberos Settings.
      r12825: Add \n
      r13630: Add new ACB-bits as seen in acct_flags in the PAC info3
      r13631: Add DOMAIN_PASSWORD_LOCKOUT_ADMINS (this bit only allows to lockout
      r13632: The "password_properties" is a bitmask as well.
      r13633: Adding more SE_GROUP bits and make it a bitmask as well.
      r13634: Fix typo.
      r13637: Adding more netr_UserFlags.
      r14054: merge from samba3, fillout more userAccountControl bits.
      r14055: merge from samba3. add ACB_NO_AUTH_DATA_REQD, this has been verified
      r16796: Fill in dsr_GetMemberships() / dsr_GetMemberships2().
      r16801: Adding WERR_DS_DRA_ACCESS_DENIED.
      r18609: error_string should not contain newlines.
      r18610: Fix typo.
      r18611: Do not return NT_STATUS_OK when libnet_Add|DelShare has failed.
      r18624: path is a ref pointer in dfs_GetInfo().
      r18625: dfs_GetManagerVersion() returns a version number, not just an exist
      r18627: only cosmetic reformat, no functional changes.
      r18628: dfs_EnumEx() also takes a ref pointer.
      r18629: There is no such "unknown" pointer in dfs_Enum().
      r18630: Better way to display ref-pointers with [print]. Thanks to metze for
      r18633: Add a couple of new WERR codes encountered with dfs torture testing.
      r18635: Make sure to display samr_GroupAttrs in samr_DispInfo for groups instead
      r18636: Excessive testing with pam_winbind within Samba3 revealed a new samr
      r18637: Fix the build. Sorry,
      r18733: More work on DFS idl. Start to add new infolevels (as of w2k3 sp1).
      r18734: Add flag to distinguish a standalone from a domain based DFS root.
      r18735: Fill in dfs_StorageState.
      r18736: Fill in the dfs_PropertyFlags (verified with dfsutil.exe).
      r18737: Fill in the documented dfs_Target_PriorityClass.
      r18738: Fill in dfs_VolumeState.
      r18741: test dfs_Enum and dfs_EnumEx in the torture test.
      r18743: Mention share name in error output.
      r18746: Fix the build.
      r18751: Check for samr reject codes and their particular order.
      r18759: Do not use "simple" as test password as pointed out by Andrew Bartlett.
      r18762: Fillin standalone DFS root functions IDL.
      r18763: Removing old dfs_Add test, will be replaced with another one soon.
      r18764: Test all standalone DFS root functions in the torture test.
      r18765: Fill in dfs_SetInfo() IDL and align function arguments with the names
      r18766: Getting rid of one test_GetManagerVersion() call and fix the build.
      r18776: Fill in and test dfs_ManagerInitialize().
      r18782: Do not send random data to the password change (although that reveals
      r18815: Fill in IDL for domain based DFS root functions (dfs_AddFtRoot,
      r18821: Correctly name dfs_AddStdRootForced() test.
      r18822: Automatically remove a forced dfs standard root creation.
      r18843: Got DFS_MANAGER_VERSION_NT4 wrong.
      r18844: Workaround win2k behaviour (which returns WERR_NO_MORE_ITEMS instead of
      r18847: Add WERR_NO_SYSTEM_RESOURCES showing up in dfs torture testing.
      r19162: Merge WERR code from Samba 3.
      r23129: Merge from 3_0:
      r23239: Fill in drsuapi_QuerySitesByCost.
      r23240: Fill in netr_DsrGetDcSiteCoverageW.
      r23381: Merge netr_GetDcName WERROR return and WERROR_DOMAIN_CONTROLLER_NOT_FOUND from
      r23382: Fill in lsa_lsaRQueryForestTrustInformation.
      r23383: Query transitive forest trust info in LSA torture test once we see such trusts.
      r23384: Fill in NETLOGON netr_DsRGetForestTrustInformation().
      r23385: Adding netr_DsRGetForestTrustInformation() test to query transitive forest
      r23386: Correctly fill in server name in DsrGetDcSiteCoverageW() test.
      r23559: After running testprogs/ejs/minschema.js update schema.ldif (on abartlet's
      r23629: Document lsa lookupname lookuplevels Volker discovered a while ago.
      r23630: Found out what LSA_LOOKUP_NAMES level 5 means:
      r25529: Reformatting.
      r25531: Merge GTYPE_SECURITY_UNIVERSAL_GROUP from samba3.
      r25539: Also correct indent for winreg server.
      r25544: Cleanup some more indents in lib/registry.
      r25594: Merge from 3_2:
      Fix the build WITH_DNS_UPDATES.
      Add WERR_SERVICE_ALREADY_RUNNING.
      Merge Tridge's fix for the winbind 32/64bit padding.
      Make sure we can read SACLs from the registry.
      Display sec ace flags.
      Merge commit 'origin/v3-2-test' into branches/upstream
      Ignore testing tdb.
      When deleting a key from the registry make sure the non-default
      Unless talloc has some new magic there is a ctx missing here.
      Fix build warning.
      Merge recent wkssvc changes from samba4.
      Fix _reg_perfcount_get_instance_info()
      Merge encode_wkssvc_join_password_buffer() from samba4.
      Make encode_wkssvc_join_password_buffer() non-static.
      Move param helper routines to one place.
      Add NetJoinDomain call.
      Merge join error codes from Samba 4.
      domain_name is a ref pointer.
      Give NetJoinDomain() enough time to finish.
      Robustness-fixes for NetJoinDomain().
      Add NetUnjoinDomain().
      Add header file for NetJoinDomain() and friends.
      Add "net dom join" code.
      Add "net dom unjoin" code.
      Add "net dom" command suite to "net".
      Avoid to include net prototypes, just reference user creds.
      Actually implement reboot feature for net dom join/unjoin.
      Reanimate rpcclient wkssvc command.
      Add decode_wkssvc_join_password_buffer().
      Regenerate pidl rpc client calls that are WERROR based.
      Forgot header in previous commit.
      Fix winreg callers.
      Fix svcctl callers.
      Fix dfs callers.
      Fix wkssvc callers.
      Fix shutdown callers.
      Allow to set level in cmd_wkssvc_wkstagetinfo().
      Add getjoininformation to rpcclient.
      Add cmd_wkssvc_messagebuffersend().
      Fix build with new werror based pidl rpc.
      Allow to set custom message in wkssvc messagebuffer.
      Add NT_STATUS_DOWNGRADE_DETECTED (thanks to Magnus Mertens).
      Replace "unknown" with access_mask when calling samr_CreateUser2().
      When building nsswitch, make sure to also build smbcontrol.
      Make decode_wkssvc_join_password_buffer() return WERRORs.
      Add split_domain_user() (not to mix with winbind variants).
      Some cleanups for "net dom join".
      Add lp_include_registry_globals().
      Make heimdal and MIT happy when iterating through auth data.
      Add cmd_wkssvc_enumeratecomputernames to rpcclient.
      Add and use some keystr functions using talloc_tos() in secrets api.
      Merge WERR_NO_SUCH_LOGON_SESSION from Samba4.
      r25603: More reformat.
      r25604: Add security_descriptor_append() helper function.
      r25605: Last round of registry reformats (before this gets an obsession...).
      r25606: Allow test_GetKeySecurity() to return a security descriptor.
      r25607: Allow to set security descriptor type flags at creation time with
      r25608: Call security_descriptor_append from within security_descriptor_create.
      r25609: Reformat RPC-WINREG test.
      r25610: Add security_descriptor_appendv() which takes va_list directly.
      r25611: Smaller fix for winreg test.
      r25612: Add test_SetKeySecurity() call.
      r25662: While watching traces, learned the frsapi_InfoEnum enum types.
      r25663: Add frsapi_SetDsPollingIntervalW and frsapi_GetDsPollingIntervalW idl.
      r25664: Use [out] pointers in frsapi idl.
      r25665: Add some more WERR codes.
      r25666: Add frsapi_IsPathReplicated IDL.
      r25667: Start on frsapi testsuite.
      r25668: Hopefully fix the build, sorry...
      r25669: Real build fix.
      r25670: Add torture test for frsapi_IsPathReplicated().
      r25671: Add stub FRSAPI_FORCE_REPLICATION.
      r25672: Some more FRS werrors.
      r25673: Ignore RPC-FRSAPI for samba4.
      r25675: More frsapi IDL.
      r25696: Fix pipe name for dfs.
      r25699: Add ForceReplication test.
      r25706: Merge padding fix from Samba3.
      r25730: Fix IDL for incorrect winreg_SetKeySecurity.
      r25731: Document winreg_NotifyChangeKeyValue's notify flags.
      r25739: We forgot to copy revision and type flags in security_descriptor_copy().
      r25799: Add dump_data_skip_zeros() which omits 16 zero bytes in a row (if not at the
      r25800: Use dump_data_skip_zeros() in ndrdump.
      r25801: Add security_ace_create() function.
      r25803: Make our security descriptor acl manipulation methods more generic so that we
      r25807: Close handle during winreg test.
      r25808: Move basic security descriptor test to a test_SecurityDescriptors() call.
      r25809: Add basic security descriptor inheritance test for winreg.
      r25810: Add test for blocking security descriptor inheritance in winreg.
      r25811: Add some security descriptor helper functions.
      r25812: Add test for valid and invalid security descriptor and security information flag
      r25813: Add unfinished SecurityDescriptorsMasks test for winreg.
      r25814: Add my (C).
      r25815: Small DFS idl fixes.
      r25816: Add idl for frsapi_InfoW. Surely not correct, but a start.
      r25817: Add very basic FRSAPI InfoW test. Again, this is surely not correct but at least
      r25845: Reformat the dfs test.
      r25848: Add IDL and torture test for dfs_SetDcAddress and dfs_GetDcAddress.
      r25849: Add test for dfs FlushFtTable.
      r25894: Add IDL for netr_DsRAddressToSitenamesW and netr_DsRAddressToSitenamesExW.
      r25895: Add torture test for netr_DsRAddressToSitenamesW and
      r25896: Rename netlogon server stubs.
      r25897: Add WERR_INVALID_FLAGS.
      r25951: Add missing DS_SERVER_NDNC bit to netr_DsR_DcFlags.
      r26060: Add some error codes from remote join api.
      r26133: Add some more error codes from wkssvc testing.
      r26141: Reflect pointer_default(unique) setting.
      r26142: Cleanup IDL and add torture test for wkssvc_NetWkstaEnumUsers.
      r26143: Add IDL and torture test for wkssvc_NetrWkstaUserGetInfo.
      r26144: Add IDL and torture test for wkssvc_NetrWkstaTransportAdd and
      r26145: Fix server side of wkssvc_NetWkstaTransportEnum.
      r26146: Add IDL and torture test for wkssvc_NetrUseEnum().
      r26147: Add IDL and torture test for wkssvc_NetrUseDel and wkssvc_NetrUseAdd.
      r26148: Add IDL and torture test for wkssvc_NetrUseGetInfo().
      r26149: Add IDL for wkssvc_NetrWkstaUserSetInfo(). No torture test yet.
      r26150: Add IDL and torture test for wkssvc_NetrLogonDomainNameAdd() and
      r26151: Add IDL and torture test for wkssvc_NetrValidateName() and
      r26152: Add IDL and torture test for wkssvc_NetrEnumerateComputerNames().
      r26153: Add torture test for NetrAddAlternateComputerName() and
      r26154: Add IDL and torture test for wkssvc_NetrWorkstationStatistics(). A lot of
      r26155: Add IDL and torture teset for wkssvc_NetrMessageBufferSend().
      r26156: Choose a more speaking message in test_NetrMessageBufferSend().
      r26157: Add IDL and torture test for wkssvc_NetrSetPrimaryComputername().
      r26158: Add IDL for wkssvc_NetrRenameMachineInDomain().
      r26159: Align to coding conventions.
      r26160: Add WERR_NAME_NOT_FOUND.
      r26161: Add (dangerous) torture tests for wkssvc_NetrRenameMachineInDomain() and
      r26162: Remove accidental commit.
      r26163: Add IDL and torture test for wkssvc_NetrGetJoinInformation().
      r26164: Add IDL for wkssvc_NetrJoinDomain() and wkssvc_NetrUnjoinDomain().
      r26165: Add IDL and torture test for wkssvc_NetrGetJoinableOus() and
      r26166: Put [ref] in the front in wkssvc IDL.
      r26167: Just for completeness, add some more documented wkssvc_NetWkstaInfo info level
      r26168: Add two more documented WKSSVC_JOIN_FLAGS.
      r26169: Use the NDR_PAHEX flag to print the encrypted wkssvc password buffer.
      r26170: Put test_NetrUseGetInfo() in the correct order of tests.
      r26171: Add my copyright.
      r26172: Skip testing wkssvc against us, we only have dummy support anyway.
      r26176: Fix in,out mismatch in wkssvc_NetrWkstaUserSetInfo().
      r26208: Add torture test for (unsupported) wkssvc_NetrJoinDomain() and
      r26209: For consistency, rename one argument in NetrJoinDomain.
      r26210: w00t!
      r26211: Add very basic test_NetrJoinDomain2() test which can join xp workstations into
      r26212: Make test_NetrJoinDomain2() a little more robust against missing parameters.
      r26213: Trying to fix confusing inline comment about wkssvc_PasswordBuffer.
      r26214: Add note about remotely joining an unjoined XP SP2 workstation.
      r26215: Verify that test_NetrJoinDomain2() has suceeded.
      r26216: Add very basic torture test for wkssvc_NetrUnjoinDomain2().
      r26217: Let encode_wkssvc_join_password_buffer() take the session key as parameter.
      r26256: When generating Samba3 pidl output for WERROR based functions, make sure the
      r26257: Get rid of "uninitialized value" warning in the samba3 pidl generator.
      r26273: Add IDL and torture test for netr_NetrEnumerateTurstedDomains() and
      r26285: Add IDL and torture test for netr_ServerPasswordGet().
      r26286: IDL and torture test for netr_ServerTrustPasswordsGet().
      r26331: Add IDL for samr_ValidatePassword(). A very interesting call.
      r26332: Add samr_ValidationStatus error mapping to samr_ValidatePassword().
      r26393: Fix inline comment.
      Use ADS_IGNORE_PRINCIPAL define.
      Kill fstring in getdcname & getanydcname return.
      Add get_friendly_werror_msg().
      Add NetGetJoinInformation().
      For the fun of it, build netapi.so|.a.
      Very quick conversion of net_conf functions into the libnet_conf layer.
      Split NetJoinDomain() into NetJoinDomainRemote() and the unsupported
      Add libnet_JoinCtx structure.
      Add libnet_Join().
      Fill in NetJoinDomainLocal().
      Add _wkssvc_NetrJoinDomain2() server.
      Build fixes for libnetapi.
      More minor libnetapi fixes.
      Fill in local branch of NetGetJoinInformation().
      Some libnet and netapi build fixes.
      Make sure we also support non-domain join.
      Getting rid of external credentials in libnetapi.
      Define NET_API_STATUS to be just a uin32_t.
      Move basic libnetapi functions to NET_API_STATUS.
      Add basic credential functions for libnetapi.
      Use full string based debug_parse_levels in libnetapi.
      Add static libnetapi_ctx.
      Missed on instance of external creds.
      Move NetJoinDomain and friends to NET_API_STATUS and the static libnetapi_ctx.
      Making do_DomainJoin return NTSTATUS again.
      In libnet join code, try lsa query with level 12 first.
      Build libnetapi shared and static if possible.
      Use DsGetDcName in local libnetapi join to find a dc.
      Fix NetJoinDomainLocal.
      Remove unrequired TALLOC_CTX from libnetapi_NetJoinDomain & friends.
      Add libnet_Unjoin(), libnet_UnjoinCtx and friends.
      Add support for remote and local unjoining in libnetapi.
      Add libnetapi_errstr().
      Split out local and remote paths for NetGetJoinInformation.
      Add NetServerGetInfo and NetServerSetInfo (for level 1005).
      Implement NetServerSetInfo level 1005 in local mode with smbconf registry.
      Merge all headers into libnetapi.h.
      Keep libnetapi_NetX calls static for now.
      Fix typo.
      Remove doubled cli_set_timeout calls from libnetapi.
      Add error string for access denied in libnetapi.
      Make libnetapi_errstr use our NTSTATUS and WERROR error string macros.
      Add basic remote NetGetDCName and NetGetAnyDCName versions to libnetapi.
      Add getdc.c, a libnetapi example (incl. Makefile).
      Make sure libnetapi has getdcname support.
      Add netdomjoin cmd line tool (another libnetapi example).
      Add netdomjoin-gui (my first gui application), another libnetapi user.
      Deactive remote join code server side until some last issues are resolved.
      Gitignore some generated files.
      Move libnetapi examples into subdirs.
      Move gtk app to the correct location. Thanks obnox!
      Make sure libnet/libnet_proto.h exists.
      Generate pkgconfig files for at least lib{smbclient,smbsharemodes,netapi}.
      Until we better understand the WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT make sure we are
      Correct netapi header filename. Thanks Jeremy.
      Fix uninitialized error code in do_unjoin_modify_vals_config().
      Fix net_dom_join & net_dom_unjoin.
      Fix the build of cifs.spnego.
      r26558: Add IDL for netr_GetForestTrustInformation().
      Happy new year !
      Add test_shlibs to Makefile.
      Make libsmbsharemodes.so work again (fix unresolved tdb symbols).
      Fix libsmbclient (resolve dependency on libwbclient).
      Fix libnetapi (resolve dependency on libwbclient).
      Remove unused vars.
      Some coding convention pedantism.
      Ignore generated pkgconfig files.
      In libnetjoin don't mix admin password with machine account pwd.
      Fix configure output for libnetapi.
      Let DsGetDCName figure out whether domain_name is a flat_name when unjoining.
      Use -g instead of -gstabs as many have reported gdb problems with -gstabs.
      Add some more join related werror codes.
      Minor libnetapi join cosmetic cleanup.
      Use different error code for libnet_conf initialization failure.
      Add ads_get_joinable_ous().
      Robustness fix for libnet join when unjoining.
      Fix some error strings in netdomjoin-gui.
      Fix crash bug in regdb_close() when called with no ref count.
      Minor cosmetic cleanup for netdomjoin-gui.
      Add debug switch to netdomjoin.
      In libnet_join finally separate the admin from the machine pwd entirely.
      Separate out storing and removing secrets in libnet_join/unjoin.
      Rename server_name to dc_name in libnet join structures.
      Fix build warning.
      Do not pass emtpy wkssvc_PasswordBuffers to rpc functions.
      Only create machine account in libnetjoin when requested to.
      Failure while unjoining a domain is non-critical.
      In gfree_debugsyms() free the format_bufr as well.
      Add secrets_shutdown().
      Fix two memleaks in libnetapi.
      Add free_local_machine_name().
      Fix build warning.
      Add NET_API_STATUS_SUCCESS define.
      Close registry in libnetapi_free().
      Free libnet_JoinCtx after joining.
      Rearrange order of libnet join context init.
      Add error_string to libnetjoin and libnetunjoin structures incl. set functions.
      Add ADS_STRUCTs to libnetjoin and -unjoin, with talloc destructors.
      Rearrange libnet join code and add support for account pre-creation in AD.
      Honor the WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE flag when unjoining from AD.
      Add libnet_join_find_machine_acct().
      Let libnetapi use it's own krb5 cred cache in memory if necessary.
      Add krb5 cc env to libnetapi_ctx.
      Add libnetapi_set_error_string and libnetapi_get_error_string.
      In the local path of NetJoinDomain, try to get error string from libnetjoin.
      In libnetapi example, use libnetapi_get_error_string().
      Merge remaining post-AD-join functions from net into libnet_join.
      Finally use libnet_join_set_* functions in libnetjoin.
      There is no LDAP in some corners of this world. Fix the build...
      Trying to make the buildfarm w/o krb5 happy.
      Enable talloc reporting in libnetapi if DEVELOPER compiled.
      Refactor our DsGetDcName call a bit (before it will move into libnetapi).
      When unjoining fails (e.g. missing creds) make sure we still correct config.
      Fix crash bug when strequal is used too late in libnetapi_free.
      Add NetApiBufferFree() to libnetapi.
      Make name_buffer in NetGetJoinInformation() talloced.
      Correctly free buffers in netdomjoin-gui.
      Correctly talloc ctx->remote_path in libgpo (thanks Michael for the pointer).
      Do not ignore provided machine_name in ads_get_upn().
      Fix define check s/WITH_LDAP/HAVE_LDAP/ in libnet_join.
      Use ads_get_upn() in net_derive_salting_principal().
      r26695: Cosmetic fix for pidl generated samba3 client code.
      Pedantic cosmetics: rerun make idl.
      r26696: Some more minor pidl samba3 client cosmetics.
      Fix build warning for libsmbclient example.
      Add libnet_join_derive_salting_principal().
      Re-run make idl. The pidl generated code now fully complies to coding standards.
      r26698: Prettify samba3 client code a little more.
      Re-run make idl to get even nicer pidl generated server code.
      r26699: Some minor cosmetics for pidl samba3 server code.
      Another attempt to fix builds w/o ldap and/or krb5.
      Remove unused string.
      Add domain_is_ad bool to libnetjoin ctx.
      Use domain_is_ad bool.
      Remove some more references to global_myname() in libnet_join.
      Ignore result of libnet_conf_delete_parameter here, as realm may be not there.
      Refactor libnetapi error string functions a bit.
      Include some basic headers in netapi.h.
      Set error string when ads_leave_realm() has failed in libnetjoin.
      Remove '\n' from error strings in libnet_join context.
      Fix libnetapi error string callers.
      As long as DsGetDcName is not part of libnetapi, lowercase the fn name.
      Fix a build warning.
      Use domain_is_ad one more time in libnetjoin.
      Add debug bool flag for libnetjoin ctx.
      Auto-add missing shares in libnet_conf_set_parameter().
      Use WITH_ADS define in libnet_join, hopefully not breaking the build.
      Merge all ads related calls in libnet_join_post_processing_ads().
      For libnet_join error string functions, make sure not to overwrite last status string.
      Add appropriate error code when pre-creating accounts in ous isnt supported by DC.
      Fix some error strings in libnet_join.
      Call dsgetdcname when we have no specific dc defined for joining.
      Fix some indents.
      "make test_shlibs" shows unresolved symbols for -lwbclient.
      Revert ""make test_shlibs" shows unresolved symbols for -lwbclient."
      Use some more pidl generated LSA rpc in rpcclient.
      Start removing hand-written lsa marshalling code (namely
      Remove some more hand written LSA rpc.
      Use pidl generated rpccli_lsa_QueryTrustedDomainInfoBySid when vampiring trusted
      Fix rpcclient display_trust_dom_info().
      Remove more redundant lsa parsing functions.
      Fill in IDL for lsa_SetInfoPolicy and lsa_SetInfoPolicy2.
      Re-run make idl for new lsa calls.
      Remove old lsa set info policy call.
      Fix prototypes for lsa set info policy calls.
      Fix all callers of old rpccli_lsa_set_info_policy() call.
      Fill in IDL for lsa_SetInfoPolicy and lsa_SetInfoPolicy2.
      Use lsa_PolicyInfo enum in lsa policy info calls.
      Re-run make idl to update lsa idl.
      Use lsa_PolicyInfo enum in lsa policy info calls.
      Print principal in debug statement in kerberos_kinit_password() as well.
      Some more minor cleanup for "net rpc audit".
      Add True/False bool cleanup script.
      Re-arrange pre- and postprocessing code in libnetjoin.
      Use dsgetdcname() to find a dc when unjoining in libnetjoin.
      No need to re-establish AD connection all the time.
      Define libnet join interface in IDL.
      Add ndr_print_sockaddr_storage and ndr_print_bool.
      Add ndr_print_ads_struct().
      Use autogenerated libnet_join header.
      Include libnet_join.h in the right places.
      Remove unrequired TALLOC_FREE.
      Apply const to rpccli_lsa_query_info_policy() and rpccli_lsa_query_info_policy2().
      Use autogenerated debugging functions in libnetjoin when requested.
      Add some NDR_PRINT_*_STRING macros (returning talloced strings).
      Use NDR_PRINT_UNION_STRING instead of NDR_PRINT_UNION_DEBUG in rpcclient.
      Avoid use of NDR_PRINT_X_DEBUG (that debugs with level 0) in libnetjoin.
      Nicen some error strings in libnetjoin.
      Autofetch domain_sid while unjoining in libnetjoin.
      Fix (non-activated) _wkssvc_NetrJoinDomain2 server code.
      Add lsa_PolicyAuditEventType and lsa_PolicyAuditPolicy enums from samba3 to IDL.
      Fix memleak in ads_build_path().
      Make resolve_ads() static.
      Add lsa_PolicyAuditEventType and lsa_PolicyAuditPolicy enums from samba3 to IDL.
      Merge lsarpc.idl from samba4 and rerun make idl.
      Import recent netlogon and samr IDL from samba4.
      Add samba3 [out,ref] pointer massage to samr&netlogon idl.
      Import recent misc.idl from Samba4.
      Remove samba4 specifi struct server_id from misc.idl.
      Remove dependency for nbt.idl (the NBT_SERVER_* flags) in netlogon.idl.
      Re-run make idl to regenerate netlogon output.
      Use pidl generated data from misc.idl.
      Re-run make idl to generate SAMR output.
      Add NETLOGON_GRACE_LOGON flag to netr_UserFlags.
      Re-run make idl to regnerated netlogon.
      Finally enable pidl generated SAMR & NETLOGON headers and clients.
      Include auto-generated client headers for netlogon/samr.
      Use new pidl-generated netlogon client calls in NetApi GetDcName().
      Improve libnetapi_set_error_string().
      Fix local hostname detection in netdomjoin-gui.
      Add some more debugging into netdomjoin-gui.
      Cosmetics and error string reporting for libnetapi.
      Add NetGetJoinableOUs() to libnetapi (incl. example).
      Add header for NetGetJoinableOUs to libnetapi.
      Fix the build w/o ADS.
      Fix get_trust_creds() to return always an upper-cased krb5 principal (this
      Fix samr_EnumDomainUsers in samba3, must not be a ref pointer here.
      Merge over security.idl from samba4.
      Re-run make idl and use generated ndr based on samba4 security.idl (except for DOM_SID).
      Add dump-domain-list command for debugging winbindd's domain_list.
      Add winbindd debugging ndr_print helpers.
      Add winbind_msg_dump_domain_list to winbindd.
      Fix winbindd build w/o ADS.
      Add pidl --samba3-libnetapi option.
      Add IDL for netr_LogonGetTrustRid.
      make idl.
      Add cmd_netlogon_gettrustrid() to rpcclient.
      Add WERR_INVALID_COMPUTER_NAME.
      Revert "Add pidl --samba3-libnetapi option."
      Rename samr_*AccessMask bitfields to start with SAMR_.
      Add IDL for netr_LogonGetTrustRid.
      Fix netlogon rpc-server build.
      Rename samr_*AccessMask bitfields to start with SAMR_.
      Re-run make idl.
      Trying to avoid defining new SAMR acct creation flags when we already have them with different
      Remove rpccli_samr_get_dom_pwinfo() and rpccli_samr_get_usrdom_pwinfo().
      Adding dssetup.idl from samba4.
      Add generated dssetup code after make idl.
      Use generated DSSETUP client & server rpc functions and remove the hand-written ones.
      No need to close registry on libnetapi_free() anymore.
      Add LIBNETAPI_LOCAL_SERVER() macro.
      Fix netr_DsrEnumerateDomainTrusts IDL.
      run "make idl".
      Add cmd_netlogon_dsr_enumtrustdom() to rpcclient.
      Remove some unused structures from rpc_lsa.h.
      Remove more unused LSA marshalling functions.
      Add IDL for netr_DsrDeregisterDNSHostRecords (just for completion).
      Fix netr_DsRGetDCNameEx and netr_DsRGetDCNameEx2 IDL.
      Re-run make idl.
      Use rpccli_netr_DsRGetDCNameEx and rpccli_netr_DsRGetDCNameEx2 in rpcclient.
      Remove hand-written rpccli_netlogon_dsr_getdcnameex[2].
      Add cmd_netlogon_dsr_getforesttrustinfo and deregisterdnsrecords to rpcclient.
      Add IDL for netr_DsrDeregisterDNSHostRecords (just for completion).
      Fix netlogon rpc-server build.
      Dump msDS-SupportedEncryptionTypes in adssearch.
      Eliminate remote tree of dsgetdcname (which will happen in libnetapi then).
      Add missing windows 2008 netr_DsR_DcFlags and netr_DsRGetDCName_flags flags.
      Move DS_DOMAIN_FUNCTION defines to ads.h.
      Add ndr_print_ads_auth_flags().
      Fix the build. Avoid unrequired ndr_print_ads_struct dependencies.
      Use pidl generated call to enumerate ds trusted domains in winbindd.
      Use another pidl generated call to enumerate ds trusted domains in winbindd.
      Remove last caller of rpccli_ds_enum_domain_trusts().
      Finally delete rpccli_ds_enum_domain_trusts() completly.
      Remove unused rpc_ds marshalling code that is unused now.
      Remove include/rpc_ds.h and all references to it completly.
      Add netrenumtrusteddomains() and netrenumtrusteddomainsex() cmds to rpcclient.
      Fix build warning.
      Fix netlogon IDL for netr_GetDcName that returns WERROR.
      When running with debug level > 10, dump ads_struct in ads_connect().
      Remove rpccli_samr_close and use pidl generated function instead.
      Let _samr_Close() use pidl generated server code.
      Remove unused samr_close marshalling.
      Cleanup status codes inside _net_logon_ctrl2() reply structs.
      Use pidl for samr_GetDomPwInfo() server-side.
      Remove old, unused marshalling code for SAMR_GET_DOM_PWINFO.
      Enable build of pidl generated netlogon server.
      Re-run make idl.
      Fix _samr_Close().
      Use pidl for _samr_OpenDomain().
      Use pidl for _samr_OpenUser().
      Use pidl for _samr_OpenAlias().
      Use pidl for _samr_OpenGroup().
      Use pidl for _samr_DeleteUser().
      Use pidl for _samr_DeleteDomainGroup().
      Use pidl for _samr_DeleteDomAlias().
      Use rpccli_samr_DeleteDomainGroup() in net and rpcclient.
      Remove rpccli_samr_delete_dom_group().
      Remove unused marshalling for SAMR_DELETE_DOM_GROUP.
      Use rpccli_samr_DeleteDomAlias() in net and rpcclient.
      Remove rpccli_samr_delete_dom_alias().
      Remove unused marshalling for SAMR_DELETE_DOM_ALIAS.
      Use rpccli_samr_DeleteUser() in net and rpcclient.
      Remove rpccli_samr_delete_dom_user().
      Remove unused marshalling for SAMR_DELETE_DOM_USER.
      Use rpccli_samr_OpenDomain() all over the place.
      Remove unused marshalling for SAMR_OPEN_DOMAIN.
      Use rpccli_samr_OpenGroup() all over the place.
      Remove unused marshalling for SAMR_OPEN_GROUP.
      Use rpccli_samr_OpenAlias() in net and rpcclient.
      Remove unused marshalling for SAMR_OPEN_ALIAS.
      Use rpccli_samr_OpenUser() all over the place.
      Remove unused marshalling for SAMR_OPEN_USER.
      Use pidl for _samr_CreateDomAlias().
      Use rpccli_samr_CreateDomAlias() in net and rpcclient.
      Remove unused marshalling for SAMR_CREATE_DOM_ALIAS.
      Use pidl for _samr_CreateDomainGroup().
      Use rpccli_samr_CreateDomainGroup() in net and rpcclient.
      Remove unused marshalling for SAMR_CREATE_DOM_GROUP.
      Use pidl for _samr_CreateUser2().
      Use rpccli_samr_CreateUser2() all over the place.
      Remove unused marshalling for SAMR_CREATE_USER.
      Use pidl for _samr_ChangePasswordUser2().
      Re-run make idl.
      Fix samr_QuerySecurity IDL.
      Re-run make idl.
      Use rpccli_samr_QuerySecurity() for rpcclient.
      Use pidl for _samr_QuerySecurity().
      Remove unused marshalling for SAMR_QUERY_SEC_OBJ.
      Use pidl for _samr_SetSecurity().
      Remove unused marshalling for SAMR_SET_SEC_OBJ.
      Use pidl for _eventlog_GetNumRecords().
      Remove unused marshalling for EVENTLOG_GET_NUM_RECORDS.
      Fix IDL for eventlog_ClearEventLogW.
      Re-run make idl.
      Fill in IDL eventlog_GetOldestRecord() based on samba3 rpc.
      Re-run make idl.
      Use pidl for _eventlog_GetOldestRecord().
      Remove unused marshalling for EVENTLOG_GET_OLDEST_ENTRY.
      Use pidl for _eventlog_ClearEventLogW().
      Copy inline comment for _eventlog_ClearEventLogW() from rpc_parse to rpc_server.
      Remove unused marshalling for EVENTLOG_CLEAR_EVENTLOG.
      Fix IDL for eventlog_OpenEventLogW().
      Re-run make idl.
      Use pidl for _eventlog_OpenEventLogW().
      Remove unused marshalling for EVENTLOG_OPEN_EVENTLOG.
      Fix IDL for eventlog_ReadEventLogW().
      Re-run make idl.
      Remove unused arguments in read_package_entry() in the eventlog rpc server.
      Forgot to add this hunk in ndr_pull_eventlog_Record from an earlier commit.
      Remove "pointer_default_top(unique)" from netlogon.idl and rerun make idl.
      Remove "pointer_default_top(unique)" from eventlog.idl and rerun make idl.
      Remove "pointer_default_top(unique)" from samr.idl and rerun make idl.
      Remove "pointer_default_top(unique)" from wkssvc.idl and rerun make idl.
      Remove "pointer_default_top(unique)" from winreg.idl and rerun make idl.
      Remove "pointer_default_top(unique)" from svcctl.idl and rerun make idl.
      Remove "pointer_default_top(unique)" from srvsvc.idl and rerun make idl.
      Remove "pointer_default_top(unique)" from spoolss.idl and rerun make idl.
      Use pidl for _samr_Connect().
      Remove unused marshalling for SAMR_CONNECT_ANON.
      Use pidl for _samr_Connect2().
      Use pidl for _samr_Connect4().
      Use pidl for _samr_Connect5().
      Remove unused marshalling for SAMR_CONNECT5.
      Use pidl for _samr_DeleteGroupMember().
      Use rpccli_samr_DeleteGroupMember() in net.
      Remove unused marshalling for SAMR_DEL_GROUPMEM.
      Use pidl for _samr_AddGroupMember().
      Use rpccli_samr_AddGroupMember() in net.
      Remove unused marshalling for SAMR_ADD_GROUPMEM.
      Use rpccli_samr_Connect4() in rpcclient.
      Add note about "unknown" in samr_Connect4 (from Samba3 rpc_parse).
      Remove unused marshalling for SAMR_CONNECT_4.
      Use rpccli_samr_Connect2() all over the place.
      Use pidl for _lsa_OpenPolicy().
      Use pidl for _lsa_OpenPolicy2().
      Fix IDL for lsa_QuerySecurity().
      Re-run make idl.
      Use pidl for _lsa_QuerySecurity().
      Use rpccli_lsa_QuerySecurity() in rpcclient.
      Fill in IDL for lsa_SetSecObj() (based from samba3 rpc).
      Remove some wrong checks for policy handles in rpcclient.
      Remove unused marshalling for LSA_QUERY_SEC_OBJ.
      Add IDL for lsa_DeleteObject() (based on samba3 rpc code).
      Re-run make idl.
      Use pidl for (dummy) _lsa_DeleteObject().
      Remove unused marshalling for LSA_DELETE_OBJECT.
      Remove unused marshalling for SAMR_CONNECT.
      Remove unused marshalling for SAMR_CONNECT.
      Use pidl for _samr_GetUserPwInfo().
      Remove unused marshalling for SAMR_GET_USRDOM_PWINFO.
      Use pidl for _samr_DeleteAliasMember().
      Use rpccli_samr_DeleteAliasMember() in net.
      Remove unused marshalling for SAMR_DEL_ALIASMEM.
      Use pidl for _samr_AddAliasMember().
      Use rpccli_samr_AddAliasMember() in net.
      Remove unused marshalling for SAMR_ADD_ALIASMEM.
      Use pidl for _samr_GetMembersInAlias().
      Use rpccli_samr_GetMembersInAlias() in net and rpcclient.
      Remove unused marshalling for SAMR_QUERY_ALIASMEM.
      Fix IDL for samr_LookupDomain().
      Re-run make idl.
      Use pidl for _samr_LookupDomain().
      Use rpccli_samr_LookupDomain() in rpcclient.
      Remove marshalling for SAMR_LOOKUP_DOMAIN.
      Use pidl for _samr_GetAliasMembership().
      Use rpccli_samr_GetAliasMembership() in winbindd and rpcclient.
      Fix IDL for samr_QueryGroupMember().
      Re-run make idl.
      Use idl for _samr_QueryGroupMember().
      Remove trailing while space, just couldn't resist. No code change.
      Use rpccli_samr_QueryGroupMember() all over the place.
      Remove unused marshalling for SAMR_QUERY_GROUPMEM.
      Remove unused marshalling for SAMR_QUERY_USERALIASES.
      Use pidl for _samr_RemoveMemberFromForeignDomain().
      Use rpccli_samr_RemoveMemberFromForeignDomain() in net.
      Remove unused marshalling for SAMR_REMOVE_SID_FOREIGN_DOMAIN.
      Re-run make idl.
      Use SAMR_CONNECT_W2K for samr_Connect4 in rpcclient.
      Fix _samr_Connect5(). Yes we do pretend to be > w2k all the time :)
      Remove unused headers for SAMR_SET_SEC_OBJ.
      Fix IDL for samr_QueryDomainInfo and samr_QueryDomainInfo2.
      Re-run make idl.
      Add some helper init routines for samr_DomInfo structures.
      Use pidl for _samr_QueryDomainInfo() and _samr_QueryDomainInfo2().
      Remove unused marshalling for SAMR_QUERY_DOMAIN_INFO2.
      Use pidl for _samr_SetDomainInfo().
      Use rpccli_samr_QueryDomainInfo() in rpcclient.
      Use rpccli_samr_QueryDomainInfo() in net rpc.
      Use rpccli_samr_QueryDomainInfo() in net_rpc_sh_acct.c.
      Use rpccli_samr_QueryDomainInfo() in winbindd.
      Remove unused marshalling for SAMR_QUERY_DOMAIN_INFO.
      Remove unused marshalling for SAMR_SET_DOMAIN_INFO.
      Remove most of SAM_UNK_INFO marshalling.
      Re-run make idl after metzes fixes for multilevel and embedded pointers.
      Re-run make idl after fixes for wkssvc_NetrGetJoinableOus{2}.
      Fix IDL for samr_QueryAliasInfo().
      Re-run make idl.
      Add cmd_samr_query_aliasinfo command to rpcclient.
      Fix IDL for samr_ChangePasswordUser3().
      Re-run make idl.
      Use pidl for _samr_ChangePasswordUser3().
      Let rpccli_samr_chgpasswd3 use rpccli_samr_ChangePasswordUser3 internally.
      Remove marshalling for SAMR_CHGPASSWD3.
      Remove last SAM_UNK struct defines.
      Use rpccli_samr_ChangePasswordUser2 in rpccli_samr_chgpasswd_user() and friends.
      Remove unused marshalling for SAMR_CHGPASSWD_USER.
      Use rpccli_netr_GetAnyDCName and rpccli_netr_GetDCName everywhere.
      Remove unused marshalling for NET_GETANYDCNAME and NET_GETANYDCNAME.
      Use rpccli_netr_DsRGetSiteName() in rpcclient.
      Remove unused marshalling for NET_DSR_GESITENAME.
      Use pidl for _samr_SetAliasInfo().
      Use rpccli_samr_SetAliasInfo() in net.
      Remove unused marshalling for SAMR_SET_ALIASINFO.
      Use pidl for _samr_SetGroupInfo().
      Use rpccli_samr_SetGroupInfo() in net.
      Remove unused marshalling for SAMR_SET_GROUPINFO.
      Use pidl for _samr_QueryAliasInfo().
      Use rpccli_samr_QueryAliasInfo() in net.
      Remove unused marshalling for SAMR_QUERY_ALIAS_INFO.
      Fix IDL for samr_QueryGroupInfo().
      Re-run make idl.
      Use pidl for _samr_QueryGroupInfo().
      Use rpccli_samr_QueryGroupInfo() in rpcclient.
      Remove unused marshalling for SAMR_QUERY_GROUPINFO.
      Fix IDL for samr_GetGroupsForUser().
      Re-run make idl.
      Use pidl for _samr_GetGroupsForUser().
      Use rpccli_samr_GetGroupsForUser() all over the place.
      Remove unused marshalling for SAMR_QUERY_USERGROUPS.
      Remove trailing whitespace in samr client and server.
      Use pidl for _samr_QueryDisplayInfo().
      Use rpccli_samr_QueryDisplayInfo() all over the place.
      Remove unused marshalling for SAMR_QUERY_DISPINFO.
      Fix IDL for samr_EnumDomainUsers.
      Add samr_UserInfo18 to samr.idl.
      Re-run make idl.
      Fix IDL for lsa_QueryInfoPolicy.
      Fix IDL for lsa_QueryInfoPolicy2.
      Fix "net rpc audit" after query info policy idl fix.
      Re-run make idl.
      Use pidl for _lsa_QueryInfoPolicy().
      Use rpccli_lsa_QueryInfoPolicy and rpccli_lsa_QueryInfoPolicy2 in rpcclient.
      Remove rpccli_lsa_query_info_policy_new and rpccli_lsa_query_info_policy_new2.
      Use rpccli_lsa_QueryInfoPolicy2 in winbindd.
      Use rpccli_lsa_QueryInfoPolicy2 in libnet join.
      Remove unused marshalling for LSA_QUERY_INFO2.
      Use rpccli_lsa_QueryInfoPolicy() all over the place.
      Remove unused marshalling for LSA_QUERY_INFO.
      Use rpccli_lsa_QueryInfoPolicy() in libnet_join.
      Use rpccli_lsa_QueryInfoPolicy() in net.
      Fix winbindd msrpc_lookup_useraliases.
      Use pidl for _samr_LookupRids().
      Use rpccli_samr_LookupRids() in net and rpcclient.
      Use pidl for _samr_LookupNames().
      Use rpccli_samr_LookupNames() in rpcclient.
      Use rpccli_samr_LookupNames() in libnetjoin.
      Use rpccli_samr_LookupNames() in net.
      Use rpccli_samr_LookupNames() in net rpc.
      Remove unused marshalling for SAMR_LOOKUP_NAMES.
      Fix IDL for lsa_CreateAccount.
      Re-run make idl.
      Use pidl for _lsa_CreateAccount().
      Use rpccli_lsa_CreateAccount() in rpcclient.
      Remove unused marshalling for LSA_CREATEACCOUNT.
      Fix IDL for lsa_OpenAccount.
      Re-run make idl.
      Use pidl for _lsa_OpenAccount().
      Use rpccli_lsa_OpenAccount() in rpcclient.
      Remove unused marshalling for LSA_OPENACCOUNT.
      Fill in IDL for lsa_SetSystemAccessAccount (based from samba3)
      Re-run make idl.
      Use pidl for _lsa_SetSystemAccessAccount().
      Remove unused marshalling for LSA_SETSYSTEMACCOUNT.
      Fill in IDL for lsa_GetSystemAccessAccount (based on samba3).
      Re-run make idl.
      Use pidl for _lsa_GetSystemAccessAccount().
      Remove unused marshalling for LSA_GETSYSTEMACCOUNT.
      Fix IDL for lsa_QueryTrustedDomainInfoByName.
      Re-run make idl.
      Fix rpccli_lsa_QueryTrustedDomainInfoByName() caller in rpcclient.
      Fix IDL for samr_EnumDomains.
      Re-run make idl.
      Add cmd_samr_enum_domains command to rpcclient.
      Pure cosmetics, breaking some very long lines.
      Minor fix for querydispinfo display in rpcclient.
      Fix IDL for netr_DsRGetDCName.
      Re-run make idl.
      Use rpccli_netr_DsRGetDCName() in rpcclient and winbindd.
      Remove unused marshalling for NET_DSR_GETDCNAME.
      Testing revealed some errors, reverting some of the lsa changes.
      Use pidl for _samr_EnumDomains().
      Remove unused marshalling for SAMR_ENUM_DOMAINS.
      More paranoid checks for secrets_init() success.
      Fix IDL for lsa_EnumPrivs.
      Re-run make idl.
      Use pidl for _lsa_EnumPrivs().
      Use rpccli_lsa_EnumPrivs() in net and rpcclient.
      Remove unused marshalling for LSA_ENUM_PRIVS.
      Only call display_lsa_query_info on success in rpcclient.
      Let rpccli_lsa_open_policy[2] be convenience wrappers around their pidl equivalents.
      Fix IDL for lsa_LookupPrivDisplayName (based on samba3 code).
      Re-run make idl.
      Use pidl for _lsa_LookupPrivDisplayName().
      Use rpccli_lsa_LookupPrivDisplayName() in net and rpcclient.
      Remove unused marshalling for LSA_PRIV_GET_DISPNAME.
      Fix IDL for lsa_GetUserName.
      Re-run make idl.
      Add cmd_lsa_get_username command to rpcclient.
      Use pidl for _lsa_GetUserName().
      Remove unused marshalling for LSA_UNK_GET_CONNUSER.
      Remove unused LSA_CLOSE headers.
      Use pidl for _samr_SetUserInfo and _samr_SetUserInfo2.
      Allow to set correct info level log prefix in duplicates of copy_id21_to_sam_passwd.
      Use SAMR_FIELDS for fields_present in rpc_server/srv_samr_util.c.
      Fix SAMR_FIELD_LOGON_HOURS handling in rpc_server/srv_samr_util.c.
      Fix SAMR_FIELD_PARAMETERS handling in rpc_server/srv_samr_util.c.
      Removing unused ACCT_-flags.
      Remove some more unused samr headers.
      Fix IDL for samr_EnumDomainGroups.
      Re-run make idl.
      Fix IDL for samr_EnumDomainAliases.
      Re-run make idl.
      Use pidl for _samr_EnumDomainGroups() and _samr_EnumDomainAliases().
      Fix IDL for samr_EnumDomainUsers.
      Re-run make idl.
      Use pidl for _samr_EnumDomainUsers().
      Fix IDL for samr_QueryUserInfo.
      Re-run make idl.
      Cosmetics: remove new whitespace, sorry.
      Use rpccli_samr_EnumDomainAliases() in net and rpcclient.
      Use rpccli_samr_EnumDomainGroups in rpcclient.
      Use rpccli_samr_EnumDomainUsers in net and rpcclient.
      Remove unused marshalling for SAMR_ENUM_DOM_USERS.
      Move some samr init functions around (to allow easier identification of new
      Document that we were mixing up opcodes for SAMR_SET_USERINFO/2 all the time.
      Merge _samr_SetUserInfo and _samr_SetUserInfo2 into one call.
      Add get_logon_hours_from_pdb() (inspired by samba4).
      Use pidl for _samr_QueryUserInfo.
      w00t! SAMR server-side conversion to pidl is finished.
      Use rpccli_samr_QueryUserInfo() in rpcclient.
      Use rpccli_samr_QueryUserInfo in net and winbindd.
      Use every
      Remove unused marshalling for SAMR_QUERY_USERINFO.
      Remove all callers of rpccli_samr_setuserinfo2 and replace with
      Remove unused marshalling for SAMR_SET_USERINFO2.
      Use rpccli_samr_SetUserInfo2() in place of rpccli_samr_set_userinfo().
      The final SAM_USER_INFO massacre.
      Add querydispinfo2 and querydispinfo3 to rpcclient.
      Re-add support for samr_QueryDisplayInfo2/samr_QueryDisplayInfo3.
      Collect all init_lsa_string varients in one place.
      Fix IDL for lsa_EnumTrustDom.
      Re-run make idl.
      Use pidl for _lsa_EnumTrustDom()
      Use rpccli_lsa_EnumTrustDom all over the place.
      Remove unused marshalling for LSA_ENUM_TRUST_DOM.
      Fix the build of winbindd, sorry.
      Some minor, cosmetic cleanup in srv_samr_util.c.
      Merge data_blob_talloc_zero() from samba4.
      Use pidl for _netr_NetrEnumerateTrustedDomains().
      Remove unused marshalling for NET_TRUST_DOM_LIST.
      Remove unused init_sam_entry routine.
      Convert last caller (in winbindd) to rpccli_samr_LookupRids.
      Remove unused marshalling for SAMR_LOOKUP_RIDS.
      Convert last caller (in winbindd) to rpccli_samr_EnumDomainGroups.
      Remove unused marshalling for SAMR_ENUM_DOM_GROUPS.
      Convert last caller (in winbindd) to rpccli_samr_EnumDomainAliases.
      Remove unused marshalling for SAMR_ENUM_DOM_ALIASES.
      Goodbye parse_samr.c, rest in peace - but never come back!
      Remove redundant (and unused) set of samr opcodes.
      Use rpccli_netr_LogonControl() in rpcclient.
      Use pidl for _netr_LogonControl.
      Remove const on policy handle in net rpc.
      Pure cosmetics: remove trailing whitespace in netlogon server.
      Use pidl for _netr_ServerReqChallenge.
      Fix IDL for netr_LogonControl2.
      Re-run make idl.
      Fix IDL for netr_ServerPasswordSet.
      Re-run make idl.
      Move some lsa init routines around.
      Fix logonctrl2 command in rpcclient.
      Add some netr_NETLOGON_INFO init functions.
      Use pidl for _netr_LogonControl2.
      Remove unused marshalling for NET_LOGON_CTRL and NET_LOGON_CTRL2.
      Fix IDL for lsa_EnumAccounts.
      Re-run make idl.
      Use pidl for _lsa_EnumAccounts.
      Use rpccli_lsa_EnumAccounts() in net and rpcclient.
      Remove unused marshalling for LSA_ENUM_ACCOUNTS.
      Remove accidential commit.
      Fix typo.
      Fix IDL for lsa_EnumPrivsAccount.
      Re-run make idl.
      Use pidl for _lsa_EnumPrivsAccount().
      Remove white space.
      Use rpccli_lsa_EnumPrivsAccount() in rpcclient.
      Remove unused marshalling for LSA_ENUMPRIVSACCOUNT.
      Fix IDL for lsa_LookupPrivValue.
      Use pidl for _lsa_LookupPrivValue().
      Use rpccli_lsa_LookupPrivValue() in rpcclient.
      Remove unused marshalling for LSA_LOOKUP_PRIV_VALUE.
      Fix IDL for lsa_AddPrivilegesToAccount.
      Add lsaaddpriv and lsadelpriv commands to rpcclient.
      Use pidl for _lsa_AddPrivilegesToAccount and _lsa_RemovePrivilegesFromAccount.
      Remove unused marshalling for LSA_ADDPRIVS and LSA_REMOVEPRIVS.
      Fix IDL for lsa_AddAccountRights.
      Re-run make idl.
      Use pidl for _lsa_AddAccountRights().
      Use rpccli_lsa_AddAccountRights in net and rpcclient.
      Remove unused marshalling for LSA_ADD_ACCT_RIGHTS.
      Use pidl for _lsa_EnumAccountRights().
      Fix IDL for lsa_EnumAccountRights.
      Use rpccli_lsa_EnumAccountRights in net and rpcclient.
      Remove unused marshalling for LSA_ENUM_ACCT_RIGHTS.
      Fix IDL for lsa_RemoveAccountRights.
      Re-run make idl.
      Use pidl for _lsa_RemoveAccountRights.
      Use rpccli_lsa_RemoveAccountRights() in net and rpcclient.
      Remove unused marshalling for LSA_REMOVE_ACCT_RIGHTS.
      Remove some unused/redundant set of netlogon headers.
      Fix IDL for netr_DatabaseDeltas.
      Re-run make idl.
      Add netlogon_creds_client_check and netlogon_creds_client_step.
      Use rpccli_netr_DatabaseDeltas() in rpcclient.
      Remove unused marshalling for NET_SAM_DELTAS.
      Fix IDL for netr_DatabaseSync2.
      Re-run make idl.
      Use rpccli_netr_DatabaseSync2() in rpcclient.
      Convert "net rpc vampire/samdump" to pidl generated functions.
      Remove unused marshalling for NET_SAM_SYNC.
      Add netlogon_creds_server_check and netlogon_creds_server_step.
      Use pidl for _netr_ServerPasswordSet().
      Use pidl for _netr_ServerAuthenticate().
      Use pidl for _netr_ServerAuthenticate2().
      Use pidl for _netr_LogonSamLogoff().
      Remove unused marshalling for NET_SAM_LOGOFF.
      Fix IDL for netr_ServerReqChallenge, netr_ServerAuthenticate and
      Re-run make idl.
      Fix the netlogon rpc_server build.
      Replace DOM_CHAL with "struct netr_Credential" where we can right now.
      Remove unused marshalling for NET_REQ_CHAL and NET_AUTH2.
      Add init_netr_SamInfo3 routine.
      Fix IDL for netr_LogonSamLogon.
      Fix IDL for netr_LogonSamLogonEx.
      Re-run make idl.
      Add generated ndr_eventlog leftover produced by recent pidl changes.
      Use pidl for _netr_LogonSamLogon() and _netr_LogonSamLogonEx().
      YES! NETLOGON rpc server side migration to pidl finished.
      Remove unused creds_server_check and creds_server_step.
      Use rpccli_netr_ServerPasswordSet in "just_change_the_password()".
      Remove unused marshalling for NET_SRV_PWSET.
      Remove unused netlogon delta defines.
      Add krb5pac IDL from samba4.
      Add netsamlogoncache_entry to krb5pac IDL, probably not the most accurate place...
      Re-run make idl.
      Add missing header file.
      Use netr_SamInfo3 in sid_array_from_info3.
      Use new structs in reply_spnego_kerberos().
      Use netr_SamInfo3 in make_server_info_info3().
      Use netr_SamInfo3 in samlogon cache and use ndr functions for storing the blob.
      Align our krb5 PAC decoding routines to the samba4 ones.
      Some more cleanup in authdata.c.
      Use new IDL based PAC structures in clikrb5.c
      Fix some more callers of PAC_DATA.
      Getting rid of net_io_user_info3() when sending an NDR encoded netr_SamInfo3.
      Add some more samlogon related netlogon init functions.
      Use netr_SamInfo3 everywhere in winbindd.
      Use netr_SamInfo3 in remaining places.
      Finally let our samlogon routines call rpccli_netr_LogonSamLogon internally and
      Remove unused marshalling for NET_SAM_LOGON.
      Use rpccli_netr_LogonSamLogonEx in rpccli wrapping function.
      Remove unused marshalling for NET_AUTH. This must have been forgotten.
      Remove unused marshalling for NET_SAM_LOGON_EX and finally NET_USER_INFO_3.
      Remove unused marshalling for NET_AUTH3.
      Add sync netr_LogonControlCode from samba3.
      Re-run make idl.
      Remove rpc_parse/parse_net.c and some last unused netlogon headers.
      Remove unused creds_client_check and creds_client_step.
      Move policy_handle_is_valid out of parse_lsa.c
      Fix IDL for lsa_LookupNames.
      Fix IDL for lsa_LookupSids.
      Fix IDL for lsa_LookupSids2.
      Fix IDL for lsa_LookupNames2.
      Fix IDL for lsa_LookupNames3.
      Fix IDL for lsa_LookupSids3.
      Fix IDL for lsa_LookupNames4.
      Re-run make idl.
      Use pidl for NTSVCS.
      Build the generated ntsvcs server (not at all useable yet).
      Move all dummy ntsvcs calls to WERROR.
      Fill in IDL for PNP_GetVersion (based from samba3).
      Re-run make idl.
      Add very basic ntsvcs client to rpcclient.
      Use pidl for _PNP_GetVersion().
      Remove unused marshalling for NTSVCS_GET_VERSION.
      Fill in IDL for PNP_ValidateDeviceInstance (based on samba3).
      Re-run make idl.
      Add ValidateDeviceInstance command to rpcclient.
      Use pidl for _PNP_ValidateDeviceInstance().
      Remove unused marshalling for NTSVCS_VALIDATE_DEVICE_INSTANCE.
      Fill in IDL PNP_GetDeviceListSize() based on samba3.
      Re-run make idl.
      Add ntsvcs_getdevlistsize command to rpcclient.
      Use pidl for _PNP_GetDeviceListSize().
      Remove unused marshalling for NTSVCS_GET_DEVICE_LIST_SIZE.
      Fill in (very unfinished) IDL for PNP_HwProfFlags.
      Re-run make idl.
      Add ntsvcs_hwprofflags command to rpcclient.
      Use pidl for _PNP_HwProfFlags().
      Remove unused marshalling for NTSVCS_HW_PROFILE_FLAGS.
      Add IDL for PNP_GetHwProfInfo.
      Re-run make idl.
      Add ntsvcs_hwprofinfo command to rpcclient.
      Use pidl for _PNP_GetHwProfInfo().
      Remove unused marshalling for NTSVCS_GET_HW_PROFILE_INFO.
      Use rpccli_lsa_LookupNames() inside of rpccli_lsa_lookup_names.
      Use rpccli_lsa_LookupSids() in rpccli_lsa_lookup_sids_noalloc().
      Remove whitespace, no code changes.
      Use pidl for _svcctl_OpenSCManagerW().
      Use rpccli_svcctl_OpenSCManagerW() in net.
      Remove unused marshalling for SVCCTL_OPEN_SCMANAGER.
      Use pidl for _svcctl_OpenServiceW().
      Use rpccli_svcctl_OpenServiceW() in net.
      Remove unused marshalling for SVCCTL_OPEN_SERVICE.
      Use pidl for _svcctl_GetServiceDisplayNameW().
      Remove unused marshalling for SVCCTL_GET_DISPLAY_NAME.
      Use pidl for _lsa_LookupNames() and _lsa_LookupNames2().
      Fix IDL for lsa_LookupNames3 and lsa_LookupNames4.
      Re-run make idl.
      Use pidl for _lsa_LookupNames3 and _lsa_LookupNames4.
      Remove unused marshalling for LSA_LOOKUP_NAMES/2/3/4
      Use pidl for _lsa_LookupSids, _lsa_LookupSids2 and _lsa_LookupSids3.
      Yippie! LSARPC server-side migration to pidl finished.
      Remove unused marshalling for LSA_LOOKUP_SIDS/2/3.
      w
      Fix some uninitialized data in new netlogon client.
      Use pidl for _svcctl_StartServiceW().
      Use rpccli_svcctl_StartServiceW() in net.
      Remove unused marshalling for SVCCTL_START_SERVICE.
      Use pidl for _svcctl_ControlService().
      Use rpccli_svcctl_ControlService() in net.
      Remove unused marshalling for SVCCTL_CONTROL_SERVICE.
      Use pidl for _svcctl_QueryServiceStatus().
      Use rpccli_svcctl_QueryServiceStatus() in net.
      Remove unused marshalling for SVCCTL_QUERY_STATUS.
      Use pidl for _svcctl_LockServiceDatabase().
      Remove unused marshalling for SVCCTL_LOCK_SERVICE_DB.
      Use pidl for _svcctl_UnlockServiceDatabase().
      Remove unused marshalling for SVCCTL_UNLOCK_SERVICE_DB.
      Copy recent spoolss IDL from samba4 into our tree.
      Add lsa_PolicyAccessMask to lsa.idl.
      Use lsa_PolicyAccessMask in lsa_OpenPolicy/2.
      Re-run make idl.
      Use new LSA_POLICY defines in lsa rpc server code and other places.
      Move MAX_REF_DOMAINS to lsa.idl.
      Re-run make idl.
      Move MAX_LOOKUP_SIDS to lsa.idl.
      Re-run make idl.
      Move LSA_AUDIT_NUM_CATEGORIES defines to lsa rpc_server.
      Move PASS_*_CHANGE_AT_NEXT_LOGON defines to samr.idl.
      Re-run make idl.
      Move MAX_SAM_ENTRIES defines to samr rpc_server and to samr.idl.
      Re-run make idl.
      Remove unneeded rpc_samr.h.
      Remove unused BRS marshalling headers.
      Cosmetics: make check_bind_req() debug statements a little nicer.
      Add my copyright.
      Fill in IDL for svcctl_QueryServiceObjectSecurity.
      Re-run make idl.
      Use pidl for _svcctl_QueryServiceObjectSecurity().
      Remove unused marshalling for SVCCTL_QUERY_SERVICE_SEC.
      Fill in IDL for svcctl_SetServiceObjectSecurity.
      Re-run make idl.
      Use pidl for _svcctl_SetServiceObjectSecurity().
      Remove unused marshalling for SVCCTL_SET_SERVICE_SEC.
      Fix segfault in _srv_net_file_enum.
      Some cosmetics for net_derive_salting_principal().
      Add noopnum to libnet join/unjoin calls.
      Use W_ERROR_NOT_OK_GOTO_DONE macro in libnetjoin.
      Merge all connect ads calls into libnet_join_post_processing_ads().
      Add disabled_machine_account and deleted_machine_accoutn flags to libnetunjoin.
      Re-run make idl.
      Add preliminary libnet_join_post_verify call to libnetjoin.
      Fill in machine account manipulation flags while unjoining in libnetunjoin.
      Delete affinity cache entries while unjoining with libnetunjoin.
      Check for mandatory domain name in libnetjoin/unjoin.
      Store domain_is_ad info as early as possible in libnetjoin.
      Use libnet_Unjoin() for "net ads leave".
      Let dsgetdcname() return a struct netr_DsRGetDCNameInfo.
      Remove unused display_ds_domain_controller_info() function.
      Fix one dsgetdcname call in wkssvc rpc server.
      Re-arrange dns update block during "net ads join" a little.
      Add WERR_TIME_SKEW to werror mapping tables.
      Nicen error output in net_ads_leave.
      Use libnet_Join() for "net ads join".
      Some fixes for net ads join (uninitialized vars).
      Use libnetapi_get_error_string() in "net dom" commands.
      Add some more error handling in libnetjoin.
      Only set DEBUGLEVEL to 0 in libnetapi when not set already.
      libnetjoin: Merge in comments, debugs and missing code from original join code.
      Remove original copy of now redundant join code.
      Re-enable _wkssvc_NetrJoinDomain2 remote join implementation now that we are ready for it.
      While we are at it: add _wkssvc_NetrUnjoinDomain2 implementation.
      Fix memleak in netsamlogon_cache_get().
      Remove DomainControllerAddressType which we now have in IDL.
      Re-run make idl.
      Fix samr querydispinfo w.r.t. lsa_AsciiStringLarge.
      libnetjoin: Trying to avoid confusion between acct_flags, acb_info and
      libnetjoin: add fallback to level 24 samr setinfo so that libnet can join NT4.
      Trying to fix libnetapi examples Makefile.in.
      Fill in WHATSNEW.txt.
      Pure cosmetics, trying to get my group policy diff smaller.
      Add infrastructure for reading/storing Group Policy state and control data in the registry.
      Fill in WHATSNEW.txt.
      Add Group Policy extension infrastructure.
      Add "registry" Group Policy extension.
      what a wurst.
      Revert "what a wurst."
      Add gp_get_machine_token().
      Fix the build w/o ldap.
      Fix init_registry_data for subkeyless top-level keys.
      Make sure we are still able to join Windows 2008.
      Fix gp_find_file() which broke during the pstring removal.
      Make sure we are still able to join Windows 2008.
      Fix init_registry_data for subkeyless top-level keys.
      Fix crash bug in pdb_init_ldapsam().
      Move talloc_init to the right place in "net ads join".
      Zero more structs initially in LSA rpc server.
      Use TALLOC_FREE in libnetjoin debugging dump code.
      Fix crash bug in pdb_init_ldapsam().
      Fix lsa_QueryInfoPolicy: make proper talloc copies of the sids.
      Fix counter mismatch in lsa_LookupNames server.
      Fix counter mismatch in lsa_LookupNames3 server.
      Zero more structs initially in LSA rpc server.
      Fix lsa_QueryInfoPolicy: make proper talloc copies of the sids.
      Fix counter mismatch in lsa_LookupNames server.
      Fix counter mismatch in lsa_LookupNames3 server.
      Add new Windows 2008 Kerberos PAC Type 12 (apparently again undocumented).
      Re-run make idl.
      Add new Windows 2008 Kerberos PAC Type 12 (apparently again undocumented).
      Re-run make idl.
      Add secure_channel_type to libnetjoin.
      Fix proxy_srvsvc_call().
      Whitespace cleanup in srvsvc server.
      Use pidl for _srvsvc_NetSrvGetInfo().
      Use rpccli_srvsvc_NetSrvGetInfo() in rpcclient.
      Remove unused marshalling for SRV_NET_SRV_GET_INFO.
      Fix IDL for srvsvc_NetSrvSetInfo().
      Re-run make idl.
      Use pidl for _srvsvc_NetSrvSetInfo().
      Remove unused marshalling for SRV_NET_SRV_SET_INFO.
      Fix rpccli_srvsvc_NetSrvSetInfo call in libnetapi.
      Fix IDL for srvsvc_NetShareSetInfo().
      Re-run make idl.
      Use pidl for _srvsvc_NetShareSetInfo().
      Fix IDL for srvsvc_NetRemoteTOD().
      Re-run make idl.
      Use pidl for _srvsvc_NetRemoteTOD().
      Use rpccli_srvsvc_NetRemoteTOD() in rpcclient.
      Remove unused marshalling for SRV_NET_REMOTE_TOD.
      Fix build of pam_smbpass.
      Fix build of pam_smbpass.
      Add PICFLAG to libnetapi Makefile.
      Give a better error message why NetServerSetInfo() may fail in the gui.
      Make sure to generate pkgconfig files for libtdb and libtalloc.
      Revert "Make sure to generate pkgconfig files for libtdb and libtalloc."
      Another build fix for pam_smbpass: make sure libwbclient is there.
      Fix build targets for bin/net.
      Add PICFLAG to libnetapi Makefile.
      Give a better error message why NetServerSetInfo() may fail in the gui.
      In libnetapi, point out that lp_load has failed.
      Fix lp_load with an empty registry and "config backend = registry". Michael, please check.
      Fix lp_load with an empty registry and "config backend = registry". Michael, please check.
      In libnetapi, point out that lp_load has failed.
      Another build fix for pam_smbpass: make sure libwbclient is there.
      Fix build targets for bin/net.
      Be more verbose why create local token has failed during
      Slowly making progress on PAC_UNKNOWN_12.
      Re-run make idl.
      Ignore Kerberos PAC type 12.
      Re-run make idl.
      Add new Windows 2008 Kerberos PAC Type 12 (apparently again undocumented).
      Slowly making progress on PAC_UNKNOWN_12.
      Ignore Kerberos PAC type 12.
      Fix the build of cifs.spnego.
      Fix _dssetup_DsRoleGetPrimaryDomainInformation().
      Fix debug statement (missing \n).
      Fix IDL for srvsvc_NetShareEnum and srvsvc_NetShareEnumAll.
      Re-run make idl.
      Add some more init_srvsvc_NetShareInfoX functions.
      Enable libnetjoin debugging for now but avoid printing passwords.
      Use pidl for _srvsvc_NetShareGetInfo, _srvsvc_NetShareEnum and srvsvc_NetShareEnumAll.
      Use pidl generated NetShareGet/SetInfo and Enum calls in rpcclient.
      Use pidl for _srvsvc_NetShareDel and _srvsvc_NetShareDelSticky.
      Add netnamevalidate command to rpcclient.
      Use pidl for _srvsvc_NetNameValidate.
      Use rpccli_srvsvc_NetShareDel in net.
      Remove unused marshalling for SRV_NET_SHARE_DEL.
      Remove unused marshalling for SRV_NET_NAME_VALIDATE.
      Fix IDL for srvsvc_NetShareAdd().
      Re-run make idl.
      Use pidl for _srvsvc_NetShareAdd.
      Fix IDL for srvsvc_NetSetFileSecurity and srvsvc_NetGetFileSecurity.
      Re-run make idl.
      Add netfilegetsec command to rpcclient.
      Use pidl for _srvsvc_NetSetFileSecurity.
      Use pidl for _srvsvc_NetGetFileSecurity.
      Remove unused marshalling for SRV_NET_FILE_SET_SECDESC and SRV_R_NET_FILE_GET_SECDESC.
      Use pidl for _srvsvc_NetSessDel().
      Add netsessdel command to rpcclient.
      Fix IDL for srvsvc_NetSessEnum().
      Re-run make idl.
      Add netsessenum command to rpcclient.
      Add some srvsvc_NetSessInfo init functions.
      Use rpccli_srvsvc_NetShareEnumAll in smbclient.
      Remove insane amount of whitespace.
      Use rpccli_srvsvc_NetShareEnumAll in libsmbclient.
      Use rpccli_srvsvc_NetShareEnumAll in smbtree.
      Use rpccli_srvsvc_NetShareGetInfo in 2 places in "net".
      Use rpccli_srvsvc_NetShareAdd in net.
      Convert "net" to use rpccli_srvsvc_NetShare* interfaces everywhere.
      Remove unused marshalling for SRV_NET_SHARE_{ENUM,ADD,SETINFO,GETINFO}
      Remove unused marshalling for SRV_NET_SESS_DEL.
      Fix IDL for srvsvc_NetFileEnum.
      Re-run make idl.
      Use rpccli_srvsvc_NetFileEnum in net and rpcclient.
      Remove rpccli_srvsvc_net_file_enum() and cli_srvsvc.c with it.
      Add netdiskenum to rpcclient.
      Fix IDL for srvsvc_NetConnEnum.
      Re-run make idl.
      Add netconnenum to rpcclient.
      Fix netdiskenum call in rpcclient.
      Use pidl for _srvsvc_NetDiskEnum.
      Fix return of reg values below HKLM/SOFTWARE/MICROSOFT/WINDOWSNT/CURRENTVERSION.
      Allow to send no resume_handle in rpcclient's NetShareEnum* calls.
      Trying to fix resume_handling for srvsvc_NetShareEnumAll.
      Add some last init_srvsvc_X functions.
      Ignore some unneeded autogenerated cli_ and srv_ functions.
      Remove unused marshalling for SRV_NET_DISK_ENUM.
      For convenience reasons, always create cli->srv_name_slash in the rpc_client.
      Use existing srv_name_slash.
      Fix typo.
      Bind Group Policy processing closer to the samba registry.
      Use pidl for _srvsvc_NetFileEnum.
      Remove unused marshalling for SRV_NET_FILE_ENUM.
      Fix the build (by calling NDR_SRVSVC_NETFILEENUM).
      Fix crash bug in check_sam_security() when make_server_info_sam() did a
      Add error mapping for WERR_SERVICE_NEVER_STARTED.
      No need to compose CLI_SERVER_NAME_SLASH in "net rpc service" anymore.
      Move svc_status_string() out of rpc_client/cli_svcctl.c
      Fix IDL for svcctl_EnumDependentServicesW().
      Re-run make idl.
      Use pidl for _svcctl_EnumDependentServicesW().
      Remove unused marshalling for SVCCTL_ENUM_DEPENDENT_SERVICES.
      Allow to set or unset resume_handle in netconnenum in rpcclient.
      Use pidl for _srvsvc_NetConnEnum().
      Remove unused marshalling for SRV_NET_CONN_ENUM.
      Add support for setting resume handle in netsessenum rpcclient command.
      Use pidl for _srvsvc_NetSessEnum().
      Remove unused marshalling for SRV_NET_SESS_ENUM.
      Move MAX.*ENTRY definitions out of old rpc srvsvc parsing code.
      Remove double RPC_PARSE_OBJ2 from Makefile.
      Remove remaining old srvsvc client and server rpc code entirely.
      Add my copyright.
      Fix IDL for winreg_QueryValue.
      Re-run make idl.
      Fix _winreg_QueryValue().
      Add some more header properties as inline comments to the generated samba3 client.
      Re-run make idl (after pidl change for adding header info to cli_ functions).
      Add debug statement in auth_winbind to display wbcAuthenticateUserEx error code.
      Fix wbcAuthenticateUserEx().
      Add svcctl_MgrAccessMask and svcctl_ServiceAccessMask.
      Re-run make idl.
      Comment out some svcctl headers which are now defined in IDL.
      Fill in IDL for PNP_GetDeviceRegProp.
      Re-run make idl.
      Strip whitespace in ntsvcs rpc server.
      Add ntsvcs_getdevregprop command to rpcclient.
      Fix _netr_LogonControl2(). Return talloced dcname.
      Fix IDL for netr_NETLOGON_INFO_2.
      Re-run make idl.
      Fix winbind NETLOGON cred chain on a samba dc for w2k8 trusts.
      Fix typo.
      Use netr_LogonControlCode in netr_LogonControl2().
      Re-run make idl.
      Move inline comment about MSV1_0 flags to IDL.
      Move the known NETLOGON_CONTROL reply flags to IDL.
      Move LOGON_KRB5_FAIL_CLOCK_SKEW to winbindd_pam.
      Move DSGETDC_VALID_FLAGS to IDL.
      Move netr_LogonLevel flags to IDL, rename old one to netr_LogonInfo.
      Re-run make idl.
      Fix samlogon rpc client & server.
      Remove unused DS_DOMAIN_CONTROLLER_INFO struct.
      Ndr pull and push errors are worth to be logged with 1 at least.
      Fix typo.
      Add lsa_BinaryString.
      Fill in netr_AcctLockStr and use lsa_BinaryString in netlogon delta.
      re-run make idl.
      Minor fix for net rpc samdump.
      Re-add support for display and vampire of account policies in "net".
      Remove unused marshalling for Netlogon Lockout String.
      Remove last reference to rpc_netlogon.h.
      Make sure to zero the returned handle in _svcctl_CloseServiceHandle().
      Rename string to array in lsa_BinaryString.
      Re-run make idl.
      Fix blob used in pull_netr_AcctLockStr().
      Make netr_DsRGetDCNameInfo public.
      Re-run make idl.
      Use NDR for netr_DsRGetDCNameInfo un-/marshalling in dsgetdcname.
      Remove unneeded pack_dsdcinfo/unpack_dsdcinfo.
      Check for buffer in decode_wkssvc_join_password_buffer.
      Let libnetjoin find the dc in wkssvc NetrJoinDomain2/UnjoinDomain2.
      Add Support for DOMAIN\DCNAME syntax in libnetjoin.
      Add ads_check_ou_dn().
      Support "net ads join" format while joining to a specific ou.
      Add some paranoia fixes for _wkssvc_NetrJoinDomain2/UnjoinDomain2.
      Fill in netr_NegotiateFlags.
      Re-run make idl.
      Don't let winbind getgroups crash when we have no gids in the token.
      Zero initial return_authenticator in net rpc samdump.
      Add init_samr_parameters_string().
      The parameters string (aka munged dial string) in samr is not a normal lsa_String.
      Re-run make idl.
      Re-add support for the samr parameters string.
      Fix _srvsvc_NetShareSetInfo.
      Use uint32 in max_users field in SRVSVC ShareInfo levels consistently.
      Re-run make idl.
      Fix SRVSVC ShareInfo max_users handling server side.
      Fix IDL for srvsvc_NetShareInfo502. It does indeed contain a sec_desc_buf.
      Re-run make idl.
      Fix SRVSVC ShareInfo level 502 server side handling.
      Fix SRVSVC NetShareInfo level 502 client-side.
      Fix build warning.
      Fix build of rpcclient.
      Fix NETLOGON credential chain with Windows 2008 all over the place.
      Make sure to hand down the domain name in libnetapi NetUnjoinDomain.
      Some fixes for netdomjoin-gui and support for browsing/joining OUs.
      Apply some const in clirap.
      Fix "net rpc trustdom establish" for win2k8 trusts.
      Add NT_STATUS_RPC_CANNOT_SUPPORT.
      Fix rpccli_lsa_lookup_sids_noalloc.
      Make more functions in pam_winbind static.
      Add pwb_context to pam_winbind.h.
      Add _pam_winbind_init/free_context.
      Use pwb_context in pam_winbind.
      Fix pam_winbind macros.
      Move rpccli_try_samr_connects out of rpcclient.
      Remove some dead code in rpcclient.
      Always uppercase cli->srv_name_slash.
      Use sid_array_from_info3 in lookup_usergroups_cached().
      Fix _samr_GetDomPwInfo (to return more then zeros).
      Fix _samr_GetUserPwInfo() (to return more then just zeros).
      Whatsnew
      Add libnetapi.idl.
      Build libnetapi.idl.
      Add libnetapi generated files.
      Restructure inner workings of libnetapi a bit.
      Add CLI_FULL_CONNECTION_FALLBACK_AFTER_KERBEROS define.
      Prefill in username in libnetapi ctx.
      Use popt in libetapi example code.
      Fix includes in libnetapi examples common.c
      Add DsGetDCName call to libnetapi.idl.
      Re-run make idl.
      Add DsGetDcName call to libnetapi library.
      Add DsGetDcName libnetapi example.
      Try to use kerberos in libnetapi.
      Move is_valid_policy_hnd() out of net.
      Fix the build of reply_setattrE().
      Fix IDL for lsa_QueryDomainInformationPolicy.
      Fix IDL for lsa_QueryTrustedDomainInfoByName.
      Fix IDL for lsa_QueryTrustedDomainInfoBySid.
      Re-run make idl.
      Fix lsa_TrustedDomainInfo callers.
      Fix IDL for lsa_QueryTrustedDomainInfo.
      Re-run make idl.
      Fix IDL for lsa_LookupPrivName.
      Re-run make idl.
      Fix lsa_QueryTrustedDomainInfo caller.
      Fix parameters string for rpc_trustdom_add_internals().
      Add NetUserAdd to libnetapi IDL.
      Re-run make idl.
      Add NetUserAdd to libnetapi.
      Add NetUserAdd example.
      Add NetUserDel to libnetapi IDL.
      Re-run make idl.
      Add NetUserDel to libnetapi.
      Add Add NetUserDel example.
      Add NetUserEnum to libnetapi IDL.
      Re-run make idl.
      Add NetUserEnum to libnetapi.
      Add NetUserEnum example.
      Add MAX_NERR define.
      Add some more cli_cm_set_X functions.
      Fix typo.
      Add SERVER_INFO_1005 to libnetapi.idl.
      Re-run make idl.
      Use SERVER_INFO_1005 in libnetapi.
      Add very basic cli_cm_* based connection handler to libnetapi.
      Split out private headers in libnetapi.
      Fix one missing netapi_private header.
      Use libnetapi_open_ipc_connection in libnetapi.
      Add libnetapi_open_pipe, inspired by the cli_cm_ interface.
      Use libnetapi_open_pipe in netapi functions.
      Fill in WHATSNEW.txt for pre3.
      Move some WERRORs down to the NERR_BASE block.
      Add WERR_USER_ALREADY_EXISTS and WERR_PASSWORD_RESTRICTION.
      Fix ou handling in netdomjoin-gui.
      gpo: make integer debug print more readable.
      libnetapi: don't to try to free NULL struct.
      gpo: add scripts plugin.
      Fix the build of eventlogadm.
      libnetapi: Add IDL for NetQueryDisplayInformation.
      Re-run make idl.
      libnetapi: add NetQueryDisplayInformation skeleton.
      libnetapi: don't reset the error code in NetUserAdd_r if the operation failed.
      libnetapi: fill in NetQueryDisplayInformation_r.
      libnetapi: add NetQueryDisplayInformation example.
      libnetapi: Add NetQueryDisplayInformation header.
      libnetapi: add libnetapi_set_use_kerberos
      libnetjoin: Fix joining when no KRB5CCNAME is around.
      libnetjoin: Remove machine account if we failed to set password.
      WKSSVC: In _wkssvc_NetrJoinDomain2, do modify the local configuration if enabled.
      net: the success of secrets_init is checked by libnetjoin now.
      doserr: Add WERR_INVALID_DOMAIN_STATE and WERR_INVALID_DOMAIN_ROLE.
      net: use WERROR for check_ads_config().
      libnetjoin: Fix unjoining when no KRB5CCNAME is around.
      net: exit early in net_ads_join() if the domain is not set.
      libgpo: fix build warning.
      libnetjoin: separate out libnet_join_lookup_dc_rpc.
      libnetjoin: delete the workgroup name when requested while unjoining.
      net: abort when lp_realm is not set in net_ads_leave().
      libnetjoin/net: Fix lp_config_backend_is_registry() handling.
      IDL: Import drsuapi.idl from samba4.
      IDL: Fix several DRSUAPI calls.
      IDL: For the fun of it, build drsuapi.idl.
      libnetapi: Add missing headers.
      libnetapi: do not overwrite status in libnetapi_get_error_string().
      net/libnetapi: Include netapi headers early and free on exit.
      errors: Add WERR_NONE_MAPPED.
      errors: Add WERR_NO_SUCH_USER.
      libnetapi: Let NetUserAdd_l/NetUserDel_l talk to the local RPC server.
      net: use NetUserDel for "net rpc user delete".
      net: Use NetUserAdd for "net rpc user add".
      net: Remove unused rpc_user_add/del_internals code.
      libnetapi: Add initial inline doxygen comments.
      dsgetdcname: Fix discover_dc_dns.
      NetrUnjoinDomain2: Honor registry config to try config changes.
      net: Be more tolerant while joining.
      libgpo: Fallback to NTLMSSP fails while pulling policy from SYSVOL.
      libgpo: try nicer output when dumping gpo registry values.
      netdomjoin-gui: Fix label alignment showing up with lower screen-resolution.
      libnetapi: Disable talloc_enable_leak_report.
      wbclient: Remove unused string.
      IDL: Add nbt.idl from Samba4.
      IDL: Build nbt.idl always.
      IDL: Add autogenerated nbt files.
      IDL: build generated nbt code.
      Move GETDC mailslot out of winbindd.
      IDL: add dom_sid0 to security.idl (hand merge from samba4).
      IDL: Re-run make idl and hand merge some required functions from Samba 4.
      IDL: Add type 23 in nbt_ntlogon_request reply packets.
      IDL: make idl.
      cli_cm: Make nicer password prompt in do_connect().
      netdomjoin-gui: Omit warning when unjoining a domain fails.
      libnetapi: Add Doxyfile.
      samlogoncache: Use data_blob_const in netsamlogon_cache_get.
      winbind: Use libnbt for NTLOGON SAMLOGON mailslot request and reply.
      winbind: pass down existing talloc context.
      IDL: Add NTLOGON_RESPONSE_FROM_PDC2 to nbt_logon_request.
      IDL: make nbt_cldap_netlogon_5 public.
      IDL: re-run make idl.
      libads: Use libnbt for CLDAP reply parsing.
      cldap: add talloc context to ads_cldap_netlogon().
      cldap: avoid duplicate definitions so remove ads_cldap.h.
      IDL: now that we have nbt.idl, re-add it to the includes again.
      IDL: rerun make idl.
      net: Add libnetapi context to net's impressive list of globals.
      dsgetdcname: add very basic flat name support.
      dsgetdcname: Fix discover_dc_dns().
      build: fix the build.
      libnetjoin: identify type of domain early.
      IDL: Fix IDL for samr_GetDisplayEnumerationIndex{2}.
      IDL: rerun make idl.
      rpcclient: Add getdispinfoidx command.
      document "setprintername" (Bugzilla: #1830)
      Corrected default settings for "ldap timeout".
      Document "deldriverex"
      most probably a typo.
      "mangle case" silently vanished with samba 3.0.6. Reflect this fact
      Fix from Bjoern Jacke.
      Fix whitespace.
      Document "net rpc user rename".
      Start documenting pam_winbind's options. Maybe someone more fluent in
      Thanks to abartlet: Add note about spaces in pam_winbind's options.
      Names can fail to resolve in %m, not in %L when listening on port 445.
      Document idmap_ad plugin and "winbindd nss info".
      Document procedure to move account policies to ldapsam.
      Start documenting undocumented parameters.
      Follow code cleanup wrt idmap module names.
      Mention the "silent" option.
      Document debug_state option.
      rpcclient: Add tiny fix for cmd_samr_get_dispinfo_idx().
      mailslot: allow to define nt_version in send_getdc_request().
      mailslot: make sure we are looking at the correct reply structure.
      mailslot: allow to give back struct nbt_ntlogon_packet.
      mailslot/dsgetdcname: do what XP does and request nt_version 11.
      errors: add WERR_INVALID_DOMAINNAME.
      IDL: Add autogenerated drsuapi files.
      Merge data_blob_hex_string from Samba4.
      errors: add WERR_NOT_FOUND.
      netapi: fix returned name buffer in NetGetJoinInformation_r().
      IDL: Add DFS_MANAGER_VERSION_W2K8.
      Re-run make idl.
      _netr_LogonSamLogon: fix lm session key length.
      rpcclient: fix another srv_name_slash.
      IDL: add nbt_netlogon_version.
      IDL: use samr_AcctFlags in nbt_ntlogon_sam_logon.
      IDL: move some netlogon DS flags to NBT where they actually showup first.
      IDL: use nbt_dc_sock_addr.
      Re-run make idl.
      build: fix some build dependencies.
      IDL: use nbt_netlogon_command in cldap replies.
      IDL: add nbt_cldap_netlogon_29 which includes the next_closest_site.
      build: fix make everything.
      re-run make idl.
      pam_winbind: Fix Bug #5430 (patch from fumiyas at osstech.co.jp).
      ntlmssp: replace UNKNOWN_02000000 with NTLMSSP_NEGOTIATE_VERSION.
      Fix client authentication with -P switch in client tools (Bug 5435).
      dsgetdcname: use correct dc name for name cache store.
      mailslot/cldap: use nt_version bits in queries.
      build: fix the build w/o ldap.
      wins: fix null pointer crash in nss_wins module.
      netapi: add -f switch for DsGetDCName() example and be more verbose on output.
      dsgetdcname: remove invalid assumptions when using DNS for the DC query.
      IDL: add missing case 14 and 15 to nbt_cldap_netlogon union.
      re-run make idl.
      netdomjoin-gui: before prompting for creds, ask dsgetdcname for a dc.
      IDL: make nbt_cldap_netlogon_29 public.
      re-run make idl.
      gencache: add some const.
      dsgetdcname: add map_ds_flags_to_nt_version.
      dsgetdcname: add pull_mailslot_cldap_reply().
      cldap: let ads_cldap_netlogon() return all possible cldap replies.
      dsgetdcname: add get_cldap_reply_server_flags().
      dsgetdcname: add make_dc_info_from_cldap_reply().
      dsgetdcname: use make_dc_info_from_cldap_reply() for cldap replies.
      dsgetdcname: map additional flags to nt_version.
      dsgetdcname: wait a little longer for mailslot replies.
      dsgetdcname: mailslot replies are identical to the cldap ones, use cldap everywhere.
      dsgetdcname: remove invalid assumption in discover_dc_dns().
      dsgetdcname: be more paranoid about the existance of an ip_address.
      dsgetdcname: simply call ourself with DS_FORCE_REDISCOVERY after cache expiry.
      dsgetdcname: pure cosmetics.
      dsgetdcname: fix gencache store for dsgetdcname().
      cldap: move out cldap object to fix the build.
      dsgetdcname: add map_dc_and_domain_names() for consolidating returned names.
      util: add strip_hostname() to strip of leading '\\'.
      Use strip_hostname after dsgetdcname/getdcname calls.
      dsgetdcname: the forest name should never be empty.
      dsgetdcname: use existing messaging_context if possible.
      IDL: Add nbt_cldap_netlogon_15.
      IDL: Fix nbt_cldap_netlogon union, removing the default member.
      re-run make idl.
      dsgetdcname: make use of nbt_cldap_netlogon_15.
      dsgetdcname: add reminder that we need to support ipv6 here once we know how.
      mailslot: Also pick domain name and pdc name from type 15 cldap reply.
      dsgetdcname: In case we didn't get a mailslot reply, don't cache the nodestatus.
      Fix Bug #5465 (joining with createcomputer=ou1/ou2/ou3).
      Fix build warning.
      libads/cldap: store client sitename also keyed by dns domain name.
      dsgetdcname: check for invalid sitename/flag combinations.
      dsgetdcname: add site support.
      net: Fix net lookup dsgetdcname, no need to pull site ourselves.
      dsgetdcname: store client sitename for mailslot and cldap replies.
      net: use the netapi_ctx from the net_context struct.
      netdomjoin-gui: before prompting for creds (for receiving joinable ous), find a dc.
      libnetjoin: for informational reasons, report forest_name.
      Fix Bug #5461 and implement a very basic _samr_GetDisplayEnumerationIndex().
      Fix typo.
      drsuapi: add all code required for our drsuapi rpc client.
      drsuapi: fix the build.
      Revert "drsuapi: fix the build."
      drsuapi: fix the build.
      drsuapi: add very basic drsuapi rpcclient command set.
      drsuapi: always use tcp for drsuapi.
      rpcclient: simplify drsuapi dscracknames call slightly.
      idl: add drsuapi_DsGetDCInfoCtr3 used by w2k8.
      re-run make idl.
      rpcclient: call drsuapi_DsUnbind() when finished with DsCrackNames call.
      rpcclient: add drsuapi dsgetdcinfo call.
      doserr: add WERR_REVISION_MISMATCH.
      idl: avoid sa_family as it its a macro on IRIX.
      re-run make idl.
      dsgetdcname: use family (instead of sa_family).
      libwbclient: fix typo.
      drsuapi: fix data_blob_free() caller (this call is quite different in s3 and 4).
      wbinfo: prompt for password when none has been given.
      build: Fix the build after prototype change.
      Fix Bug #5285. (libcap header mismatch)
      idl: add NetGroupAdd() to libnetapi.
      re-run make idl.
      idl: add NetGroupDel() to libnetapi.
      re-run make idl.
      libnetapi: add dummy implementation for NetGroupAdd() and NetGroupDel().
      netapi: Add NetGroupDel/NetGroupAdd header.
      doserr: Add WERR_GROUP_EXISTS and WERR_SPECIAL_ACCOUNT.
      netapi: implement NetGroupAdd_r().
      netapi: add NetGroupAdd() example code.
      net: Use NetGroupAdd() for adding domain groups.
      netapi: implement NetGroupDel_r().
      netapi: add NetGroupDel() example code.
      netapi: let NetGroupAdd_l and NetGroupDel_l call the remote functions.
      netapi: add NetGroupSetInfo to IDL.
      re-run make idl.
      netapi: Add dummy implementation of NetGroupSetInfo().
      netapi: implement NetGroupSetInfo_r().
      netapi: Add NetGroupSetInfo() example code.
      netapi: add NetGroupGetInfo() to IDL.
      re-run make idl.
      netapi: add dummy implementation of NetGroupGetInfo().
      netapi: Implement NetGroupGetInfo_r().
      netapi: add NetGroupGetInfo() example code.
      netapi: add NetGroupAddUser() and NetGroupDelUser() to IDL.
      re-run make idl.
      netapi: add dummy implementation for NetGroupAddUser() and NetGroupDelUser().
      errors: add more WERRORs.
      netapi: implement NetGroupAddUser().
      netapi: add NetGroupAddUser() example.
      netapi: Implement NetGroupDelUser().
      netapi: Add NetGroupDelUser() example.
      netapi: add libnetapi_samr_open_domain().
      netapi: use libnetapi_samr_open_domain().
      netapi: add NetLocalGroupAdd() to IDL.
      re-run make idl.
      netapi: add NetLocalGroupAdd() skeleton.
      netapi: Implement NetLocalGroupAdd().
      netapi: add NetLocalGroupAdd to public api.
      netapi: add NetLocalGroupAdd() example.
      netapi: add NetLocalGroupDel() to IDL.
      re-run make idl.
      netapi: add NetLocalGroupDel() skeleton.
      netapi: Implement NetLocalGroupDel().
      netapi: add NetLocalGroupDel() to public headers.
      netapi: add NetLocalGroupDel() example code.
      netapi: add NetLocalGroupGetInfo() to IDL.
      re-run make idl.
      netapi: add NetLocalGroupGetInfo() skeleton.
      netapi: add NetLocalGroupGetInfo() to public headers.
      netapi: add NetLocalGroupGetInfo() example code.
      netapi: implement NetLocalGroupGetInfo().
      netapi: add NetLocalGroupSetInfo() to IDL.
      re-run make idl.
      netapi: add NetLocalGroupSetInfo() skeleton.
      netapi: add NetLocalGroupSetInfo() example code.
      netapi: Implement NetLocalGroupSetInfo().
      netapi: add public header for NetLocalGroupSetInfo().
      netapi: let libnetapi_samr_open_domain return WERROR.
      netapi: add libnetapi_samr_open_builtin_domain().
      netapi: use libnetapi_samr_open_builtin_domain().
      netapi: add libnetapi_samr_lookup_and_open_alias().
      netapi: use libnetapi_samr_lookup_and_open_alias().
      netapi: fix some build warnings.
      build: fix the build (missing protoype for lp_ldap_connection_timeout()).
      build: fix build warning.
      netapi: remove unrequired headers.
      util_str: add talloc_asprintf_strlower_m().
      net: print NBT_SERVER_X_SECRET_DOMAIN_6 flags in "net ads lookup".
      libnetjoin: delete possible "realm" leftover parameter.
      libnetjoin: only close existing policy handles while unjoining.
      net: fix popt context memleak.
      netdomjoin-gui: some minor fixes + hunting down typecast bugs.
      libnetjoin: correctly copy returned lsa policy sid.
      netdomjoin-gui: disable annoying "reboot now" dialog.
      net: fix debuglevel handling.
      mailslot: always pull a command 25 type reply.
      libnetjoin: First store configuration and then verify the join.
      libnetjoin: add libnet_join_rollback().
      netdomjoin-gui: fix more gtk runtime warnings.
      netdomjoin-gui: enable NetGetJoinInformation() call after successfull joining.
      netapi: use NetGroupSetInfo() for "net rpc group rename".
      pam_winbind: fix pam_sm_chauthtok for storing modified cached creds.
      rpcclient: add more useful comments what sign/seal commands are doing.
      pam_winbind: Update cached creds during password change.
      net: remove some dead code.
      idl: fix drsuapi_DsGetNCChanges.
      re-run make idl.
      rpc_client: fix some valgrind warnings.
      samsync: add samsync_fix_delta_array()
      net: Fix bug #5542 (samsync contains empty passwords).
      samsync: add prototype for samsync_fix_delta_array().
      net_vampire: let dump_database() return NTSTATUS.
      net_vampire: let fetch_database and fetch_database_to_ldif use sid pointers.
      net_vampire: join dump and process function into one callback.
      net_vampire: start using talloc for the ldif vampire code.
      net_vampire: restructure internal code more.
      net_vampire: add samsync_debug_str().
      net_vampire: add samsync_init_context().
      net_vampire: split out rpc_vampire_ldif().
      net_vampire: fix ldif_init_context().
      net_vampire: rename process_database to samsync_process_database.
      net_vampire: move some samsync functions to libnet.
      net_vampire: move ldif code out of net_rpc_samsync.c
      net_vampire: use generic output filename and use correct argv element.
      net_vampire: fix build warning.
      net_vampire: fix samsync_process_database().
      netapi: Fix Bug #5545 (libnetapi_init without $USER)
      libads: fix logic error in ads_get_kvno().
      dsgetdcname: allow to use NULL mem_ctx.
      clikrb5: remove unrequired create_kerberos_key_from_string_direct() prototype.
      libads: add ads_get_machine_kvno() to make ads_get_kvno() a bit more generic.
      net_vampire: add domain_name to samsync_context.
      net_vampire: add error and result_message to samsync_context.
      netapi: add NetRemoteTOD() to IDL.
      re-run make idl.
      netapi: add NetRemoteTOD() skeleton.
      netapi: make NetRemoteTOD() headers public.
      netapi: implement NetRemoteTOD().
      netapi: add NetRemoteTOD example code.
      netapi: some IDL cosmetics.
      netapi: add NetUserEnum filter constants to IDL.
      re-run make idl.
      netapi: implement NetUserEnum filters.
      netapi: add NetUserEnum filter constants to public headers.
      netapi: use NetUserEnum filter in example code.
      rpcclient: add more generic internal dscracknames call.
      time: move uint64s_nt_time_to_unix_abs() to lib/time.c
      net_vampire: move pull_netr_AcctLockStr() to libnet.
      net_vampire: display more deltas while doing samdump.
      net_vampire: fix included header.
      net_vampire: move out passdb routines to one file.
      net_vampire: move out display routines to one file.
      net_vampire: prepend libnet_ to the public samsync functions.
      net_vampire: more libnet_samsync restructuring.
      drsuapi: fill in some more drsuapi_DsAttributeIds.
      re-run make idl.
      kerberos: make smb_krb5_kt_add_entry public, allow to pass keys without salting them.
      kerberos: add smb_krb5_keytab_name().
      libads: add ADS_AUTH_USER_CREDS to avoid magic overwriting of usernames.
      libads: add ads_connect_user_creds() that won't overwrite given user creds.
      libads: use ads_connect_user_creds in some places.
      net_vampire: add username/password to samsync_context.
      net_vampire: add code to vampire a SAM database to a keytab file.
      drsuapi: add some more attribute IDs.
      re-run make idl.
      crypto: add decrypt_drsuapi_blob from samba4.
      net: add basic support for sealed RPC connections (using NET_FLAGS_SEAL).
      rpc_client: add cli_get_session_key().
      net_vampire: add basic libnet_dssync() infrastructure.
      rpc_client: let cli_get_session_key() return talloced session key.
      netapi: add NetUserChangePassword() to IDL.
      re-run make idl.
      netapi: add NetUserChangePassword skeleton.
      netapi: add NetUserChangePassword() to public headers.
      netapi: add NetUserChangePassword() example code.
      rename rpccli_samr_chgpasswd_user to rpccli_samr_chgpasswd_user2.
      rename rpccli_samr_chgpasswd3 to rpccli_samr_chgpasswd_user3.
      rpc_client: add rpccli_samr_chgpasswd_user() call.
      rpcclient: add samr chgpasswd command.
      errors: add WERR_DS_DRA_BAD_NC and WERR_DS_DRA_BAD_DN.
      net_vampire: add some error output to libnet_dssync.
      drsuapi: add drsblobs.idl from samba4.
      drsuapi: rerun make idl and add drsblobs generated files.
      libnet_dssync: always decrypt attributes before passing them to the processing routine.
      libnet_dssync: pass down drsuapi_DsReplicaOIDMapping_Ctr to callback.
      net_vampire: separate keytab code from samsync code.
      net_vampire: use bool for last_query information in samsync.
      libnet_dssync: add output filename and dns_domain_name to dssync struct.
      libnet_dssync: add last_query flag to processing routine.
      kerberos: rename smb_krb5_kt_add_entry to smb_krb5_kt_add_entry_ext.
      kerberos: allow to keep entries with old kvno's while creating keytab.
      net_vampire: keep keytab context and flush keytab only after the last query.
      net_vampire: add code to vampire to a Kerberos keytab file using DRSUAPI.
      Fix build warning.
      libnetjoin: fix Bug #5570.
      netapi: fix doxygen warning.
      fix build warning.
      netapi: fix documentation for NetGroupSetInfo.
      util: add policy_hnd_equal().
      netapi: add ConvertSidToStringSid() for convenience of the callers.
      netapi: add NetGroupEnum to IDL.
      re-run make idl.
      netapi: add skeleton for NetGroupEnum().
      netapi: add NetGroupEnum to public headers.
      netapi: make sid in GROUP_INFO_3 a pointer.
      re-run make idl.
      netapi: fix map_group_info_to_buffer for GROUP_INFO_3 change.
      netapi: fill in NetGroupEnum_r().
      netapi: add NetGroupEnum example code.
      netapi: use ConvertSidToStringSid in NetGetGroupInfo query.
      rpcclient: for testing, add dsgetncchanges command.
      libnetjoin: make libnet_join_rollback() static.
      libads: add prototype for ads_connect_gc().
      kerberos: make smb_krb5_kt_add_entry() static.
      netapi: fix build warning for ConvertSidToStringSid().
      netapi: typo in NetGroupEnum example code.
      netapi: fix NetUserAdd() against NT4.
      netapi: fix NetGroupDel() against NT4.
      netapi: fix NetGroupGetInfo() against NT4.
      netapi: add libnetapi_private_ctx and init function.
      netapi: add libnetapi_samr_close_domain/connect_handle.
      netapi: add libnetapi_samr_close_builtin_handle().
      netapi: use private samr structure in libnetapi_samr_open_domain().
      netapi: use private samr structure in libnetapi_samr_open_builtin().
      netapi: add libnetapi_samr_free().
      netapi: add more USER_INFO_X structures to IDL.
      re-run make idl.
      netapi: add new USER_INFO_X structures to public headers.
      netapi: add support to define info level in NetUserEnum example.
      netapi: support more infolevels in NetUserEnum.
      netapi: add NetUserGetInfo to IDL.
      re-run make idl.
      netapi: add skeleton for NetUserGetInfo().
      netapi: add NetUserGetInfo to public headers.
      netapi: add NetUserGetInfo example code.
      netapi: fill in NetUserGetInfo_r().
      netapi: add NetUserSetInfo to IDL.
      re-run make idl.
      netapi: add skeleton for NetUserSetInfo.
      netapi: add NetUserSetInfo to public header.
      netapi: add NetUserSetInfo example code.
      netapi: add libnetapi_samr_open_alias_queryinfo.
      netapi: make map_alias_info_to_buffer suitable for arrays in the buffer.
      netapi: add NetLocalGroupEnum to IDL.
      re-run make idl.
      netapi: add skeleton for NetLocalGroupEnum().
      netapi: add NetLocalGroupEnum to public header.
      netapi: add NetLocalGroupEnum example code.
      netapi: implement NetLocalGroupEnum_r.
      netapi: let libnetapi_samr_lookup_and_open_alias compose lsa string.
      netapi: add caching of samr policy handles.
      netapi: fix NetLocalGroupAdd.
      netapi: add netapi testsuite.
      netapi: add USER_INFO_X to IDL.
      re-run make idl.
      netapi: add convert_USER_INFO_X_to_samr_user_info21 fn and use it NetUserAdd.
      netapi: implement NetUserSetInfo_r() for at least level 1007.
      rpc_client: add init_samr_CryptPasswordEx and init_samr_CryptPassword.
      netapi: use init_samr_CryptPasswordEx and init_samr_CryptPassword.
      netapi: cosmetics, use "buffer" everywhere.
      re-run make idl.
      netapi: use "buffer" in libnetapi.
      netapi: fix libnetapi_samr_lookup_user_map_USER_INFO.
      netapi: add some more USER_INFO structs to IDL.
      re-run make idl.
      netapi: add NetGroupGetUsers to IDL.
      re-run make idl.
      netapi: add NetGroupGetUsers skeleton.
      netapi: add NetGroupGetUsers to public header.
      netapi: add NetGroupGetUsers example code.
      libwbclient: let wbcStringToSid handle the global NULL sid.
      winbindd: handle trusted domains without sid.
      build: fix some no previous prototype warnings.
      rpc_client: Bug 5616 - fix session keys also in rpccli_netr_LogonSamLogonEx wrapper.
      rpc_client: use init_samr_CryptPassword(Ex) in client tools.
      libnetjoin: add use_kerberos flag.
      net: add "-k" switch for kerberos authentication (in preparation for #5416).
      libnetunjoin: add use_kerberos flag.
      netapi: in NetLocalGroupAdd_r() only set description if necessary.
      net: Use NetLocalGroupAdd() for adding aliases.
      netapi: when using NetApi functions forward net's kerberos setting.
      fix build warning.
      netapi: generate the netapi testsuite makefile.
      netapi: add ConvertStringSidToSid().
      netapi: add NetApiBufferAllocate.
      doserr: add WERR_MEMBER_IN_ALIAS.
      netapi: add NetUserModalsSet and NetUserModalsGet to IDL.
      re-run make idl.
      netapi: add skeleton for NetUserModalsGet and NetUserModalsSet.
      netapi: add NetUserModalsGet and NetUserModalsSet to public headers.
      netapi: add example code for NetUserModalsGet and NetUserModalsSet.
      netapi: implement NetUserModalsGet_r.
      netapi: implement NetUserModalsSet_r.
      netapi: add NetUserModalsGet and NetUserModalsSet tests.
      netapi: add remaining NetLocalGroup*Member calls to IDL.
      re-run make idl.
      netapi: add skeleton for NetLocalGroup*Member calls.
      netapi: add NetLocalGroup*Member calls to public headers.
      netapi: implement NetLocalGroupAddMembers_r().
      netapi: implement NetLocalGroupDelMembers_r().
      netapi: implement NetLocalGroupSetMembers_r().
      netapi: add NetLocalGroupAddMembers example code.
      netapi: add NetLocalGroupDelMembers example code.
      netapi: add NetLocalGroupSetMembers example code.
      libnetjoin: support kerberized joining/unjoing (fix #5416).
      netapi: add c++ guard.
      netapi: let libnetapi_samr_lookup_and_open_alias return NTSTATUS.
      netapi: add NetLocalGroupGetMembers example code.
      netapi: make non-implemented local calls default to remote "localhost" calls.
      netapi: make libnetapi_open_ipc_connection static.
      netapi: add doxygen documentation for NetLocalGroup{Add,Del,Set,Get}Members.
      netapi: add doxygen documentation for NetUserModalsGet and NetUserModalsSet.
      netapi: add some remaining documentation fixes.
      winbindd: kill some trailing/leading whitespace.
      pam_winbind: use integer constants.
      pam_winbind: add _pam_error_code_str().
      pam_winbind: use pam error string function to display result.
      wbinfo: add wbinfo_prompt_pass.
      wbinfo: use wbinfo_prompt_pass() everywhere.
      pam_winbind: some doxygen fixes.
      winbindd: fill_in_password_policy (to avoid redundant code).
      winbindd: use set_auth_errors (avoid code duplication).
      winbindd: consistently use false/true.
      fix another build warning.
      libads: remove unused vars.
      fix build warning.
      IDL: fix IDL for netr_ServerPasswordSet2().
      re-run make idl.
      Fix Bug #5710 and make machine account password changing work again.
      rpc_server: make it a little more obvious what flags we send to a client.
      auth: Fix build warning.
      winbindd: only create machine pwd change event when in primary domain child.
      winbindd: move set_auth_errors to util functions.
      winbindd: use set_auth_errors() in winbindd_dual_check_machine_acct as well.
      build: make sure to create CODEPAGEDIR and MODULESDIR.
      winbindd: fix invalid sid copy (hit when enumerating sibling domains).
      kerberos: move the KRB5_KEY* macros to header file.
      kerberos: add KRB5_KT_KEY abstraction macro.
      kerberos: use KRB5_KT_KEY macro where appropriate.
      kerberos: fix HAVE_KRB5 related build issue.
      net: use netapi for rpc_user_rename.
      netapi: add all USER_INFO structs to public header.
      netapi: fix ENCRYPTED_PWLEN in IDL.
      re-run make idl.
      netapi: add ENCRYPTED_PWLEN to public header.
      netapi: add more infolevels to NetUserSetInfo example.
      netapi: make set_user_info_USER_INFO_X a separate function.
      netapi: process level 1003 in construct_USER_INFO_X as well.
      netapi: support level 1003 in NetUserSetInfo.
      netapi: fix convert_USER_INFO_X_to_samr_user_info21.
      netapi: support level 1011 in NetUserSetInfo.
      netapi: support level 1009 in NetUserSetInfo.
      netapi: fix acct_flags handling in convert_USER_INFO_X_to_samr_user_info21.
      netapi: support level 1012 in NetUserSetInfo.
      netapi: support level 1006 in NetUserSetInfo.
      netapi: add usriX_profile/usriX_home_dir_drive/usriX_primary_group_id to USER_INFO_X in IDL.
      re-run make idl.
      netapi: support level 1052 in NetUserSetInfo.
      netapi: support level 1053 in NetUserSetInfo.
      netapi: support level 1051 in NetUserSetInfo.
      netapi: support level 1024 in NetUserSetInfo.
      netapi: support level 1014 in NetUserSetInfo.
      net: use netapi function to list users.
      net: use netapi function to set user password.
      netapi: add NetUserGetGroups to IDL.
      re-run make idl.
      netapi: add skeleton for NetUserGetGroups.
      netapi: fix NetUserSetInfo return code for currently unsupported levels.
      netapi: add NetUserGetGroups to public headers.
      netapi: add NetUserGetGroups example code.
      netapi: implement NetUserGetGroups_r.
      net: use netapi for "net rpc user info" to enumerate user group membership.
      net: now that "net rpc user" uses netapi calls exclusivly, net rpc shell needs
      netapi: fix IDL for USER_INFO_4.
      re-run make idl.
      netapi: fix public header for USER_INFO_4.
      netapi: display all available levels in NetUserGetInfo example.
      netapi: add samr_acb_flags_to_netapi_flags for NetUserEnum and NetUserGetInfo.
      netapi: always return correct account name in NetUserGetInfo/NetUserEnum.
      netapi: give more correct error code in NetUserGetInfo.
      netapi: add USER_PRIV_* constants to IDL.
      re-run make idl.
      netapi: add USER_PRIV_* constants to public header.
      netapi: add AF_OP constants to IDL.
      re-run make idl.
      netapi: add AF_OP constants to public header.
      netapi: better point out what levels are unknown in NetUserEnum.
      netapi: add samr_rid_to_priv_level().
      netapi: add NetShareAdd to IDL.
      re-run make idl.
      netapi: add NetShareAdd skeleton.
      netapi: add NetShareAdd to public header.
      netapi: implement NetShareAdd_r.
      netapi: add NetShareAdd example code.
      netapi: add USER_MAXSTORAGE_UNLIMITED to IDL.
      re-run make idl.
      netapi: prepare libnetapi_samr_lookup_user to lookup priv levels.
      netapi: add builtin handle to NetUserEnum.
      netapi: add info21_to_USER_INFO_10.
      netapi: add info21_to_USER_INFO_20.
      netapi: add info21_to_USER_INFO_23.
      netapi: add info21_to_USER_INFO_1 and support level 1 NetUserEnum/GetInfo.
      netapi: add info21_to_USER_INFO_2 and support level 2 in NetUserEnum/GetInfo.
      netapi: add info21_to_USER_INFO_3 and support level 3 in NetUserEnum/GetInfo.
      netapi: add info21_to_USER_INFO_4 and support level 4 in NetUserEnum/GetInfo.
      netapi: add info21_to_USER_INFO_11 and support level 11 in NetUserEnum/GetInfo.
      netapi: add NetJoinFlags to IDL.
      re-run make idl.
      netapi: add NetJoinFlags to public header.
      netapi: use NETSETUP join flags in examples.
      netapi: fix some warnings in netdomjoin-gui.
      netapi: fix NetGetJoinableOUs_l.
      libwbclient: add wbcChangeUserPassword and wbcChangeUserPasswordEx.
      wbinfo: add change-user-password command.
      doserr: add WERR_WRONG_PASSWORD.
      winbindd: the ad trusted_domains call should return talloced strings.
      kerberos: fix indent of enc type lines in generated krb5.conf files.
      netapi: fix return code in NetShareAdd_r.
      net: use netapi to add shares.
      net: use netapi for rpc_sh_share_add as well.
      netapi: add NetShareDel to IDL.
      re-run make idl.
      netapi: add NetShareDel skeleton.
      netapi: add NetShareDel to public header.
      netapi: add NetShareDel example code.
      netapi: implement NetShareDel_r.
      net: use netapi for deleting shares.
      net: use netapi for rpc_sh_share_delete as well.
      netapi: add more SHARE_INFO_X levels.
      re-run make idl.
      netapi: add new SHARE_INFO structs to public header.
      netapi: add NetShareEnum to IDL.
      re-run make idl.
      netapi: add NetShareEnum skeleton.
      netapi: add NetShareEnum to public headers.
      netapi: add NetShareEnum example code.
      netapi: fix NetGetJoinableOUs_r: do not tear down connection.
      netapi: add SERVER_INFO_100-102 to IDL.
      re-run make idl.
      netapi: add new SERVER_INFO structures to public header.
      netapi: add NetServerGetInfo example code.
      netapi: add support for more infolevels in NetServerGetInfo_r.
      netapi: add support for local query of level 101 in NetServerGetInfo.
      netdomjoin-gui: add support to remotely join/unjoin workstations.
      netdomjoin-gui: test all NetServerGetInfo levels until we get comment.
      netdomjoin-gui: add gtk set_transient flags.
      netdomjoin-gui: fix some small errors in callbacks.
      netdomjoin-gui: always center new windows.
      netdomjoin-gui: fix some widget closing callbacks.
      netapi: add NetRenameMachineInDomain to IDL.
      re-run make idl.
      netapi: add skeleton for NetRenameMachineInDomain.
      netapi: add NetRenameMachineInDomain to public header.
      netapi: implement NetRenameMachineInDomain_r.
      netapi: add NetRenameMachineInDomain example code.
      netapi: move join related examples to one directory.
      wkssvc: rename wkssvc_NetJoinStatus flags.
      re-run make idl.
      netapi: add NETSETUP_JOIN_STATUS to IDL.
      re-run make idl.
      netapi: add NETSETUP_JOIN_STATUS to public header.
      netapi: remove NetSetup* flags from netdomjoin-gui.
      netapi: add IDL for NetShareGetInfo.
      re-run make idl.
      netapi: add skeleton for NetShareGetInfo.
      netapi: add NetShareGetInfo to public header.
      netapi: add NetShareGetInfo example code.
      netapi: implement NetShareGetInfo_r.
      netapi: implement NetShareEnum_r.
      netapi: add NetShareSetInfo to IDL.
      re-run make idl.
      netapi: add skeleton for NetShareSetInfo.
      netapi: add NetShareSetInfo to public header.
      netapi: add NetShareSetInfo example code.
      netapi: add support for level 1004 in
      netapi: implement NetShareSetInfo_r.
      netapi: add SHARE_INFO_1005_FLAGS.
      re-run make idl.
      Revert "winbindd: the ad trusted_domains call should return talloced strings."
      netapi: fix NetShareGetInfo example output.
      netapi: re-arrange a little NetLocalGroupSetMembers example code.
      net: use NETSETUP flags consistently.
      netapi: add NetShare testsuite.
      netapi: expand NetUser testsuite a little.
      netapi: fix doxygen warning.
      netapi: fix NetShareEnum_r which in fact enumerates all shares.
      net: use netapi for NetShareEnum.
      netapi: fix NetShareGetInfo_r.
      netapi: fix NetShareEnum_r.
      netapi: make add_GROUP_USERS_INFO_X_buffer non-static.
      netapi: add IDL for NetUserSetGroups.
      re-run make idl.
      netapi: add skeleton for NetUserSetGroups.
      netapi: add NetUserSetGroups to public header.
      netapi: add example code for NetUserSetGroups.
      netapi: implement NetUserSetGroups_r.
      netapi: add IDL for NetGroupSetUsers.
      re-run make idl.
      netapi: add skeleton for NetGroupSetUsers.
      netapi: add NetGroupSetUsers to public header.
      netapi: add example code for NetGroupSetUsers.
      netapi: implement NetGroupSetUsers_r.
      netapi: implement NetGroupGetUsers_r.
      netapi: fix group_getusers example.
      netapi: add NetUserGetLocalGroups to IDL.
      re-run make idl.
      netapi: add NetUserGetLocalGroups skeleton.
      netapi: add NetUserGetLocalGroups to public header.
      netapi: add NetUserGetLocalGroups example code.
      netapi: implement NetUserGetLocalGroups_r.
      netapi: add NetFileClose to IDL.
      re-run make idl.
      netapi: add NetFileClose skeleton.
      netapi: add NetFileClose to public header.
      netapi: add NetFileClose example code.
      netapi: implement NetFileClose_r.
      netapi: add IDL for NetFileGetInfo.
      re-run make idl.
      netapi: add NetFileGetInfo skeleton.
      netapi: implement NetFileGetInfo_r.
      netapi: add NetFileGetInfo to public header.
      netapi: add NetFileGetInfo example code.
      netapi: add NetFileEnum to IDL.
      re-run make idl.
      netapi: add NetFileEnum skeleton.
      netapi: add NetFileEnum to public header.
      netapi: add NetFileEnum example code.
      netapi: implement NetFileEnum_r.
      net: use netapi for NetFileClose.
      net: use netapi for NetFileEnum.
      build: don't install the cifs.upcall binary twice.
      messaging: move types to IDL.
      doserr: add WERR_NO_SUCH_ALIAS.
      netapi: fix NetGroupSetUsers.
      netapi: fix NetUserSetGroups.
      netapi: fix NetGroupGetUsers (only enumerates users).
      netapi: fix NetUserGetLocalGroups.
      pam_winbind: fix the build wrt libreplace.
      build: fix cflag recursion in generated netapi makefiles.
      build: rebuild only changed IDL files.
      netlogon: add init_netr_CryptPassword.
      netlogon: use init_netr_CryptPassword in "just_change_the_password"
      netlogon: refactor just_change_the_password a bit.
      netlogon: move password change code out to rpccli_netlogon_set_trust_password.
      netapi: fix case statement in example NetUserSetModals code.
      netapi: add NetFile testsuite.
      netapi: add more fields to USER_INFO_X.
      re-run make idl.
      s4: add talloc_strdup_upper.
      s4-nbt: remove unrequired include.
      s3-charset: add smb_iconv_convenience.
      s3-nbt: fix nbt.idl in order to use shared nbt helper.
      s3: re-run make idl.
      s3: use samba4 prototype for ndr_push/pull_struct_blob.
      s4-nbt: use private_data instead of private.
      s4-nbt: merge some fixes from samba3 nbt helper.
      s4-nbt: move libcli/nbt up one level.
      s4-nbt: use ../libcli/nbt
      s3-nbt: refer to ../libcli/nbt in nbt.idl.
      s3: re-run make idl.
      s3-nbt: use ../libcli/nbt helper.
      s3-nbt: fix remaining callers of ndr_push/pull_struct_blob.
      s3-nbt: remove old samba3 libcli/nbt copy.
      s3-build: let ctags/etags start from the toplevel dir.
      s4-libcli: move nbt/netlogon helper functions up one level.
      s4-nbt: use moved libcli netlogon helpers.
      s3-nbt: start merging from samba4 idl.
      s3: re-run make samba3-idl.
      s3: fix NETLOGON_NT_VERSION version flags.
      pidl: fix samba3 server wrt to samba4 ndr_pull_init_blob protype.
      s3: re-run make samba3-idl.
      s3-ndr: add stub smb_iconv_convenience to some ndr_ functions.
      pam_winbind: attempt to fix build issue on solaris, bug #5784
      s4: remove autogeneration of libcli/netlogon protos.
      libcli: add autogenerated libcli netlogon helper protos.
      s3: fix make everything.
      s3: fix merged_build.
      s3-nbt: full merge of s4 nbt idl.
      s3: re-run make samba3-idl.
      s3-nbt: use the new generated nbt.
      libcli: add some basic debugging functions for netlogon helper.
      s3: fix idmap_adex.
      libcli: add nbt_proto.h that is no longer autogenerated.
      s3-nbt: remove double nbt netlogon opcodes.
      s3-nbt: further cleanup of dsgetdcname().
      netapi: start supporting NetUserSetInfo level 3.
      s3-srvsvc: fix _srvsvc_NetShareAdd segfault.
      libgpo: fix invalid cast in scripts CSE.
      libgpo: add security CSE skeleton.
      libgpo: fix copyright.
      libgpo: add gpext_security module build to configure.
      libwbclient: fix doxygen warnings.
      s3-winbindd: add dsgetdcname request and reply to winbind structure.
      build: add "make test_wbpad" for checking winbind 32/64bit structure padding.
      s3-winbindd: use new, richer structures in WINBINDD_DSGETDCNAME implementation.
      wbinfo: fix dsgetdcname caller.
      krb5-locator: fix dsgetdcname caller.
      wbclient: add my copyright.
      wbclient: add wbcGuid structure.
      wbclient: add wbcGuidToString and wbcStringToGuid helper functions.
      wbclient: add wbcLookupDomainControllerEx call.
      krb5_locator: use wbcLookupDomainControllerEx() for query.
      libwbclient: fix wbcAuthenticateUserEx() to not ignore provided flags field.
      libwbclient: add wbcBlob and wbcNamedBlob.
      libwbclient: add wbcAddNamedBlob.
      libwbclient: add wbcLogoffUserEx().
      libwbclient: add wbcLogonUser().
      pam_winbind: convert to use talloc.
      pam_winbind: prepare to use libwbclient inside pam_winbind.
      pam_winbind: add wbc_error_to_pam_error().
      pam_winbind: add wbc_auth_error_to_pam_error().
      pam_winbind: add _pam_check_remark_auth_err().
      pam_winbind: use libwbclient for WINBINDD_GETPWNAM.
      pam_winbind: use libwbclient for WINBINDD_INFO.
      pam_winbind: use libwbclient for WINBINDD_LOOKUPNAME/LOOKUPSID.
      pam_winbind: use libwbclient for WINBINDD_PAM_CHAUTHTOK.
      pam_winbind: use libwbclient for WINBINDD_PAM_LOGOFF.
      pam_winbind: use libwbclient for WINBINDD_PAM_AUTH.
      pam_winbind: remove ACB_PWNOEXP.
      pam_winbind: remove NETLOGON_CACHED_ACCOUNT and NETLOGON_GRACE_LOGON.
      pam_winbind: remove some unused macros.
      pam_winbind: fix wbc_auth_error_to_pam_error().
      pam_winbind: remove unused pam_winbind_request().
      pam_winbind: re-add mkhomedir option.
      pam_winbind: document mkhomedir option.
      s3: fix the build of registry.so gpext.
      fix build warnings.
      s3: fix another build warning.
      s3-build: fix init_samba_module missing proto warning.
      s3-build: add and use IDL_PATH while building IDL files.
      s3-build: fix make samba3-idl.
      s3-libgpo: fix build for security cse.
      s3-build: add regenerated files.
      move svcctl to main idl directory.
      share ntsvcs.idl.
      s4-idl: merge lsa_BinaryString from s3.
      s4-idl: merge netlogon bits from s3.
      idl: more netlogon merges between s3 and s4.
      s3-build: re-run make samba3-idl.
      idl: merge netlogon IDL between s3 and s4 wrt LogonSamLogon.
      s3-build: re-run make samba3-idl.
      s3: fix samlogon client and server calls.
      s3: merge from s4 samr.idl.
      s3-build: re-run make samba3-idl.
      s3: fix various samr callers.
      s4: fix smbtorture build with merged wksvcs idl.
      s4: merge from s3 samr.idl.
      s3: merge some more lsa bits from s4 idl.
      s3-build: re-run make samba3-idl.
      s3: fix s3 lsa server.
      s4: merge from s3 lsa idl.
      s4: fix registry/rpc.c after winreg changes.
      idl: more lsa.idl merges.
      kerberos: fix some heimdal build warnings.
      idl: finally fully share nbt.idl in s3 and s4.
      s3-build: re-run make samba3-idl after winreg changes.
      s3: fix s3 winreg server after idl changes.
      idl: fix svcctl_QueryServiceConfigW.
      s3-build: re-run make samba3-idl.
      s3: remove rpccli_svcctl_query_config.
      s3: use IDL generated rpc for _svcctl_QueryServiceConfigW.
      s3: remove old marshalling for SVCCTL_QUERY_SERVICE_CONFIG.
      s4-idl: merge drsuapi.idl from s3.
      s3-idl: merge from s4 drsuapi.idl.
      s3: re-merge s4 drsuapi helper and re-run make samba3-idl.
      s4-build: fix drsuapi callers.
      s3: merge from s4 drsuapi.idl.
      s3-build: re-run make samba3-idl.
      s3: fix s3 drsuapi callers.
      s4: merge from s3 drsuapi.idl.
      s3-winreg: merge from s4 winreg idl.
      s3-build: re-run make samba3-idl.
      s4-smbtorture: fix drsuapi_DsGetNT4ChangeLog test.
      s4-smbtorture: fix test_DsGetNCChanges torture test.
      s4-smbtorture: fix test_DsReplicaGetInfo.
      s3-build: cleanup in ../librpc as well on "make clean".
      crypto: fix remaining strhex_to_data_blob callers.
      s3-build: fix the build of smbd.
      lib/util: fix strhex_to_data_blob to use data_blob_talloc.
      s3-build: fix build of ndrdump.
      s4-drsuapi: merge drsuapi_DsAddEntry from s3 drsuapi idl.
      s4-drsuapi: merge drsuapi_DsRemoveDSServer from s3 drsuapi idl.
      s4-drsuapi: merge drsuapi_DsWriteAccountSpn from s3 drsuapi idl.
      s4-drsuapi: merge drsuapi_DsGetDomainControllerInfo from s3 drsuapi idl.
      s4-drsuapi: merge drsuapi_DsCrackNames from s3 drsuapi idl.
      s4-drsuapi: merge drsuapi_DsGetNCChanges from s3 drsuapi idl.
      drsuapi: share drsuapi idl and helper code.
      drsuapi: build new merged drsuapi idl and helpers.
      drsuapi: fix the drsuapi helper build for samba3.
      idl: share drsblobs idl.
      ntsvcs: fill in PNP_GetDeviceList() and correct some unknowns.
      s3-build: re-run make samba3-idl.
      idl: finally share krb5_pac.idl.
      s3: forgot to remove old copy of krb5pac.idl.
      s4: fix the build after winreg idl changes.
      Revert "s4: fix the build after winreg idl changes."
      s3-build: no need to duplicate generated srv_ prototypes.
      s3-build: no need to duplicate generated ndr_ prototypes.
      s3-samr-server: be consistent when reporting we do password complexity.
      idl: merge from s4 lsa.idl to s3.
      s3-build: re-run make samba3-idl.
      s3-rpcclient: fix cmd_lsa build.
      s3-lsa-server: fix _lsa_GetUserName.
      s3-build: fix the build.
      lib-util: fix c++ compile warning.
      lib-util: merge from s3 asn1.
      s3-spnego: move spnego defines to spnego.h
      s3: use shared asn1 code.
      s3-asn1/spnego: use OIDs including dots.
      s3-asn1: make all of s3 asn1 code do a proper asn1_init() first.
      s3-build: temporarily add asn1_proto file.
      s3-build: fix the build.
      s3-samr-server: fix access check in _samr_QuerySecurity().
      s3-samr-server: _samr_DeleteUser needs to wipe out the user_handle on success.
      netapi: NetGroupEnum_r needs to handle servers with no groups.
      s3-build: fix some const build warnings.
      s4-smbtorture: fix build warning.
      s3-samr-server: fix return code in _samr_QueryDisplayInformation.
      s3-samr-server: unify callback convention: _samr_QueryDomainInfo.
      s3-samr-server: unify callback convention: _samr_UserSetInfo.
      netapi: fix NetUserGetGroups_r returning partial results.
      netapi: fix add_GROUP_USERS_INFO_X_buffer.
      s3-build: fix another build warning with the new ASN1 code.
      s3-docs: add very basic winbind_krb5_locator.7 manpage.
      s3-docs: fix typos in locator manpage found by metze.
      idl: add svcctl specific access bits.
      s3-build: remove duplicate svcctl bits and re-run make samba3-idl.
      s3-build: add missing generated svcctl changes.
      svcctl: move some non-rpc related bits out of rpc_svcctl.h.
      s3-samr-server: remove unused historic code.
      s3-samr-server: return NT_STATUS_NOT_SUPPORTED for group rename.
      netapi: add more group tests to netapitest.
      netapi: make sure to always cleanup after testing NetUser calls.
      s3-netlogon-idl: fix IDL for netr_DsrGetDcSiteCoverageW.
      s3-build: re-run make samba3-idl.
      s3-rpcclient: add getdcsitecoverage call.
      s4-lsa: merge lsa_QuerySecurity from s3 lsa idl.
      s4-lsa: merge lsa_EnumPrivs from s3 lsa idl.
      s4-lsa: merge lsa_EnumAccounts from s3 lsa idl.
      s4-lsa: merge lsa_EnumTrustDom from s3 lsa idl.
      s4-lsa: merge lsa_GetUserName from s3 lsa idl.
      s4-lsa: merge lsa_LookupPrivDisplayName from s3 lsa idl.
      s4-lsa: merge lsa_EnumPrivsAccount from s3 lsa idl.
      s4-lsa: merge lsa_LookupPrivName from s3 lsa idl.
      s4-lsa: merge lsa_QueryTrustedDomainInfoBySid from s3 lsa idl.
      s4-lsa: merge lsa_QueryTrustedDomainInfo from s3 idl.
      s4-lsa: merge lsa_QueryTrustedDomainInfoByName from s3 lsa idl.
      s4-lsa: merge lsa_QueryDomainInformationPolicy from s3 lsa idl.
      s4-lsa: merge lsa_LookupSids/{2,3} from s3 lsa idl.
      s4-lsa: merge lsa_LookupNames/{2,3,4} from s3 lsa idl.
      s4-lsa: merge lsa_QueryInfoPolicy/{2} from s3 lsa idl.
      idl: share lsa.idl between s3 and s4.
      s4-libnet: fix user and group enumeration functions after lsa changes.
      s4-lsa-server: remove merge leftover.
      s3-netlogon: kill an fstring in rpc_server.
      netapi: fix access bits in netapi.
      s4-netlogon: merge misc stuff.
      s4-smbtorture: fix test_LogonUasLogon.
      s4-smbtorture: fix test_LogonUasLogoff.
      s4-netlogon: merge netr_DsrGetDcSiteCoverageW from s3 idl.
      s4-netlogon: merge netr_DsrEnumerateDomainTrusts from s3 idl.
      s4-netlogon: merge netr_DsRGetSiteName from s3 idl.
      s4-netlogon: merge netr_GetAnyDCName from s3 idl (untested).
      s4-netlogon: merge netr_GetDcName from s3 idl.
      s4-netlogon: merge netr_DsRGetDCName{Ex,Ex2} from s3 idl.
      s4-netlogon: merge netr_LogonControl from s3 idl.
      s4-netlogon: merge netr_LogonControl2 from s3 idl.
      s4-netlogon: merge netr_LogonControl2Ex from s3 idl.
      s4-netlogon: merge netr_LogonGetDomainInfo from s3 idl.
      s4-netlogon: merge netr_DatabaseDeltas from s3 idl.
      s4-netlogon: merge netr_AccountDeltas from s3 idl.
      s4-netlogon: merge netr_AccountSync from s3 idl.
      s4-netlogon: merge netr_LogonSamLogon{Ex,WithFlags} from s3 idl.
      s4-netlogon: merge netr_DatabaseSync from s3 idl.
      s4-netlogon: merge netr_DatabaseSync2 from s3 idl.
      s4-netlogon: merge netr_DatabaseRedo from s3 idl.
      s4-netlogon: merge netr_ServerAuthenticate{2,3} from s3 idl.
      s4-netlogon: merge netr_ServerReqChallenge from s3 idl.
      s4-netlogon: merge netr_ServerPasswordSet from s3 idl.
      s4-netlogon: merge netr_ServerPasswordSet2 from s3 idl.
      netlogon: merge netlogon.idl between s3 and s4.
      s3-build: re-run make samba3-idl.
      s4-srvsvc-idl: adapt some more formating changes from s3 idl.
      s4-srvsvc-server: fix obvious level mismatch in dcesrv_srvsvc_NetShareAdd().
      s3-srvsvc-idl: merge STR_LEN4 removal from s4.
      s3-srvsvc-idl: add missing field to srvsvc_SrvInfo402/403.
      s3-srvsvc-idl: fix srvsvc_NetCharDevEnum.
      s3-srvsvc-idl: fix srvsvc_NetCharDevQEnum.
      s4-srvsvc-idl: use maxuses as uint32 consistently.
      s4-srvsvc-idl: pure cosmetic merge from s3 idl.
      s4-srvsvc: merge srvsvc_NetShareInfo502 from s3.
      s4-srvsvc: merge srvsvc_NetSetFileSecurity from s3 idl.
      s4-srvsvc: merge srvsvc_NetSetFileSecurity from s3 idl.
      s4-srvsvc: merge srvsvc_NetRemoteTOD from s3 idl.
      s4-srvsvc: merge srvsvc_NetPathCanonicalize from s3 idl.
      s4-srvsvc: merge srvsvc_NetPathType from s3 idl.
      s4-srvsvc: merge srvsvc_NetShareCheck from s3 idl.
      s4-srvsvc: merge srvsvc_NetServerStatisticsGet from s3 idl.
      s4-srvsvc: merge srvsvc_NetShareAdd from s3 idl.
      s4-srvsvc: merge srvsvc_NetShareSetInfo from s3 idl.
      s4-srvsvc: merge srvsvc_NetShareGetInfo from s3 idl.
      s4-srvsvc: merge srvsvc_NetTransportDel from s3 idl.
      s4-srvsvc: merge srvsvc_NetTransportEnum from s3 idl.
      s4-srvsvc: merge srvsvc_NetSrvSetInfo from s3 idl.
      s4-srvsvc: merge srvsvc_NetSrvGetInfo from s3 idl.
      s4-srvsvc: merge srvsvc_NetCharDevGetInfo from s3 idl.
      s4-srvsvc: merge srvsvc_NetCharDevQGetInfo from s3 idl.
      s4-srvsvc: merge srvsvc_NetFileGetInfo from s3 idl.
      s4-srvsvc: merge srvsvc_NetDiskEnum from s3 idl.
      s4-srvsvc: merge srvsvc_NetCharDevEnum from s3 idl.
      s4-srvsvc: merge srvsvc_NetCharDevQEnum from s3 idl.
      s4-srvsvc: merge srvsvc_NetConnEnum from s3 idl.
      s4-srvsvc: merge srvsvc_NetFileEnum from s3 idl.
      s4-srvsvc: merge srvsvc_NetSessEnum from s3 idl.
      s4-srvsvc: merge srvsvc_NetShareEnumAll from s3 idl.
      s4-srvsvc: merge srvsvc_NetShareEnum from s3 idl.
      srvsvc: share srvsvc idl between s3 and s4.
      s3-build: re-run make samba3-idl.
      srvsvc: re-move idl file to main directory.
      errors: share dcerpc error function.
      srvsvc: fix typo in srvsvc_NetSrvInfo403.
      build: re-run make samba3-idl.
      s3-samr-idl: add SAM server specific access rights.
      s3-samr: remove duplicate copies of SAM server specific access rights.
      s3-samr-idl: add User Object specific access rights.
      s3-samr: remove duplicate copies of SAM user specific access rights.
      s3-samr-idl: add Domain Object specific access rights.
      s3-samr: remove duplicate copies of Domain Object specific access rights.
      s3-samr-idl: add Group Object specific access rights.
      s3-samr: remove duplicate copies of Group Object specific access rights.
      s3-samr-idl: add Alias Object specific access rights.
      s3-samr: remove duplicate copies of Alias Object specific access rights.
      security-idl: add STANDARD_RIGHTS_X bits.
      security-idl: fix typo.
      s3-accessmask: re-run make samba3-idl and remove duplicate copies.
      s3-net: fix build warning.
      s4-smbtorture: fix segfault in RPC-SAMLOGON test.
      netlogon: fix IDL for netr_DatabaseRedo.
      s3-build: re-run make samba3-idl.
      s4-smbtorture: fix some obvious copy-paste errors.
      s3-libnet_samsync: print new line in display output.
      s3-samr-idl: fix samr_ValidatePassword.
      s3-samr-idl: fix samr_QueryUserInfo2.
      s3-build: re-run make samba3-idl.
      doserr: add WERR_NO_TRUST_SAM_ACCOUNT.
      s3-dsgetdcname: fix reply generation (forgot to map nt1 to nt5ex).
      netlogon-idl: add netr_ChangeLogEntry.
      netlogon-idl: add netr_ChangeLogFlags.
      netlogon-idl: add netr_ChangeLogObject union.
      netlogon-idl: use netr_ChangeLogEntry subcontext in netr_DatabaseRedo.
      netlogon: add 8bit varients of netr_SamDatabaseID8Bit and netr_DeltaEnum.
      netlogon: use 8bit SamDatabaseID and DeltaEnum in netr_ChangeLogEntry.
      s3-build: rerun make samba3-idl.
      s3-rpcclient: add database_redo command.
      s4-smbtorture: add test for netr_DatabaseRedo.
      s4-test: skip netr_DatabaseRedo test.
      nterrors: add NT_STATUS_DS_BUSY.
      s4-dsdb: add samdb_result_parameters.
      s4-dsdb: add samdb_msg_add_parameters.
      s4-netlogon: change parameters string to lsa_BinaryString.
      s3-netlogon: fix type of parameters string in user delta.
      s4-samr: move samr.idl to toplevel idl directory.
      s3-samr-idl: cleanup.
      s3-build: re-run make samba3-idl (after cleanup).
      s4-samr: merge samr_UserInfo20 from s3 idl.
      s4-samr: prepare for Query.*Info calls: change macros.
      s4-samr: fix tests for binary parameter string.
      s4-samr: merge SAM server specific access rights from s3 idl.
      s4-samr: merge User Object specific access rights from s3 idl.
      s4-samr: merge Domain Object specific access rights from s3 idl.
      s4-samr: merge Group Object specific access rights from s3 idl.
      s4-samr: merge Alias Object specific access rights from s3 idl.
      s4-samr: merge samr_ChangePasswordUser3 from s3 idl.
      s4-samr: merge samr_GetDisplayEnumerationIndex from s3 idl.
      s4-samr: merge samr_GetDisplayEnumerationIndex2 from s3 idl.
      s4-samr: merge samr_ValidatePassword from s3 idl.
      s4-samr: merge samr_LookupRids from s3 idl.
      s4-samr: merge samr_QuerySecurity from s3 idl. (fixme: python)
      s4-samr: merge samr_RidToSid from s3 idl. (fixme: python)
      s4-samr: merge samr_GetUserPwInfo from s3 idl. (fixme: python)
      s4-samr: merge samr_GetDomPwInfo from s3 idl. (fixme: python)
      s4-samr: merge samr_GetBootKeyInformation from s3 idl. (fixme: python)
      s4-samr: merge samr_Connect5 from s3 idl. (fixme python)
      s4-samr: merge samr_QueryGroupMember from s3 idl. (fixme: python)
      s4-samr: merge samr_QueryDomainInfo from s3 idl. (fixme python)
      s4-samr: merge samr_QueryDomainInfo2 from s3 idl. (fixme: python)
      s4-samr: merge samr_GetGroupsForUser from s3 idl. (fixme: python)
      s4-samr: merge samr_QueryDisplayInfo3 from s3 idl. (fixme: python)
      s4-samr: merge samr_QueryDisplayInfo2 from s3 idl. (fixme: python)
      s4-samr: merge samr_QueryDisplayInfo from s3 idl. (fixme: python)
      s4-samr: merge samr_EnumDomainAliases from s3 idl. (fixme: python)
      s4-samr: merge samr_LookupNames from s3 idl. (fixme: python)
      s4-samr: merge samr_LookupDomain from s3 idl. (fixme: python)
      s4-samr: merge samr_EnumDomains from s3 idl. (fixme: python)
      s4-samr: merge samr_EnumDomainUsers from s3 idl. (fixme: python)
      s4-samr: merge samr_EnumDomainGroups from s3 idl. (fixme: python)
      s4-samr: merge samr_QueryAliasInfo from s3 idl. (fixme: python)
      s4-samr: merge samr_QueryGroupInfo from s3 idl. (fixme python)
      s4-samr: merge samr_QueryUserInfo{2} from s3 idl. (fixme: python)
      s3-samr: remove old samr.idl file.
      s3-build: re-run make samba3-idl (rid2sid).
      errors: add WERR_CM_BUFFER_SMALL.
      s3-rpcclient: add ntsvcs_getdevlistsize command.
      s3-rpcclient: add ntsvcs_getdevlist command.
      ntsvcs: some corrections for the PNP_GetDeviceRegProp IDL.
      s3-rpcclient: some corrections for the PNP_GetDeviceRegProp client.
      s3-build: re-run make samba3-idl.
      ntsvcs: fill in more unknowns in PNP_HwProfFlags IDL.
      s3-build: re-run make samba3-idl.
      s3-rpcclient: correct some former unknonws in cmd_ntsvcs_hw_prof_flags command.
      ntsvcs: use both named-pipe endpoints.
      ntsvcs: fill in some more formerly unknowns in PNP_GetHwProfInfo.
      s3-build: re-run make samba3-idl.
      s4-smbtorture: add very basic RPC-NTSVCS test.
      pam_winbind: fix what data we put into the blobs.
      pam_winbind: translate some more string.
      pam_winbind: do not add empty blob.
      s3-winbindd: workaround for samr_ChangePasswordUser3 to User2 fallback for w2k dcs.
      pam_winbind: add german de.po file.
      s3-svctl-server: fix remote rpc service management (bug #5888).
      pidl: do not generate cli_ functions for noopnum flaged functions.
      pidl: skip generation of noopnum functions in generated s3 server.
      s3-spoolss: fix enumports segfault (another malloc vs. talloc candidate).
      pam_winbind: rerun genmsg after Bo Yang's fixes.
      ntsvcs: remove todo from PNP_GetDeviceList.
      s4-smbtorture: add PNP_GetDeviceRegProp test for ntsvcs testsuite.
      s3-rpcclient: fill in unknowns in cmd_ntsvcs_get_hw_prof_info.
      s4-smbtorture: pure reformatting of svcctl test.
      svcctl: fix idl for svcctl_QueryServiceStatusEx.
      s4-smbtorture: add test for svcctl_QueryServiceStatusEx.
      s4-smbtorture: fix test for svcctl_EnumServicesStatusW.
      svcctl: fix idl for EnumServicesStatusExW.
      svcctl: fix idl for svcctl_QueryServiceConfig2W.
      s4-smbtorture: add test for svcctl_QueryServiceConfig2W.
      svcctl: fix idl for svcctl_EnumServicesStatusW.
      svcctl: fill in SERVICE_CONTROL from s3.
      s3-build: re-run make samba3-idl.
      s3-libnet-samsync: use enctype 23 for vampired keytab entries.
      s3-libnet-samsync: add support for partial replication.
      s3-net-vampire: add support for partial replication (individual deltas).
      s3-net: add net_dc_info struct.
      s3-net: add net_scan_dc function.
      s3-net: use net_scan_dc in net rpc vampire keytab.
      s3-net: add "net rpc vampire passdb" that allows to take arguments.
      s3-libnet: move add_to_keytab_entries to libnet_keytab.
      s3-libnet-samsync: add samsync_ops.
      s3-libnet-samsync: add samsync_ops to all samsync modules.
      s3-libnet-samsync: use samsync_ops.
      s3-libnet-samsync: call init and close ops function where appropriate.
      s3-libnet-samsync: move all modules to startup,process,finish callbacks.
      s3-libnet-samsync: pass sequence number pointer to process routine.
      s3-libnet-samsync: use netr_DatabaseDeltas unless full replication enforced.
      s3-libnet-samsync: pass back sequence number from fetch_sam_entries_keytab.
      s3-libnet-samsync: refactor libnet_samsync.
      s3-libnet-samsync: store samsync sequence number state in keytab.
      pidl: fix generated s3-server in,out,ref qualifiers that are used for buffer allocation.
      s3-build: re-run make samba3-idl after pidl change.
      s3-rpcclient: fix cmd_ntsvcs_get_dev_reg_prop.
      s3-ntsvcs: use pidl for _PNP_GetDeviceRegProp.
      s3-ntsvcs: remove old hand-marshalling for ntsvcs getdevregprop.
      s4-smbtorture: fix segfault in RPC-EVENTLOG test.
      s3-eventlog: move non rpc eventlog headers to own include file.
      s3-eventlog: avoid passing down full prs_struct in eventlog server.
      eventlog: fill in some unknowns and use flags bitmap in IDL.
      s3-build: re-run make samba3-idl.
      s3-eventlog: remove trailing whitespace.
      s3-winbindd: for now only change machine pwd when not using a system krb5 keytab.
      s3-libnetjoin: try to show a better error message upon invalid configuration.
      s3-libnetjoin: fix build warning.
      s3-samr: fix _samr_LookupNames return code.
      s4-smbtorture: fix some build warnings.
      s3-samr: add init_samr_user_info5.
      s3-samr: add support for _samr_QueryUserInfo level 5.
      s3-samr: support samr_QueryUserInfo2 as well.
      s3-samr: support samr_CreateUser as well.
      s3-samr: avoid enumeration and user creation on builtin domain handle.
      s3-samr: fix return code for invalid name in _samr_LookupDomain.
      s3-samr: fix return code for invalid password sets in SetUserInfo.
      s3-samr: never allow to alter pwdlastset directly.
      samr: fix samr_UserInfo24 and samr_UserInfo26.
      s3-build: re-run make samba3-idl.
      s3-samr: fix init_samr_user_info{23,24} callers.
      s4-samr: fix samr passwdord_expired callers.
      s4-smbtorture: add samr_rand_pass_silent.
      s4-smbtorture: add test_SetUserPass_level_ex.
      s4-smbtorture: add test for samr password_expired flag while setting passwords.
      s4-smbtorture: move test to SAMR-PASSWORDS-PWDLASTSET.
      s4-smbtorture: allow to disable full testing of all possible opcode combinations.
      selftest: s4 does not have a pwdlastset implementation yet.
      s3-samr: add init_samr_user_info25 and init_samr_user_info26.
      s4-smbtorture: fix RPC-SAMR-PASSWORDS-PWDLASTSET with samba3 option.
      s4-smbtorture: add some more testcases to pwdlastset test.
      s3-libnetjoin: remove unused md4_trust_password, found by metze.
      s3-libnetjoin: Fix bug #5749. Re-set acctflags while joining. fix from metze.
      s3-samr: modify logging in _samr_Connect2 so that it can be called from other calls as well.
      s3-samr: avoid code duplication for identical code in _samr_Connect2, 4 and 5.
      s3-samr: fix various potential memleaks in samr_SetUserInfo.
      samr: add samr_DomainServerState.
      s4-samr: use samr_DomainServerState in samr server.
      re-run make samba3-idl.
      s3-samr: use samr_DomainServerState in client tools.
      s3-samr: refuse do process UserSetInfo with 0 fields_present.
      s3-passdb: remove unused (now samr.idl) ACCT_NT/LM_PWD_SET flags.
      s3-samr: _samr_EnumDomainUsers always returns a sam array (even w/o users).
      s3-samr: fix samr_SetUserInfo{2} level 23.
      s3-samr: simplify _samr_QueryUserInfo a lot and fix some few potential memleaks.
      s3-net: allow to list a keytab generated using net rpc vampire.
      s3-rpcclient: add get_domain_handle for samr commands.
      samr: fix samr_UserInfo21 (order of lm_password_set and nt_password_set).
      samr: fill in two unknowns in samr_DomInfo13.
      samr: fill in two unknowns in samr_UserInfo21.
      samr: make more explicit what SAMR_FIELD_PASSWORD{2} means.
      samr: fix samr_UserInfo18. It also contains password_expired, thanks metze.
      samr: fix samr_UserInfo18, lm/nt pwd mixup.
      s3-build: re-run make samba3-idl.
      s3-samr: fix init_samr_user_info2{1,3,5} callers.
      s3-samr: fix rpcclient after idl change.
      s4-samr: fix s4 samr server after idl change.
      s3-samr: fix SAMR_FIELD_PASSWORD callers.
      s4-samr: fix samr callers after SAMR_FIELD_PASSWORD change.
      s3-samr: fix samr callers of samr_UserInfo18.
      s3: store user session key in cli_rpc_pipe_open_noauth().
      s3-rpcclient: add setuserinfo to set passwords using level 18,21,23,24,25,26.
      s4-smbtorture: fix build of samr test (bad git merge).
      s4-smbtorture: add test for setting passwords via samr_UserInfo18.
      s4-smbtorture: add test for setting passwords via samr_UserInfo21.
      s4-smbtorture: more tests for RPC-SAMR-PASSWORDS-PWDLASTSET.
      s4-smbtorture: add support for level 18 and 21 in test_SetUserPass_level_ex.
      s4-smbtorture: do full level 18, 21, 23, 24, 25, 26 testing in pwdlastset test.
      s3-samr: fix samr_SetUserInfo level 18 server-side.
      s3-srvsvc: fix build warning.
      s3-samr: a level 18 password set needs to set the pwdlastset as well.
      s3-libnet: fix build warning (missing prototype).
      s3-ldapsam: Fix Bug 5957: do not abort rename process on valid rename script.
      netlogon: fill in netr_ServerGetTrustInfo IDL.
      s4-netlogon: fix the build of netlogon server.
      s4-smbtorture: add simple netr_ServerGetTrustInfo test.
      s3-build: re-run make samba3-idl.
      s3-netlogon: fix netlogon server build.
      s4-smbtorture: skip ServerGetTrustInfo for samba4.
      s3-libnet: fix DEBUG statement in libnet_keytab.
      s3: remove duplicate prototypes in proto.h.
      s3: re-run make samba3-idl.
      s3: fix netlogon rpc_server build after idl change.
      netlogon: add all documented netlogon control codes.
      netlogon: add netr_NETLOGON_INFO_4.
      netlogon: fix IDL for netr_LogonControl2Ex.
      netlogon: fill in remaining levels in netr_CONTROL_DATA_INFORMATION.
      netlogon: remove netr_BinaryString (duplicate of lsa_BinaryString).
      s3: re-run make samba3-idl.
      s4: fix smbtorture build after idl change.
      s3: refactor _netr_LogonControl{2,2Ex} server side.
      s4: smbtorture, fix the build of netlogon test after idl change.
      s3-ntsvcs: use pidl for _PNP_GetDeviceList.
      s3-ntsvcs: remove old _PNP_GetDeviceList.
      s3-ntsvcs: remove last traces of hand-marshalled NTSVCS.
      s3-samr: avoid all init_samr_user* functions.
      s3-samr: remove init_samr_user* functions.
      s3-samr: avoid all init_samr_Domain* functions.
      s3-samr: remove all init_samr_dom* functions.
      s3-samr: avoid all init_samr_group* functions.
      s3-samr: remove all init_samr_group* functions.
      s3-samr: avoid all init_samr_alias* functions.
      s3-samr: remove all init_samr_alias* functions.
      s3-srvsvc: avoid all init_srvsvc* functions.
      s3-srvsvc: remove all init_srvsvc* functions.
      s3-lsa: avoid all init_lsa* functions.
      s3-lsa: remove all init_lsa* functions.
      s4-smbtorture: verify each password change via samlogon in SAMR-PASSWORDS-PWDLASTSET test.
      svcctl: move SVC_STATUS_ to idl.
      svcctl: add svcctl_ConfigLevel from samba 3.
      svcctl: add svcctl_ErrorControl and svcctl_Type (based on samba3) to IDL.
      svcctl: add SERVICE_STATUS_PROCESS to idl.
      svcctl: add SERVICE_FAILURE_ACTIONS and SERVICE_DESCRIPTION to IDL.
      svcctl: add svcctl_ServiceState.
      s3: re-run make samba3-idl.
      s3-svcctl: use pidl's ndr opcodes for NDR_SVCCTL_QUERYSERVICECONFIGW.
      s4-smbtorture: add my copyright to svcctl test.
      s4-smbtorture: use names for info level in test_QueryServiceStatusEx.
      s3-svcctl: use pidl for _svcctl_QueryServiceStatusEx.
      s3-svcctl: remove old hand marshalling of svcctl_QueryServiceStatusEx.
      s3-svcctl: fix return code for _svcctl_QueryServiceStatusEx.
      s3-svcctl: use pidl for _svcctl_QueryServiceConfig2W.
      s3-svcctl: remove old hand marshalling of svcctl_QueryServiceConfig2W.
      s3-svcctl: remove (now duplicate) SVCCTL_STAT* defines.
      svcctl: add svcctl_ServiceStatus and svcctl_ControlsAccepted.
      s3-svcctl: remove (now duplicate) defines.
      s3-svcctl: move SVC_HANDLE_IS* defines to implementation specific header file.
      s3-svcctl: remove some more redundant headers.
      s3-svcctl: add copyright to svcctl rpc_server.
      s3: re-run make samba3-idl.
      s3-svcctl: use pidl based struct SERVICE_STATUS.
      svcctl: remove redundant SERVICE_STATE_* defines.
      svcctl: add ENUM_SERVICE_STATUSW and ENUM_SERVICE_STATUSA.
      svcctl: use hex range format in IDL.
      svcctl: use svcctl_ServiceState in some other places.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix build of svcctl torture test.
      s4-smbtorture: extend test_QueryServiceConfig2W a bit.
      s3-net: fix type in rpc_service_list_internal(). Sorry...
      s3-eventlog: trying to avoid to pass around full ndr structures in rpc_server.
      s3-eventlog: trying to make eventlog_io_q_read_eventlog readable.
      s3-eventlog: minor cosmetics.
      s3-rpcclient: add eventlog test client.
      svcctl: add SERVICE_TYPE_INTERACTIVE_PROCESS define.
      s3: re-run make samba3-idl.
      s3-svcctl: use pidl defined constants in services implementation.
      svcctl: add ndr_push/pull_ENUM_SERVICE_STATUSW_array helper.
      svcctl: include hand marshalling helper in idl.
      s3: re-run make samba3-idl.
      s4-smbtorture: print hand-decoded service status array in svcctl torture test.
      s3-net: use rpccli_svcctl_EnumServicesStatusW.
      s3-svcctl: use pidl for _svcctl_EnumServicesStatusW.
      s3-svcctl: build svcctl marshalling helper.
      s3-svcctl: remove old marshalling of svcctl_EnumServicesStatusW.
      s3-svcctl: remove last traces of hand-marshalled svcctl code.
      eventlog: make out pointer a ref pointer in eventlog_GetNumRecords.
      eventlog: some fixes for eventlog_Record struct.
      s3-rpcclient: some cleanup for eventlog client.
      s3: re-run make samba3-idl.
      s4-smbtorture: pure cosmetic cleanup of eventlog test.
      s4-smbtorture: also test for invalid flags in eventlog test_ReadEventLog.
      s3-eventlog: use main talloc context in eventlog read call.
      s3-rpcclient: always parse the full eventlog entry.
      eventlog: more eventlog record idl fixes.
      s3: re-run make samba3-idl.
      s3-eventlog: fix ps struct removal leftover.
      s4-smbtorture: fix RPC-EVENTLOG test.
      s3-eventlog: some minor code cleanup in eventlog server.
      s3-eventlog: remove whitespace.
      s3-util: for convenience, provide format comments in tdb_unpack().
      lib: add strlen_m_term_null from s3.
      winreg: fix winreg_EnumValue by re-adding winreg_ValNameBuf from 3.3/3.2.
      s3: re-run make samba3-idl.
      winreg: fix winreg_EnumValue callers.
      s3-eventlog: fix _eventlog_CloseEventLog.
      s3-eventlog: fix buffer allocation in eventlog read call.
      s3-eventlog: fix various invalid memcpy in read_package_entry().
      Revert "s3-eventlog: trying to avoid to pass around full ndr structures in rpc_server."
      eventlog: fill in IDL for eventlog_ReportEventW.
      eventlog: fill in IDL for eventlog_GetLogIntormation.
      eventlog: add missing IDL (opnum 24) for eventlog_ReportEventAndSourceW.
      eventlog: fill in IDL for eventlog_RegisterEventSourceW.
      eventlog: fill in IDL for eventlog_DeregisterEventSource.
      eventlog: fill in IDL for eventlog_BackupEventLogW.
      eventlog: fill in IDL for eventlog_OpenBackupEventLogW.
      s3: re-run make samba3-idl.
      s3-eventlog: add missing _eventlog_ReportEventAndSourceW stub call.
      s4-smbtorture: add ReportEventW test.
      s3-rpcclient: add eventlog_reportevent command.
      s4-smbtorture: add test_GetLogIntormation test.
      s3-rpcclient: add eventlog_reporteventsource command.
      s3-rpcclient: add eventlog_registerevsource command.
      s3-rpcclient: add eventlog_backuplog command.
      s3-rpcclient: add eventlog_loginfo command.
      s4-smbtorture: add BackupLog handling in eventlog test.
      s4-smbtorture: add my copyright.
      s3-docs: fix typo in eventlogadm manpage.
      Revert "fix for commit d96248a9b46 which broke Heimdal builds"
      s3-kerberos: fix ads_dedicated_keytab_verify_ticket with heimdal.
      s3-kerberos: use KRB5_KT_KEY compat macro.
      s3-net: fix warning message for keytab usage.
      librpc: add ndr_size_string_array().
      s3-eventlog: allow to open eventlog tdbs readonly.
      s3-eventlog: make logname in elog_open_tdb const.
      s3-eventlog: pass down talloc context to parse_logentry().
      eventlog: add eventlog_Record_tdb to support the traditional s3 on-disc format.
      s3: re-run make samba3-idl.
      s3-eventlog: add evlog_pull_record_tdb function.
      s3-eventlogadm: add command to dump stored tdb entries.
      s3-docs: add documentation for dump option of eventlogadm.
      librpc: add header file for drsblobs helper functions.
      eventlog: add w32 on-disc EVENTLOG structures (*evt files).
      eventlog: calculate offsets in EVENTLOGRECORD struct.
      s3: re-run make samba3-idl.
      s3-eventlog: add evlog_push_record_tdb function.
      s3-eventlog: add fixup_eventlog_record_tdb.
      s3-eventlogadm: use struct eventlog_Record_tdb for storing entries in tdbs.
      s3-eventlog: add evlog_evt_entry_to_tdb_entry.
      s3-eventlog: add evlog_tdb_entry_to_evt_entry.
      s3-net: add "net eventlog dump".
      s3-net: add "net eventlog import".
      s3-net: add "net eventlog export".
      s3-eventlog: add evlog_pull_record function.
      s3-eventlog: add evlog_push_record function.
      s3-eventlog: use pidl for _eventlog_ReadEventLogW.
      s3-eventlog: add my copyright.
      s3-rpcclient: fix eventlog read client to read an array of entries.
      s3-eventlog: make can_write_to_eventlog static.
      s4-smbtorture: in eventlog readlog test, print all records in a buffer.
      s3-eventlog: remove old hand marshalling for eventlog read call.
      s3-eventlog: remove get_eventlog_record.
      s3-eventlog: remove read_package_entry.
      s3-eventlog: remove add_record_to_resp.
      s3-eventlog: remove write_eventlog_tdb.
      s3-eventlog: remove fixup_eventlog_entry.
      s3-eventlog: remove old eventlog server.
      s3-eventlog: w00t! remove last traces of old eventlog rpc marshalling.
      s3-net: remove unused ENUM_HND.
      s3: use samr_RidWithAttribute instead of DOM_GID.
      s3: use struct netr_Credential in cred_step().
      s3-parsing: remove a lot of unused structures and their hand marshalling.
      s3-lsa: move remaining lsa policy access_mask defines to idl.
      s3-lsa: fix the build.
      s3-svcctl: use security descriptor marshall helper in svcctl_set_secdesc().
      spoolss-idl: fill in spoolss_DeletePrinter.
      spoolss: fix spoolss_RemoteFindNextPrinterChangeNotifyEx.
      s3: re-run make samba3-idl.
      Do not ignore spoolss anymore.
      spoolss: move ndr spoolss helper to main librpc dir.
      spoolss: fix samba4 dependency of spoolss helper.
      spoolss: add generated spoolss code.
      s3-eventlog: fix Coverity #877.
      idl: add KRB5_EDATA_NTSTATUS to misc.idl.
      s3: re-run make samba3-idl.
      s3: use pidl to pull a KRB5_EDATA_NTSTATUS.
      netapi: add more SERVER_INFO_X levels.
      rerun make idl.
      netapi: add SERVER_INFO_X to public header.
      netapi: implement more SERVER_INFO_X levels.
      netapi: include more SERVER_INFO_X levels in example code.
      netapi: add NetServer testsuite.
      spoolss: fix spoolss_GetJob IDL.
      spoolss: fix spoolss_GetPrinter IDL.
      spoolss: fix spoolss_GetPrinterDriverDirectory IDL.
      spoolss: fix spoolss_StartDocPrinter IDL.
      spoolss: fix spoolss_WritePrinter IDL.
      spoolss: fix spoolss_ReadPrinter IDL.
      spoolss: fix spoolss_GetForm IDL.
      spoolss: fix spoolss_XcvData IDL.
      spoolss: fix spoolss_GetPrinterDriver2 IDL.
      spoolss: fix spoolss_GetPrinterDataEx IDL.
      spoolss: fix spoolss_EnumPrinterDataEx IDL.
      spoolss: fix spoolss_EnumPrinterKey IDL.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix test_GetJob.
      s4-smbtorture: fix test_GetPrinter.
      s4-smbtorture: fix test_GetPrinter.
      s4-smbtorture: fix test_GetPrinterDriverDirectory.
      s4-smbtorture: fix test_DoPrintTest.
      s4-smbtorture: fix test_DoPrintTest.
      s4-smbtorture: fix test_GetForm.
      s4-smbtorture: fix test_GetPrinterDriver2.
      s4-smbtorture: fix test_GetPrinterDataEx.
      s4-smbtorture: fix test_EnumPrinterDataEx.
      s4-smbtorture: fix test_EnumPrinterKey.
      s4-spoolss: fix s4 spoolss server build (using a temp macro).
      spoolss: make "needed" an out,ref pointer for all the tripple-enumcalls.
      spoolss: fix spoolss helper functions and macros w.r.t. needed pointer.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix spoolss enum tests.
      s4-spoolss: fix spoolss server w.r.t. needed out pointers (+ remove tmp macro).
      spoolss: fix type pointer in spoolss_GetPrinterData and related functions.
      spoolss: fix ndr_pull/push_spoolss_GetPrinterData.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix test_GetPrinterData.
      s4-spoolss: fix sptr_GetPrintServerData.
      s4-spoolss: fix dcesrv_spoolss_GetPrinterData.
      pidl: return early when AllocOutVar() in s3 server generator has nothing to do.
      s3: re-run make samba3-idl.
      s3-spoolss: prepare to use generated spoolss.
      s3-spoolss server: add _spoolss_ server stubs.
      s3-spoolss: use pidl for _spoolss_ClosePrinter.
      s3-spoolss: use rpccli_spoolss_ClosePrinter.
      s3-spoolss: remove old _spoolss_ClosePrinter.
      s3-spoolss: call the correct get_pipe_fns function in proxy_spoolss_call().
      s3-spoolss: use pidl for _spoolss_DeletePrinter.
      s3-spoolss: remove old _spoolss_DeletePrinter.
      s3-spoolss: use pidl for _spoolss_StartPagePrinter.
      w
      s3-spoolss: remove old _spoolss_StartPagePrinter.
      s3-spoolss: use pidl for _spoolss_EndPagePrinter.
      s3-spoolss: remove old _spoolss_EndPagePrinter.
      s3-spoolss: use pidl for _spoolss_AbortPrinter.
      s3-spoolss: remove old _spoolss_AbortPrinter.
      s3-spoolss: use pidl for _spoolss_EndDocPrinter.
      s3-spoolss: remove old _spoolss_EndDocPrinter.
      s4-smbtorture: fix valgrind warnings in RPC-SPOOLSS_WIN test.
      spoolss: fix ndr_pull_spoolss_GetPrinterData.
      s4-spoolss: try to fix dcesrv_spoolss_GetPrinterData.
      s3-spoolss: use rpccli_spoolss_DeleteForm.
      s3-spoolss: rework some form functions and add form_by_string functions.
      s3-spoolss: use pidl for _spoolss_DeleteForm.
      s3-spoolss: remove old _spoolss_DeleteForm.
      s4-smbtorture: fix test_EnumJobs in spoolss win test.
      s3-spoolss: some cosmetics in debug statements.
      s3-spoolss: use pidl for _spoolss_WritePrinter.
      s3-spoolss: remove old _spoolss_WritePrinter.
      s3-rpcclient: fix getform command asprintf return code.
      s3-spoolss: use rpccli_spoolss_AddForm in net and rpcclient.
      s3-spoolss: use pidl for spoolss_AddForm.
      s3-spoolss: remove old spoolss_AddForm.
      s3-rpcclient: use rpccli_spoolss_SetForm.
      s3-spoolss: use pidl for _spoolss_SetForm.
      s3-spoolss: remove old _spoolss_SetForm.
      s3-spoolss: restore delete_a_form().
      s3-rpcclient: use rpccli_spoolss_GetForm.
      s3-spoolss: add fill_form_info_1.
      s3-spoolss: use pidl for _spoolss_GetForm.
      s3-spoolss: remove old _spoolss_GetForm.
      spoolss: fill in spoolss_DeletePrinterKey IDL.
      spoolss: fix spoolss_DeletePrinterDriver IDL.
      s3: re-run make samba3-idl.
      spoolss: fill in spoolss_DeletePrinterDriverEx IDL.
      s3: re-run make samba3-idl.
      s3-spoolss: remove SPOOLSS_DELETEPRINTERDRIVEREX flags now defined in IDL.
      s3-spoolss: use pidl for _spoolss_DeletePrinterDataEx.
      s3-spoolss: remove old _spoolss_DeletePrinterDataEx.
      s3-spoolss: use pidl for _spoolss_DeletePrinterData.
      s3-spoolss: remove old _spoolss_DeletePrinterData.
      s3-spoolss: use pidl for _spoolss_DeletePrinterKey.
      s3-spoolss: remove old _spoolss_DeletePrinterKey.
      s3-spools: use pidl for _spoolss_DeletePrinterDriver.
      s3-rpcclient: use rpccli_spoolss_DeletePrinterDriver.
      s3-spoolss: remove old spoolss_DeletePrinterDriver.
      s3-spoolss: use pidl for _spoolss_DeletePrinterDriverEx.
      s3-rpcclient: use rpccli_spoolss_DeletePrinterDriverEx.
      s3-spoolss: remove old _spoolss_DeletePrinterDriverEx.
      s3-spoolss: remove whitespace in printing code.
      s3-spoolss: use pidl for _spoolss_FindClosePrinterNotify.
      s3-spoolss: remove old _spoolss_FindClosePrinterNotify.
      spoolss: add spoolss_PrinterChangeFlags.
      spoolss: fill in spoolss_RouterReplyPrinter.
      spoolss: fill in spoolss_AddPrintProcessor.
      s3-spoolss: remove PRINTER_CHANGE* flags now defined in IDL.
      s3-spoolss: use PRINTER_ENUM_NAME and remove double enum define.
      s3-spoolss: move PRINTER_ENUM_ICONMASK to IDL.
      s3: re-run make samba3-idl.
      s3-rpcclient: use srv_name_slash instead of formating servername again and again.
      s3-rpcclient: remove a pointless fstring.
      s3-spoolss: use pidl for _spoolss_AddPrintProcessor.
      s3-spoolss: remove old spoolss_AddPrintProcessor.
      s3-spoolss: use rpccli_spoolss_ReplyClosePrinter.
      s3-spoolss: remove old spoolss_ReplyClosePrinter.
      s3-spoolss: remove old rpccli_spoolss_routerreplyprinter.
      spoolss: fill in spoolss_AddJob.
      spoolss: fill in spoolss_ScheduleJob.
      s3: re-run make samba3-idl.
      s3-spoolss: use pidl for _spoolss_AddJob.
      s3-spoolss: remove old spoolss_AddJob.
      s3-spoolss: use pidl for _spoolss_ScheduleJob.
      s3-spoolss: remove old spoolss_ScheduleJob.
      s3-spoolss: fix memleak in get_remote_printer_publishing_data().
      s3-rpcclient: add rpccli_spoolss_openprinter_ex() convenience wrapper.
      s3-rpcclient: use rpccli_spoolss_openprinter_ex helper.
      s3-spoolss: use SPOOLSS_JOB_CONTROL bits defined in IDL.
      s3-spoolss: add temporary convert_devicemode_new function.
      s3-spoolss: use pidl for _spoolss_StartDocPrinter.
      s3-spoolss: remove old spoolss_StartDocPrinter.
      s3-spoolss: use pidl for _spoolss_SetJob.
      s3-spoolss: remove old spoolss_SetJob.
      s3-spoolss: use pidl for _spoolss_OpenPrinterEx.
      s3-spoolss: remove old spoolss_OpenPrinterEx.
      s3-spoolss: use pidl for _spoolss_OpenPrinter.
      s3-spoolss: remove old spoolss_OpenPrinter.
      spoolss: fix spoolss_ReplyOpenPrinter IDL.
      s3: re-run make samba3-idl.
      s3-spoolss: use rpccli_spoolss_ReplyOpenPrinter.
      s4-smbtorture: fix SPOOLSS test w.r.t. spoolss_ReplyOpenPrinter.
      s3-spoolss: remove old spoolss_ReplyOpenPrinter.
      s4-spoolss: fix dcerpc_spoolss_ReplyOpenPrinter caller.
      spoolss: add spoolss_DeviceModeFields bitmap.
      s3: re-run make samba3-idl.
      s3-spoolss: remove devmode fields from include file.
      s3-spoolss: remove more whitespace.
      s3-rpcclient: use one macro for all printername formats.
      spoolss: fill in spoolss_AddPrinterDriver. This is metze's work from 2005 (!).
      spoolss: fill in spoolss_AddPrinterDriverEx. This is metze's work from 2005 (!).
      s3: re-run make samba3-idl.
      spoolss: fix name mismatch for opnum 0x43 (67).
      spoolss: fix name mismatch for opnum 0x42 (66).
      s3: re-run make samba3-idl.
      s3-spoolss: fix rpc_server stub names for opnum 0x42 and 0x43.
      s4-spoolss: fix rpc_server stub names for opnum 0x42 and 0x43.
      s3-spoolss: Fix uninitialised variable warning.
      spoolss: add spoolss_AddPrinterDriverExFlags.
      s3: re-run make samba3-idl.
      s3: remove old copy of SPOOLSS_ADDPRINTERDRIVEREX flags.
      s3-spoolss: use SPOOLSS_PRINTER_CONTROL flags defined in IDL.
      s4-smbtorture: fix the build of the ndr spoolss tester.
      spoolss: fill in spoolss_RouterReplyPrinterEx.
      s3: re-run make samba3-idl.
      s3-spoolss: remove duplicate PRINTER_NOTIFY_INFO_DISCARDED define.
      spoolss: fix spoolss_AddPrinterEx IDL.
      spoolss: add spoolss_DriverInfo8.
      spoolss: fix some cases in the spoolss_NotifyData union.
      spoolss: add spoolss_NotifyTable enum.
      spoolss: always set version 2 in notify info and option structs.
      s3-spoolss: add init_systemtime helper.
      re-run make samba3-idl.
      spoolss: fix IDL for spoolss_SetPrinterDataEx.
      s3: re-run make samba3-idl.
      s3-spoolss: use pidl for _spoolss_GetPrinterDataEx.
      s3-rpcclient: use rpccli_spoolss_GetPrinterDataEx.
      s3-spoolss: remove old spoolss_GetPrinterDataEx.
      s3-net: use rpccli_spoolss_SetPrinterDataEx.
      s3-spoolss: use pidl for _spoolss_SetPrinterDataEx.
      s3-spoolss: remove old spoolss_SetPrinterDataEx.
      s3-netlogon: implement _netr_ServerAuthenticate3.
      s3-netlogon: some more appropriate debug messages.
      spoolss: fix spoolss_SetPrinter IDL.
      spoolss: fix spoolss_AddPrinterEx IDL.
      spoolss: fill in more levels in spoolss_UserLevel union.
      spoolss: fill in some unknowns in spoolss_PrinterInfo0 and spoolss_SetPrinterInfo0.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix test_PausePrinter and test_ResumePrinter.
      s3-rpcclient: use rpccli_spoolss_AddPrinterEx.
      s3-spoolss: add printer_info2_to_nt_printer_info2 and convert_printer_info_new.
      s3-spoolss: use pidl for _spoolss_AddPrinterEx.
      s3-spoolss: use pidl for _spoolss_SetPrinter.
      s3-spoolss: remove unused convert_printer_info.
      spoolss: change some type names in spoolss_RemoteFindFirstPrinterChangeNotifyEx.
      spoolss: fix idl for spoolss_RouterRefreshPrinterChangeNotify.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix spoolss notify test.
      s4-spoolss: fix dcesrv_spoolss_RemoteFindFirstPrinterChangeNotifyEx server.
      s3-rpcclient: use rpccli_spoolss_RemoteFindFirstPrinterChangeNotifyEx.
      s3-netapi: fix Coverity #881 and #882.
      spoolss: fill in spoolss_ResetPrinter.
      s3: re-run make samba3-idl.
      s3-spoolss: use pidl for _spoolss_ResetPrinter.
      s3-spoolss: remove old spoolss_ResetPrinter.
      spoolss: in enum-calls make [out] count a ref pointer.
      s3: re-run make samba3-idl.
      spoolss: fix spoolss helper for out ref count pointer.
      s4-spoolss: fix spoolss server after out,ref count pointer changes.
      s4-smbtorture: fix spoolss test after count out,ref idl changes.
      spoolss: add spoolss_PortData1.
      spoolss: add spoolss_MonitorUi struct.
      s3: re-run make samba3-idl.
      spoolss: fix spoolss_MonitorUi struct.
      s3: re-run make samba3-idl.
      s3-spoolss: use pidl for _spoolss_XcvData.
      s3-spoolss: remove old spoolss_XcvData.
      spoolss: add spoolss_AddDriverInfo8 (used by vista for adding drivers).
      spoolss: fix idl for spoolss_AddPrinterDriver and spoolss_AddPrinterDriverEx.
      s3: re-run make samba3-idl.
      s4-smbtorture: enable spoolss_AddPrinterDriverEx ndr test.
      spoolss: use spoolss access mask in OpenPrinter{Ex}.
      spoolss: add spoolss_PortData2 (used by vista).
      s3: re-run make samba3-idl.
      s3-spoolss: add support for "AddPort" via _spoolss_XcvData for Vista.
      spoolss: make spoolss_DriverDirectoryInfo1 public and gensize.
      s3: re-run make samba3-idl.
      s3-rpcclient: use rpccli_spoolss_GetPrinterDriverDirectory in rpcclient.
      s3-spoolss: use pidl for _spoolss_GetPrinterDriverDirectory.
      s3-spoolss: remove old spoolss_GetPrinterDriverDirectory.
      s3-libnet: fix coverity #848 (UNINIT).
      spoolss: fill in spoolss_GetPrintProcessorDirectory.
      s3: re-run make samba3-idl.
      spoolss: remove gensize calculation from spoolss_StringArray. Thanks metze!
      s3: re-run make samba3-idl.
      spoolss: add ndr_size_spoolss_StringArray to spoolss helper.
      s3-spoolss: _spoolss_AddPrinterEx needs to wipe out policy handle upon failure.
      s3-spoolss: _spoolss_OpenPrinterEx needs to wipe out policy handle upon failure.
      s3-rpcclient: use SPOOLSS_ARCHITECTURE_NT_X86 define in spoolss getdriverdir cmd.
      s3-spoolss: fix _spoolss_GetPrinterDriverDirectory.
      s3-rpcclient: use rpccli_spoolss_GetPrintProcessorDirectory in rpcclient.
      s3-spoolss: use pidl for _spoolss_GetPrintProcessorDirectory.
      s3-spoolss: remove old spoolss_GetPrintProcessorDirectory.
      s3-spoolss: use pidl for _spoolss_AddPrinterDriver{Ex}.
      s3-spoolss: remove old spoolss_AddPrinterDriver{Ex}.
      s3-spoolss: fix vista fallback in _spoolss_AddPrinterDriverEx.
      eventlog: fix eventlog_GetLogInformation typo in IDL.
      eventlog: remove unused eventlog_Record struct.
      spoolss: add spoolssNotifyOptionFlags.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix eventlog getinformation test.
      s3-eventlog: fix rpcclient and server stub for eventlog_GetLogInformation.
      s3-spoolss: fix _spoolss_GetPrinterDriverDirectory and spoolss_GetPrintProcessorDirectory.
      s3-spoolss: remove duplicate flag.
      s3-spoolss: fix client name in rpccli_spoolss_openprinter_ex.
      spoolss: fix some PRINTER_CHANGE_ defines (and add a new windows 7 flag).
      spoolss: spoolss_NotifyData contains a devmode container, not devmode pointer.
      s3: re-run make samba3-idl.
      s3-rpcclient: use correct clientname in spoolss_RemoteFindFirstPrinterChangeNotifyEx command.
      s3-spoolss: use struct spoolss_Notify instead of SPOOL_NOTIFY_INFO_DATA.
      s3-spoolss: use struct spoolss_NotifyInfo instead of SPOOL_NOTIFY_INFO.
      s3-spoolss: use pidl for _spoolss_RouterRefreshPrinterChangeNotify.
      s3-spoolss: use rpccli_spoolss_RouterReplyPrinterEx.
      s3-spoolss: fix memleak of spoolss_Notify array in _spoolss_RouterRefreshPrinterChangeNotify.
      s3-spoolss: use more idl types in spoolss server.
      s3-spoolss: add dup_spoolss_NotifyOption.
      s3-spoolss: use spoolss_NotifyOption and spoolss_NotifyType instead of SPOOL_NOTIFY_OPTION and SPOOL_NOTIFY_OPTION_TYPE.
      s3-spoolss: use pidl for _spoolss_RemoteFindFirstPrinterChangeNotifyEx.
      s3-spoolss: remove old spoolss_RouterRefreshPrinterChangeNotify.
      s3-spoolss: remove old spoolss_RouterReplyPrinterEx.
      s3-spoolss: remove SPOOL_NOTIFY_INFO_DATA and SPOOL_NOTIFY_INFO alltogether.
      s3-spoolss: remove old spoolss_RemoteFindFirstPrinterChangeNotifyEx.
      s3-spoolss: remove old SPOOL_NOTIFY_OPTION definitions.
      s3-spoolss: remove cli_spoolss_notify.c completly.
      error-codes: add WERR_INVALID_USER_BUFFER.
      spoolss: generate size functions for printer driver structs.
      spoolss: add spoolss_DriverInfo101 to IDL.
      spoolss: add push,pull helper for spoolss_DriverInfo101.
      s3: re-run make samba3-idl.
      s3-spoolss: fix notify_printer_status_byname.
      spoolss: add SPOOLSS_DEFAULT_SERVER_PATH.
      spoolss: return subcontext spoolss_DriverInfo in spoolss_GetPrinterDriver2.
      s3: re-run make samba3-idl.
      s3-spoolss: merge path handling in _spoolss_PrintProcessorDirectory and
      s3-lib: add marshall_sec_desc_buf and unmarshall_sec_desc_buf helpers.
      s3-spoolss: use marshall/unmarshall_sec_desc_buf in nt_printing_setsec/getsec.
      spoolss: fix _spoolss_SetPrinter level 3.
      s3: re-run make samba3-idl.
      s3-spoolss: add rpccli_spoolss_getprinterdriver2 convenience wrapper.
      s3-rpcclient: use rpccli_spoolss_getprinterdriver2 wrapper.
      s3-net: use rpccli_spoolss_AddPrinterDriver and rpccli_spoolss_getprinterdriver2
      s3-spoolss: remove old rpccli_spoolss_getprinterdriver wrapper.
      s3-rpcclient: use rpccli_spoolss_AddPrinterDriver.
      s3-spoolss: remove rpccli_spoolss_addprinterdriver.
      error-codes: print out WERR_UNKNOWN_PRINT_MONITOR.
      s3-spoolss: remove some left-over hand marshalling code and structs.
      s3-spoolss: add rpccli_spoolss_addprinterex convenience wrapper.
      s3-spoolss: add rpccli_spoolss_getprinter convenience wrapper.
      s3-rpcclient: use rpccli_spoolss_SetPrinter and rpccli_spoolss_getprinter.
      s3-net: use rpccli_spoolss_getprinter and rpccli_spoolss_SetPrinter.
      s3-spoolss: use rpccli_spoolss_addprinterex wrapper.
      s3-spoolss: remove rpccli_spoolss_addprinterex.
      s3-spoolss: remove rpccli_spoolss_setprinter.
      s3-spoolss: remove rpccli_spoolss_getprinter.
      s3-spoolss: use is_valid_policy_hnd to check for valid policy handles.
      s3-rpcclient: more uses of is_valid_policy_hnd in spoolss and samr commands.
      spoolss: add spoolss_FormInfo2 used by Vista.
      s3: re-run make samba3-idl.
      s3-rpcclient: allow to set level in spoolss getform query and display all levels.
      s3-spoolss: remove unused decode_printer_info_7.
      spoolss: windows ignores level in a spoolss_GetPrintProcessorDirectory query.
      spoolss: fix spoolss_FormInfo2 (new in vista).
      spoolss: add spoolss_AddFormInfo2.
      spoolss: add JOB_ACCESS_READ.
      s3: re-run make samba3-idl.
      s4-smbtorture: add test_GetPrintProcessorDirectory to RPC-SPOOLSS.
      s4-smbtorture: expand RPC-SPOOLSS enumform and getform tests for level 2 forms.
      s3-spoolss: JOB_ACCESS_READ has moved to idl.
      s3-spoolss: make us pass the RPC-SPOOLSS torture test w.r.t. directory calls.
      s3-rpcclient: support level 2 in spoolss_addform.
      s3-rpcclient: add test command to call netr_LogonGetCapabilities (for bug #6100).
      s4-spoolss: implement dcesrv_spoolss_GetPrintProcessorDirectory.
      s4-smbtorture: add test_AddJob test to RPC-SPOOLSS test.
      s4-spoolss: implement dcesrv_spoolss_AddJob which always is a dummy.
      s3-spoolss: fix _spoolss_AddJob behaviour.
      s3-spoolss: remove some unused defines and structs.
      spoolss: add spoolss_JobStatus.
      s3-spoolss: job status defines moved to IDL.
      s3: re-run make samba3-idl.
      s3-spoolss: fix search_notify(). sorry...
      spoolss: add spoolss_JobInfo2, JobInfo3 and JobInfo4 (new in vista).
      spoolss: add 2 new SPOOLSS_JOB_CONTROL values.
      s3: re-run make samba3-idl.
      s3-spoolss: add rpccli_spoolss_getjob convenience wrapper.
      s3-spoolss: remove old rpccli_spoolss_getjob.
      s3-rpcclient: use is_valid_policy_hnd before closing handles.
      s3-rpcclient: add getjob spoolss command.
      s3-spoolss: use DSPRINT flags instead of SPOOLS_DS flags.
      spoolss: add spoolss_PortInfo3 and spoolss_PortInfoFF.
      spoolss: fill in spoolss_SetJobInfo1,2,3,4.
      s3: re-run make samba3-idl.
      error-codes: add WERR_DEVICE_NOT_CONNECTED.
      spoolss: use dummy pointers for truncated devmode and secdesc in SetJobInfo2/4.
      spoolss: move up printer and job status codes.
      s3: re-run make samba3-idl.
      s3-rpcclient: zero out devmode and secdesc in setdriver and setprinter command.
      s3-spoolss: PRINTER_STATUS_OK has been moved to IDL.
      spoolss: make all enum out info pointers a pointer to an array.
      s3: re-run make samba3-idl.
      spoolss: fix spoolss enum calls helper macro code after pointer changes.
      s4-smbtorture: fix RPC-SPOOLSS test after enum out info pointer changes.
      s4-smbtorture: fix RPC-SPOOLSS-WIN.
      s4-smbtorture: fix s3 flavor rpc spoolss test.
      s4-smbtorture: exit early in test_EnumPorts when no port info has been returned.
      s4-spoolss: fix spoolss server enum calls after pointer changes.
      spoolss: fix [size_is] declaration for enum calls.
      s3: re-run make samba3-idl.
      s3-spoolss: add convencience wrapper around rpccli_spoolss_EnumForms.
      s3-rpcclient: use new rpccli_spoolss_enumforms wrapper.
      s3-net: use new rpccli_spoolss_enumforms wrapper.
      s3-spoolss: remove old rpccli_spoolss_enumforms.
      spoolss: flag spoolss_FormInfo1 and 2 with [public,gensize].
      s3: re-run make samba3-idl.
      s3-spoolss: use pidl for _spoolss_EnumForms.
      s3-spoolss: use form flags from idl in rpcclient and net.
      s3-spoolss: remove old _spoolss_EnumForms.
      s3-spoolss: Fix Coverity ID #891 (UNINIT).
      spoolss: fill in spoolss_EnumPrintProcDataTypes IDL.
      s3: re-run make samba3-idl.
      spoolss: add spoolss_EnumPrintProcDataTypes to enum macro helper.
      s4-smbtorture: add test_EnumPrintProcDataTypes to RPC-SPOOLSS test.
      spoolss: flag spoolss_PrintProcessorInfo1 [public,gensize].
      s3: re-run make samba3-idl.
      s3-spoolss: use pidl for _spoolss_EnumPrintProcessors.
      s3-spoolss: remove old spoolss_EnumPrintProcessors.
      s3-spoolss: add rpccli_spoolss_enumprintprocessors convenience wrapper.
      s3-rpcclient: add enumprocs command to enumerate print processors.
      s3-spoolss: use pidl for _spoolss_EnumPrintProcDataTypes.
      s3-spoolss: remove old spoolss_EnumPrintProcDataTypes.
      s3-spoolss: add rpccli_spoolss_enumprintprocessordatatypes convenience wrapper.
      s3-rpcclient: add enumprocdatatypes command to enumerate print processor data
      spoolss: flag spoolss_PortInfo structs as [public,gensize].
      s3: re-run make samba3-idl.
      s3-spoolss: use pidl for _spoolss_EnumPorts.
      s3-spoolss: remove old spoolss_EnumPorts.
      s3-spoolss: add rpccli_spoolss_enumports convenience wrapper.
      s3-rpcclient: use rpccli_spoolss_enumports wrapper.
      spoolss: flag spoolss_MonitorInfo structs [public,gensize].
      s3: re-run make samba3-idl.
      s3-spoolss: use pidl for _spoolss_EnumMonitors.
      s3-spoolss: remove old spoolss_EnumMonitors.
      s3-spoolss: add rpccli_spoolss_enummonitors convenience wrapper.
      s3-rpcclient: add enummonitors command to enumerate print monitors.
      s3-spoolss: remove more leftovers from old enumports call.
      s4-spoolss: just return OK for dcesrv_spoolss_EnumPrintProcDataTypes for now.
      spoolss: fix typo in spoolss_EnumJobs_info union helper fn.
      spoolss: fix typo in spoolss_EnumPrintProcessors_info union helper fn.
      s3-spoolss: make jobname a const char * in print_job_start().
      s3-spoolss: add macros from s4 spoolss server.
      s3-spoolss: use macros for _spoolss_EnumPrintProcessors.
      s3-spoolss: use macros for _spoolss_EnumPorts.
      s3-spoolss: use macros for _spoolss_EnumPrintProcDataTypes.
      s3-spoolss: use macros for _spoolss_EnumMonitors.
      s3-spoolss: use macros for _spoolss_GetPrinterDriverDirectory.
      s3-spoolss: use macros for _spoolss_GetPrintProcessorDirectory.
      s3-spoolss: use macros for _spoolss_EnumForms and split out level 1 enum.
      s3-spoolss: use macros for _spoolss_GetForm and split out level 1 get.
      s3-spoolss: add rpccli_spoolss_enumjobs convenience wrapper.
      s3-rpcclient: use rpccli_spoolss_enumjobs wrapper in enumjobs command.
      s3-spoolss: remove old rpccli_spoolss_enumjobs wrapper.
      spoolss: flag spoolss_JobInfo union and structures [public,gensize].
      s3: re-run make samba3-idl.
      s3-spoolss: add construct_dev_mode_new.
      s3-spoolss: use pidl for _spoolss_EnumJobs.
      s3-spoolss: use pidl for _spoolss_GetJob.
      s3-spoolss: remove old spoolss_GetJob and spoolss_EnumJob.
      s3-spoolss: add rpccli_spoolss_enumprinterdrivers convenience wrapper.
      s3-rpcclient: use rpccli_spoolss_enumprinterdrivers wrapper.
      s3-net: use rpccli_spoolss_enumprinterdrivers wrapper.
      s3-spoolss: remove old rpccli_spoolss_enumprinterdrivers wrapper.
      spoolss: add [gensize] flag to spoolss_DriverInfo union.
      s3: re-run make samba3-idl.
      s3-spoolss: use pidl for _spoolss_EnumPrinterDrivers.
      s3-spoolss: remove old spoolss_EnumPrinterDrivers.
      s3-spoolss: remove old leftover driver print functions.
      s3-spoolss: use pidl for _spoolss_GetPrinterDriver2.
      s3-spoolss: remove old spoolss_GetPrinterDriver2.
      s3-spoolss: add rpccli_spoolss_enumprinters convenience wrapper.
      s3-rpcclient: use rpccli_spoolss_enumprinters wrapper.
      s3-net: use rpccli_spoolss_enumprinters wrapper.
      s3-spoolss: remove old enumprinters wrapper.
      spoolss: flag PrinterInfo union and levels as [public,gensize].
      s3: re-run make samba3-idl.
      s3-spoolss: use pidl for _spoolss_EnumPrinters.
      s3-spoolss: remove old spoolss_EnumPrinters.
      s3-spoolss: add snum_is_shared_printer fn.
      s3-spoolss: use snum_is_shared_printer (allows to make code a little easier to
      s3-rpcclient: pure cosmetics for cmd_spoolss_enum_ports.
      s3-rpcclient: pure cosmetics for cmd_spoolss_getprinter.
      s3-rpcclient: pure cosmetics for cmd_spoolss_getdriver.
      s3-spoolss: use pidl for _spoolss_GetPrinter.
      s3-spoolss: remove old spoolss_GetPrinter.
      s3-spoolss: remove some unused functions.
      s3-spoolss: remove more unused marshalling code.
      s4-smbtorture: fix build warning in test_EnumPrintProcDataTypes.
      s3-spoolss: remove obsolete get_a_builtin_ntform.
      s3-spoolss: remove more unused defines.
      s3-spoolss: add pull_spoolss_PrinterData().
      s3-spoolss: add push_spoolss_PrinterData().
      spoolss: make spoolss_GetPrinterData out.data ref pointers.
      s3: re-run make samba3-idl.
      spoolss: fix GetPrinterData buffer helper.
      s4-smbtorture: fix test_GetPrinterData tests after out pointer changes.
      s4-spoolss: fix spoolss_GetPrinterData w.r.t. out pointer changes.
      spoolss: fix IDL for spoolss_SetPrinterData.
      s3: re-run make samba3-idl.
      spoolss: fix ndr_push_spoolss_SetPrinterData.
      spoolss: use uint8 array instead of DATA_BLOB in EnumPrinterData IDL out pointer.
      spoolss: use winreg_Type instead of spoolss_PrinterDataType for XPrinterData calls.
      s3: re-run make samba3-idl.
      s4-spoolss: use winreg_Type for GetPrinterData implementation.
      s4-smbtorture: fix RPC-SPOOLSS test after PrinterData changes.
      s3-spoolss: remove unused ADD_JOBINFO_1.
      s3-spoolss: add rpccli_spoolss_getprinterdata convenience wrapper.
      s3-rpcclient: use rpccli_spoolss_getprinterdata.
      s3-spoolss: remove old rpccli_spoolss_getprinterdata.
      s3-spoolss: use pidl for _spoolss_GetPrinterData.
      s3-spoolss: remove old spoolss_GetPrinterData.
      s3-rpcclient: use rpccli_spoolss_SetPrinterData.
      s3-spoolss: remove old rpccli_spoolss_setprinterdata wrapper.
      s3-spoolss: use pidl for _spoolss_SetPrinterData.
      s3-spoolss: remove old spoolss_SetPrinterData.
      s3-net: temporary disable net_spoolss_setprinterdata.
      s3-rpcclient: use rpccli_spoolss_EnumPrinterData in enumdata command.
      s3-spoolss: remove rpccli_spoolss_enumprinterdata.
      s3-spoolss: use pidl for _spoolss_EnumPrinterData.
      s3-spoolss: remove spoolss_EnumPrinterData.
      s3-net: use rpccli_spoolss_EnumPrinterData.
      s3-net: fix net_spoolss_setprinterdata.
      s3-rpcclient: fix cmd_spoolss_getprinterdataex.
      s3-spoolss: cleanup _spoolss_GetPrinterDataEx a little.
      s3-spoolss: cleanup _spoolss_SetPrinterDataEx a little.
      s3-net: fix net_spoolss_setprinterdataex.
      spoolss: use nstring_array in spoolss_EnumPrinterKey.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix test_EnumPrinterKey.
      s3-spoolss: add rpccli_spoolss_enumprinterkey convenience wrapper.
      s3-rpcclient: use rpccli_spoolss_enumprinterkey wrapper.
      s3-net: use rpccli_spoolss_enumprinterkey wrapper.
      s3-spoolss: remove old rpccli_spoolss_enumprinterkey wrapper.
      s3-spoolss: use pidl for _spoolss_EnumPrinterKey.
      s3-spoolss: remove old spoolss_EnumPrinterKey.
      s3: remove rpc_parse/parse_buffer.c completely.
      s3-spoolss: remove unused get_printer_dataex().
      s3-spoolss: remove unused init_unistr_array().
      s3-spoolss: remove PRINTER_MESSAGE flags and struct, this was never used.
      s3-spoolss: move PRINTER_ATTRIBUTE_SAMBA to printing backend, where they belong.
      s3-spoolss: rename temporary convert_devicemode_new function.
      s3-spoolss: move SYSTEMTIME parsing to a more generic place, as suggested.
      s3-spoolss/registry: use marshall_sec_desc in fill_in_printer_values().
      s3-spoolss/registry: use libndr to push a spoolss_DeviceMode in fill_in_printer_values().
      s3-spoolss: rename construct_dev_mode_new to construct_dev_mode.
      s3-spoolss: rename convert_nt_devicemode_new to convert_nt_devicemode.
      s3-spoolss: rename convert_printer_info_new to convert_printer_info.
      s3-spoolss: remove unused DEVICEMODE parsing and header.
      s3-spoolss: move DRIVER_X_VERSION flags into the backend, where they belong to.
      spoolss: add range checks for priority element in spoolss_JobInfo structs.
      spoolss: add SPL Port definitions to IDL.
      spoolss: use PRINTER_NOTIFY_TYPE and JOB_NOTIFY_TYPE in favor of "old" s4 defines.
      s3: re-run make samba3-idl.
      s3-spoolss: remove PRIORITY defines, that were never used.
      s3-spoolss: remove SPL Port definitions now in IDL.
      s3-spoolss: remove PRINTER_NOTIFY_TYPE and JOB_NOTIFY_TYPE now defined in IDL.
      s4-smbtorture: fix spoolss notify test for notify type changes.
      s3-spoolss: remove (disabled) enum_all_printers_info_1_remote.
      s3-spoolss: remove unused RPC_BUFFER definition.
      spoolss: add spoolss_PrinterEnumValues.
      s3: re-run make samba3-idl.
      s3-rpcclient: say that we are displaying a REG_MULTI_SZ in display_reg_value().
      spoolss: fix spoolss_PrinterEnumValues w.r.t. size calculation of PrinterData.
      s3: re-run make samba3-idl.
      spoolss: add spoolss_EnumPrinterDataEx triple call.
      s3: re-run make samba3-idl.
      spoolss: add ndr_push/pull_spoolss_EnumPrinterDataEx helper.
      s3-spoolss: add rpccli_spoolss_enumprinterdataex convenience wrapper.
      s3-rpcclient: use rpccli_spoolss_enumprinterdataex wrapper.
      s3-net: use rpccli_spoolss_enumprinterdataex.
      s3-spoolss: remove old rpccli_spoolss_enumprinterdataex.
      s4-smbtorture: fix spoolss_EnumPrinterDataEx tests.
      s3-spoolss: use rpccli_spoolss_enumprinterdataex in ldap_printer.c.
      spoolss: fix ndr_push_spoolss_EnumPrinterDataEx.
      s4-smbtorture: fix spoolss_EnumPrinterKey callers in RPC-SPOOLSS-WIN test.
      spoolss: rename NDR_SPOOLSS_SIZE_ENUM macro to NDR_SPOOLSS_SIZE_ENUM_LEVEL in
      spoolss: add ndr_size_spoolss_EnumPrinterDataEx_info in spoolss helper.
      s3-spoolss: add SPOOLSS_BUFFER_ARRAY macro.
      s3-spoolss: add registry_value_to_printer_enum_value.
      s3-printing: use marshall/unmarshall_sec_desc_buf in sec_desc_upg_fn().
      s3-spoolss: remove custom syntax_spoolss and use the syntax defined in IDL.
      s3-rpc_parse: move prs_uint64 to rpc_parse/parse_prs.c.
      spoolss: make spoolss_Field a nodiscriminant union of 2 sets of notify flag enums.
      s3: re-run make samba3-idl.
      spoolss: add custom ndr_print_spoolss_Field.
      s4-smbtorture: fix spoolss notify test after spoolss_Field changes.
      s3-rpcclient: fix spoolss notify test after spoolss_Field changes.
      s3-spoolss: fix spoolss server after spoolss_Field changes.
      s3-spoolss: use printer and job notify enums provided by idl.
      s3-spoolss: use pidl for _spoolss_EnumPrinterDataEx.
      s3-spoolss: remove old spoolss_EnumPrinterDataEx.
      s3-spoolss: remove rpc_parse/parse_spoolss.c alltogether.
      s3-spoolss: remove rpc_server/srv_spoolss.c alltogether.
      s3-spoolss: remove include/rpc_spoolss.h.
      spoolss: add my copyright.
      s3-smbcontrol: use correct PRINTER_NOTIFY flags.
      s3-rpc_client: remove unused CLI_DO_RPC_WERR macro.
      s3-rpc_parse: remove unused BUFFER5 and UNISTR3.
      s3-spoolss: fix _spoolss_EnumPrinterDataEx error path.
      s3-spoolss: fix _spoolss_GetPrinterData printerserver handle query error code.
      s3-rpc_parse: remove some unused parsing code.
      s3: remove POLICY_HND.
      s3-samr: try to to fix password_expired flag handling.
      s3-net: Fix Coverity #886 (FORWARD_NULL).
      s3-krb5: Fix Coverity #722 (RESOURCE_LEAK).
      s3-spoolss: pure comsetics.
      s3-net: Fix Coverity #898 (UNINIT).
      s3-net: Fix Coverity #861 (UNINIT).
      s3-krb5: Fix Coverity #762 (REVERSE_INULL).
      s3-netapi: Fix Coverity #776 (REVERSE_INULL).
      s3-netapi: Fix Coverity #775 (REVERSE_INULL).
      s3-netapi: Fix Coverity #774 (REVERSE_INULL).
      s3-rpcclient: allow to set flags in enumprinters command.
      s3-spoolss: apply some const in spoolss server.
      s3-spoolss: add enum_all_printers_info_level().
      s3-spoolss: use enum_all_printers_info_level for level 1 and 2.
      s3-spoolss: implement enumprinters_level5.
      s3-spoolss: implement enumprinters_level4.
      s3-spoolss: _spoolss_EnumPrinters level 3 always returns WERR_UNKNOWN_LEVEL.
      s3: add missing prototype for auth_wbc_init().
      move dcerpc.idl to main directory.
      s3: add generated dcerpc files.
      s3: use generated dcerpc code.
      s4-install: add new location of generated dcerpc headers to headermap file.
      s3-spoolss: implement enumprinters_level0.
      s3-libnet: Fix Bug #6193: avoid messing with sync_context in libnet_samsync_delta().
      s3-registry: remove last sec_io_desc() caller.
      s3: remove unused rpc_parse/parse_sec.c file.
      s3-rpc_parse: remove unused smb_io_domsid().
      s3-net: Fix Bug #6102. NetQueryDisplayInformation could return wrong information.
      s3:rpc_parse: remove unused init_unistr().
      s3-libnetapi: fix creds in libnetapi_open_ipc_connection().
      error-codes: add WERR_DS_DRA_SOURCE_DISABLED.
      s3-libnet: only call libnet_dssync_process() startup and shutdown callbacks when filled in.
      s3-libnet-samsync: use parent talloc context for libnet_samsync_passdb.
      s3-libnet-samsync: some pure cosmetics.
      s3-passdb: add smb_create_user().
      s3-libnet-samsync: use smb_create_user().
      s3-libnet-samsync: return appropriate error code in fetch_sam_entry().
      s3-auth: rename static smb_create_user(). Sorry...
      s3-spoolss: implement _spoolss_GetPrinterDriver2 level 101 (Bug #5140).
      s3-lsa: don't SAFE_FREE talloced structs.
      s3-lsa: use LSA_ROLE definitions in _lsa_QueryInfoPolicy().
      s3-build: fix the build after tsocket changes.
      s3-nsswitch: Fix Bug #6238. Make sure logoff is bla bla.
      s3-nsswitch: Fix Bug #6238 2nd part. zero blob pointer in wbcLogoffUserParams.
      s3-samr: add support for setting password hashes via samr_SetUserInfo level 21.
      s3-examples: Fix Bug #6205. Correct sample smb.conf share configuration.
      s3-samr: add support for _samr_Connect3() while planning to pass a s4 smbtorture test.
      s3-svcctl: Fix _svcctl_EnumServicesStatusW() crash bug on too small buffer.
      svcctl: Fix svcctl_ControlsAccepted bitmask.
      s3: re-run make samba3-idl.
      s3-libads: avoid NULL talloc context with ads_get_dn().
      s3-spoolss: set servername to global_myname() in set_printer_hnd_name().
      s3-svcctl: no need to define SVCCTL_NUM_INTERNAL_SERVICES twice in a file.
      svcctl: use offered/needed for buffer sizes as in spoolss.
      selftest: add a fake root user to nss_wrapper_passwd in s3.
      s3-selftest: Samba3 passes RPC-SVCCTL so enable it during make test.
      s3-util-sock: add ismyaddr() check in is_myname_or_ipaddr().
      s3-selftest: add root for make test as well (not only make selftest).
      s4-smbtorture: Small fix for RPC-SPOOLSS-WIN to deal with driver-less printers.
      s3-selftest: As Samba3 now passes RPC-SPOOLSS-WIN enable it against ourself.
      s3-rpc-server: remove unused rpc_server/srv_util.c file.
      s3-eventlog: move rpc_server/srv_eventlog_lib.c out of rpc_server.
      s3-eventlog: split out evlog_convert_tdb_to_evt().
      s4-smbtorture: fix test_ReportEventLog in RPC-EVENTLOG.
      error-codes: add some service related error codes.
      s3-net: Fix Bug #5329: add "net rpc service delete/create".
      s3-svcctl: Fix _svcctl_EnumServicesStatusW (again).
      s4-smbtorture: add test_QueryServiceStatus() to RPC-SVCCTL.
      s4-smbtorture: add test_QueryServiceConfigW() to RPC-SVCCTL.
      svcctl: Fix IDL for svcctl_QueryServiceObjectSecurity and Set call.
      s3: re-run make samba3-idl.
      s3-svcctl: Fix _svcctl_Set/GetServiceObjectSecurity after IDL changes.
      s4-smbtorture: add test_QueryServiceObjectSecurity() to RPC-SVCCTL test.
      s3-svcctl: Fix invalid buffer memset in _svcctl_QueryServiceObjectSecurity().
      svcctl: use svcctl_ServiceState type for dependent calls in IDL.
      s3: re-run make samba3-idl.
      s4-smbtorture: add test_EnumDependentServicesW() to RPC-SVCCTL.
      s3-svcctl: minor fix for _svcctl_EnumDependentServicesW().
      ntsvcs: add PNP_GetIdListFlags flags.
      s3: re-run make samba3-idl.
      error-codes: add WERR_CM_INVALID_POINTER.
      s3-rpcclient: allow to set flags in cmd_ntsvcs_get_dev_list().
      s4-smbtorture: perform the ntsvcs devicelist tests against the Spooler service.
      s3-ntsvcs: fix _PNP_GetDeviceList and _PNP_GetDeviceListSize.
      s3-selftest: enable the RPC-NTSVCS torture test against Samba3.
      eventlog: make EVENTLOG_FULL_INFORMATION a public struct.
      s3: re-run make samba3-idl.
      s3-eventlog: implement _eventlog_GetLogInformation().
      s3-eventlog: implement _eventlog_FlushEventLog().
      s3-spoolss: add support for level 8 in _spoolss_GetPrinter().
      s3-spoolss: implement dummy _spoolss_AddPort().
      spoolss: fix order of strings in PrinterInfo1 structs.
      s3: re-run make samba3-idl.
      s4-smbtorture: use printerinfo level 1 name, not description in
      s3-spoolss: add generic enumprinterdrivers_level function.
      s3-spoolss: use enumprinterdrivers_level() for level 1 enum.
      s3-spoolss: use enumprinterdrivers_level() for level 2 enum.
      s3-spoolss: use enumprinterdrivers_level() for level 3 enum.
      spoolss: add spoolss_DriverAttributes bitmask.
      s3: re-run make samba3-idl.
      s3-spoolss: Fix permission checks for _spoolss_AddForm,SetForm and DelForm.
      s3-loadparm: Fix resume command typo for "printing = vlp".
      s3-spoolss: fix typo in fill_printer_driver_info3().
      s4-smbtorture: move test_ReplyOpenPrinter from RPC-SPOOLSS to RPC-SPOOLSS-NOTIFY.
      s4-smbtorture: disable test_SecondaryClosePrinter when running against s3 for now.
      s4-smbtorture: fix two valgrind warnings.
      s3-rpcclient: add set_job command.
      s4-smbtorture: print SPOOLSS_JOB_CONTROL flags in RPC-SPOOLSS test.
      s3-spoolss: remove unused dup_nt_devicemode().
      s3-svcctl: fix memcpy in _svcctl_EnumServicesStatusW().
      s4-smbtorture: make sure samba3 does not regress in EnumServicesStatusW call.
      s3-nsswitch: fix make test_wbpad.
      libwbclient: Fix undocumented arguments doxygen warnings.
      netdomjoin-gui: make sure to grey out change fields when not running as root.
      s3-spoolss: Fix format of description string in spoolss_PrinterInfo1.
      s4-smbtorture: define TORTURE_DEFAULT_SERVICE and set to netlogon.
      s3-examples: make sure to match correct key name in adssearch.
      s4-smbtorture: Fix crash bugs in RPC-SAMR_ACCESSMASK.
      s3-lsa: Fix Bug #6263. Unexpected LookupSids reply crashes XP pre-SP3.
      s3-docs: document warn_pwd_expire pam_winbind option in manpage.
      s4-smbtorture: Fix crash in RPC-LSA-LOOKUP
      s4-smbtorture: add LSA-LOOKUPSIDS to verify bug #6263.
      s3-selftest: enable RPC-LSA-LOOKUPSIDS against samba 3.
      s3-docs: fix typo in smb.conf.5.
      s4-smbtorture: disable CreateUser2 tests when running RPC-SAMR-PASSWORDS-PWDLAST
      s3-selftest: enable RPC-SAMR-PASSWORDS-PWDLASTSET whilte testing Samba3.
      s3-samr: set the builtin_domain bool flag in get_samr_dispinfo_by_sid().
      s3-selftest: samba 3 also passes RPC-JOIN so enable it.
      s4-smbtorture: Fix RPC-SPOOLSS-WIN for printers with a lot of jobs in the queue.
      s4-smbtorture: rework test_EnumPrinterDrivers() a little to succeed with s3.
      s3-spoolss: add support for _spoolss_EnumPrinterDrivers() level 4.
      s3-spoolss: add support for _spoolss_EnumPrinterDrivers() level 5.
      s3-spoolss: add support for _spoolss_EnumPrinterDrivers() level 6.
      s4-smbtorture: Skip Job pause and resume on paused printers for Samba 3 for now.
      s3-selftest: enable RPC-SPOOLSS.
      s3-spoolss: remove some direct checks for 0 uid in AddForm,SetForm,DelForm.
      s4-smbtorture: test all levels in test_GetJob().
      s3-printing: use sec_initial_uid() instead "0" in print_access_check().
      s3-printing: use ARRAY_SIZE() macro in forms functions.
      libgpo: Fix some minor issues.
      libgpo: fix the build of gpext plugins.
      libgpo: use shared access bits in gpo_sd_check_agp_object().
      s3-secdesc: use SEC_FLAG_MAXIMUM_ALLOWED instead of SEC_RIGHTS_MAXIMUM_ALLOWED.
      s3-secdesc: use SEC_FLAG_MAXIMUM_ALLOWED instead of SEC_RIGHT_MAXIMUM_ALLOWED.
      s3-secdesc: use SEC_FLAG_SYSTEM_SECURITY instead of SEC_RIGHT_SYSTEM_SECURITY.
      s3-secdesc: move all winreg access bits to IDL.
      s3-secdesc: remove SEC_RIGHT_MAXIMUM_ALLOWED and SEC_RIGHT_SYSTEM_SECURITY.
      s3-selftest: test wbinfo --allocate-uid/gid.
      s3-netlogon: Start fixing rpccli_netlogon_setup_creds after auth merge.
      s3-build: refactor LIBNET_OBJ.
      s3-idmap: Fix bug #6286: Call init function for builtin idmap modules before probing for them as shared modules.
      s4-smbtorture: change default service to spooler in RPC-SVCCTL.
      s4-smbtorture: add test_StartServiceW() to RPC-SVCCTL.
      s4-smbtorture: add test_ControlService() to RPC-SVCCTL.
      s3-svcctl: fix _svcctl_ControlService.
      s3-svcctl: indicate that the spooler is already running if it does.
      s3-libnetjoin: add support for WKSSVC_JOIN_FLAGS_JOIN_UNSECURE.
      s3-libnetjoin: make acct_flags dependent on secure channel type.
      s3-auth-charcnv: fix push_string(). Don't push to ucs2 and ascii after another.
      s3-svcctl: Fix crash in _svcctl_EnumServicesStatusW().
      s3-net: make sure to call libnetapi init functions at the top of "net rpc" command.
      s3-cldap: check for zero ip address in ads_cldap_netlogon().
      svcctl: Fix IDL for svcctl_StartServiceW().
      samr: fix samr_ConnectVersion enum which is 32bit not 16bit.
      s3-net: make "net eventlog" help output a little more appropriate.
      s3-docs: document "net eventlog" in net manpage.
      s3-test: make it possible to find the built vlp in "make test".
      s3-printing: add move_driver_file_to_download_area().
      s3-printing: use move_driver_file_to_download_area() to avoid code duplication.
      s3-spoolss: avoid referring to uid 0 in spoolss server (use sec_initial_uid() instead).
      s3-nss_wins: Fix unresolved ldb symbols in libnss_wins.so.
      s3-lsa: use LSA_POLICY_MODE flags in _lsa_GetSystemAccessAccount().
      s3-printing: rework move_driver_file_to_download_area() a bit for clarity.
      wkssvcs: add WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS join flag.
      s3-netapi: Fix Bug #6309: support remote unjoining of Windows 2003 or greater.
      s3-printing: Fix driver upload for Xerox 4110 PS printer driver.
      s3-pam_winbind: Fix Bug 6253: Use correct value for password expiry calculation.
      error-codes: add some more group specific windows error codes.
      s3-ldapsam: Fix Bug #6313: ldapsam_update_sam_account() crashes while doing talloc_free on malloced memory.
      s3-ldap: fix more callers of smbldap_dn_talloc() that were passing a NULL context.
      s3-printing: simplify print_queue helper functions and return WERROR.
      s3-printing: fix debug statement in virtual registry layer
      s3-rpcclient: print more infolevels in printer and driver info levels.
      s3-docs: Fix "net eventlog dump" syntax in manpage.
      s3-docs: Fix Bug #6331. Document "net dom join/net dom unjoin".
      s3-netlogon: Fix NETLOGON credential chain. Fixes Bug #6099 (Windows 7 joining Samba3) and probably many, many more.
      s4-smbtorture: Avoid failing RPC-SCHANNEL when testing lsa_GetUserName behaviour against Samba 3.
      s3-selftest: run RPC-SCHANNEL, RPC-SCHANNEL2 and RPC-BENCH-SCHANNEL1 against Samba3.
      s3-credentials: protect netlogon_creds_server_step() against NULL creds.
      s3-rpcclient: rework enumdrivers call a bit to allow queries like win7 does.
      s3-samr: Fix _samr_Connect5(). In error case it still needs to return empty info1.
      s3-auth: use full 16byte session key in make_user_info_netlogon_interactive().
      s3-samr: support some more info levels in samr_QueryUser calls.
      s3-samr: support some more info levels in samr_SetUserInfo calls.
      s3-samr: let set_user_info_16 and 20 follow the same pattern as all other levels.
      s3-samr: Do not return users in _samr_QueryDisplayInfo() for builtin domain.
      s3-samr: Let _samr_TestPrivateFunctionsUser() return not supported.
      s4-smbtorture: prepare for running RPC-SAMR-USERS against samba3.
      s3-samr: rework check_oem_password() to take a struct samu, not to return one.
      s3-samr: disable check for ACB_DISABLED in check_oem_password().
      s3-samr: implement _samr_OemChangePasswordUser2().
      s3-samr: implement _samr_ChangePasswordUser().
      s3-samr: Do not leak information whether a user exist or not in pwd change calls.
      s3-selftest: need to enable lanman auth in order make RPC-SAMR-PASSWORDS pass.
      s4-smbtorture: avoid acct_flags check at the end of RPC-SAMR-PASSWORDS for Samba3.
      s3-selftest: finally enable RPC-SAMR-PASSWORDS which samba3 now passes.
      s3-samr: Fix potential memory leak in _samr_ChangePasswordUser().
      s3-samr: implement more info levels in _samr_QueryDomainInfo().
      s4-smbtorture: Fix printf info-level mismatch in RPC-SAMR.
      s3-selftest: run RPC-LSA-GETUSER against Samba 3.
      s4-smbtorture: Support timestamp handling for Samba3 in RPC-SAMR-USERS.
      s3-samr: more accurateness in _samr_SetDomainInfo().
      s4-smbtorture: skip unsupported ACB bits for Samba3 in RPC-SAMR-USER.
      s3-selftest: enable running RPC-SAMR-USERS against Samba3.
      s3-samr: Fix SetUserInfo level 7 when there has been no name change.
      s3-samr: Fix SetUserInfo level 16 and 21 w.r.t. ACB_AUTOLOCK acct_flag.
      s4-smbtorture: avoid secdesc test on connect handle in RPC-SAMR-USERS for Samba3.
      s3-net: add "net dom renamecomputer" to rename machines in a domain.
      s3-docs: document "net dom renamecomputer".
      s4-smbtorture: use struct torture_context in RPC-LSA.
      s4-smbtorture: remove trailing whitespace in RPC-LSA test.
      s4-smbtorture: add optional very simple reply checks to lsa lookup name tests.
      s4-smbtorture: add very basic RPC-LSA-LOOKUPNAMES test.
      s3-selftest: enable RPC-LSA-LOOKUPNAMES against Samba 3.
      s3-lsa: Fix _lsa_LookupNames2() server implementation which always returned a NULL sid_array since 3.2.0.
      s3-samr: Fix Bug #5859, renaming of samr objects failed due to samr setuserinfo access checks.
      s4-smbtorture: remove trailing whitespace in RPC-SAMR.
      s4-smbtorture: switch to use torture_context in RPC-SAMR.
      s4-smbtorture: Fix order of assert args in test_TestPrivateFunctionsDomain() in RPC-SAMR.
      s4-smbtorture: Skip secdesc set calls for non-user objects in RPC-SAMR for Samba3.
      s4-smbtorture: skip SetMemberAttributesOfGroup in RPC-SAMR for s3 as well.
      s3-samr: Let _samr_TestPrivateFunctionsDomain() return NT_STATUS_NOT_SUPPORTED to make RPC-SAMR happy.
      s3-samr: implement _samr_RidToSid().
      s3-printing: Fix vlp testprinter application.
      s3-netdomjoin-gui: inspect the correct computername string before
      s3-netdomjoin-gui: use NetServerGetInfo() level 101 to get hostname.
      s3-netdomjoin-gui: Fix join prompt dialog test.
      error-codes: add some more WERRORs to table.
      s3-netdomjoin-gui: prepare to call out for NetRenameMachineInDomain() to rename computers
      initshutdown: add shutdown reason codes.
      s3-build: re-run make samba3-idl.
      spoolss: add SPOOLSS_ARCHITECTURE_ALL to IDL.
      s3-spoolss: move SPL_ARCH_X defines to IDL.
      s4-smbtorture: cosmetic cleanup for RPC-SAMR-ACCESSMASK.
      s4-smbtorture: split RPC-SAMR-ACCESSMASK into several tests.
      s4-selftest: match new name of RPC-SAMR-ACCESSMASK.
      s3-net: Fix bug 6340: don't segfault when cleartext trustdom pwd could not be retrieved.
      s3-printing: no need to define struct table_node 4 times.
      s3-netapi: add NetShutdownInit and NetShutdownAbort.
      s3-build: re-run make samba3-idl.
      s3-netapi: add NetShutdownInit and NetShutdownAbort skeletons.
      s3-netapi: add NetShutdownInit and NetShutdownAbort to public API.
      s3-netapi: add example code for NetShutdownInit and NetShutdownAbort.
      s3-netapi: implement NetShutdownInit_r and NetShutdownAbort_r.
      s3-samr: use normal integer in r->in.level switch statements.
      s3-samr: Fix samr access checks in _samr_QueryDomainInfo().
      s3-samr: Fix samr access checks in _samr_SetDomainInfo().
      s3-samr: in _samr_QueryUserInfo() make sure to not return any info in error case.
      s3-samr: Fix samr access checks in _samr_QueryUserInfo().
      s3-samr: Fix samr access checks in _samr_SetUserInfo().
      s3-netdomjoin-gui: only gray out labels when not root and not connecting to
      s3-netdomjoin-gui: cosmetic fix for empty hostnames.
      s3-netdomjoin-gui: allow to switch between workgroups/domains with the same name.
      s3-samr: Fix samr access checks in _samr_RemoveMemberFromForeignDomain().
      s3-privileges: remove trailing whitespace from privileges codes.
      s3-privileges: add privilege_delete_account().
      s4-smbtorture: add RPC-SAMR-USERS-PRIVILEGES test.
      s3-lsa: start a very basic implementation of _lsa_DeleteObject().
      s3-lsa: let _lsa_GetSystemAccessAccount() call into _lsa_EnumPrivsAccount().
      s3-selftest: enable RPC-SAMR-USERS-PRIVILEGES.
      s3-lsa: let _lsa_OpenPolicy() just call _lsa_OpenPolicy2().
      lsa: add access_masks for accounts, secrets and trusted domains to IDL.
      s3: re-run make samba3-idl.
      s4-smbtorture: Fix build warning in RPC-SAMR tests.
      nsswrapper: implement group_add() in nss_wrapper.pl.
      nsswrapper: implement group_del() in nss_wrapper.pl.
      s3-selftest: add add and delete group scripts using nss_wrapper.
      s4: try to fix privileges implementation in order to pass the RPC-SAMR-USERS-PRIVILEGES test.
      s4-selftest: adding RPC-SAMR-USERS-PRIVILEGES to knownfail list.
      s3-build: fix the build of ntlm_auth. Bo Yang, please check.
      s3-rpcclient: use get_domain_handle() fn in enum domain users & groups.
      s3-pamsmbpass: copy _pam_get_item and _pam_get_data from pam_winbind.
      s4-smbtorture: re-work test_Create{User,Group,Alias} a little.
      s4-smbtorture: rename test_EnumDomain{Users,Groups,Aliases} in RPC-SAMR.
      s4-smbtorture: add RPC-SAMR-LARGE-DC test.
      s3-selftest: enable RPC-SAMR-LARGE-DC against Samba3.
      s3-samr: Fix Bug #6372, usermanager only displaying 1024 groups and aliases.
      s3-selftest: fix typo.
      nss_wrapper: restructure nwrap calls.
      nss_wrapper: split out passwd and group paths in nss_wrapper.pl.
      nss_wrapper: support member add and delete for groups in nss_wrapper.pl.
      s3-selftest: use nss_wrapper.pl as "add user to group" and "delete user from group" script.
      nss_wrapper: remove re-structuring leftovers (unused variables).
      nss_wrapper: fix nss_wrapper build for solaris.
      s3-winbindd: fix remaining callers of sid_binstring().
      s3-rpc_server: increase max number of open policy handles per pipe to 2048.
      s3-netlogon: return proper error code for unsupported validation class.
      s3-netlogon: Fix _netr_LogonSamLogon{Ex} with validation level != 3.
      s4-smbtorture: Fix test_SamLogon() for netlogon servers not yet supporting
      s4-smbtorture: remove trailing whitespace.
      util: move add_gid_to_array_unique to toplevel and add add_uid_to_array_unique.
      s4-smbtorture: add a very basic NSS-WRAPPER testsuite.
      s3-selftest: enable LOCAL-NSS-WRAPPER test against samba 3.
      s4-smbtorture: add very basic LIBNETAPI testsuite.
      s3-passdb: fix uninitialized variable in local_password_change().
      s4-smbtorture: add NETAPI-USER test.
      s4-smbtorture: add NETAPI-GROUP test.
      s3-selftest: enable NETAPI-INITIALIZE and NETAPI-USER against samba3.
      Revert "s3-selftest: enable NETAPI-INITIALIZE and NETAPI-USER against samba3."
      s4-smbtorture: fix the build w/o libnetapi.
      nss_wrapper: add support for getgrouplist.
      nss_wrapper: restructure parts of the testsuite.
      nss_wrapper: add test_nwrap_membership to testsuite.
      s3-selftest: Fix invalid /etc/group file used with nss_wrapper.
      nss_wrapper: try to fix the build of nss_wrapper on solaris.
      nss_wrapper: fix typo while checking for getgrid_r support.
      nss_wrapper: make sure to return after calling real_{set,end}{gr,pw}ent.
      nss_wrapper: add nwrap_ops function pointer table.
      nss_wrapper: resort calls to move public calls to the end.
      torture: minor fixes to torture macro text output.
      nss_wrapper: prefix function pointer names in struct nwrap_ops.
      nss_wrapper: make full talloced copies of struct passwd and group in testsuite.
      nss_wrapper: refactor test_nwrap_membership_user() in testsuite.
      nss_wrapper: add coherency tests for get{gr,pw}{nam,id}.
      nss_wrapper: more coherence tests for group membership.
      s4-smbtorture: fix comment in RPC-SAMR-LARGE-DC test.
      gitignore: remove traces of source4/libcli/auth.
      nss_wrapper: remove getgrouplist from nwrap_ops table.
      nss_wrapper: add more coherency checks for user and group enumeration.
      nss_wrapper: rename test_nwrap_env to test_nwrap_enumeration in testsuite.
      nss_wrapper: add tests for getpwent_r to testsuite.
      nss_wrapper: add tests for getgrent_r to testsuite.
      nss_wrapper: add cross checking test to testsuite.
      nss_wrapper: add struct nwrap_backend.
      nss_wrapper: add capability to load nss modules.
      nss_wrapper: add skeleton for module nwrap_backend.
      nss_wrapper: add missing return in nwrap_module_init().
      nss_wrapper: fill in module nwrap_backend.
      nss_wrapper: add support for loading nss_winbind.so via WINBIND_SO_PATH env.
      nss_wrapper: rename nwrap_cache_{re,un}load as per metzes request.
      s3-winbindd: add some debug statements while tracking down a bug.
      s3-samr: cosmetic fixes for _samr_QueryDisplayInfo.
      s4-smbtorture: skip samr MultipleMember alias tests for 3 as well as we do already for s4.
      s3-samr: _samr_EnumDomain{Users,Groups} need to return an emtpy array even for builtin domain.
      s3-samr: let _samr_SetGroupInfo level 3 just pass with success.
      s3-samr: remove total_data_size variable in _samr_QueryDisplayInfo.
      s3-samr: fix _QueryDisplayInformation r->out.returned_size.
      s3-samr: SetGroupInfo level 1 should not return NT_STATUS_INVALID_INFO_CLASS.
      s3-samr: fix return code of _samr_LookupRids when run with pdb_ldap.
      s3-groupdb: fix enum_aliasmem in ldb branch.
      nss_wrapper: add my copyright.
      s3-charcnv: remove remaining malloc references in convert_string_talloc().
      s3-charcnv: always talloc_free in convert_string_talloc() error path.
      s4-smbtorture: exclude oem_information checking for s3 in RPC-SAMR.
      s3-samr: support _samr_SetGroupInfo level 2.
      test: add NSS_WRAPPER_WINBIND_SO_PATH to make test.
      s3-selftest: forward NSS_WRAPPER_WINBIND_SO_PATH env to tests.
      s3-winbindd: workaround alias enumeration in expand_groups().
      s3-test: finally enable RPC-SAMR against samba3.
      s3-rpcclient: allow to set query size for samr enum calls.
      s3-samr: fix enum_acb_mask type (uint32 instead of uint16).
      s3-examples: fix usage for eventlog example script.
      s4-smbtorture: fix test_ReportEventLog in RPC-EVENTLOG.
      s4-smbtorture: also test for "all" architecture in enum driver tests in RPC-SPOOLSS.
      s3-spoolss: add server-support for queries for the "all" architecture in printdriver enum calls.
      s4-smbtorture: add test_QueryDisplayInfo_level to RPC-SAMR-LARGE-DC.
      nss_wrapper: fix typo in testsuite.
      s4-smbtorture: when testing RPC-SAMR-LARGE-DC its fine to just close the objects.
      s3-lsa: remove old code that we cannot even compile anymore.
      nsswitch: try to fix segfault in nss_winbind on NetBSD found by torture test.
      s4-smbtorture: rename SECRETS to LSA-SECRETS.
      lsa: use the lsa access masks in idl.
      s4-selftest: change rpc.secrets to rpc.lsa.secrets here as well.
      s3-net: fix "net ads testjoin".
      s3-build: Fix make test_shlibs and test_nss_modules.
      lib-util: move set_blocking() call into own file.
      s3-libwbclient: fix unresolved symbols in libwbclient.
      s3-docs: Fix Bug #4280. Shutdown scripts are called as root for privileged users.
      s3-netapi: add NetGetJoinInformation example code.
      s3-docs: fix typo in pam_winbind.8.
      s3-netapi: Fix Bug #6305. Correctly prompt for a password when a username was given.
      s3-netapi: Fix Bug #6451: net/libnetapi user rename using wrong access bits.
      s4-smbtorture: use TORTURE_TEST_USER define in libnetapi user test.
      s4-smbtorture: use torture_comment in RPC-SAMR-USERS-PRIVILEGES test.
      s4-smbtorture: add test for NetUserSetInfo level 0 (user rename).
      s3-net: Fix Bug #6328: allow multiple rights in "net sam rights grant".
      wbinfo: use wbcLogonUser for wbinfo -K.
      libwbclient: fix returned LogonInfo in wbc_LogonUser().
      s3-pam_winbind: Fix Bug 6253: Use correct value for password expiry calculation.
      s4-smbtorture: fix test_GetInfoLevel crash bug in RPC-DFS.
      s3-libnet: fix libnet_unjoin_remove_machine_acct() when called without ads struct.
      samr: add samr_UserInfoLevel and samr_DomainInfoClass enums based on MS-SAMR.
      s3: re-run make idl.
      s3-eventlog: implement _eventlog_ReportEventW().
      s3-lsa: Fix error path in _lsa_EnumAccountRights.
      s3-spoolss: restructure _spoolss_EndDocPrinter().
      s3-printing: eliminate another non sec_initial_uid using security check.
      s4-smbtorture: more paranoid checks while testing group membership in RPC-SAMR.
      s3-samr: refactor _samr_QueryDomainInfo().
      s3-samr: refactor _samr_SetDomainInfo().
      s3-examples: make get_next_oid exectuable.
      s3-netlogon: fix validation level 2 support in netr_SamLogon and friends.
      s3-netlogon: remove init_netr_SamInfo functions.
      s3-netlogon: remove remaining netlogon init functions.
      s3-vlp: drastically shrink size and dependencies of the virtual line printer.
      s4-smbtorture: add torture_suite_add_machine_workstation_rpc_iface_tcase.
      s4-smbtorture: add RPC-SAMR-MACHINE-AUTH test.
      s3-selftest: add RPC-SAMR-MACHINE-AUTH to list of test to run against s3.
      s3-pdb_tdb: give 'unknown_str' the proper name 'comment' and set comment in passdb.
      s4-smbtorture: correctly test comment behaviour in RPC-SAMR-USERS against s3.
      s4-smbtorture: use torture_comment & torture_warning in RPC samr tests.
      s4-smbtorture: remove trailing whitespace from RPC-SPOOLSS.
      s4-smbtorture: Test for newly added form with enum call in RPC-SPOOLSS.
      s3-spoolss: Bug #6512. Fix support for enumerating user forms.
      s3-netlogon: remove unneeded fstrings from netlogon server.
      doserrors: print out some more werrors.
      s4-smbtorture: fix getjob test in RPC-SPOOLSS.
      spoolss: the flags in spoolss_PrinterInfo1 are in fact spoolss_PrinterAttributes.
      spoolss: fill in spoolss_AddPrinter IDL.
      s3-spoolss: implement _spoolss_AddPrinter.
      spoolss: the flags in spoolss_SetPrinterInfo1 are in fact spoolss_PrinterAttributes.
      spoolss: fill in spoolss_GetPrinterDriver IDL.
      s3-spoolss: add rpccli_spoolss_getprinterdriver convenience wrapper.
      libds: share UF_ flags between samba3 and 4.
      libds: merge the UF<->ACB flag mapping functions.
      s3-rpc_server: pass down full unix token to map_max_allowed_access().
      s3-pdb_ads: set correct pdb field with the value from 'accountExpires' attribute.
      samr: add missing samr_ValidationStatus codes.
      s3: re-run make idl.
      s3-account_policy: remove trailing whitespace.
      s3-account_policy: add pdb_policy_type enum.
      s4-smbtorture: restructure test_OpenPrinter_server in RPC-SPOOLSS a bit.
      s4-smbtorture: add some tests to check spoolss_SetPrinter behavior.
      s4-smbtorture: add RPC-SPOOLSS-PRINTER test.
      s3-passdb: fix wbc build warning.
      s4-selftest: ok, s4 cant print. add RPC-SPOOLSS-PRINTER to knownfail for now.
      s4-smbtorture: some work on getprinterdriver and getprinterdriver2 tests.
      s3-spoolss: make some of the command hooks static.
      s3-rpc_parse: remove more unused code.
      s3-ldapsam: bring Fedora DS LDAP schema in line with OpenLDAP schema.
      lsa: fix typo in lsa_TrustDomInfoEnum enum in IDL.
      s4-smbtorture: move all trusted domain tests to RPC-LSA-TRUSTED-DOMAINS.
      s4-smbtorture: move all privilege tests to RPC-LSA-PRIVILEGES.
      fix LSA-TRUSTED-DOMAINS
      fix LSA-PRIVILEGES
      s4-smbtorture: use torture_comment in RPC-LSA tests.
      s3-lsa: implement _lsa_EnumAccountsWithUserRight().
      s3-lsa: implement _lsa_LookupPrivName().
      s3-lsa: Fix pointless check for sec_info flags in _lsa_QuerySecurity().
      s4-smbtorture: use secinfo flags instead of numbers in lsa test.
      Revert "fix LSA-TRUSTED-DOMAINS"
      Revert "fix LSA-PRIVILEGES"
      lsa: fill in lsa_StorePrivateData and lsa_RetrievePrivateData and rerun make samba3-idl.
      s3-rpcclient: add LSA createsecret command.
      s3-rpcclient: add LSA deletesecret command.
      s3-rpcclient: add LSA querysecret command.
      s3-rpcclient: add LSA setsecret command.
      s3-rpcclient: add LSA retrieveprivatedata command.
      s3-rpcclient: add LSA storeprivatedata command.
      s3-lsa: Fix policy handle memleak and handle type check in _lsa_DeleteObject().
      s3-lsa: also implement level 13 in lsa_QueryInfoPolicy.
      s3-lsa: add (not yet activate) level specific access checks for _lsa_QueryInfoPolicy.
      s3-lsa: Fix access_mask calculation for new handle in _lsa_CreateAccount().
      s3-lsa: let _lsa_Delete return NT_STATUS_NOT_SUPPORTED as w2k3 does.
      spoolss: fill in spoolss_Create/DeletePrinterIC + rerun make samba3-idl.
      s3-rpcclient: add createprinteric command.
      spoolss: fill in some unknowns in spoolss_OSVersion and spoolss_OSVersionEx.
      s4-spoolss: fix the build after OsVersion changes.
      s3-pdb_ldap: Make ldapsam_alias_memberships behave like the tdbsam equivalent.
      s3-spoolss: fix crash bug in spoolss_addprinterex_level_2.
      s4-ldap_server: fix generated error string in map_ldb_error().
      s3-spoolss: Fix Bug #6568: _spoolss_GetPrintProcessorDirectory() implementation.
      s3-ldap: Fix Bug #5879. Update LDAP schema for Netscape DS 5.
      s3-wkssvcs: fix check for BUILTIN\Administrators membership in wkssvc_Netr{Join,Unjoin}Domain2.
      spoolss: fill in more details of the spoolss_DeviceMode.
      s3: re-run make samba3-idl.
      s3-spoolss: remove device mode defines from nt_printing.h.
      s3-spoolss: remove another duplicate copy of print_architecture_table.
      netlogon: document some more MSVC flags.
      spoolss: add more spoolss calls to IDL
      s3: re-run make samba3-idl.
      s3-spoolss: add stubs for new idl opcodes in spoolss server.
      s4-spoolss: add stubs for new idl opcodes in spoolss server.
      s3-idmap: fix two uninitialized variable warnings in idmap_tdb2.
      tevent: avoid using reserved c++ word.
      libndr: add missing protoypes for double type.
      s3-netlogon: Only hand out rid when netlogon credential chain has been setup sucessfully.
      netlogon: add (yet) undocumented netlogon negotiate bit to bitmap.
      netlogon: give netlogon w7/w2k8r2 AES negotiate flag proper name (see bug #6099 for details).
      s3-netlogon: make _netr_ServerAuthenticate a callback to _netr_ServerAuthenticate3.
      s3-netlogon: let get_md4pw() return a struct samr_Password.
      s3-netlogon: get rid of init_net_r_req_chal().
      Revert "s3: Fix uninitialized const char *"
      s3-netlogon: fix default case when _netr_LogonSamLogon is called from other opcodes.
      netlogon: make netr_NegotiateFlags a public bitmap.
      schannel: move schannel.idl to main directory.
      schannel: add generated files.
      s3-netlogon: let get_md4pw() return a struct dom_sid.
      s4-smbtorture: add RPC-NETLOGON-S3 to test samba3 netlogon server.
      s3-selftest: enable running RPC-NETLOGON-S3 against samba3.
      s4-smbtorture: add test_SetPassword_flags to RPC-NETLOGON-S3 testsuite.
      s4-smbtorture: do not hard code BDC secure channel type into RPC-NETLOGON tests.
      s3-build: add SCHANNEL_OBJ to Makefile.in.
      libcli/auth: rename schannel_state.c to schannel_state_ldb.c.
      s4-schannel: add ldb suffix to schannel functions.
      schannel: add netlogon_creds_CredentialState to IDL.
      libcli/auth: move netlogon_creds_CredentialState out of libcli.
      libcli/auth: add tdb backend for schannel state.
      s3-schannel: make open_schannel_session_store() public.
      s3-schannel: add simple wrappers to fetch and store schannel auth info.
      s3-netlogon: add netr_creds_server_step_check() convenience wrapper.
      s3-netlogon: use shared credential and schannel storage infrastructure for netlogon server.
      s3-schannel: upgrade old format schannel_store.tdb.
      s3-credentials: remove unused code.
      s3-schannel: remove remaining code that was using "struct dcinfo".
      s3-ntlmssp: remove trailing whitespace.
      ntlmssp: add IDL.
      ntlmssp: add ntlmssp helper skeleton.
      ntlmssp: add string helper functions to handle OEM and UNICODE charset.
      ntlmssp: add NEGOTIATE_MESSAGE to IDL.
      ntlmssp: add CHALLENGE_MESSAGE to IDL.
      ntlmssp: add AUTHENTICATE_MESSAGE to idl.
      ntlmssp: add NTLMSSP_MESSAGE_SIGNATURE to IDL.
      ntlmssp: re-run make samba3-idl and add generated files.
      ntlmssp: add ndr_print_ntlmssp_{nt,lm}_response() function.
      s3-ntlmssp: use NTLMSSP headers from IDL and remove duplicate constants.
      s3-ntlmssp: use interface constants in TargetInfo blob.
      s4-ntlmssp: use NTLMSSP headers from IDL and remove duplicate constants.
      s4-ntlmssp: use interface constants in TargetInfo blob.
      libcli/auth: remove unused NTLMSSP_NAME_TYPE_ flags.
      s4: fix the build after ntlmssp header change.
      s3-ntlmssp: add NDR helper routines for ntlmssp.
      s3-ntlmssp: use generated ntlmssp code for debugging purpose.
      s4: include ntlmssp header in auth/ntlmssp/ntlmssp.h.
      s3-netlogon: add DS_WEB_SERVICE_REQUIRED bit for dsgetdcname calls.
      netlogon: fill in more details for the netr_LogonControlX family of calls.
      wbclient: Fix Bug #6680: always activate handling of large (> 256 byte) ntlmv2
      s3-netlogon: implement _netr_LogonSamLogonWithFlags().
      s3-netlogon: rework _netr_ServerPasswordSet.
      s3-netlogon: implement _netr_ServerPasswordSet2.
      s4-smbtorture: test netr_ServerSetPassword2 against Samba3.
      s3-pdb_ldap: Fix bug #4296: Clean up group membership while deleting a user.
      s3-netlogon: use WERRORs in NETLOGON_INFO structures.
      s3-net: allow to exit "net rpc sh" with "q" as well.
      s3-ntlm_auth: fix two segfaults in diagnostics mode.
      wbinfo: fix various valgrind warnings and an invalid free.
      tdb: fix c++ build warning.
      s3-schannel: Fix Bug #6697. Interdomain trusts with Windows 2008 R2 DCs.
      schannel: add NL_AUTH_MESSAGE and both NL_AUTH_SIGNATURE structs.
      s3-rpc_client: use NL_AUTH_MESSAGE in create_schannel_auth_rpc_bind_req().
      s3-rpc_server: use NL_AUTH_MESSAGE in pipe_schannel_auth_bind().
      s3: remove unused RPC_AUTH_SCHANNEL_NEG struct and parsing functions.
      schannel: add missing prototype for ndr_print_nbt_string() in schannel helper.
      ntlmssp: add some void decode calls (useful for ndrdump).
      s3-nterr: add NT_STATUS_RPC_NT_CALL_FAILED.
      ntlmssp: avoid duplicate inclusion of helper headers.
      s3-winbindd: Fix Bug #6700: Use dns domain name when needing to guess server principal.
      s3-rpc_client: add enum dcerpc_transport_t to rpc_cli_transport struct.
      s3-rpcclient: add ncacn transport handling for rpcclient.
      s3-rpcclient: add lookupnames4 command.
      s3-util: add get/set_cmdline_auth_info_domain to user_auth_info struct.
      s3-nterr: add NT_STATUS_RPC_NT_PROTOCOL_ERROR to nt_errstr().
      schannel: more work on reponse NL_AUTH_MESSAGES.
      s3-schannel: use NL_AUTH_MESSAGE for schannel bind reply.
      s3-schannel: remove unused code.
      s3-errors: add NT_STATUS_RPC_NT_PROCNUM_OUT_OF_RANGE.
      s3-schannel: use NL_AUTH_SIGNATURE for schannel sign & seal (client & server).
      s3-schannel: remove last schannel hand-marshalling function.
      s3-rpc_client: add cli_rpc_pipe_open_noauth_transport.
      s3-rpcclient: use cli_rpc_pipe_open_noauth_transport in rpcclient.
      s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_spnego_ntlmssp and cli_rpc_pipe_open_ntlmssp.
      s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_schannel().
      s3-rpcclient: avoid using lp_workgroup() unconditionally for crypto.
      s3-rpcclient: make netlogon credential setup also work for interdomain trusts.
      lsa: use lsa_LookupNamesLevel in lsa_LookupSids{2,3}.
      lsa: fill in more unknowns in lsa_LookupSid calls.
      s3-rpcclient: add lookupsids3 command.
      s4-smbtorture: fix remaining lsa lookup call unknowns. sorry...
      s3-schannel: add dump_NL_AUTH_SIGNATURE.
      s3-dcerpc: remove more obsolete or duplicate headers.
      s3-ntlmssp: add missing prototype.
      s3-rpcclient: Fix Coverity #935: UNINIT.
      s3-eventlogadm: Fix Coverity #938: UNINIT.
      s3-netapi: Fix Coverity #670: FORWARD_NULL.
      s3-netapi: Fix Coverity #669 FORWARD_NULL.
      s3-netapi: Fix Coverity #668: FORWARD_NULL.
      s3-schannel: fix api_pipe_schannel_process(), was using incorrect buffer length.
      s4-schannel: strip trailing whitespace.
      s4-schannel: use NL_AUTH_MESSAGE for schannel.
      s3-rpcclient: fix netr_LogonGetCapabilities command.
      s3-netlogon: match all logon levels in netr_SamLogon calls.
      s3-netlogon: support validation level 6 in netr_SamLogon calls.
      libcli/auth: remove trailing whitespace.
      spnego: share spnego_parse.
      spnego: add spnego_proto.h.
      cifs-upcall: fix the build after spnego merge.
      s3-winbindd: add and use winbindd_lookup_sids().
      s3-winbindd: add and use winbindd_lookup_names().
      s3-schannel: fix Coverity #950 OVERRUN_STATIC.
      s3-nterr: print a NT_STATUS_RPC_PROTSEQ_NOT_SUPPORTED.
      s3-netlogon: Fix Coverity #945 UNINIT.
      s3-samr: Fix Coverity #934 UNINIT.
      s3-rpc_client: add rpccli_lsa_lookup_names4 wrapper.
      s3-rpc_client: add rpccli_lsa_lookup_sids3 wrapper.
      schannel: remove unused schannel structs.
      s3-dcerpc: use dcerpc_AuthLevel and remove duplicate set of flags.
      s3-dcerpc: remove duplicate RPC_AUTH_LEVEL flags.
      s3-dcerpc: remove more unused structs.
      s3-dcerpc: remove unsed auth type defines as seen on the wire.
      ntlmssp: better document to what structures we are reffering to.
      ntlmssp: pretty print a VERSION structure.
      s3-dcerpc: fix remaining old auth level constants.
      s3-dcerpc: really fix remaining old auth level constants. sorry...
      lib/crypto: add aes encryption routines to main cryto lib.
      s3-schannel: fix blob length when pulling off a NL_AUTH_SIGNATURE in
      s4-schannel: strip trailing whitespace.
      s4-schannel: first step of decoupling schannel from gensec.
      s4-schannel: try to fix the build.
      schannel: move schannel_sign to main directory.
      schannel: fully share schannel sign/seal between s3 and 4.
      s3-schannel: remove unused schannel_decode/schannel_encode.
      lib/crypto: link in AES crypto for s4 as well.
      schannel: remove last traces of gensec.
      s3-smbd: fix get_ea_names_from_file() and check for pnames pointer.
      s3-rpc_client: fix non initialized structure in rpccli_lsa_lookup_sids_noalloc.
      s3-winbindd: add cm_connect_lsa_tcp().
      s3-winbindd: Fix Bug #6711: trusts to windows 2008 (2008 r2) not working.
      s3:winbindd: use a tcp connection for lsa in case lookup_names/lookup_sids doesn't work over ncacn_np
      s3: remove unused printing macros.
      s3-winbindd: no reason to call winbindd_can_contact_domain() three times in query_user().
      s3-libndr: fix build warning.
      lib/util: fix build warning.
      winreg: add winreg_Data union to IDL.
      s3: re-run make idl_full.
      s3-util: add push_reg_sz() and push_reg_multi_sz() convenience functions.
      s3-registry: use push_reg_sz().
      s3-registry: add regval_ctr_addvalue_sz.
      s3-registry: use regval_ctr_addvalue_sz().
      s3: use push_reg_multi_sz().
      s3-util: add pull_reg_sz() and pull_reg_multi_sz() convenience functions.
      s3-registry: use pull_reg_multi_sz().
      s3-util: use pull_reg_multi_sz in reg_pull_multi_sz.
      s3: use pull_reg_multi_sz in rpcclient and net.
      s3-rpc_parse: remove unused UNISTR2 struct and init function.
      s3: remove unused regval_build_multi_sz().
      s3: remove unused regval_convert_multi_sz().
      s3: remove unused unistr2_term_codes.
      s3-netlogon: properly implement _netr_NetrEnumerateTrustedDomains().
      s3-rpc_parse: remove unused prs_string.
      s3: re-run make idl. janitor for tridge.
      s3-registry: add regval_ctr_addvalue_multi_sz.
      s3-printing: use regval_ctr_addvalue_multi_sz.
      s3-registry: use pull_reg_sz() where appropriate.
      s3-printing: more use of pull_reg_sz().
      s3: remove unused rpcstr_pull and rpcstr_pull_talloc.
      s3-registry: move rpccli_winreg_Connect to the only file it belongs.
      s3: add perfcount idl and generated files.
      s3-perfcount: only pass down prs_struct when really required.
      s3-perfcount: more cleanup.
      s3: remove unused SYSTEMTIME struct.
      s3: remove unused PRS_POINTER_CAST macro.
      lib/tdr: get rid of build warning when using TDR_ALLOC macro.
      s3-net: print error when "net rpc changetrustpw" has failed.
      libndr: add int3264 ndr prototype.
      s3-netlogon: setup NETLOGON credential chain in rpccli_netlogon_set_trust_password() only when needed.
      s3-winbindd: make sure to reset connections when machine account password change chain was broken.
      s3: re-run make samba3-idl.
      s3-netlogon: pure cosmetic indent fixes in _netr_LogonControl2Ex().
      libwbclient: implement secure channel verification for specific domains in wbcCheckTrustCredentials().
      wbinfo: allow to check trusts via "wbinfo -t --domain DOMAINNAME".
      s3-winbindd: libwbclient: implement secure channel verification for specific domains in wbcCheckTrustCredentials().
      s3-winbindd: NDR_WBINT_CHECKMACHINEACCOUNT should not be cacheable.
      s3-docs: remove xml artefact from net.8.xml.
      s3-netlogon: pass down account name to remote password set functions.
      s3-netlogon: allow to change any type of trust account password in trust_pw_find_change_and_store_it().
      s3: use enum netr_SchannelType all over the place.
      netlogon: add NL_PASSWORD_VERSION to IDL.
      docs: document wbinfo -t --domain DOMAIN behavior.
      libwbclient: add wbcChangeTrustCredentials.
      nsswitch: add wbinfo -c (change trust account passwords).
      docs: document wbinfo -c.
      s3-winbindd: add wbint_ChangeMachineAccount implementation.
      s3-passdb: missed two prototypes while moving to enum netr_SchannelType.
      s3-build: we need to have talloc 2.0.1 when building with external talloc.
      s3-spnego: Fix Bug #6815. Windows 2008 R2 SPNEGO negTokenTarg parsing failure.
      s3-spnego: fix memleak in spnego_parse_auth().
      s3-net: fix build warning (missing default in switch).
      s4-smbtorture: add very basic libwbclient testsuite.
      s3-selftest: enable WINBIND-WBCLIENT against s3.
      s3-libnetapi: add I_NetLogonControl{2} to IDL.
      s3-libnetapi: add I_NetLogonControl{2} skeleton.
      s3-libnetapi: fill in I_NetLogonControl{2}_r.
      s3-libnetapi: add I_NetLogonControl{2} to public headers.
      s3-libnetapi: add I_NetLogonControl{2} example code.
      s3-libnetapi: add nltest tool.
      s4-smbtorture: test wbcGuidToString and friends as well in WINBIND-WBCLIENT.
      s4-smbtorture: test wbcLookupUserSids in WINBIND-WBCLIENT as well.
      s3-netlogon: Fix _netr_ServerPasswordSet2 cleartext blob handling.
      s4-smbtorture: extend netr_LogonControl test in RPC-NETLOGON.
      nsswitch: increase libwbclient version after adding wbcChangeTrustCredentials().
      s3-netlogon: fix updating trust accout passwords with downlevel domains.
      gitignore: remove old netlogon prototypes.
      s4-smbtorture: test wbcLookupDomainController{Ex} in WINBIND-WBCLIENT.
      libwbclient: fix wbcLookupDomainController().
      wbinfo: use wbcLookupDomainControllerEx for wbinfo --dsgetdcname.
      s4-smbtorture: move all LookupNames tests into RPC-LSA-LOOKUPNAMES.
      s4-smbtorture: add stricter tests for LSA-LOOKUPNAMES replies.
      s3-lsa: allow to have NULL strings in lsa LookupName queries.
      s3-lsa: When looking up domains in LookupNames, do not strip the sid.
      s3-lsa: allow to lookup BUILTIN\ in lsa_LookupNames.
      s3-lsa: Allow to lookup 'NT AUTHORITY\Anonymous Logon' as well.
      s4-smbtorture: split out EnumTrustedDomainsEx test in RPC-LSA-TRUSTED-DOMAINS.
      s4-smbtorture: Fix wrong comment in RPC-LSA-TRUSTED-DOMAIN test.
      s3-selftest: enable RPC-LSA-PRIVILEGES against Samba 3.
      s3-lsa: Fix _lsa_CreateAccount() for usage of SEC_FLAG_MAXIMUM_ALLOWED.
      s3-pdb_ldap: fix crash bug in ldapsam_set_trusteddom_pw().
      s3-lsa: Fix _lsa_EnumTrustDom().
      s4-smbtorture: Make it simpler to specify number of trusted domains to create in
      s4-smbtorture: fix RPC-LSA-LSALOOKUP test against w2k3 and w2k8.
      nsswitch: fix the build of the winbind krb5 locator plugin.
      s3-lsa: make s3 pass against RPC-LSA-LOOKUPNAMES again.
      s4-smbtorture: test whether an lsa_EnumTrustDom implementation would hang up a client.
      s3-lsa: Fix _lsa_EnumTrustDom() and avoid infite windows client loop.
      s4-lsa: Fix dcesrv_lsa_EnumTrustDom() and avoid infite windows client loop.
      s3-lsa: use enum lsa_LookupNamesLevel in lsa_lookup_level_to_flags().
      s3-lsa: pure cosmetic indentation fixes.
      s3-lsa: use correct function name in_lsa_RemoveAccountRights().
      lsa: add LSA_SECRET access masks.
      s3-lsa: add lsa_secret_mapping.
      s3-passdb: add secrets_delete_generic().
      lsa: add LSA_TRUSTED_DOMAIN access masks.
      s3-lsa: add lsa_trusted_domain_mapping.
      adssearch: dump some more nttime timestamps.
      s3-net: acct_flags are uint32_t in net_sam_set_userflag().
      s3-passdb: move open_schannel_session_store() to passdb/secrets_schannel.c.
      s3: add secrets.idl.
      s3-secrets: use autogenerated code for TRUSTED_DOM_PASS struct parsing from a tdb.
      s4-smbtorture: fix warning in RPC-WKSSVC torture test.
      s3-lsa: use switch in _lsa_QuerySecurity().
      s3-lsa: expand struct lsa_info to carry name and sd.
      s3-rpcclient: add createtrustdom command.
      s3-rpcclient: add deletetrustdom command.
      s4-smbtorture: skip bigendian tests against s3 in RPC-LSA-SECRETS.
      s3-gencache: restore gencache_get behavior with NULL args (with torture test).
      s3-passdb: cleanup some callers of pdb_get_trusteddom_pw().
      s4-smbtorture: simplify some torture_comments in RPC-LSA.
      s4-smbtorture: skip QueryDomainInformationPolicy test against s3 in RPC-LSA.
      s4-smbtorture: skip QueryInfoPolicy2 while running RPC-LSA against s3.
      s4-smbtorture: skip three info levels while testing s3 with RPC-LSA.
      s3-lsa: fill in some more info levels in _lsa_QueryInfoPolicy().
      security: re-run make samba3-idl after IDL change.
      s3-netlogon: implement remote trust account changing in netr_LogonControl2Ex() and friends.
      s3-netlogon: implement _netr_NETLOGON_INFO_4 in netr_LogonControl2Ex() and friends as well.
      s3-netlogon: let s3 pass against RPC-NETLOGON-S3 again.
      s3-netlogon: make sure we protect some function codes in _netr_LogonControl2Ex().
      s3-kerberos: add configure checks for krb5_get_creds_X api.
      s3-kerberos: add smb_krb5_parse_name_flags().
      s3-kerberos: remove duplicate prototype.
      s3-kerberos: add smb_krb5_get_{creds,credentials} incl. support for S4U2SELF impersonation.
      s3-kerberos: fix some build warnings when building against heimdal.
      s3-kerberos: add smb_krb5_get_tkt_from_creds().
      s3-kerberos: add impersonate_principal for kerberos_return_pac_X calls.
      s3-net: allow to call "net ads kerberos pac <impersonation principal> -P".
      s3-net: better use memory credential cache in net_ads_kerberos_pac().
      s3-kerberos: modify cli_krb5_get_ticket to take a new impersonate_princ_s arg.
      s3-kerberos: use smb_krb5_get_credentials in ads_krb5_mk_req.
      s3-kerberos: support S4U2SELF impersionation through cli_krb5_get_ticket().
      Revert "s3-kerberos: add smb_krb5_parse_name_flags()."
      s3-netlogon: implement _netr_GetDcName and _netr_GetAnyDcName.
      s3-kerberos: let smb_krb5_get_tkt_from_creds() compile with older heimdal libs.
      s3-param: fix set_inherit_acls().
      s4-smbtorture: re-arrange netlogon LogonControl test.
      s3-netlogon: enable RPC-NETLOGON-ADMIN test against s3.
      s4-smbtorture: strip trailing whitespace in RPC-SAMR.
      s3-chgpasswd: split out a check_password_complexity() function.
      s3-samr: implement _samr_ValidatePassword().
      s3-rpc_client: make sure cli_rpc_pipe_open_schannel() does not always return NT_STATUS_OK.
      s3-kerberos: add smb_krb5_principal_get_realm().
      cifs.upcall: Fix Bug #6868: support building with Heimdal we well as with MIT.
      s3-kerberos: avoid using ERROR_TABLE_BASE_krb5 without checking.
      s3-kerberos: remove smb_krb5_get_tkt_from_creds().
      s3-rpcclient: use the parsed binding string flags for auth choice.
      s3-build: make sure to remove libds and client object files on make clean.
      s3-build: really fix build of winbind_krb5_locator.
      s3-build: delete more object files for "make clean".
      spoolss: fix spoolss_EnumPrinterKey IDL.
      s3-spoolss: fix spoolss_EnumPrinterKey client and server code.
      s4-smbtorture: add tests for spoolss_EnumPrinterKey to RPC-SPOOLSS-PRINTER.
      s3-printing: use spoolss types and structs while adding drivers.
      s3-printing: use spoolss types and structs while getting and deleting drivers.
      s3-printing: remove unused NT_PRINTER_DRIVER_INFO_LEVEL structs.
      s3-spoolss: move more defines out of nt_printing.h to spoolss.idl where they belong.
      s3-printing: remove duplicate code while cleaning up driver structs.
      s4-smbtorture: fix spoolss_EnumPrinterKey client in RPC-SPOOLSS-WIN.
      s3-spoolss: Fix GetPrinter level 101.
      docs: Fix Bug 6922: Add Registry patchfile for Win7 domain join.
      s3-registry: remove reg_pull_multi_sz().
      s3-registry: use push_reg_multi_sz() in registry_push_value().
      s3-spoolss: fixes for _spoolss_EnumPrinterKey client and server.
      s3-spoolss: re-arrange driver info level fillup functions.
      cifs.upcall: 2nd part of fix for Bug #6868: support building with Heimdal we well as with MIT.
      nsswitch: fix compile of winbind_krb5_locator with recent Heimdal versions.
      s3-kerberos: add check for prerequisite krb5/krb5.h header while checking for krb5/locate_plugin.h.
      s3-registry: fix REG_MULTI_SZ handling in registry_push_value.
      s3-build: try to fix QNX build ("delay" is defined in lib headers).
      s4-smbtorture: add torture_samr_context to carry some RPC-SAMR-X specifics.
      s4-smbtorture: refactor RPC-SAMR-LARGE-DC test a little more.
      s3-kerberos: next step to resolve Bug #6929: build with recent heimdal.
      s3-spoolss: pre cosmetics: reorder levels in construct_printer_info levels.
      s3-winbind: properly include netlogon.idl in wbint.idl.
      s3-passdb: move some defines out of rpc headers (they really belong to passdb).
      s3-rpc: Avoid including every pipe's client and server stubs everywhere in samba.
      s3-rpc: running minimal_includes.pl on rpc_client and rpc_server.
      s3-smbd: no drsuapi server stubs yet in s3. Fixes the build, sorry.
      s3-spoolss: use macros to fillup driver levels.
      s3-kerberos: Fix Bug #6929: build with recent heimdal.
      s3-nsstest: drastically shrink size and dependencies of nsstest binary.
      pidl: fix handling of output arguments in s3 client stubs.
      misc: mark winreg_Data little-endian except for a REG_DWORD_BIG_ENDIAN.
      s3-kerberos: only use krb5 headers where required.
      s3-spoolss: simplify _spoolss_EnumPrinterKey a little more.
      s3-kerberos: do not include authdata headers before including krb5 headers.
      s3-kerberos: add a missing reference to authdata headers.
      s3-kerberos: fix the build on Mac OS X 10.6.2.
      s4-smbtorture: more and stricter tests for printer and data keys in RPC-SPOOLSS.
      s3-spoolss: fix fstrings in convert_devicemode() function.
      drsuapi: fix build warning of NDR size calculation of drsuapi_DsReplicaObjectIdentifier3Binary.
      s3-build: taise tdb version when building against system libtdb library.
      Revert "s3-build: taise tdb version when building against system libtdb library."
      s3-spoolss: move MAXDEVICENAME to spoolss idl.
      spoolss: add spoolss_StringArray2.
      samba-spoolss: use spoolss_StringArray2 in spoolss_EnumPrinterKey.
      spoolss: hand-marshall the spoolss_StringArray2 struct for spoolss_EnumPrinterKey.
      s4-smbtorture: be very strict in checking spools_EnumPrinterKey results.
      s3-selftest: run LOCAL-NDR when running make selftest.
      s4-smbtorture: call test_EnumPrinterDrivers with architecture in RPC-SPOOLSS.
      s4-smbtorture: check more WERRORs in RPC-SPOOLSS.
      s3-spoolss: handle SEC_FLAG_MAXIMUM_ALLOWED in spoolss_OpenPrinterEx.
      s4-smbtorture: heavily expand printerdata tests in RPC-SPOOLSS.
      s3-winreg: remove trailing whitespace.
      s3-winreg: fill in some inline comments.
      s3-spoolss: a default printer should have at least a "PrintDriverData" key.
      spoolss: rework spoolss_GetPrinterDataEx and spoolss_SetPrinterDataEx.
      s3-spoolss: let _spoolss_GetPrinterData call into _spoolss_GetPrinterDataEx.
      s3-spoolss: let _spoolss_SetPrinterData call into _spoolss_SetPrinterDataEx.
      s3-spoolss: let _spoolss_DeletePrinterData call into _spoolss_DeletePrinterDataEx.
      s4-smbtorture: fix RPC-SPOOLSS after _spoolss_SetPrinterDataEx IDL change.
      s3: fix net and rpcclient after setprinterdataex changes.
      s4-smbtorture: disable some spoolss printerdata tests which s3 does not pass at the moment.
      s4-smbtorture: fill in COMPARE_STRING_ARRAY macro in spoolss driver test.
      s3-spoolss: use driver level info8 everywhere in spoolss server internally.
      s3-spoolss: fully support level 8 drivers.
      s3-spoolss: remove ridiculous amount of duplicate driver code.
      s3-spoolss: remove unused architecture from fill_printer_driver_info1().
      s3-spoolss: cleanup _spoolss_EnumPrinterDrivers().
      s4-smbtorture: make level 8 the reference for PrinterDriverEnum test.
      spoolss: fix spoolss_DriverInfo8 IDL.
      spoolss: add more spoolss architectures to IDL.
      s3-spoolss: use SPOOLSS_ARCHITECTURE_ALL in driver enum server code.
      s4-smbtorture: enhance spoolss_EnumPrinterKey torture test.
      spoolss: add spoolss_KeyNames union.
      spoolss: use spoolss_KeyNames in spoolss_EnumPrinterKey.
      s3: re-run make samba3-idl.
      s3-spoolss: fix enumprinter key client and server.
      s4-smbtorture: fix and extend enum printerkey test.
      spoolss: remove unused spoolss_StringArray2.
      s4-smbtorture: add more spoolss_EnumPrinterKey tests for local NDR test.
      s3-rpcclient: allow to set offered size for enumkey command.
      s3-selftest: enable RPC-SAMBA3-WINREG.
      s4-smbtorture: check whether a returned buffer size is a multiple of 4 in RPC-SPOOLSS.
      spoolss: trivial fix for spoolss_FormInfo2 IDL.
      spoolss: fix spoolss_PrinterData size calculation.
      s4-smbtorture: run GetPrinterDriver2 tests against each printer's driver.
      s3-pdbedit: allow to call "pdbedit -N description -u user" without specifiyng "-r".
      spoolss: add spoolss_DriverInfo7.
      spoolss: more mork on SetPrinterInfo() levels.
      s3-spoolss: fix rpcclient after setprinter IDL fixes.
      s4-smbtorture: fix smbtorture after setprinter IDL fixes.
      tdbtool: avoid using c++ reserved words.
      s4-smbtorture: add a samr_GetAliasMembership test to RPC-SAMR.
      s4-smbtorture: skip GetAliasMembership against s4.
      s3-docs: add new pam_winbind.conf(5) manpage.
      s3-docs: mention pam_winbind.conf(5) manpage in pam_winbind(8) manpage.
      s3-docs: not working for SuSE anymore...
      s3-docs: mention all long option names in samba.entities file.
      s3-docs: mention long and undocumented option names in pdbedit manpage.
      s3-docs: mention long option names in smbtree manpage.
      s3-docs: mention -O, --stdout in smbget manpage.
      s3-docs: mention long and undocumented option names in smbclient manpage.
      s3-docs: mention long and undocumented option names in smbcacls manpage.
      s3-docs: mention long and undocumented option names in rpcclient manpage.
      s3-docs: mention -M option and remove nonexisting -G option in pdbedit manpage.
      s3-net: use generated krb5.conf in 'net ads testjoin'
      s4-smbtorture: refactor test_GetPrinter in RPC-SPOOLSS.
      s4-smbtorture: add test_SetPrinter to RPC-SPOOLSS.
      s4-smbtorture: add test_ChangeID to RPC-SPOOLSS.
      s3-docs: fix eventlogadm manpage typo.
      testprogs: add win32 spoolss testsuite.
      testprogs: pass down architecture in spoolss test.
      testprogs: add support for "print" option in win32 spoolss torture test.
      s3-docs: mention -K option in pdbedit manpage.
      s3-time: fix build warnings after we moved to shared time functions.
      testprogs: add more error codes to spoolss test.
      testprogs: fix EnumPrintProcessorDatatypes spoolss test.
      testprogs: test each printer, do not abort after first failure.
      testprogs: fix driver levels in spoolss test.
      s4-smbtorture: allow test_SamLogon to test interactive samlogon in RPC-SAMR family of tests.
      s4-smbtorture: add RPC-SAMR-PASSWORDS-BADPWDCOUNT torture test.
      s4-smbtorture: fix GetAliasMembership test in RPC-SAMR.
      testprogs: add EnumPrinterKey test to spoolss test.
      testprogs: remove unused test_EachDriver from spoolss test.
      s4-selftest: RPC-SAMR-PASSWORDS-BADPWDCOUNT fails against s4.
      s4-smbtorture: add rather simple libsmbclient torture testsuite.
      s3-libsmbclient: Fix crash bug in SMBC_parse_path().
      s4-smbtorture: add setup_schannel_netlogon_pipe() function.
      s3-selftest: use testenv dc so that smbtorture4 actually uses the client configuration.
      testprogs: pass down LPPRINTER_DEFAULTS in spoolss test.
      testprogs: add tests for GetForm.
      testprogs: add tests for GetPrinterData{Ex} and EnumPrinterDataEx.
      s4-smbtorture: strip trailing whitespace.
      s4-smbtorture: skip ReplyOpenPrinter test in RPC-SPOOLSS-NOTIFY while testing s3.
      s4-smbtorture: restructure spoolss server implementations in RPC-SPOOLSS-NOTIFY.
      s4-smbtorture: support spoolss_ReplyClosePrinter server call in RPC-SPOOLSS-NOTIFY.
      s3-selftest: use absolute path when setting SOCKET_WRAPPER_DIR.
      s3-spoolss: stricter name checks when opening back-channel notify connection.
      s3-selftest: finally enable RPC-SPOOLSS-NOTIFY against s3.
      s4-smbtorture: also configure check smbc_setOptionCaseSensitive for LIBSMBCLIENT testsuite.
      s4-smbtorture: remove unneeded ncaclrpc dir setup from RPC-SPOOLSS-NOTIFY.
      testprogs: print all driver info levels in spoolss testsuite.
      s4-smbtorture: split spoolss_RemoteFindFirstPrinterChangeNotifyEx test into smaller parts.
      s4-smbtorture: add test for wbcPingDc to WINBIND-WBCLIENT testsuite.
      s4-smbtorture: test wbcResolveWinsByName/wbcResolveWinsByIP in WINBIND-WBCLIENT testsuite.
      s4-smbtorture: also test smbc_getOptionUseCCache
      s3-selftest: try to get RPC-SPOOLSS-NOTIFY running during make test on the buildfarm.
      s4-smbtorture: pick correct last packet while checking backchannel replies in RPC-SPOOLSS-NOTIFY.
      testprogs: also print printer info during GetPrinter spoolss test.
      s4-smbtorture: rework spoolss_NotifyOption handling in RPC-SPOOLSS-NOTIFY.
      s4-smbtorture: also test RouterRefreshPrinterChangeNotify call in RPC-SPOOLSS-NOTIFY.
      s4-smbtorture: check for RouterReplyPrinterEx packets inside backchannel in RPC-SPOOLSS-NOTIFY.
      s3-net: fix net ads dns usage calls.
      s4-smbtorture: skip over ValidatePassword if DCERPC error is returned.
      testprogs: print form info levels in EnumForms(),GetForm() spoolss tests.
      testprogs: print port info levels in EnumPorts() spoolss tests.
      testprogs: print monitor info levels in EnumMonitors() spoolss tests.
      testprogs: print printprocessor info levels in EnumPrintProcessors() spoolss tests.
      testprogs: print datatypes info levels in EnumPrintProcessorDatatypes() spoolss tests.
      testprogs: print job info levels in EnumJobs() spoolss tests.
      testprogs: regenerate printlib prototypes for spoolss test.
      s4-smbtorture: use test_GetPrinter_level in RPC-SPOOLSS-NOTIFY.
      testprogs: add more error codes for spoolss test.
      testprogs: use ConvertSidToStringSid in order to print sids in spoolss test.
      testprogs: print secdesc->Control in spoolss test.
      testprogs: one more error code for spoolss test.
      s3-spoolss: implement spoolss_EnumJobs level 3.
      spoolss: allow to set server architecture via parametric option.
      s3: re-run make samba3-idl.
      spoolss: regenerate hand-marshalled ndr_push_spoolss_DriverInfo101 after ndr64 changes.
      spoolss: make sure hand-marshalled spoolss_DriverInfo101 handles relative_highest_offset.
      spoolss: regenerate hand-marshalled ndr_pull_spoolss_DriverInfo101 after ndr64 changes.
      testprogs: print all printerinfo levels in spoolss test.
      s4-smbtorture: add some security descriptor tests to RPC-SPOOLSS and RPC-SPOOLSS-PRINTER.
      spoolss: disable GetPrinterDriver level 101 (as called by XP).
      testprogs: fix EnumJobs debug output in spoolss test.
      s4-smbtorture: w2k8r2 allows to add printers w/o defining printprocessor.
      s4-smbtorture: use test_SetPrinter call in spoolss security descriptor tests.
      s4-smbtorture: add rather simple spoolss device mode test.
      s4-smbtorture: more work on SD tests for RPC-SPOOLSS.
      testprogs: add "samba3" and "architecture=" options to spoolss tester.
      s4-smbtorture: allow to call OpenPrinterEx with devicemode.
      s4-smbtorture: more work on test_PrinterInfo_DevMode RPC-SPOOLSS-PRINTER.
      s4-smbtorture: fix spoolss SD test against w2k8r2.
      testprogs: add rather simple device mode tests to spoolss test.
      s4-smbtorture: refactor setprinter devicemode calls in RPC-SPOOLSS-PRINTER.
      s4-smbtorture: also test level 2 sets for devicemodes and see if they persist.
      s4-smbtorture: unify test list to run against single created printers in RPC-SPOOLSS-PRINTER.
      s3-rpcclient: fix uninitialized variable in wkssvc_enumerateusers.
      s4-smbtorture: avoid potential loop while adding a new printer in RPC-SPOOLSS-PRINTER.
      s4-smbtorture: simplify test_PrinterInfo_DevMode a bit.
      s4-smbtorture: try more combinations to find printers in test_EnumPrinters_findname().
      s4-smbtorture: skip printer info cross tests against samba 3 for now.
      s3-modules: fix get_acl_blob in the acl_tdb VFS module.
      testprogs: print SDDL string of printer security descriptors
      s3-spoolss: add some printer info validation for AddPrinter calls.
      s3-spoolss: more AddPrinter{Ex} checks.
      s3-spoolss: in spoolss_EnumPrinters r->in.server is a *unique* pointer!
      s3-spoolss: fix return code of spoolss_DeletePrinter.
      s3-selftest: include addprinter/deleteprinter command.
      s3-selftest: finally enable RPC-SPOOLSS-PRINTER against Samba 3.
      s3-selftest: fix return code for modprinter.pl -a.
      s3-spoolss: Fix _spoolss_EnumPrinters servername handling.
      libndr: add ndr_push_relative_ptr2_start and ndr_push_relative_ptr2_end.
      pidl: use ndr_push_relative_ptr2_start and ndr_push_relative_ptr2_end.
      s3: re-run make full_idl.
      spoolss: fix relative pointers in ndr_push_spoolss_DriverInfo101.
      libndr: change subcontext buffer allocation to allocate on subcontext_start.
      libndr: add LIBNDR_FLAG_RELATIVE_REVERSE flag.
      libndr: add LIBNDR_FLAG_NO_RELATIVE_REVERSE so that relative reverse processing
      libndr: store a subcontext buffer size in ndr_push_subcontext_start.
      spoolss: set NDR_RELATIVE_REVERSE flag for various unions that have relative pointers.
      spoolss: make two bitmaps public.
      security: make two bitmaps public.
      s3: re-run make samba3-idl.
      spoolss: add spoolss_security_descriptor.
      spoolss: use ndr_push_spoolss_PrinterInfo2 hand-marshalled version (moves devmode relative pointer down to sd).
      testprogs: add RPC_S_PROCNUM_OUT_OF_RANGE error.
      testprogs: add tests for GetJob() to spoolss test.
      s4-smbtorture: be more verbose in LOCAL-NSS-WRAPPER.
      s4-smbtorture: add LOCAL-NSS-WRAPPER-DUPLICATES test.
      s3-spoolss: add support for _spoolss_SetPrinter level 8.
      testprogs: ignore GetJob level 3 and 4 against samba for now.
      s4-smbtorture: print more comments while running SD and DM tests in RPC-SPOOLSS-PRINTER.
      s4-smbtorture: add --option=torture:spoolss_check_size=yes.
      s4-smbtorture: explain failure conditions in printer device mode tests a little more.
      s4-smbtorture: more work on devicemode tests.
      spoolss: add various DM extradata formats (including PostScript and UniDriver).
      s3: re-run make samba3-idl.
      spoolss: some fixes for devicemode dm extra structs.
      s3: re-run make samba3-idl.
      s4-smbtorture: verify that the client cpu architecture has no influence on the
      s4-smbtorture: move ChangeID test to the list of tests we run against created printers.
      s4-smbtorture: try to set every single devicemode component in RPC-SPOOLSS-PRINTER.
      s3-spoolss: Save entire devicemode.
      s4-smbtorture: define environment in one place in RPC-SPOOLSS test.
      s3-nltest: fix uninitialized query level.
      testprogs: print the directory paths as well in spoolss test.
      s3: remove unused schannel_auth_struct.
      spoolss: add spoolss_Build to IDL.
      spoolss: fix build and version in spoolss_PrinterInfo0 (aka PRINTER_INFO_STRESS).
      s4-smbtorture: test at least three different regtypes in test_SetPrinterDataEx.
      s4-smbtorture: return needed size pointer from test_GetPrinterDataEx.
      s4-smbtorture: add test_SetPrinterDataEx to RPC-SPOOLSS-PRINTER.
      s4-smbtorture: add stricter SetPrinterDataEx tests to spoolss tests.
      testprogs: add RPC_X_NULL_REF_POINTER error code
      testprogs: allow to test a single printer when given on the cmdline.
      testprogs: add DeletePrinterDataEx test.
      testprogs: add DeletePrinterKey test.
      testprogs: add SetPrinterDataEx test.
      testprogs: rename test_PrinterData to test_PrinterData_Server.
      testprogs: add very basic PrinterData test for printers.
      testprogs: better usage text.
      testprogs: test result of GetPrinterDataEx against SetPrinterDataEx args.
      testprogs: fix REG_SZ in print_printer_data.
      testprogs: make sure to do the same tests as in smbtorture in test_PrinterData().
      s4-smbtorture: fix WINBIND-STRUCT assumptions about getpwent() for s3.
      testprogs: fix boolean return code of test_PrinterData.
      testprogs: add some multibyte versions of PrinterData calls.
      testprogs: add print_printer_dataw and dump_data to printlib.
      testprogs: use dump_data in dump_printer_data.
      testprogs: add test_PrinterDataW.
      s4-smbtorture: skip NotifyChangeKeyValue test against s3 for now.
      s3-selftest: enable RPC-WINREG against Samba 3.
      spoolss: rollback SetPrinterData{Ex} IDL.
      s3: re-run make samba3-idl.
      s3-spoolss: fix _spoolss_SetPrinterData{Ex} after IDL change.
      s3-net: fix net after spoolss_SetPrinterData{Ex} IDL change.
      s3-rpcclient: fix rpcclient after spoolss_SetPrinterData{Ex} IDL change.
      s4-smbtorture: fix smbtorture after SetPrinterData{Ex} IDL changes.
      spoolss: rollback GetPrinterData[Ex] IDL.
      s3: re-run make samba3-idl.
      s3-spoolss: fix _spoolss_GetPrinterDataEx after IDL change.
      s3-rpcclient: fix rpcclient after spoolss_GetPrinterData{Ex} IDL change.
      s4-spoolss: fix spoolss_GetPrinterData implementation after IDL change.
      s4-smbtorture: fix smbtorture after GetPrinterData{Ex} after IDL changes.
      spoolss: fix spoolss_EnumPrinterDataEx IDL.
      s3: re-run make samba3-idl.
      s3-net: fix net after spoolss_EnumPrinterDataEx IDL change.
      s3-rpcclient: fix rpcclient after spoolss_EnumPrinterDataEx IDL change.
      s3-spoolss: fix _spoolss_EnumPrinterDataEx after idl
      s3-libads: fix get_remote_printer_publishing_data after spoolss_EnumPrinterDataEx IDL change.
      s4-smbtorture: remove check for selfmade parsing artefact.
      s4-smbtorture: add more paranoid checks for REG_DWORD SetPrinterDataEx tests.
      s4-smbtorture: hand down printername to test_SetPrinterDataEx_matrix.
      s4-smbtorture: when checking PrinterData matrix, include winreg cross reference checks.
      s4-smbtorture: fix test_SetPrinterDataEx_matrix() call. sorry...
      s4-spoolss: fix dcesrv_spoolss_GetPrinterData build.
      s4-smbtorture: fix RPC-SPOOLSS-WIN after PrinterData IDL changes.
      winreg: fix winreg_QueryValue IDL.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix uninitialized variable in winreg QueryValue call.
      s4-smbtorture: add tests for set and delete value in RPC-WINREG.
      s4-smbtorture: rework test_winreg_QueryValue in RPC-SPOOLSS-PRINTER once again.
      s4-smbtorture: add full coverage test for winreg QueryValue calls.
      s4-smbtorture: on HKLM hive test the well known CurrentVersion value.
      s4-smbtorture: fix some build warnings in RPC-SPOOLSS test.
      s4-smbtorture: disable winreg QueryValue test for today.
      s4-spoolss: remove unsed iconv handle from dcesrv_spoolss_GetPrinterData().
      s4-smbtorture: check for non existing value under version key in RPC-WINREG.
      s4-smbtorture: do full winreg QueryValue test for values we created.
      s3-winreg: add some debug statements to _winreg_QueryValue().
      Revert "s4-smbtorture: disable winreg QueryValue test for today."
      s4-smbtorture: while testing PrinterDataEx also compare Get and Enum results.
      s4-smbtorture: only look at DATA_BLOB pointer when einfo[0].data_length > 0.
      s3-winreg: Fix _winreg_QueryValue crash bugs and implement windows behavior.
      s4-registry: add all winreg types to reg_value_types table.
      s4-smbtorture: more work on test_key_value() RPC-WINREG test.
      s4-smbtorture: add extended SetValue test to RPC-WINREG.
      s4-winreg: continue processing in WERR_MORE_DATA case in dcesrv_winreg_QueryValue().
      s3-winreg: fix some function names in debug statements.
      winreg: add winreg_KeyType enum.
      s4-smbtorture: test NULL and "" valuenames as well in query for wellknown winreg key.
      s4-smbtorture: skip extended SetValue test against Samba (both dont survive).
      s3-winreg: make QueryValue pass RPC-WINREG test again.
      s4-smbtorture: add netr_SamLogon test with NULL domain to RPC-NETLOGON-S3.
      s3-netlogon: Fix bug #7237: _netr_SamLogon segfaults for clients sending NULL domain.
      s4-smbtorture: make sure RPC-SPOOLSS passes against 64bit archs (w2k8r2).
      s4-smbtorture: re-arrange spoolss_SetPrinterData() tests.
      s4-smbtorture: refactor SetPrinterData() calls a little more.
      s4-smbtorture: refactor spoolss EnumPrinterData test.
      s4-smbtorture: add spoolss EnumPrinterData vs EnumPrinterDataEx consistency test.
      s3-spoolss: wrap _spoolss_EnumPrinterData() around _spoolss_EnumPrinterDataEx().
      s4-smbtorture: fix build and handle in spoolss test.
      s4-smbtorture: send even more random data in extended winreg SetValue test.
      s4-smbtorture: warn on unexpected devicenames in spoolss devicemode test.
      s4-smbtorture: fix torture_comment in RPC-SPOOLSS.
      s4-smbtorture: add PrinterInfo_to_SetPrinterInfo helper to RPC-SPOOLSS.
      s4-smbtorture: when cross checking enumdata{ex} make sure to have at least one entry.
      s3-spoolss: Fix _spoolss_EnumPrinterData.
      s4-smbtorture: cleanup data after enumdata{ex} consistency test.
      s4-smbtorture: fill PrinterDriverData with more values for consistency test.
      testprogs: add EnumPrinterData test to win32 spoolss test.
      s4-smbtorture: add simple printer rename test to RPC-SPOOLSS-PRINTER.
      s3-spoolss: be very strict on OpenPrinter{Ex} failures for bad names.
      s4-smbtorture: avoid printf calls in RPC-WINREG test.
      s3: re-run make samba3-idl.
      s3-lsa: fix _lsa_lsaRSetForestTrustInformation server stub.
      s4-lsa: fix dcesrv_lsa_lsaRSetForestTrustInformation server stub.
      s4-smbtorture: make it a bit easier to track failures in RPC-SPOOLSS-PRINTER.
      s3-registry: make sure root has full registry access (in particular for make test).
      s3-winreg: change notify call has no meaning when called remotely.
      s4-smbtorture: remove NotifyChangeKeyValue s3 skip in RPC-WINREG:
      s4-smbtorture: use random buffer for extended SetValue test in RPC-WINREG.
      lsa: fix IDL for lsa_SetTrustedDomainInfoByName.
      s3: re-run make samba3-idl.
      s4-smbtorture: add lsa_SetTrustedDomainInfoByName NDR test.
      s3: fix buildwarning in smbta-util.
      s3-vfs: fix some buildwarnings in traffic analyzer, there are many more.
      s4-smbtorture: use binding handle for simple SetValue winreg test.
      s4-smbtorture: put HKLM current_version test into an own function.
      s4-smbtorture: add test_CreateKey_opts() to RPC-WINREG test.
      s4-smbtorture: add test_OpenKey_opts() to RPC-WINREG.
      s4-smbtorture: add test_DeleteKey_opts to RPC-WINREG.
      s4-smbtorture: add test to check different keytypes.
      s4-smbtorture: re-arrange tests in RPC-WINREG.
      s4-smbtorture: skip security descriptor tests against Samba in RPC-WINREG.
      s4-smbtorture: only use "friendly" data in extended SetPrinterDataEx test.
      s4-smbtorture: workaround the fact that you cannot fully rename a printer in samba.
      s4-smbtorture: workaround broken REG_MULTI_SZ from winreg in s3
      s4-smbtorture: skip BackupLog test against samba in RPC-EVENTLOG.
      s3-selftest: setup initial eventlog infrastructure.
      s3-test: setup initial eventlog infrastructure.
      s3-selftest: run RPC-EVENTLOG against s3.
      s3-eventlog: fix elog_tdbname(), we were always lower-casing entire lockdir path...
      s4-smbtorture: fix typo in RPC-SAMR-PASSWORDS-LOCKOUT test.
      s3-selftest: make sure we do not have duplicate uids/gids in nsswrapper.
      s3-selftest: make sure we do not have duplicate uids/gids in nsswrapper.
      s3-selftest: fix Samba3.pm provisioning after uid/gid changes.
      s4-smbtorture: use torture_context in policy function in RPC-LSA-LOOKUP test.
      error_codes: fix NT_STATUS_RPC_UNKNOWN_IF typo.
      nss_wrapper.pl: allow to specify gid for new users.
      s3-selftest: rearrange uid/gid calculation to achieve correct membership.
      s3-selftest: rearrange uid/gid calculation to achieve correct membership.
      s4-smbtorture: skip RAP netservergetinfo level 1 test against s3.
      s3-selftest: enable RAP calls testsuite against samba3.
      s4-smbtorture: put all RPC-SAMB3-X torture tests into their own torture_suite.
      s3-selftest: use proper names for samba3 dcerpc tests.
      s4-smbtorture: rework RPC-DFS test a bit.
      s4-selftest: skip RPC-DFS for s4 entirely.
      s4-selftest: fix selftest-vars script.
      s3:re-run make samba3-idl.
      s4-smbtorture: remove trailing whitespace in libnet torture tests.
      s4-smbtorture: use torture_context for debugging output everywhere in libnet torture tests.
      s4-smbtorture: use torture_context in libnet domain tests as well.
      s4-smbtorture: remove trailing whitespace from samsync torture test.
      s4-smbtorture: use torture_context in samsync test.
      s4-smbtorture: remove tailing whitespace in samba3rpc testsuite.
      s4-smbtorture: add rap_get_servername to RPC-SAMBA3 family of tests.
      s4-smbtorture: cleanup some of the RPC-SAMBA3 tests.
      s4-smbtorture: fix some invalid parameters in RPC-SAMSYNC test.
      s4-smbtorture: add missing checks for WERROR results in RPC-SAMBA3 tests.
      s4-selftest: use correct test names.
      s4-smbtorture: move up torture_assert_sid_equal at least to the torture/ndr level.
      s4-smbtorture: add drsblobs ndr torture test.
      s4-smbtorture: mention job id in SetJob test output in RPC-SPOOLSS.
      s4-smbtorture: mention job id in GetJob test output in RPC-SPOOLSS.
      s4-smbtorture: create several printjobs during print test in RPC-SPOOLSS.
      s4-smbtorture: add print test to RPC-SPOOLSS-PRINTER as well.
      s3-selftest: move printing config to global section.
      s3-selftest: move printing config to global section.
      s4-smbtorture: activate job control tests against s3 in spoolss tests.
      drsblobs: remove utf8string2 from ForestTrustData.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix drsblobs ndr torture test.
      s3-selftest: add RAP-RPC testsuite for crosschecking RAP and DCERPC calls.
      s3-selftest: enable RAP-RPC test against s3.
      s4-smbtorture: fix include of proto header in main RAP test.
      s3-printing: avoid mixing cups backend code with nt_printing code in cups_pull_comment_location.
      s3-spoolss: return info for the correct printjob in _spoolss_GetJob().
      s4-smbtorture: fail spoolss test on SetJob failure.
      s4-smbtorture: more JobInfo testing.
      s3-selftest: set "lpq cache time = 0" in server configuration.
      s3-selftest: set "lpq cache time = 0" in server configuration.
      s4:torture/rpc/atsvc.c: add explicit check for NTSTATUS r.out.result
      s4:torture/ntp: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/unixinfo.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/eventlog.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/session_key.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/testjoin.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/remote_pac.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/schannel.c: add explicit check for NTSTATUS r.out.result
      s4:torture/libnet:add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/lsa_lookup.c:add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/netlogon.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/samlogon.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/samr_accessmask.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/handles.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/samr.c: add explicit check for NTSTATUS r.out.result
      s4:libcli/util/clilsa.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/samba3rpc.c: add explicit check for NTSTATUS r.out.result
      s4-smbtorture: fix two context arguments in RPC-SAMSYNC test.
      s4-smbtorture: fix correct result error code in SetForm spoolss test.
      s4-smbtorture: more work on forms tests in RPC-SPOOLSS.
      s4-smbtorture: avoid passing down a full test_spoolss_context to directory
      s4-smbtorture: merge badname spoolss openprinter tests.
      s4-smbtorture: test all types and also use a wellknown builtin form name in RPC-SPOOLSS.
      s3-rpcclient: allow to define server_unc in cmd_srvsvc_srv_query_info().
      s4-smbtorture: test for invalid form flags in RPC-SPOOLSS.
      s3-spoolss: Fix potential memleak in _spoolss_AddForm and _spoolss_SetForm.
      s3-spoolss: Fix some issues in _spoolss_AddForm.
      s3-spoolss: Fix an issue in _spoolss_DeleteForm.
      s4-smbtorture: minor typo in SetJob test in RPC-SPOOLSS.
      s4-smbtorture: minor cleanup, use data_blob_talloc_zero() in RPC-SPOOLSS.
      s4-smbtorture: add PrinterInfo level 2 / winreg consistency test.
      s4-smbtorture: protect against full UNC paths in winreg printerinfo test.
      s3-registry: fix fill_in_printer_values() for datatype and printprocessor.
      s3-lanman: use spoolss for api_WPrintQueueCtrl().
      s3-lanman: use spoolss for api_RDosPrintJobDel().
      winreg: fill in some winreg IDL gaps.
      s3: re-run make samba3-idl.
      winreg: add IDL for winreg_DeleteKeyEx.
      s3: re-run make samba3-idl.
      s3-winreg: add winreg_DeleteKeyEx stub.
      s4-winreg: add winreg_DeleteKeyEx stub.
      s4-smbtorture: more work on registry REG_LINK (in-registry symlinks) test.
      winreg: keytype options is a bitmask.
      s3: re-run make samba3-idl.
      s4-smbtorture: winreg keytype options is a bitmask.
      s4-smbtorture: when creating winreg-symlinks during a test, it is very wise to make them volatile.
      winreg: rename winreg_KeyType to winreg_KeyOptions.
      s3: re-run make samba3-idl.
      s4-winreg: Fix dcesrv_winreg_CreateKey after rename.
      s4-smbtorture: Fix winreg test after keytype renameing.
      s4-smbtorture: fix build after winreg IDL renames, sorry..
      s4-smbtorture: add test to check for registry symlinks in RPC-SPOOLSS-PRINTER.
      s3: add iconv_convenience handle to pull/push sz helpers.
      winreg: fill in IDL for winreg_QueryMultipleValues2.
      winreg: move REG_OPTION_NON_VOLATILE out of option bitmask.
      s4-smbtorture: display helpful error message when winreg_QueryMultipleValues fails.
      s3: re-run make samba3-idl.
      s3-spoolss: Fix two uninitialized vars in spoolss util code.
      s4-smbtorture: make sure to check for result of spoolss_GetJob tests.
      s4-smbtorture: skip winreg symlink test against Samba in RPC-SPOOLSS.
      spoolss: make spoolss_SetPrinterInfo0 match changes in spoolss_PrinterInfo0.
      s3: re-run make samba3-idl.
      s3-lanman: use spoolss for api_WPrintJobEnumerate().
      s3-lanman: use spoolss for api_WPrintJobGetInfo().
      spoolss: move up enum spoolss_Build in the IDL.
      s3-spoolss: fix samr_ValidatePassword_Change.
      s3-smb2: fix some c++ warnings.
      s3-spoolss: avoid passing down full "struct pipes_struct".
      s3-spoolss: fix winreg spoolss helper call documentation.
      s4-smbtorture: add test for csetprinter field behaviour in printer info level 0.
      s4-smbtorture: refactor test_GetPrinterDriver2().
      s4-smbtorture: simplify macros used in PrinterInfo winreg consistency teste.
      s4-smbtorture: add function to get a printserver's environment.
      s4-smbtorture: add spoolss DriverInfo and winreg consistency test.
      spoolss: pretty-print a struct spoolss_Time.
      s4-smbtorture: rework EnumPrinterDrivers tests a bit.
      s4-smbtorture: add RPC-SPOOLSS-DRIVER test.
      s4-smbtorture: allow to upload and later remove printer driver files in RPC-SPOOLSS-DRIVER.
      s4-smbtorture: test both 32bit and 64bit driver uploads in RPC-SPOOLSS-DRIVER.
      s3-spoolss: fix some crash bugs and missing error codes in AddDriver paths.
      s4-smbtorture: samba currently supports level 3 and 6 driver adds.
      s4-smbtorture: fix test_EnumPrinterDrivers_findone().
      s3-spoolss: make sure AddPrinterDriver calls into AddPrinterDriverEx.
      s4-smbtorture: allow to upload or remove any file belonging to a driver.
      s3-spoolss: make switch in _spoolss_AddPrinterDriver() a bit more clear.
      s4-smbtorture: use server_name for all printerdriver delete and enum operations.
      s3-winbind: fix setup_domain_child() callers.
      s3-selftest: add print$ share with two arch dirs.
      s3-selftest: add print$ share with two arch dirs.
      s4-smbtorture: skip tests when no local driver directory is around.
      s3-selftest: enable RPC-SPOOLSS-DRIVER against s3.
      s3-lanman: fix uninitialized variable in api_RDosPrintJobDel().
      s4: rename RAP share_enum_info to share_info.
      rap: add rap idl.
      s3: re-run make samba3-idl and add generated header file.
      s4: use generated rap header.
      s3: use generated rap header.
      s3: fix some build warnings.
      s4: fix some build warnings.
      s3: remove unused rap.h.
      s4: remove unused rap.h.
      s4-smbtorture: remove some typecasts in rap tests.
      registry: add some shared registry helper functions.
      s4: use shared registry functions.
      s3: use shared registry functions.
      s4-smbtorture: finally test REG_MULTI_SZ in winreg/driverinfo consistency tests.
      s4-smbtorture: split RPC-SPOOLSS-PRINTER into more tests.
      s4-smbtorture: use a torture_printer_context and upload own driver for RPC-SPOOLSS-PRINTER test.
      s4-smbtorture: setup all members of level 3,4,6,8 driver add.
      s4-smbtorture: make sure to not attempt to remove a driver file twice.
      s4-smbtorture: mention architecture of added drivers in debug output.
      s4-smbtorture: only compare level 3 for s3 when checking winreg and spoolss_Driver.
      s4-smbtorture: upload the full cups driver, otherwise windows will not allow using it.
      s3-spoolss: fix some uninitialized variables.
      s3-spoolss: fix winreg attribute for storing datatype.
      s3-spoolss: publish "Monitor" in winreg for drivers.
      s4-smbtorture: make sure to zero the add driver info 8 struct before adding drivers.
      Revert "s3-build: Remove --enable-merged support."
      s3-lanman: remove unsupported print_job_set_place().
      s3-spoolss: add support for SetJobInfo level 1 (for jobfile rename).
      s4-smbtorture: be more liberal when spoolss_SetJob fails.
      s4-smbtorture: allow to pass down spoolss_JobInfoContainer to SetJob functions.
      s4-smbtorture: also try renaming jobname in test_DoPrintTest_check_jobs().
      s3-lanman: use spoolss for api_PrintJobInfo().
      s3-lanman: use spoolss for api_DosPrintQGetInfo and api_DosPrintQEnum.
      s3-lanman: remove unused code.
      s3-lanman: remove a unnecessary memset in api_WPrintJobEnumerate().
      s3-lanman: fix debug message in api_WPrintJobEnumerate().
      s3-lanman: use spoolss for api_WPrintDestGetInfo() and api_WPrintDestEnum().
      s4-smbtorture: start on a test to verify how SetPrinter changes DsSpooler Printer Data.
      s4-smbtorture: add a test that adds a printer incl. devicemode.
      s4-smbtorture: when comparing PrinterData from DsSpooler and PrinterInfo also
      rap: add rap_NetPrintQEnum to IDL.
      s3: re-run make samba3-idl
      s4-smbtorture: add smbcli_rap_netprintqenum.
      s4-smbtorture: add RAP-PRINTING suite.
      s4-smbtorture: add test for rap_NetPrintQEnum.
      s4-smbtorture: link in ../../librpc/gen_ndr/ndr_rap.o.
      s3-lanman: support level 0 NetPrintQEnum RAP query.
      s3-selftest: enable RAP-PRINTING against s3.
      s4-selftest: skip RAP-PRINTING tests.
      s4-rap: add rap print helpers.
      s3-lanman: fix api_DosPrintQEnum.
      s3-pdb_ldap: fix memleak.
      s4-smbtorture: add NDR_PRINT macros for RAP tests (when called with -d10).
      s4-smbtorture: implement and test level 3 and 5 of PrintQEnum RAP.
      rap: fill in rap_PrintQueue2 IDL.
      s4-smbtorture: rework smbcli_rap_netprintqenum a bit.
      rap: add rap_NetPrintQGetInfo to IDL.
      s4-smbtorture: add smbcli_rap_netprintqgetinfo().
      s4-smbtorture: add test_netprintqgetinfo to RAP-PRINTING.
      s3-lanman: fix api_DosPrintQGetInfo().
      rap: add IDL for NetPrintJob{Pause,Continue,Delete}.
      s4-smbtorture: add smbcli_rap_netprintjob{pause,continue,delete}.
      s4-smbtorture: add test_netprintjob() to RAP-PRINTING.
      rap: fix some rap_PrintQueue IDL structures.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix parsing of rap_pull_rap_PrintQueue1 and rap_pull_rap_PrintQueue2.
      rap: fix jobinfo IDL.
      s3: re-run make samba3-idl.
      rap: fill in rap_PrintQueue4 IDL.
      s3: re-run make samba3-idl.
      s4-smbtorture: add rap_pull_rap_PrintQueue2.
      s4-smbtorture: add rap_pull_rap_PrintQueue4.
      s4-smbtorture: test all levels in test_netprintqgetinfo and test_netprintqenum.
      rap: use astring in IDL.
      s3: re-run make samba3-idl.
      rap: let the rap print function be autogenerated again.
      rap: fix rap_PrintQueue2 and rap_PrintQueue4.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix rap_pull_rap_PrintQueue2 and 4.
      rap: add IDL for rap_NetPrintQueue{Pause,Continue,Purge}.
      s3: re-run make samba3-idl.
      s4-smbtorture: add smbcli_rap_netprintqueuepause().
      s4-smbtorture: add test_netprintq to RAP-PRINTING.
      s4-smbtorture: add smbcli_rap_netprintqueueresume() and smbcli_rap_netprintqueuepurge().
      rap: add rap_status to IDL.
      rap: use rap_status in IDL.
      s3: re-run make samba3-idl.
      s4-smbtorture: use rap_status in smbcli_rap_* functions.
      s4-smbtorture: pause and resume printq in RAP-PRINTING test.
      s3: add rap_NetPrintJobEnum (again a call not documented in MS-RAP).
      s3: re-run make samba3-idl.
      s4-smbtorture: add smbcli_rap_netprintjobenum().
      s4-smbtorture: add test_netprintjobenum to RAP-PRINTING.
      s4-smbtorture: fix smbcli_rap_netprintjobenum().
      rap: add rap_NetPrintJobGetInfo to IDL.
      s3: re-run make samba3-idl.
      s4-smbtorture: add smbcli_rap_netprintjobgetinfo().
      s4-smbtorture: add test_netprintjobgetinfo().
      rap: add rap_NetPrintJobSetInfo to IDL.
      s3: re-run make samba3-idl.
      s3-lanman: exit early for unsupported levels in api_PrintJobInfo().
      s4-smbtorture: add rap_cli_push_param() and rap_cli_push_sendbuf().
      s4-smbtorture: add smbcli_rap_netprintjobsetinfo().
      s4-smbtorture: add test_netprintjobsetinfo to RAP-PRINTING.
      pidl: indent cosmetics for s3 server stubs.
      s3: re-run make samba3-idl.
      s3-lanman: fix api_DosPrintQEnum().
      s3-rpcclient: Fix Bug #7277. rpcclient was sending invalid data, causing cupsaddsmb to fail.
      s3-lanman: before trying to call spoolss_ClosePrinter make sure we have a connection.
      s4-smbtorture: make all smbcli_rap_* failures critical.
      s4-smbtorture: add rap_cli_expect_extra_format().
      s4-smbtorture: use RAP extraformat for smbcli_rap_netprintqenum().
      s4-smbtorture: add extraformat to smbcli_rap_netprintqgetinfo() as well.
      rap: add IDL for (undocumented) NetPrintDestEnum.
      s4-smbtorture: add smbcli_rap_netprintdestenum.
      rap: add rap_NetPrintDestGetInfo to IDL.
      s4-smbtorture: add test_netprintdestenum to RAP-PRINTING.
      s4-smbtorture: add smbcli_rap_netprintdestgetinfo().
      s4-smbtorture: add test_netprintdestgetinfo() to RAP-PRINTING.
      s3-libnetjoin: omit admin password in generated ndr_print function.
      s4-smbtorture: fill in test_rap_print().
      rap: add IDL for rap_NetShareAdd (undocumented in MS-RAP).
      s4-smbtorture: remove unused variable from smbcli_rap_netprintdestgetinfo().
      s3-net: fix crash in rap_share_add().
      s3-spoolss: talloc_steal the returned driver_list in winreg_get_driver_list().
      s3-spoolss: make sure to return success in winreg_get_driver_list() for a
      s3-spoolss: remove unused winreg_enumval_to_blob().
      s3-lanman: use srvsvc for api_RNetShareAdd().
      s3: only include gen_ndr headers where needed.
      s3-build: fix the build of vfs_notify_fam.
      s3-eventlog: move all eventlog headers to lib/eventlog and only include where required.
      s3-spoolss: make several notify functions static.
      s3-passdb: moving account_pol.c into passdb.
      s3: move BASE_RID to main includes.h (in preparation to separate passdb).
      rap: add rap_NetUserPasswordSet2() to IDL.
      s4-smbtorture: add smbcli_rap_netuserpasswordset2().
      pidl: add NDR_PRINT_DEBUG output to generated s3 server dispatch tables.
      s3-libsmb: fix argument order for tevent_req_default_print in cli_pull_print().
      s3-lanman: use srvsvc for api_RNetServerGetInfo().
      s3-proto: add missing protoype for dcerpc_fault_to_nt_status().
      s3-net: Fix Bug #7417. 'net rpc user password' can set the wrong password.
      testprogs: rename spoolss.exe to testspoolss.exe.
      testprogs: add vcproj and sln files for testspoolss.exe.
      testprogs: add readme for testspoolss.exe.
      testprogs: update README to reflect the util rename.
      testprogs: update Makefile.mingw (although mingw current cant build it).
      s3-rpcclient: fix two more invalid typecasts in spoolss commands.
      rap: add rap_NetOEMChangePassword() to IDL.
      s4-smbtorture: add smbcli_rap_netoemchangepassword().
      s4-smbtorture: correctly fill in trans.in.data in rap_cli_do_call().
      s4-smbtorture: fix smbcli_rap_netoemchangepassword.
      s4-smbtorture: fix smbcli_rap_netuserpasswordset2().
      tdb: remove unused variable in tdb_new_database().
      s4-smbtorture: test netservergetinfo level 1 also against s3.
      s4-smbtorture: autolookup domain in torture_create_testuser() if none was given.
      s4-smbtorture: add torture_create_testuser_max_pwlen() that allows to set maxpwlen.
      s4-smbtorture: getting serious about checking rap status return codes.
      s4-smbtorture: add RAP-SAM testsuite with a rap_NetUserPasswordSet2 test.
      s3-selftest: enable RAP-SAM against Samba 3.
      s4-selftest: skip RAP-SAM tests against Samba 4.
      s4-smbtorture: add test_oemchangepassword to RAP-SAM.
      s4-smbtorture: create/delete testusers via SAMR in RAP-SAM.
      s3-lanman: use samr for api_SamOEMChangePassword().
      s3-rap: fix cli_oem_change_password() and give room for the convert reply word.
      s3-libndr: make sure ndr_pull_string_array() only inspects string termination flags.
      s3-libsmb: fix typo in remote_password_change().
      ntprinting: add ntprinting.idl.
      s3-printing: explicitly include "printing/pcap.h" as there is /usr/include/pcap.h.
      s4-libndr: fix ndr_pull_string_array() for non utf16 arrays in s4 as well.
      s3-winbind: make the getpeername() checks in cm_prepare_connection IPv6 aware.
      s3-kerberos: pass down kdc_name to create_local_private_krb5_conf_for_domain().
      s3-kerberos: temporary fix for ipv6 in print_kdc_line().
      s3-includes: remove some unused defines.
      s3-libgpo: move group policy protos to where they belong.
      s3-rpc_misc: clean out include/rpc_misc.h.
      security: merge builtin rid tables.
      s3-services: move services.h to where it is actually used.
      s3-samr: move samr helper prototypes outside of proto.h
      s3-crypto: only include crypto headers when crypto is done.
      s3-includes: remove completely unused util_getent.h header.
      s3-tldap: only include tldap when actually needed.
      s3-registry: only include registry headers when really needed.
      smbconf: only include smbconf headers where needed.
      s3-build: fix the build.
      s3-secdesc: remove "typedef struct sec_desc_buf SEC_DESC_BUF".
      s3-secdesc: remove "typedef struct security_ace SEC_ACE".
      s3-secdesc: remove "typedef struct security_acl SEC_ACL".
      s3-secdesc: remove "typedef struct security_descriptor SEC_DESC".
      s3-secdesc: move SEC_DESC_HEADER_SIZE to its only user.
      s3-secdesc: use SD_REVISION from security.idl.
      s3-net: Added a rather trivial "net printing dump" command.
      s3-net: also dump security descriptors from ntprinters.tdb in "net printing dump".
      s3-pidfile: set the close on exec flag for the created pidfiles.
      s3-rpc_client: move protos to cli_samr.h
      s3-rpc_client: move protos to cli_netlogon.h
      s3-rpc_client: move protos to cli_lsarpc.h
      s3-rpc_client: move protos to cli_spoolss.h
      s3-rpc_client: move protos to init_spoolss.h
      s3-rpc_client: move protos to init_samr.h
      s3-passdb: move get_logon_hours_from_pdb() into samr server.
      s4-smbtorture: take a TODO note for RAP-PRINTING.
      s3-lanman: Fix various RAP printing calls according to win98 testing and MS-RAP docs.
      s3-services: move services.h closer to services implementation.
      s3-build: add missing prototype for regtype_by_string().
      s3-libndr: merge in better ndr warnings from s4 ndr_string.c
      librpc: finally merge ndr_string.c.
      s3-utils: remove trailing whitespace from profiles utility.
      s3-registry: support REG_QWORD.
      s3-registry: support REG_DWORD_BIG_ENDIAN.
      s3-net: compile net_ads_gpo_apply().
      s3-net: let net_ads_gpo() call no_ads when built w/o ads support.
      s3-net: show how to use filters for group policy processing.
      s3-libads: add ads_set_sasl_wrap_flags().
      s3-libgpo: enable LDAP sign in ads_get_gpo_list().
      s4-smbtorture: use push_reg_sz()/push_reg_multi_sz() in RPC-WINREG.
      s4-smbtorture: print local_machine name in RemoteFindFirstPrinterChangeNotifyEx test.
      s4-smbtorture: pass down hkey to main keytest in RPC-WINREG.
      s4-smbtorture: use push_reg_sz/push_reg_multi_sz in spoolss tests.
      waf: fix the build of nsswitch libwbclient.
      s4-smbtorture: Fix volatile test in RPC-WINREG.
      s4-smbtorture: add kernel_mode_registry_path().
      s3-net: fix net_ads_gpo() for non-ads case.
      rap: fix rap_NetUserPasswordSet2 IDL.
      s4-smbtorture: fix smbcli_rap_netuserpasswordset2().
      s4-smbtorture: Fix NetUserPasswordSet2 RAP tests.
      s3-waf: very simple start on getting krb5 build to work.
      s3-net: fix a "dereferencing type-punned pointer will break strict-aliasing rules" warning.
      s3-printing: fix buildwarning in publishing code after registry changes.
      s3-lanman: use samr for api_SetUserPassword().
      s3-lanman: parse encrypted and min_pwd_length in api_SetUserPassword().
      s3-smbd: remove unused change/check_lanman_password.
      s3-samr: move chgpasswd.c out of smbd and into the samr server.
      rap: add rap_NetUserGetInfo IDL.
      s4-smbtorture: add smbcli_rap_netusergetinfo().
      s3-waf: fix the build after chgpasswd.c changes.
      rap: fix typo in IDL.
      s3-lanman: remove defines now provided by IDL.
      s3-waf: more work on krb5 build.
      rap: use rap_LogonHours in rap_NetUserInfo11 as well.
      s4-smbtorture: add usergetinfo to RAP-SAM.
      s3-net: fix the build.
      s4-smbtorture: create the user to test in test_usergetinfo() in RAP-SAM.
      s3-lanman: use samr for api_RNetUserGetInfo.
      s3-waf: fix the build after tstream changes.
      libndr: add support for relative_rap_convert.
      s4-smbtorture: we can fully use autogenerated code to pull info unions now.
      s4-smbtorture: remove obsolete handmarshalled rap code.
      s4-smbtorture: finally test all levels in rap_NetUserGetInfo RAP-SAM test.
      s3-rpc_client: move protos to init_netlogon.h
      s3-idl: fix some missing dependencies to other IDL files.
      s3-build: only use ndr_samr.h where needed.
      s3-build: use ndr_misc.h where needed.
      s3-build: remove duplicate ndr_krb5pac.h inclusion.
      s3-auth: fix c++ buildwarnings.
      s3-lanman: Fix api_RNetUserGetInfo level 2 marshalling offset calculation.
      s3-samr: Fix crash bug in _samr_QueryUserInfo{2} level 18.
      s3-selftest: make sure provisioned s3 looks the same in make selftest as in make test.
      s3-selftest: fix chmod commands in provisioning.
      libcli/nbt/lmhosts: fix missing prototype warning.
      s3-build: only use ndr_security.h where needed.
      s3: only use netlogon/nbt header when needed.
      s3: use shared security defines.
      s3-netlogon: use SAMR in _netr_ServerPasswordSet{2}.
      s3-auth: add "system" bool flag to auth_serversupplied_info.
      s3-samr: give the system user a free pass for _samr_QueryUserInfo{2} level 18.
      s3-netlogon: use SAMR in _netr_ServerAuthenticate3.
      s3-netlogon: use LSA in _netr_NetrEnumerateTrustedDomains.
      s3-netlogon: Fix crash bug in _netr_NetrEnumerateTrustedDomains().
      s3-smbd: remove unused sconn from token_contains_name().
      lib/replace: fix some c++ build warnings in testsuite.
      s4-smbtorture: Make sure RPC-SPOOLSS and RPC-SPOOLSS-PRINTER pass against s3.
      s4-smbtorture: skip driverName and printerName DsSpooler tests for now.
      s3-eventlog: try to pass RPC-EVENTLOG during make test as non-root.
      s3-selftest: Fix blackbox smbclient s3 tests during make selftest.
      s3: remove unused librpc/ndr/sid.c.
      s3-security: remove some more shared secdesc defines.
      s3-security: use shared SECINFO_OWNER define.
      s3-security: use shared SECINFO_GROUP define.
      s3-security: use shared SECINFO_SACL define.
      s3-security: use shared SECINFO_DACL define.
      s3-security: remove duplicate Extra W2K flags.
      s3-security: move ALL_SECURITY_INFORMATION to the only user.
      s3-security: use shared Security Access Masks Rights.
      s3-security: use shared "Generic access rights".
      s3-security: use shared "File Object specific access rights".
      security: move generic_mapping and standard_mapping to security.idl.
      s3-security: use shared "Standard access rights.".
      s3: remove rpc_secdes.h completely.
      s3-build: only include generated spoolss headers (not ndr headers).
      s3-build: pure cosmetics, use better names for gen_ndr code pieces.
      s3: remove authdata.h
      s4-smbtorture: only test data up to a length of 9 bytes in test_SetPrinterDataEx_matrix().
      s4-smbtorture: refactor test_EnumPrintProcessors().
      s4-smbtorture: add test_PrintProcessors_winreg.
      s4-smbtorture: move PrintProcessors winreg test to main RPC-SPOOLSS test.
      s3-spoolss: add and use spoolss_printerinfo2_to_setprinterinfo2().
      s4-smbtorture: allow to call single tests from a testcase in a testsuite
      s4-smbtorture: convert RPC-SPOOLSS into a torture suite.
      s4-smbtorture: rework order of test in RPC-SPOOLSS-PRINTSERVER a bit.
      s4-smbtorture: completely rework RPC-SPOOLSS-PRINTER.
      s3-selftest: do not call main RPC-SPOOLSS testsuite.
      s4-smbtorture: check error codes in RAP-SAM testsuite.
      s3-rpcclient: allow to add access_mask in cmd_spoolss_open_printer_ex().
      s4-smbtorture: share test_ClosePrinter between RPC-SPOOLSS and RPC-SPOOLSS-WIN.
      s4-smbtorture: add RPC-SPOOLSS-ACCESS.
      s4-smbtorture: remove another incarnation of test_ClosePrinter.
      s4-smbtorture: make RPC-SPOOLSS-ACCESS more compatible with older samba releases.
      s3-privileges: use LUID defines from lsa IDL.
      s4-smbtorture: handle printservers w/o printers in RPC-SPOOLSS-ACCESS.
      s4-smbtorture: test workstation auth as well in RPC-SPOOLSS-ACCESS.
      s3-lsa: Fix static list of luids in our privileges implementation.
      s3-waf: fix the the waf build.
      s3-netdomjoin-gui: Fix Bug #7500. Fix 'not a string literal' warning in netdomjoin-gui.
      s3-selftest: disable domain creds smbclient_s3 tests for now.
      s4-smbtorture: rework internals of RPC-SPOOLSS-ACCESS testsuite.
      s3-auth: Fix valgrind warning (unitialized var) in samu_to_SamInfo3().
      s3-waf: fix the build.
      s3-printing: add BUILTIN\Print Operators as FULL CONTROL to default sd.
      s4-smbtorture: only pull info when status code indicates success in smbcli_rap_netprintqgetinfo().
      s4-smbtorture: test smbcli_rap_netprintqgetinfo() with "" printqname.
      s3-lanman: Fix return code for "" printqname in api_DosPrintQGetInfo().
      pidl: make sure to fill in cli->pipes_struct->hdr_req.opnum in s3 server dispatch tables.
      Revert "s4-smbtorture: only pull info when status code indicates success in smbcli_rap_netprintqgetinfo()."
      s4-smbtorture: only pull info when status code indicates success in smbcli_rap_netprintqgetinfo().
      s3-auth: fix debug message in check_winbind_security().
      ntlmssp: add decode_NTLMv2_RESPONSE to IDL.
      s3-build: allow to build bin/ndrdump4 (just as bin/smbtorture4)
      s3-auth: in make_user_info_for_reply_enc make sure to check length and data
      s3-docs: Fix some of ntlm_auth ntlm-server-1 protocol documentation.
      s4-smbtorture: Remind myself we need to add a test for SMBsplretq in RAP-PRINTING.
      lib/crypto: only include what is needed.
      s3-selftest: fix locktest9 in make selftest.
      s4-smbtorture: split out a "printerdata_keys" test for RPC-SPOOLSS-PRINTER.
      s4-smbtorture: activate all keys in SetPrinterData keys test.
      s4-smbtorture: also test keynames with '/' in it in SetPrinterDataEx keyname tests.
      s4-smbtorture: add "printerdata_values" test to RPC-SPOOLSS-PRINTER.
      s4-smbtorture: Fix test_SetPrinterDataEx_keys and test_SetPrinterDataEx_values.
      s4-smbtorture: add test for different winreg SetValue value names.
      s4-smbtorture: more work on test values WINREG test.
      s4-smbtorture: test more valid key names in RPC-WINREG.
      s3-eventlog: make sure _eventlog_OpenEventLogW fails when we cannot open the registry key.
      s3-registry: fix perfmon keyname delimiter.
      s3-registry: fix printing keyname delimiter.
      s3-registry: missed one perflib keyname delimiter.
      s4-smbtorture: add trustDomainPasswords blob test to LOCAL-NDR testsuite.
      s4-smbtorture: fix typo.
      winreg: fix winreg_QueryMultipleValues() IDL and torture tests.
      winreg: fix winreg_QueryMultipleValues2 IDL.
      s4-smbtorture: add RPC torture test for winreg_QueryMultipleValues2.
      s4-smbtorture: add NDR torture test for winreg_QueryMultipleValues2.
      s3-utils: remove rpccheck.
      s4-smbtorture: add netr_GetForestTrustInformation test to RPC-NETLOGON.
      s4-smbtorture: use TEST_MACHINE_NAME in test_netr_GetForestTrustInformation().
      s4-smbtorture: handle NT_STATUS_NOT_IMPLEMENTED in GetForestTrustInformation test.
      s4-smbtorture: remove some pointless mem_equal tests in LOCAL-NDR-WINREG testsuite.
      s4-smbtorture: add more sophisticated tests for winreg_QueryMultipleValues{2}.
      s4-smbtorture: fix incorrect IDL for QueryMultipleValue (aka RVALENT).
      s4-smbtorture: remove duplicate torture_assert_sid_equal macro.
      s4-smbtorture: add some more multiple_values_tests to RPC-WINREG.
      s3-registry: add reg_querymultiplevalues() to reg_api.
      s3-winreg: implement _winreg_QueryMultipleValues2().
      s3-winreg: implement _winreg_QueryMultipleValues().
      s4-smbtorture: enable QueryMultipleValues{2} torture tests against samba3.
      s3-libsmb: move change_trust_account_password out of smbd into libsmb.
      s3-docs: try to make "default case" explanation a little clearer.
      s4-smbtorture: in extended setvalue winreg test, reduce max random buffer length to 16 bytes.
      s3-registry: fix malloc/talloc mismatch upon free in reg_enumvalue().
      s3-printing: Fix Bug #7541, %D in "printer admin" causing smbd crash.
      s3-libads: move KRB5_ENV_CCNAME to separate header krb5_env.h.
      s3-libads: use shared well known guids.
      s3-libnet_join: small IDL enhancement.
      tdb: fix the build on mac os x 10.6.4.
      s3-waf: fix the build after smbd/change_trust_pw.c removal.
      s3-libads: move ads_protos.h to ads_ldap_protos.h.
      s3-libads: move ads_status to a separate header file.
      s3-libads: move ads_dns out of main includes.
      s3-libads: move keytab macros out of ads.h.
      s3-libads: only include libds flags where needed.
      s3-libads: move spnego defines to their appropriate header file.
      s3-libads: move ldap posix schema defines to their own header file.
      s3-nss_info: only include nss_info.h where needed.
      s3-registry: avoid using registry_value union.
      s3-registry: remove unused reg_util_marshalling code.
      s4-smbtorture: enable extended SetValue test against Samba3.
      s3-registry: allow to read NULL entries (that we allow to store) back from the tdb.
      s3-registry: remove 2 byte winreg type limitation.
      s3-net: forgot to set type in winreg getvalue operation.
      s3-idl: support --full for s3 build_idl.sh as well.
      s3-build: add idl_full to Makefile.
      s3-waf: fix the build.
      s4-smbtorture: add my (C) to rap torture lib.
      pidl: s3 server stubs: make sure LIBNDR_FLAG_BIGENDIAN is set when negotiated.
      s3-winbind: Fixed the winbind caching.
      s3-selftest: add "make testenv" target to Makefile.
      s3-build: add IDL_FILES variable.
      s3-build: some makefile cosmetics.
      s3-notify: add MS-CIFS 2.2.7.4.2 FILE_NOTIFY_INFORMATION to IDL.
      s3-notify: use autogenerated FILE_NOTIFY_INFORMATION marshalling in smbd.
      s3-rpc_parse: fix c++ buildwarning in prs_init().
      s3-registry: add preg.idl.
      s3-libgpo: remove handmarshalled PReg parser from registry CSE.
      s3-rpc_parse: remove finally unused prs_unistr().
      s3-rpc_misc: remove unused UNISTR.
      s3-winbindd: route samr chgpwd ops for own domain over internal samr pipe as well.
      s3-winbindd: Fix child logfile handling which broke with c67cff0372.
      s3-dcerpc: add dcerpc_push_ncacn_packet().
      s3-dcerpc: use dcerpc_push_ncacn_packet() for setup_bind_nak().
      s3-dcerpc: use dcerpc_push_ncacn_packet() for setup_fault_pdu().
      s3-dcerpc: add dcerpc_pull_ncacn_packet().
      s3-dcerpc: use dcerpc_pull_ncacn_packet() for pulling a RPC fault pdu.
      s3-dcerpc: remove unused smb_io_rpc_hdr_fault.
      s3-dcerpc: use dcerpc_push_ncacn_packet() for create_bind_or_alt_ctx_internal().
      s3-dcerpc: remove unused init_rpc_hdr_rb and init_rpc_context.
      s3-dcerpc: add dcerpc_push_dcerpc_auth().
      s3-dcerpc: add dcerpc_push_schannel_bind().
      s3-dcerpc: use dcerpc_push_dcerpc_auth() for all authenticated binds.
      dcerpc: add ncacn_packet_header to IDL.
      s3-dcerpc: add dcerpc_pull_ncacn_packet_header().
      s3-dcerpc: use struct ncacn_packet_header instead of struct rpc_hdr_info.
      s3-dcerpc: add dcerpc_pull_dcerpc_auth().
      s3-dcerpc: use dcerpc_pull_dcerpc_auth() in cli_pipe_verify_ntlmssp().
      s3-dcerpc: use dcerpc_pull_ncacn_packet() in cli_pipe_validate_current_pdu().
      s3-dcerpc: use dcerpc_push_ncacn_packet() in push_next_frag().
      s3-dcerpc: use dcerpc_pull_ncacn_packet() for rpc_pipe_bind_step_one_done().
      Revert "s4-smbtorture: skip bigendian tests against s3 in RPC-LSA-SECRETS."
      s3-rpcclient: add another usage display to sign and seal commands.
      s4-smbtorture: skip wbcChangeUserPassword test when no oldpass is set in environment.
      s3-rpc: when using rpc_pipe_open_internal, make sure to go through NDR.
      s4-dcerpc: move some util functions up to main librpc directory.
      s3-dcerpc: link against ../librpc/rpc/dcerpc_util.c
      s3-ldb: fix build warning.
      s3-waf: fix the build.
      s3-libnet: better separate headers.
      s3-libnet: add missing header file, sorry.
      s4-smbtorture: rename rpc/bind.c to rpc/multi_bind.c.
      s4-smbtorture: add very simple RPC-BIND testsuite.
      s3-selftest: enable RPC-BIND against s3.
      s3-dcerpc: fix crash bug in error path of process_complete_pdu().
      s3-dcerpc: fix c++ warning.
      s3-waf: fix the build.
      s3-registry: use some prs macros to the only place where they are used.
      libcli/netlogon: re-enable debugging.
      s4-smbtorture: make sure to wipe out dcerpc auth flags before RPC-BIND starts.
      s4-smbtorture: rearrange testlist in RPC-BIND.
      s4-smbtorture: run all testcases with bigendian push as well in RPC-BIND.
      s3-perfcount: make it possible to compile the example perfcount daemon.
      s3-dcerpc: rename SCHANNEL_SIG_SIZE to NL_AUTH_SIGNATURE_SIZE and move to IDL.
      s3-build: add LIBNDR_XATTR_OBJ.
      Revert "s4-torture: Disable setting REG_BINARY printer data with size 0."
      s4-smbtorture: remove ifdefed symlink test, this is already skipped internally
      s3-build: avoid to globally include printing and spoolss headers.
      s3-printing: remove unused get_local_printer_publishing_data() call.
      s3-build: fix some c++ build warnings.
      s3-spoolss: remove unused MAX_OPEN_PRINTER_EXS define.
      spoolss: fix potential crash bug in spoolss_PrinterEnumValues push path.
      s4-smbtorture: remove another old and now invalid s3 special case during spoolss testing.
      s3-spoolss: remove duplicate (and incorrect) header.
      s3-printing: make sure to set NTSTATUS code before checking it.
      s3-spoolss: fix uninitialized variable build warning.
      s3-spoolss: fix type-punned pointer build warning.
      s3-dcerpc: fix some uninitialized variables build warnings.
      s3-waf: fix the build.
      s3-printing: move AD related printing components to an own file.
      s3-libnet_join: add ads.h as helper header to IDL.
      s3: avoid global include of ads.h.
      s3-secrets: only include secrets.h when needed.
      s3-nmbd: include svcctl.h where needed.
      s3-param: include svcctl headers in loadparm.
      s3-passdb: include samr.h where needed.
      s3-rap: include svcctl.h where needed.
      s3-krb5: include krb5pac.h where needed.
      s3-build: remove global include of krb5pac.h.
      s3-services: include svcctl.h where needed.
      s3-smbtorture: include svcctl.h
      s3-libnet: include netlogon.h in libnet samsync header.
      s3-libsmb: include nbt.h in namequery_dc code.
      s3-net: only include netapi header when needed.
      s3-build: no need to include privileges.h twice.
      s3: remove global include of samr.h
      s3-netlogon: remove global include of netlogon.h.
      s3-net: fix copy/paste typo in usage of "net printing".
      s3-winbind: Fix Bug #7568: Make sure cm_connect_lsa_tcp does not reset the secure channel.
      s3: fix the waf build.
      libcli/auth/ntlmssp: remove outdated comment. The version flag is well understood now.
      s3-waf: fix the waf build with more recent MIT krb5 libs.
      ntlmssp: fix unitialized variable in ntlmssp_server_postauth().
      s3-waf: fix the build.
      s3-selftest: add testparm tests to selftest.
      s3-waf: separate out libads_printer.
      s3-build: separate out libads_printer.
      s3-build: pointless to link in libads and dcutils into smbcacls.
      s3-dcerpc: fix build warning seen with -O3.
      s3-libnet: remove source3/libnet/libnet_join.c.orig, added by a previous commit.
      s3-libnet: also remove libnet/libnet_samsync_keytab.c.orig.
      s3-waf: remove pointless RPC_PARSE_SRC2.
      s3-build: remove pointless RPC_PARSE_OBJ2.
      s3-selftest: fix testparm tests as non-root.
      s3-selftest: move make test to selftest.
      s3-build: always check for python.
      Revert "s4:RPC-SPOOLSS-NOTIFY: skip test_RFFPCNEx() for now, as the test is broken"
      s3-selftest: add samba3.posix_s3.rpc.spoolss.notify to knownfail list.
      s3-smbtorture: fix printf statement in ioctl test.
      s3-param: also remove lp_update_encrypted from loadparm.
      s3-selftest: fix make oldtest (testparm_s3 tests use $LOCAL_PATH).
      s3-util: remove unused variable.
      s3-dcerpc: fix uninitialized variable in cli_get_session_key().
      s3-dcerpc: fix c++ build warning.
      s3-dcerpc: try to fix the non gssapi build.
      s3-build: only include smb_signing.h where needed.
      s3-libsmb: fix some uninitialized variables.
      s3-idmap: fix uninitialized variable in idmap_tdb_sids_to_unixids_action().
      s3-cli: fix uninitialized variable.
      s3-ldapsam: add samba.ldif LDAP schema.
      s3-waf: fix the build.
      s3-dcerpc: avoid talloc_move on schannel creds in cli_rpc_pipe_open_schannel_with_key().
      s4-waf: try to fix the s4 wbinfo build dependencies.
      s4-trusts: fix trustDomainPasswords drsblobs IDL and server side support.
      s4-smbtorture: fill in trust_domain_passwords_check_in in NDR lsa test.
      s3-lsa: separate out init_lsa headers.
      s3-waf: only link in spoolss client code where needed.
      s3-build: only link in spoolss client code where needed.
      s3-build: only link in eventlog client code where needed.
      s3-waf: only link in winreg client code where needed.
      s3-build: only link in winreg client code where needed.
      s3-waf: only link in ntsvcs client code where needed.
      s3-build: only link in ntsvcs client code where needed.
      s3-waf: only link in drsuapi client code where needed.
      s3-build: only link in drsuapi client code where needed.
      s3-waf: only link in dfs client code where needed.
      s3-build: only link in dfs client code where needed.
      s3-waf: only link in eventlog echo code where needed.
      s3-build: only link in echo client code where needed.
      s3-waf: only link in initshutdown client code where needed.
      s3-build: only link in initshutdown client code where needed.
      s3-waf: only link in dssetup client code where needed.
      s3-build: only link in dssetup client code where needed.
      s3-waf: only link in svcctl client code where needed.
      s3-build: only link in svcctl client code where needed.
      s3-waf: only link in wkssvc client code where needed.
      s3-build: only link in wkssvc client code where needed.
      s3-waf: only link in srvsvc client code where needed.
      s3-build: only link in srvsvc client code where needed.
      s3-waf: only link in lsa client code where needed.
      s3-build: only link in lsa client code where needed.
      s3-waf: only link in samr client code where needed.
      s3-build: only link in samr client code where needed.
      s3: separate out cli schannel functions that depend on cli_netlogon.
      s3-waf: only link in netlogon client code where needed.
      s3-build: only link in netlogon client code where needed.
      s3-waf: only link in epmapper client code where needed.
      s3-build: only link in epmapper client code where needed.
      s3-waf: remove RPC_PARSE_SRC.
      s3-build: remove RPC_PARSE_OBJ.
      s3-build: only link in samr util code where needed.
      s3-waf: only link in samr util code where needed.
      s3-waf: use LIBMSRPC_SRC instead of single files.
      s3-build: use LIBMSRPC_OBJ instead of single files.
      s3-waf: remove RPC_CLIENT_SRC1.
      s3-build: remove RPC_CLIENT_OBJ1.
      s3-waf: further rationalise LIBMSRPC_SRC and remove RPC_CLIENT_SRC.
      s3-build: further rationalise LIBMSRPC_OBJ and remove RPC_CLIENT_OBJ.
      s3-build: only include memcache.h where needed.
      s3-build: remove unrequired forward declaration for struct printjob.
      s3-build: only include nsswitch header where needed.
      s3-nmbd: move nmbd proto out of main proto.h
      s3-build: only include "fake_file.h" where needed.
      s3-build: no point in including doserr.h, noone uses them.
      s3-idmap: only include idmap headers where needed.
      s3-build: remove unrequired ntlmssp forward declaration.
      s3-dcerpc: only include rpc_dce.h where needed.
      s3-build: include mangle.h only where needed.
      s3-build: only include libnscd.h where needed.
      s3-build: only include krb5 environment variables where required.
      s3-build: use dbwrap.h only where needed.
      s3-build: use talloc_dict.h only where needed.
      s3-build: only include rpc_misc.h where needed.
      s3-selftest: do not remove nsswrapper environment when running smbtorture4.
      s3-proto: remove obsolete prototypes.
      dcerpc-gssapi: fix "shadows a global declaration" warning when gssapi is unavailable.
      dcerpc-gssapi: include missing dcerpc_krb5.h header.
      s3-waf: fix the build after gssapi changes.
      s3-kerberos: try to fix the build w/o kerberos support.
      s3-kerberos: fix flush_keytab() compile with heimdal.
      s3-kerberos: use krb5 compat macros in fill_keytab_from_password().
      s3-kerberos: use get_kerberos_allowed_etypes in fill_keytab_from_password().
      s3-kerberos: use smb_get_enctype_from_kt_entry() in
      s3-kerberos: use more krb5 compat macros in get_mem_keytab_from_secrets().
      s3-auth: remove unused variable in check_sam_security().
      s3-libads: avoid crashing in ads_keytab_list().
      s3-printing: add debug to get_correct_cversion().
      s3-auth: remove global include of krb5pac.h.
      winreg: add winreg_RestoreKeyFlags to IDL.
      s3-auth: fix uninitialized error code in get_guest_info3().
      s3-ctdb: ctdbd_init_connection() is static to this file.
      s3-spoolss: fix some debug statements.
      s3-nmbd: remove trailing whitespace in nmbd_processlogon.c
      s3-nmbd: fix indentation in process_logon_packet().
      nbt: add decode_nbt_netlogon_packet() to IDL.
      nbt: add NETLOGON_LOGON_REQUEST.
      nbt: add nbt_netlogon_response2 to IDL.
      s4-smbtorture: add torture ndr nbt testsuite.
      s4-waf: fix bin/python/samba/dcerpc/nbt.so.
      s3-utils: remove unused variable in smbget.
      lib/util: remove some unused_result warnings.
      libcli/netlogon: add NETLOGON_RESPONSE2 to push_nbt_netlogon_response().
      libcli/netlogon: add LOGON_RESPONSE2 to pull_nbt_netlogon_response().
      libcli/netlogon: add LOGON_REQUEST handling to pull_nbt_netlogon_response().
      s3-nmbd: use nbt_netlogon_packet in process_logon_packet().
      s3-nmbd: handle source_name in one location in nmbd_process_logon().
      s3-nmbd: use autogenerated marshalling for LOGON_REQUEST.
      s3-nmbd: use autogenerated marshalling for LOGON_PRIMARY_QUERY.
      s3-nmbd: use autogenerated marshalling for LOGON_SAM_LOGON_REQUEST.
      s3-nmbd: use NETLOGON_NT_VERSION_1 in LOGON_PRIMARY_RESPONSE.
      s4-smbtorture: add spoolss_OpenPrinter with unc and printername in RPC-SPOOLSS-PRINTSERVER.
      s3-selftest: rename printer "print4" to "lp".
      s3-spoolss: allow a short printername w/o servername.
      s3-waf: link ndr_named_pipe_auth only where needed.
      s3-build: link ndr_named_pipe_auth only where needed.
      s3-waf: link ndr_notify only where needed.
      s3-build: link ndr_notify only where needed.
      s3-waf: only link LIBNDR_XATTR_SRC where needed.
      s3-build: only link LIBNDR_XATTR_OBJ where needed.
      s3-waf: use proper RPC_X_SRC names.
      s3-build: use proper RPC_X_OBJ target names.
      s3-dsgetdcname: cleanup receive_getdc_response a little.
      s3-spoolss: Fix _spoolss_GetPrinter().
      s3-printing: fix non-ads build after prototype changes.
      s3-selftest: add print_test_extended (as called from RPC-PRINTER) to knownfail list.
      s3-waf: fix the build after privilege code changes.
      s4-smbtorture: try to fix spoolss winreg Form tests on bigendian machines.
      ntlmssp: when pushing an ntlmssp NEGOTIATE_MESSAGE deal with NULL strings.
      s3-waf: only link in prs parser where needed.
      s3-build: only link in prs parser where needed.
      s3-nltest: rename print_result to print_netlogon_info_result.
      s3-nltest: convert server input argument into --server.
      libnetapi: add DOMAIN_CONTROLLER_INFO_FLAGS.
      s3-libnetapi: add DS_X_FLAGs to public header.
      s3-libnetapi: add DS request flags to public header.
      s3-libnetapi: try using netr_DsRGetDCNameEx() in DsGetDcName().
      s3-nltest: add dsgetdc command.
      s3-printing: fix print_spool_terminate().
      s3-rpc_server: fix some uninitalized variables and c++ build warnings.
      s3-docs: fix rpc_server manpage type.
      s3-waf: fix the build.
      s3-docs: more typos in rpc_server manpage.
      s4-smbtorture: try FSCTL_FIND_FILES_BY_SID with random blob data in RAW-IOCTL.
      s3-smbd: prevent call_nt_transact_ioctl() crash in FSCTL_FIND_FILES_BY_SID case.
      s4-smbtorture: activate spoolss_GetPrinterData NDR pull test.
      s4-smbtorture: mention -v switch for hexdump imports into the NDR testsuites.
      s4-smbtorture: add spoolss_GetPrinterDriver2 NDR tests.
      s3-smbtorture: fixup trailing whitespace in ndr testsuite.
      s4-smbtorture: fix some indentation in NDR testsuite.
      s4-smbtorture: add functions to do NDR_OUT ndr_pull validation including NDR_IN context.
      s4-smbtorture: finally enable most of our NDR_OUT NDR tests that we couldnt handle previously.
      s4-smbtorture: add NDR spoolss_GetPrinterDriver2 in and out check functions.
      s4-smbtorture: fix winreg querymultiplevalues NDR test warning.
      testprogs: skip two tests in spoolss tester.
      libnetapi: deal with NULL data in I_NetLogonControl2().
      s3-libnetapi: support NETLOGON_CONTROL_FORCE_DNS_REG in I_NetLogonControl().
      s3-nltest: add dsregdns command to nltest.
      s3-rpcclient: add some winreg commands.
      s4-smbtorture: add LOCAL-NDR-NTLMSSP.
      s3-waf: add rpcclient to the waf build.
      s3-registry: add reg_querymultiplevalues to reg_api matching table.
      s3-registry: move regf based reg_api calls into own file.
      s3-waf: fix the build after reg_api changes.
      s3-waf: fix the file locations of gen_ndr'ed files.
      s4-smbtorture: add test_SetServiceObjectSecurity() to RPC-SVCCTL.
      s3-waf: add libnetapi
      s3-waf: add net.
      s3-waf: fix the build after registry changes.
      s4-smbtorture: add NetRemoteTOD libnetapi torture test.
      s3-build: only include async headers where needed.
      s3-build: only include ctdbd_conn.h where needed.
      s3-build: only include smbldap.h where needed.
      libcli: add dom_sid_compare_domain()
      s3-util_sid: use shared dom_sid_compare_auth and dom_sid_equal_X functions.
      s3-util: use shared dom_sid_dup.
      s3-nmbd: move SYNC_DNS to nmbd.h
      s3-build: try to fix the non-ldap build.
      lib/tdb: fix c++ build warning in tdb_header_hash().
      s4-smbtorture: print SVCCTL security descriptor in test_QueryServiceObjectSecurity().
      s3-libnetapi: Fix Bug #7665, memory leak in netapi connection manager.
      s3-winbindd: another attempt to fix the non-ldap build.
      s3-waf: remove reg_util_legacy from waf build as well.
      s3-libgpo: fix the build of scripts client side extension.
      s3-lsa: Fix sid in DEBUG in_lsa_EnumAccountRights.
      s4-smbtorture: print out membership in RPC-SPOOLSS-ACCESS.
      s3-waf: fix the build.
      s3-registry: fix some c++ build warnings.
      s3-waf: add libsmbclient.
      s3-waf: reconcile objects to old make-based build.
      s3-build: strip down dependencies of smbta-util.
      s3-build: fix the build of test_lp_load.
      s3-build: fix the build of split_tokens.
      s3-waf: add all remaining binaries from the make build.
      s3-waf: add libsmbsharemodes.so.
      s3-waf: rework libnetapi to have no unresolved symbols.
      waf: move majority of shared NDR_ subsystems to main wscript_build.
      s3-waf: fix LOCALEDIR usage.
      waf: fix generated nbt.h path, should fix s4 install.
      s3-waf: recurse into main wscript_build from main librpc directory.
      s3-waf: move epmapper client to LIBMSRPC.
      s3-build: move epmapper client to LIBMSRPC.
      s3-waf: convert LIBMSRPC_GEN into a subsystem.
      s4-waf: move two more NDR_ subsystems to main directory.
      s3-waf: recurse into ../lib/crypto.
      s3-waf: add libaddns.so.
      s3-waf: convert smbd into a subsystem.
      s3-waf: convert LIBADS into a subsystem.
      s3-waf: convert LIBADS_SERVER into a subsystem.
      s3-waf: convert LIBADS_PRINTER into a subsystem.
      s4-waf: add NDR_LSARPC and NDR_SAMR.
      s3-waf: first run in using NDR_ subsystems (mostly from shared directory).
      s3-dsgetdcname: always pass in messaging context.
      s3-waf: fix the build after rpc_server crypto changes.
      s3-waf: convert LIBMSRPC into a subsystem.
      s4-waf: move the RPC_NDR subsystems to main librpc wscript_build.
      s3-waf: fix the build of nsstest with --enable-nss-wrapper.
      s3-waf: remove duplicate CONFIGFILE from dynconfig.py which caused sysconfigdir
      s3-waf: add more diroptions.
      s3-waf: fix the build.
      s3-waf: add check for seteuid method.
      s3-waf: add wscript_build to s3 librpc dir for NDR_ subsystems.
      s3-waf: add autogen-waf.sh to source3.
      s3-waf: add RPC_NDR_WBINT to librpc/wscript_build.
      s3-waf: convert LOCKING into a subsystem.
      s3-waf: let winbind depend on SRV_NDR_WBINT and RPCCLI_NDR_WBINT.
      s3-waf: convert AFS_SETTOKEN and AFS into subsystems.
      s3-waf: convert PROFILE into a subsystem.
      s3-waf: convert READLINE into a subsystem.
      s3-waf: convert PASSWD_UTIL into a subsystem.
      s3-waf: convert LIBNET et al into subsystems.
      s4-waf: rename subsystem NDR_LSAPRC to NDR_LSA.
      s4-waf: add NDR_EVENTLOG.
      s3-waf: convert LIBEVENTLOG into a subsystem.
      s3-waf: install header files for our libraries.
      s3-waf: fix libnetapi and libaddns unresolved symbols.
      s3-waf: convert DISPLAY_SEC into a subsystem.
      s3-waf: add missing idmap module objectfiles.
      s3-waf: fix debug2html.
      s3-vfs: fix the build of nfs4_acls.c
      s3-waf: convert PLAINTEXT_AUTH, SLCACHE and DCUTIL into subsystems.
      s3-waf: convert LIBGPO into a subsystem.
      s3-waf: convert AUTH into subsystem.
      s3-waf: convert PDB into subsystem.
      s3-waf: convert IDMAP into subsystem.
      s3-waf: convert CHARSET into a subsystem.
      s3-waf: convert PERFCOUNT into a subsystem.
      s3-waf: convert GPEXT into a subsystem.
      s3-waf: convert VFS into a subsystem.
      s3-waf: add some module specific functions for s3 waf build.
      s3-waf: move VFS subsystem to modules/wscript_build.
      s3-waf: support --with-acl-support, at least for posix acls.
      s3-waf: move auth subsystem to auth/wscript_build.
      s3-waf: move pdb subsystem to pdb/wscript_build.
      s3-waf: move idmap subsystem to winbindd/wscript_build.
      s3-waf: move charset subsystem to modules/wscript_build.
      s3-waf: move perfcount subsystem to modules/wscript_build.
      s3-waf: move gpext subsystem to libgpo/gpext/wscript_build.
      s3-waf: rework CLDAP and LIBCLI_LDAP subsystems.
      s3-waf: add missing IDMAP modules.
      waf: add delimiter argument to TO_LIST.
      s3-waf: rework static and shared list handling a little.
      s3-waf: add two more REGF based subsystems.
      s3-waf: add PRINTING subsystems.
      s3-waf: move SERVICES into a subsystem.
      s4-smbtorture: remove unneeded dcerpc_mgmt alias.
      s4-waf: remove NDR-SRVSVC alias.
      waf: add more NDR subsystems for shared IDL files.
      s3-waf: NDR_SRVSVC is defined now from the main librpc wscript_build.
      s3-waf: link PReg parser only in registry client side extension.
      s3-waf: fix dependencies to NDR_XATTR.
      s3-waf: add NDR_PERFCOUNT subsystem.
      s4-smbtorture: rework test_EnumPrintProcessors to let it test more combinations.
      s3-spoolss: Fix _spoolss_EnumPrintProcessors error handling
      s4-smbtorture: rework spoolss_EnumPrintProcDataTypes test.
      s3-spoolss: Fix _spoolss_EnumPrintProcDataTypes error handling
      samr: add three new ACB flags to IDL.
      s3-printing: remove unused old structs.
      s3-auth_util: make sure the system server info actually contains S-1-5-18.
      s3-waf: add pam_smbpass.
      s3-waf: fix dependencies in most of our module subsystems.
      s3-waf: add vfs_linux_xfs_sgid to the list of default shared modules.
      s3-waf: add AUTH_SCRIPT module to AUTH subsystem (which is build as shared
      s3-waf: add in a little hack to deal with the ECHO rpc module for non-developer builds.
      s3-printing: skip metadata entry when traversing printerlist.
      s3-waf: add vlp binary.
      s3-waf: clean up socket-wrapper and nss-wrapper a little.
      s3-waf: add basic make test infrastructure, not able to test yet.
      s4-smbtorture: add new EnumPrinters test to test printername/servername
      s3-spoolss: Fix servername/printername handling which turns out to be very important to get right.
      spoolss: use the correct flags for spoolss_PrinterInfo1 struct.
      s3-spoolss: make sure to exit early and with the appropriate error code in
      s3-spoolss: dont overwrite location change notify.
      s3-spoolss: make sure we dont crash on NULL setprinter level2 elements as seen from win7.
      s3-net: make sure we dont crash when publishing a single printer.
      s3-net: better handle obscure 0x80070002 error reply when trying to update an
      s3-spoolss: fix do_drv_upgrade_printer() which must have been broken since the
      samba: share select wrappers.
      s3-readline: move cmd_history to smbclient, the only user.
      samba: share readline wrappers among all buildsystems.
      s3-dcerpc: no point for printing NDR twice for internal pipes in log level 10.
      testprogs: print architecture used in win32 spoolss testsuite.
      s3-spoolss: Strip off ", DrvConvert" and ",LocalOnly" in OpenPrinterEx as seen from Win7 clients.
      spoolss: fill in spoolss_AddPortEx IDL.
      spoolss: fill in spoolss_SetPort IDL.
      spoolss: fill in spoolss_DeletePort IDL.
      s3-waf: add RPCCLI_WINREG subsystem.
      s3-waf: convert NSS_INFO into a subsystem.
      s3-libndr: handle NDR_ERR_IPV6ADDRESS case in ndr_errstr().
      s3-reg_parse: fix uninitialized variable in srprs_key().
      libndr: fix "excess elements in struct initializer" warning.
      s4-selftest: move spoolss to skip list.
      s3-selftest: enable smb2 torture tests against samba3.
      s3-waf: use more of the NDR_ subsystems.
      s3-waf: add slightly different mkbuildoptions awk script for waf.
      Revert "libndr: fix "excess elements in struct initializer" warning."
      selftest: make it more obvious we only expect the printjob tests to fail.
      s3-samr: fix _samr_QueryGroupMember().
      s4-samr: Fix dcesrv_samr_QueryGroupMember.
      samr: for correctness, rename samr_RidTypeArray to samr_RidAttrArray.
      s3-docs: fix typo in "add port command" smb.conf manpage.
      s4-smbtorture: re-arrange openprinterex tests.
      s3-rpcclient: add openprinter_ex command.
      s3-spoolss: make it possible to have and announce a [prnproc$] share on the printserver.
      s3-waf: slowly getting modules to match how they look like in old build.
      s4-smbtorture: add test for openprinter printername pattern.
      s3-spoolss: fix set_printer_hnd_name() to match torture test.
      s3-spoolss: convert open_printer_hnd to return WERROR.
      s3-spoolss: let set_printer_hnd_name return WERROR.
      s3-spoolss: add more userlevel info validation to _spoolss_OpenPrinterEx.
      pidl: fix minor typo in s3 server generation.
      s3-waf: fix pdb modules build.
      s3-waf: fix the build of smbtorture.
      s3-waf: fix the build after libcli/security changes.
      s3: fix the build of idmap_adex, idmap_tdb2, idmap_hash and several vfs modules.
      s3-waf: convert rpc into a subsystem.
      s3-waf: all subsystems complete now, no need for this loop anymore.
      s3-waf: move RPC_CLIENT_SCHANNEL into a subsystem.
      s3-waf: convert LIBSMBCONF into a subsystem.
      s3-waf: more registry cleanup.
      nsstest: no need for two copies of the same tool.
      s3-selftest: add vfs_modulesdir variable for both test systems.
      s3-waf: use LZXPRESS subsystem.
      s3-waf: add vfs_time_audit to the build.
      s3-waf: add check for httpConnect and httpConnectEncrypt.
      s3-waf: add idmap_autorid to the build.
      s4-smbtorture: allow to test returned type after specific error code in PrinterData tests.
      s4-smbtorture: use test_GetPrinterData{Ex}_checktype calls in RPC-SPOOLSS tests.
      s3-rpcclient: exit early in cmd_spoolss_enum_data() when there is a failure.
      s3-spoolss: add debug statement for access denied cases in OpenPrinterEx path.
      s3-spoolss: make sure members of "BUILTIN\Print Operators" can open printers
      s3-spoolss: fix typo in debug message.
      s3-waf: move build rules into libaddns directory.
      libaddns: add dns_errstr().
      s3-net: use dns_errstr() when dns commands fail.
      s4-smbtorture: pick a better printer in RPC-SPOOLSS-ACCESS.
      s4-smbtorture: re-arrange RPC-SPOOLSS-DRIVER test a bit.
      s4-smbtorture: handle driverfile overlap during removal in RPC-SPOOLSS-DRIVER.
      s4-smbtorture: add test for Adobe PostScript driver (Win9x) installation.
      s3-selftest: add WIN40 directory to print$ share.
      s3-oldtest: add WIN40 to print$ share.
      s4-smbtorture: make driver upload/removal more robust against empty filenames.
      s4-smbtorture: make add-printerdriver test more robust against empty configfiles.
      s4-smbtorture: add torture test for cupsaddsmb win9x driver install behavior.
      s3-spoolss: Fix Bug #7641: handle win9x adddriver calls w/o config file.
      s4-smbtorture: only run the cupsaddsmb adobe driver test against s3.
      s3-waf: convert FNAME_UTIL into a subsystem.
      s3-waf: convert LIBNMB into a subsystem.
      s3-waf: convert REG_EVENTLOG into a subsystem.
      s3-waf: convert TOKEN_UTIL into a subsystem.
      s3-waf: convert PARAM_UTIL into a subsystem.
      s3-waf: convert LIBCLI_SAMR into a subsystem.
      s3-waf: convert LIBCLI_LSA into a subsystem.
      s3-waf: convert LIBCLI_NETLOGON into a subsystem.
      s3-waf: convert RPCCLI_SRVSVC into a subsystem.
      s3-waf: convert RPCCLI_WKSSVC into a subsystem.
      s3-waf: convert RPCCLI_SVCCTL into a subsystem.
      s3-waf: convert RPCCLI_DSSETUP into a subsystem.
      s3-waf: convert RPCCLI_INITSHUTDOWN into a subsystem.
      s3-waf: convert RPCCLI_DFS into a subsystem.
      s3-waf: convert RPCCLI_DRSUAPI into a subsystem.
      s3-waf: convert RPCCLI_NTSVCS into a subsystem.
      s3-waf: convert RPCCLI_EVENTLOG into a subsystem.
      s3-waf: convert RPCCLI_EPMAPPER into a subsystem.
      s3-waf: convert LIBCLI_SPOOLSS into a subsystem.
      s3-waf: let LIBSMB (in fact LIBNBT) depend on NDR_SVCCTL.
      s3-waf: let LIBSMB (in fact LIBNBT) depend on NDR_NBT.
      s3-waf: let SMBD_BASE depend on NDR_NOTIFY.
      s3-waf: add LIBDRSUAPI subsystem.
      s3-waf: convert NPA_TSTREAM into a subsystem.
      s3-waf: use TLDAP in smbtorture.
      s3-waf: use SLCACHE in ntlm_auth.
      s3-waf: convert SPNEGO_PARSE into a subsystem.
      s3-waf: convert LIBNBT into a subsystem.
      s3-waf: use LIBCLI_NDR_NETLOGON.
      s3-waf: no need to compile ../librpc/ndr/ndr_compression.c twice.
      s3-waf: convert IDMAP_ADEX into a subsystem.
      s3-waf: convert IDMAP_HASH into a subsystem.
      s3-waf: convert IDMAP_AD into a subsystem.
      s3-waf: fix LIBNBT deps.
      s3-waf: convert INIT_LSA into a subsystem.
      s3-waf: convert INIT_NETLOGON into a subsystem.
      s3-waf: convert INIT_SAMR into a subsystem.
      s3-waf: convert RPC_SAMR into a subsystem.
      s3-waf: convert RPC_LSARPC into a subsystem.
      s3-waf: avoid module name uppercasing.
      s3-waf: align some krb5/gssapi configure checks with classic build.
      s3-waf: add idmap_ldap to default static module list.
      s3-waf: add configure check for dirfd and build vfs_syncops vfs_dirsort if possible.
      s3-waf: more krb5 configure checks.
      s3-waf: more krb5 configure checks.
      s3-waf: add krb5 configure checks for enctype 23.
      s3-waf: add krb5 configure check for WRFILE_KEYTAB.
      s3-waf: add pam configure checks.
      s3-waf: fix pam dependencies of the RPC_SAMR server.
      s3-waf: fix library names (we installed liblibsmbclient, etc.)
      s3-waf: fix the build of nsstest in the non-devel build.
      s3-waf: add support for --with-dnsupdate.
      s3-waf: build vfs_fileid module if possible.
      s3-waf: add valgrind configure checks.
      s3-waf: add configure/declaration checks for fdatasync, readahead and splice.
      nss_wrapper: make nss_wrapper.pl executeable.
      s3-waf: add -Wl,--export-dynamic to LDFLAGS.
      s3-selftest: support differing VFSLIBDIR in autoconf and waf build.
      s3-waf: try to fix the build with snow leopard.
      s4-smbtorture: paranoia check for architectures in request and reply for enumdrivers test.
      s3-waf: use shared LIBASYNC_REQ subsystem.
      s3-waf: convert lib/util_tdb.c into a subsystem.
      s3-waf: convert UTIL_SRC into a subsystem samba-util, similar to the s4 one.
      s3-waf: add CHARSET subsystem.
      s3-waf: recurse into ../libcli/auth.
      s3-waf: fix pamsmbpass libwbclient dependency.
      s3-waf: check for "WITH_PAM_MODULES" to determine pam_smbpass build.
      s3-waf: add pam_ and nss_winbind.
      s3-waf: recurse into ../libcli/drsuapi.
      s3-waf: recurse into ../libcli/named_pipe_auth.
      s3-waf: recurse into ../libcli/samsync.
      s3-waf: recurse into ../libcli/smb.
      s3-waf: recurse into ../libcli/ldap.
      s3-waf: add missing libnss_wins.so.2 library.
      s3-waf: libwbclient does not depend on talloc anymore.
      s3-waf: rework rpc_server handling a bit.
      s3-waf: add libkrb5 winbind locator plugin.
      s3-waf: fix winbind-client subsystem.
      s3-waf: use shared libwbclient wscript_build.
      spoolss: fill in PerMachineConnections add and delete IDL.
      s4-waf: nsstest only needs replace.
      s3-net: fix net sid type build warning.
      s4-smbtorture: add torture_assert_strn_equal macro.
      s4-smbtorture: skipping level 8 driveradds against w2k3.
      s4-smbtorture: skip level 8 checks in test_GetDriverInfo_winreg for w2k3.
      s4-smbtorture: pass down driverosversion to test_DriverInfo_winreg.
      libcli/security: remove unused variable.
      s4-smbtorture: check if returned driver paths match requested architecture.
      s4-smbtorture: allow to call test_GetDriverInfo_winreg without printer handle.
      s4-smbtorture: run the winreg tests also against an added driver.
      s4-smbtorture: interesting, DriverDate and DriverVersion are different in w2k3 and w2k8r2.
      s4-smbtorture: add torture_assert_nttime_equal macro.
      s4-smbtorture: check the returned driver date is equal to the one we passed in.
      s4-smbtorture: fix expected driver date REG_SZ string.
      s4-smbtorture: always skip addprinter{ex} level 1 tests for now.
      s3-spoolss: handle NTTIME(0) as "01/01/1601" REG_SZ in driver dates.
      s3-printing: fix crash bug in print_spool_open().
      s3-waf: fix the build.
      testprogs: testspoolss.exe: pretty print FILETIME in driver info 6 and 8.
      s3-waf: fix the build.
      s4-smbtorture: add more tests for driver_dates.
      s4-smbtorture: fix DriverDate and DriverVersion comparison checks against w2k3.
      s4-smbtorture: setup help and dependent files in spoolss driver unc path tests.
      s4-smbtorture: in test_GetDriverInfo_winreg() always test level 6 for samba3 as
      s4-smbtorture: always setup full driver level 8 in test_add_driver_arg().
      s4-smbtorture: check driver_version equality as well.
      s3-waf: add UTIL_TDB subsystem.
      s3-waf: convert PASSCHANGE into a subsystem.
      s3-waf: convert SAMBA_VERSION into a subsystem.
      s3-rpcclient: use dcerpc_dfs_X functions.
      s3-build: no need to compile librpc/gen_ndr/cli_dfs.c anymore.
      s3-waf: no need to compile librpc/gen_ndr/cli_dfs.c anymore.
      lib/addns: move DNS client library to the main directory.
      s3-net: Fix bug #7690: retry DNS updates when connection to one nameserver has failed.
      s3-waf: make the --with-Xdir options work more like in the classic build.
      s3-waf: fix winbind_krb5_locator.so realname.
      s3-waf: recurse into ../lib/smbconf.
      s3-waf: cleanup wscript_build a little.
      s3-waf: rearrange waf recurses in main wscript_build.
      s3-waf: rename LIBCLI_NETLOGON subsystem to LIBRPCCLI_NETLOGON.
      netlogon: move netlogon helpers to ../libcli/netlogon.
      s3-build: fix classic build after libcli netlogon changes.
      s3-waf: add NMBDSOCKETDIR variable.
      libcli/security: fix sid_type_lookup().
      s3-selftest: re-sync with s4-selftest wscript.
      s3-wkssvc: prefer dcerpc_wkssvc_X functions.
      s3-waf: remove RPCCLI_WKSSVC subsystem.
      s3-build: remove RPCCLI_WKSSVC subsystem.
      s3-eventlog: prefer dcerpc_eventlog_X functions.
      s3-waf: remove RPCCLI_EVENTLOG subsystem.
      s3-build: remove RPCCLI_EVENTLOG subsystem.
      s3-initshutdown: prefer dcerpc_initshutdown_X functions.
      s3-waf: remove RPCCLI_INITSHUTDOWN subsystem.
      s3-build: remove RPCCLI_INITSHUTDOWN subsystem.
      s3-drsuapi: prefer dcerpc_drsuapi_X functions.
      s3-waf: remove RPCCLI_DRSUAPI subsystem.
      s3-build: remove RPCCLI_DRSUAPI subsystem.
      s3-waf: add checks for fallocate fallocate64.
      s3-waf: more fallocate checks stolen from autoconf.
      s3-waf: add checks for Linux readahead.
      s3-waf: add check for SO_PEERCRED.
      s3-waf: finally enable large file support.
      s3-libnetapi: add missing error check after switchting to dcerpc_wkssvc_X functions.
      s3-drsuapi: fix error handling after converting to dcerpc_drsuapi_X functions.
      s3-net: add missing breaks in switch statement in get_share_info().
      s3-net: fix query_service_state() error handling.
      s3-svcctl: prefer dcerpc_svcctl_X functions.
      s3-waf: remove RPCCLI_SVCCTL subsystem.
      s3-build: remove RPCCLI_SVCCTL subsystem.
      s3-net: restructure "net rpc service" and add open_service().
      s3-net: restructure "net rpc service" and add open_scm().
      s3-net: remove some pointless fstrings in "net rpc service".
      s3-libnetapi: prefer dcerpc_netr_X functions.
      s3-libnet: prefer dcerpc_netr_X functions.
      s3-net: prefer dcerpc_netr_X functions.
      s3-rpc_client: prefer dcerpc_netr_X functions.
      s3-winbind: prefer dcerpc_netr_X functions.
      s3-rpcclient: prefer dcerpc_netr_X functions.
      s3-waf: remove RPCCLI_NETLOGON subsystem.
      s3-build: remove RPCCLI_NETLOGON subsystem.
      s3-libnetapi: prefer dcerpc_srvsvc_X functions.
      s3-smbclient: prefer dcerpc_srvsvc_X functions.
      s3-libsmbclient: prefer dcerpc_srvsvc_X functions.
      s3-lanman: prefer dcerpc_srvsvc_X functions.
      s3-smbtree: prefer dcerpc_srvsvc_X functions.
      s3-net: prefer dcerpc_srvsvc_X functions.
      s3-rpcclient: prefer dcerpc_srvsvc_X functions.
      s3-waf: remove RPCCLI_SRVSVC subsystem.
      s3-build: remove RPCCLI_SRVSVC subsystem.
      s3-rpcclient: prefer dcerpc_winreg_X functions.
      s3-spoolss: no need to include cli_winreg header anymore.
      s3-net: prefer dcerpc_winreg_X functions.
      s3-net_registry: prefer dcerpc_winreg_X functions.
      s3-waf: remove RPCCLI_WINREG subsystem.
      s3-build: remove RPCCLI_WINREG subsystem.
      s3-waf: fix the build after rpc_winreg removal.
      s3-net: use correct spoolss header in net_ads.c.
      s3-net: use correct spoolss header in net rpc.
      s3-netlogon: no need to include ../librpc/gen_ndr/cli_samr.h anymore.
      s3-netlogon: no need to include ../librpc/gen_ndr/ndr_lsa_c.h anymore.
      s3-rpc_client: no need to include ../librpc/gen_ndr/ndr_lsa_c.h anymore.
      s3-winbind: no need to include ../librpc/gen_ndr/cli_lsa.h in
      s4-smbtorture: add some paranoia checks for 0 sized devmodes.
      s4-smbtorture: prepare devicemode test for expected result tests.
      s4-smbtorture: add tests for the size member of spoolss devicemodes.
      s3-spoolss: disallow storing an invalid devmode size.
      s4-smbtorture: make sure there is always driverextra data in spoolss devmode size tests.
      s3-spoolss: as smbtorture testing proves: devmode size is the size of the devicemode minus the driverdata extra size.
      s3-rpcclient: rename duplicate enumkey command to winreg_enumkey.
      s3-spoolss: make it more obvious what winreg_create_printer() does.
      s3-lanman: remove trailing whitespace.
      s3-rpc_client: prefer dcerpc_spoolss_X functions.
      s3-rpcclient: prefer dcerpc_spoolss_X functions.
      s3-build: remove RPCCLI_SPOOLSS subsystem.
      s3-waf: remove RPCCLI_SPOOLSS subsystem.
      s3-rpc_client: fix uninitialized variable found by -O3.
      s3-rpc_client: no need to include gen_ndr/cli_samr.h anymore.
      s3-rpc_client: fix dcerpc_try_samr_connects().
      s3-torture: fix uninitialized status code.
      s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 domains.
      s3-waf: no need anymore to include "source4" globally.
      s3-waf: fix lib/addns include path.
      s3-rpcclient: allow to define validation level for samlogon.
      s3-build: remove source4 include path for autoconf build as well.
      s3-waf: add PKGCONFIGDIR.
      libndr: move ndr_print_bool to ndr_basic.c
      waf: share libndr.so between samba3 and samba4.
      s3-libndr: remove cmdline_lp_ctx.
      idl: add file_id idl.
      Revert "s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 domains."
      Revert "s3: These assignments are overwritten immediately"
      s3-winbind: share a common winbind_samlogon_retry_loop().
      s3-build: remove another leftover of -I../source4.
      s3-rpc_client: remove some more obsolete cli_X.h header files.
      s4-smbtorture: add NDR tests for netr_LogonSamLogon.
      s4-smbtorture: add (disabled) ndr torture test to check for a w2k samlogon reply we can't currently parse.
      s3-rpcclient: use struct based dcerpc_spoolss_EnumPrinterData_r() call.
      s3-net: use struct based dcerpc_spoolss_EnumPrinterData_r() call.
      s3-waf: these libs are not private libs.
      nsswitch: libwbclient has vnum 1 now.
      s3-waf: On FreeBSD, compile zfsacl if sunacl.h is around.
      s4-smbtorture: make it more obvious this are w2k dumps in netlogon ndr test.
      s4-smbtorture: add samr_changepassworduser3 ndr torture tests.
      s3-libnetapi: prefer dcerpc_samr_X functions in lib/netapi/group.c.
      s3-libnetapi: prefer dcerpc_samr_X functions in lib/netapi/localgroup.c.
      s3-libnetapi: prefer dcerpc_samr_X functions in lib/netapi/samr.c.
      s3-libnetapi: prefer dcerpc_samr_X functions in lib/netapi/user.c.
      s3-libnet: prefer dcerpc_samr_X functions.
      s3-rpcclient: prefer dcerpc_samr_X functions.
      s3-lanman: prefer dcerpc_samr_X functions.
      s3-net: add net_scan_dc non-ad variant.
      s3-waf: fix the build after linux netlink changes.
      s3-net: prefer dcerpc_samr_X functions in net_rpc_sh_acct.c.
      s3-net: prefer dcerpc_samr_X functions in rpc_info_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_sh_handle_user.
      s3-net: prefer dcerpc_samr_X functions in rpc_sh_user_show_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_sh_user_str_edit_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_sh_user_flag_edit_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_group_delete_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_add_groupmem.
      s3-net: prefer dcerpc_samr_X functions in rpc_add_aliasmem.
      s3-net: prefer dcerpc_samr_X functions in rpc_del_groupmem.
      s3-net: prefer dcerpc_samr_X functions in rpc_del_aliasmem.
      s3-net: prefer dcerpc_samr_X functions in rpc_group_list_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_list_group_members.
      s3-net: prefer dcerpc_samr_X functions in rpc_list_alias_members.
      s3-net: prefer dcerpc_samr_X functions in rpc_group_members_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_fetch_domain_aliases.
      s3-net: prefer dcerpc_samr_X functions in rpc_aliaslist_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_trustdom_add_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_trustdom_del_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_trustdom_list.
      s3-winbind: use status variable name in cm_connect_sam.
      s3-winbind: prefer dcerpc_samr_X functions in cm_connect_sam.
      s3-winbind: prefer dcerpc_samr_X functions in invalidate_cm_connection.
      s3-winbind: prefer dcerpc_samr_X functions in winbindd/winbindd_samr.c.
      s3-winbind: prefer dcerpc_samr_X functions in winbindd/winbindd_rpc.c.
      s3-winbind: prefer dcerpc_samr_X functions in winbindd/winbindd_pam.c.
      s3-winbind: prefer dcerpc_samr_X functions in winbindd/winbindd_msrpc.c.
      nsswitch: remove unused code from wbinfo.c
      s3: Remove superfluous ;
      s3-dssync-passdb: add basic routines and net function.
      s3-dssync-passdb: fill in passdb_startup.
      s3-dssync-passdb: fill in passdb_finish.
      s3-dssync-passdb: fill in passdb_process_objects
      s3-waf: fix the build after epmapper changes.
      s3-waf: fix the build after libnet changes.
      s3-net: use status variable in net_rpc_join_newstyle.
      s3-net: prefer dcerpc_samr_X functions in net_rpc_join_newstyle.
      s3-build: remove RPCCLI_SAMR subsytem.
      s3-waf: remove RPCCLI_SAMR subsystem.
      s3-libnetapi: prefer dcerpc_lsa_X functions.
      s3-libnet: prefer dcerpc_lsa_X functions.
      s3-libsmb: prefer dcerpc_lsa_X functions.
      s3-rpcclient: use status variable.
      s3-rpcclient: prefer dcerpc_lsa_X functions.
      s3-rpcclient: prefer dcerpc_lsa_X functions.
      s3-rpcclient: prefer dcerpc_lsa_X functions.
      s3-net: use status variable in "net rpc audit".
      s3-net: prefer dcerpc_lsa_X functions in "net rpc audit".
      s3-net: prefer dcerpc_lsa_X functions in "net rpc join".
      s3-net: prefer dcerpc_lsa_X functions in net_util.c
      s3-net: use status variable in "net rpc rights".
      s3-net: prefer dcerpc_lsa_X functions in "net rpc rights".
      s3-net: prefer dcerpc_lsa_X functions in "net rpc".
      s3-epmap: use correct dcerpc client header in dcerpc_ep.c
      s3-winbind: prefer dcerpc_lsa_X functions in winbindd/winbind_cm.c
      s3-winbind: prefer dcerpc_lsa_X functions in winbindd/winbindd_samr.c.
      s3-winbind: prefer dcerpc_lsa_X functions in winbindd/winbindd_rpc.c.
      s3-build: remove RPCCLI_LSA subsystem.
      s3-waf: remove RPCCLI_LSA subsystem.
      s3-build: remove --samba3-ndr-client from build_idl.sh script.
      s3-waf: no need to call pidl with --samba3-ndr-client anymore.
      s3-auth: add copy_netr_SamBaseInfo().
      s3-winbindd: let winbind try to use samlogon validation level 6. (bug #7945)
      s3-waf: add support for iprint.
      s3-waf: recurse into ../lib/util/wscript_configure
      s3-netlogon: fix typo.
      s3-waf: add --with-syslog option.
      s3-waf: only build auth_netlogond in developer build.
      s3-waf: add support for --with-aio-support.
      s3-waf: fix the build after winreg and rpc services changes.
      s3-waf: fix wrong check for vfs_aio_fork dependencies.
      waf: add clock_gettime clock ID checks to libreplace wscript.
      s3-waf: add --with-automount option.
      ndr: merge duplicate ndr_map_error2ntstatus() functions.
      ndr: move null_ndr_syntax_id to the common libndr location.
      ndr: merge ndr_map_error2string and ndr_errstr.
      libndr: share some uuid helpers.
      pam: share pam errors in a common location.
      libndr: apply some const and make is_valid_policy_hnd a callback to policy_handle_empty.
      lib/compression: add shared wscript_build.
      s4-waf: split out wscript_build for ndrdump binary.
      s4-smbtorture: also run the driver timestamp spoolss test against samba.
      s3-selftest: mark the driver timestamp test as knownfail for now.
      s4-smbtorture: add torture test to check proper add and delete driver operations.
      s3-spoolss: Dont wipe out all drivers when only one should be deleted.
      waf: bring back shared Makefile and configure (needed by s3-waf).
      s3-selftest: let valgrindtest use the new make test.
      selftest: remove make oldtest.
      s3-waf: support non-default krb5-config and cups-config locations.
      s3-waf: check k5crypto in some more locations.
      s3-waf: as long as we dont have --with-featureX=yes|no|auto handling, avoid exiting.
      s3-waf: we check for attr in ../lib/util/script already, so we cannot set to EMPTY here.
      s3-waf: make sure we dont activate dnsupdate support w/o gssapi.
      s3: remove unused struct uuid_flat.
      s3: move some stuff out of smb.h to better locations.
      s3-waf: make ads support detection a little more robust.
      s3: give ../librpc/ndr/util.c its own header.
      s3-waf: fix krb5 checks logic.
      s3-waf: fix the build after auth changes.
      librpc: move preg.idl to main directory.
      socket_wrapper: avoid c++ style comments.
      s3-oldtest: remove unused tests_all.sh file.
      s3-system: fix malloc/talloc mismatch in sys_popen().
      s3-waf: better checks for gssapi support.
      s3-waf: fix cups checks when lib is there but headers aren't.
      s3-waf: do not make pam support mandatory.
      s3-rpc_server: move services into individual directories.
      s3-waf: dont try to redefine 'pam', we checked above...
      s3-selftest: run the three net tests individually.
      s3-waf: try to fix the {net|free|open}bsd build.
      s3-selftest: remove some more unused test functions.
      s3-waf: try to deal with system w/o ldap; also move module processing to the end of wscript.
      s3-libads: make ads_guess_service_principal static.
      s3-libnet: fix a WITH_ADS / HAVE_ADS mismatch.
      s3-libsmb: fix ifdef check in ads_dc_name.
      waf: substitute '/' in -D static defines as well.
      s3-waf: rework the way SMBLDAP subsystem is built a little.
      s3-waf: use bld.env.HAVE_LDAP in some more places, hopefully fixes the builds w/o ldap.
      waf: pure cosmetic reformatting of the two samba-util object lists (to ease comparing).
      s3-waf: move all error mappings to errors subsystem.
      s3-waf: try to deal with underlinked cups libraries.
      s3-selftest: revamp selftest wscript with s4 one.
      s3-rpc_server: fix some buildwarnings in non-developer mode.
      s3-waf: next attempt to fix cups and non-cups builds.
      libcli/auth: fix PAM_ERRORS subsystem build.
      s3-waf: try to fix the netbsd build and add -lintl to the 'net' binary.
      s3-librpc: remove duplicate prototypes.
      s3-proto: remove prototype for non-existing functions.
      s3: move some defines to a better place.
      s3-librpc: no need to globally include endpointmapper headers.
      s3-waf: add UTIL_TEVENT subsystem (as in ../lib/util/wscript)
      s4-readline: remove leftover from readline merge.
      librpc: make NDR_KRB5PAC a shared library (libndr-krb5pac.so).
      s3-selftest: when skipping tests, use the selftest/skip file.
      s3: no need to globally include intl.h.
      s3-waf: TLDAP is only needed by pdb_ads (and smbtorture).
      s3-selftest: move all skipped test to skiplist.
      s3-waf: fix the build.
      s3-librpc: move server_id marshalling to own helper file.
      s3-lsa: add create_lsa_policy_handle().
      s3-lsa: add LSA_HANDLE_TRUST_TYPE.
      s3-lsa: implement _lsa_CreateTrustedDomainEx2().
      s3-lsa: implement _lsa_CreateTrustedDomainEx().
      s3-lsa: implement _lsa_CreateTrustedDomain().
      s3-lsa: add lsa_lookup_trusted_domain_by_name and lsa_lookup_trusted_domain_by_sid.
      s3-lsa: implement _lsa_DeleteTrustedDomain().
      s3-lsa: implement _lsa_QueryTrustedDomainInfo().
      s3-lsa: implement _lsa_QueryTrustedDomainInfoBySid().
      s3-lsa: implement _lsa_QueryTrustedDomainInfoByName().
      s3-lsa: implement _lsa_CloseTrustedDomainEx().
      s3-lsa: implement _lsa_OpenTrustedDomain().
      s3-lsa: implement _lsa_OpenTrustedDomainByName().
      s3-build: move priv2ld proto to smbldap.h (in order to fix non-ldap builds).
      s3-waf: add check for "struct dirent64".
      s3-waf: add check for fcntl locking.
      s3-waf: add check for broken (glibc2.1/x86) 64 bit fcntl locking.
      s3-waf: add check for "struct flock64".
      s3-waf: add check for hires timestamps in struct stat.
      s3-waf: add check for posix_fadvise().
      s3-waf: add check for various sysconf() variables.
      s3-waf: add check for __NR_inotify_init declaration.
      s3-waf: add some missing checks for macosx.
      s3-waf: add check for struct stat st_flags member.
      s4-waf: move wbinfo buildrule to winbind.
      s3-waf: make most of the nsswitch common.
      nsswitch: make wb_reqtrans a common subsystem.
      s3-waf: move libsmb/clikrb5.c and libads/kerberos.c into KRBCLIENT.
      libndr: remove prototype for nonexisting function ndr_print_ipv4_addr().
      s3-selftest: make sure we really use --format=subunit when calling smbtorture4.
      s3-waf: add check for "struct utimbuf".
      s3-waf: add check for "struct sigevent" and some of its members.
      s3: add server_id.idl and use only autogenerated code.
      s3-passdb: add PDB_CAP_TRUSTED_DOMAINS_EX.
      s3-lsa: only proceed in _lsa_EnumTrustedDomainsEx when backend has trusted domain support.
      s3-lsa: in _lsa_QuerySecurity() query the sd from the lsa policy handle.
      s3-lsa: support trust objects in _lsa_QuerySecurity().
      s4-smbtorture: add more complex spoolss_EnumPrinterDataEx test.
      s3-waf: fix popt support.
      s3-waf: we need to globally -Ilib/replace
      nsswitch: make libwbclient a public library again.
      s3-smbsharemodes: libsmbsharemodes does neither depend on krb5 or ldap.
      s4-smbtorture: fix trailing whitespace in raw.write test.
      s4-smbtorture: fix some indent in raw.write test.
      s4-smbtorture: use torture_comment() instead of printf in raw.write test.
      s3-pdb_ipa: remove uninitialized (and unused) status code.
      s3-lsa: fix some uninitialized variables in our lsa server.
      s3-waf: add check for /proc/sys/kernel/core_pattern.
      s3-waf: add check for TIME_T_MAX.
      s3-waf: add check for makedev().
      s3-waf: add check for realpath() NULL arg.
      s3-waf: add check for ftruncate extend.
      s3-waf: add replacetort binary.
      s3-printing: isolate print notification prototypes better.
      s3-printing: fix pcacp prototypes and includes.
      s3-printing: only include printing where really needed.
      s3-printing: move more printing structs to printing.h
      s3-includes: move some chgpasswd related defines to the locations where they are used.
      s3-waf: make sure ENABLE_BUILD_FARM_HACKS is enabled when run on the buildfarm.
      s3-waf: add check for sendfile on linux.
      s3-waf: add check for sendfile on freebsd.
      s3-waf: add check for sendfile on hpux.
      s3-waf: add check for sendfile on solaris.
      s3-waf: add check for sendfile on AIX.
      s3-waf: add check for TDB_ERR_NESTING.
      s3-waf: add check for getspnam().
      Revert "s3-waf: make use of LIBCLI_CLDAP subsystem"
      s3-waf: move some parts of auth to AUTH_COMMON to avoid duplicate symbols with winbindd.
      lib/util/charset: ICONV_WRAPPER needs talloc.
      s3-proto: remove some prototypes of non-existing functions.
      s3-waf: move GROUPDB into libpassdb.so.
      s3-waf: rename LIBSAMBA subsystem to LIBNTLMSSP (which it is in fact).
      s3-waf: remove more unused variables.
      s3-waf: start adding checks for quota support.
      s3-docs: document all wbinfo options.
      s3-printing: move more printing defines out of includes.h
      s3-errormap: move (unused) map_nt_error_from_wbcErr out of errormap.
      s3-vfs: make syncops_connect in modules/vfs_syncops.c static.
      s3-libads: make ndr_print_ads_auth_flags() static.
      s3-torture: fix the build of rpc_open_tcp.
      s3-server_id: only include server_id where needed.
      rap: add rap_NetSessionEnum to IDL.
      s4-smbtorture: add smbcli_rap_netsessionenum().
      s4-smbtorture: add netsessionenum rap torture test.
      s3-lanman: talk to srvsvc dcerpc server in api_RNetSessionEnum().
      s3-sessionid: avoid global include of sessionid.h
      s3-libds: use already existing ../libds/common/flag_mapping.h header.
      s3-proto: fix some inline comments.
      s3-includes: remove global include of system/readline.h.
      lib/util: LIBCRYPTO is in common already, so add it to samba-util-common.
      libreplace: move "struct timespec" checks into libreplace (where timespec is already used).
      s3-waf: add check for HAVE_FUNCTION_ATTRIBUTE_DESTRUCTOR.
      s3-waf: add check for SEEKDIR_RETURNS_VOID.
      nterr: remove trailing whitespace.
      nterr: remove space indents (use tabs instead), following coding standards.
      s3-nterr: make nt_err_desc static const.
      s4-nterr: add _N macro handling as in s3-nterr.
      nterr: make sure both nt_errs structs are the same.
      nterr: make sure both nt_err_desc structs are the same.
      s3-nterr: within nt_errstr() compare codes using NT_STATUS_V().
      s4-nterr: some minor cosmetic edits to further match s3 nterr.
      s4-nterr: move auth_nt_status_squash to nt_status_squash and move to nterr.c
      s3-nterr: use strcasecmp in nt_status_string_to_code().
      s3-waf: add wildcard commands from main wscript.
      s3-idmap: fix the build of idmap_tdb2.
      s3-selftest: no need to run rpc.samba3.netlogon twice.
      s3-epmap: fix uninitialized variable in ep_register()
      s3-epmd: remove some unused variables.
      s3-waf: fix the build.
      s3-selftest: add pattern test of dcerpc binding options (using rpc.lsa.lookupsids).
      s3-selftest: only run smbtorture4 tests when smbtorture4 is available.
      s3-rpc_server: handle DCERPC_AUTH_LEVEL_CONNECT in api_pipe_bind_req().
      s3-selftest: remove *ncacn_ip_tcp* from knownfail list.
      s3-selftest: no point in testing smb2 via ncacn_ip_tcp.
      s3-selftest: properly move connect to seal options.
      s3-selftest: run a couple of dgram NBT tests against s3.
      s3-waf: fix typo.
      waf-selftest: allow to call "make test SUBUNIT_FORMATTER=cat".
      s3-build: remove -I../lib/addns.
      s3-selftest: add another flaky s3-torture test to knownfail, this time OPLOCK4.
      s3-build: share smbtorture4 build rules with s3-waf build.
      s3-libsmb: only include rap client when needed.
      s4-smbtorture: check for username and computername presence in rap_netsessionenum test.
      s4-rap: decouple rap client code from torture binary, add new LIBCLI_RAP subsystem.
      s4-rap: remove last iconv_convenience traces from rap client and test code.
      s3-build: try to silence annoying "Ignoring invalid value 'vlp' for parameter 'printing'"
      libcli/security: move display_sec headers to own header file and add to
      s3-libsmb: move smb encryption structs into own header.
      s3-includes: avoid global include of gssapi headers.
      s3-build: stop including ldap and lber headers everywhere in the code.
      s4-smbtorture: use torture_fail/-assert api in torture_samba3_hide().
      s4-smbtorture: remove duplicate if branch in raw.write test.
      s4-smbtorture: use torture_fail and _skip in raw.write test.
      s4-smbtorture: remove explicit mem_ctx from torture_netlogon_samba3().
      s4-smbtorture: use torture_fail and _assert macros in torture_netlogon_samba3().
      s4-smbtorture: use torture_assert in samr large-dc test.
      s3-msdfs: avoid global inclusion of msdfs.h.
      s3-interfaces: only include interfaces.h where needed.
      s3-packet: only include packet.h where needed.
      s4-smbtorture: remove explicit mem_ctx from torture_samba3_rpc_getusername().
      s4-smbtorture: use torture_fail and _assert in torture_samba3_rpc_getusername().
      s4-smbtorture: use torture_assert in torture_samba3_rpc_sharesec().
      s3-build: only include asn1 headers where actually needed.
      s3-username: rename static getpwnam_alloc to getpwnam_alloc_cached.
      s4-smbtorture: more torture_fail usage in raw.write test.
      s3-waf: move HAVE_LDAP_SASL_WRAPPING define to the HAVE_LDAP block.
      s3-waf: add --with-pam_smbpass configure option.
      s3-utils: run minimal_includes.pl over utils/*.c
      s4-smbtorture: remove trailing whitespace from raw.eas test.
      s4-smbtorture: use torture_context in raw.eas test.
      s4-smbtorture: use torture_assert_ and comment functions in raw.eas test.
      rap: add rap_NetUserAdd IDL.
      s4-libcli/rap: add smbcli_rap_netuseradd().
      rap: add rap_NetUserDelete IDL.
      s4-libcli/rap: add smbcli_rap_netuserdelete().
      s4-smbtorture: add test for rap_NetUserAdd().
      s3-net: make sure we set correct default user flags in rap_user_add().
      s4-smbtorture: add test for rap_NetUserDelete().
      rap: add rap_NetSessionGetInfo to IDL.
      s4-libcli/rap: add smbcli_rap_netsessiongetinfo().
      s4-smbtorture: add missing error code check in test_netsessionenum().
      s4-smbtorture: add netsessiongetinfo() test.
      s3-registry: remove some unused headers.
      s3-waf: enable nss_winbind in make test for nss_wrapper.
      s4-libcli/rap: add NDR_RAP dependency to LIBCLI_RAP.
      s3-build: use HAVE_ADS define in some more places.
      s3-waf: use HAVE_ADS env to decide whether to build libads.so
      wafsamba: add -Wcast-qual only to the toplevel (s4) build.
      s3-includes: remove unused cmdline_lp_ctx.
      s3-proto: remove some duplicate prototypes.
      s3-globals: silence build warning in smbd_messaging_context().
      s3-smbta-util: fix some buildwarnings.
      s3-rpc_client: actually call lsa_open_policy2() in rpccli_lsa_open_policy2().
      librpc: bring more librpc prototypes in common.
      s3-prototypes: remove protos of some dead functions.
      s3-netapi: use cli_get_session_key() in netapi.
      s3-ldapsam: fix ldapsam_create_user() with existing posix accounts.
      s3-rpc_server: remove two uneeded include registry/reg_parse_prs.h
      s3-charcnv: remove unused labels.
      s3-netapi: fix memoryleak while not using talloc_tos() in cli_get_session_key() usage.
      s3-waf: fix spoolssd compile.
      s3-libsmb: remove duplicate NTSTATUS variable.
      lib/util/util_pw: temporary rename of getpwnam_alloc and getpwuid_alloc.
      lib/util/util_pw: share sys_get{pw,gr} group of calls.
      lib/util/util_pw: share more code between lib/util/util_pw.c and source3/lib/username.c
      s3-winbind: remove global inclusion of libwbclient.
      s3-trans2: only include trans2.h where needed.
      s3-includes: only include system/syslog.h when needed.
      s3-includes: only include system/iconv.h when needed.
      s3-includes: only include system/glob.h when needed.
      s3-includes: only include system/capability.h when needed.
      s3-includes: only include system/terminal.h when needed.
      s3-includes: remove global include of "system/select.h".
      s3-includes: only include system/shmem.h when needed.
      s3-includes: only include system/passwd.h when needed.
      s3-includes: remove global include of "system/network.h"
      s3-includes: only include system/filesys.h when needed.
      s3-includes: remove EILSEQ check, this is handled by
      s3-includes: no point in including all security headers globally.
      registry: create and use shared libcli/registry/util_reg.h header.
      s3-build: only include transfer_file.h where needed.
      s3: create_builtin_users/administrators belongs to passdb not auth.
      s3-groupdb: move groupdb headers to groupdb/proto.h.
      s3-passdb: move passdb headers to passdb/proto.h.
      s3-passdb: move mapping.h into passdb.h, its needed here.
      s3-passdb: add passdb.h where needed.
      s3-proto: add some forward declarations.
      s3-passdb: add machine_sid.h and lookup_sid.h
      s3-winbindd: copy acct_info to wb_acct_info so we dont need passdb for it.
      s3-passdb: move util_wellknown.c out of passdb.
      s3-passdb: move util_unixsids.c out of passdb.
      s3-passdb: move util_builtin.c out of passdb.
      s3-passdb: use passdb headers where needed.
      s3-passdb: finally stop including passdb.h globaly.
      s3-build: only include intl protos where needed.
      s3: move filename_util.c out of source3/smbd to source3/lib.
      s3-smbd: add smbd.h and move smbd prototypes to smbd/proto.h.
      s3: include smbd/smbd.h where needed.
      s3-vfs: include smbd/smbd.h in vfs modules.
      s3: auth also needs parts of smbd.
      s3: printing needs parts of smbd.
      s3: rpc_server needs parts of smbd.
      s3: finally remove global include of smbd prototypes.
      s3-locking: move locking prototypes out of proto.h.
      s3-libsmb: put namequery headers to nmblib.h
      s3-auth: move auth prototypes to auth/proto.h.
      s3-auth: use auth.h where needed.
      s3-auth: rpc_server needs auth.h
      s3-auth: smbd needs auth.h
      s3-auth: printing needs auth.h
      s3-auth: vfs modules need auth.h
      s3-includes: finally remove global include of auth.h.
      s3-prototyes: user_in_netgroup and user_in_list moved to auth, out of smbd.
      s3-messages: only include messages.h where needed.
      s3-messages: make ndr_messaging.h part of messages.h.
      pidl: add an include for "ntdomain.h" for s3 server stubs.
      s3-includes: only include ntdomain.h where needed.
      s3-passdb: move lsa_dom_info and lsa_name_info out of smb.h into passdb.
      s3: include ../librpc/gen_ndr/lsa.h where needed.
      s3: only include lib/privileges.h where needed.
      s3: only include ntioctl.h where needed.
      s3-rpc_server: move access check functions out of samr server.
      s3-ctdb_wrap: remove unused variable from db_ctdb_fetch_persistent().
      s3: try to fix the build on some non-linux buildfarm machines.
      s3: Fix Coverity ID 2041, "UNUSED_VALUE"
      s3-vfs_solarisacl: try to fix the solaris build.
      s3-winbind: try to fix the build on hosts w/o winbind support.
      s3-proto: pure cosmetics, remove some generated comments.
      s3-passdb: move some passdb defines to passdb.h
      s3-passdb: move LOOKUP_NAME_ flags to passdb where they belong to.
      s3-vfs acl modules: more non-linux build fixes.
      s3-smbd: try to fix the irix build.
      s3-vfs: try to fix build of aio_fork module.
      s3-build: make it a little easier to build smbtorture4.
      rep_parse_prs: remove some dead, unused code.
      s3-rpcclient: include rpc_client/cli_pipe.h globally in rpcclient.h
      s3-libndr: add ../librpc/ndr/libndr.h include in some places.
      s3-idmap: fix the build of idmap_hash on FreeBSD.
      s3-samr: make getgrgid() failure a little more visible in _samr_CreateDomAlias().
      s3-waf: fix typo in ctdb checks.
      s3-smbldap: support storing octet_strings/DATA_BLOBs.
      s3-ipasam: rename of smbldap_make_mod_blob to _smbldap_make_mod_blob.
      lsa: use lsa_TrustedAccessMask in some more places in the lsa IDL.
      s4-smbtorture: fix lsa forest trust test.
      s3-rpc_client: move rpc_cli_transport structs and protos to rpc_transport.h
      s3-librpc: let librpc/rpc/dcerpc.h include ndr and generated dcerpc headers.
      s3-netapi: add libnetapi_get_binding_handle().
      s3-netapi: use libnetapi_get_binding_handle().
      s3-netapi: use dcerpc_try_samr_connects().
      s3: add some forward declarations.
      s3-util: separate out cmdline helpers.
      s3-util_sock: very brief documentation for open_socket_out().
      s3-cli_pipe: fix timeout in rpc_pipe_open_tcp_port().
      s3-netapi: remove two shadowed variables.
      s3-rpc_client: add and use rpc_client/rpc_client.h.
      s3-build: finally remove references to ndr and dcerpc headers that were included globally.
      s3-includes: move struct pipe_open_rec to srvsvc rpc server.
      s3-includes: remove unused schema_types enum.
      s3-includes: include lib/util/debug.h headers in includes.h not smb.h
      s3-includes: absolutely no need to globally include debugparse.h
      s3-includes: only include acl prototypes when needed.
      s3: fix the build of --with-profiling-data.
      s3-waf: add --with-profiling-data configure option.
      s3: only include smb profiling where needed.
      s3-includes: move readahead prototype to its only user.
      s3-build: make sure we pick up system tdb and talloc via #include.
      s3-waf: try to fix the non-ldap-but-krb5 build.
      s3-build: fix the --with-profiling-data build on mac os x.
      s3-waf: only LIBNMB needs to linked against -lresolv.
      s3-utils: Fix Bug #8106. Fix the build of smbget on HP NonStop.
      s3-netapi: Fix Coverity CID #2302: FORWARD_NULL
      s3-waf: check for pthread support.
      s3-waf: add pthreadpool support.
      s3-build: remove some unused headers.
      s3-tsocket: only include ../lib/tsocket/tsocket.h where needed.
      s3-tevent: only include ../lib/util/tevent wrappers where needed.
      s3-proto: remove remaining nss_info prototypes to nss_info.h
      s3-proto: move more librpc prototypes to librpc/rpc/dcerpc.h
      s3-proto: move rpc_server/rpc_handles.c protos to ntdomain.h
      s3-rpc_server: remove some unneeded headers.
      s3-proto: remove duplicate prototypes.
      s3-proto: move more headers to rpc_server/rpc_ncacn_np.h where they origin from.
      s3-proto: move rpc_srv_register protos and structs to town headerfile.
      s3-util: move valid_share_pathname() to lib/util.c
      s3-rpc_server: remove proto of nonexisting function
      s3-proto: move more rpc_server prototypes out of proto.h
      s3-proto: move remaining spoolss protos to own header file.
      s3-proto: move remaining srvsvc protos to own header file.
      libcli/named_pipe_auth: add forward declaration in npa_tstream.h.
      s3-printing: avoid using pipes_struct when only session_info is needed.
      s3-smbd: avoid using pipes_struct when only session_info is needed.
      s3-printing: include ../librpc/ndr/libndr.h  in ads printing.
      s3: move pipe_auth_data to dcerpc.h
      s3: remove various references to server side dcerpc structs (which are not needed).
      s3-winbindd: remove unused headers.
      s3-rpc_server: add pipes_struct forward declaration.
      s3: include ntdomain.h before including generated srv_ headers.
      s3-spoolss: remove another unused header.
      s3-rpc_server: (re)move last globally included rpc_server prototypes.
      s3-proto: move remaining krb5 protos to krb5_protos.h
      s3-system: move LOCK_ defines to lib/system.c
      s3-includes: remove ipv6 related prototype which is already defined in ../lib/util/util_net.h.
      s3-includes: move enum flush_reason_enum to smb.h
      s3-includes: when MADVISE support was reverted back in 2009, someone forgot this hunk.
      s3-vfs: make vfswrap_llistxattr and vfswrap_flistxattr static.
      s3-waf: add vfs_gpfs_hsm_notify to the build.
      s3-auth: run minimal_includes.pl
      s3-lib: run minimal_includes.pl.
      s3-libads: run minimal_includes.pl.
      s3-libnet: run minimal_includes.pl.
      s3-libsmb: run minimal_includes.pl.
      s3-param: run minimal_includes.pl.
      s3-printing: run minimal_includes.pl.
      s3-rpcclient: run minimal_includes.pl.
      s3-rpc_client: run minimal_includes.pl.
      s3-rpc_server: run minimal_includes.pl.
      s3: only include tdb headers where needed.
      tdb: fix a build warning.
      libcli/security: fix build warning, cr_descr_log_acl() is not used currently.
      s3-spoolss: remove unused struct in construct_notify_printer_info().
      s3-proto: remove some duplicate prototypes.
      s3-libsmb: move protos to libsmb/proto.h
      s3-includes: finally only include client.h when libsmb is used.
      s3-includes: no need to globally include libads/ads_status.h.
      s4-smbd: fix randseed_init() usage.
      s3-spoolss: fix debug statement in spoolss_addprinterex_level_2().
      s4-smbtorture: restructure documentname handling in spoolss test a bit.
      s3-smbd: fix the AIX 5.3 build.
      s3-build: move MAP_FILE define to the only place used.
      s3-vfs: rename open function to open_fn.
      s3-proto: move more rpc client prototypes to cli_pipe.h.
      s3-vfs: try to fix the Tru64 build.
      Revert "s3-vfs: try to fix the Tru64 build."
      s3-waf: fix typo in comment.
      s3-waf: try to fix the build on sunos5.
      s3-vfs: another attempt to fix the Tru64 build.
      s3-printing: very obvious fix for cups_pull_comment_location().
      s3-printing: Fix double free of cups request.
      s3-printing: make cups_pull_comment_location() work again.
      s3-waf: stop building smbtortre4.
      s3-lib/smbconf: fix uninitialized error code in smbconf_reg_init().
      libcli/auth/krb5_wrap: correctly use discard_const().
      s3-libnetapi/libnetjoin: fix uninitialized variables after the libsmbconf changes.
      s3-libnetjoin: fix uninitialized variable.
      s3-net: fix potential crash bug in display_print_driver3().
      s3-rap: add rap_NetRemoteTOD to IDL.
      s4-libcli/rap: add smbcli_rap_netremotetod().
      s4-smbtorture: add test_netremotetod.
      s3-printing: Get the location info from cups.
      s3-selftest: no point in running base.chkpath and base.delaywrite twice.
      lib/util/charset: fix the toplevel MacOS X build.
      s3-smbtorture: fix build warning (shadowed NTSTATUS variable).
      s3: fix some -Wunused-but-set-variable build warnings.
      s3-libsmb: fix build warning of cli_qfilename().
      s3-utils: fix another -Wunused-but-set-variable build warning.
      s3: fix more -Wunused-but-set-variable build warnings.
      s3-spoolss: fix -Wunused-but-set-variable build warning in _spoolss_EnumPrintProcDataTypes().
      s3-winbindd: make sure we obey the -n switch also for samlogon cache access.
      s3-winbind: always use samlogon cache for wbinfo -r, even when caching is
      auth/auth_sam_reply.h: fix licence/copyright
      lib/util/data_blob.h: fix licence/copyright
      lib/util/time.h: fix licence/copyright
      lib/util/util_ldb.h: fix licence/copyright
      lib/util/util_tdb.h: fix licence/copyright
      lib/util/wrap_xattr.h: fix licence/copyright
      libcli/auth/msrpc_parse.h: fix licence/copyright
      libcli/ldap/ldap_ndr.h: fix licence/copyright
      libcli/nbt/nbt_proto.h: fix licence/copyright
      libcli/security/secdesc.h: fix licence/copyright
      libcli/smbreadline/smbreadline.h: fix licence/copyright
      libds/common/flag_mapping.h: fix licence/copyright
      librpc/ndr/ndr_backupkey.h: fix licence/copyright
      librpc/ndr/ndr_compression.h: fix licence/copyright
      librpc/ndr/ndr_dns.h: fix licence/copyright
      librpc/ndr/ndr_spoolss_buf.h: fix licence/copyright
      librpc/ndr/ndr_table.h: fix licence/copyright
      nsswitch/pam_winbind.h: fix licence/copyright.
      nsswitch/winbind_client.h: fix licence/copyright
      source3/include/krb5_env.h: fix licence/copyright
      source3/include/krb5_protos.h: fix licence/copyright
      source3/include/mangle.h: fix licence/copyright
      source3/include/smb_krb5.h: fix licence/copyright
      source3/include/smb_ldap.h: fix licence/copyright
      source3/intl/lang_tdb.h: fix licence/copyright
      source3/lib/netapi/libnetapi.h: fix licence/copyright
      source3/lib/privileges.h: fix licence/copyright
      source3/libads/ads_ldap_protos.h: fix licence/copyright
      source3/libads/ads_status.h: fix licence/copyright
      source3/libads/cldap.h: fix licence/copyright
      source3/libads/ldap_schema.h: fix licence/copyright
      source3/libnet/libnet_join.h: fix licence/copyright
      source3/libsmb/clidgram.h: fix licence/copyright
      source3/libsmb/errormap_wbc.h: fix licence/copyright
      source3/libsmb/libsmb.h: fix licence/copyright
      source3/libsmb/nmblib.h: fix licence/copyright
      source3/libsmb/proto.h: fix licence/copyright
      source3/printing/load.h: fix licence/copyright
      source3/printing/pcap.h: fix licence/copyright
      source3/rpc_client/cli_netlogon.h: fix licence/copyright
      source3/rpc_client/cli_spoolss.h: fix licence/copyright
      source3/rpc_client/init_lsa.h: fix licence/copyright
      source3/rpc_client/init_netlogon.h: fix licence/copyright
      source3/rpc_client/init_samr.h: fix licence/copyright
      source3/rpc_client/init_spoolss.h: fix licence/copyright
      source3/rpc_client/util_netlogon.h: fix licence/copyright
      librpc: fix buildwarning in NDR_WMI.
      s4-smbtorture: use ipv4 addresses for backchannel spoolss change notify
      s4-smbtorture: rework the spoolss notify test a bit.
      s3-waf: add some missing tdb dependencies.
      s3-waf: remove s3-waf specific dynconfig.
      s3-waf: lowercase popt_samba3 library name.
      s3-waf: lowercase util_cmdline library name.
      s3-waf: lowercase libsmb library name.
      s3-waf: lowercase libcli_lsa3 library name.
      s3-winbind: Fix bug 7888 -- deal with buggy 3.0 based PDCs
      s3-printing: split out printing migration code into a smaller library.
      s3-net: use printing_migrate library, and eliminate duplicate code.
      s3-printing: open up a winreg pipe handle for the migration code.
      s3-printing: move os2 related functions to printing/nt_printing_os2.c.
      s3-printing: move driver_info_ctr_to_info8 to init_spoolss.h
      s3-printing: move spoolss_create_default_devmode/secdesc to init_spoolss.h
      s3-waf: make LIBCLI_SPOOLSS a shared library
      s3-printing: add rpc_client/cli_winreg_spoolss.c
      s3-printing: add winreg_printer_binding_handle and remove most of srv_spoolss_util.c.
      s3-printing: add winreg_internal functions.
      s3-printing: use winreg_internal functions.
      s3-printing: safe a ton of roundtrips by reusing existing winreg binding_handles.
      s3-printing: use winreg interface for migration, instead of spoolss.
      s3-printing: remove spoolss pipe from migration library, only using winreg finally.
      s3-printing: make sure to first migrate the printers then the security descriptor.
      s3-waf: split out LIBCLI_WINREG_INTERNAL as LIBCLI_WINREG was pulling in rpc server code in undesired places.
      lsa: rename auth info argument in lsa_CreateTrustedDomainEx2
      lsa: lsa_CreateTrustedDomainEx takes lsa_TrustDomainInfoAuthInfo, not
      s4-smbtorture: add very basic tests for lsa_CreateTrustedDomainEx.
      s4-lsa: prepare dcesrv_lsa_CreateTrustedDomain_base() to deal with unencrypted auth info.
      s3-lsa: Fix _lsa_DeleteObject to handle trusted domain objects.
      s3-lsa: add LSA_HANDLE_SECRET_TYPE.
      s3-passdb: add dummy calls to control global (replicated) secrets.
      s3-secrets: add lsa_secret struct to secrets IDL.
      s3-secrets: add lsa_secret passdb api.
      s3-lsa: implement _lsa_OpenSecret().
      s3-lsa: implement _lsa_CreateSecret().
      s3-lsa: implement _lsa_SetSecret().
      s3-lsa: implement _lsa_QuerySecret().
      s3-lsa: support secret objects in _lsa_DeleteObject().
      s3-lsa: support secret objects in _lsa_QuerySecurity().
      s3-selftest: enable RPC-LSA-SECRETS against s3.
      s3-selftest: finally enable RPC-LSA against s3.
      s3-build: remove some unused/duplicate headers.
      s3-lsa: Fix crypto prototypes.
      s3-printing: fix some build warnings in queue_process.c
      s3-nmbd: fix talloc/malloc mismatch in create_listen_pollfds().
      s3-docs: document --user-sidinfo wbinfo option.
      s3-registry: fix bug #8401 - registry/reg_format.c must include includes.h.
      s3-waf: fix some unresolved symbols in idmap ad modules.
      s4-smbtorture: For now, skip trusted domain auth validation tests against the sambas.
      s3-waf: convert nss_info subsystem into a private library.
      s3-waf: add missing tdb dependency to idmap_tdb2 module.
      s3-waf: allow unresolved symbols in some idmap and nss_info modules.
      s3-waf: allow undefined symbols in idmap_rid module.
      s3-waf: convert libgpo into a private library.
      s3-waf: fix unresolved symbols in the group policy client side extensions subsystem.
      waf: install pam modules in PAMMODULESDIR.
      s3-libnet: add missing newlines in debug statement.
      waf: restore libsmbclient handling.
      s3-waf: fix SO_PEERCRED configure check.
      s3-waf: finally make SO_PEERCRED configure check work with stricter CFLAGS.
      s3-docs: document -k switch in net manpage.
      s3-netapi: allow to use default krb5 credential cache for libnetapi users.
      s3-libnet: allow to use default krb5 ccache in libnet_Join/libnet_Unjoin.
      s3-smbldap: remove an obsolete prototype.
      s3-waf: remove explicit linking to SMBLDAP subsystem.
      s3-net: when all DNS servers fail to operate, the overal DNS registration result
      s3-passdb: split out passdb/pdb_tdb.h.
      s3-passdb: split out passdb/pdb_wbc_sam.h.
      s3-passdb: split out passdb/pdb_smbpasswd.h.
      s3-smbldap: rearrange prototypes a bit.
      s3-passdb: split out passdb/pdb_ldap.h.
      s3-passdb: split out passdb/pdb_nds.h.
      s3-passdb: split out passdb/pdb_ipa.h.
      s3-waf: fix configure check for HAVE_POSIX_FADVISE.
      s3-waf: fix configure check for HAVE_LINUX_FALLOCATE.
      s3-waf: fix configure check for HAVE_LINUX_FALLOCATE64.
      s3-waf: fix configure check for HAVE_LINUX_READAHEAD.
      s3-waf: make sure we build example vfs modules with --enable-developer.
      s3-groupdb: split out groupdb/mapping_tdb.h.
      s3-dbwrap_ctdb: fix the build.
      s3: remove some dead prototypes.
      s3-auth: token_util needs system/passwd.h.
      s3-passdb: move group mapping headers into passdb.h
      s3-passdb: move passdb prototypes into passdb.h
      s3-passdb: use uintX_t at least in headers.
      s3-passdb: add {LM|NT}_HASH_LEN defines in passdb.h.
      s3-passdb: add define guards for machine_sid.h.
      s3-passdb: remove fstring from pdb_set_user_sid_from_string().
      s3-passdb: remove libwbclient header dependency for passdb/lookup_sid.h.
      s3-waf: install passdb headers.
      s3-net: Fix uninitialized variable in rpc_conf_import_internal().
      s3-auth: fix the build of skel auth example module.
      s3-waf: make sure we always build example auth modules with --enable-developer.
      s3-auth: remove dead prototype.
      s3-passdb: fix the build of example pdb test module.
      s3-waf: make sure we always build example pdb modules with --enable-developer.
      s3-docs: Document Services for Unix 2.0 (sfu20) nss_info ldap schema support.
      s3-docs: Add a clarification note for nss_info primary group membership calculation.
      s3-waf: make sure we always compile (not install) our libsmbclient testcode.
      s3-netapi: fix missing include in examples code.
      s3-netapi: use NetApiBufferAllocate() for returned buffer in getdc calls.
      s3-waf: only compile common.c in netapi examples code once.
      libcli: remove unneeded com_err.h and fix the build here.
      s3-docs: Remove -Y option from winbind manpage.
      s3-libsmbclient: make some functions static in testsuite code.
      s3-netapi: remove pointless use_memory_krb5_ccache.
      s3-smbldap: use tevent_context in smbldap.
      s3-passdb: use tevent_context in passdb.
      s3-net: Make sure to always re-use the "good" dc for the DNS updates as well.
      s3-waf: fix libgpo.so library name.
      s3-libnet: add ads forward declaration in libnet keytab code.
      s3-waf: convert libnet_keytab into a private library.
      s3-trustdomcache: make enumerate_domain_trusts() static.
      s3-waf: move trusts_util.c code into a private library.
      s3-waf: convert libcli_netlogon3 into a private library.
      librpc: only let NDR_NBT depend on NDR_NBT_BUF.
      librpc: remove nbt dependency to samr.
      librpc: remove nbt dependency to svcctl.
      nbt: merge in LIBCLI_NDR_NETLOGON helper into NDR_NBT.
      nbt: move nbt_string ndr functions to ndr/ndr_nbt.c helper.
      s4: add some missing header dependencies.
      nbt: trim down header dependencies of nbt.idl.
      nbt: move netlogon_samlogon_response into librpc/ndr/ndr_nbt.h.
      nbt: create standard ndr_pull/push interface for common netlogon samlogon replies.
      waf: convert NDR_NBT into shared library.
      torture: add torture_assert_guid_equal() macro.
      s4-smbtorture: add some ndr validation tests for netlogon_samlogon_response structs.
      s4-smbtorture: demonstrate how broken our samr_ChangePasswordUser3 marshalling is...
      samr: filterModuleName is a lsa_String in userPwdChangeFailureInformation.
      s3-modules: remove the last "init_module" traces.
      s4-smbtorture: add spoolss_OpenPrinterEx ndr test with full devmode.
      s3-smbldap: use include/smb_ldap.h in smbldap.h
      s3: move smbldap_util to pdb_ldap_util.
      s3-passdb: split out passdb/pdb_ldap_schema.c
      s3-net: use better state variable name for smbldap_state.
      s3-smbldap: remove duplicate prototype of smbldap_init().
      s3-smbldap: extend smbldap_init() with binddn/bindsecret arguments.
      s3-smbldap: remove dependency to secrets subsystem.
      s3-waf: create a smbldap.so library.
      s3-smbldap: remove duplicate prototype.
      s3-smbldap: improve smbldap.h readability and rearrange some defines.
      s3-param: loadparm has no dependency to smbldap.
      s3-smbldap: include talloc.h and tevent.h in smbldap.h
      s3-winbindd: no need to globally include ldap headers in winbindd.
      s3-smbldap: remove duplicate LDAP_OPT_SUCCESS define.
      s3-smbldap: move ldap_open_with_timeout out of smb_ldap.h to ads where it lives.
      s4-smbtorture: add ndr test for nbt_netlogon_packet to avoid future regressions.
      s3-waf: remove version from libpdb.so for now.
      librpc: install drsuapi and drsblobs headers.
      s3-rpcclient: add tool to call lsa_SetInformationTrustedDomain.
      s3-passdb: make pdb_password_change_time_max static.
      s3-waf: fix the build with CTDB_CONTROL_CHECK_SRVIDS.
      s3-ctdb: fix the build w/o HAVE_CTDB_CONTROL_CHECK_SRVIDS_DECL
      s4-smbtorture: remove trailing whitespace from schannel test.
      s4-smbtorture: avoid printf(); in schannel test.
      s4-smbtorture: fix some typos in schannel test.
      s4-smbtorture: make sure we can successfully run the schannel test against windows.
      s3-includes: remove PRIMARY_* SID_INDEX defines defined elsewhere already.
      s3-dns: prevent from potentially doing wrong SRV DNS lookups.
      s3-libads: fix malloc/talloc mismatch in ads_keytab_verify_ticket().
      s3-pdbtest: only test trusted domains when pdb backends offers trusted domain support.
      s3-libads: pretty print a keytab list.
      s3-passdb: remove a forward declaration.
      s3-waf: rpcclient does not need libads.so.
      s4-kerberos: remove some unused prototypes.
      samba: check for AES encryption type defines.
      s3-waf: also check for gsskrb5_extract_authz_data_from_sec_context() during
      s3-waf: fix compile of pdb_ldap as shared module by moving ldap schema helpers to libpdb.so
      s3-autoconf: fix the build of the pdb_ldap shared module in autoconf build as well.
      s3-waf: check for KRB5_PDU_NONE as in the autoconf build.
      s3-passdb: trying to decouple passdb and secrets a little.
      s3-waf: remove requirement of having --enable-developer for running system krb5 checks.
      waf: when building with system krb5, we do not need to build local heimdal.
      waf: when USING_SYSTEM_KRB5 environment variable is set, dont configure local
      wafsamba: point out that local heimdal paths are not included when
      s4-ldb: use KRB5_KEY macros to access key elements.
      waf: remove pointless WINBIND_KRB5_LOCATOR env.
      allow to use system iniparser library.
      s4-torture: verify #8373 and add ndr nbt tests for LOGON_PRIMARY_QUERY nbt_netlogon_requests.
      selftest: bug #8373 is fixed and we should always test this now.
      s3-winbindd: fix the build of idmap_ad modules.
      s4-torture: use torture context for printing debug output.
      s4-torture: fix typo in samlogon test.
      s4-torture: more printf removal from samlogon torture test.
      ntprinting: make decode_ntprinting helpers public in idl.
      ntprinting: mark the final 4 byte null pointer for printer data in ndr_pull_ntprinting_printer as read.
      s4-torture: add ntprinting ndr operations testsuite.
      s3-autoconf: Fix the build.
      s3-pdb: remove unused variables.
      pam_winbind: match more return codes when wbcGetPwnam has failed.
      s3-lsa: Flesh out the returned info in _lsa_EnumTrustedDomainsEx().
      s3-winbindd: Adjust error code loop logic in rpc_trusted_domains().
      s3-krb5: use and request AES keys in kerberos operations.
      s3-kerberos: add aes enctypes to generated krb5.conf.
      s3-net: pass down struct net_context to the dns update calls.
      s3-net: move out some prototypes to net_dns.h.
      s3-net: pass down a flags field to DoDNSUpdate().
      s3-net: give more control how to update/register DNS entries.
      s3-net: Fix DEBUG() location.
      s3-rpc_client: lookup nametype 0x20 in rpc_pipe_open_tcp_port(). (bug #9426)
      s3-rpc_client: try to use socket_addr if available in rpc_pipe_open_tcp() (bug #9426)
      s3-rpc_cli: Remove some unused wrapping code.
      s3-winbindd: add cm_connect_lsat().
      s3-rpc_cli: make dcerpc_lsa_lookup_sids_generic() public.
      s3-rpc_client: make dcerpc_lsa_lookup_names_generic() public.
      s3-winbindd: remove lookup_names_fn_t.
      s3-winbindd: remove lookup_sids_fn_t.
      s3-winbindd: rework reconnect logic in winbindd_lookup_sids().
      s3-winbindd: rework reconnect logic in winbindd_lookup_names().
      s3-winbind: use new reconnect logic in rpc_lookup_sids() also.
      libcli/auth: add netlogon_creds_aes_{en|de}crypt routines.
      s3-rpc_client: use netlogon_creds_arcfour_crypt() in init_netr_CryptPassword.
      s3-rpc_client: support AES encryption in netr_ServerPasswordSet2 client.
      s3-rpc_server: support AES decryption in netr_ServerPasswordSet2 server.
      s4-torture: remove trailing whitespace from netlogon test.
      s4-torture: pass down netlogon flags in netr_ServerPasswordSet2 tests.
      s4-torture: add AES support for netr_ServerPasswordSet2 tests.
      s4-rpc_server: support AES decryption in netr_ServerPasswordSet2 server.
      s3-rpc_client: use netlogon_creds_aes_encrypt in interactive netlogon samlogon.
      s4-torture: remove trailing whitespace in smbtorture remote_pac test.
      s4-torture: use names for r.in.logon_level of netlogon samlogon requests.
      s4-torture: support AES encryption in pac_verify/generic samlogon netlogon tests.
      s4-torture: support AES encryption in interactive samlogon tests in rpc.samr.
      s4-torture: exit early when join fails in samba3rpc tests.
      s4-torture: use netlogon_creds_arcfour_crypt() in samba3rpc test.
      s3-rpc_server: pass down netlogon cred state in _netr_ServerGetTrustInfo().
      s4-torture: validate owf password hash and negotiate AES ServerGetTrustInfo test.
      s4-torture: validate owf password hash and negotiate AES in forest trust test.
      s3-rpc_server: we need to encrypt OWFs using DES in _netr_ServerGetTrustInfo().
      s4-rpc_server: support AES encryption in interactive and generic samlogon.
      s3-rpc_server: support AES for interactive netlogon samlogon password decryption.
      s3-auth: session keys in validation level 6 samlogon replies are *not* encrypted.
      s3-rpc_server: Remove obsolete process_creds boolean in samlogon server.
      s3-auth: remove crypto from serverinfo_to_SamInfoX calls.
      libcli/auth: remove trailing whitespace.
      libcli/auth: support AES decryption in netlogon_creds_decrypt_samlogon().
      s4-torture: precalculate expected session keys from samlogon in schannel test.
      s4-torture: call the s4u2self tests with arcfour and aes.
      s4-torture: move samr_ValidatePassword test out of main samr test.
      s3-rpc_server: limit allowed transports for samr_ValidatePassword().
      s4-rpc_server: limit allowed transports for samr_ValidatePassword().
      s3-selftest: make sure to test rpc.samr.passwords.validate over ncacn_ip_tcp.
      s4-selftest: make sure to test rpc.samr.passwords.validate over ncacn_ip_tcp.
      libcli/auth: rename netlogon_creds_decrypt_samlogon() to netlogon_creds_decrypt_samlogon_validation().
      libcli/auth: add netlogon_creds_encrypt_samlogon_validation().
      s3-rpc_server: use netlogon_creds_encrypt_samlogon().
      s4-rpc_server: use netlogon_creds_encrypt_samlogon().
      spoolss: add Windows ARM architecture defines to IDL.
      spoolss: add SPOOLSS_DRIVER_VERSION_2012 (4) define to IDL.
      spoolss: add stubs for new JobNamedProperty dcerpc calls.
      spoolss: Make OpenPrinterEx work with NDR64 by using UserInfo Container.
      s4-torture: allow to do ndr tests with flags, not only ndr_flags.
      s4-torture: add ndr64 spoolss openprinterex to ndr test.
      spoolss: make spoolss deal with ndr64 ULONG_PTR of devmode_ptr and secdesc_ptr.
      s4-torture: add ndr64 spoolss_SetPrinter ndr test.
      spoolss: make spoolss deal with ndr64 AddForm by using proper container object.
      spoolss: make spoolss deal with ndr64 SetForm by using proper container object.
      s3-spoolss: use configurable spoolss architecture in compose_spoolss_server_path().
      BUG 9474: Downgrade v4 printer driver requests to v3.
      s3-winbind: fix the build of idmap_ldap.
      spoolss: add more spoolss_DriverAttributes values.
      spoolss: make spoolss deal with ndr64 StartDocPrinter by using proper container object.
      s3-spoolss: Make it easier to manipulate the returned OSVersion at runtime.
      s3-rpcclient: decode OsVersion{Ex} binary blobs when displaying printerdata.
      spoolss: fill in spoolss_PlayGDIScriptOnPrinterIC IDL.
      spoolss: Add UNIVERSAL_FONT_ID.
      spoolss: add UNIVERSAL_FONT_ID_ctr for debugging.
      s3-rpcclient: add cmd_spoolss_play_gdi_script_on_printer_ic.
      s4-torture: add some basic tests for PlayGDIScriptOnPrinterIC.
      ndrdump: make sure to deal with the highest relative pointer offset correctly.
      s4-torture: make sure to deal with the highest relative pointer offset correctly.
      s3-net: mention optional impersonation principal for PAC retrieval.
      krb5pac: make sure to correctly store the highest relative pointer offset.
      s3-rpc_server: Dont wipe out ref pointers in _netr_ServerGetTrustInfo().
      spoolss: Fix two size elements in the devmode private spoolss_JTEXP struct.
      spoolss: fix string types in spoolss_JTEXP.
      spoolss: add [ms_union] to spoolss.idl where appropriate.
      s4-torture: add missing NTSTATUS checks in test_AddJob().
      spoolss: add idl for spoolss_RpcSendRecvBidiData.
      spoolss: make more container objects public for iremotewinspool.
      spoolss: fill in IDL for JobNamedProperty calls.
      spoolss: make RPC_PrintNamedProperty public
      spoolss: add spoolss_MonitorContainer IDL.
      s4-torture: add test for spoolss_RpcEnumJobNamedProperties.
      s4-torture: add simple test for spoolss_RpcSendRecvBidiData.
      s4-torture: add ndr test for spoolss_GetCorePrinterDrivers.
      s4-torture: add ndr test for spoolss_RpcSetJobNamedProperty.
      s4-torture: also deal with "Microsoft XPS Document Writer v4" as default driver.
      spoolss: fill in IDL for spoolss_DeletePrintProcessor.
      doserr: add mapping for WERR_PRINT_PROCESSOR_ALREADY_INSTALLED.
      s4-torture: add simple tests for spoolss_{Add|Delete}PrintProcessor.
      selftest: mark the spoolss add print processor tests as knownfail for now.
      s4-torture: No need to disable rpc.spoolss.win test when compiled with MIT kerberos.
      s4-torture: Always compile backupkey ndr testsuite.
      wbinfo: allow to define a custom krb5ccname for kerberized pam auth.
      s3-winbindd: support the DIR pragma for raw kerberos user pam authentication.
      pam_winbind: update documentation for "DIR" krb5ccname pragma.
      s3-libads: Fail create_local_private_krb5_conf_for_domain() if parameters missing.
      s3-winbindd: fix fallback to ncacn_np in cm_connect_lsat().
      s3-winbindd: remove pointless variable assigment, see the strdup below.
      s3-winbindd: Fix memory leak in ads_cached_connection().
      s3-winbindd: Fix winbind on DC crash with trusted AD domains.
      s3-winbindd: use find_domain_from_name() instead of find_domain_from_name_no_init().
      s3-winbindd: make sure also the idmap code can deal with trusted domains.
      s3-winbindd: use get_trust_pw_clear() wrapper for AD connection code.
      s3-winbindd: remove unneded include of secrets.h from idmap_ad.c
      docs: point out side-effects of global "valid users" setting.
      s3-winbindd: Fix #10264, cache_traverse_validate_fn failure for NDR cache entries.

Heimdal Import User (1):
      r8302: import mini HEIMDAL into the tree

Henning Henkel (1):
      Fix bug #5929 - vfs_prealloc does not build with option --with-cluster-support and GPFS

Henry Wong (1):
      Properly fix bug #8384 - Windows XP clients seem to crash smbd process every once in a while.

Herb Lewis (372):
      update SGI build files to latest source
      tired of updating Makefile - use perl script to generate it now
      removing Makefile and adding perl script to generate it form source tree
      mention that Perl is required for build scripts
      Update file for automatically generating a release
      dded error checking to scripts
      remove stutter from closing instructions
      fix for systems that don't have PWD environment variable defined
      fix typo in directory name
      fix bug in log file specification
      This is actually Jeremy, working as Herb :-).
      fixes to make_printerdef.c to generate a correct printers.def file
      fix up perl script so it is a little cleaner and also works with perl 4
      fix printer driver rpc to prevent core dumps.
      added timestrings to become and unbecome domain/local master browser
      added commented out sections for supporting automatically providing printer
      added printout of file list to stderr so you know what files you need to
      added description of changes I made
      fixed type in list of ignored files
      missing a couple of binary files in the distribution
      fix bug in version numbering scheme
      fix bug in search string
      left out a piece of my last fix for inst package version number
      README		describe inst package version number correctly
      fix problems with using inf files from HP for DesignJet 750C (C3195A)
      fixed a few typos in the instructions and added a longer explaination for
      sync with changes to 1.9.18 tree
      changes to correctly use some HP printer inf files
      get rid of reference to removed file
      fix bug when using lpstat as printcap file - remove space at start of
      removed old unused test
      -N option still prompted for password in smbclient -L usage
      adding findsmb perl script to get info on smb machines on a net
      fix core dumps on Solaris 2.5 systems found by Orn Asgeirsson
      add swat to build package
      fix typos
      added comments about printcap name
      added check for one more error case
      no longer make smbpasswd setuid root
      make it look for only the proper lines to uncomment.
      fix problem with output file not being properly sorted
      add clean option
      mkman - add argument for making html versions of man pages
      here is a first cut at a "fixed up" help file
      added definitions for "password chat debug" and "unix password sync"
      added FLAG_BASIC to some browse options for swat.
      The globals section now shows non-default variables (like the
      move things around to get rid of make clean warning messages
      sync with 1.9.18 branch (clean up comments)
      remove .cvsignore as ignored file. This is used in my build scripts.
      add startswat.sh to automate starting swat with inetd
      forgot to remove -nostrip option for packaging. Makes inst package too big.
      update for new directory structure
      strip out extra spaces from smbclient output that were added recently
      return to old behaviour of dumping ALL parameters
      move smbd/print_svid.o from SMBD_OBJ1 to PARAM_OBJ so that nmbd, swat, etc.
      idb.pl  add new argument to call to installcp.sh
      add missing targets that were added to makefile
      some versions of Irix pass the HAVE__ACL test but don't have acl.h
      clean up steps for making distribution
      make sure we build with SGI compiler
      swat.c	updated to use new yodl generated smb.conf.5.html file for help
      new directories for man page sources
      new swat icons
      added password change functionality to swat
      Added needed flag for swat password changing
      add an empty STATUS..LCK to install so swat doesn't complain
      no longer needed
      remove .po and .po32 files from inst package
      changes from John Sygulla for changing remote passwords
      clear trailing / from directory names in idb file
      .cvsignore: Removed old entries.
      Fixed missing parens in tt entry.
      Commiting tt fix.
      smaller images so they fit on one line of a 640/480 display
      missed one
      Removed code that used printf/fprintf in password changin libraries.
      ran spell check and other minor tweaks
      missed a .B
      some fixes for IRIX 5.3 builds
      add some more comments and clean it up a little more.
      change to new prefix path
      update testparm with -s option so it doesn't require a carriage return
      smb.conf : explicitly state "printcap name=" and "security=" parameters
      wrong directory path for smbd and nmbd
      added file from 2.0 branch
      sync with 2.0 tree
      add Windows 2000 version of Plain Text Password registry entry
      add description of -P option
      test for pre- version numbers
      made "enable" and "disable" the default "lpresume" and "lppause" commands
      use proper parameter names instead of alias names
      use parameters to minimize changes in samba for irix release version
      removed extra arguements from make_nmb_name calls
      fixes for broken IRIX header file merged from 2.0 branch
      merge 2.0 changes
      unicode code pages are detected as compiler intermediate file so set to
      add new release notes chapter to samba for irix package
      This is reall Jeremy commiting as Herb at SGI labs. Fix
      Fix for check_kernel_oplocks looking for the var directory
      Using a structure for a tdb key can lead to insideous, hard
      Fix for misunderstanding of fsync added when vfs layer
      Use a prime for default tdb hash size - this makes a difference !
      added a little description of useage and output format since this gives
      fixed IRIX compiller error message
      fix for IRIX compiler error messages
      fix for IRIX 6.2 compiler error
      new man pages
      changes to sync with 2.2. tree
      sync with 2.2. tree
      Try this again on the right machine. Adding files for PCP samba pmda
      print source PID in PONG and debuglevel message. Allow request debuglevel
      use macros for incrementing profile counters
      lib/messages.c          add debug print for receipt of PING and
      update man page for program changes
      allow "master" smbd to call message_init so it is not killed by messages
      get rid of $Revision string - sync with 2.2 branch
      sync with 2.2 changes
      restructure PCP metrics (merge from 2.2 branch)
      minor update to help file
      merge from 2.0 branch for installing Using Samba book files
      DEBUG merge from 2.2 about tdb init failure.
      samba/source/nmbd/nmbd.c	change remote_machine name to nmbd instead
      keep cflags from being duplicated if defined in environment
      don't make extra copy of README file
      row of asteriks that indicates new entry must start at beginning of line.
      set "vfs object" and "vfs options" to be setable by SWAT on advanced page
      don't allow both add and delete user to be set at the same time
      fix typo
      SGI compiler fixes.
      don't test for root ownership of profile shared memory segment
      sync with 2.2 branch
      force checking of log size after 200 smbd in a row or after 30 sec with no
      get rid of old debug code and possible socket leak
      fix missing )
      fixes big endian unistring problems.  Need to check that it didn't
      get rid of compiler warnings
      new logs use abbreviated month names. Add this to date conversion
      if no ACL elements then use chmod - fixes ability to set read-only bit
      variable name changed to --with-profiling-data
      add profiling stats from 2.2
      always include profile support so you do not need a different binary of
      merge profile data changes from 2.2
      add PROFILE_OBJ to nmbd now
      prevent segv by not calling tdb_traverse and tdb_close if tdb_open_log
      left out {
      fix typo
      get rid of compiler warnings
      IRIX compiler dies not like casts in macro args
      get rid of compiler warnings (casts and delete unused variables)
      .headers.stamp not getting touched if file already existed.
      more compiler warnings
      add .po32 files to ignore list
      Merge from 2.2
      merge from 2.2 branch
      dont add -I./popt to CFLAGS it really belongs in FLAGS1 with other include
      merge from 2.2
      fix up packaging stuff
      add smbgroupedit
      OK I think this does what everyone wants with the .headers.stamp
      include/build_env.h wasn't getting built by default with new rules unless
      fix for IRIX compilers
      sync with 2.2
      add PATH_FLAGS to .po32 objects so dynconfig builds with smbwrapper
      add *.po32 to ignore list
      allow IRIX to build nsswitch/libnss_wins.so
      ran autoconf
      remove duplicate lines
      merge IRIX winbind support from Samba 2.2 branch
      sync up packaging scripts
      merge Jeremy's gcc3 warning fix from 2.2
      merge changes from 2.2 branch to prevent smb.conf from changing debug level
      merge tpots name changes into IRIX part of code. When you change the name
      added structure members referred to by recent changes in vfs-wrap.c
      adding wins commands to winbindd - will check in the rest of the changes
      new config files for winbindd startup
      merge change from @_2 to allow smbpasswd -x to delete user even if no
      fix for IRIX toolroot builds
      no longer need separate build o32 smbwrapper
      quite errors about unnecessary const casting - don't build libnss_wins.so
      smbsh need CC not SHLD
      add required flags to "nt acl support" so it will show up in SWAT
      merge from 2.2 - fix parsing of options
      fix for IRIX compile error
      make error codes match W2k advanced server sp2
      fixed the upper/lower case table generation on big-endian machines
      fixed NBENCH test on IRIX (tridge)
      return . and .. first in readdir - this fixes masktest on IRIX which
      must use native endian index when creating default valid.dat table so it
      update usage message with other options. Add a -d debuglevel option
      add .proto.check
      merge fix for core dump when called with no args from 2.2
      make install should also install the default dat files from codepages
      add a -n maxloops option so this can be run in a script and end after a
      cut and paste inserted spaces instead of tab. Some versions of make don't
      merge from 2.2 - don't check local passdb if -r option used
      merge winbindd WINS changes from 2.2
      sync with 2.2 branch
      merge from 2.2 - allow -c option to specify smb.conf file
      merge from 2.2 - build winbindd and libsmbclient
      readd -c config file change from 2.2 - works with -L mode now as well.
      reorder useage message a little. -L is not a root-only or local mode option.
      fix compile error
      fix irix compiler error
      cannot use casts in the DLIST_xxx macros
      fix generating protos for smbwrapper
      fix irix compile errors - cannot initialize array in declaration statement
      fix for difference in strsep and strtok semantics
      reload_after_sighup and got_sig_term are defined in server.c
      move where got_sig_term and reload_after_sighup are defined.
      sync with 2.2 branch
      remove samsync and spamsync
      add proto for forward reference
      based on function prototype, the args were switched - this gave an error
      off by one in writing to malloced array. this fixes smbd crash I saw at
      lowercase global_myname in %L substitution
      make the default printed values for boolean the same for all parameters.
      make the default printed values for boolean the same for all parameters.
      must add one to the extra_data size to transfer the 0 string terminator.
      use the new IVAL_TO_SMB_OFF_T for file_info size member
      use the new IVAL_TO_SMB_OFF_T for file_info size member
      use FILE_MACRO instead of __FILE__
      fix stat reporting on put command
      fix stat reporting on put command
      fix broken incremental tar - merge from 2.2
      fix broken incremental tar - merge from 2.2
      merge smbtar fixes from 2.2
      merge smbtar fix from 2.2
      fix make proto to work with SGI smake
      fix make proto to work with SGI smake
      merge from 2.2
      merge from 2.2
      merge from 2.2 fix for smbclient large files
      merge from 2.2 fix for smbclient large files
      add and escape before $( in regex string so it is not interpreted as the
      cannot make assignments to const values.
      this makes it compile, but I'm not sure if it is correct. Are we really
      cannot assign to const
      reran autoconf
      Moved smbd process counting functions from smbd/server.c to smbd/process.c
      IRIX uses libns_winbind.so instead of libnss_winbind.so
      IRIX uses libns_winbind.so instead of libnss_winbind.so
      initialize acct_ctrl variable before it is used
      initialize acct_ctrl before using it
      update for 3.0
      update for 3.0
      if @EXTRA_ALL_TARGETS@ is empty, this fixes makefile syntax error
      fix another syntax error
      fix packaging
      fix packaging
      void function cannot return a value (besides the function called was
      pdbedit needs PASSDBLIBS
      delete extra PASSDBLIB at beginning
      get rid of warning about malformed if in Makefile
      make this work for older version of perl
      remove o32 targets for IRIX. kerberos and ldap libraries are n32 only so
      get rid of IRIX o32 builds - some libraries (kerberos and ldap) are only
      fix up a couple paths
      get rid of CFLAGS from LDSHFLAGS and WINBIND_NSS_LDSHFLAGS and instead
      get rid of CFLAGS from LDSHFLAGS and WINBIND_NSS_LDSHFLAGS and instead
      use names from enumerated type to get rid of compiler warnings
      split replace into replace and replace1 to allow setenv to be used by
      add tests for IRIX attr functions
      client/client.c	- cannot initialize struct with non-const values
      get rid of IRIX test as it is wrong.
      add IRIX EA support
      fix type
      return actual results instead of always OK
      get rid of unused call
      get rid of some sompiler warnings on IRIX
      get rid of warning on IRIX
      get rid of const as these things really are not const
      get rid of compiler warnings
      make sure idb file is properly sorted.
      get rid of more compiler warnings
      rename mutex_t to smb_mutex_t to prevent name collision
      fix IRIX build
      signed bitfields cannot be 1 bit long
      IRIX already defines uint_t
      cast to get rid of warnings
      wrong typecast
      fix some typos
      don't dereference null pointer
      don't leak memory if cli->tree is NULL
      update for new version.h format
      define SYSV for IRIX
      source/rpc_parse/parse_prs.c	ZERO_STRUCTP(ps) not needed as it is done
      source/rpc_parse/parse_prs.c	ZERO_STRUCTP(ps) not needed as it is done
      merge old change from 2.2 branch to give legend in heading
      merge old change from 2.2 branch to give legend in heading
      fix type for tag in proto file
      fix typo for tag in proto file
      another typo
      another type
      add missing #ifdef HAVE_BICONV stuff
      add missing #ifdef HAVE_BICONV stuff
      if we are truncating to the . we need to start at the beginning in case
      fix typo
      r416: add a newline to the debuglevel message returned string
      r428: add acls debug class
      r635: put files that are referenced multiple times in separate
      r642: use RPC_CLIENT_OBJ instead of file name
      r643: fix typo
      r772: fix cut and paste error in comment
      r775: merge trunk 774 to samba 3_0 - fix bad compare in for loop
      r776: I should have just cut and pasted from my build area and I would
      r814: conn is 0 during ioctl (at least during smbtorture IOCTL test)
      r938: on an error save the original errno before calling iconv to reset
      r1103: need to leave empty dacl so we can remove last ACE
      r3339: allow tdbtool to be built
      r4103: lock timeout is in milliseconds (as in reply.c)
      r5287: fix build problem when HAVE_POSIX_ACL not defined
      r5650: add help lines for net rpc group addmem and delmem commands
      r5888: fix incorrect test - don't print anything if user is not in any groups
      r6225: get rid of warnings from my compiler about nested externs
      r6230: don't know how this ever worked! the compiler complained we
      r6318: don't include smbwrapper stuff unless asked for
      r6319: add prototype so -Wstrict-prototypes will not fail
      r6502: add LOCKING debug class - pull PRINTINGDB class definition from trunk
      r6586: get rid of a few more compiler warnings
      r6588: just include includes.h to get prototypes here.
      r6623: This change fixes a few broken commands plus adds some
      r9057: fix cut-and-paste error
      r20124: clean up nested extern declaration warnings
      r20131: get rid of a few no previous prototype warnings
      r20132: get rid of defined but not used warning - static function only used
      r20133: get rid of defined but not used warning - static function only used
      r20201: merge makefile changes from 3_0_24
      r20202: fix make clean
      r20245: merge 20244 from samba_3_0_24
      r20248: merge 20247 from samba_3_0_24
      r20261: merge 20260 from samba_3_0_24
      r20268: merge -r 20261:20263 from samba_3_0_24
      r20269: merge -r20264:20267 from SAMBA_3_0_24
      r21002: Get rid of unused macros - merge change from 3_0_24
      r21007: move $(SOCKET_WRAPPER_OBJ) to OBJ definition instead of link line like
      r21231: get rid of unused defines that cause a redefined warning
      r21396: fix wbinfo --lookup-rids command
      r21397: revert accidential commit
      r21399: need to zero the request and response structures
      r21546: remove duplicate lines
      r21548: prevent segv (reference to -1 element of array)
      r21657: get rid of warning - not everyone understands %F
      r21703: fix build when O_SYNC not defined
      r21704: open sockets immediately in process_loop
      r21705: add modify rights defines
      r21775: make messages more understandable - don't leave part dangling after newline
      r21780: let smbcontrol use POPT_COMMON_SAMBA options to allow setting debug
      r21825: add debug prefix timestamp to allow "short timestamps" to be
      r21957: minor formatting fix
      r22018: fix compile error
      r22395: allow profiling level to be set on startup
      r23732: removed reference to non-existent structure
      r24290: fix debug statments to match function name
      r200: fix compile errors
      fix dump printout when byte >= 0x80
      update wbinfo manpage
      add documentation for debug prefix timestamp
      update manpage for profiling-level option
      allow SID with 0 in subauthority to be converted properly
      use variables for files used in multiple places
      I think the problem with these functions is that lookup_usergroups
      get rid of unneeded argument in get_methods and get_alloc_methods
      Merge branch 'v3-devel' of ssh://git.samba.org/data/git/samba into v3-devel
      Convert to use VFS layer.
      don't return 0 on error - bad for scripts
      Fix warning messages on Freebsd 4.6.2.
      In samba_version.m4 the test to get the version now returns several
      bug in source3/winbindd/winbindd_sids_to_xids.c
      test commit to see it push works for me.
      Second part of fix for bug 8953 - winbind can hang as nbt_getdc() has no timeout.
      Fix bug #9104 - winbindd can mis-identify idle clients - can cause crashes and NDR parsing errors.

Holger Hans Peter Freyther (1):
      talloc: Documentation fix for talloc

Holger Hetterich (45):
      winbindd_cache: recognize and allow longer UA keys
      SMB traffic analyzer vfs module from Holger Hetterich <hhetter at novell.com>
      Add an initial version of a manpage for the vfs_smb_traffic_analyzer module.
      Enable optional anonymization of user names,
      Update the manpage for vfs_smb_traffic_analyzer to include the anonymize_prefix option
      Fix the "Premature end of data in tag" error when buiding the manpage, fix a typo in the text, add an example for anonymization usage.
      Added a simple tdb integrity check to tdbtool. The command "check" runs traverse on the currently open tdb, and returns the number of entries if the integrity check is successful.
      Add an entry for the "check" command to the tdbtool manpage.
      Enable total anonymization in vfs_smb_traffic_analyzer, by mapping any user names to the one given by anonymize_prefix, without generating a hash number. This setting is optional and is compatible with the module configuration format of Samba 3.3.
      s3: eventlogadm.c: add -s option to use alternative config file.
      s3: vfs_full_audit.c: implement negated vfs_ops in the success/failure list
      s3: net_share.c: fix argc handling
      Introduce smb_traffic_analyzer protocol v2.
      Create structs carrying the data of individual VFS functions, and hand those over to the send function, which then casts the void pointer to the struct required by looking at the id. This allows us to return different result data depending on the VFS function that is running. Make the protocol v1 sender compatible to this. Adapt the existing VFS functions to use the new data structures. Make use of the new functionality and extend the mkdir VFS logger function to return the creation [...]
      The format of data we are sending over the network will be flexible when sending over the network in protocol v2. To be able to do this, we create a new va-list function that is creating the buffer to send. Also it makes it easier for the receiver to parse the data; it sends an initial header containing the full length of the buffer to be send. For the individual strings, it sends sub headers containing the length of the upcoming substring to be send. With the header-data-header-dat [...]
      Add rmdir, chdir, and rename as supported VFS functions
      Enable AES encryption of the data if a key was found in secrets.tdb.
      Add read,pread,write,pwrite support to the V2 protocol.
      Don't use typedefs on the VFS function data structures as
      According to the linux kernel coding styleguide, it's better to
      Additionally send the vfs function id with the protocol.
      Fetch the SID of the user we are running as and send with the common
      Move the creation of the header.
      Added an exact description of the V2 protocol.
      Make all remarks compatible to the linux kernel coding styleguide.
      Implement anonymization for protocol v2.
      Implement AES encryption of the data block.
      Add smbta-util to manage the encryption key.
      Put all the protocol stuff into a separate header file.
      Add the number of common data blocks to the protocol.
      Update the manpage of vfs_smb_traffic_analyzer and add smbta-util.
      Simplify the code a bit by creating the functions:
      vfs_smb_traffic_analyzer.c: added function
      smb_traffic_analyzer.c: optimize marshalling function and document
      s3: vfs_smb_traffic_analyzer.c: add VFS functions for file open and close
      s3: vfs_smb_traffic_analyzer.c: remove warnings from developer build
      Make the smbta-util manpage xml create smbta-util.8 instead of smbta-tool.8
      vfs_smb_traffic_analyzer.c: set the len variable when running protocol v1.
      s3-vfs: Send the share name instead of the path in smb_traffic_analyzer.
      Fix bug #3185 - testparm exits 0 if it can read the config file regardless of errors
      Updated french translations from Jean Delvare <jdelvare at suse.de>
      vfs_smb_traffic_analyzer shall also transfer the clients IP address.
      SMBTA: make vfs_smb_traffic_analyzer aware of the sendfile and recvfile functionality and store the results as common read/write results.
      Make protocol version 2 the default protocol, and only run on version 1 if V1 is explcitly given as a module option.
      Actually make use of the SMBTA_SUBRELEASE define in smb_traffic_analyzer.h. This will allow to introduce new features or fixes into the protocol after the 3.6.0 release. The client software is designed to take care for the subrelease number.

Horacio G. de Oro (2):
      Use named argument 'dir' instead of 'prefix' on NamedTemporaryFile for source4/setup/provision
      Use named argument 'dir' instead of 'prefix' on NamedTemporaryFile for domain.py

Howard Chu (1):
      Add tdb_transaction_prepare_commit()

Ian Puleston (1):
      s3: Complete support for NetWkstaGetInfo/NetWkstaEnumUsers

Igor Mammedov (4):
      * Adds support for cifs.spnego helper into configure and Makefile.in
      * helper source for handling cifs kernel module upcall for kerberos
      Adds support for cifs.resolver upcall.
      Fix length error in wrapping spnego blob

Inra (1):
      s4: Fix "Small memory leak after calling several times lp_update"

Ira Cooper (34):
      s3: Improved support for GAMIN.
      Fix bug #7384 - dptr_Close has a bitmap leak.
      s3: added support for fake oplocks in SMB2.
      SMB2: Fix rename on Windows 7.
      Fix for bug 7501 -  SMB2: CREATE request replies getting mangled.
      s3: Change exit on immediate socket failure.
      s3: Add SMB2 performance counters.
      s3: Cleanup of the initial SMB2 counters patch.
      s3: Adding TCP_KEEPALIVE_THRESHOLD and TCP_KEEPALIVE_ABORT_THRESHOLD to the list of accepted socket settings.
      Re-arrange the optimization to reduce tdb fcntl calls if smbd is not
      Fix bug #8442 - NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames.
      Fix compile when TDB_TRACE is enabled.
      Add "repack" command to tdbtool.
      Fix bug #8729 - getpass regressions on Solaris/Illumos - 3.6 and master.
      s3-popt: Fix configure.developer builds on Solairs.
      s3-nsswitch: Fix warnings on Solaris.
      s3: piddir creation fix.
      addns: Fix the Solaris/Illumos build.
      s3: piddir creation fix part 2.
      util: Add --disable-fault-handling.
      s3: Update waf build to include missed dependancy on Lion.
      s3-configure: Fix configure version information.
      s3-passdb: Fix negative SID->uid/gid/both cache handling
      Fix bad bugfix for bug #8910 - resolve_ads() code can return zero addresses and miss valid DC IP addresses
      s3-waf: Fix the winbindd active directory idmap support build.
      s3: Fix the vfs_solarisacl module to compile.
      waf: Make samba "ok" with directories for install being symlinks
      s3: Compound requests should continue processing.
      s3: Fix libnss_winbind.so's build on Illumos/Solaris
      s3: Fix vfs_zfsacl to compile.
      nsswitch: Fix two bitfield constants being the same.
      s3: Make SMB2_GETINFO multi-volume aware.
      waf: add -fstack-protector to LDFLAGS if detected.
      tsocket: ENOMEM can be retried on illumos/Solaris.

Ivo De Decker (10):
      Add build-dep on python-ntdb
      Add build-dep on libncurses5-dev
      Add depends on python-ntdb to samba
      Imported Upstream version 4.1.3+dfsg
      Merge tag 'upstream/4.1.3+dfsg' into samba_4.1
      set debian branch to samba_4.1
      update changelog for upstream version 2:4.1.3+dfsg-1
      Merge tag 'upstream/4.0.13+dfsg' into samba_4.1
      Merge branch 'master' into samba_4.1
      release samba 2:4.1.3+dfsg-1 to experimental

James Ding (1):
      Fix winbindd crash bug with trusted domains. Bug #5736

James Peach (324):
      r9203: Bugzilla bug #2314. Cast away the const of the dev argument to quotactl to
      r9301: Allow user-defined list and lookup timeouts on IRIX. Bugzilla bug #2284.
      r9302: Change AC_LIBTESTFUNC to check in the current $LIBS before adding the new
      r9303: Clobber compiler warnings. Patch from Jason Mader <jason at ncac.gwu.edu> plus
      r9561: Check for alloca.h.
      r9627: Enable format string checking for the MIPSPro compilers.
      r9636: The new profiles code needs all the dummy objects to link.
      r9780: Clean up a bunch of compiler warnings.
      r9985: Move the all the strict sync logic into file_sync().
      r10068: Use prctl(PR_SET_DUMPABLE) to make sure we can always leave a good
      r10644: Let the ports parameter be a comma-separated list, as documented in
      r12878: Don't use non-static array initialisers.
      r12951: Tell the MIPSPro compiler to push DEBUG calls out of line.
      r12953: Support the TCP_FASTACK socket option if it is available. Note that this will
      r13027: Support file change notifications from FAM.
      r13364: Continue not enabling valgrind on 64-bit Linux (see also rev 8510).
      r13418: Formalise support for checking compiler options.
      r13420: Support profile-guided optimisation in the build system. This is
      r13424: Don't attempt to use cc -O2. This breaks the solaris build.
      r13425: Revert all the "clever" compiler options checks. They broke
      r13482: Push the FAM notification file descriptor into the select
      r13484: Add missing semi-colon.
      r13500: Fix ordering of FD_* arguments.
      r13564: Remove trailing backslash. Makes other than GNU make choke on this.
      r13733: Reorder so that locking and params declarations are not mingled.
      r13736: Don't assume that printf can handle string arguments being NULL. Tidy
      r14111: Work around additional typedefs in the gamin implementation
      r14204: Remove the basically unused P_GSTRING and P_UGSTRING
      r14207: Convert the lp_acl_compatibility() param into an enum.
      r14255: Revert r14204 which was horribly broken.
      r14428: Call fill_share_mode_entry with NO_OPLOCK instead of 0.
      r14574: Allow use of sendfile as long as the write cache has not been enabled
      r14600: Refactor capability interface from being IRIX-specific to using only
      r14668: Set the FILE_STATUS_OFFLINE bit by observing the events a DMAPI-based
      r14669: Remove duplicate source caused by running patch(1) once too often.
      r14898: This change is an attempt to improve the quality of the information that
      r14899: Add missing semi-colon.
      r14900: Separate words in error message.
      r15046: Fix bug #3490 reported by Jason Mader. Do not continue to check for LDAP
      r15047: Add support for using libunwind to generate a backtrace. This is
      r15116: Allow the user to set winbind nss timeouts in seconds on IRIX. Don't
      r15423: Correct comparison logic so that libunwind can be correctly detected.
      r15424: Implement a "stacktrace" smbcontrol option using libunwind's remote
      r15425: Use dynamic buffers in the IRIX nsswithch module to prevent truncation
      r15446: Tidy up the formatting of locking debug messages and make it more
      r15447: Teach "smbd -b" to emit the sizes of a few more types that
      r15448: New autoconf macro to test for sysconf variables.
      r15449: Remove unused function get_nttime_max (which claims it
      r15450: Change profiling data macros to use stack variables rather than
      r15451: Rewrite AC_LIBTESTFUNC so that it works like the callers
      r15508: Use clock_gettime for profiling timstamps if it is available. Use
      r15509: Preserve errno in fcntl lock wrappers.
      r15516: Use SMB_BIG_UINT in preference to unsigned long long.
      r15529: Initialise our saved uid and gid so that we can tell when
      r15611: Remove used but uninitialised variable "count".
      r15631: Add a new option "enable core files". Administrators can use this to
      r15654: Update our internal copy of popt to that distributed with the RPM 4.2
      r15655: Log the result of module initialisation if it fails.
      r15848: Introduce commandline options to set the remainder of the parameters in
      r15928: When we search for clock_gettime, we might find it in librt, but librt
      r15943: Update misleading DEBUG statements and comments that refer to
      r16057: Coalesce the DMAPI configure tests into a single macro. Add
      r16111: Patch from Björn JACKE <samba at j3e.de>.
      r16116: Hoist the slow CLOCK_REALTIME message inside the branch so we never
      r16273: Add smbclient tests to verify that
      r16274: Fix the smbclient prompting behaviour for both systems that have
      r16289: Fix smbclient test hang. This is caused by readline refusing to believe
      r16482: Fix bugzilla 3801 by forcing MIPSPro warning 1035 to be an error.
      r16483: Turn off some useless MIPSPro warnings be default.
      r16484: Bugzilla 3805. Only define _ABS if it is not already defined.
      r19270: Stop depending on internal MIT symbols. These are private on MacOS
      r19286: Remove dependency on Fink. If we really *need* anything from Fink,
      r19385: These replaced symbols should have a rep_ prefix.
      r19386: Limit the size of the connection bitmap to <64K entries.
      r19477: Patch from Huang Dejin Eugene <hdejin at yahoo.com>.
      r19576: Correct trivial typo.
      r19626: Coalesce usage of DUMP_CORE. Fix formatting on chdir error message
      r19851: Disable gcc PIE options on Darwin.
      r19852: Fix the build for the VFS examples. Fixes bugzilla #3931.
      r19873: Make sure we are privileged when doing DMAPI operations on systems
      r19941: One copy of this code should be sufficient.
      r19961: Remove VARDIR. Nothing is ever installed into this, so there's no
      r19962: Revert bogus change in r19961. In future I will check configure.in
      r20235: Don't use realloc directly.
      r20237: Replace exit_server with exit_server_cleanly where appropriate. All
      r20427: Rename dnp_open. This conflicts with the dns_open symbol in
      r20428: Rename dns_open. This conflicts with the dns_open symbol in
      r20429: Restructure the libuuid API tests to handle the case where libuuid
      r20500: Fix compiler warnings.
      r20965: Fix spelling.
      r20966: Only attempt to reload the config file atfer the fork point if we
      r20994: Remove unused code.
      r21034: Don't force user to have pidl in their PATH.
      r21647: Allow unit on for size parameters.
      r21717: Support the SMB_QUERY_POSIX_WHOAMI info level on QueryFsInfo.
      r21738: Remove unused file.
      r21757: Add SMB_VFS_CHFLAGS operation.
      r21762: Fix the build by enabling shared modules and adding the config.*
      r21763: Add support for the UNIX_INFO2 infolevel.
      r21765: Fix the build for HP-UX.
      r21766: Fix compiler warning.
      r21767: Revert all the bits I accidentally committed in r21766.
      r21778: Wrap calls to krb5_get_init_creds_opt_free to handle the different
      r21779: I missd a call to krb5_get_init_creds_opt_alloc in r21778.
      r21881: Make sure we are very specific when testing whether a backand can handle a
      r21950: After discussion with the Apple and Linux client maintainers,
      r22094: Clarify that SMB_VFS_LOCK should not be used to get lock status.
      r22107: Fix typo.
      r22127: Wrap the AC_TRY_RUN detection for Linux getgrouplist in an
      r22394: Remove test directory once we are finished.
      r22413: Simplify the build rules for plugin modules. Add support for per-platform
      r22416: Remove precompiled headers on clean.
      r22417: Refactor the various daemon run-mode options to make the semantics
      r22418: Support running under launchd. We abstract the method of obtaining
      r22419: Update configure so that we only need one copy of os2_delete.c
      r22441: Add automatic dependency tracking. The dependency generation is
      r22495: Create wrapper to hide the details of obtaining a set of sockets
      r22507: Wrap the method of obtaining sockets to listen on.
      r22527: note the svn location of samba-docs on svnanon.samba.org
      r22614: Only enable GNU-isms in the Makefile if we can be sure that the GNU
      r22631: Remove the possibility of sid_check_is_domain and
      r22633: Fix typo in debug message.
      r22648: Fix comment to match the code.
      r22820: Move FAM libraries from smbd to vfs_fam_notify. Should fix bugzilla #4426.
      r22821: Replace unnecessary AC_TRY_RUN with AC_TRY_LINK. Fixes bug #2287.
      r22826: Fix the gettimeofday test that I broke in rev 22821.
      r22828: Fix typo. Bugzilla #4589.
      r22878: Warn in $PATH contains /usr/ucb. Bugzilla #4295.
      r22879: Tidy the build rules for targets that need the installation paths.
      r22955: Disable dependency tracking by default.
      r23009: Both contains a strchr_m(server,'/') few lines after replacing all / with \.
      r23010: Make the output of "smbcontrol --help" match that of "smbcontrol help".
      r23093: Allow modules with the same name but different types.
      r23094: Update the iconv detection to handle cross-compiles better. If we are
      r23095: Support systems that have their PAM headers in /usr/include/pam.
      r23096: Make the lock failure message prettier.
      r23097: Add a new configure option to disable building SWAT (it is still built by
      r23098: Fix the case of the #include statements so this module can be built on a
      r23295: Apply proto_exists and bin/.dummy dependencies consistently for all
      r23299: Fix the build for !WITH_SENDFILE.
      r23300: AFAICT these are not needed. Jerry, can you please review and revert
      r23312: As per Volker, rename the "windbind:ads" parameter "winbind:rpc only".
      r23352: Don't generate stamp-h. AFAICT it is never used.
      r23393: Support BSD group semantics by making sure that the effective GID is always
      r23396: Make VFS callbacks static. Mark operations as OPAQUE because they
      r23398: Support membership of >16 groups on Darwin by making sure we opt in to the
      r23423: Use the correct structure types in the NT_ACL operations. It's not
      r23470: Fix supplementary group list truncation for *BSD. We need to pass
      r23475: Fix the prototype for sys_broken_setgroups and log *BSD group list
      r23478: Change the handling of the developer CFLAGS so that they are always
      r23480: Fix DEVELOPER_CFLAGS quoting.
      r23502:     Restore exit-on-idle.  Small refactoring for clarity. Exit if
      r23510: Tidy calls to smb_panic by removing trailing newlines. Print the
      r23541: Linking the LSA pipe module only once is probably enough.
      r23576: Fix some confusion between HAVE_BROKEN_GETGROUPS and USE_BSD_SETGROUPS.
      r23611: Fix typo in error message.
      r23962: Linux oplock support is conditional on HAVE_KERNEL_OPLOCKS_LINUX,
      r25142: Panic if setting the group list fails while switching security
      r25161: Don't panic if setgroups fails in non-root mode.
      r25432: Merge module linking changes from SAMBA_3_2 to SAMBA_3_2_0 to reduce
      r9494: Add ac-archive macro for checking GCC options. Use this to add to
      r9939: Add configure check for yapp.
      r10071: Configure checks for IRIX build environment. Test whether we can
      r10097: Remove extraneous include patch heimdal/include. Add configure
      r10100: Check for more networking headers so the resolv.h test can succeed.
      r10157: Remove the last traces of heimdal/include.
      r10159: Dereference padsize before comparing to an int.
      r10161: Check for alloca.h to prevent incorrect local declaration.
      r12972: Use single quotes in the showflags and showlayout targets to stop the
      r13071: Work around a really annoying compiler warning where header file
      r13225: Enable full compiler warnings for developer mode on IRIX.
      r13241: Work around missing AS_HELP_STRING definition in autoconf 2.57. Fix
      r13242: cc-1009 cc: WARNING File = librpc/idl/nbt.idl, Line = 579
      r13243: Bring __FUNCTION__ checks across from Samba 3.
      r13248: Revert revision 13071. It turns out that sys/param.h can be implicitly
      r13249: Check for alloca.h. popt needs this.
      r13255: New CIFS dd client for use in performance testing. The guts of this is
      r13263: Check whether open(2) will accept the O_DIRECT flag. This should fix the
      r13264: Move declaration before code.
      r13280: Tidy up formatting.
      r13362: Rename variables for better consistency.
      r13373: Implement the -p option for smbtorture.
      r13387: Make sure smbcli_parse_unc reports a failure for strings of
      r13388: Report a more helpful error with malformed file options of
      r13397: Propagate the error return from vsnprintf to trap the case where
      r13400: Only return NULL from talloc_asprintf if vsnprintf returns an
      r14930: Coalesce the "feature enabled" tests so that the config summary always
      r15131: Tidy help output. When printing the list of tests, group them by prefix
      r15143: Pull in GNU extensions right at the start of the configure process. This
      r15155: Add strsep replacement from heimdal 0.7.2 for systems that don't
      r15156: For some reason, ln -sf doesn't appear to work as expected on IRIX. Replace
      r15157: Systems with argv limits can't handle the full list of $(DEP_FILE). Replace
      r15183: Hoist the critical sizes initialiser into a header so that modules
      r15184: Declare ntvfs_register with a typed ops pointer.
      r15185: Force all NTVFS modules to provide a critical sizes structure so
      r15186: Introduce ISDOT and ISDOTDOT macros for testing whether a filename is
      r15187: Introduce new param type P_BYTES. This lets config options which specify
      r15188: Restore svn rev. 15183, 15184 and 15185, which I inadvertantly clobbered
      r15189: Add parentheses to force ISDOt and ISDOTDOT evaluation order. Fix typo
      r16556: Add mkdtemp to libreplace. This is apparantly available on Linux
      r16557: Silently succeed when torture_register_suite is passed NULL.
      r16558: Add make rule to generate version.h. Metze, can you please review?
      r19578: Fix trivial typ0.
      r20590: Heimdal uses warn(), so we should prototype it here too.
      r20591: Revert accidental commit that broke the build.
      r20592: Use the Heimdal copy of err.h only if the build host doesn't have it.
      r20593: Kill annoying warning.
      r20594: Match popt.h declaration.
      r20677: Condense compilations rules.
      r20697: A couple of minot cross-compile fixes.
      r20981: Fix cut'n'paste error.
      r21648: Start a UNIX extensions test set. Add a test for the SMBWhoami query.
      r21659: Rename functions.
      r21668: Add SMB_QFS_POSIX_WHOAMI to trans2.h so it's easy to find. Add
      r21710: Add client support for the UNIX_INFO2 info level in the QueryFile,
      r21949: After discussion with the Apple and Linux client maintainers,
      r21951: Hopefully fix valgrind warning.
      r22027: Allow separate build and source directories. Don't follow symlinks
      r22028: Fix include path for the srcidr != builddir case.
      r22029: Make sure we respect $srcdir correctly for the srcdir != builddir case.
      r22030: Simplify include parsing for config.mk files, making sure we get
      r22031: Make sure we rewrite the include directives in CFLAGS to contain
      r22032: Make sure static libraries end up in bin/static.
      r22034: Use builddir and srcdir instead on samba_builddir and samba_srcdir.
      r22035: Introduce HOSTLD which is needed to link the asn1 compiler when cross
      r22036: Make sure both srcdir and builddir are in VPATH.
      r22037: Make sure STATICDIR exists before linking a static archive.
      r22040: Use $< to specify the immediate prerequisit instead of $*. This is
      r22046: Rever r22040, which breaks the build on FreeBSD 5.4 (BSD make).
      r22047: Move suffix rules into smb_build. Enable $< if we are building with
      r22048: Sigh. Commit the other half of r22047.
      r22415: Remove test directory once we are finished. Merge -r 22393:22394
      r22952: Make sure we look at extra_cflags when building custom targets.
      Reorder pthread mutex check so that it doesn't output its result
      Detect Heimdal Kerberos on OpenBSD 4.2.
      Merge ssh://git.samba.org/data/git/samba into v3-2-test
      Move load_case_tables() to after logging is set up. This can log
      Fix connect(2) callers to use correct sockaddr size.
      Make sure NULL is defined to the IPv6 test doesn't spuriously fail.
      Specifically ask for IP4 addresses if we don't have IP6 support.
      Choose a better default for sockaddr length.
      Support fetching very long server lists with RAP_NetServerEnum3.
      Autoconf support for detecting DNS Service Discovery support.
      Fix typo.
      Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-test
      Move dns_sd.h include to fix the build.
      Release per-fsp data on file closure.
      Expose per-fsp extension talloc context.
      Add filesystem capabilities bitmask to statfs info.
      Fix a couple of warnings in mDNS registration. One of these is an
      Remove unused variable 'didmsg'.
      Fix typo in filesystem capabilities bits.
      r26551: Make sure NULL is defined before using it to test for getifaddrs().
      Cache the underlying filesystem capabilities at connection time.
      Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-test
      Fix "may be used uninitialized" compiler warnings.
      Use filesystem capabilities to support case-insensitive filesystems.
      r26551: Make sure NULL is defined before using it to test for getifaddrs().
      Use bool for BOOL and true/false for True/False. We need lowercase
      Remove unused variable.
      smb_build: Make sure LIBRARY_SONAME is never uninitialized.
      smbspool: add my copyright.
      smbspool: Run indent to approximate conding standards.
      smbspool: minor formatting cleanups.
      smbspool: Fix the smbspool build.
      smbtorture: Add RAW-BENCH-LOOKUP micro-benchmark.
      Document the "fam change notify" and "dmapi support" parameters.
      Only search for dia for those targets that actually depend on it.
      Allow make to echo the execution of most commands. This instills
      nroff .fi and .nf directive need to be at the beginning of a line.
      Should use entity-encoded newlines.
      Document the readonly VFS module.
      Document audit vfs module.
      Document default_quota module.
      Document fake_perms module.
      Fix cut'n'paste error.
      Fix cut'n'paste error.
      Restore missing refentry tag.
      Document the recycle VFS module.
      Document fam_notify module.
      Document shadow_copy module.
      Document netatalk VFS module.
      Document cacheprime VFS module.
      Document the commit VFS module.
      Document the prealloc VFS module.
      Make capitalisation consistent.
      Document the cap VFS module.
      Fix cut'n'pasted command summary.
      Document the catia VFS module.
      Fix cut'n'paste error.
      Document the extd_audit module.
      Document the full_audit VFS module.
      Rename module manpages for consistency.
      Make sure all the modules are referred to as vfs_module_name to avoid
      Document eventlogadm. The synopsis does not format correctly and I can't
      I can't spell "choice". Twice.
      Document tdbtool.
      Remove bogus mention of ACLs. Note that quota units are bytes.
      Apparantly putting a newline in the "wrong" place can cause the generated
      Add chflags to the list of audited operations and sort the list.
      Fix default for "store dos attributes". Bugzilla #3777.
      Document the "winbind:rpc only" parameter.
      Double-up on some backslashes so they don't get interpreted by nroff.
      testsuite: skip RAW-BENCH-LOOKUP by default.
      smbtorture: Add RAW-BENCH-TCON benchmark.
      libreplace: Fix readline build with libedit.
      smbtorture: Add list command to smbtorture shell.
      smbtorture: Add history support to shell mode.
      smbtorture: Print global options for interactive "list" command.
      smbtorture: Move interactive shell into a separate file.
      smbtorture: Refactor interactive shell into independent commands.
      smbtorture: Add "auth" command to the shell.
      smbtorture: Enhance shell "help" command.
      smbtorture: Add "target" command to interactive shell.
      smbtorture: Fixx off-by-one command line parsing.
      smbtorture: Fix missing includes.
      smbtorture shell: Allow any config option to be set.
      smbtorture: Make BASE-OPENATTR report a failure if it fails.
      smbtorture: Don't crash RAW-QFILEINFO if there's no alternate name.
      smbtorture: Ensure that the RPC setup returns correct status.
      smbtorture: Emit correct test results if setup fails.
      smbtorture: Make SAMBA3CASEINSENSITIVE report failures properly.
      smbtorture: Fix typo in status message.
      smbtorture: correct error handling in BASE-OPEN.

Jan Engelhardt (1):
      s3/smbldap: add option to disable following LDAP refs

Jean Raby (1):
      Avoid leaking temp file if an exception is raised

Jean-François Micouleau (168):
      makeyodldocs.sh now works with the bash shell
      Adding RPC spoolss code support and some new low-level printing functions.
      rpc_parse/parse_misc.c : defined a new BUFFER5 struct
      Added a new command to rpcclient: eventlog <log> where <log> is System,
      Changed the RPC api definition now first arg is a pipe_struct
      last part of RPC api change.
      Fixed most memory leak and big-endian bug in the spoolss code.
      many small bugs...
      - enumprintprocessors and enumprintmonitors added.
      use gecos field to fill the full_name
      Whoops ! Being over-paranoid is not good.
      Alan (alanh at pinacl.co.uk) found a nasty bug
      Correctly handle the dependent files in the printer_driver_info_3 struct
      Don't duplicate forms anymore, just update the definition.
      don't leak printer handles,
      After 3AM, it's getting hard for Luke :-)
      First commit of the spoolss code to the HEAD branch.
      Jeremy can you check lib/util_unistr.c for codepages support ?
      spoolss definitions.
      spoolss include definitions
      make proto ...
      Hum, I should remove my gloves when I'm in front of an xterm :)
      fix the reply of rpc_alter_context
      more rewrite ...
      converted a couple of bzero() to memset()
      made dynamic the Printer struct. No more limits :-)
      rewrote enumprinterdata. still a bug in it but reproducing it hard and
      added enumprintprocessordatatypes
      changed prs_unistr to parse empty and non-empty strings the same way.
      fixed enumprinterdata.
      Enumprinters level 1: reply *exactly* like an NT server
      restore the spoolss pipe as Jeremy replaced srv_pipe with the one from
      removed unused variable
      getprinter level 0: was to short, found most of the fields, undocumented,
      moved #endif to end of function to compile when dfs is disabled.
      parse correctly getprinterdriver2
      Interim fix for LPRng. If a lpq parsed line start with a space, we skip
      small fix for addprinterex at level 2
      oops ! forgot smb.h in last commit
      fix a bug in enumprinterdrivers
      rewrote getprinterdriver level 3, now correctly handle the dependent
      split addprinterex in preparation for level 1 support and to stop it
      changed all the status code to ERROR_xxx instead of NT_STATUS_xx which are
      off by one error ...
      filled the architecture table (useless for the moment).
      added checks to open both \\server\printer and \\server\share.
      untiltime should be 0 by default to cover the whole 24 hours.
      do some standard_sub_advanced() in api_net_sam_logon on lp_logon_xxx().
      parsing code for reply[open|close]printer in preparation of the event
      Found that the minimum priority is 1 and not 0 on NT.
      reverting Jeremy's changes to enumprinterdata.
      driver_info_6 had a prs_align() that should not have been there.
      the dummy field in driver_info_6 is before the driver version and not
      - The printers are indexed by the sharename in both get_a_printer() and
      we are now sure the printer_info_2 timestamp is updated everytime
      A rather big change set ! (listed in no particular order)
      Found out that we are crashing spoolss in enumprinterdata.
      if no comment in TDB, use comment from print share.
      fix the devmode.orientation being set to 0.
      remove warnings
      in a printer_info_6, driver version is 64 bits long and there is a 32 bit
      printer notify code.
      broadcast printer notify message to all clients. We now have printer
      ignore smbcontrol in bin directory
      samr unknown 0x32 is in fact samr create user.
      fixed samr_create_user(). we now correctly parse the query and the reply.
      fixing prs_unistr2(). For the special case of an empty (but existing)
      someone forgot to update proto.h :-)
      added samr_set_user_info and info_2.
      more cleanup of samr
      I introduced a bug in my last commits. Hopefully nobody noticed :-)
      a netlogon enum trust query doesn't have a function_code at end.
      last part of W2K support.
      alignment issues.
      lib/util_unistr.c:
      first pass of the new group mapping code
      can delete mapping from command line now.
      a missing string conversion.
      fix a bug in printer name handling that jerry reported.
      Big cleanup of passdb and backends.
      fixes to the group mapping code.
      very nasty bug !
      unicode string length is twice longer ;-)
      allow to use usrmgr/svrmgr tools in win95
      allow to rename an NT group
      when retrieving by sid fill also the map.sid field
      split the nt_drivers.tdb in 3 separate tdb files. Should speed-up lookups
      when converting ascii to unicode, if the ascii string is NULL, don't
      add query user info level 20 (for RAS)
      implement:
      more useful debug messages and check if the size are non null.
      The DELL powervault 705 is sending a tcon&x with the service name being
      Ouch ! I didn't think I would have to do that: add 2 new rap calls !
      Fix some unicode string error.
      very simple asynchronous "lpq" thread patch
      print in a human readable format when the password expired.
      allow the samr commands to work back and the help too ;-)
      samr querydispinfo can change level, start index and max entries.
      samr_querydom_info level 1: found the meaning of the unknow fields. And
      add a command to rpcclient: enumprivs
      add another command to rpcclient: getdispname. Show the full description
      fixing enum_privs and get_dispname server code.
      added lsa_enum_sids to rpcclient
      Changed how the privileges are stored in the group mapping code. It's now
      return NO_MORE_ENTRIES in lsa_enum_trust_dom. UserManager is happier :-)
      added lsaenumprivsaccount and lsalookupprivvalue to rpcclient
      added samr_set_domain_info and samr_unknown_2E.
      Changed again how the privilege list is handled in the group mapping code.
      added smbgroupedit to compile by default
      removed the #ifdef USING_GROUPNAME_MAP/#endif blocks
      groups in the Builtin domain S-5-32 are alias and not well-known groups
      added samr_query_sec_obj for rpcclient
      added samr_query_sec_obj. and put back some code to display a security
      added mapping of primary gid to rid thru the group mapping code.
      there was a bug in samr_lookup_names (my fault)
      added queryuseraliases to rpcclient
      added a tdb to store the account policy informations.
      added a boolean to the group mapping functions to specify if we need or
      move proto.h and build_env.h from $(srcdir)/include to $(builddir)/include
      added samr_queryuseralias(). instead of returning BUILTIN_ALIAS_RID_USERS,
      changed the DEBUG level of tdb_pack and tdb_unpack. Instead of 8, it's now
      remove .headers.stamp from the delheaders definition
      again an intrusive patch:
      basic howto
      Fix domain logon that I broke 3 days ago.
      small comment I don't want to loose.
      added info level 3 to samrgetgroupinfo. I don't know what the value is.
      added enum alias groups to rpcclient
      NT_STATUS(0x80000005) maps to ERRDOS,234
      a ugly decoder for SAM_DELTA_DOM_INFO (0x0d)
      decoded SAM_DELTA 0x0e and 0x12.
      added a -V[erbose] option to samsync. Decode a lot of information
      update the ldap support code. it compiles.
      Rafal (mimir) patch for trusts r.
      add lsa_query_secobj server code. level 4 is the ACL, level 1 is the
      tidy up debug
      there is no unknown field in LSA_SEC_QOS
      initialise strings
      fixing bug I introduced.
      in lsa_query_info at level 5 in member mode, we must reply our machine
      added info level 1 to samr_query_alias()
      put back the -l option to rpcclient.
      re-done all of samr_query_disp_info()
      added all level to samr_query_disp_info rpcclient side.
      close some handles. not really necessary but doesn't hurt.
      doesn't keep track of the struct's size we enumerate. W2K doesn't
      added a copyright notice.
      picky about realloc
      remove unused variable
      new message type for nmbd
      rewrote nmbd's wins backend to use a tdb instead of a flat text file.
      that's the wins replication daemon !
      added a shutdown command to smbcontrol.
      nmbd handle shutdown message.
      added shutdown to smbd
      small change in name_resolve_bcast()
      we did not initialise global_myname and global_myworkgroup which lead to
      DEBUG cleanup.
      add NetUserEnum and NetGroupEnum lanmap API calls, untested. I don't have
      this code has been sitting on one of my box for 3 months.
      don't set the owner and group sid offset is there are no owner or group
      some debug log changes, and fixed wrepld crashing when there is no wins
      changed more DEBUG level from 0 to higher.
      fixed tdbtool from core dumping. But the braces to make Chris happy !
      NETLOGON NetServerAuthenticate3 include and parser file
      some cleanup while working on the NETLOGON pipe.
      added cli_net_auth_3 client code.
      allow rpcclient's samlogon command to use cli_net_3().

Jeff Layton (44):
      mount.cifs: fix several problems when mounting subdirectories of shares (try 2)
      cifs.upcall: negatively instantiate keys on error
      mount.cifs: don't prompt for password on krb5 mounts
      cifs.upcall: handle MSKRB5 OID properly
      cifs.upcall: move default install location to EPREFIX/sbin
      cifs.upcall: enable building by default on linux
      cifs.upcall: fix build warning
      cifs.upcall: bump SPNEGO msg version number and don't reject old versions
      cifs.upcall: make most functions static and silence compiler warnings
      mount.cifs: make local versions of strlcat and strlcpy static
      mount.cifs: have uppercase_string return success on NULL pointer
      mount.cifs: make return codes match the return codes for /bin/mount (try #3)
      mount.cifs: use lock/unlock_mtab scheme from util-linux-ng mount prog
      mount.cifs: allow mounts to ipv6 capable servers
      mount.cifs: initialize rc to 0 in main
      mount.cifs: directly include sys/stat.h in mtab.c
      mount.cifs: properly check for mount being in fstab when running setuid root (try#3)
      mount.cifs: update the mount.cifs manpage
      mount.cifs: explicitly handle non AF_INET/AF_INET6 addresses
      mount.cifs: add support for sending IPv6 scope ID to kernel
      mount.cifs: don't pass text ro/rw options to kernel
      umount.cifs: don't build it by default
      cifs.upcall: use pid value from kernel to determine KRB5CCNAME to use
      cifs.upcall: clean up logging and add debug messages
      cifs.upcall: formatting cleanup
      cifs.upcall: declare a structure for holding decoded args
      cifs.upcall: try getting a "cifs/" principal and fall back to "host/"
      cifs.upcall: clean up flag handling
      cifs.upcall: use ip address passed by kernel to get server's hostname
      cifs.upcall: fix IPv6 addrs sent to upcall to have colon delimiters
      cifs.upcall: switch to getopt_long
      cifs.upcall: make using ip address conditional on new option
      cifs.upcall: do a brute-force search for KRB5 credcache
      mount.cifs: print output to stderr
      mount.cifs: check access of credential files before opening
      mount.cifs: don't leak passwords with verbose option
      mount.cifs: get rid of CONST_DISCARD
      mount.cifs: take extra care that mountpoint isn't changed during mount
      mount.cifs: check for invalid characters in device name and mountpoint
      mount.cifs: don't allow it to be run as setuid root program
      cifs.upcall: allocate a talloc context for smb_krb5_unparse_name
      samba: remove cifs-utils tools from build systems
      samba: remove Linux cifs-utils files from samba master branch
      Update URL in README.cifs-utils

Jeff Morriss (1):
      pidl: Fix display field for time fields with newer versions of Wireshark.

Jelmer Vernooij (7702):
      Escape ampersand(&) to better comply to SGML syntax
      Adding pdb_xml and pdb_mysql passdb modules.
      Update CodingSuggestions to include 'indent' arguments for the samba coding
      Add indent argument to put function name and type on same line -
      paramater -> parameter
      sync 3_0 branch with HEAD
      sync 3.0 branch with head
      sync 3.0 branch with HEAD
      sync 3.0 branch with HEAD
      Sync 3.0 branch with HEAD
      Sync 3.0 branch with head
      sync 3.0 branch with HEAD
      Sync 3.0 branch with HEAD
      Sync 3.0 branch with HEAD
      Sync 3.0 branch with HEAD
      Update indent arguments, they're now correct.
      Sync 3.0 branch with head
      Better coding style
      Better coding style
      Sync 3.0 branch with HEAD
      sync 3.0 branch with head
      Update for alpha19
      Update whatsnew for 3.0alpha19
      Add entry about block.so
      Add 'conf' command to load different smb.conf files
      Add vfstest manpage + fix typo in configure
      Update manpage to match to Simo's latest pdbedit changes
      Add script to find undocumented smb.conf options
      Adding documentation for options:
      remove 'admin log' parameter (discussed with Jeremy)
      More smb.conf manpage updates:
      fix typo auth/auth_server.c
      Fix syntax errors
      Remove (broken) index
      Strip URL stuff, not only ending in .html
      New (simpler) documentation system.
      Update generated version of manpages
      Don't report missing "-valid"
      Remove unused variables
      fix typo
      some fixes
      pdb_nisplus converted to the new passdb system API's
      document nisplus sam
      Add changes suggested by abartlet:
      Patch from Paul Green <Paul.Green at stratus.com> to be more POSIX-compatible
      Document -v option
      Make const
      Put in intermediate version of new SAM system. It's not stable yet, code
      Code style + typo fixes
      Silly of me to only test this with --with-sam and not without. Doh!
      Adding new series of text-to-sgml converted files.
      Remove yodldocs - it has been obsolete since 2.2
      Remove obsolete text docs
      Remove obsolete files
      Remove obsolete questions - Preparing for new up-to-date version of faq
      Put in patch from metze (Stefan Metzmacher) to:
      Add new files to Makefile + typo fix
      Example sam module (skeleton) from metze
      Add plugin support for the sam system from metze (based on passdb code)
      RTLD_GLOBAL is not necessary
      small fixes
      Several compiler warning fixes + fix dependencies samtest
      Adding samtest utility used to test sam backends. Compiles but doesn't do
      Don't use global memory context
      Use popt for printing --help message
      Forgot to remove old usage() function
      Add more documents to the developers guide
      Add cifsntdomain
      Remove more obsolete documents
      Make debuglevel a string for use with debug classes
      Use popt for --help
      Correct popt argument info in vfstest
      Move samr_make_sam_obj_sd to lib/util_seaccess.c. samtest now compiles and
      SAM_CONTEXT is const
      Adding makefile for sam_skel module
      Split up documents at chapter level, not at sect1 level
      Several small fixes
      Remove obsolete documents
      Put PRINTER_DRIVER back in
      Fix typo - Thanks Kai
      "disable charset" -> "display charset". oops
      Patch from Stefan (metze) Metzmacher with more updates for the SAM subsystem
      Patch from Kai Kr�ger for the new SAM system
      Use SAM debug class in skeleton - patch from metze
      Add reference to CUPS documentation about how to use unix -> windows
      Add document on tracing system calls
      Make current_sam_methods a const - Patch by Kai Kr�ger
      Put unixsocket calls between #ifdef HAVE_UNIXSOCKET's - required for Stratus VOS
      samtest and vfstest binaries shouldn't go into CVS...
      Update introduction somewhat
      Merge in first command for 'samtest'
      Move functionality to check whether entries for lp_workgroup() and "BUILTIN"
      Add framework for samtest commands
      - Don't put pointer to sam_domain_handle in sam_methods but single domainsid and domainname
      Fix bug in get_methods_by_name
      enum_domains shouldn't crash when there are no domains available
      samtest should load smb.conf by default
      Compile samtest with LIBADS_OBJ and PASSDB_OBJ...
      Fix debuglevel command-line argument
      Don't crash when a backend doesn't have a setsampwent function available - bug reported by metze
      remove extern for AllowDebugChange since we don't use it
      add samtest commands:
      Add samtest command 'enum_accounts' + few typo fixes in sam/interface.c
      notify user when no {domains,accounts} were found
      Make functions return NTSTATUS instead of BOOL
      Change pdb_mysql function to return NTSTATUS
      Change pdb_xml functions to return NTSTATUS
      Don't define PASS_MUST_CHANGE_AT_NEXT_LOGON twice..
      Fix segfault in sam_context_enum_domains - reported by Kai
      Apply Vance Lankhaars' cifs2002 documentation patch - mostly grammar and
      Apply Vance Lankhaars' cifs2002 documentation patch - mostly grammar and
      Include ../include/libsmbclient.h instead of just libsmbclient.h - we don't want to include the globally installed libsmbclient.h - found by jht
      Include ../include/libsmbclient.h instead of just libsmbclient.h - we don't want to include the globally installed libsmbclient.h - found by jht
      Patch from metze to fix enum_accounts
      Change libsmbclient.h -> ../include/libsmbclient.h in 3.0 as well
      Fix typos + report FIXME
      Fix 'plugin' command
      Remove manpage when there are errors during generation
      Add note to test 9 about 'encrypt passwords'
      strchr -> strrchr
      Fix Makefile.in (use variables instead of directory names, don't try to put files in ../../htmldocs, etc)
      remove text documents in source code (they're now in the Developers Guide) - discussed
      Add framework for net command manpage - still contains a lot of FIXME's...
      Update find_missing_doc.pl:
      Be less verbose
      Remove deprecated smb.conf options that were still in smb.conf.5:
      Add initial version of new FAQ
      Remove old faq - all the useful information it contained is now in the new FAQ
      Add htmlfaq to Makefile
      Remove obsolete information from textdocs
      Convert ADS-HOWTO to SGML and add it to the howto collection
      Document 'hide special files'
      Fix generation of HTML versions of manpages
      Fix links in html versions of manpages
      Fix generation of FAQ
      Add generated files for FAQ
      Split up faq in smaller files
      Move Application_Serving.txt to FAQ question "How to use a samba share as a administrative share for MS Office, etc?"
      Convert GOTCHAS to SGML
      Move Recent-FAQ's to the new SGML FAQ
      Convert README.Win32-Viruses DHCP-Server-Configuration and Faxing to SGML...
      Convert even more text docs
      Remove README.DCEDFS as it doesn't contain useful info for developers nor users but only about the
      Remove useless spaces - this broke make proto
      Add more common options to popt_common - and start using
      Use popt_common and use popt for showing help info
      Don't use usage function, but use popt for usage and help info
      Update popt help message and use popt-common
      Distclean should remove scripts/findsmb (patch from metze)
      Don't use SAM FLAGS from smb.h since they're gone - patch from metze
      Convert BROWSING-Config.txt to SGML
      make html
      Add info on chpass on *BSD systems (thanks Krzysztof Kowalik <kkowalik at uci.agh.edu.pl>)
      make_smbcodepage and make_unicodemap are gone in HEAD
      These utilities are not in HEAD
      These utilities aren't in HEAD
      Remove note about the howto being in 'htmldocs' - this notice has
      Add note to HP-UX: use gcc or HP's ansi C compiler and not the freely supplied C compiler
      Document %D. Make a difference between sub_basic and sub_advanced substitutions
      Add FAQ 'I have set 'force user' and samba still makes 'root' the owner of all the files I touch!'
      Try to put some questions from the mailinglist in
      smb.conf.5 is completely up-to-date for 3.0 now. Say so in the VERSION section
      Update for 3.0 (document -B, -s, -n options). Is now current
      Document parameters that have been added in 3.0
      Don't encourage people to use -P - it's obsolete
      Add text doc about what work is left on the docs for 3.0
      Small patch from metze to add 3 parameters to vfs_init, as it requires
      Sync with metze's CVS tree
      Recognize FreeBSD5 correctly (not as being sysv...)
      Don't say we need WINS Replication documentation
      Add faq chapter about the samba features
      Remove obsolete acconfig.h - we now use comments in AC_DEFINE()
      Fix usage message
      Move OID documents to web module
      Document -P and -V (patch from Guenther Deschner <gd at suse.de>)
      Give recycle 3 arguments as required by the VFS interface (patch by metze)
      Only run free_private_data when it's specified (reported by Steve Langasek aka vorlon)
      Only run free_private_data when specified (reported by Steve Langasek aka vorlon)
      Fix memory leak (patch by Steve Langasek)
      Fix memory leak (patch by Steve Langasek)
      Fix bug in '-d'
      Sync with HEAD
      document ldap suffix
      Sync with HEAD
      Sync with HEAD
      Sync with head
      Sync with hEAD
      Sync with HEAD
      Sync with head...
      sync with head...
      sync with head
      Update info on ldap suffix (thanks metze)
      Update info on ldap suffix (thanks metze)
      Fix typo (-s -> -S)
      Fix typo (s/-s/-S)
      Sync with actual changes
      -E doesn't take arguments
      Small markup fixes
      2.2 was the previous release - don't talk about it like it's current
      We also support security = server
      Sync with HEAD
      Sync with HEAD
      Sync with HEAD
      Remove SAM from 3.0 - it belongs in HEAD
      Remove SAM - it belongs in HEAD
      Back out SAM - it belongs in HEAD
      Add autom4te.cache (generated by newer autoconfs)
      Add autom4te.cache (used by newer autoconfs)
      Remove references to SAM
      Remove last SAM files
      Remove SAM files -  they belong in HEAD
      Don't build Makefile for examples/sam
      Add initial vesion of new module system
      Add init_module_function typedef for new module system
      - Remove RTLD_GLOBAL
      The locking description in this doc is outdated - note that
      use sys_dlopen instead of dlopen (thanks to jra for noticing)
      Rerun autoconf
      Rerun autoconf
      add smb_load_modules() to load a list of modules - does this function look ok ?
      Add initial upgrading doc (doesn't contain much currently)
      Update manpages - make ready for 3.0
      Update status of docs - some more manpages are now up-to-date
      Initial updating of Diagnosis
      Convert to popt
      Add popt_common_socket_options
      Add more options to popt_common and use them. Current ones are:
      Convert to popt.
      Remove dummy function I used for testing
      Remove obsolete function usage and some unused variables
      Make IRIX happy
      Adapt to metze's PDB_SET patch
      Handle -p correctly
      Don't pass true to pdb_set_* functions
      Don't pass any booleans to pdb_set_* functions
      Add @BUILD_POPT@ to smbclient
      remove 'sam backend'
      Move explanation of encryption algorithm to dev-doc
      Move encryption algorithm explanation to dev-doc
      testsmbc should only be in examples
      Move testsmbc.c to examples
      Large number of updates - new structure of the HOWTO, better names, introductions, updating to 3.0
      Sync to actual state
      The default for 'announce version' is 4.9, not 4.5 or 4.2
      Add support to build plugins in source/
      Rerun autoconf
      Move pdb_mysql to source/passdb
      Convert pdb_mysql docs to sgml
      Fix various small syntax errors
      Move pdb_xml to source/
      Add pdb_xml docs
      Don't generate ../examples/pdb/mysql/Makefile and ../examples/pdb/xml/Makefile
      Don't generate ../examples/pdb/{xml,mysql}/configure
      Tell popt this command requires 1 'normal' argument and has two optional 'normal' parameters
      Add note about obsolete section
      Fix small syntax errors
      'make everything' in docs
      Small fix from Guenther Deschner <guenther.deschner at suse.de>
      correct make
      Remove pdb_sql.o.. this one got in by accident
      pdb_get_unknown? -> pdb_get_unknown_?
      Adapt to latest pdb API changes - only thing left is group support
      Add group management support (patch from metze)
      Fix small typo
      Back out lp_modules() check - this one got in by accident when I added poptSetOtherOptions
      Make append_log work again
      Start sync with HEAD
      Sync with HEAD
      Last sync with HEAD
      Back out some of my sync changes
      Remove testsmbc.c from source/ in 3.0 as well. It's already in examples/
      Add example for MySQL
      Sync with HEAD
      Add $(POPT_LIB_OBJ) to PROTO_OBJ
      Print the number of returned rows, not the number of fields
      Print the number of returned rows, not the number of fields
      Add note about error that happens when the loopback device doesn't work
      Fix typo
      Fix typo
      Add extra debug info
      Add more debug info
      More improvement of DEBUG output
      Improve DEBUG output somewhat more
      fix typo(s/plaintext pass column/plain pass column/)
      Add smb_register_charset() and use it
      Fix segfault with high debug levels
      Don't throw out WEIRD - yet (I committed my local changes together with my last fix. D'oh!)
      Move VFS documentation to SGML
      Move VFS documentation to the HOWTO collection
      Move working VFS modules to source/modules/
      Add make target 'modules' that currently builds vfs_audit, vfs_recycle and vfs_netatalk
      Don't build Makefile.in in examples/VFS/
      Only add modules/pdb_xml.so and modules/pdb_mysql.so to the 'modules' target if
      Add a DEBUG() that gives the number of successfully loaded modules - useful for debugging
      Ignore Makefile
      Don't crash when there are no arguments specified
      add lp_modules()
      Some more doc updates:
      Load modules in lp_modules() after fork()
      Move 'weird' character set into new 'developer' module
      Add debug2html and *.so
      Remove obsolete scripts and put in module install/uninstall
      Add installmodules and uninstallmodules targets
      small patch to makesure we fallback to <xfs/xqm.h> if <linux/xqm.h> doesn't exist (e.g. in SuSE 8.1) (by metze)
      small patch to makesure we fallback to <xfs/xqm.h> if <linux/xqm.h> doesn't exist (e.g. in SuSE 8.1) (by Metze)
      Update documentation to cover cascaded VFS modules
      a cups printing backend is now available as well
      Remove the #ifdef's for NISPLUS_SAM - there are no function name collisions anymore
      Remove #ifdef's for NISPLUS_SAM - there are no function name collisions anymore
      There is support for the cups printing system now as well
      Update testparm for 3.0
      Add more info about stackable VFS objects
      Remove some obsolete info
      Some small updates - 'ads server' is no longer required for example
      Add smb_register_passdb()
      Use smb_register_passdb() - plus some small fixes
      Rename pdb_mysql and pdb_xml to 'mysql' and 'xml'
      Update to use smb_register_passdb()
      Update for 3.0
      Update for 3.0
      Update docs status document
      Add scripts for modules make rule
      Merge in modules system from HEAD:
      Sync with HEAD:
      Regenerate with newer autoconf
      Add PDBLIBDIR, just like VFSLIBDIR
      merge in some changes from metze's patches (rest follows later, after
      Sync with HEAD:
      remove bin/developer.so - it's not in 3.0 yet
      Fix example command (reported by Cameron Maxwell)
      Fix example command (reported by Cameron Maxwell)
      Add note about storing mysql passwords in smb.conf
      sync
      Put in actual status
      Update link
      Merge in ab's conversion to XML. First step: make SGML documents compatible
      Put in ab's conversion to XML. First step: Make all the SGML docs
      First step in converting to XML: use strict syntax
      First step towards XML: Use correct syntax
      NetBSD also supports dynamic libs
      Merge from HEAD: netbsd supports dynamic libs
      First attempt to migrate the GroupProfiles stuff by John to SGML/XML
      First attempt to convert John's GroupProfiles stuff to SGML/XML
      Convert Anthony's RPC doc to SGML/XML
      Remove textfile from CVS - it's available in SGML now
      Add reference to example mysql.dump file
      Remove obsolete file lib/netatalk.c - We have a VFS module now
      Remove obsolete file lib/netatalk.c - We now have a vfs module
      Use more portable @SHLIBEXT@ instead of .so
      Use more portable @SHLIBEXT@ instead of .so
      Fix *a lot* of syntax errors
      Remove obsolete textdocs - they have been migrated to SGML
      Add draft of universal passdb document that combines ENCRYPTION.sgml,
      Some small updates
      Use the new modules stuff to load dynrpc modules. Basically this means:
      Add -V option (to print out version) to utilities where possible
      Update introduction
      Move all password database stuff to one document - hope this makes it somewhat
      Use sgml syntax for warnings
      Few small cosmetic changes
      Document -k
      Update to current status
      Regenerate
      Remove obsolete files
      Remove obsolete files
      Merge in smb_load_module() function from HEAD
      Compile in lib/module.o
      Make init_module() and thus smb_load_module() return an int.
      - Rename 'modules = ' to 'preload modules = '
      We now use <anchor/> instead of just <anchor> (strict XML syntax)
      Remove documentation for obsolete parameters, but add a note in 'upgrading-to-3.0'
      Fix HTTP error codes (patch by Vance Lankhaar)
      Fix HTTP error codes (patch by Vance Lankhaar)
      Redirect to printer docs for removed options
      Add documentation on line returned by 'add printer command' script
      Add notes on increasing performance on AIX, based on an email from William Jojo
      Add Q&A for people having trouble trying to log in without a proper
      Add some printing question & answers
      Add Ronan Waide's info about the setdriver call.
      Put in some macros for the new modules system
      Put in documentation update by jht
      - Move instructions on compiling samba to appendix
      More updates:
      Regenerate
      Regenerate
      Regenerate
      Fix some comment typos
      Fix some comment typos
      Update to current situation - there's nothing about SAM/GUMS/IDMAP in here
      Update to current situation - should we add SAM/GUMS/idmap?
      Update alpha information
      Update alpha information
      Put in the new modules system. It's now used by passdb and rpc. I will
      Fix module names
      Add documentation on new modules system
      Fix build errors and move pdb_guest.so -> guest.so
      Fix uncompleted sentence
      Fix pdb_unix usage - noticed by jmcd
      It's init_module(), not module_init() as metze pointed out. I really thought I check this well enough :-/
      Don't generate a Samba-Developers-Guide.{ps,txt} with the contents
      Fix corrupt memory reading in smb_register_passdb
      Add make rules for passdb/*.so
      Update wbinfo.1 for 3.0
      Update swat docs for 3.0
      Make swat use popt
      Make swat use popt
      Convert smbcacls to popt
      Update smbcacls.1 for 3.0
      Use True, not TRUE and False, not FALSE
      Build samr as well
      Fix compile errors - don't use pstrcpy() on a fstring
      Fix setOtherHelp() - pointed out by metze
      Patch from Samuel Thibault to convert messages from unix to dos charset. Works
      Patch from Samuel Thibault to convert messages from dos to unix charset
      Only build pdb_ldap if both ldap libs and headers are found
      Add more mappings to the nterr->errno mapping table. It should be fairly
      FALSE -> False (reported by Paul Green)
      Don't use errno's when they're not available
      Use FUNCTION_MACRO, not __FUNCTION__
      Return value in non-void function
      Detect missing -lroken properly on systems without krb5-config
      Merge from HEAD - Detect missing -lroken properly on machines without krb5-config
      Don't use EDQUOT on systems where it's not available
      - Use FUNCTION_MACRO, not __FUNCTION__.
      Add -U, -N, -i, -A, -W to popt.
      Add nicer --help headers
      Convert to popt
      Convert to popt.
      Don't crash when initialising tdb fails
      Also move -V to -C in docs
      Move -V to -C to prevent conflict with -V for version
      Convert to popt.
      Add minimum man page
      Fix typo in comment
      Use True, not TRUE
      Convert to popt.
      We don't need optarg when we have popt
      Don't declare variables after instructions
      Don't duplicate the default group mapping functions - use the ones
      Use popt_common for -s, -d and -V
      Convert to popt.
      Convert to popt.
      Convert to popt.
      Document Tim's smbtree program
      Build the profiles.1 and smbtree.1 manpages
      Patch from metze to generalise POPT_COMMON_SAMBA, with some minor changes
      Fix init function name and return value
      Define POPT_TABLEEND if current popt.h doesn't contain it already
      Add modules support to charset
      Document common arguments with entities
      Revoke some of the popt patch from metze I applied earlier today. It added
      editreg, wrepld and ntlm_aut aren't documented yet..
      Don't use old usage() function, but the one from popt.
      Remove documentation for removed options
      Add mapping for Bad Network Path
      Add static to satisfy exotic compilers
      Simplify modules interface and make it easier to build
      Give error message when module doesn't seem to contain
      Add notes for packagers
      When using --with-static-modules=subsystem, don't build modules that
      Fix two typos
      - Add support to auth/ for the new modules system
      We need to 'preprocess' in popt_common_samba as well
      Remove obsolete defines (because of new modules system). We need
      Print list of builtin modules in 'smbd -b'
      Make variables static to satisfy exotic compilers
      Don't use 'opt'
      - Support building all auth modules as .so's
      Remove old check for TDB SAM (we now have --with-{static,shared}-modules=pdb_tdbsam)
      Add info about dual daemon mode
      Add documentation on unicode
      Add example version identifier
      Always rebuild modules after running ./configure (to prevent
      Add notes about the rebuilding of files
      Do $(MAKE) modules_clean when compiling dynconfig.o. It's not the
      Fix two typos
      Give PARAMS_OBJ more priority
      Don't do $(MAKE) modules_clean twice in a row - it breaks the build...
      - Patch from John to update PDC-HOWTO, add ServerType and CUPS (not finished yet)
      Output backtrace to logfile in smb_panic(), as suggested by mbp
      Fix $LDAP_LIBS
      Use execinfo.h to get prototypes for backtrace_symbols (fixes
      Use SAFE_FREE() instead of plain free() - pointed out by metze
      Remove LDAP_LIBS and just use LIBS again as before. I'll
      Use the new modules system in VFS. If a module can't be loaded with the
      Put backwards compatibility support for old modules in a seperate function
      Doc updates from John + some minor fixes by me
      Also rebuild smbd/vfs.o after reconfiguring
      Compile @VFS_STATIC@ into smbd and vfstest
      - Regenerate docs
      - Point users at the HOWTO Collection instead of 'README' in modules/mysql.c
      Fix installation of auth and charset modules (reported by Stephan Kulow)
      Fix formatting of back traces - pathc by metze
      - Support absolute paths in vfs and charset modules
      'preload modules = ' is already documented
      - Put -valid param back in
      Remove useless popt options
      Add very basic documentation for ntlm_auth
      Add basic documentation on editreg
      Update NT_Security for 3.0
      More doc updates:
      Update some info and typos in PAM-Authentication-And-Samba
      Fix build of shared xml/mysql modules
      Use <note> instead of <emphasis>NOTE</emphasis> (gives much nicer output)
      - Update documentation of 'wins server' (add info about tags, namespaces)
      Add const
      Renegerate docs after John's changes
      Fix searching master ip by bcast when old master has gone away (based on patch by Stephan Kulow <coolo at kde.org>)
      Only link in libs when they are actually used. Works great here and on
      Only link in popt when we need it
      Add EDITREG_OBJ
      Link in lib/snprintf.o with editreg for use on systems that don't have snprintf
      Add KRB5LIBS to smbmount
      Add const (from a patch by Stephan Kulow <coolo at kde.org>)
      Add static
      Use entity for percent sign
      Regenerate docs
      Only use cflags and libs from krb5 when they appear to be working - fixes
      There's no need to use LDAP_CFLAGS, just use CFLAGS
      winbindd should depend on IDMAP_OBJ too, not just link with it
      Fix typo
      Remove compile info
      Add documentation for new messages in 3.0
      Give warning if 'drvupgrade' doesn't get a parameter
      Give warning if 'drvupgrade' doesn't get an argument
      Update for 3.0
      Update for 3.0
      Update to 3.0
      Update manpages for 3.0
      - Use entities in smbsh.1
      Fix formatting of rpcclient manpage
      Document remaining commands
      Update docs status. We have only 1 program left to document (wrepld),
      Convert RoutedNetworks to SGML
      Claim some jobs :-)
      Add entities for some common authors
      - Add some entities for authors
      Use $SHLIBEXT, not .so
      Use $SHLIBEXT rather then so
      Replace 'so' by $SHLIBEXT
      Replace .so by .$SHLIBEXT
      Some layout updates
      Fix typos / layout
      Fix building on platforms without ldap
      Use entities
      Regenerate docs
      Fix build of static libsmbclient
      tallocdump has been removed
      Add note about patch from sun that improves performance on Solaris.
      - Add &author.mimir; entity
      Regenerate docs
      Regenerate docs
      Some layout fixes + typo
      Don't make installclientlib depend on the shared-linked version of libsmbclient - we need it to work on other platforms as well
      make installclientlib depend on the shared-linked or statically-linked version
      BUGS.txt -> Bugs Appendix in HOWTO collection
      BUGS.txt -> Bugs appendix in HOWTO Collection
      Use fprintf(f, ...) instead of plain printf() - patch by Ronan Waide
      Use fprintf(f, ...) instead of plain printf() - patch by Ronan Waide
      Fix double free on error and typo
      Fix double free on error and typo
      Throw out this doc in HEAD as well... only 2 textdocs left!
      Update info about how to generate text docs
      Update info about how to generate textdocs
      Add vorlon's script to convert filenames from CP850 to ISO8859-15
      Put info about solving samba problems in a seperate appendix (it was in the
      Fix some references to 'ENCRYPTION.txt', but that should be the 'User Database'
      Refer to the new 'Problems' chapter
      ENCRYPTION.txt is gone. Pointed out by Will Kemp.
      Use the <othername> tag for second names
      Refer to Problems.sgml
      Use more stricter syntax and work towards Docbook XML migration
      Remove Japanese HOWTO - Monyo has a howto for more recent
      Remove PostScript docs. We didn't ship them before, they're large, only
      Patch from Armijn Hemel <armijn at nl.linux.org> to fix build on
      Patch from Armijn Hemel <armijn at nl.linux.org> to fix build on
      add entity for Not-Implemented Messages
      Some small changes - typos, adding usage for some commands
      Finish documentation on net!
      update to list all current manpages
      net and samba are documented now
      Document NET CACHE
      Get rid of 'sam backend' and --with-sam
      Change ADS CHOSTPASS to ADS CHANGETRUSTPW and add a
      Fix typos
      Fix typos
      Also remove variable associated with lp_sam_backend() - it's dead
      Fix popt usage (backport from HEAD)
      Fix typo
      Backport my backtrace patch from HEAD
      Add some more functions for the modules (backport from HEAD):
      - Change ADS CHOSTPASS -> ADS CHANGETRUSTPW
      *** empty log message ***
      Got in a local document by mistake. Sorry, I need to get some sleep.
      Add smbcquotas manpage written by Metze
      Fix typo in configure.in (merge from HEAD)
      Add selection of the modules to configure (merge from HEAD)
      Fix build of VFS modules statically (we used Makefile variables before setting them)
      Add some more NT to unix error code mappings (from HEAD)
      Use the new modules system for passdb (merge from HEAD)
      use the new modules system for the rpc modules (backport from HEAD)
      Use XML format instead of SGML format (merge from HEAD)
      Print out information about statically linked in modules
      It's #ifdef CONFIG_H, not #if CONFI_H
      Change variable name to get this working on gcc 3.2 (Merge from HEAD)
      Don't build the torture progs in 'make all'
      Add torture to everything..
      Add support for the new modules system to auth/ (merge from HEAD)
      Add make destination for librpc_echo
      Add support for the new modules system to lib/iconv.c (merge from HEAD)
      Check for -1 not EOF as return value of poptGetNextOpt
      Check whether return status of poptGetNextOpt is -1, not EOF
      More merges from HEAD:
      Only declare backtrace variables when using them
      Only use backtrace variables when we can use them
      Add -berok to LDSHFLAGS on AIX so modules build on AIX 5 (reported
      Fix syntax errors
      Update SGML layout.
      Fix syntax errors
      Always use DSSSL stylesheet
      Regenerate docs
      Regenerate docs
      Add notes on Japanese charsets from Monyo
      Remove SamBackend variable (is already gone in HEAD)
      Do not use lp_parm_bool() and lp_parm_ulong() yet. They're only in HEAD
      'vfs object' is a list not a string (we have cascaded VFS modules in 3_0 as
      Regenerate docs
      Pdb modules are in $libdir/pdb not $libdir/passdb
      Pdb modules are in $libdir/pdb not $libdir/passdb
      - Fix modules build of pdb_mysql and pdb_xml
      Default to "passdb.xml" as default output filename instead of "-"
      Default to "passdb.xml" as default output filename instead of "-"
      Remove obsolete information from Speed.sgml and move client-specific
      Fix syntax error
      Create ../textdocs, ../htmldocs or ../manpages if they don't exist already
      Add new part 'Troubleshooting'
      Move information about locking to seperate chapter and
      Add question about scope id's
      More docs are up to date now...
      Add note from "Roylance, Stephen D." <SROYLANCE at PARTNERS.ORG> about Solaris9 and
      Patch from Stephan Metzmacher to add default arguments to lp_parm() smb.conf
      Patch from Guenther Deschner to fix build with gcc 3.2
      Patch from Stefan Metzmacher to add default parameters to the lp_parm()
      Patch from Guenther Deschner to fix build with gcc 3.2
      Check for absolute paths by only checking the first character of the module name.
      Check for absolute paths by only checking the first character of the module name.
      Get rid of module_path_get_name()
      Get rid of module_path_get_name() and use the find backend function
      Declare static function before using it
      - Get rid of module_path_get_name()
      Complain about duplicate charsets at debug level 0 instead of 2
      In 3.0, pdb_mysql and pdb_xml are in passdb/
      Move pdb_mysql and pdb_xml from modules/ to passdb/, just like they are
      Don't store UID or GID
      Don't store UID or GID
      Use &author.jerry;, not &person.jerry;
      --with-tdbsam is gone
      The net manpage is complete, say so in the VERSION section
      Fix the 'weird' charset module. Also, built it by default for
      Fix the weird charset and build it by default for ./configure -enable-developer
      Add the weird charset in 3_0 and build it by default for ./configure --enable-developer
      Remove documentation for unixsam and plugin.
      Update for 3.0 (update information about the docs and ./configure)
      Update for 3.0 (Update information about the docs and ./configure)
      Remove docs-status - all it's contents are in bugzilla now
      Remove docs-status - all it's contents are in bugzilla now
      Add 'smbiconv' program - a clone of the 'iconv' utility
      Add 'smbiconv' program - a clone of the 'iconv' utility
      Document 'nmblookup -M -- -'
      Document 'nmblookup -M -- -'
      Make some more functions static
      Fix number of arguments to asprintf()
      Fix number of arguments to asprintf()
      Update for the new modules system. Also, use Makefile rather then Makefile.in
      Update for the new modules system. Also, use Makefile rather then Makefile.in
      Replace references to the old textdocs by references to chapters in
      Replace references to the old textdocs by references to chapters in
      Update for new modules system
      Update for new modules system
      Update for the new modules system
      Use entities and add overview of directories
      Bugs should go into bugzilla!
      Add note on AIX
      Remove uid and gid column
      Add example authentication module
      Add example auth/ module
      Use NTSTATUS as return value for smb_register_*() functions and init_module()
      Use NTSTATUS as return value for smb_register_*() functions and init_module()
      Change order of parameters to smb_register_passdb()
      'add machine script' is used to create unix accounts for machine accounts
      Make the version numbers ints (patch from metze)
      Use ints for the version numbers in the smb_register_*() functions (patch by metze)
      Don't crash if the underlying VFS doesn't support ACL's
      Don't crash if the underlying VFS doesn't support ACL's
      Fix disk quotas support on HP/UX (patch by David Nixon)
      Fix disk quotas support on HP/UX (patch by David Nixon)
      Merge over Alexanders' conversion to XML
      Merge over Alexanders' conversion to docbook XML
      Remove obsolete file (no longer necessary with docbook XML)
      Merge over Alexanders' conversion to Docbook XML
      Add smb.conf.5 manpage source
      Add helper files for docbook XML
      Add support files for docbook 2 latex
      Oops. Missed some files
      Merge over Alexanders' conversion to docbook XML
      Move external links to new appendix called "Further Resources"
      Move external links into new chapter "Further Resources"
      Update LDAP documentation for 3.0
      Add note about 'ldap trust ids'.
      Add note on LDAP_EXOP_X_MODIFY_PASSWD. ldap passwd sync documentation should be
      Patch from metze to add exit and interval events. Useful for modules
      Remove unused variables
      Update list of possible acctFlag values
      Add metze's exit and idle event patch
      Check for xmlto. Not required and not used (yet)
      Add generating text versions of the docs using xmlto
      Fix <!DOCTYPE>'s
      %f -> %p (reported by Kurt Pfeifle <kpfeifle at danka.de>
      Patch from metze and me that adds dummy smb_register_*() functions so
      Patch from metze and me that adds dummy smb_register_*() functions
      Reverse previous patch from Stefan and me after comments by Andrew Bartlett.
      Reverse previous patch from Stefan and me after comments by Andrew Bartlett
      Reverse latest module_dummy patch from metze and me.
      Remove latest module_dummy patch from metze and me.
      Forgot one file.
      Patch from Luke Howard <lukeh at PADL.COM> that fixes some weird handling of
      Patch from Luke Howard <lukeh at PADL.COM> that fixes some weird handling of
      Compile shared modules with the -fPIC flag. Reported by Steve Langasek aka
      Use -fPIC when compiling shared modules. Reported by Steve Langasek aka vorlon.
      Some minor fixes in language and content
      Some minor fixes in language and content
      Lots of minor, mostly layout fixes.
      Fix list of servers in 'smbclient -L' (debian bug #194553, patch by Heine Larsen)
      Fix list of servers in 'smbclient -L' (debian bug #194553, patch by Heine Larsen)
      Add entities for 'not' and 'rootprompt'
      Add document on contributing code to samba
      Fix syntax and don't require internet access when building docs
      Minor syntax fixes
      Update pdbedit manpage for 3.0
      Update documentation for 'passdb backend' : include mysql and guest backends,
      Oops, forgot to add a file on contributing patches to samba
      Fix typo
      Add ability to generate tex, dvi and ps files
      Fix PDF build
      Fix syntax (<parameter> not allowed in <title>'s of <sect{1,2,3}>)
      Very large number of markup fixes, layout updates, etc.
      Add notes about xmllint and PostScript or textoutput
      Add some more web links
      Add titles to tables
      A lot of syntax updates, consistency when using certain tags and converting ASCII -> XML
      Add note about umasks
      some VFS options are now obsolete
      Get the events API right. Patch from metze with some minor modifications.
      Fix the events API. Patch by metze with some minor modifications.
      Don't crash when doing command name completion. Fixes debian bug #194776
      Don't crash when doing namecompletion in smbclient. Fixes debian bug #194776
      Add smb_register_idmap(). Based on a patch from metze
      Update to reflect current API
      Setting account policy values is done using -C, not -V. Fixes bug #120
      Setting account policy values is done using -C, not -V. Fixes bug #120
      Document -valid. Fixes bug #32
      Update for new API. Fixes bug #89
      Remove module_path_get_name() - it's not used anywhere anymore and was a bad idea anyway.
      -l has become -L
      Add index
      Fix parameters for LaTeX
      Add common error
      Add some more common errors
      Remove questions that have been moved to 'Common Errors' in the HOWTO Collection.
      Large update for layout. Everything is consistent with the rest of the HOWTO
      Fix some syntax errors
      Add XSL for generating attributions page
      Generate attributions page and use it.
      Remove some <parameter> tags in <title>'s, which cause an \discretionary in
      Make the attribution page look nicer.
      Add some static. Patch by Stefan Metzmacher <metze at metzemix.de>
      Some language and XML syntax fixes.
      Fix XML syntax
      <strong> is not a valid tag.
      More minor syntax fixes
      Each <link> element should have either 'content' or an 'endterm' attribute
      Add an attributions page to the Developers Guide as well
      @$(@XSLTPROC) -> @$(XSLTPROC). Caught by Vance Lankhaar.
      Fix smb.conf build
      Fix broken URL's
      ENCRYPTION.txt has been merged into the HOWTO Collection
      Fix the building of the docs in all formats:
      Use filedes as first argument to fsetxattr, not the undefined variable 'path' :-)
      - Regenerate docs
      Don't segfault when -b is specified (fixes debian bug #196833)
      Fix 2 typos (reported by Marc Groot Koerkamp <marc at its-projects.nl>)
      Add authors
      Handle <contrib> when generating attributions page
      Update from Stefan Metzmacher
      Update VFS documentation (patch from Stefan Metzmacher)
      Update from Stefan Metzmacher
      Remove obvious question that's answered better in the HOWTO
      Ignore generated files
      Fix some information, based on comments by Andrew Bartlett.
      - Only put PNG files in CVS, not EPS.
      Patch from metze to update VFS docs to include notes on multiple instances
      Fix case
      Fix for non-bourne shells
      Add DTD used by XML passdb backend
      Update link to DTD
      The return value of init_module functions is NTSTATUS, not int
      Fix building idmap_winbind as shared module
      Make static (patch from metze)
      Add installmodules to install
      VFS modules are located in the subdirectory vfs of $LIBDIR
      Fix typo
      Add netlogon debug registry key info
      Move up intialisation of logging, so we catch errors in handling 'preload modules'
      Remove the MODULES_CLEAN variable. It's no longer necessary since
      Document "client use spnego"
      Fix a typo
      Fix some syntax errors and typo's
      Use entities
      Generate docs.
      regenerate docs
      Regenerate manpages
      Add smb_event_id to list of return types (patch from metze)
      Update from Andrew Bartlett with documentation for
      Fix typos
      Update for docbook XML
      Be less verbose, support outputting all types of variables(both G and S)
      Add make target 'undocumented'
      Move find_missing_doc.pl to the docs system
      First results of 'make undocumented' - fix some typos and remove obsolete option
      Don't print status message for every smb.conf option processed - it makes tracking down errors difficult
      Fix typo
      Document 'security = ads'
      Fix typo
      Fix style
      Improve MySQL library detection, add support for MySQL 4
      Update upgrading docs
      Add DTD for the samba-specific docbook tags
      Stylesheet for processing samba docs
      Merge over book changes into 3_0 CVS
      Fix some errors
      Nicer layout for the latex stylesheet
      Proper dependencies for dev-doc
      More fixes
      Add some images from the book
      PS and PDF build correctly now
      Manpages work now as well
      Remove db2latex
      Better compatibility with official syntax
      Better compatibility with official syntax
      Conform better to the specs
      Last set of syntax fixes
      Final update. Links work now as well
      Regenerate docs!
      Regenerate docs!
      Regenerate docs
      Create symlinks for modules that register multiple functions (fixes bug #91 )
      Add some more new common options
      regenerate
      Regenerate
      regenerate
      Remove last document in the text docs - it's replaced by Monyo's japanese
      Fix typo
      This file has been in the HOWTO for ages
      File is part of the HOWTO Collection
      Put 'wins hook' example back in. Fixes bug #268)
      Fix overflow in vfs_recycle module (and hopefully also bug #291)
      Makefile.in
      Add utility that takes a samba log file (at least level 5 for headers and
      Get packet contents correct as well.
      Fix some memory issues. It is now possible to convert extract packet data
      Add idmap diagrams from Chris and John
      Add ability to output native pcap files without the requirement for text2pcap.
      Remove nasty hack in modules system. We don't recompile files anymore
      Document modules changes
      Remove accidently added SMB_MODULE_PROVIDES() lines
      Print more than 1 packet in hex mode
      Document get quota command
      Fix typos
      document set quota command
      Fix doc build
      Document 'ldap group suffix', better documentation for 'ldap user suffix'
      Regenerate docs
      Regenerate docs
      Document 'server schannel', 'client schannel', 'client signing', 'server signing', 'client plaintext auth'
      document 'kernel change notify', 'acl compatibility' and 'ldap idmap suffix'. All smb.conf options are documented now.
      Add script that detects useless AC_DEFINE()'s in configure.in
      Add script that reports unused macros/defines
      Sync autogen.sh from samba3
      Remove some obsolete files (like in samba3)
      Update SWAT documentation
      - Small fix in smbsh.1.xml
      Add log2pcap manpage
      Document -q
      - Update 'preload modules' documention (bug #304)
      Add log2pcap
      Make compiling vfs_readonly static possible
      Add W2k Deploy HOWTO
      Add log2pcap to ignorefile
      Keep list of ignored and shared modules
      Commit some old stuff from my laptop; put in Docbook/XML version of mount.cifs manpage
      Regenerate docs
      Fix typo in smbcquotas manpage
      Only set sids when they're retrurned by the MySQL query
      Remove obsolete files.
      Fix typo. Found by Aurelien Degremont
      Fix typo. Found by Aurelien Degremont
      Fix a bug and warn when configuration file values are incorrect. Thanks to
      Fix typo
      Fix typo
      Fix bug and do more error checking. Noticed by Wilco Baan Hofman <wilco at andoburg.nl>
      Regenerate
      regenerate
      regenerate
      regenerate
      Add some updates necessary to build the 3.0 docs (forgot them last night).
      Patch from Metze to document events interface
      Follow DTD more strictly
      More updates to better conform to the DTD
      Add draft about new registry subsystem
      Testparm fixes:
      Testparm fixes:
      Remove obsolete file
      Update MySQL configuration scripts, add module macros
      Add Dutch swat translation
      Refuse to configure if --with-expsam=$BACKEND was used but no libraries
      Refuse to configure if --with-expsam=$BACKEND was specified, but
      Move sysquotas autoconf tests to a seperate file.
      Move sysquotas autoconf tests to a seperate file in tests/
      Remove duplicate samba.7 manpages (with first letter uppercase)
      We need to make sure that the files that contain the static_init_$subsystem;
      We need to make sure that the files that contain the static_init_$subsystem;
      CP* modules are not related to development
      Compile libsmbclient with $(DYNEXP) (fixes bug #505)
      Compile libsmbclient with DYNEXP
      Add check for precompiled headers
      Add new fields bad_password_count and logon_count
      Add iconv test utility
      Remove check for SAM, which has already been removed
      Add make rule for smbiconv
      Update to the modules system. Fixed:
      CVS: ----------------------------------------------------------------------
      Fix build of winbindd with static pdb modules
      Add script useful for finding checks for headers that are never used
      Initial step at cleaning and splitting up configure.in.
      Add note about new configure structure.
      - Put functions for generating SQL queries in pdb_sql.c
      Merge commit to 3_0: add pdb_pgsql
      Fix -s option to smbcontrol (#908)
      Write bug number like in the rest of the file
      Add smbget utility, a simple wget-like utility that uses libsmbclient.
      Use StrCaseCmp, not strcasecmp. Should fix winbind build on IRIX
      Fix swatdir location for --with-fhs
      Fix --with-fhs for swatdir
      Fix --with-fhs for swatdir
      Add script for finding unused function checks in configure.in
      Remove testing utility for removed SAM system
      Don't built gums by default
      Fix ETA Calculation when resuming
      Fix eta calculation when resuming
      Add -O (for writing downloaded files to standard out) based on patch by
      Add -O (write downloaded files to stdout), based on patch from
      r379: Fix syntax error in example mysql table
      r547: Add entry for NT_STATUS_DUPLICATE_NAME in the ntstatus to unix error mapping
      r947: Patch from Fabian Franz <FabianFranz at gmx.de> that allows you
      r1111: Rename vsnprintf to smb_vsnprintf so we don't get duplicate symbol errors
      r1219: Don't make proto parallel
      r1220: Revert last change. Apparently, NOTPARALLEL blocks all parallel builds
      r1320: Return an error when the last command read from stdin fails in smbclient +
      r1863: Fix build of exp stuff on Solaris (#1474)
      r2390: Update some URLs and locations in README
      r2473: Convert internal data to UTF-8 before calling libxml2
      r2826: Complain if 'password chat' doesn't contain the %u variable. based on a patch by Ronan Waide
      r3974: - Fix assignment of a couple of fields in pdb_{mysql,pgsql}
      r3985: Fix bug with 64bit fs support
      r3987: Use sys_readdir() instead of readdir()
      r4370: Don't assume the compiler supports declarations after statements.
      r4653: Output file of "test" pdb backend should be called test.so
      r4788: Don't log mysql password at debug level 1.
      r4802: Don't try to update a column with the name "NULL"
      r5705: Have unknown_6 default to 1260 (fixed #892)
      r5718: Don't update fields that haven't changed (fixes #1957)
      r5733: Don't crash when the SID column contains NULL (Fixes #2316)
      r5915: Remove --with-manpages-languages= from configure (we only have them in one
      r6570: Add socket_wrapper library to 3.0. Can be enabled by passing
      r6585: Fix socket-wrapper-enabled build for the tdb tools
      r6635: Fix build of the various sql pdb backends after new talloc.
      r8961: Merge IRIX fix for socket wrapper
      r9965: Fix some typo's
      r10720: Add helper function that does prs alignment on a specified number of bytes.
      r10747: Remove overparanoid check that broke RPC function calls with no
      r14684: Remove obsolete file (belonged to pdb_xml)
      r14696: make pdb_find_backend_entry public (for use by an external "multi" pdb backend)
      r17121: Fix maintainer information for pdb_*sql.
      r17307: Add datarootdir setting (required for newer autoconfs)
      r17806: Make NTTIME a UINT64_S rather than a separate structure consisting of
      r17810: Use datarootdir variable generated by newer autoconf versions. (fixes warning)
      r17814: Add .bzrignore file
      r17816: Merge my cupsprot branch. It is now possible to (optionally) specify :port in
      r17817: Disable compilation of LIBNDR (it uses uint64_t).
      r17819: Add some more ignores.
      r18188: merge 3.0-libndr branch
      r18230: Build Samba3 RPC client<->libndr glue code.
      r18232: - Trim number of regexes applied to generated files
      r18233: Use the autogenerated cli_unixinfo rather than the old one.
      r18469: Use new pidl-generated DFS client code.
      r18481: Use pidl-generated server side code for dfs.
      r18487: Add NULL checks
      r18526: Use generated server for unixinfo RPC interface.
      r18572: Use the autogenerated client and server for the echo interface and implement
      r18632: Make C++ compilers happy.
      r18654: Rename "struct uuid" => "struct GUID" for consistency.
      r18688: get rid of the now obsolete keepref attribute
      r18690: Regenerate RPC files after pidl changes.
      r18692: Dump debug data when DEBUGLEVEL >= 10
      r18695: Zero initialize ref ptrs as well.
      r18713: Autogenerate srvsvc and svcctl interfaces
      r18744: Disable some tests that only work when RUN_FROM_BUILD_FARM is set.
      r18745: Use the Samba4 data structures for security descriptors and security descriptor
      r18778: Fix comparison.
      r18802: Use the pidl-generated code for the srvsvc interface, both client and server code.
      r18823: Fix some errors in the srsvc handling code and start running the RPC-SRVSVC
      r19390: Add some tests that are known failing against samba3.
      r19542: Regenerate IDL.
      r19552: Fix names of known failing tests.
      r19591: Use `import' and `include' in the IDL and regenerate.
      r19848: Sync with Samba4 - no top-level unique pointers.
      r19849: Fix compilation after idl changes.
      r20674: Regenerate NDR parsers after pidl changes. This should fix a couple of
      r20832: Remove extra pointers previously added to unique [out] pointers. Instead,
      r20837: Use real type name, to fix compilation with -WC++-compat
      r20839: Fix other C++ warnings
      r20875: Pass DCE/RPC server call arguments as a struct rather than as separate arguments.
      r21203: Regenerate C files after pidl updates.
      r21385: Regenerate IDL after pidl changes, sync winreg.idl from samba4.
      r21388: Merge support for providing replacement system headers.
      r21462: Fix EnumValue (?)
      r21562: Regenerate gen_ndr after pidl changes.
      r21565: Import ndrdump (doesn't compile yet, needs table support functions).
      r21651: Add ndrdump to samba 3. This only works from external source at the
      r21652: Fix samba3-specific initialization
      r21655: Regenerate after pidl bugfix.
      r22055: Port the endpoint mapper (and functions it requires) to Samba 3.
      r22578: Remove python build directory and generated smbadduser.
      r22583: Support non-Linux GNU systems (such as Debians' GNU with FreeBSD kernel and
      r22584: Don't hardcode specific Python version.
      r22641: Install tdbdump and tdbbackup.
      r24340: Use standard data type uint32_t rather than tdb-specific u32.
      r24341: Make libreplace provide offsetof.
      r25415: Merge the 3.2-perltest branch that switches Samba 3.2 to use Samba 4's selftest code. See the mailing list for details.
      r25494: Sanity check --with-samba4srcdir argument.
      r25498: Remove checks that are always true.
      r25557: merge libreplace fixes from samba4
      r25572: Fix warnings (values are always true).
      r20: Add the registry library. Still needs a lot of work,
      r31: More registry updates. regdiff/regpatch work now.
      r33: Fix torture test after IDL changes.
      r36: - Start using memory pools in the registry library
      r46: Add CreateKey function (still working on it)
      r61: - Implement first call in the winreg rpc server
      r62: Fix the build
      r128: Another registry update. Changes:
      r129: Convert other utilities to new API
      r137: Add notes about handles in dcesrv pipes
      r162: Minor bugfixes:
      r164: Viewing remote registries with gregedit works now
      r165: Add support for viewing registry values in gregedit
      r166: Fix enumerating values in nt4 backend
      r168: - Cleanups in rpc backend
      r169: Fix gregedit
      r174: Win95 registry files (like USER.DAT) can now be partially parsed
      r181: Parsing windows '95 registry files now works (including values)
      r182: Fix a couple of segfaults
      r183: More bugfixes
      r187: RPC registry backend fixes
      r190: More RPC updates
      r199: More registry rpc updates
      r274: Be somewhat more POSIX compatible
      r655: Fix if() logic
      r682: Typo fixes
      r686: - Add SMB_EXT_LIB_FROM_PKGCONFIG()
      r692: Add libwinregistry
      r693: Make static
      r727: Start working on debian package for samba4
      r734: Fix crash bug
      r735: Fix some paths
      r736: Add list of supported and unsupported MIDL attributes
      r738: Use same error message format as is used by compilers when reporting
      r739: Implement GetNumRecords() call from eventlog pipe, including a torture test
      r803: Add README file about building the debian package
      r819: Fix seg fault in rpc backend, found by Andrew Bartlett
      r825: - Introduce support for multiple roots (or 'hives')
      r828: Some fixes in the core and regshell concerning hives and
      r829: Implement 'hive' command
      r830: Use pull_ucs2_talloc() instead of acnv_u2ux() and fix a memory leak.
      r832: Only show menu items for backends if they're present
      r833: Compile error
      r834: Fix gconf and dir backends
      r955: Update debian package rules... builds now
      r956: More debian updates:
      r1032: Fix RPC backend segfault
      r1033: Include new manpages
      r1034: Couple of small (popt) fixes
      r1035: Support shared modules again
      r1036: Get module initialisation function correct when building shared
      r1037: Always export all symbols
      r1038: Check whether a module actually exists before attempting to load it...
      r1039: Remove description of unexisting option.
      r1118: Read-only enumeration of keys in the LDB backend works now :-)
      r1119: Saner keyboard shortcuts
      r1147: Support enumerating values
      r1432: - Move the various Gtk-specific parts from the registry code into a directory gtk/
      r1433: Properly use GtkTreeView:
      r1449: Use the config system somewhat better in libcli/auth
      r1450: Oops.. Missing files :-)
      r1451: More missing files...
      r1455: More Gtk+ updates:
      r1617: Start working on the svcctl pipe
      r1641: Finish IDL for EnumServicesStatus
      r1642: Torture test for EnumServicesStatus, almost finished.
      r1699: Formatting update, bugfixes
      r1700: make version default to 0.0 (same as midl)
      r1701: Bugfixes to Tim's ethereal parser generator
      r1703: - Lots of RPC updates, adding new pipes and protocols.
      r1706: More IDL pipes
      r1711: Add ServerAlive2
      r1714: Initial docs on DCOM stuff and build utilities
      r1736: - Pidl updates:
      r1742: Add the IDispatch interface
      r1774: Add the uuids of the known exchange pipes
      r1786: Add support for the 'helpstring' attribute on interfaces
      r1799: List more uuids. From
      r1838: Updates from the airplane:
      r1867: Add README file in build/pidl/
      r1929: CHeck if cpp on AIX likes /* */ better then //
      r2254: Fix a couple of compiler warnings...
      r2257: Tab completion support in regshell (complete command names and key names
      r2510: Make C++ compilers happy, use ifdef instead of if
      r2518: Some long overdue changes:
      r2519: Registry RPC pipe fixes (use struct registry_key instead of REG_KEY, etc)
      r2530: Don't put main in proto.h
      r2531: Fix crashbug
      r2532: Don't run EnumValue torture test for now (idl needs fixing, doesn't compile)
      r2538: Support IPv6 as transport for MSRPC. Tested against Win2k3
      r2594: Remove call to Gtk+ 2.4 specific code
      r2667: Remove forward declaration of static function from function. GCC 3.5 and 4.0 don't accept declarations of static functions inside other
      r2683: Fix a couple of compile warnings, depend on gtk+-2.4
      r2684: Free the right talloc context (don't panic when encountering illegal multibyte
      r2687: Add ORPC flag (used by DCOM)
      r2696: DCOM updates:
      r2699: Correct handle ServerAlive() and ServerAlive2() + add torture tests
      r2704: Complain about 'object interfaces' that don't have version 0.0 (the standard
      r2705: Don't try RemQueryInterface2 for now (doesn't validate)
      r2735: More DCOM updates:
      r2740: Finish the RemoteActivation interface. Torture tests will follow
      r2741: Definition for ISystemActivator...
      r2896: Add torture test for EnumValue()
      r2897: Fix double registration (of the registry subsystem) bug
      r2898: - Support enumerating remote registry values
      r2911: Fix bug in opening relative keys
      r2913: - Don't print hive name if it is NULL (regtree)
      r2914: ... and support enumerating values (data is not handled yet, only the names)
      r2915: Open domain first before enumerating users and groups
      r2920: Support passing a handle to a SAMR pipe to a RPC Binding or Select
      r2921: Add a few more protocols and fix the numbers associated with some of
      r2922: Add note about 'server-side' binding strings
      r2933: Only pull a union once when it occurs in a subcontext
      r2937: Make sure all memory is initialized
      r2938: Use IDL to dissect the RHS of floors in protocol towers
      r2939: Use /* */ style comments
      r2940: Complain when there is an attempt to register a backend for a subsystem that does
      r2956: Fix towers_length for now. I'm currently working on a pidl extension
      r2973: Allow comma's inside parentheses in property arguments
      r2990: Add support to pidl for autogenerating ndr_size_*() functions. Adding
      r3006: Poptify
      r3032: Somewhat stricter syntax for binding strings:
      r3033: Use the C struct directly if we can instead of generating a binding
      r3043: Use binding strings for specifying endpoints. The property for
      r3045: Allow object-uuid at ... binding strings
      r3046: \\PIPE\\ is internal (not actually included on the wire)
      r3047: Always include a \ again before the pipe name we're opening. Without a
      r3111: Add a few more protocol identifiers, rhs for ncalrpc
      r3112: Fix two more instances of epm_towers (sorry, metze!)
      r3114: - More work on merging the various structs that describe endpoints
      r3118: Eliminate struct dcesrv_ep_description and replace it with
      r3123: Add dcerpc_binding_build_tower()
      r3124: Add dcerpc_binding_from_tower()
      r3125: Store object UUID directly instead of using a pointer (struct dcerpc_binding)
      r3136: - Allow specifying socket type when adding smbd service
      r3156: Couple of fixes in the conversion functions between binding structs and
      r3157: Add ncacn_http
      r3158: Use the new tower build functions to generate protocol towers, making it
      r3162: Add client-side support for the ncalrpc: and ncacn_unix_stream: transports.
      r3163: Add server side support for ncalrpc: and ncacn_unix_stream:
      r3164: Look up ncalrpc identifiers using the EPMAPPER. ncalrpc now works nicely :-)
      r3165: Support local connections in Gtk+ tools
      r3166: Bunch of small GUI updates. gwcrontab works again, as does selecting a
      r3167: Add a member 'endpoint' to the dcerpc_binding struct to use instead of
      r3168: Use generic function for looking up endpoints
      r3169: unlink() is called on the listening unix socket every time a child process
      r3205: Create ncalrpc directory if it didn't exist yet
      r3209: - Create directory for ncalrpc with correct mode
      r3211: Add a graphical endpoint mapper view tool
      r3212: Never put a hostname in a ncalrpc binding string
      r3213: Make credentials in a binding dialog optional
      r3214: Load the config file (required for ncacn_np:)
      r3301: Simplify code
      r3329: Add support for IPv6
      r3330: Use IPv6 for RPC client connections if we can
      r3331: Add string descriptions for a couple more WERROR's
      r3332: Check result codes in some more places...
      r3334: Allow disabling IPv6 support using socket:noipv6
      r3338: More work on the winreg RPC server. Opening hives is now supported, most other calls
      r3340: Various fixes in the registry code. Implement the EnumKey call
      r3348: More registry fixes and additions. The following functions work right now against samba 4, at least with a ldb backend:
      r3367: More registry updates.
      r3368: Default to rpc backend with binding "ncalrpc:" if no backend was specified in the various registry tools.
      r3369: More registry updates
      r3370: Initial work on Add Key/Delete Key/Add Value/Mod Value/Del Value support in
      r3374: Couple of bug fixes
      r3397: Fix IDL for ComplexPing and SimplePing, including tests
      r3412: Add NCACN_SPX and NCADG_IPX transports
      r3413: RemoteActivation updates and fixes
      r3414: RemoteActivation torture test
      r3415: Add support for parsing a Request file before a Reply file so we can
      r3416: Typos
      r3431: Allow optional semicolon after interface definitions
      r3432: Support WERROR's in arguments (not just as return type). Some of
      r3433: Use .mk file for librpc/
      r3435: Remove accidentally committed line...
      r3440: Add support for "coclass" to the pidl parser - the idl keyword that
      r3442: Add support for the "call_as" and "local" attributes.
      r3444: Don't use random data as endpoint if no default endpoint is known and no
      r3486: Add RemoteActivation server
      r3487: RemoteActivation works! The only odd bit is that I get either a
      r3488: Start using RemoteActivation
      r3489: Add a couple more DCOM tests (Both OxidResolver and RemoteActivation are
      r3490: All tests work against NT4 now
      r3501: More work towards MGMT support in gepdump
      r3513: Add (the infrastructure for) DCOM support. Contents:
      r3514: Allow specification of username, password and domain and try to set up connection.
      r3515: Fix RemoteActivation correctly this time (-:
      r3516: dcerpc_epm_map_binding now checks the endpoints it nows first
      r3517: Fix the build - Sorry!
      r3536: Some minor IDL updates/fixes/additions
      r3586: Fix some of the issues with the module init functions.
      r3601: Lots of smaller DCOM updates and fixes. Adds oxid tables, proper
      r3602: Add looking up transport by endpoint protocol
      r3606: More DCOM fixes:
      r3611: DCOM client support works!!
      r3625: Couple of minor DCOM bugfixes
      r3626: More minor DCOM fixes
      r3629: A bit of work on the DCOM server architecture, small fixes
      r3630: More work on DCOM server side
      r3636: Fix python build
      r3667: Small COM fixes
      r3689: Large number of COM updates:
      r3690: Use perl's 'use' statement to include the build system parts
      r3691: Use packages
      r3695: Add intermediate functions to use when migrating from .m4+.mk to .pm files
      r3696: Feed directly to perl, rather then creating an intermediate file
      r3726: More simplifications/fixes in the build system
      r3730: More build system fixes and simplifications
      r3733: More build system fixes/features:
      r3734: Fix some incorrect dependencies
      r3735: Allow building subsystems as static libraries (.a files). To enable
      r3736: Fix the build for builds that haven't got all libs samba
      r3737: - Get rid of the register_subsystem() and register_backend() functions.
      r3738: Use a hardcoded list of .mk files rather then "find" (breaks on
      r3739: Remove a bunch of unused m4 macros
      r3740: Convert more files to .mk, fix the build
      r3744: Support building subsystems as a shared library. Modules don't work yet,
      r3751: Some fixes to using enable and disable for subsystems, ext libs and modules
      r3752: Remove direct.pm for now (not used and breaks solaris build)
      r3753: Have some modules default to "NOT" and enable them again when
      r3768: Fix build of libraries
      r3790: use a registration function that is called from dcerpc_*_init functions
      r3861: - Put ndr and rpc client code in seperate files
      r3881: Split up the LIBNDR_GEN subsystem into NDR_* and RPC_NDR_* subsystems.
      r3891: Add rot (Running Object Table) interface
      r3896: Correct header files in rpc server templates plus
      r3898: Work towards local/server DCOM support, start working
      r4105: Fix IDL for QueryValue() and add a torture test for it.
      r4106: Add full name of two more hives
      r4132: - Bunch of rather large fixes in the registry
      r4133: Cache results of subkey and value queries
      r4137: Make *_open_key take a registry_key instead of a hive (more efficient
      r4140: Get rid of close_hive (replace it with talloc destructors).
      r4141: Fix crash bug in ldb backend
      r4142: Check result value of OpenHKU and OpenHKCR
      r4154: Add definitions for HKEY_PERFORMANCE_TEXT and HKEY_PERFORMANCE_NLSTEXT
      r4155: More destinction between hives and predefined keys
      r4156: GetKeySecurity() IDL and torture test
      r4157: QueryMultipleValues IDL and torture test
      r4158: Fix IDL for InitiateShutdown and AbortShutdown and run both only
      r4166: More small API fixes, keep registry structs as small as possible.
      r4167: Fix CreateKey
      r4168: Implement QueryValue in the server
      r4175: InitiateSystemShutdownEx IDL and torture test
      r4204: Arguments to reg_del_key more like the RPC for more efficient usage
      r4209: Fix several smaller bugs
      r4210: Add simple example of a registry hive LDIF file
      r4213: Store REG_SZ in UTF16, not the unix charset..
      r4298: Update to credentials.h after feedback from Andrew Bartlett
      r4299: Store REG_SZ, REG_EXPAND_SZ and REG_DWORD values in human-readable (and human-editable) format in
      r4362: dlopen() doesn't imply -ldl
      r4363: value "none required" is set if no library is needed (autoconf does this the same way)
      r4371: Add "Create Key", "Delete Key" and "Delete Value" buttons.
      r4373: Support setting values and fix a segfault
      r4390: Registry value and key names are case-insensitive
      r4394: Use 'raw' protocol towers in the lists in the endpoint rather then
      r4395: Generate "newhklm.ldb" using provision.pl
      r4396: Generate newrootdse.ldb in provision.pl as well
      r4457: Fix IDL + add torture test for InqObject
      r4458: Create ncalrpc directory with 0755 rather then 0700 so non-root users
      r4619: Remove extern declaration of dcerpc_pipes, which is now static
      r4621: Add torture tests for epm_Insert and epm_Delete
      r4623: Convert values from UTF8 to UTF16 in gconf registry backend (caught
      r4624: Several crash fixes for DCOM
      r4723: Predefine libnet_JoinDomain as it's used in proto.h
      r4780: tolower() requires ctype.h
      r4787: Clean up gepdump code somewhat.
      r5209: Fix the endpoint mapper to work with IPX endpoints (which
      r5237: Add error code for "class not registered"
      r5240: Don't return WERR_OK when no values were found (reported by Matt Cobb)
      r5286: Some first steps in making the pidl code somewhat more generic for the
      r5288: Make alignment code more generic
      r5319: Make some more alignment code generic, move NDR-specific stuff to
      r5320: Treat structs and unions somewhat more similarly:
      r5338: More efforts to handle types similarly.
      r5345: Some more minor code readability fixes.
      r5360: Remove a couple of unused functions.
      r5361: Rename some functions, add tests to validator.
      r5362: Add pointer_default() support to pidl. pointer_default()
      r5363: - ndr_%_ptr -> ndr_%_unique_ptr
      r5376: ORPC is NDR specific, so move it to ndr.pm.
      r5377: Put push/pull/print functions for the various types in a hash.
      r5378: Put ndr size generators and alignment calc functions in hash as well.
      r5410: Automatically determine indenting for the ndr parsers
      r5417: Add wrapper function for typedefs hash rather then using the "our" keyword,
      r5422: Fix ethereal parser generator.
      r5426: Warn about embedded ref pointers.
      r5427: NTSTATUS is treated by pidl as a 'real' scalar now.
      r5437: Allow Samba4 to be compiled by tcc (www.tinycc.org). It still crashes when linking though.
      r5438: Keep new CFLAGS if the compiler accepted them.
      r5439: (hopefully) fix build on older perls. Thanks to tridge for pointing this out.
      r5440: Some more generalizations
      r5441: Put push, pull and print arguments in hash as well
      r5442: Use argument list generator functions from NdrParser in NdrHeader
      r5443: Fix HeaderProperties(). Not re-enabling yet because I don't know why it
      r5447: Add some utility functions for arrays and use them.
      r5449: More array handling cleanups. This should make the code more
      r5450: Add test function for "embedded" conformant arrays
      r5452: Add implementation + torture test for echo_Surrounding
      r5453: Treat "embedded" arrays (surrounding structures) somewhat
      r5463: Make need_wire_pointer() return the number of required
      r5464: Simplify print function generator code.
      r5465: Add support to multiple levels of pointers in pidl.
      r5466: Put the type information list in a seperate module
      r5475: Move some existing and new type information functions to typelist.pm
      r5476: Move ORPC extensions to DCE/RPC into seperate file.
      r5477: - Move some more of the typelist stuff out of ndr.pm
      r5478: Bunch of small optimizations and generalizations.
      r5479: Add ODL input support.
      r5485: Support nopull,nopush in header.pm as well.
      r5486: - Use references to interfaces in coclasses rather then
      r5487: - Allow disabling modules
      r5490: The big (D)COM commit! :-) Contains most of the changes described in the
      r5491: Don't load the DCOM-specific services by default (yet)
      r5492: Update example coclass, autogenerate some parts.
      r5493: Some code simplification
      r5494: Some more code simplification, some additional comments.
      r5506: Simplify the use of subcontexts and make them a bit less a special case.
      r5598: GTK+ cleanups, remove some globals
      r5660: Reduce number of generated "{}"'s
      r5661: Be a little stricter on syntax regarding arrays. A pointer to an
      r5662: eventlog uses dom_sid so it depends on security
      r5663: Revert some changes I didn't mean to commit...
      r5669: Couple of minor clearifications, simplifications.
      r5671: Bunch of fixes related to arrays and pointers to arrays.
      r5672: Use switch_type() and the token storage mechanism for unions:
      r5674: - Re-enable DCOM support.
      r5675: - More DCOM bug fixes
      r5676: Fix some alignment issues and IRemoteActivation
      r5680: Don't crash if none of the predefined keys is available (reported by Alexander)
      r5697: Give an error message when a ref pointer is NULL (requested by tpot)
      r5709: Leave out the pull/push call with NDR_BUFFERS for not just
      r5775: Remove some unused functions (unions are no longer as special as they used to be)
      r5785: Fix subcontext pushes
      r5852: Rename ndr.pm to ndr_parser.pm
      r5853: Move some of the functions not specific to the Samba NDR parser generator
      r5866: Add InitShutdown IDL and torture test.
      r5867: winreg depends on initshutdown now (uses initshutdown_String)
      r5871: Remove file with unused function (that uses fstring)
      r5906: Fix the usage of the internal popt (make proto should ignore it)
      r5917: First step in using the new cli_credentials structure. This patch
      r5924: Use cli_credentials in libnet/.
      r5928: Use cli_credentials in:
      r5929: Use cli_credentials for the SMB functions as well.
      r5930: Fix initialisation of dcerpc_binding->authservice
      r5932: Use cli_credentials somewhat more in the Gtk+ code
      r5963: Fix parameter passing for gentest and locktest
      r5976: SIDs can't have more then 5 subauths (caught by [validate] and
      r5977: Fix uninitialised memory bug in ndr_pull_ref_ptr(). This fixes the
      r5980: Fix double free after unexpected disconnect.
      r5986: Fix the build. Metze, could you please verify that this fix is correct?
      r5987: Add credentials callback for gtk+. The gtk+ apps now no longer
      r5989: Display authentication information (list of available auth protocols
      r6015: Add testprogs/ directory and original rpcecho sources
      r6018: Add idl and server side for Test_Surrounding
      r6019: Add IDL and server side code for Test_DoublePointer
      r6045: Couple of small GTK+ fixes
      r6070: Fix typo's and fallback to "" as default user name if no
      r6088: Add the socket_wrapper library. This is a very simple library that
      r6130: More work on the NDR tree generator
      r6139: Move socket_wrapper to a seperate directory
      r6140: - Add configure option for enabling the socket-wrapper library, so it
      r6143: Put compression support in the subcontext handling functions rather
      r6144: Apparently there are more systems that have AF_UNIX then
      r6159: Move some more general ndr stuff (alignment calculations) to ndr.pm
      r6180: Use token_lists for storing switch values
      r6181: Use ndr_print_set_switch_value() here as well.
      r6306: Add simple WMI client test script
      r6442: Add mechanism for configuring ldb independantly of the rest of
      r6477: Remove call to autoheader as autogenerated header files are not used
      r6478: Add 'make install' and a pkg-config file
      r6485: Move LDAP detection M4 file and use it for the standalone ldb build
      r6486: Add 'make install' and pkg-config file.
      r6487: Use autoconf for standalone build of tdb
      r6546: Fix ldb standalone build
      r6564: - Fix bug in socket_wrapper
      r6567: Use "real" prefix for 'make test'
      r6568: Some more small 'make test' fixes
      r6577: Make test works without installation now.
      r6600: Rework of the GTK credentials system; the credentials information is
      r6611: Add mailslot test program
      r6617: Let --enable-developer imply --enable-socket-wrapper
      r6621: Warn when the user is trying to use socket wrapper
      r6622: Add talloc manpage in DocBook XML, based on SGML version by Garry Williams
      r6664: Obey overrided CC in the Makefile
      r6752: Patch by Steven Edwards to improve portability to mingw32
      r6760: Update debian packages
      r6787: Use debhelper for the debian packages
      r6790: Use config.h file for ldb and add test for stdint.h
      r6795: Make some functions static and remove some unused ones.
      r6804: Add config.h for talloc (and use it)
      r6805: Remove two remaining references to gensec_gsskrb5
      r6807: Fix in-tree build of talloc testsuite
      r6825: Fall back to chsize if ftruncate is not available
      r6828: More portability fixes
      r6836: Allow optionally passing in a destination filename for NDR parsers
      r6838: Remove unnecessary calls to gensec_gsskrb5
      r6839: Add support for building subsystems as shared libraries. This can be
      r6842: Move to .mk file
      r6854: Add --quiet option to pidl
      r6856: Add a couple of tests that test for the behaviour described in
      r6857: - Support [public] on functions
      r6859: Add ndr_align tests, use environment variables ($CC, $CFLAGS, $LDFLAGS)
      r6860: Add some allocation and alignment tests, remove uint64 from list of scalars
      r6862: Add some more tests
      r6863: lib-friendlier names + fix some dependencies
      r6874: Fix static library build
      r6924: Remove some unused functions.
      r6926: More build farm fixes:
      r6961: Add RPC-WINREG to list of win2k3 tests
      r6973: Merge new version of pidl into the main SAMBA_4_0 branch.
      r7022: Add support for parsing definitions of multi-dimension arrays.
      r7029: Make array support in pidl similar to that in other IDL compilers. We should
      r7036: Allow more operations in several properties (such as size_is, length_is,
      r7037: Add enough pointers in the header file as well
      r7059: Use namespaces for pidl and the build system, so we can later on
      r7109: Change noid() to noopnum() so it isn't confusing to people familiar with id()
      r7110: Remove invalid use of id()
      r7111: Patch from Alan DeKok for correct use of the needed variables in Decl*
      r7113: Move manpages from docs repository to source repository
      r7114: Convert ldb documentation to DocBook/XML
      r7117: Move more manpages to the source repository
      r7121: More subcontext fixes. A subcontext does not always imply internally deferred
      r7122: Some cleanups, simplification of the code.
      r7159: Improve the messages from pidl's validator module.
      r7160: Initial work on an esp function wrapper generator
      r7161: - Add support for "aliases" for pidls scalar types and add a few aliases.
      r7165: Fix pidl tests
      r7166: Move replacement stuff to seperate directory
      r7195: - Fix echo pipe
      r7198: Add IDL for browse service
      r7248: Remove enum that is causing trouble on AIX
      r7249: Cope with struct member rename
      r7273: Update a bit
      r7274: Move m4 files to seperate dir
      r7278: Oops, don't compile librpc as library..
      r7288: Remove empty wrapper function
      r7305: Some cleanups, use write out CFLAGS variable
      r7307: Add phony rules for OUTPUT_TYPE OBJLIST, e.g. it is now possible
      r7308: Make dependency lists in the Makefile shorter (see discussion on samba-technical)
      r7310: Support TARGET_CFLAGS thru recursive make
      r7311: Use TARGET_CFLAGS for depend list as well
      r7312: Add IDL for ncadg packets.
      r7313: Prefix a few functions with ncacn_ rather then dcerpc_ because they are
      r7314: the various ncacn and ncadg PDU's share the same namespace
      r7315: Add support for custom makefile targets, e.g.:
      r7373: Disable reg_gconf by default, allow building it with --enable-reg-gconf
      r7377: Integrate browse service stuff more nicely
      r7552: Use ParseExpr() for [value] attributes; allows
      r7590: Cleanups, add more notes on new string code.
      r7604: Bunch of small pidl updates. Mostly removing unused functions,
      r7605: Display properties in header files again.
      r7695: Add support for the [string] attribute that works in the traditional sense. Not
      r7702: Implement [charset()] attribute.
      r7706: Move ParseExpr() to util.
      r7729: Small fixes to the charset stuff.
      r7761: Don't let phony targets cause a rebuild of the binaries. Thanks
      r7762: Clean up make help files.
      r7764: Generate _ALL_OBJS list.
      r7766: Treat NOPROTO as boolean.
      r7790: Allow remembering more configure-level data (and
      r7850: Support mkdir() with just one parameter. Patch from
      r7859: Merge a few scripts to one script that checks for the following unused
      r7861: Nicer output, remove some false warnings.
      r7866: Remove some unused autoconf macro calls.
      r7891: Improve output of unused macro find script
      r7942: Debian packages updates and fixes. Use dh_install for diverting
      r7943: Add 'make manpages', fix 'make installman' and 'make uninstallman'.
      r7958: More debian packaging updates; packages build now with
      r8012: Add UUID for NDR64 transfer syntax.
      r8263: Some small pidl fixes, start working towards supporting installation of pidl.
      r8264: - Use standard perl package structure for pidl.
      r8265: Fixes to the pidl test suite.
      r8266: Update debian packages
      r8270: Export some symbols, making the code more readable.
      r8274: Export some more symbols.
      r8294: Add PLAN file for samba3->samba4 upgrade (Google Summer of Code) project.
      r8434: Win32 portability updates from Steven Edwards <steven_ed4153 at yahoo.com>:
      r8436: Check for sys/sockets.h
      r8437: Win32 doesn't have u_int*_t
      r8438: - More win32 portability fixes. Now fails on socketwrapper (because
      r8559: Couple of (D)COM updates:
      r8566: Couple of code cleanups
      r8612: Parse::Pidl::NDR:
      r8613: Remove a couple of empty loops.
      r8614: Add COMRESULT/HRESULT scalar type
      r8621: Simplify code. Add support for nested structures back into the header generator.
      r8622: Support parsing new structs/unions/enums/bitmaps without typedef in
      r8623: Fix warnings in ODL-generated code.
      r8690: Code cleanups, improvements necessary for dependencies (not added yet)
      r8758: Use official version numbering standard for debian packages.
      r8784: Install pidl in "vendor" directories (matches debian policy)
      r8801: Change --output to --outputdir and make pidl add a data representation prefix
      r8803: Rename --header to --ndr-header and --parser to --ndr-parser
      r8806: Move data representation-independent data into seperate header
      r8809: Merge validator with NDR.pm (validator is NDR-specific)
      r8811: Fix the build..
      r8825: Move list of object files to .mk file
      r8826: Make configure generate config.mk files (with the external libraries
      r8827: Fix install on some systems.
      r8829: Generate hash rather then a lot of globals.
      r8832: Automatically rebuilding C files if headers change (in developer mode)
      r8838: Add ugly hack to prevent make from barfing out because it doesn't know
      r8841: disable dependencies for now. To try dependencies, uncomment the 3rd-to-last line of Makefile
      r8933: Fix missing prototype warnings
      r8936: Use incremental linking. This appeared to be supported on
      r8940: Add TDR (Trivial Data Representation). The aim is to use this later for
      r8942: Move intermediate subsystem output files to bin/subsystems/
      r8953: Move a few utility functions
      r8955: Move a bit more of the build process to the Makefile
      r8966: Simplify the makefile generation system a bit.
      r8968: More simplifications
      r8972: More simplifications...
      r8974: Support makefile fragments in .mk files
      r8979: Bunch of makefile fragment inclusion fixes:
      r8985: Automatically generate make dependency rules for
      r8988: Don't remove Makefile.core in distclean...
      r8991: Change Makefile.core to main.mk to prevent accidental removal problems.
      r8994: Clean up some more autogenerated files so I can predict when I'm going to
      r8995: Add heimdal headers back to "basics" target... should fix the build for now
      r8996: More build fixes...
      r8997: Define CPP for hosts that don't default to 'cpp'
      r9001: Fix warning in make clean
      r9033: Add the 'installmisc' make target back again
      r9052: Support lex/yacc compilers without support for -o
      r9053: Change order of dependencies (.h files are used when creating the
      r9081: Work on new ethereal parser generator, partially based on
      r9088: More ethereal parser generator updates
      r9094: More ethereal parser updates, only header fields left to fix + actual data call
      r9104: Finish ethereal parser generator. Still a couple of minor issues
      r9128: More ethereal parser generator updates. String handling is still broken as
      r9150: The ethereal parser generators work now. Thanks to Ronnie Sahlberg for
      r9161: More etheral parser generator fixes
      r9162: Fix a couple of data types
      r9164: Fix subcontext handling
      r9168: Fix subcontext handling
      r9429: Update link to DCOM spec. Fix HRESULT values.
      r9430: Remove obsolete file.
      r9433: - Update TODO & README
      r9437: Update PLAN and README for Samba3 compatibility layer
      r9438: Add initial files for ldb_map
      r9439: Make sure the remainder of the array is always initialized if the buffer is
      r9440: Fix bug introduced by new zero-padding code. Caught by the buildfarm.
      r9441: Use "const char *" for fixed-size arrays with charset() because
      r9442: Support some more primitive types. Fix charset support.
      r9445: Support flags, add DATA_BLOB support
      r9448: Work on reading the secrets tdb. Build tdbsam support by default.
      r9449: Add simple utility for dumping Samba3 domain information. Currently
      r9450: Initial work on reading group mapping database.
      r9453: Add samba3_samaccount (fix the build)
      r9455: Support for reading the policy database
      r9459: Move pidl up one level (to prevent too much nesting)
      r9460: - Move pidl to lib/. This fixes standalone installation of pidl.
      r9461: Couple of very small fixes.
      r9462: Fix locations for generating the yapp files
      r9463: Fix DumpFunction() (was ignoring elements)
      r9472: Add read-only version of Samba3 registry database (doesn't compile yet)
      r9519: Use the value() value of an element when that element is used in
      r9549: Rerun ./config.status if one of the .mk files changes
      r9552: Add idmap support.
      r9555: More updates. Everything except for secrets.c compiles now..
      r9556: Define a few libsamba structs
      r9557: Some more updates. Use combined function for parsing a set of
      r9576: Couple of small fixes. Generate notice indicating
      r9581: Registry db
      r9587: Fix SWAT data dir for --with-fhs
      r9589: Support reading secrets tdb
      r9591: - Remove empty file
      r9595: Add ldb map module
      r9602: Add support for reading share_info.tdb and smb.conf.
      r9616: Finish ldb_map module (still needs a lot of testing though...)
      r9621: Bunch of bug fixes. Add 'format' option to samba3dump (text,summary,ldif)
      r9623: samba3dump now generates LDIF for the registry hives from registry.tdb
      r9624: Support writing wins.ldif
      r9672: Fix build for compilers that don't like undefined-length arrays at the end of structs...
      r9684: Remove unused parameters (about 70)
      r9685: Add tests for samba3sam mapping module
      r9686: Another round of bugfixes. Works somewhat now, when running under valgrind ;-)
      r9689: valgrind-clean now. Editing works now mostly, you just lose half of your
      r9690: Extend test + fix several bugs
      r9698: Fix a bit of memory management
      r9699: Add as much attributes the current Samba4 SAM has to the mapping table (ignoring most of them, currently..)
      r9700: Change DATA_BLOB in ejs back to struct datablob
      r9712: Bunch of small fixes
      r9718: Work a bit on the SWAT interface
      r9722: Initial attempt at converting samba3dump to EJS..
      r9724: Rewrite samba3dump in JS. The summary works now, but the full output
      r9725: Fix full output mode of samba3dump as well. Thanks to tridge for
      r9735: More work on generating a valid Samba4 configuration using the
      r9744: - [upgrade.js] Start working on smb.conf conversion.
      r9746: Add "staff" as possible alternative to wheel
      r9751: Remove C version of samba3dump (the EJS version works nicely as well).
      r9754: Upgrading with the command line utility now works, at least partially (-:
      r9755: Fix crash bug in SWAT login
      r9756: One-way upgrade from Samba3->Samba4 basically works now
      r9762: Add support for reading good old smbpasswd files
      r9766: Prevent erroneous OOM message
      r9767: Fix typo
      r9768: Arrrgh.. Right this time.
      r9770: Couple other bugfixes
      r9771: - Prevent ldb crash when a invalid DN is added
      r9785: Add some testdata
      r9786: Move ldb_map into ldb/modules/
      r9789: Patch from Volker that fixes the build on AIX.
      r9792: Rename StrCaseCmp -> strcasecmp_m. All these years I was thinking
      r9793: Be more verbose, check for errors in upgrade script.
      r9798: Add generic functions for handling smb.conf files (the parameters don't to be pre-declared). Also doesn't use any globals, so multiple files can be loaded at once.
      r9800: Add EJS interface to param. tridge, sorry this overlaps a bit
      r9805: Add 'data' property to param EJS object
      r9806: Some more test data
      r9807: Use talloc in fd_lines_load() and file_lines_load(). The return
      r9808: Improve code that selects what "passdb backend" to import from.
      r9813: Conver testsuite for samba3sam module to EJS
      r9816: Work on testsuite for upgrade
      r9825: Correctly handle length argument to substr()
      r9826: Add some more OOM checks
      r9827: Convert 'passdb backend' rather then 'passdb backends'
      r9828: Fix path to testdata (tests are always run from source/)
      r9829: Registry key and value names are case insensitive
      r9830: Fix support for importing registry values. Extended the examplre registry tdb.
      r9831: Check whether the two admin passwords entered were equal.
      r9834: More tests for the upgrade from Samba3
      r9835: Make ldb_map compile in the stand-alone LDB build
      r9842: More error checks in the ldb_map modules, extend testsuite
      r9849: Extend testsuite a bit more.
      r9854: Finish ldb_map testsuite
      r9855: Finish ldb_map testsuite
      r9857: Fix rename/delete issues
      r9898: Add extra registry key used by WinXP (see r9894)
      r9899: Be more conservative about what is sent to the remote server in ldb_map.
      r9908: Generate posixUser and posixGroup as well
      r9912: Fix another bug in ldb_map.
      r9915: Some more mappings. Fix weird sAMAccountName values.
      r9918: Fix two copy-n-paste bugs that were preventing the modification
      r9919: Remove debug statement from samba3sam
      r9925: Fix swapped nt/lm password hashes - caught by Andrew Bartlett
      r9948: Be a bit less verbose
      r9949: Portability fixes for mingw32
      r9951: Add another value to the default HKLM.
      r9957: Switch to using DATA_BLOBs internally in TDR
      r9959: Fix bug where data offset was incorrect after parsing element with
      r9995: Add file describing the REGF file format in IDL.
      r10006: Insert correct header file.
      r10007: Merge data_blk and data_len member of registry_value into a DATA_BLOB.
      r10009: Fix bug in uint8 parsing functions
      r10010: Support base_type() attribute
      r10013: Support zero-sized strings.
      r10014: Support ?, : and = in attribute arguments.
      r10015: Change the NT4 registry backend to use the IDL-generate parse functions.
      r10016: Support reading security descriptors on keys.
      r10019: Only return NT_STATUS_NO_MEMORY if the alloc failed..
      r10020: Support for malloc / realloc / free in HBIN blocks
      r10025: Add some utility functions for storing/loading tdr encoded data
      r10026: Move registry header file to lib/registry
      r10027: Use blob length for keeping track of buffer length, add TODO
      r10028: More registry fixes.
      r10030: Add hierarchical memory allocation to TDR's pull functions
      r10032: Add tdr generated files to clean target
      r10038: Update instructions on using gcov with ldb
      r10041: Add 'gcov' make target. Run
      r10043: Only recompile subsystems that actually need recompilation
      r10052: Add 'print' command
      r10074: Pass CPP to pidl via environment variables rather then config.pm. This fixes the
      r10091: Fix perl warnings
      r10093: Fix the HF_FIELD conformance file command
      r10094: Support quoted arguments in conformance files
      r10110: Add some more warnings, implement FIELD_DESCRIPTION
      r10111: Make pidl by default assume the input file is an IDL file rather
      r10116: Print out a couple more warnings.
      r10123: Add more warnings. Support quotes in conformance command arguments
      r10172: Add --dump-ndr-tree argument
      r10173: Document new option
      r10181: Fix the build
      r10190: Do some very basic input checking when provisioning.
      r10191: Return the right error code in the case of a time skew. Windows will now
      r10207: Add some const
      r10245: Get rid of XFILE in a few places.
      r10246: Remove unused function
      r10283: Eliminate some more use of autoconf substitution variables.
      r10287: Compile compilers for build host. This fixes some bits of
      r10294: Generate Makefile directly rather then thru Makefile.in. Autoconf
      r10295: Remove dependency on Data::Dumper
      r10296: Fix function pointer handling for older perl versions
      r10315: Remove use of fstring and pstring in dynconfig.c
      r10316: More dynconfig fixes
      r10323: Add first bits required for getting compile with scons working. This does
      r10330: Add SConscript to more subsystems. Some of the tdb tools build now.
      r10332: Fix the build - messaging uses UNIX_PRIVS
      r10336: Add sconscript for a couple more subsystems.
      r10348: Add scons scripts for remaining subsystems. Most subsystems build now,
      r10356: Make the proto generator work with scons
      r10366: More scons fixes. Building et, asn1, lex and yacc files sort-of works now
      r10374: Add HAVE_* defines (on command-line or in config.h file) for scons +
      r10380: Use pod-style documentation rather then XML-doc, in good perl style.
      r10381: Be a bit stricter on pod syntax
      r10388: Add version numbers (required for CPAN)
      r10389: Add Manifest file (required for CPAN)
      r10393: More type checking in scons
      r10420: Two minor scons fixes
      r10438: Move portability functions to lib/replace/; replace now simply ensures
      r10450: Use exit code 1 in case of fatal errors
      r10452: Couple of small scons updates - ignore .sconsign files
      r10453: Fix the build
      r10456: More SCons fixes:
      r10476: Move some more types to libreplace. Fix missing strndup errors
      r10478: More work on proto headers; we now generate a couple of smaller ones
      r10480: Fix build for people that don't have pidl installed
      r10487: Some small updates to the manpage.
      r10507: Let lib/replace take care of defining socklen_t for heimdal
      r10509: Some more sconscript fixes. Now getting to link stage for smbclient
      r10510: Decrease the amount of data included by includes.h a bit
      r10513: Reduce some use of pstring. The main reason some parts of the code still
      r10514: Add str_list_make_shell() and str_list_join_shell()
      r10515: Handle replacement of "domain logons" and "domain master" by "server role"
      r10516: Add seperator argument to str_list_{make,join}_shell()
      r10517: Get rid of use of next_token() in lib/samba3/
      r10521: Also check sys/socket.h for definition of socklen_t (needed for AIX)
      r10528: Add credentials.h back into includes.h as some compilers don't
      r10531: (hopefully) improve detection of socket-related functions in external libraries
      r10532: Replace next_token() with str_list_make()
      r10533: Eliminate another use of next_token()
      r10576: Add testprog for named pipes. Also add GNUmakefile's for cross-compilation
      r10577: Fix error in ReadFile()
      r10578: Run LOCAL-STRLIST by default
      r10579: str_list_make() can return NULL
      r10580: More generic approach for adding endpoints
      r10581: Remove some unused globals + make static
      r10582: Nicer output (try to avoid linewraps)
      r10586: Add MergedObject() builder. Default to Library() rather
      r10587: Remove unused constants
      r10588: Remove more unused files, macros
      r10592: Add "adfgets()" function, which allocates and reads a line from a fd.
      r10594: Add initial framework for lib/registry torture tests
      r10604: Put in the new registry "patchfile" code (similar to ldif
      r10605: Forgot one file...
      r10662: Eliminate pstring and friends.
      r10663: Eliminate use of pstring
      r10664: Include limits.h in replace.h for HOST_NAME_MAX
      r10678: Add debug helper
      r10694: Add some work I did this afternoon on getting pidl to output Samba3
      r10698: Fix support of enums in switch_type() in the ethereal parser generator
      r10713: Couple more updates to the Samba3 parser generators.
      r10715: More Samba3 parser generator improvements:
      r10716: Use correct Samba3 data types for strings. Also use Samba3 types
      r10717: Another bunch of small updates. All generated files except parse_dfs.c
      r10718: Another large set of small improvements. All generated files compile
      r10719: Remove __FUNCTION__ macro as it might not be available at all systems
      r10721: Handle allocations and primitive / deferred data correctly. In theory,
      r10732: Generate _ctr structures for unions
      r10734: Generate ptr, size, offset, and length elements in unions just once.
      r10737: Fix some alignment issues
      r10739: Reduce number of calls to prs_align_custom()
      r10742: Support multi-level pointers + ref pointer fixes
      r10765: Actually use VALS() setting for enums
      r10787: Fix silly nodiscriminant-issue
      r10788: - Give unions a name
      r10829: Documentation updates
      r10839: Add some [ref] (required for ethereal and Samba3 parser generators)
      r10840: Fix indentation
      r10842: Fix some issues with [out] unions that have a discriminator that is only
      r10848: Fix warning
      r10849: Fix handling of [charset] for strings with fixed or "inline" size
      r10854: talloc_get_type() can return NULL..
      r11061: Samba3 parser generator fixes:
      r11067: Support for [string] in the Ethereal parser generator
      r11077: Fix [string] for Samba3
      r11096: Eliminate pointer_default_top()
      r11097: Allow pointers in "const"
      r11098: Replace string with [string]
      r11099: Replace unistr with [string] equivalent
      r11100: Replace unistr with [string,charset(UTF16)]
      r11101: Remove last instances of unistr
      r11102: Remove unistr_noterm
      r11103: Eliminate ascstr
      r11104: Fix LOCAL-PAC test
      r11105: Warn if conformant arrays are not at the end of a struct
      r11107: Include 0 byte
      r11141: Re-add paranoid string terminator check
      r11182: Explicitly add "." to perl include path so that perl doesn't use the
      r11184: Remove test that checks whether ftruncate() needs root, because I can't
      r11214: Remove scons files (see http://lists.samba.org/archive/samba-technical/2005-October/043443.html)
      r11243: length and size can now be filled in automatically.
      r11244: Relative path names in .mk files
      r11245: Hopefully fix heimdal build on some hosts
      r11246: Another fix for OpenBSD's make
      r11247: Add environment class
      r11249: More OpenBSD make fixes...
      r11250: Fix a couple of issues in the heimdal/ dirs.
      r11252: Make makefile.pm OO and descend from env
      r11254: Remove support for [TARGET:foo]-like .mk-file entries
      r11257: Add and use output function
      r11299: Try to fix build on Stratos VOS (doesn't support ld -r)
      r11300: Treat libraries as a special kind of subsystem
      r11303: Support defining and installing public headers for libraries.
      r11304: Add support back in for loading shared modules (not used yet)
      r11305: Use more recent guess and sub files
      r11306: Move more static Makefile data to main.mk
      r11307: Add support for generating pkg-config files
      r11311: Move some more logic to env
      r11343: Remove dependency on DEBUG()
      r11377: Add support for building LIBRARY elements as shared libraries:
      r11382: Require number of required M4 macros
      r11385: Fix issues in module.c. Calling function should pass in path
      r11386: Add install rule for pidl
      r11387: Remove pidl from the default 'install' target as it doesn't obey the
      r11388: Move dot-generating to a seperate perl executable
      r11391: Add includedir to the list of directories to create
      r11417: Add TODO for the build system
      r11481: Disable pre-linking on VMS
      r11534: Consider ntvfs as a library
      r11535: Support void functions when generating templates.
      r11539: Fix indentation in templates. Always generate lower-case
      r11959: Use DOS_errors array for displaying WERROR values
      r12181: Use BASE_HEX rather then BASE_DEC by default for bitmaps. Patch by Guy
      r12197: Some improvements to the Debian package. Thanks to Steinar Gunderson
      r12198: Some more Debian updates. Thanks to Steinar H. Gunderson
      r12201: Remove some lines that I accidently added more then once
      r12205: Support 'TFS' command in conformance files
      r12206: Fix some issues in NOEMIT
      r12207: More improvements to the Debian package by Steinar Gunderson.
      r12208: Remove obsolete scons directory
      r12209: Fix some issues with XML entities.
      r12216: Couple of small fixes: reduce include/includes.h a bit, simplify headers
      r12218: Use common functions for generating lists
      r12219: Use some more common functions
      r12253: Automatically build seperate binaries without -rpath to install when
      r12254: Add some (hopefully correct) descriptions for libraries that are installed.
      r12256: Add helper script for installing pkg-config files
      r12397: Change the 'samba4' prefix in the Debian packages back to 'samba'
      r12443: Forgot to rename two files
      r12444: Initial version of a NEWS file that should contain a summary of changes
      r12445: Fix header in manpage, make script executable
      r12446: Merge mkproto.sh's functionality into mkproto.pl
      r12449: Fix some warnings
      r12450: Move generation of proto and full object lists to makefile.pm. 'make' now
      r12451: Add 'struct libnet_context;' - apparently the order of the prototypes
      r12454: Forward declare struct nbt_iface_name
      r12461: Some updates to the srvsvc IDL from Ronnie Sahlberg
      r12462: Hide oo magic from callers of the parser
      r12463: Rename 'Samba' namespace to 'Samba4'
      r12464: Add simple IDL parsing tests for pidl using the standard perl
      r12465: Merge Parse::Pidl::Samba4::NDR::Header into Parse::Pidl::Samba4::NDR::Parser.
      r12470: Add helper module for pidl tests
      r12480: Extend testsuite
      r12481: Move parser-specific utility functions to idl.yp, remove some unused functions
      r12482: Add some more tests
      r12483: Remove --tdr-header option (merged into --tdr-parser)
      r12484: Initial work on supporting non-typedeffed types
      r12487: Remove obsolete function
      r12488: Fix MANIFEST to match recent changes
      r12489: Forward declare nbtd_iface_name
      r12490: Fix --warn-compat
      r12494: Support loading modules from .so files for most subsystems.
      r12498: Eliminate INIT_OBJ_FILES and ADD_OBJ_FILES. We were not using
      r12499: Move smb_build.h out of includes.h
      r12500: Use init functions explicitly in a few more places. 'gensec' and 'librpc'
      r12501: Merge EJSHeader.pm into EJS.pm and simplify smbcalls_rpc.c a bit,
      r12510: Change the DCE/RPC interfaces to take a pointer to a
      r12511: Remove authservice from binding string
      r12512: Use GUID structs in API functions everywhere rather then converting back and
      r12513: Similar change as my previous commit, but now for transfer syntaxes.
      r12514: Move DCE/RPC interface table to a seperate file
      r12515: Use UUID directly rather then string containing UUID
      r12516: Fix drsuapi and netlogon javascript bindings
      r12517: Don't generate empty init functions
      r12520: Add support for --help to mkproto.pl
      r12523: Convert the registry subsystem to use a seperate prototype header
      r12528: Add seperate proto headers for ntvfs, tdr, smb_server and nbt_server.
      r12530: Let include/includes.h depend on lib/basic.h (which it includes)
      r12542: Move some more prototypes out to seperate headers
      r12552: Remove use of Test::Harness - we're not printing the result summaries
      r12558: Support [flag(NULLTERM)] on [charset()] arrays
      r12568: Fix rename (noted by Steinar Gunderson)
      r12572: No longer parse coclasses as interfaces
      r12573: Update README to recent changes in pidls namespace
      r12574: Bring tables.pl back to life and move registration of interfaces
      r12584: Move NDR tests from rpc/ to local/, add to list of tests
      r12589: Add missing newline.
      r12592: Remove some useless dependencies
      r12608: Remove some unused #include lines.
      r12620: Get rid of automatically generated lists of init functions of subsystems.
      r12621: INIT_FUNCTION no longer has to be set on libraries
      r12622: Move table.c prototypes to seperate header to prevent circular dependencies
      r12623: Another round of fixes for the prototypes of tables.c
      r12624: (hopefully) fix for BSD make after srcdir/builddir changes
      r12628: Prevent double registration warnings
      r12650: Remove support for NULLTERM flag (is already covered by tridge's
      r12651: Remove STR_LARGE_SIZE as it's no longer used
      r12658: Couple of fixes related to shared module builds.
      r12659: Add some more information for potential users. Please supplement / amend
      r12670: Make a couple of dependencies stricter
      r12671: Modules don't have to be linked with their subsystem.
      r12680: Support setting the environment variable SMB_BUILD_VERBOSE to
      r12693: Move core data structures out of smb.h into core.h
      r12694: Move some headers to the directory of the subsystem they belong to.
      r12695: A dot is allowed in NetBIOS names.
      r12696: Reduce the size of include/structs.h
      r12697: Support empty fullname fields in unix accounts
      r12698: Declare model_ops (required for NetBSD)
      r12699: correctly escape invalid DN characters (reported by Steinar H. Gunderson).
      r12703: Fix handling of short passdb backends (also reported by Steinar Gunderson)
      r12704: role => server role
      r12706: Add list of parameters that need work
      r12711: Update copyrights
      r12801: Some more include/ cleanups (remove unused macros + move files
      r12851: Fix some typos
      r13062: Fix upgrade of WINS entries
      r13063: Add --realm option to upgrade
      r13064: Add 'tags' target to LDB's makefile
      r13066: Add (very simple) manpages for gepdump and gwcrontab, remove gwsam from
      r13067: Don't install ldbtest
      r13070: Add a simple smbd manpage, based on the Samba 3 one.
      r13073: Add manpage for getntacl, disable setntacl
      r13074: Add oLschema2ldif manpage
      r13077: Allow the mkversion script to be used for technology preview releases
      r13101: autogen.sh doesn't have to be run when compiling from a released tarball
      r13123: Some small doc updates.
      r13154: Add some const
      r13155: Large amount of updates to smbclient to:
      r13156: Add some tests for smbclient
      r13157: Fix installation of js files
      r13158: Fix setup and ejs paths
      r13160: Fix some of the smbclient testsuite (after failures on the buildfarm)
      r13161: Remove optional password as second parameter. Improve return values a bit.
      r13169: Fix typo (noticed by Jeroen Keiren)
      r13170: Remove some dependencies on -1 implying the size of pstring
      r13179: Add note about removing the optional password argument to smbclient.
      r13180: Add note about smb.conf location
      r13181: Fix standalone ldb build
      r13182: Add first bits of browsing testsuite.
      r13186: Remove assumption that callers that specify -1 actually mean sizeof(pstring)
      r13208: Clearly separate named pipes from the IPC$ NTVFS type.
      r13210: Revert my named pipes patch until it passes not just 'make quicktest' but
      r13577: Move some (possibly system-defined) defines to replace.h
      r13649: Move the general introduction to Samba4 to README and
      r13650: Install manpages when building standalone
      r13651: Always make sure pkgconfig directory exists
      r13652: Move some more stuff out off include/
      r13653: Copy headers from the right place
      r13654: Move some more stuff out of include/
      r13655: Use new name of build header
      r13658: More moving around of files:
      r13662: Typo fix, add more public headers
      r13735: Add summary of changes since the first TP so far. Please let me know
      r13752: Add doxyfile and fix formatting of comments. Current output is available at http://samba.org/~jelmer/util-api/
      r13753: /bin/sh -> /bin/bash as this script uses some bash-specific constructs
      r13754: Update TODO
      r13760: Remove extern declaration for SMB_PASSWD_FILE
      r13786: [merge] Add registration functions for LDB modules
      r13789: Add metadata files for the GTK+ apps
      r13790: Add Samba as category
      r13839: Use registration mechanism for backends as well (in the same sense
      r13840: Mark some functions as public.
      r13842: Make some more functions public.
      r13844: Remove _PUBLIC_ for now as the proto script seems to make false assumptions
      r13847: Fix some portability issues with the visibility attribute.
      r13849: More improvements to the libutil docs.
      r13851: More doc improvements.
      r13852: Split up
      r13855: Docs for the registry library as well
      r13867: Wrap the cflags.sh hack in the build system. You can now simply
      r13896: Get rid of 'use warnings' as it isn't very portable..
      r13898: Add a subsystem-specific DEFAULT_VISIBILITY property that can be used
      r13899: Get the shared library build building again. Just compiles for now,
      r13902: Stricter checking for the -fvisibility flag
      r13903: Don't generate prototypes for modules and binaries in include/proto.h by
      r13904: Make sure LDB gets initialized
      r13905: include/includes.h now includes param/param.h..
      r13924: Split more prototypes out of include/proto.h + initial work on header
      r13926: More header splitups.
      r13938: Around round of splitups
      r13939: Fix bin/.dummy issues, add more ignores
      r13944: Yet another round of splitups.
      r13954: Add --enable-dso flag to ./configure that simplifies the ability to
      r13960: Generate makefile rules for installing/removing shared modules.
      r13969: Make these names lowercase as well (just like they are now in the buildsystem)
      r13976: Add simple script for updating existing prototypes in a header file
      r13982: Add support for prototypes spread across multiple lines. Try to keep line
      r13990: Fix issues with function renaming.
      r14094: Use saner module directory names, fix loading of server service modules.
      r14097: Remove subsystem names when installing modules (they're already installed
      r14108: Make the Doxyfiles a bit shorter...
      r14109: Modulify the smbcalls subsystem.
      r14139: Fix issue with undefined variables.
      r14149: Add BUGS.txt (fixes #3523)
      r14151: Add simple script that writes a summary to show what libraries the user
      r14154: Add summary line for extended attribute library
      r14215: Improve warning/error messages.
      r14223: Couple of small fixes:
      r14281: Pull apart LIBDIR and MODULESDIR
      r14322: Remove the BROKEN_CC flag for now. None of the buildfarm hosts has
      r14327: Replace MAJOR_VERSION/MINOR_VERSION/RELEASE_VERSION with two parameters:
      r14332: Built in different paths when running locally (from ./bin/) in developer
      r14335: Build shared modules in bin/modules/$SUBSYSTEM when in developer mode.
      r14347: Add registration function to allow registering smbtorture test(suites)
      r14348: Fix location of #endif
      r14349: Kill proto.h!
      r14350: Keep "make proto". It's hard to forget old habits. :-)
      r14361: Support 'helper' attribute in pidl and use it.
      r14362: Only include ndr_compression.h when necessary.
      r14363: Remove credentials.h from the global includes.
      r14369: Remove obsolete header
      r14379: Build torture/rpc/ as a seperate smbtorture module. Move helper
      r14380: Reduce the size of structs.h
      r14381: Kill structs.h
      r14383: Fix non-developer build.
      r14384: Remove orpc code from includes.h
      r14385: Fix header dependencies.
      r14402: Generate seperate headers for RPC client functions.
      r14464: Don't include ndr_BASENAME.h files unless strictly required, instead
      r14469: Don't the variable INSTALLDIR for two different things...
      r14470: Remove some unnecessary headers.
      r14471: Convert installheader script to perl
      r14473: Modern splint has no problems with immediate structures.
      r14477: Remove the NOPROTO property - it's no longer used as proto.h is gone.
      r14478: Remove unused proto_objs variable
      r14479: Cope with _PUBLIC_ not being defined. Needed for when external projects
      r14481: Change paths in headers on the fly when installing. Adds a simple text
      r14483: Allow subsystems with just a public prototype header, no private ones
      r14484: Install more headers
      r14488: Install more headers.
      r14491: Allow building more output outside of the Samba source tree
      r14492: Fix shared libs - set SO_VERSION to 0 everywhere for now.
      r14497: Fix build with shared libraries
      r14498: Revert part of my commit that removed support for compilers that
      r14499: Remove dynconfig hack for now - it caused a recompile of the
      r14500: Make some more functions public
      r14501: Re-add nicely working hack to allow running from the builddir
      r14511: Install more headers
      r14516: dynconfig fixes
      r14517: Put Modulesdir: line in .pc files, so 3rd parties know where to install
      r14518: Support STANDARD_VISIBILITY property on binaries
      r14519: Put base registration in a seperate file, as well as some
      r14520: Split up smbtorture binary into a core (torture.c) and UI frontend (smbtorture.c)
      r14524: Make TORTURE_NET a separate module
      r14525: Sort list of torture tests alphabetically
      r14527: Fix build problems.
      r14528: Fix installation of manpages
      r14529: Include $(builddir) where necesary
      r14531: Install two extra header files
      r14533: Install pidl, remove some useless header dependencies
      r14534: Update doco
      r14535: Fix header installation
      r14542: Remove librpc, libndr and libnbt from includes.h
      r14543: Fix some build dependency problems caused by the use of $(builddir)
      r14544: Remove exchange-specific files.
      r14545: Fix make dependency warning.
      r14546: Install pidl in the same location as all other binaries.
      r14547: Don't install pidl - it fails on the buildfarm as it doesn't obey $PREFIX. I should've remembered, as this problem has hit me before...
      r14549: Use make-compatible syntax in extra_cflags.txt so we can avoid
      r14550: Fix tests
      r14551: Include path (./) for some older makes.
      r14552: Remove old dependency code
      r14553: Use double colon feature in the makefile (supported by all buildfarm hosts!)
      r14554: Write out header dependencies. This means all C files affected will be
      r14555: Remove cycle from rule
      r14556: Fix some dependencies
      r14557: Add hack for asn1 files
      r14558: Another two more static dependencies...
      r14561: Update WHATSNEW.txt to revision 14554
      r14562: Use VPATH to solve strange heimdal dependencies
      r14563: Include both private and proto names in makefile rule
      r14564: Remove dependencies when running distclean
      r14565: Fix shared library sonames
      r14567: Make some more functions public.
      r14569: Make more functions public.
      r14570: Move some functions also they are also used from kpasswd
      r14571: More improvements on shared library support in Samba. Only ldb is left now...
      r14572: Give libraries saner names, remove some .pc files, make some things
      r14573: Install samba-config and headers
      r14575: Move some path-related functions to libsamba-config so libsamba-util
      r14581: Disable automatic dependencies for now, as some make versions seem to have
      r14582: No longer require 'make proto' when running without automatic dependencies.
      r14583: Enable automatic dependencies only if GNU make >= 3.81 is present.
      r14586: Some small fixes, update TODO.
      r14587: Allow building without GNU make and/or without xsltproc
      r14590: Fix ldb standalone build...
      r14592: Add support for loading shared modules to LDB.
      r14594: Fix some dependencies (required for shared library build)
      r14599: Pass ACLs down the registry layer.
      r14603: Fix building of ejs modules as shared libs
      r14604: Support 'aliases' for ldb modules
      r14605: Create heimdal/lib/des/hcrypto symlink if it doesn't exist
      r14606: Fix paths in developer mode. This allows 'make quicktest' to work when
      r14607: Update mkproto.pl to only write out new header files if the contents changed.
      r14608: Force creating symlinks (otherwise we end up with EEXIST errors)
      r14609: Add heimdal/lib/des to the VPATH (required for some headers)
      r14610: Fix writing of modulesdir to .pc files
      r14621: Define HAVE_IMMEDIATE_STRUCTURES for those using Samba headers,
      r14640: Fix dependency
      r14648: Update to r14647.
      r14651: The actual release date is 22 march..
      r14654: Fix hcrypto link when using automatic dependencies
      r14657: We'll now start working on TP3
      r14658: Include ndr_obfuscate.h when necessary
      r14660: Install ldb_errors.h
      r14661: Install symlinks for shared libraries
      r14666: Fix handling of naming of shared modules when not in developer mode
      r14670: Fix module extensions
      r14686: Fix pidl testsuite to run whenever there is a shared libary built
      r14687: Start working on support for represent_as() and transmit_as() as
      r14688: More work on represent_as(): output the right function calls, fix test.
      r14689: Fix test
      r14690: Support represent_as in headers, enable represent_as() test (which works now)
      r14691: Fix printing elements with represent_as set
      r14692: Get rid of the obfuscation() attribute
      r14693: Automatically update dependencies during compilation
      r14694: Remove for now until it does something useful.
      r14718: Add initial work on a standardized UI for smbtorture
      r14720: Add torture_context argument to all torture tests
      r14721: Fix a couple of warnings.
      r14723: Keep statistics
      r14724: Rearrange some source files, install more headers.
      r14725: Reduce amount of headers, add simple ui implementation (not used yet though)
      r14727: Update pidls' TODO, add test that demonstrates the desired behaviour
      r14728: Install two more headers, fix warning
      r14729: Install db_wrap.h and db_wrap_proto.h
      r14730: Remove dependency information with 'make clean'
      r14731: Fix typo
      r14735: Use dcerpc_syntax_id rather then seperate GUID + if_version everywhere
      r14737: Fix shared library build without --enable-developer
      r14740: Try loading shared libs from the bin/ directory (useful for running 'make test'
      r14806: Fix compiler warnings
      r14812: Fix typos
      r14813: Remove headers already checked for earlier or not used.
      r14816: Simplify test for comparison_fn_t
      r14844: Support a stdbool.h replacement in lib/replace/
      r14850: Don't assume that sizeof(BOOL) == sizeof(int)
      r14851: Make BOOL, False and True simple aliases to the POSIX-defined
      r14852: See if all target platforms support multiple .SUFFIXES lines.
      r14866: Fix CFLAGS when building compile_et. This should fix the build
      r14867: Include <stdbool.h> in external compiles
      r14874: Allow overriding LIBRARY_REALNAME
      r14875: Make better use of the build system
      r14905: Prevent partly generated files when building using heavy parallel make.
      r14906: Move SWIG-specific files to scripting/swig/
      r14907: Another attempt at fixing partially generated tables.c files
      r14908: Fix LD_LIBRARY_PATH
      r14909: Add lp_modulesdir() smb.conf option
      r14910: Remove unused configure options
      r14911: Allow easy modification of selftest subdirectory name
      r14914: Remove printf statement I accidently committed.
      r14952: Make sure the auth subsystem gets initialized if a gensec module needs it.
      r14991: Add option -l to allow ndrdump to load dcerpc_interface_tables from .so files.
      r14992: Allow load_module() to be used externally
      r14993: Make subsystems again
      r14995: Avoid parallel builds unless there is support for automatic dependencies.
      r14996: Fix compilation of gencache
      r14997: Fix build of static libraries. Libraries build fine now, but linking doesn't
      r14998: Remove unused autoconf test, move others to proper places
      r14999: Remove more unused autoconf code
      r15000: Move some more autoconf tests out of build/m4/rewrite.m4
      r15001: Add 'make dist'
      r15002: More cleanups in build/m4/rewrite.m4
      r15179: Detect setproctitle if it is in libc. Patch by Timur Bakevey
      r15190: Disable sonames for the BSDs and solaris as they don't take more then
      r15191: Avoid uint_t as it's not standard.
      r15200: Move MIN/MAX macros to libreplace as some systems have them
      r15201: Use abs() rather then ABS()
      r15202: Don't derefence NULL pointers - found by the IBM Checker
      r15203: Allow system 'bool' type to be defined in another header then stdbool.h
      r15204: Fix MD5Update prototype
      r15205: Allow additional LDFLAGS, fixes #3961.
      r15207: Introduce PRIVATE_DEPENDENCIES and PUBLIC_DEPENDENCIES as replacement
      r15212: Simplify setproctitle code
      r15213: Remove helper macro for bcopy() - this causes problems
      r15214: Introduce subsystem-specific CFLAGS to keep the global CFLAGS short.
      r15220: Another attempt to fix the bug found by the IBM Checker
      r15223: Move heimdal's -I parameters from the global list of includes to
      r15224: Check whether -MT is actually supported by the compiler before using
      r15226: Fix order of typedef specification - caught by kblin
      r15230: Add include dir for -Iheimdal_build earlier on - this should fix sun1
      r15231: Try to fix detection of ability of CC to generate dependencies
      r15232: Look for CC flags, not C++ flags..
      r15233: Fix loading shared modules
      r15234: Remove heimdal include paths from global CFLAGS
      r15236: Fix -MT detection
      r15239: (hopefully) fix Samba4 build on AIX
      r15247: Get rid of patsubst macro as it is not supported by some makes and replace
      r15248: Fix automatic dependencies build
      r15249: Fix typos
      r15252: Fix inet_aton (required for Tru64 and Solaris)
      r15253: Fix dependency on tdr_regf.h
      r15254: Fix heimdal's addrinfo subsystem for those systems that need it. This
      r15256: Use libroken's getaddrinfo if it is not provided by the system. Should
      r15257: Look for headers before trying to use them in any tests. This
      r15258: Another attempt at fixing getaddrinfo on IRIX
      r15260: Don't dereference NULL pointers to obtain array lengths - found by
      r15261: Work around AIX defining open as open64 again
      r15262: Only include getprogname if it is needed by the system. This should
      r15263: Remove another use of patsubst (should make tru64 happy)
      r15265: Try to find inet_pton in -lnsl (should fix linking on sun1)
      r15267: Fix call to mkdir() for old versions of perl. This should fix installation on
      r15270: Rename EXTRA_CFLAGS to CFLAGS - initial work on getting DSO's working again.
      r15271: Fix --enable-dso
      r15274: Drop default EXT_LIB_ prefix for external libraries. Fixes issues with local
      r15276: Fix path to perl on some hosts
      r15278: Fix recreating symlink every time.
      r15279: Fix dependencies when using static libraries
      r15284: Fix dot generation
      r15287: Simplify dependency detection code
      r15295: Fix some dependencies
      r15296: Move ntlm_auth-specific functions from util to ntlm_auth so libutil doesn't need ldb
      r15297: Move create_security_token() to samdb as it requires SAMDB (and the rest of LIBSECURITY doesn't)
      r15298: Fix the build using a few hacks in the build system.
      r15300: Only enable SWIG shared libs if python is available
      r15301: Use static libraries internally. This required a few hacks in the build
      r15302: Remove strangely named function "StrnCpy" - strlcpy is available as a
      r15303: Re-add SMB readline replacement header
      r15304: Fix smbd build, more updates on getting --enable-dso to build again
      r15312: Fix dependency on gtksamba when GTK+ is not present
      r15313: Fix some dependencies in dso mode
      r15314: Fix recursive dependency hack for static libs. Should fix the build
      r15318: Don't create empty static libraries as some hosts have trouble with them.
      r15321: Reduce the size of rewrite.m4 a bit more
      r15322: Don't depend on nonexisting targets - should fix the build
      r15323: Fix internal popt build
      r15324: Generate prototype even if the function itself is
      r15325: Fix compiler warnings
      r15326: Fix compiler warnings.
      r15327: Support 'nosize'. Also write prototypes for print and size functions that are manually written.
      r15328: Move some functions around, remove dependencies.
      r15331: Integrate LIBSMB and LIBCLI into new LIBCLI_SMB
      r15338: Fix build of most things with shared libs enabled.
      r15344: Fix shared library build
      r15349: Integrate set_socket_options() into the socket library
      r15350: Remove empty subsystem, don't install .a files of subsystems
      r15351: Fix tcc compile error
      r15352: Remove reference to just-removed subsystem
      r15353: Don't dereference NULL pointer. Found by the IBM checker.
      r15354: Add dependency on libsocket (required for sun1)
      r15355: Add replacement 'err.h' for systems that don't have it such as SerNet-Tru64
      r15358: Fix some compiler warnings / type safety. Found by tcc
      r15361: Export table of predefined registry keys
      r15362: Consider anything non-zero a failure, bnio
 not just -1
      r15363: Fix dependencies for shared library
      r15364: Use global list of predefined keys
      r15365: Fix error in my previous commit, caught by metze.
      r15366: Use type name rather then typedef directly - fixes build on tcc
      r15367: Fix unused function warnings in generated EJS code.
      r15370: Fix more dependencies for shared libs
      r15371: Revert some of my previous patch as it was breaking the plain build
      r15373: Rename SOCKET to LIBSAMBA-SOCKET to prevent name clashes with -lsocket on SUN
      r15374: Make subsystem name shorter - Stratos VOS has a filename length limit of 32
      r15375: Rename readline.h to smbreadline.h avoid clashes with system header.
      r15376: Add detection of -lnsl, required for building on SUN boxes.
      r15377: Remove sys_select() code as it's no longer used.
      r15378: Fix installheader script. Alexander, this will break installation of headers
      r15379: Fix shared library build's unresolved dependencies
      r15381: Make shared libraries the default (where supported). This concludes my rewrite of the build system, which I'm (overall)
      r15383: Revert making DSO's the default - this caused a few test suite breakages.
      r15384: Improve naming of socket library, disable Requires(.private)? fields in pkg-config files for now as
      r15387: Fix installation of dcerpc headers, remove more instances of uint_t
      r15406: Move 'smbreadline' out of libreplace as it doesn't replace functionality
      r15407: Get rid of some more uint_t
      r15408: Fix some small bugs in the GTK+ tools
      r15409: Start working on GTK+ tool for services management
      r15410: Fix segfaults
      r15413: Disable gwsvcctl on hosts without gtk
      r15414: Support retrying different username/password combinations
      r15422: Fix issues with functions being called recursively in the credentials
      r15427: Rename private to private_data to prevent errors from C++ errors (which
      r15437: Add generator that creates Samba3 client code which uses Samba4's NDR
      r15457: Get rid of more usages of uint_t
      r15458: Fix support for Windows XP-style registry files and support for large numbers of subkeys.
      r15469: Fix unixinfo interface to use pointers for [out] parameters (required
      r15470: Write header file with prototypes for Samba3-Client-With-Samba4-NDR code.
      r15474: Generate proper type declarations, fix headers
      r15512: Move uuid functions out of ndr_misc.c
      r15514: Fix include
      r15521: Take an optional subsystem name to generate a dependency graph for
      r15538: Use pkg-config file where possible and
      r15551: Fix clash between config.pm and globally installed Config.pm on
      r15563: Fix for use with configurations where srcdir!=builddir (caught by Alexander)
      r15564: Fix copyrights (this file was originally based on just a few lines from smb.h)
      r15565: Rename configure.in to configure.ac, which is the name preferred
      r15567: Add entry for iconv
      r15568: Simplify detection of iconv libraries a fair bit and fix it to
      r15572: Trim build/m4/rewrite.m4 a bit more, remove unused tests.
      r15573: Fix build of systems that have iconv headers in non-standard locations
      r15574: Keep information about which scalar types are references in a
      r15575: Fix getpass test
      r15576: Separate out Samba4 bits a bit more
      r15577: Make popt CFLAGS popt-specific rather then global
      r15578: Move some cpp-specific things from CFLAGS to CPPFLAGS
      r15580: (Hopefully) fix pthreads process model
      r15581: Remove unused include
      r15584: List SWIG files as being updated when pidl runs
      r15585: Revive pidl's SWIG file generator. It now generates simple
      r15586: Remove unused header
      r15587: Generate stubs for the SWIG functions
      r15590: Fix another include issue
      r15591: Generate function calls correctly as well.
      r15592: Remove unused header
      r15593: Warn about [out] arguments that are not pointers. These can all be
      r15594: Remove another unused include
      r15595: Fix another broken dependency rlated to popt
      r15596: Fix another popt dependency issue
      r15598: Another dependency fix
      r15599: Fix more popt dependencies - these should be the last ones
      r15602: Another dependency fix
      r15605: Yet another dependencies fix
      r15606: Fix another dependency
      r15607: Fix readline summary reporting
      r15648: Update MANIFEST to install Samba3 code generators.
      r15650: Fix perl warning when generating IDL for elements with no properties
      r15651: Add 'MANUAL' command in Ethereal conformance files. This allows overriding
      r15652: Fix aliases mechanism (fixes #3710)
      r15653: Remove idl_types.h include where possible. Remove
      r15659: Implement opening a key by name (significant better performance
      r15702: Fix typo
      r15776: Don't generate ref pointers in Samba4-generated code. There is no point
      r15777: Fix unresolved symbols in shared library build.
      r15778: Fix bug printing ref pointers.
      r15779: Remove keepref from atsvc and efs.
      r15780: Fix indentation of deferred code (fixed #3739)
      r15805: Fix incompatible type assignment. Caught by the IBM checker.
      r15806: Remove some unnecessary nesting making the function harder to read.
      r15807: Fix incorrect initialization. Very nice catch by the IBM Checker.
      r15808: Fix two uninitialized variables, caught by the IBM Checker.
      r15809: Fix typo in array offsets. Caught by the IBM checker.
      r15810: Fix uninitialized variable error, caught by the IBM checker.
      r15811: Fix mget command without arguments. Caught by the IBM Checker.
      r15812: Explicitly cast to unsigned int.
      r15813: Use labs() rather than abs() for 32-bit integers. Caught by the IBM checker.
      r15818: Improve UI utilities: allow format strings and add some convenience macros.
      r15819: Use updated API in smbtorture, use UI tools in registry tests.
      r15821: Fix static library build.
      r15868: Add replacement macro for __STRING()
      r15870: Improve detection of iconv - should prevent HAVE_ICONV_H being
      r15871: Fix systems with native iconv
      r15875: Fix bug in smbclients 'put' command tridge found a while ago. Add tests
      r15876: Fix build on IPv6-less systems.
      r15877: Fix error message - caught by the IBM checker
      r15878: Add explicit initialization to make the IBM checker happy.
      r15892: Remove the COM management code - DCOM should be
      r15893: Update TODO
      r15907: Add simple manpage for gwsvcctl
      r15908: Mention ncalrpc in smbtorture help output
      r15986: Declare struct tm
      r16039: Add missing #!, don't rely on bash
      r16040: Support more recent versions of autoconf
      r16143: Fix disappearance of user-specified CPPFLAGS,LDFLAGS and LIBS variables.
      r16152: Support multiple output formats for those tests using the ui and add support for subunit output.
      r16158: Convert to use UI API
      r16160: Fix double semicolon in ui.h
      r16161: Convert to UI API
      r16162: Convert to UI API
      r16163: Convert to UI API
      r16164: Convert to UI API
      r16165: Add some more helper utilities
      r16169: Convert to UI API
      r16170: Convert to UI API
      r16171: Convert to UI API
      r16173: Use memory context provided by smbtorture.
      r16174: Couple of fixes to the UI code - make 'torture_ok()' optional, be more verbose by default.
      r16184: Convert to UI API. The async test was previously broken (fails
      r16185: Remove autogenerated file from SVN.
      r16186: Use full include path to make sure it's being picked up by the
      r16304: Improve testing UI API. This now allows registering the full
      r16315: Convert to new API.
      r16316: Convert to new torture UI API.
      r16321: Add suite_start/suite_finish hooks, support --format=quiet
      r16328: Wrap all existing tests in simple single-function testsuites.
      r16329: Convert to new UI API.
      r16330: Show number of succeeded, failed and skipped tests and success rate at the
      r16331: Split out registering of multi fn tests, fix typo in name of pac suite.
      r16332: Fix two small bugs found by the buildfarm.
      r16333: Move more code out of the core smbtorture. It now no longer
      r16514: Fix build (not run!) of --enable-dso.
      r16516: Get rid of file_exists() as there already is a file_exist().
      r16517: Get rid of pointless safe_free() (not SAFE_FREE()!) function.
      r16518: Split up torture_util.c in smb and non-smb specific parts.
      r16522: Move code to create the test data out of selftest.sh.
      r16524: Fix double evaluation.
      r16525: Move selftest-specific code back to selftest.
      r16526: Add torture_setup_server() with test.
      r16527: Add target argument for smbtorture.
      r16529: Fix type.
      r16824: Rename Ethereal -> Wireshark (patch from Joerg Mayer)
      r16838: Allow compilation by midl. Patch by andrzej.hajda at wp.pl
      r17238: Add datarootdir (required for newer autoconf versions)
      r17811: Add .bzrignore file
      r17930: Merge noinclude branch:
      r17931: Really remove the files this time. Looks like there's something wrong with
      r17932: Fix header installation.
      r18031: Merge my replace fixes:
      r18036: Add missing file
      r18039: Include header with time_t if needed.
      r18040: Use only one strnlen implementation
      r18045: Update format, list "test" target as phony.
      r18120: Remove generating dependencies for .d files for now as this was
      r18121: Simplify m4 code, hopefully fix Samba4 build problems.
      r18122: Fix warnings related to errno declaration.
      r18123: Fix manual file build.
      r18124: Keep right libs when looking for dl*() functions
      r18125: Remove obsolete file.
      r18126: Fix -ldl dependency problem
      r18127: Add macro AC_CHECK_DECL() for systems that don't have it.
      r18157: Fix building with external popt.
      r18161: Fix LDB build after popt changes.
      r18163: Remove defines for BOOL, False and True
      r18166: Fix build with external popt.
      r18168: Use {NULL} rather than POPT_TABLEEND, which is not always available.
      r18169: Remove accidentally committed bits
      r18171: Generate prototypes for functions returning bool.
      r18194: Allow empty bitmap {} declarations.
      r18212: Use bitmap for access mask. Patch by Ronnie Sahlberg.
      r18227: Recognize Samba3 in-tree builds.
      r18228: Don't include Samba4-specific headers when building inside a Samba3 tree.
      r18231: Don't use _PUBLIC_ but use __attribute__ directly instead.
      r18270: Samba3 has _PUBLIC_ now.
      r18468: Add IDL for dfs_EnumEx. Still lacks test(s)
      r18470: Remove obsolete client generator code for Samba3 (we're now using the
      r18471: Remove other Samba3 parser generator support as well - it's no
      r18475: Start working on server code generator that uses libndr.
      r18477: Finish server code generator for Samba 3.
      r18478: Add missing declaration for status.
      r18482: Fix a couple of small issues in the generated server code.
      r18515: Remove calls to "time" for now as some sh implementations don't have it,
      r18520: Add note about warnings on [out] arrays.
      r18522: It's probably not a good idea to use rpc_netdfs_init() as initialization
      r18523: Allow [out] on arrays as well as pointers, use in unixinfo.
      r18524: Pre-allocate out arguments.
      r18554: Fix warnings about [out] arguments.
      r18559: [string] always applies to the last pointer
      r18565: Fix echo.idl to be Samba3-, MIDL and midlc compatible
      r18634: Turn flags field into a bitmap.
      r18639: Get rid of the keepref support
      r18689: Initialize r.out in the server side code, in case the handler function
      r18693: Print debug info when DEBUGLEVEL >= 10 in the Samba3 code.
      r18696: Zero initialize ref ptrs.
      r18720: Get rid of unused file.
      r18721: Fix base and samba3sam EJS tests to work without installation.
      r18723: Update list of provided macros/defines in README.
      r18749: Disable automatic dependencies by default (use --enable-automatic-dependencies to reenable).
      r18750: Disable not updating the last-modifification-time of proto headers because this was confusing make.
      r18767: Fix [ref] pointer in object oriented interfaces. Removes a
      r18768: Fix some warnings.
      r18769: Re-enable __VA_ARGS__ test (but don't make it fatal)
      r18780: Add convenience "make testenv" to launch the xtermtest Andrew just added.
      r18873: Use WERR_errors table rather than DOS_errors table for wireshark.
      r19339: Merge my 4.0-unittest branch. This adds an API for more fine-grained
      r19343: Add support for external scripts/binaries that write results using the
      r19346: AF_LOCAL isn't defined on all platforms.
      r19347: Add socketpair()
      r19350: Properly list LOCAL-TALLOC under the "LOCAL" header.
      r19352: Oops, missed a few changes...
      r19356: Reapply portability fix..
      r19358: Use subunit tests from the right location (from
      r19359: More portable way of figuring out whether something is a directory
      r19364: Fix build for 'regular' installs.
      r19372: Fix segfault for ui's that don't support comments.
      r19373: Merge changes from subunit branch: Convert libreplace testsuite to a
      r19376: Remove unused helper function.
      r19377: Simplify report functions.
      r19378: Add another type of test result 'error'
      r19381: Print out the specific tests that failed after a smbtorture run.
      r19387: Exit with 0 if failures were expected
      r19388: Start running all LOCAL-* tests but list some of them as known failing.
      r19389: Remove samba3-specific checks: instead, always simply mark these tests as
      r19392: Use torture_setting_* rather than lp_parm_* where possible.
      r19393: Add replacement function for socketpair()
      r19395: Fix replacement function compilation.
      r19396: Assume socketpair() is always available (cared for by libreplace) and
      r19495: Stop linking binaries twice (once before installation, once during build).
      r19507: Merge my DSO fixes branch. Building Samba's libraries as shared libraries
      r19509: Simplify buildsystem code, create proper symlinks for aliases.
      r19510: Make smbtorture's `nprocs' parameter a parametric option.
      r19511: Remove unused externs.
      r19512: Add --shell option to smbtorture (first work towards support for 'recipes')
      r19513: Add support for recipes (using '@')
      r19535: Fix warnings.
      r19537: Report correct test names when tests failed.
      r19539: Move pidfile to smbd/
      r19541: Explicitly segfault when the API is being used incorrectly. Previously
      r19543: Make dynconfig less special.
      r19544: Fix case of 'warning'.
      r19545: Allow enums as return types in code generated for wireshark. Originally based on a patch by Julien Kerihuel.
      r19546: fix number of bytes pushed when using switch_type() set to enum types.
      r19547: Fix use of v1_enum on enums used in return types.
      r19551: List full names for the known failing tests.
      r19553: Add check for correct API usage.
      r19554: Remove short option for --shell, as it overlaps with the option used for
      r19555: Silently ignore --use-cached-creds for compatibility with Samba3's ntlm_auth.
      r19556: Remove unused option.
      r19557: Fix lookup table for WERROR.
      r19558: Make behaviour of "OK" match that of Samba3's ntlm_auth. Patch by
      r19559: Fix handling of types where the name isn't prefixed by the interface name.
      r19560: Fix handling of PARAM_VALUE.
      r19561: Remove debug statement.
      r19562: Support returning simple scalars.
      r19569: Require that all public header files have a destination path. Fix
      r19570: Fix dependencies in pkg-config files.
      r19571: Add a USESHARED parameter (different from BLDSHARED) + two small
      r19572: Fix typo.
      r19573: Move secrets.o into param/ (subsystems haven't been integrated yet).
      r19574: Initial work towards supporting build of both shared and static libraries.
      r19575: Build static libs in bin/static rather than bin/
      r19580: Add --includedir option.
      r19582: Support building both shared and static versions of libraries at the same
      r19585: Add support for some more standard IDL instructions:
      r19588: Use include and import statements rather than depends() and helper().
      r19594: the behaviour of `include' is slightly different from helper(). Fix the build
      r19596: add basics to 'all' - hopefully fixes the build on some hosts
      r19599: Fix --includedir.
      r19600: Add two more headers (fixes installation)
      r19619: Add pointer to (up-to-date) packaging from the Debian Samba packaging repository.
      r19620: Remove old (outdated) files.
      r19631: Re-enable shared libraries, but don't use -rpath-link unless
      r19634: Only use --allow-undef-shlib for modules.
      r19636: Add URLs to ldb and talloc pkg-config files.
      r19670: Reduce the number of unresolved symbols when building with shared libraries.
      r19671: Fix remaining unresolved symbols in shared library build.
      r19672: Make LIBSAMBA-UTIL a subsystem again for now because it has interdependencies
      r19673: Build shared libs against shared libs.
      r19676: Fix some more dependencies.
      r19677: Fix more dependencies.
      r19678: Fix the build for now (ugly hack because of circular dependencies)
      r19679: Fix shared library build as well.
      r19680: Allow specifying basedir for test data.
      r19751: Add some tests for parsing the "include", "import" and "importlib" statements.
      r19752: Remove support for the `depends' attribute (use "import") instead.
      r19829: Update documentation.
      r19830: Warn about non-ref top-level pointers.
      r19834: Prevent some inaccurate warnings.
      r19836: Fix warnings in some IDL files.
      r19842: Complain about unknown pointer types.
      r19843: Fix warning.
      r19844: Fix warnings and errors in epmapper IDL.
      r19845: Add warning for pointer_default_top()
      r19846: Fix bunch of IDL warnings.
      r19850: Fix IDL warnings.
      r19856: Use sptr as basis for full ptr implementation. Will add checks for duplicates later.
      r19859: Reuse referrent ids when pushing full pointers (still need to
      r19861: Add simple pkg-config replacement.
      r19862: Fix list concatenation
      r19863: Create -uninstalled.pc files. This should reenable compilation and running
      r19866: Fix test compilation.
      r19868: Fix more tests.
      r19877: Add simple script for summarizing subunit testresults.
      r19878: Announce testsuites when using subunit.
      r19879: Make test targets depend on "libraries" (might be required for the pidl tests)
      r19880: Eliminate duplicates in the output.
      r19881: Add private library flags when linking to static libraries.
      r19882: Fix static link flags in pkg-config files. Should allow running
      r19908: Fix order of paths in pc files.
      r20298: Fix pidl tests (missing symlink..).
      r20299: Disable two new tests that are apparently broken.
      r20300: Trim number of shared libs significantly.
      r20509: Warn about the fact that no tests have been run rather than showing division by
      r20511: Combine warnings/errors/fatal functions and move them to Parse::Pidl.
      r20543: Merge some pidl bug fixes:
      r20545: Fix is_constant().
      r20547: Add tests for expected errors/warnings.
      r20548: Remove unnecessary "use lib", fix warnings.
      r20550: Use standard error mechanism in parser.
      r20556: Add more tests to make sure nothing breaks when I replace the ParseExpr code.
      r20561: Add parser for subexpressions used in IDL attributes.
      r20562: Start building expr parser. Add separate copy of Yapp::Driver
      r20563: Start using the new parser in ParseExpr(). It's now trivial to use this
      r20564: Regenerate.
      r20566: Prepending with r-> is no longer necessary.
      r20567: Print proper errors with filename and line numbers in ParseExpr()
      r20571: fix '' case
      r20616: Point at the wiki
      r20625: Fix couple of warnings.
      r20631: Add some tests for the ndr parser.
      r20633: Add another test, fix warnings.
      r20637: Don't check for NULL pointers when the pointer is guaranteed to not be NULL
      r20638: Check for NULL pointers (where possible) in print functions. Fixes #4218,
      r20675: Fix installation.
      r20676: Add ref pointer to fix warning.
      r20688: Use argv[0] equivalent of perl.
      r20693: Add reimplementation of selftest in perl. Once this has been tested
      r20696: Print mktestsetup errors to stderr rather than to either stderr or stdout.
      r20737: Add option parsing.
      r20739: Add more command-line options.
      r20746: Don't report each individual test in test_smbclient as a single testsuite.
      r20747: Move cifsdd to blackbox section
      r20748: Add file I forgot to commit
      r20750: Use files in script/tests to build a recipe rather than running the tests immediately.
      r20754: Simplify code for calculating total number of failed tests.
      r20755: Add progress indicator to test runner
      r20756: Update to use generated recipes.
      r20757: Strip recipe functionality (should be one layer up)
      r20784: Add ref pointer
      r20785: Add stub implementation for mgmt interface.
      r20786: Fix the build.
      r20822: Fix total failure counting.
      r20823: Remove newlines in calls to torture_fail().
      r20829: Update ignores.
      r20830: merge mgmt work
      r20831: Update RPC-SCANNER as well after IDL changes.
      r20834: No longer generate extra pointers for top-level [out] unique pointers.
      r20836: Use real type name, to fix compilation with -WC++-compat
      r20850: Prefix all server calls with dcesrv_
      r20942: Simplify handling of systems that don't support negative enum values by using an ifdef rather than a pidl argument.
      r20954: Add lcov target, fix gcov.
      r20955: Add tests
      r20959: Add ignore entries
      r20961: Fix lcov
      r20962: Fix lcov
      r20963: remove unused functions, run LOCAL-TDR by default
      r20967: Allow pidl tests to work with gcov
      r21017: Actually run tests during test phase rather than when generating the recipe.
      r21028: Generate list of tests rather than maintaining it manually.
      r21029: - Remove now unused failure checking code
      r21030: whoops, fix incorrect regex
      r21031: Skip some tests that were not listed previously.
      r21032: Skip two more tests
      r21038: Move commands to distclean target
      r21040: Remove subunit runner (now written in perl in my perlselftest branch)
      r21055: Fix executable bit.
      r21066: Fix the build (uninitialised variable).
      r21075: Generate parameters in structs for the server side Samba 3 code. The current code in Samba 3 is already generated using this pidl patch.
      r21205: Fix warning.
      r21222: Merge a couple of pidl fixes:
      r21253: Merge some pidl fixes:
      r21254: Fix running the testsuite outside pidl/
      r21260: Fix regex.
      r21297: Remove the GTK+ tools and library from the main repository. They are now maintained separately in bzr at http://people.samba.org/bzr/jelmer/samba-gtk
      r21299: Fix the build for those that don't have talloc.h installed.
      r21302: Provide simple redirecting headers for standard headers.
      r21332: Fix bug in pidl that prevented value(0) from working. Bug reported by metze.
      r21338: Fix handling of top-level arrays for the Samba 3 client code. This doesn't
      r21340: Fix warning undef
      r21341: Improve QueryKeyInfo idl, pointed out by Ronnie Sahlberg.
      r21343: Add access masks, pointed out by Ronnie Sahlberg.
      r21347: All current tests in the testsuite mainly test the RPC code in general. Since
      r21350: Add more tests for the NDR layer of winreg. I actually discovered a pidl bug,
      r21372: Tests, more tests! Some are still commented out, because the code they test is broken at the moment.
      r21373: More tests.
      r21374: lsa tests
      r21375: More lsa tests.
      r21376: More tests.
      r21377: More tests.
      r21378: Add simple NDR epmap test.
      r21381: dfs tests.
      r21384: Change warning to pidl warning, fix uppercasing.
      r21386: Run all NDR tests in the buildfarm, import some functions from Samba3's IDL.
      r21403: Add netlogon tests.
      r21408: Remove test that uses empty array.
      r21411: Add some simple tests for the wireshark NDR generator.
      r21414: Fill in IDL for ReplyOpenPrinter.
      r21415: Add tests for spoolss and drsuapi. Still need to add validators.
      r21416: add missing file
      r21422: Add IDL for EnumPrinterKey and RemoteFindNextPrinterChangeNotifyEx.
      r21423: Extend testsuite, check that all bytes have been consumed. DsBind fails that test, so disabling it for now.
      r21424: Add FindClosePrinterNotify.
      r21425: Add ReplyClosePrinter.
      r21426: Add more spoolss tests.
      r21427: Add tests for Needed*(), in preparation of refactoring.
      r21428: Handle representation types in Needed().
      r21429: Fix the build.
      r21430: Support tagged types without typedef. This means:
      r21431: More tests, work on support in wireshark for tagged types.
      r21432: Handle properties on tagged types in TDR.
      r21433: Get rid of the COM support code - it's not used and unmaintained. We can
      r21437: Cherrypick typelib tests.
      r21440: Support different variables in environments.
      r21442: Allow more flexible data structure names.
      r21443: Refactor some of the NDR code in preparation of nested data structure support.
      r21455: Fix a bug in our handling of conformant arrays. The conformant array was
      r21456: Allow anonymous and non-anonymous nested structures/unions/enums/bitmaps to be
      r21457: Cope with anonymous nested types in the NDR layer. This doesn't handled
      r21458: Prepare for generating separate primitives/deferred code.
      r21459: Remove name argument, more refactoring.
      r21476: Add another test for EnumValue.
      r21477: Remove unnecessary properties.
      r21484: Fix Needed* for nested datastructures.
      r21485: Remove obsolete smb_interfaces code (discussed with tpot).
      r21486: Remove spurious semicolons.
      r21487: Fix warning when using anonymous types, initial work on nested type support in ejs.
      r21488: Ignore autogenerated file.
      r21489: Remove accidently committed test idl.
      r21490: Add some tests for the EJS code
      r21492: Finish work on nested type support in EJS.
      r21493: Patch from Ronnie Sahlberg. From his email:
      r21531: Use pidl-specific utility functions. Patch from Ronnie Sahlberg
      r21532: Add tests for StripPrefixes utility function.
      r21534: Add some more tests for wireshark.
      r21541: Export mgmt, samr and atsvc for use in samba-gtk.
      r21544: Fix duplicate names. The build system should be warning about this....
      r21545: Fix pidl test.
      r21555: Some tests for TYPE in wireshark conformance files.
      r21559: More tests.
      r21564: Move ndrdump to librpc/tools.
      r21567: Add some more wireshark tests.
      r21568: More tests.
      r21572: More work towards supporting tagged types.
      r21573: Remove more code that assumed all types are typedefs.
      r21574: Fix handling of DECLARE.
      r21575: Fix handling of is_scalar() for declares.
      r21578: Use utility function for naming pull/push/print functions.
      r21579: Use utility function to determine function names in ejs code.
      r21580: Add generic target for test coverage data.
      r21582: Allow modification of LDFLAGS
      r21584: Support for tagged types has landed!
      r21586: update manifest
      r21650: Update ndrdump to work in samba3
      r21653: Add two more tdr tests.
      r21654: Add simple test for print functions.
      r21656: Move tests a bit closer to the things they test, should make syncing with samba3 easier.
      r21658: Add some tests for SAMR NDR
      r21660: Add another test
      r21661: Put direction in test name
      r21662: More samr tests
      r21669: Fix --enable-dso build
      r21670: More tests
      r21671: Add initial simple tests for socket wrapper
      r21673: Fix Samba 3 data read tests. I can't figure out why the upgrade one is broken, so that one is still disabled.
      r21674: Fix argument
      r21675: Run some more of the NET tests.
      r21676: Run more NET tests
      r21677: Run some of the other ldap tests, too
      r21678: Don't generate Requires.private lines for install .pc files. Static library use by external programs is still broken, but this should at least fix shared libs.
      r21679: Disable upgrade test for now, I can't get it to work.
      r21680: Reenable CLDAP test
      r21681: Fix bug in the parsing code that parsed "struct foo;" the same as
      r21682: Remove accidently committed debug command.
      r21683: Remove the gconf registry backend.
      r21684: remove summary line for gtk code, as it's now maintained out-of-tree
      r21685: Add some unit tests for the registry utility functions.
      r21688: Add simple tests for genrand
      r21690: Test use of typedef /and/ struct name
      r21691: Add testsuite for lib/charset
      r21694: Some more testing updates.
      r21695: Fix on bigendian systems.
      r21700: Run mktestsetup as an external program. This guarantees that it can be used for other selftest implementations (in particular the perl one I've been working on).
      r21701: Fix ejs tests.
      r21707: Finally merge my (long-living) perlselftest branch.
      r21709: Add a list of tests that should be skipped rather than ad-hoc test skipping in various places.
      r21712: Run tdb stress test.
      r21713: Redirect stderr output to stdout.
      r21716: Report status in a way the build farm recognizes.
      r21729: Some more tests
      r21730: Reintroduce summary for testenv, remove old (no longer used) file.
      r21732: Use smbtorture for enumerating tests.
      r21733: Merge testenv back into core selftest.pl
      r21828: Hardcode prototypes, as they're a public API.
      r21829:  Integrate mgmt in libdcerpc. We have enough libraries as it is and mgmt is part of the DCE/RPC standard.
      r21830: Fix header installation, remove proto header with a single prototype.
      r21832: Ignore some more autogenerated files.
      r21833: Don't install static libs, they can't be used anyway.
      r21834: Remove unnecessary includes
      r21837: Make dcerpc_mgmt a separate library again, as the linker leaves it out when it's part of dcerpc.
      r21909: Merge some of my recent improvements to the test infrastructure:
      r21910: Clean up some unused functions.
      r21911: Some more work on making the ncacn_np handling in smbd be less special.
      r21995: Patch from Ronnie Sahlberg.
      r21996: Fix a bug for invalid casts of pointers.
      r22004: Check for dereferencing null pointers.
      r22063: Fix the RPC-EPMAPPER test.
      r22074: More refactoring.
      r22077: Import only necessary test variables, more refactoring.
      r22133: Don't push parameters into environment until necessary.
      r22134: Create different smb.conf file for the client side. This should make use with Samba 3 or windows easier as well as environments.
      r22137: Actually use client.conf, defer more code as far as possible.
      r22156: - Lazy evaluate variable names.
      r22185: Initial work on a 'member' test environment'.
      r22203: Improve the replace testsuite a bit.
      r22256: Use shorter directory names for tests.
      r22260: Use single script for creating Samba 4 test environments. Add first test
      r22286: Import branch that converted the Samba4 test target code to perl and makes the code a bit clearer.
      r22287: Fix some issues in fedora ds code.
      r22289: Another fedora ds fix
      r22326: Merge some more test improvements.
      r22328: Add initial testsuite for share code.
      r22336: Add some more share tests.
      r22338: Allow regexes in known-failures file
      r22339: Run some more tests.
      r22356: Simple refactoring.
      r22357: Don't use 'our'
      r22453: Fix TDR testsuite without using our.
      r22456: Merge wireshark and ejs test improvements.
      r22457: Fix tests for Samba3 client generator.
      r22462: Fix test suite for ndr parser without using 'our'
      r22488: Hopefully fix ipv6.
      r22503: Add support for dgram to socket_ipv6. No tests yet...
      r22514: Add version numbers to tdb and talloc (required so they can be packaged independent of Samba for Debian).
      r22516: Use DESTDIR
      r22517: Use DESTDIR
      r22518: Create pkgconfig dir.
      r22520: Fix the TYPE command.
      r22595: Add version numbers.
      r22596: Set _CFLAGS variables rather than putting knowledge in the ldb Makefile.
      r22598: Simplify includes for replace.
      r22599: Document member server.
      r22600: Update bzr ignores, put right version in .pc files, prepare for support of system versions of tdb, talloc.
      r22602: s/HAVE_SOCKET_IPV6/HAVE_IPV6/ to match the define used by Heimdal.
      r22605: Set up all required environments before starting tests.
      r22637: Install tdbbackup and tdbdump again.
      r22642: Allow standalone build to work without tdb or talloc checked out, but
      r22665: Change version back to 0.9.
      r22668: Fix ldb build
      r22681: Fix standalone ldb build when parent directory name != ldb.
      r22682: Fix standalone ldb build when parent directory name != ldb.
      r22684: Fix native Samba build.
      r22687: use DESTDIR.
      r22697: Support building with external talloc.
      r22698: Support using system tdb, when available.
      r22699: Reduce amount of magic required for popt detection.
      r22741: Add MSVC-specific pragma's for Wireshark. Patch from Ronnie.
      r22742: Fix tests.
      r22750: dlopen() is always available now (and returns a correct error if not supported by the system), thanks to libreplace.
      r22762: Some ldb_map changes:
      r22769: Fix include location.
      r22827: Change license to LGPL (discussed with tridge).
      r23157: Add news file for talloc.
      r23158: Set version to 1.0.1.
      r23174: merge text
      r23175: Handle PKG_CONFIG_PATH not set yet - fixes warning in selftest.pl
      r23289: Provide support for GCC attributes _PURE_, _NONNULL_, _DEPRECATED_, _NORETURN_ and _WARN_UNUSED_RESULT_.
      r23542: Include function documentation in prototype headers.
      r24333: Add convenience function for checking the contents of a file in tests.
      r24335: Fix -N support.
      r24336: Use standard data type uint32_t rather than tdb-specific u32.
      r24337: Make libreplace provide offsetof.
      r24338: Add callbacks for starting and finishing tests.
      r24339: Move output functions to separate files.
      r24342: Move environments into a separate directory.
      r24345: Add --format=html option to selftest.
      r24350: Remove offsetof() replacement to see if there are actually any
      r24657: Use torture functions.
      r24665: Close file handles properly.
      r24667: Finally merge the registry improvements that Wilco Baan Hofman and I have
      r24668: Fix header installation.
      r24669: Add CSS to the test run HTML output. See http://samba.org/~jelmer/ for an
      r24670: Use torture functions for settings.
      r24671: More improvements to the HTML test suite results: hide
      r24672: Add dummy variable to prevent errors on some compilers.
      r24673: Put lex/yacc output under version control for hosts that don't have those tools.
      r24674: Make sure results are always on a new line, fix typo in test name.
      r24675: Specify mode to mkdir, as required by some versions of perl.
      r24676: Fix pointers being used rather than the data they point at - caught by the IRIX compiler.
      r24677: Also add built flex file for people that don't have lex.
      r24678: More improvements to html output; list unexpected successes and failures seperately from expected ones.
      r24683: Add two more tests.
      r24684: Be a bit less verbose
      r24685: Don't warn about iconv tests not being usable until they're actually being run.
      r24686: Make sure control messages are on a new line.
      r24687: Registry tests are succeeding now so remove from known failure list, add summary page with failures and skipped tests to html output.
      r24688: Make output subunit-parseable.
      r24689: There is no such test as LDAP-UPTODATENESS.
      r24691: All smbclient blackbox tests pass.
      r24692: Color expected fialures orange rather than green.
      r24703: Use standard registry diff files when provisioning rather than
      r24704: Fix bug in the registry patch code.. all the more proves this code needs tests.
      r24705: Avoid undefined value warnings.
      r24706: Move nmblookup tests to separate blackbox testsuite.
      r24707: Remove some more cruft from the test list generation code.
      r24708: Move subunit code to a separate module.
      r24709: Convert perl test harness output to subunit for nicer display.
      r24710: Use standard boolean type for easier use by external users.
      r24712: No longer expose the 'BOOL' data type in any interfaces.
      r24715: Mark fstring and pstring as deprecated.
      r24717: Some more easy bool conversions, update TODO for registry
      r24718: Fix some compiler warnings.
      r24721: Avoid True and False because they are only available within Samba.
      r24723: Install the right headers for use by samba-gtk.
      r24724: Also install the .reg files for provisioning from an installed version.
      r24725: Don't segfault if hive file can't be found
      r24726: Add tests for getting/setting security descriptors (still failing at the moment)
      r24727: Initialize variable.
      r24728: Use more stock torture functions.
      r24735: Use torture API in more places.
      r24736: Convert to using torture API.
      r24741: More use of the torture API.
      r24751: Run more tests, remove empty testsuites, more small improvements.
      r24753: Allow host name in binding string without transport.
      r24755: Use common code for finding the RPC binding in the torture tests.
      r24757: Try parsing a UNC location before a DCE/RPC binding string as the latter now
      r24758: More use of torture API.
      r24763: Allow users to leave out the transport in DCE/RPC binding strings. If the transport is not specified, it will be retrieved from the remote endpoint mapper or the IDL file.
      r24780: More work allowing libutil to be used by external users.
      r24794: util_proto.h is no longer generated.
      r24810: Don't collide with <time.h>
      r24812: Fix headers for external users.
      r24814: Fix headers, trim core.h even more.
      r24815: Support cpp_quote().
      r24816: Move the rest of the contents of core.h to more appropriate places.
      r24817: Don't REG_NONE for all value types. Patch from
      r24834: Pass environment name on to skip_testsuite().
      r24835: Put all RPC tests in the list (skipping when necessary), warn if tests aren't there.
      r24839: Default to creating a dc + domain member in 'make testenv'.
      r24844: Convert to torture API in preparation of helper functions for domain member
      r24846: Use metadata about dangerous tests.
      r24849: Add helper function for running tests as a member server.
      r24850: Convert to torture API.
      r24851: Add --load-module argument to smbtorture.
      r24852: Fix initialization
      r24855: Convert RPC-DRSUAPI, RPC-SCHANNEL to use the torture API.
      r24860: Make it easier to run selftest.pl in a Samba3 source tree.
      r24861: Use absolute paths to make it easier to run the testsuite from the Samba3 source.
      r24866: Put remainder of binding string tests in librpc/ directory.
      r24867: Avoid anonymous struct. Patch from Brad Hards.
      r24868: Don't use callbacks for prompting when stdout is not a tty.
      r24869: Print command that was executed.
      r24870: Strip whitespace characters in username (broke tests).
      r24871: Fix typos
      r24872: Use torture API a bit more
      r24873: Print smbd/nmbd log files for Samba 3.
      r24874: Fix double free of smbcli_tree.
      r24875: Use more absolute paths to samba4 binaries.
      r24876: Use more absolute paths to samba4 binaries.
      r24878: Support specifying a reason for skips/expected failures
      r24882: Use the torture API in BASE-CHARSET.
      r24883: Use torture API.
      r24884: Ignore some errors again, like they were previously.
      r24885: Convert to new torture API.
      r24887: Support reading testlists from other locations (e.g. Samba3)
      r24888: Use torture API.
      r24889: Move choosing the binding options into RPC-SECRETS.
      r24890: Integrate more of the RPC-SECRETS tests.
      r24891: Fix smbtorture to exit non-zero if a test suite wasn't found.
      r24892: Skip some tests that were previously being incorrectly treated as succeeding.
      r24893: Update documentation for selftest.
      r24894: Run the libnet tests over just one DCE/RPC transport. Other DCE/RPC tests already check
      r24895: Test for specific error.
      r24896: Run the tests for most RPC interfaces over one transport only.
      r24897: Do some sanity checking on --basedir.
      r24898: Fix LOCAL-REGISTRY, do not silently ignore testcase setup failures.
      r24899: Register signal handler that tears down environment.
      r24901: Somewhat easier and more reliable access to the pid files.
      r24905: Actually run the transport-independent tests, rather than just the transport-dependent ones again...
      r24937: Merge tests spoolss RPC callbacks.
      r24939: Integrate IPv4 and IPv6 modules (a lot of code can be shared).
      r24940: Fix undeclared warning.
      r24992: Remove some uses of lp_*().
      r24994: Fix some C++ warnings.
      r24995: Update upstream URLs.
      r24997: Re-enable use of system-provided tdb and/or talloc when available.
      r25000: Fix some more C++ compatibility warnings.
      r25001: Fix more C++ and other warnings, fix some of the indentation with ts=4 lines that I accidently added earlier.
      r25003: Skipped tests should be considered successfull.
      r25004: Avoid talloc_autofree_context() when possible.
      r25005: Avoid pstring.
      r25006: Use system constant.
      r25007: Remove more uses of pstring, move ntlmauth-specific utility function to ntlm-auth.c
      r25008: Remove use of pstring.
      r25010: Avoid uses of pstring
      r25012: Avoid use of pstring, fix coding style a bit.
      r25013: Use talloc to allocate services in loadparm, use pointer to indicate validity.
      r25014: Use talloc for allocating values as well.
      r25015: Use talloc for all allocations in loadparm.
      r25016: Create context for loadparm variables.
      r25017: Move MAXHOSTNAMELEN definition to replace.h as it is usually part of
      r25026: Move param/param.h out of includes.h
      r25027: Fix more warnings.
      r25028: Fix more warnings.
      r25031: Use pointers to services rather than service numbers when possible.
      r25033: Fix include
      r25034: Remove unused variables.
      r25035: Fix some more warnings, use service pointer rather than service number in more places.
      r25037: Start passing the context around.
      r25038: Pass context in more places.
      r25039: Rename service -> loadparm_service, use context more.
      r25041: Use context in more places, fix warnings.
      r25042: Avoid direct references to global loadparm context.
      r25043: Avoid allocation on with NULL parent.
      r25047: Fix more warnings.
      r25056: Install some extra files. Patch from Stefan Gohmann
      r25070: Revert DRSUAPI conversion to new API, as it broke some tests.
      r25081: Add modules_dir member to ldb_context that is used rather than a global
      r25082: Avoid use of MACHINE because it's defined already on Tru64. Thanks to Björn and BaT for pointing this out.
      r25083: Keep actual symbol names the same.
      r25084: Move samba-specific code out of lib/ldb directory.
      r25085: Define LDB_MODULESDIR for standalone build.
      r25093: Use system-provided ldb library if available. Note that this only means using the ldb library from the system - the custom command-line tools for Samba 4 will still be built even if they are already provided by the system.
      r25094: Force building shared module if subsystem is a shared library.
      r25095: Display of which libraries the system-provided version is being used.
      r25096: Missed an include - otherwise the embedded ldb is always used.
      r25097: Don't clutter users' CFLAGS with ldb cflags.
      r25098: Fix typo
      r25100: Include LDAP libs in .pc file so linking statically against libldb works again.
      r25101: Directly depend on drsblobs - can't rely on having it in via ldb.
      r25105: No need to register ldb_map as a module.
      r25106: ldb_map is provided by libldb.so in the system-provided ldb.
      r25110: Show environment variables in HTML output.
      r25124: Include link to summary page, hide environment variables for 'none' environment.
      r25166: Simplify can_contain_deferred and add tests for it.
      r25168: Fix include for gen_ndr/misc.h. Patch by Julien Kerihuel.
      r25174: Export header from just one place.
      r25185: Check that can_contain_deferred returns true if one of the members of a type can contain deferred data.
      r25190: Update talloc version to 1.1.0 after API-incompatible changes.
      r25191: Fix include for BSD systems.
      r25193: Update headers to easy use by external apps.
      r25219: remove unused check for precompiled headers.
      r25265: Move attribute definitions to lib/util.
      r25266: Fix case.
      r25267: Move PRINTF_ATTRIBUTE to lib/util as well.
      r25301: Merge my includes.h cleanups.
      r25305: Fix installation of missing headers.
      r25306: Add tests for string_sub().
      r25307: add string_sub_talloc.
      r25308: Remove use of pstring.
      r25316: Remove last few instances of old BOOL type in librpc/.
      r25359: Set up Samba3 as dc.
      r25360: Allow --skip to be specified more than once.
      r25361: Specify share correctly for RPC-SAMBA3-SHARESEC, allow overriding share from command-line in smbtorture.
      r25363: Move service code to separate module.
      r25364: List skipped testsuites in summary only.
      r25365: Clearer test names
      r25379: Use loadparm context parameter in a lot more places.
      r25384: Support DGRAM IPv6 sockets.
      r25385: Don't clutter the buildfarm output with SKIP: lines.
      r25392: Add loadparm context as argument in a couple more places.
      r25394: Print out version info in test output for use by Samba 3.
      r25395: Fix help for --socket-wrapper-pcap.
      r25398: Parse loadparm context to all lp_*() functions.
      r25410: Use C99 struct initialization.
      r25411: Fix IPv6 socket backend.
      r25430: Add the loadparm context to all parametric options.
      r25446: Merge some changes I made on the way home from SFO:
      r25447: Fix installation of headers. Patch by Brad Hards.
      r25448: Remove IMMEDIATE_STRUCTURES define, which was used for splint. Newer versions of splint support immediate structures just fine.
      r25449: Add convenience function for opening the default smb.conf for openchange.
      r25453: Fix include for NTSTATUS.
      r25454: Use standard bool types in a couple more places.
      r25456: Avoid externs for charsets for now - it breaks openchange.
      r25457: use different location for out-of-tree builds
      r25458: Fix warning
      r25459: Avoid bashism. Reported by Björn Jacke.
      r25460: use common structure in param/generic.c
      r25461: Remove section headers in loadparm - trying to keep data and metadata separate and this should help when refactoring loadparm later on.
      r25462: Remove refernece to categories from js as well.
      r25463: revert accidently committed type changes for now, broke the build.
      r25471: Use macros for loadparm field names, should make migration to offsets rather than pointers easier later on.
      r25518: Convert to standard bool types.
      r25522: Convert to standard bool types.
      r25524: Fix directory names for local module builds.
      r25527: Deal with no tests being registered.
      r25530: Fix missing dependency
      r25535: Deal with events subsystem failures.
      r25536: Fix path for messaging - this code path doesn't appear to have a test, otherwise it would've caused a crash in the testsuite earlier...
      r25537: Use new path for events modules.
      r25540: Remove prototypes for already removed functions.
      r25541: Add setup.py for building ldb python wrappers standalone.
      r25543: Merge libreplace support for inet_pton, inet_ntop, getaddrinfo, getnameinfo
      r25545: Use inet_ntop for ipv4 code as well - should make it easier to share code between IPv4 and IPv6 later on.
      r25546: Convert to standard bool type.
      r25547: Convert to standard bool type.
      r25548: Convert to standard bool type.
      r25549: Convert to standard bool type.
      r25550: Convert to standard bool type.
      r25551: Convert to standard bool type.
      r25552: Convert to standard bool type.
      r25553: Convert to standard bool type.
      r25554: Convert last instances of BOOL, True and False to the standard types.
      r25555: Remove support for BOOL, True and False.
      r25556: Update README.
      r25558: Define HAVE_* for other gai functions to prevent problems with libroken.
      r25562: Use standard bool types in cyrus sasl code - patch by Julien.
      r25566: Use -lexecinfo for backtraces on FreeBSD. Patch by Timur I. Bakeyev <timur at com.bat.ru>
      r25574: Support SMBD_OPTIONS, NMBD_OPTIONS and WINBINDD_OPTIONS environment variables for make test.
      r25580: Error out if there are no tests to run.
      Fix valgrind window title.
      Merge branch 'v3-2-stable' into my_branch
      Fix typo.
      Ignore vim backup files.
      Merge commit '5e95c548864bc8b075b8343e69a69e1a22c92456' into 3.2-trivial
      r25614: Add trivial tdb website.
      r25615: Honor SMBD_VALGRIND and NMBD_VALGRIND for Samba3.
      r25617: Make sure system include paths come after samba include paths. Patch from Timur Bakeyev.
      r25624: Remove ipv4_addr hack. Only causes 4 extra includes of system/network.h because we stripped down includes.
      r25626: Move some debug-specific prototypes to debug.h.
      r25627: Remove unused global.
      r25628: Fix formatting, missing include.
      r25630: Allow "NULL" as memory context, for consistency with the rest of the code,
      r25707: Move selftest makefile code to separate file.
      r25722: Start merging the various test plan files for Samba 4 into one, so that it'll
      r25737: Integrate more of the test recipe code into one file, use
      r25740: More consistent naming for tests, always include environment name in test name.
      r25741: Simplify calls to Subunit functions.
      r25742: Start trimming down hash size for start_testsuite.
      r25743: Write short summary of failed tests and skipped tests to file.
      r25756: Add missing file with quick tests.
      r25764: Fix total number of tests count to not include skipped tests.
      r25842: Start working on test for loading dso's in ldb.
      r25843: Finish check-soloading.
      r25844: Enable soloading by default.
      r25846: Add configure test for -Wl,--export-dynamic.
      r25847: Don't link modules against their subsystem.
      r25850: Add macro for picflag.
      r25851: Move system-specific ldflags checks to libreplace so they can be used by ldb.
      r25852: Move SHLIBEXT determination into a test as well.
      r25853: Specify LIBS to sample_module - fixes build for gcov hosts.
      r25854: Link against -ldl properly.
      r25855: Check for HPUX dl functions.
      r25858: Clean up po files.
      r25859: Wrap native HPUX functions in dl implementation.
      r25860: Remove flag that causes problems on some hosts.
      r25861: Fix export dynamic for HPUX.
      r25862: Avoid po, causes trouble on BSD systems.
      r25875: Try to fix the build on some HPUX machines.
      r25876: Attempt to build shard libs everywhere again.
      r25877: Add libreplace macro for soname flags.
      r25878: Fix syntax error.
      r25879: Don't use shared library for command-line utilities for now - breaks the testsuite, and there is no portable equivalent of LD_LIBRARY_PATH.
      r25880: Try to get some more flags right.
      r25881: Add ability to build .so of tdb.
      r25882: Build shared library of talloc as well.
      r25883: Fix tdb dependency.
      r25884: Specify shldflags first, as required by some compilers.
      r25886: Try to fix building dso's on hpux with gcc
      r25887: Build Samba-specific ldb modules as dso's.
      r25888: Attempt to fix standalone tdb build.
      r25901: Remove obsolete --enable-shared option (whether shared libs should be used internally can be set using --enable-dso).
      r25902: Move messaging tests to same directory as code.
      r25903: Move more files out of torture/
      r25904: Remove extra
      r25926: Move iconv test to iconv code directory.
      r25927: Move share tests to param directory.
      r25928: Split up torture-local a bit.
      r25929: Add some help strings.
      r25930: fix test name
      r25931: Add config .mk file for crypto lib.
      r25932: Remove unnecessary include - should fix the build on hosts without popt.
      r25935: Fix registry tests.
      r25943: Fix soname on hpux.
      r25944: Fix handling of sonameflag on AIX, which doesn't have anything like that.
      r25945: Fix flags for MacOS X.
      r25953: AIX make doesn't support $^.
      r25956: Try metze's suggestion for Mac OS X shld flags.
      r25998: Add test for run time library path environment variable.
      r26001: Share some code between macros, add macro specifically for testing the ld flag that allows undefined symbols.
      r26002: Use osf rather than tru64 - pointed out by metze.
      r26003: Split up DB_WRAP, as first step in an attempt to sanitize dependencies.
      r26004: Add some simple credentials tests.
      r26005: Notice the user about LD_LIBRARY_PATH or equivalent when building with shared libs.
      r26006: Improve some dependencies.
      r26066: Use TALLOC_CTX consistently for talloc contexts rather than void \* (it was already being used for some).
      r26067: Merge improvements building Python modules.
      r26068: Import improved Python bindings for LDB, including tests.
      r26069: Import python bindings for credentials.
      r26070: Skip credentials python tests for now.
      r26071: Move DCE/RPC SWIG bindings closer to the code they're wrapping.
      r26072: Import trivial SWIG wrapper for talloc.
      r26073: Import Python bindings for the registry.
      r26074: Add SWIG magic for NTSTATUS and WERROR return codes.
      r26075: Ignore registry python test for now.
      r26076: Remove some SWIG code that is already commonly available.
      r26077: Import updated TDB bindings.
      r26078: Import Python bindings for system_session functions (still needs tests).
      r26079: Some cleanups in the old SWIG wrappers: - remove old torture tests for LDB (replaced by a much more extensive test) - moved tool to bin directory
      r26080: Import updated LDB bindings.
      r26087: Fix include, add setup.py for tdb
      r26088: Import some native-python python modules and move original python swig torture code to common python directory as well.
      r26089: Move python detection to a separate file, and don't make it an error if it isn't available.
      r26090: Make building tdb python bindings independent of use of external tdb.
      r26095: Add function for import a generic configuration file in a loadparm context.
      r26096: No longer include removed header
      r26097: Consider python modules special modules rather than special libraries.
      r26098: Make missing python no longer fatal.
      r26099: Don't depend on nonexistant auth_util.h header.
      r26100: Also check for SWIG.
      r26101: remove some unused includes
      r26105: Add targets for building and installing the python bindings.
      r26106: Add targets for building, installing and checking python bindings.
      r26107: Add more tests.
      r26108: Add makefile rules for building, installing and checking python bindings.
      r26109: Use new SWIG helpers in autogenerated DCE/RPC SWIG files.
      r26110: Create separate function for connecting, add helper for creating result typemaps.
      r26112: Do proper error checking in __contains__.
      r26113: Build tdb python bindings even when not using system tdb.
      r26114: Allow keyword-arguments.
      r26116: Mention python in the config.status summary.
      r26117: Fix DESTDIR use for bindir.
      r26118: Remove whitespace that causes empty if statement to be generated.
      r26119: Fix warnings.
      r26120: Don't install python modules as modules.
      r26121: Don't build modules if subsystem isn't build.
      r26122: Don't install python bindings yet.
      r26123: Use utility function for secrets.tdb path.
      r26124: Install ldb_handlers.h, required by ldb_samba.
      r26127: Move session code out of auth_util.c. No longer making it part of auth but making it usable independently will be the next step.
      r26128: Some formatting fixes in secrets.c, fix free of filename, update ignores for source/..
      r26129: Specify path explicitly in case an external ldb installation is used.
      r26130: Fix header installation
      r26134: Avoid using samdb-dependent functions in auth_system_session.
      r26136: Attempt to fix dependencies for auth.
      r26177: Allow prebuilding swig wrapper, install ldb.py.
      r26178: Link against -ldl as well to prevent undefined symbols.
      r26179: Fix symlink.
      r26180: Allow prebuilding swig output files.
      r26181: Set version to 1.1.1, as 1.1.0 has already been released.
      r26185: No need to depend on ldap, shared lib already has that info.
      r26186: Generate SWIG files as part of autogen.sh
      r26187: Fix module name, indentation.
      r26188: Now that swig output is pregenerated, allow building python code without swig installed.
      r26189: Add really trivial testsuite for the auth module.
      r26190: Allow successful as well as success.
      r26191: Import custom test runner for subunit, rather than using trial, which is part of twisted.
      r26194: Wrap the events subsystem in a separate file.
      r26195: Wrap two more functions.
      r26196: Always build python bindings for ldb.
      r26197: Add bindings for libsecurity.
      r26199: Allow constructing new sids, implement __eq__ for sids.
      r26200: Bring back some accidently removed files.
      r26201: Build docs for the security module.
      r26202: Fix dependencies.
      r26203: Avoid using ldb_wrap for secrets database.
      r26204: Binsings for some more functions.
      r26205: Pass loadparm_context to secrets_db_connect() rather than using global context.
      r26206: Build python modules as part of make all.
      r26207: Only compile swig files if swig is available.
      r26218: Remove libtdb.so as well.
      r26221: Add loadparm_context parameter to auth_context_create.
      r26222: Avoid global_loadparm in a couple more places.
      r26223: Move loadparm context up in the stack.
      r26224: Remove another use of global_loadparm.
      r26225: Remove use of global_loadparm in wins server.
      r26226: Avoid more uses of global_loadparm.
      r26227: Make loadparm_context part of a server task, move loadparm_contexts further up the call stack.
      r26228: Store loadparm context in auth context, move more loadparm_contexts up the call stack.
      r26229: Set loadparm context as opaque pointer in ldb, remove more uses of global_loadparm.
      r26230: Use task-provided loadparm context in a couple more places, avoid loadparm context inside ntlm_auth.
      r26231: Spell check: credentails -> credentials.
      r26232: Provide replacement for stdint.i for users of older versions of swig.
      r26233: Pass loadparm context when creating krb5 contexts.
      r26234: More global_loadparm fixes.
      r26235: Avoid global_loadparm.
      r26236: Remove more uses of global_loadparm or specify loadparm_context explicitly.
      r26237: Add loadparm context to the server service interface.
      r26238: Add a loadparm context parameter to torture_context, remove more uses of global_loadparm.
      r26239: Fix registry argument order.
      r26240: We now actually use torture_context pointers for more than just allocation.
      r26241: Ignore some files generated by tests.
      r26242: Don't fail if swig is not available.
      r26243: stdint.i requires swigarch.i
      r26247: Don't allow use of older SWIG versions.
      r26248: Check in SWIG output so SWIG is not required when running out of svn.
      r26249: Remove a couple more uses of global_loadparm.
      r26250: Avoid global_loadparm in a couple more places.
      r26251: Fix include of stdint in tdb swig wrapper.
      r26252: Specify loadparm_context explicitly when creating sessions.
      r26258: Use loadparm context in client_start function of gensec.
      r26259: Provide convert_string_talloc() variant that works directly with an iconv handle.
      r26260: Store loadparm context in gensec context.
      r26261: Use enum type.
      r26262: Add test for WERROR return code handling for Samba 3 client code.
      r26263: Don't assume CH_UNIX is CH_UTF8.
      r26264: pass name resolve order explicitly, use torture context for settings in dssync tests.
      r26265: Use task-provided loadparm context in nbt and rpc servers.
      r26266: Remove more global_loadparm uses.
      r26267: Fix two calls of smb2_connect I missed.
      r26268: Avoid more use of global_loadparm - put lp_ctx in smb_server and wbsrv_connection.
      r26269: Fix a couple more references to global_loadparm.
      r26270: Require specifying the loadparm_context or NULL to cli_credentials_guess().
      r26271: Remove some more uses of global_loadparm.
      r26272: Remove global_loadparm in some more places.
      r26274: Some syntax fixes, remove more global_loadparm instances.
      r26275: return loadparm context in lp_load.
      r26276: Install SWIG files if swig is present.
      r26277: Move loadparm context higher up the stack.
      r26278: Tallocify convenience table for iconv handles.
      r26279: Don't compile any python stuff if python is not available.
      r26280: Fix installation if swig is not available.
      r26281: Fix include.
      r26292: Make sure swig directory exists.
      r26293: Make sure SWIG directory exists, respect DESTDIR.
      r26294: Use hardcoded name for SWIG for now, until proper autoconf checks are in place.
      r26295: Remove use of global_loadparm for net and wb_pam_auth.
      r26296: Store loadparm context in DCE/RPC server context.
      r26308: Split up big popt common callback function.
      r26309: Move specification of port higher up the all stack.
      r26310: Remove more uses of global_loadparm.
      r26311: Move port number specification higher up the call stack.
      r26312: Move specification of port higher up the call stack.
      r26313: Fix more uses of static loadparm.
      r26314: Eliminate use of global_loadparm.
      r26315: Avoid using lp_ functions in libcharset.
      r26316: Use contexts for conversion functions.
      r26317: Fix typos.
      r26318: Don't rely on SAMDB functions in secrets database.
      r26319: Split encoding functions out of libcli_ldap.
      r26320: Clean up properly after error.
      r26321: Fix python tests.
      r26322: Fix include
      r26323: Regenerated credentials SWIG.
      r26325: Remove use of global_loadparm in netif.
      r26326: Remove more uses of global_loadparm.
      r26327: Explicit loadparm_context for RPC client functions.
      r26328: remove more uses of global_loadparm.
      r26329: Fix more loadparm_context references. Only about a 100 left now.
      r26330: Fix header installation.
      r26333: No more global_loadparm in finddcs.
      r26334: Avoid loadparm_context.
      r26335: Specify name_resolve_order to socket code.
      r26336: use offsets inside loadparm rather than pointers (allows multiple contexts to exist at the same time).
      r26337: Move global_loadparm to a higher caller.
      r26338: Fix parameter, typo.
      r26339: Make loadparm talloc-allocated.
      r26340: Add special handlers for debuglevel and logfile.
      r26342: Fix initialization.
      r26343: Remove bLoaded global variable.
      r26344: Fix memory access.
      r26345: Fix dumping an individual parameter.
      r26346: Add tests for loadparm.
      r26347: More tests.
      r26348: Avoid use of autofree context.
      r26349: More tests.
      r26350: More tests.
      r26351: Fix handling of flags when there are multiple loadparm contexts around.
      r26352: Don't make lp_load create a new context.
      r26353: Remove use of global_loadparm.
      r26355: Eliminate global_loadparm in more places.
      r26356: Remove prototype for nonexisting function.
      r26357: Add separate subsystem for auth_sam_reply parsing.
      r26358: Always specify TORTURE_OPTIONS to smbtorture.
      r26359: Build .so version of wins ldb module.
      r26360: Add some const.
      r26366: Import provision scripts in Python.
      r26369: Start on tests for the upgrade python code.
      r26370: Import upgrade script in Python.
      r26371: Fix typo.
      r26372: Add include for external users.
      r26373: add note about shared libs being problematic with static data.
      r26374: Remove dependency on dynconfig.
      r26375: Move provision-independent utility function to main samba python module.
      r26376: Add context for libcli_resolve.
      r26377: Specify port explicitly.
      r26378: Remove use of global_loadparm.
      r26379: Remove more global_loadparm instances.
      r26380: Specify port number higher up the call stack.
      r26381: Move global_loadparm higher up the call stack.
      r26382: Remove more uses of global_loadparm.
      r26383: Make interfaces argument explicit.
      r26384: Fix another global_loadparm instance.
      r26385: Integrate gensec-socket into gensec.
      r26397: Fix circular dependency in samba-socket.
      r26398: Fix writing the output of failed tests to st/summary.
      r26399: Use -O option for SWIG (less evil generated code).
      r26400: Don't try to do character conversion before smb.conf has been parsed.
      r26401: Don't cache interfaces context in libnetif.
      r26402: Require a talloc context in libnetif.
      r26403: Make sure ntvfs is only initialized once.
      r26404: Disable socket wrapper for the interface detection code to work around the fact that the ioctls for enumerating interfaces are not very reliable when used on unix domain sockets.
      r26405: Import support for getifaddrs from Samba3.
      r26406: Make a copy to prevent modification of the loadparm configuration.
      r26408: Remove use of global_loadparm.
      r26409: Pass smb ports along.
      r26410: Remove unnecessary static.
      r26411: Double check Python installation - make sure we can compile and link using it.
      r26417: Make str_list_copy(mem_ctx, NULL) return NULL rather than an empty list.
      r26426: Remove uses of global_loadparm.
      r26427: Avoid global_smb_iconv_convenience.
      r26429: Avoid use of global_smb_iconv_convenience.
      r26430: require explicit specification of loadparm context.
      r26431: Require ndr_push creators to specify a iconv_convenience context.
      r26432: Require ndr_pull users to specify iconv_convenience.
      r26433: Don't crash when a NULL lp_ctx is specified to a lp_parm_* function.
      r26434: Remove display charset from iconv convenience context.
      r26435: Remove global_loadparm instance.
      r26436: Remove default of 0 for integer parameters when a lp_ctx of NULL is specified
      r26437: remove another use of global_loadparm.
      r26438: Store iconv convenience in tdr push contexts.
      r26439: Require tdr_pull users to specify a smb_iconv convenience context.
      r26440: Remove more uses of global_loadparm.
      r26441: Remove global_loadparm uses.
      r26442: Remove use of global_loadparm.
      r26443: Remove global_loadparm instances.
      r26444: Fix pidl tests.
      r26445: Fix credentials python bindings.
      r26446: Convert param module to SWIG.
      r26447: Forgot to add param.i file.
      r26448: Add basic tests for param python module.
      r26449: Support configuration without a known configuration dir.
      r26450: The subprocess is only available in python >= 2.4 so avoid it for now.
      r26454: Add simple SWIG macro for wrapping talloced types.
      r26455: Use new talloctype macro in generated SWIG code as well.
      r26456: Provide default config object, fix typo.
      r26459: Build ildap module as shared module by default.
      r26460: Enable ldb python tests.
      r26461: Tighten dependencies.
      r26462: Tighten dependencies.
      r26463: Tighten dependencies.
      r26464: Tighten dependencies.
      r26467: Use getifaddrs() for interface enumeration and provide replacements for platforms that don't have it in lib/replace.
      r26468: Match getifaddrs more closely, add trivial test.
      r26469: Fix paths, only include IPv4 addresses for now.
      r26470: Update README.
      r26471: Sync with js version.
      r26474: Move credentials-specific kerberos file to credentials subsystem. Fixes missing symbols in some of the python bindings.
      r26475: Add ldb.set_credentials function.
      r26476: Remove unnecessary hack.
      r26477: Allow setting loadparm context for a ldb context in python, plus some other minor improvements.
      r26480: Add utility class for testing LDB code.
      r26481: Make function for loading symbol from DSO more generic, and allow modules to provide an ops table directly rather than an initialization function.
      r26482: Use shared library version of ldb, to make sure not every module ends up with its own private copy of ldb with its own list of modules...
      r26483: Merge ldb module dependency fixes, fix auth python module.
      r26484: Don't rely on removed header.
      r26486: Use portable run-time library path environment variable.
      r26487: Cope with systems that don't have struct sockaddr.sa_len.
      r26491: Fix syntax.
      r26492: Some hosts have a define called ifa_dstaddr.
      r26493: Fix includes for dsdb/common.
      r26494: Add entries for new header files.
      r26495: Add defines for getifaddrs/freeifaddrs.
      r26496: Move some provision functions to a new SamDB class, support setting session_info on a ldb context from python.
      r26497: Fix return type for freeifaddrs().
      r26498: Fix memory leak in iconv code.
      r26499: Allow testing python provision by setting the PROVISION_PYTHON environment variable.
      r26502: Revert accidently removed pkg-config path change. Thanks to metze for catching this.
      r26503: Change order of arguments in param interface so it's easier to make the
      r26504: Don't rely on system-provided kerberos headers.
      r26505: Add python bindings for some samdb-related functions, improve provisioning in python.
      r26506: Start running (really trivial) tests for upgrade script.
      r26507: Fix function signature for freeifaddrs.
      r26508: Tighter dependencies in an attempt to fix missing symbol errors on sun9.
      r26509: Don't make boolean options eat the next argument.
      r26510: attempt to fix shld flags for darwin.
      r26512: Another attempt at fixing darwin
      r26513: Update substitution dictionary for ldifs.
      r26516: Fix line splitting in subunitrun.
      r26517: Add functions for setting and getting parameters on a LoadParm.
      r26518: Fix provision of registry using Python.
      r26520: More Python updates.
      r26521: Fix newlines.
      r26522: Fix warnings on SamDB connect from Python, simplify the setup code for the various LDBs.
      r26523: Refactor provisioning code.
      r26524: Import self join.
      r26525: Consistency in the API.
      r26526: Fix argument value.
      r26527: Start on tests for provision.
      r26535: Get rid of all-knowing ProvisionSettings object.
      r26536: More tests for provisioning code.
      r26537: Support ldb.add({'dn': 'dc=foo,bar=bla', ...}).
      r26538: Pass path generation function around rather than base directory.
      r26539: Remove unnecessary statics.
      r26540: Revert my previous commit after concerns raised by Andrew.
      r26478: Update versions, fix typo.
      r26545: Sync output with ejs.
      r26546: Rather than having a gazillion targets, add output format variable for 'make test'.
      r26547: Make testsuites less special during subunit handling.
      r26548: Remove remaining variables from state hash.
      r26549: Remove suite-specific bits.
      r26552: remove unused state variable, use dot as path separator for test names.
      r26553: Fix html output.
      r26554: Fix test for getifaddr on FreeBSD. Patch by Timur Bakeyev.
      r26555: Use python-config utility to find python compile/link flags.
      r26559: Make the provision function a bit smaller.
      r26560: Add script for running in valgrind.
      r26561: Fix make gdbtest, valgrindtest and testenv for shared libs.
      r26562: Fix provisioning using Python.
      r26563: Fix reg_diff_apply argument order.
      r26564: More python bindings for registry code.
      r26565: Fix python registry bindings. 'PROVISION_PYTHON=yes make test' works now.
      r26566: Fix member provision when using python.
      r26567: Allow registering new ldb modules from python.
      r26570: - Trim size of the swig-generated Python bindings by removing a bunch of {}'s.
      r26571: Hide warnings about unused macros and casting qualifiers in autogenerated files.
      r26572: Fix warnings in the Python code.
      r26573: Fix warnings.
      r26575: Build a private copy of the Python executable for Samba 4, so we know we're always using the same library we build the modules for.
      r26576: Allow the static module loading code to be used for the Python modules.
      r26577: Fix the standalone ldb build.
      r26578: Ensure directory exists.
      r26579: Fix the typo that breaks the code coverage build.
      r26580: Include sentinel in build.h, in case the list is empty.
      r26582: Use the same swig flags everywhere.
      r26583: Throw a proper exception in the python code when tdb_open() fails, fix indentation in generated SWIG code from pidl.
      r26584: Fix exception handling in ldb constructor.
      r26585: Fix samba3.python tests.
      r26586: Rename fetch to get for consistency with the Python dictionary interface.
      r26587: Fix reading Samba 3 WINS database and initial work on group db, aliases and secrets.
      r26590: Parsing routines for the smbpasswd file and idmap database.
      r26591: Get the first bits of samba3dump to work again.
      r26592: Finish fixing the samba3dump script.
      r26593: - More work on the python versions of samba3dump and the samba3sam tests.
      r26594: Add right paths to the Python sys.path setting so we don't have to set magic environment variables when running from the build directory.
      r26595: Fix includes for hosts without gssapi as system header.
      r26596: Fixed upgrade.py.
      r26597: Attempt to provide alternative for hosts that don't have python-config.
      r26598: Simplify the way Python tests are run.
      r26599: Attempt to also support provisioning using Python in the BECOME-DC test.
      r26600: Provide dir variable with current basedir in Makefile.
      r26601: Remove existing files to prevent errors.
      r26602: Revert my previous commit as it only works with GNU make.
      r26603: Don't install no longer available upgrade script.
      r26604: Don't depend on Python just yet, since the code that uses it is ifdeffed out.
      r26607: Fix reading of values and subkeys in Samba 3 registry files.
      r26608: More improvements to the upgrade code.
      r26614: Fix options parsing for credentials in Python.
      r26615: Fix Python syntax
      r26616: Support parsing of user data in SAmba 3 tdbsam.
      r26617: Load smb.conf.
      r26618: Implement -W option support.
      r26619: Add Python bindings for libnet. No tests yet and no way to set the parameters...
      r26620: python: Allow not specifying event contexts, in which case a new context is used.
      r26621: vampire: Add simple Python-based vampire script
      r26622: python: Update license version, clarify copyright.
      r26623: python: Allow specifying URL rather than host name on the command-line.
      r26624: libnet/python: Use standard function for constructing context, allow overriding credentials.
      r26625: Wrap some more events functions for Python and add a trivial test for it.
      r26626: Install auth/session.h
      r26627: param: Provide a call for loading the system smb.conf.
      r26628: python: Add more documentation, simplify code in Samba3 module.
      r26629: python: Improve documentation in various places.
      r26630: Split up big tests into various smaller functions, making it easier to debug.
      r26631: ldb/python: Fix missing elements bug and memory leak. * Don't increase the PyDict_Next() counter - Python already does that for us. * Fix a talloc(NULL, ...) memory leak in the code that constructed ldb message elements.
      r26637: More work converting to Python.
      r26638: libndr: Require explicitly specifying iconv_convenience for ndr_struct_push_blob().
      r26639: librpc: Pass iconv convenience on from RPC connection to NDR library, so it can be overridden by OpenChange.
      r26640: Janitorial: Remove some more uses of global_loadparm.
      r26641: ldb(Python): Remove some unnecessary {}'s.
      r26642: samba3sam.py: Remove more EJS-specific code.
      r26643: librpc: Remove uses of global_loadparm.
      r26644: Janitorial: Pass resolve_context explicitly to various SMB functions, should help fix the build for OpenChange.
      r26645: Janitorial: Fix a couple of warnings.
      r26646: libcli/smb_composite: Allow specifying SMB parameters in smb_composite_connect structure. AFAIK no global variables will now be used when doing RPC client connections.
      r26650: torture/raw: Fix warnings in lockbench/openbench.
      r26651: libsmb: Allow specifying signing policy from higher up.
      r26652: msrpc_parse/msrpc_gen: Add iconv_convenience argument.
      r26653: Janitorial: Remove global_loadparm use in two more places.
      r26654: libcli/smb_composite: Rather than specifying each of the gazillion options for SMB individually, just specify the smbcli_options struct.
      r26655: torture/auth/pac: remove uses of global_loadparm
      r26656: python: Add file documentating the status of the Python migration.
      r26657: pidl: Add basics for generating Python modules.
      r26658: pidl: Register Python modules.
      r26659: pidl/python: Support string constants and handle modules.
      r26660: pidl/python: Generate stub functions for DCE/RPC client functions, constructor for interface objects.
      r26661: pidl/python: More generic handling of NTSTATUS, add stubs for types.
      r26662: pidl/python: Add constructors for struct/union types.
      r26663: Proper dependencies for pidl Python bindings.
      r26664: buildsystem: Hopefully fix the shared library build on AIX.
      r26665: registry: Fix tests on bigendian machines.
      r26666: python: Prefer newer Python versions as they use const properly.
      r26667: pidl/python: Don't generate casts anymore; this will generate warnings with older Pythons, but will be a lot cleaner with newer versions.
      r26668: tdb/python: Fix default value of open_flags for tdb.
      r26669: Janitorial: Remove uses of global_loadparm.
      r26670: Janitorial: Remove global_loadparm uses.
      r26671: rap: Convert the RAP tests to the new torture API and run them by default.
      r26672: Janitorial: Remove uses of global_loadparm.
      r26673: selftest: Document the purpose and output format of samba4_tests.sh.
      r26674: smb_composite: Avoid use of global_loadparm.
      r26675: mkproto: Add --all argument, fix some perl warnings.
      selftest: Use platform-specific equivalents of LD_LIBRARY_PATH for Samba4's smbtorture.
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      Use metze's approach.
      Review feedback from metze.
      r26676: libcli: Fill in lp_workgroup() again, should fix my breakage of cifsdd tests. Thanks to Andrew for catching this.
      r26687: python: Update status after feedback from abartlett.
      r26688: Fix listing remote predefined keys and subkeys. This fixes bug 3431.
      r26689: registry: Return max_subkeynamelen, max_valnamelen and max_valbufsize in getkeyinfo().
      r26690: torture: Move torture_context_init() to the ui.c, where all functions related to it are.
      r26691: registry: Add subkeys required for Server Manager Alerts and Peplication. See bugs 4934 and 4935.
      r26692: registry: Treat key and value names case-insensitively.
      r26694: asn1: Fix header and some typo's.
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      r26700: tdb: Build and install Python bindings when possible.
      r26701: ldb: Build and install python modules when possible.
      configure: Complain when Python is not found.
      selftest: Use Python provision for Samba 4 by default.
      python: Update STATUS.
      pidl: Fix samba3-cli test after Günthers formatting fixes.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      tdb: Add simple reimplementation of tdbdump in Python as an example of the tdb Python bindings.
      Update ignore list.
      Ignore compiled Python files.
      python/ldb: Add __getitem__ implementation for LdbMessageElement.
      ldb/python: Implement __len__ for MessageElement.
      ldb/python: Allow comparing a MessageElement to a list or a singleton.
      python/ldap: Wrap parse_control_strings().
      python/ldap: Support controls argument to ldb.search().
      python: No longer skip LDAP tests.
      ldap/python: Fix some more calls.
      python: Specify right arguments for the ldap test, fix some more calls.
      python: More work getting the LDAP test to compile again.
      python/ldap: Fix some tests.
      python/ldap: Get further.
      Make a few more tests pass.
      python/ldap: Fix a couple more tests.
      ldb/python: Support comparing Dn's to strings.
      ldap/python: Fix last tests.
      Python: Update STATUS.
      Python: Simplify code in a couple of places. Copy Andrew's changes from g53b5166.
      python: Fix typo.
      pidl: Remove multiple copies of get_pointer_of and get_value_of.
      pidl: Remove support for the "declare" keyword in the parser.
      idl: Use typedef rather than declare.
      pidl: Remove support for the declare keyword in other parts of the pidl code.
      pidl: Move tests for the CUtil module to a separate file.
      pidl: Remove declare tests, add more tests for typedef.
      pidl: Update documentation.
      pidl: Add more parsing tests.
      pidl: Add CPAN metadata.
      pidl: Remove obsolete smb_interfaces code.
      pidl: Add ability to write type metadata to a file.
      pidl: Prevent empty declarations for enums without body.
      pidl: Move more stuff outside ifdef when defining enums and generate pretty code for enums without body.
      pidl: Add function for determining whether a type has a body.
      pidl/ejs: Fix bug that filled in the body for types without body.
      pidl: Avoid accidently filling in empty body for types without body.
      idl: Replace non-standard "declare" keyword with typedef and regenerate.
      tests.blackbox: Avoid my local Kerberos setup from interfering with the blackbox.smbclient test.
      python: Avoid PyDoc_STRVAR() macro which doesn't exist in Python2.2.
      python: Try more possible flags.
      python: Fix initialization of variable.
      Try to fix the build on Tru64; avoid single quotes because they get expanded by perl in the build system.
      Remove accidently committed debugging statement.
      python: Avoid PyMODINIT_FUNC because it doesn't exist in older pythons.
      python: Avoid overwriting flags for already found version of Python.
      python/pidl: More work on wrapping enums, bitmaps and structs.
      python/pidl: Handle non-string types.
      python/pidl: Start wrapping function arguments.
      pidl/python: Convert some Python objects back to C, return proper tuples in client calls.
      pidl/python: Some more support for special case types.
      pidl/python: Remove references to DECLARE, which has been removed.
      pidl/python: Fix conversion of last few non-standard types.
      pidl/python: Fix const type wrapping.
      pidl/python: Fix bug accidently filling in the body of enums/bitmaps without body.
      pidl/python: Fix more warnings in the generated code.
      pidl/python: Convert unions.
      python: Add some utility functions for working with Python objects based on talloc pointers.
      pidl/python: Use new talloc utility functions.
      pidl/python: Support more scalar types when converting from Python.
      pidl/python: Work towards supporting more complex types (arrays, etc).
      pidl: Move Generate*Env functions to Parse::Pidl::Samba4::Header because they only work with the structures generated by that file.
      pidl/python: Support repr() for python types.
      python: Allow wrapping pointers within talloc'ed memory that are not talloc contexts.
      Remove accidently committed files.
      pidl/python: Remove unnecessary talloc_free().
      python: Add simple tests for the DCE/RPC echo interface.
      python: Add some more rpc/echo tests.
      pidl/python: Fix use of pointers.
      pidl/python: Fix parsing arguments, fix more pointer issues.
      pidl/python: Fix more compile errors.
      python/pidl: Fix assignment.
      pidl/python: Fix compilation of py_echo.
      python: Fix rpcecho tests.
      selftest: Ignore output generated by html formatter.
      pidl/python: Pass credentials and loadparm context when connecting using DCE/RPC.
      python: Fix deallocation bug in pytalloc.
      pidl/python: Specify memory context explicitly when returning Python objects.
      python: Fix last bugs in rpcecho test. It passes now!
      pidl/python: Deal with arrays that are not pointers.
      pidl/python: Fix processing UUID-less interfaces, external typedefs and certain bitmap elements.
      python: Start building winreg module.
      python: Fix python code for winreg, add test.
      python: Be more pythonic - turn WERROR and NTSTATUS return codes into exceptions.
      python: Accept loadparm filename rather than loadparm object, too.
      python: Build epmapper module.
      python: Enable python bindings for samr and lsa interfaces.
      python: Move some convenience macros to a separate header rather than putting them in every generated py_* file.
      python: Don't try to free const pointers.
      python: Fix some corner cases handling scalars.
      python: Compile security module, handle uint.
      python: Add simple test for samr python code.
      python: Work around the fact that there are two "security" modules now.
      python: Convert winreg.py completely to rpc, use new RPC Python bindings.
      python: Compile in svcctl Python bindings.
      python: Fix handling of pointer-less strings in function arguments.
      python: Enable building of the wkssvc python bindings.
      libreplace: Escape asterisk.
      util: Move asn1 to lib/util to trim down the number of subsystems.
      python: Update status.
      ldap.py: Use constants where possible.
      Fix asn1 locations.
      python: Build shared python modules for generic use.
      pidl: Fix imported function for ServerNDR and add test to make sure it doesn't regress again.
      pidl: Fix missing import for fatal().
      pidl: Add simple test for ServerNDR.
      Ignore newly generated proto header.
      selftest: Add some more documentation. Rename env => target to avoid confusion.
      python: Don't attempt to build shared and static versions of modules, because it's just not going to work with the current build system.
      selftest: Use "require" rather than "use" keyword so .pm files don't have to be provided until used.
      idl: Update DFS IDL from Samba 4.
      idl: Update initshutdown and echo IDL from Samba 4.
      idl: Remove use of [ref], which is the default.
      idl: Update IDL for eventlog, misc, netlogon and security from Samba 4.
      registry: Check for more specific LDB return codes, handle changing existing values better.
      registry: Improve error codes and update tests.
      registry: Avoid mapping registry return codes: return the right value in the first place.
      registry: Use correct return values.
      Try to fix the build on Tru64; avoid single quotes because they get expanded by perl in the build system.
      libreplace: Escape asterisk.
      howto: Update instructions for git, and use ReST formatting.
      build: Fix handling of external pkg-config dependencies when generating pkg-config files.
      build: Allow overriding CFLAGS for python packages.
      ldb: Fix building python modules against system-provided ldb.
      python: Reenable modules for libcli_nbt and libcli_smb.
      build: Demote a bunch of libraries to subsystems. This makes packaging easier and should also make it easier
      python: Fix init functions.
      build: Don't build heimdal as library.
      python: Avoid duplicate copies of some objects in different packages.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-python
      ldb: Increase version number to make it easier to create new Debian snapshots.
      ldb: Fix typo.
      tdb: Add URL in pc file.
      build: Allow manually written pkg-config files.
      ldb/talloc/tdb: Use manually written pc file.
      registry: Use manually written .pc file.
      dcerpc: Use manually written .pc files for dcerpc and ndr.
      torture: Use manually written .pc file.
      gensec: Use manually written .pc file.
      param: Use manually written .pc file.
      dcerpc_samr: Use manually written .pc file.
      build: remove support for automatically building .pc files.
      build: Remove support for DESCRIPTION setting that is now unused.
      Add bindings for lp_load_default().
      python: Add convenience function for getting command line loadparm context
      Default to creating anonymous credentials.
      python: Add bindings for cli_credentials_set_cmdline_callbacks().
      python: Support --no-pass.
      Python: add some docstrings.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      python: Add bindings for SamDB.set_invocation_id().
      python: Add function to look for unsubsituted variables.
      python: Make SamDB.set_ntds_invocation_id take a string.
      python/provision: Reconcile code partitions-only provisioning and generic provisioning, some other minor refactoring of the provisioning.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      python: fix tests for check_all_substituted.
      python: Add test for secretsdb_become_dc
      python/provision: Create private dir if it didn't exist yet.
      ldb/python: Add bindings for schema functions.
      python: Fix representation of UUIDs as strings in zone files rather than binary blobs, fix escaping of LDAP URL's in PHP LDAP admin configuration.
      python/provision: Reload secrets when necessary, fix unix names in mappings.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      python: Give precedence to Samba's syspath over the already set system one.
      python: Load smb.conf file for the provision tests.
      python: Use relative paths for registry.
      ldb: Add ldb_oom() calls in a couple of places.
      torture: Fix too early free in spoolss notify test.
      Partially revert d64a2288a2cb3a8f74a18b740b265a460773635d and 351c2e99ab8b6a91f7355077b2d2944fd820839c to see if that fixes the build.
      python: Provide PyAPI_DATA macro for older versions of Python (< 2.3).
      Override KRB5CCNAME so existing Kerberos tickets in the users environment don't get overwritten.
      Mark RAW-OFFLINE as known failing for Samba 4 (because it doesn't have offline support yet).
      Put ldb test output in prefix.
      Put temporary test files  in test directory.
      Skip offline tests.
      Fix formatting.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      build: Remove unused functions Import() and GetInfo().
      Remove unused class members.
      Add tests for findnss(), add some docstrings.
      Fix provision python test.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Fix upgrade after provision parameter rename.
      Move nt_time_equal() to libutil.
      torture: Merge util.c into util_smb.c
      Ignore kinit with pkinit test failures for now.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Re-enable python support in BECOME-DC test.
      Remove unused path update.
      Support 'mkinclude' command in .mk files.
      Use mkinclude (makes the Makefile a bit shorter), use double-colon for phony makefile targets.
      Move more make code to rules.mk
      Fix test count after pointer_default_top() removal.
      Move some static makefile variables to rules.mk.
      Move first_prereq test to m4 code.
      Move nmblookup blackbox test closer to the code it tests.
      registry: Fix warning.
      Fix syntax of docstrings, set project name when generating Python API documentation.
      Ignore Python apidocs, vim swap files.
      Add docstring.
      Split up tests a bit, output subunit.
      Fix tests.
      Merge branch 'v4-0-trivial' into v4-0-python
      Fix typo.
      Merge branch 'v4-0-trivial' into v4-0-python
      Remove unused define.
      Add tests for upgrade of WINS database.
      Start working on python conversion of minschema.
      More syntax fixes, use more standard python functions.
      Change README to be ReST-compatible.
      Make formatting a bit more ReST-valid.
      Start working on generating .mk file from configure for inclusion in Makefile.
      Move some variables to a separate .mk file that could also be included by a non-smb_build build system.
      Automatically write AC_SUBST() vars to mkconfig.mk and use them.
      Move some more variables to static .mk file.
      Fix case.
      Avoid autogenerating the Makefile but rather include a data.mk file
      Fix switching of hives in regshell (#5254)
      Fix typo.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-python
      Use SMB_CONF_PATH environment variable inside tests rather than hardcoded paths.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Remove tests for Samba 3 EJS code.
      Remove Samba 3 backwards compatibility code in C.
      Ignore mkconfig.mk file, which is autogenerated.
      Fix accidently introduced typo.
      Make data about what subsystems/libraries are enabled available in the mkconfig.mk file.
      Avoid autogenerating the Makefile but rather include a data.mk file
      Fix typo.
      Move pidl bits to a separate file.
      Remove unused function.
      Print warning when config.status doesn't exist and the user tries to
      Clean up data.mk file in distclean.
      TORTUREDIR as target dir for binaries is no longer used, remove it.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Support including files in the cflags.pl script.
      Use make variables in cflags file (now supported by cflags.pl)
      ldb: Split up the Makefile so it will be possible later on to directly include fragments in the Samba 3 or 4 makefile.
      Split rules out of tdb Makefile.
      Split rules.mk out of Makefile.
      Move some more rules to rules.mk
      Split actual content out of talloc Makefile into talloc.mk.
      Split actual content out of tdb Makefile into a separate file.
      Fix out of tree builds.
      Manually compile python files rather than using setup.py.
      Manually compile python files rather than use setup.py.
      Avoid using setup.py for intsallation.
      Add blackbox test for provisioning code to make sure it can be run more than once in a row.
      Reintroduce samba3sam EJS test, at least until the Python test is ready.
      Mark the reprovision test as known failing for now.
      Create the required directories when installing Python code.
      tdb/ldb: Use prefix in case DESTDIR is not set.
      Fix installation of python module for ldb and tdb.
      Make sure talloc.so is build before installing.
      Specify PICFLAG when compiling python modules.
      make sure libraries are built before attempting to install.
      Support using shared library during testsuite run if tdb was built with a shared lib internally.
      Correctly increment counters in Subunit test runner.
      Fix subunit runner exit codes.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Fix invalid symbol.
      Add python version of newuser.py.
      r25882: Build shared library of talloc as well.
      r25884: Specify shldflags first, as required by some compilers.
      r25944: Fix handling of sonameflag on AIX, which doesn't have anything like that.
      r25953: AIX make doesn't support $^.
      r26072: Import trivial SWIG wrapper for talloc.
      r26187: Fix module name, indentation.
      r26197: Add bindings for libsecurity.
      r26276: Install SWIG files if swig is present.
      r26280: Fix installation if swig is not available.
      r26292: Make sure swig directory exists.
      r26454: Add simple SWIG macro for wrapping talloced types.
      r26570: - Trim size of the swig-generated Python bindings by removing a bunch of {}'s.
      talloc/tdb: Use manually written pc file.
      build: Remove support for DESCRIPTION setting that is now unused.
      Split rules.mk out of Makefile.
      Split actual content out of talloc Makefile into talloc.mk.
      Fix out of tree builds.
      Make sure talloc.so is build before installing.
      Initial work on a test for samba.tests.samdb
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Add simple test for ETT_FIELD.
      Ignore pidl Makefile, which is autogenerated.
      Never build .so versions of tdb/talloc from Samba 4 itself. Rather,
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Allow tdb.mk and talloc.mk to be included at the same time.
      Put soversions and versions for libraries with a hard-coded version in the
      Use more variables in generated data.mk.
      Fix corner case.
      Fix talloc .so installation.
      Remove some make variables that aren't necessary.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Remove type before variables in data.mk
      Don't create symlinks pointing at themselves.
      Split provision from C code out of becomedc.
      Avoid using private libnet test structure inside util_provision.
      Move Python dependencies.
      Finish migration of provision code.
      Add test for provision_bare() code.
      Add ability to not specify certain provision options(), fix some other options.
      Use struct for provision parameters since there are so many of them.
      Mark the provision_bare() test as known failing for now.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Reconcile header files for torture utility functions.
      Unconditionally run the python tests.
      Formatting fixes.
      Add static header for gencache.
      Allow LDB to be a static library again.
      Add static header for gencache.
      Revert "Allow LDB to be a static library again."
      Rely on GNU make to build static libraries.
      use gmake to handle .py file copies.
      Simplify handling of plugin installation.
      Merge branch 'v4-0-trivial' into v4-0-gmake3
      Remove unused code.
      Merge branch 'v4-0-trivial' into v4-0-gmake3
      Create SBIN_PROGS and BIN_PROGS lists from within make.
      Generate manpage list with make.
      Use make to generate lists of libraries.
      Use make to generate list of prototype headers.
      Use make to create lists of pc files and prototype headers.
      Use make to create lists of plugins, remove duplicate variable.
      Remove unused ALL_OBJS variable.
      Use make to generate list of python files, remove unused variable.
      Use make list concatenation support to create list of object files for subsystems/libraries.
      Remove some unused code.
      Avoid creating a whole bunch of files in bin/modules.
      Remove some unused code.
      Move responsibilities of build.h to makefile.
      Move logic to makefile
      Properly escape quotes in init functions.
      Merge unused function.
      Simpler handling of sonameflag.
      Reintroduce mergedobj support.
      Use standard variable for partial linking.
      Some more mergedobj fixes.
      Prevent adding libreplace when not necessary.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Switch back to using static libraries for subsystems for now, since partial linking is still giving some problems.
      Merge branch 'v4-0-trivial' into v4-0-gmake3
      Eliminate duplicate variable.
      Merge functions.
      Fix installation of gencache.
      Reenable partial linking
      Provide variable with current directory.
      Add elements in the build system implicitly if they're unknown
      Merge branch 'v4-0-trivial' into v4-0-gmake3
      Avoid redetermining paths; use already stored values.
      Fix build with partial linking.
      Simplify some more smb_build code.
      Remove mergedobj files during clean.
      Factor out common code that generates object lists.
      Fix unresolved symbols.
      Simplify handling of ALL_OBJS.
      Build complete static libraries.
      Get rid of 'INTEGRATED' build of modules - now replaced by 'MERGED_OBJ'
      Be a little bit less strict about recursive dependencies.
      Use implicit build system element creation for external libraries.
      Rename include to mkinclude to emphasize it is different from make's include.
      Fix summary.
      Use consistent hierarchical naming for tests used in selftest.
      When not using --immediate, use a one-line progress indicator in selftest.
      Merge branch 'v4-0-trivial' into v4-0-gmake3
      Remove duplicate code.
      Fix dependency on popt.
      Fix local tests.
      Add test for INCLUDE command.
      Add framework for Kvm test.
      Add Kvm start code.
      Fix CFLAGS (caused problems on hosts without libgssapi installed on the system).
      Merge branch 'v4-0-trivial' into v4-0-kvmtest
      kvm fixes.
      Fix quicktest.
      Remove uses of global_loadparm.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Avoid use of global_loadparm.
      samba3rpc: Remove use of global_loadparm.
      No longer ignore torture/util.h; it's static now.
      Fix accidently introduced bug - thanks metze.
      Merge branch 'v4-0-trivial' into v4-0-kvmtest
      Start and kill kvm instance properly.
      Start dhcp server for kvm machine.
      Allow connecting to screen.
      Allow loading kvm snapshots.
      Add kvm name.
      Only set "interfaces = " line for client when necessary.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Initial work on vde support.
      r26467: Use getifaddrs() for interface enumeration and provide replacements for platforms that don't have it in lib/replace.
      r26468: Match getifaddrs more closely, add trivial test.
      r26469: Fix paths, only include IPv4 addresses for now.
      r26470: Update README.
      r26487: Cope with systems that don't have struct sockaddr.sa_len.
      r26491: Fix syntax.
      r26492: Some hosts have a define called ifa_dstaddr.
      r26495: Add defines for getifaddrs/freeifaddrs.
      r26497: Fix return type for freeifaddrs().
      r26507: Fix function signature for freeifaddrs.
      Add VDE switch management functions.
      r26554: Fix test for getifaddr on FreeBSD. Patch by Timur Bakeyev.
      Add configure test for vdeplug library.
      Factor out IP marshalling into separate function.
      Allow ldb backends without init function, use init function-less ldb modules.
      Use struct-based rather than function-based initialization for ldb modules everywhere.
      Use function-based initialization for ildap backend.
      Remove more function-based inits.
      Require at least talloc 1.2.0.
      Fix static module list generation for ldb.
      Fix use of some modules (needed _PUBLIC_).
      Fix nbt tests.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-nodeclare
      Avoid python2.2-specific types.
      Allow building ldb as static library again \o/
      Make all auth module init functions public, since they are compiled with -fvisibility=hidden. Not doing this causes failures on Mac OS X.
      Make more module init functions public, since they are compiled with -fvisibility=hidden. Not doing this causes failures on Mac OS X.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Support dlopen(NULL, ...) on HPUX.
      Support dlopen(NULL, ...) on HPUX.
      Never assume -fvisibility=hidden for modules unless explicitly specified (consistent with what we do for other subsystems/libraries).
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Remove kinit with pkinit failure from known failures list again.
      Make setup/provision the name of the python provision script now that that is the default.
      Avoid use of global_loadparm.
      Remove more uses of global_loadparm.
      Remove more uses of global_loadparm.
      Remove more uses of global_loadparm.
      Remove more uses of global_loadparm.
      Remove more uses of global_loadparm.
      Remove extra whitespace, use public variable in IDL.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Clarify comments.
      Remove more global_loadparm uses.
      More share_init to more apprioriate place.
      torture/t_strcmp.c: Remove obsolete file - proper testing is now done in the libutil testsuite.
      Cache iconv_convenience.
      Remove yet more uses of global_loadparm.
      Remove more global_loadparm instance.s
      Remove yet more global_loadparm instances.
      Fix the build.
      Introduce mprLpCtx() similar to mprMemCtx() for loadparm_context used by
      Remove another global_loadparm instance.
      Remove uses of global_loadparm.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3
      Integrate asn1 compilation into asn1 compiler.
      Fix the build.
      Use addprefix where possible rather than perl expansion of files.
      Remove the now unused cflags script.
      Remove unused include.
      Use realpath for now to work around .. tricks.
      Use $@ where possible.
      Allow absolute paths to be specified to mkproto.pl.
      Fix standalone ldb build modules.
      Move automatic dependencies code out of perl code.
      Use more GNU-make specific variables.
      Remove more unnecessary generated code.
      Include CFLAGS overrides in make file.
      Remove workaround for some non-GNU makes.
      Move configure output details out of perl code.
      Merge env.pm into makefile.pm.
      Remove obsolete comment.
      Update smb_build README.
      Fix use of realpath, fix init functions for ldb.
      Use make's $(call) feature.
      Use more make constructions for shared library bits.
      Remove binaries:: in favor of SBIN_PROGS, BIN_PROGS.
      Remove public prototype headers. Generating both public and private prototype headers is tricky with gmake and it's easy to break backwards compatibility for the public API with them.
      Remove legacy code for public prototype headers.
      Fix the build.
      Fix the build (again).
      Move more code out of perl.
      Use make to generate fragments rather than the perl code.
      Revert cflags hack.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3
      Rely on GNU make to build static libraries.
      Move common rules code to separate directory.
      Fix include.
      Move manpage management out of the perl build system.
      Fix manpage paths.
      use make macro for python.
      Support building .so versions of the modules.
      Fix pydoctor.
      Ignore autogenerated file.
      Move public header accumulation out of the perl code.
      Fix module aliases.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake-simple
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivial
      Set lp_ctx properly.
      Set lp_ctx properly.
      Clarify comments.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Remove more global_loadparm uses.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      More share_init to more apprioriate place.
      torture/t_strcmp.c: Remove obsolete file - proper testing is now done in the libutil testsuite.
      Cache iconv_convenience.
      Merge branch 'v4-0-trivial' into v4-0-test
      Remove sDefault as static variable.
      Remove use of global_loadparm.
      Remove use of global_loadparm.
      Convert to new torture API.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      raw-qfsinfo: Convert to new torture API.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Fix typo.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Fix ldapi support.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3
      use gmake to handle .py file copies.
      Create SBIN_PROGS and BIN_PROGS lists from within make.
      Use make to generate list of prototype headers.
      Use make to generate lists of libraries.
      Use make to generate lists of libraries.
      Use make to create lists of pc files and prototype headers.
      Generate manpage list with make.
      Use make to create lists of plugins, remove duplicate variable.
      Use make to generate list of python files, remove unused variable.
      Remove unused include.
      Avoid use of removed variable.
      Move configure output details out of perl code.
      Merge env.pm into makefile.pm.
      Update smb_build README.
      Remove workaround for some non-GNU makes.
      Remove obsolete comment.
      Use more GNU-make specific variables.
      Move logic to makefile
      Move manpage management out of the perl build system.
      Fix manpage paths.
      Move public header accumulation out of the perl code.
      Fix typos, avoid DEPEND_LIST from growing with empty elements.
      Change remaining prototype headers to be private.
      Remove cruft that dealt with public prototype headers.
      Include CFLAGS overrides in make file.
      Remove the now unused cflags script.
      Fix dynconfig compilation.
      Merge branch 'v4-0-test' into v4-0-gmake3
      Remove duplicate functions.
      Remove useless include, simplify generated CFLAGS lines in Makefile.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Ignore autogenerated file.
      Use special make variables.
      Allow absolute paths to be specified to mkproto.pl.
      Move automatic dependencies code out of perl code.
      Simpler handling of sonameflag.
      Fix variable name.
      Remove duplicate message.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Fix error handling in ldb.add().
      Remove unused variable, fix (80, 'Other error') exceptions from ldb python bindings
      Merge branch 'v4-0-test' into id10ts-registry
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3
      Fix syntax.
      Move object file lists to the Makefile.
      Fix some syntax errors.
      Fix typo.
      Remove useless ifs.
      Fix includes.
      Fix some paths.
      Deal with subsystems with no settings, several other minor fixes.
      Fix syntax.
      Fix syntax.
      Fix the build.
      Remove extra empty lines in data.mk.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3
      Fix formatting.
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3
      Remove unused code, simplify alias handling.
      Rerun SWIG.
      Merge branch 'v4-0-test' into v4-0-gmake3
      Fix the build.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3
      Use GNU make.
      Use make macro for module installation.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3
      Push SOVERSION and VERSION out of perl code.
      Fix the build.
      Fix dependencies.
      Allow parentheses in commands.
      Remove dependency on config.
      Remove correct libraries.
      Move more code out of perl build system.
      Remove unused variables.
      Fix the build, symlinks.
      Remove extra line for partial linkage objects, simplify binary handling.
      Move PC_FILE out of the perl code.
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      No longer accept VERSION and SO_VERSION in perl code.
      Merge branch 'v4-0-local' of git://git.id10ts.net/samba into v4-0-test
      Remove define that appears to cause configure test breakage on Julien's machine.
      Merge v4.0-test
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3
      Merge branch 'v4-0-local' of git://git.id10ts.net/samba into v4-0-gmake3
      Move ini-like file parser to the utility library.
      Add README file explaining param/.
      Rename libsamba-config to libsamba-hostconfig.
      Add userdata argument to reseed callback function.
      Add context pointer to secrets functions.
      Fix dependency on samba-hostconfig.
      Install pidl to the same directory as Samba.
      Install samba-hostconfig library.
      Include right perl directory when installed.
      Add warning to public headers.
      Don't write public functions to protoheaders.
      Install public header files again and include required prototypes.
      Reduce the number of installed headers.
      Merge patchfile.h into registry.h
      Merge hive.h into registry.h
      Trim down installed headers some more.
      Move handle utility functions to public header, remove more public headers.
      Remove no longer installed files.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into openchange
      Reintroduce header previously autogenerated but ignored by git.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into tmp
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into openchange
      Re-add params file to git.
      Fix installation of dcerpc_atsvc and registry as required by samba-gtk.
      Install libevents since it's required by samba-gtk.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into openchange
      Install pidl by default if ExtUtils::MakeMaker is available. This should make the build process for openchange users easier.
      Don't install talloc manpage from samba, it's already installed from the standalone talloc build.
      Avoid installing unused header file.
      Don't install libevents for now, just its headers. It is already part of other libs, and only used as part of those libs.
      Improve PEP8 (Python code style) compliancy a bit.
      Simplify some code, fix style.
      More PEP8 compliancy.
      Fix authservice count.
      Add test for authservice struct.
      Add simple docstring for Python modules.
      Set docstrings from helpstring attribute where possible.
      Set tp_flags for Python types.
      Register types rather than constructors, display structs as classes.
      Add function signature to docstrings in python.
      use builtin getset stuff rather than custom getattr/setattr implementation.
      Add signature of connect function to docstrings.
      Add Python bindings for DFS.
      Support [todo] attribute on functions.
      Raise NotImplementedError from functions that don't have complete IDL.
      Add [todo] for functions that are obviously incomplete.
      Add python bindings for unixinfo.
      Add python bindings for drsuapi.
      Add trivial test for unixinfo interface.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3
      Add manually written Python binding for libnet_Join.
      Set VENDORPREFIX rather than PREFIX to try to fix installation on some
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into pidldocs
      Array lengths can be obtained from Python objects so remove them from the Python API.
      Fix bug handling size arguments in a direction without actual data.
      Remove length arguments, add tests for unixinfo.GidToSid and unixinfo.UidToSid.
      Clearer names for singleton return types.
      Move provision C bindings to param/.
      Add docstring, PEP8.
      Merge branch 'openchange' into cprovision
      Fix so version of hostconfig library.
      No longer install unused smbscript binary.
      Add infrastructure for returning ProvisionResult in C provision code.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into cprovision
      Fix extra argument to provision_bare().
      Return SAM ldb context and loadparm context as part of C provision
      Attempt to fix get_value() test on sparc machines.
      Use new torture_assert_mem_equal.
      Use torture_assert_mem_equal() in a couple more places.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into cprovision
      Remove prototypes from build.h in preparation of removing build.h
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake4
      Move standard make compilation rules to build/make.
      Move object files lists to makefile rather than smb_build.
      Use _OBJ_FILES variables in a couple more places.
      Fix order of variables in the makefile.
      Add convenience TestCase class for testing RPC interfaces.
      Also look in the environment for smb.conf path.
      Allow command line options in the subunitrun script.
      Make sure credentials are specified when running the Python winreg RPC tests.
      Explicitly specify the paths when installing pidl.
      Fix unresolved symbols.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake4
      Fix the build.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into fixbuild
      Explicitly specify the paths when installing pidl.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake4
      Use RpcInterfaceTestCase everywhere.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake4
      Fix the build.
      Make sure init function sentinels are set for modules.
      Move SOVERSION, VERSION and PC_FILE out of smb_build but use make variables directly instead.
      Fix ALL_OBJS value.
      Work around 'test' quirks - use make's string comparison instead.
      Attempt to fix the pidl installation on fedora.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into HEAD
      Fix warnings.
      Saner names for Python objects.
      Fix pointers when pushing strings to python during pidl generation.
      Fix size to memcpy call in generated Samba 3 client code.
      Regenerate DCE/RPC client code after fixing memcpy() length bug in pidl.
      Split binding structure handling out into a separate file.
      Reconcile ndr_syntax_id used by pidl-generated code and Samba3's RFC_IFACE.
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into 3-2-nopipeindex
      Fix formatting, remove unused function.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into registry
      Fix const.
      Add some documentation on test behaviour in selftest.
      Add some documentation about the expected testsuite output.
      Deal with commands not even starting.
      Support knownfail Subunit command.
      Properly warn about exit codes that indicate success while tests claim
      Provide the right error count to formatters.
      Fix executable bit on blackbox ndrdump tests.
      Merge branch 'wbinfo-test' of git://git.samba.org/kai/samba/kai-work-in-progress into v4-0-selftest
      Mention the actual exit code when a suite failed.
      Fix -r test, knownfailure return code.
      Remove unused arguments from reg_open_local().
      make sure header can be included more than once.
      Use library for subunit test functions.
      Remove policy library - it's now in a separate git repository.
      Use the subunit shell library.
      Provide stubs when the [todo] attribute is set.
      Fix todo element on actually implemented function.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Avoid event_find_context() when the event context is already available
      Use readily available event context.
      Avoid event_find_context when a event context is already available.
      Remove event context tracking from the credentials struct.
      Require passing in an event context to endpoint mapper utility function.
      Use provided event context rather than looking for it.
      Explicitly require event context to be specified.
      Require explicit event context rather than looking if it is not specified.
      Fix the build.
      Avoid using event_context_find where possible.
      Add convenience function for getting at event context from ejs code.
      Avoid recursive make for code coverage.
      Add simple implementation of several functions in the Samba 4 RPC
      Actually connect to RPC.
      fix return code.
      Specify event_context to ldb_wrap_connect explicitly.
      Fix the build.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Remove copying of interface syntax id.
      Add some comments.
      rpc_parse: Use UUIDs from librpc/gen_ndr/ when possible to reduce
      Load default smb.conf file if none was specified explicitly.
      Add port number for ncacn_http epmapper.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Fix event context initialization for Python bindings.
      Add all the source files from the old CVS tree,
      - Better names for some files
      Remove ignore files
      Fix docs build (remaining commits from SambaXP)
      Remove autogenerated file
      Fix developer documentation build
      Add script for extracting additional files
      Remove anoncvs instructions and replace them with svnanon instructions.
      - "total print jobs" doesn't exist ("max print jobs" was meant)
      No longer use cvs2cl (we're not using CVS anymore so it broke the build)
      Make the docs system somewhat more user-friendly:
      cvs2cl is no longer a dependency
      Put multi-file versions of HOWTO, Guide and Devel-Guide into seperate directories
      Docs successfully build into seperate directories now. Last thing to fix is the paths to the images
      Fix path to images. CSS path doesn't work yet - I'll have a look at that tomorrow
      Fix build of release target
      Fix CSS
      Typo fix (bug 1084)
      The 'index' manpage is samba(7), not Samba(7). Fixes bug #1142
      Smbd can take a list of port numbers to listen on, instead of just one (bug #1145)
      Fix a couple of typos
      Fix add group script (don't break when users with specified groupname are
      Fix incorrect description of recycle:noversions. (bug #1148)
      Add note about 'unix charset' begin used when running scripts
      Add documentation for smbgetrc
      Fix output in testparm as well
      Fixes in manpage generating
      Use html2text for generating text output instead of xmlto, which uses a combination of xsltproc and lynx
      Allow specifying a directory with the samba sources
      Add script that detects missing manpages
      - Support validating against the DocBook DTD
      Clean up XSL
      Fix short description
      Quick start
      Generate summary of manpages
      Add index page for HTML documentation.
      Build html version of manpages, if possible
      Typo
      Fix two more bugfixes (thanks to Herb, Andrew Bartlett and 'Mi')
      Add KDE link file (from Lars Mueller)
      Typo...
      Remove redundant attributes
      Use xi:include instead of entities
      Replace entities with xi:include
      Add Jerry's list of relevant TDB files to smbd manpage
      Solaris patch 113476 has been replaced by 112960-14 (bug #1453)
      Rename docbook.txt to README to give it some more attention.
      Winbind is installed in sbin/winbindd, not bin/winbindd... (bug #1101)
      Generate thumbnails in PDF
      Nicer latex output format
      Add missing images, fix syntax error
      - Add notes about using catalogs (speeds up the docs build!)
      Couple of small updates for CHM build
      Add initial version of Pearson stylesheet
      Remove info about GUI for SAM for now (it's been vaporware for some time now)
      Makefile dependency updates
      LDAP support is not really experimental...
      Minor fixes:
      Support running from a different directory
      New structure for the docs:
      XSL script for converting DocBook XML to Yodl, almost done :-)
      All yodl macros are used now :-) Not all
      Fix smb.conf.5 build
      Fix Makefile (docs should build succesfully again now)
      Fix typo
      Manpage fixes from Bjoern JACKE <bj at SerNet.DE>
      Typo fixes...
      The default "ldap filter" is (uid=%u), not (&(uid=%u)(objectclass=sambaAccount))
      Fix image support. If images are missing, this will now also cause the
      Fix "explanation of each parameter"
      Add link to appropriate chapter.
      Updated entry of samba-vscan
      Fix incorrect transformation for prefaces
      Use gpl.xml instead of gpl.tex
      Better example
      typo
      Couple of large changes to the pearson code, portions by
      Stylescript fixes
      Couple of typo fixes
      source + destination -> target + linkname for 'link' and 'symlink' commands
      Default is yes now
      Fix generation of subject index.
      - Remove unused entities
      Use dia to generate png images out of dia files
      Complain when when dia version is < 0.93 and $DISPLAY is not set
      Better conformance to DocBook standards
      - Respect the scale= attribute.
      use $DIA instead of 'dia'
      Add hitlist
      Use different file in AC_INIT() because the entities
      Default of "winbind enable local accounts" has changed. Diff by Bjoern Jacke <bj at SerNet.DE>
      Typo fix (should fix the build)
      Document "defer sharing violations".
      Document "use kerberos keytab".
      smbspool supports specifying a port number in the device URI
      Add description (to make build system happy)
      Start working on samba-specific conversion script to pearson XML
      Typo fixes
      Document iocharset= (patch by Bjoern Jacke)
      Document charset handling fixes to SWAT (patch by Bjoern Jacke)
      Finish docbook to pearson conversion scripts. I still need to look at
      Fix indentation in Pearson XML output
      Latest patch for TCP/IP in WFW 3.11 is 3.11b, not 3.11a
      Default to 100% sized images for HTML
      Fix two typos
      Add placeholder manpage for pam_winbind
      Use \ rather then + as the example winbind separator as + causes problems on systems with NIS (#1092)
      Add note about portability of adduser
      - Fix manpage index file (#2109)
      Note that when two entries with the same name exist, only the first one is deleted by "net groupmap delete".
      Fix typo
      Fix typo
      Add support for HTML version of smb.conf in chunks
      Fix typo
      Add note about pgsql backend
      Add note about WERR_BAD_PASSWORD when 'security = share'
      Fix description of when DEVICE_URI and when argv[0] is used. Thanks to
      Fix example value (caught by Bjoern Jacke)
      Don't generate the Makefile, but rather include an autogenerated settings file
      Missed one substitution variable
      Add -P to synopsis
      Allow building text versions of the docs splitted by chapter
      Add support for building PDF's thru FO rather then docbook2latex. Output
      Couple of minor fixes
      Fix some warnings
      Add patch for db2latex that fixes problems with newer versions of xsltproc
      In previous Samba versions, no charset conversion was done for filenames by default. Fixes #130
      - Be a bit more verbose.
      Add texi support
      Use the Samba DTD rather then the original DocBook one. This step will
      Use the Samba Variant of the DocBook DTD rather then
      Use new definition of <smbconfoption>, fixes a bunch of
      Update DTD location
      Fix validation for the developers guide.
      Some more validation updates.
      Another set of validation updates
      More validation fixes; building FO-PDF versions of the HOWTO and
      Validation updates to Samba3 By Example
      Fix links for smbconfoptions.
      Mark some targets phony
      Update list of (possible) dependencies
      Add xslt script that can generate dependency makefiles
      Use document names rather then file locations in the makefile.
      Autogenerate parts of the makefile rather then calling seperate shell scripts.
      Update DTD location. Fixes smb.conf.5 build.
      Fix missing </listitem>
      Remove pretty formatting script (it is not used at all)
      Respect paper size specification for FO generation
      Fix smbconfsection output
      Force update of XML files if one of its include files changes
      Fixes for DTD URL redirection
      Add structure diagram
      Rename manpages to manpages-3 so I can pull in the Samba 4 manpages later
      Add optional manpages to the Samba HOWTO Collection
      Put manual pages just before the GPL in the Appendices part
      Move existing samba4 documentation to Samba-docs trunk
      Add a couple of missing files
      Allow HTML build of Samba 4 manpages
      Remove unnecesarily complicated call to the shell
      Ignore some more autogenerated files
      Fix link texts for PDF and PS output
      Fix manpage
      Move a few manpages to the source repository
      Remove Samba4 manpages (they're now in the source repository)
      Large number of small fixes to the layout and the build system.
      More updates
      Split up main stylesheet (necessary for new examples code)
      Get rid of unused elements, simply image handling
      Remove obsolete elements.
      Remove references to Samba4 manpages
      Another set of updates; includes the new examples code and use of
      - Fix a couple of LaTeX escaping bugs.
      More updates. Fix formatting for examples, support long lines in examples.
      Fixes letterpages + smbconfexample
      Paper size fixes.
      7% gray
      Fix support for ph-style pages - use ./configure --enable-prentice-hall to enable.
      Put Johns' changes back in again.
      Add crop marks.
      Cleanups + use cross for crop marks
      Fix image quality
      Fix image scaling issues.
      Add hack for ignoring link/text() for LaTeX output.
      Fix html build.
      Add basic manpage support back in.
      Get rid of crop marks.
      Add openright
      Some random updates.
      Don't show obvious sections from manpages.
      Bunch of smaller fixes.
      Fix line issues.
      Fix double entry of index in ToC
      Fix smb.conf.5 output
      Fix italics issues in Subject Index
      Fix spacing issues.
      Add simple test document used for testing the docs build system
      More verbose error message + ignore generated pdf files for images
      Remove legacy file
      Move to right manpage section (reported by Noèl Köthe)
      Move pam_winbind manpage to correct section
      Remove reference to XML passdb.
      Fix some syntax errors
      Fix formatting a bit + small typo
      Document [:port] syntax for "cups server"
      Fix use with newer versions of xsltproc.
      Use default autoconf extension, add some ignore files.
      Update ignores for Bazaar.
      Distinguish between private and public dependencies in the dot file.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3
      Move subunit infrastructure code into lib/torture.
      Fix header locations.
      Split up lcov target.
      Install session.h, required by OpenChange's proxy.
      Fix link flags for ldb and tdb Python modules.
      Fix typo.
      Fix typo.
      Fix installation of pidl perl files, torture pc file.
      Fix location of torture pc file.
      Fix case.
      Merge branch 'v4-0-test' into v4-0-gmake3
      Fix building with system-provided LDB.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3
      Clean up some git merges gone wrong.
      Revert "Fix building with system-provided LDB."
      Fix building with system-provided LDB without breaking anything else :-)
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3
      Remove copy of torture file.
      Fix soversion for libtorture and libsamba-hostconfig.
      Install standalone python modules (so we can use stock python rather than smbpython).
      Revert "Remove copy of torture file."
      Fix torture module initializion.
      Fix LDB module initialization when using external ldb.
      Merge ldb_map into LIBLDB.
      Properly escape quotes.
      Use consistent function names with the standard Python uuid module that is available in >= 2.4.
      Fix dependency on loadparm.
      Complete dependencies for python modules (actually matters when built standalone).
      make sure to always use string version of uuid rather than object.
      Avoid installing non-public header.
      Remove extra space that caused issues during make install.
      Fix formatting of install message.
      Use system python rather than smbpython.
      Set sys.path for running inside source tree.
      Remove smbpython.
      Avoid unnecessary headers in lib/torture.
      Properly support sentinels for binary init functions. This should fix the build.
      Remove python extension from upgrade script.
      Remove obsolete provisioning library.
      Add extra include directories, hopefully fixes the build on aix53bf.
      Fail earlier on if shared libs can't be built.
      Merge branch 'nosmbpython' into v4-0-test
      Fix typo.
      Install python modules by default.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Move writing autoconf vars into files into m4 macros.
      Move writing of data.mk file to m4 macro.
      Allow specifying different input file to smb_build.
      Fix --output argument.
      Simplify argument handling.
      Avoid use of relative paths.
      Move templates to a separate file.
      Merge branch 'v4-0-test' of /home/jelmer/samba4 into v4-0-test
      Use variables for source path in libnet/ and scripting/python.
      Merge branch 'v4-0-test' of /home/jelmer/samba4 into v4-0-test
      Use src dir.
      Merge branch 'v4-0-test' of /home/jelmer/samba4 into v4-0-test
      Build system doesn't do make variable expansion...
      Merge branch 'v4-0-test' of /home/jelmer/samba4 into v4-0-test
      Use variable for param src dir.
      Merge branch 'v4-0-test' of /home/jelmer/samba4 into v4-0-test
      Use variables for source directory in a couple more places.
      Use variables for source directory in a couple more places.
      Use variables for source directory in a couple more places.
      Use variables for source directory in a couple more places.
      Use variables for source directory in remaining subsystems.
      Merge branch 'v4-0-test' of /home/jelmer/samba4 into v4-0-test
      Avoid smb_build for prototype headers in some places.
      Typo, formatting fixes.
      Merge branch 'v4-0-test' of /home/jelmer/samba34.git/samba4 into v4-0-test
      Create prototype headers from Makefile directory, without smb_build in the middle.
      Fix a couple (well, little more than that..) of typos.
      Fix a bunch of dependencies.
      Move IDL build script to rpc directory, make various bits and pieces easier to use externally.
      Revert some absolute paths.
      Add __repr__ implementations for ldb.Message, ldb.MessageElement and ldb.Dn.
      Add __repr__ implementation for Ldb.
      Fix dependency.
      Add __repr__ implementation for Tdb.
      Fix proto generation.
      Update tdb version number.
      Allow dots in .mk file section headers, fix docstring.
      Fix installed symlinks (cp was trying to be smart).
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into nosmbpython
      Fix dependencies for ldb instancetype module.
      Use gnu make syntax for SWIG implicit rule since it allows multiple output files.
      Regenerate with newer version of swig.
      Fix reference to removed smbpython.
      Fix typo.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into nosmbpython
      Make the make output a bit less chatty.
      Add test target in Makefile.
      Add double-colon where it makes sense.
      Use double colon targets.
      Merge branch 'v3-3-test' of ssh://git.samba.org/data/git/samba into docbook
      Ignore generated netlogon headers.
      Refuse to install autogenerated proto header files.
      Remove support for .py files from smb_build - deal with it only in the makefiles.
      Move CFLAGS overrides for SWIG modules to Makefile.
      Move some python files into the samba package.
      Move more modules inside of the samba package.
      Fix dependencies and imports.
      Fix events test.
      use one blackbox script per executable.
      Fix python imports.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Make sure the default ldb modules dir gets initialized.
      Fix CFLAGS for SWIG files.
      Move DCE/RPC python bindings into samba package.
      Fix import in provision test.
      Add some notes about further enhancements of the Python pidl backend.
      Add some docstrings to credentials python module.
      Add some docstrings to ldb python module, fix MessageElement name.
      Add more docstrings in the ldb python module.
      Add module docstring, docstrings for constructors.
      Add some docstrings to tdb.
      Add docstrings in misc python module.
      Use restructuredText formatting for docstrings.
      Add docstring for samba.net.Join
      Add docstrings to param python module.
      add more docstrings to registry python module
      Add docstrings to events python module.
      Add docstrings to samba3 and getopt modules.
      dcerpc is now samba.dcerpc, avoid including source code in API documentation.
      Properly fix symlink for module aliases.
      Fix imports for minschema.
      Fix bug after reprocessing swig files with newer version of SWIG.
      Regenerate with SWIG 1.3.35.
      Remove unused EJS testprogs.
      Work around bug adding extra imports in generated file.
      Add proper implementation of MessageElement.__cmp__.
      Disable building of EJS DCE/RPC support.
      Convert samr test to python.
      Remove unused echo ejs script.
      Remove unused ejs library functions.
      Add another test toe the python samr testsuite.
      Fix indentation.
      Fix imports for provision-backend.
      Self PYTHONPATH from selftest.
      Fix syntax for return type in DCE/RPC interface python bindings.
      UFollow conventions for __repr__ contents for talloc python wrapper.
      Create new context in pytalloc to avoid problems with talloc_free() freeing the wrong parent of a pointer.
      Fix bugs in samr python tests.
      selftest: Use convenience function for prepending paths to environment variables.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into docstrings2
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into registry
      Report full 'path' of unexpected test results for easier inclusion in knownfailure file.
      Cope with new event context parameter in API and removed parameters to reg_open_local().
      Include test case name when reporting with subunit. This should make it possible to having a test fail against some test cases and success against other ones.
      getting/setting security options works for the regf backend now
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-wsgi
      Some more PEP improvements.
      Fix indentation, add docstring in provisioning script.
      More work allowing out-of-tree builds. Patch by Matthias Dieter Wallnöfer and me.
      Include full path for python scripting dir to allow out-of-tree builds.
      Add docstrings to a couple more python modules.
      Initial work on IRPC Python support.
      Remove remaining EJS RPC code, was unused.
      Initialize module.
      Add __ndr_pack__ method to all DCE/RPC structures.
      Support __ndr_unpack__ on DCE/RPC structures in Python.
      Add convenience functions for packing/unpacking structs in python.
      Only provide __ndr_pack__ / __ndr_unpack__ if the push/pull functions are public.
      Add tests for new NDR pack/unpack functionality in Python DCE/RPC bindings.
      Share struct used for interfaces in Python code.
      Use manually written Python bindings for DCE/RPC rather than SWIG based.
      Allow request() call to do custom calls on DCE/RPC interfaces.
      Export functions for setting NTSTATUS and WERRORs in python.
      Add convenience functions for setting Python objects from errors.
      Allow connecting to a DCE/RPC interface with Python for which we don't have IDL.
      Support optional object argument when sending DCE/RPC requests.
      Fix memory initialization in raw calls.
      Add convenience function for creating objects with NDR error codes.
      Add helper function to return DCE/RPC fault codes.
      Check for fault codes when connecting.
      Add initial work for script that uses probing to figure out IDL.
      Add support for secondary contexts from Python.
      Expose request timeout variable in Python.
      Expose transfer and abstract syntax.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-pyirpc
      Fix missing colon.
      Start building IRPC Python support.
      Add tests for irpc python bindings.
      Use separate function for in argument parsing.
      Move result tuple generation out of main Python function running.
      Fix environment generation.
      Trim the size of the Python bindings a bit.
      Fix compilation errors.
      Remove some unused cruft.
      Add bindings for irpc_{add,remove}_name.
      Support messaging_client_init in the python bindings.
      Add bindings for deregister.
      Provide access to server_id from python bindings, add more tests.
      Convert smbstatus to Python.
      Remove unused EJS code.
      Remove unused nss module.
      Remove unused cli ejs module.
      Implement IRPC calls over the internal messaging bus.
      Allow using IRPC functions on the messaging bus from Python.
      Finish smbstatus in Python.
      Cope with no server being active.
      Move some scripts to examples directory since they're not really generically useful.
      Remove obsolete ejs winreg example.
      Fix import.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-pyirpc
      Remove evil hack which breaks Python bindings.
      Remove unused scripts.
      remove unused credentials ejs module.
      Remove unused datablob and nbt ejs bindings.
      Revert "remove unused credentials ejs module."
      Remove unused EJS net bindings.
      Remove unused rand EJS bindings.
      Remove unused param ejs bindings.
      Remove unused libjs functions.
      Remove unused literal EJS bindings.
      Move version.o and dynconfig.o into their own directory.
      Use variable for ldb source directory.
      Use variable for source directories.
      Use new dynconfig.h location.
      Use variable for socket wrapper include path.
      Disable CFLAGS hack when include path starts with variable.
      Use variable for heimdal source dir in static deps file.
      Use heimdalsrcdir variable for automatic dependencies.
      Use variables for more object file paths.
      use varibale for asn1 compiler.
      Move asn1 cflags definition to gmake.
      Use variables for et files too.
      Move CFLAGS that are not inherited out of smb_build.
      Move source dir variables to Makefile.
      Move more CFLAGS to Makefile.
      Don't throw away cflags if they start with a variable.
      Use variables in generated make fragments.
      Simplify handling of source directory in asn compile wrapper.
      Simplify handling of source directory in et compile wrapper.
      Use variable for ndr_netlogon.o path.
      Use variable path for heimdal glue code.
      Use variables for IDL file paths.
      Depend on latexfigures files directly as using a rule in between causes problems.
      Allow external use of regf idl.
      Add variable for smbreadline directory.
      Allow librpcsrcdir to be an absolute path.
      Depend on debug names of shared libs for linking.
      Use variables for directories in static_deps.mk
      Use variables for directories in dsdb ldb modules.
      Use variables for directories in ntvfs smb2 module.
      Fix dependency on swig ldb module.
      Fix extra dash in command line flag.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-defs
      Check test directory is cleaned up by Python tests.
      Update after changes to the provision API, make sure temp dir gets cleaned
      Fix samdb test and enable it.
      Allow full-line comments in include/exclude files.
      Add samba4-slow file listing tests that succeed but are just slow.
      Move CFLAGS handling out of smb_build.
      Make sure reason for skipping is output.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-defs
      Add header to knownfail file.
      Fix samdb python test.
      Add convenience function for creating nbt sockets in torture.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
      Add more docstrings in tdb.
      r21729: Some more tests
      Factor out IP marshalling into separate function.
      Fix variables used in configure.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-fixmodulesdir
      Add working Python bindings for NBT.
      Remove unused import, function.
      Clarify error when SWIG can't be found - it's not required unless you
      Add another reason for skipping a testsuite, remove obsolete comment.
      Use variables for source dir of python tdb bindings.
      Use variables for source dir of python ldb bindings.
      Fix prototype for pthread process model.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-fixmodulesdir
      Use proper python errors.
      Avoid using .DEFAULT_GOAL - it's only available in gmake 3.81 and higher.
      Fix ldb python bindings after events changes.
      Fix standalone ldb build.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-fixmodulesdir
      Add include in swig file as well.
      Remove support for deprecated JS provisioning.
      Change order of includes in swig file to avoid warnings.
      Avoid including events_util.h in events_internal.h since the latter is
      Make sure events pc file gets installed.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-fixmodulesdir
      Use friendly NTSTATUS message in python code when possible.
      Revert "Remove the dependency on $(abspath) in makefiles"
      Use workaround for $(abspath)
      Undefine HAVE_KRB5_ENCRYPT_BLOCK because Heimdal really doesn't have it.
      Use ldbsrcdir rather than ldbdir.
      Use variable for popt source dir.
      Use ldbsrcdir rather than ldbdir.
      Fix another reference to ldbdir.
      Use variable for selftest directory.
      Only try to detect the events lib dir if it wasn't set earlier.
      Move blackbox tests closer to what they're testing.
      Use make template for installing binaries.
      Use make magic for installing/uninstalling binaries.
      Non-zero exit code on failure.
      Properly cast array length in print functions.
      Fix location of manpages.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpage
      Be more pythonic.
      Fix some forgotten substitute variables in provision, add check to prevent this sort of regression in the future.
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpage
      Actually fix missing substitution variables.
      Move domain DN determination out of newuser function.
      Use new style python classes.
      Add helper object Hostconfig to make it easier to get to e.g. the
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpage
      Fix embedding of Samba 4.
      Allow overriding shared library policy using environment variable.
      Avoid using version call for version string.
      Regenerate SWIG file.
      Ignore unused pidl-generated files.
      Use different variable names for talloc and tdb object file names than
      Add option for generating coverage data from python tests.
      Remove calls to unused uninstallbin.sh
      Rename object variables to avoid clashes with Samba 4.
      Stop ignoring .svn directories when creating tags, since we no longer use
      Merge branch 'v3-devel' of ssh://git.samba.org/data/git/samba into v3-devel
      Remove unused scripts for installing binaries.
      Only try with -LPYTHONDIR/lib when python-config output didn't work.
      Merge branch 'v4-0-regClient' of git://repo.or.cz/Samba/mdw into manpage
      Reorder defines for version for consistency with Samba 4.
      Revert "Add option for generating coverage data from python tests."
      Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpage
      Fix extra dash in command line flag.
      r25614: Add trivial tdb website.
      Import merged build patch.
      Use new Samba 4 source location.
      Ignore generated build files.
      Add flag for merged build.
      Ignore generated Samba 4 files.
      Fix standalone build.
      Reimport COM and DCOM libraries.
      Reimport DCOM IDL.
      Move WMI IDL into separate IDL file.
      Use standard directory structure for WMI.
      Fix old style syntax in mk files .
      Reimport pidl support for COM.
      Deal with interface in generated python code, clearer error message on unhandled unions.
      Avoid using unions without discriminants.
      Build (D)COM output again.
      Manual prototypes for COM.
      Fix COM headers.
      Fix use of interface instances in pidl.
      Fix compilation issues in the WMI code.
      Remove unused imports.
      Add build system bits for wmi.
      Use other utility typemaps inside wmi python functions.
      Disable WMI for now, as it doesn't build properly yet.
      Point at the wiki for instructions regarding the Debian packages.
      Remove old Debian README.
      Redefine BSTR.
      Redefine BSTR.
      Cope with includes.h splitup in COM code.
      Cope with struct renames in DCE/RPC and NDR libraries.
      Re-Import ODL support.
      Allow base classes to be defined in other files.
      Cope with DCE/RPC -> NDR renames.
      Improve formatting, use printf rather than DEBUG.
      use static header for WMI.
      More improvements.
      Fix imports.
      Add wikipedia link to WMI.
      Avoid writing structs for inherited functions.
      Fix imports in Python.
      Adapt to changes in Samba API's, fix formatting.
      Fix syntax errors.
      Rename Python wmi module to 'wmi' and fix some errors in it.
      Fix more syntax errors, etc.
      No spurious warnings in SWIG file.
      Import SWIG-generated files.
      Improve formatting in pidl code, make sure OBJREF member gets created.
      Get code closer to compiling without errors, fix formatting, add docstrings.
      Fix compilation of Python module.
      More formatting fixes.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into franky
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into wmi
      Revert accidental changes to lib/basic.mk.
      More changes getting WMI code to compile, import manual marshalling.
      Import proper IDL for interface pointers.
      Support restricted.
      Remove more hand-written marshallers.
      Fix more WMI compilation issues.
      Disable WMI for now since it doesn't compile.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into wmi
      Share talloc source code between Samba 3 and Samba 4.
      Use single copy of tdb in both samba3 and samba4.
      Fix last few includes to use new tdb location.
      Make Samba 3 and Samba 4 both use the same single copy of libreplace.
      Use single copy of socket_wrapper in Samba 3 and Samba 4.
      Merge branch 'singletdb' into single
      Merge branch 'singlereplace' into single
      Merge branch 'singlesw' into single
      Fix include.
      Use single cope of nss_wrapper in Samba 3 and Samba 4.
      Merge branch 'singlensswrap' into single
      Use a single copy of popt in samba3 and samba4.
      Merge branch 'singlepopt' into single
      Fix merged build.
      Let winbind depend directly on libnet rather than through the ejs bindings.
      Remove remaining embedded JavaScript support.
      Remove remaining JavaScript code.
      Remove minschema js tests.
      Move ndrdump tests closer to the code they test.
      Move torture/ blackbox tests closer to code they're testing.
      Avoid running target-specific tests during general test run,
      Fix paths to subunit.sh
      Use pidl from Samba 4 from Samba 3 rather than hoping there is one installed on the
      Regenerate C files now that pidl reads imported files - saves a few
      Use single copy of compression library in Samba3,4.
      Merge branch 'singlecompression' into single
      Move common libraries from root to lib/.
      Add simple README file.
      Fix merged build.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into singlelib
      Sync addition of [todo] attribute to Samba 3.
      Sync more interface descriptions between Samba 3 and Samba 4.
      Fix finding of popt sources for systems that don't have popt.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into singlerpc
      Fix warning.
      Fix check.
      Move pidl to top-level directory.
      Fix location of included popt files for systems that don't have popt.
      Fix pidl/config.m4 location.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into singlerpc
      Fix location of nss_wrapper.pl script.
      Fix python path for systems without tdb installed in the system.
      Properly report why a test didn't succeed (required for use with known
      List more delaywrite tests as known failing against Samba 4, per Metze's request.
      Update pdbsql maintainers.
      Import ndr_syntax_id_equal from Samba 3.
      Remove jsdir.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Fix path, typo.
      Move selftest code to top-level.
      keep obsolete file in samba4 source directory.
      Remove obsolete script.
      Add header.
      Remove EJS tests.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into noejs
      Stop writing js include dir in selftest.
      Remove python extension, simplify some code.
      Fix some tests.
      Fix tests, be less verbose.
      Improve formatting.
      Implement __repr__ for Sid.
      Generate with 1.3.36.
      Add test for Sid.__repr__.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into noejs
      Fix objectclass tests.
      Fix COM compilation, add framework for COM python module.
      initialize a COM context.
      Make sure modify operations succeed.
      find_unused_makefilevars: Support parsing simple includes.
      Remove unused scripts.
      Simplify code, remove print statements.
      Fix path to ndrdump in blackbox test, don't start smb server for ndrdump
      Fix formatting.
      Provide tdb.open and ldb.open python functions.
      Fix dependencies for nbt python module.
      Add support for implementing LDB modules in Python.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into noejs
      More code simplifications.
      Don't expose ldb_request in the Python API but rather use regular
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into noejs
      Fix DNs - only one more samba3sam test failing now.
      Fix last samba3sam.py test.
      Remove remaining obsolete EJS tests.
      Stop installing JS libraries.
      No longer set PATH during selftest, was only required for smbscript.
      Rename http to esp, in preparation of adding a python backend.
      Add initial work on WSGI support in the web server.
      Add more parts of the WSGI implementation.
      Add input / error stream objects in WSGI implementation.
      Remove some dependencies of the web server on esp.
      Remove support for ESP in the web server.
      Properly call WSGI request handler when requests come in.
      First GET request works. SWAT now displays a Hello world message.
      Make standard SWAT script print received headers.
      Support POST requests again, provide more variables in environment.
      Allow SWAT to be run outside of smbd.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into wsgi
      Rename smbd -> samba.
      Use absolute paths for wbinfo rather than relying on it being in PATH.
      Revert "Rename smbd -> samba."
      Print status (one character per test) when not running selftest with --immediate.
      Avoid printing characters when in immediate mode.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Fix merged build.
      Rename smbd -> samba.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Use new binary name in merged build.
      Move source4/lib/crypto to lib/crypto.
      Use common MD5.
      Use common md4 implementation.
      Use shared copy of hmac5 implementation.
      Use common arcfour implementation.
      Clean .o files in lib/ and libcli/ too.
      Fix include paths.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into crypto
      Use common crc32 implementation.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into arc4
      Add separate header file for arcfour.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into arc4
      Fix build with arc4.
      Use loadparm since it's required by some modules.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Revert LDB return code patches from Matthias.
      Avoid freeing fsp twice when opening new_file fails. (Debian #431696)
      Consistently use lower case variable names for path variables.
      Remove ldb_module_wait implementation - ldb_module.wait() is gone.
      Fix installation of misc files.
      Re-add uninstallplugins, there has to be at least one instance of this.
      Remove unused uninstallheader script.
      Pass options struct into session initialization functions rather than
      Explicitly pass on session options to session setup function.
      Remove redundant call.
      Remove global_loadparm instance.
      Remove uses of global_loadparm.
      Remove global_loadparm instance.
      Remove global_loadparm instance, discard_const_p.
      Pass session options around; saves another use of global_loadparm.
      Cope with API changes.
      Eliminate another global_loadparm.
      Remove two more uses of global loadparm by remember required
      wmi: Use cli_credentials.
      Fix segfault.
      make sure dcerpc is always initialized.
      Update .gitignore for new pidl location.
      dcesrv: Remove use of global_loadparm.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Enable winreg Python tests - authentication works now.
      Make Sid member variables accessible from Python.
      Compare sids in samba3sam tests.
      Fix FHS flag, rename to --enable-fhs since it's a feature flag
      Move Samba4-specific files into source4/
      Update to refer to 3 and 4, not just Samba 3.
      Fix formatting to be compatible with ReST.
      Fix header.
      Fix some syntax errors for use with ReST.
      Print proper error if include file can't be found.
      Allow 'make testenv-dc', 'make testenv-member', etc.
      Move subunit helper utility to specific subunit directory.
      Import tests for subunit python module.
      Fix syntax errors in minschema.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Move all subunit files to lib directory.
      Fix path apparently gone wrong by cherrypick.
      Fix subunit files location after cherrypicks.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Add manpage for nmblookup, move nmblookup closer to nbt library.
      fix libclinbtsrcdir variable.
      Remove duplicate copy of manual page.
      Fix executability of samba3-srv.
      Use const.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into selftest
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into arc4
      Prevent errors with data_blob() being a macro in s4 and function in s3.
      Make sure to allocate copy for arc4 data, to avoid problems freeing
      Provide the same set of helper functions for DEBUG in Samba 3 and Samba
      Use data_blob() for now, since it seems to be the only function available in both Samba 3 and Samba 4.
      Provide malloc_array() in Samba 4.
      Move lib/util from source4 to top-level libutil.
      Fix include paths to new location of libutil.
      Fix libutil path.
      Clean up properly.
      Fix include, clean up .o files in ../lib and ../libcli
      Fix merged build locations.
      Remove duplicate copy of dlinklist.h.
      Use xfile from common lib/util in Samba 3.
      Support "make test-X" to run all tests that match regex X.
      Make sure x_fdup compiles on Samba 4.
      Add some simple tests for lib/util/time.c
      Cope with changed signature of http_timestring().
      Use common strlist implementation in Samba 3 and Samba 4.
      Share data_blob implementation.
      Avoid problems with paranoid malloc checker.
      Add one-test testsuite for datablob.
      Add extra const.
      Fix warning, prototype.
      Cope with the fact that the data blobs returned are now
      Fix installation source locations for ../lib/util headers.
      Fix include paths for files that aren't compiled - breaks dependency
      Import Winbind NSS file for NetBSD in an attempt to fix the build on
      Use common signal helper implementation.
      Add more tests to datablob testsuite.
      Use common byteorder.h.
      Use common xfile.h.
      Move rbtree.[ch] to lib/util.
      Sync util_tdb implementations.
      Move nmblookup to same location as the rest of the NBT client library.
      Use common util_file code.
      Make util_tdb.h static since it is now used by Samba3.
      Remove unused json code.
      Move zlib to top-level root.
      Remove gencache in Samba 4 - it's unused and behind on the Samba 3
      Share RPC binding string utility functions.
      Ignore generated but unused files.
      Fix other paths to binding.o.
      Remove Samba3/Samba4-specific bits.
      Fix number of arguments for file_load() functions.
      Add data_blob_string_const_null() function that includes the terminating
      Use DATA_BLOB instead of "struct data_blob".
      Import new enum values.
      Import debug macros from Samba 3's libndr.
      Move code specific to Samba 3 to a separate file.
      Import changes from upstream libndr.
      Import warning fixes from Samba 3.
      Share ndr_basic implementation.
      Share ndr_misc implementations.
      Share uuid implementations.
      Import warning fixes from Samba 3 into libndr, sync more libndr code.
      Share ndrdump implementation.
      Share ndr.c implementation.
      Add test for data_blob_string_const_null.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Test maxsize parameter to file_load() as used in Samba 3.
      Use {u,}int64_t instead of SMB_BIG_{U,}INT.
      Use common fusage implementation.
      Merge branch 'master' of git://git.samba.org/samba
      Use GUID_string rather than smb_uuid_string().
      Use GUID_from_string.
      Merge branch 'master' of git://git.samba.org/samba
      Use GUID_random.
      Remove unused data type schar. If we really need this, it should probably be typedeffed to int8_t.
      MAXHOSTNAMELEN is already provided by libreplace if not by the system.
      Remove define for VOLATILE, volatile is already provided by libreplace.
      Rely on standard {u,}int{8,16,32,64}_t types provided by system or
      Merge branch 'master' of git://git.samba.org/samba
      Define __STDC_FORMAT_MACROS, required for PRIu64 define (among others)
      Define inttypes macros if not provided by system.
      Remove unused header file.
      Remove unused structures.
      Sync with Samba 3.
      Remove unused types.
      Merge branch 'master' of git://git.samba.org/samba
      Remove unused file.
      Move ndr pkg-config file to top-level.
      Allow auto-detect if --enable-merged-build was not specified.
      Fix path check.
      Move tests for Python inside function.
      Move checks for make inside function.
      Move checks for perl inside function.
      Make check_*.m4 m4 library files just contain functions that can be
      Give the user a hint about whether a merged build would be possible.
      Move make check out of cache call to avoid weird formatting.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Fix pkg-config file location.
      Fix merged build .
      Remove unused file.
      Share ndr_compression.c.
      Compile lzcompress (required for ndr_compression)
      Share ndr_krb5pac implementation.
      Fix include path.
      Remove unused variable.
      Fix include path.
      Merge branch 'master' of git://git.samba.org/samba
      Share libndr.h between Samba 3 and Samba 4.
      Build zlib (required for ndr_compression) if it's not pulled in through
      Fix installation of libndr.h
      Merge branch 'master' of git://git.samba.org/samba
      Allow specifying the exact IDL files to build.
      Move shared DCE/RPC IDL files to root IDL dir.
      Fix typo.
      Sync misc.idl with Samba 4.
      Regenerated pidl output.
      Share idl_types.h.
      Also check include dirs for IDL files.
      Share misc.idl.
      Share security.idl.
      Fix includes.
      Merge branch 'master' of git://git.samba.org/samba
      Fix include flags for merged build.
      Re-add [todo] tags.
      Merge branch 'master' of git://git.samba.org/samba
      Share epmapper.
      Share xattr implementation.
      Share initshutdown.idl.
      Add [public] and [todo] as in Samba 4.
      Merge branch 'master' of git://git.samba.org/samba
      Re-run pidl.
      Rename reboot -> do_reboot since the first is a reserved name on FreeBSD.
      Share eventlog.idl.
      Share wkssvc.idl.
      lsa.idl: Sync a couple more constants from Samba 4.
      Re-run pidl.
      Fix wkssvc test build.
      Merge branch 'master' of git://git.samba.org/samba
      winreg.idl: Sync ref change from Samba 3.
      Sync parameter names with samba 3.
      Merge branch 'master' of git://git.samba.org/samba
      Move some of the memory utility macros to a separate header (for now).
      Use the new memory macro file from Samba 3.
      Add extra argument free_on_fail to realloc_array() in Samba 4, as used by Samba 3.
      Use common detection function for zlib.
      Remove defines already provided by the system or libreplace.
      Remove obsolete comment about bool.
      Remove empty file.
      Use standard va_copy.
      s3: Fix make clean
      Use shared util.c.
      Use separate make variables for libutil and libcrypto.
      Fix build of 'everything'
      Fix const, dupes.
      Fix gitignore.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into xmaster
      Add libutil README file.
      Use str_list_equal() rather than str_list_compare().
      Move substitute functions to a different file.
      Rename hex_encode to hex_encode_talloc,for consistency with samba 4 and heimdal.
      Fix ignore for libcli/nbt/nbtname.h
      Move ufc to libreplace.
      Add TALLOC_CTX pointer to strhex_to_data_blob for consistency with Samba
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Use attr.h rather than having local defines for GCC attributes.
      Add extra parameter consistent with samba3.
      Remove duplicate macro definitions (already defined in libutil/attr.h)
      Simplify SIG_ATOMIC_T define, since sig_atomic_t is always provided by
      Remove defines for QSORT_CAST, already provided by libreplace.
      Add TALLOC_CTX pointer to generate_random_str(), for consistency with
      Make generate_random_buffer signature match that of lib/util.
      Merge branch 'selftest' of git://git.samba.org/jelmer/samba
      Move SMB-specific attribute function to SMB client library.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into strhex
      Specify ZLIB_LIBS explicitly in case zlib isn't brought in any other way.
      Move README.Debian to the right directory.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Move more functions out of util_str.c into the shared util.c.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into strhex
      Remove silly safe_free() function which is a wrapper around SAFE_FREE().
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Add vlp to TORTURE_PROGS since it's required by "make test".
      Just call talloc_free directly rather than through a helper function.
      Move smb.conf parser to libutil to match Samba 4.
      Fix segfault when using DEBUG() in the merged build.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into crypt
      Fix comment after paths have changed.
      Fix formatting in selftest help output.
      Fix typo.
      Make sure crypt libs get included.
      Add 'selftest' target to Samba 3 that uses the perl selftest code.
      Use _EXT version of autoconf macro.
      Move Samba4-specific code out of selftest.
      Fix blackbox tests on IPv6-only hosts.
      Don't assume crypt.h is present even if crypt() is.
      Rename BAD to BAD_DATA since the first is already defined on SunOS.
      Export variables correctly for blackbox tests (thanks metze).
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into crypt
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into selftest
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into selftest
      Share winreg.idl.
      Make warning a bit more user-friendly.
      Regenerate pidl output.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into crypt
      Also move wireshark conformance file.
      Also build all other Samba 4 binaries during merged build.
      Fix names in winreg torture tests.
      Use tables in Samba 3 ndrdump.
      Add missing asn1 object.
      Fix merged build; use full libroken rather than just a couple of object files.
      Provide two symbols to allow ndrdump compiled by Samba 3 to be used for
      Remove unused define for crypt (now in libreplace).
      Remove unused macro CONST_ADD.
      Move discard_const hack to memory.hso it can be used by Samba 3.
      Import comments about opcodes from Samba 3.
      Fix crypto test.
      Make sure prototypes are always included, make some functions static and
      Move WMI support code to top-level.
      Remove unused function str_list_match.
      Move orpc to top-level directory.
      Include generated header files rather than using manually written
      Sync syntax of srvsvc.idl with samba3.
      Add missing prototypes for samba3-specific libndr/util.c
      Add source4/ to include path because librpc/gen_ndr is still in source?/
      Merge branch 'master' of git://git.samba.org/samba
      Fix rpcecho test.
      Prevent warning about directory already existing.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into regsrv
      Revert "Registry server LDB backend: Don't make copies of the same type"
      Fix the build.
      Fix double free.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into regsrv
      Remove duplicate searching of Samba 4 directory for tags.
      Automatically enable merged build (for more complete 'make test') when possible during developer builds.
      Remove unused global variables.
      Silence undefined variable warnings.
      Merge branch 'master' of git://git.samba.org/samba
      Merge branch 'selftest' of git://git.samba.org/jelmer/samba
      Correctly report when merged-build is used in developer mode.
      Specify skip list to selftest.pl, make make target depend on test
      Use socket wrapper for selftest.pl, find binaries correctly.
      Allow running individual tests in the testsuite, normalize test names, fix some tests.
      Fix AC_SEARCH_LIBS_EXT() usage.
      Don't include a (relative path) srcdir in samba4-data.mk.
      Use standard types.
      Fix path for quicktest.
      Require separate option for quicktest include list rather than making
      Remove pstring usages.
      Remove pstring usage.
      Repel pstring to nsswitch/.
      Change buffer size back to 256, just to be sure.
      Change some dynamic allocations back to static buffers to fix build.
      masktest: Avoid creating new memory context, use dynamic allocation.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Remove unused header file.
      Remove unused copy of ndrdump.c.
      Remove unused copy of tables.pl
      Move libcli-util error code to top-level.
      Import new DOS error codes from Samba 3.
      Import WERROR defines from Samba 3.
      Import NTSTATUS defines from Samba 3.
      Fix header file installation.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Use common error definitions.
      Use WERR_FILE_EXISTS which is the equivalent of WERR_ALREADY_EXISTS
      selftest.pl: Silence verbose tdbsam output.
      Share codepages.
      Merge branch 'master' of git://git.samba.org/samba
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Import talloc_stack into util library.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Inline asn1_proto.h since the API is stable and public.
      Merge branch 'master' of git://git.samba.org/samba
      Remove unused constants from local.h.
      Use libutil genrand.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Remove support for obsolete data type "ipv4address"
      Use sockaddr_storage only where we rely on the size, use sockaddr
      Rename same_net to same_net_v4 for consistency with Samba 3.
      Use common net utility code (address and sockaddr manipulation).
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'master' of git://git.samba.org/samba
      Move set_sockaddr_port to libutil.
      Move subunit ui ops out of smbtorture to the torture library.
      Make lp_tls_* return absolute paths.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Fix function parameters.
      Fix prototype for set_sockaddr_port.
      Merge branch 'master' of git://git.samba.org/samba
      Move charset library to top level.
      Remove unnecessary include, improve function name.
      Rename string_replace_w to string_replace_m, which is more correct.
      Split up codepoints code, use consistent _m suffix.
      Move pytalloc to talloc directory.
      Fix include path to pytalloc.
      Remove iconv_convenience parameter from simple string push/pull
      Just hardcode workgroup to empty string, to avoid use of
      Fix merged build paths.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Remove const so return value can be freed.
      Avoid retrieving iconv convenience during loops.
      Eliminate another instance of global_loadparm.
      Remove a few more usages of global_loadparm.
      Remove iconv_convenience argument from convert_string{,talloc}() but
      Remove more uses of global_loadparm.
      Remove dependency of charset code on loadparm.
      Remove more usages of global_loadparm.
      Mark global_loadparm as deprecated.
      Remove access to global_loadparm from python module.
      Regenerate SWIG files.
      Remove use of global_loadparm in last Python script.
      Add version of next_codepoint without iconv_convenience.
      Revert Samba3 back to using its own charset handling code.
      Remove more global_loadparm instances, fix syntax errors.
      Remove unused include param/param.h.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Fix the build.
      Fix installation of charset headers.
      Remove include/local.h and move defines to more appropriate places.
      Fix includes.
      Remove another use of global_loadparm.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Remove duplicate check for volatile, move all utime-checks to
      Fix duplicate inclusion of zlib.m4.
      Fix definition of environ on Mac OS X (bugzilla: #5412).
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Fix Debian maintainers email address.
      Fix installation of Samba 4 during merged build.
      Fix building of SWIG files from merged build.
      Merge branch 'master' of git://git.samba.org/samba
      Don't create LanMan Directory Replication Service key (bug 4934).
      mksyms.sh: Fix typo in comment.
      Merge branch 'master' of git://git.samba.org/samba
      Merge branch 'master' of git://git.samba.org/samba
      Disable lanman authentication by default in Samba 4.
      samba4.rpc.samr: Use more torture API functions
      samba4.rpc.samr: Use torture API in a couple more places.
      dcerpc: Fix include path so header installer translates it correctly during install.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Add comments in torture code, allow creating subcontexts.
      Split out torture results from torture context.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Install additional libutil headers.
      Support alternative include paths.
      Samba3: Include util.h header file rather than having custom prototypes.
      proto.h: Remove prototypes already in other header files.
      Merge branch 'master' of git://git.samba.org/samba
      Only provide valgrind_strlen prototype when it's being compiled in.
      Move sys_chown() to rep_chown().
      Use 'regular' chown, libreplace will provide (dummy) replacement if necessary.
      Move sys_link to libreplace.
      Move sys_readlink() to libreplace.
      Move sys_symlink() to libreplace.
      Move sys_lchown() to libreplace.
      Move sys_realpath() to libreplace.
      Remove tests for functions provided by libreplace from configure.
      Remove sys_chroot() - libreplace already provides an alternative.
      Remove sys_dl*() - stubs are already provided by libreplace.
      Use dup2() replacement from libreplace.
      Merge branch 'master' of /home/jelmer/samba3
      Fix return type of readlink().
      Remove duplicate prototypes.
      Rename param_opt.flags to priority.
      Remove need to define _SAMBA_BUILD_ == 4 when using installed headers.
      Fix includes in installed version of talloc_stack.h.
      ALlow util/debug.h to be included more than once.
      Use struct for server versions.
      Fix prototype for attrib_string().
      Fix proto header.
      Fix header installation.
      Rename dos_errstr() to win_errstr() for consistency with Samba 4.
      Use shared doserr.c.
      Remove use of lp_*() from ntlm_check.c.
      Use standardized types in ntlm_check.c.
      ntlm_check.c: Sync some changes from Samba 4.
      Move ABS() to libutil.
      Remove IS_DOT and IS_DOTDOT macros, already provided by libreplace or
      Remove convert_string_talloc_descriptor, add iconv_talloc().
      Remove unused argument iconv_convenience.
      Move lp_*() calls a bit higher up the calls tack.
      Move calls to lp_* higher up in the call stack.
      Remove another use of global_loadparm.
      Remove another use of global_loadparm.
      Remove another use of global_loadparm.
      Use global iconv convenience rather than global loadparm.
      Remove another use of global_loadparm.
      Remove two debug parameters, not used anywhere.
      Use a separate global for nonblocking socket testing rather than global_loadparm.
      Add gensec_settings structure. This wraps loadparm_context for now, but
      Fix the build.
      Fix build for make everything.
      Rename class to "cls" since the first is a keyword name in C++. Thanks,
      Fix the build.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Remove another use of global_loadparm.
      Remove use of global_loadparm for SMB2 client connections.
      Add *test4 rules to merged build Makefile, to allow running the Samba 4 tests against Samba 4. (doesn't work yet).
      Move check of SMB_CONF_PATH to loadparm code.
      Add utility function for getting the default loadparm context from a python module.
      Remove use of global loadparm in python modules.
      Remove use of global_loadparm during initialization of gensec.
      Remove use of global_loadparm when comparing nt status error - use
      Use environment variable rather than loadparm parameter when testing
      Remove MIN, MAX, slprintf, vslprintf defines already provided by libreplace.
      Samba3: Remove more configure tests already done by libreplace.
      Remove unused include of param/param.h.
      Use standard heimdal function for finding interfaces - libreplace provides support for the underlying functions now.
      Remove another use of global_loadparm.
      Remove global_loadparm stub in Samba 3 as it's no longer used.
      Remove use of global_loadparm for disabled gensec backends.
      Remove last instance of global_loadparm.
      Remove global_loadparm.
      Fix the build.
      Fix memory leak.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Remove unused variable, fix return.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Regenerate SWIG output.
      Move libtorture to top-level.
      Move torture directory to top-level.
      Fix merged build.
      Remove unused init function in subunit code.
      Explicitly include samba4 includes.h to fix the build.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Move wireshark conformance file to top-level.
      Fix path for torture.h.
      Fix include path for installation.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Use a simple shell loop instead of _AC_SUBST_VARS.
      Don't filter out any variables for config.pm, only for config.mk.
      Move netr_SamDatabaseID8Bit to netlogon.idl to prevent problems with
      Build python modules by default in merged build (required for provision).
      Add interactive flag to setup/provision (also the default when no arguments are given).
      Install symlink for convenience for the samba4 setup directory.
      Remove EJS backend for PIDL, as we don't have EJS anymore.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Add convenience function for determining if an array should be allocated with talloc.
      Remove noejs property, which is no longer used.
      Support pyhelper property to allow additional methods to be tucked onto a
      Allow overriding repr function for pidl-defined types.
      Don't allow specifying arguments to pidl object constructors, as they'll
      Manually marshall dom_sid, so we can use a fixed size array for
      Move dom_sid to the Samba 3 IDL file, remove the old definition.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Rename ldap.h to ldap-util.h to avoid clashing with the system ldap.h
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Add python extensions for dom_sid.
      Ignore setup symlink.
      Rename dom_sid.idl -> server_id.idl (since it no longer actually contains the dom_sid). No longer include it from security.idl.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Consider shared IDL files and Samba3-specific IDL files separately, allow overriding output directory.
      Move shared gen_ndr files to librpc/gen_ndr in the root.
      Fix path to ndr_notify.c.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s4/provision: Upper case default realm, use only first part of realm as default domain name.
      Add new script for building IDL files in librpc/idl, generating both
      Only create (D)COM output files if there were COM objects in the IDL files.
      Simplify idl-deps.pl script a bit.
      Remove pidl SWIG backend; the native Python one works much better, and
      Fix [out] pointers in DCOM-related IDL files.
      Make some fatal errors non-fatal. This means we generate invalid code in
      Share object files for gen_ndr.
      Remove use of C++ keywords.
      Remove ndrdump - it's available in merged build mode as bin/ndrdump4 and uses the exact same object files there.
      Ignore generated files.
      Use py_* files to check whether generated files are out of date / not
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Start converting registry python module to plain C rather than SWIG.
      Fix header installation after move of gen_ndr headers.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Don't write out forward declarations for enums, as some compilers don't
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into pyregistry
      Add convenience macro for raising exceptions for NTSTATUS / WERROR.
      Use plain Python C API for registry module, rather than SWIG.
      Fix samba3sam test after removal of dom_sid IDL file.
      Fix Python event tests after rename to tevent.
      Add simple manually written replacement for the tdb module.
      Implement missing functions in pytdb.
      Remove swig use from tdb standalone build.
      Make sure to not close tdb database more than once.
      Cope with slight changes in tdb API.
      Initial work using manual Python bindings for LDB, rather than SWIG-generated ones.
      Remove swig support from standalone ldb build.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into pyregistry
      Port over more functionality to new SWIGless Python module.
      Fix more tests.
      Avoid use of parentheses in Python import statements, as it's not supported by Python2.3.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Specify explicit path to tevent.h, compilation breaks without it for me.
      Depend on specific version of LDB, as the API seems to unstable
      Reprocess LDB SWIG file.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'pyregistry' of git://git.samba.org/jelmer/samba
      Add missing files for standalone build.
      Fix standalone compilation of events library.
      Stop using SWIG for ldb Python bindings.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into tevent-standalone
      Fix tevent python module build as part of samba 4.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Fix all pyldb tests except for modules.
      Support subtypes of ldb.Ldb.
      Use plain C implementation for misc Python module rather than SWIG.
      Support custom constructors for pidl-created types and support types based on pidl-created types.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Implement some of the stubs in misc python module.
      Create and use convenience function for creating new talloc-wrapping Python Objects, support subtypes of DCE/RPC interfaces properly
      Avoid linking in all Python modules to the samba binaries - we can just let Python dlopen() them.
      py: Fix initialisation of subtypes, fix segfaults.
      Convert auth python module to "plain" C rather than using SWIG.
      Fix more introduced regressions in new bindings.
      Remove remaining fragments of SWIG code in pyldb.
      Convert credentials Python module to "manual" C - no SWIG used to generate
      Include errors.i verbatim in security.i, as it's the only file still using it.
      Fix various Python-related bugs.
      Provide simple Python replacement for ParamFile, which currently exists
      Convert param Python module to "manual" C.
      Move tests for ParamFile.
      Remove libcli_smb SWIG bindings - only one (useless on its own) function was wrapped anyway.
      Remove duplicate Python bindings for dom_sid, security_descriptor and
      Merge the rest of security.i into samba.dcerpc.security.
      Allow providing extra module-level Python functions.
      Simplify customization of pidl-generated Python modules.
      Remove infrastructure for (no longer used) SWIG.
      Fix more tests, improve repr() functions for various Python types.
      Fix comparison in tests now that we use __cmp__ rather than __eq__.
      Import types from other Python mechanisms using the Python import mechanism, to ensure they are initialized.
      pidl: Allow location argument to warning() and error() to be undef, in case it is
      pidl/python: Skip unknown types, rather than dieing.
      Use consistent names for dcerpc python modules; fixes messaging test.
      Remove unnecessary dependencies between Python modules.
      Remove includes of py_*.h, which are no longer generated.
      Add header for pyparam.
      pidl/python: Factor out connect code rather than duplicating it in each
      Raise proper exceptions when lp file can't be found, be a
      merged build: Remove SWIG checks, set flags for shared Samba 4 build.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Remove unused Samba4-specific init functions for libtevent.
      Never build tevent modules as shared objects.
      s4: Always link in auth, as some of the core infrastructure depends on it.
      merged build: Build Samba 4 using shared libraries internally, when
      Fix segfault when there are no tests registered.
      s4: Fix subsystem for various services in samba daemon.
      Build samba 4 plugins in merged build.
      Set right LD_LIBRARY_PATH for finding Samba4's libraries.
      Fix function name in error message when failing to load module.
      Fix missing symbols issues when building with shared libraries.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Fix build of the Python bindings now that SWIG is gone.
      Fix two remaining missing symbols in smbtorture4.
      Force symbolic links for shared library sonames to be created,
      Fix standalone build of tdb python module, update ignores for standalone tdb.
      Fix installation of standalone tevent Python module.
      Use relative paths for Python modules. Seems to workaround a strange bug in
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Fix prefixing swig library directory with prefix.
      Use make variable for Samba 4 shared library output directory.
      merged build: Remove shared-build related variables, as they are already set up correctly by the main configure.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      pidl: Fix typelist test after addition of type origin tracking.
      python/tevent: Remove use of pytalloc.h.
      pytalloc: Add some comments, use talloc object location in repr rather
      ldb: Fix linking against tevent library (rather than events)
      ldb: Include tevent.h rather than events.h.
      pyldb: Avoid use of pytalloc, as it may not be available.
      pyldb: Fix segfault because of incorrect reference counting.
      python: Define Py_ssize_t if the Python library doesn't.
      samba.tests.samdb: Fix test after merger of samba.security and
      pyldb: Provide replacement for sizeargfunc, not available before Python2.5.
      Fix silly typo.
      Move Samba4-specific file out of common libtevent.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      standalone: Use more variables, preparing to include these files from main
      Allow using external libtevent.
      pytevent: Add missing file.
      Fix use of "time offset" parameter, and add test to make sure I don't break it again :-)
      Fix compiler warnings in libnet.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Install tevent_internal.h, as Samba 4 needs it.
      Fix more compiler warnings in various places.
      Use 32-bit smbpid in interface as required by SMB2, in line with
      Fix more compiler warnings.
      s4: Fix make clean to remove gen_ndr objects.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Rename samba-socket -> samba_socket to fix a couple more compiler
      Fix accidental condition inversion.
      Fix Samba 3 merged build - include tevent.
      make: Search for c tags in ../ as well.
      Add iconv_convenience argument to size functions.
      Fix syntax errors.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Use fqdn rather than gethostname when guessing realm.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      py: Properly increase the reference counter of Py_None.
      Add dependency to talloc in tevent pc file.
      Fix prototype.
      Fix compilation, remove unused variables.
      When loading the default configuration, allow the configuration file to be
      Start on alpha6 release notes.
      Fix ldap.py test.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Set proper python exception when running out of memory.
      Display lsa string contents.
      Avoid using a utility header for Python replacements included in Samba,
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Print the failed value in the time tests.
      Fix ldap.py test on systems that *can* find the record (the search fails here locally).
      Don't attempt to use GNUTLS >= 2.6, as it is known broken with the socket-tls backend.
      Make sure smbtorture4 can find all gensec modules. (Fixes RPC-BINDSAMBA3)
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      python/param: Cope with lp configfile being NULL.
      Fix indentation for some configure options.
      Use AS_HELP_STRING() in a couple more places.
      Find default smb.conf path correctly, when it was not specified on the
      s4/NEWS: Remove mention of no longer existing js parameter.
      Add copyright headers.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      loadparm: Make sure various state variables get initialized even when we
      More work on the Samba 4 release notes.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Remove mention of external heimdal - its not yet supported.
      Add some more entries to WHATSNEW, by no means complete.
      Merge branch 'v4-0-stable'
      Make sure server_role gets initialized in backend provisioning code -
      Don't use TMPDIR as variable, it's already used for other purposes.
      Allow overriding the function that ships the request in the Samba 3
      Allow calling DCE/RPC server implementations directly using
      Merge branch 'v4-0-test' of /home/jelmer/samba4
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Use script path to find the setup directory.
      Reorder arguments to ldb_search() to match what is in Samba 4.
      Replace ldb_search() with ldb_search_exp_fmt(), like in Samba 4.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Move check_make.m4 to the top-level.
      Only check for Perl once in Samba 3.
      Automagically expand includes in Makefile.in during configure time
      expand-includes: Add simple protection against infinite recursion.
      Move check_python.m4 to common m4 directory.
      Fix warning; base dn is no longer const.
      pidl/python: Add explicit casts, fixes warnings about casts when enabled.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      libsmbconf: Add build magic for Samba 4.
      libsmbconf: Remove use of some Samba3-specific macros.
      Fix path to check_python.m4.
      Move configure test files to the top-level and share them between s3 and
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Support parsing sddl for security descriptors.
      Implement as_sddl.
      Remove obsolete samr Python module - use samba.dcerpc.samr instead.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Add prototypes required by samba-gtk.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Add function for mapping NDR error codes to strings.
      pyrpc: Raise proper NDR error codes with matching strings rather than mapping
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Define GNU_SOURCE, required if libreplace doesn't provide comparison_fn_t,
      Define _GNU_SOURCE, required for comparison_fn_t.
      Stop installing events.h - it contains a broken include itself and
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Revert "s3/s4: Move CONST_DISCARD into lib/util so it's available from s3 and s4"
      Use discard_const_p rather than CONST_DISCARD.
      Remove an invalid discard_const_p() - it masks an actual
      Rerun pidl.
      Fix warning in spoolss IDL file output.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Revert "Fix errornos assumption that all compilers are gcc"
      --interactive doesn't take any argument.
      Cancel transactions when exceptions are raised.
      Make it possible to override the setup path.
      Move some samdb-specific code out of provision.
      Use convenience function for finding setup_dir based on location of
      Use convenience function for finding setup dir in SaMDB tests.
      Catch specific exceptions, rather than catching everything, which might hide other exceptions silently.
      Use created loadparm context, rather than the one specified on the command-line.
      Provide a SamDB TestCase-class that can be used by OpenChange.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Add --enable-external-* flags for libraries shipped with Samba, to allow
      Let --enable-external-libldb default to no (since linking against
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      pytevent: Fix include path - tevent_util is not installed.
      Fix finding of setup data.
      expand tabs in python file, consistent with the rest of the file.
      expand tabs in python file, consistent with the rest of the file.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Don't define _GNU_SOURCE if it's already defined on the command-line.
      Include header with NTSTATUS, as some IDL files use it.
      Rerun pidl.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Only define _GNU_SOURCE if it's not defined yet.
      Eliminate two duplicate SEC_ACE_TYPE constants already provided by
      Merge branch 'master' of git://git.samba.org/samba into HEAD
      Add allow_badcharcnv argument to all conversion function, for
      Sync smb_iconv_t type, convert_string return type with Samba 3 equivalents.
      Move next_token_talloc() to top-level.
      Move next_token_talloc to util.c, as util_str.c is only compiled inside samba 4.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into talloc-next
      Avoid using tevent_util.h, which won't be available if we use the system
      Merge branch 'master' of git://git.samba.org/samba into teventfix
      Merge branch 'master' of git://git.samba.org/samba into convenience
      Don't generate array iterators when the length of the array is always 0.
      Rerun pidl.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into talloc-next
      Merge branch 'master' of git://git.samba.org/samba into convenience
      Move secace.c to top-level.
      Keep using Samba3's charset.h for now.
      Also re-add removed codepoint_t; I'm clearly not having my day today.
      dom_sid.h: Include dependency security.h that provides the dom_sid struct.
      Move secacl to top-level.
      s4: Use same function signature for convert_* as s3.
      Add header files for secace and secacl.
      Use common header file for character set handling in Samba 3 and Samba 4.
      Merge branch 'master' of git://git.samba.org/samba into convenience
      Use shared header file for character sets, remove old definitions from samba3 smb.h.
      Import ISO-8859-1, 646 from Samba 3 iconv.
      Merge branch 'master' of git://git.samba.org/samba into convenience
      Use samba3's own iconv implementation for now, until all changes are
      Fix test_surrounding in samba4.rpcecho.python.
      Revert accidental reintroduction of void ** bug.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Fix prototype mismatch.
      Allow using external libtalloc.
      Fix fallback if system doesn't provide talloc.
      Fix comment about shell in Makefile.
      Add shared pkg.m4 file with convenience macros for using pkg-config.
      Move tdr to top-level.
      Depend on a newer talloc in Samba 4.
      Merge branch 'checktalloc' into tdr
      Fix build of tdr from merged build.
      Properly strip /usr/lib and /usr/include for the merged build.
      Merge branch 'checktalloc' into tdr
      tdr: Remove dependency on lp_* so it can be used in both Samba 3 and
      Remove -L/usr/lib from a couple more make variables.
      Remove unused CONST_DISCARD macro.
      Merge branch 'checktalloc' of /home/jelmer/samba4
      Depend on newer talloc for Samba 4 in the merged build as well.
      Merge branch 'tdr' of /home/jelmer/samba4
      Merge branch 'nodiscard' of /home/jelmer/samba4
      configure: Add common file with minimum versions of external libraries.
      Fix installation of tdr.h.
      python: Always run with the same version of Python as we build against.
      Merge branch 'sharedm4' of /home/jelmer/samba4
      display_sec: Remove use of samba3-specific data types.
      Strip /usr/include from include flags, so we don't end up including
      pyldb: Improve exception message when a list is expected.
      Fix up minschema after the conversion from JavaScript.
      Merge branch 'master' of git://git.samba.org/samba into minschema
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into displaysec
      Add more comments.
      Adapt Zahari's test to the generic LDB Python tests.
      Remove unnecessary duplication of string in memory.
      pyldb: Let conversion to LDIF up to the user of the API rather than doing
      selftest: Add copyright headers
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into displaysec
      display_sec: Move to common libcli/security directory.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into displaysec
      Merge branch 'master' of git://git.samba.org/samba
      Merge branch 'displaysec' of /home/jelmer/samba4
      Merge branch 'copyright' of /home/jelmer/samba4
      configure: Use m4 defines for minimum library versions rather than shell
      Make valid_netbios_name() check a bit stricter.
      Improve formatting in Python file.
      Fix the valid NetBIOS name tests.
      Make domain sid argument to as_sddl() optional.
      Add a unit test for security_descriptor.as_sddl() without arguments.
      Move check for syslog out of libreplace to source3/ and source4/.
      Cope with the fact that only _mkdir() exists on Windows and that it
      Only define waitpid replacement if wait4 is available. (It isn't on
      Error out at runtime when seteuid/setresuid or setegid/setresgid are not
      Move syslog check out of m4 library file into configure.in
      Move some libgpo files to root.
      Move gpo_sec to top-level.
      Move gpo_fetch to top-level.
      Remove smb_mkstemp() - libreplace will now provide a secure mkstemp() if
      Use a static copy of the samsync header file as Samba3 doesn't generate
      Move the security_descriptor utility code to the top-level.
      Fix make install; don't install drsuapi.h and fix the location of
      Fix includes for security_descriptor file for the non-merged build.
      s3: Use common security_descriptor_equal().
      Specify explicit path to vlp, for those not having vlp in $PATH.
      Add a new non-convenience version of push_codepoint.
      charcnv: Import push_codepoint().
      Fix push_codepoint function without iconv_convenience.
      ldb/samba3: Support event context argument to ldb_init().
      samba3/ldb: Update the ldb_dn API to match that of the Samba 4 LDB:
      Provide a ldb_global_init() function for compatibility with older versions of LDB
      Rename the top-level LDB test to LOCAL-LDB, so it gets picked up by the
      Fix 'make samples' (git doesn't version directories, so 'examples' won't
      Filter substitution variables out of list of undocumented applications.
      Fix 'make undocumented' (by hardcoding the source path, now that the docs
      Fix regular expressions in find_missing_doc after code format changes in
      Look for dblatex.
      Make the test document include a Samba-specific XML element and an image.
      Use system-provided dblatex to build the docs rather than included
      Remove included (but unused) copy of db2latex.
      Fix dblatex warning: Remove reference to removed DTD file.
      Use new stylesheet variables names as used by dblatex.
      Fix syntax errors (title is mandator for chapters) in Samba4-HOWTO.
      Split Samba-specific LaTeX commands into their own LaTeX package,
      Also move \linebreaksign to the samba LaTeX package.
      Remove admon graphics - provided by dblatex now.
      Remove reference to (removed?) image copy script.
      Cut out the intermediate dvi files in the Makefile - dblatex can take care
      Move test image to test/images/, consistent with the other books.
      Trim the requirements for building the docs, remove outdated instructions
      Use standard LaTeX book document class rather than custom samba class.
      Remove use of unicode quotes, as it confuses LaTeX.
      Remove unnecessary checks for apps now used through dblatex.
      Fix dependencies on images for pdf and ps files.
      Fix build of the PostScript documents.
      Remove references to dia now that we use inkscape for diagrams.
      Remove unused and unsubstituted variables from Makefile.settings.in.
      Generate pdf documents in-place rather than copying them from . to output/
      Remove the DTD for the removed pdb-xml backend.
      Explicitly mention licenses in all stylesheets
      Move expansion of Samba-specific XML elements out of xslt/latex.xsl into a
      Add more output generated by the documentation build process to .gitignore.
      Remove broken XSL-FO translation code; this has been broken for a while
      Fix a bunch of XML validation errors.
      Fix most of the invalid usages of DocBook in the Samba 3 HOWTO.
      Fix a couple of invalid DocBook XML usages in the Samba3 Developers Guide.
      Ignore docs-xml/output directory and its contents as well as png files
      Use <example> + <smbconfblock> rather than nonexistant element
      find_unused_doc: Strip spaces in configuration names, just like the parser does.
      Remove text chunks support. Was never built by any of the main targets,
      Remove XSLT script to generate image dependencies, instead rely on make
      Remove rules for unused epstopdf.
      Remove unused entries from clean.
      Fix dependency on the attributes file.
      Avoid --nonet when building manpages; xsltproc will already prefer local
      s4 config-summary: Fix printing of which libraries are external and
      errormap: Remove wbc -> NTSTATUS error map for now. It is not used.
      tevent: Don't install headers, since we don't install a shared lib
      Update copies of config.guess and config.sub.
      tevent: Install tevent_internal.h in the standalone build.
      tevent: Remove python module.
      tevent: Define TALLOC_FREE() if it's not defined yet, to allow building
      tevent/python: Makefile was still trying to build some non AC_SUBST python targets
      Fix dependencies when using shared libraries.
      Build libsamba-util as a shared library.
      Split up Python code a little bit so we don't hav eto link python modules
      python: Move helper functions for using param into a separate file rather
      Fix more unresolved symbols.
      Build modules statically by default, as there still seem to be a lot of
      Fix finding the LDB header files in the system in pyldb_util.
      Fix pythonpath so subunit can be found.
      Fix unresolved symbol in python messaging module.
      Move mount.cifs/umount.cifs to the top level and remove the outdated copy
      Move findstatic.pl script to top-level.
      README: Fix indentation of bullet point.
      Rename harness2subunit.pl -> tap2subunit to be consistent with the
      selftest: Add subunit output format.
      Support reporting current time in selftest output.
      selftest: Factor generic functionality for buildfarm output into a
      selftest/README: Fix formatting.
      Remove empty unit test.
      selftest: Fix target/Samba4 tests.
      selftest: Run tests for Samba4 target in the samba 4 testsuite.
      selftest/plain: Allow caller to not specify the number of expected
      selftest: Add script that can take a subunit stream and format it.
      clikrb5: Prefer krb5_free_keytab_entry_contents to krb5_kt_free_entry.
      python: Fix samba4.dcerpc.rpcecho.RpcEchoTests.test_surrounding test.
      libsamba-util: Fix soversion.
      s4-tests: Add separate variable for tap2subunit.
      Fix build with external talloc.
      selftest: Use subunit internally, and a separate test output formatter.
      subunit: Support the time: command.
      subunit: Move more Subunit printing logic to Subunit.pm.
      Subunit: Support "fail" as alias for "failure" in Subunit streams.
      selftest: Add script to filter out known failures from a subunit stream.
      selftest: Use filter-xfail for known failures
      selftest: Avoid decreasing total testsuites if the original total is not
      selftest: Use external processes for filtering known failures and pretty
      More work supporting prefixes.
      selftest: Fix subunit stream to include the right prefixes rather than
      selftest/subunit: Remove prefix command.
      selftest: Remove unnecessary uses.
      selftest: Fix handling of testsuite, reintroduce progress indication.
      selftest: Fix subunit formatting, fix years when filtering subunit
      selftest/subunit: Remove open_tests argument from parse_results.
      selftest: Properly recognize xfail testsuites.
      selftest/subunit: Add diff command that can diff two subunit streams.
      selftest: Make it easier to do subunit diffs from other apps.
      subunit: Sort diff output.
      Fix Samba 3 selftest to use new selftest formatting functions.
      selftest: Fix uninitialized variables in selftest output.
      selftest: Fix exit code for format-subunit.pl.
      subunit-filter: Print names of skipped testsuites.
      selftest/buildfarm: Don't assume that a reason being specified is an indication of failure.
      format-subunit: Remove subunit output module.
      ad-schema/license.txt: Fix typo.
      packaging/Debian: Remove outdated Debian package sources and instead refer to
      selftest: Output subunit on the buildfarm.
      selftest: Remove existing buildfarm output format.
      selftest: Add option to strip output of succeeded tests, and use it on
      subunit: Pass canonical names of test results to formatters and filters.
      selftest: Document the fact that test runner and formatter are now
      selftest: Fix references to filenames with knownfailures and slow tests.
      subunit: non-zero exit code if one or more testsuites failed.
      smbtorture: Remove unused 'quiet' output format.
      smbtorture: Output subunit by default.
      python: Add API for accessing available shares.
      python: Provide way to iterate over available shares.
      pyldb: Support getting the parent of special DNs without segfaulting.
      pyldb: Fix segfault, freeing memory too early in search.
      pyldb: Fix two memory leaks of attribute lists.
      pycredentials: Fix memory leak.
      pyldb: Fix memory leak of LdbMessage's created from Python.
      pycredentials: Raise MemoryError when unable to create objects.
      param/python: Fix memory leak of LoadParm objects.
      pyldb: Fix another memory leak and reference counting error.
      pyldb/tests: Use different dn's everywhere, to easily spot which test is
      pyldb: Fix memory leak in Dn.concat.
      pyldb: Fix memory leak in Dn.get_parent().
      pyldb: Fix three more (minor) memory leaks.
      Make fullschema script executable.
      Only install an explicit set of scripts during "make install", rather than
      tdb: Fix help string in configure flag to enable Python bindings.
      selftest: report time after testsuite, gives nicer output on the
      Remove outdated Python status file.
      configure: Use Python tdb bindings from the system, if found.
      Fix build with system LDB.
      smb_build: Always build modules for system-libraries as shared libraries,
      selftest: Use common function when skipping testsuites based on run-time
      dsdb: Fix build against system ldb.
      Use system LDB by default if the right version was found.
      Use system Python LDB bindings, if present.
      pidl: Don't run compile tests inside the tree, won't work yet.
      TOSHARG: Fix typo: s/aquire/acquire/
      s4: Remove stub endpoint mapper script.
      s4 docs: Git has revision SHA's, not numbers.
      s4: Don't install epdump, since it no longer exists.
      Fix some typos pointed out by Oota Toshiya.
      ldb: Display SHLD_FLAGS when building.
      Remove pyldb_util and simply duplicate the 5-line function it contains,
      Actually fill in ldb modules directory.
      python: Set right ldb modules directory when using system ldb.
      VFS examples: Update copy of config.{guess,sub}.
      Remove outdated status file about samba3 -> samba4 upgrade project.
      Remove unnecessary include, update README.
      Create libndr-standard, which includes the NDR marshalling code for
      provision: Remove unused imports.
      Add missing includes.
      librpc: Integrate some subsystems now part of libndr-standard and integrate ndr_dfs in libndr-standard.
      Merge more ndr interfaces into libndr-standard.
      Remove unused variable.
      Include ntsvc NDR in libndr-standard.
      Merge branch 'master' of git://git.samba.org/samba
      Remove unnecessary imports.
      Remove unused parameter setting.
      pidl: Print proper errors when arrays don't have a specified size rather than spewing pages of perl warnings.
      pidl: Print actual type names in errors about unknown origins rather than 'HASH(0x....)'.
      Re-add accidently removed shares test.
      Remove RFC's from the release tarballs to make the lives of the Debian
      DCE/RPC(Python): Rename py_talloc_import to py_talloc_steal.
      python: Cope with the dom_sid2 alias in pidl's python generating code.
      pyldb: Raise proper exception when attempting to assign a string to a dn
      pyldb: Properly keep copies of Python string contents, rather than
      pyldb: Fix reference counting on ldb_message_elements, add extra type
      Mark test_security_descriptor_add_neg as known failing (for now).
      ldb: Support running testsuite without installing first.
      ldb: Remove references to operational module init function.
      repl_meta_data: Fix include path when building with standalone ldb.
      pidl: Remove unnecessary _GNU_SOURCE define.
      Fix string-wchar-fixed-array-01 test (when libndr is available).
      Fix string-wchar-fixed-array-02 test (when libndr is available).
      Fix string-wchar-fixed-array-03 test (when libndr is available).
      pyldb: Don't segfault when invalid type is specified to Dn.get().
      provision: Avoid linking in multiple copies of security python module.
      Check for PyString_FromString being NULL.
      Revert "s4:python  fixed subunit tests of dcerpc"
      PEP8
      Add init file for DCE/RPC tests.
      pidl(s4.python): Fix arguments to PyCObject_FromVoidPtr for string_array's.
      samba.tests.provision: Remove broken become_dc test.
      s4/make: Remove object files in ../libds as part of "make clean".
      ldb: Check for talloc using pkg-config before checking manually, so we
      registry: Fix warning freeing talloc pointer with multiple parents.
      pygensec: Add initial work on a gensec Python module.
      gensec: Avoid exposing lp_ctx on the API level.
      libutil: Add separate utility code for dealing with settings as a
      util/parmlist: Add some more comments.
      parmlist: Add basic tests for test_get_int().
      selftest: Prefer system tap2subunit if available.
      librpc: Fix path to ndr_standard pc file.
      rpc_server: Fix warnings.
      parmlist: Add more tests.
      make: Use $(base_srcdirs) in 'make clean' rather than keeping a separate
      Move samba-specific variable to s4 Makefile.
      pidl: Avoid using talloc_free as function pointer, since it may be a
      s3: Remove two more DFSG-nonfree text documents at release time. (Debian bug
      Fix initialisation of TypeObject samba.param.LoadparmService.
      tdb: Fix formatting of API check file.
      tdb: Also build and install tdb manpages from standalone tdb.
      ldb_wrap: Fix compilation when using system ldb.
      provision/pyldb: Avoid linking in static python ldb module.
      param: Fix build on systems without ldb installed.
      py_net/libnet: Remove C++-style comments, add more error checking, move
      python: Remove sys.path line rather than updating it when installing to python system path.
      net: Support implementing subcommands in python.
      net: Support usage/help of subcommands implemented in Python.
      s4/net: Support parsing arguments in Python commands.
      netcmd: Add some basic tests.
      s4/net: Make pwsettings a net subcommand.
      Use CommandError exception to deal with problems during net commands.
      s4/net: Use d_printf consistently when reporting errors.
      s4/net: Add domainlevel subcommand.
      s4/net: Pass all arguments through to the Python commands.
      s4/net: Allow options before arguments for Python commands.
      python: When updating sys.path to include the Samba python path, avoid throwing away the changes made by site.py.
      net: Make arguments available to python commands as sys.argv.
      dsdb: Fix dependencies when building against system ldb.
      net: Allow python subcommands to provide commands that are not recognized by
      Fix commands in password tests.
      blackbox.passwords: Use convenience variable for net.
      net: Allow Python commands to return None instead of 0.
      net: Move 'setpassword' to 'net setpassword'.
      net: Move setexpiry to 'net setexpiry'
      net: Fix tests and documentation of setexpiry.
      net: Move 'newuser' to 'net newuser'
      net: Support 'super' commands implemented in Python.
      pyldb: Add dom_sid.split in favor of less powerful dom_sid_to_rid().
      samba: Fix whitespace, remove pointless 'pass' statement.
      py/security: Add test for dom_sid.split.
      s4/build: Indicate whether Samba4 is being built against the system
      heimdal_build: Explicitly specify 'YES' when enabling external
      ldb: Fix the standalone ldb build.
      linked_attributes: Fix missing dependency on util.
      Fix permissions - net subcommand modules don't need to be executable.
      Add script for updating the copy of subunit.
      Add README about subunit.
      subunit: Import new version.
      Import testtools as well, required for subunit.
      subunit/testtools: Include newer version.
      ldap.py: Remove unused imports.
      ldap: Fix test failure that seemed to go unreported previously.
      selftest: Use SUBUNIT_FORMATTER command, if set in the environment.
      s4: Include Python.h early to avoid double definition errors.
      pidl: Include Python.h first, to avoid warnings.
      s4: Fix a few warnings.
      pyxattr: Remove unnecessary hacks.
      pyxattr: Use standard functions for error handling.
      pyxattr: Fix return value, raise exception, fix memory leak.
      pyxattr: Simplify tests.
      pyxattr: Fix memory leaks.
      pyxattr: Fix tests by avoiding opening tdb files multiple times.
      pyxattr: Fix tests by not opening tdb files multiple times.
      pyxattr: Simplify tests.
      selftest: Cope with 'multipart' support in subunit.
      pyxattr: Factor out helper functions.
      pyxattr: Move to the same directory as the xattr code.
      upgrade_from_s3: Remove unused imports.
      s4-python: Fix formatting.
      net: Fix python 2.4 compatibility.
      upgradeprovision: Remove unused imports, use shutil.rmtree rather than
      Fix formatting.
      More formatting fixes.
      getntacl: Remove manpage for removed utility.
      Remove __contains__ from mock object for consistency with actual
      ntacl: Use existing infrastructure.
      Add 'pyflakes' rule.
      General cleanups of python code, hinted by pyflakes.
      python: Add 'make pylint' convenience rule.
      More formatting fixes, pointed out by pylint.
      Add testrepository configuration.
      Fix the build, add filtered subunit runner.
      Remove extension from format-subunit.
      selftest: Remove html subunit formatter; it's too simple and really belongs in subunit or testrepository upstream.
      selftest: Remove unused BuildFarm output file (now using subunit)
      selftest: Update locations in README.
      provision: Remove unnecessary whitespace.
      upgradeprovision: Fix formatting, syntax error.
      s4-python: Format to PEP8, simplify tests.
      s4-python: Move dnspython to lib/, like the other Python modules
      s4-python: Simplify mechanism for finding included Python modules.
      subunit: Update to newer upstream version.
      python: Fix rule for generating docs using pydoctor.
      ldap.py: Fix syntax error.
      registry: Fix compilation.
      selftest: Convert format-subunit to Python.
      selftest: Replace perl subunit formatter with python subunit formatter,
      format-subunit: Improve formatting, simplify code.
      selftest: Remove diff-subunit - it's included in subunit and not necessary for normal operation.
      format-subunit: Avoid printing backtrace on Ctrl-C.
      selftest: Convert filter-subunit to Python so the subunit Python module
      selftest: Use absolute tests names in knownfail.
      s4-selftest: Fix xfail for base.delete.
      selftest: Use standard subunit commands for progress reporting.
      selftest: Support parsing progress in format-subunit/filter-subunit.
      selftest: Use standard subunit command for progress reporting.
      selftest: Use boolean types in Python.
      subunit: Also import copies of filters and perl module.
      smbtorture: Report number of available tests in a testsuite using subunit.
      samba_external: Simplify script to find missing external packages; include subunit and testtools as well.
      Put testtools directly under lib/ to make it easier to install from Samba 4.
      format-subunit: Don't show reason at all if it is None.
      format-subunit: Hide reason if it is None.
      installmisc: Support DESTDIR for Python directories.
      s4-python: Install external included packages only if they're not present on the system.
      testtools: Fix included testtools, for systems that don't have it.
      subunit: Include remainder of bindings and metadata.
      selftest: Make sure format-subunit and filter-subunit can find testtools/subunit.
      selftest: Update sys.path before attempting to import external modules.
      subunitrun: Find testtools and subunit when they're not provided by the
      s4-python: Install external packages to a different directory but import into
      s4-python: Ensure __init__ exists in samba.external, or importing will fail.
      selftest: for clarity, rename test to testsuite
      s4-python: Remove duplicate definition of GUID_DRS_* constants.
      s4-python: Remove unused imports, duplicate definitions of SECINFO_ constants.
      s4-python: Remove remaining constants.
      s4-python: Move dsdb constants to a separate python module.
      s4-python: Move samdb_server_site_name to dsdb module.
      s4-python: Remove convenience macro PyErr_SetStringError.
      s4-python: Avoid importing glue directly.
      s4-python: Move set_opaque_integer -> dsdb.
      s4-python: Move dsdb_convert_schema_to_openldap to dsdb.
      selftest: Remove python2.4-isms
      Add C-based Samba-specific subclass of Ldb.
      Move glue.set_credentials hack to samba.Ldb.
      s4-python: Move set_opaque_integer to pyldb.
      s4-python: Move ldb_set_utf8_casefold to pyldb-samba.
      s4-python: Move register_samba_handlers to PySambaLdb.
      s4-python: Move set_session_info to PySambaLdb.
      s4-python: Fix compilation of samba._ldb.
      s4-python: Use standard infrastructure for finding included testtools, subunit and iso8601.
      Support 'make test TESTS=foo' again.
      urgent_replication: Use standard comments rather than docstrings.
      s4-python: Move samdb_ntds_objectGUID to pydsdb.
      s4-provision: Proper handling of exceptions, use SamDB class but skip global schema.
      s4-samdb: Allow skipping global schema.
      selftest: Display minutes and hours for duration.
      update-external: Support updating dnspython.
      s4: Remove unused pkg-config replacement in perl.
      Move configure_check_unused script to root scriptdir, as it is useful
      s4-waf: Fix 'waf dist' app name.
      s4-waf: Add dist target.
      s4-python: Move set_global_schema to pydsdb.
      s4-net: Simplify SamDB connect code.
      Migrate 'net export keytab' to python.
      Update waf build.
      s4-python: samdb: Default to using global schema.
      s4-waf: Support --load-list option.
      selftest: Support --load-list option.
      selftest: Add --filtered-subunit option.
      testr: Use waf test runner.
      s4-python: Remove obsolete and broken torture modules.
      s4-python: Simplify code, improve formatting.
      s4-python: Fix formatting, import of FLG_NOSYNC.
      s4-python: rename samba.glue to samba._glue to indicate it's private.
      s4-python: More cleanups.
      s4-python: Move load_partition_usn to dsdb module.
      s4-python: Cancel transaction properly in case of exceptions, fix formatting.
      s4-python: Fix formatting, use standard convention to call instance methods.
      pynet: Create a net class.
      s4-net: Use new Net() object in net export keytab.
      net: Convert time command to python.
      s4-net: Convert 'net time' to python.
      s4-net: Convert user subcommand to Python.
      s4-net: Convert vampire command over to Python.
      s4-net: Convert machinepw command to python.
      Support --version in python scripts.
      s4-net: 'net user create' -> 'net user add', for backwards compatibility.
      s4-net: Cope with options without arguments.
      s4-build: Fix autoconf build (net_machinepw.c is no longer present)
      smbtorture: Support --load-list argument.
      smbtorture: Remove unused shell feature.
      torture: Simplify torture suite running, call restricted test suite runner.
      selftest: Support passing --load-list to test runners.
      subunit: Don't abort when receiving test results from tests that weren't
      selftest: Accept 'testing:' to introduce new tests.
      subunit: Support formatting compatible with upstream subunit, for consistency.
      subunit: Remove more test output that could be interpreted by subunit.
      subunit: Cope with lowercase test results in tap2subunit.
      s4: Fix more test results to not conflict with subunit commands.
      idl: Use C-style comments, because cpp on some platforms doesn't accept
      s4-net: Add definition of outf.
      selftest: Cope with strict.
      pydsdb: Fix memory leak on invalid parameters, formatting, trivial
      s3-build: Remove --enable-merged support.
      Remove the copy of ldb from Samba 3.
      samba3: Generate C files from IDL in source3/librpc/gen_ndr rather than
      Revert "Revert "s3-build: Remove --enable-merged support.""
      Reintroduce merged build, using waf to build smbtorture4.
      s3-merged: Use newly added waf reconfigure subcommand.
      s3-merged: Make sure bin/ exists when copying in bin/smbtorture4.
      s3: Work around dependency bug in Samba 4 waf build in merged build.
      s3-selftest: Allow overriding the subunit formatter.
      pynet: Remove unused credentials argument.
      selftest: Cope with testsuites without any output whatsoever (probably an error though).
      selftest: Cope with empty testsuite results in more places.
      Finish removal of iconv_convenience in public API's.
      s3: Remove use of iconv_convenience.
      Remove more usages of iconv_convenience in files which were apparently not recompiled by waf.
      s3: Fix some more iconv convenience usages.
      pynet: Raise proper exceptions rather than invoking sys.exit.
      ldb-waf: Install manual pages for ldb in standalone build, install
      selftest: list.remove raises ValueError rather than KeyError.
      s4-python: Remove cruft to deal with static python modules, which are no
      s4-waf: Look for xsltproc executable, required to build manpages.
      ldb-waf: Fix installation path of manpages, simplify manpage handling.
      ldb: Remove manual pages for binaries that have already been moved to utils/.
      wafsamba: Actually install manual pages.
      s4-waf: sanitize library names like the old build system did, only add
      wafsamba: Default blacklist to an empty list rather than None.
      tdb-waf: Simplify manpage handling.
      tdb-waf: Don't install binaries when using system tdb.
      ldb: Support building with system ldb library
      Add manpages argument to SAMBA_LIBRARY().
      waf: Refactor manpage building code.
      ldb/waf: Fix build with system and bundled ldb.
      talloc: Don't set is_bundled for standalone build.
      ldb: Fix dependencies when building with system ldb.
      ldb: Move utility functions to separate file.
      ldb: Remove Samba-specific symbols.
      ldb: Install ldb_handlers.h header.
      pyldb: Remove duplicate copy of function.
      wafsamba: Only try to build manpages if XSLTPROC was actually found.
      pyldb_util: Remove dependency on LIBPYTHON - it's already there
      s4-python: Fix formatting.
      Add missing stub functions.
      s4-python: Start using standard python logging infrastructure rather
      upgrade: Properly cancel/commit transactions in a couple more places.
      upgradeprovision: Use logging infrastructure.
      Friendlier message.
      Remove unused version options for subunitrun.
      s4-test: Use smb.conf path set in environment rather than using
      s4-provision: Use logger in provision backends.
      param/share: Use static prototypes.
      librpc: Fix netlogon.h file to install - not the torture one but the one
      libgpo: Use system libraries if possible.
      Support system talloc/tevent headers.
      librpc: Install the right headers.
      s4-waf: Fix installation of .so links for libraries that are not bundled but have a mangled name.
      ldb-samba: Add missing dependency on credentials code.
      dsdb: Build modules as external modules when using system ldb.
      wafsamba: Only add init function if not building module as shared library.
      dsdb: Fix includes when building against system ldb.
      ldb: Only build standard ldb modules when building bundled ldb.
      wafsamba: Improve assertion error message to include the module.
      wafsamba: Fix building of modules as shared libraries.
      wafsamba: Fix filenames for ldb modules.
      ldb: Fix included ldb build.
      ldb: Bump version number, use same ABI version for Samba4 and non-Samba 4 versions.s
      Attempt to fix SamDB test infrastructure (not used in Samba anywhere, only in OpenChange).
      dcerpc-samr: Fix library name.
      wafsamba: Fix include path inheritance from module subsystems.
      s4-waf: Fix build of libldb_ildap against system ldb.
      waf: Fix installation of pidl manapges.
      s4: Fix build when there is a system-provided ldb.
      pidl-waf: Avoid relying on MakeMaker when installing pidl manpages.
      codepages-waf: When built with --with-fhs, install to
      web_server: Don't build wsgi support as python module but rather as
      ldb-samba: Don't build pyldbsamba as python module but rather as subsystem, so as to not delute /usr/lib.
      ldb: Don't build pyldb_util as python module but rather as subsystem, so as to not delute /usr/lib.
      s4: Build more python convenience files as subsystems rather than as python modules.
      s4-waf: Don't include pytalloc when embedding python.
      s4: Don't build a $prefix/lib/libpython.so, as such a library often already exists :-)
      ldbsamba: Build as subsystem to prevent infinite recursion issues.
      wafsamba: Use BUILTIN_LIBRARY() rather than relying on side-effects.
      ldb: Remove dependency on self.
      replace: Avoid hiding symbols when libreplace is builtin, as this
      samba4: Build libreplace as builtin library by default so it doesn't end
      waf: Add missing dependency (so header paths are inherited) on talloc to internal python lib.
      wafsamba: Fix typo: noextenion -> noextension.
      s4-python: Use sys.prefix rather than guessing prefix from current
      dsdb: Make module ops struct for each module public.
      wafsamba: Factor out functions to determine if a bundled library should not or
      dsdb: Use Samba includes so _PUBLIC_ is defined.
      wafsamba: Use convenience function to find out if bundling is necessary.
      wafsamba: Allow manually specifying cflags/ldflags for system libraries.
      dsdb: Fix includes when building against system ldb.
      heimdal/waf: Initial work on making it possible to use the system
      wafsamba: Use octal modes directly rather than constants.
      pydsdb: Move set_schema_from_ldif function to pydsdb from pyglue.
      pydsdb: Move dsdb_set_schema_from_ldb to pydsdb.
      pydsdb: Move write_prefixes_from_schema_to_ldb to pydsdb from pyglue.
      pyglue: Remove unused code.
      pyglue: Trim dependencies.
      python: Remove unnecessary Ldb.set_invocation_id - use SamDB.set_invocation_id instead.
      dsdb_schema_info: Clean up imports, avoid using rpc test case for
      pytdb: Cleanup formatting.
      samba.tests: Provide TestCase and TestSkipped classes (from testtools) for convenience.
      python/passwords: Clean up imports.
      ntacls: Raise TestSkipped rather than writing to stdout.
      samba.tests.samba3: Clean up imports, use new TestCase class.
      pyrpc: Fix reference counting when using secondary connections.
      acl: Clean up formatting, use samba.tests.TestCase.
      python: Use samba.tests.TestCase, make sure base class tearDown and
      s4-python: Remove trivial function, replace by dictionary.
      samdb: Fix formatting, move get_oid_from_attid from Ldb to SamDB.
      Move a few more samdb-specific methods to SamDB, away from Ldb.
      Formatting cleanups; use True/False for booleans, unnecessary backslashes, spacing.
      Move convert_to_openldap onto Schema class.
      Some more formatting fixes, move schema related functions from Ldb to Schema.
      ldb: Remove last import of dsdb.
      ldb: Change LDBSAMBA back to subsystem, update comments, use different
      Remove unnecessary use of transactions.
      Use standard Python syntax, booleans and set()'s where appropriate.
      setnttoken: Remove empty utility.
      s4-python: Remove more unused imports, fix use of sets in upgradehelpers.
      testparm: Convert to Python.
      testparm: Split up functions that do multiple things.
      s4-python: Implement LoadParm.dump().
      s4-python: Add LoadparmService.dump()
      testparm: Fix exit value, install.
      testparm: Fix suppress prompt option.
      pyparam: Allow specifying None as section name to LoadparmContext.get()
      testparm: Simplify default option handling.
      ldb: Add ABI file for use when including ildap in the build.
      pyparam: Support Loadparm.get(p, "global")
      selftest: Use scripted testparm.
      provision: Properly cancel transactions on the secrets ldb.
      testparm: Check netbios name and workgroup characters and length.
      pydsdb: Mark all SamDB and Schema methods that are in pydsdb as
      policy: Add samba.policy.get_gpo_flags binding.
      samba4: Add python bindings for samba.policy.get_gplink_options.
      libpolicy: Fix the build.
      provision: Look for Samba prefix a bit harder.
      Per Andrews request, revert
      pidl/python: Increment reference counter on Py_None to prevent us from
      pidl/python: Make sure to always increment reference counter when using
      selftest: Store the output of the last test run in st/subunit.
      selftest: Clarify generation of idlist option.
      smbtorture: Fix loading of --load-list.
      Move UCS2 macros to common code
      selftest: Remove accidentally committed dummy test.
      Use DocBook DTD rather than Samba one, as no Samba-specific things are
      wafsamba: fix CHECK_XSLTPROC_MANPAGES().
      Avoid use of Samba DTD, which requires net access.
      s4: Install testparm to /usr/bin, consistent with old behaviour.
      s4: Only install testparm to /usr/bin/, no longer to /usr/sbin.
      replace: Fix ifndefs for formatting defines.
      subunithelper: Pass along lines as normal output when ignoring them for not containing commands.
      manpages: Avoid using Samba-Team specific DTD, which requires net access
      subunit: Make sure "]" in failure reason ends up on its own line, so the
      pyrpc: Add py_check_dcerpc_type().
      pidl: Factor out generation of interface type name.
      pidl: Keep only a single copy of samba.dcerpc.base.ClientConnection.
      waf: Make shared modules available in the build dir.
      waf: Support aliases in SAMBA_MODULE.
      dsdb: Add missing dependencies for dsdb ldb modules.
      ldb: Add missing aliases for ldb_ildap.
      selftest: Refer to subunit README rather than documenting locally.
      selftest/samba4: Remove references to Samba34.pm, which no longer
      selftest: Remove stop() method, not used anywhere.
      selftest: Don't make printing the log output a side-effect of check_env(), do it manually.
      testr: Fix configuration to use idfile, in case more than a couple of
      testtools: Import latest upstream.
      subunit: Import latest upstream.
      dnspython: Update to latest upstream.
      dsgetinfo: Set modulesdir when using ldb without ldb_wrap
      selftest: Print out unmatched tests when using --load-list.
      selftest/subunit: Parse timestamps generated by upstream subunit.
      selftest: Cope with parentheses in testnames in --load-list.
      s4/selftest: Fix path to include/config.h, set BUILDDIR automatically.
      waf: Use os.makedirs rather than os.mkdir in case parent directories
      wafsamba: Create bin/defaukt/modules if it does not yet exist.
      popt_common: Add missing dependency on libsamba-hostconfig.
      setup: Use standard octal ints rather than harcoding.
      wafsamba: Eliminate sys.path updating if installing to a standard python
      param: Only include param_proto.h for Samba builds, provide those
      subunit: Initial work on using the standard TestResult class.
      subunit: Use standard subunit test protocol client, use standard name for startTest.
      subunit: Use subunit standard functions for handling time and progress.
      subunit: Pass TestCase objects to startTest rather than test name strings.
      subunit: Use standard addError method implementation.
      subunit: Use standard functions for addSuccess, addExpectedFail,
      subunit: Remove unused methods.
      subunit: Use standard subunit functions for reproducing subunit streams.
      selftest: Report times in milliseconds rather than seconds.
      subunit.pm: Pass through milliseconds in time reports.
      subunit.pm: Simplify subunit handling in perl.
      selftest: Remove testsuite parsing.
      subunit.pm: Remove output_msg/control_msg functions.
      subunit.pm: Fold Subunit::Filter into Subunit, trim further.
      param: Add prototype for lpcfg_private_dir(), used by openchange.
      subunit: Use RemoteError when passing errors to upstream subunit.
      nss_winbind: Fix soname.
      selftest: If setting up environment fails, mark testsuites that use it as
      selftest: Error out rather than die() when setting up an environment
      waf: work around circular dependency finder erroneously removing dependency of gensec on dcerpc.
      rpc_server: Remove unnecessary dependency on server modules, build
      subunit: Re-add outputmsg.
      s3-selftest: Move Samba3-specific script to source3/selftest.
      s3: Add convenience make target buildfarm-test.
      pytdb: Make filename argument optional.
      testtools: Import newer upstream revision.
      Update WHATSNEW.txt.
      Update version info.
      s4-mkrelease: Update to use waf build.
      wafsamba: Fix parsing of IS_GIT_VERSION.
      wafsamba: Fix docstring for DIST_BLACKLIST.
      s4-mkrelease: Update for waf.
      Merge branch 'v4-0-stable' into newmaster
      Open alpha 14.
      s4-pidl-python: use correct talloc pointer when allocating subobjects.
      pidl: Fix segfault when accessing unicode objects.
      testrpc: Convert from a single unit test to a simple test script, be
      s4-pild-python: Fix assignments - even though we reference the mem_ctx
      pytestrpc: Be more verbose.
      rpc_talloc: Update test now that we create fewer references.
      pidl/python: Allow passing in UTF8 string objects as well as unicode
      pytalloc: Add default compare function.
      s4: Add convenience script for building and landing a tree in the
      s4: Add script for landing a branch through a remote server, such as sn.
      pymessaging: Remove unused older python irpc bindings.
      s4-land: Print commands that are being run.
      strlist: Make test names unique.
      selftest: Fix generation of test id file.
      torture: Fix running individual tests.
      s4-test: Allow running individual tests for smbtorture tests.
      torture: Remove active_testname variable.
      s4-selftest: Use loadlist in a couple more places.
      selftest: Support running individual tests using idlists, for testsuites that support them.
      selftest: Use idlist testing for python tests.
      selftest: Fix run for systems without testtools installed.
      s4-selftest: Move more tests to scripting/python, simplifies running of tests.
      selftest: Let tests add prefix to tests by themselve.
      s4/selftest: Simplify running of python tests.
      ndrdump: Move blackbox test to standard python namespace.
      subunithelper: Cope with errors outside of testsuites.
      pygensec: Implement start_mech_by_name().
      s4-param: Check type when converting python object to lp_ctx, fix some
      s3-selftest: Fix test prefixes in subunit output.
      s4-param: Fix more memory leaks, invalid memory context.
      ldb: Depend directly on replace, fixes the build on systems with
      ldb: Use waf as default build system.
      dsdb: Use short path for ldb_handlers.h, in case ldb is installed in the
      selftest: Remove unused --analyse argument.
      selftest: Add prefix on a higher level, so it can be more easily
      s4-selftest: Cleanup formatting.
      selftest: Fix use of --load-list.
      s4-selftest: Add environment name to test suite manually, so we can
      s4-selftest: For idlist tests, leave out environment name.
      selftest: Fix idlist running.
      selftest: Fix testsuite counts when running only a limited number of
      smbtorture: Use subunit C library.
      torture: Use system subunit library if available.
      smbtorture: Report times.
      s4-selftest: Fix prefixes for ldb tests - they're samba4 specific.
      s4-selftest: Move samba3sam test to standard python directory.
      s4-selftest: Move credentials tests to standard python directory.
      torture: Remove unused variable.
      selftest: Use variable for clientdir.
      selftest: Pass prefix to setup_env function.
      tevent: Switch to using waf by default.
      tevent: Add infrastructure for python bindings.
      selftest: If a testsuite is killed by a signal, let selftest die.
      pytevent: Fill in client side fnuctions.
      pytevent: Add more tests.
      Check in configure/Makefile for those projects that have waf as primary build system.
      pyteven: Fix build warnings.
      Add dedicated exception for immediate failure in filter-subunit, don't raise it on known exceptions.
      selftest: Abort early on SIGPIPE.
      format-subunit: Display number of failed tests even if there are no
      ldb: Bump version because of addition of ldb_req_location.
      ldb: Remove samba-specific targets from Makefile.
      ldb: Update autogen-waf.sh to no longer overwrite existing files.
      tevent: Don't update Makefile/configure files.
      tevent: Remove make targets that are not relevant for tevent.
      ldb/tevent: Fix detection of waf paths.
      samba4: Don't update Makefile/configure from autogen.sh.
      ldb: Fix path to alternative buildtools.
      testtools: Import new upstream snapshot.
      subunit: Import new upstream snapshot (adds subunit_progress())
      selftest: Avoid accessing deprecated BaseException.message.
      selftest: Eliminate some unnecessary spaces.
      s4-selftest: Add some more comments to skip file.
      s4-selftest: Convert tests.sh to Python.
      s4-selftest: Finish conversion of selftest.sh to Python.
      s4-selftest: Normalize paths.
      s4-selftest: Remove unnecessary PYTHONPATH overrides.
      delete_object: Remove unnecessary pass calls.
      selftest: Let selftest provide the tempdir, rather than creating it as sideeffect of tests.py.
      pidl: Fix handling of typedefs of typedefs.
      autobuild: Simplify find_git_root.
      autobuild: Remove autogen step for projects that have checked in configure.
      autobuild: Add --daemon option.
      Remove land.py - it's been obsoleted by autobuild.py.
      autobuild-remote: Support autobuild.py rather than land.py.
      autobuild: Add --always-email option.
      autobuild: Provide more information about build sequence, stage name and output mime type (all plain text for now).
      s4: Add 'subunit-test' make target.
      s3-configure: Require at least version 1.2.6 of external TDB, which has
      s3: Add subunit-test target.
      s3-selftest: fix prefix in subunit output.
      autobuild: Output test results in subunit.
      autobuild: Avoid unnecessary chdir() calls.
      Split land.py back out of autobuild.py, so I can change it without
      land: Avoid more uses of chdir().
      land: Move more functionality onto builder.
      land: Add --repository option.
      land-remote: Use --repository option.
      land-remote: Checkout repository first.
      land: Avoid running things in a shell where not necessary.
      Several smaller cleanups, use python coding style.
      land: Add --fail-slowly option.
      land: Only pass shell=True if necessary.
      land: Move stage building into a separate class so we can have subclasses (e.g. subunit-specific).
      land: Cherry-pick tridges changes to autobuild.
      land: Add separate treestagebuilder for subunit.
      selftest: Move plain text formatter to subunithelper.
      format-subunit: Split out summary file writing.
      subunithelper: Make filter options optional.
      land: Implement --fail-immediately directly in Python, provide subunit file.
      subunithelper: Fix format time.
      subunithelper: Remove accidentally added line.
      pytdb: Include Python.h first to prevent warning.
      land-remote: Pass extra arguments on to land.
      land-remote: Run remote land command unbuffered.
      land: Add --revision argument.
      land: Attach test output files to result emails.
      land: Some cosmetic fixes.
      land: Attach tarball of logs rather than individual logs to keep the
      land: Force always emailing when there is no other mechanism of progress reporting.
      heimdal: convert some subsystems to libraries, consistent with upstream heimdal.
      heimdal: Convert hx509 to library.
      pidl: simplify some generated code.
      pidl: Allow longs for bitmasks.
      land: Inherit EMAIL from the environment.
      wafsamba: Move heimdal library code to heimdal_build.
      heimdal: Move autoproto code to heimdal_build.
      heimdal: Move SAMBA_ERRTABLE to heimdal_build.
      heimdal: Move asn1 list to heimdal_build.
      wafsamba: Some reformatting.
      registry: Make a two more functions static.
      pytdb: Add __version__ attribute.
      waf: Add function for checking for system python modules.
      tdb: Support using system pytdb.
      tdb: Only use system pytdb when using system tdb.
      land-remote: Announce what address email is going to be sent to.
      land-remote: Force running in foreground when pushing to master.
      heimdal: Support using system com_err.
      compile_et: Support using system compile_et.
      heimdal: Fix names of roken, wind libraries.
      heimdal: Fix library name of gssapi.
      heimdal: Fix library name of heimntlm.
      heimdal: Fix name of 'hdb'.
      heimdal: Fix name of kdc library.
      heimdal: Fix name of hx509 library.
      heimdal-build: Add custom heimdal generator.
      heimdal-build: Add heimdal specific subsystem function.
      heimdal-build: Implement HEIMDAL_LIBRARY with fewer wafsamba functions.
      heimdal-build: Add HEIMDAL_BINARY convenience method.
      heimdal-build: Simplify calls to convenience functions.
      ldb: Refer to ldb(3), not ldb(7).
      Add missing dependencies for com_err.
      land: Simplify retry checker.
      land: Fix failure detection.
      land: Print out failed test in case of subunit failures.
      land: Fix stage description during failure.
      heimdal-build: Require com_err library to provide com_right_r function.
      land: Use temp dir if /memdisk is not available.
      talloc: Fix #include line in manpage.
      heimdal_build: Fix dependencies for hx509.
      wafsamba: Clarify needs_python argument name, use pyembed/pyext where
      wafsamba: Fix init function when building modules as shared objects.
      tls: add missing dependency on util_tevent.
      samdb: Handle schema setup in samdb, not in more generic ldbsamba.
      samdb: Add flags argument to samdb_connect().
      ldb-samba: Add convenience function for doing a Samba-style LDB init.
      ldb-samba: Split up ldb_wrap_connect() a bit.
      ldb-samba: Add ldb_wrap_add, remove last schema reference from ldb_wrap.
      cldapd: Add missing dependency on ldbsamba.
      secrets: Add missing dependency on ldbsamba.
      idmap: Add missing dependency on ldbsamba.
      gensec: Support building without any linked-in modules.
      dsdb: Move attr_in_list to SAMDB_COMMON to avoid circular dependency between SAMDB_COMMON and DSDB_MODULE_HELPERS.
      ldb-samba: Rename samdb_relative_path to ldb_relative_path, as it's not samdb-specific.
      dsdb: add missing dependency on samba_socket.
      util: Link headers to correct subsystem, fix formatting.
      samdb: Remove dependency on unknown subsystem.
      rpc_ndr_netlogon: Add missing dependency on tevent.
      dsdb modules: Split ridalloc out of common helpers, because of dependency loops.
      libcli-auth: Remove unnecessary dependency on libsamba-hostconfig.
      libsecurity-common: Add missing dependency on libndr.
      ntvfs_ipc: add missing dependency on dcerpc_common.
      dsdb/schema: Move some dsdb_dn functions that are schema-specific.
      librpc: Remove unnecessary dependency on libsamba-hostconfig.
      smb2: Add missing dependency on NDR_DFSBLOBS.
      smb_server: Split core out of service, since the service can be built as a .so against which we can't link.
      kdc: Add missing dependency on samba_gensec_server.
      ldap_server: Add missing dependency on gensec_server_start.
      torture: Link against rpc server itself, not service module. (against which we can't link).
      wafsamba: Support setting pyembed on libraries.
      torture_auth: Add missing dependency on gensec_ntlmssp.
      dsdb/modules: Split up helpers a bit to prevent recursive dependencies.
      wafsamba: Fix handling of pyembed/pyext.
      service: Add missing dependency on process_model.
      server: Add missing dependency on schannel database.
      credentials: Move code that doesn't need any external dependencies into
      auth: Remove unnecessary dependencies, fix formatting.
      kerberos_util: Put into separate subsystem.
      credentials: Split up into several subsystems.
      credentials: Fix the build.
      util: Fix installation path of tevent_ntstatus.h, tevent_unix.h (bug 7720).
      credentials: Avoid unnecessary includes.
      popt_credentials: Implement pending machine account manually, rather than through credentials.
      samdb_common, ntlm: Add missing dependency on libsamba-hostconfig.
      ldb: Build ildap module as shared object.
      land-remote: Fix --fail-slowly.
      wins_ldb: Build as shared library.
      dsdb: Build some more modules as .so files.
      selftest: Avoid check_call(), use call() instead. This should fix
      dsdb: Build some more modules as shared object files.
      dsdb: Build some more modules as shared objects.
      dsdb: Build more modules as shared objects.
      wafsamba: Warn about circular dependencies between libraries.
      torture/becomedc: Add test for global schema, use samdb_connect().
      samdb: Build as library.
      dsdb/schema_load: Build as shared object.
      dsdb/schema_data: Build as shared object.
      wafsamba: Don't allow circular dependencies involving libraries by
      wafsamba/developer: Forbid shared objects with unresolved symbols, if
      ldb: Only build LIBLDB_MAIN when building ldb itself.
      samdb: Set soname.
      heimdal: Add sonames.
      heimdal: Add soname for com_err.
      heimdal_build: Allow using system wind.
      heimdal Add missing dependencies on wind.
      heimdal_build: Use existing functions for finding system libraries.
      heimdal: Support using system roken.
      heimdal_build: Put version objects in a separate subsystem.
      heimdal_build: Fix build with system roken.
      heimdal_build: Support using system hx509 library when explicitly
      heimdal_build: Initial work on supporting an external heimdal library.
      heimdal_build: Add comment with stub for finding the system libtommath.
      heimdal_build: Skip some hx509 code when using system hx509.
      heimdal_build: Support using system asn1 library.
      heimdal_build: Remove ignored argument ldflags from HEIMDAL_BINARY().
      heimdal_build: Fix detection of system roken library.
      heimdal: Simplify handling of ../heimdal prefixes in HEIMDAL_SUBSYSTEM.
      heimdal: Add variables for source files.
      heimdal: Call HEIMDAL_AUTOPROTO_PRIVATE() manually.
      heimdal: Call HEIMDAL_AUTOPROTO() manually.
      heimdal: Add convenience functions for finding heimdal paths.
      heimdal: Allow leaving off ../heimdal prefix for source files.
      heimdal: Allow leaving off ../heimdal prefix for proto headers.
      heimdal: Allow leaving off prefix for HEIMDAL_ASN1().
      heimdal: Allow leaving off prefix to HEIMDAL_ERRTABLE().
      heimdal: Leave off ../heimdal prefix to HEIMDAL_BINARY().
      heimdal: Allow leaving off prefix from asn1 option_file.
      heimdal: Remove some unused arguments from HEIMDAL_SUBSYSTEM().
      heimdal: Add local simpler copy of to_list().
      tdb: Bump version to 1.2.7 after addition of pytdb.__version__.
      dcerpc_samr: Fix -l arguments for dcerpc_samr and dcerpc_atsvc.
      dsdb: Module aliases require to be prefixed with the subsystem name.
      heimdal: Attempt to fix path of hdb_asn1.h
      heimdal_build: Add dependency on com_err to HEIMDAL_CONFIG.
      tdb: Set _PUBLIC_ in C file rather than header files (Debian bug 600898)
      Lowercase socket_wrapper name.
      tdb: Revert re-addition of tdb_set_logging_function.
      ldb: Install pyldb-util as public library.
      ldb: Install pkg-config file for pyldb.
      ldb: Support using system pyldb library.
      waf: Rename some BUNDLED_ functios to PRIVATE_.
      s4: Rename LIBNETIF to libnetif.
      s4: Rename NDR_TABLE to ndr_table.
      s4: Rename LIBEVENTS to libevents.
      s4: Rename WRAP_XATTR to wrap_xattr.
      s4: Rename UID_WRAPPER to uid_wrapper.
      s4: Rename NSS_WRAPPER to nss_wrapper.
      waf: Rename LIBWINBIND-CLIENT to libwinbind-client
      s4: Rename SAMDB_COMMON to samdb_common.
      s4: Rename LIBSECURITY{_SESSION,} to libsecurity{_session,}
      s4: Rename LIBSAMBA-* to libsamba-*
      waf: Lowercase several library names.
      s4: Rename SMBPASSWD to smbpasswd.
      s4: Rename DB_GLUE to db_glue.
      s4: Rename WBCLIENT to wbclient.
      s4: Rename LIBCLI_LDAP to libcli_ldap.
      s4: Rename LIBCLI_NBT -> cli_nbt.
      ldb: Rename pyldb pkg-config file to pyldb-util, to avoid confusion with
      torture/local: Depend on NSS_WRAPPER, even if it wasn't enabled.
      s4: Drop duplicate 'lib' prefix for private libraries.
      dcerpc_dns: Change back to subsystem for the moment.
      waf: build private libraries with so names.
      torture_local: Add missing dependency on socket_wrapper.
      waf: Remove lib prefix from libraries manually.
      waf: Don't auto-lowercase library names.
      waf: Stop automaticaly changing dashes to underscores in library names.
      waf: Only specify vnum for non-private libraries.
      talloc: Move pytalloc to lib/talloc.
      talloc: Avoid dependency on unknown EXT_LIB_PYTHON.
      waf: Remove unused EXT_LIB_PYTHON.
      talloc: Install pytalloc-util as system library.
      talloc: change pytalloc-util to be a public library.
      wafsamba: Fix soname for standalone private libraries.
      talloc: Fix manual pages in standalone build.
      talloc.3: Remove documentation for deprecated talloc_append_string,
      replace: Only build replace-test in standalone build.
      replace: Avoid autoproto as it breaks standalone builds.
      tevent: Drop autoconf-based build system for standalone build.
      ldb: Drop autoconf-based build system.
      replace: Fix formatting.
      s4: Remove the old perl/m4/make/mk-based build system.
      talloc: Switch over to using waf as the default build system for the standalone build.
      replace: Build using waf by default.
      replace: Look harder for waf.
      talloc: Look harder for waf.
      replace/talloc: Avoid automatically pulling in new configure/Makefile,
      tdb: Use waf by default.
      talloc: Install pytalloc.h.
      filter-subunit: Add --fail-on-empty argument.
      pydsdb: Import testtools before subunit for those that don't have
      possibleinferiors: Fix formatting.
      possibleinferiors: Report subunit.
      urgent_replication: Fix formatting
      samba: Make in_source_tree() public.
      provision: Look for in source setup data first, in case an older version
      selftest/tests.py: Fix typos.
      urgent_replication: Fix syntax error.
      selftest: Allow some tests to output empty subunit data.
      urgent_replication: forbid empty subunit output.
      selftest: Allow some tests to output empty subunit data.
      samba_utils: Use LIBDIR rather than assuming it is set to $prefix/lib.
      Add --with-privatelibdir build option.
      Add --disable-rpath-private-install flag.
      wafsamba: Support expanding variables in LIBDIR/PRIVATELIBDIR variables.
      wafsamba: Drop private library prefix when installing private libraries
      wafsamba: Use project name variable rather than hardcoding 'samba4'.
      waf: Put private libraries in a separate directory when building.
      talloc: rename pytalloc.c to pytalloc_util.c
      talloc: Add python talloc module, move convenience functions to it.
      pytalloc: Make some arguments optional.
      samdb: Make private (at least for the moment).
      samdb: Lowercase library name.
      ldbsamba: Lowercase library name.
      credentials: Lowercase library name,
      Lowercase DNS_UPDATE_SRV name.
      s4-waf: Only enable various wrappers if they're actually used.
      heimdal_build: Add missing dependency on replace, necessary because replace.h is included.
      socket_wrapper: Only add as global dependency when enabled.
      unix_privs: Add missing dependency on libreplace.
      torture: Only add in tests for socket_wrapper/nss_wrapper when they have been enabled.
      wafsamba: Support make dist from bzr checkout.
      sambaversion.py: Some cleanups, make less git-specific.
      Put git tree finding into a separate function.
      samba_version: Cope with building snapshots in directories without git checkout.
      samba_version: Support retrieving snapshot identity from bzr.
      samba_version: When working from git checkout, display git revision SHA1 rather
      s4: Remove obsolete mkversion.sh
      s3: Rename GIT_COMMIT_{TIME,DATE} to COMMIT_{TIME,DATE}.
      waf/samba_version: Support integer defines.
      samba_version: Simplify dirty tree detection.
      samba_version: Make COMMIT_IS_CLEAN an int rather than a string.
      waf/samba_version: Simplify git show command.
      Don't build ldb tools when there is a system provided ldb.
      Re-enable ldb-cmdline for the moment, as it is used by oLschema2ldif.
      Add myself as maintainer for pytevent, pytalloc, pytdb and pyldb.
      Build wrepl server as service by default.
      winbind: Build as shared module.
      kcc/drepl: Build as service.
      web_server: Build as module.
      s4/dns: Build as shared module.
      auth/ntlm: Use name consistent with other service names.
      kdc: Build as shared module by default.
      cldap: Build as shared module.
      s4: Build ldap and samba3_smb services as shared modules.
      nbtd: Build service as shared module.
      heimdal_base: Add missing dependency on replace.
      smb_server: Build as shared module.
      heimdal_base: Fix include path so heim_threads.h can be found.
      subunithelper: Exit with 1 if more than zero testsuites failed or
      selftest: Even if setting up an environment failed, the next tests may
      selftest: When running on the buildfarm, pipe everything through
      service_ldap, service_smb: Lowercase output file names.
      pyldb: Fix broken test.
      selftest: Allow using ldb* utilities from system.
      blackbox.ldb: Support using system ldbsearch.
      show_test_time: Move to root scripting directory as it's useful for s3
      samba.tests: Fix formatting.
      Makefile: Add rule for pydoctor.
      s4-python: Fix formatting of docstrings for the purpose of pydoctor.
      samba.provision: Add package with provision and backend modules.
      samba.provision: Fix setup_path.
      s4-selftest: Ignore broken pipe error from grep.
      chgtdcpass: Fix program name in usage message.
      samba.getopt: Fix missing import of sys.
      samba.hostconfig: Move samba.shares into samba.hostconfig.
      samba.upgradehelpers: Simplify code a bit.
      s4-python: Some reformatting for the purpose of pydoctor.
      samba.tests.hostconfig: Fix import.
      samdb: Build as public library.
      samba_dist: Fix dist for subprojects.
      wafsamba: Only use private library rpath when linking against private
      wafsamba: Fix indentation.
      talloc: Add talloc object.
      pidl: Base new objects off of talloc object.
      pytalloc: Add convenience function for checking if something is a talloc
      pidl: Allow more flexibility importing modules using convenience function.
      pidl/python: Allow import of talloc, even though it doesn't live in the
      pytalloc: Expose PyTalloc_GetObjectType
      pycredentials: Use talloc.Object.
      pygensec: Use talloc.Object.
      pyauth: Use talloc.Object.
      pyregistry: Use talloc.Object.
      pyparam: Use talloc.Object.
      pytalloc: Make py_talloc_default_repr private (now exposed by talloc.Object).
      pytalloc: Make py_talloc_dealloc private.
      pytalloc: Make py_talloc_default_cmp private.
      pygensec: Fix initialization.
      talloc: Bump version number after pytalloc changes.
      wafsamba: Override GIT_DIR without using putenv.
      wafsamba: Only include versioned files when building tarball from bzr.
      s4-python: Add some more module docstrings.
      s4-python: Add more module docstrings.
      pytalloc: Add docstring for talloc.Object.
      ldb: bump version number after introduction of new constant.
      selftest: Document --testenv in --help output, remove documentation for
      selftest: add --list option.
      testtools: Import new upstream snapshot.
      subunit: Update to newer upstream snapshot.
      dnspython: Update to newer upstream snapshot.
      selftest: Rename $LIST to $LISTOPT for consistency with testrepository.
      subunitrun: Support --list.
      selftest: Allow discovering tests in pure python testsuites.
      s4-selftest: Add convenience function for running testsuites using
      selftest: Check exit code when listing tests.
      smbtorture: Rename --list to --list-suites, add stub --list.
      selftest: Make sure system subunit.run has TestProgram.
      s4-python: Split up ensure_external_module.
      s4-python: Fix use of bundled modules.
      s4-dist: Remove no longer existing files from blacklist (fixes 'make
      subunitrun: Remove global subunit module when reimporting from a
      subunitrun: Extend hack to cope with older system subunit run installs.
      s4-python: Add convenience function for forcibly importing bundled
      subunitrun: Use unittest.TestProgram if subunit.TestProgram is not
      talloc: Add ability to generate Python docs using pydoctor.
      s4-smbtorture: Make test names lowercase and dot-separated.
      smbtorture: Implement --list argument.
      smbtorture: Default to listing all tests if no prefix was specified.
      filter-subunit: Add --list argument.
      selftest: Support multiple instances of $LISTOPT.
      selftest-s4: Support listing smbtorture4 tests.
      Move get_loadparm() and get_credentials() to samba.tests.TestCase.
      join: Properly cancel transaction on exceptions.
      ldb: Build modules as .so files.
      ldb: Bump API after symbol changes.
      heimdal_build: Simplify library handling.
      Simplify link installation.
      wafsamba: Move version script handling out of SAMBA_LIBRARY.
      wafsamba: Don't build vscript for modules.
      heimdal_build: Simplify version_script handling.
      wafsamba: Specify full vscript path so non-autogenerated files are possible, too.
      heimdal_build: Add version-script for com_err.
      heimdal_build: Add version-script for roken.
      heimdal: Add version script file for hcrypto (unused so far, as hcrypto still needs to be made a proper library).
      heimdal_build: Add version-script for ntlm.
      heimdal_build: Add version-script for wind.
      heimdal_build: Add version-script for kdc.
      heimdal_build: Add version-script for hdb.
      heimdal_build: Add version-script for asn1.
      heimdal_build: Add version-script for gssapi.
      heimdal_build: Add version-script for krb5.
      heimdal_build: Add version-script for heimdal_base, hx509 and hcrypto. Convert hbase and hcrypto to libraries.
      heimdal_build: Simplify HEIMDAL_LIBRARY - version_script files are now taken from upstream rather than generated.
      wafsamba: Use abi_match in version script files.
      Add bzrignore symlink.
      pidl: Use system pytalloc if possible.
      ldb: Rename two exported functions so they match abi_match.
      ldb: Add prototype for ldb_init_module.
      ldb: Rename last instance of save_controls -> ldb_save_controls.
      ldb_map: Fix prefix for map functions.
      ldb: Rename controls_except_specified -> ldb_controls_except_specified.
      pidl: Add prototype for init function in pidl-generated Python bindings.
      pyglue: Add prototype for init function.
      pyrpc: Add prototype for init function.
      dcesrv_srvsvc: Use constants.
      ldb: Bump version after renaming some public symbols which didn't have a
      heimdal: Fix build if using system roken.
      testtools: Merge in new upstream.
      dnspython: Merge in new upstream.
      ldb: Add ldb.Message.add and ldb.Message.elements.
      pytdb: Make PyTdb variable static.
      tdb: Bump version number after symbol versioning changes.
      tevent: Bump version number after symbol versioning changes.
      talloc: Remove reference to nonexistant configure.developer in autogen.sh.
      tevent: Remove reference to nonexistant configure.developer from autogen.sh.
      wafsamba: Allow newer or the same python module versions to be installed,
      heimdal_build: Allow using system hbase and hcrypto.
      heimdal_build: When using system hbase/hcrypto, don't compile our own versions.
      heimdal_build: Use consistent name for heimbase.
      MAINTAINERS: List tridge and me as maintainers of wafsamba and the wscripts.
      MAINTAINERS: add rusty as the tdb maintainer.
      MAINTAINERS: List rusty and tridge as maintainers for talloc.
      tdb: Remove autotools support.
      talloc: remove autotools support.
      wafsamba: Fix handling of nick name in VERSION.
      WHATSNEW: Fix typo, indentation.
      update whatsnew for alpha14.
      mkrelease: Simplify further.
      Release alpha14.
      Start on alpha 15.
      talloc/tdb/tevent: Remove obsolete signatures files.
      wmi: Remove unnecessary noprint statements.
      s4-python: Properly call PyObject_Del from all destructors.
      s4-python: Add more prototypes.
      s4-python: Only set BASETYPE flag if subclassing is supported.
      heimdal_build: Look for asn1_compile (but by default, don't use it).
      heimdal_build: Allow using system heimntlm.
      heimdal_build: Allow using system krb5.
      heimdal_build: Add conditionals for all libraries.
      heimdal_build: Support using system hdb and kdc libraries.
      heimdal_build: Support using system gssapi library.
      heimdal_build: Add missing dependencies when building with system heimdal.
      Use fail_on_null.
      Fix some formatting.
      s4-python: Properly call PyObject_Del from all destructors.
      ldb: Remove duplicate definition of check_special, use PyObject_New.
      pyldb: Use pytalloc-util.
      s4-python: Add missing prototypes.
      Make all functions in pyldb.c private, as they can't be used anyway.
      pyldb: Some more OOM checks.
      pyldb: Fix memory context, add more OOM checks.
      Revert broken destructor changes.
      pyldb: Always return -1, 0, or 1 in tp_compare functions.
      Use TestCase.get_credentials() where possible.
      pyldb: Fix memory reference error.
      remove unnecessary use of pass.
      talloc: Clarify error message on access after free.
      s4-python: Allow setting TEST_DEBUG_LEVEL to override debug level for tests.
      upgradeprovision: Fix use of dict.get().
      tdbrestore: Update to GPLv3+, remove old FSF address.
      Remove unused imports.
      Use new style objects.
      acl tests: Fix import.
      param: Load web service by default.
      web_server: Avoid references to swat. Load samba.web_server instead.
      web_server: Fix initialization.
      web_server: Display trivial placeholder page if SWAT could not be found.
      remove unnecessary use of pass.
      Show text output messages when interfacing with bzr.
      s4-waf: Only show minversion when there was a minimum version specified.
      s4-waf: Skip header-not-found cache if a library is specified, as it may provide
      pysecurity: Add missing dependency on pytalloc-util.
      dlinklist: Change license to LGPLv3+ (checked with tridge).
      provision: Add missing dependency on pyldb-util.
      ldb-samba: Add missing dependency on pyldb-util.
      s4-version: Fix version finding for bzr branches.
      Fix missing dependency on libreplace.
      Make lpcfg_server_role public.
      Use <tevent.h> so the system tevent gets included, if enabled.
      tdr: Inline proto header to allow tdr.h to be used as it's a public header.
      Use <tdb.h> to include tdb, so the system include file gets used when building against
      tdb: Use <tdb.h> to include tdb so system headers are found when building against system tdb.
      samba_abi: Generate vscript entries even for ABI versions that didn't introduce
      tevent: Add lib/tevent as include directory.
      ntvfs: Add some missing dependencies on tevent/events.
      Fix some types
      Sort by release component integer values rather than using standard string
      samba_abi: Also sort ABI files  properly so symbols end up in the right version.
      Merge new lorikeet heimdal, revision 85ed7247f515770c73b1f1ced1739f6ce19d75d2
      source4/torture/raw: Fix prototypes for all functions.
      source4/torture/basic: Fix prototypes for all functions.
      source4/ntvfs/posix: Fix prototypes for all functions.
      source4/smbd: Fix prototypes for all functions.
      source4/dsdb/samdb: Fix prototypes for all functions.
      source4/rpc_server: Fix prototypes for all functions.
      source4/ntvfs: Fix prototypes for all functions.
      source4/kdc: Fix prototypes for all functions.
      source4/torture/ndr: Fix prototypes for all functions.
      source4/winbind: Fix prototypes for all functions.
      source4/auth/gensec: Fix prototypes for all functions.
      source4/auth/ntlm: Fix prototypes for all functions.
      source4/param: Fix prototypes for all functions.
      libreplace: Fix prototypes for all functions.
      source4/auth: Fix prototypes for all functions.
      source4/torture: Fix prototypes for all functions.
      source4/lib: Fix prototypes for all functions.
      source4/: Fix prototypes for all functions in various subsystems.
      libcli/: Fix prototypes for all functions.
      lib/: Fix prototypes for functions.
      pidl: Fix prototype for server init functions.
      lib/registry/tests: Fix prototypes.
      rpc_server/remote: Add missing prototype.
      lib/replace/test: Add missing include for prototype.
      use system heimdal headers if possible, fix missing dependencies on hx509 and krb5 libraries.
      Fix compilation without external heimdal.
      Avoid uppercasing server role in error message.
      Remove broken link.
      Fix release script to cope with moved Samba 4 build tools.
      Fix license info for talloc in manpage.
      Support the 'PYTHON' environment variable.
      Add check for krb5_free_unparsed_name, when using external heimdal.
      Add missing dependency on com_err.
      Fix case of libUTIL_LDB.
      Update WHATSNEW4.txt.
      Release alpha15.
      Fix alpha version - we're now working on alpha16.
      Remove obsolete BUGS file.
      enablerecyclebin: Remove unused imports, fix formatting.
      mischema: Remove unused import.
      smbstatus: PEP8: Use spaces rather than tabs.
      rpcclient: PEP8: Use spaces rather than tabs.
      rebuildexetendeddn: PEP8: Use spaces rather than tabs.
      scripting/bin: Some formatting fixes.
      update TODO: net has been renamed to samba-tool.
      README.Coding: Mention that PEP8 is the standard for Python code.
      remove the fedora package, and point at the repository instead
      wafsamba: Properly lock object store when retrieving version through Bazaar.
      charset: Make name lowercase everywhere.
      cli_raw: Make name lowercase.
      cli_spools: Lowercase name.
      cli_cldap: Lowercase name.
      cli_smb_common: Lowercase name.
      cli_composite: Lowercase name.
      policy: Rename to samba-policy to avoid name space clashes.
      libsamba-util: Build in libbitmap.
      shares: Remove dependencies on share modules.
      s3-build: Only define ldb3 when not in standalone build.
      talloc: Support PYTHON environment variable.
      heimdal_build: Use krb5-config to find heimdal include directory and library path, rather than hardcoding.
      remove unnecessary dependency on 'events' from ldb modules.
      acl: Improve error message when setting acls fails.
      dbcheck: Cancel transaction if operation fails.
      samba-tool: Don't install -c version, which is now deprecated.
      pyldb: Consistently use pyldb_ prefix.
      pyldb: Generate ABI file.
      sd_utils: Fix some formatting, add module docstring.
      pytalloc: Use consistent prefix for functions, add ABI file.
      pytalloc: Regenerate ABI file.
      Use public pytalloc header file.
      Use public pytalloc header file.
      smb_composite: Integrate prototypes in header file.
      smb_composite: Remove unnecessary include of signing header.
      libcliraw: Install request.h and signing.h.
      smb_common: Install some more headers.
      libcliraw: Install more header files.
      cli-raw: Add public libsmbclient-raw library.
      smb_common: Fix include paths.
      credentials: Rename library to samba-credentials to avoid name clashes.
      samba-credentials: Add pkg-config file.
      wbclient: Add pkg-config file.
      wafsamba: Require public libraries to have a pc file specified, or explicitly specified that they don't need one.
      s4/libpolicy: Install header file.
      samdb: Install header file.
      gensec: Install header file.
      dcerpc-binding: Install header file.
      wafsamba: Require public libraries to have headers.
      tdb: Install pkg-config file.
      wafsamba: Only install .pc files if libraries are public.
      talloc: Fix talloc-compat pc files/headers.
      testtools: Update to latest upstream snapshot.
      subunit: Update to latest upstream snapshot.
      dnspython: Update to latest upstream snapshot.
      samba-tool: Avoid use of "except .. as" construction introduced in python2.6.
      drs_utils.py: Remove tab characters.
      delegation.py: Remove tab characters.
      domain.py: Remove tab characters.
      drs.py: Remove tab characters.
      group.py: Remove tab characters.
      testparm.py: Use standard formatting of header.
      Add samba.tests.source, which checks Python files for copyright lines, license headers and invalid characters (dos newlines, tabs).
      s4-python: Consistently use spaces rather than tabs, fix headers in several places.
      s4-python: Fix some formatting issues.
      pyldb: Drop unnecessary dependency on pytalloc-util.
      libcliraw: Make smb_raw_write_recv public and include it in a public header.
      Install headers included by smb_common.h.
      smb_unix_ext.h: Protect against multiple inclusion.
      libcli: Install libcli.h.
      testtools: Import new upstream snapshot.
      upgrade: Avoid catching all exceptions, just catch the ones we care about.
      netcmd: Avoid catching all exceptions, avoid using ';' at the end of lines.
      netcmd/domain: Remove unused imports.
      Remove pointless exception catching in tests.
      param: Expose lpcfg_smb_ports, required by winexe.
      s4/param: Expose lpcfg_smb_ports and lpcfg_socket_options, which are both required by winexe.
      samba.getopt: Allow --kerberos=auto, and fix exception name if an unknown
      samba.upgrade: Use list comprehension.
      samba-tool/testparm: Fix handling of command-line options.
      samba-tool/testparm: Fix traceback when checking client name/ip against hosts allowed.
      netcmd: Add errf stream to command instances.
      netcmd: Add Command.get_logger() method.
      samba-tools/testparm: Add really basic unit test, demonstrating how to write unit tests for samba-tool in Python.
      samba.getopt: Refactor parsing of --kerberos argument into separate function.
      samba-tool delegation: Use self.outf, simplify some code.
      samba-tool: Use self.outf in a few more places.
      Update to newer version of subunit.
      python: Remove extra newlines.
      creds: Remove unnecessary calls to credopts.get_credentials.
      samba-tool: Determine long option from docstring.
      CodingStyle: Add some notes about Python 2.4 compatibility.
      samba.netcmd: Reintroduce Command.name.
      samba-tool: Don't require full prog line to be in synopsis.
      samba-tool: Move main command implementation to samba.netcmd.main, so it is accessible by the testsuite.
      samba-tool: Add test to make sure all commands have a synopsis set.
      samba-tool: Add test to make sure all commands have a short description set.
      samba.getopt: Keep exception message when setting a lp option fails.
      samba.getopt: Add some basic tests.
      Simplify handling of user add command.
      samba.common: Fix formatting of docstring (trips up pydoctor).
      s4-python: samba.provision: Require schema to be passed in - code path which handles schema not being specified is broken anyway.
      pyldb: Remove duplicate definition of SYNTAX_DN.
      samba.netcmd: Pass in outf/errf.
      Some formatting fixes, remove unused imports.
      util/time: Remove unnecessary _PUBLIC_ - that's implicit for things in header files.
      util/time: Make some functions explicitly public.
      samba_kcc: Remove unnecessary return statements.
      s4: Install samba-tool and samba_kcc to bin/ rather than sbin/.
      Revert "pyldb: fixed ldb API test"
      Revert "test: added -D option to subunitrun"
      Revert "test: added directory option to planpythontestsuite()"
      selftest: re-implement directory option for planpythontestsuite.
      subunitrun: Add notes about subunitrun being deprecated.
      ldb: Re-apply pyldb fixes from Tridge and Amity, using unittest rather
      selftest: Allow passing arbitrary number of additional python path values.
      selftest: Simplify calling of python tests.
      selftesthelpers: Fix syntax error.
      selftest: Make planoldpythontestsuite arguments consistent with planpythontestsuite.
      selftesthelper: Fix argument order.
      policy/tests: Fix import of TestCase.
      upgrade: use logger.warning.
      waf: Don't link python modules against libpython2.x, consistent with other Python modules.
      pytalloc-util: Don't mark as python extension, use pyembed instead.
      tevent: remove unnecessary enablement.
      ldb: Use pyembed rather than pyext for ldb-util library.
      tevent: Only build pytevent if the system doesn't provide it.
      wafsamba: add CHECK_BUNDLED_SYSTEM_PKG function.
      subunit: Only check for pkg-config file and use proper pkg-config file name.
      talloc: Only check for pkg-config file when checking for system talloc.
      tdb: Only check for pkg-config file when checking for system tdb.
      tevent: Only check for pkg-config file when checking for system tevent.
      ldb: Only check for pkg-config file when checking for system ldb.
      wafsambaa: Support libraries that don't have the same name as their pkg-config file.
      wafsamba: Support allow_undefined_symbols in SAMBA_SUBSYSTEM.
      subunit: Import new upstream snapshot.
      testtools: Import new upstream snapshot.
      pytdb: Shorter description which fits on a single line.
      Revert 9a5ae8edd6d006c078b3af8fdfd84677a63276b1.
      waf: Simplify handling of python modules.
      waf: Factor checking for undefined symbol flags out into separate method.
      Move testr configuration to root.
      selftesthelpers: Cope with empty binary mappings list, simplify handling of perl.
      waf: Fix uselib_store for system libsubunit.
      Remove broken code - these lines use undefined symbols.
      subunitrun: Don't load smb.conf when just listing tests.
      s4-tests: Allow listing tests run for iconv.
      s4-tests: Remove unnecessary py suffix.
      s4-tests: Use plansmbtorturesuite where possible.
      selftesthelpers: Revert perl changes, add comment on why the original code was necessary.
      Fix default value for subunitrun --list.
      samba.tests: Make sure testtools is available before importing it.
      samba.tests.dsdb: Import TestCase from samba.tests.
      selftesthelpers: write warnings to stderr rather than stdout.
      selftest: Don't write subunit output in --list mode.
      selftest: Don't use fancy subunit formatters when generating a test list.
      s4-testlist: Write diagnostic info to stderr, and purely test info to stdout.
      testr: Use test lists.
      s4-tests: Use long option names in test list script, to prevent 'eating' --list argument when e.g.  is not set.
      selftest: Prevent error about unfinished test command when using --list.
      selftest: Don't generate subunit file when writing subunit to stdout.
      Bump ldb version to 1.1.4 after introduction of ldb_module_error.
      Update ldb API sigs.
      selftest: Don't acquire target when --list was specified.
      selftest: Drop broken and unused Kvm target.
      selftest: Fix typo in socket wrapper test.
      tevent: Fix typo in build script.
      Revert making public of the samba-module library.
      selftest: Split out flapping tests into a separate file.
      selftest: Add --flapping argument to filter-subunit.
      selftest: Display unexpected successes and expected failures.
      filter-subunit: Fix default for flapping setting.
      s3-selftest: Don't mark samba3.blackbox.failure.success test as known failing.
      rap netsessiongetinfo apparently *is* provided by samba3, so don't list it in knownfail.
      GetForestTrustInformation is implemented, remove it from knownfail.
      selftest: 'samba4.rpc.netlogon on ncalrpc with seal,padcheck.netlogon.DsrEnumerateDomainTrusts' now succeeds, remove it from the knownfail list.
      Fix typo.
      wafsamba: Use final_libs list to determine if a target needs private libraries, rather than direct dependencies list.
      selftest: Don't mark drsuapi tests as knownfailing.
      wafsamba: Cope with not everything having a final_libs attribute.
      selftest: Re-mark some drsuapi tests as known failing.
      samba4: Remove rpc-handles mixed-shared tests from known failing list.
      knownfail: Ignore failures for drsuapi tests over other transports as well.
      knownfail: LogonControl2Ex works.
      knownfail: samba4.base.createx_access.createx_access works.
      knownfail: Match on end-of-file, not end-of-file-access.
      Remove samba4.raw.oplock.brl4. Bug 7928 has been fixed.
      knownfail: Remove smb2.compound tests, they pass now.
      knownfail: Exclude specific list of SMB2 oplock tests.
      knownfail: re-add createx test.
      knownfail: remove base.maximum_allowed test, as it appears to be passing now.
      knownfail: remove now succeeding local.iconv test.
      knownfail: The resolve async tests work now.
      knownfail: Remove working winbind tests.
      knownfail: Mark some ldap.acl search tests as no longer failing.
      Add stub python module for tevent.
      Install (platform-independent) python scripts to the PYTHONDIR rather than PYTHONARCHDIR.
      tevent: Install python tevent modules.
      Add version attribute for pytevent.
      selftest: Some extra assertions.
      Add tests for srvsvc python interface. Thanks Dhananjay Sathe
      samba.kcc_utils: Fix formatting to match PEP8, make pydoctor happy.
      samba.drs_utils: Use new style classes and exceptions, fix formatting of docstrings to make pydoctor happy.
      pyldb: Add more docstrings.
      testtools: Update to new upstream revision.
      Add pep8.
      Add test for PEP8 - currently all errors are ignored, but we warn about them - and can ratchet if we want to.
      Add 'make pep8' target.
      Revert "Install (platform-independent) python scripts to the PYTHONDIR rather than PYTHONARCHDIR."
      wafsamba: Fix undefined variable name in error message.
      Remove the 'dir' registry backend.
      pyregistry: Remove directory support.
      Include waf as an extracted source directory, rather than as a one-in-a-file script.
      waf: Use git repository.
      replace: use libbsd for strlcat/strlcpy when available.
      replace: Only include C files from which there are actually functions used.
      replace: Add include for bsd/string.h.
      source3/wscript: Expand tabs, to prevent confusion (whitespace is significant in python/waf).
      s3/wscript: Fix dependency on gssapi, necessary when there is no system Kerberos.
      replace: Only add bsd dependency when bsd library was found.
      crypto: Add prototype for main torture functions.
      pyxattr_tdb: Remove pointless check for blob.length < 0.
      torture/libnet: Include prototype headers.
      pysocketwrapper: fix behaviour to be consistent with 'socket.getsockopt'
      loadparm: handle P_SEP in switches (silences warning with clang).
      smb_server: Preserve signedness of string push return value.
      charset/tests: Add prototypes for test functions.
      Revert "samba-tool: moved takes_optiongroups definition to Command base class"
      crypto/md5: Change prototypes to match BSD.
      crypto: Use libbsd md5 header, if available.
      samba-tool: Add optiongroups, necessary for 'samba-tool domain ...'
      samba-tool user password: Re-add support for option groups.
      provision: Make sure target directory is created early.
      regshell: Fix a counter that can actually be non-zero.
      wafsamba: Expand tabs.
      tests/source: Add wafsamba/ files to list of Python files to check.
      gitignore: Ignore waf cache files.
      waf: Add initial unit test for samba_utils.
      wafsamba: Add tests for unique_list, subst_vars_error.
      wafsamba: Add tests for dict_concat.
      wafsamba: Fix some whitespace issues.
      waf: Update to new upstream version.
      pygensec: Fix whitespace.
      samba.web_server: Fix use of whitespace.
      s4-python: Various formatting fixes.
      library_flags: Leave setting of CPPPATH to waf too.
      popt: Use pkg-config file to look for popt.
      Use uselib in CHECK_HEADER.
      waf: Use libraries when building.
      Revert 42d4152ed4255f22ff0718d450f181468d7fb827.
      popt: Check for popt manually as well, not just using pkg-config.
      dcerpc_server: Add 'modulesdir' variable to pkg-config file.
      upgradedns: Rename to less generic name samba_upgradedns.
      provision: Remove unused imports.
      Partially revert 1f0298dd1b1a939cb215e7b474178b217f8347f4
      Factor out sanitize_server_role.
      ntacl: There is no 'secrets database' configuration option.
      'samba-tool gpo': Properly close transaction.
      provision: Properly close ldb transactions.
      provision: Start splitting out provision result reporting from actual provisioning.
      provision: Leave result reporting up to caller.
      provision/tests: Test for phpldapadminconfig path.
      provision: Put adminpass details in ProvisionResult.
      provision: Split out result reporting for backends.
      join: Don't print provision results when they're just noise.
      provision: Factor out determination of new netbios name.
      provision: Add tests for determine_netbios_name.
      provision: Reuse determine_netbios_name.
      provision: Properly close opened files.
      provision/backend: Properly close all opened files.
      provision: Share more code for determine_netbios_name() with samba.valid_netbios_name().
      provision: Raise proper error when shares are missing rather than AssertionError.
      provision: Fix order for error formatting.
      provision: Simplify make_smbconf a bit.
      pyparam: fix formatting.
      provision: Write configuration without help of templates.
      samba.xattr: Split copying of tree with extended attributes out into separate module.
      upgradeprovision: Only backup sysvol directory if it exists.
      samba.xattr: Massively simplify copytree_with_xattrs.
      upgradehelpers: Simplify transaction handling.
      pyldb: Avoid using PyErr_LDB_ERROR_IS_ERR_RAISE where PyErr_SetLdbError suffices.
      selftest: Move manual page into a separate file.
      pyldb: Fix some more long lines, fix formatting.
      samba.7: Remove references to long gone testprns and smbsh utilities.
      selftest: Remove unused and broken target 'windows'.
      selftest: Remove outdated template.
      selftest/README: Expand inconsistent tabs
      selftest: Remove unused vde functions.
      kcc: Improve formatting of Python code to be more consistent with our other code.
      selftest: Add selftest.py.
      selftest: Add python version of socket wrapper utilities.
      Add test infrastructure for selftest.
      selftest.socket_wrapper: Add docstrings.
      selftest.socket_wrapper: Add basic unit tests.
      selftest.socket_wrapper: interface is an integer.
      selftest: Add base classes for Target/Environment and their management.
      selftest.target: Add tests for setup.
      selftest.target: Add tests for check.
      selftest.target: Add tests for getlog_env.
      selftest.target: Add tests for get_running_env.
      selftest.target: Test that environments are reused.
      selftest: Add tests for NoneEnvironment.
      selftest: Add tests for trying to reuse an environment that has gone down.
      selftest.target: Add Environment.get_vars.
      selftest: Add testlist management module.
      selftest.testlist: Add read_test_regexes.
      selftest.testlist: Add read_testlist.
      Add TestListFilter definition.
      selftest.testlist: Add manager for restricted test lists.
      selftest.testlist: Add docstrings.
      selftest: More work on conversion to Python.
      selftest.testlist: Add RestrictedTestManager.from_path.
      selftest.py: Finish conversion to python - now loads without syntax errors.
      selftest.target: Add NoneTarget.
      selftest: Now runs again for tests that use environment 'none'.
      Run selftest.py tests.
      selftest.py: Fix signal handling.
      selftest.py: Fix handling of boolean options.
      selftest.py: Remove unused code, reconcile signal handlers.
      selftest.py: Remove unused --verbose option.
      selftest.pl: Remove unused --verbose option.
      selftest.py: Add dummy init file (required to run tests).
      selftest.py: Use testtools TestCase class.
      selftest: Factor out expand_environment_strings.
      selftest.run: Factor out expand_command_list.
      selftest.run: Factor out expand_command_run.
      selfclient.client: Factor out write_clientconf.
      selftest.run: Factor out exported_envvars_str.
      selftest.run: Factor out read_testlist_file and open_file_or_pipe.
      selftest.py: Only run teardown_all when actually relevant.
      selftest/tests.py: Fix name of selftest.py for benefit of --load-list.
      policy/python: Move python binding tests to standard location.
      samba.tests.samba_tool.user: Remove unused imports.
      samba.tests.samba_tool.base: Avoid unnecessary call to testtools.matchers.Contains.
      tevent: Install tevent.py into PYTHONARCHDIR rather than PYTHONDIR for consistency with other Samba scripts.
      python: samba: Use relative import for _glue.
      pydoctor: Specify --project-name.
      samba.samdb: Fix formatting of arguments in docstring.
      wscript: Include talloc, tdb and ldb in pydoctor output.
      samba.tests.blackbox.samba_tool_drs: Remove unused import.
      tdb_wrap: Move to specific directory.
      samba-tool: Write diagnostics to stderr rather than stdout.
      upgradedns: Remove unused import.
      selftest.py: Move some infrastructure for running commands to selftest.run, with tests.
      selftest.py: Remove some unnecessary checks.
      selftest.run: Use subunit version of iso8601.
      samba_dnsupdate: Use docstrings, which show up nicely in API docs.
      samba_dnsupdate: Raise proper exception when getting unexpected DNS reply.
      samba_dnsupdate: Mention contents of invalid line when encountering parsing error.
      samba.8: Fix typo: deamon -> daemon.
      nbench: Fix typo.
      samba3util: Add ccan to dependency list now that str_checksum() uses a ccan function.
      libsmbclient-raw: Install smb_composite.h.
      wafsamba: Remove shebang lines from non-executable files.
      samba.tests.source: Verify that only executable python files (and only executable files) have a shebang line.
      Remove more unnecessary shebang lines in python files.
      Stop installing popt_common.h as its symbols are in a private library.
      librpc/wscript_build: Santizize formatting.
      libndr: Rename ndr64_transfer_syntax and null_ndr_syntax_id so they have a ndr_ prefix.
      libndr: Rename policy_handle_equal to ndr_policy_handle_equal.
      libndr: Rename policy_handle_empty to ndr_policy_handle_empty.
      libndr: Define trivial is_valid_policy_hnd as macro.
      Move NS_GUID_string and NS_GUID_from_string to dsdb-common.
      librpc/wscript_build: Fix formatting.
      selftest.py: Add selftest.target.samba with bindir_path function.
      selftest.py: Add mk_realms_stanza function.
      selftest.py: Add write_krb5_conf.
      selftest.py: Add cleanup_pid.
      replace: Move memalign() from lib/util/system.c to libreplace.
      ctdb_conn: Avoid sys_connect.
      util_sock: Avoid sys_connect.
      sock_exec: Avoid sys_connect.
      cli_pipe: Avoid sys_connect.
      lib/util: Remove trivial wrapper sys_connect() around connect().
      lib/util: Remove prototype for removed sys_memalign.
      lib/util: Move calloc_array and memalign_array to top-level libutil.
      lib/util: Remove dummy wrappers for setpwent/getpwent/endpwent.
      lib/util: Remove dummy wrapper for getpwnam().
      lib/util: Remove dummy wrapper for getpwuid().
      lib/util: Remove dummy wrapper for getgrnam().
      lib/util: Remove dummy wrapper for getgrgid().
      util_malloc: Remove unused constant.
      libreplace: Add getpeereid implementation.
      adt_tree: Avoid WERROR.
      s3-waf: Use samba3-util library instead of lots of tiny libs.
      replace: Add system/network.h for ucred struct.
      replace: Work around socket wrapper.
      adt_tree: Fix return types.
      lib/util: Allow calloc use in util.c, too.
      lib/util: Remove obsolete sys_getpid() and sys_fork().
      use usleep rather than sys_usleep in various places, in anticipation of usleep moving to libreplace.
      libreplace: Add usleep implementation.
      replace: Avoid DEBUG(), which is not available in libreplace.
      libcli/smb: Stop generating unused proto file.
      smb2: Move smb2cli session setup code to cli_smb_common.
      LIBCLI_SMB2: Depend on cli_smb_common rather than libsmb.
      s3-make: Fix build with new smb2_session file.
      Add ABI file for libndr.
      wafsamba: Cope with slight differences in gdb output regarding incomplete sequences.
      ndr: Update ABI.
      selftest.py: Add get_interface.
      wafsamba: Avoid NameError when printing error about missing system deps.
      wafsamba: Return missing libs rather than last syslib.
      wafsamba: Parse Python versions as integers separated by dots.
      wafsamba/bundled: Fix typo in tuplize_version.
      s3/selftest: Fix reference to knownfail file.
      provision: Simplify handling of default for --dns-backend option.
      provision: Simplify handling of default for --function-level.
      provision: Simplify handling of default for --server-role.
      provision: remove reference to no longer existing template files.
      torture: Suggest torture_fail() / torture_result().
      libtorture: Improve suggestion to mention torture_assert_*() rather than
      UTIL_TDB: lowercase name.
      heimdal: Cope with newer Heimdal versions accepting a keyset argument to
      samba4: When running samba_dnsupdate during tests, use the test
      libreplace: Fix symbol names for snprintf/asprintf/vasprintf.
      pygensec: Fix init of variable if not specified.
      Avoid all(), as it's not available in Python 2.4.
      lib/util: Fix typo in comment.
      update-waf.sh: make mktemp happy by including anything Xes.
      waf: Update to newer upstream snapshot.
      attr: Look for attr/attributes.h too.
      tdb/wscript: Remove unecessary semicolons.
      WHATSNEW: Fix typo.
      samdb: Accept a list of member variables rather than a comma-separated string.
      Add --disable-ntdb option for building.
      Revert "Remove XSLT script to generate image dependencies, instead rely on make"
      samba.provision: Fix formatting, NameErrors.
      samba.provision.backend: Fix formatting.
      samba.provision.sambadns: Fix formatting.
      samba.provision.common: Fix formatting.
      samba.netcmd: Formatting fixes, break lines.
      s4-python: Formatting fixes, break lines.
      samba-tool domain-provision: Fix docstring.
      samba-tool domain-provision: Avoid python2.5-isms.
      replace: Support setproctitle().
      Remove compatibility code for setproctitle() now moved to libreplace.
      samba-tool domain provision: DNS forwarder is not a boolean.
      replace: Avoid returning value in void setproctitle() replacement.
      s4-python: Override SIGINT handler in scripts only.
      samba-tool: Hide 'samba-tool domain samba3upgrade'.
      Remove obsolete land-remote.py and land.py scripts.
      undocumented: Drop extension from helper scripts.
      smb.conf.5: Document 'cldap port'.
      Remove unused neatquotes script.
      smb.conf(5): Remove 'idmap config' documentation - the parameter has
      smb.conf(5): Remove documentation for removed 'lock spin count'
      netlogon: Per MS-NRPC, don't send unknown workstation flags back to the
      find_missing_manpages: Ignore make variables.
      find_missing_manpages: convert to python
      find_missing_doc: Convert to python.
      smb.conf(5): Distinguish parametric options.
      smb.conf(5): 'write ok' is a reverse synonym for 'read only'.
      smb.conf(5): Add basic documentation for 'krb5 port'.
      smb.conf(5): Add basic documentation for 'nbt port'.
      smb.conf(5): Add basic documentation for 'web port'.
      smb.conf(5): Add basic documentation for 'unicode'.
      smb.conf(5): Add basic documentation for 'dgram port'.
      smb.conf(5): Add basic documentation for 'kpasswd port'.
      smb.conf(5): Add basic documentation for 'rpc bigendian'.
      smb.conf(5): Consistent spelling of parameter names.
      smb.conf(5): Extend 'server min protocol' description.
      smb.conf(5): Add basic documentation for 'server min protocol'.
      smb.conf(5): Document 'share backend' parameter.
      smb.conf(5): Add basic documentation for 'client min protocol'.
      smb.conf(5): Add documentation for 'client max protocol'.
      smb.conf(5): List 'protocol' as alias for 'server max protocol'.
      smb.conf(5): Add basic documentation for 'dcerpc endpoint servers'.
      samba.tests.source: Check for trailing whitespace in Python files.
      s4-python: Various formatting fixes.
      sanba.upgradehelpers: Use standard functionality for getting temp dir.
      samba4-tests: Move 'samba.tests.source' up.
      provision: Use logger rather than print.
      wafsamba: Ignore some more symbols when checking for dupes.
      provision: Always create DNS user.
      samba.provision.sambadns: Use == to compare strings, not 'is'.
      selftests.tests: Remove reference to Samba 4.
      selftest: Move some tests to common test script.
      samba.join: Fix multiple spaces.
      selftest: Move more tests to common list script.
      smb.conf(5): Extend 'server min protocol' description.
      smb.conf(5): Add basic documentation for 'winbindd socket directory'.
      smb.conf(5): Add basic documentation for 'winbindd privileged socket directory'.
      smb.conf(5): Add : to idmap config description to mark it as parametric.
      smb.conf(5): Add basic documentation for 'ntvfs handler'.
      smb.conf(5): Add basic documentation for 'dns forwarder'.
      smb.conf(5): Add basic documentation 'winbind sealed pipes'.
      samba-tool user: Fix typos, improve messages.
      smb.conf(5): Add basic documentation for 'samba kcc command'.
      smb.conf(5): Add basic documentation for 'server services'.
      smb.conf(5): Add basic documentation for 'dns update command'.
      smb.conf(5): Add basic documentation for 'rndc command'.
      smb.conf(5): Add basic documentation for 'allow dns updates'.
      smb.conf(5): Add basic documentation for 'spn update command'.
      smb.conf(5): Add basic documentation for 'ntp signd socket directory'.
      smb.conf(5): Add basic documentation for 'log nt token command'.
      smb.conf(5): Add basic documentation for 'tls cafile'.
      smb.conf(5): Add basic documentation for 'tls keyfile'.
      smb.conf(5): Add basic documentation for 'tls certfile'.
      smb.conf(5): Add basic documentation for 'tls crlfile'.
      smb.conf(5): Add basic documentation for 'tls enabled'.
      smb.conf(5): Add basic documentation for 'tls dh params file'.
      smb.conf(5): Add 'socket address' as alias for 'nbt client socket address'.
      smb.conf(5): Add 'ldap password sync' as synonym for 'ldap passwd sync'.
      smb.conf(5): Add basic documentation for 'afs token lifetime'.
      smb.conf(5): Add basic documentation for 'nsupdate command'.
      smb.conf(5): Fix mixing of tabs and spaces.
      tests: Convert find_missing_doc into a unit test.
      samba.tests.docs: Distinguish between unknown and undocumened parameters.
      samba.tests.docs: Support synonyms.
      samba.tests.docs: Support spaces before synonyms.
      smb.conf(5): Consistent spelling of parameter names.
      samba.tests.docs: Skip tests if xsltproc is not present.
      samba.tests.docs: Write error output from xsltproc to standard out.
      samba.tests.docs: Assume docs are generated by waf.
      smb.conf(5): Mark four removed parameters as such.
      samba.tests.docs: Ignore removed parameters.
      samba-tool user test: Fix expected output.
      pyglue: Mention parameters in interface_ips() docstring.
      pyglue: Make all_interfaces argumen to interface_ips() optional.
      source4.selftest.tests: Consistent naming of smbtorture binary.
      source4.selftest.tests: Rename plansmbtorturesuite() to plansmbtorture4suite().
      selftesthelpers: Share code for listing smbtorture4 tests.
      selftest/selftesthelpers.py: Share configuration variable, strip whitespace.
      selftest/selftesthelpers: Share environment handling for extra smbtorture options.
      selftest: Move determining of smbtorture4 options to selftesthelpers.
      selftesthelpers: Add function for printing smbtorture4 version.
      source4.selftest.tests: Add suffix for smbclient4/nmblookup4.
      source3.selftest.tests: Remove tabs.
      source3.selftest.tests: Add suffix for smbclient3/ntlm_auth3.
      source3.selftests.tests: Use common plansmbtorture4testsuite() function.
      selftesthelpers: Simplify detection of tap2subunit.
      source4.selftest.tests: Add FIXME about database verification.
      selftest: Add --random-order option.
      TestCaseInTempDir: Use addCleanup rather than tearDown.
      selftesthelpers: Fix detection of tap2subunit.
      source3.selftest: Move more variables to be in common.
      source3.selftest: Move last variables to selftesthelpers.
      wafsamba.samba_abi: Refactor abi_write_vscript to take file argument.
      wafsamba.samba_abi: Add basic unit tests.
      wafsamba.abi: Fix abi_match with both excludes and includes.
      dsdb: Rename _res argument to _result.
      ldb_secrets_tdb_sync: Add dependency on gssapi.
      heimdal_build: HEIMDAL_LIBRARY(): Remove unused cflags argument.
      heimdal_build: Fix finding of system heimdal.
      configure: Support specifying PYTHON environment variable to run waf.
      Makefile: Allow specifying PYTHON environment variable.
      testtools: Update to latest version.
      subunit: Update to latest upstream version.
      s4/web_server: Fix typo in URL.
      web_server/wsgi: Don't segfault when wsgi app doesn't return iterable.
      web_server: Create a string object for SERVER_PORT variable.
      web_server: Properly set SCRIPT_NAME and PATH_INFO.
      web_server: Properly decrement reference counters for python objects in wsgi.
      web_server: the web server is not multi-process, indicate so in WSGI.
      web_server: Load SWAT if it is available.
      wsgi: When encountering error in Python code, print traceback to logs.
      web_server: Make second argument to websrv_output const.
      wsgi: Serve '500 Internal Server Error' page when errors occur.
      tdr: Strip trailing whitespace.
      wafsamba: python-config is not always a script.
      selftest.pl: Fix typo 'snprintf' -> 'sprintf'.
      testtools: Update to latest upstream version.
      subunit: Update to latest upstream version.
      Move python modules from source4/scripting/python/ to python/.
      Switch over to 4.1 branch.
      Update instructions to reference upstream VCS tag.
      Imported Upstream version 4.1.1+dfsg
      Merge tag 'upstream/4.1.1+dfsg' into debian.
      New upstream release.
      Drop 0002-lib-replace-Allow-OS-vendor-to-assert-that-getpass-i.patch: upstream no longer uses getpass.
      Add source dependency on libntdb1, and stop passing --disable-ntdb, which has been removed.
      Remove handling for SWAT, which is no longer shipped upstream.
      Update files to install.
      Stop installation of disappeared source4/NEWS.
      Update libsmbclient symbols.
      Split VFS modules out from samba-libs into a separate binary package.
      Move samba-regedit.8 to right package.
      Move service and process_model modules from the samba-libs to the samba package. Prevents dependencies on libkdc2-heimdal and libhdb9-heimdal.
      Remove local copy of krb5-types.h to prevent it from interfering.
      Cherry-pick interface version fix.
      Cherry-pick fix for heim_octet_t.
      Fix invocations of 'update-alternatives --remove-all' in samba- common-bin prerm. Closes: #731192
      Revert "Fix invocations of 'update-alternatives --remove-all' in samba- common-bin prerm. Closes: #731192"
      Merge branch 'master' of git+ssh://git.debian.org/git/pkg-samba/samba into debian_4.1
      Imported Upstream version 4.1.2+dfsg
      Merge tag 'upstream/4.1.2+dfsg' into debian_4.1
      Update changelog for 4.1.2.
      Drop duplicate patch 26_heimdal_no_local_krb5_types.

Jeremy Allison (7480):
      mangle.c: Fixed bug that caused string to run off the end of the mangled map.
      includes.h: Make sure REPLACE_GETPASS are wrapped with #ifdefs.
      Oops. Reversed mangled map change made in error. Testing
      Adding codepage definition files and codepage file compiler/decompiler.
      Makefile:  New program and support for dynamic codepage loading.
      reply.c: Removed unused variables. Caught by gcc -Wall -Werror
      One more consultant....
      nameannounce.c
      Fixed up determination of client type for PROTOCOL_NT1. Uses client
      Fix from Frank Varnavas <varnavas at ny.ubs.com>.
      This is really Herb adding the SGI packaging files.
      One more consultant.
      client.c: Made sure myhostname was initialised before substitutions.
      Added one more consultant.
      charcnv.c client.c clitar.c kanji.c kanji.h loadparm.c
      Added fix that means if connecting user sends guest account
      2 more consultants.
      Fixing assumtions that malloced memory is zero filled - making
      Added 'delete veto files' paremeter. Ugly - but the only
      Added documentation for the 'delete veto files' parameter.
      Added arcfour code needed for SMB password changing.
      Another South American consultant.
      Makefile: Changed proto: target to not include c files not used currently.
      smbclient.1: Added documentation of the username%password environment code.
      Checkin to sync up oplock development code so that NT
      Makefile: Removed earlier errors.
      Added missing slow share mode offset defines. Somehow
      Adding Andrews buffer overflow fixes into the main branch.
      Correctly rolled back interface.c (I was working on an older
      Syncing up current oplock work in progress. #ifdef'ed out
      Fixed you're -> your text that some pedant complained about :-).
      dir.c: more pstrcpys.
      Changed consultant list.
      OPLOCK CHECK-IN - oplocks are now *OPERATIONAL* !!!!
      Fixed problem with oplock_type being set with no port.
      Modified some debug messages, moved from 5 -> 8.
      Added debug message for oplock_break().
      proto.h: Updated.
      locking.c: Fixed incorrect parameter count in debug statements. May explain
      Making it harder for share_mode_entries to be left with
      Race condition with multiple oplock break requests happens
      client.c: Changed shadowed variable.
      Finally ! Found & fixed crash bug with logging message when deleting
      locking.c: Added fix for race condition in slow share mode code.
      ipc.c: Added ERROR_MORE_DATA error if client buffer too small.
      Makefile: Split definitions for SGI4,5,6.
      Put in fix for read-prediction extending files bug. Hard to test, can't
      local.h: Fix spelling mistake :-).
      Added definition of oplocks parameter.
      Added in oplock info.
      nmblookup.c: Added -A ability to do status on ip address.
      Added fixes for become_user braindamage.
      Broke my own rule about checking in uncompiled source :-(.
      ipc.c: Adding Andrews become_root code to the main branch.
      .cvsignore: Added make_smbcodepage
      After talking with Andrew added "interfaces only" parameter that
      loadparm.c: Changed 'interfaces only' parameter to 'bind interfaces only'. Added
      Adding make_smbcodepage.1 man page.
      chgpasswd.c:
      WHATSNEW.txt: Preparing for 1.9.18alpha2 release.
      WHATSNEW.txt: Updated for alpha3.
      Big change to make nmbd code more readable/understandable.
      Fixed ntclient.c so it would compile.
      Fixed bug where we are a WINS server but not a domain master
      Adding printer drivers patch from Jean-Francois Micouleau
      Adding Windows 95 printer driver code donated by Jean-Francois.Micouleau at utc.fr.
      Adding PRINTER_DRIVER.txt docs.
      Added "printer driver location", "printer driver file" parameters.
      Utility code to produce printer definition files from MS files.
      Rolling back the files
      Change to always register the WORKGROUP<1e> name as does Win95.
      local.h: Added OPLOCK_BREAK_TIMEOUT_FUDGEFACTOR.
      ipc.c: Changing back arbitrary alignment change until I know *why*
      Rolled back tree state to 11:59pm 8th November 1997 EST to
      Removed pwd_validate.c as no longer in main branch.
      Left global_oplock_break set while request to break oplock is
      loadparm.c : Added "veto oplock files" parameter.
      ipc.c: Changed reply_trans to use receive_next_smb() to cope
      Just fixed a *serious* bug in nameelect.c to do with local
      clientgen.c: Added cli_mv() (used in a recent torture test).
      asyncdns.c: Removed warning when compiling with -DSYNC_DNS.
      Documented the 'veto oplock files' parameter.
      loadparm.c: Added lp_we_are_a_wins_server as an alias for lp_wins_support.
      Added one more USA consultant.
      kanji.c: Patch from Anders Blomdell <anders.blomdell at control.lth.se>
      fixed over char 127 problems with isupper/islower.
      Fixed bug reported by Gert-Jan Vons <Gert-Jan.Vons at ocegr.fr>
      This is it ! The mega-merge of the JRA_NMBD_REWRITE branch
      nmbd_incomingdgrams.c: Fix bug with Syntax 5.1 servers reported by SGI where
      Added Lanman announce patch from Jacco de Leeuw <leeuw at wins.uva.nl>.
      Added new wins & lm announce options.
      WHATSNEW.txt - updated for 1.9.18alpha13.
      Missed terminating {-1,NULL} in an enum parameter list.
      kanji.h: Fixed problems with re-definitions of strchr and others on AIX.
      trans2.c: Forced trans2_findfirst to behave as NT does in error returns.
      loadparm.c: Added fix for veto oplock files bug from Charles Hoch <hoch at hplcgh.hpl.hp.com>
      client.c:
      Fixed stupid bug in read_smb_len where I was calling itself - now
      architecture.doc: Re-added since I lost it (sorry Dan :-).
      Fixes to compile under OpenBSD from "Todd T. Fries" <toddf at acm.org>
      Fixed security bug when 'force user' and 'user only' are set.
      Fixed nastly little bug where client was sending open_and_X call
      Bugfix from Branko Cibej <branko.cibej at hermes.si>
      Finally added the code Andrew wanted that will allow a Samba domain
      nmbd_elections.c: Added new parameter to dump_workgroups call.
      Added SIGUSR1/SIGUSR2 handling.
      Added docs for new signal handling functions.
      Updated WHATSNEW.txt for 1.9.18alpha14 release.
      Updated french contact address.
      includes.h: Added FreeBSD 3.x fixes. Added HPUX10.x fixes.
      Ensure that if we are in share mode security that the smb_uid
      Updated for 1.9.18 - just need a few more changes & it's done.
      Final changes - ready for 1.9.18.
      docs/Support.txt: Removed consultant.
      ipc.c: Fixed problem where we were not returning 'buffer too small'
      reply.c: Added timestamp to attack warning.
      Makefile: Added new codepage - 866.
      Adding new codepage file.
      reply.c:
      charcnv.c: Added codepage 866 support onto the file system. Patch
      Added italian consultancy.
      Fixed bug found by Bernhard Laeser where we are announcing to the wrong
      Fixed send_mailslot code where src_type was always being set to zero.
      Added Romanian consultant.
      printing.c: Bug fix for lpng reporting.
      This is *not* a big change (although it looks like one).
      nmbd.c, server.c: Added #ifndef MEM_MAN around code that sets the SIGUSR1
      Changed phone numbers for BitWizard.
      Fixed warnings with gcc (assignments inside if statements).
      Changed code that truncates salt after 2 characters so that it becomes
      Added get_create_time() function to time.c.
      Fix for memory leak in loadparm.c - donated by Branko Cibej <branko.cibej at hermes.si>
      Added log message so we can tell when free_service is called.
      Fix from Charles Hoch (hoch at hpl.hp.com). Whne there is no data
      Makefile: Fix for OSF1 typo.
      server.c: Added fix where, if all the file entries are being
      A small raft of changes, I will sync up with 1.9.18 also.
      Makefile: Added AIX 3.2.5.
      ENCRYPTION.txt: Fixed typo.
      Added fix for doing pq command (from "James J. Szinger" <james.szinger at yale.edu>).
      Ding-dong the witch is dead, the witch is dead......
      Updated - removed "win95 bug compatibility" and added "dos filetime resolution".
      Fix for crash bug with amanda - from "Michael C. Povel" <Michael.Povel at hub.de>.
      Sometime after 1.9.17p5 smbclient stopped being able to do
      Fix to make us compile cleanly with gcc 2.8.
      nmbd_packets.c: nmbd_subnetdb.c: Patch from Andrey Alekseyev <fetch at muffin.arcadia.spb.ru>
      nmbd_incomingdgrams.c: Fix for typo.
      Fixed bug where second response message was being printed with the
      Fixed bug reported by Janne.Harju at nmp.nokia.com. When used in broadcast
      Code to work around a bug in FTP OnNet software NBT implementation.
      Fix for NT redirector bug where deltree fails if the resume key
      Makefile, password.c, includes.h: Added KRB4 patches from Johan Hedin <johanh at fusion.kth.se>
      Change the multibyte character set support so that
      Adding Korean and Traditional Chinese codepage support.
      Removed broken change I made to mangle.c (ooops. Andrew's original
      "For I have laboured mightily on Luke's code, and hath broken
      Missed fixes in NTDOM branch for doing readX via pipe IPC$.
      includes.h: Addition of NetBSD 1.3 fix, fix for HPUX 9.x, 10.x zombie
      Adding mention of %p substitution.
      Adding the same change as was added to 1.9.18 branch to add the
      Fixes for the static data bugs & incorrect use of strtok
      Added SamOEMChangePassword functionality.
      Adding the same changes to HEAD as were added to BRANCH_1_9_18.
      Finally made OS/2 WP fix the default.
      clientgen.c ipc.c smbpasswd.c: Fixes for warnings (from Herb).
      Fixed 'unused variable' warnings found with gcc -Wall -Werror.
      Updated smbpasswd to allow root to add machine accounts, and allow
      Added writing of '[XXX]' account control bits into gcos
      RFC1002 says we must put compressed name pointers in the following
      Fix for is_in_path from "Steven Hartland" <steven_hartland at pa.press.net> -
      nameconf.c is a stray .c file that shouldn't be in the
      smbpass.c: Made unknown accounts ending in '$' server accounts, not
      Added the ability to differentiate between workstation and server
      client.c: Fixed problem where debug level on command line was overridden by smb.conf.
      Fix for client generated core-dump bug where offset to readraw
      chgpasswd.c, ipc.c, loadparm.c: Added boolean "unix password sync"
      Added extra remote password changing error codes from lmerr.h on NT.
      Fixed compile-time error introduced by log message change.
      includes.h: Added semaphore fix for HPUX10.x
      Rolling back machine password change code - this doesn't work (yet).
      Updated Eastern European translation table from dan at feld.cvut.cz.
      Patch from Chris Maltby <chris at softway.com.au>. His comments follow:
      Changed code to check NT password *first* - if it exists.
      We were missing a case switch in announcement processing - we
      Fix from Josef Hinteregger <joehtg at joehtg.co.at> for using
      loadparm.c: Cause IPC$ comment to be evaluated at runtime, rather than
      Added check for getpwnam returning NULL.
      Fix to stop Windows 95 spinning on print queue requests when it
      Added codepage 936 (simplified Chineses).
      Missed compile error when compiling with KANJI=true.
      Removed unneeded proto symbol.
      Makefile, loadparm.c, server.c, smb.h, util.c: Patch from
      Fix for [homes] problem with security=share. We were still relying
      includes.h: Moved HPUX undefine of SEMMSL to where it actually does something.
      Changes to allow Samba to be compiled with -Wstrict-prototypes
      Fixed aggregate initializer problem for gcc.
      Modified interfaces to getting smb password entries from
      ipc.c: Fix for printer queue spinning with Win95.
      reply.c: Fix bugs where debug statements were accessing the fd_ptr struct
      Changing of machine passwords now works !!!!!!
      clientgen.c: Changes 'cli_xxx_' calls to use the following
      includes.h: Added John's redhat fix for QSORT_CAST.
      Fixed bug that John found in WINS server code. When nmbd as a WINS
      Makefile: Added genrand.o
      Added 'passwd chat debug' parameter to allow admins to debug their
      genrand.c: Improved filename based random seed generation.
      clientgen.c: Added cli_ulogoff() call.
      Added cli_ulogoff() calls to all the exit code paths in security=server.
      genrand.c: Improved generation of random values, more secure.
      Fixed bug found by Gerald Carter <cartegw at Eng.Auburn.EDU> where
      genrand.c: Changed SMB_PASSWD_FILE to lp_smb_passwd_file().
      clientgen.c: Added rap error codes to cli_error, moved from smbpasswd.c
      We will need this new nterr.c for the DOMAIN_CLIENT code.
      These don't compile yet - but they are the core code in what
      Makefile: Added nterr.c into the mix.
      cli_pipe.c: Corrected cli_api_pipe() calls.
      This looks like a big change but really isn't.
      First version that compiles. Much more to do.....
      Fixed checked in code that didn't compile.
      This is the checkin that adds the security=domain functionality.
      clientgen.c: Fixed null session setup bug.
      Makefile: Added files to smbpasswd.c.
      Added patch from Bruce Tenison <btenison at dibbs.net> to allow encrypted
      Rolling clitar.c back to the previous rev 1.22 as the current one
      genrand.c: SGI compile warning fix.
      Fixes for the %U and %G problems people have reported.
      Rolling back again to the equivalent of revision 1.22, as the current
      loadparm.c: Added #ifdef USE_LDAP around ldap code.
      smbpass.c: Fixed machine_passwd_lock() problems.
      Fixed changed calls to machine password locking code.
      This should (hopefully :-) be the final fix for the %U %G substitution
      Initial cut at the code that will do NT SMB calls. Not linked in, not
      smb.h: Supporting defines for NT trans calls.
      Ho hum, someone deleted proto.h from cvs... re-adding.
      clitar.c: #ifdef'ed out all the bits that were giving 'defined but not used'
      reply.c: Added code to not overwrite sesssetup_user when in share level security
      This is a security audit change of the main source.
      includes.h: SunOS doesn't have strcasecmp, solaris versions prior to 2.6 don't
      Fixed up HPUX entry.
      chgpasswd.c: Added comments to #ifdefs
      namequery.c: Fixed SGI IRIX 5.x compiler problem.
      Fixed dce/rpc to use global_machine_sid (auto generated in server.c if
      passdb.c
      util.c: Re-seed the crypto random number generator after a fork, so all
      Fix from "Gerald W. Carter" <cartegw at eng.auburn.edu>, we were
      Change getpwnam to Get_Pwnam(xx , True) to allow lazy matching
      chgpasswd.c: Changed back to getsmb... from getsam...
      Abstracted all the crappy password interfaces through an indirect
      Forgot to add the initialize_password_db() call to nmbd also.
      Fixed signed/unsigned warning.
      passdb.c: Fixed typo in coment.
      Fix to do NT wildcard matching.
      Fixed Samba's wildcard algorithm to be *exactly* the same
      Minor tweak for wcard compatibility paranoia.
      Fixed incorrect last arg to safe_strcpy in new wildcard code.
      printing.c: Fixed overflow by one problem in LPRng.
      Fixed 'revalidate' parameter so it's only considered in security=share
      Put a do_global_tests() function that will be expanded to
      Added more NT definitions, getting ready for nttrans code.
      smb.h: More NT SMB stuff (just defines).
      loadparm.c: Added machine password timeout parameter - set to 7 days be default.
      Newly re-written do_match and mask_match functions, with the
      Ooops - fixed Win95 crash bugs with earlier code.
      Adding Greek and Icelandic codepages from :
      Added Paul Eggerts LocalTime patch.
      clientutil.c: Don't core dump if no controlling terminal available for password.
      ipc.c: Fix bug where we don't return the correct error code when client
      includes.h: Fixes for NetBSD and BSDI.
      Fixed file descriptor leak in open_socket_out - this could
      client.c: Allowed client to proceed even if it gets error 234 (more data
      loadparm.c: Did it ! Changed defaults for 'case preserve' and 'short case preserve'.
      Added code to add the Samba names onto the remote_broadcast subnet,
      Fixed compile problem after make proto.
      loadparm.c: Removed 'domain other sids' parameter.
      I was wrong about the length and max_length values in make_unistr2.
      De-coupled the mapping of a Windows to UNIX username from the Get_Pwnam
      Minor changes as I've now discovered gcc -pedantic-errors. This
      ipc.c: map_username is now a BOOL function.
      Groupname mapping code now lives here.
      Makefile: Added ubi_sLinkList.o as the groupname.o file needs it. Added groupname.o
      Makefile:
      client.c: Made -L do a null-session share unless -U user is specified.
      Adding Christian Starkjohann <cs at obdev.at> SSLeay document.
      Added SSL support from Christian Starkjohann <cs at obdev.at>
      clientgen: Added USE_SSL for client shutdown.
      clitar.c: Fixed minor gcc -pedantic-error compile warnings.
      clitar.c: Fixed gcc warning with comment in /* */ code.
      nisppass.c: Fixed incorrect parameter usage.
      Added code to do elections when told to do so.
      nmbd_elections.c: Removed force elections code to bring into line with 1.9.18.
      nttrans.c: More code towards NT protocol.
      includes.h: AIX fix.
      chgpasswd.c: Fix from Peter Debus <pdebus at turing.une.edu.au> for Digital UNIX
      nttrans.c: More NT SMB stuff.
      Fix for pidfile startup message.
      Updated the 'samba does not allow multi-workgroups & WINS' section. Still
      Added Australian consultant.
      password.c: Fixes to allow Win95 clients to have lm encrypted passwords
      Corrected info.
      Fixed (hopefully) last bug with username mapping.
      includes.h: Fixes for QNX 4.x.
      Implementing more NT SMB functionality.
      NT SMB trans reply code.
      New version of the DFS_AUTH code from Karsten Muuss <muuss at or.uni-bonn.de>
      Needed fix to SIGHUP handling donated by branko.cibej at hermes.si
      AIX patch from Michael Wojcik <mww at microfocus.com> adding detail
      Fix for bug PR#8294 reported by <detlef.lammermann at er.materna.de>
      nttrans.c: More NT SMB stuff.
      nntrans.c: Fully implemented transact rename.
      loadparm.c:
      Makefile: Added CC=gcc to DGUX on Intel. Comment from ross at filmworks.com.
      Makefile: Added nttrans.o
      local.h: Added NTFS define if HAVE_NT_SMBS is defined.
      nttrans.c: Added FILE_EXECUTE to required permissions checked.
      Code added to fix the renaming of a directory under NT SMB calls.
      Forgot to increase size of files_struct by MAX_OPEN_DIRECTORIES in
      includes.h: Added feature type USE_GRANTPT for pty code.
      Fixed bug found by Richard Sharpe. After increasing files_struct size by
      locking.c: Added lock type to is_locked() and do_lock()
      chgpasswd.c: Fixed up debug calls to stop crashes if ptsname failed.
      loadparm.c: Added strict sync parameter.
      locking.c: Don't need to do map_lock_type on *testing* a lock, just on setting.
      locking.c: Print messages when we downgrade a lock.
      Makefile.in: Moved UBIQX stuff into UTILOBJ.
      First implementation of ChangeNotify - this version only checks
      loadparm.c: Added "debug timestamp" synonym for Chris.
      nttrans.c: Fix change_notify. Queue processing code wasn't changing to
      Fixed memory leak when freeing ChangeNotify structures.
      Makefile.in: Fixed make clean bug with CVS directory in bin/.
      Makefile.in: Added CHECK target back in (at Herb's request). Added
      include/smb.h: Removed dir_ptr. Not needed.
      More blocking lock code - still #ifdef'ed out - under development.
      HAVE_STATVFS should be STAT_STAVFS (caused printing to break on IRIX).
      Makefile.in: Changed so that make proto will work with ldap & nisplus.
      configure: Changes for extra headers.
      Fixed bug introduced by the recent changes where the chain_fnum
      smbd/nttrans.c: Fixed bug in split off pipe code.
      Makefile.in: Moved blocking lock code into smbd/blocking.c for link purposes.
      Blocking lock code split out...
      Turning on blocking locking code. NB. Blocking lock requests that are not
      Fixes for the problem in blocking locks with file_fsp returning the
      Changed ASSERT macros to SMB_ASSERT macros as some systems already
      Added code to (correctly) ignore TRANSACT2_SETFILEINFO with SMB_SET_FILE_ALLOCATION_INFO.
      This is the stat cache code - seems to work fine (needs heavy
      Fixed stat cache statistics calculation. Oops.
      This checking fixes the statcache bug that stopped NetBench from running
      configure.in, configure: include/config.h.in: Added stropts and poll.
      More abstraction of file system data types, to move to a 64
      Missed one struct stat.
      Fix for PR#9497 - not waiting for child.
      Ok - this is the 64 bit widening check in. It changes the configure
      More 64 bit stuff - now the fcntl locks are 64 bit clean.
      Fixed uppercasing of share name (pointed out by Jean-Francois).
      Modified dev_t and ino_t code to be 64 bit clean (including changes
      Bugfix for leak in reference counted file struct.
      Fixed one more Debug problem with inode in non-64 bit case.
      Added back groupname map stuff removed by Andrew's "slash 'n' burn"
      Improved stat cache code by uppercasing any search name that gets added to
      smb.h: Removed fdnum from file_fd_struct. Not needed.
      Added ssize_t to configure code.
      Ok - this is the 'expose 64 bit to the clients' checkin.
      Ok so with this bugfix 64 bit file access actually seems to work :-).
      Fixed problems people were having with creating profile
      Mapped correct open modes for READ_CONTROL access.
      Removed hideous inefficiencies in old trim_string code. This was making
      configure, configure.in: Added fseek64 and ftell64.
      configure configure.in: Added tests for fseek64 and ftell64.
      configure configure.in: Added checks for statvfs64. Last bit of 64 bit widening (I hope :-).
      nmbd/nmbd_winsserver.c: Fixed printf style warning.
      include/includes.h:
      Fixed compile errors in new code.
      configure configure.in include/config.h.in include/includes.h
      Fixed problems with premature kernel oplock checkin code.
      Changed variable TAB to htab as TAB is defined in a header file on RedHat5.1
      Fixed position of LARGE_SMB_OFF_T definition. The SOFF_T define was
      Now that Alexandre Oliva has explained the use of acconfig.h to
      Remove some byte-copying code in unix_format() that did nothing except
      Small bit of paranioa. Ensure that if the incoming name to
      Fixed up warnings in new client code.
      First cut at kernel oplocks. This should have no effect unless runnin
      smbd/oplock.c: Use O_CREAT and O_TRUNC and correct mode flags
      Hoist by my own petard with warnings (forgot to set strict warnings
      Integration of Anders Blomdell <anders.blomdell at control.lth.se>'s
      Updates to the scripts for the new 14-char space format of account
      Moved the extra struct definitions Luke added to smb.h into rpcclient.h
      Fixed unused variable warning messages.
      Added missing display enum.
      Makefile.in: Fixed bug with continuation line causing proto to fail.
      Added Kerberos4 support patches from Johan Hedin <johanh at fusion.kth.se>
      Fixed the problem with reply_getatr() being passed a "" name in reply_getatr,
      Changes to test in configure if capabilities are enabled on a system.
      Added fix from gildea at intouchsys.com - smbpasswd file could be left
      Fixed problems found in lint pass over the old code by <cpeterso at microsoft.com>.
      Fixed stupid bug with "cd /" appending a "/" character to the path forever....
      Fixed bug introduced by me in dead code elimination.
      Missed one removed multi-statement line. Grrr.
      Got very strict about the differences and uses of
      Fixed warning in get_time_from_string().
      Fixed extern definition of cnum in clitar.c
      Fixed uid->vuid confusion in smbmount (hopefully).
      libsmb/clientgen.c: Fixed signed/unsigned compile warnings spotted by Herb.
      (Finally) implemented "max open files" as a global smb.conf parameter.
      Upped default MAX_OPEN_FILES to 10000 after conversation with tridge.
      Implemented directory-relative opens for NT opens.
      Fixed *nasty* bug in nt_lm_owf_gen() - this function was
      config: Fix crypt prototype on RedHat Linux.
      Fixed crypt problems on IRIX with prototype.
      trans2.h: Added Thursby MAC extension.
      Re-added code to tell the user how many open files they
      Small tidyups for gcc in 'preen' mode....
      Fixed sys_lseek and seek_file calls so all returns
      smbd/nttrans.c smbd/trans2.c: First fixes for NT5.0beta2. That redirector
      Fixed bug found by John Blair where trim_string wasn't
      Fixed mainly signed/unsigned issues found by SGI cc in -fullwarn mode.
      libsmb/smbdes.c: #ifdef'ed out code prior to removal.
      server/srv_samr.c smbd/ipc.c: Changed global_myworkgroup back to fstring
      Tidied up Support.txt to be up to date with latest consultant
      Removed previously #ifdef 0 'ed code.
      include/smb.h: Added #defines for lots of things - makes our code a *lot* easier to read.
      Reasonably large change to give us *exactly* correct NT delete on close semantics.
      Fixed bug in previous commit where I was overwriting share_mode from
      Fixed debug reporting in the changed code.
      Make the new code conditional on lp_share_modes() just like the code in open_file_shared().
      Handle the case where multiple smbd have the file open, some of whom
      Fixed a couple of issues with the SMB_QUERY_FILE_ALL_INFO query.
      Added new German consultant.
      First part of YODL converted documentation.
      YODL conversion of make_smbcodepage.1
      Fixed a few doc bugs in make_smbcodepage.1.yo samba.7.yo
      Not finished yet - added so I can check it out at home
      Fix from thwartedefforts at wonky.org (slightly modified) to
      Quick fixes to fix the broken tree. Needed for my morning compiles.
      Fixes to allow this to pass SGI compiler in -fullwarn mode (with one
      Added clear-out-structure fix for make_unistr2.
      Move man page section from (1) to (8) for smbd.
      Added Cybernet systems. Also made it clear that USA is *North* America,
      Finished nmbd docs, small changes to smbd docs.
      Tidied up option processing in smbclient - usage message now actually
      nmbd.8.yo: More tweaks.
      Fixed bug (that I introduced when doing the "delete on close" work
      Added html label() macros to man page sections allowing them to be
      Learned about the label() and link() commands and how to use url()
      Fix suggested by Nicholas.S.Jenkins at cdc.com - connect to the
      Mode doc work (smbclient was *nasty*).
      client/client.c: Patch to tidy up file size output.
      Fixed up html links - docs look better now (getting the hang of this).
      Tidied up VERSION section. Added testparm.1.yo
      More yodl-docs.
      Tidied up references to samba (7).
      Makefile.in configure configure.in include/proto.h smbd/noquotas.c smbd/quotas.c:
      Another one bites the dust....
      More docs...
      Added scripting option (-s) to smbpasswd.
      Added Xrefs to smb.conf.5.html file.
      Fixed up cross references into smb.conf.5 man page. Still working
      It turns out that yodl strips all spaces from link() and url() commands.
      Cross linked all the command line options.
      Added internal cross references for all man pages.
      Finally a man page for the smbpasswd file.
      Very simple awk script to convert a 1.9.18 password file into Samba 2.0
      Realise this needs to be without the '.sh' ending as we will be
      Added scripts/convert_smbpasswd to SCRIPTS
      Finished smbpasswd.5.yo.
      Sync up changes to smbd.8.yo and nmbd.8.yo.
      The start of a long and ugly process... :-).
      Useful script to extract all parameters out of the loadparm.c file
      More updates...
      lib/charcnv.c: Improved debug comment.
      Keeping it safe. NB. This is *not* yet finished and will *NOT*
      Up to "domain master" and still going...
      Save your work as you go... :-).
      Up to "magic script".
      Up to ole locking compat..
      Packing it in for the evening..
      Fixed lppause and lpresume docs.
      codepages/codepage_def.936: Updated comment.
      Makefile.in: Removed rpc_server/srv_ldap_helpers.c per J.F.'s instructions.
      smbclient.1.yo: Documented Andrews changes.
      Default for SMB_PASSWD program was set to smbpasswd ! This explained the problems
      Up to "read size".
      Up to "socket options".
      Done all the ssl docs.
      include/local.h:
      This is finished but still doesn't compile in YODL.
      Finally it compiles with YODL !!
      Fixed a broken link.
      Updating changes - now move to yodldocs directory.
      Added manpages/ to source path.
      Adding YODL docs maintainer script.
      First version of HTML docs generated from YODL source.
      First versions of the man pages auto-generated from the YODL
      Forgot to add these new (auto-generated) manpages.
      Makefile.in: Added target for makeyodldocs - not used by default.
      Swat now uses the auto-generated smb.conf.5.html.
      Added code to copy smb.conf.5.html to the swat help directory.
      Added link to YODL url.
      Fixed two debug prints.
      Fix from richard.kettlewell at kewill.com for leapyear bugs.
      Updated Manifest for 2.0.
      Updated smbd links.
      Added swat html & manpage.
      Added file to describe how to join a domain.
      Added text and html versions of DOMAIN_MEMBER doc.
      rpc_server/srv_netlog.c: Fixed crash bug with ACB_PWNOTREQ.
      J.F.'s latest printer fixes plus his gcc -picky fix for web/cgi.c
      Changed the welcome comments to look more like a release :-).
      Added enable user button. Fixed bug where log was always printed.
      Added the security changes suggested by Andrew - become the
      WHATSNEW now vaguely correct for 2.0 :-).
      Fix fd leak in error condition in grantpt code case.
      Updated to at least some semblence of reality :-).
      Moved some code (NTLMSSPcalc) out of smbdes and inline for paranioa
      include/kanji.h include/proto.h lib/kanji.c: Added const parameters in string wrappers.
      Fixed smbpasswd so that enabling a user who already has a password
      Use spaces not tabs.
      include/smb.h: Re-added zero pointer protection to ZERO_STRUCTP.
      Problems found by Herb.
      Makefile.in configure configure.in include/config.h.in: Changes for DGUX and UNIXWARE.
      Change to beta1.
      Updated for 2.0beta1.
      Added --with-smbwrapper to configure lines in spec files so JohnT's
      Fixed makefile problem due to change from SMB_PASSWD to PASSWD_PROGRAM.
      Fixed munging of sample file in man pages.
      Removed acconfig.h configure configure.in include/config.h.in: Made smbwrapper not made
      Update for 2.0beta1.
      Updated from smb.conf.5.html
      Fixed problem with smbclient issuing '*.*' to NT server when an
      (Hopefully) correct patch files for RedHat & TurboLinux.
      Fixes to get the manpages from the right place.
      Fixed swat packaging & man page packaging.
      Added fixes for machine accounts.
      O_EXCL fixes for printing files & oplocks.
      Makefile.in: Re-added quotes round ROFF call for DGUX.
      Moved PRINTCAP_NAME from smb.h to includes to allow it to
      Fixed missing NULL check in tar op.
      Added the same open()/fopen()/creat()/mmap() -> sys_XXX calls.
      Changed Makefile.in to use autoconf prefixes.
      Fixed NT modify timestamp issue.
      Fixed problem with HAVE_NETGROUP being used on platforms
      Fixed crash bug which was assuming that fd_ptr was always non-null
      Added OSF1 changes to HEAD (-lsecurity etc.)
      Changes to make the default prefix /usr/local/samba - as it was in 1.9.18p10.
      Sync up with 2.0 code.
      Makefile.in: Added passing of CPPFLAGS into Makefile.
      Fixed stupid blunder where I renamed getpwanam to getpwnam.
      acconfig.h configure configure.in include/config.h.in: Added -lsec and -lsecurity checks
      Instrumented hack fix with debug level 10 statements just in case :-).
      smbd/password.c: Added *SMBSERVER fix is name is too long.
      Fixed -Wall -Wshadow warning.
      Fixed oplock test path spec bug.
      Makefile.in: Added maintainer mode fixes.
      Sync up critical kernel oplock bugfix. I don't want to lose
      Adding George's Mac extension include files.
      Adding George's Mac extension code.
      Fix bug with nmbd running wild due to recursion in retransmit_or_expire_response_records().
      Fixed tar recurse bug.
      Unicode conversion fix in Japanese environment from Motonobu TAKAHASHI.
      *Finally*. Correct patch to fix timestamp problems from Paul Eggert <eggert at twinsun.com>.
      Fix from tulipant-gergely at dbrt.hu for returning incorrect error code
      Fix based on code from monyo at home.monyo.com to fix multibyte continuation
      Changed MAX to MIN in SET_FILE_BASIC_INFO as recommended by "Michael C. Adler" <Michael.Adler at compaq.com>
      Added new unicode functions - not used yet, but are the basis for the
      Ok - we now have the following functions for UNICODE support :
      First cut at unicode sys_xx functions. Now to start moving upwards.....
      include/includes.h: Trimmed down unicode directory entry to be POSIX complient.
      Unicode upper <--> lower character map. Needed for wisXXX functions.
      Awk script to create #include C code from unicode upper -> lower case map.
      Upper to lower case map table for unicode.
      Samba now includes a full ucs2 upper to lower case (and vica versa) map table.
      Added wtoupper/wtolower.
      Fixed range checking in unicode to multibyte function. Oops.
      Converted most of the functions in lib/util_str.c to smb_ucs2_t equivalents.
      Fixed getgrent() recurse problem.
      Added "crap" fix for rotating string buffers. (Increased to 20, added #define).
      client/client.c: I18N fixes.
      Moved check_plaintext_password() into smbd/chgpasswd.c from smbd/ipc.c.
      Fix for renaming directories on OS/2 server. Fix from John Janosik <jpjanosi at us.ibm.com>.
      Re-added "dfree command" functionality that was described in the man pages
      Generic wildcard matching fix from weidel at multichart.de.
      Fixed spurious error message when doing a 'put' of an empty file.
      Removed unneeded #define.
      Fixed deny mode bug :
      smbd/mangle.c
      Fixed bug in unix_mask_match() that caused veto files not to work.
      Fixed pointer arithmetic found by IRIX compiler.
      Fix problems with broken libc fvct returns.
      Use slprintf not snprintf.
      Added utmp fix from David Lee <T.D.Lee at durham.ac.uk>.
      Added missing #ifdef for WITH_UTMP.
      Added "inherit permissions" patch.
      Updated docs for "inherit permissions" fix.
      Added HP change.
      HP changes for registry querying.
      useable_space does not include the alignment offset calculations.
      Added Herb's swat fixes.
      Moved Herb's global -> local changes to HEAD.
      tdb record read error return check fix from Dave Airlie <airlied at samba.org>.
      First set of speed improvements from Ying Chen <ying at almaden.ibm.com>.
      Second set of inline optimisation fixes from Ying Chen <ying at almaden.ibm.com>.
      Added hash-based stat cache code from Ying Chen.
      Fixed code page conversions of messages outgoing/incoming.
      Modified auto alignment of ud[] struct on stack to be declared as an
      Fix from Motonobu TAKAHASHI to sort code page parameters first.
      Wrapped popen calls in HAVE_POPEN - needed if we are to add the
      Added check for SGI IRIX brokenness with semaphores when using gcc.
      Moved over lib/util_sec (with added fixes) as the HEAD source
      Defensive programming for cli_error().
      Correct for for core dump in smbpasswd with cli_errstr().
      Fixed wildcard match bug with '****' with smbclient. Found by Andrew (damn him! :-).
      Ooops. Fixed stupid typo with missing ! in cli error code.
      Added replacement functions sys_popen and sys_pclose. These are based
      Added "source environment" parameter from Nicolas Williams <Nicolas.Williams at wdr.com>.
      Make proto.
      Added support for SO_REUSEPORT for systems that have it.
      Fixes for Eastern Europe code page.
      Fix for reporting file system attributes correctly.
      Fix for crash bug from Paul Tyler <pct at ansto.gov.au>.
      lib/system.c: Fixed gcc warnings.
      Multiple-dot scope handling fix from Greg Bowering gb at pobox.com
      client/client.c:
      Fixes for strange Win2K attempts to auto-inherit ACLs.
      Fixes from Luke, back-ported from TNG to Win2k. Correctly return FAULT_PDU on
      Fix for Win2k unicode bug where doing SMB_NT_TRANSACT_CREATE it uses
      Fixed smbpasswd crash bugs found by Giulio.
      Added new codepage from Ded Marazm <DedMarazm at mail.lv> - MSDOS baltic rim.
      Off by one error in detecting Win2k unicode bug.
      Fixed bugs with -x smbpasswd entry. Thanks to Bruce Tenison <btenison at dibbs.net>.
      Update last changed time for new password entry.
      Correctly full buffer smbpasswd i/o streams.
      Tidied up fchown code, error reporting.
      Fixups for Win2K security descriptors from the 2.0.x branch.
      Big update moving the multi-pdu support from 2.0.x into HEAD for JF
      Not used. Functionality folded back into rpc_server/srv_pipe.c (where it
      Fixups for compiles with gcc flags -Wall -Wshadow -Wstrict-prototypes -Wpointer-arith -Wcast-qual
      Fix for names with spaces and some I18N filename issues from
      You *must* use O_EXCL when using mktemp (security issue).
      Fix stupid logic bug in detecting start-of-pdu in writeX on pipe.
      include/smb.h:
      Fixed parsing issue with HP printer defs reported by HP.
      Fix from NAKAJI Hiroyuki for a trailing '\n\ in asctime.
      Fixes to add "paranoid" option to popen. Checks some basic things.
      Fix from christoph.pfisterer at rwg.de for large directory listing to OS/2
      Added preliminary user list code from HP. Needs to be made dynamic
      acconfig.h configure configure.in: Added check for UT_SYSLEN for utmp code.
      Correctly convert from little-endian UNICODE to dos_codepage when doing
      rpc_parse/parse_spoolss.c: Added checks on mallocs/overflow checks on all prs_xx
      Fixed crash bug in new handle_netbios_name code.
      Moved common code to set parameter offset field correctly oout of 'if'
      Win2k will only accept volume labels in UNICODE. Fixed.... :-(.
      Cause nmbd to ignore loopback interface when constructing its interface                                                         list. This is done by default when interfaces are probed, but if someone
      Fixed bug found by JF where if the amount of data to return in the prs_struct
      Added check for LL suffix to long long ints needed by AIX 4.3.x compiler
      Fix for coredump in testparm.
      samba-bugs -> samba.
      IRIX include fixes.
      Additional fix for nmbd and 127.0.0.1 interface.
      Fix for spoolss code from Alan Hourihane <Alan.Hourihane at pinacl.co.uk>.
      Hmmm - unicode codepages need adding to HEAD. Thought that'd been done ?
      Fix for compiler warning about invalid structure type.
      Removed strange optimisation (paranoia fix maybe ?) that stopped smbd
      Change to vfs API. POSIX states fsync should return an int, not a void.
      Added strerror at debug level 0 on file create/open fail. Helps catch
      JF - you might want to look at this patch.
      Modified interfaces and added checks around *all* *alloc calls
      Fix for soft quotas not being set from
      include/byteorder.h: ALIGN4/ALIGN2 macros.
      The latest open() code changes broke the NT directory opens. Detect if a
      The changes made here broke NT security descriptor returning to NT clients.
      Bloody typo ! It should be & 3 , & 1 *not* &~3, &~1.
      Andrew made it faster :-).
      Roll back to using static MACHINE.SID after consultation with Andrew. This
      Ensure that CHECK_FNUM rejects fd == -1 correctly.
      Code to map tdb locks onto POSIX. Mainly placeholder code at the moment,
      Implmented mapping of lock offset/count from 64 bit MS ranges
      Removed "ole locking compat" parameter (no longer used).
      Typo - missing '}'.
      rpc_parse/parse_rpc.c: Changes from TNG (thanks Luke) for NTLMSSP parsing.
      Ensure sign&seal work. Data len must have RPC_HEADER_LEN removed, but
      Log file check patch from Mattias Gronlund <Mattias.Gronlund at sa.erisoft.se>.
      locking/locking.c: Fixed placeholder code for POSIX locking.
      Sync up with 2.0.7 w.r.t. guest users.
      This is a *big* checkin that may break some things, but implements the
      Now that fsp's are created on successful file open, the structure member
      Added the code that keeps fd's open across a close if there are other fsp's
      Added the hard code :-).
      Tidyup of smbecho.
      Fixed range check on writeX.
      Fixed crash bugs Andrew pointed out with LOCK4 smbtorture
      Did the rewrite Andrew wanted where all knowledge of POSIX locking is
      Fixed subtle unlocking bug when a file is closed. We need to store the
      Ok - this is more subtle than it looks :-).
      Made changes suggested by Andrew review.
      Added optimization where we are single opener (don't free POSIX locks).
      Forgot to close when "posix locking" is set to False.
      Added tdb_get/set_int_byblob, which takes a size_t len and then implemented
      Split off of POSIX locking into separate unit as Andrew requested.
      Ok - this is the *third* implementation of this (third time's the charm :-).
      Moved deletion of vfs handle into smbd/conn.c as it was being done too
      Removed tdb locking calls (picky Andrew...:-)
      locking/posix.c: Fixed double-free nasty crash bug found by insure.
      Added sys_fork() and sys_getpid() functions to stop the overhead
      Moved uglyness needed in fcntl locking (64->32 bit mapping, NFS
      Implemented the last (I hope:-) part of the locking puzzle, the reference
      Fixed wild pointer diff found by insure.
      Insure uninitialized memory read fixes.
      Added read overlay write lock on same fnum test to locktest2.
      Fix for stacking locks in brlock and POSIX. Windows only allows a read lock
      Added range info to the panic message to track down the bug with
      Fixed silly bug where I wasn't checking for matching fd's in closing a file.
      Fixed the bug locktest.c found, it was an off-by-one error in the non-overlap
      Fix based on Elrond's code to reduce the store size on removing dead records.
      Fix for debug statement crash.
      Updated to fix overlapping problem.
      rpc_server/srv_lsa.c: Bring into sync with 2.0.x.
      Two fixes. Added missong logic & case in lock split code.
      Fix for read_file() returning -1.
      Fix for dual unix_to_dos conversion in readdir from A.V.Shutko <AVShutko at mail.khstu.ru>
      Fix for uninitialized memory read in brlock code. brl_locktest now needs
      Someone :-) forgot to add secrets.c to HEAD.
      Fix for VMS platforms from "John E. Malmberg" <wb8tyw at qsl.net>
      Fix from David Collier-Brown - sys_select return was not being checked.
      Ho hum - forgot timeout case.
      lib/util_unistr.c:
      Check fstat return for error.
      Added unicode_to_dos_char() function to address converting single UNICODE
      Added code to do a one-way migration of the old DOMAIN.MACHINE.mac
      passdb/secrets.c: Fix typo in comment.
      Added fix for Win2k ACL query code from Shirish. I need this back ported
      Added Shirish's reg changes to HEAD. Sync up with 2.2.0 backport.
      Check error returns.
      Synced up srv_samr with HP changes. Added error checking to original code
      Cutover from 2.2.x - missed in merge.
      Fixed bug where mallocd size of prs_struct could be larger than
      Fixed bug I introduced last night (sorry). Now truncate incoming prs_struct
      Changed name of case_sensitive in mask_match to avaid gcc "shadow global"
      Modify NT driver heirarchy to fix HP bug with duplicate printer driver
      Fixed bug where file access was allowed on IPC$ share.
      Did a proper fix for the file access on IPC$. Denied all pipe opens on
      Fixed misunderstanding found during CIFS conference. Overlapping lock
      Compile time warning fixes and a time_t -> uint32 conversion fix.
      The functionality in this file has been moved into smbd/unix_acls.c in order
      Fixed interface between new ACLS and nttrans code.
      Working UNIX -> NT ACL mapper.
      Changed interface to set_nt_acl slightly.
      Changes I really don't want to lose whilst CVS is playing up.
      More stuff I cvan't afford to lose. I'm realizing how dependent I am
      Getting back to a compilable state (not there yet but close).
      Back to building. Now to test with insure.
      param/loadparm.c: Looks like someone ran indent on this !
      More insure found memory leak and corruption fixes.
      Fixed null pointer indirect in addprinterex. Still working on problem
      More memory corruption (leaks etc.) fixes.
      More memory leak fixes.
      More memory leak and PANIC action fixes.
      rpc_client/cli_lsarpc.c: Removed unused variable.
      Some tidyup fixes (memory leaks etc.). Still no progress with the
      Create elements in default, not in read.
      Memory leak fixes.
      Fixing get/set of security descriptors.
      Cause printer SD's to be displayed correctly (full control).
      Moved tdb functions that access parse structs into parse_prs.c
      include/smb.h: Removed NET_USER_3 struct from user struct. It doesn't belong there (yet)
      Fix for map_share_mode to allow desired access of zero map to stat open.
      Change from "David S. Chappell" <David.Chappell at mail.cc.trincoll.edu>
      Luke, I am moving the code back into passdb/passdb.c, this the correct
      Fix from Elrond for hash table corruption. Should fix stat cache bug (I
      (Correct) fix for desired_access being zero in map_share_mode().
      Paranoia changes to ensure that anything touched by a signal handler
      Fixes for IRIX kernel oplocks and systems that don't have nss.h
      Fixes for Win2k "add printer driver" INFO_LEVEL_6 was wrong, also some
      Changed default printer driver to "" from NULL.
      lib/util_unistr.c: Removed ascii_to_unistr() as it does no codepage.
      Changed enumports to show printernames as ports. In line with 'the grand plan' :-)
      lib/util_unistr.c: Off-by-one fix for dos_PutUniStr from John Reilly jreilly at hp.com.
      Fix a malloc of zero problem.
      lib/util_sid.c: Uninitialized memory read.
      Fixed display of "Everyone" in SD's.
      Changing drivers using the properties page works - but only if getting/setting
      Removed extra uint32 field in auto-notify reply. This fixes some spoolss.exe
      Tidy up current spool code - added some JRATEST ifdefs to allow
      Fixed oops with missing MANGLE_PATH directive.
      Removed unneccessary ()'s afer &'s that made it look like we
      printing/nt_printing.c: (From JF) use the driver name - already given to us.
      Ensure correct driver paths are returned in INFO_2 struct.
      Add local fallback for name lookup if no winbindd running...
      Allow name lookup to fail and fall back to using the "Everyone" SID
      rpc_parse/parse_prs.c: Removed extraneous ()'s.
      Code from John Reilly <jreilly at hp.com> to add tdb lookups into the Win95
      Modified the patch to look in the tdb *first* - thus allowing legacy text
      Fixed open handle code in printers - 3 functions were always being done
      Tidy up code to add printer. Always index in tdb by sharename. This
      Added some error checking and returns to the new 'move' code.
      Fixed up error checking and move printer file code. Fixed a memory leak.
      Ok - this is a *BIG* change - but it fixes the problems with static strings
      Added John Reilly's enumports/addprinter/delprinter scripting code plus the
      Save & restore the port name correctly.
      Added print job substitutions for %{printername}, %{sharename} and %{portname}
      Tidyup removing many of the 0xC0000000 | NT_STATUS_XXX stuff (only need NT_STATUS_XXX).
      Started to canonicalize our handling of uid -> sid code in order to
      Much though I hate to admit it - JF was completely correct. I cannot
      Added an NT_USER_TOKEN structure that is copied/passed around associated
      Fixed up the user/group contexts when using authenticated pipes.
      Fixed up se_access_check() to use the token list from the user struct
      Changed the sec desc access checks to match the spec. Needs testing.
      Added SID "Everyone" S-1-1-0 as always matching if present in an ACE.
      Found the sec_ctx_stack overflow - a become_root() should have been an
      Fixed memory leak with NT tokens.
      Fixed bug in new printer access check code. If PRINTER_ALL_ACCESS is changed
      Removed requirement that sid have an owner before being interpreted.
      Tidied up security rights definitions.
      Added "add_printer_hook" call to update printer for Win9x clients.
      Fix case where volumename could be returned as UNIX charset or DOS codepage
      Fixed the problem with UNISTR marshalling in a buffer5 struct.
      Reverted the change Luke made. Removed IS_BITS_SET_XX macros.
      Tidied up extra ()'s.
      Fix for safe_free freeing static strings. From Robert August Vincent, II.
      Added code to do SID to uid/gid conversion. Needed for ACL support.
      Documentation on NT_USER_TOKEN. Requested by Sander.
      Tidied up some error returns from printing calls. Still need to map UNIX
      Modified to use sid_to_uid and sid_to_gid. Now ready for POSIX ACL
      vfs write data fix. Fix for name matching in addtosmbpass
      smbd/password.c: Fixed typo in Tim's new code that caused insure overrun error.
      This doesn't compile but is a placeholder for moving the UNIX
      Implemented AbortPrinter() from Gerald's Win32 test code. Just purge all
      Fix for bind interfaces only sometimes picking the wrong IP address
      Added vfs_unlink call to ensure vfs is used on unlink from client.
      Fixed error returns for moving printer driver files around so generic
      Fixed overrun write error when using debuglevel > 50.
      Implemented DELETEFORM tested using Gerald's Win32 test code :-).
      Fix from John Reilly @ HP for my typo with the parameters being reversed. Ooops.
      Implemented GETFORM tested and working using Gerald's Win32 test progs....
      Fix for the SID history problem when using a Win2k domain controller
      Fix from John Reilly for double free of printer struct.
      Temporary fix to convert from level6 (Win2k) to level 3 (NT4)
      Added code to return NO_MORE_ENTRIES when trying to determine
      Fixed the printerdata code to return NO_MORE_ITEMS if a size is requested
      Win32 API is explicit that EnumPrinterData returns ERROR_MORE_DATA not
      Fixed typo where docname was being checked for datatype - was causing
      Fixed up get_a_printer_driver_3 so it looks in the tdb using the correct
      Implemented DELETEPRINTERDATA (tested with Gerald's Win32 progs).
      Fix for malloc of zero bytes found by insure.
      Fixed memory leaks found in enumprinterdrivers code.
      With John Reilly help tracking it down - fixed a *nasty* bug when
      Fixed error return when printer is PAUSED - should be returning "Pause".
      Fix for enumjobs infor level 2 which caused smbd to coredump.
      Added time check test before allowing print job.
      Added SIGHUP when printer deleted as well as added.
      Ensure old DACL and SACL are preserved if the new SD is a 'set' only.
      Move towards getting W2k p&p to upload NT4.x drivers. Still doesn't work -
      Fixes from JF as I didn't understand the string array sizing code correctly.
      param/loadparm.c: Fix based on Damian's code to stop printer scripts getting overwritten.
      Fix to allow a timestamp of zero to cause an instantaneous changenotify
      Some code moved back from TNG - updates to LSA stuff. Not yet used but
      Adding fix from Jim Vopni <jimv at metrics.com> to ensure jobs are
      Optimization (noticed by bloody Andrew :-) to stop directory scan ever
      Changes from John Reilly to add a parameter "show add printer wizard" that
      Restructuring of the code to remove dos_ChDir/dos_GetWd and re-vector them
      Fixed stupid introduced bug found by "Jim McDonough/Boulder/IBM" <jmcd at us.ibm.com>.
      Added comment on JF's new code. Removed ifdef in passdb/smbpass.c as this
      Removed a line by mistake...
      Fix from John Reilly for forms ordering problems.
      Missing from HEAD and 2.2 - terminal server reg config.
      utils/smbcontrol.c: Fixes from Herb for interactive use.
      Missing null termination on printer changenotify message caused insure
      Added debug so if zero length messages get sent we successfully remove
      Memleak fix for cache code.
      utf-8 and EUC3 patch from Hiroshi Miura Samba User Group Japan staff.
      Fixes from Herb - compiler warnings.
      Fixes for the fact that UNICODE sizes are no always 2*no of chars when
      Adding Herb's compile warning fixes to HEAD.
      Made re-init of stat cache explicit rather than being hidden.
      Herb's fixes for profiling & compiler warnings.
      Vector get_nt_acl/set_nt_acl via vfs. POSIX ACL support should be added
      Fixes from Damian at Cisco to tidy up some tdbtool issues.
      Fix for null passwords being allowed bug.
      Restructuring of vfs layer to include a "this" pointer - can be an fsp or
      Inlined many of the vfs_XXX calls as macros for speed.
      Herb's warning fixes. Also the POSIX locking fix.
      Proto update. Also fix from John Reilly @ HP for not showing APW with W2K.
      Fixed error return messages needed for NTTrans CreateDirectory.
      Print socket options - patch from Dave Collier-Brown @ Sun.
      Fix from RFritz at lbl.gov for Linux ECONREFUSED async errors on Linux.
      Added Herb's fixes to HEAD.
      Fix for printf attribute from Mattias Gronlund <Mattias.Gronlund at sa.erisoft.se>
      Fix for yp_get_default_domain from Neil Hoggarth <neil.hoggarth at physiol.ox.ac.uk>
      Integrated support for NT and OS/2 lpq parsing. Code from
      Ensure browse.dat is written and read in UNIX character set format.
      sys_popen got damaged when converted from FILE * to int fd I think.
      Missing conn parameter missed in vfs rewrite.
      Added debug so we can see how winbindd converts SIDS.
      Fixed nasty size wrong bug spotted by the eagle eyes of
      Fixed Realloc memory fragmentation problems.
      Fix found by Andrew to stop local/remote printers being
      Fixes to periodically scan printing.tdb in idle time and occasionally
      Remove lpq as root fix - do this in print_job_start instead
      Fix for growing printing.tdb by adding check on job creation.
      Fix to avoid calling getgrgid for no reason.
      Use sys_setgroups - systems with broken getgroups need this.
      Fixed %d printf with unsigned long arg.
      Turns out we do need the pwnam check as on many systems the users
      Ignore SIGUSR2. Terminate nmbd if we have no interfaces.
      Fix to allow smbd to call winbindd if it is running for all group enumeration,
      Fix to allow smbd to call winbindd if it is running for all group enumeration,
      Added David O'Neills fix to HEAD (hmmm. how did this compile... :-).
      Fixes to get ms-dfs code to compile with the new changes.
      Ok - this is a big patch - and it may break smbd a bit (although
      Fix for vfs_fstat() crash with new stat code.
      Fixes from David Lee for utmp handling.
      Yeah - not setting getwd_cache to True as default, that'd do it for a 5x
      John Reilly @ HP (who is a wonderful human being and *definately* needs
      Fix for uidtoname not returning DOMAIN\name but just name. This caused
      We already have a perfectly good next_token() function we should be using
      Even when looking up a users groups via winbindd even if the lookup for
      Sorry JF - no billable hours :-). I fixed the "stream of events" problem
      Added John Reillys patch for error code returns from clean_up_printer_driver_strunct()
      Rolled back find NetBIOS name of PDC/BDC code as a temp fix. This
      Fixed silly bug in dup2 code found by Kenichi Okuyama at Tokyo Research Lab. IBM-Japan. Co. Jp.
      David Lee's utmp patch (finally). Thanks David !
      Another patch to fix cli_reestablish_connection from Kenichi Okuyama at Tokyo Research Lab. IBM-Japan. Co. Jp.
      Patches from John Reilly @ HP for print job time bugs.
      Call standard_sub_advanced() after lp_logon_XX() calls.
      Fixed double btyte-swap problems with bigendian architectures.
      Only use prs_uint8s on marshalling as we know we're little endian. On
      Remove CGI logging code. Make username/password lookups take
      Sync up with Tim's changes in applience-head for SACLs.
      Fix for admin user being ignored.
      Merge from Tim - don't reinsert UNIX job if already exists.
      Fixes for sample VFS audit code from "Brad Sahr" <bsahr at macromedia.com>.
      Added a VFS version return to init call. Allows smbd to fail an init if
      Added a VFS version return to init call. Allows smbd to fail an init if
      Fix to the "known/unknown user" difference patch from "Ron Alexander" <rcalex at home.com>.
      64 bit fix from Uros Prestor <uros at turbolinux.com>.
      Fix from John E. Malmberg <wb8tyw at qsl.net> for -1 return in interfaces scan.
      printing/nt_printing.c: use getpwuid not smbgetpwuid. Canonicalize printernames.
      rpc_parse/parse_spoolss.c: Updated comment for old version of W2K.
      Added Tim's changes to lock DB during update.
      Merge in Herb's changes from 2.2.
      Merge of Herb's profiling code.
      Tims fixes for non-local lookup.
      Fixed the cut-n-paste bugs in the new passdb backend code that leaked memory.
      printing/nt_printing.c: After long soul searching and making both Andrew and my
      Merge from appliance head of JR's changes for driver versioning.
      Tuyrn debug timestamps on by default.
      Uninitialized memory read fixes.
      Ok - fixed a bug in our levelII oplock code. We need to break a level II on
      Fix from Jim McDonough @ IBM for OS/2 clients.
      Fix for plaintext passwords from Pat Sandfort @ HP.
      Fix for a problem with the new messaging system. If a sender is using the
      Fix for incorrect break using wrong offset when updating a form.
      John Reillys fix for de-registering broadcast names (NT doesn't do this).
      Delete queue on empty.
      Fix for memory leak when adding driver.
      Fix from John Reilly for equivalence tests.
      Fix for updating of print queues changed from a local box. Essentially,
      Fix for off-by-one StrnCpy.
      Don't forget to convert into UNIX character set before calling
      ADDPRINTERDRIVER info level 6 fix - this is dynamic depending
      Free talloc'ed memory from the main smbd. Patch from Rich Bollinger, Elliott Company
      Tar fixes from Craig Barratt craig at arraycomm.com.
      This should fix Office failing to print to "FILE:".
      Removed unnessesary init.
      Fixed messaging so main smbd can get lib/message.c messages.
      passdb/secrets.c passdb/smbpassfile.c smbd/server.c : Actually *use* the code
      include/dlinklist.h: Added '{' '}' around DLIST_PROMOTE so it can be used as a single
      Work in progress, doesn't compile. Adding the POSIX ACL mapping....
      Keep syncing up POSIX ACL work...
      Code to read & return POSIX ACLs as NT ACLs. Close to test on Linux.
      Added print_freelist command.
      Added sorted freelist neighbour merge code to stop tdb fragmentation.
      Fixed one tdb_read -> rec_free_read call.
      Changed to sourceforge tdb code. This includes spinlocks (so we now have
      Sync-up with appliance-head printing code.
      Moving to abstract API interface (sys_get_acl() etc.) to allow system
      Make smbd/posix_acls.c use abstract interface.
      Cause smbd to use the new posix_acls code, not the old unix_acls code.
      Working code to read POSIX ACLs on a Linux system using the bestbits
      Added better configure test for POSIX ACLs. Fixed stupid typo in sysacls.c
      Fixed bug with tdb_next_lock failing when reaching then end of a hashchain
      file_lines_load/file_lines_pload can now optionally convert unix_to_dos()
      Fixed bug with Win9x/ME where drivername was being returned incorrectly in
      Fixed *very* subtle statcache bug where invalid stat state could be
      Removed unused auto (IRIX compiler warning).
      Added OLD_NTDOMAIN to remove warnings about undefined functions.
      Fixed compiler warning.
      Fixed typo causing coredump in file_lines_parse.
      Added Tim's fix for read-only crashes.
      Adding in debug for SD's.
      Fixed very subtle bug returning correct error on an open, when we have
      Fix for short names not being returned correctly with non-mangled shares.
      Extra part of fix that Gerald missed (sorry).
      Sorry Gerald, I think the original code was better (plus safer as I'm sure
      Owner always has READ_CONTROL and WRITE_DAC access.
      Removed the special casing of SIDs in se_access_check. This is now done (correctly)
      Merged in Tim's changes : Removed static limit of MAX_LOOKUP_SIDS in rpc server and client
      Fixed processing of dfree script (was truncating).
      Fixed bug noticed by JF. se_access_check needs user SID as first in token.
      Two tdb bugfixes. First one - ensure that traverse lock is moved before deleting
      Added proto definition for new RPC calls.
      Updates from appliance-head.
      Fixed memory leaks in lsa_XX calls. Fixed memory leaks in smbcacls. Merged
      Fixed memory leak in JOB_INFO_2 code.
      Added lock backouts on fail.
      Never free anything in the rpc_parse/prs_XXX functions. Do it in the enclosing
      Documented -C and -G options to smbcacls.
      Added -C username and -G username that allow a user (usually Administrator)
      Fixed chown/chgrp setting from smbcacls.
      Merged Tim's fixes from appliance-head.
      Fix typos in new group sid check.
      Cast prs_alloc_mem to correct type.
      A couple more UMR fixes.
      Split the one sys_acl_free call into sys_acl_free_TYPE calls, to allow
      Split set_nt_acls into owner set (which uses chown) and permission set
      Fixed bug found by Gerald. If a Samba server joins a domain and is set
      Removed uninitialised variable.
      Patch from Richard Bollinger for dead entries being left in connections tdb.
      Fix from "B.V.Dean" <B.V.Dean at ukc.ac.uk> to add "dos filemode" parameter
      rpc_server/srv_samr.c:
      Fix from John for growing messages.tdb.
      First compiling version of code that sets NT ACLs as POSIX ACLs.
      Fixed typo with acl_set_fd() not needing an ACL_TYPE_T parameter.
      Updated from 2.2.
      Fixes for POSIX ACLS. ACL merge code.
      Typo in new file_chmod code caused file attribute changes to fail.
      Get the logic right thistime :-(.
      include/vfs.h:
      Fix from Kenichi Okuyama for memory leak on Realloc fail.
      smbd/lanman.c: Fix for calling qsort with 0 number.
      smbd/process.c: & type with 0xff for paranioa sake...
      Added modification to Richard Bollinger getpw[nam|uid] cache patch. Only
      Sync up with POSIX ACL code from 2.2.
      Fix insure problems with passwd caching code.
      Fixed "object picker can't determine if object in domain" bug seen from W2K
      Fixes from appliance-head for pdc searches.
      Fix inspited by Alan Romeril. 50% speedup in domain logins with this
      lib/system.c: Fix for pw caching.
      Merge from 2.2 - with connection fix.
      Ensure people know this is unused.
      Merge of JohnR's changes to appliance-head, JF's changes to 2.2,
      Fix for DACL/SACL masking typo - spotted by medha at pezman.austin.ibm.com.
      Fixup missing tests on code imported from tng.
      It compiles for me now :-). rpc_server/srv_lsa.c - added fix to allow w2k
      Fix from "Jim McDonough" <jmcd at us.ibm.com> for s390 Linux.
      Patch to add UnixWare ACLs from Michael Davidson <md at sco.COM>. With some
      configure configure.in smbd/posix_acls.c smbd/dosmode.c: Fix for zero permission W2K profiles.
      Excise snprintf -> slprintf.
      Fixed file descriptor leak in error processing of print jobs.
      lib/select.c: Fix for Linux 2.0.x kernel that causes select to return true on a pipe
      Always increment even if the read fails (otherwise we spin if we hit the kernel bug...).
      include/rpc_spoolss.h: Added JOB_STATUS_XXX defines.
      This patch (donated by Marc Jacobsen of HP) should make Sun and HP very happy :-).
      rpc_client/cli_netlogon.c: Fixed incorrect printf.
      Separated reg code into interface & implementation.
      Started conversion of lsa server code to canonical format (as srv_reg and
      Added implementation file for lsa.
      Separated lsa code into interface and implementation.
      Split wks pipe into interface and implementation modules.
      Split srvsvc pipe into interface and implementation modules.
      Implementation module for netlog pipe. Can't be easily integrated into
      Separated dfs pipe into implementation and interface modules.
      As prs_alloc_mem now zeros memory, remove superfluous memsets after it.
      Added patch from Urban Widmark <urban at teststation.com> modified by me to
      Hmmm. I thought I'd added these files to CVS head.....
      Added total memory allocated counter to talloc, so we can tell if a talloc
      Don't marshal data from a stack frame.....
      Fixes from Toomas Soome <tsoome at ut.ee> code unicode problems, plus
      Move to talloc control of SPOOL_XXX structs. Move to talloc control of
      Partial conversion of SPOOLSS code to canonical format. More to follow.
      Ooops - forgot to check the rpcclient and smbcacls compile with the new
      Converted more to canonical format... save as I go.,
      More converted to canonical format. Home now - do the rest tomorrow...
      Fix for stack return from  "Jim McDonough" <jmcdough at hotmail.com>.
      Finished converion of spoolss code to canonical format. Now to work on the
      Ensure that SPOOL_NOTIFY_OPTION structs are safely copied out of the talloc
      Remove unused code.
      rpc_parse/parse_spoolss.c: Fixed memory leak introduced by restructuring.
      When opening a printserver use a global snum of -1.
      Fix memory leaks introduced in restructure.
      Don't return stack structures...
      Fixed a couple of getpwXX calls that were not going through the sys_getpwXX
      Move to talloc controlled NT forms.
      Arrgggh. Returning the SPOOL_INFO stuff requires that the realloced
      Merged JF's fixes into HEAD. These are for string parsing and SAMR fixes.
      Roll back to using malloc/realloc on some of spoolss in head.
      Fixed up overrun read when marshelling SYSTEMTIME struct. This was a subtle one...
      Sync up handle creation with 2.2 branch. We can now join AS/U domains and
      Fix for AS/U not liking it's own assoc_gid.
      Fixed double fclose() call (I love insure :-).
      Serious (and I *mean* serious) attempt to fix little/bigendian RPC issues.
      Missed some prs_inits.
      Merge .cvsignore between 2.2 and HEAD.
      Sync up Urbans changes from 2.2 into HEAD.
      Notused.
      Merge of new 2.2 code into HEAD (Gerald I hate you :-) :-). Allows new SAMR
      No longer used...
      Ok - everything now compiles in HEAD (at least the default stuff). We
      Added JF's new util.
      Remove "BYTE" - we already have uint8 - don't need more conflicts with
      Sync include files between 2.2 and HEAD except for acoount info.
      Ensure we're checking for the "FIRST" flag in other types of PDU than "REQUEST"
      Dead code removal. Not used anywhere.
      Removed JRATEST line.
      Moved cruft out of smb.h into ntdomain.h where it belongs. dc struct
      Looks like AS/U doesn't set the FIRST flag in a BIND packet.
      Ok - we're now sending back policy handles to bigendian AS/U correctly.
      We copy the RPC header directly from the incoming client - remember to
      Added ADMIN$ share as alias for IPC$ except no guest connect. AS/U wants
      Ensure we return the correct names/sids on query info. AS/U showed us what
      Ensure we never return passwords from a user query.
      Fixed reading of strings from big-endian RPC clients.
      We were mismarshalling a netlogon reply for bad password to W2K.
      AS/U does setuserinfo2, level 0x12 when joining a domain - identical to setuserinfo level 0x12.
      rpc_parse/parse_samr.c: Removed unneeded deubg.
      Move to a handle database per pipe name, not per pipe.
      Fix from Jim McDonough of IBM for using Win9x user manager.
      AS/U on a sparc now joins and authenticates against a Samba PDC !
      Fixed a Dr. Watson when viewing permissions - we were missing the "standalone
      Return correct error message if we can't get the SID secret.
      Last attempt at fix...
      Final ! Fix.
      Last tweak (I promise :-). Fallback to returning our SID if we're a domain
      Tidyup return of zero-permissions (map to ACE_DENIED, GENERIC_ALL, Everyone).
      Added files for CUP printing patch split.
      Added Michael Sweet's CUPS patch to call directly into the CUPS backend.
      Updated defaults for CUPS printing from Michael Sweet.
      Updates for CUPS 1.1 from Michael Sweet.
      I'm happy with the mapping for NT getACL, now for NT setACL.
      lib/system.c (Finally) fixed all insure errors in password caching code. We can't
      Added sys_dlopen/sys_dlsym/sys_dlclose.
      Fix for crash when doing name lookup with a quoted string. Part of
      When calling DLIST_REMOVE(x,x) (from lib/interface.c) ensure that the pointer
      Fix memory leak when doing DLIST_REMOVE(head,head).
      New POSIX ACL mapping code. Works with UNIX permissions, now for testing
      Sync up with 2.2 ACL code.
      groupdb/mapping.c:
      Two OS/2 printer fixes from Jim McDonough @ IBM.
      Made the fixes Andrew suggested to asci string code to use srvstr_push.
      Fix insure-found parameter size missmatch.
      More unused variables.
      Added Gerald's fixes.
      smbd/posix_acls.c: Sync up with 2.2 changes - don't return deny ACE's.
      Ensure get/set NT ACL code is redirected through vfs.
      smbd/posix_acls.c: Saving and restoring errno here is the wrong place. Moved it
      Patch to make automount lookup fallback to get home directory from getpwnam.
      Fix from Dave Collier Brown to log a debug at level zero on common misconfigure.
      Patch from Sean.Batt at anu.edu.au to ensure error reporting is done before
      Missed a cli_set_port on message code connect.
      Fix for smbtar race condition from Glenn Burkhardt <glenn at aoi.ultranet.com>.
      Fix from Ryo Kawahara <rkawa at lbe.co.jp> to make SWAT correctly write and smb.conf
      Patch from Massimo Sivilotti <mass at tanner.com> to log remote machine/ip on
      Bail out early if null passwords and lp_null_passwords not set.
      Fix for ENOSPC from DCB.
      Patch from David Gibson <dgibson at linuxcare.com> to reduce "silent abort"
      standards.h only exists on IRIX 6.x and above (Herb please check !).
      Added NFS quota support for Solaris 5.x from Alan Romeril <a.romeril at ic.ac.uk>.
      Patch from itegem <J.P.M.v.Itegem at ele.tue.nl> to handle LPRng v3.16 and above.
      Removed NFS quotas code for Solaris as Alan wants to re-write it.
      Fixed the problem Gerald reported. Unfortunately we need to go back to
      Fixed typo bug spotted by Jim Vopni jimv at metrics.com. Caused no status to
      Insure fix. Don't read 4 bytes from data area unless there are 4 bytes to read.
      Added cli_nt_create_full() as a way to get at all the ntcreate parameters.
      Added cli_nt_delete_on_close() call to allow flag to be set for torture tests.
      Added delete on close test that has allowed me to determine how w2k
      Changed to using GENERIC_XX constants instead of hex values to make
      Expanded delete on close test to 6 cases. I now understand the semantics of
      Added one more test - just to make sure flag can be unset.
      This is a big, rather ugly patch. Whilst investigating the files not truncated
      Fixed extern ref typo for file generic perms. 2am coding strikes again :-).
      utils/torture.c: Added one more delete on close test.
      configure configure.in include/config.h.in lib/replace.c: Added test and replacement
      Integrated solaris nfs quota code from Alan Romeril <a.romeril at ic.ac.uk>
      include/ntdomain.h:
      IRIX ACLs from Herb.
      Added XFS ACLs on Linux. Code from John Trostel <jtrostel at connex.com>.
      Sync up with new NT forms code.
      Missed forms update - my CVS mistake.
      Fix for broken RelientUNIX.
      I know we're supposed to be feature frozen, but I couldn't resist this... :-).
      Tidy up tmp file handling.
      Fix from  "Romeril, Alan" <a.romeril at ic.ac.uk> to get his NFS quota code
      Fix from Michael Davidson <md at sco.COM> to merge Solaris and UnixWare ACLs.
      Setup syslog correctly in swat. Patch from Andrew Bartlett.
      We can now use server manager to look at Samba shares. NT still expects a ":"
      NT sucks ! :-). We have to prefix the UNIX path with a C: in order to pass the
      If we can't open the username map file, at least print the strerror.
      Added stub function for NET_SHARE_ADD. Once this is implemented to call a hook
      Implemented stub function for NET_SHARE_DELETE. Now to implement the real
      Fix from Ed Boraas for not core dumping when out of connection structs.
      Added 3 params to manipulate shares. "add share command/change share command/
      Fixed up the "add" command - although not SD's yet. Now for the SD db and
      Added per-share security tdb. Tidied up many slprintfs (need -1 on length).
      Got "medieval on our ass" about adding the -1 to slprintf.
      HEAD specific slprintf paranoia fixes.
      Added set/get SD's on shares. Check before tcon.
      Ensure Everyone/All access is mapped correctly to file generic perms to allow
      Set SD's for share. Added level 1501. Map GENERIC file bits to specific bits.
      Get/Set of SD's on shares now works. Correctly ensure scripts exist before
      Tidy up return codes for server manager.
      Removed "read only" arg as it isn't useful.
      Fixup warnings about extra ';' from SGI compiler.
      Use message system to notify when smb.conf is updated.
      Added JohnT and Andrew Bartlett's PAM changes.
      passdb/pass_check.c: Ensure second check is done only if given username is all in caps.
      Added HAVE_STDARG_H to tdbutil.c
      Fixed --with-automount compile error.
      Fixed missing HAVE_STDARG_H.
      Merged in missing break fix from Shirish.
      Restrict dfs add and dfs remote to root at Shirish's advice.
      Added SMB_ prefix to enums that clash with Solaris ACL definitions.
      Changed the order of -kPIC and -kpic.
      Fix for core dump in security = share code with new share security db.
      To stop people complaining about the mktemp call, move it into lib/util.c. Thanks
      Merged John's changes.
      Changed lp_add/delete/enum scripts to use lockdir if spool dir doesn't
      Can't use space in random string used for exec.
      As Andrew suggested, make smbrun return a fd for a deleted file which can then
      Merge of Andrew's changes in 2.2.
      Added fix from "Eric Boehm" <boehm at nortelnetworks.com> to try and set hard
      Fixed potential file descriptor leak with MS-Access fix.
      Michael Davidson <md at sco.COM> pointed out that acl_get_qualifier can potentially
      configure:
      Fix for True64 treating readonly as a reserved word !
      Added POSIX_ACL support for *BSD. Patch from jedgar at fxp.org. Changed
      This little piece of insanity is inspired by the
      Removed one samba-bugs ref. from source.
      Fix from Tony Butt - shouldn't set got_pass for -c option.
      Fix from "Darrin B. Jewell" <jewell at bdi.com> to allow anything other than
      Added Darwin guess.
      Patch from "Christoph Zwerschke" <zwerschke at zuv.uni-heidelberg.de> to
      Fixed potential bug in "become_guest" pointed out by elrond. Get_Pwnam()
      Correct fix for open readonly with truncate.
      Finally got the semantics right (hurrah!).
      Added --with-codepagedir as RedHat 6.2 and 7.x place them differently.
      AIX ACLs donated by IBM.
      Merged Andrew's wfw fix (2).
      Rememver to use VFS at all times... even in new user_can_read_file code :-).
      Merge of changes from 2.2.
      patch from Steve Langasek <vorlon at netexpress.net> to make sure we
      Removed mktemp from HEAD - same as done in 2.2.
      Fixed compile bug when using --with-pam but not --with-utmp.
      Fix proto's in old code.
      JF pointed out we were returning the wrong info for Domain member with info
      Finally got name & SID returns correct.
      Commit of a modified version of Andrew Bartlett's patch that removes the
      Added smb_ prefix to all Samba wrapper pam functions.
      Fix for bug in code for pam_session failure - pam_end called twice.
      Fix more free twice bugs.
      Added "obey pam restrictions" parameter - default to "off".
      Fixed memory leak in new session code.
      Fix "proc num out of range" error. Missing rpc call.
      Patch for nmbd core dump in printing debug packets. No length check.
      Fix bad length in dgram.
      More paranioa fixes against nmbd lengths.
      Fixed %U and %D substitutions. %U is lowercase user name, %D is uppercase
      Re-ran autoheader; autoconf to fix pam_smb build.
      Sync with default perm changes in 2.2.
      Fixed REPLACE_GETPASS test.
      Added Herb's comment fix.
      Fix from matthew.hart at veritas.com - bad error return from linux_oplock_receive_message().
      Patch from Fr�d�ric Blanc <el_blaf at yahoo.fr> to correctly uninstall
      Fixes for problems in NFS server code from Michael Gerdts <Michael.Gerdts at usa.alcatel.com>.
      Tidy up args to DEBUG Statements - found by gcc on Solaris.
      Don't use variables called "acl" as it's the name of a function in Solaris.
      More acl -> the_acl, %d with uid_t issues.
      More %d (uid_t) stuff...
      More debug %d -> %u issues.
      Mismatched format and args.
      More gcc compile on solaris tidyups.
      rpcclient/rpcclient.c: Non-void return in void function.
      Based on an original PAM patch by Andrew Bartlett, re-written by me to
      Ensure correct password change script gets selected --with-pam.
      Fixed password entry caching bug pointed out by Elrond.
      Fixing consts in pam code.
      Added code from "Nigel Williams" <nigel at veritas.com> (yes, the same famous
      Allow pam code to compile on Solaris (which doesn't have PAM_AUTHTOK_RECOVER_ERR).
      Added Andrew Bartlett's fixes to my changes to his original patch (at the
      Stop coredump on pam password change with pam_pwdb.so module on error.
      Runtime check for broken PAM systems with no appdata_ptr support. This
      Fixup smbcacls. Don't return memory already freed, don't free memory allocated
      Remove embedded '/*' in comment.
      Fix noticed by John Trostel - we need to return our account SID for level 5.
      Had to add a "pam password change" parameter (defaults to "off") and inlined
      Merging Gerald's PDC SAM name fix.
      Merging Gerald's "no printer driver" fix from 2.2.
      Fixed SHM_R/SHM_W warnings by moving sys/ipc.h and sys/shm.h into includes.h
      Fix problem with OpenBSD mmap and write not being coherent.
      Patch from David_Tiller at ccnotes.ccity.com finally applied now I've thought
      Fix for bad profile perms. Ensure r on files and rwx on directories.
      Patch from ackley at cs.unm.edu to clear server_fd/client_fd in root daemon to stop
      Fix for insure missmatched parameter error.
      Fixed up the oldpw prompts. Made the matching case insensitive.
      Made "security XXX" masks apply to ACL set. By default they have no effect.
      Don't check for passwd program if using pam change password.
      Fixed nasty little bug found by Gerald where we were corrupting the mode
      free_service() was never setting the valid field to False. This is a bug
      Got rid of iSERVICE/pSERVICE (Hungarian inspired obfuscation). Now use
      Fix for problem with "" string in trim_string(). Pointed out by Ben Winslow <rain at bluecherry.net>.
      Needs to be >=, not just >.
      Now we're doing the substituion in the lp_string code remove the erroneous
      string_hash() should be static. hash_clear() should be void.
      Implemented max connections in a similar way to 2.0.x (scan of connection db).
      tdb_traverse returns number of records, not zero, on success.
      Stupidity by me..... 777 != 0777
      Fix crash in smbcontrol Gerald pointed out when no parameter given to debug.
      Check sizes of data entries in connections.tdb before deciding they're crecs...
      Fixed glibc crash problems with libnss_wins.so
      Zero-fill struct hostent.
      Added example vfs block example from Ronald Kuetemeier <ronald at kuetemeier.com>.
      Update from Toomas Soome <tsoome at ut.ee>.
      groupdb/mapping.c: Fix gcc compiler warning.
      Fix the W2KSP2 joining a Samba domain problem.
      Use canonical mappings for file controls. Fixes W2KSP2 profile problems (I
      Defensive brlock and locking database cleaning code.
      Try to fix build by adding autoconf tests for pam headers.
      Stupid typo. Should be if (!tdb).
      This is *very* cool. I'm pretty convinced we can just set the
      Added tdb_errstr() messages so we can see if these functions fail.
      Fix for random stream generator.
      Fixup the large_writex problem (a large_writex can send a full 64k of data,
      Added tdb_change_int_atomic() to allow atomic updates of a tdb int value.
      Fix debug statement so it doesn't use lp_workgroup() either.
      Rename bzero -> memset.
      Deal with incorrect large writes from old NT4.x clients.
      Set correct reply word in large writeX (greater than 64k) replies.
      Changes to use new genrand code that got missed while I was in Japan.
      Added getconf flags for RH7.1 lfs support. Changed while() to a for()
      Correctly make max pathlength 255.
      Extra stuff for large readwrite support.
      Added sys_acl_delete_def_file() - needed as part of NT ACL editing fix.
      Added sys_acl_delete_def_file for UnixWare and Solaris from
      AIX has no default acls.
      Log tdb failures.
      Herb's IRIX fix for deleting default ACLs.
      *Wonderful* patch from Andrew Bartlett that will help ensure tdb's are
      Fixed typo in Solaris and UnixWare ACLs.
      Fixed potential free of NULL found by SGI speedshop.
      Found & fixed memory bug. num+1 * sizeof(x) != (num+1)*sizeof(x)........
      lib/util_getent.c: removed debug code.
      Fix from TAKAHASHI Motonobu <monyo at samba.gr.jp> for multibyte conversion
      Make message receive fn static.
      Fixed typo spotted by "Jim McDonough" <jmcd at us.ibm.com>....
      Jim McDonough's parse patches for Win9x get SD calls.
      Modified version of Jim's 0x27 and 0x28 Win9x Secdesc patch.
      Added "Jim McDonough" <jmcd at us.ibm.com> patches for directory support
      Added patches to remove Linux specific XFS ACLs. These are now handled by the
      Fix for assert fail - left over when moved to dynamic allocation.
      New info level tester.
      Best-effort so far implementation of new W2K info levels.
      Set support for info levels...
      rpc_server/srv_srvsvc_nt.c: Don't test an uint32 for < 0.
      Extra debug in open.c, fix for bad debug message in reply.c
      Only try and open a directory if we get EISDIR.
      INFO_24 sometimes has a 2 byte length, sometimes doesn't. Safer to not
      Warning fix from Andrew Bartlett.
      Fixed W2K SP2 joining a Samba PDC hosted domain.
      Following info from TAKAHASHI Motonobu <monyo at samba.gr.jp>,
      Merging Gerry's spoolss changes.
      When mmap fails it returns -1 *NOT NULL*.
      Ok - I misspoke.... mmap returns MAP_FAILED, not neccessarily -1 :-).
      Andrew - please look this over. I've fixed a long standing (maybe 4-5
      Removed unused (and potentially crash-causing) free function.
      Fix from "Jim McDonough" <jmcd at us.ibm.com>" - when we use open_file_shared(),
      Fix for race condition found by Herb where we can end up with a NULL dbf.
      Fixed logic bug in timeout processing spotted by Ying Chen <ying at almaden.ibm.com>.
      Fix for multibyte default service parameter from TAKAHASHI Motonobu, Samba Users Group Japan
      Better fix for client name vulnarability.
      Added other_safe_chars to alpha_strcpy(). Needs testing but is a better
      Log debug before and after netbios names copied so we know if they've been
      Fixed stupid typo that would stop trusted domains working.
      Added Andrew's pam password change stuff. Needs some testing but looks good !
      Ensure numeric group or user names don't get misinterpreted.
      Always use DOMAIN\user first that this is the more specific case.
      Ensure we always have a valid pointer on unmarshalling an SD with zero
      Syncup between 2.2 and HEAD.
      Properly instrument print_job_start()/print_job_end() so every fail case
      param/loadparm.c: Fix for bad volume label, found by TAKAHASHI Motonobu
      Use a logical cli_read(), removed the cli_read_one() hack.
      From JF....
      Ensured all the system calls in msdfs.c go through the vfs layer.
      Added LsaGetConnectedCredentials patch from Manoj Naik <manoj at almaden.ibm.com>.
      Fixed the first locking error (test #8 found by locktest code from
      Ensure we return correct error on trying to unlock a region not locked.
      Fix for building --with-profile for new vfscalls.
      Insure caught the fact that PTRDIFFs were being done between two unrelated
      Fixed the nastiest locking bug to track down.... smb_pids are sent in the
      Fixed extra file_free calls - my fault :-(.
      Fixed auto-alloc of dispinfo code when unmarshalling.
      Missing prs_align() was causing Win9x nexus tools to fail. security_info_sent
      Made talloc_realloc() semantics match realloc(). JF was complaining :-).
      Applied Michael Sweet's patch, with one minor signal change.
      Adding Michael Sweet's LSB packaging.
      Fixed incorrect debug parameters for lock_pid.
      Added #define of int32 to int for cray. This will almost certainly cause
      Updated to latest from gnu.org.
      Removed the default addition of /include to the directory given in
      Fixed warnings and made const-safe so it has the correct prototype.
      Remove the exit_server() calls that stop nmbd linking.
      Small warning removal tidyup.
      Ensure we correctly round down to 2 second boundary if dos filetime
      Fix for rabbit-pellet mode. Chris please test this. Thanks for Dave CB
      Fix for enumerating large numbers of users.
      Fix race where wrong action (created or opened) could be returned.
      Added JF's fix for max_entries being 0.
      Wrapped dlerror() in the same way as the other dlxxx() calls.
      Don't try and open tdb secrets file in non-root/local mode.
      Password changing via PAM works now. DONT CHANGE THIS UNLESS YOU RE-TEST !!!!!!
      Toomas Soome's fix for joining a domain the old way.
      Fix from Jim Vopni - muliple definitions of "letter".
      Fix from bernd at arresum.inka.de for broken krb configure.
      Fix for incorrect creation of print job names, based on a patch by
      iFix from "Shahms E. King" <shahms at shahms.com> to get cups user name
      Fix usermanager for domains - we were returning no memory when we
      Fixes from Jens-Uwe.Walther at force.de to make the -l option behave
      Connection record not existing is not a debug level 0.
      Tidied up calling yield_connection on connection allocation fail.
      Fix for cups compile.
      Fix for CUPS pause/restart code.
      Same fix for resume as for pause.
      Fix case insensitive password change code.
      We were making an assumption in the oplock
      Excellent patch from Anselm Kruis <A.Kruis at science-computing.de> to fix
      Always check fstat for error.
      Fix from Michael Davidson <md at caldera.com> for DEC OSF/1 ACLs (ie.
      Fix for potential crash bug with bad fid.
      Fix invalid uid being used after logoff. Thanks to Nigel Williams
      Fixes for varargs problems with std c.
      uint -> uint32.
      Throw out crappy (non-ascii unaware) mbtows stuff and use proper unicode
      Added "use mmap" for HPUX.
      Fixup error returns in updating driver db version.
      Fix for rare tdb pattern store failure. Found & fixed by Rusty.
      Pidfile check can be read-only. Removed old ifdef in password.c
      Oops. Typo.
      Added "strict allocate" per share parameter. This causes actual on-disk allocation
      Added mmap fix to pass lock test from HP.
      Put HPUX on mmap blacklist.
      Allow smbpasswd to join a W2K hosted AD domain.
      Added include guards...
      The write zero bytes is an allocate, not set EOF.
      Extra debug to see what errno is on write fail.
      Fix for getting allocate_file_space to return the correct errno.
      Added Gerald's lanman printing only change to HEAD.
      Correctly report amount written in debug when allocation space.
      Added fixes to return correct error codes on space allocation fail.
      Always return NT_STATUS_DISK_FULL, even for quota errors.
      Update to work with no crypt available, just like it will in Samba.
      Merged John's fix.
      Fix inspired by Don @ HP. Close down password server connection if keepalive
      Added fix from Dan Thibadeau @ HP for parsing problem.
      Fixed wrong placement of allocate code :-(.
      Fixed typo in patch.
      Merge in the NT drivers changes from 2.2.
      Added Mike Davidsons Tru64 ACL patch.
      Add printing of errno when POSIX lock requests fail.
      Added Jim McDonough's Win9x take ownership fix.
      Use tparam not tdata when reallocing params to make clearer.
      More Realloc fixes.
      More Realloc fixes.
      Realloc fix.
      More Realloc fixes.
      Realloc fixes.
      Realloc fixes.
      Realloc fixes.
      Realloc fix.
      Ensure we are very explicit about what we're comparing when
      Missed uninitialized variable return for del_share_mode().
      Fixed the (incorrect) paranioa fix I put in for the fcntl lock spin.
      Tidyup fixes for fcntl spin problem.
      Missed '\' at eol...
      Remove unneeded lp_talloc_free().
      Some W2k info.
      Fix W2K profiles writing to a Samba PDC. Thanks to Microsoft for their help !
      Fixed malloc -> talloc problems pointed out by Simo.
      Re-added readbraw call to test with smbtorture. This code not yet
      bzero is not used (deprecated) as it's a BSDism.
      Don't use CLEAR_IF_FIRST if opening read-only.
      Ignore locks of length zero as they mean different things in Win32
      Spaces -> Tabs.
      Fix from Paul Green to set correct lengths.
      Fixed silly typo.
      Fix crash bug with indirecting through null pointer on recursive delete.
      Merge of transfer file code from 2.2, fix for readbraw.
      Fixes to ensure invalid vuids cannot stop oplock breaks.
      NFS v2 can return ENOLCK when greater than 31 bit offsets are used.
      When sending a message via a tdb, it must be open read/write.
      Fix I think for the fcntl spinning problem. Re-prioritize so
      Removed unneeded set of delete on close in fsp->share_mode.
      Fixed O(N^2) talloc loop when allocating printer name memory - fix from
      Fix the 62bit locking onto 32 bit NFS mounts problem generically for HPUX.
      #ifdef out function when not used.
      Don't fail if no owner/group owner set. Use existing owners.
      Fix for second logic bug when handing oplock breaks and client messages
      Fixed problems with arg parsing as root with smbpasswd.
      Fixed up Solaris 64 bit configure.
      Use structure copy to fix unaligned accesses on 64bit architectures on
      Correct fix for unaligned memcpy - malloc'ed memory incremented by sizeof(struct locking_data)
      Fixed a couple of nasty bugs only easily seen with no mmap. Firstly,
      Roll back earlier fix after talking with Andrew. The write_lock_record and
      Return correct error code on lock fail in tdb_expand.
      Fix based on Andrew's insight as re-using a tdb after fork means
      Removed test code that got added by accident.
      Put pwrite code back in expand_file.
      Removed unneeded variable, added comment on deadlock prevention.
      smbmount fixes from Urban.
      Attempt to make quotas work with RH7.1, and with other Linuxen... This is
      Ignore unmappable (NT Authority, BUILTIN etc.) SIDs in an ACL set.
      Removed extra '()' s.
      Change log message to 2 from zero when failing to create directory.
      Log sys_acl_set_XX at level 2 not zero.
      Fixed enumeration of large numbers of groups from a Samba DC.
      Fixup passdb stuff to add new nisplus and ldap backends.
      Added Elrond patch to make se_access_check use NT datastructures, not Samba.
      Merge HEAD and 2.2 - try frantically to keep in sync.
      Sync 2.2.2 and HEAD (I will keep these the same if it kills me :-).
      Removed smbpasswd_XX call (how did this get re-added,  I removed all
      Fixed CUPS detection - patch from Michael Sweet.
      Fixed the bug with member servers in a Samba PDC hosted domain not allowing
      Fixed up the change password bug when not using PAM.
      Incorrect definition of debugf.
      Fixup insure changes for rpcclient.
      Ensure accessing NT member servers works with a Samba PDC. Don't
      Fixed WINS re-registration bug. Don't ask..... :-(. It was in my code :-).
      Fixes from John Trostel (modified somewhat by me) to ensure that all lookup_XX
      Fix bug where removing root from a share SD stops further edit access.
      Back-out the share acl fix. Not needed (Gerald has been telling porkies
      Fixed bug when status=no and max smbd processes > 0.
      Fix for tdb_oob() on TDB_INTERNAL databases.
      Made nt acl support a local parameter for w2ksp2 profile fix.
      Fix for connectinos.tdb error message from "Richard Bollinger" <rabollinger at home.com>
      Don't core dump when using spinlocks on a read-only tdb. Unfortunately this
      Optimisation to send only to correct processid.
      Fixed inconsistent definitions of InBuf/OutBuf/last_char.
      Merge Gerry's %G change from 2.2.2.
      Merge the become_XXX -> change_to_XXX fixes from 2.2.2 to HEAD.
      client : Fixed error return.
      Restored old Bmpx code - actually used by OS/2.
      Tidy up debug in notify code.
      Fixed issues with changenotify only being called once in VC++.
      Added include guards around file.
      Ensure we mask off deny modes correctly on being set (this shouldn't have
      Move from timestamp to gen count file id's for finding oplocked files
      Ok, I know it's a language thing and it shouldn't matter.... but a kerberos
      Added xmalloc - calls smb_panic on zero size or malloc fail.
      Added xstrdup, removed static version from smbpasswd.c
      Renamed inbuilt xstrdup to smb_xstrdup.
      Fix for @ in pathname from Kian Win.
      Added || -> && fix from "Orwig, Paul" <PORWIG at PacificLife.com>.
      Raise simultaneous open pipes from 64 to 1024 for large print server
      smbd/notify_hash.c: Merged Herb's fix.
      Added NT_USER_TOKEN into server_info to fix extra groups problem.
      Got serious about const again.
      Fix for broken-as-shipped RedHat 7.2 system headers. Now we have
      Added missing strchr_wa.
      Changed MAX_OPEN_PIPES to 2048.
      Fixed unsigned / long unsigned format missmatch.
      Added debug in truncate, fixed warning with gcc3.
      Added more define bits. Fixed error in vol attributes.
      Merge overdue changes from 2.2. Fix <4gb write problem.
      Only 1mb allocate slop.
      Fixup __LPID -> _LPID.
      Use defined constants not integers.
      Fixed allocation bug in database prog. Some format fixes.
      Don't check space on every extend if strict allocate not set.
      Formatting fixes only.
      Fix winbind client code so that winbind calls are not made if the
      Look for DOMAIN\group in group lists and ask winbind.
      Fix from Herb. mincount/maxcount need to be ssize_t for comparisons.
      Removed the "reestablish" code. Tridge - scream if this was needed....
      Added needed debugs...
      Got ready to implement Martin's idea, but request doesn't have a length
      Make signal handling safer (handle EINTR on read/write/accept), don't
      Fix compile on RedHat 7.2 systems with broken system headers.
      Fix detection of RedHat 7.2.
      Tidyup formatting a bit (spaces->tabs) whilst reading new code to understand
      No longer used.
      Tidyups and things I discovered during the merge...
      Tidyups in the merge process.
      I *love* removing code :-). Removed 4 files that weren't being used.
      Removed SMBD_RPC_CLIENT_OBJ temporary I was using.
      Fixed detection of RedHat headers. Removed another file !
      Tidyups when I was doing the big merge...
      We don't actually use the horror that was lib/util_array.c :-).
      Merged in JohnR's ping messaging extension.
      Don't scan locking db on closedown.
      Preparing to implement +ve and -ve caching for lookupname/lookupsid calls.
      Added transparent +ve caching for lookupname/lookupsid. -ve caching can
      W2K doesn't seem to respond to *#0 names in node status. Ensure name
      Added debugs to track down sequence lookup problems.
      Fixed caching of lookupname/lookupsid. Error in check of success !
      Fixed +ve caching. Still problems with -ve caching.
      Got positive and negative name caching working correctly with lookupname/lookupsid.
      Set type to NOTUSED if lookup fail.
      Fixed delete on close bug. Added core dump code to winbindd.
      Sorry. I broke the build, missed on open_directory call.
      I think this is a fix for the "out of space" errors with oplocks=no.
      Use "password server" for searching for BDC's also as Tim suggested.
      #ifdefed DMF fix so not compiled by default. We need to look at this...
      nsswitch/winbindd_group.c nsswitch/winbindd_user.c: formatting fixups.
      Added PRINTER_ALREADY_EXISTS error check from Gerry.
      Added negative caching to the user pw lookup by name and by uid.
      Added negative caching to group lookups.
      Fix for the logic bug wrt. existant oplocks. See long message
      Cross merge to make 2.2 and HEAD closer.
      Re-added "Share modes" meaning don't allow deny mode conflict. Due to
      Ensure the CAN_WRITE is checked and prevents O_CREAT and O_TRUNC from
      Spelling pedents strike again :-).
      space -> tab.
      Added close-share message.
      Ensured the %G substitution exactly matches what the man page states.
      After conversations with Andrew, improved the robustness of the
      Gerald's fix.
      Check error returns.
      XFS quota patch for Linux.
      Added prototypes for new fns. Thanks Elrond.
      Tidyup of lib/username. Add name_is_local fn to determine if name is
      Moved name_is_local to the correct place. Ooops.
      Stop using getgrgid() - a very expensive call with winbindd, to look up
      winbindd friendly user_in_list code. Tested on a 65k user domain.
      Tidup.
      Correct message on wbinfo fail to open config file.
      Improved efficiency of enumerating print queue's under a particular
      Use print_queue_length() by preference if we don't need a queue
      Fixed parse_domain_user to be bool.
      Added fetch_domain_sid. Not used in current code, but a nice example
      RAP error strings take precedence as they are not encoded in the SMB header
      Treat RAP codes differently.
      Tidyups to remove warnings on tdb standalone code.
      Fix up warnings. Make tdb_openXX() names const.
      Always use ASCII strings when changing passwords with RAP.
      Must check against -1 for fcntl error check.
      Patch for string legths from TAKAHASHI, Motonobu(monyo).
      Updated Solaris link options from DaveCB.
      Added the group enum code from 2.2
      Added HPUX ACL code.
      Allow HPUX to link with new ACL code.
      Ensured filetimes set (by name) after close. Ignore errors. This is the
      Moved fchown_acl change to the point where we *really* know if we
      Made "hide unreadable" work much more reliably (just for Volker :-).
      Fixed the bug with descending into mangled directories.
      Return NT_STATUS_OBJECT_NOT_FOUND or ERRbadpipe if pipe name not found.
      I'm pretty sure we need to return our netbios name for LSA_QUERY_INFO
      Tidyup utmp code to cope with hostname = NULL.
      Fixup JF's weird SID return :-).
      Patch from dan_thibadeau at hp.com to allow domain set in authfile.
      Fix for extra capabilities from Urban Widmark <urban at teststation.com>.
      Allow ACL set to fail gracefully on HP HFS filesystems.
      Added AC_CHECK_FUNCS(syslog vsyslog).
      Setup global_myworkgroup. Needed for secrets fetch code.
      Removed global debugf. Replaced with lp_set_logfile(name).
      Use pdb_free_sam() to free a SAM_ACCOUNT struct, not safe_free(). There
      Fixup some DEBUG statements (0 -> 10).
      The jf_get_sampasswd_entries() is not used anymore.
      Removed unused variables.
      Removed extra lp_adduser() call.
      Fixup -i interactive modes.
      Documented -i modes for nmbd/smbd.
      When running interactive we want to set our own process group for
      Fixed enumeration of a large (<1500) users from a Samba PDC to a W2k
      last_enum not used.
      Make user enumeration work for w2k and win9x.
      We should be SHLD not LINK when creating shared libraries.
      debug statement fixups.
      Fixed embarressing 16k strack trashing bug :-(.
      Ensure modtime is set correctly on destination files in copy command.
      Fix the fix.... (sigh).
      Don't use static memory, malloc it...
      Fixed nasty cast of tdb_delete in traversals.
      Added WERROR for non local domain.
      Re-wrote the guts of the rename_internals code to cope with a reported
      Missed error return is can_rename fails.
      Added DEBUG in set_share_mode to track down logic insanity.
      Return called NetBIOS name if present in preference to global_myname.
      Added get_called_name() function, which replaces global_myname in printing
      Debugs that print out a share mode table in debug level 10. This code
      Caught one problem where a BOOL fn was returning 3 different values :-).
      Another attempt at getting changeid correct. Jerry / JF please check !
      Getting ready to add winbindd support for HPUX 11.
      My previous fix had a bug....
      Added int32 versions of the endian-dependent code.
      Added int32 version of "atomic" update.
      Fixed up atomic update code.
      HPUX nss fix.
      Fixed all uses of tdb_fetch/store/_int to use explicit int32 little endian
      When re-writing tdb version numbers as little endian int32, we must
      Move SAFE_FREE into tdb.c to stop exporting it into tdb.h namespace.
      Fixed typo.
      Added tests for st_blocks in struct stat, and added a (hateful) constant
      Getting ready to add UNIX extensions in HEAD also.
      We need to test for major/minor macros.
      Ensure this is committed last.
      Oh joy - the original code didn't do mapping of the perms onto the wire.
      First part of UNIX extensions (#ifdefed out) more to follow.
      Same fix as went into 2.2 (I'm waiting for jerry to finish some code).
      Latest attempt at changeid.
      Round and round we go....
      Added the O_NOFOLLOW flag if follow symlinks is set off.
      Added PRINTER_INFO_4/PRINTER_INFO_5, we're seeing level 5 requested on the wire... so.
      Removed MAXSTATUS which was set incorrectly - thus causing tdb traversal
      Missing assign fix from Bernt Nilsson bkn at ida.liu.se.
      At leadt don't lose this - I need to re-sync trans2.c between 2.2.x and
      Fix name register bug with non-existent wins server.
      Added CIFS UNIX extension code to client.
      Alphabetize.
      Fixup error mapping so we have only one table containing errno -> dos error -> NT STATUS
      Merged in %S fixes and XX_NOT_CHANGED fixes from 2.2.
      Separate out get_user_home_dir() from get_user_home_service_dir().
      Always clear malloced memory for parse structs.
      Added prs_mem_clear(). Clear memory on buffer reallocation. That way
      Ensure we log tdb open fails. Patch from Alexander Bokovoy <a.bokovoy at sam-solutions.net>
      Tidyup & code refactoring from Martin.Sheppard at csiro.au.
      If 127.0.0.1 matches both allow & deny then allow. Patch from Steve Langasek vorlon at netexpress.net
      Ensure (C) message is output on startup.
      Fix to close winbindd_idmap on exit. Pointed out by Alexander Bokovoy.
      Report write fail in smb_dump.
      Added #ifdef for FreeBSD TCP bug.
      Readline has problems on non tty fd's. Use readline replacement to in cases
      Attempt to fix bugs in write cache code (yes I know it's going away :-).
      Fix file size calculations for write cache code.
      Ensure identical between 2.2.3 and 3.0 - no need for difference here..
      Found and fixed the logic bug in write cache code. Amazingly helpful
      Removed freebsd hack. Not correct.
      Ensure fsp->size is correct so readraw's return correct data.
      Merge of fixes from 2.2.
      Return correct RPC fault PDU on bad handle incoming.
      Make systemtime work for spooling on bigendian systems. Fix from
      Fixed display of "remote downlevel document" in old print job submission
      Fixed ADDPRINTEREX to take a devmode and a security descriptor...
      Fix "strict allocate" to write the data out on ftruncate with extend.
      Fix from Michael Steffens <michael_steffens at hp.com> to make signal
      Fix stupid typo !
      Bring printing in HEAD inline with 2.2.x and app-head.
      Only set smb_read_error if not already set.
      Fixup the sending of printer change messages from job changes.
      bcopy must DIE ! Stop people creeping use of bcopy back into the code
      Fixed dumb typo caught by Herb.
      Memory leak on error condition fixed by Kian Win <codegrunt at rubbercookie.com>.
      Added "nt status support" parameter. Fix offline synchronisation.
      Patch for Domain users not showing up from "Ivan Zhakov" <vunny at mail.ru>.
      Fix from JohnR - Fixed SetPrinterData(magic key) to support zero length DEVMODE as is the case with the
      Ensure that winbindd and smbd both use identical logic to find dc's.
      Attempt to fix Solaris winbind nss build.
      Cause nmbd to take signal processing in-band, rather than in
      Fixed EXTRA vs EXTGRA typo. Thanks Mike :-).
      Added requested cast for splint.
      Fix lseek-on-pipe problem in VFS (where it belongs IMHO).
      dos2unix not used in HEAD anymore.
      Canonicalise pathnames returned to Windows directory separators.
      Mask off the aDIR on setfileinfo.
      Fix the NTSTATUS -> WERROR for srvsvc pipe.
      Fix error return.
      Found the mp3 problem - it's a generic class bug w.r.t. renaming.
      Added Herb's fix to override log level from command line.
      Reformat preparing for changes to come...
      Merge in the change to do per-handle access checks on setdata/setform etc.
      Change xcopy test to use defined constants rather than magic hex
      Added another 2 delete on close tests. Now 10. Had to fix smbd to match...
      Fixed delete on close semantics - preparing for share mode rewrite.
      Fix for machines that have their time changed forward, then back. Ensure
      Turns out an Admin user shouldn't always have access on a handle.
      Implemented default ACL patch (set inherit acls = true on a per share basis).
      Added POSIX ACL layer into the vfs.
      Ensure, if we're a PDC or BDC, that the SID stored for the domain name
      Removed unused var.
      Remove a stub function I forgot to fill in.
      Add "Creator Group" - was in 2.2.x and I'm syncing up the two.
      include/smb_macros.h: Don't round up an allocation if the size is zero.
      Ensure we attempt to lock at least once. Only sleep if time param set.
      Get the current directory after becoming root.
      Use sys_usleep not usleep.
      Now we have reliable signals take SIGTERM inband.
      Sync up vfs changes from 2.2.x.
      Merge in JohnR's page count fixes.
      Sync up the VFS changes from 2.2.x.
      Merge JohnR's fix.
      Remove the "stat open" code - make it inline. This should fix the
      Fix for debug typo.
      Ensure we get a real fd when opening for set file allocation.
      Test against W2K that we're doing large read/writes correctly (we are).
      Correctly increment offset in cli_smbwrite.
      BUFFER_SIZE Should be 128k if large read write tests are to work.
      HEAD only fix for truncate from Alexander Bokovoy <a.bokovoy at sam-solutions.net>.
      John's patch changed the size of a structure stored in the tdb - we
      Print queue entries *must* have queue names, not numbers - numbers are
      Ensure we don't do lp_servicename()'s in tdb traverse as this
      Fix stupid typo !
      When upgrading from an old idmap tdb, remember to overwrite the reverse
      Make winbindd_idmap tdb endian independent. This is very important for
      Missed a couple of fetch/store_ints.
      Fix the mp3 rename bug - also tidy up our open code and remove the special
      Forgot torture hacks...
      Set default recycle directory permissions as 0770. Unlink on rename
      Added 5 *NASTY* non-io open tests....
      Matched W2K *insane* open semantics....
      Tests for insane open semantics.
      Removed unused variable.
      Don't do a zero-length malloc (caught with dmalloc library).
      Don't hold the mutex for more than 20 seconds.
      Moved debug messages for grabbing/releasing mutex.
      In msleep - never sleep for more than 1 second. Cope with time changes.
      Allow hosts allow/deny to use xx.xx.xx.xx/yy syntax.
      Removed HAVE_LIBDL from most places (except system.c). Added checks for
      Added sys_adminlog() system for info the appliance admins really
      Ensure that setting file length can return disk full on failure.
      Fix to stop PERMANENT_NAMES being added when nmbd starts up and WINS
      Ensure we return a parseable value if invalid handle given.
      Don't core dump listing thousands of users in usrmgr.
      Hack to share pipe handles between lsa and samr pipes as NT4.x usrmgr
      Fix from Stefan "metze" Metzmacher <metze at metzemix.de> to prevent us
      Fixed the error bad path for recursive mkdir so mkdir \a\b\c\d works.
      Fix continual scanning of smb.conf if an include file doesn't exist. Found
      Fixed the handle leak in the connection management code (this code is crap
      Fix up conversion code from old winbindd versions (some testing needed).
      Fixed up admin user / guest user lookup.
      Fix Gerry bug - MajorVersion should be 2 not 3.
      Always pass NT password as well as Lanman.
      Shirish pointed out more areas we should be doing roundups for allocation size.
      Added Shirish's client side caching policy change.
      Ensure VFS modules will build correctly by adding defines for CPPFLAGS
      Removed duplicate _LARGEFILE64_SOURCE added in error.
      Correctly emulate NT in printer handle opening access rights.
      HP2500C driver writes devmode with private data that ends
      Tidy up winbindd debug. Added Bill Moran's hide unreadable fix.
      Fix unused warnings with deleted code.
      libsmb/cli_netlogon.c: Fixed confusing debug messages.
      Fixed the AFP_Resource:$DATA filename creation bug.
      Fix found by Li Shao @ HP - XP clients don't bother to set the devmode_ptr
      First cut at fix for the EINTR problem... More needs to be done I think.
      Fix send and recvfrom.
      Fix oplock recvfrom.
      Fixed sendto in oplock code.
      Added sys_fcntl (not to be used everywhere). Added sys_read/sys_write
      When opening a tdb fails - don't expect to be able to do tdb_errstr ! (Doh!).
      Fixed one more sendto.
      Fix different args to sys_fcntl without going varargs....
      Added Martin's lpq parse fixes from 2.2.
      We cannot set errno=0 in any of the wrapper calls as this breaks UNIX error
      Ensure auth requests from the same machine are completely serialized.
      Fix for a bug Jerry found with printing where a smbd connection may
      Fix my stupid compile bug in num_files_open.
      When doing a non-io open the stat failing is no cause for a debug zero
      smbd/fileio.c: debug changes so read/write/seek calls can be logged for name, pos, size easily.
      Fix from Herb for upgrading from big-endian earlier databases.
      Attempt to fix big-endian upgrade problem (Herb, Jerry, please check).
      Another attempt at fixing the endian problem when upgrading from 2.2.3a.
      Merge Herb's idmap endian fix.
      Added 2.2.x mangle fix to old mangle code in HEAD.
      Fix build farm bug.
      Merge in Jerry's called name fix.
      We were mapping the open of name1/name2 where name1 wasn't a directory
      NT uses NT_STATUS_OBJECT_NAME_NOT_FOUND not NT_STATUS_NO_SUCH_FILE for ENOENT.
      Merged in printing fixes... There were many missing !
      Oops. Broke the build be removing MSG_PRINTER_UPDATE. Re-added as next
      Fix the bug that refused to allow IPC$ connection to be idled if a pipe
      Fix to include -Ipopt in getpass test.
      Fixes for recycle bin VFS for FreeBSD from "Scot W. Hetzel" <hetzels at westbend.net>.
      Fix for *BSD linking of VFS modules from "Scot W. Hetzel" <hetzels at westbend.net>
      Fix bug where setting end of file length to 8 was hitting erroneous
      Removed lp_strip_dot code - ensured that mangling code treats names ending
      Fix bug where creating a file and setting a security descriptor atomically
      Merge from 2.2.
      Stop smbd looping when hide unreadable is true and .. is unreadable.
      Tricky fix. If we were waiting for an oplock break response message from
      Failing to find an entry when doing mod_share_entry isn't a error
      Merge of receive_local_message fix from 2.2.5.
      Remove horrid goto.
      Fix for strangeness in Linux 2.0.x select return.
      Merge of bugfixes from 2.2.
      Ensure we kill with -TERM.
      Fixed silly typo that causes receive_local_message to loop - caused by
      If we don't do the select don't do the recvfrom.
      Removed some unused variables - tidy up some formating, add struct to
      More cleanup work preparing for SMB signing.
      Fix for Linux kernel bug where signal mask set within a signal handler
      Remove blocksignals call as it's never going to bloody work right...
      Overly complex but neccessary fix for kernel oplock problems. The issue
      Allow sd_len to be zero on NT_TRANSACT_CREATE but not for set sd (helps
      Merge pidfile fix.
      Ensure when allowing fchown with write access and dos filemodes that
      Merge of Jerry's fix from 2.2.
      Merge in mangle fixes from 2.2.
      Veto files fix.
      Ensure we save any older SIGALRM signal handler.
      Merge of csc termination fix.
      More of SMB signing for client - not yet finished (should be harmless).
      Ok, now I can try my first client test...
      Fix spelling typo.
      Remove "inline" - shouldn't be in portable code.
      Fix from Andrew Esh for not checking return code.
      Format tidyup before I start working on scalability fixes (one file per
      Don't use uint. It doesn't exist on some platforms and we don't define it.
      Merged across trans2.c from SAMBA_2_2. UNIX extensions and passthrough
      Added prs_align_uint16 for SD aligns.
      Typo...
      Using 1 for a tdb hash size makes for slow inserts....
      Proper merge of all the working printing stuff from APPLIANCE_HEAD.
      STRING was being redefined...
      Test how many pipes we can open.
      Added limit on SPOOLSS pipes from 2.2.x
      Shut down printing tdb correctly - this will be more important when I go
      Address the string_sub problem by changing len = 0 to mean "no expand".
      Fix from Andrew Esh for coredump...
      Fix for LPRng from James Henstridge james at daa.com.au.
      *Experimental* new large-scaling printer code. Splits printing.tdb into
      Up the printing tdb version number to 5 as I've changed it.
      We must ZERO_STRUCT before using the buffer in copy_unistr2.
      The changes in make_sec_desc to make us match W2K broke the marshalling/unmarshalling of
      Put printing tdbs in a subdirectory to prevent name collisions.
      print_jobid in the fsp struct should be uint32.
      Lanman print jobs are *16* bits, not 32. arggggh. Map them....
      Gone back to explicit queue number passing as snum - removed encoding of
      Use of uninitialized variable caught by valgrind.
      We have to look at the length before checking for "~" as the string
      Another bug found by valgrind. Don't AND a src length of -1.
      Formatting fixups.
      Fixed off-by-one in all_string_sub also.
      Don't crash on setfileinfo on printer fsp.
      Prevent gcc warning about shadowed global "index".
      Add useful VALGRIND #ifdef.
      Previous fix was incorrect. len in string_sub and all_string_sub is
      Formatting fixup. Fix shadow warning.
      Allow trans2 and nttrans messages to be processed in oplock break state.
      Never ignore valgrind messages :-). Don't reference before the start
      Ensure we're root before opening a printer backend tdb.
      Bugfix for problem pointed out by Sean Trace <Sean.Trace at aveva.com>. We can't
      IFS kit test - don't allow TEMP attribute on directory open.
      IFSTEST fixes for open fid, nametoolong.
      Fix longstanding bug in Win2k clients by clearing the shortname
      Fixed IFSTEST errors with OpenParams... more to go.
      We were returning incorrect flags in smb_action....
      Remember to check for UNIX extensions before saying we support them.
      Test for non-POSIX st_blksize field.
      Merged initial allocation code for IFSTEST fix.
      Reverted and tidied up the "special" files patch. Adds "hide special files"
      Reformatting only before real change.
      Correct fix for nc problem.
      Ensure we have at least smb_size bytes before processing a packet.
      Remove strsep - non portable.
      Allow us to "lock" printer tdb entries in memory to stop them being
      Handle locking correctly.
      Move to reference counting rather than lock counting.
      Move -4 to correct side of comparison.
      Removed C++ style comment.
      Return correct FILE_SUPERSEDED response - IFSTEST strikes again...
      Added attribute specific OPEN tests (for SYSTEM and HIDDEN).
      Better error reporting on OPEN test.
      Correctly fail opens with mismatching SYSTEM or HIDDEN attributes if we
      Correct error message.
      Fix bug with stat mode open being done on read-only open with
      Formatting tidyup and additon of cli_close_connection() before bugfix.
      Fix crashbug discovered by "Kim R. Pedersen" <krp at filanet.dk> where
      Ensure we open UNIX fifo's non-blocking like we used to do.
      Add bcast_msg_flags to connection struct. Allows sender to filter when
      Merge of (apparently working :-) new printing notify code.
      Added better error code on out of space. Removed total jobs check - not
      We shouldn't add printing flag here.
      Remove donotify as notifies are cheap now.
      Revert the "reverse" change to rpc_server/srv_spoolss_nt.c, simply
      Actually, I think Jerrys patch was incorrect as it didn't ever
      Merged Volkers (correct) fix from 2.2 for crash on unable to connect.
      Patch from Steve French to fix difference in responses to
      Merged Steve French's fix for OS/2 EA return error being removed.
      Added final Steve French patch for "required" attributes with old
      Patch from Andy Levine andyl at epicrealm.com who discovered that W2K DMB's
      Fix missing braces around push lock call.
      Ensure we've failed a lock with a lock denied message before automatically
      Formatting tidyups before I look at implementing the sendfile in READX.
      First cut at portable sendfile code. Only used in readX at the moment
      Fixup sendfile to match HPUX semantics with signal interrups. This was
      HPUX takes offset, not pointer to offset.
      Changed profile version number to 7 - added sendfile statistics.
      Fixed up FreeBSD sendfile code - only Solaris left then I can add the
      Added fix for broken Linux (no sendfile64). When offset + count > 2GB
      Use HAVE_SENDFILE64, not SENDFILE64.
      Added autoconf detection for sendfile for Linux. lib/sendfile.c code
      Attempt to make broken Linux sendfile work.... Still in progress.
      Added FreeBSD sendfile configure tests. Richard please test...
      Actually use sendfile if selected.
      Only create the pidfile once we're ready to receive requests.
      Reverted my earlier change. It was incorrect. We must be protected by
      Never, *ever* hold a mutex lock in the message database where there may
      We had a race condition when changing a machine acount password as we
      HPUX sendfile is now detected correctly.
      Added "use sendfile" per share option.
      tdb tools need #include <signal.h>
      Use sendfile in readbraw.
      "@" is valid in NetBIOS domain names.
      Merge back Richard's FreeBSD sendfile fixes.
      Moved -ve cache check to correct place.
      Hold lock on NEXTJOB record for a very short time. Jerry needs to add code
      Merge of "profile acls" code.
      Make explicit the difference between a tdb key with no data attached, and
      Make explicit the difference between a tdb key with no data attached, and
      HEAD and APP-HEAD spoolss parsing was out of sync. This MUST NOT HAPPEN !
      HEAD and APP-HEAD spoolss parsing was out of sync. This MUST NOT HAPPEN !
      Check for security on delete printer was reversed...
      It turns out that Windows allows delete printer on a handle
      It turns out that Windows allows delete printer on a handle
      Don't zero out numwritten before using.... Found by Pierre Belanger belanger at pobox.com
      Don't zero out numwritten before using.... Found by Pierre Belanger belanger at pobox.com
      Added Solaris sendfile patch + configure tests from Pierre Belanger <belanger at yahoo.com>.
      Added Solaris sendfile patch + configure tests from Pierre Belanger <belanger at yahoo.com>.
      Fix memory leak in getting DC list. Remember to exclude failed lookups.
      Fix memory leak in getting DC list. Remember to exclude failed lookups.
      Added error string for server timeout on client call.
      Added error string for server timeout on client call.
      Fixed typo.
      Tidy up client error processing.
      Tidy up client error processing.
      Fix Solaris sendfile detection. Add small fixes to sendfile code.
      Fix Solaris sendfile detection. Add small fixes to sendfile code.
      Cope with rw errors and timeout to peer.
      Cope with rw errors and timeout to peer.
      Doh ! Lookup name before checking negative cache (the way Tim originally
      Doh ! Lookup name before checking negative cache (the way Tim originally
      Added const. Anal formatting fixup.
      Added const. Anal formatting fixup.
      Missing break meant getprintprocessordirectory always returned UNKNOWN_LEVEL.
      Missing break meant getprintprocessordirectory always returned UNKNOWN_LEVEL.
      Merging tridge's wins fixes. Tridge - we're supposed to be keeping 3.0 up
      Write cache bugfix from Rasmus Borup Hansen, system adm.     Email: rbh at math.ku.dk
      Write cache bugfix from Rasmus Borup Hansen, system adm.     Email: rbh at math.ku.dk
      Added ASCII art to make this clearer.
      Added ASCII art to make this clearer.
      Add a timeout to tdb_lock_bystring(). Ensure we never have more than
      Add a timeout to tdb_lock_bystring(). Ensure we never have more than
      Turn on sendfile detection by default in HEAD and 3.0.
      Turn on sendfile detection by default in HEAD and 3.0.
      Fix from Andreas Gruenbacher <agruen at suse.de> to prevent ACL set on read-only
      Fix from Andreas Gruenbacher <agruen at suse.de> to prevent ACL set on read-only
      Fix based on Jim McDonough's code for ACL inheritance problem.
      Fix based on Jim McDonough's code for ACL inheritance problem.
      Ensure we register the 1c name on the unicast subnet.
      Ensure we register the 1c name on the unicast subnet.
      Use memmove when copies can overlap. Spotted by SUGIOKA Toshinobu <sugioka at itonet.co.jp>.
      Use memmove when copies can overlap. Spotted by SUGIOKA Toshinobu <sugioka at itonet.co.jp>.
      Added "unknown info level".
      Added unknown info level.
      Turns out with Win9x, we could occasionally return from unix_convert() given
      Turns out with Win9x, we could occasionally return from unix_convert() given
      Merge Anton's 64-bit fix.
      Added cli_set_timeout() call.
      Added cli_set_timeout() call.
      Change to use sys_read/sys_write.
      Change to use sys_read/sys_write.
      Fix spelling of background_process.
      Fix spelling of background_process.
      Change default of max_xmit to match W2K. Ensure NT negprot uses it.
      Change default of max_xmit to match W2K. Ensure NT negprot uses it.
      SMB_ASSERT to check list terminates.
      SMB_ASSERT to check list terminates.
      Never do a ZERO_STRUCT on a structure in a linked list, it's dumb :-).
      Never do a ZERO_STRUCT on a structure in a linked list, it's dumb :-).
      Added new error codes. Fix up connection code to retry in the same way
      Added new error codes. Fix up connection code to retry in the same way
      Start to merge the new ACL mapping code from Andreas Gruenbacher <agruen at suse.de>.
      Start to merge the new ACL mapping code from Andreas Gruenbacher <agruen at suse.de>.
      Merge mangle prefix code.
      Fix for systems that allow more than 65536 open files per process.
      Fix for systems that allow more than 65536 open files per process.
      First cut of new ACL mapping code from Andreas Gruenbacher <agruen at suse.de>.
      First cut of new ACL mapping code from Andreas Gruenbacher <agruen at suse.de>.
      Debug level 12 is a typo.
      Debug level 12 is a typo.
      Reverted a fix from Volker (sorry). We need to move this fix to the correct
      Merge tridge's blank password fix from HEAD.
      Fix problem where an fd would be left open for every printer queue.
      Fix problem where an fd would be left open for every printer queue.
      Fix fd leak with kernel change notify.
      Fix fd leak with kernel change notify.
      Check the long_archi name for NULL.
      Check the long_archi name is not null.
      Fix slowdown because of enumerating all print queues on every smbd startup.
      Fix slowdown because of enumerating all print queues on every smbd startup.
      Fix to correctly return NT_STATUS_DELETE_PENDING.
      Fix to correctly return NT_STATUS_DELETE_PENDING.
      Missed extern declaration.
      Missed extern.
      Ensure can_delete returns the correct error code.
      Ensure can_delete returns correct error code.
      Merge things that bloody tpot should be doing :-).
      Merge of scalable printing code fix... Needs testing.
      Merge of scalable printing code fix... Needs testing.
      Being tpot's janitor again.... checking in things only checked into HEAD.
      Keeping branches in sync....
      Keeping branches in sync....
      Keep branches in sync.....
      Jeremy the janitor again... keeping 3.0 in sync with tridge's changes this
      Keeping 3.0 in sync....
      Merge Jim's new rpc client code to 3.0.
      Fix crash bug with overwriting malloced memory.
      Fix crash bug with overwriting memory.
      Add chainlock_read functions to get a read lock. Used in *massively*
      Add chainlock_read functions to get a read lock. Used in *massively*
      Fix bug found by tpot with given password server.
      Fix bug found by tpot with given password server.
      Fix for scalable printing noticed by tpot. Don't loop infinately
      Fix for scalable printing noticed by tpot. Don't loop infinately
      After the lord mayors parade......
      First cut of fix for changenotify on a print server handle. Use the connections tdb
      First cut of fix for changenotify on a print server handle. Use the connections tdb
      Fix all returns to be size_t (they are all unsigned). Fixup strlen being
      Fix all returns to be size_t (they are all unsigned). Fixup strlen being
      Removed global_myworkgroup, global_myname, global_myscope. Added liberal
      Removed global_myworkgroup, global_myname, global_myscope. Added liberal
      Sorry Jim we can't assign to global_xxx(), we need to call set_global_xxx()
      Sorry Jim we can't assign to global_xxx(), we need to call set_global_xxx()
      Fix smbwrapper from the global_* changes.
      Fix smbwrapper from global* changes.
      Fix from "Stefan (metze) Metzmacher" <metze at metzemix.de> for nmbd 1c group
      Fix from "Stefan (metze) Metzmacher" <metze at metzemix.de> for nmbd 1c group
      Samba janitor... Merging tridge's change to 3.0. Original commit
      Added HIDDEN/NORMAL attribute test.
      Added OPEN test with HIDDEN/NORMAL attributes.
      Very curious. It turns out attribute matching on truncate only matters
      Very curious. It turns out attribute matching on truncate only matters
      jcmd really should run with a higher compiler warning level more often :-).
      jcmd really should run with a higher compiler warning level more often :-).
      Lots of fixes for error paths where tdb_fetch() data need freeing.
      Lots of fixes for error paths where tdb_fetch() data need freeing.
      Please compile with :
      Please compile with :
      Fix bug in tdb_fetch tidyup.
      Ensure data is not used uninitialised.
      Test was reversed for ERRmoredata in cli_read.
      Test was reversed for ERRmoredata in cli_read.
      Remove use of 'F' - make 'f' and 'p' do unix (iso8859-1) encoding.
      Fix comment - 850 -> iso8859-1
      Change default codepage to UNIX.
      Fixup of ordered cleanup of get_dc_list - bug found by Dominik 'Aeneas' Schnitzer <dominik at schnitzer.at>
      Fixup of ordered cleanup of get_dc_list - bug found by Dominik 'Aeneas' Schnitzer <dominik at schnitzer.at>
      Ensure callid is not used uninitialized.
      Fixed nasty bug where file writes with start offsets in the range
      Fixed nasty bug where file writes with start offsets in the range
      Reformat of reply.c before Volker's patch.
      Reformat of reply.c before Volker's patch.
      THIS FILE IS NOT OBSOLETE JELMER. DO NOT REMOVE ! Removing it breaks
      DO NOT REMOVE THIS FILE. It breaks  autoconf 2.13 without it.
      Fix for 64 bit issues with oplocks and allocation size.
      Fix for 64 bit issues with oplocks and allocation size.
      Missed the removal of the incorrect ifdef.
      Missed the removal of the incorrect ifdef.
      Doing janitorial duty for tpot - memory leak fix.
      Doing janitorial duty for tpot - memory leak fix.
      Need brackets around macro args. Spotted by Patrick Welche <prlw1 at newn.cam.ac.uk>.
      Need brackets around macro args. Spotted by Patrick Welche <prlw1 at newn.cam.ac.uk>.
      Make sure we have a default st_blocksize.
      Make sure we have a default st_blocksize.
      Janitor for tpot yet again... Merging in memory leak fix.
      Janitor for tpot yet again... Merging in memory leak fix.
      Added Volker's directory fix - save the attributes
      Added Volker's directory fix - save the attributes
      The element in fsp->print_job should be a RAP jobid, not a uint32 RPC
      The element in fsp->print_job should be a RAP jobid, not a uint32 RPC
      Fix debugs for rap mapping. Delete job on map fail.
      Fix debugs for rap mapping. Delete job on map fail.
      Ensure global_scope() returns "", not the NULL string. Froma tpot fix.
      Ensure global_scope() returns "", not the NULL string. Froma tpot fix.
      The _abs time functions should not be converting from/to GMT.
      The _abs time functions should not be converting from/to GMT.
      Fix client large file reporting.
      Fix client reporting of 64 bit files.
      Fix write error returning EFBIG - found by Conrad.
      Fix write error returning EFBIG - found by Conrad.
      Fixed auth module code. Added VALGRIND defines to reduce spurious warnings.
      Fixed auth module code. Added VALGRIND defines to reduce spurious warnings.
      Added "kernel change notify" boolean to allow easier valgrind testing.
      Added "kernel change notify" boolean to allow easier valgrind testing.
      Fix for old DOS client when veto files is set to /.*/
      Fix for old DOS client when veto files is set to /.*/
      The name pointer in the talloc context must not be a talloced entry as
      The name pointer in the talloc context must not be a talloced entry as
      Ensure talloc pool query messages are reserved.
      Ensure talloc pool query messages are reserved.
      Protect nmbd against malformed reply packets. Some reports on the lists showing
      Protect nmbd against malformed reply packets. Some reports on the lists showing
      Forward port the change to talloc_init() to make all talloc contexts
      Forward port the change to talloc_init() to make all talloc contexts
      talloc_init_named -> talloc_init.
      talloc_init_named -> talloc_init.
      Finish adding strings to all talloc_init() calls.
      Finish adding strings to all talloc_init() calls.
      Patch for coredump with missing arg from "Bradley W. Langhorst" <brad at langhorst.com>
      Patch for coredump with missing arg from "Bradley W. Langhorst" <brad at langhorst.com>
      Revert by Simo's request. HEAD and 3.0 should be in sync for
      Revert by Simo's request. HEAD and 3.0 should be in sync for
      Merge Richard's write > 4Gb fix.
      Catching up with old patches. Add define for VERITAS quota support.
      Catching up with old patches. Add define for VERITAS quota support.
      Merge tridge's fix :
      Merge Andrew Bartletts (size_t)-1 checks.
      Typo..
      pstring/fstring missmatches found by Andrew Bartlett.
      pstring/fstring missmatches found by Andrew Bartlett.
      Fix problem with "hide unreadable". stat file opens are baaack :-).
      Fix problem with "hide unreadable". stat file opens are baaack :-).
      Fix from "Ken Cross" <kcross at nssolutions.com> for enumerating
      Fix from "Ken Cross" <kcross at nssolutions.com> for enumerating
      Fix memory leaks in pdb_ code.
      Fix memory leaks in pdb_ code.
      Fix open problem with changing attributes on an existing file - based
      Fix open problem with changing attributes on an existing file - based
      Fix erroneous free of SAM_ACCOUNT (make clearer when allocated
      Fix erroneous free of SAM_ACCOUNT (make clearer when allocated
      Ensure we don't get an invalid number for total smbd's if the tdb update
      Ensure we don't get an invalid number for total smbd's if the tdb update
      Ensure we return disk full by default on short writes.
      Ensure we return disk full by default on short writes.
      Don't delete jobs subitted after the lpq time.
      Fix lpq_cache time check (missed from yesterday).
      First part of efficiency fixes for message sending to pid's (cutting down
      First part of efficiency fixes for message sending to pid's (cutting down
      Added tdb_append() call. Efficiently adds to an entry. Used by new messaging
      Added tdb_append() call. Efficiently adds to an entry. Used by new messaging
      Added new message_send_pid() code that uses tdb append to reduce locking
      Added new message_send_pid() code that uses tdb append to reduce locking
      Merge of indirection fixes from HEAD.
      Missing indirect in final free.
      Don't touch data after a free.
      Add mutex protection around auth calls.
      Add mutex protection around auth calls.
      Fist part of fixes to make us compile with Heimdal. Don't explicitly
      Fist part of fixes to make us compile with Heimdal. Don't explicitly
      More Heimdal changes. Still not compiling with Heimdal yet...
      More Heimdal changes. Still not compiling with Heimdal yet...
      Fixed up mutex protection around winbindd logon code. Sync with APP-HEAD.
      Fixed up mutex protection around winbindd logon code. Sync with APP-HEAD.
      Fix reference count bug where smbd's would not terminate with no
      Fix reference count bug where smbd's would not terminate with no
      Janitorial duty...
      Merge in more of the SuSE patches for Heimdal. These changes show how
      Merge in more of the SuSE patches for Heimdal. These changes show how
      More fixes getting us closer to full Heimdal compile....
      More fixes getting us closer to full Heimdal compile....
      Fixup proto generation to not include krb5 specific symbols
      Fixup proto generation to not include krb5 specific symbols
      Get closer to Heimdal compile... Damn. HEAD has different code in
      Thanks Meeester Potter, for reverting *all* my Heimdal changes because
      Fixed typo found by tpot.
      Memory leak fix from Leo Qiu <leoxqiu at yahoo.com>.
      Fix memory leak found my Leo Qiu <leoxqiu at yahoo.com>.
      Get smbd to link with Heimdal. Still missing some client progs...
      Finally we compile with Heimdal as well as MIT ! Wonder if it works... :-).
      Merging tridge's privillage client changes from HEAD.
      Merge tridge's client priv code from HEAD.
      Return 0 instead of crashing when a NULL source string is passed
      Remove NULL buffer checks before rpcstr_pull() as they're now done
      Removed duplicate fn to avoid compiler warning. (from HEAD - tpot).
      Merge tpot's changes to request the correct sizes for user dispinfo
      Fix for interesting resource constraint condition. When all opens are
      Fix for interesting resource constraint condition. When all opens are
      Revert tpot's breakage of the Heimdal fixes.
      Stop tpot from trampling over my Heimdal fixes by moving some of them
      Revert tpot's HEAD merge which broke the Heimdal build.
      Fix kerberos compile after the tpot massicre :-).
      Re-added the Heimdal stuff tpot removed.
      Sync up with 3.0 heimdal.
      More scalable print tdb fixes.
      More scalable print tdb fixes.
      Add 3 second timeout when terminating server and sending print notify
      Add 3 second timeout when terminating server and sending print notify
      Ensure Luke Howard's (C) is added.
      Ensure Luke Howard's (C) is added.
      Added first part of attribute matrix tests. Not run and compiled in right now...
      Grrr. Kill all BSD-isms... Spotted by Paul Green <paulg at sw.stratus.com>.
      Grrr. Kill all BSD-isms... Spotted by Paul Green <paulg at sw.stratus.com>.
      Got complete (I hope) coverage of the OPEN TRUNCATE ATTRIBUTES test.
      Ensure Samba passes the open attribute truncate tests in smbtorture.
      Ensure Samba passes the open attribute truncate tests in smbtorture.
      Ensure we only ever set fsp->conn in one place.
      Ensure we only ever set fsp->conn in one place.
      Ensure we overwrite a tdb if the hash size changes.
      Ensure we overwrite a tdb if the hash size changes.
      Up the hash table size for printing tdb.c
      Up the hash table size for printing tdb.c
      Mem alloc failure checks.
      Mem alloc checks.
      Hold the lock for a much shorter time when allocating a new jobid.
      Hold the lock for a much shorter time when allocating a new jobid.
      Check for too many processes *before* the fork.
      Check for too many processes *before* the fork.
      Fixed type.
      Fixed type.
      Collapse duplicate messages before sending.
      Collapse duplicate messages before sending.
      Samba janitor: adding mbp's umask patch :-).
      Samba janitor: adding mbp's umask patch :-).
      Samba janitors: applying mbp's redundant umask fix.
      Samba janitors: applying mbp's redundant umask fix.
      Ensure we return NOSPACE if we can't fast allocate a print job.
      Ensure we return NOSPACE if we can't fast allocate a print job.
      Fix delete on close semantics to match W2K. I (think:-) I understand it now :-).
      Fix delete on close semantics to match W2K. I (think:-) I understand it now :-).
      Fixup delete on close torture.
      Ensure we are not forgetting our janitorial duties...
      Merging from HEAD - add a note about a better method for finding netbios name of workgroup
      Merge from HEAD...setup the %U substitution in winbindd for the homedir template
      Merge from HEAD - pull_ucs2_talloc() should pull to a char**, not a void**
      Correctly return access denied on share mode deny when we can't open the
      Correctly return access denied on share mode deny when we can't open the
      Fixes for HPUX only having limited POSIX lock range from Michael Steffens <michael.steffens at hp.com>
      Fixes for HPUX only having limited POSIX lock range from Michael Steffens <michael.steffens at hp.com>
      Added code based on Michael Steffens <michael.steffens at hp.com> uid/gid
      Added code based on Michael Steffens <michael.steffens at hp.com> uid/gid
      Merge JohnR's patch.
      Merge JohnR's patch.
      Removed unused variable.
      Removed unused variable.
      Ensure that only parse_prs.c access internal members of the prs_struct.
      Ensure that only parse_prs.c access internal members of the prs_struct.
      Patch based on work by Michael Steffens <michael_steffens at hp.com> to wrap
      Patch based on work by Michael Steffens <michael_steffens at hp.com> to wrap
      Correctly check for inet_addr fail. Patch from gregor.7 at osu.edu.
      Correctly check for inet_addr fail. Patch from gregor.7 at osu.edu.
      Ensure we use getgrnam() unless BROKEN_GETGRNAM is defined. I now need
      Ensure we use getgrnam() unless BROKEN_GETGRNAM is defined. I now need
      Bit of a hack job to prevent smbprn.XXX jobs appearing in the queue if the
      Bit of a hack job to prevent smbprn.XXX jobs appearing in the queue if the
      Fix from Corny.Bondad at hp.com for missing if (setting_acls) on default
      Fix from Corny.Bondad at hp.com for missing if (setting_acls) on default
      Fix inspired by Stefan (metze) Metzmacher - cache the sidtype also.
      Fix inspired by Stefan (metze) Metzmacher - cache the sidtype also.
      Ensure tdb error code is set for corrupt and i/o errors before calling
      Ensure tdb error code is set for corrupt and i/o errors before calling
      Added Volkers "print server role" patch.
      Added Volkers "print server role" patch.
      Added comments to make it clearer when we're assigning a pointer that it
      Added comments to make it clearer when we're assigning a pointer that it
      New locktest7 code based on patch from "Srikanta Shivanna" <sshivanna at pillardata.com>
      When checking is_locked() new WRITE locks conflict with existing READ locks even
      When checking is_locked() new WRITE locks conflict with existing READ locks even
      Merge from head. Move off-by-one buggy malloc()/safe_strcpy() combination to strdup() instead.
      Merge from HEAD. Use pstrcpy not safe_strcpy.
      Fix to allow blocking lock notification to be done rapidly (no wait
      Fix to allow blocking lock notification to be done rapidly (no wait
      *Excellent* patch from Michael Steffens <michael_steffens at hp.com> to limit
      *Excellent* patch from Michael Steffens <michael_steffens at hp.com> to limit
      Ensure added jobs increment total_jobs.
      Ensure added jobs increment total_jobs.
      Added limit to number of jobs enumerated. Set to 0 (means no limit).
      Added limit to number of jobs enumerated. Set to 0 (means no limit).
      Fix "might be used uninitialised" warnings.
      dlysym takes a const char *.
      dlsym takes a const char *.
      Fix const warning.
      Const warning fixes.
      Const warning fixes.
      Connectathon fix. W2K -> W2K over port 445 doing a tconX does the full
      Connectathon fix. W2K -> W2K over port 445 doing a tconX does the full
      Fix for little-used lpq parser.
      Writable string const fixes.
      Writable string const fixes.
      More const fixes.
      More const fixes.
      Found at Connectathon, .NET RC1 arranges trans/trans2/nttrans parameters
      Found at Connectathon, .NET RC1 arranges trans/trans2/nttrans parameters
      Fix noticed by Corny.Bondad at hp.com. Ensure we free up memory on error exit.
      Fix noticed by Corny.Bondad at hp.com. Ensure we free up memory on error exit.
      Patch from Michael Steffens. In his own words :
      Patch from Michael Steffens. In his own words :
      Missed parentheses around complex logic.
      Extra const committed by mistake - revert.
      Missed parentheses around complex logic.
      Use ERROR_NT, not ERROR_DOS as Andrew Bartlett pointed out.
      Use ERROR_NT, not ERROR_DOS as Andrew Bartlett pointed out.
      Fix typo in earlier fix, caught by Ranjit @ HP.
      Fix typo in earlier fix, caught by Ranjit @ HP.
      Fix up zero termination. Spotted by Sebastian Krahmer <krahmer at suse.de>.
      Fix up zero termination. Spotted by Sebastian Krahmer <krahmer at suse.de>.
      We use unsigned now, so use %u.
      We use unsigned now, so use %u.
      Ensure we count the length correctly in mangle_map.
      Ensure we count the length correctly in mangle_map.
      Change size parameters from signed to unsigned to fix up warnings.
      Merge of Andrew Bartlett's SID limit fix from HEAD.
      Change size parameters from signed to unsigned to fix up warnings.
      Merge from HEAD. 'fixed the unmarshalling of the queryaliasmem SAMR call'
      Merge from HEAD. 'win2000 can take much longer than the specified time to respond to a
      Fix off by one bug noticed by Andrew Bartlett.
      Merge in the developer string options from HEAD. We need to ensure 3.0
      Merge mbp's HEAD changes.
      const warning fix.
      Removed unused var.
      Removed unused var.
      Ensure dev in make_connection is const.
      Ensure dev in make_connection is const.
      Doin't pstrcpy into fstring.
      lib/messages.c: Check return from chainlock before modifying message queue.
      lib/messages.c: Check return from chainlock before modifying message queue.
      Merge of new appliance-head scalable printing fixes.
      Merge of new appliance-head scalable printing fixes.
      Fix extra NULL arg added during app-head merge.
      Fix extra NULL arg added during app-head merge.
      Add defines for platforms that need them.
      Add defines for platforms that need them.
      Fix DOS del command with widelinks = False.
      Fix DOS del command with widelinks = False.
      Doing janitor work for tridge.
      Subtle changes to message handling after ENUMJOBS.
      Subtle changes to message handling after ENUMJOBS.
      Fixup format warning.
      Fixup swat warning.
      Fixup swat warning.
      Fix the new storage code to correctly convert from system queue info to
      Fix the new storage code to correctly convert from system queue info to
      Fix for very subtle POSIX lock interaction race condition found by
      Fix for very subtle POSIX lock interaction race condition found by
      Re-fix regression noticed by Tom Schaefer <tom at umsl.edu> due to
      Re-fix regression noticed by Tom Schaefer <tom at umsl.edu> due to
      const cleanup.
      Ensure print queue array is zeroed out before returning.
      Ensure print queue array is zeroed out before returning.
      Ensure we have WinXP-like semantics for checking TIDs and FIDs.
      Ensure we have WinXP-like semantics for checking TIDs and FIDs.
      Fix from Steve Langasek <vorlon at netexpress.net> for non-RPC printing.
      Fix from Steve Langasek <vorlon at netexpress.net> for non-RPC printing.
      Added using different cnum test. WinXP and Samba now pass - Win2k fails.
      Ensure we're not filtering our essential delete messages.
      Ensure we're not filtering our essential delete messages.
      Fix from Andrew Esh to ensure tdb_pack can't segfault.
      Fix from Andrew Esh to ensure tdb_pack can't segfault.
      Grr. Get rid of one of the extra NULL's that crept in from app-head.
      Fix _smb_setlen to be non {} safe.
      Fix _smb_setlen to be non {} safe.
      Merge across tridge's Realloc fix.
      Try and create a file with different vuid, same cnum. Not yet sure
      Tested on Win2k, now I think I know what success/fail means in fdsess test.
      Fix mem leak. Spotted by tpot (thanks Tim).
      Fix mem leak. Spotted by tpot (thanks Tim).
      Fixes to make SCHANNEL work in 3.0 against a W2K DC. Still need to fix
      Fixes to make SCHANNEL work against a W2K DC. Still need to fix
      Fixes for multi-PDU schannel - based on Volker's code. This code needs
      Fixup a few typos for Jerry.
      Tidyups of some dubious logic discovered whilst trying to track down a
      Tidyups of some dubious logic discovered whilst trying to track down a
      Add runtime tests for "impossible" case with -DDEVELOPER. Trying to catch logic
      Add runtime tests for "impossible" case with -DDEVELOPER. Trying to catch logic
      Limit the number of outstanding print notify messages for a process to
      Limit the number of outstanding print notify messages for a process to
      Fixes from Ronan Waide <waider at waider.ie> for large RPC writes.
      Fixes from Ronan Waide <waider at waider.ie> for large RPC writes.
      Fix for bugid 51 from Dragan Krnic.
      Fix for bugid 51 from Dragan Krnic.
      Fix uninitialized blobs reported by Luke Howard.
      Fix uninitialized blobs reported by Luke Howard.
      We used to use the name "*",0x0 here, but some Windows
      We used to use the name "*",0x0 here, but some Windows
      Force ASCII for client messages. Patch from David Lee  <t.d.lee at durham.ac.uk>
      Force ASCII for client messages. Patch from David Lee  <t.d.lee at durham.ac.uk>
      Make fchown, fchmod conditional for systems that don't have them.
      Make fchown, fchmod conditional for systems that don't have them.
      Fix irritating typo - non arg functions should be fn(void).
      SMB_QUERY_FILE_ALT_NAME_INFO and SMB_FILE_ALTERNATE_NAME_INFORMATION
      SMB_QUERY_FILE_ALT_NAME_INFO and SMB_FILE_ALTERNATE_NAME_INFORMATION
      Fix nasty bug pointed out by samba-technical poster. If name is mangled
      Fix nasty bug pointed out by samba-technical poster. If name is mangled
      Fix for possible segfault in readline handler. Found by vitalyb at mail333.com.
      Fix for possible segfault in readline handler. Found by vitalyb at mail333.com.
      Optimisation. We don't need to do 2 strlen's when we're setting the stat
      Optimisation. We don't need to do 2 strlen's when we're setting the stat
      Fix from Tom.Lackemann at falconstor.com to correctly set the flags based
      Fix from Tom.Lackemann at falconstor.com to correctly set the flags based
      Fix obvious compiler warnings.
      Fix compiler warnings.
      Fix winbindd coredump. Remember to set a ** pointer to null before
      Fix winbindd coredump. Remember to set a ** pointer to null before
      Ok, try and fix this correctly... Simplify the nasty loop logic.
      Ensure sys_adminlog code won't coredump with incorrect client params.
      Ensure sys_adminlog code won't coredump with incorrect client params.
      Patch from "Alex Deiter" <tiamat at komi.mts.ru> to fix incorrect error check.
      Patch from "Alex Deiter" <tiamat at komi.mts.ru> to fix incorrect error check.
      Fix from Steve G <linux_4ever at yahoo.com>. Ensure sigemptyset is called on
      Fix from Steve G <linux_4ever at yahoo.com>. Ensure sigemptyset is called on
      Fix for winbindd segfault (finally I think this is the correct one :-)
      Patch from Luke Howard <lukeh at PADL.COM> to recognise local groups.
      Patch from Luke Howard <lukeh at PADL.COM> to recognise local groups.
      Patch from "Esh, Andrew" <Andrew_Esh at adaptec.com> to fix core dump bug
      Patch from "Esh, Andrew" <Andrew_Esh at adaptec.com> to fix core dump bug
      Cope with cumulative permissions sets. This code is #ifdef'ed out at the
      Cope with cumulative permissions sets. This code is #ifdef'ed out at the
      FreeBSD5 ACL fix.
      FreeBSD5 ACL fix.
      Add more info to debug info...
      More fixes for debug log to catch logic error.
      More fixes for debug log to catch logic error.
      Stat opens can have fsp->fd == -1 and will have a share entry. Ensure
      Stat opens can have fsp->fd == -1 and will have a share entry. Ensure
      Don't use extensions like '\t' in a sed script. It breaks the make proto.
      Correct (?) handling for VC = 0. Trying to fix XP logoff leaving resources
      Correct (?) handling for VC = 0. Trying to fix XP logoff leaving resources
      It seems only NT4 does the VC == 0 session drop code.
      It seems only NT4 does the VC == 0 session drop code.
      Fix bug brought up by Ken Cross that empty ACE's cause existing ACE's to
      Fix bug brought up by Ken Cross that empty ACE's cause existing ACE's to
      function() is *NOT* a valid C proto, but C++ only.
      Change get_nt_acl() to include security_info wanted. Only return this.
      Ensure 'blank' entries show up in both default and normal entries to
      Fixes to stop valgrind complaining about uninitialised memory when it's
      Got us happy running under valgrind again :-).
      Redhat 9 needs an explicit -lattr to be able to add POSIX ACLs.
      Merge DEBUG message on usleep on open.
      Merge change winbindd cache time 15 -> 120 secs.
      Fix debug message merge.
      Fix for previous checkin. Only use talloc on unmarshalling or we'll
      Never second guess tridge.... (always talloc an internal pointer... ).
      Get ready for EA code... Add Linux interface.
      Added EA operations to VFS layer.
      Missed (name) arg in fgetxattr.
      Fixup the check for attr libraries, used ',' instead of ' '.
      Fix for VFS_NEXT xattr calls (from metze). I will add these to skel.c to
      metze noticed some conn elements remaining in a VFS_NEXT.
      Fixup of typos.
      Make skeleton VFSs compile with new EA modules.
      Fix for valgrind - when doing a srvstr_push we must zero fill
      Fix for crash bug noticed by Luke Howard | PADL Software Pty Ltd | www.padl.com.
      Add some basic DEBUG statements at level 10 so we can see what is being
      Instrument cache with debug statements so I can have a clue as to what
      More instrumentation for winbindd.
      Ok, I've tried being Mr. Nice Guy and people (you know who you are) still
      Add in rety loop for query_user_list (from APP_HEAD). Deals with a bug
      Forward port the app-head changes for dc name cache into 3.0.
      Mapping of Windows ACL inheritance and protected bits onto extended attributes
      Missed initial param, typo.
      Fixed sorting algorithm to prevent problems with W2K clients.
      Fixed the merge_default_aces() code to work correctly with inheritance.
      Add documentation for "map acl inherit" parameter.
      Move the map acl inherit parameter into the protocol section.
      Fixes from Martin Dorey <mdorey at bluearc.com> to only ask for and change
      Explain why winbindd is exiting.
      Sequence number was not getting updated with ldap hack. Only a bug in this
      Start to instrument this code as I try and track down a nasty bug that
      More instrumentation tracking down this bug...
      More debugs for this... (these should have been here already !).
      Ensure idmap backends are added in the correct order (DLIST_ADD puts
      Fix immediate bug where the idmap can't tell the difference between an entry
      As has been pointed out, ordering here doesn't matter so use normal
      Add include guards around idmap.h, change ID_NOMAP to ID_QUERY_ONLY
      Some const correctness. Stop tdb being used as a remote backend. If an
      Finally ! Fixed the ACL ordering bug reported by jcmd. I realised we were
      Valgrind found a bug (subtracting a pointer from a length rather than the
      Fix missing ret = found by Volker.
      Merge of Volkers patch to make the logic clearer (with my mod).
      Fixed the latest complaint from jcmd :-). We were storing -1 for the
      Adding jcmd's share ACL on XP patch. Thanks Jim !
      Fix for bug 189 from MORIYAMA Masayuki <msyk at mtg.biglobe.ne.jp>. Incorrect
      Whitespace reformat before applying a patch.
      Added fix for Japanese case names in statcache - these can change
      Fix for idmap startup bug with remote ldap backend.
      Removed strupper/strlower macros that automatically map to strupper_m/strlower_m.
      Fixed strlower changes I missed. Pointed out by metze.
      More conversions I missed. Thanks metze.
      Fixed a couple of const issues with the new code.
      Fix from MORIYAMA Masayuki <msyk at mtg.biglobe.ne.jp> for new MB statcache
      Fix the build...
      Fix spotted by Nadav Danieli <nadavd at exanet.com> - ensure dev and inode
      Moved SAM_ACCOUNT marshall/unmarshall functions to make them externally
      Ensure we correctly test for errors in uid/gid_to sid.
      Fix up become_root/unbecome_root pairs needed around local passdb
      Get rid of DISP_USER_INFO/DISP_GROUP_INFO as they serve no useful
      Fixed memory leaks, added krb5 replay cache. Now I need to add code to check
      Add a cli_ prefix to a few functions to ensure everything that takes a struct cli_state
      Added the "required" keyword to the "client signing" parameter to force it
      Reformatting fixes to bring in line with the rest of the source.
      Add krb5_princ_component to Heimdal. Remove cli_ from mark packet signed.
      Add API framework for server SMB signing.
      Refactor signing code to remove most dependencies on 'struct cli'.
      Putting the framework for server signing in place. Ensure we don't use
      Don't allow read/write raw when signing is active.
      Correctly toggle the signing state to what it was previosly when sending
      Formatting tidyups to match the rest of the source.
      Signing so far... the client code fails on a SMBtrans2 secondary transaction
      Don't check in two places for signing turned off...
      Server side NTLM signing works - until the first async packet. Working on this
      SMB signing is now working with change notify. Need to fix the disconnect
      Ensure everywhere we defer an incoming SMB request (blocking lock queue,
      Some fclose -> x_fclose found by Tony Jago.
      Fix packet signing with asynchronous oplock breaks. Removed bad error message
      Fix from matt.zinkevicius at hp.com to stop files being created on read-only
      W00t! Client smb signing is now working correctly with krb5 and w2k server.
      Start the packet signing engine in the kerberos case in the same place
      Correctly detect an "add user script" - check that *lp_adduser_script() != '\0',
      Ensure all code paths set add_script.
      Improved debug messages whilst trying to track down kerb issues.
      Typo on my part. I typed KRB5_KDB_BAD_ENCTYPE when I meant to type KRB5_BAD_ENCTYPE.
      Finish tridge's patch as referenced here :
      Fix bug #226. Stop unmangle of name into a wildcard name from deleting more
      Put mutex around access of replay cache for krb5 tickets. krb5 replay cache
      Comment out mutex until I get dependencies sorted out...
      Don't revert something until you've seen if volker has already fixed it :-).
      Eliminate valgrind error when client gets bad sig on list. Some reformatting.
      Fix bug we discovered in W2K client signing on secondary trans2 packets.
      Save us from possibly uninitialised variable (caught by gcc).
      Add a command line option (-S on|off|required) to enable signing on client
      Turn the 'doing_signing' variable on - fix bug where it was only being set
      Wrap calls to change_oem_password() in become_root()/unbecome_root() pairs
      Added a note inspired by andrew at cis.uoguelph.ca to explain when this
      Reformat clitar option processing - getting ready to fix it for popt...
      Reformat lots of clitar code as I hate the style so much :-).
      Final fix for the bug tridge found. Only push locks onto a blocking lock
      Finish reformatting.
      Fix the option processing for smbtar. Does no one check this !
      Correct fix (removed the earlier band-aid) for what I thought was a signing
      Add the same signing code to the server. Ensure we use identical session
      Leave the packet sequence checkers enabled whilst I track down a smbclient -> smbd
      More fixes for client and server side signing. Ensure sequence numbers
      Only look for mid sign records on incoming packets for oplock break replies.
      Ensure we don't leak any sign records on cancel of pending requests.
      Fix oplock break detection code on incoming oplock break responses. This
      Output message saying "signed connect" instead of just connect when signing
      Fix up #defines around utmp_host and utmp_name. Noticed by Cord.Hockemeyer at uni-graz.at
      Get rid of MAXPATHLEN, move to standard PATH_MAX.
      Anal formatting tidyup :-).
      Reversed replacement. Oops.
      Ensure smbclient obeys -s smb.conf option.
      Patch from waider at waider.ie to print out Port Type.
      Cosmetic fix from waider at waider.ie.
      Turns out I had my packet sequences wrong for oplock break code.
      An oplock break reply from the client causes the sequence number to be
      Shadow copy API - Original work by "Ken Cross" <kcross at nssolutions.com>, adapted
      Test modules for shadow copy by "Stefan (metze) Metzmacher" <metze at metzemix.de>.
      Added by request of "Stefan (metze) Metzmacher" <metze at metzemix.de>.
      RPC fix from Ronan Waide <waider at waider.ie>. Tested with rpcecho.
      Turn on client ntlmv2 by default.
      Format tidyup.
      Make client signing auto.
      Fallback to not using NTLMv2 is extended security not supported.
      Fix for bugid #205 - work by Andrew Bartlet (modified to use
      Test invalid map system, map hidden, create mask, force create mask
      Fix another error code return against Samba4 test suite... Don't allow
      Ensure we pass the Samba4 unlink test !
      More chkpth fixes from Samba4 tests.
      Better path checking for chkpth. We now pass Samba4 chkpath and unlink.
      Query volume info level 2 fix - found by Samba4 tester.
      Extended seek tests to check position information.
      Fix SMBseek and get/set position information SMBs. Works against
      Fix changing of attributes via setattr. Samba4 test fixes.
      Fix setfileinfo level 1 - it only takes 12 bytes. Found by Samba4
      nlink field should decrement when delete pending is set.
      Ignore silently set disposition information when set on a path.
      Fix attribute set using setfileinfo - Samba4 found.
      Print out position info, ensure NT_RENAME info level only works
      Implemented the level 1010 NT rename level. Many fixes for Samba4 test
      Add level 261 to search. Found using Samba4 tester.
      Added level 262. Found by Samba4 torture tester.
      Don't return DOS error on SMBsearch return if using NT error codes (NT1
      Fix flush of 0xFFFF - found by Samba4 tester.
      Implement SMBexit properly. Found by Samba4 tester. You must do a make
      Attempt to fix the charcnv issues causing nmbd to crash. If we get a failed
      Turn UNIX extensions on by default. Yes I will change the docs :-).
      Unix extensions now default to on.
      Shut conversion errors up when initialising tables.
      Ensure nmblookup correctly converts from CH_DOS to CH_UNIX when displaying
      Ensure nmb_namestr() converts back from CH_DOS to CH_UNIX.
      Use correct size (17 not 16) when doing a push_ascii(). Ensure that
      struct nmb_name should have 16 byte namestrings, not 17.
      Half-way though the big conversion of all nmbd access to wire elements being
      Fix the character set handling properly in nmbd. Also fix bug where
      Ensure we use correct length nstrings for workgroup and browser names.
      Remove completely unneeded malloc/free out of this codepath.
      Fix initial debug.
      Check for embedded mb chars when testing for illegal characters like /.
      Remove what looks like gcc-isms.
      Fix rename of struct gap. ab - LOOK AT THIS. You changed one module
      Fixed off-by-one bugs in workgroup name comparisons. Complain when a
      Add length warning on register name.
      Fixed warnings in secret code.
      Fix bug found by tridge in 2.2.x. Ensure that %U substitution is
      Fix comment strings to 43 bytes as per spec.
      Proposed patch for #308. Needs testing.
      Fix up overlapping memcpy -> memmove found by valgrind.
      Used cachegrind to track down some bottlenecks.
      Fix UNIX passwd sync properly. I've finally understood
      Remove convert_string_internal completely from fast path when processing
      More hand-tuning of the fastpath. Don't do strlen() when we're doing
      Fastpath strchr_m for ASCII.
      Hand optimisatinos for strrchr_m using the properties we know about MB
      More tuning from cachegrind. Change most trim_string() calls to trim_char(0,
      More cachegrind tuning, plus fix an error message.
      Change some internal interfaces to cause the hash (which is *expensive*)
      Use djb-algorithm string hash - faster than the tdb one we used to use.
      Fix for incorrect error message - found by Alex Davis <alex14641 at yahoo.com>.
      Protect against core dump if ioctl for print job sends invalid fid. Found
      Tidy up some formatting. Get ready for allowing bad password lockout. (based
      Fix valgrind-found read of uninit variable (ensure length is right).
      Don't double-increment p in hash calculation. Found by valgrind.
      Fix mb bug in fast path code. strlen_w() returns number of *characters*
      Fix stupid typo bug causing CPU spin. Spotted by Markus Ungermann <ungermann at elzet80.de>
      Fix for bug #273 - smbd crash on machine account change.
      Fix a nasty mess, and also bug #296. passdb/pdb_ldap.c was not converting
      Still on my mb rampage. Ensure smbldap_make_mod() correctly detects old
      Ensure we consistantly translate to/from utf8 for talking to LDAP.
      Fix from Craig Barratt <cbarratt at users.sourceforge.net> to fix restore
      Fix from Benjamin Riefenstahl <Benjamin.Riefenstahl at epost.de>. Revered
      Fix for MacOS/X which uses STUPID BROKEN UNICODE COMPOSE CHARACTERS !
      Fix for typo in darwin detection.
      Patch from Gregory Hinton Nietsky <gregory at networksentry.co.za>,
      A *curse* upon the person who #ifdefed out the mangle debug statements
      Fix OOPS when dealing with mangled names reported by several users.
      Ensure HEAD is also up to date.
      Fix from gregory at networksentry.co.za, don't clobber the comment if it
      Fix from gregory at networksentry.co.za, don't clobber the comment if it
      Fix #442 which Alexander considered a showstopper. Allow us to join mixed
      Fix #442 which Alexander considered a showstopper. Allow us to join mixed
      Obviously correct typo bugfix from  Lin Li <linl at xandros.com>.
      Obviously correct typo bugfix from  Lin Li <linl at xandros.com>.
      Fix coredump from Samba4 torture suite.
      Fix coredump from Samba4 torture suite.
      Unregister event fix from metze.
      Unregister event fix from metze.
      Fix for #470 - unable to display SIDs in ACLs.
      Fix for #470 - unable to display SIDs in ACLs.
      Oops. Proper fix for #470.
      Oops. Proper fix for #470.
      The "unknown_5" 32 bit field in the user structs is actually 2 16-bit
      The "unknown_5" 32 bit field in the user structs is actually 2 16-bit
      Ensure that dup_sec_desc copies the 'type' field correctly. This caused
      Ensure that dup_sec_desc copies the 'type' field correctly. This caused
      Fix return of result. Patch from Yasuma Takeda <yasuma at miraclelinux.com>
      Reformat - preparing to fix bug #480 (which will be ugly).
      Fix for #480. Change the interface for init_unistr2 to not take a length
      Fix to parse the level-2 strings. From Anthony Liguori aliguor at us.ibm.com.
      Fix for valid users = %S in homes share.
      Ensure %S gets expanded in read/write lists.
      iconv isn't const safe. Neither should smb_iconv be.
      Take care of condition where DOS and NT error codes must differ. Found by
      Take care of condition where DOS and NT error codes must differ. Found by
      Allow ^C to interrupt smbpasswd if using our getpass.
      Allow ^C to interrupt smbpasswd if using our getpass.
      Fixed silly typo checking for signal_handler not signal.
      Fixed silly typo checking for signal_handler not signal.
      Fix for not opening Excel 2000 files that are read-only. Needs tidying
      Fix for not opening Excel 2000 files that are read-only. Needs tidying
      Correct fix for excel read-only bug. Add panic for logic error in developer mode.
      Correct fix for excel read-only bug. Add panic for logic error in developer mode.
      Portability fix from schmitz at hp.com (Joachim Schmitz) for bug #548.
      Portability fix from schmitz at hp.com (Joachim Schmitz) for bug #548.
      Portability fix from schmitz at hp.com (Joachim Schmitz). Bug #547.
      Portability fix from schmitz at hp.com (Joachim Schmitz). Bug #547.
      Portability fixes from schmitz at hp.com (Joachim Schmitz). Bug #549.
      Portability fixes from schmitz at hp.com (Joachim Schmitz). Bug #549.
      Grrr. compile patches before you apply !
      Typo in error message.
      Fix for bug #562 (incorrect mode sum) by h-yamasaki at pd.jp.nec.com.
      Fix for bug #562 (incorrect mode sum) by h-yamasaki at pd.jp.nec.com.
      Version of patch from nick at isilon.com (Nicholas Kirsch) for bug #564.
      Version of patch from nick at isilon.com (Nicholas Kirsch) for bug #564.
      Tut tut - always run with max warnings on gcc...
      Max warnings with gcc.
      Fixup error code returns from Samba4 tester. Ensure invalid paths are
      Fixup error code returns from Samba4 tester. Ensure invalid paths are
      Changes to allow Samba3 to pass the Samba4 RAW-READ tests.
      Changes to allow Samba3 to pass the Samba4 RAW-READ tests.
      At least give a message if we're returning a short read for W2K compatibility.
      At least give a message if we're returning a short read for W2K compatibility.
      Match W2K insanty w.r.t. writelock and writeclose. Samba4 torture tester.
      Match W2K insanty w.r.t. writelock and writeclose. Samba4 torture tester.
      Make us pass Samba4 lock tester (with one different error message).
      Make us pass Samba4 lock tester (with one different error message).
      Ensure cancelling a blocking lock returns the correct error message.
      Ensure cancelling a blocking lock returns the correct error message.
      Enable us to see what sequence number we were expecting when we fail a sign
      Enable us to see what sequence number we were expecting when we fail a sign
      Ensure error code path doesn't free unmalloced memory. Bug #628.
      Ensure error code path doesn't free unmalloced memory. Bug #628.
      Fix buggy data_len calculation in echo. Add paranoia debug message.
      Fix buggy data_len calculation in echo. Add paranoia debug message.
      Tidyup wrap checking.
      Tidyup wrap checking.
      Typo broke win9x logins.
      Typo broke win9x logins.
      Merge tridge's tdb updates.
      Merge Volker's fix.
      Merge Volker's fix.
      Fixed typo spotted by Daniel Jarboe <daniel.jarboe at custserv.com>.
      Fixed typo spotted by Daniel Jarboe <daniel.jarboe at custserv.com>.
      Fix signing miss-sequence noticed by Stefan Metzmacher <metze at metzemix.de>
      Fix signing miss-sequence noticed by Stefan Metzmacher <metze at metzemix.de>
      Merge tridge's AIX fixes.
      Patch from Stefan Metzmacher <metze at metzemix.de> to fix signing problems
      Patch from Stefan Metzmacher <metze at metzemix.de> to fix signing problems
      Fix for bug #64, Win9x Nexus tools not working against Samba3.0. Missing
      Fix for bug #64, Win9x Nexus tools not working against Samba3.0. Missing
      Put strcasecmp/strncasecmp on the banned list (except for needed calls
      Put strcasecmp/strncasecmp on the banned list (except for needed calls
      Andrew Bartlett patch to cope with Exchange 5.5 cleartext pop password auth.
      Andrew Bartlett patch to cope with Exchange 5.5 cleartext pop password auth.
      Janitorial duty for tpot. Merge tdb error log fix.
      Missing UNIX -> DOS codepage conversion. Fix from Alexander Bokovoy <a.bokovoy at sam-solutions.net>.
      Missing UNIX -> DOS codepage conversion. Fix from Alexander Bokovoy <a.bokovoy at sam-solutions.net>.
      Fix for bug #667. DFS filenames can now have arbitrary case.
      Fix for bug #667. DFS filenames can now have arbitrary case.
      Don't log at level zero when chdir fails. Ensure correct error message is returned.
      Don't log at level zero when chdir fails. Ensure correct error message is returned.
      Fixes to check for wraps which could cause coredumps.
      Fixes to check for wraps which could cause coredumps.
      Janitor for tridge.
      Check for nsswitch.h. Patch from albert chin (china at thewrittenword.com).
      Check for nsswitch.h. Patch from albert chin (china at thewrittenword.com).
      If nothing to do, return success. Fix from Aur?lien Degr?mont <adegremont at idealx.com>
      If nothing to do, return success. Fix from Aur?lien Degr?mont <adegremont at idealx.com>
      Patch from Aur�lien Degr�mont <adegremont at idealx.com>. "entry" is dependent
      Patch from Aur�lien Degr�mont <adegremont at idealx.com>. "entry" is dependent
      Fix for winbindd on HPUX from albert chin (china at thewrittenword.com)
      Fix for winbindd on HPUX from albert chin (china at thewrittenword.com)
      TDBSAM update code from Aur?lien Degr?mont <adegremont at idealx.com>.
      Fix for bug #703, try lowercase netgroups lookups.
      Fix for bug #703, try lowercase netgroups lookups.
      Fix for bug #771. Fix packet length for browse list reply.
      Fix for bug #771. Fix packet length for browse list reply.
      Fix debug message warning.
      Fix coredump in cli_get_backup_list.
      Fix coredump in cli_get_backup_list.
      Fix bug #471. (const needed in lp_set_name_resolve_order).
      Fix bug #471. (const needed in lp_set_name_resolve_order).
      Handle munged dial string. Patch from Aur?lien Degr?mont <adegremont at idealx.com>with memory leak fixes by me.
      Handle munged dial string. Patch from Aur?lien Degr?mont <adegremont at idealx.com>
      Patch from Andrew Bartlett <abartlet at samba.org> for security=server core
      Patch from Andrew Bartlett <abartlet at samba.org> for security=server core
      Fix from Andrew Bartlett to fix up the munged-dial problem.
      Fix from Andrew Bartlett to fix up the munged-dial problem.
      Ensure we mangle names ending in '.' in hash2 mangling method.
      Ensure we mangle names ending in '.' in hash2 mangling method.
      Remove unneeded second open for filename ending in '.' now we know it's
      Remove unneeded second open for filename ending in '.' now we know it's
      Correct fix for checking of '$' name termination.
      Correct fix for '$' termination test.
      Group quotas patch from "Heinreichsberger, Helmut" <Helmut.Heinreichsberger at wincor-nixdorf.com>
      Group quotas patch from "Heinreichsberger, Helmut" <Helmut.Heinreichsberger at wincor-nixdorf.com>
      Look at error before using it in debug statement.
      Look at error before using it in debug statement.
      Fix Jerry's no-proto bug :-).
      Fix Jerry's no-proto bug :-).
      Fix for rename across filesystems. Noticed by Rainer Link <link at foo.fh-furtwangen.de>.
      Fix for rename across filesystems. Noticed by Rainer Link <link at foo.fh-furtwangen.de>.
      Added "passwd chat timeout" parameter. Docs to follow.
      Added "passwd chat timeout" parameter. Docs to follow.
      When server signing is set to "auto", if the client doesn't sign just
      When server signing is set to "auto", if the client doesn't sign just
      Patch for #263 from jpjanosi at us.ibm.com.
      Patch for #263 from jpjanosi at us.ibm.com.
      If signing starts successfully, don't just turn it off automatically if
      If signing starts successfully, don't just turn it off automatically if
      Patch from Jim McDonough for bug #802. Retrieve the correct ACL group bits
      Patch from Jim McDonough for bug #802. Retrieve the correct ACL group bits
      Patch from Benjamin Riefenstahl <Benjamin.Riefenstahl at epost.de> to add
      Patch from Benjamin Riefenstahl <Benjamin.Riefenstahl at epost.de> to add
      Fix for pdbedit error code returns (sorry, forgot who sent in the patch).
      Fix for pdbedit error code returns (sorry, forgot who sent in the patch).
      Fix signing bug with secondary client trans requests. Turns out the last
      Fix signing bug with secondary client trans requests. Turns out the last
      Better fix for client signing bug. Ensure we don't malloc/free trans signing
      Better fix for client signing bug. Ensure we don't malloc/free trans signing
      Don't automatically set nt status code flag unless client tells us it can
      Don't automatically set nt status code flag unless client tells us it can
      Ensure we use the same mid for the secondary trans requests, W2K3
      Ensure we use the same mid for the secondary trans requests, W2K3
      Subtract NT_STATUS from common flag, don't add it...
      Subtract NT_STATUS from common flag, don't add it...
      Ensure the server can cope with multiple secondary trans
      Ensure the server can cope with multiple secondary trans
      Fix spurious error msg. when seq=0.
      Fix spurious error msg. when seq=0.
      Get a little paranoid about memfree use in convert_string_allocate..
      Get a little paranoid about memfree use in convert_string_allocate..
      Client connect signing error messages should be level zero else
      Client connect signing error messages should be level zero else
      Fix for "hash" (not hash2) type mangling. Noticed by "Forrest W. Christian" <fwc at mt.net>
      Fix for "hash" (not hash2) type mangling. Noticed by "Forrest W. Christian" <fwc at mt.net>
      Janitor for tridge...
      Fix for bug #445 (missing unix user on kerberos auth doesn't call add user
      Fix for bug #445 (missing unix user on kerberos auth doesn't call add user
      Make intent to return only one address clear.
      Make intent to return only one address clear.
      Final part of fix for #445. Don't add user for machine accounts.
      Final part of fix for #445. Don't add user for machine accounts.
      IRIX spinlock patch from James Peach <jpeach at sgi.com>.
      IRIX spinlock patch from James Peach <jpeach at sgi.com>.
      Patch from James Peach <jpeach at sgi.com>. Remove the MAX_CONNECTIONS limit
      Patch from James Peach <jpeach at sgi.com>. Remove the MAX_CONNECTIONS limit
      Correctly detect in-memory krb5 keytab support. Fix for bug #863 from
      Correctly detect in-memory krb5 keytab support. Fix for bug #863 from
      Fix detection of elements in in-memory keytab code.
      Fix detection of elements in in-memory keytab code.
      Fix for bug #815. Make plaintext unicode passwords work with NT4.x
      Fix for bug #815. Make plaintext unicode passwords work with NT4.x
      Fix from ndb at theghet.to to allow an existing LDAP machine account to be
      Fix from ndb at theghet.to to allow an existing LDAP machine account to be
      Small fix from Jérôme Tournier <jerome.tournier at IDEALX.com>
      Tidyup debug message in ntlmssp code. Add brackets around dodgy if statement.
      Tidyup debug message in ntlmssp code. Add brackets around dodgy if statement.
      Add in comments explaining NTLMv2 selection. Use lm session key if that's
      Add in comments explaining NTLMv2 selection. Use lm session key if that's
      Patch from Jianliang Lu j.lu at tiesse.com to manage Power Users
      Patch from Jianliang Lu j.lu at tiesse.com to manage Power Users
      Fix for special files being hidden from admins by Dmitry Butskoj <buc at odusz.elektra.ru>
      Fix for special files being hidden from admins by Dmitry Butskoj <buc at odusz.elektra.ru>
      Ensure we set "always sign" flag if set. We don't currently do anything with
      Patch from Stefan (metze) Metzmacher <metze at metzemix.de> to revert to 2.2.x quota methods.
      Fix from James Flemer <jflemer at uvm.edu> to make HAVE_ATTR_LIST linked to
      Fix from James Flemer <jflemer at uvm.edu> to make HAVE_ATTR_LIST linked to
      Oops. Broke the build. Added missing files.
      Added last missing file.
      Patch based on work from James Peach <jpeach at sgi.com> to convert over to
      Patch based on work from James Peach <jpeach at sgi.com> to convert over to
      Updates for pread/pwrite code.
      XFS quota patch from Stefan Metzmacher <metze at metzemix.de>.
      Patch penguin. Cleaning out old mbp patch.
      Patch penguin. Cleaning out old mbp patch.
      Fix from Luke Howard <lukeh at PADL.COM> for incorrect early free().
      Fix from Luke Howard <lukeh at PADL.COM> for incorrect early free().
      Fix from Justin Baugh <justin.baugh at request.com> for bugid #948 for
      Fix for bug #922. Fast path not called for strlower_m() and strupper_m().
      Fix for bug #922. Fast path not called for strlower_m() and strupper_m().
      Remove references to 'jn' which gcc-3.4 with precompiled headers
      Remove references to 'jn' which gcc-3.4 with precompiled headers
      Remove duplicate extern.
      Remove duplicate extern.
      Fix for a signing bug when the mid wraps.
      Fix for a signing bug when the mid wraps.
      Merge of Chris's fix.
      Fix up name canonicalization (needed for krb5 keytab support later).
      Fix up name canonicalization (needed for krb5 keytab support later).
      A few fixes from "L. Lucius" <ib at digicron.com>. Don't use int when it's
      Merge from 3.0.
      Fix for a bug where the mutex could be left locked. Also remove the
      Fix for a bug where the mutex could be left locked. Also remove the
      Working on #830. Cope with bad conversions better - don't just memcpy but
      Working on #830. Cope with bad conversions better - don't just memcpy but
      Fixup the allocate version of the function to do "crap" conversions too.
      Fixup the allocate version of the function to do "crap" conversions too.
      Fix final valgrind errors with #830. Catch mb conversion error that may not
      Fix final valgrind errors with #830. Catch mb conversion error that may not
      Fix for possible crash bug from Sebastian Krahmer (SuSE).
      Fix for possible crash bug from Sebastian Krahmer (SuSE).
      Added James Peach's fix for #1038.
      Paranoia fixes :-).
      Paranoia fixes :-).
      Don't set an iterator to a piece of free'd memory, store it first.
      More paranoia checks.
      More paranoia checks.
      Fixup the 'multiple-vuids' bugs.
      Fixup the 'multiple-vuids' bugs.
      Added Andrew Bartlett's patch to use an allocated buffer for count_chars.
      Added Andrew Bartlett's patch to use an allocated buffer for count_chars.
      Missed SAFE_FREE (typo).
      Typo (missed SAFE_FREE).,
      Fix based on Volker's code to correctly return code from lsa_lookup_sids
      Fix based on Volker's code to correctly return code from lsa_lookup_sids
      Fix the "too many fcntl locks" scalability problem raised by tridge.
      Fix the "too many fcntl locks" scalability problem raised by tridge.
      Fixup correct (as per W2K3) returns for lookupsids as well as lookupnames.
      Fixup returns from lookupsids in the same way as lookupnames. Inspired by
      Make us bug-for-bug compatible with W2K3 - to get delete on close semantics
      Make us bug-for-bug compatible with W2K3 - to get delete on close semantics
      Make SMB_FILE_ACCESS_INFORMATION call work correctly.
      Make SMB_FILE_ACCESS_INFORMATION call work correctly.
      Fix "unable to initialize" bug when smbd hasn't been run with
      Fix "unable to initialize" bug when smbd hasn't been run with
      Fixup correct timeout values for blocking lock timeouts (tested at connectathon
      Fixup correct timeout values for blocking lock timeouts (tested at connectathon
      Added NTrename SMB (0xA5) - how did we miss this.... ?
      Added NTrename SMB (0xA5) - how did we miss this.... ?
      Fixup bad-path error found by gentest.
      Fixup bad-path error found by gentest.
      More gentest error fixups.
      More gentest error fixups.
      Ensure '.' and '..' don't match in delete requests.
      Ensure '.' and '..' don't match in delete requests.
      More gentest fixes.
      More gentest fixes.
      More gentest fun :-). NB. I'm not fixing OpenX breakage 'cos if you look
      More gentest fun :-). NB. I'm not fixing OpenX breakage 'cos if you look
      Figured out a new flags bit with gentest and ethereal....
      Figured out a new flags bit with gentest and ethereal....
      Fixup strange rename error case (gentest).
      Fixup strange rename error case (gentest).
      Interesting fact found by IFSTEST /t LockOverlappedTest...
      Interesting fact found by IFSTEST /t LockOverlappedTest...
      Merging Richard's rename test.
      More gentest fixes. Fix up regression in IS_NAME_VALID and renames.
      More gentest fixes. Fix up regression in IS_NAME_VALID and renames.
      Can't set allocation size on directories, return correct error code on
      Can't set allocation size on directories, return correct error code on
      Janitorial duty for tpot - --with-fhs fix.
      Use a common function to parse all pathnames from the wire. This allows
      Use a common function to parse all pathnames from the wire. This allows
      Added client "hardlink" commant to test doing NT rename with hard links.
      Added client "hardlink" commant to test doing NT rename with hard links.
      Fix my breakage of NT pipes from the previous patch (sorry). Use the
      Fix my breakage of NT pipes from the previous patch (sorry). Use the
      all_string_sub() is broken as it doesn't handle mb chars correctly (and
      all_string_sub() is broken as it doesn't handle mb chars correctly (and
      Several mb tidyups - getting ready to address the XXX_sub function.
      Several mb tidyups - getting ready to address the XXX_sub function.
      Fix assumption about following directory sep in check_path_syntax(). We
      Fix assumption about following directory sep in check_path_syntax(). We
      Added strstr_m() function. Use in all places where we might run into mb
      Added strstr_m() function. Use in all places where we might run into mb
      Fix dfs referrals - don't use check_path_syntax. Also use mb char calls in
      Fix dfs referrals - don't use check_path_syntax. Also use mb char calls in
      Formatting reformat before I start to change anything here.
      Formatting reformat before I start to change anything here.
      Moving towards getting msdfs working again (this looks like it was broken
      Moving towards getting msdfs working again (this looks like it was broken
      Fix processing of pathnames with embedded '\\' characters (0x5c) in CP932
      Fix processing of pathnames with embedded '\\' characters (0x5c) in CP932
      Ensure we use check_path_syntax() to pull out DFS paths.
      Ensure we use check_path_syntax() to pull out DFS paths.
      Restore the contract on all convert_stringXX() interfaces. Add a "allow_bad_conv"
      Restore the contract on all convert_stringXX() interfaces. Add a "allow_bad_conv"
      Fix bug introduced by Jim (touche :-) :-) - use new smbldap_get_single_pstring
      Allow msdfs symlink syntax to be more forgiving (it took me ages to remember
      Allow msdfs symlink syntax to be more forgiving (it took me ages to remember
      Fix from Robert.Dahlem at gmx.net (Robert Dahlem) for bugid #1048
      Fix from Robert.Dahlem at gmx.net (Robert Dahlem) for bugid #1048
      First part of patch from moriyama at miraclelinux.com (MORIYAMA Masayuki) to
      First part of patch from moriyama at miraclelinux.com (MORIYAMA Masayuki) to
      Modified fix for bugid #784. Based on a patch from moriyama at miraclelinux.com (MORIYAMA Masayuki).
      Modified fix for bugid #784. Based on a patch from moriyama at miraclelinux.com (MORIYAMA Masayuki).
      Ensure we don't truncate strcmps to nstring anymore...
      Ensure we don't truncate strcmps to nstring anymore...
      Use "unix netbios name" type unstring - 64 bytes long to manipulate netbios
      Use "unix netbios name" type unstring - 64 bytes long to manipulate netbios
      Avoid mb conversion overflow when sending an announcement.
      Avoid mb conversion overflow when sending an announcement.
      Add function next_mb_char_size() that returns a size_t of the number of
      Add function next_mb_char_size() that returns a size_t of the number of
      Change check_path_syntax() to use the new next_mb_char_size() function
      Change check_path_syntax() to use the new next_mb_char_size() function
      Remove excess logging when probing for the length of the next mb char.
      Remove excess logging when probing for the length of the next mb char.
      Added a varient of Volker's patch to fix the "self-referrals as anonymous user"
      Added a varient of Volker's patch to fix the "self-referrals as anonymous user"
      Correctness patch from fumiya at miraclelinux.com to count characters correctly,
      Correctness patch from fumiya at miraclelinux.com to count characters correctly,
      Merge from HEAD for Amanda group.
      Fix gcc warnings. Fix mkproto with new type.
      Fix gcc warnings. Fix mkproto with new type.
      Fix for #1064 - ensure truncate attribute checking is done correctly on "hidden" dot files.
      Added cli_set_ea(), cli_get_ea next...
      Always use strchr_m, not strchr on unix character sets.
      Fix bug #1211. Ensure accept socket is in non-blocking state in case of network
      Working (tested) client code for setting EA's by filename and fnum.
      Fix get/set of EA's in client library. Added torture test for it.
      Setting EA's to zero length deletes them.
      Committed test code by mistake... removing.
      Ensure we cope correctly with ea length of zero. Detect torture fail correctly.
      Added support for OS/2 EA's in smbd server. Test with smbtorture eatest.
      Reformat in preparation for EA dosmode attributes.
      "Fixing my FORTRAN". Ensure we always have some valid char converter for the
      Added per-share parameter "store dos attributes". When set, will store
      Added one more test for "dirname\."
      check_path improvements found by samba4 raw-checkpath tests.
      Fix wildcard identical rename.
      Fix reply_ctemp - make compatible with w2k3.
      Fix typo in check_path_syntax.
      Fix wildcard unlink.
      Fix wildcard src with wildcard dest renames.
      r48: Fix types for debug message parameters.
      r50: Fix bug 1139 as per fix suggested by jdev at panix.com,
      r81: Make EA's case independent - fix smbtorture to test for this.
      r87: Fix the build that Andrew Bartlett broke. Andrew - don't check *ANYTHING* in
      r96: Stupid f&%'n UNIX extensions.... SETPATHINFO
      r150: Make 3.x pass the Samba 4.x RAW-SEARCH tests - except for the
      r225: Patch from Pat.Hayward at propero.net to make the session_users list dynamic.
      r227: Patch from James Peach <jpeach at sgi.com> to search RIX ABI paths for libiconv.
      r247: Fixup a couple of debug messages.
      r460: Fix for broken driver upload/delete path processing.
      r473: Fix for Microsoft hotfix MS04-011 password change breakage.
      r475: Don't add ss padding length to the sent length as this is compared
      r478: Added Volkers fix to be able to force DOS errors when needed.
      r480: Added Andrew Bartletts pwinfo-parse-error.patch.
      r481: Fix up assert caught by check_path_syntax.
      r483: Fix typo of appending '\\' instead of '/' now we're using
      r523: Fix from kawasa_r at itg.hitachi.co.jp to initialise blob structs.
      r525: More memory leak fixes from kawasa_r at itg.hitachi.co.jp in error code
      r527: More memory leak fixes in error paths from kawasa_r at itg.hitachi.co.jp.
      r533: More memory leak fixes from kawasa_r at itg.hitachi.co.jp. I need to
      r535: Another memleak fix from kawasa_r at itg.hitachi.co.jp
      r538: Mem leak fix from kawasa_r at itg.hitachi.co.jp
      r539: Mem leak fixes from kawasa_r at itg.hitachi.co.jp
      r562: Memory leak fix in error code path from kawasa_r at itg.hitachi.co.jp.
      r565: Uninitialized data fixes from kawasa_r at itg.hitachi.co.jp.
      r570: Remove lots of globals to handle case issues - move them
      r640: Make cifsvfs symlinks work with paths within and external to the
      r645: Patch from kawasa_r at itg.hitachi.co.jp to correctly enable core dumps.
      r651: Patch from kawasa_r at itg.hitachi.co.jp to connect to winbind
      r653: Ok, so tridge convinced me. Allow full UNIX path symlinks
      r656: Make widelinks use realpath(). Tidy up cases where we need to become a service.
      r658: Oops - make smbclient work again with widelinks = no :-).
      r698: Now wb pipe is non-blocking remember to read in non-blocking mode...
      r706: Fix erroneous commit... I've not finished testing the
      r710: Fix smbclient symlink command when widelinks = no.
      r716: Fix for bugid #1345 (Macromedia Homesite cannot connect anymore after upgrade to 3.0.4).
      r742: Volker discovered that we can truncate a locked file. Well I never ! :-).
      r762: Fix for #1319 when security > share.
      r764: More memleak fixes in error code path from kawasa_r at itg.hitachi.co.jp.
      r779: Fix specific case of open that doesn't cause oplock break, or share mode check.
      r786: Memory leak fixes in (mostly) error code paths from
      r788: Inspired by patch from "Jianliang Lu" <j.lu at tiesse.com>. Correct
      r801: Fix from "Jianliang Lu" <j.lu at tiesse.com> to return correct group
      r805: Fix to stop smbd hanging on missing group member from "Jianliang Lu" <j.lu at tiesse.com>.
      r810: Fix from "Jerome Borsboom" <j.borsboom at erasmusmc.nl> to ensure error status
      r910: Fix for bug #1385 found by Jason Mader <jason at ncac.gwu.edu>.
      r911: Patch from "Jerome Borsboom" <j.borsboom at erasmusmc.nl>, don't
      r914: Fix from "Jerome Borsboom" <j.borsboom at erasmusmc.nl> to ensure
      r916: Memory leak fix from kawasa_r at itg.hitachi.co.jp.
      r928: Ensure we're calling send_mailslot() with a UNIX charset
      r931: Ensure we push 16 bytes (including null termination)
      r933: When using widelinks = no, use realpath to canonicalize the
      r945: "Correct" (as in, more correct) way to handle stat opens. Doesn't regress
      r957: Fixup moribund unix extensions mknod code path. Don't add in
      r971: Auto remove store dos attributes if underlying filesystem
      r974: Fix open code to pass more torture tests. We now pass the Samba4
      r984: Ensure memmove & memcpy aren't called with len == 0.
      r996: Fix error in change to queuing code (dlink).
      r998: Arrrgggh. Do it right this time :-(.
      r1085: Now it's had some proper user testing, merge in the deferred open fix. I'm
      r1089: Removed spurious oplock message in deferred open processing.
      r1093: Ensure we clear any cached errors on a deferred open call so
      r1097: Fix errno being incorrectly set. Noticed by Richard.
      r1115: Fix for #1427. Catch bad path errors at the right point. Ensure all
      r1117: Doh ! Remember to turn off signing when sending a "break to level II" oplock
      r1154: Change default setting for case sensitivity to "auto". If set to auto
      r1156: Ensure new remote arch of CIFSFS is seen.
      r1171: Patch from "Lu, Jianliang" <Jianliang.Lu at getronics.com> to
      r1179: Start of system keytab merge. Config tests.
      r1180: New file - basis of new system keytab code.
      r1182: Partial re-write of keytab code to clean up, remove memory leaks etc. Work in progress !
      r1183: Updates to the code cleanup so I don't lose my changes...
      r1184: Keep latest changes... not compilable yet.
      r1192: Fixed all memleaks/error code return path leaks I can find. Not sure if compiles yet,
      r1193: Ensure we check for and use krb5_free_unparsed_name().
      r1194: Definition of krb5_free_unparsed_name() if we do't have it.
      r1195: Ensure libsmb/clikrb5.c compiles.
      r1214: Now compiles. Changed krb5_kt_free_entry to krb5_free_keytab_entry_contents
      r1215: Intermediate checkin of the new keytab code. I need to make sure I
      r1221: Added the last of the system keytab patch from "Dan Perry" <dperry at pppl.gov>,
      r1222: Valgrind memory leak fixes. Still tracking down a strange one...
      r1223: Fix valgrind error with realm manipulation.... Damn macros :-(.
      r1224: Fix longstanding memleak bug with logfile name being set before lp_load()
      r1236: Heimdal fixes from Guenther Deschner <gd at sernet.de>, more to come before
      r1240: Ensure we don't shadow Heimdal globals.
      r1241: Fix incorrect type in printer publishing (struct uuid, not UUID_FLAT).
      r1243: Fix so this compiles with Heimdal (in Heimdal krb5_kt_cursor is a struct not a pointer).
      r1244: More Heimdal compile fixes.
      r1245: I think the parameter for "password" and "data" was reversed.
      r1247: Final fix to make this compile on Heimdal.
      r1248: Fix from Nick Wellnhofer <wellnhofer at aevum.de> to prevent
      r1255: Ensure we check attributes correctly on rename request. Gets us further with
      r1257: Ensure we deferr a sharing violation on rename correctly.
      r1259: Ensure we pass Samba4 RAW-RENAME test.
      r1260: Added new parameter in the protocol section. "defer sharing violations",
      r1263: Make "defer sharing violations" a global parameter.
      r1290: Ensure we remove DNS and DNSFAIL records immediately on timeout.
      r1299: Don't "break" - "continue" ! Otherwise we only expire the first name !
      r1301: Fix bogus error message when using "mangling method = hash" rather
      r1304: Turns out non-io opens that cause oplock breaks are a *different* set
      r1311: Turn on sendfile for non-oplocked files. tridge proved
      r1317: Patch from Joe Meadows "Joe Meadows" <jameadows at webopolis.com> to
      r1325: Always use GetTimeOfDay() (wrapper). Ensure ldap replication
      r1326: Modification to get_dc_list to check negative cache. From "Joe Meadows" <jameadows at webopolis.com>.
      r1373: Fix from Guenther Deschner <gd at sernet.de> to ensure last error return is not invalid.
      r1378: Better debugging so I don't get confused what principal we mean.
      r1386: We can't use sendfile for Win9x. It causes oplock failures (who knew....).
      r1388: Adding password history code for ldap backend, based on a patch from
      r1390: Improve description of attribute.
      r1392: Added password history code to tdbsam backend. Not yet tested (ie. may
      r1394: Const fix.
      r1412: Fix password history list in tdbsam. Fix some memory leaks. Add
      r1414: Memory leak fixes found by valgrind whilst checking the password history code.
      r1415: One more memory leak, found by valgrind..
      r1425: Fix memleak in interactive mode. Reformat..
      r1472: Make mknod work again for the CIFS client. Still needs some
      r1501: One more check for option != 0.
      r1504: Remove insane use of "user password" on the COMMAND LINE !
      r1506: Fix inspired by patches from Michael Collin Nielsen <michael at hum.aau.dk> - ensure
      r1537: Fix to stop printing accounts from resetting the bas password
      r1539: If a account was locked out by an admin (and has a bad password count of zero)
      r1553: Good patch from Guenther Deschner <gd at sernet.de> to display share ACL
      r1608: Fix from Nick THOMPSON <nickthompson at agere.com> to protect smbd
      r1610: Patch from Richard Renard <rrenard at idealx.com>. Ensure we
      r1613: Patch from Tom Shaw <tomisfaraway at gmail.com> to use
      r1661: Changed the password history format so that each history entry
      r1665: Patch from James Peach @ SGI to stop using sendfile if it isn't
      r1681: Ensure we return the same ACL revision on the wire that W2K3 does.
      r1684: Patch for bug #1578 based on fix from Alexander E. Patrakov,
      r1733: Fix hashed password history for LDAP backends.
      r1778: Fix based on code from Richard Renard <rrenard at idealx.com> to
      r1780: Remove the UTC comment as it isn't.
      r1809: Patch from Richard Renard <rrenard at idealx.com> to store
      r1810: Patch from Richard Renard <rrenard at idealx.com> to store
      r1812: Fix from Richard Renard <rrenard at idealx.com> to be able to reset
      r1841: Fix for #1606, can't launch dos exe's.
      r1866: Fix for bug #1602 reported by <m.proehl at science-computing.de>.
      r1869: Rename "fallback_XXXX" mapping to "algorithmic_XXX" as
      r1871: Patch from Luke Howard <lukeh at PADL.COM> to correctly use
      r1936: Fix bug noticed by Steve - ensure extended security bit is on only
      r1939: Ensure with my new change we set extended security in flags2 in
      r1968: Remove spurious "A" spotted by Jason Mader <jason at ncac.gwu.edu>.
      r1974: Just use a simple linked list for this.
      r1976: Simplify, use standard dlist interface.
      r1978: Roll it back until I do it right.... :-).
      r1980: Re-apply (remember to remove entry from list on delete this time :-).
      r2026: Simplify statcache to use an in-memory tdb. Modify tdb to use
      r2027: Fix for but #1657, used initialized variable, from
      r2032: If you're selecting a hash algorithm for tdb, you need to do it at open time,
      r2076: Removed old dir caching code - not being used now we have the
      r2082: lp_path should be lp_pathname.
      r2083: Fix memleak on return code path.
      r2111: Fix memleak with valid names.
      r2112: Simplify the mangle hash code to use an in-memory tdb.
      r2114: Shameless theft of iconv commit from Samba4 to keep the two libs more in sync :-).
      r2116: Ensure statcache has large enough tdb memory hash size (1031).
      r2150: Fix parsing of names ending in dot and a few other error returns
      r2152: Fix for bug #1674, move the symlinks checks into reduce_name().
      r2155: Reformat, plus steal from Samba4 :-).
      r2175: Fix for #1546 from fumiya at samba.gr.jp. Preserve errno in MB strupper_m/strlower_m.
      r2194: Here is the efforts of much pain reproducing W2K3 pathname
      r2196: This error code change is incorrect. Still working on it...
      r2213: Optimisation. Passes masktest against W2K3.
      r2215: I think I'm really close now. The key is to count the number of
      r2219: Remember to count bad_components only on pathname boundaries.
      r2224: Make nmbd more robust against bad netbios packets.
      r2265: Volkers change to HEAD looks very good. Commit message
      r2312: Fix for bugid #1667, smbpasswd file could be left locked on
      r2317: Fixup error messages and reformat.
      r2355: Now we've shipped 3.0.7, add in the DOS fix.
      r2361: Fix the appalling toktocliplist() fn. Bug found by Luis Benvenutto.
      r2363: Fix to make find_workgroup use the same truncation as
      r2369: Fix from Richard Renard <rrenard at idealx.com> to fix usermgr and trust relationships.
      r2371: Fix for talking to OS/2 clients (max_mux ignored) by Guenter Kukkukk <guenter.kukkukk at kukkukk.com>.
      r2373: Fix typo.
      r2374: Fix from Vince Brimhall vbrimhall at novell.com for
      r2392: Steal the nicer error message from Samba4 :-).
      r2395: Patch from "Stefan (metze) Metzmacher" <metze at samba.org> to fix
      r2396: Fix bug found by Cornelio Bondad Jr <Corny.Bondad at hp.com>.
      r2413: Arggg. Stupid, stupid, stupid me ! I added a paranoia test
      r2451: Fix from Henrik Nordstrom <hno at squid-cache.org> to allow
      r2479: Stop attribute "modifyTimestamp" from being deleted.
      r2481: Patch from Igor Belyi <sambauser at katehok.ac93.org>. Ensure pdb
      r2482: Fix from Arthur van Dongen <avdongen at xs4all.nl> to fix acces -> access typos.
      r2528: Ensure MIN is defined as a macro so it's not undefined in the .so.
      r2540: Fix it the way Henrik Nordstrom (the patch author) wants :-).
      r2548: Fix for bug reported by Edward Spragins <spragins at gmail.com> - don't try to
      r2575: Return correct error codes on old SEARCH call (from Samba4 torture tester).
      r2578: Pick up optimisation from Samba4 - thanks tridge !
      r2605: Fix stupid typo in back-port of Samba4 fix.
      r2610: Even if we only use the fast-path (ascii only) then
      r2637: Fix the roundup problem (returning 1mb roundup) for non-Windows
      r2651: Added 'stat' command to smbclient to exercise the UNIX_FILE_BASIC
      r2665: Ensure the UNIX info level returned enough data.
      r2700: Fix bug where we could incorrectly set sparse attribute. Don't use
      r2703: Fix typo noticed by Igor Belyi <sambauser at katehok.ac93.org>
      r2708: Don't look for bzero, we don't use it.
      r2978: Fix #1926 typo in debug. Found by Bill McGonigle <bill+samba at bfccomputing.com>.
      r2979: Fix incorrect locks/unlocks in tdb_lockkeys()/tdb_unlockkeys().
      r2999: Remove lockedkeys code. Not used.
      r3002: Fix for bug #1886 - prevent delete on close being set
      r3050: Steal from Samba4 :-). Make us pass most of the new lock tests (except for
      r3072: Fix for bug #1947 - incorrect use of getpwnam() etc. interface.
      r3117: Fix from Tom Lackemann <cessnatomny at yahoo.com> for bug #1954.
      r3120: Fix bug #1955 reported by Love <lha at stacken.kth.se>. Inconsistent error return.
      r3121: Bug #1956. Ensure errno is saved and restored consistently on a normal_close.
      r3138: Fix from Sorin Manolache <sorinm at gmail.com> for memory leak.
      r3225: Fix correct use of resume name. Cope with the resume
      r3273: Ensure we're consistent in the use of strchr_m for '@'.
      r3275: Fix from Michael Sweet <mike at easysw.com> for bug #1892.
      r3294: Fix for SMB signing with 56-bit DES session keys. From Nalin Dahyabhai <nalin at redhat.com>.
      r3296: Fix to ensure entries are stored in correct order. Bug #1498. Patch from
      r3342: More MIT/Heimdal fixes to allow an enctype to be explicitly set in a krb5_creds
      r3345: More MIT/Heimdal tests for comparing enctypes now.
      r3377: Merge in first part of modified patch from Nalin Dahyabhai <nalin at redhat.com>
      r3379: More merging of kerberos keytab and salting fixes from Nalin Dahyabhai <nalin at redhat.com>
      r3381: More merging of the #1717 patch. Fixup some erroneous assumptions about
      r3451: Finish off kerberos salting patch. Needs testing !
      r3492: Fixes from testing kerberos salted principal fix.
      r3502: Tidy up debugging in kerberos_keytab code.
      r3535: Tidy up error reporting. Memory leak with MIT krb5 1.3.5 turns
      r3538: Fix the build with the latest Heimdal code.
      r3569: Fix for bug #1651, added extra servicePrincipalNames for kerberos interop.
      r3642: Extend vfs to add seekdir/telldir/rewinddir. Yes I know I have to
      r3644: Fixup examples VFS compile.
      r3662: Fix dirent return.
      r3663: Fix too tight checking of incoming secondary trans2 requests.
      r3666: Generalise fix for trans and nttrans multi-fragment requests.
      r3670: Warning fixes from Rob Foehl <rwf at loonybin.net>.
      r3671: More warning fixes from Rob Foehl <rwf at loonybin.net>.
      r3674: Stefan Esser <s.esser at e-matters.de> pointed out that the max data
      r3693: Correctly detect errno for no acl/ea support.
      r3713: Implementation of get posix acls in UNIX extensions. Passes valgrind.
      r3714: Getfacl now seems to work on files and directories. Next do setfacl
      r3764: Ensure on failure that *res is always NULL.
      r3776: Fix for bug #2038 from Johann Hanne <jhml at gmx.net>. Don't check
      r3794: Added set posix acl functionality into the UNIX extensions code.
      r3796: Patch from Jay Fenlason <fenlason at redhat.com>. Don't free static buffers.
      r3814: At least use a proper constant name (aRONLY :-) not a number.
      r3816: Added fn to remove an ACL from a file. Now need client code to test this.
      r3817: Fix from Lars Müller <lmuelle at suse.de> for bug #2050, calculate
      r3819: Updated config.guess/config.sub from
      r3823: Fix bug reported by Tom Dickson <tdickson at inostor.com> with
      r3855: Sync up with the one in the main source dir (yes, this should probably
      r3857: Shut up gcc about erroneous "used uninitialised" warning.
      r3859: Ensure if num_acls is set to 0xFFFF this field is ignored.
      r3862: Fix from Lars Müller <lmuelle at suse.de>, check for HAVE_WRFILE_KEYTAB
      r3864: Fix from Lars Müller <lmuelle at suse.de> for bug #2050.
      r3867: Fix from david.hu at hp.com - make a copy of an incoming message
      r3877: Final (I hope :-) fix for #2050 from Lars Müller for select maxfd's.
      r3880: Tidy up some unused/shadowed variable usage.
      r3889: Only set mtime from pending_modtime if it's not already zero...
      r3892: Fix "might be used uninitialized" error.
      r3895: Fix for bug #2045. May also fix other timestamp bugs with Excel
      r3929: Dead code elimination fix for bug #2075 from jason at ncac.gwu.edu.
      r3931: Fix all "may be used uninitialized" and "shadow" warnings.
      r3934: Correctly check for the top length bit in LARGE_READX.
      r3936: Ensure LARGE_READX response must fit within reply buffer.
      r3944: Fix the problem we get on Linux where sendfile fails, but we've already sent the
      r3946: Fix for bugid #2085 reported by Jason Mader <jason at ncac.gwu.edu>. Use consistent
      r3948: Fix incorrect declaration. Bug #2083.
      r3951: Fix for bugid #2081 reported by John Janosik <jpjanosi at us.ibm.com> - ensure
      r4005: Fix for bug #2071 reported by Jason Mader <jason at ncac.gwu.edu>.
      r4007: Fix bug #2088 - ensure inherit permissions is only applied on a new file,
      r4009: Fix from Timur Bakeyev <timur at com.bat.ru> for bugid #2100,
      r4016: Fix for bug found by Steve French client code (cifsfs) on
      r4020: Fix for crash reported by Bård Kalbakk <baard at inett.biz>.
      r4023: Code tidyup to fix bug #2098.
      r4032: Fix bug #2110 - ensure we convert to ucs2 correctly.
      r4088: Get medieval on our ass about malloc.... :-). Take control of all our allocation
      r4092: Bring into line with new *alloc rules.
      r4108: As check_self is *always* False in every invokation, remove the
      r4120: Never, ever, doubt valgrind :-). Fix order of evaluation bug that's been in the
      r4121: Optimisation from Nadav Danieli <nadavd at exanet.com>. If we're oplocked,
      r4126: Fix from Björn Jacke <bjoern at j3e.de> for bugid #2040 - ensure the locale
      r4143: Make strict locking an enum. Auto means use oplock optimization.
      r4184: Removed unused extern.
      r4186: Fix client  & server to allow 127k READX calls.
      r4188: Ensure we add in the upper length in the right place !
      r4190: When changing length calculations, get them right......
      r4212: Ensure we only look at the bottom bit of large_readx.
      r4234: More malloc fixes to use the macros.
      r4236: More *alloc fixes.
      r4238: More *alloc fixes.
      r4241: More *alloc fixes.
      r4291: More *alloc fixes inspired by Albert Chin (china at thewrittenword.com).
      r4293: Fix inspired by debug trace from Rob Foehl <rwf at loonybin.net> - catch sendfile
      r4295: Don't include header len in data write debug.
      r4296: Patch from William Jojo <jojowil at hvcc.edu> to fix HPUX sendfile and add
      r4301: One more *alloc -> SMB_MALLOC (not compiled by default).
      r4305: Fix from Albert Chin (china at thewrittenword.com) to fix the
      r4306: Couple more MALLOC fixes from albert chin (china at thewrittenword.com).
      r4330: Fix for bug found by Rob Foehl <rwf at loonybin.net>. Remember to
      r4334: Fix for bugid #2186 - from Buck Huppmann <buckh at pobox.com>
      r4346: Fix cut-and-paste error - bugid #2189. Fixed by Buck Huppmann <buckh at pobox.com>
      r4369: Patch for bug #2190 (SWAT displaying parameters in UNIX charset)
      r4545: Fix based on work by Derrell.Lipman at UnwiredUniverse.com :
      r4577: Fix from William Jojo <jojowil at hvcc.edu> for AIX 5.3 compile.
      r4581: From Derrell.Lipman at UnwiredUniverse.com. Use nanosleep instead of select
      r4601: Removed any use of the MAX_XXX_STR style definitions. A little larger
      r4656: Convert the winreg pipe to use WERROR returns (as it should).
      r4662: Fix from "Jerome Borsboom" <j.borsboom at erasmusmc.nl> to fix
      r4665: Fix inspired by posting from Joe Meadows <jameadows at webopolis.com>.
      r4697: Fix for bug #2231 inspired by brad.ellis at its.monash.edu.au.
      r4738: Fix for bug #2238 - memory leak in shadow copy vfs.
      r4830: Fix for problem noticed by Guy Harris <gharris at apple.com>, return
      r4864: Remove unused var.
      r4875: Fix for bugid #221, inspired by Mrinal Kalakrishnan <mail at mrinal.net>.
      r4879: Fix rewinddir -> rewind_dir. Noticed by James Peach.
      r4881: Varient of Lar's patch for #2270. Jerry promises to test :-).
      r4882: Fix for #2255. Debug should have been 10 not 0.
      r4917: Merge some of Derrell.Lipman at UnwiredUniverse.com obvious fixes.
      r4921: Typo.
      r4970: Fix for bug 2092, allowing fallback after kerberos and allow
      r5002: Ensure we can't remove a level II oplock without having the
      r5014: Split out the request to send an async level II oplock break into a
      r5063: Shamelessly steal the Samba4 logic (and some code :-) for directory
      r5066: A couple of small fixes from James Peach @ SGI.
      r5069: Ensure we return the correct errors for old-style search requests.
      r5076: Ensure that WINS negative name query responses and WACK packets
      r5077: Use correct type for rr record on negative name query reply.
      r5082: Don't blindly copy question rr_type and class, set correctly as required
      r5100: We should only care about case-sensitivity when *reading* an incoming
      r5152: Restructure the directory handling code, stop using void * pointers
      r5154: Tidy up interface a little.
      r5160: First cut at refactoring of directory code to handle non-wildcard
      r5166: From James Peach - remove minor C99-isms.
      r5183: Ensure we correctly set the per-connection "case_sensitive" setting.
      r5268: Fix bug #2310, only do 16-bit normalization on small dfree
      r5290: Fix for bug #2323 - plaintext problem with WinXP.
      r5324: In order to process DELETE_ACCESS correctly and return access denied
      r5342: Reformat some very old code.
      r5343: Fix for bug#1525. Timestamps interpreted incorrectly on 64-bit time_t values.
      r5355: Fill in the access check code for POSIX ACLs to *really* fix bug #2227.
      r5497: Fix for DIR1 failures in build farm. It struck me that we
      r5508: Typo - ZERO_STRUCT -> ZERO_STRUCTP.
      r5510: Optimisation to only do can_delete check if client asks for FILE_SHARE_DELETE.
      r5513: Fix for bug #2201 - use same logic with "delete readonly"
      r5524: Don't do share mode checks on can_delete if open, the rest of the open
      r5525: Add extra case to torture to test this (we currently fail with the wrong
      r5530: Keep the TRANS call up to date with the NTCreateX call.
      r5532: Patch to detect infinite loops when traversing a tdb from "Shlomi Yaakobovich" <Shlomi at exanet.com>
      r5535: Reformat so I can actually maintain this code and eventually convert to MB safe.
      r5543: Fix for bug #962 - using MB sharenames containing a ']' character.
      r5548: Stop lying about allocation sizes to Windows clients. It was a nice
      r5589: Ensure the torture code that uses cli_list and cli_list_old
      r5607: Fix for bug #2399 - ensure we use SMB_VFS_STAT instead of stat
      r5616: Forgot about the sticky bit on directories (commonly set on /tmp). If this is set
      r5623: Horrible band-aid patch to fix Blue-Arc torture tester.
      r5625: Reformat (tidy).
      r5628: Deprecate the write cache parameter - this code will go away soon.
      r5630: This may be a mistake ... needs more cthon investigation.
      r5632: Fix infinite looping bug found by nasty BlueArc test :-).
      r5634: Fix 64-bit overflow problems found by BlueArc torture tester.
      r5636: Re-add the allocation size - parameterized by share as
      r5637: Actually test and fix the crash bugs (sorry:-).
      r5641: Fix from James Peach @ SGI for oplock2 test.
      r5655: Added support for Novell NDS universal password. Code donated by
      r5687: Fix for bug #2398 from Kevin Dalley <kevin at kelphead.org>.
      r5700: Fix problems where we're not pointing to the start of entry for a
      r5702: Fix bug #2271. Correctly pull out and use resume names in a
      r5720: Attempt to fix bug #2382 (Excel shared workbook stops working). Also
      r5723: Add missing part of fix for #2271. After analysing the actions of a XP
      r5731: Get delayed write semantics closer to W2K3. We need to store 2 times.
      r5757: Fix erroneous debug message - noticed by William Jojo <jojowil at hvcc.edu>.
      r5759: Patch from Doug VanLeuven <roamdad at sonic.net> to add more case/realm/name
      r5762: Modified version of patch from Michael Brown <mbrown at fensystems.co.uk> to case
      r5789: Patch from William Jojo <jojowil at hvcc.edu> - AIX has no default ACLs.
      r5792: Added new parameter "inherit owner". If set on a share, the created file/directory
      r5804: Revert the signing change by Nalin Dahyabhai <nalin at redhat.com>.
      r5812: We missed some RESOLVE_DFSPATH calls on pathnames for older calls.
      r5813: Fix bug found by Jim McDonough <jmcd at us.ibm.com>
      r5816: Catch the "." resume name case also.
      r5817: Patch from Vince Brimhall <vbrimhall at novell.com> to change the way pdb_nds
      r5820: Fix bug #2451 - missing functions in full audit vfs module.
      r5822: Actually return an error message if disk_free fails ! Pointed out by Ying Li <ying.li2 at hp.com>.
      r5825: Fix one more DISK_FREE call - spotted by Ying Li <ying.li2 at hp.com>.
      r5833: Revert change for bug #2335. Tested with a Win9x client and the original
      r5835: Make smbclient obey the max protocol argument again.
      r5836: Correct fix for OS/2 bug #2335. The error return code in this case is protocol
      r5840: Fix findfirst/findnext with protocol level < NT1.
      r5843: Removed unused variable - pointed out by jason at ncac.gwu.edu in bugid #2460.
      r5844: Fix typo. Add cast for bug #2464 reported by jason at ncac.gwu.edu.
      r5847: Fixes from Lars Müller and Vince Brimhall @Novell for NDS
      r5848: Fix inherit owner to chown directories in a porable and secure way (from
      r5864: Stop using 'INFO' names on find calls. Getting ready to fixup OS/2 EA
      r5872: Restructure ea list code to start to fix the EA_LIST calls. This does not
      r5874: Work in progress. EA list infolevel.
      r5893: Get us to pass some of the Samba4 EA tests. EA_LIST seems to be
      r5907: Fix compile warning noticed by Jason Mader <jason at ncac.gwu.edu>.
      r5922: Fix for NASTY NASTY bug #2501. All my fault :-(. Brown paper bag time.
      r5933: We were handling setting of EA's incorrectly - we should be able to set
      r5936: Fix bugs in earlier work in progress commit. Closer to properly supporting EA's now.
      r5960: Integer wrap paranoia when reading EA buffers.
      r5967: Fix typo bug where flags overwrote info level.
      r5970: Fix old bug where ff_searchcount was being compared -1 ! This caused a
      r5973: Fix up overwrite of last 2 bytes on clilist (could cause coredump).
      r5975: Re-arrange code and comments to make more sense.
      r5979: Don't crash when talking to a Win98 server (bugid #2530 - not a fix
      r5981: Hack to fix DFS code to work with Win98 server. JERRY PLEASE REVIEW THIS !
      r5991: Fixup last entry offset correctly for level 260.
      r6001: Oops. Checing the wrong tagtype - should have been SMB_ACL_GROUP, not SMB_ACL_MASK.
      r6009: Add privillage check for SE_DISK_OP (is this the right privilage?)
      r6020: Never do NT status codes with protocols before NT1 as we don't get client caps.
      r6022: Fix for bug #2533. Incorrect dir listings from OS/2 clients.
      r6044: Ensure the old search calls always ask mask_match to translate
      r6048: Split out the check_path_syntax into a findfirst/next/wildcard version.
      r6049: Ensure "dos filetime" checks file ACLs correctly. May fix Excel "read-only"
      r6053: Fixup dfs path with the new wildcard parser code split out.
      r6055: Fix algorithm. If any of the primary or supplementary group ids match
      r6057: Don't put the assert in the wrong place :-).
      r6060: It's not quite accurate to say not having write access causes a group
      r6063: Fix for bug #2533 - ensure SMBsearch unsets UNICODE flags2 bit as this SMB is
      r6067: Patch from Marcel Müller <mueller at maazl.de> - fix OS/2 EA_FROM_LIST
      r6069: Fix for bug #2541. Ensure we recognise LANMAN2.1 as OS/2 and select LANMAN2
      r6082: Fix for bugid #2541. Fixes from Guenter Kukkukk <guenter.kukkukk at kukkukk.com>
      r6090: Patch to fix sys_select so it can't drop signals if another fd
      r6092: This much const causes the compiler on Fedora Core 2
      r6104: Update dos filetimes to default yes for Office 2000.
      r6106: Fix bug #2551. It turns out that the incoming flags2 flag FLAGS2_LONG_PATH_COMPONENTS
      r6120: Added "volume" command to smbclient that prints out the volume name and
      r6122: Added "hack" fix for broken SMB_INFO_VOLUME level - used by OS/2
      r6124: Fix for bug #2242 from Tom Lackemann <cessnatomny at yahoo.com> - don't
      r6138: Refactor length reading out of EA code so we can read length
      r6141: Fix OS/2 EA's for NTcreate. OpenX and mkdir to follow.
      r6146: Added OS/2 EA support in trans2_open and trans2_mkdir. Fixed in nttrans_create.
      r6152: Correctly check OpenX open modes.
      r6160: Ensure allocation size is correctly returned for OpenX. Only set allocation
      r6163: Well I never, all this time the t2open code was incorrectly decting
      r6169: Fix bug #2563. Infinite loop on non-existant file with findnext.
      r6172: Tidy up error processing significantly. Remove unix_ERR_XXX global nastyness.
      r6174: Fixup T2 open call - we were returning 2 bytes short.
      r6199: Only do the strange DOS error for openX, not trans2open.
      r6200: Returned access should contain share mode as well as open mode.
      r6203: Fix attribute return on creating a directory with nttrans_create.
      r6204: Fix double-free of talloc context.
      r6234: Fix for possible root squash nfs bugs from psz at maths.usyd.edu.au
      r6235: Partial fix for bugid #2581. Ensure if realloc fails on an internal
      r6240: Fix for bug #2581. Add size limit (in kb) to stat cache.
      r6249: Get the comparison the right way around...
      r6252: Re-order position of become_root() to allow directory to be
      r6253: Add FreeBSD EA API support. Bug #2576 - patch donated by Timur Bakeyev <timur at com.bat.ru>
      r6256: Fix fprintf errors in smbpasswd. Fix for bug #2585 Ulf Härnhammar <metaur at telia.com>
      r6258: Fix found by OS/2 set_ea call. When setting specific info remember to terminate
      r6261: Tidyup message str printf. Ensure tvs struct is zeroed.
      r6266: Add includes for sys/extattr.h and sys/uio.h for FreeBSD xattr code.
      r6269: With help from Marcel Müller <mueller at maazl.de> in tracking down the bug,
      r6297: Fix bug in our trans2 secondary processing. We need to pass in the
      r6302: OS/2 fix from Marcel Müller <mueller at maazl.de>. Don't check for mangled names
      r6307: Ensure info requested bitmask is printed in log when querying security descriptors.
      r6316: Remove over-cautious asserts. Damn wish I'd made the release
      r6344: Fix bug #2601 - it seems that DOS_OPEN_EXEC does mean readonly. Needed
      r6346: Add a counter for the number of SMB operations per connection/file.
      r6348: Fix for bug #2605 reported by Daniel Patterson <Daniel_Patterson at national.com.au>.
      r6365: Wow, how much worse does this get. From info provided by
      r6378: Other systems may not return 1 for checking WRITE permission.
      r6385: Convert checking of egid and secondary egid list into
      r6417: Strange old IRIX systems return -1 for telldir() when
      r6473: Fix for bug #2644 - test for special files to be ignored was reversed.
      r6495: Bugfix for #2596 by James Peach @ SGI. Fix become_root link issues and one IRIX
      r6497: Ensure yield_connection() is called on all appropriate error conditions.
      r6533: Fix for bad comment from Andreas Gruenbacher <agruen at suse.de>.
      r6543: Fix EDEADLCK problem with deferred open calls. Problem found by
      r6548: Fix bug #2622 - remove DPTR_MASK as it makes no sense.
      r6550: Move function make_dir_struct from util to dir.c
      r6553: Added Linux per-socket TCP settings patch from "Ed Boraas" <ed.boraas at concordia.ab.ca>.
      r6594: Fix silly typo causing tdb to be freed twice.
      r6595: This is Volkers new-talloc patch. Just got the go-ahead from
      r6613: Merge back fix for PARANOID_MALLOC checker.
      r6625: Remove another global variable left over from a long time ago (magic char).
      r6629: Fix stupid typo. Thanks Gunther.
      r6631: More typo's. Sorry.
      r6633: Added "check_path_syntax_posix()" in preparation for handling
      r6673: Fix the write cache based on some VERY good detective work
      r6696: Another attempt to fix the (unreproducible for me) bug #2346 (read-only
      r6715: We don't need to wrap the setfsinfo call in HAVE_QUOTA
      r6822: Use chsize if we don't have ftruncate. From Steven Edwards <steven_ed4153 at yahoo.com>.
      r6834: Fix bug #2703, found by John Antonishek <ant at nist.gov>. Add NULL
      r6841: Attempt to fix buf #2681. With "strict allocate = yes" we now zero
      r6890: Refactor printing interface to take offset into job. Fixes bug
      r6895: Add "acl check permissions" to turn on/off the new behaviour of
      r6946: Allow mapping of POSIX ACLs to NT perms to differentiate between directories
      r6949: Back-port Volker's cache fix, plus my change.
      r6965: Remove some dead code from util_unistr.c.
      r6977: Fix bug #2735 (not mangling control characters) plus
      r6979: Tidyups.
      r6994: Fix for bugid #2729 - it turns out resume keys are *mandatory* for
      r7031: Added encrypt/decrypt function for LSA secrets and trusted
      r7033: Call a spade a spade :-).
      r7034: Revert change in util_sock.c from derrell until this is
      r7039: Ensure we always call read_socket_with_timeout() when
      r7151: Fix for bug #2698. If a unicode to unix charset conversion fails (due to buggy iconv?) we can
      r7157: Ensure we abort a directory listing if we see the same
      r7190: I *love* valgrind/cachegrind.....
      r7191: Squeezing out more unnecessary memset's gets us up 20% over older code :-).
      r7200: Don't use memset, use SET_STAT_INVALID (has the same effect).
      r7210: Fix my own mistakes up, sorry.
      r7318: Unify HEAD and 3.0 socket functions. Add HEAD functions here #ifdef'ed out.
      r7385: Rewrite the RPC bind parsing functions to follow the spec. I haven't yet
      r7412: Now we're not memset'ing ensure we're valgrind clean.
      r7447: Sync up a little between HEAD and 3.0 in preparation for moving
      r7452: Set sparse flag if needed. Based on code from jpeach at sgi.com.
      r7474: A *foul* and *disgusting* hack to ensure that, at the very lowest
      r7541: Patch from core at road-star.jp for bug #2792. Ensure the shadow copy
      r7542: Patch from Renaud Duhaut <rd at duhaut.com> for a parameter
      r7544: Fix for bug #2196 from Denis Sbragion <d.sbragion at infotecna.it>.
      r7550: Steal the correct error return for invalid TID on NTcreateX from Samba4
      r7554: Refactor very messy code in util_sock.c Remove write_socket_data/read_socket_data
      r7591: Don't call getpeeraddr on a disconnected socket.
      r7617: Fix for bug #2801 - delete veto files was broken with the new
      r7618: Typo...
      r7640: Fix based on work from  "Shlomi Yaakobovich" <Shlomi at exanet.com> to catch
      r7662: Allow someone with SeTakeOwnershipPrivilege to chown the user
      r7693: Fix from James Peach @ SGI for null pointer ACL free.
      r7696: Don't try and be clever and read an 8 byte int and 3 pad bytes
      r7701: Patch from James Peach | jpeach at sgi.com to make wrepld use new
      r7708: Hint from Luke Howard (thanks Luke). Ensure the schannel authenticator is 8
      r7787: Fix from Fernando Schapachnik <fernando at mecon.gov.ar> to add logon hours
      r7796: Prepare for client setting capabilities to select posix pathnames on
      r7798: CIFSFS client assumes wcnt == 10 for successful trans2 reply.
      r7821: Don't check permissions for setting POSIX pathname request.
      r7842: With the patch I sent Steve yesterday this gives us complete POSIX pathnames.
      r7846: Fix from bugzilla at kevinjamieson.com Kevin Jamieson - typo
      r7849: Dodgy fix - we shouldn't be assuming argc++ points to a valid argv.
      r7852: Correct fix from Lars for the argv issue.
      r7882: Looks like a large patch - but what it actually does is make Samba
      r7886: Fix building with pam_smbpass.
      r7888: Fix use of "protected".
      r7893: Add in the extra parameters to opendir() to fix the large directory/insane app
      r7946: Minor C++ compatibility fix.
      r7948: Ensure we call the vfs connection hook before doing a vfs stat.
      r7949: Work around for broken Solaris header files.
      r7952: Fix for bug #2826 pointed out by Jiri Klouda <jk at zg.cz>.
      r7954: Fix from tridge from Samba4 (same code exists here) :
      r7956: Spelling mistake.
      r7957: Added aio configure support. Jerry told me to :-).
      r7959: Added aio structure and types.
      r7963: Add aio support to 3.0.
      r7972: Tidy up the posix locking in memory db code whilst I'm waiting for jht
      r7975: One more tidyup to ensure we're using "struct posix_lock".
      r7981: MS-DFS tidyup patches from  James Peach <jpeach at sgi.com>.
      r7985: Add "acl map full control", true by default, to allow people to change
      r8219: Merge the new open code from HEAD to 3.0. Haven't yet run the torture
      r8290: Fix for bug in SMBwriteBraw where we incorrectly
      r8292: Tidy up function comments.
      r8457: Fix from Marcel Müller <mueller at maazl.de> to ensure
      r8545: Fix oplock bug introduced by oplock code "simplification" :-).
      r8547: Code tidyup from Jason Mader <jason at ncac.gwu.edu>. Bugid #2885.
      r8552: Warning fix from jason at ncac.gwu.edu.
      r8553: Another compile warning fix from jason at ncac.gwu.edu.
      r8556: Fix bug #2878 - Norton commander not running on OS/2 client - we were
      r8564: Sometimes we're too dumb to live... Fix samr calls where we were
      r8609: Fix for bugid #2889. I think the problem is that the top 16 bits of the "server state" field must be
      r8610: If I'm going to do a debug level zero, at least make it useful.
      r8615: Added "acl group control". Defaults to off. Docs to follow.
      r8617: Be very explicit if addprinterex is called that the "addprinter command"
      r8655: Still trying to fix #2889. We don't need the DPTR_MASK after
      r8689: Fixes bugid #2889 for sure. Turns out the OS/2 dos box doesn't like two offsets
      r8695: Patch from James Peach for hires timestamps and efficient
      r8704: Patch from Timur Bakeyev <timur at com.bat.ru> to fix typo
      r8757: Add debug messages so we can see what attributes and values are being
      r8762: Attempt to fix the winbindd crashing bug on Solaris (can't remember
      r8782: Fix bug #2918. The problem was using Inbuffer to push a deferred open message onto the queue
      r8805: Merge a duplicate struct. Get ready to support SPNEGO rpc binds.
      r8892: Fix #2942 - missing value in debug ! Doh !
      r8922: AIO configure fixes from William Jojo for IBM AIX aio.
      r8928: Fix mangle method = hash - bugid #2946. Incorrect strcmp_wa and
      r8948: Fix valgrind bad free bug found by Gunther.
      r8950: Fix one more mem leak found by Gunther.
      r8959: Make msdfs code talloc based. Fix leaks.
      r8963: Clean up the horrid "fake conn struct" part of MSDFS.
      r9073: Fixing up please-add-me typos in stupid, over-designed stackable
      r9080: If we don't understand the auth, bind nak not pdu fault.
      r9126: Fix valgrind bug Volker found in interaction with new aio buffer
      r9244: Fix bugs found by Coverity.
      r9246: Patch from Marcel samba.10.maazl at spamgourmet.com for OS/2 trans2 open
      r9252: 2 type fixes from Luke Mewburn <lukem at NetBSD.org>. Bugid #2934.
      r9253: From Samba4 tridge commit - added a new DOS error code (thanks to EMC)
      r9271: Fix problems with german umlauts - strcmp_w was broken (needs to always re-call macro
      r9281: Fixes from Luke Mewburn <lukem at NetBSD.org> for misuses of
      r9282: Whitespace.
      r9286: Fix false positive found by Coverity - wcard must not be null.
      r9288: Whitespace cleanup and memory leak on error path fix found by Coverity.
      r9290: Some error path cleanups found by Coverity. Whitespace reformatting.
      r9293: Fix error path memory leak bug found by Coverity - also potential NULL
      r9325: Remember to ignore FILE_SHARE_DELETE when mapping to old share
      r9350: Fix direct malloc calls made by smbwrapper.
      r9457: Attempt to fix bug #3010 by handling END_OF_DIRECTORY_OFFSET
      r9480: Added opendir64 and friends. Found by William Jojo <jojowil at hvcc.edu>
      r9483: Changed DIR to SMB_STRUCT_DIR because of the amazing stupidity of a UNIX vendor
      r9532: Fix for bug #2152, championed by Neil Hoggarth <neil.hoggarth at physiol.ox.ac.uk>.
      r9534: Fix typo spotted by William Jojo <jojowil at hvcc.edu> - define
      r9536: Fix one more DIR -> SMB_STRUCT_DIR typo.
      r9545: (Hopefully the last) fixes for DIR -> SMB_STRUCT_DIR.
      r9852: Add tridge's Samba4 tdb optimisations.
      r9935: Make it easier to find overruns.
      r10042: Add in external LGPL library for accessing the share mode db. Allow
      r10054: Actually use the given db path (:-)
      r10055: Fix typos in smbsharemodes spec.
      r10056: Fix typo stopping .o's being added to shared library.
      r10133: Fix bug #3044. open-exec is read-only.
      r10135: Remove external dependencies for libsmbsharemodes.so
      r10136: Fix for bug #3060 from Leo Weppelman <leo at wau.mis.ah.nl>.
      r10150: Fix from Steve Williams <steve at celineandsteve.com> to make the args
      r10151: Fix includes correctly. Patch from Steve Williams
      r10182: Starting to stamp out warnings on a 64-bit box.
      r10186: More 64-bit warning fixes.
      r10188: 64-bit warning fix.
      r10204: I love valgrind :-). Found stupid missing parantheses :-).
      r10208: Correctly display RDWR only when it *is* RDWR...
      r10215: Fix several memory corruption bugs now we're testing this.
      r10217: Remember to exit correctly when we find a matching entry to change.
      r10234: Add new auth module "auth_script" to allow valid users to
      r10268: Fix for bug #3095 - winbindd checking credentials.
      r10269: Server-side fix for creds change - revert jcmd's change.
      r10276: Fix for bug #3104 from Leo Weppelman <leo at wau.mis.ah.nl>.
      r10285: Doh ! Guenther spotted this stupid cut-n-paste bug...
      r10321: Fix winbindd recursion bug found by Ingo Steuwer <steuwer at univention.de>.
      r10355: Merge back the clear-if-first fix from Samba4. Couldn't wait tridge, sorry :-).
      r10359: Ensure that smb.conf requests for hidden files are honored, even
      r10371: Adding iPrint printing backend written by Joel J. Smith @ Novell.
      r10458: Patches from Jiri Sasek <Jiri.Sasek at Sun.COM> to help
      r10551: We need to check if the source path is a parent directory of the destination
      r10558: Fix bug #3010 yet again. Die monster, die !
      r10600: Fix bug #2769 (mangle filenames ending in a space)
      r10688: Fix from Volker for bugid #3068 - winbindd crash with
      r10693: Fix bug #3129, reported by Adam Porter <sambabugzilla at alphapapa.net>.
      r10722: Remove unused BOOL in struct dcinfo.
      r10724: Got a little ahead of myself...
      r10730: Janitor for tridge on the "fix to talloc_parent() from Michael O'Brien".
      r10744: Fix for the second incarnation of bug #3088, pushed by Alex Masterov
      r10745: Fix artificial 1k restriction.
      r10749: Remove one more Samba4 smbtorture RAW-OPEN difference from W2K3.
      r10750: Ensure we match W2K3 in forcing DOS errors in a couple of cases.
      r10778: Allow schannel setup over NTLMSSP authenticated pipes.
      r10780: Fix typo noticed by Volker.
      r10792: Fix the "schannel not stored across client disconnects" problem.
      r10795: Fix code before decl error.
      r10801: Janitor for tpot - remember to keep 3.0 in sync.
      r10802: Janitor for tpot - remember to keep 3.0 in sync.
      r10885: Fix bug where read-only share files are always seen as
      r10888: We've already checked 'CAN_WRITE' so we don't need to do it again.
      r10930: Fix erroneous debug spotted by Herb.
      r10943: Unused variable. Bug #3160 from jason at ncac.gwu.edu
      r10947: Fix bugs #3133 and #1828 - SPNEGO not working with PocketPC 2003.
      r10970: Fix bug #3166 - null pointer dereference if $HOME not
      r10974: Get closer to trying to fix #1825 (PcoketPC spnego bug). Ensure we
      r10979: After discussions on IRC about profile shares,
      r11075: Still working on bug #1828, PPC hell. The PPC client sends the
      r11079: Narrowing down on the #1828 PPC bug. The PPC client sends an
      r11137: Compile with only 2 warnings (I'm still working on that code) on a gcc4
      r11155: Remove warning in torturous logic.
      r11156: Remove valgrind disabling ifdef that got added by mistake.
      r11159: Added some const to fix warnings.
      r11190: Fix enhancement request #3192.
      r11232: Added ab's POSIX statvfs vfs call. Sorry for the delay ab.
      r11233: Forgot to add the statvfs file. Oops.
      r11237: Fix acl evaluation bug found by Marc Cousin <mcousin at sigma.fr>
      r11256: Remove use of long long and strtoll in libsmbclient (we
      r11269: Ensure the new canonicalize_servicename() is mb safe.
      r11283: Move to using sival_int from sival_ptr. Part of bug #2922.
      r11336: Start to get my control back :-). Volker, I think
      r11338: Move knowledge of \\ needed into rpc_client/cli_netlogon
      r11341: Put directory opens into the share mode db so we
      r11344: I don't think share mode conflicts occur on deleting
      r11346: Fix for bug found by Dina Fine. If in case sensitive mode then
      r11379: Remove external dependencies from sharemodes library.
      r11383: Patch from Alex Masterov <alex at infobit.ru> to fix
      r11389: Attempt to fix bug #3212 - ignore bogus OS/2 EA set values on
      r11420: Fix issue pointed out by Dina Fine <dina at exanet.com>. We can
      r11428: Fix bug #3192 by actually hooking up the dfree caching
      r11433: Fix for bug #3223 - ensure we're root before doing
      r11435: Allow the hash size of the tdb open (locking) database
      r11443: Fix error code returns on client spoolss code. Fix them
      r11446: Remove unused fn. Remove unneeded strncpy use.
      r11448: Move decl before code.
      r11451: Fix -O1 "might be using uninitialized" errors.
      r11454: Last 2 uninitialized warnings.
      r11460: Improve error messages in parsing security descriptors.
      r11464: Allow smbcacls to modify a SD on W2K3. This may fix several
      r11482: Arrg. Can't believe this code was in this state. If you
      r11491: If we get a reject ensure we're printing out the server/domain/machine
      r11492: Fix bug #3224 (I hope). Correctly use machine_account_name
      r11494: Finally fix #3192 - remember iDiskfreeCacheTime is
      r11504: Added Andrew Bartletts removal of another NTLMSSP implementation
      r11506: Added description of ACL in usage message.
      r11508: Removed incorrect patch hunk. Thanks to Andrew
      r11511: A classic "friday night check-in" :-). This moves much
      r11530: Add the "time offset" parameter back in for people who
      r11560: Fix core dump if setmntent returns NULL.
      r11566: From metze. Use "interpret_addr(lp_socket_address())" for port 138.
      r11573: Adding Andrew Bartlett's patch to make machine account
      r11614: Replace old crc32 code with one from the FreeBSD tree.
      r11658: Someone broke the initialization of the static modules by adding a 'NTSTATUS'
      r11718: Filter stored DOS attributes by SAMBA_ATTRIBUTES_MASK (0x7f).
      r11719: Remove silly #define of close -> close_fn as this borks
      r11732: Remember to return early if -1 returned from *BSD EA call.
      r11764: Doesn't need to be exported from here.
      r11767: Doesn't need to be exported.
      r11769: Looking at a performance problem enumerating accounts, wondered
      r11793: Fix the SAMR cache so it works across completely insane
      r11799: Added OpenSSH fix for "%.*s" format crash. From Darren Tucker
      r11839: Info level 0x101 is really a protocol NT level.
      r11841: Fix #3262 from Timur Bakeyev to improve reporting on FreeBSD DOS
      r11845: Removed error code list as it isn't correct for Linux.
      r11861: Fix inspired by Thomas Neumann <t.neumann at iku-ag.de> to ensure that
      r11865: The only way to stop multiple LDAP searches is to agressively cache
      r11924: Added Volkers's (C) to srv_samr_nt.c, removed separate "builtin"
      r11927: No users or groups to return in BUILTIN domain.
      r11936: Fix bug in returning remote time found by Thomas Bork <tombork at web.de>.
      r11943: Don't reset attrs to zero in EA get - we are adding
      r11945: Make us follow the newly documented pathname processing rules:
      r11950: If we got a connection oriented cancel pdu we would spin processing it.
      r11962: Bring talloc up to date with Samba4, re-add the
      r11976: (Slightly modified) Volker fix for #3293. Use SMBecho instead of
      r11978: Volker's fix for #3292 (smbclient spins if server terminates
      r11985: Move to LGPL as per tridge's Samba4 change.
      r12038: This file is no longer used, and no one noticed....
      r12043: It's amazing the warnings you find when compiling on a 64-bit
      r12045: More warning fixes... Just a few more to go.
      r12054: We only have one more warning at -O6. That will take
      r12096: Change uint32_t to uint32. Jerry, please pick this change up for
      r12107: Move to a tdb-based wins database. At the moment we still
      r12110: We're using a tdb-based wins backend now. Thanks to the
      r12111: Fix the "everything" build by re-adding debug2html. Oops.
      r12160: The filename parameter to get_share_mode_lock is going
      r12194: Ensure that when we set a connection path we've canonicalized
      r12203: Add the share path into the sharemode db. This involves
      r12213: Final fix for #3303 - send rename messages to smbd's
      r12214: Fix compile if SYNC_DNS is set.
      r12221: Fix error code paths that can potentially leave a dangling lock.
      r12234: Reduce the race condition for renames by holding the lock
      r12245: eDirectory returns LDAP_UNWILLING_TO_PERFORM if the
      r12250: Patch from Martin Koeppe <mkoeppe at gmx.de> for #3287
      r12275: Fix memory leak found by Mikhail Kshevetskiy <kl at laska.dorms.spbu.ru>
      r12279: unix_mask_match has been broken for *ever*... (How).
      r12376: Second patch from Martin Koeppe <mkoeppe at gmx.de>
      r12387: Make string_to_sid a little more silent.
      r12491: End profile fixes from SATOH Fumiyasu <fumiya at samba.gr.jp>.
      r12522: Try and fix bug #2926 by removing setlocale(LC_ALL, "C")
      r12555: Fix more load_case_table swegfaults. Arggg.
      r12564: Ensure load_case_tables is always done first.
      r12653: Patch from SATOH Fumiyasu <fumiyas at miraclelinux.com>
      r12713: Remove use of uint8_t -> uint8.
      r12855: Remove erroneous commenting out of valgrind fix.
      r12877: Stop passing structs around in smb messages, instead
      r12885: Oops. Missed last part of correct patch for #3348.
      r12920: Fix for #3401 from Andrew Bartlett. Original fix from
      r12922: Fix typo.
      r12938: Fix for #3408 (change password fails) from William Jojo <jojowil at hvcc.edu>.
      r12956: Fix for bug #3035 from SATOH Fumiyasu <fumiyas at miraclelinux.com>
      r13012: Fix #3421 - it turns out krb5_kt_get_entry() on MIT
      r13015: Make logic much clearer. From jpeach.
      r13023: Ensure we notice if we exit due to guest user setup fail.
      r13028: Fix for #3419 - vfs_full_audit *never* worked
      r13042: Fix for bug #3248 Stefan Burkei <stefan at burkei.de>.
      r13091: Fix gcc warning about using '0' with %s.
      r13095: Fix warnings assigning int to a size_t.
      r13119: Fix for #1779 from William Jojo <jojowil at hvcc.edu>
      r13125: Very well spotted crash bug fix for #3343 from
      r13140: Fix swat - make sure it can list running services (ensure loopback_ip)
      r13147: Raise creds_server_step fail log messages to debug level 2.
      r13172: Fix incorrect error message when new tdb not created correctly.
      r13175: Actually make adding a new user into an empty pdbtdb
      r13176: Fix show-stopper bug for 3.0.21b where 4 leg NTLMSSP SPNEGO
      r13190: Fix #3458 from Andriy Gapon <avg at icyb.net.ua>. Don't
      r13192: Fix up alignment issues when printing share mode
      r13194: Don't do extra memcpy's unless we're asked to.
      r13198: Fix issues exposed by Jerry's testing on 64-bit Solaris
      r13238: Fix from Qiao Yang <qyang at stbernard.com> to ensure we
      r13260: Fix stupid bug Volker found for big-endian machines.
      r13262: Arrgggg. Fix smbstatus and swat status to ignore
      r13274: Fix for bug #3467. Not a show stopper.
      r13293: Rather a big patch I'm afraid, but this should fix bug #3347
      r13294: Fix basic delete on close tests - don't forget to tell
      r13299: From testing W2K3 and W2K the delete on close bit seems to be always
      r13314: This code has been causing problems since 1.9.x I think.
      r13322: Fix warning time_t != int.
      r13329: Fix libsmbsharemodes.so to work with the stored delete token.
      r13331: No I didn't have to change the interface version...
      r13368: I must write out 1000 times, "Don't use C++ reserved words..."
      r13386: Fix parsing of SAMR_Q_CONNECT_ANON.
      r13396: Add in userinfo26, re-enable userinfo25 - took the knowledge
      r13399: Get closer to passing RPC-SCHANNEL test.
      r13407: Change the credentials code to be more like the Samba4 structure,
      r13412: Don't use arbitrary uint32 size for uid and gid storage. Use
      r13423: Write wrapper functions (and configure tests) so we can
      r13427: Fix ctime -> st_ctime.
      r13433: Get ready to implement NET_SAM_LOGON_EX.
      r13434: Add stub for NET_SAM_LOGON_EX.
      r13436: Add in NET_SAM_LOGON_EX. Still needs testing.
      r13439: Fix NET_SAM_LOGON_EX.
      r13447: Added LSA_LOOKUPSIDS2 and LSA_LOOKUPSIDS3.
      r13449: Ensure we don't crash if no dc struct on pipe.
      r13455: Prepare to add lookupnames2.
      r13456: Add lsa_lookup_names2.
      r13458: Add parsing functions - but stub internals for lookupnames3 and 4.
      r13473: Back port r13470, r13471, r13472 from Samba4. Thanks Andrew:
      r13475: Fix erroneous initialization caused by my renaming types.
      r13489: Fix #3496 from jason at ncac.gwu.edu. Variable set but never used.
      r13491: Fix bug # 3498 from jason at ncac.gwu.edu. Unsigned comparison
      r13497: Fix #3508 from jason at ncac.gwu.edu
      r13498: Fix the kernel oplocks code for IRIX. Should fix #3515.
      r13502: Fix error messages for usershares when smbd is not
      r13519: Fix the credentials chaining across netlogon pipe disconnects.
      r13521: Implement LOOKUPNAME3 and 4.
      r13530: Fix from William Jojo for #1970. Make nmblookup do
      r13535: Fix #2353 based on a patch by William Jojo.
      r13538: Make sure we store all 16 bytes of credentials session
      r13539: Add 128 bit creds processing client and server. Thanks to Andrew Bartlett's
      r13542: Don't reuse a pointer we just freed (Doh!).
      r13548: Always use the get_remote_macinhe_name() as the key
      r13552: Make sure we're using the same name to load the stored
      r13553: Fix all our warnings at -O6 on an x86_64 box.
      r13556: Ensure that any potential creds operation are protected
      r13557: (Hopefully) get the creds store/restore key right from
      r13559: Fix bug #3522 reported by Sandeep Tamhankar <sandman at electric-cloud.com>.
      r13563: Fix bug #3526 found and diagnosed by corinna at vinschen.de.
      r13585: Sorry Gunther, had to revert this. It's got a buffer
      r13588: Second attempt to fix Bug #3330 - treat the string as a
      r13594: Got sense of NTSTATUS check reversed.
      r13604: Fix for bug #3512 "use spnego=no" and "server signing=auto" cause client to disconnect after negprot"
      r13607: Fix compile - don't ref auto variable in a structure initialization.
      r13610: Patch from Bjoern JACKE <samba at j3e.de>. Don't default to
      r13614: First part of the bugfix for #3510 - net join fails
      r13641: Finish fix for #3510. Don't use client schannel when told
      r13647: Fix for standalone Samba servers and XP clients. Reverts
      r13664: Fix the cli_error codes to always detect a socket error.
      r13669: Get rid of poor errno mapping table. Bounce through NTSTATUS instead.
      r13682: Actually give a developer a prayer of finding out where
      r13704: Janitor for tpot.
      r13722: Ensure we use the correct enumerated type. Bug #3558
      r13724: Remove unused variable. Bug #3559 from
      r13747: Fix the reference count for tdbsam_open() - on an
      r13748: Don't reference memory after we just freed it (Doh!).
      r13759: As pointed out by Volker, it isn't much good creating
      r13778: When deleting machine accounts it's the SeMachineAccountPrivilege
      r13792: Merged Simo's fixes for tdbtraverse.
      r13796: Another load_case_tables...
      r13799: Make locktest debug a little easier to read.
      r13802: I *knew* ASU on sparc had to be good for *something* ! :-).
      r13873: I think this is the longstanding wins server crash bug, not
      r13875: Fix coverity bug #148. Deref of rrec before NULL check.
      r13880: Fix coverity bug CID #97, mem leak on error path.
      r13882: Fix coverity CID bug #96. Missing free on error
      r13884: Fix coverity CID #95. Resource leak on error path.
      r13887: Fix coverity bug CID #94. mem leak on error codepath.
      r13889: Fix resource leak on error path. Coverity bug CID #73.
      r13892: Doh ! My bugfix had a bug :-). Spotted by  Willi Mann <willi at wm1.at>,
      r13893: Fix for Coverity issue CID #164. The first one that I don't
      r13915: Fixed a very interesting class of realloc() bugs found by Coverity.
      r13971: Fix Coverity bugs #209 - #213 - it detected mistakes
      r13975: Re-fix Coverity #156 - I had left the hidden arg. inconsistent
      r13978: Here is why it's essential to use SAFE_FREE instead of free.
      r13989: Fix for Coverity bug #45 and associated spoolss RPC_BUFFER
      r13994: Belt and braces - ensure RPC_BUFFER is valid.
      r13999: Quick fix for Coverity bug #11.
      r14002: Quick fix for Coverity CID #12.
      r14003: Clarify code that lead to Coverity report #13.
      r14006: Fix a couple of irritating warnings.
      r14007: Coverity bug CID #197. Don't compare against 0, we
      r14009: Remove last const warning (have to use CONST_DISCARD).
      r14014: Coverity paranoia. Shut it up by making the guarentee
      r14018: Coverity error CID #27. Missing return -1 on error condition.
      r14020: Coverity bug CID #66. Missing free on error exit.
      r14023: My last bug fix still left a potential null deref.
      r14026: Fix resource leak on error exit. Coverity CID #65.
      r14030: Fix resource leak in error codepath. Coverity CID #64.
      r14031: Coverity bug CID #110. Free all resources correctly
      r14043: After discussion with Jerry revert part of the
      r14045: Coverity fix #14. Ensure if len is set buf != NULL.
      r14047: Coverity fix #17. Ensure srv_name and info cannot
      r14080: Fix Coverity bug #18. Ensure non-null before ref.
      r14083: Fix coverity bug #19. Don't deref possible NULL.
      r14087: Protect against domain being NULL. Finish Coverity #152.
      r14088: Fix Coverity bug #20. Don't deref possible null.
      r14090: Fix coverity bug #21, don't deref potential null.
      r14092: Fix coverity bug #22. Ensure no possible null
      r14106: Fix from William Jojo for AIX vfs builds. Thanks Bill !
      r14115: Fix coverity bug #23. Don't deref a potentially null ptr.
      r14118: Fix coverity bug #24. Missing return statement meant
      r14121: We never pass NULL to the rpc_api_pipe fn so don't
      r14166: Fix const warning.
      r14168: Fix Coverity #219. I think this is a false coverity
      r14170: Paranioa fix for sesssetup.
      r14176: Fix coverity bug #30. Ensure no possible null deref.
      r14178: Clarify code for Coverity #49. Ensure we know we
      r14182: Ensure we know that dom_sid cannot be null.
      r14184: Coverity fix #56. Ensure we can't deref null.
      r14186: Coverity fix #31. Don't deref null.
      r14188: Coverity fix #32. Don't deref null.
      r14190: Coverity bug #33. Missing initialization of pipe_hnd.
      r14192: Don't forget to correctly initialize pipe_hnd.
      r14194: Coverity bug #35. Fix uninitialized pipe_hnd.
      r14196: Move to using talloc, not malloc for all policy handles.
      r14212: Definately fixes a coverity issue but I've lost track
      r14219: Fix coverity #135. Don't deref a ptr if it can be NULL.
      r14221: Fix coverity #76. My previous change wasn't quite enough :-).
      r14229: Something Coverity hasn't caught (yet) but I've gotten
      r14250: Fix coverity bug #107. Resource leak on error path.
      r14259: Fix coverity #42. Ensure contact_domain can't be null derefed
      r14261: Fix coverity #38. No null deref.
      r14264: Fix coverity #207. Resource leak on error path.
      r14266: Fix coverity #205. Resource leak on error path.
      r14268: Fix coverity error #204. Resource leak on error path.
      r14270: Fix coverity #203. Ensure we free on error exit.
      r14273: Fix coverity bug #202. Memory leak on error path.
      r14275: Shut-up coverity false positive (bug #199) by making an assertion
      r14282: Change centry_string to only use talloc. Should
      r14284: Fix coverity bug #103. Make code clearer - probably
      r14286: Similar clarifiction fix for coverity #102.
      r14289: Fix coverity #101, resource leak on error code path.
      r14292: Janitor for tridge (samba3 talloc is almost identical
      r14299: Fix coverity #225. In a loop we were forgetting to free
      r14301: Fix coverity #224. In a loop we were forgetting to free
      r14303: Fix coverity #223. In a loop we were forgetting to free
      r14333: Fix coverity #77, ensure we can't exit after allocation.
      r14336: Try and quieten coverity #53 and #54. Make it obvious
      r14338: Fix coverity #55 by explicit cast.
      r14340: Fix coverity #78, resource leak in error path.
      r14342: Fix coverity #68, resource leak on error path.
      r14345: Fix Coverity #71. We don't currently propagate *any*
      r14351: Ensure we use the minimum of PATH_MAX and sizeof(pstring).
      r14353: Fix coverity bugs #61 and #62. Remember to divide by
      r14355: Try and fix Coverity #158 by making the pointer
      r14357: Try and fix Coverity #169 by making the pointer
      r14359: Try and fix Coverity #176 by making the pointer
      r14365: As solaris nss includes includes.h, make sure we use
      r14387: Try and fix the coverity issues (#53, #54) with negative
      r14393: Fix a couple of AIX warnings.
      r14395: Fix coverity bug #55. Ensure no unsigned/signed comparisons.
      r14397: Fix deadcode in coverity error #1.
      r14399: Fix deadcode coverity bug #3.
      r14405: Fix the build when nscd_flush_cache is detected
      r14406: Disable this call until we can sort out how this
      r14416: Remove deadcode. Coverity #198.
      r14418: Try and fix Coverity #39 and #40 by making the
      r14454: Janitor for tridge - same code exists in Samba3 and 4.
      r14460: SMBexit closes by pid and vuid. Tested with smbtorture.
      r14462: Fix warning. ber_tag_t is an unsigned int for
      r14489: Guard against coverity reversion. #181 is a false positive
      r14596: Fix a logic bug with multiple oplock contention.
      r14602: Fix another logic bug in new oplock handling. Just
      r14703: Clarify the return codes for the POSIX locking case. This
      r14743: Fix coverity bug #227. Possible deref of null pointer
      r14746: Add the Samba4 replacements for opendir/readdir etc. to
      r14751: Use the noreturn attribute to try and tell coverity that
      r14760: Fix #3642, ensure we don't call FD_SET on read with fd == -1.
      r14763: Add a new tuning parameter, open files database hash size,
      r14764: Fix possible null pointer deref. Coverity #253.
      r14766: Fix possible NULL deref. Coverity #254.
      r14768: Fix potential null deref coverity bugs #255, #256.
      r14770: Fix coverity bug #257. Possible null deref.
      r14772: Fix coverity bug #258. Seems coverity has discovered talloc :-).
      r14774: Fix null deref coverity bugs #260, #261, #262.
      r14776: Fix coverity #263 - #267. No one was checking talloc
      r14778: Fix coverity null deref bugs #268 - #271.
      r14780: Fix coverity bug #272, null deref.
      r14782: Fix coverity bug #273, null deref.
      r14784: Fix coverity bug #274. Null deref.
      r14786: Fix coverity #275. null deref.
      r14788: Fix coverity bug #276. null deref.
      r14790: Fix possible null deref. Coverity #277.
      r14829: Fix reversed test in coverity fixes.
      r14831: Fix possible null deref. Coverity #279.
      r14833: Fix resource leak on error code path. Coverity #280.
      r14847: Tell static checkers that exit_server() doesn't
      r14849: Fix >= that should be >. Too strict condition
      r14954: Fix #3569 based on William Jojo's work. AIX also
      r14986: Fix OS/2 directory delete bug found by kukks.
      r14989: Fix from Mathias Dietz <MDIETZ at de.ibm.com>. EPERM can be
      r15005: Fix printf args to remove warnings.
      r15012: Fix bug #2715. Fix suggested by ISHIKAWA Tomonori <toishika at fsi.co.jp>
      r15018: Merge Volker's ipc/trans2/nttrans changes over
      r15020: Fix issue with samba4 netbench torture tester,
      r15022: Fix core dumps on normal server exit.
      r15025: Fix exit_server_cleanly call.
      r15026: Fix warning until POSIX locking finished.
      r15028: Fix logic error checking valid args to POSIX lock
      r15030: On a performace hunt... Remove as many extraneous
      r15060: The brlock code gets called a lot. Ensure we keep the
      r15083: Using talloc with destructors is nice and all, but in this
      r15084: Try and squeeze more out of the non-read/write code path.
      r15088: Remove all time() and gettimeofday() calls out of the mainline
      r15107: 64 bit fixes. size_t on a 64-bit box is not uint32.
      r15112: Move strict locking default to auto. Fix up the error
      r15115: Fix error return on sessionsetup. Ensure no
      r15129: Separate out mechanism and policy for NTLMSSP auth/sign/seal.
      r15138: Teach Samba the difference between exclusive and batch oplocks.
      r15141: Fix for #3592 inspired by Justin Best <justinb at pdxmission.org>.
      r15160: Fix from William Jojo I thought had already been added (but
      r15162: Patch for bug #3668. Windows has a bug with LARGE_READX
      r15210: Add wrapper functions smb_krb5_parse_name, smb_krb5_unparse_name,
      r15216: Fix the build for machines without krb5. Oops, sorry.
      r15269: Fix incorrect boolean in assert to make POSIX lock tests
      r15293: Don't ever set O_SYNC on open unless "strict sync = yes".
      r15333: Paulg broke the function prototyping of decl_static_XX.
      r15334: Fix warning. This table and function not used anymore. Jerry please
      r15336: Unknown escape sequence: '\305' - should have been '\n'.
      r15341: Ok I give up, I've been beaten by bug reports. People
      r15402: Fix for bug #3587. Dead entries can be left in the locking
      r15404: Check for WRITE_THOUGH before calling lp_ fn. I hate
      r15419: Never write the same function twice :-). In a traversal
      r15444: Fix from Jim to ensure we do a wildcard search for SID's
      r15467: Ensure every exit error path calls nt_status_squash.
      r15537: Ignore // or \\ in //server or \\server.
      r15539: Use portable wrapper functions instead of seteuid
      r15555: Make "change notify timeout" a per-share parameter - used
      r15556: Better fix for leading // or \\ from "David R. Linn"
      r15610: Fix Coverity #288 - possible null deref.
      r15668: DOS or FCB opens share one share mode entry from different
      r15670: Fix valgrind-spotted issue in BASE-DELETE test.
      r15672: Fix for bug #3783. winbindd_cm.c calls open_any_socket_out()
      r15675: Man pages say never look at the fd_set after a select
      r15676: Fix meaningless debug statement from uninitialized variable.
      r15700: Make nmbd udp sockets non-blocking to prevent problem
      r15727: Fix msgtest - noticed by Aleksey Fedoseev <fedoseev at ru.ibm.com>.
      r15729: Second part of Aleksey Fedoseev <fedoseev at ru.ibm.com> patch.
      r15838: Back-port tridge's talloc fixes (r15824, r15828) from Samba4.
      r15884: Fix bug #3803 from jason at ncac.gwu.edu - bad comparison.
      r15887: Ensure we use sys_write so we're not interrupted.
      r15888: Fix bug #3804 from jason at ncac.gwu.edu
      r15890: Use correct enum type (bug #3722) from Jason Mader <jason at ncac.gwu.edu>.
      r15895: Ensure all new rid allocation goes through
      r15936: Fix memory leak on error exit path. Trying to
      r15949: Patch for bug #3308 to stop us returning duplicate
      r15951: oplock_request must be an int, not a BOOL. We
      r15958: Make us pass RAW-OPLOCK with kernel oplocks off.
      r15959: Ooops. Use the right file_free call...
      r15960: Don't double-free (ensure we always free file_fsp in
      r15995: Make smbldap obey config tests. Patch from "John E. Malmberg"
      r15997: Fix bug in OS/2 Warp - it doesn't set the ff_last
      r16016: Add debug to be symetrical with reading from
      r16017: Add Samba4 replacement for timegm to work
      r16019: This should not be a level zero message - it's harmless
      r16054: Janitor for Volker ? Volker - some reason you didn't
      r16076: Fix for machine password timeout overflow from Shlomi Yaakobovich
      r16112: Added Volker's fix for extra odd byte at the end
      r16126: Janitor for Volker..... This looks correct to me.
      r16155: Janitor for jelmer.
      r16199: Fix Klocwork #1 - ensure we test the first
      r16202: Fix Klocwork #3. Strange - was already fixed in HEAD.
      r16207: Ensure we don't allocate an OID string unless
      r16209: Klocwork bug #66, ensure no null deref.
      r16213: Fix Klocwork #852. iface_n_ip can potentially
      r16216: Add debug messages to make it possible to try and
      r16230: Fix Klocwork #861 and others. localtime and asctime
      r16241: Fix Klocwork #106 and others like it.
      r16243: Fix Klocwork bugs #581 and #706, ensure we check
      r16245: Cope with string being zero len. Klocwork bug #410.
      r16267: Fix Klocwork #401, #402 - ensure format specifier
      r16270: Fix Klocwork #706 - ensure sscanf has correct format
      r16275: Start fixing up gcc4 -O6 warnings on an x86_64 box. size_t != unsigned int
      r16277: Start fixing up gcc4 -O6 warnings on an x86_64 box. size_t != unsigned int
      r16280: Start fixing up gcc4 -O6 warnings on an x86_64 box. size_t != unsigned
      r16281: Start fixing up gcc4 -O6 warnings on an x86_64 box. size_t != unsigned
      r16284: Start fixing up gcc4 -O6 warnings on an x86_64 box. size_t != unsigned
      r16285: On a 64-bit box, size_t != uint32. Ensure we use
      r16287: Use intptr_t to return an integer of an unknown type cast
      r16295: Fix gcc4 "warning: dereferencing type-punned pointer will break
      r16298: On request of jiri sasek - Sun Microsystems - Prague Czech Republic <Jiri.Sasek at Sun.COM>
      r16299: Fix another "dereferencing type-punned pointer will break
      r16306: Error handling in this asn1 code *sucks*. Fix a generic
      r16307: Make sure we know we must pass a valid pointer here.
      r16309: Fix Klocwork #1596. Check for NULL on talloc.
      r16311: Check for NULL return. Klocwork #998.
      r16313: Not a problem - but ensure Klocwork is quiet (#872).
      r16317: Klocwork #300. Check for error return on malloc.
      r16320: Ensure variable is not null before calling fclose.
      r16322: Klocwork #481., Don't deref null on malloc fail.
      r16324: Klocwork #499. Allways check results from alloc.
      r16326: Klocwork #509. Always check return allocs.
      r16355: Remove derrell-test created by mistake.
      r16356: Helping derrell out. Jeremy.
      r16358: ALWAYS compile this stuff on a 64-bit box before
      r16365: Fix Klocwork #895, #898, #899, #915, #932, #938 and a
      r16367: Missed one, Klocwork #915.
      r16369: Klocwork #1035.
      r16371: Fix Klocwork #1048.
      r16373: Fix Klocwork #1071.
      r16375: Klocwork #1670.
      r16377: Klocwork #1077.
      r16378: Klocwork #1079. Allow BUFFER5 to cope with a NULL
      r16381: Now samu can't be null don't check it on set. Klockwork
      r16383: Klocwork #1086. No null deref.
      r16386: Klockwork #lots. Ensure talloc_get_type_abort aborts
      r16388: Klocwork #320. Null deref.
      r16390: Klocwork #604 - ensure if NULL pointer we assert
      r16392: Klockwork #1168. Protect against null deref.
      r16393: Klocwork #1164. Null deref.
      r16396: Klocwork #1170. Null deref.
      r16397: Fix Klocwork #11767 and drasticly simplify the
      r16420: Fix Klocwork #1674. Null deref.
      r16422: winbindd_demote_client isn't used and generates
      r16424: Fix possible null deref and a memory leak found by
      r16426: Klocwork #1544, #1545, #1546, #1549, #1550, #1552, #1553, #1554
      r16429: Fix final 4 Klocwork bugs we're going to fix before
      r16433: Fix Coverity #300 (triggered by a Klockwork bugfix
      r16435: Add in the uid info that Jerry needs into the
      r16537: Fix for bug #3858, all files in a directory not
      r16541: Fix #3862 reported by jason at ncac.gwu.edu.
      r16542: Fix #3863, reported by jason at ncac.gwu.edu
      r16544: Fix bug #3864 reported by jason at ncac.gwu.edu.
      r16546: Fix bug #3865 reported by jason at ncac.gwu.edu.
      r16548: Fix bug #3867 reported by jason at ncac.gwu.edu.
      r16554: Sorry, just had to change this. Don't use int when
      r16576: Fix Klocwork #2015. Possible null deref.
      r16579: Fix Klocwork #2016. Possible null deref.
      r16581: Fix Klocwork #2017. Possible null deref.
      r16582: Fix Klocwork #1997 and all generic class of problems
      r16585: Fix Klocwork #1976. Possible null deref.
      r16587: Fix Klocwork #1987. Memleak on reusing x_dbf.
      r16589: Fix Klocwork #1999. Although it should be impossible to
      r16591: Belt and braces approach to shut Klocwork up - bug #2001.
      r16593: Make the invarient explicit to Klocwork. Bug #2023.
      r16595: Klocwork #2067. Fix possible memleak on error exit.
      r16597: Klocwork #2006. Fix possible null deref.
      r16599: Make it clear to Klocwork we're not dereferencing. Issue #2026.
      r16601: Klocwork #2038. Fix memleak on error path.
      r16603: Klockwork #2028. Fix null deref on error path.
      r16606: Klocwork #1990. Malloc the correct size.
      r16608: Klocwork #2035. Null deref (bit of a stretch... :-).
      r16610: Subtle one from Klocwork #2076. If multiple flags
      r16612: Klocwork fix #2011. memleak on error path.
      r16614: Klocwork #2012. memleak on error path.
      r16616: Klocwork #2025. Stop null deref. I actually don't
      r16624: Fix bug #3877, reported by jason at ncac.gwu.edu
      r16626: Fix bug #3878. Reported by jason at ncac.gwu.edu.
      r16628: Fix bug #3880, reported by jason at ncac.gwu.edu
      r16630: Fix bug #3881, reported by jason at ncac.gwu.edu.
      r16632: Fix bug #3882 reported by jason at ncac.gwu.edu.
      r16634: Fix bug #3883 reported by jason at ncac.gwu.edu.
      r16636: Fix bug #3884 reported by jason at ncac.gwu.edu
      r16638: Fix bug #3885, reported by jason at ncac.gwu.edu. Use
      r16640: Fix bug #3886 reported by jason at ncac.gwu.edu.
      r16642: Fix show-stopper bug #3876. Double-free in wins
      r16644: Fix bug #3887 reported by jason at ncac.gwu.edu
      r16646: Fix bug #3888 reported by Jason Mader <jason at ncac.gwu.edu>.
      r16648: Fix bug #3889 reported by jason at ncac.gwu.edu.
      r16650: Fix bug #3890 reported by jason at ncac.gwu.edu.
      r16652: Fix bug #3891 reported by jason at ncac.gwu.edu.
      r16654: Fix bug #3893 reported by jason at ncac.gwu.edu.
      r16656: Fix #3894 and #3895 reported by jason at ncac.gwu.edu.
      r16661: Fix from jason at ncac.gwu.edu for bug #3875,
      r16663: Fix coverity #301, memleak in error path.
      r16665: Fix a couple of bugs I discovered now I've looked
      r16678: Fix bug #3898 reported by jason at ncac.gwu.edu.
      r16681: Fix bug #3899 reported by jason at ncac.gwu.edu.
      r16683: Fix bug #3900 reported by jason at ncac.gwu.edu.
      r16685: Fix bug #3901 reported by jason at ncac.gwu.edu.
      r16687: Fix bugs #3901, #3902, #3903 reported by jason at ncac.gwu.edu.
      r16696: Fix the multiple-outstanding write and trans client
      r16720: Fix bug #3874 (warning) reported by Jason Mader.
      r16789: Fix bug #3909, when using ea's getting a directory tries to
      r16943: Add Jim's code.
      r16945: Sync trunk -> 3.0 for 3.0.24 code. Still need
      r16947: Fix warning with profile separator when profiles not
      r16948: Sync the exmaples code from trunk.
      r16962: Add a few utility fns into client. Allow POSIX capabilities
      r16968: The function parse_processed_dfs_path() is dependent on the
      r16971: Ensure we use the correct separator for pathnames
      r16973: Fix subtle logic error in lock ref counting found by
      r16987: Fix the logic errors in ref-counting Windows locks.
      r16990: Fix bug #3921 spotted by jason at ncac.gwu.edu. Correctly
      r16992: Fix bug #3922 reported by jason at ncac.gwu.edu, correctly
      r16994: Fix bug #3923, reported by jason at ncac.gwu.edu. Incorrect type
      r17000: Allow CIFS POSIX locks to coexist with Windows locks.
      r17003: Fix coverity #303 - possible null deref. Jerry please
      r17025: Remove one blank line - test checking in to two
      r17030: Partially fix standalone build of tdb directory
      r17041: Trying to track down a *big* memory leak in the new lock code.
      r17043: Fix memleak when processing CIFS POSIX lock/unlock
      r17046: Ensure we're using the right pointers ...
      r17080: Remove traces of the wrepld directory (now
      r17098: Samba3 now cleanly passes Samba4 RAW-LOCK torture
      r17100: Ooops. Fix the build...
      r17105: Fix the race Volker found - we had a non-locked
      r17106: Match Windows timing values on locks.
      r17107: Make the 200 ms timeout value tunable in local.h...
      r17108: Make the default timeout parameter for lock waiting
      r17125: Drastic problems require drastic solutions. There's
      r17128: Missed a logic error in my last patch. Ensure we deal with any
      r17130: Remove unneeded unlock call.
      r17131: Optimisation - when doing a stat open don't open the
      r17140: Get rid of the lock release/reacquire code ! Turns out
      r17142: Ensure we record the correct can_read/can_write
      r17152: Don't handle the delete pending here, await
      r17181: Fix the build farm RAW-READ bug. When making a copy
      r17220: If we're going to fail a write with an errno, make
      r17234: Fix error mappings for EQUOTA and ENOBUFS.
      r17244: There were several error paths where NT_PRINTER_INFO_LEVEL
      r17245: Second part of fix for #3962. Don't do a double
      r17247: When we map generic to specific we need to remember
      r17248: Ensure we definately add the WRITE_DATA on O_TRUNC.
      r17249: Ensure we only set the FILE_WRITE_DATA on O_TRUNC
      r17262: After messages from Metze and traces from Karolin Seeger,
      r17276: Don't change the POSIX lock ref count if posix locking = no.
      r17291: Fix memory leaks on early exit path.
      r17292: Try and fix bug #3967 - signing problems on trans
      r17293: After the results from the cluster tests in Germany,
      r17294: Make the code a little cleaner. Instead of using the two
      r17295: Back out the become_root_uid_only change on the POSIX
      r17296: Replace the understandable parts of the quota
      r17314: Optimisation for POSIX locking. If we're downgrading
      r17346: Add optimisation vl needs for the cluster code where
      r17367: Reverting the ab code. Note I'm not saying this
      r17376: Fix bug #3985 - ensure in msdfs we check for our
      r17378: Fix the issues people have been having with mapped
      r17388: Fix the "valid users"/token issue for now. Volker,
      r17391: Revert the second part of the valid users fix - the
      r17392: Commit Volker's fix for the valid users problem.
      r17393: Remove Volker's ASSERT that num_groupsids > 0.
      r17402: Added lookup_name_smbconf() to be called when looking
      r17407: Don't do strchr_m twice when once will do.
      r17431: Fix bug #4003, reported by dale-keyword-samba.c7b741 at codefu.org.
      r17439: Fix logic error in checking TALLOC return. Spotted by Volker.
      r17461: Ensure we never save a NULL SID mapping. || should be &&.
      r17464: Ensure we use a hash16 data type, not a string,
      r17496: net groupmap add could add uninitialized sid_name_type
      r17541: When returning a trans2 request, if the "max data
      r17595: Fix from Ben Winslow <rain at bluecherry.net> to allow
      r17610: Added the ability for firefox to drive the winbindd
      r17612: Modify NTLMSSP session code so that it doesn't store
      r17616: Add the lm and nt hashes to the cached credentials
      r17617: Take Andrew Bartletts excellent advice and don't store
      r17618: Not using a cache version number (yet). We really should...
      r17630: Looks like getpeerid() is a system function on
      r17667: Merge snprintf fixes from tridge (Samba4).
      r17668: Fix the miscalculations in pushing announces. Fixes
      r17676: Fix printing bug found by kukks. Don't copy a return
      r17761: Handle times consistently across all client utils.
      r17766: Getting ready to properly expose 100ns times on
      r17767: Argggg. Broke the build. Need to fix callers of put_long_date()
      r17800: Start using struct timespec internally for file times
      r17809: Add in 64-bit integer time calculations (taken from
      r17812: Fix bad unsigned comparisons with TIME_T_MIN/TIME_T_MAX.
      r17818: Fixup uint64 time calc. NT time is a 64 bit number,
      r17834: Another bug found by Volker's tests in the build farm !
      r17837: Split out the storing of memory cached credentials
      r17861: Fix inconsistency found in checking for NULL in DLIST_REMOVE
      r17862: Fix possible NULL deref (like rev 17861) found by the
      r17863: Fix unneeded NULL check on pointer parameters causing the
      r17864: Fix possible null deref if client doesn't give us
      r17865: Fix what the Stanford checker reported as a possible
      r17866: Fix possible null deref - found by Stanford checker.
      r17867: Fix null deref in error code path. Found by the
      r17869: More sensible fix for Stanford Checker null deref.
      r17872: Fix possible null deref found by the Stanford checker.
      r17873: Fix possible null deref found by Stanford checker.
      r17874: Fix possible null deref found by Stanford checker.
      r17875: Fix (rather theoretical, but still...) null deref found by
      r17877: Make it explicit to the checker that we can never pass
      r17878: Fix possible null deref found by Stanford checker.
      r17879: Make it explicit that we can never pass NULL for buflen or stringlen.
      r17897: Store the uid in the memory creds. Don't request the
      r17899: Fix Stanford checker bug - possible null deref.
      r17900: Fix from Michael Adam <ma at sernet.de> - make internal_resolve_name
      r17901: Stanford checker fix. cookie here can't be null or we'd
      r17902: Fix possible null deref caught by Stanford checker.
      r17903: Fix null deref caught by Stanford checker. Don't
      r17921: Comment is obsolte. This is now implemented in winbindd.
      r17928: Implement the basic store for CLDAP sitename
      r17929: Ok, I think I finally figured out where to put
      r17933: Don't print a NULL sitename.
      r17937: Move the saf_ cache into the tcp ad connection code.
      r17941: Fix print out of client site name.
      r17942: Jerry is right - when no site support is enabled
      r17943: The horror, the horror. Add KDC site support by
      r17944: Handle locking madness.
      r17945: Store the server and client sitenames in the ADS
      r17946: Fix couple of typos...
      r17947: Remove extra const.
      r17970: Add missing include-guards around ads.h and ads_cldap.h.
      r17979: Make ntlm_auth more intelligent about figuring out it's
      r17981: Hmmm. Don't break helper functions that don't need
      r17984: Ensure we never indirect a null opt_username if it wasn't
      r17994: Add debugs that showed me why my site code wasn't
      r17995: Ensure we create the domain-specific krb5 files in a
      r17996: Don't talloc free the memory then reference it. Doh !
      r17997: Ensure lockdir exists for winbindd. Store tmp
      r17999: No need to prevent others from reading. Use 755 instead
      r18000: Get nelem/size args right for x_fwrite.
      r18001: Proper error reporting on write/close fail.
      r18002: Improved debug.
      r18003: Creating a directory and getting EEXIST isn't an error.
      r18004: If you're writing out a krb5.conf, at least
      r18006: Actually a smaller change than it looks. Leverage
      r18007: Ensure we don't namecache KDC entries with port 88
      r18010: Ensure we don't timeout twice to the same
      r18015: Try and detect network failures immediately in
      r18062: Fix to ensure the name used by pam matches the
      r18063: When we get a successful connection using ADS,
      r18107: Only do a SAF realm store if the logon was krb5.
      r18116: Make max usershares an advisory limit, pointed out
      r18128: Don't forget to set the ref count to 1 on a reference
      r18189: When tearing down a connection we can be harsher
      r18191: Fix the online/offline state handling of winbindd.
      r18192: Fix the build.
      r18196: Fix debug message (this should be online not offline).
      r18199: Allow winbindd to delete a saf_ entry if it knows
      r18200: Experimental code to allow system /etc/krb5.conf to be
      r18201: Make explicit what's going on here.
      r18224: Paranoia - ensure the oplock event handler is
      r18225: If we're going to overwrite krb5.conf, at least
      r18226: Ensure we only do this evil thing if it's our realm.
      r18234: DNS failures are too common to log at level zero or 1.
      r18239: THIS IS GUENTHER'S WORK !!! He's allowing me to merge
      r18241: If replacing the krb5.conf, ensure it's readable.
      r18398: Fix bug #4095 - username composed into domain\user
      r18403: Revert until we get this sorted out correctly.
      r18411: Getting a zero length read is common. Don't log at
      r18446: Add the ldap 'leave domain' code - call this as
      r18467: Some sites allow an account to be deleted, but not
      r18473: Once we go online, trigger a "get krb5 ticket event"
      r18476: Protect ourselves from bad cached creds a little
      r18480: Doh ! Double-free of hostnameDN.
      r18483: Ensure all pdb_XXX calls are wrapped in become_root()/unbecome_root()
      r18506: Fix online requests to cause an immediate DC connection.
      r18507: Added debug log for returned username.
      r18509: We must always canonicalise the usernames to be UPPERCASE DOMAIN,
      r18525: Be a little less agressive about going back online when requested.
      r18533: Ensure we clear out the failed connection cache for an entire
      r18547: Add in fixes to mangling dir code - ensure don't
      r18551: Implement a 30 seconds from startup, during which we
      r18552: Ensure the sitename matches before we SAF store a DC in ADS mode.
      r18557: If you've set security=ads, do the DNS queries first.
      r18603: Add in the NFSv4 ACL mapping code from IBM.
      r18613: Metze, in your DLINKLIST commit you changed this
      r18663: Fix one more uuid -> GUID.
      r18719: Compile fix from Peter Somogyi.
      r18787: Fix the strlen_m and strlen_m_term code by merging
      r18793: Fix BE string handling in the auto-generated
      r18796: Fix the build. Sorry.
      r18846: Fix the same bug Volker noticed when marshalling/unmarshalling
      r18897: Fix valgrind bug found by Volker.
      r18898: Fix for bug #4100 from Udo Eberhardt <udo.eberhardt at thesycon.de>.
      r18907: W00t. My original fix was correct after all :-).
      r18980: Be a little more intelligent about "startup_time",
      r19054: Callers of gencache may not have the rights to
      r19103: From "Björn JACKE <bjoern at j3e.DE>":
      r19104: Fix from Björn JACKE <bjoern at j3e.de>
      r19105: Ok - this is currently untested (but I'm testing it at
      r19148: Finish last nights patch - make offline
      r19155: Fix debug message.
      r19159: The getdc call can take a long time. Allow for timeouts.
      r19207: Properly canonicalize incoming names to the
      r19209: Ensure we don't make mistakes by sending online/offline
      r19212: Make sure domains marked internal don't do
      r19230: Doh ! Fix obvious crash bug.....
      r19249: Attempt to fix a site lookup bug found by Guenther.
      r19257: Janitor for Guenther - as well as a little massaging to make
      r19260: Fix for bug #3524 from tiamat at komi.mts.ru - Solaris quotas.
      r19271: Test the "hack" for "Domain Users" as agreed with
      r19272: Ensure we return 1 member in the optimized case.
      r19300: Fix null deref in debug statement.
      r19301: Correct debug statement.
      r19302: Use TALLOC_ZERO_P not TALLOC_P to ensure unused
      r19399: Now Guenther discovered one crash dereferencing domain->backends,
      r19413: Now we're calling init_dc_connection, this code
      r19422: Doh ! Put the krb5 user at realm code in the right place.
      r19424: Protect against username == NULL
      r19529: Added showacls togle. Previously was vendor-specific code.
      r19533: Add a suffix to the program name if this is a process with a
      r19577: Fix from Nils Nordman for bug #4085. Thanks !
      r19601: Fix protection from invalid struct tm values.
      r19627: Fix for bug #4211 - logic error in acl_group_override()
      r19659: Fix bug #4187. Possible crash in signing on/off code.
      r19705: Fix blocker bug for 3.0.23d - find_forced_group could
      r19709: Fix bug #4224 - deadtime timeout was broken
      r19710: Fix memory leak in get_conf_item_string(). As
      r19823: "log" is an internal define in older versions of gcc.
      r19936: Patch from Kai Blin <kai.blin at gmail.com> to
      r19957: Initial framework to make winbindd robust
      r19958: Add check for WINBIND_OFFLINE key.
      r19959: Allow tdb to be built standalone in Samba3.
      r19974: Add freelist check for cache. Fix testing of entry
      r19975: Deal with 2 keytypes I messed previously (DR/DE).
      r19993: Fix the problem with Linux clients requesting O_WRONLY
      r20035: Fix obvious horrible bug in falling back to MS-RPC
      r20057: Attempt to fix connect timeouts when connected on
      r20058: Ensure we actually do the increasing time
      r20060: Fix the timout calculation.
      r20082: When fork_domain_child is forked when we're offline
      r20087: Ensure we clean up any random pending events we
      r20090: Fix a class of bugs found by James Peach. Ensure
      r20097: Ensure found_username is freed correctly when
      r20098: Properly fix issues with create_token_from_username()
      r20110: Fix interaction between paranoid malloc checker
      r20140: Make online/offline detection completely asynchronous.
      r20146: Now online checks are fully async we can do them
      r20148: Forgot to merge. Ensure open_any_socket_out()
      r20160: Fix long-standing (ie. from initial code I think) bug
      r20165: Change messaging subsystem to only allow one message
      r20174: If we're only going to call one handler per message
      r20178: Ensure we allocate the intermediate trans structs
      r20179: Sync up with Samba4 - remove blank lines at the
      r20180: Ensure that pam returns the correct error messages
      r20181: Improve NT status to pam error mapping.
      r20206: Start cleaning up the talloc_ctx mess.
      r20207: Fix a couple more places where extra_data was
      r20208: Change sprintf_append() never to use malloc,
      r20250: If we've come from being globally offline we
      r20270: Even with the dual daemon mode the parent winbindd
      r20296: If we're going to overwrite krb5.conf
      r20329: Fix a winbindd crash bug. If someone pulls
      r20330: And here's the fix for the parent winbindd crashing
      r20361: Prevent strnlen_w reading beyond max. Valgrind
      r20362: Fix valgrind issues where we may read params
      r20363: Fix any possible valgrind errors in srvstr_get_XX or srvstr_pull_XX
      r20368: Fix valgrind report of uninitialized memory
      r20370: Now we've gone to the trouble of getting an NT status
      r20371: In renames (via SMBmv) both src and dest can contain
      r20372: Make NTrename the same as SMBmv w.r.t. wildcards.
      r20411: Fix originally from SATOH Fumiyasu (slightly
      r20412: Placeholder to remind me to write a torture test
      r20530: Don't want this call to get inadvertently re-added :-).
      r20532: From Volker...
      r20535: Fix make install to work when root doesn't have
      r20558: Refactor rmdir_internals to use early termination rather
      r20635: Add placeholder to ensure we don't go into the
      r20692: Fix bug found by Guenther -
      r20694: To get this right we need to do signed 64-bit
      r20695: Remove duplication of constants.
      r20718: Sync up the filename path parsing changes from SAMBA_3_0_24.
      r20720: Fix the chkpath problem, still looking at findfirst.
      r20721: Fix the search unix_convert error returns. Only open
      r20722: RAW-CHKPATH should now pass, build farm should
      r20724: Get closer to passing RAW-OPEN. If the client is using
      r20742: Rename chkpth -> checkpath for sanity's sake :-).
      r20743: Remove another BOOL ok from reply_getatr.
      r20744: Fix the build (I missed some chkpth -> checkpath renames).
      r20781: Fix a couple of paths found by Volker where we weren't
      r20838: Small fix from Jiri.Sasek at Sun.COM to fix null
      r20840: Keep removing the old BOOL ok logic.
      r20841: Remove more BOOL ok.
      r20842: Only one more BOOL ok to go...
      r20843: Get rid of last BOOL ok.
      r20844: Somewhat radical change - this may break the build (I will
      r20845: Somehow I missed this one - should have been part of the
      r20857: Silence gives assent :-). Checking in the fix for
      r20873: Some correctness fixes w.r.t. Samba4 torture BASE-DELETE.
      r20880: Fix memory leak in new sitename code. You got *really*
      r20883: W00t! I now understand how "delete on close" really
      r20912: Ensure the list always remains sorted even when
      r20913: Fix the build.
      r20914: Sync up incorrect differences between 3.0.24 and 3.0
      r20915: Fixed the bad merge from 3.0.24.
      r20916: Add in the delete on close final fix - but only enabled
      r20917: Fix missing error returns pointed out by "Li, Ying (ESG)" <ying.li2 at hp.com>
      r21035: Remove unneeded checks on incoming uid/gid for
      r21047: Hand marshalling hack from Martin Zielinski <mz at seh.de>
      r21049: Start to refactor some of the setpath set code
      r21050: Factor out SMB_SET_FILE_DISPOSITION_INFO. My
      r21051: More function refactoring... Added #if 0 for
      r21052: Refactoring.
      r21053: More refactoring and fix the tests (set position info
      r21054: More function refactoring.
      r21057: More refactoring into functions.
      r21058: Finish the easy refactoring - split out all the case
      r21060: Start refactoring out the non-return case statements
      r21061: Refactoring all the cases into NTSTATUS returns.
      r21062: Should fix the build plus make all refactored
      r21063: All case statements are now NTSTATUS returning
      r21067: Finished refactoring setqpathinfo to be readable
      r21096: Fix formatting.
      r21097: Ensure that when manipulating UNIX permissions via
      r21099: Protect ourselves from null pointer deref. This isn't
      r21100: Add the RPC hack fix to adddriver as well as adddriverex.
      r21101: Remove "unused" warning from Jerry's code. We still
      r21128: Fix Vista connecting to Samba in share level security.
      r21129: Fix from Martin Zielinski <mz at seh.de> - ensure
      r21164: Fix from Martin Zielinski <mz at seh.de> for EnumprinterdataEX
      r21166: Ensure we return the correct "EROFS" error on a non-writable
      r21191: Add in the POSIX open/mkdir/unlink calls.
      r21207: Make the code match the spec :-).
      r21210: Fix POSIX open to return an info level.
      r21223: Try and fix bug #4361 - Vista backup fails.
      r21225: Couple of fixes from Martin Zielinski mz at seh.de,
      r21226: Fix bug #4377 (rename of "foo" -> "Foo" fails).
      r21227: Quick fix for Stevef - ensure the returned data on open
      r21228: Fix for fd leak on error path. Thanks to
      r21229: Don't indirect through a potentially null pointer :-).
      r21246: Remove incorrect control on unix set info.
      r21247: In the refactoring I dropped a RESOLVE_DFSPATH call
      r21257: Better fix for bug #4188 :
      r21259: Fix coverity bug id #340. No way to process
      r21274: As we now have POSIX opens which can unlink
      r21346: FIXME ! Our parsing here is wrong I think,
      r21383: More possible "security=share" fixes. If a client
      r21417: Janitor for Herb. Make sure sharesec.c is functionally
      r21460: Fix for server-side processing of SPNEGO auth
      r21474: Ensure trustdom_cache_shutdown() gets called
      r21478: Add 65k length limit for split SPNEGO blobs.
      r21480: Make fd_open match fd_close be translating
      r21481: No one said anything, so I'm disallowing anything
      r21482: Use IPC$ not ipc$ for consistency.
      r21483: Fix use of uninitialized variable.
      r21529: Fix warning from bad cast.
      r21530: Don't code with jet-lag and Volker looking over your
      r21566: If we're going to be broken, at least be *consistently*
      r21569: Fix bug reported by Martin Zielinski <mz at seh.de>
      r21576: Patch based on work from Todd Stecher <todd.stecher at isilon.com>
      r21577: Remove unneeded #define (part of earlier patch that was
      r21603: Horrible backwards compatibility hack as an old server bug
      r21604: I got this wrong also in libsmb :-(.
      r21605: Fix small typo noticed by Raúl Sánchez Siles <rss at barracuda.es>.
      r21608: Fix a couple of memleaks in error code paths before
      r21609: Fix memory leaks in error code paths (and one in winbindd_group.c).
      r21638: Change POSIX_UNLINK to allow clients to differentiate
      r21639: Add in implementations of POSIX open/mkdir/unlink/rmdir.
      r21640: Fix the build for broken platoforms without O_DIRECT or O_DIRECTORY.
      r21641: Add test code for POSIX pathname calls into smbclient.
      r21643: Put the correct bits on the wire for posix_mkdir.
      r21644: Allow mkdir on platforms with no O_DIRECTORY.
      r21645: Make posix_unlink work - on open files too !
      r21646: Patch from SATOH Fumiyasu <fumiyas at osstech.co.jp>
      r21663: Fix from the Wine guys: Robert Shearman <rob at codeweavers.com>
      r21664: Fix #4425 - patch from Jason Mader <jason at ncac.gwu.edu>.
      r21665: Fix bug #4428 reported by Jason Mader <jason at ncac.gwu.edu>.
      r21666: (only in 3.0, not 3.0.25). Fix bad parameter to call.
      r21667: posix_unlink should break existing oplocks.
      r21672: The cannonical file access pattern should look like this :
      r21714: Change the VFS interface to use struct timespec
      r21715: Fix torture utime code.
      r21724: Optimization pointed out by Volker. If we don't
      r21725: Fix for memalign used without test guards. Was
      r21726: Fix stupid cut-n-paste typo. Thanks to volker for
      r21731: Fix long-standing bug in our chain processing code.
      r21734: Fix bug #4369. Patch from David Leonard <dleonard at vintela.com>.
      r21750: Sync up with SAMBA_3_0_25. Only client changes are in libsmbclient
      r21754: Volker is completely correct. There's no need for
      r21755: Memory leak fixes from Zack Kirsch <zack.kirsch at isilon.com>.
      r21756: An invarient the dfs code depended on for POSIX paths
      r21758: Fix a very specific dfs bug when passing in POSIX
      r21759: Fix the same bug in a more elegant way, strrchr_m
      r21764: Fix warning in debug comment.
      r21768: Fix the client dfs code such that smbclient can
      r21769: Attempt to fix bug #4384 in old search code.
      r21770: For old DOS style searches we must remember if
      r21777: As Stevef requested and the Apple guys agreed, make
      r21783: Add in the "create info" field to the reply
      r21792: Fix crash bug triggered by Excel reported by Jerry.
      r21800: Check-in the DFS rewrite. I am still testing this but it
      r21803: Missed part of patch to make self-referrals work.
      r21845: Refactor the sessionsetupX code a little to allow us
      r21846: Try and fix the Darwin build which seems to have a strange krb5.
      r21847: Fix memory leaks in error paths (and in main code path in one case...)
      r21850: After Jerry explained to me the HORRIBLE way in which
      r21863: Fix debug messages with incorrect function name.
      r21864: Reformatting.
      r21865: Add in the stubs for SMB transport encryption. Will flesh
      r21874: Fix missing notify function. Thanks to Thomas Bork <tombork at web.de>
      r21876: Start adding in the seal implementation - prototype code
      r21877: Missed one line.
      r21880: Make client and server calls into encryption code symetrical,
      r21882: The server part of the code has to use an AUTH_NTLMSSP struct,
      r21883: Try and fix the build by removing the prototypes for
      r21891: Finish server-side NTLM-SPNEGO negotiation support.
      r21894: Some refactoring of server side encryption context. Support
      r21897: Add in a basic raw NTLM encrypt request. Now
      r21898: Added test command, fixed first valgrind bugs.
      r21899: At least we're getting to stage 2 of the blob
      r21900: Token exchange now seems to work, now why does the
      r21901: Don't use fstrcat when you mean fstrcpy. Doh !
      r21902: Don't free the thing you're trying to set in the cli state.
      r21903: Get the length calculations right (I always forget
      r21912: There's no point checksumming the packet length
      r21916: Fix couple of "return" calls on void functions.
      r21917: Start to do the gss versions of sign+seal.
      r21922: Fixed the build by rather horrid means. I really need
      r21923: Add in the gss decrypt.
      r21925: Start to code up the gss acquire creds calls.
      r21926: Fix missing enum specifier pointed out by Don McCall @ HP.
      r21927: Removed unused variable.
      r21939: Fix missing initialization that
      r21942: Hoist by our own petard :-). Older smbclient binaries
      r21947: Fix the equivalent of memcpy(x, x, 16). Found
      r21948: Fix valgrind error in build farm samba3 smbtorture. We were
      r21952: Fix critical (!) error found by IBM checker.
      r21953: One format fix, clarify a condition that the IBM
      r21954: Someone misused a '!' instead of a '~' for a binary NOT
      r21956: Fix bug reported by don.mccall at hp.com for platforms
      r21961: Repair bug introduced by rev. 21960.
      r21963: Fix another uninitialized buffer used in test write - valgrind
      r21967: Add conversion from gss errors to nt status.
      r21968: Don't use gss-types in proto headers.
      r21969: Start working on the gss-side of the server negotiation.
      r21990: Stop messing with the signing engine just because
      r21991: I hate Steve French :-). Add support for encryption
      r21992: Fix keepalive processing when encryption turned on.
      r21993: Don't let keepalives interferece with sign or seal
      r21994: Ignore keepalives in the correct buffer (out not in :-).
      r21997: Implement the server side of gss seal negotiate.
      r22003: Fix from Jiri.Sasek at Sun.COM to wrap our krb5_locate_kdc
      r22010: Now I'm looking at mangling again, make sure
      r22011: As Metze suggested, use 0xFF 'E' <enc ctx> instead
      r22012: Ensure we use the same technique to pull the share mode
      r22013: Move to SSPI framing (sig first in NTLM).
      r22014: Make us pass RANDOMIPC test again :-(. This is an ugly check-in,
      r22015: Fix for memory leak from Steven Danneman <steven.danneman at isilon.com>
      r22016: Try and fix the build - move things out of proto.h
      r22017: After changing 2000 lines of this I think this is needed :-).
      r22042: Try and clean up my own mess using the API Volker
      r22045: As Volker noticed, skip_string's last argument is
      r22049: HPUX build fixes from <don.mccall at hp.com>.
      r22050: Fix a couple of off-by-one errors in the rap
      r22060: Fix for AIX quotas from Heinrich Mislik <Heinrich.Mislik at univie.ac.at>.
      r22062: Fix the parsing of info level 3. Flags is not a flags
      r22064: Fix the DFS code to work better with Vista clients. Allow
      r22065: First logic change I've found :-(. We were being too
      r22079: Tsk, tsk, Metze didn't compile before check-in :-).
      r22080: Fix directory recycle module bug #4486.
      r22096: become_root_uid_only() is unneeded - it's only used in
      r22097: Add detection for linux readahead() syscall.
      r22105: Added vfs_readahead module that appears to do wonderful things
      r22106: Fix the module name - it's vfs_readahead not vfs_linux_readahead.
      r22108: Fix from <don.mccall at hp.com> to try and fix the HPUX builds.
      r22111: Allow readahead params to use size suffixes as K,M, etc.
      r22112: Fix memleak pointed out by Steven Danneman <steven.danneman at isilon.com>.
      r22113: Fix core dump when configfile in same directory.
      r22122: Start to fix csc issue with Vista. Make smbd support
      r22123: Try and fix the csc (#4404) bug by supporting the extended
      r22124: Wow - NTCreateX sets the word count to 42, but returns 50 on
      r22128: Fix the pipe open response with EXTENDED_RESPONSE_REQUIRED
      r22129: Fix the nttrans create extended response for pipes
      r22132: I hate inefficiency. Don't call conv_str_size()
      r22145: Fix bug #4494 - reported by Kevin Jamieson <bugzilla at kevinjamieson.com>.
      r22154: Make struct smbdb_ctx an opaque pointer so users of the API
      r22155: Fixed warning #4498 from jason at ncac.gwu.edu.
      r22157: Fix bug #3634 - stop nmbd segfaulting with bad interface line.
      r22163: Pure reformatting. I hate 4 space tabstops :-).
      r22164: Fix missing lock count release in transaction cancel.
      r22181: Fix for EISCON in open_any_socket_out from William Jojo
      r22202: Volker is clever :-). Use TDB_NOMMAP to prevent any wild pointer
      r22205: Add some flesh to the bones of the cache validation code.
      r22206: Added boilerplate to be filled in for other validation functions.
      r22207: Fill in the validation functions. Now to test...
      r22209: Fix the storage of time_t -> make it 64 bits (use the
      r22210: Fix typo in testing for non-centry entries.
      r22211: Don't return a value from void functions !
      r22212: Cope with signature errors on sessionsetupX logins
      r22266: Fix bug #4512 - we were returning a volume label greater than
      r22276: Fix name -> servicename in messages.c
      r22282: Fix last few name -> servicename changes.
      r22285: Allow arbitrary bases in int and ulong parsing.
      r22291: Fix off-by-one in tconX parsing.
      r22327: Finish the gss-spnego part of the seal code. Now
      r22344: Correctly create sub-struct for GSS encryption.
      r22345: Only use new krb5 OID.
      r22349: Fix missing ) in #else path.
      r22350: Add some helpful debug messages.
      r22351: Making progress in tests...
      r22352: Wow - working gss SMB sealing !
      r22353: Fix bad #ifdefs.
      r22354: Make client select krb5 encrpyt if krb5 already on.
      r22355: Ensure we get good debug messages from gss_XX calls.
      r22358: Use gss error to NTSTATUS mapping function for errors.
      r22389: Start preparing for multiple encryption contexts in the
      r22391: Looks bigger than it is. Make "inbuf" available
      r22481: Move check for non-mappable SIDs to after sid_to_uid,
      r22490: Fix a couple of bugs found whist investigating CSC Vista issues.
      r22491: Fix the build (3.0.25 and 3.0 are different here).
      r22492: Add objectid code.
      r22493: Fix horrible memory corruption bug with CIFS POSIX open/mkidr.
      r22502: Fix bug #4536 - delete symlinks to a directory correctly.
      r22539: Added _strict varients of the talloc calls to
      r22540: Added _strict varients of the macro calls - added
      r22541: Added talloc_size_strict macro.
      r22542: Move over to using the _strict varients of the talloc
      r22543: Fix bad call to talloc_strict (too few args).
      r22555: Ensure our paranoid malloc functions return NULL on
      r22564: Move the _strict -> _zeronull functions into lib/util.c
      r22573: Fix old bug mixing free() and talloc_free()
      r22574: Fix reply when we have no dfs shares.
      r22576: Fix marshalling bug in aliasmem.
      r22577: Change all of parse/*.c to use standard form. Fix some
      r22585: Get us into a consistent state with TALLOC_ZERO_ARRAY also.
      r22586: Add a modified version of Simo's patch.
      r22587: Ensure TALLOC_ZERO_ARRAY is consistent.
      r22588: Make all uses of TALLOC_MEMDUP consistent.
      r22589: Make TALLOC_ARRAY consistent across all uses.
      r22590: Make TALLOC_ARRAY consistent across all uses.
      r22591: Fix up the examples also.
      r22592: Fix TALLOC_SIZE to be consistent.
      r22593: Finish doing the same for raw TALLOC.
      r22611: Fix from Jens Nissen <jens.nissen at gmx.net>. Fix bad
      r22673: Fix for Jerry's reversion. We still need to check size
      r22675: Simo's patch for 0 size allocation. Still need
      r22676: Fix zero alloc with create_rpc_blob().
      r22754: When processing a string, ensure we don't write one past
      r22765: Fix from Alison Winters <alisonw at sgi.com> for missing return
      r22812: Fix bug #3024 (and also the group varient). Patch from
      r22872: Add vfs_zfsacl module from Jiri Sasek <Jiri.Sasek at Sun.COM>.
      r22920: Add in the UNIX capability for 24-bit readX, as discussed
      r22922: Move "normal_read:" label out of ifdef guard. Fix the build.
      r22923: Fix runaway smbd now receive_smb_raw() returns a ssize_t not a BOOL.
      r22924: Fix the build by correctly processing readX
      r22925: Sync read_and_X with 3.0.26 code (use setup_readX_header()).
      r22926: Don't use <=0, use < 0 to allow keepalives to propagate up.
      r22950: Fix the issue Volker reported here :
      r22956: Fix security=server (bug #4622). Volker's patch
      r23005: If we're running on a system where time_t is 8 bytes
      r23006: Arg. Fix stupid typo in 64-bit path.
      r23007: Ensure we don't allow large read over the possible
      r23014: For all branches, ensure that if we're blocked on a POSIX
      r23016: Remove extra & - thanks to Volker for spotting this.
      r23080: Fix bug #4637 - we hads missed some cases where
      r23087: Fix POSIX setfilepathinfo to use lstat, not stat.
      r23088: Fix rename for cifsfs client. This may be needed for
      r23100: Implement the delete on close semantics I've just tested for
      r23105: Add lchown to the vfs layer. We need this in the POSIX code.
      r23106: Use lchown for symlinks.
      r23107: Fix renames on file descriptors that are supposed to overwrite the
      r23122: Fix bug #4655. We marshall the enumdataex correctly,
      r23147: Patch #4566 from jacob berkman <jberkman at novell.com>. Pass password data to krb5_prompter.
      r23148: Fix old old bug in cli_smbwrite() (not incrementing
      r23150: Fix Samba3 in the build farm again. In the case where the
      r23151: Re-arrange the logic so it looks identical to the
      r23272: Fix main event loop - reviewed by Volker.
      r23341: pdb interfaces should be versioned. As SAMBA_3_0 and SAMBA_3_0_26
      r23342: Stop Coverity from getting confused.
      r23345: Stop Coverity from getting confused.
      r23346: Fix offline caching with XP/Vista. It was an off-by-one
      r23347: Fix Coverity 363. Dead code elimination.
      r23348: Fix connection reporting on SIGUSR2 (noticed by
      r23349: Fix from Steve Langasek <vorlon at debian.org> to
      r23357: timespec_current() was returning the wrong ns time
      r23358: Fix from Justin Maggard <jmaggard at infrant.com> - ensure we don't
      r23359: Fix bug #4537, fix from jens.nissen at gmx.net.
      r23370: Traverse in tdb wasn't consistently using the
      r23371: Fix the misleading comment I added - it really *should*
      r23372: Remove restriction on string length for rpcclient commands.
      r23390: First part of the patch to make Apple's life easier.
      r23391: Second part of the patch for Apple.
      r23400: Fix lsa crash bug #4683. The "names" enum struct
      r23402: Got bitten by a talloc hierarchy. Make sure we alloc
      r23424: Thanks to Jerry, we finally tracked down the :
      r23425: Volker noticed this obvious fix for the wins server
      r23445: Fix suggested by Volker. Don't call rename_open_files
      r23447: Add kill signal to child dead path. After talking
      r23448: Doh ! Don't call winbind_child_died() *before* the
      r23450: max_params_return is complete fiction when getting a changenotify
      r23508: Fix sync_file() to return NTSTATUS and return this
      r23512: Fix conflict in #define for SECDESC_PREFIX. Ensure all
      r23513: Fix one more use of VALUE_PREFIX.
      r23514: Remove unused function ads_get_dn_from_extended_dn().
      r23515: Ensure status isn't used uninitialized.
      r23516: Fix bug found & fixed by Doug Rudoff (doug_rudoff at isilon.com)
      r23530: Fix bugs #4678 and #4697 which had the same root cause.
      r23550: Add more UNIX error -> NT status mappings.
      r23554: Fix bug #4711 by makeing cli_connect return an NTSTATUS.
      r23555: Fix some uninitialiazed variable uses.
      r23556: Fix for error path from Atsushi Nakabayashi <nakabayashi at miraclelinux.com>.
      r23572: Ensure we obey Unicode consortium restrictions. Code
      r23573: Cope with terminating winbindd children on read/write/timeout
      r23574: Remove double-null check (I hate people bitching at me
      r23577: Fix winbindd (sorry). Ensure I set the new child_pid
      r23589: Ensure we will always release any timeout handler
      r23590: Fix realloc leak on failure case from Jim Meyering  <jim at meyering.net>.
      r23591: Fix bug #4725. Don't crash when no eventlogs specified. Needs
      r23620: Convert set_nt_acl to return NTSTATUS. Also fix the chown
      r23640: When we support the SeSecurity privilage, this is where
      r23663: Fix bug #4308 - Excel save operation corrupts file ACLs.
      r23664: Fix incorrect index - should be j not i. How did we ever
      r23673: Check for integer wrap on incoming data.
      r23688: Fix bug #4759 reported by Raul <ismell at ismell.org>.
      r23692: Couldn't wait, sorry :-). Did the style change.
      r23728: First part of bugfix for #4763. Limit notify responses
      r23735: Second part of the bugfix for #4763
      r23736: Use local variable of smb_flag2 instead of using the macro every time.
      r23752: Fix bug introduced by checkin 22920, allow large
      r23778: Change to GPLv3. Now to go through all internal source
      r23779: Change from v2 or later to v3 or later.
      r23780: Find and fix more GPL2 -> GPL3.
      r23843: Fix bug #4777, reported by Bill Marshall <bmarsh at us.ibm.com>.
      r23844: Add patch series from Volker (after review and consultation).
      r23845: Second part of the fix for #4777. Looks like on AIX opendir
      r23846: Belt-and-braces on the msdfs bug. Ensure ELOOP maps
      r23847: As Dr. Volker says, "A pstring a day....".
      r23855: Setting the allocation size updates the modified time
      r23856: Add Jiri.Sasek at Sun.COM;s fix from Axel Apitz for ZFS ACLs.
      r23858: Added srvstr_pull_buf_talloc() and srvstr_pull_talloc()
      r23902: Fix uninitialized read in devicetype noticed by Volker.
      r23906: Fix POSIX unlink bug found by Steve. If we
      r23908: Fix bug with interaction of optimization with
      r23909: Get closer to passing the cthon tests for delete open file.
      r23910: We used to deny renames on the
      r23911: Revert r23910 to try and fix the build farm. I
      r23913: Revert back to Volker's original logic to fix the
      r23935: We were lying to the client in the case of POSIX_UNLINK
      r23939: Fixes for notify returns. Returned param value must fix inside
      r23940: Added missing line that was deleted accidently.
      r23941: Don't use "False" when you mean "MARSHALL".
      r23942: Fix issue found by Shlomi Yaakobovich <Shlomi at exanet.com> where
      r24036: Fix dfs rename bug in smbclient reported by Thomas Bork <tombork at web.de>.
      r24164: Fix for write cache corruption bug reported by Jean-Francois Panisset <panisset at A52.com>.
      r24253:  From Jan Martin <Jan.Martin at rwedea.com>.
      r24281: Fix bug found by Herb. The vuid entry in the cli_state structure gets
      r24386: Piss off Volker (not deliberately) by checking in a reply_mknew -> conversion.
      r24387: Convert readbraw to the new api. Volker, keep checking in
      r24445: Convert SMBwritebraw. No test suite unfortunately.... I need to write one for this.
      r24464: Now Volker removed the readbmpx we don't need cached errors any more.
      r24467: Do range checking on incoming smb request.
      r24468: Don't forget the +4 for length :-).
      r24470: Start fixing up the mapping of OBJECT_NAME_COLLISION
      r24474: Map error value NT_STATUS_OBJECT_NAME_COLLISION
      r24475: Fix the error mapping for SMB_POSIX_PATH_OPEN.
      r24476: Fix the mappings in reply_opeXXX calls. Now to test renames.
      r24498: More extra code into a function, reply_openerror.
      r24500: Add check that bcc is correct in an incoming packet.
      r24501: Added bcc test for reply_tcon & removed Vl's comment :-).
      r24589: Refactor our vuid code so that we keep the same
      r24590: Reformatting to coding standards. Added my (C) in places it already should
      r24638: Remove redundent setting of vuid.
      r24639: Add parameter "directory name cache size" - parameterize
      r24759: Comment out the _nonnull calls for 3.2.x, as agreed with tridge.
      r24762: Fix the build, missed TALLOC_SIZE -> talloc_named_const.
      r24764: Fix second TALLOC_SIZE definition. Still watching the
      r24791: Fix logic error in timeout of blocking lock processing found by
      r24808: Fix the same problem Volker noticed.
      r24811: Simple reformatting to fit the 80 columns rule.
      r24813: Reformat to 80 columns.
      r25009: Large patch discussed with Volker. Move unix_convert to a talloc-based
      r25011: We don't use mangle_map any more.
      r25019: Fix coverity bug #105, run #332. Use of uninitialized variable.
      r25020: Fix coverity #374, possible null deref.
      r25021: Fix coverity #435. Use of -1.
      r25022: Fix coverity #395. Resource leak on error.
      r25023: Coverity #455. Not actually a bug, but this clarifies
      r25102: Rewrite msdfs code to use talloced filenames. Passes make test
      r25103: Ensure we don't return unwritten memory (valgrind caught).
      r25104: Fix extra lines added by mistake.
      r25111: Move to talloced pathnames on most code paths.
      r25116: Fix talloc_asprintf_append to do the right thing with
      r25117: The mega-patch Jerry was waiting for. Remove all pstrings from
      r25118: More pstring elimination.
      r25119: Fix a couple of warnings.
      r25120: One more warning.
      r25121: Remove pstring limits from much of our string handling function.
      r25136: When tallocing a string to uppercase remember the terminating
      r25138: More pstring elimination. Add a TALLOC_CTX parameter
      r25141: More pstring removal.
      r25163: Fix wrong ctx passed to talloc_asprintf_append().
      r25164: Add talloc_asprintf_append_buffer() and the docs for it.
      r25165: Use talloc_asprintf_append_buffer with an unmodified
      r25167: Fix breakage from mangling rewrite. Use the
      r25170: Remove pstring limits from ms_fnmatch and module load.
      r25171: More pstring removal.
      r25172: Remove commented out code we will never enable.
      r25173: Use the append_buffer version in a loop.
      r25195: Fix issue with calling pull_uc2_*alloc with
      r25199: Remove pstring from strdup_upper - make it the
      r25222: Fix last assumptions that (size_t)-1 can be used
      r25238: Make the error returns from the string functions
      r25273: unistrX_to_ascii calls pull_ucs2 - ensure it's never
      r25277: Belt-and-braces approach to Volker's fix for RPC-SAMBA3-GETUSERNAME.
      r25309: Volker's fix for bug #4984 - samba4 torture test
      r25389: Fix crash bug using DFS info struct uninitialized.
      r25391: Fix bug #4978 : Store DOS Attributes fails when copying folders.
      r25399: Excise uint - > uint32 (where appropriate) or unsigned int.
      r25406: Make the Linux nss client code thread-safe.
      r25431: Add detection for IPv6 support.
      r25445: Fix IPV6 detection.
      r25455: Ensure we have inet_ntop and inet_pton available in lib/replace.
      r25472: Fix the interfaces code to detect IPv6 interfaces, using the
      r25473: Reformatting only. Prepare for new ip functions.
      r25474: Try and fix the build on Mac OS X 10.4.9.
      r25475: Fix braindead mistakes I made pointed out by Simo and
      r25476: Finally fix up new interface detection code :-).
      r25487: Try fix the build - fix socklen_t and sa_family_t.
      r25492: Start adding IPv6 compatible code to lib/util_sock.c and deal with
      r25495: Fixup definitions for missing sockaddr_storage.
      r25505: Add a replacement (IPv4 only) implementation of getaddrinfo/freeaddrinfo
      r25507: Fix definition of struct sockaddr_storage if
      r25508: Reformatting.
      r25510: Now we're returning the port instead of using a global,
      r25511: Fix sockaddr_in6 detection.
      r25560: Merge from Jelmer. "Define HAVE_* for other gai functions to prevent problems with libroken."
      r25565: Fix unintended consequence change for IPv6 noticed
      r25587: Fix getaddrinfo detection code. From Timur.
      r184: Fix UNIX Search info level. This still needs to be added to the raw
      r189: Added UNIX search into tests - added client library parse code.
      r203: Added size and alloc size tests to UNIX info level.
      r204: Turns out that the string in the SEARCH unix_info level is that
      r741: Test from Volker in RAW-OPEN for truncating a file containing locks.
      r863: Added test to ensure an open and locked file can be truncated by a second open.
      r865: Regression test for attribute-only opens not causing an oplock break.
      r946: Updated attribute only oplock tester to cover more cases.
      r1086: Add defer open test to check timeout on sharing violation open.
      r1091: Added in timing tests for deferred opens. Added extra debug info to signing
      r1098: Extended raw chkpath to catch regressions.
      r1113: Test for wildcards in chkpath.
      r2034: Allow user-selectable hash functions on open only.
      r2151: Added some more ad-hoc tests. Found bugs in Samba3 with these :-).
      r2212: Optimisation. Passes masktest against W2K3.
      r2217: Ad-hoc tests to allow me to work out the correct error code
      r2981: Fix incorrect locks/unlocks in tdb_lockkeys()/tdb_unlockkeys().
      r2997: Added delete on close tests for readonly files.
      r3295: Fix for SMB signing with 56-bit DES session keys. From Nalin Dahyabhai <nalin at redhat.com>.
      r3886: Trying to understand delayed file write update times. Added another
      r3887: Much better understanding of delayed write time, and the interaction
      r3888: Just proving :-) to tridge that a Setfileinfo with a modified
      r5068: I'm pretty sure an old search request is allowed to return changed case
      r5071: Reverted (per tridge request).
      r5533: Patch to detect infinite loops when traversing a tdb from "Shlomi Yaakobovich" <Shlomi at exanet.com>
      r5730: More fun with delayed write semantics with multiple file handles
      r6093: Patch to fix sys_select so it can't drop signals if another fd
      r6238: Ensure if realloc fails on an internal
      r6975: Test opening filenames with control characters in fails
      r7178: If we're using one process in NETBENCH simultion only open one
      r7180: Missed fixing the shutdown for 1 process...
      r7641: Fix based on work from  "Shlomi Yaakobovich" <Shlomi at exanet.com> to catch
      r8174: Check DOS error codes in torture chkpath test.
      r10132: Confirm that openX with OPEN_EXEC implies read only.
      r10138: Fix the mapping table (as tested in smbtorture). EXEC_ACCESS
      r10879: Added the ZERO_STRUCT(q_u), (r_u) entries to the generated
      r10880: Missed terminating ';', sorry.
      r11076: Still working on bug #1828, PPC hell. The PPC client sends the
      r11080: Narrowing down on the #1828 PPC bug. The PPC client sends an
      r11081: Remember to remove unused variables.
      r11616: Replace old crc32 code with one from the FreeBSD tree.
      r11797: Added OpenSSH fix for "%.*s" format crash. From Darren Tucker
      r13270: Add tests for even more insane delete-on-close semantics.
      r13271: Do the same tests with directories.
      r13272: Re-arrange so all the normal tests we can pass come first.
      r13275: With a liberal sprinkling of smb_raw_exit this
      r13297: It's a good thing the shipment of function headers tridge
      r13370: Added deltest21 - pull the rug out from a connection by socket
      r14029: Fix resource leak in error codepath. Coverity CID #64.
      r15946: Added check that proves that setpathinfo on an
      r15947: Do the same test on setting allocation info.
      r16761: Added additional NTSTATUS and DOS error test for "."
      r16843: Confirm that openX uses the same mapping table as getatr.
      r17099: Samba3 now passes RAW-LOCK completely, no need for
      r17139: Checking in Volker's extended oplock test.
      r17141: Prove that create dispositions with truncate and
      r19208: Fix Samba3 pidl generation to remove memory leaks.
      r19960: Add code to check for loops in the free list.
      r22539: Added _strict varients of the talloc calls to
      r22540: Added _strict varients of the macro calls - added
      r22541: Added talloc_size_strict macro.
      r22563: As tridge requested remove the _strict calls - for Samba3 I'm moving
      r23099: New interesting delete on close tests :-).
      r23103: Add a torture test for the insane semantics Steve's cifsfs client
      r23104: Add comment explaining the new test.
      r23370: Traverse in tdb wasn't consistently using the
      r23371: Fix the misleading comment I added - it really *should*
      r23590: Fix realloc leak on failure case from Jim Meyering  <jim at meyering.net>.
      r23734: Add a test to prove tridge's theory that the mask, once set
      r24469: Start adding in the torture tests that prove that NT_STATUS_OBJECT_NAME_COLLISION
      r24473: Prove this is also the same for NTcreateX. It's pretty much
      r24477: Add a rename test to prove that NT_STATUS_OBJECT_NAME_COLLISION
      r24478: Check that NTrename also maps NT_STATUS_OBJECT_NAME_COLLISION
      r25116: Fix talloc_asprintf_append to do the right thing with
      r25164: Add talloc_asprintf_append_buffer() and the docs for it.
      r25175: Change to talloc_asprintf_append_buffer().
      r25586: Fix getaddrinfo detection - from Timur.
      Fix valgrind-found memory overwrite.
      Merge branch 'v3-2-test' of git://git.samba.org/samba into SAMBA_3_2
      Merge from metze of libreplace header changes
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into SAMBA_3_2_0
      Add start of IPv6 implementation. Currently most of this is avoiding
      Added missing is_ipaddress is_ipaddress_v4 not in initial
      Add const to the get_peer_addr() and get_socket_addr()
      Try and fix segfault found by Guenther on Fedora. Fedora
      Convert get_peer_addr() to IPv6. Only is_myname_or_ipaddr()
      Dummy formatting commit to check I've set up my home git
      r16245: Cope with string being zero len. Klocwork bug #410. Jeremy.
      r16320: Ensure variable is not null before calling fclose. Klocwork #412. Jeremy.
      Fix warning messages for unused variables.
      Move to protocol independent code in most of lib/util_sock.c
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Fix access control code to be IPv6/v4 protocol independent.
      Added in missing def for AI_ADDRCONFIG.
      Move #defined for getaddrinfo into network.h (as other
      Improve IPv4 detection.
      Reformatting fix for new coding guidelines. BOOL ->bool.
      RIP BOOL. Convert BOOL -> bool. I found a few interesting
      Fix the popt / bool issues. Some places we used BOOL
      Fix for AIX interface code from Kyle Stemen <kstemen at centeris.com>
      This is a large patch (sorry). Migrate from struct in_addr
      We do support name lookups for host and service in our replacement
      Don't terminate on an invalid address family.
      Ensure we don't terminate if we fail to bind to a socket,
      Try and fix the Solaris build by adding a missing define
      When doing reverse lookups actually look up the name, not
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Fix reversed bool check for access. Found by kukks.
      Fixed missing in_addr -> sockaddr_storage conversion (how did
      Fix cast typo - would have broken all dgram sends.
      Fix a mismatched interface where we were using
      Fix resolve name to resolve IPv6 addresses of link-local%ifaddr
      Fix bug in writing names into gencache
      Fix a few more sockaddr -> sockaddr_storgage.
      Move the horrible hack for link local addresses out of namequery.c
      Fix popt bool problems (need POPT_ARG_NONE, not POPT_ARG_VALUE).
      Ensure temporary memory is freed - pointed out by "Li, Ying (ESG)" <ying.li2 at hp.com>.
      Fix zero_addr(&ip, INADDR_ANY); -> zero_addr(&ip, AF_INET)
      Change all occurrences of zero_addr(&ss,AF_INET) to
      Change our DNS code to cope with AAAA records. A6 records
      Fix the setup_kaddr() call to cope with IPv6.
      Add in the recvfile entry to the VFS layer with a default
      Forgot to add recvfile.c
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Our userlevel SMBwriteX call is non-standard in that it
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Add new parameter, "min receivefile size" (by default set
      Ensure we don't prematurely clean out the bytes read.
      Handle the disk full error case correctly.
      Make explicit draining the socket on RECVFILE. Add
      Add printout of large read/write caps if detected.
      Fix vfstest link - move socket calls into smbd/process.c
      Fix some cases where file_set_dosmode was being passed
      Note when we're setting change time, not write time, and send
      Add missing recvfile_bytes element - noticed by Kukks.
      Add brackets so as not to break the POSIX caps return.
      Ensure we detect a large writeX when using recvfile.
      Be careful and take care of the correct lengths in large
      Ensure we can't accidently do a pipe write with
      Fix state_path to take a const string, not use pstring.
      Fix Solaris by ensuring we use the IPv4 or IPv6 length
      Argggh. smblen doesn't include the +4, so my smb_doff calculations
      Forgot one more getnameinfo.
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Change the client library to write directly out of
      Fix typos in calc_sa_size, noticed by jim.brown at miami.edu
      Ensure we use the correct socklen_t values for bind() for
      Fix the snprintf checks, and fix a typo in pointer indirection.
      Remove unused var noticed by metze.
      Remove the smb_read_error global variable and replace
      Stop get_peer_addr() and client_addr() from using global
      I can't get away without a 'length' arg. :-).
      Missed one case where I need to pass down addrlen.
      Remove more static data from lib/util_sock.c and
      Remove most of the remaining globals out of lib/util_sock.c.
      Don't believe len returned from read_smb_length_return_keepalive(),
      Forgot arg type.
      Don't use 0 when we mean SMB_READ_OK.
      This should really be a cond_set_smb_read_error().
      Don't alloc struct iface_struct nics[MAX_INTERFACES]; (128 entries)
      Remove the horror that was the global smb_rw_error.
      Ensure we null out the address correctly.
      Ensure we don't use massive writes in pipe mode.
      Fix bug where tdb lock call interrupted with
      Keep the tdb code in sync with Samba4.
      Fix const warning.
      Fix tdbtorture build.
      Unify the name and addr cache for client_name to
      Constrain "min receivefile size" to max of BUFFER_SIZE
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Remove more fstring/pstring bad useage. Go talloc !
      Fix case where we have no dns domain name. Return a talloc of "".
      Remove unneeded variable.
      Remove more pstring/fstrings.
      More pstring/fstring removal.
      Remove more static fstring/pstrings. Fix socket option
      Remove pstring from service.c.
      Fix the build when realpath doesn't take null
      Remove last pstring from sesssetup.c
      Always define PATH_MAX. Makes code simpler (removes
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Remove a pstring.
      Three more pstring removals.
      Fix bug #5073. Allow "delete readonly = yes" to correctly
      Remove all pstrings from smbd/chgpasswd.c.
      Remove pstrings from lanman.c
      More pstring removal from smbd/*.c
      Remove last pstring from smbd/*.c
      Remove all pstring from groupdb/
      Remove pstring from param/
      Remove pstring from auth/*
      Remove smbldap_get_single_pstring() and all pstrings
      alpha_strcpy includes the space for the terminating nul.
      More pstring removal. This one was tricky. I had to add
      Fix bug noticed by kukks <linux at kukkukk.com> where
      Add MAX_DNS_NAME_LENGTH, remove more pstrings.
      Match the 3.0.27a version of this function.
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Fix bug #4393 smbclient does not store files with zero filesize in tar-archives
      Ensure we use PATH_MAX for symlinks.
      Remove pstring from modules directory.
      Remove pstring from nmbd.
      Always check return from push_ascii.
      Start to remove some of the pstring functions we're
      Remove more pstring. Unify talloc_sub functions to make
      Paranoia check that space_remaining never goes -ve.
      More trivial pstring removal.
      More pstring elimination.
      Ensure we have a talloc stackframe (found by Kukks).
      Remove pstring from services/*.c
      More pstring removal....
      Remove pstrcpy I missed.
      Add talloc stackframe for ntlm_auth.c
      Add set_sockaddr_port function for winbindd.
      Doh ! Don't use #else when #endif is needed.
      Remove pstring from printing/*.c except for the
      Remove pstrings from pam_smbpass - make local_password_change
      Remove pstrings from nsswitch/ and registry/
      Remove pstring from everything in rpc_server except
      Remove pstrings from everything except srv_spoolss_nt.c.
      Make init_unistr2_from_unistr take an explicit talloc context.
      Whitespace cleanup.
      Fix old cut-and-paste bug where the wrong field was being written to.
      Remove pstring from srv_spoolss_nt.c. All gone from rpc_server/*.c
      Save one extra strdup per lp_string. Use talloc_sub_basic()
      Remove unused prototype for smbldap_get_single_pstring().
      Fixed obvious typo.
      Remove pstrings from namequery.c.
      Remove pstrings from asn1.c.
      Remove unused code (and pstring).
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Remove pstrings. Ensure we validate offsets.
      Remove the explicit TALLOC_CTX * from cli_struct.
      Fix memleak.
      Remove PSTRING_LEN from smbd/ nmbd/.
      Remove pstrings from clifile.c.
      Add talloc versions of all the next_token() functions.
      Fix restart after length count.
      Removed all pstrings from libsmbclient. Derryl please
      Remove pstring from clirap.c.
      Whitespace cleanup.
      Ensure we have 2 bytes of zeros as a pad-buffer at the
      Fix missing error cleanup noticed by Derrell.
      Remove pstring from clirap2 by completely rewriting the damn
      Last pstring here.
      Change tdb_unpack "P" to return a malloc'ed string rather
      Remove unused wpstring and macros. Stop using pstrcpy in smbd/*.c
      Fix the build. fstrterminate was used in one place.
      Make strhex_to_str clear on string limits. Remove pstring from web/*.c
      Remove more pstrings, from the winbindd protocol def and
      Getting to the home stretch for elimination of pstrings...
      Don't forget to delete the stackframe.
      Gone from usershare.
      Fix crash bug with vl's new trans handling in old transs
      Fix signing bug found by Volker. That one was *subtle*.
      Back to pstring removal.
      Remove pstr_sprintf. Replace with snprintf.
      Allow STR_TERMINATE and -1 src_len for pull_ucs2_base_talloc().
      Remove pstrings.
      More pstring elimination.
      The usual !pstring...
      pull_ascii_pstring is gone.
      Remove tok pstring from util_str.c
      Remove pstring from automount lookups. Remove premature optimization.
      Ok, down to just the client/*.c code now.
      Fix sample gtk code. Does this compile ?
      More pstring removal.
      Remove arbitrary 1k limit on pathnames. Malloc them.
      pstring removal.
      Fix path length limits on cli_list (outgoing. Incoming
      Don't understand this. I have no changes here....
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Remove pstrings from client/client.c by doing a large rewrite.
      Fix clidfs.c compile.
      Make cmdline_auth_info private to lib/popt_common.c. Provide
      Add popt to binaries in makefile. Hack clitar to compile until I fix it.
      Get closer to building with smbmount. Move parameter line changes
      Missed smbmnt popt.
      Fix typos in auth change.
      Make all the tools use the proper accessor functions.
      These should be char *, but replace them with [1024] for now
      Fix the '-N' option.
      *Really* fix the no password -N opt :-).
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Remove pstring from clitar.c
      Remove pstrings completely except for smbctool (what does this do ?).
      Don't double define fstring.
      Fix call to clistr_pull_talloc.
      Don't build rpctorture anymore - not maintained. Just remove.
      We don't need P_GSTRING or P_UGSTRING anymore.
      After conversations with Jerry, remove smbctool until it's
      Don't deref null pointers.
      More null deref fixes.
      More null deref fixes.
      A requiem for pstring.
      Remove next_token - all uses must now be next_token_talloc.
      Add define guards around FSTRING_LEN.
      Many systems don't have sa_len as part of struct sockaddr.
      Remove the char[1024] strings from dynconfig. Replace
      Forgot build options was generated... fix.
      Fix return values for invalid printers. Found by kblin
      Fix bug leftover from pstring conversion noticed by ceez
      Fix errors from next_token conversion. Spotted by
      Ensure we have a non-null flags. Pointed out by Andreas Schneider <anschneider at suse.de>.
      Don't need an fstring here, we can talloc.
      Add patches for bug #4866 from jiri sasek - Sun Microsystems - Prague Czech Republic <Jiri.Sasek at Sun.COM>
      Fix warning message about data type always true.
      Allow cliconnect to loop through multiple ip addresses
      Fix bug #3727 with patch from Steve Langasek <vorlon at debian.org>
      Fix the buildfarm until I figure out how to allow
      Only add the non-root escape on !developer.
      Developer doesn't cut it - need #define test for NSS_WRAPPER.
      Fix bug #4784. Patch from Steve Langasek <vorlon at debian.org>.
      Add a portable version of strlcpy and strlcat and convert
      Missed one strcpy call.
      Arg. The fix for CVE-2007-6015 hadn't been merged into 3.2.
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Add a varient of Steve Langasek <vorlon at debian.org> patch
      We don't need to call endpwent if we never call getpwent.
      Fix for bug #5082 from Mathias Gug <mathiaz at ubuntu.com>, Steve Langasek <vorlon at debian.org>.
      More work on bug #5082, use LC_ALL as this takes
      Cope with valgrind > 3.2.x.
      Added patch originally by Andreas Schneider <anschneider at suse.de>
      Doh, fix typo in error exit.
      Remove a static fstring.
      Remove another static string and static passwd.
      Fix bug #5121 (unix passwd sync not working on a streams based
      Use the %*s feature of snprintf to remove anothe static fstring.
      More static fstring removal.
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Correctly define prototypes for accessor functions.
      Remove more static fstrings (yes this little cache should be
      More static fstring elimination.
      More static pstring elimination.
      Fix valgrind error in dbwrap_rbt where rec_priv->node was
      We've finished with the old node once we've copied the
      Remove another static fstring.
      Remove last_message completely as it's no longer used.
      Two more static fstrings gone.
      r25700: Now BOOL no longer exists in Samba 3.2, use bool instead.
      r25892: Keep the tdb code in sync between 3.2.x and 4.0.
      r25893: Fix ldb, tdb builds (and one warning).
      Fix making the new proto file after a distclean.
      Fix initialization warnings.
      Fix const warning.
      Fix build failure if symlink already exists.
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Actually fix the merge.
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Fix make test by adding winbind libs to vlp.
      Fix install - it was trying to install libnetapi.h whereas
      Add NT error to debug to try and track this down.
      If we detect a case insensitive filesystem make
      Add SMB encryption. Still fixing client decrypt but
      Encryption works better when you add the client decrypt code :-).
      Add CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP capability to
      Add "smb encrypt" parameter. Can be set to "no, yes, required".
      Add the capability to set "smb encrypt = required"
      Ensure we turn off POSIX large read/write if encryption
      Use correct size value for linearize call.
      Allow encryption context setup on IPC$.
      Added -e, --encrypt option to smbclient that immediately
      Fix error message.
      As the encryption is stream based there's no reason
      We may use 127k read/write for encrypted connections.
      Attempt to fix bug #3617. Mix of patches from Volker and
      Convert the little caches in util_sock.c to use
      Fix for bug #5163 from Laurent Pinchart <pinchart at skynet.be>
      Refactor the crypto code after a very helpful conversation
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Fix the build.
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Fix interesting bug found with make valgrindtest. When cancelling
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      We dont' modify the smb header for crypto anymore.
      Fix idle client reading keepalive.
      Now conn is part of smb_request, we don't need it as
      Added -e option to smbtorture to test encrypted versions
      Added -e tests for S3 smbtorture.
      Better way of testing enc.
      Add missing patch to allow smbcacls to do krb5 auth, bug #5175
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Try and fix the buildfarm. There's a scripting error and
      Try and fix scripting errors.
      "Desting" -> "Testing"
      Can't use logical operations on boolean values.
      Using a bool with a logical operation. IBM checker caught.
      More logical operations on booleans. IBM checker.
      More logical operation on bool.
      Add general '-e' option to enable smb encryption
      Fix args to cli_force_encryption.
      Use the common -e option not the custom one.
      Fix -e for smbcquotas.
      Add the options smb_encrypt_level to set the requested
      Add -e to smbget.
      Fix missing return - should be void.
      Fix %d / size_t printf arg missmatch.
      Move the DNS tsig update to using struct sockaddr_storage
      Correctly identify enc/non-enc packets.
      Simplify... plus add a debug message.
      Fix resource leak found by coverity (CID 521).
      Fix CID 460 - resource leak on error.
      Fix CID 461 - resource leak on error.
      ensure uni_name.buffer is initialised
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Ensure we don't take address of one past buffer.
      Try and fix the AIX build.
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Add the calls to make use of talloc_pools in a talloc_stackframe.
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Make use of talloc_pool in the main codepaths. Remove the sub-contexts.
      Fixup hot paths - add macro for toupper (c < 0x80).
      Don't print out debug messages at level 0 if we can't
      Don't switch user contexts unless you have to. Saves
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Sync tdb with the tdb changes in ctdb. Spoke to tridge about
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Ensure we don't access an uninitialized variable
      Fix CID 524 - reference before allocation fail null check.
      Fix CID 523 - wrong null deref check.
      Fix CID 505 - don't copy uninitialized memory.
      Fix CID 498. Ensure we don't prs_mem_free an uninitialized
      Stop Coverity complaining about uninitialized variables.
      Coverity 512, uninitialized var.
      Fix CID 476. Ensure a valid pac_data pointer is always passed to
      Fix CID 475. work should not be checked against NULL
      Fix CID 470. resolve_order can't be NULL here so simplify code.
      Fix CID 469. new_acct can't be NULL here.
      CID 458. Don't leak dlopen handles on failing to load
      From Alexander Bokovoy
      Windows insists on write sizes < max_xmit on signed connections.
      Always define PATH_MAX. Makes code simpler (removes
      Add MAX_DNS_NAME_LENGTH, remove more pstrings.
      Add patches for bug #4866 from jiri sasek - Sun Microsystems - Prague Czech Republic <Jiri.Sasek at Sun.COM>
      Fix bug #5121 (unix passwd sync not working on a streams based
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Fix "status used uninitialized" warnings.
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Fix the API exported for auth_functions. Ensure we call
      Port from ctdb:
      Fix IPv6 bug #5204, which caused krb5 DNS lookups
      Tidy up code and debug for non-default krb5 IPv6 port.
      Fix the mess that ab just made of the new VFS code.
      Fix bug found by Derrell - windows returns an read return
      Fix error message for new allinfo command.
      Actually test vl's new code and make it work to fix the build farm :-).
      Couple of minor fixes for POSIX pathname processing in the
      Forward ported version of Matt Geddes <musicalcarrion at gmail.com>
      Use strchr_m in seaching for '.' in the hostname to make sure we're mb safe.
      Don't leak memory in error path.
      First part of fix for bug #4929 - worked out by jmcd.
      The checks for OI and CI were just wrong.... Fix them. Thanks to
      Add debug messages to trace this if needed.
      Make explicit in debug we're ignoring flags from the parent SD.
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Fix missing error check that caused crash when winbindd not running.
      Correctly set flags in ACE's inherited from parent. Still one bug
      Fix a really subtle old, old bug :-). When canonicalizing the
      Fix the same bug with user -> user_obj.
      Ensure that convert_string_allocate() allocates 2 extra
      Fix a couple of "might be used uninitialized" warnings.
      The krb5 locator should now be correctly able to handle
      Small whitespace cleanup + check for null returns on talloc_strdup.
      Don't return true on talloc fail.
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Make operator precedence very clear.
      Fix bug reported on IRC enumerating shares with OS/2.
      Try and fix length and finfo calls for older clients. Working
      Fix warning and use of uninitialized variable.
      Fix bug #5247 "Wildcard expansion in mget is broken"
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      From kukks - prevent crashes if finfo.name == NULL.
      Make clilist work again with OS/2 (kukks help!).
      We don't need the extra null termination - we've
      Prevent "parameters" being used without initialization.
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Allow the mechOID to be written separately.
      Allow auth_ntlmssp_end() to ignore null pointers passed in.
      Ensure invalidate_vuid() deletes any ntlmssp state.
      Currently we don't SPNEGO negotiate back to NTLMSSP. Note this.
      Currently we don't SPNEGO negotiate back to NTLMSSP. Note this.
      Correctly use SPNEGO to negotiate down from krb5 to NTLMSSP.
      Fix "warning: 'cmd' may be used uninitialized in this function"
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      From: David Disseldorp <ddiss at sgi.com>
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Fix debug messages.
      Fix "used uninitialized" errors.
      Fix debug %lu message.
      Remove my change
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Fix from Guenter Kukkukk <linux at kukkukk.com> to fix listing against
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Updated comments on the encryption support.
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Don't define SMB_TRANS_ENC_GSS if we don't have KRB5.
      Fix the build - don't use SMB_TRANS_ENC_GSS without
      Fix part of bug #3617 from valgrind trace.
      Patch to fix the "Invalid read of size 4" errors. Bug #3617.
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Patch to fix the "Invalid read of size 4" errors. Bug #3617.
      client[ADDR_INDEX] is an IPv4 mapped to IPv6, but
      Fix bug #5267 - nmbd shuts down when network interfaces go down.
      Test trans2 renames with oplocks. It looks like trans2 renames
      Fix S3 to pass the test_raw_oplock_exclusive3 test.
      Samba3 now passes the test_raw_oplock_exclusive3 test.
      Try and fix bug #5315, as well as S4 torture tests RAW-OPLOCK BATCH19,
      Allow us to pass RAW-RENAME by testing that the connection struct
      Samba3.2 now passes a lot more tests - remove the S3 specific
      Metze pointed out this we don't need FILE_ATTRIBUTE_READ here.
      Using Metze's S4 nttrans rename test, the nttrans rename
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Added test_nttransrename() to test Metze's new code.
      Fix for termination problems when no interfaces found - bug #5267.
      Fix up the comments on security=share to explain we're
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Fix bug #5326 - OS/2 servers give strange "high word" replies for print jobs.
      Only allow sendfile on non-stream fsp's. Should fix make test for streams
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Fix missing '&&'.
      Reduce the race condition in Samba4 in RAW-RENAME test. We rename a file
      Move the message_dispatch() call after the check for errno on
      Ok, final move of this code :-). I think I've found the correct
      Fix MSDFS bug noticed by Ofir Azoulay <Ofir.Azoulay at expand.com>.
      Fix bug #5372. With a large CUPS installation with a remote server, contacting
      When using plaintext ucs2 passwords clistr_push calls ucs2_align, which causes
      Rewrite the wrap checks to deal with gcc 4.x optimisations.
      Use size_t for strlen return, not int. Karolin please
      Check x_fflush returns.
      Fix the last reported debian problem with nmbd not waiting
      Quieten valgrind message on make valgrindtest. This doesn't
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Fix bug #5386, don't keep printing the same waiting
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Fix gcc uninitialized variable used warning.
      Fix the problem when -L is used with IPv6 addresses. Don't try to
      Merge branch 'v3-2-test' of ssh://jra@git.samba.org/data/git/samba into v3-2-test
      Janitor for tridge. Keep lib/replace in sync with the gcc4
      Added docs for new parameters.
      Fix spelling mistake noticed by Chris Garrigues <cwg at deepeddy.com>
      Added description of "auto" option for case sensitive parameter.
      Added docs for case_sensitive command.
      sendfile is now on ...
      Ensure max ldap replication sleep time is 5 seconds.
      Add doc for "ldap timeout" parameter.
      Update to note hash2 is the default - noticed by Thomas Bork <tombork at web.de>.
      Updated with sepcifics of how we determine sendfile.
      Document new "stat file" command.
      More full explaination of the parameter.
      Add info on what to do with MS Visual Studio problems.
      Update default of dos filetimes to yes and explain why.
      Added docs for max stat cache size.
      Update max stat cache size parameter.
      Added "acl group control" docs.
      Added a few clarifications on map readonly parameter.
      Change dfree command to be a share level parameter.
      Added acl map full control docs.
      Document "acl check permissions" for 3.0.21.
      Fix typos.
      More corrections.
      Make us follow the newly documented pathname processing rules:
      Added documentation for 'F' option to tar. Needed before I fix it !
      Ok, correct docs for this option (-F).
      Document default change from "yes" to "auto".
      Starting docs for new parameters for 3.0.23.
      Better language and note it was added in 3.0.23.
      Add section describing usershares. Let me know if the
      Start documenting the usershare parameters.
      Fix typo in xml.
      Add "usershare max shares" parameter.
      "usershare owner only" docs.
      Add "usershare path" parameter.
      Update to per-share parameter in 3.0.23.
      Add usershare prefix allow/deny list docs.
      Added final usershare parameter documentation.
      Add documentation for :
      Fixup xml syntax errors (oops...).
      Make the default timeout parameter for lock waiting
      Update manpage to add "minsize" parameter.
      Update docs for #4486.
      Add docs for readahead vfs module.
      Document the fact this doesn't work with "security=server".
      Update "*securitymask* docs to match the code.
      Add "min receivefile size" docs.
      Make the smbclient man page match the internal command list.
      Note that the max value of this is 128k and it is
      Add "smb encrypt" to smb.conf.
      Add in the docs for -e and posix_encrypt commands.
      Document vl's new "allinfo" command.
      Make mount.cifs.c consistent with other Samba code usage w.r.t
      The first of Martin Zielinski <mz at seh.de> Vista printing patches.
      Fix from Martin Zielinski <mz at seh.de>. Don't delete files when
      Sync up client/mount.cifs.c with v3-2-test.
      Fix bug found by Igor Mammedov <niallain at gmail.com> where we are
      Fix typo noticed by David Disseldorp <ddiss at sgi.com>. AF_INET should be AF_INET6 in this case.
      Fix bug #5434 found by Ted Percival <ted at midg3t.net>.
      Tidyup to ensure '\n' is treated identically in all
      Start to ensure we use the NT ACL interface, keep the POSIX
      Move directory_has_default_acl() to file_access.c, belongs
      Rename inherit_access_acl() -> inherit_access_posix_acl() to make use clear.
      Remove the "stat_open()" function, flag, and all associated code. It was only
      Try and fix bug #5095, "Manage Documents privilege is not functional".
      Merge branch 'v3-3-test' of ssh://jra@git.samba.org/data/git/samba into v3-3-test
      Enable tests for splice on Linux. Add a static (vl, I hate this)
      Yay ! Remove a VFS entry. Removed the set_nt_acl() call,
      Fix bug #5452 - smbclient put always creates zero length
      Remove a couple of uses of SMB_VFS_GET_NT_ACL(), use
      Fix replacement getpass. If we ^C at the prompt echo was left off.
      Fix bug #5460. The problem is RHEL5.0 shipped a CIFS client
      Second part of patch for bug #5460. Cope with pathnames
      Fix debug message.
      Ensure we don't keep searching for sharename if it's
      Fix bug #5464. Pointed out by Herb @ Connectathon. In fork_domain_child() we call :
      Restructuring of code to fix #5460. Remove search
      Remove conn_find_byname now it's no longer used in
      Fix bug #5477 - recvfile code was broken.
      Convert in_transaction to a bool. Add the same fix Volker
      Convert in_transaction to a bool. Add the same fix Volker
      Fix bug #5479, print spool shares require max_xmit to
      Get rid of "shadowed local var" warnings with gcc.
      Fix 2 bugs with displaying open file state. Firstly
      Arggh. Got the path/user the wrong way around. IDL is correct :-).
      Arggh. Got the path/user the wrong way around. IDL is correct :-).
      Revert "Arggh. Got the path/user the wrong way around. IDL is correct :-)."
      Remove MAX_SESS_ENTRIES and MAX_CONN_ENTRIES limits
      Re-enable the evil "aio write behind" parameter.
      Allow server manager to close open files selected by id.
      Memory leak fixes from Chere Zhou <czhou at isilon.com>.
      A few cleanups from Chere Zhou <chere.zhou at isilon.com>.
      Security fix for CVE-2008-1105: Boundary failure when parsing SMB responses
      Fix winbindd on a PDC by reverting : 83b04c60fac76ccd2d5aecb14f8896a07d488b1f..6e66512d5beb256a44c6703cdb8c7fa7e0fd8537.
      From Michael R Sweet <mike at easysw.com>.
      Merge branch 'v3-3-test' of ssh://jra@git.samba.org/data/git/samba into v3-3-test
      Fix bug #5504. winbindd children and parent were handing SIGTERM in the same way - deleting the socket!
      Fix valgrind bug in debug statement. Don't reference uninitialized memory.
      Split the winbindd_passdb backend into a 'builtin' and a 'sam'
      Fix by Bo Yang <boyang at novell.com> for bug with winbindd trusted domain child
      Fix bug reported by David Eisner <deisner at gmail.com>. When allocating cli
      More correct fix (hopefully :-) for any memory leaks.
      Bugfix noticed by Herb. On using the again: tag as a
      Fix initialization warnings.
      Fix 'make distclean'. delheaders: no longer exists as a dependency.
      Fix bug #5533. Winbindd fails to cope correctly with a workgroup name containing a '.'.
      Fix bug #5531 - fix conversion of ns units when converting from nttime to timespec.
      Fix bug #5555. Don't return NT_STATUS_PASSWORD_MUST_CHANGE error on machine account logon.
      Fix for bug #5551, smbd recursing back into winbindd from a winbindd call.
      Final (hopefully :-) part of fix for bug #5551. Allow passdb backend to enumerate domain groups.
      Part of fix for #5551. Split out the group enumeration functions to a BUILTIN and a Domain
      Merge branch 'v3-3-test' of ssh://jra@git.samba.org/data/git/samba into v3-3-test
      Fix return of uninitialized variable.
      From Steve Danneman @ Isilon.
      Fix the non-LDAP, non-krb5 build, fix gcc -O3 warnings.
      Fix usage message for net rpc trustdom add.
      Fix bug #5568 net rpc trustdom add broken !
      Fix from Atte Peltom�ki - atte.peltomaki at f-secure.com to correctly check
      Fix problem noticed by Jim Brown <jim.brown at miami.edu>. When reverse searching decrement index,
      Two more fixes from Jim Brown <jim.brown at miami.edu> for SGI compiler warnings.
      Jim Brown <jim.brown at miami.edu> was right, this needs to be a signed int or
      Ensure consistent use of pdb_get_nt_passwd instead of pdb_get_lanman_passwd.
      Fix bug #5578, reported by sendel2000 at hotbox.ru. Bad (non-Samba) use of strlcat gives error.
      Fix bug #5578, reported by sendel2000 at hotbox.ru. Bad (non-Samba) use of strlcat gives error.
      Canonicalize servername in the printer functions to remove leading '\\' characters. Ensure we always return consistent names.
      Remove worrying warning message when safe_strcpy tries to copy a pseaudo interface
      Patch from SATOH Fumiyasu <fumiyas at osstech.co.jp> for bug #5202. Re-activate "acl group control"
      Allow authentication and memory credential refresh after password change from gdm/xdm. Patch from boyang <boyang at novell.com>.
      Fix option processing in smbcacls - add POPT_COMMON_CONNECTION.
      Add in the IDL to store a NT Security descriptor in
      Add in a version2 of the NT security descriptor store
      (Hopefully) fix the build by re-adding security.NTACL
      Merge branch 'v3-3-test' of ssh://jra@git.samba.org/data/git/samba into v3-3-test
      Add XATTR_NTACL_NAME constant.
      Add fix from Simo for bug #5540 - missing code to substitute
      Fix swat. Bug #5613.
      Fix from Volodymyr Khomenko <Volodymyr.Khomenko at exanet.com>. Make ntimes
      This patchset comprises a number of cleanups for the cifs upcall
      From Jim McDonough
      Use sys_getgrnam not getgrnam. Pointed out by Herb.
      Add casts to uint32_t to match prototype for sid_append_rid().
      If we're not allowing streams on this conn ptr,
      Fix bug creating files using DOS clients with mixed
      Fix duplicate gloabl warning.
      Fix uninitialized variables.
      Fix "might be used uninitialized" warnings.
      Fix bug #5675 with a varient of Tim Waugh's patch,
      Add Derrick Schommer's <dschommer at F5.com> kerberos delegation patch. Some
      Merge branch 'v3-3-test' of ssh://jra@git.samba.org/data/git/samba into v3-3-test
      Try and fix the build for systems that don't have krb5_auth_con_set_req_cksumtype().
      One more build fix. Ensure we have KRB5_AUTH_CONTEXT_USE_SUBKEY defined before we compile the new code.
      Fix bug 5686 - libsmbclient segfaults with more than one SMBCCTX.
      Merge from Herb. print correct test status
      Fix for bug #5617, reported and patched by Bartosz Antosik antosik at gmail.com.
      Fix for bug #5688 from SATOH Fumiyasu <fumiyas at osstech.co.jp>. LPQ process is orphaned if socket address parameter is invalid.
      Fix coverity CID: 594. Resource leak on error path.
      Fix bug #5692 - Core dump in full_audit.so.
      Make it clear that this is a temporary context byusing a talloc stackframe instead.
      Fix show-stopper for 3.2. Smbd depends on group SID
      Fix bug 5696. The problem was when smbd
      Make the change to smbcontrol for "all" to mean broadcast,
      Fix bug 5697 nmbd spins in reload_interfaces when only loopback has an IPv4 address
      Here is a re-working of the winbindd
      Fix bug 5698 - mixup of TALLOC/malloc. Spotted by Douglas Wegscheid <Douglas_E_Wegscheid at whirlpool.com>.
      Fix broken net rpc join message when DC can't be found. Ensure we pass in a domain name.
      Don't re-initialize a token when we already have one. This fixes the build farm failures when winbindd connects as guest.
      Get smbd to look (read-only) into the winbindd cache for uid/gid <--> sid mappings.
      Fix the build :-(. Ask winbindd if we find a negative cache entry (or should
      Don't ask winbindd if we got a -ve cache entry.
      Fix bug spotted by Simo - don't use legacy if expired entry.
      Be explicit about setting perms for the ldb. Helps others who may use this api.
      Add st_birthtime and friends for accurate create times on systems that support it (*BSD and MacOSX).
      Fix the wcache_invalidate_samlogon calls.
      Clarify usage of "force create mode".
      Deal with systems that don't initialize birthtime correctly.
      Merge branch 'v3-devel' of ssh://jra@git.samba.org/data/git/samba into v3-devel
      Fix bug #5729. Explicitly allow "-valid".
      Merge branch 'v3-devel' of ssh://jra@git.samba.org/data/git/samba into v3-devel
      Added tests that show that write time update is immediate
      Fix "warning: pointer of type 'void *' used in arithmetic".
      Remove unecessary msync.
      Write times code update.
      Fix debug message to show correct function name.
      Don't compare identity, it'll never be different.
      Make it easier to see when tests start/end.
      A truncate write must be a smbcli_smbwrite, not a
      Merge branch 'v4-0-test' of ssh://jra@git.samba.org/data/git/samba into v4-0-test
      Fix blocker bug 5745 kerberos authentication with (lib)smbclient is broken.
      When requesting UNIX info levels on findfirst/findnext, don't play games with write time,
      Merge branch 'v3-devel' of ssh://jra@git.samba.org/data/git/samba into v3-devel
      Fix bug #5052 - not work cancel inheritance on share. We were
      Fix bug #5751 cannot show ACLs on DFS reported by SATOH Fumiyasu <fumiyas at osstech.co.jp>.
      Use the given name, not the absolute pathname, when printing out ACL info.
      Comment the delay write time tests so I know what they're
      Modify a comment to make things clearer.
      Fix replacement getpass. If we ^C at the prompt echo was left off.
      Remove unecessary msync.
      Fix bug 5761 "open of mangled directory name results in 'is a stream name'"
      First (incomplete) cut of this module. Based on Volker's original work.
      Make the correct module name.
      Ensure all pointers are initialized. Without this we can crash when looking up a non-existant uid.
      Ensure vfs_acl_xattr is built.
      Mark module experimental, fix crash bugs.
      Correctly get+set the NT ACL on a file. Now to make us check it on open..
      Fix bug #5783 FindFirst fails where search pattern == mangled filename.
      Fix winbindd crash in an unusual failure mode. Bug #5737. Based on original patch from shargagan at novell.com
      Fix bug #5790 samba returns STATUS_OBJECT_NAME_NOT_FOUND on set file disposition.
      Remove these no longer used include files.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Use IPv4/v6 independent calls. Change safe_strcpy/cat to strlcpy/cat (this
      Fix bug #5797 - Moving readonly files fails. Reported by infomail at lordb.de.
      Add test to show you can open for delete a readonly file.
      Second part of the fix for bug #5790 - samba returns STATUS_OBJECT_NAME_NOT_FOUND on set file disposition call.
      Ensure we null out fsp after a close in all paths.
      Add in test name visible on the wire or in debug logs so you can see when particular tests start.
      Fix the make test problem Karolin reported. Now rename_open_files actually works correctly we must emit the change notify before we change the name, not before.
      Restructure the module so it connects to the remote data sink
      Remove current_user_info - not needed.
      Revert erroneous commit.
      Convert to allocated strings. Use write_data(), not send as this doesn't correctly
      Turn the socket connections into a refcounted list - in the common case there'll now only be one socket per smbd.
      Fix use of DLIST_REMOVE as spotted by Constantine Vetoshev <gepardcv at gmail.com>.
      Whitespace cleanup.
      Fix bug #5080. Access to cups-printers via samba broken with cups 1.3.4, Unsupported character set.
      Don't reject a successful alloc :-(.
      Document "cups connection timeout".
      Simply our main loop processing. A lot :-). Correctly use events for all the previous "special" cases.
      Correctly fix smbclient to terminate on eof from server.
      Fix the build farm. In this branch cli_echo returns NTSTATUS.
      Make map_errno_from_nt_status() a generic call, not just a cli specific one.
      Update vfs version as I've added a const to the security_descriptor paramter in fset_nt_acl().
      Fix const warning.
      Fix bug #5814 - Winbindd dumping core in a strange manner while doing "rescan_trusted_domain".
      Deal with inheritance from parent directory when setting Windows
      For the vfs_acl_xattr.c module, make sure we map GENERIC file and directory bits
      Remove SEC_ACCESS. It's a uint32_t.
      Ensure we handle signals correctly during the async calls.
      If you have a large number of cups printers, then scanning for print info can cause a client to timeout
      Async is trickier than it looks :-). Don't use a stack variable for a private data ptr.
      Allow data flow to be debugged and only log on error. All seems ok now.
      Ensure we do reinit_after_fork().
      Initialize near creation of resource. Makes code clearer.
      Whitespace tidyup and an optimization to remove a talloc.
      Cope with VFS change.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Note url explaining this code.
      Attempt to fix bug #5818 - "smbcacls: sorts ACEs improperly and loses inheritance", based on
      Don't use debug level 1 to log a trivial message.
      Fix bug 5826 - Directory/Filenames get truncated when 3.2.0 client acesses old server.
      Cope with bad trans2mkdir requests from System i QNTC IBM SMB client.
      Unify access checks for lsa server functions.
      Fix warnings.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Remove the requirement for ldap call made as root. Add in security
      Cope with MAXIMUM_ALLOWED_ACCESS requests when opening handles.
      Fix net rpc vampire, based on an *amazing* piece of debugging work by "Cooper S. Blake" <the_analogkid at yahoo.com>.
      Allow a new file to inherit the Windows ACL from its parent.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Coverity fix #CID: 607 - resource leak on error path.
      Coverity fix CID: 592 - null deref (can't happen but doesn't hurt to be sure).
      Fix CID 574 - tidies up the code expression.
      Fix CID 606 - failed to return -1 after socket() fail.
      Fix CID: 456 - resource leak on function exit.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Inherit Windows ACLs on a new directory.
      Start moving us closer to passing S4 RAW-ACL test using the vfs_acl_xattr module. Inheritance fails at the moment though.
      Unify se_access_check with the S4 code. Will make
      Remove unused variable.
      Another unused variable.
      Get closer to passing S4 RAW-ACLs.
      Pass all the non-inherited S4 RAW-ACL tests.
      Pass the directory versions of the RAW-ACL (still not inheritance). Refactor some common code between open_file_ntcreate() and open_directory().
      Be more verbose about a directory ACL error.
      Pass all of RAW-ACLS except for inheritence. Working on that next.
      Add reference to bug #4308 to remind me to add regression test to smbtorture.
      Fix crash in module, get more of the NULL acl test right.
      Only one more issue with NULL ACL test left to solve.
      Don't call FSET_NT_ACL on file create if there's no SD to set. Leave the default ACL in place.
      Final fix to make us pass NULL SD test in RAW-ACLs. Not sure if this is 100% right. Only inheritance left to fix.
      Start factoring out the inheritance differences.
      Fix bug #5825 - Account locking out doesnt work with an LDAP backend.Based on a problem found by Boyang. Only the pdb_nds backend implements login attempts so this was broken for tdbsam and ldap.
      Add wrapper str_list_make_v3() to replace the old S3 behavior of
      Make us clean under valgrind --leak-check=full by using talloc_autofree_context() instead of NULL.
      If we didn't inherit any ACE's the ACE pointer should be NULL.
      Fix a subtle logic bug in the adaption of se_create_child_secdesc(), pass RAW-ACL inheritance tests. Only access masks for SD get/set left to fix.
      Remove debug code added in error.
      Added vfs_acl_tdb.c module to do ACLs completely in userspace. Passes all of RAW-ACLS except for the last test which uses a non-POSIX chown. More testing/documentation to follow.
      Fix the build (ndr_pull_struct_blob has a different signature in master).
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Fix bug  5889. "delete veto files = no" seems to break.
      Fix bug 5891] : smbd crashed when viewing the eventlog exported by "eventlog list"
      Fix memory leak in error path, spotted by Martin Zielinski <mz at seh.de>.
      Pretty print out SD's on get/set.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Move v2 from timestamp to 16-byte hash. Got the change in before on disk format is fixed.
      Fix bug #5900 reported by monyo at samba.gr.jp - vfs_readonly.so does not work.
      Re-structure Volker's patch to "Fix trans2findfirst for the large directory optimization". Makes the change clearer.
      Fix bug #5904 - libnss_wins causes SIGABRT while servicing getaddrinfo() request.
      Add functions to delete NTACL on posix ACL set.
      Fix build farm breakage.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      This code mixes up int and uint32 when pulling out of a TDB. This is very bad. Fixing... May fix bug #5891, not sure.
      Fix the build, by some cut-and-paste error I got two versions of the same functions here.
      Second part of fix for bug #5891 - smbd crashed when viewing the eventlog exported by "eventlog list". Don't leak memory on error paths.
      First part of fix for bug #5903 - vfs_streams_xattr breaks contents of the file.
      Second part of the fix for bug #5903 - vfs_streams_xattr breaks contents of the file
      Use fxattr calls whenever possible (trying to work around the strange Linux kernel oplock bug).
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Fix the logic bug that caused us to run into kernel oplocks on an open for a stream inside a file with stream_xattr module. On opening the base_fsp we must break existing oplocks.
      Rever 83ff6979f504d50caf725ee62549604630b69be7 - "Fix the logic bug that caused us to
      Fix a C90 error.
      Fix bug #5873 - ACL inheritance cannot be broken. This regresses #4308, but that will have to
      Fix bug #5914 - Build failure: redefinition of struct name_list
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Fix bug #1254 - write list not working under share-level security
      Fix bug #5937 - filenames with "*" char hide other files
      Fix lp_socket_address() prototype.
      Fix bug #5953 - smbclient crashes: cli_list_new segmentation fault.
      Fix usrmgr opening a user object as non-root.
      Make the LookupRid access check match LookupName until
      Added torture test for doing an openX over a directory
      Revert "Final part of fix for bug #5953 - smbclient crashes: cli_list_new segmentation fault (with NASBASIC server)."
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Fix bug #5979 - Level 2 oplocks being granted improperly,
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Samba3 smbd now passes test BATCH23 (with the fix for bug #5979), only BATCH22 left to fix.
      Fix bug #5980 - Race condition when granting level2 oplocks can cause break notify to be missed.
      Comment out the parent inheritance code (this is incorrect) as was
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Fix bug #5986 - Editing a stream is broken (rename problems).
      Add torture test for bug #5986 - streams rename, so we don't regress.
      Make it clearer when RAW-STREAMS is failing (don't always print names).
      In gcc version 4.3.2 we get warnings for functions declared with
      Fix another "format not a string literal and no format arguments" warning.
      Fix more "warning: ignoring return value of ‘asprintf’, declared with
      Fix more ‘asprintf’, declared with attribute warn_unused_result.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Fix more asprintf errors and error code paths.
      More asprintf warning fixes.
      More asprintf warning fixes.
      Fix more asprintf warnings and some error path errors.
      Fix bug #5990 - strict allocate should be checked before ftruncate
      Fix more "ignore return value" warnings from gcc 4.3.
      Fix more asprintf and "ignoring return code" warnings from gcc 4.3.
      Fix all warnings in source3 with gcc4.3.
      Fix typo found by Volker. Thanks for the review.
      Fix warnings in make test code.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Remove cli_cm_set_dest_ss() - removes the global dest_ss
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Fix bug #6009 - Setting "min receivefile size = 1" breaks writes.
      Fix call to ndr_size_dom_sid, missing parameter.
      Attempt to fix crash seen with new CUPS async printcap loading code.
      Factor out lots of common code into a function.
      Add winbindd_reinit_after_fork(), cleaning out all possible events
      Fix bug #6017, - magic script does not work. based on a patch from monyo at samba.gr.jp.
      Make winbindd_cm.c use winbindd_reinit_after_fork().
      Fix bug #6016 - Alternate Data Streams / Extended Attributes seem to conflict.
      Fix race condition in alarm lock processing noticed by Richard Sharpe <realrichardsharpe at gmail.com>.
      Fix bug #6021 - smbclient du command does not recuse properly
      Minor tidyup of unix account missing code.
      Deprecate the "share modes" parameter to address bug #6024, swat disagrees with smbstatus as to share mode with share modes = No set in samba.
      Fix bug #6019 File corruption in Clustered SMB/NFS environment managed via CTDB
      Fix bug noticed by Volker - if sendfile returns zero then
      Only call sendfile_short_read() if we need it.
      From boyang - ensure we never "return" from a forked child, always _exit().
      Clean up comments a little.
      Fix bug #6035 - Possible race between fcntl F_SETLKW and alarm delivery.
      Remove another global from clidfs that is only used in client.c.
      Fix build of netapi.
      Remove smbclient globals that bled into clidfs.c. Now we only have
      Fix bug #6040 - Calling Samba print server with an aliased DNS-name fails.
      Allow reinit_after_fork to be called safely from within swat and other binaries that don't have
      Fix bug #6040 -  Missing <th> header in Status page.
      "First thing, kill all the language lawyers" :-). Ensure possible insane compilers
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Another attempt to fix bug #4308 - Excel save operation corrupts file ACLs.
      Second part of the attemt to fix #4308 - Excel save operation corrupts file ACLs.
      Fix logic error in try_chown - we shouldn't arbitrarily chown
      Apply same logic fix for #4308 Excel save operation corrupts file ACLs
      Fix detection of dns_sd libraries.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Upgrade POSIX inheritance storage to a new format (version 2). Stores
      Fix coverity CID#66. Resource leak in error path.
      Fix coverity CID#115. Resource leak in error path.
      Fix coverity CID#116. Resource leak on error path.
      Fix coverity CID#117 - resource leak in error path.
      Fix bug #6082 - smbd_gpfs_getacl failed: Windows client can´t rename or delete file
      Fix bug #Bug 6090 renaming or deleting a "not matching/resolving" symlink is failing.
      Fix the build. When you do "make distclean; ./autogen; ./configure; make" and it still doesn't build you know it's messed up.
      Noted by Vericode analysis. Correctly use chroot().
      Parameterize in local.h the MAX_RPC_DATA_SIZE, and ensure
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Attempt to fix bug #6099. According to Microsoft
      Fix warning about missmatch of uint32_t and size_t.
      Fix bug #6117 - Samba 3.3.0: pdbedit -a core dumps.
      Don't miss an absolute pathname as a kerberos keytab path. From Glenn Machin <gmachin at sandia.gov>.
      Fix coverity CID-602. Possible use of uninitialized var.
      Fix printf type warning.
      Fix printf warnings found on systems where time_t <> long int.
      Fix bug #6133 - Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem.
      Change smbc_set_credentials_with_fallback() (unreleased) to use
      Quieten down a boatload of shadowed variable warnings on Solaris.
      More warning fixes for Solaris.
      More warning fixes for Solaris.
      Start fixing Solaris build failures.
      Fix the build. Looks like no one ever compiled this on a system
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Make S4 build on OpenSolaris.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Added torture test from a usage case from the Apple OS/X client.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Allow set attributes on a stream fnum to be redirected to the base filename.
      Fix some NetBSD warnings.
      Fix bug in processing of open modes in POSIX open.
      Make test for open modes more robust against other bits.
      Fix use of streams modules with CIFSFS client.
      Ensure ACL modules work with POSIX paths.
      Use fsp->posix_open in preference if we have it.
      Fix more POSIX path lstat calls. Fix bug where close can return
      Add another torture test inspired by George @ Apple.
      Make us pass the RAW-RENAME torture test I just added.
      And the prize for the most pain caused in the build farm for a simple
      Fix bug #6082 - smbd_gpfs_getacl failed: Windows client can´t rename or
      Fix "ignore return" warning.
      Fix bug #6155 - "force group" is no longer working as expected.
      Fix crashes when running RAW-ACLs against system with tdb ACL modules
      Fix bug #6154 - zfs does not honor admin users.
      Second part of fix for #6154, ensure we return max access
      Fix bug #6160 - Office 2007 fails saving files to a Samba mapped drive.
      Last part of fix for #6154 - zfs does not honor admin users.
      Fix bug #6161 - smbclient corrupts source path in tar mode
      Now we're allowing a lower bound for auth_len, ensure we
      Get the sense of the integer wrap test the right way around. Sorry.
      Add simple POSIX open, mkdir and rmdir test.
      Fix bug #6186 - map readonly does not work
      Remove the static "struct client_connection" mess which is part of
      Remove pwd_cache.c, it was doing nothing. Make user_name, domain, and
      Add some appropriate const.
      Remove the global "struct cm_cred_struct" and associated calls, make
      Fix bug #6195 - Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb correctly.
      Fix bug #6196 - Unable to serve files with colons to Linux CIFS/VFS client
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Allow DFS client paths to work when POSIX pathnames have been
      Modify simple POSIX open test to use filenames containing a ':'
      Ensure we never enter VFS_CREATE without having initialized
      Fix bug #6224 - nmbd waits 5 minutes at startup before checking if it needs to run elections
      This should fix the build farm RAW-STREAMS failure. streams_depot.so
      Revert 757d403dfff023fdb122a155f6a05d33daa76410 - module
      Try and fix the build farm RAW-STREAMS errors. Ordering of
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Fix bug #6195 - Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb correctly. For the clustering case.
      Fix the problem of 3.0.x passdb databases being version
      Ensure files starting with multiple dots are hidden
      Tidy up some convert_string_internal error cases, found by Andrew Bartlett.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Allow pdbedit to change a user rid/sid. Based on a fix from Alexander Zagrebin <alexz at visp.ru>.
      Add the thread functions to top level lib/util.
      Fix bug #6254 - PUT/GET produces an error in IPv6 to a smb-server(3.3) has parameter "msdfs root = yes"
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Link in the threads functions, not yet used.
      Make talloc_stack threadsafe using TLS. Volker please
      Try and fix the S4 build - include thread includes.
      Ensure a tls key is only generated once - wrap create & destroy in a mutex.
      Fix bug #6089 - Winbind samr_OpenDomain not possible with Samba 3.2.6+
      Fix IDL licensing file that got missed when IDL files were moved.
      When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid.
      Fix bug found by Tim Prouty, logging off and then re-using a vuid can cause smbd to
      Add torture tester to ensure we don't regress the ulogoff bug.
      Fix the pthread_once initialization issue. Make talloc_stackframe use
      Attempt to fix build farm on platforms where pthread_once_t is a struct.
      Fix warning in use of talloc_set_name.
      Ensure we have all the definitions needed in both threaded and non-threaded versions.
      Add previously generated header files now needed in merged build.
      Stop autogenerated files from being created.
      Make cli_mkdir async. Change it to return NTSTATUS.
      Make rmdir async.
      Fix bug #6279 - winbindd crash. Cope with LDAP libraries returning LDAP_SUCCESS but not returning a result.
      Add comment explaining the previous fix.
      Make cli_chkpath async.
      Make dskattr async.
      Fix coverity #910, uninitialized variable.
      Fix coverity #908, #909, uninitialized variable.
      Fix Coverity bug #902, uninitialized variable.
      Fix coverity #901 - uninitialized data.
      find/replace. Change uintX types to uintX_t types to tidy up the code.
      Fix bug #6291 - force user stop working.
      Convert cli_posix_unlink() and cli_posix_rmdir()
      Convert cli_rename to async.
      Doh ! Don't need "int dummy" when we have state :-).
      More async calls in libsmb/clifile.c
      Make cli_unlink async.
      Get medieval on our ass about SMB1 file descriptors being 16 bits, not an int.
      Cause cli_close to return an NTSTATUS.
      Fix bug #6315 smbd crashes doing vfs_full_audit on IPC$ close event.
      Torture test for bug #6315 - smbd crashes doing vfs_full_audit on IPC$ close event.
      Ensure we use UID-REGRESSION-TEST. It's a very short test.
      Fix the async calls for the posix_unlink and posix_rmdir.
      Turn on POSIX test (small test) on buildfarm.
      Make cli_getattrE async.
      Make cli_getatr() async.
      Make cli_setattrE async.
      After getting confirmation from Guenther, add 3 changes we'll
      Make cli_setatr async.
      Async API needs all parameters to be kept around until sent,
      Expand the comment explaining why user_in_group_sid is
      Fix bug #6330 - DFS doesn't work on AIX. Jeremy.
      Add checks for non_root mode to help buildfarm spoolss tests.
      Ensure documentation matches the tdb_util function usage.
      Hopefully fix the buildfarm. Add some debug level 10 messages
      Fix a bunch of compiler warnings about wrong format types.
      Fix definition of smb_thread_once - must return int not void as
      Fix warning about unused label with no sendfile.
      Fix the last few format arg missmatches I missed.
      Clean up assignments to iov_base, ensure it's always cast to void *. This should quieten some warnings with picky compilers on the buildfarm.
      Fix the core of the SAMR access functions. This passes make test, but
      Remove one use of mangle_is_8_3(), not needed.
      Add a test showing what ascii values cause an NTFS volume to
      Make error message clearer on fail.
      Make us pass SHORTNAME-TEST.
      Turn on SHORTNAME-TEST in torture.
      DeleteUser doesn't need the priv checks, this is done at OpenUser time.
      Add extra abilities for a user with SeAddUsers, so they
      Ensure users with SeAddUser privs get full access to
      Oops. Forgot to delete now unused local from the previous patch.
      Fix SAMR server for winbindd access. Ensure we allow
      Change access_check_samr_object -> access_check_object.
      Added mapping table for account object in lsa.
      Add a security model to LSA. Similar to the SAMR code - using
      Make cli_posix_open() and cli_posix_mkdir() async.
      Attempt to fix bug #6386 - Samba Panic triggered by Sophos Control Centre.
      Ensure all possible uses of indirection through res are checked after
      Revert the last two commits (fix for #6386). The actual problem
      Don't steal when we know the ptr will be null. Thanks to Simo for
      Test that POSIX open of a directory returns NT_STATUS_FILE_IS_A_DIRECTORY (ERRDOS, EISDIR).
      Ensure we return NT_STATUS_FILE_IS_A_DIRECTORY on a posix open on a
      Add aync POSIX hardlink and symlink and torture test for them.
      Add cli_posix_readlink() and a torture test for it.
      Add a smbclient "readlink" command and add docs for it.
      Make getfacl async.
      Make cli_posix_stat() async.
      Make cli_posix_chown()/cli_posix_chmod() async.
      Make cli_nt_delete_on_close() async.
      Simplify the dropbox patch
      Fix bug #6421 - POSIX read-only open fails on read-only shares.
      Fix bug #6419 - smbclient -L 127.0.0.1" displays "netbios name" instead of "workgroup"
      Fix bug #2356 - smbclient -t <term code> no longer works.
      Make the path to this uglyness complete so people can find the guilty party..
      Fix S3 "make install". Don't build cifs.upcall.c in S4 as there are no
      Note that the delaytime for update has changed betweek w2k3 and w2k8.
      Add NTLMSSP SPNEGO to smb2 auth. Tested with Win7.
      Change smbd_smb2_request_error() to add a __location__.
      Make cli_ftruncate async. Also add a simple test.
      Make open_udp_socket() IPv6 clean. Trying to fix bug #6437 - Unable to join IPv6-only ads domain.
      Replace the "ipv4" specific strings in libcli/cldap/cldap.c with "ip". CLDAP can
      Make ctemp async. Fix the test to pass against W2K3.
      Fix bug #6297 - owner of sticky directory cannot delete files created by others.
      Check for error in transfer_file return also.
      _lsa_EnumAccountRights and _lsa_EnumPrivsAccount can return an
      Fix msdfs after the change to smb_filename struct. We must *always*
      Remove msdfs pathname processing from default create file.
      Fix bug #6476 - more then 3000 smbd-zombies in memory
      Replace the boilerplate calls to :
      Add some const to the stat struct in the dosmode calls.
      acl_group_override() doesn't need to call stat. Pass this
      Fix coverity #676. Forward NULL.
      Fix coverity #920. Possible NULL deref.
      Fix coverity #900. Resource leak.
      Fix coverity #740. Resource leak in error paths. We should
      Fix coverity #729. Resource leak in error path.
      Fix bug #6506 - SMBD server doesn't set EAs when a file is overwritten in NT_TRANSACT_CREATE.
      Fix bug #6520 time stamps - e.g. last mod time is not preserved when "unix extensions=yes" are set - and using latest cifs vfs client
      Ensure we don't use delayed writes on POSIX opened files.
      When faking a create time, use the full timespec values, not time_t.
      The migration to struct stat_ex broke the calculation of
      Rename update_stat_ex_writetime() -> update_stat_ex_mtime()
      Add hash values to the xattr ACLS to determine when
      Remove reply_unixerror() - no longer needed. Should make Metze's refactoring a lot easier.
      Fix set_posix_lock check which had been reversed in the recent
      Make cli_posix_lock/unlock asynchronous.
      Revert this commit :
      When tallocing a memory block for the state in a tevent_req struct,
      Change to talloc_zero_size instead of extra memset.
      Make cli_unlock and cli_unlock64 async. Fix POSIX lock test.
      Fix bug #6551 - win98 clients cannot connect after server upgrade to samba-3.4.0.
      Tidyup prompted by #6554 - Wrong deallocation in sam_account_ok.
      Remove an unused talloc context.
      Replace short-lived NULL talloc contexts with talloc_tos().
      Replace more long-lived contexts with talloc_autofree_context().
      More conversions of NULL -> talloc_autofree_context()
      Fix bug #6564 - SetPrinter fails (panics) as non root.
      Move the initialization of smbd_server_conn from smbd/process,
      Fix a typo reading uninitialized memory. Caught by valgrind.
      Fix coverity CID 931. This check is redundent as smb_fname can
      Fix coverity CID 930. Pointer check can never be null here.
      Fix Coverity CID 929. Potential NULL deref after code refactoring.
      Fix Coverity CID 928. Removed check as this can never be null.
      Fix Coverity CIDs 887, 888. Don't pass NULL's to functions
      Make cli_send_mailslot() static. Preparing to do away with unexpected.tdb....
      Fix hash function in acl_xattr to be SHA256, make
      For some strange reason using :
      Make acl_tdb match acl_xattr. Large duplication of
      Factor out common code into vfs_acl_common.c.
      Fix the build breakage by #including modules/vfs_acl_common.c
      Added prefer_ipv4 bool parameter to resolve_name().
      (Hopefully) fix the problem Kai reported with
      SMB_INFO_STANDARD is not a valid info level on set,
      Remove the extraneous logic in smb_set_info_standard - we
      Fix bug #6529 - Offline files conflict with Vista and Office 2003.
      Tidy up treatment of ctime.
      We're not changing last write, but setting this to be FILE_NOTIFY_CHANGE_CREATION
      Add define guards around otherwise unused variable.
      Put SMB_INFO_STANDARD back into setfileinfo, but do it right
      Fix bug #5714 - NetBSD, ENODATA undefined, at least some releases.
      Remove a const warning.
      Correctly send out notify messages for timestamp changes.
      Move the checks for null timestamps down below the VFS_NTIMES
      Refactor the use of create_time and change time to go
      Ensure the fsp->fsp_name stat_ex struct is always
      Fix some warnings in the AIX ACL code.
      Add "store create time" parameter (docs to follow)
      Documentation for "store create time".
      Fix BASE-DELAYWRITE test by removing const from struct smb_filename
      When mapping EA's into a TDB, don't remove the EA
      Move build over to storing DOS attributes in EA's.
      Fix EVERY SINGLE build on the buildfarm that doesn't have
      Use defined names rather than numeric constants to make code
      Fix Red Hat bugzilla bug : https://bugzilla.redhat.com/show_bug.cgi?id=516165
      Fix bug #6647 - get_root_nt_token: getpwnam("root") failed!
      Fix bug 6638 - ADS Domain Member: Computer Mgr can not set share ACLs
      Fix for bug 6651 - smbd SIGSEGV when breaking oplocks.
      Fix coverity CID: 932 - forward null.
      Try and fix the buildfarm by using getpwnam(root) instead
      Fix bug 6529 - Offline files conflict with Vista and Office 2003
      Log debug message when hires timestamps are available on the
      Implement Metze's suggestion of trying getpwuid(0) then getpwnam(root).
      Fix make test.
      Second part of fix for 6529 - Offline files conflict with Vista and Office 2003.
      Use existing time_t rounding function, don't invent my own.
      Allow systems with timestamp granularity of 1sec to work with
      Second attempt at fix for bug 6529 - Offline files conflict with Vista and Office 2003.
      Help debug for bug 6651 - smbd SIGSEGV when breaking oplocks.
      Another part of the fix for bug 6651 - smbd SIGSEGV when breaking oplocks.
      Hopefully last part of the fix for bug 6651 - smbd SIGSEGV when breaking oplocks.
      Fix bug 6673 - smbpasswd does not work with "unix password sync = yes".
      Add read() to socketwrapper. Metze please check.
      Fix compile in a usually non-selected define.
      Fix bug 6726 - Filename length overwrites oplock request field in cli_nt_create().
      Fix bug 6494 - Incorrect FileStatus returned in NT_CREATE_ANDX.
      Torture test for bug 6529 - Offline files conflict with Vista and Office 2003.
      Remove ununsed variable warning.
      We now pass the Microsoft SMB2 fileio test with EA's and streams...
      void functions can't return a value. Found by the Solaris compiler.
      void functions can't return a value. Found by the Solaris compiler.
      void functions can't return a value. Found by the Solaris compiler.
      Fix the problem with pidl generating invalid C for enums. According
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Check in modified generated files for systems where pidl can't run.
      Ensure we enclose the enum values in brackets to make the cast work.
      Re-generated idl files with () for enum values.
      Revert 918b5a7e057bd91289ec06b3ef8d95da43a50ede. This code
      Revert b39c390280d1f268e2550c731057aec550a3f086 - casts should not
      Remove the const from the str_list_XXX functions that
      Reduce debug log level from 0 -> 7 on non-critical message.
      Fix vfs module sample for new interface.
      Rewrite vfs_transparent example for the new VFS changes.
      Remove unused static fn.
      Update the advice for the new VFS system.
      Fix the opaque sample module for the new VFS interface.
      Second part of fix for bug #6235 - domain enumeration breaks if master browser has space in name.
      Don't defer a talloc_move'd pointer.
      Fix for CVE-2009-2906.
      Fix for CVE-2009-2813.
      NULL is not a valid event context.
      Fix bug #6769 - symlink unlink does nothing.
      Fix more use of VFS_STAT when posix pathnames selected.
      Missed one VFS_STAT -> VFS_LSTAT
      Remove lots of duplicate code and move it into one
      Fix bug 6776 - Running overlapping Byte Lock test will core dump Samba daemon.
      Test creating and deleting a bad symlink using the POSIX calls. Ensure
      Correct fix for bug 6781 - Cannot rename subfolders in Explorer view with recent versions of Samba.
      Make the logic a lot clearer and fix the comment to match.
      Oops. Don't break the build..
      Exteded RAW-RENAME test to catch regressions in bug 6781.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Cope with old CIFSFS clients that use SMBunlink to remove
      Catch one more erroneous use of errno.
      Remove use of "int ret" when we already have errcode.
      Final part of fix for bug 6793 - winbindd crash with "INTERNAL ERROR: Signal 6"
      Fix the build, missing ->.
      Fix valgrind memory leak in bug #6814 - Fixes for problems reported by valgrind
      Fix one missing STAT -> LSTAT with POSIX pathnames in vfs_xattr_tdb.c. Caught by the torture tester. I love unit tests :-). Jeremy.
      Last 2 VFS_STAT -> LSTAT fixes I can see in the modules code.
      Add comment explaining about symlink following & posix.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Trying to find out why the posix_unlink test build farm is still failing even
      Fix the smbtorture4 build. root_fid is a "union smb_handle". tridge
      Fix posix_unlink test. Was doing grep without quotes around the
      Fix the pam_smbpass.so build with the recent linker flag changes.
      Remove pythonmods from the build in source3, it doesn't build anyway
      Fix "make install" by removing all references to python. Not currently
      Add local (or NFS) lock test to smbtorture. Checks that local locks
      Fix comments on new test.
      Fix bug 6828 - infinite timeout occurs when byte lock held outside of samba
      Turn on LOCK9 test which will test for regressions in bug 6828.
      Fix bug 6829 - smbclient does not show special characters properly.
      Simplify the logic.
      Second part of the fix for bug 6828 - infinite timeout occurs when byte lock held outside of samba.
      Start fixing the RAW-STREAMS test - ensure that the xattr
      Change RAW-STREAMS for s3 to allow rename over an existing stream,
      Fix bug 6867 - trans2findnext returns reply_nterror(req, ntstatus) In a directory with a lot of files.
      Convert from numbers to correct SMB_FIND_XX constant names.
      Fix more of the RAW-SEARCH test. Older info levels are
      requires_resume_key is a bool not int.
      Fix debug statements to use correct function name.
      Remove "Protocol" as an extern, and add accessor functions.
      Filter the returned DOS attributes by 0xFF for clients
      Fix debug comment (brain wasn't working...).
      Fix up some of the timing constants for DELAYWRITE. Add some extra tests up test_delayed_write_update6
      Get closer to an accurate model of Windows timestamp changes.
      Fix explicit set of write time on close.
      Simplify the logic - remove extraneous argument and calls to set_close_write_time().
      Remove the smbd:writetimeupdatedelay change Metze added. Metze please
      Revert commit "0551284dc08eb93ef7b2b2227a45e5ec21d482fb" - simplify
      Got the logic simplification worked out so we still pass
      Fix bug 6841 - "map acl inherit = yes" not working.
      Fix bug 6865 - acl_xattr module: Has dependency that inherit acls = yes or xattrs are removed.
      Fix bug 6880 - cannot list workgroup servers
      Fix bug 6878 - Cannot change ACL's inherit flag.
      Second part of bugfix for 6865 - acl_xattr module: Has dependency that inherit acls = yes or xattrs are removed.
      Ensure every return path initializes presult as NULL.
      Fix bug 6891 - using windows explorer to change ownership on a folder fails with Bad File Descriptor.
      Ensure all callers to the rpc_client/cli_pipe functions correctly
      Revert "Ensure every return path initializes presult as NULL."
      Remove erroneous 'presult = NULL' changes. Now presult only gets set
      Remove unused variable warning.
      Don't overwrite a dynamic pointer with the address of a stack
      Remove "store create time" code, cause create time to be stored
      Start removing SMB_STRUCT_STAT variables except for
      Fix logic bug where high bits tests was being
      Fix bug #6898 - Samba duplicates file content on appending
      Proper fix for #6898 - Samba duplicates file content on appending. Pointed out by Volker.Restores the pathname handling for FILE_FLAG_POSIX_SEMANTICS but still prevents the O_APPEND problems. Jeremy.
      Remove unused code.
      Restore NtCreateX case handling with FILE_FLAG_POSIX_SEMANTICS to the way
      Fix make test. Only do POSIX case conversion if FILE_FLAG_POSIX_SEMANTICS set. Doh !
      Allow us to pass RAW-CHKPATH with FILE_FLAG_POSIX_SEMANTICS set or with
      Remove call into reduce_name if case sensitive. This allows us to pass
      Fix crash due to uninitialized pointer (not a problem in 3.4.x or below).
      Fix bug 6892 - When a chown operation is issued via Windows Explorer, all ACLS are wiped out.
      Add RAW-CHKPATH test with case-sensitive share.
      Make us pass RAW-CHKPATH with a case sensitive share.
      Fix warnings with talloc_asprintf.
      Restructure the connect function code to always call
      Fix bug 6938 : No hook exists to check creation rights when using acl_xattr module
      Fix DEBUG 0 -> DEBUG 10 (left over code).
      Ensure we don't see the xattr used to store NT security (visible when xattr_tdb
      Fix bug #6837 - "Too many open files" when trying to access large number of files
      Ensure get_nt_acl_internal() only looks at the ACL blobs, not
      Ensure check_parent_acl_common() only looks at stored
      Restructure the ACL code some more, get the internal semantics
      Remove unneeded argument from can_set_delete_on_close(). Ensure
      Refactor reply_rmdir to use handle based code. All
      Remove smb_fname duplicates that just keep the same information as in fsp->fsp_name.
      Make sure we're not using the old smb_fname data.
      Make smbtorture4 match Windows behavior.
      Make Samba3 pass the RAW-LOCK test as Windows.
      Hopefullt final fix for 6802 - acl_xattr.c module: A created folder does not properly inherit permissions from parent and 6938 - No hook exists to check creation rights when using acl_xattr module
      parent_sd can never be null in this function, so don't
      Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned attributes by protocol level.
      Add helpful debug of DACL for errors on ACL access.
      Final part of the fix for 6837 - "Too many open files" when trying to access large number of files
      Fix bug #6939 - mangling method = hash breaks long filenames.
      Update default with correct value. Add a note about Win7 behavior
      Vector correctly through reply_openerror() (which uses the same logic).
      Always map EMFILE to ERRDOS, ERRnofids, *NOT* NT_STATUS_TOO_MANY_OPENED_FILES.
      reply_force_nterror() is not used anywhere. Remove it.
      reply_doserror() doesn't force DOS errors on the wire.
      Actually explain the twisty paths of tortured logic behind
      Rename 282 -> ERReasnotsupported.
      Remove all calls to reply_doserror - turn them into
      Rename reply_doserror() -> reply_force_doserror().
      Fix bug reported in mangle_hash code (no bugid yet).
      The posix acl version of set_nt_acl() could set the stat_ex
      Attempt to fix one of the last two bugs with the full Windows ACL support.
      Fix the merged build. Probably not strictly correct but allows us to "make test".
      Fix bug #7020 - smbd using 2G memory.
      Second part of the fix for bug #7020 - smbd using 2G memory.
      Re-fix bug 5202 - cannot change ACLs on writable file with "dos filemode=yes"
      Remove the global char *LastDir.
      Fix bug #6876 - Delete of an object whose parent folder does not have delete rights fails even if the delete right is set on the object.
      Fix bug #7033 - SMBrmdir call always returns true, even on failure to delete a directory.
      Fix bug #7033 - SMBrmdir call always returns true, even on failure to delete a directory.
      Make file access control decisions a lot easier to debug (at level 10).
      Fix two uses of strncat -> strlcat. Ensure proper use of strncpy when setting socket name.
      Fix bug #7036 - net rpc getsid fails in hardened windows environments.
      Fix bug 7045 - Bad (non memory copying) interfaces in smbc_setXXXX calls.
      Second part of bug 7045 - Bad (non memory copying) interfaces in smbc_setXXXX calls.
      Modification of fix for bug 6876 - Delete of an object whose parent folder does not have delete rights fails even if the delete right is set on the object
      Revert "s3: remove unused Variable"
      Correct fix for unused variable return from ndr_decode. Use it :-).
      Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to respond to a read or write.
      Fix bug #7072 - Accounts can't be unlocked from ldap.
      Second part of fix for bug #7072 - Accounts can't be unlocked from ldap.
      Fix bug #7069 - smbget does not return an error status after some errors
      Fix const warning.
      Fix a really interesting problem found by Volker's conversion of sessionsetup SPNEGO to asynchronous code.
      Fix bug #7079 - cliconnect gets realm wrong with trusted domains.
      Fix bug #7080 - Quota only shown when logged as root.
      Arg. Got the sense of the test reversed to fix bug #7080 - Quota only shown when logged as root.. Doh !
      Torture test for bug 7084 - Create time on directories not stored properly in an EA in new create time code.
      Fix bug #7084 - Create time on directories not stored properly in an EA in new create time code.
      Add debug to make it clear when EA dosmode set is invoked.
      Fix bug 7063 - Samba 3.4.5 on ubuntu 8.04 64 bit - Core dumps.
      Fix bug 7081 - vfs_expand_msdfs doesn't work correctly (with fix identified)
      Fix bug 7075 - bug in vfs_scannedonly rmdir implementation.
      Fix bug 7104 - "wide links" and "unix extensions" are incompatible.
      Remove now unused variable.
      Fix trailing whitespace errors I added (sorry).
      Fix bug #6876 for acl_tdb module.
      Make "nmbd bind explicit broadcast" on by default.
      Fix off-by-one error in working out the limit of the NetServerEnum comment.
      Second part of fix for bug 7063 - Samba 3.4.5 on ubuntu 8.04 64 bit - Core dumps.
      Missed one check on the memcpy for bug #7063.
      Fix bug #7122 - Reading a large browselist fails (server returns invalid values in subsequent SMBtrans replies)
      Change the default of "nmbd bind explicit broadcast" to "no"
      More of the fix for bug #7118 - nmbd problems with socket address.
      Revert "Change the default of "nmbd bind explicit broadcast" to "no""
      Temporary changes to dlinklist to keep the implementation static whilst
      s4-dsdb: update repl_meta_data.c to use new DLIST_ macros
      Fix bad use when freeing linked list. Todd Stecher (Original author) please check !
      Fix unused variable warning after change to new DLINK macros.
      Suplementary patch for bug #7104 - "wide links" and "unix extensions" are incompatible.
      Fine changes to previous fix for bug #7104 - "wide links" and "unix extensions" are incompatible.
      Final part of jumbo patch for bug #7104 - "wide links" and "unix extensions" are incompatible.
      Remove lp_safe_widelinks() -> convert to just lp_widelinks. Suggestion from Volker.
      Remove the code replaced by widelinks warning.
      Fix bug #7126 - [SMBD] With access denied error smbd return wrong NT_STATUS_OBJECT_PATH_INVALID error
      Revert "Fix bug #7126 - [SMBD] With access denied error smbd return wrong NT_STATUS_OBJECT_PATH_INVALID error"
      Remove #if SOFTLINK_OPTIMIZATION code.
      Fix error in docs. Should be milliseconds, not microseconds.
      Fix warning messages on compile in g_lock.c Volker & Michael please check.
      Simplify the logic in make_connection_snum(), and make it match Windows behavior.
      Use sec_initial_uid() in the places where being root doesn't matter,
      Fix commit d07cd37b993d3c9beded20323174633b806196b5
      Fix bug #6557 - Do not work VFS full_audit
      Fix bug #7146 - Samba miss-parses authenticated RPC packets.
      Got back to 16-byte padding on auth RPC. S3 clients and servers now cope with this. Jeremy
      Revert "Got back to 16-byte padding on auth RPC. S3 clients and servers now cope with this. Jeremy"
      Fix bug #7154 - mangling method = hash can crash storing a name not containing a '.'
      Fix bug #7155 - valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"
      More fixes for bug #7146 - Samba miss-parses authenticated RPC packets.
      More fixes for bug #7146 - Samba miss-parses authenticated RPC packets.
      First part of fix for bug #7159 - client rpc_transport doesn't cope with bad server data returns.
      Second part of fix for bug #7159 - client rpc_transport doesn't cope with bad server data returns.
      Add an "attributes" string to allinfo.
      Ensure STREAMERROR deletes any files in the \\testdir
      A test "store create time" parameter got commited by accident. Remove it.
      Change the credential handling so that we start with maxmux creds,
      Make conn_close_all() safe to call from SMB2 sessions (fix crash bug).
      Implement rename/move in SMB2 from Windows7.
      Fix up debug info on smb2_rename code.
      srv_pipe.c doesn't reference current_user anymore. Remove it.
      Fix for bug #7189 - Open txt files with notepad on samba shares creates problem.
      Allow "make test" to complete as root. Obviously only safe on tightly
      Add tests which, when run as root, will ensure we can't write
      Fix the shell script in the root case. When run as root, make test now detects CAP_DAC_OVERRIDE being left on in error.
      Fix bug #7234 - Symlink delete fails but incorrectly reports success to client.
      Added regression test for bug #7234 -  Symlink delete fails but incorrectly reports success.
      Try and fix bug #7233 - print fails with jobs >4GB from Win7 clients.
      Improve symlink delete test. Make sure we don't delete the link target by mistake.
      Remove more uses of "extern struct current_user current_user;".
      Missed a couple more uses of conn->server_info->ptok that need to be get_current_nttok(conn)
      Rever e80ceb1d7355c8c46a2ed90d5721cf367640f4e8 "Remove more uses of "extern struct current_user current_user;"."
      We don't need to treat the token differently in the conn->admin_user case, it should already be pointing to a token with uid == 0.
      Add accessor functions for current uid, gid, unix token, NT token and vuid.
      Pass "connection_struct *conn" into functions that currently use "current_user.XXX"
      Switch over to using get_currect_XXX() accessor functions.
      Simplify processing of "admin user". If a user is an admin_user ensure their conn token is uid 0.
      Remove reference to conn->admin_user in preparation for removal.
      Fix bug #7188 - Logic error in check of total_data for call_trans2mkdir()
      Remove the bool admin_user from conn struct. We no longer look at this to make access decisions.
      s3-printing: Fix "printer admin" functionality.
      Fix valgrind error when running under share level security. plaintext_password
      share_info.tdb could use non-canonicalized sharenames.
      Fix valgrind warning when source and dest stat are identical.
      Fix bug #7283 - vfs_acl_tdb does not work as expected.
      Missing include guard in source4/libcli/security/security.h
      Fix bug #7233 - print fails with jobs >4GB from Win7 clients.
      Fix bug 7297 - smbd crashes with CUPS printers and no [printers] share defined.
      Fix bug #7288 - SMB job IDs in CUPS job names wrong.
      Second part of bug #7288 - SMB job IDs in CUPS job names wrong.
      Revert the part of bug fix #7233 - print fails with jobs >4GB from Win7 clients.
      Fix bug #7240 - Net usershare is not case sensitive.
      Fix bug 7307 - man net usershare mistake
      If the timeout has been set to zero, don't register an end time.
      Fix for bug #7233 - print fails with jobs >4GB from Win7 clients.
      Second part of fix for bug #6494 - Incorrect FileStatus returned in NT_CREATE_ANDX.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Fix bug 7310 - DOS attribute inconsistency with MS Office
      Make smbd_lock_socket/smbd_unlock_socket recursive with a ref_count.
      Add torture test for bug 7310 - DOS attribute inconsistency with MS Office
      Move initialize_async_io_handler() inside of smbd/aio.c.
      Fix issue with aio where r/w lock wasn't kept across aio read operations.
      Add FSCTL_QUERY_ALLOCATED_RANGES to the list of Windows ioctls we support.
      Parameterize "smb2 max read", "smb2 max write", "smb2 max trans".
      Ensure we total up the correct number of creds requested in a compound request.
      Don't forget to initialize *p_creds_requested.
      On compound requests, MS-SMB2 says clients MAY use 0xFFFFFFFF for compound tid and 0xFFFFFFFFFFFFFFFF for compound sessionid values. Cope with this.
      Test using (-1) for tid and sessionid in compound related requests.
      Start to plumb smb2 into the oplock system. Calls dummy functions for now.
      Fix bug #7339 - MSDFS is non-functional in 3.5.x
      Simplify call_trans2qfilepathinfo() and smbd_do_qfilepathinfo()
      Stop smb2 from calling into smb1 blocking lock request code.
      Plumb SMB2 stubs into all the places we defer SMB1 operations.
      Move to using 64-bit mid values in our internal open file database.
      Split out the client unix capabilities to those the server offered, and those the client asked for.
      Add basic DFS tests.
      Don't set "requested_posix_capabilities" in the sync code, already done in the async.
      First part of fix for bug #7331 - Compound async SMB 2 requests don't work right.
      Second part of fix for bug #7331 - Compound async SMB 2 requests don't work right.
      Final fix for #7331 - Compound async SMB 2 requests don't work right.
      Remove an unused auto variable.
      Fix valgrind error where a strdup of name reads one byte beyond the end. Ensure buffer returned from inotify is null terminated.
      Ensure vectors are always allocated with consistent size. Removes one byte alloc on SMB2 error packet. Always use talloc_zero_array on out vectors - fixes valgrind errors in tevent writes.
      Now SMB2 error messages are correctly being returned with the 1 byte data area, smbd_smb2_request_error_ex() must call smbd_smb2_request_done_ex() in order to do the padding correctly on compound replies.
      Make deferred opens (NT_STATUS_SHARING_VIOLATION) work over SMB2.
      Rename - no functional change. Stop all variables being called "req".
      At simo's request return struct tevent_req *treq -> treq. For consistency :-(.
      Allow smb2 create requests to be cancelled.
      Don't free the entire tevent_req on cancel, only the part we need (the immediate event).
      When sending the initial async response, this is never part of a chain.
      Implement oplocks within SMB2. Plumb into the existing SMB1 oplock system.
      Fix crash when rescheduling oplock open.
      When walking the SMB2 requests queue, ensure the request is still "in flight"
      Plumb in get_nt_acl into SMB2.
      Correctly report share types (now Win7 makes RPC calls against us).
      Fix more S3 build breakage. Matthias, please ensure S3 builds when
      Don't return an intermediate reply on async on a pipe call (Windows doesn't).
      Add debug statements so I can track the flow of RPC data.
      Don't return a potentially uninitialized NT_STATUS. We can now see user lists in Windows ACLs.
      Fix the "allow_smb2" bug being set to false that was driving me mad :-).
      Connect set security descriptor into SMB2 code.
      Update (C) for 2010.
      Attempt to fix bug #7399 - SMB2: QUERY_DIRECTORY is returning invalid values.
      Move the global blocking lock records into the smb1 state.
      Carefully label SMB1-specific locking calls.
      Plumb the SMB2 front end into the blocking lock backend.
      Fixed issue with return in a void function found by Björn JACKE <bj at SerNet.DE>
      Start to pass the SMB2 read torture tests.
      Client ignoring max write is a warning, not an error.
      Get in_minimum and EOF errors right.
      Return correct error on read request on directory.
      Get closer to passing SMB2 lock test. Still crashes but we get further.
      Move to MS-FSA algorithm when checking for invalid lock range.
      Fix more SMB2 locking. We still crash but this won't last :-).
      Fix SMB2 lock tests up to cancel-by-close.
      Fix cancel by close lock test.
      Fix crash in cancel-tdis lock test. Correctly shut down connection.
      Make us pass all SMB2 lock tests except MULTIPLE-UNLOCK and CONTEXT. Them next :-).
      This patch looks bigger than it is. It does 2 things. 1). Renames smbpid -> smblctx in our locking code. 2). Widens smblctx to 64-bits internally. Preparing to use the SMB2 handle as the locking context.
      When tearing down the connection make sure we close all files before
      Only MULTIPLE-UNLOCK test left to fix !
      Fix more of the SMB2-LOCK tests. Correctly unlock locks on error.
      Fix the processing of unlocks followed by locks. We now pass SMB2-LOCK test.
      Stop us crashing in SMB2-OPLOCK test. Don't allow more than one outstanding immediate event.
      SMB2 always have level2 oplock capability. Correct mapping from break messages to SMB2 oplock levels.
      Fix more SMB2-OPLOCK bugs. Only 3 more issues to address then we're good to go on this test.
      Pass more SMB2 oplock tests. Only oplock stream tests left to fix.
      Treat an open of stream ::$DATA as an open of the base file.
      Be more forgiving on client oplock break failure (as Windows does). Remove a global.
      Fix bug 7399 - SMB2: QUERY_DIRECTORY is returning invalid values.
      Now we behave as Windows does, remove a Samba3 specific test return.
      Refactor the sessionsetup SMB2 code to make it easy to add
      Fix the build of bin/smbtorture in source3. Guenther please check !
      Plumb in krb5 to the SMB2 sessionsetup code. First cut of this code.
      Change data_blob() to be based on top of data_blob_talloc(), instead of the reverse (as it is now).
      Fix our NTLMSSP implementation against the Microsoft torture tester.
      Keep track of credits we're giving out. Set initial credits to 1 (MS-SMB2 spec required).
      Implement missing info level SMB_FILE_LINK_INFORMATION.
      Thanks to Andrew Bartlett's advice, fix the NTLMSSP version problem the correct way.
      (Finally) fix bug #7158 - SMB2 connection resets during IOZone tests from 64-bit Vista client
      After talking with Microsoft engineers, the "lock spin time" is
      After talking with Microsoft engineers, immediately replying
      Correctly check error code return.
      Fix connecting to [homes] share over SMB2.
      Fix bug 7442 - Samba returns incorrect SMB2 QFS device info.
      Fix  bug #7410 - samba sends "raw" inode number as uniqueid with unix extensions.
      Fix what looks like a cut-and-paste error in our read_negTokenInit() function.
      Make -k a simple non-bool option.
      Set SMB2 max read/write/trans sizes to Win7 compatible - 1Mb.
      Add comments to usage error message for -k to make it obvious what this needs.
      Doh! If you're going to give advice in "useage", make sure it's correct.
      Make krb5 over SMB2 identical to the way we handle it in SMB1.
      Make DFS work over SMB2.
      Don't forget brackets around bitwise tests.
      If using fake oplocks, use the correct SMB2 type code for "no oplock".
      Add in support for the NTLMSSP version reply.
      Standardize debug messages for read and write.
      Don't use sigev_value.sival_int to just store the mid, use sigev_value.sival_ptr to store the private data structure.
      Move to using a DATA_BLOB inside of struct aio_extra, not a char *.
      Fix a crash bug found by Ira Cooper <samba at ira.wakeful.net>.
      Ensure we remove SMB2 cancel requests from the active queue
      Found by Guenther - fix up our fallback paths from krb5 to NTLMSSP when using SMB2.
      Allow us to cope correctly with NT_STATUS_MORE_PROCESSING_REQUIRED when downgrading from krb5 to NTLMSSP over SMB2.
      Change smbd_aio_complete_mid() -> smbd_aio_complete_aio_ex(). Simplifies
      Rename req -> smbreq.
      wait_for_aio_completion() should return 0 on non-aio compiled case.
      Oops. Forgot to re-initialize the aio_ex pointer from sival_ptr.
      Fix a long-standing bug with async io that would only be triggered by SMB2.
      Move "write_though" into aio_ex struct.
      Make aio_ex owned by a talloc context, not neccessarily on the null context.
      Second part of fix for 7501 - SMB2: CREATE request replies getting mangled.
      Fix a valgrind error found by SMB2-COMPOUND test.
      Split out the "finished read processing" code into a function so it can be called
      Ensure we don't send SMB1 keepalives on an SMB2 connection.
      Split out the "finished write processing" code into a function so it can be called
      Rename "allow_smb2" -> "using_smb2" and make the usage clearer.
      Don't use the autofree context for the globals. This causes child smbd's forked
      Ensure we correctly setup req->subreq before testing for async. Stops crashes when
      Implement AIO in SMB2. Doesn't allow cancel calls yet (to be added).
      Fix the build in the non WITH_AIO case (sorry).
      Fix warning messages about unused result of talloc_move. We're really talloc_steal'ing here.
      SMB2 correctness fix. As we've already returned the credits in an interim
      Remove unused function.
      Remove two unused functions (prs_force_dynamic, prs_set_session_key).
      Remove an unused chunk of code (will make it easier to talloc'ize prs_XXX).
      Use #defined constant instead of "false" to be clearer about intent.
      Convert the prs_XXX struct and functions to use talloc instead of malloc. Passes valgrind and make tests for client and server. Second version of this patch after splitting up at Simo's request. Patch to follow will delete extraneous prs_mem_free() calls.
      Second part of fix converting prs_XX struct and functions to talloc. Remove unneeded prs_mem_free calls.
      Fix bug 7528 - Solaris with NIS autohome.
      Add parse_setjob_command() to make setting job state easier for users.
      Change talloc_autofree_context() to frame in Andrew's schannel.tdb TDB_CLEAR_IF_FIRST
      Don't use frame as the talloc ctx in open_schannel_session_store(), as this breaks running from inetd
      Change one more use of "struct rpc_hdr_info" -> "struct ncacn_packet_header"
      Revert "Remove the global char *LastDir."
      Fix bug - 7551 smbclient does not return proper exit code.
      Make the "map to guest" parameter work correctly with NTLMSSP (spnego
      Fix bug #7570 - New smb2 max parameters are undocumented.
      Fix [Bug 7577] SPNEGO auth fails when contacting Win7 system using Microsoft Live Sign-in Assistant
      Remove parse_negTokenTarg(), as it's actually incorrect. We're processing
      Move the addition of the 16 byte guid out of spnego_gen_negTokenInit() and
      Remove gen_negTokenInit() - change all callers to spnego_gen_negTokenInit().
      Fix warning - no return value for a non-void fn.
      Fixes pointed out by <david.kondrad at legrand.us>. Free memory if not being
      Remove gen_negTokenTarg(), as it's not actually creating a TokenTarg frame, but a TokenInit one.
      Rename spnego_gen_negTokenTarg() -> spnego_gen_krb5_negTokenInit()
      Add TALLOC_CTX argument to spnego_parse_negTokenInit, reduce
      Fix one more data_blob -> data_blob_talloc. Move away from implicit NULL context tallocs.
      Fix warning on 64-bit machines.
      Add approriate TALLOC_CTX's thoughout the spnego code. No more implicit NULL contexts.
      Fix bug 7583 - Smbclient fails to kerberos connect to a Alfresco JLAN CIFS Server
      Second part of fix for bug 7578 - 'net idmap restore' fails to set HWM, causing duplicates.
      Fix several places where talloc_asprintf returns were unchecked.
      Fix tdb_check() to work with read-only tdb databases. The function tdb_lockall() uses F_WRLCK internally, which doesn't work on a fd opened with O_RDONLY. Use tdb_lockall_read() instead.
      Fix bug #7589 - ntlm_auth fails to use cached credentials.
      We should be using the winbindd separator in this case, not hardcoding a \\ value.
      Fix bug #7608 - Win7 SMB2 authentication causes smbd panic
      Fix bug #7617 - smbd coredump due to uninitialized variables in the performance counter code.
      Eliminate any chance of a class of "uninitialized auto variable" errors.
      Fix bug 7563 - Creation of symlink using smbclient is buggy.
      Fix bug 7626 - Typo in configure samba_cv__CC_NEGATIVE_ENUM_VALUES two underscores.
      Fix const warning.
      Fix bug 7627 - smbclient ignores "-I" when used with "-L", fails name resolution.
      Final part of fix for bug #7636 - winbind internal error, backtrace.
      Fix bug #7651 - mknod and mkfifo fails with "No such file or directory"
      Fix bug #7653 - When SMB2 is on, Windows 7 clients can not connect as guest to a share.
      Fix warnings caused by double ";;" at the end of the time_mono() fixes.
      Optimization suggested by Metze. Without this patch,
      Don't rely on the underlying ACL modules to enforce share level
      More paranoia to ensure SD's can't be set on read-only shares.
      Fox missing SMB_MALLOC return checks noticed by "Andreas Moroder <andreas.moroder at gmx.net>".
      Check all SMB_MALLOC returns correctly. Found by Andreas Moroder <andreas.moroder at gmx.net>.
      Factor out the recent changes into a function - check_parent_exists().
      Add check missing from previous patch after talloc_strdup().
      Fix bug 7409 - Thousands of reduce_name: couldn't get realpath.
      Fix string_to_sid() to allow non '\0' termination of the string - allows
      Ensure incoming timespec values correctly wrap at nsecs.
      Add check for invalid data size.
      Fix all sid_parse returns to be checked. Tidy up some checks and error
      Fix bug #7693 - smbd changing mode of files on rename
      Thank goodness for code reviews. Volker caught - this should be lp_posix_pathnames()
      Fix bug 7694 - Crash bug with invalid SPNEGO token.
      Fix bug #7698 - Assert causes smbd to panic on invalid NetBIOS session request.
      Change to using TDB_INCOMPATIBLE_HASH (the jenkins hash) on all
      Small tweak to bugfix for 7698 - Assert causes smbd to panic on invalid NetBIOS session request.
      Add torture test BAD-NBT-SESSION as regression fix for bug 7698 - Assert causes smbd to panic on invalid NetBIOS session request.
      Fix bug 7704 - Possible error in fix to rpc_server/srv_spoolss_nt.c.
      Fix crash in SMB2 rename found by gentest. We must always have an lcomp
      Fix crash in SMB2 rename found by gentest. We must always have an lcomp
      Fix bug 7716 - acl_xattr and acl_tdb modules don't store unmodified copies of security descriptors.
      Add some const. Needed for my SD work.
      More neccessary const.
      Make the posix ACL module cope with a NULL incoming DACL and a
      Canonicalize incoming and outgoing ACLs.
      Make the vfs_acl_xattr and other modules work with NULL SD's. Fix
      Fix bug #7733 - Invalid client DOS attributes on create can cause incorrect unix mode_t to be generated.
      Fix bug #7734 - When creating files with "inherit ACLs" set to true, we neglect to apply appropriate create masks.
      Fix valgrind "uninitialized read" error on "info" when returning !NT_STATUS_OK.
      Add debug message to get_nt_acl_internal() to see what we got.
      Fix "force unknown ACL user" to strip out foreign SIDs from POSIX ACLs if they can't be mapped.
      Fix handling of "NULL" DACL. Map to u/g/w - rwx.
      Add make_default_filesystem_acl() function to be used in following change to acl_xattr and acl_tdb module.
      Add acl_xattr:ignore system acls boolean (normally false) to allow
      Ensure we have correct parameters to use Windows ACL modules.
      Don't arbitrarily clean all parametric options in add_a_service(),
      Move tcons.num_open from smb1 to sconn->num_tcons_open as this is needed for SMB2 also.
      Copyright/whitespace/comment cleanup in preparation for adding SMB2 paths.
      Add SMB2 paths to smbd/conn.c. Except for conn_idle_all(), to be cleaned up next.
      Add deadtime detection for SMB2. Correctly update lastused timestamp across all active tcons. Should fix dfree cache not updating bug.
      Fix shadow warning for "access" variable.
      Make getpwnam_alloc() static to lib/username.c, and ensure all username lookups go
      Add code to implement SeSecurityPrivilege in net rpc rights, and in the
      Now we have SeSystemSecurity, remove the source3-only #ifdef.
      Fix const warning. Allocate off NULL as we always talloc_free().
      Wrap security_token_has_privilege() with a check for lp_enable_privileges(). Needed
      Revert "Wrap security_token_has_privilege() with a check for lp_enable_privileges(). Needed"
      Fix for bug 7755 - SMBC_getdents_ctx() ignores struct alignment rules
      Fix bug #7700 - Improvement of return code of smbclient
      First part of fix for bug #7777 - When requesting lookups for BUILTIN sids, winbindd allocates new uids/gids in error.
      Ensure we always have a mapped group for "Domain Users".
      Second part of fix for bug #7777 - When requesting lookups for BUILTIN sids, winbindd allocates new uids/gids in error.
      Remove fstring from map_username. Create a more sane interface than the called-parameter-is-modified.
      Ensure we check the return from make_user_info before dereferencing the value returned by it.
      Fix bug 7781 - Samba transforms ShareName to lowercase (sharename) when adding new share via MMC
      Fix memleak I accidently introduced when reading from tdb.
      Add test that detects problems in the SMB signing code when run through cli_write() (which doesn't use the new async methods).
      Fix bug #7791 - gvfsd-smb (Gnome vfs) fails to copy files from a SMB share using SMB signing.
      Move error reporting of messaging context creation fail into
      Fix the unexpected.tdb database problem. Change nmbd to store the
      Move the uglyness of #ifdef REALPATH_TAKES_NULL into the vfs_default
      Fix bug #7785 - atime limit.
      Fix bug #7812 - vfs_acl_xattr/vfs_acl_tdb: ACL inheritance cannot be disabled
      Add in fsp->access_mask checks. Not required (underlying system does this)
      Fix bug discovered with "encryped passwords = no".
      Fix a typo - should be '&&' not '&' when checking for privileges.
      Turns out there are lots of places in S3 where token passed in
      Fix bug #7835 - vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on
      Move posix_fallocate into the VFS where it belongs.
      Oops. Missed adding vfswrap_posix_fallocate to vfs_default_fns table.
      Merge the two conflicting allocation codes into one function, vfs_slow_fallocate()
      posix_fallocate() returns an errno, not -1 on error.
      Replace lseek()/write()/lseek() triple with pwrite call. We already emulate this
      s3: Fix bug 7843: Expand the local SAMs aliases
      Add a SMB2 crediting algorithm, by default the same as Windows. Defaults to 128 credits.
      Add documentation for "smb2 max credits".
      Remove extra unused credit arg. to smbd_smb2_request_setup_out()
      We need to start off with smb2.credits_granted == 0. That way
      As we handle missing sendfile() inside lib/sendfile.c, remove the WITH_SENDFILE ifdefs.
      Change crediting so that the credits are returned on the interim async response.
      Ensure we use vfs_fsp_stat(), not VFS_STAT directly, and store into fsp->fsp_name->st
      Change interface of schedule_smb2_aio_read() to allocate the return DATA_BLOB.
      Fix read/write calls over sockets to cope with EAGAIN/EWOULDBLOCK for non-blocking sockets.
      Implement "use sendfile = yes" for SMB2. (cherry picked from commit 95cb7adcd03a1abbd0af395b6c96dd8e0eebd3d1)
      Protect the onefs sendfile from EAGAIN/EWOULDBLOCK.
      Fix bug 7866 - "net" in v3-6-test broken.
      Change strict allocate to default to true. (cherry picked from commit 820ea22a07b062b1717d35de8fa7051fc1067c3f)
      Fix old bug in openX code, exposed when "strict allocate" is set to true.
      Do more vfs_stat_fsp calls instead of FSTAT - ensures fsp->fsp_name->st is kept up to date.
      Update our attribute flags.
      file_set_sparse needs to be a handle based call.
      Move checks inside file_set_sparse() to allow it to be called from anywhere.
      Rename vfs operation posix_fallocate to just fallocate and add the vfs_fallocate_mode parameter.
      From metze's work on sparse attributes. FILE_ATTRIBUTE_SPARSE is valid on get but not on set.
      Added call out to a Linux-compatible fallocate() when we need to extend a file
      Keep track of the sparse status of an open file handle. Allows bypass of
      My algorithm for determining whan an incoming sequence number can be allowed is incorrect.
      Fix a warning message.
      All calls to event_add_to_select_args() call GetTimeOfDay() and
      Fix bug #7892 - open_file_fchmod() leaves a stale lock.
      Fix memory leak I introduced when refactoring unexpected packet code.
      Move wins_lookup_open_socket_in() to remove a compile warning.
      Explicitly set "nmbd: socket dir" in the test environment.
      Fix "make test" - ensure nmbd runs with -S (log to stdout).
      Add OPLOCK4 test which explores how Windows copes with oplock and share mode breaks on hard links.
      Fix error where Windows client spoolss returns WERR_INVALID_DATA       W_ERROR(0x0000000D)
      Add DELETE-LN test to show bug #7863 - Unlink may unlink wrong file when hardlinks are involved
      Make processing of incoming stream rename paths common between reply_mv and ntrename. Ensure we don't depend on "./" in the streams module.
      Ensure we don't use "./" in findfirst pathnames. Use a directory open of "." instead.
      Remove all uses of "./" in pathnames - make canonical. This will become important when we need to guarantee canonical names for hashing.
      Add name_hash to files_struct. Set within fsp_set_smb_fname().
      Add name_hash into the share mode entry struct (as yet only use for renames to identify a specific path).
      Add uint32_t name_hash argument (currently unused) to get_file_infos().
      Fix bug #7863 - Unlink may unlink wrong file when hardlinks are involved.
      Missed one debug printf of name_hash. Ensure always use %x.
      From Metze - make sure we're using the same string length for the hash.
      Allow "security = share" with SMB2. We already handle this in smb2/smb2_server.c
      Change "security=share" to downgrade to SMB1 from SMB2, rather than trying to fake it.
      Add delete-ln test now we can correctly delete hardlinks.
      We need to reply to SMB2_GETINFO_FILE with a class of SMB2_FILE_STANDARD_INFO on an IPC$ share.
      Add knownfail for s4 for the new oplock test.
      Based on a conversation with Volker, refactor some of the oplock code to make it comprehensible.
      Fix a couple of missing checks on talloc returns.
      Fix value overflow (one too many 'f's ).
      Move the "oplock file with byte range locks" check to the correct place, where we're making oplock decisions.
      Fix try_chown code. Use new vfs_chown_fsp() which always trys fd first.
      Fix leak in error path.
      Use corrcet function instead of cut-and-paste code.
      If possible (O_DIRECTORY exists) open an fd for a directory open.
      Add fdopendir().
      Add configure checks for fdopendir.
      Pass fsp to dptr_CloseDir(). Cope with setting the fd if we're closing an fd that opendir knows about.
      Add fdopendir to the VFS. We will use this to reuse a directory fd already open by NtCreateX.
      Remove unneeded stat call.
      Move to opening an fd on directory opens. Get more careful about symlink races.
      Don't use asprintf in this library - breaks the build on many systems. Fake with malloc/memcpy.
      Fix up some buildfarm warnings.
      Oops. Need to test for if(!NT_STATUS_IS_OK(..)) for error.
      Correctly plumb in VFS_FDOPENDIR.
      Allow SMB2_FIND to actually use the open fd handle if we support fdopendir. Fallback to pathname opendir if not.
      Make it clear we're using the open file pathname.
      Put OpenDir() back the way it was - don't overload with an fsp arg. Create OpenDir_fsp for new usage.
      Fix alignment issues in SPOOLSS "BUFFER" marshalling.
      Fix bug found against the new Mac client @ Connectathon. Mac clients
      Torture test added to run_opentest() to ensure we don't regress on
      Fix bug 7950 - Samba 3.5.x fails BASE-CREATEX_SHAREMODES_DIR smbtorture4 test
      Remember to free the second temporary string.
      Batch oplocks conflict with exclusive as well as themselves.
      Implement the SMB2 close flag SMB2_CLOSE_FLAGS_FULL_INFORMATION (and move definition to correct place).
      Ensure we don't return an incorrect access mask.
      Gratuitous change to get around transient autobuild failure :-(.
      Removed unused code check_dos_char_slowly.
      dirfd doesn't exist in some platforms.
      Finish the range checking on all FD_SET calls for select().
      Fix "cast from pointer to integer of different size" warnings on a 64-bit machine.
      Fix warning introduced by changing the size of UNIX_USER_TOKEN->ngroups from size_t to uint32_t.
      Fix one more warning introduced by changing the size of UNIX_USER_TOKEN->ngroups from size_t to uint32_t.
      Fix compiler warning on casting -1 to uint32.
      Fix examples/VFS to use correct prototypes for is_offline() and set_offline().
      Fix the examples/VFS build.
      Fix bug #8005 - smbtorture4 BASE-TCONDEV fails when tested on Samba
      Re-enable base.tcondev test for S3, now we pass it correctly.
      Fix compiler warning in debug message.
      Nulling out the op_mid is never the right thing to do. We depend on
      Fix crash bug on smbd shutdown when using FOPENDIR() found by Volker.
      The searches struct is still being used and idled in SMB2 - move it to the global
      SMB2 renames return SHARING_VIOLATION if there is any existing oplock on a file.
      Fix is_myname_or_ipaddr() to be robust against strange DNS setups.
      Fix bug 8040 - smbclient segfaults when a Cyrillic netbios name or workgroup is configured.
      Revert "Fix bug 8021 - Incorrect string termination in volume/volume_name for TRANS2-QUERY_FS_INFO/Info Volume."
      Fix inspired by work done by David Disseldorp for bug #8040 - smbclient segfaults when a Cyrillic netbios name or workgroup is configured.
      Be a little clearer about when and when not to set this option.
      Remove two unused labels.
      Ensure convert_string_XXX is always called with a valid converted_size pointer.
      This doesn't look like it has anything to do with character set conversion, but it does :-).
      Fix the nstring calls to use the correct sizes.
      Change convert_string_internal() and convert_string_error() to bool return.
      Fix convert_string() to take a *converted_size arg. and return a bool.
      Fix bug #7996 - sgid bit lost on folder rename.
      Don't burn 2k of stack on every iconv, use the heap when it's a slow call.
      Arg. I hate the "if (xxx) return foo" all on one line style of code.
      Fix bug #7987 - ACL can get lost when files are being renamed.
      Note that check_parent_exists() doesn't change the contents of smb_fname (add const).
      Move SET_STAT_INVALID call added by Volker as fix for bug 8042 - Newly create files are always failed with NT_STATUS_FILE_IS_A_DIRECTORY
      Fix bug #7080 - Quota only shown when logged as root.
      Subtle change. Microsoft SMB2 tests return different access mask than for SMB1 with raw.acls.
      Fix bug 8072 - PANIC: create_file_acl_common frees handle two times.
      Don't print "success" message after error message in change_file_owner_to_parent(). Remove "goto" in change_dir_owner_to_parent().
      Fix WAF build for sids2xids.
      Optimization for change_file_owner_to_parent() and change_dir_owner_to_parent()
      Fix bug #8083 - "inherit owner = yes" doesn't interact correctly with vfs_acl_xattr or vfs_acl_tdb module.
      Ensure change_dir_owner_to_parent() can't be raced.
      Ensure vfs_chown_fsp() is safe against races.
      Use handle based xattr set if available.
      Trying to track down the SMB2 error. Add an invariant test.
      Fix bug 8088 - rpccli_samr_chng_pswd_auth_crap segfaults if any input blobs are null.
      Correctly detect and deny symlinks anywhere in a path (not just the last component) if "follow symlinks = no".
      No longer need to call SMB_VFS_LSTAT - check name hasn't changed above is sufficient.
      Remove fstrings from client struct. Properly talloc strings (ensuring we never end up with a NULL pointer).
      Fixup (C) - we've both worked lots on this :-).
      Remove another fstring in this code.
      Fix bug 8111 - CIFS VFS: unexpected error on SMB posix open
      torture test for bug #8111 - CIFS VFS: unexpected error on SMB posix open.
      Fix bug #8112 - POSIX extension opens of a directory are denied with EISDIR.
      Add POSIX O_RDONLY test of a directory for bug #8112 - POSIX extension opens of a directory are denied with EISDIR.
      Remove unused function parse_add_domuser().
      Fix simple uses of safe_strcpy -> strlcpy. Easy ones where we just remove -1.
      Change safe_strcpy_base to strlcpy_base. Note the size doesn't change here as the original macro auto-added the -1.
      Remove obvious use of safe_strcpy + safe_strcat -> strlcpy + strlcat.
      Remove overmalloc_safe_strcpy - can be simple strlcpy.
      BUGFIX when converting from safe_strcpy to strlcpy.
      Simple +1 changes in hardcoded lengths when changing from safe_strcpy to strlcpy.
      sasl_secret_t ends in a char [1] size. This means the extra character is implicit in the safe_strcpy. When changing to strlcpy ensure we allocate an extra char for it. This fixes a bug where secret->len+1 used with safe_strcpy could actually write into secret->len+2.
      Fix off-by-one when used with safe_strcpy.
      Fix the only place we reply on the NULL handling for the source in safe_strcpy.
      Fold null terminator into listlen length, change to strlcpy.
      Cope with +1 change on moving from safe_strcat to strlcat.
      Remove magic numbers. Standardize on macro. Move from safe_strcat to strlcat.
      Convert safe_strXX to strlXXX. Clean up off-by-ones.
      Add in bufflen limit when storing NetBIOS names. Remove safe_strcpy.
      Tidy up some missing checks for NULL in strlcpy.
      Fix warning messages caused by addition of null check in fstrcpy macro.
      I added them, so I get to kill them :-). Finally remove all uses of safe_strcpy and safe_strcat. Change to strlcpy, strlcat.
      Clean up some const and other compiler warnings.
      Don't reuse a non-const pointer when manipulating const.
      Fix many const compiler warnings.
      More const compiler warning fixes.
      Fixup build without --with-aio.
      More const fixes for compiler warnings from the waf build.
      More simple const fixes.
      More simple const fixups.
      More const fixes... getting near the end now.
      Change the char * pointers in the struct to const char * (which is how they're treated).
      More const fixes. Remove CONST_DISCARD.
      Fixup use of const.
      Fix broken interface to set_namearray() - don't modify incoming string.
      Fix const in smbtorture.
      A couple more off-by-one calculations with strlcpy.
      Remove duplicate code - move to parent_dirname() as a common function.
      Fix compiler warning in debug message.
      Cosmetic. Fix bad indentation.
      Ensure we always write the correct incoming mid into the share mode
      Fix the SMB2 showstopper, found by an extended torture test from Volker.
      Remove duplicate definition of SMB_VFS_NEXT_STRICT_UNLOCK. Found by herb at samba.org
      Don't evaluate the src argument to fstrcpy/fstrcat/nstrcpy/unstrcpy twice. Prevents side-effects when src is a function call.
      is_my_ipaddr() should recognise loopback addresses as ours.
      Fix redefinition of fstrcpy.
      Fix bug #8144 - touch /mnt/newfile fails to set timestamp with CIFS client.
      Fix bug found when building on an IPv6-only system by Kai Blin.
      Optimization. If the attributes passed to can_rename() include both FILE_ATTRIBUTE_HIDDEN and FILE_ATTRIBUTE_SYSTEM then there's no point in reading the source DOS attribute, as we're not going to deny the rename on attribute match.
      Fix bug 8133 - strange behavior for the file (whose filename first character is period ) in SMB2 case.
      Fix bug #8157 - std_pcap_cache_reload() fails to parse a cups printcap file correctly.
      The "workgroup" parameter is not used at all in cli_session_setup_kerberos(). Remove it.
      Patch for bug #8156 - net ads join fails to use the user's kerberos ticket.
      Fix bug #8150 - Ban 'dos charset = utf8'
      Fix bug #7054 - X account flag does not work when pwdlastset is 0.
      Fix our asn.1 parser to handle negative numbers.
      Fix bug #8165 - Inverted WITH_SYSLOG condition in vfs_full_audit.c.
      Fix bug #6911 - Kerberos authentication from vista to samba fails when security blob size is greater than 16 kB
      Split the ACE flag mapping between nfs4 and Windows
      Add check for the getcwd function being able to take NULL,0 arguments.
      Change sys_getcd() to take no arguments and always return malloc'ed memory (or NULL).
      Remove the char * argument from the SMB_VFS_GETWD() call. Now always
      Fix bug #8175 - smbd deadlock.
      TALLOC_FREE already checks for null.
      Move fd_close on error path to be identical to all other error paths.
      Fix bug where format arguments were reversed. Please compile with -Wall !
      Fix type mixing warnings.
      release_ip() is only used with CLUSTER_SUPPORT.
      Fix const warning.
      Fix const warning.
      Fix const warnings.
      Remove a PATH_MAX.
      Remove another PATH_MAX.
      Fix the poll() backend to correctly respond to POLLHUP|POLLERR returns on a fd selected for TEVENT_FD_WRITE only.
      Add the same fix to the S3 event backend as the previous commit added to the tevent poll backend.
      Fix bug #8197 - winbind does not properly detect when a DC connection is dead.
      Fix re-opened bug 8083 - "inherit owner = yes" doesn't interact correctly with vfs_acl_xattr or vfs_acl_tdb module.
      Part 1 of bugfix for #8211 - "inherit owner = yes" doesn't interact correctly with "inherit permissions = yes" and POSIX ACLs
      Part 2 of bugfix for #8211 - "inherit owner = yes" doesn't interact correctly with "inherit permissions = yes" and POSIX ACLs
      Part 3 of bugfix for #8211 - "inherit owner = yes" doesn't interact correctly with "inherit permissions = yes" and POSIX ACLs
      Part 4 of bugfix for #8211 - "inherit owner = yes" doesn't interact correctly with "inherit permissions = yes" and POSIX ACLs
      Ensure when creating a directory, if we make any changes due to inheritance parameters, we update the stat returned.
      Bump the smbd vfs interface version to 29. Samba 3.6.0 will ship
      Fix bug #8254 - "acl check permissions = no" does not work in all cases
      Fix bug #8219 - SMB Panic from Windows 7 Client
      Second part of fix for bug #8219 - SMB Panic from Windows 7 Client.
      Part of fix for bug 8276 - FD_SET out of bounds access crash.
      Fix bug #8293 - SMB2 doesn't rotate the log files often enough.
      Move smbd_smb2_request_check_tcon() smbd_smb2_request_check_session() next to their only user and make them static. Add comments.
      Fix bug #8307 - brl_close_fnum does not call SMB_VFS_BRL_UNLOCK_WINDOWS on all locks
      First part of fix for bug 8310 - toupper_ascii() is broken on big-endian systems
      Second part of fix for bug 8310 - toupper_ascii() is broken on big-endian systems.
      Fix const warning.
      Fix bug 8314] - smbd crash with unknown user.
      Fix typo Loggs -> Logs.
      Fix bug #8324 - smbclient cannot list directories from a big-endian machine.
      Use existing ISDOT and ISDOTDOT macros.
      First part of bugfix for bug #8335 - file copy aborts with smb2_validate_message_id: bad message_id
      Secod part of bugfix for bug #8335 - file copy aborts with smb2_validate_message_id: bad message_id
      Added missing return. Not strictly neccessary, the following if (!NT_STATUS_EQUAL(status, NT_STATUS_NOT_SUPPORTED))
      Fix bug 7462 - Non-standard SA_RESETHAND is used in ...lib/tevent/tevent_signal.c
      We don't need check_name() here. All possible paths to dptr_create()
      Fix bug #8370 - vfs_chown_fsp broken -- returns in the wrong directory
      If "ldap timeout" is non-zero, set the local search timeout to
      Change got_alarm from bool to the correct type of SIG_ATOMIC_T.
      Remove old_handler as alarms can't be nested. Use SIG_IGN instead.
      Always remove the alarm before changing the handler, not the other way around.
      Make it clear the time here is an absolute endtime. Don't set the alarm if the LDAP timeout is zero.
      Allow the timeout pointer to ldap_search_ext_s() to be NULL if lp_ldap_timeout() == 0.
      Move the alarm setup/teardown out of another_ldap_try() and into separate
      Simplify the logic on the another_ldap_try() loops by breaking
      Factor out the ldap_get_option calls into a function.
      Remove the tortured logic in another_ldap_try() and turn it into
      Ensure we never wait past absolute entime to do a get_cached_ldap_connect().
      RAW_SFILEINFO_RENAME_INFORMATION_SMB2 sends 4 bytes of uninitialized data out on the network.
      Fix bug Bug 8422 - Infinite loop in ACL module code.
      Fix bug 8412 - Microsoft Office 2007 (Microsoft Word) fails to save as on a Samba share with SMB2.
      Fixed regression test case for Bug 8412 - Microsoft Office 2007 (Microsoft Word) fails to save as on a Samba share with SMB2
      Based on metze's fix for Bug 8407 - SMB2 server can return requests out-of-order when processing a compound request. (cherry picked from commit 19db1c98c6ba3cb5e883e16e865c44900ce17444)
      Fix bug 8429 - Compound SMB2 requests on an IPC connection can corrupt the reply stream.
      Part 1 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set (Invalid argument)
      Part 2 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set (Invalid argument)
      Part 3 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set (Invalid argument)
      Part 4 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set (Invalid argument)
      Part 5 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set (Invalid argument)
      Revert "Part 5 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set (Invalid argument)"
      Tidy up previous patch for bug #8442 - NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames.
      Revert "Part 4 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set (Invalid argument)"
      Fix bug #8203 - winbindd needs to reset the DC connection if an RPC times out.
      First part of fix for bug #8443 - Default user entry is set to minimal permissions on incoming ACL change with no user specified.
      Second part of fix for bug #8443 - Default user entry is set to minimal permissions on incoming ACL change with no user specified.
      Move the talloc_move call until *after* the check on status. Don't want to move something that might be invalid.
      Fix bug #8229 - git patch attached against 3.6.0-rc2 to fix 'widelinks' regression intro'd in 3.2
      Fix bug #8453 - smbclient segfaults when dialect option -m is used for legacy dialects
      Finish commit 8745c70d by Michael Adam.
      Try and fix bug #8472 - Crash in asn.1 parsing code.
      Fix bug #8473 - smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans.
      Fix bug #8474 - SMB2 create doesn't cope with an Apple client using NULL blob in create
      Fix bug #8458] - IE9 on Windows 7 cannot download files to samba 3.5.11 share
      Remove extraneous debug code.
      Fix bug #8476 - Samba asserts when SMB2 client breaks the crediting rules.
      Fix bug #8477 - Map to guest can return uninitialized blob of data.
      Revert "Add a missing include file to two VFS modules"
      These modules are no longer experimental but production-ready (especially
      Second part of bug #8494 - Remove "experimental" label on VFS ACL modules.
      Fix bug #8493 - DFS breaks zip file extracting unless "follow symlinks = no" set
      Fix bug #8507 - smbd doesn't correctly honor the "force create mode" bits from a cifsfs create.
      Fix bug #8509 - Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER.
      Fix the VFS for fsctl.
      Add new contributing FAQ announcing acceptance of corporate (C).
      Fix bug #8521 - winbindd cache timeout expiry test was reversed
      Another part of the fix for Bug 8473 - smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans.
      Fix const warning.
      Fix const warnings.
      Fix const warnings.
      Fix printf warning.
      Remove unused function.
      Removed unused variable.
      The last argument to atalk_build_paths() is always false, remove it.
      vfs_netatalk should be using strstr_m, not strstr to find .AppleDouble paths.
      Make use of the "dir_exists" we already have on directory open.
      Fix error return to be NT_STATUS_NOT_A_DIRECTORY.
      Fix a boatload of warnings in the examples.
      Make mkdir_internal() check the parent ACL for SEC_DIR_ADD_SUBDIR rights.
      Refactor to create check_parent_access() which can be called for file creation too.
      Deprecate "acl check permissions".
      Fix bug #8541 - readlink() on Linux clients fails if the symlink target is outside of the share.
      Second part of fix for bug #8541 - readlink() on Linux clients fails if the symlink target is outside of the share.
      Third part of fix for bug #8541 - readlink() on Linux clients fails if the symlink target is outside of the share.
      Try and fix bug #8384 - Windows XP clients seem to crash smbd process every once in a while.
      Second attempt to fix bug #8384 - Windows XP clients seem to crash smbd process every once in a while.
      Add early return on stat open without O_CREAT if file doesn't exist.
      Remove another level of indentation - deal with !NT_STATUS_OK individually.
      Factor out the code checking if a parent should override DELETE_ACCESS into a function.
      Make smbd_check_open_rights() static.
      Move parent_override_delete() to before I need to use it.
      Simplify smbd_check_open_rights() and move all the special casing inside it.
      Finally do all the open checks inside open_file(). Checks inside
      Remove unused "struct security_descriptor" parameter from check_parent_access()
      Remove the mkdir and open functions from the ACL modules - main code paths now handle this.
      The xcopy test requires "dos filemode=yes" as it opens with WRITE_OWNER.
      Remove the order dependency in parent_override_delete(), just check for & not ==.
      The xcopy test is used in unusual ways (via a different uid). Ensure we can cope with this.
      Fix bug #8548 - winbind_samlogon_retry_loop ignores logon_parameters flags.
      Change function signature of check_parent_access() to take char * instead of struct smb_filename.
      Call check_parent_access() on readdir.
      Remove opendir() VFS code from ACL modules.
      Fix bug #8562 - talloc: double free error.
      Revert "Call check_parent_access() on readdir."
      Revert "Change function signature of check_parent_access() to take char * instead of struct smb_filename."
      smb1_file_se_access_check() is now static to smbd/open.c
      Move root check out of smb1_file_se_access_check() in preparation for deleting this function.
      Replace smb1_file_se_access_check() with just se_access_check().
      Rename smbd_check_open_rights() to smbd_check_access_rights() as we're going to remove the static from this.
      Expose smbd_check_access_rights() to other modules.
      Add const to the smb_filename argument of smbd_check_access_rights().
      Remove can_access_file_data() - make it use the standard smbd_check_access_rights() instead.
      Remove can_access_file_acl(). We no longer need this duplicate code (hurrah!).
      No longer do the pre-check on DELETE_ACCESS - we're correctly checking the ACL every time now.
      can_write_to_file() does now take share permissions into account. Fix comment.
      Move the SEC_DIR_LIST check into dptr_create for SMB2 and now for SMB1.
      Add the SEC_DIR_LIST check to dptr_create().
      Remove unneeded NULL check.
      Ensure we correctly calculate reply credits over all returned
      Fix bug #8561 - Password change settings not fully observed.
      Move handle based access check into handle code path.
      Remove unneeded access check. This is done inside smb_set_file_size().
      Remove unneeded access check. This is done inside smb_set_file_time().
      We've already checked fsp must be non-null here.
      Move handle-based access check into handle codepath.
      Always set the attribute first, before the time.
      Remove the check for FILE_WRITE_ATTRIBUTES from smb_set_file_time(). It
      Final part of patchset to fix bug #8556 - ACL permissions ignored when SMBsetatr is requested.
      Remove rawmemchr calls - found by Ira Cooper. These are glibc-specific calls, makes us completely non-portable.
      Fix a bunch of "warning: variable ‘XXXX’ set but not used [-Wunused-but-set-variable]" warnings from the new gcc.
      Move the add security descriptor code to *after* all the other meta-data is
      Only add the SD if it's not a new stream file.
      Move the "set SD" code into provided SD and "inherit acls" branches.
      Move setting the inherited ACL into the main open code path. Next will
      Remove the setting of the inherited ACL on new files/directories. This is
      Ensure we don't free uninitialized variables.
      Fix uninitialized variable frees on error paths.
      Remove unused variable.
      Fix bug 8631 - POSIX ACE x permission becomes rx following mapping to and from a DACL
      Fix bug 8636 - When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field.
      After a discussion with Volker, sdd a backup_intent state to the client struct.
      Add the "backup" toggle command to smbclient. In order for this to be
      Convert smbclient to using NtCreateX by preference, fall back to openX on
      Ensure we map our own Samba return of ERRSRV, ERRunknownsmb
      Fix bug #8644 - vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL.
      Update the waf build system to link with the new PIDL locking code.
      Rename cli_open -> cli_openx. Prelude to replacing generic cli_open()
      Add cli_open() back as a synchronous wrapper function the calls
      Move the callers that need to use the new cli_open() back to calling
      Revert fac5c654e2fe17c2c11d150b16088e8a51f6be20
      First part of fix for bug #8663 - deleting a symlink fails if the symlink target is outside of the share.
      Second part of fix for bug #8663 - deleting a symlink fails if the symlink target is outside of the share.
      Third part of fix for bug #8663 - deleting a symlink fails if the symlink target is outside of the share.
      Restrict UCF_UNIX_NAME_LOOKUP (symlink allowed) to restricted set of calls.
      Fix bug #8664 - Renaming a symlink fails if the symlink target is outside of the share.
      Ensure VALID_STAT before accessing fields.
      check_name() not needed in mkdir.
      Allow an object to be deleted from a directory if the caller has DELETE_CHILD access
      Change the signature of pthreadpool_finished_job() to return 0
      Fix bug #8679 - recvfile code path using splice() on Linux leaves data in the pipe on short write
      Second part of fix for bug #8679 - recvfile code path using splice() on Linux leaves data in the pipe on short write.
      Third part of fix for bug #8679 - recvfile code path using splice() on Linux leaves data in the pipe on short write.
      Final part of fix for bug #8679 - recvfile code path using splice() on Linux leaves data in the pipe on short write.
      Add S3 vfs_aio_pthread module to replace broken glibc aio code.
      Add some debug to vfs_aio_pthread so I can see when jobs start and stop.
      Fix bug #8687 - net memberships usage info is wrong
      Add a sys_get_number_of_cores() function that calls sysconf or sysctl
      Fix format warning message.
      Add "aio num threads" parameter to allow manual configuration of
      Comment out sys_get_number_of_cores() as we're no longer using this.
      Remove the commented out code.
      First part of fix for bug #8673 - NT ACL issue.
      Second part of fix for bug #8673 - NT ACL issue.
      Ensure we always free aio_ex on all error paths by moving the TALLOC_FREE
      Add comments to all functions (to help me understand it better).
      Fix bug 8710 - connections.tdb - major leak with SMB2.
      Now make_connection_snum() is a static function that takes a
      Another fix for bug #8556 - ACL permissions ignored when SMBsetatr is requested.
      s3: Fix bug #8674.
      Add man page for vfs_aio_pthread module.
      Use sys_pread/sys_pwrite to cope correctly with 64-bit sizes. As in the default VFS case fall back from pread -> read and pwrite -> write on an ESPIPE error in the worker thread.
      Update man page to fix typo vfs_aio_fork -> vfs_aio_pthread, add
      Fix a really slow memory leak (in master at least). Found by Ira Cooper <ira at wakeful.net>.
      Finally remove all malloc()'s from the substitute code. Now totally
      Fix bug #8139 - smbclient fails if server does not support Echo request.
      Allow a SACL to be sent in cli_set_secdesc().
      Only ask for specific permissions required when setting an ACL.
      Replace all malloc/free with talloc on tos.
      Fix bug #7933 - samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module.
      Replace bool flags inside ensure_canon_entry_valid() with pointers.
      Fix mistaken assignment of gid to uid field.
      Ensure when setting a POSIX ACL, that the uid for a
      Remove unused get_file_size() function.
      Fix shadow variable name warning.
      Replace smbd_server_connection_loop_once() with tevent_loop_once() directly.
      Fix a bunch of "unused variable" warnings.
      Remove unused function.
      Fix const warnings.
      Make dptr_path() and dptr_wcard() const.
      Move dptr code over to TALLOC.
      Fix problem reported by Tom Lee <tlee2951 at gmail.com> - when calculating
      Add check_reduced_name_with_privilege(), filename_convert_with_privilege() (currently unimplemented) in order to prepare for adding SeBackup/SeRestore code to the main fileserver.
      Add the implementation of check_reduced_name_with_privilege(). Now to plumb into
      Add accessor functions to set a bool "priv" on a directory handle. Not yet used, but will be part of FLAG_TRANS2_FIND_BACKUP_INTENT code.
      Implement FLAG_TRANS2_FIND_BACKUP_INTENT for trans2 with privileges.
      Add open_dir_with_privilege() to ensure we're opening the correct directory when doing backup requests.
      Fix mixup between talloc/malloc.
      Move to talloc from malloc.
      Change default protocol to SMB2_02.
      Fix up Christian Ambach's multi-credit code - the CreditCharge field is a 16-bit int read, not a 32-bit one.
      Ensure the right tsocket.h is included.
      Second part of fix for bug #7933 - samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module.
      Fix bug #8811 - sd_has_inheritable_components segfaults on an SD that se_access_check accepts.
      Make reinit_after_fork_pipe_handler code with reads being interrupted by a signal.
      Fix second part of bug #8811 - sd_has_inheritable_components segfaults on an SD that se_access_check accepts.
      Fix bug 8823 - source3/smbd/process.c:smb_dump seems to have a memory leak.
      Based on code from Richard Sharpe <realrichardsharpe at gmail.com>,
      Start to add truncate checks on all uses of strlcpy(). Reading lwn
      More strlcat/strlcpy truncate checks.
      Who would have guessed - checking returns from strlcat found a memory overwrite bug :-).
      Fix bug #8831 - Inconsistent (with manpage) command-line switch for "help" in smbtree
      Fix an IPv6 breakage I introduced by adding an strlcpy truncation check. Found by Matthieu Patou <mat at samba.org>.
      First part of fix for bug 8837 - smbd crashes when deleting directory and veto files are enabled.
      Second part of bugfix for bug #8837 - smbd crashes when deleting directory and veto files are enabled.
      Third part of fix for bug #8837 - smbd crashes when deleting directory and veto files are enabled.
      Bug found by Herb. blkcnt_t st_ex_blksize is defined as a signed value. When it is
      Found whilst back-porting the fix for bug 8837 - smbd crashes when deleting directory and veto files are enabled.
      Move blksize_t and blkcnt_t to replace.h from includes.h. Should help with platforms that don't have these.
      On advice from Jelmer and Andrew, move the blksize_t and blkcnt_t tests into libreplace to make it standalone.
      Add a new module, aio_linux which implements Linux kernel aio support. Docs to follow.
      Simplify the logic around doing an immediate event reschedule.
      Try and fix autoconf on the build farm. Always include sys/types.h when working out sizeof(blkcnt_t).
      Remove overly complex attemt to define blkcnt_t and blksize_t. AC_CHECK_TYPE should just do it.
      Fix the same bug reported by Kirill Malkin <kirill.malkin at starboardstorage.com>  and
      Move the counting of outstanding_aio_calls into the lifecycle of the aio_extra struct.
      Fix return_fn when aio was cancelled. We need to return -1, errno = ECANCELED.
      Remove cancel_aio_by_fsp(). It can never work and could lead to memory corruption
      We never cancel SMB1 aio, only SMB2 aio - and in this case we always return a value.
      Add docs for aio_linux vfs module.
      Ensure we have 12 bytes of data for a SMB_SET_CIFS_UNIX_INFO call. Add debug.
      Add smb_raw_setfsinfo() - currently only available level is SMB_SET_CIFS_UNIX_INFO.
      Fix samba3.raw.samba3hide test - ensure we set up POSIX capabilities
      Add complete test program for Linux kernel aio inside configure.in (I discovered yesterday there are systems with only half the glibc changes needed to implement userspace kaio.
      Fix bug #8882 - Broken processing of %U with vfs_full_audit when force user is set.
      Fix bug reported by Dina_Fine at Dell.com.
      Fix remove_duplicate_addrs2 to do exactly what it says. Previously it could leave zero addresses in the list.
      Fix convert_ss2service() to filter out zero addresses.
      Protect all of the name resolution methods from returning null addrs. Ensure all returns go through remove_duplicate_addrs2().
      Fix the loop unrolling inside resolve_ads(). If we don't get
      Fix bug #8873 - self granting privileges in security=ads.
      Fix bug #8922.
      This covers a case where an ID_TYPE_BOTH mapping creates group permissions, but must own the file. Based on an original patch by Andrew Bartlett.
      Fix the waf build with the new "cleans up stale processes" test.
      Note that "keepalive" only applies to SMB1 connections.
      Raise the debug level from 1 to 5 in get_share_mode_lock_internal()
      Move the set_write_time() call to after get_existing_share_mode_lock() returns with a share mode.
      Added torture test for bug #8910. Test remove_duplicate_addrs2().
      Fix bug #8953 - winbind can hang as nbt_getdc() has no timeout.
      Fix bug #8373 - Can't join XP Pro workstations to 3.6.1 DC.
      Fix an invalid state only reachable on server crash/abort.
      Ensure we only return NT_STATUS_DELETE_PENDING if the share modes are valid.
      Fix metze's complaint about the bugfix for bug #8953 - winbind can hang as nbt_getdc() has no timeout.
      Stop spamming the logs with "Could not remove pid XX from serverid.tdb" messages and initiating the cleanup function on every process death.
      We are triggering the cleanup_timeout_fn() too often, on exiting when an smbd is idle.
      Forward port of Richard Sharpe's <realrichardsharpe at gmail.com> fix for bug #8970 - Possible memory leaks in the samba master process.
      Remove an unused variable.
      Fix bug #8972 - Directory group write permission bit is set if unix extensions are enabled
      Tests for bug #8972 - Add a posix_share definition to s3 so we can do raw posix permissions checks.
      Tests for bug #8972 - Add a posix_share definition to s4 so we can do raw posix permissions checks.
      Tests for bug #8972 - run the POSIX tests against the posix_share.
      Tests for bug #8972 - Add permission checks to run_simple_posix_open_test().
      Fix Bug 8989 - Samba 3.5.x (and probably all other versions of Samba) does not send correct responses to NT Transact Secondary when no data and no params
      Same fix as bug 8989 - Samba 3.5.x (and probably all other versions of Samba) does not send correct responses to NT Transact Secondary when no data and no params
      Fix warning: variable ‘XX’ set but not used.
      Fix  warning: variable ‘in_start_time’ set but not used.
      Fix warnings using %lu to print a 64-bit value (should by %llu).
      Fix warning: variable ‘status’ set but not used.
      Remove unused code now we set the correct command codes.
      Fix a bunch of "set but not used" warnings.
      Fix more "set but not used" warnings.
      Remove unused variables and code.
      Remove unused variables.
      Fix unused variable warnings.
      Fix unused variable warnings.
      Fix bug #8974 - Kernel oplocks are broken when uid(file) != uid(process).
      Add missing setresgid() wrapper.
      Replace all uses of setXX[ug]id() and setgroups with samba_setXX[ug]id() calls.
      Move back to using per-thread credentials on Linux. Fixes the glibc native AIO lost wakeup problem.
      Fix typo in configure.in check for USE_LINUX_THREAD_CREDENTIALS.
      Try and fix the autoconf build on Solaris/Nexenta/etc.
      Add uint64_t mid field to the files_struct.
      Fix defer_open() fuction in the open code path to cope with a NULL lck parameter.
      Add new bool field async_open to struct deferred_open_record. Not used yet.
      Allow for async opens.
      Make schedule_deferred_open_message_smb2() return an indication of success.
      Make schedule_deferred_open_message_smb() return an indication of success.
      Don't allow asynchronous creates to be canceled in SMB2.
      Disable selections of USE_LINUX_THREAD_CREDENTIALS until we have specific
      Ensure we select the correct syscall numbers on a 32-bit Linux system.
      Fix the waf/autoconf builds to detect correctly the 32-bit or 64-bit syscall ABI on Linux.
      Allow init_aio_threadpool() to be setup for different threadpool handles with different completion functions.
      Add function set_thread_credentials_permanently(). Panic if fail.
      Move copy_unix_token() from locking/locking.c to lib/util.c.
      Add waf/configure tests for openat.
      Factor out check_same_dev_ino() from check_same_stat() so it can be called separately.
      Make check_same_stat() and check_same_dev_ino() common functions.
      Use new common function.
      Simplify the logic in open_file().
      Simplify the logic in open_file() some more.
      Add function fd_open_atomic() which uses O_CREAT|O_EXCL to return a guaranteed indication of creation of a new file.
      Now we have a guaranteed indication of a file being created, use it to set the create disposition correctly.
      Cope with a (non-security) open race we've had for ever as NTCreateX isn't atomic on POSIX.
      Fix typo we've had for a long time in set_re_uid() in the USE_SETRESUID case.
      Move set_thread_credentials_permanently() to set_thread_credentials()
      Add in the threaded async open engine.
      Add an optimization to pthread aio writes to also do fsync if requested.
      Make sure we reset fsp->initial_allocation_size to zero if we didn't create the file.
      Set fsp->initial_allocation_size before calling open_file_ntcreate().
      Linux-specific optimization in aio_open code.
      Use HAVE_FSYNC, we bothered to test for it.
      Fix bug #9016 - Connection to outbound trusted domain goes offline.
      Add debug message when SD hash doesn't match.
      Move source4/smbd/pidfile into lib/util in preparation for making it in common.
      Add debugs to functions. Add pidfile_unlink().
      Make the s3 pidfile use the common code inside lib/util/pidfile.c
      Fix the configure build - add lib/util/pidfile.o into UTIL_OBJ.
      Move everything to use the common pidfile functions.
      Remove source3/lib/pidfile.c
      Fix problem found by Andrew Bartlett - correctly check encrypted flag.
      Fix debug print warning message.
      Fix compiler warning.
      Fix unused variable.
      Fix incorrect use of server as a talloc context.
      Fix compiler warning message.
      Remove unused variable.
      Fix bad return values in unix_strlower/unix_strupper.
      Prepare to remove smb_panic() from unix_strlower().
      Fix bad return in unix_strupper.
      Change strupper_m() to return a value.
      Fix missing ads_destroy in error path.
      Check error returns from strupper_m() (in all reasonable places).
      Check error returns on strnorm().
      Fix strlower_m() to return an error indication.
      Correctly check for errors in strlower_m() returns.
      Remove smb_panic() from unix_strlower(). Just rely on error code return.
      Ensure we update last_access on the winbindd child struct on each request.
      Fix bug #9098 - winbind does not refresh kerberos tickets.
      Fix bug in SMB_FIND_INFO_STANDARD parsing found by Volker.
      Remove align_string(). No longer used.
      Move uppercasing the domain out of smb_pwd_check_ntlmv2()
      Remove useless bool "upper_case_domain" parameter.
      Remove useless bool "upper_case_domain" parameter from ntv2_owf_gen().
      Rename set_sd() to set_sd_blob() - this describes what it does.
      Re-add set_sd(), called from set_sd_blob(). Allows us to centralize all ACL canonicalization.
      Change the other two places where we set a security descriptor given by the client to got through set_sd(),
      Windows does canonicalization of inheritance bits. Do the same.
      Fix bug #9124 - Samba fails to set "inherited" bit on inherited ACE's.
      With the inheritance ACL changes we now pass samba3.smb2.acls.INHERITFLAGS.
      Now ACL inheritance flags are working, add test_inheritance_flags() back into raw.acls to ensure we don't regress.
      The NTVFS server doesn't pass the SMB1 INHERITFLAGS test.
      SEC_RIGHTS_DIR_PRIV_BACKUP and SEC_RIGHTS_DIR_PRIV_RESTORE aren't used anywhere. Remove (can re-add if needed).
      Factor out privilege checking code into se_file_access_check() which takes a bool priv_open_requested parameter.
      Change the S3 fileserver over to se_file_access_check().
      Add a comment showing where to set log level in tests.
      Rewrite torture_samba3_rpc_sharesec() to use a non-privileged user for share security descriptor testing.
      Now SEC_RIGHTS_PRIV_RESTORE and SEC_RIGHTS_PRIV_BACKUP don't include any generic bits (they're used directly in the fileserver where the generic bits have already been mapped into file specific bits) we need to add the generic bits to the test when we have these privileges.
      Remove an unncessary FTRUNCATE call in the open path. We can rely on O_TRUC.
      Add "backup_intent" bool to files_struct.
      Fix bug #9147 - winbind can't fetch user or group info from AD via LDAP
      Fix talloc memory heirarchy bug. If there's an SMB2 sessionsetup in flight when we're shut down, we end up freeing the struct smbXsrv_session *session pointer twice.
      samba3.smb2.durable-open.delete_on_close1 is now flapping (sometimes passes).
      At Michael's suggestion, factor common code into a function. My bad :-).
      Make metze happy and the code clearer :-).
      Remove ancient "optimization" global LastDir.
      Move cached cwd onto conn struct.
      In vfs modules, don't use 'conn->origpath' when we really mean 'conn->cwd'.
      Sigh :-(. Removing optimization prematurely is the root of all evil :-(.
      Don't call can_write_to_file() if we already have 'fsp->can_write' set.
      Add "backup_intent" bool.
      Add bool use_privs parameter to smbd_check_access_rights()
      Fix bad string in debug message (remove it).
      Add 'bool use_privs' to smbd_calculate_access_mask().
      Fix bug #9189 - SMB2 Create doesn't return correct MAX ACCESS access mask in blob.
      We now pass "samba3.raw.acls.generic" and "samba3.smb2.acls.GENERIC" with the max access change.
      Fix bug #9213 - Bad ASN.1 NegTokenInit packet can cause invalid free.
      Fix bug #9209 - Parse of invalid SMB2 create blob can cause smbd crash.
      s3: Fix bug 8966, Fix net rpc share allowedusers to work with 2008r2
      Add samba3.samba3badnameblob test to check regressions in bug #9215.
      Reformat spacing to be even.
      Use is_default_acl variable in canonicalise_acl().
      Only apply masks on non-default ACL entries when setting the ACL.
      When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries.
      Add functions to programatically set the security mask and directory security mask parameters.
      When creating a new file/directory, we need to obey the create mask/directory mask parameters.
      Fix bug #9222 - smbd ignores the "server signing = no" setting for SMB2.
      Fix bug #9214 - Bad user supplied SMB2 credit value can cause smbd to call smb_panic.
      Revert "Fix bug #9222 - smbd ignores the "server signing = no" setting for SMB2."
      Correct fix for bug #9222 - smbd ignores the "server signing = no" setting for SMB2.
      Revert "When creating a new file/directory, we need to obey the create mask/directory mask parameters."
      Revert "Add functions to programatically set the security mask and directory security mask parameters."
      Remove all uses of lp_security_mask/lp_force_security_mode/lp_dir_security_mask/lp_force_dir_security_mode
      Remove the parameters:
      Update WHATSNEW.txt with removed parameters.
      Ensure the masks don't conflict with the ACL checks.
      Simplify ensure_canon_entry_valid by splitting out the _get codepath.
      Modify ensure_canon_entry_valid() into ensure_canon_entry_valid_on_set() - makes the logic clearer.
      We should never just assign an st_mode to an ace->perms field, theoretically
      Move setting of psd->dacl->revision and protect against null SD's.
      Make sure the returned sd is on the right context, and if not it's always freed.
      Fix bug #9329 - Directory listing with SeBackup can crash smbd.
      Add regression test for bug #9329 - Directory listing with SeBackup can crash smbd.
      Another fix needed for bug #9236 - ACL masks incorrectly applied when setting ACLs.
      Add comments explaining exactly *why* we don't check FILE_READ_ATTRIBUTES when evaluating file/directory ACE's.
      More for #9374 - Allow smb2.acls torture test to pass against smbd with a POSIX ACLs backend.
      Remove unused append_parent_acl().
      Documentation fixes for bug #9462 - Users can not be given write permissions any more by default
      s3:auth: Tidy up some of the API confusion in create_token_from_XXX() calls.
      Fix bug #9196 - defer_open is triggered multiple times on the same request.
      Recent coverity changes added directory_create_or_exist() checks to many directories.
      Allow create_conn_struct() to be called with snum == -1.
      smbd/posix_acls.c: Use create_conn_struct(). Don't hand-create connection structs.
      source3/smbd/pysmbd.c: Always use create_conn_struct(). Don't hand create connection structs.
      torture/vfstest.c: Always use create_conn_struct(). Don't hand create connection structs.
      Start to tidy-up check_user_ok().
      Move the definition of struct vuid_cache_entry *ent outside blocks.
      Remove one set of enclosing {} braces, no longer needed.
      Remove the second set of {} braces, no longer needed.
      Remove dead code now vuser can no longer be NULL.
      Remove unneeded variable "const struct auth_session_info *session_info"
      Clean up struct connection_struct, make struct vuid_cache a pointer not inline.
      Add uint32_t share_access to vuid_cache_entry.
      Remove static from create_share_access_mask().
      Fix API for create_share_access_mask().
      Change API for create_share_access_mask() to pass in the token.
      Change API for create_share_access_mask() - remove conn struct.
      Correctly setup the conn->share_access based on the current user token.
      Add check_user_share_access() which factors out the share security and read_only flag setting code.
      Initialize stack variables. Prelude to factoring out calls to check_user_share_access().
      Factor code out of check_user_ok() into a call to check_user_share_access().
      Fix bug #9518 - conn->share_access appears not be be reset between users.
      Move create_share_access_mask() from smbd/service.c to smbd/uid.c.
      Fixup the change_to_user_by_session() case as called from become_user_by_session()
      lib/replace: Add missing check for sys/wait.h
      lib/replace: Add ucontext configure waf checks.
      lib/replace: Add ucontext configure autoconf checks.
      lib/replace: Include sys/ucontext.h if available.
      tevent: Fix bug 9550 - sigprocmask does not work on FreeBSD to stop further signals in a signal handler
      Move handle checking code to copychunk_check_handles().
      Add additional copychunk checks.
      Move copychunk locking to be local to the read/write calls.
      Remove locking across the lifetime of the copychunk call.
      Sort winbind request flags. Ira saw we have a duplicate.
      Remove some unused variables.
      Fix warnings with mismatched sizes in arguments to DEBUG statements.
      Fix bug #9586 - smbd[29175]: disk_free: sys_popen() failed" message logged in /var/log/message many times.
      Revert "s3:smbd: SMB ReadX with size > 0xffff should only possible for samba clients."
      Fix bug #9572 - File corruption during SMB1 read by Mac OSX 10.8.2 clients.
      Fix bug #9587 - archive flag is always set on directories.
      Regression test for bug #9587 - archive flag is always set on directories.
      Fix bug #9588 - ACLs are not inherited to directories for DFS shares.
      Regression test for bug #9571 - Unlink after open causes smbd to panic
      Add new function smbXcli_session_copy(), to be used when creating compound SMB2 requests.
      Fix the compound tests to correctly pass against Windows when run with --signing=required.
      Fix bug #9642 - vfs_afsacl.c won't build.
      Fix bug 9519 - Samba returns unexpected error on SMB posix open.
      tevent: Preparing to fix "standard" backend fallback. Initialize standard after epoll.
      tevent: Ensure we return after every call to epoll_panic().
      tevent: Add an internal function tevent_epoll_set_panic_fallback().
      tevent: Plumb in the panic fallback code into the epoll_panic() runtime call.
      tevent: Add in some test code to allow the panic fallback path to be tested.
      tevent: Add in the same tevent_re_initialise() fix Metze put in the tevent_poll backend.
      tevent: Add a utility function tevent_find_ops_byname().
      tevent: Add a private function tevent_poll_event_add_fd_internal().
      tevent: Add in the new implementation of "standard" tevent backend.
      tevent: Remove the previous "standard" tevent backend implementation.
      tevent: Fix multiple handler on the same fd bug in the tevent select backend.
      tevent: Start to fix the epoll backend to support 2 fd events on the same fd correctly.
      tevent: Fix up epoll_del_event to cope with deleting a multiplexed fde event.
      tevent: Add utility function epoll_handle_hup_or_err()
      tevent: If epoll_ctl(..EPOLL_CTL_ADD,..) failes with EEXIST, merge the two fde's into one epoll event.
      tevent: Regression test to ensure that a tevent backend can cope with separate read/write events on a single fd.
      Fix bug #9724 - is_encrypted_packet() function incorrectly used inside server.
      libcli/smb: smb1cli_inbuf_parse_chain() and smb1cli_conn_dispatch_incoming() should use smb_len_tcp.
      s3:smbd: Fix off-by 4 error in wrap protection code in create_outbuf()
      s3:smbd: Remove server_will_accept_large_read() and erroneous comment.
      s3:smbd: Add functions calc_max_read_pdu()/calc_read_size() to work out the length we should return.
      s3:torture: Add new LARGE_READX test to investigate large SMBreadX behavior.
      s3:selftest: Add LARGE_READX test into our make test infrastructure.
      Solaris/Illumos/Nexenta creates pipes that are bi-directional by default.
      Fix tevent testsuite issue on Solaris.
      Fix bug #9733 - smbcontrol close-share is not working.
      Optimization suggested by Volker. Don't do a stat system call on normal read path.
      Fix bad SMB2 opcode reading in server.
      Ensure we can never return an uninitialized EA list.
      Modify fill_ea_chained_buffer() to be able to do size calculation only, no marshalling.
      Change estimate_ea_size() to correctly estimate the EA size over SMB2.
      Fix bug #9130 - Certain xattrs cause Windows error 0x800700FF
      Fix bug #9130 - Certain xattrs cause Windows error 0x800700FF
      Add a test to show that zero-length EA's are never returned over SMB2.
      Ensure we don't return uninitialized memory in the pad bytes.
      Final fix for bug #9130 - Certain xattrs cause Windows error 0x800700FF
      Ensure EA value is allocated on the right context.
      Change source3/modules/vfs_dirsort.c from MALLOC -> TALLOC.
      Protect against early error in SMB_VFS_NEXT_READDIR.
      Use an index i rather than re-using a state variable.
      Protect open_and_sort_dir() from the directory changing size.
      Clean error paths in opendir and fd_opendir by only setting handle data on success.
      Check SMB_VFS_NEXT_OPENDIR return in dirsort_opendir().
      Convert mtime from a time_t to a struct timespec.
      Remove the use of dirfd inside the vfs_dirsort.c.
      Remove unneeded initializations (we already talloc_zero).
      Ensure we test the dirsort module in make test.
      Maintain a back-pointer to the fsp in struct smb_Dir when opening with FDOPENDIR.
      In the struct smb_Dir destructor, use the fsp back pointer to release resources.
      Remove the "Ugly hack" that was the second use of dirfd().
      Remove dependency on detection of HAVE_DIRFD for use of fdopendir().
      Cleanup. Remove unused function dptr_DirCacheAdd(). Make DirCacheAdd() static.
      Ensure we don't do an SMB2 aio write if RECVFILE is active.
      If we already have an smb1req attached to the struct smbd_smb2_request, don't recreate it.
      Add function smbd_smb2_unread_bytes().
      Allow smbd_smb2_request_error_ex() to cope with unread bytes on error.
      Add utility function get_min_receive_file_size().
      Add macro SMBD_SMB2_SHORT_RECEIVEFILE_WRITE_LEN.
      Add extra fields into struct smbd_smb2_request_read_state to support receivefile.
      Add stub static function that will turn on/off receivefile code path.
      The guts of the receivefile code changes.
      Add the internals of is_smb2_recvfile_write.
      Ensure drain_socket() operates on a blocking socket.
      Ensure the RECVFILE path in vfs_write_data() operates on a blocking socket.
      Ensure the RECVFILE path in vfs_pwrite_data() operates on a blocking socket.
      Fix bug in old create temp SMB request. Only use VFS functions.
      Add early return in file_set_dosmode() on a read only share.
      Remove indentation around code wrapped by unneeded CAN_WRITE.
      Ensure we don't try the open_file_fchmod() if we can't write to the file.
      Check for WRITE_ACCESS on the file before overriding an EACCESS.
      Fix bug #9822 - Samba crashing during Win8 sync.
      Fix warnings and one compile error caused by newer gcc 4.7.
      Allow "store dos attributes" to override the other "map XXX" parameters.
      Fix up the man pages to explain that "store dos attributes" overrides them.
      Only do the 1 second delay for sharing violations for SMB1, not SMB2.
      Ensure we don't try and cancel anything that is in a compound-related request.
      Move a variable into the area of code where it's used.
      The core of the fix to allow opens to go async inside a compound request.
      Remove the compound_related_in_progress state from the smb2 global state.
      Remove a bunch of "unused variable _relative_save_offset" warnings.
      Tidy up old bool usage. False -> false, True -> true.
      Fix missing TALLOC_FREE of stackframes.
      Check for fstatat.
      Optimization on POSIX platforms that have fstatat.
      Add the ability to parse out the port to SMBC_parse_path().
      Add port argument to SMBC_attr_server(). Does nothing as yet.
      Add the port argument to SMBC_server().
      Plumb the 'port' parameter into the connect code.
      Add smbc_getPort(), smbc_setPort(). Bump the .so minor number.
      Fix xx_path() - return check from mkdir() is incorrect.
      Re-add umask(0) code removed by commit 3a7c2777ee0de37d758fe81d67d6836a8354825e
      Fix bug #9166 - Starting smbd or nmbd with stdin from /dev/null results in "EOF on stdin"
      Fix glusterfs backend crash found at the Microsoft interop event.
      Use existing "acl map full control" parameter to control the adding of the DELETE_CHILD parameter on NFSv4/ZFS/GPFS file ACE's.
      Add missing documentation for vfs_zfsacl.
      Note how vfs_gpfs uses the "acl map full control" parameter.
      winbindd and nmbd don't set their umask to zero on startup like smbd does.
      Fix bug #10010 - Missing integer wrap protection in EA list reading can cause server to loop with DOS.
      Fix bug #10010 - Missing integer wrap protection in EA list reading can cause server to loop with DOS.
      Add ea_list_has_invalid_name() function.
      Ensure set_ea cannot set invalid Windows EA names.
      Ensure we never return an EA name to a Windows client it can't handle.
      Ensure we can't create a file using SMB2_CREATE with an invalid EA list.
      Add the ability to send an NTSTATUS result back with a trans2 reply so we can return a parameter block with an error code.
      Add error map of STATUS_INVALID_EA_NAME -> ERRDOS, ERRbadfile
      Ensure we can't create a file using TRANS2_OPEN with an invalid EA list.
      Ensure we can't create a file using NTTRANS with an invalid EA list.
      Ensure we do pathname processing before SD and EA processing in NTTRANS_CREATE.
      Reply with correct trans2 message on a setpathinfo with a bad EA name.
      Add torture tests to raw.eas to check sending Windows invalid names in the middle of an EA list.
      Wrap setting leases in become_root()/unbecome_root() to ensure correct delivery of signals.
      Fix bug #10063 - source3/lib/util.c:1493 leaking memory w/ pam_winbind.so / winbind
      Fix the erroneous masking of chmod requests via the UNIX extensions.
      Allow UNIX extensions client to act on open fsp instead of pathname if available.
      Fix the UNIX extensions CHOWN calls to use FCHOWN if available, else LCHOWN.
      s3:param: Correctly set up cli_maxprotocol, cli_minprotocol in our parameter block.
      s3:libsmb: Modify cli_start_connection_connected() to use lp_cli_minprotocol()/lp_cli_maxprotocol() instead of hard coding PROTOCOL_CORE, PROTOCOL_NT1.
      s3:libsmb: Ensure we ask for DEFAULT_SMB2_MAX_CREDITS on successful negprot.
      s3:smbcacls: Add -m<MAX PROTOCOL> option to smbcacls.
      libcli/smb: Fix smb2cli_write_recv() and smb2cli_write() to return the bytes written.
      libcli/smb: Change smb2cli_create() and smb2cli_create_recv() to return a parameter blob of the newly opened/created file.
      s3:lib: Factor read_ea_list_entry() and read_nttrans_ea_list() out so they can be used by the SMB2 client code.
      s3:libsmb: Add in the core of the libsmb client SMB2 functions.
      s3:libsmb: Plumb cli_smb2_rename() inside cli_rename().
      s3:libsmb: Plumb cli_smb2_unlink() inside cli_unlink().
      s3:libsmb: Plumb cli_smb2_mkdir() inside cli_mkdir().
      s3:libsmb: Plumb cli_smb2_rmdir() inside cli_rmdir().
      s3:libsmb: Plumb cli_smb2_create_fnum() inside cli_ntcreate().
      s3:libsmb: Plumb cli_smb2_close_fnum() inside cli_close().
      s3:libsmb: Plumb cli_smb2_getattrE() inside cli_getattrE().
      s3:libsmb: Plumb cli_smb2_setattrE() inside cli_setattrE().
      s3:libsmb: Plumb cli_smb2_setatr() inside cli_setatr().
      s3:libsmb: Plumb cli_smb2_getatr() inside cli_getatr().
      s3:libsmb: Plumb cli_smb2_dskattr() inside cli_dskattr().
      s3:libsmb: Fix cli_set_ea_path() to use frame instead of talloc_tos().
      s3:libsmb: Plumb cli_smb2_set_ea_path() inside cli_set_ea_path().
      s3:libsmb: Plumb cli_smb2_set_ea_fnum() inside cli_set_ea_fnum().
      s3:libsmb: Plumb cli_smb2_get_ea_list_path() inside cli_get_ea_list_path().
      s3:libsmb: Plumb cli_smb2_list() inside cli_list().
      s3:libsmb: Plumb cli_smb2_qpathinfo2() inside cli_qpathinfo2().
      s3:libsmb: Plumb cli_smb2_qpathinfo_streams() inside cli_qpathinfo_streams().
      s3:libsmb: Plumb cli_smb2_qfileinfo_basic() inside cli_qfileinfo_basic().
      s3:libsmb: Plumb cli_smb2_qpathinfo_basic() inside cli_qpathinfo_basic().
      s3:libsmb: Plumb cli_smb2_qpathinfo_alt_name() inside cli_qpathinfo_alt_name().
      s3:libsmb: Plumb cli_smb2_query_security_descriptor() inside cli_query_security_descriptor().
      s3:libsmb: Plumb cli_smb2_set_security_descriptor() inside cli_set_security_descriptor().
      Remove restrictions on setting iosize inside smbclient for SMB2 connections.
      As SMB3 has transport level encryption, allow smbclient -e to force encryted SMB3 transport.
      Add new "timeout" command and -t option to smbclient to set the per-operation timeout.
      Add "max protocol" command line documentation for smbcacls.
      Add "-e" encrypt transport command line option documentation for smbcacls.
      Expand on the documentation of -m max-protocol for SMB2/3 for smbclient.
      Fix the documentation for --send-buffersize for the new default value of zero for smbclient.
      Fix the documentation of the iosize command to explain the new zero default for smbclient.
      Fix the documentation of --encrypt to explain SMB3 encryption for smbclient.
      Add documentation for the new -t <timeout> parameter in smbclient.
      Add documentation for the new internal command timeout to smbclient.
      WHATSNEW: Add paragraph about SMB2/3 support for client tools/library.
      dsgetdcname_cache_fetch() doesn't use the site_name parameter so don't pass it.
      Refactor dsgetdcname to be called via a wrapper function.
      Move the manipulation of site_name into the caller function dsgetdcname().
      Move the retry logic when site_name is passed in a NULL or "" to the wrapper function.
      Optimization. Don't do the retry logic if sitename_fetch() returned NULL, we already did a NULL query.
      s3: libsmb : The short name length is only a one byte field.
      Fix is_legal_name() to not emit character conversion error messages.
      s3: libsmb SMB2 wrapper layer. cli_smb2_get_ea_list_path() failed to close file on exit.
      s3: libsmb : Bug 10150 - Not all OEM servers support the ALTNAME info level.
      s3: libsmb - 10150 - Not all OEM servers support the ALTNAME info level.
      Fix bug #10187 - Missing talloc_free can leak stackframe in error path.
      Fix bug #10229 - No access check verification on stream files.
      Add regression test for bug #10229 - No access check verification on stream files.
      Fix bug 10196 - RW Deny for a specific user is not overriding RW Allow for a group.
      Fix bug 10196 - RW Deny for a specific user is not overriding RW Allow for a group.
      CVE-2013-4408:s3:Ensure we always check call_id when validating an RPC reply.
      CVE-2013-4408:s3:Ensure LookupSids replies arrays are range checked.
      CVE-2013-4408:s3:Ensure LookupNames replies arrays are range checked.
      CVE-2013-4408:s3:Ensure LookupRids() replies arrays are range checked.

Jesper Larsen (1):
      replace: Fix compilation of rep_mkstemp

Jim McDonough (521):
      Add header for common RAP definitions
      Add rap.h for net utility and libsmb
      Add additional client RAP calls
      Add command-line remote management utility
      Add build of net utility
      Add RAP net share add support
      Use asprintf, do bounds check, better rc logic
      server support for RAP session list function
      Add popt for parsing commandline options
      Replace getopt_long with popt for parsing commandline options
      Fix popt library checking
      Remove setbuffer which caused build errors
      Remove xstrdup since it was added to lib/util.c.  Caused compile failure
      Internationalization enbalement for net utility - replace printf with d_printf
      KDC DNS domain must be the kerberos realm.  Or so it seems that way
      Delay gssapi header checking until after kerberos has been located.  Wasn't working on RedHat systems because of /usr/kerberos install location.
      Replace backslash with winbind separator before calling parse_domain_user().  Winbind separators other than backslash didn't work.
      Restoration of at least some help function and format.  First round of cleanup.  Printq function cannot exactly mimic windows output using d_printf...oh well.  Add some more command-specific options back into help.
      More help/messages/formatting cleanup.
      If domain SID can't be fetched, we shouldn't return NT_STATUS_NO_MEMORY.  It causes a confusing client error.  Changed to NT_STATUS_CANT_ACCESS_DOMAIN_INFO.
      make sure we pass the lm and nt data in the right order.  They were swapped, and somehow this worked when both were provided, but not when only one was.
      Fix from 2.2.  It didn't break on HEAD because it isn't being compiled.  Herb?
      Check request flag for unicode capability and respond accordingly, rather than only doing unicode.  smbfs didn't work.
      Enable net ads commands to use existing tickets if the user doesn't specify a username on the commandline.  Also don't continue past the kinit if a password is entered and fails because existing tickets would be used, which may not be desired if the username was specified.
      Add functions for modifying an entry in ADS.  Needed for printer publishing.
      Module for ADS operations on a printer object in the directory.  Initially it creates and modifies a printQueue object in the directory
      Add ldap_printer.c build for ADS printer objects.
      Fix file header description and copyright (from cut-and-paste laziness)
      Fix build errors on non-ldap systems...change function parms from LDAPMod ** to void **
      Add ads printer information
      Minor bug fixes, plus support to remove a printer.  Commented out optional attributes until a method for checking for their existence is done.
      Add support for net ads printer to publish, remove, or display printer info in the directory.  Only publishes required fields right now.
      merge in some changes from Alexey Kotovich.  Return ADS_STATUS instead of BOOLs.  Add support for bervals in mod lists.  Also put undocumented AD ldap control in to allow modifications when an attribute does not yet exist.
      Update for function name changes, plus do some of the optional attributes on printer modify, now that the ldap control is working.
      Change ADS_ERROR family of macros - removed semicolon from the end, since they were only being used correctly in one location, and all other assumed the semicolon wasn't there.  Amazing that none of them mattered syntactically, until today.
      Fix ldapmod list overrun check.  Also better document and format ldap control for permissive modify.
      Add ability to extend ads modification list on the fly.  Also add some malloc checks and return ADS_ERROR(LDAP_NO_MEMORY) if they fail.
      Update for new ads modlist structure passing
      Add ability to extend ads modification list on the fly.  Added ADS_MODLIST type.
      talloc'ify ads modify functions.  Also add more complete berval support.
      talloc'ify ads modify functions.
      Add ADS_MODLIST to allowed types
      Fix LDAP modification operation.  Cut and paste error: was LDAP_MOD_ADD, should be LDAP_MOD_REPLACE.  Caught by Alexey Kotovich.
      Fix SIGSEGV on error message when trying to add a user to smbpasswd file without a unix account.
      Convert rpcclient to use popt instead of getopt.  Includes changing of got_pass from BOOL to int.  Also includes long option names...anyone want those different before I update the doc?  Please try this out.  I've tried to test all the flags, but the more times we kick the tires...
      Update Makefile.in for rpcclient build on machines without libpopt or requested build of included popt.
      One more fix to get popt to work for some compilers...this is the downside to popt.  Every option has to be in fixed storage.
      Swap order of close brace and done: tag to appease AIX compiler.  Order shouldn't matter for logic...if anyone disagrees whack me over the head and explain why...
      Another program converted to popt...smbstatus this time.
      Aack.  Don't change too much. vfs.c still won't build, but this should fix some other build stuff I screwed up.
      Missing comma from systems that have ACLs.
      Yet another build fix for popt.  I gotta get me one of these picky systems...
      This adds the Paged Result Control to ads searching.  The new function, ads_do_paged_search, is the same as ads_do_search, but it also contains a count of records returned in this page, and a cookie for resuming, to be passed back.  The cookie must start off NULL, and when it returns as NULL, the search is done.
      Add paged search requests to net ads user and net ads group commands, allowing more than 1000 (or whatever the query limit is on the server) objects to be returned.  Printers will come next.
      Some help cleanups.  Formatting and consistency issues.  Line up text nicely, and make 'net help rap user' the same as 'net rap user help'...stuff like that
      Add autodetect for net join, as well as some more help updates
      Expose net_ads_join to allow for auto-transport-detection for net join
      Change net rpc join several ways: \n\t1) expose \n\t2) eliminate oldstyle subcommand \n\t3) try oldstyle first, then more secure method\n to allow for autodetect between ads and rpc on net join
      Change new style join function name for clarity in net_rpc.c
      Don't use // even temporarily, lest ye forget it and check it in...
      Fix build for non-ads case
      Add server control to prevent referrals in paged searches.  This keeps
      Whoops, left the paged control not critical in the paged search...kind of
      Update smbstatus manpage source.  Includes corrections of some flags,
      Updated for long flags from popt conversion, as well as version number.
      Refresh from sgml source.  HTML doesn't come out ok on mine, though, so
      Added ads_process_results(), which takes a function that is called for each
      Re-implemented net ads user and net ads group to use the new
      Add ads_err2string() function for generating error strings from an ADS_STATUS.
      Contains functions to manage/view AD user accounts via ldap.  Initially has fns
      Add libads/ldap_user.c to build for ads user management.
      Add net ads user subcommands: add delete info.  Also make user listing format
      Add ability to get specific net ads subcommand help.  Not all have been
      Try harder next time to not duplicate function...take ads_err2string back
      Correct error string function call to ads_errstr()
      Add non-ads version of net_ads_help for build on non-ads machines.
      More updates for auto-detecting server connection method.  Added net_ads_check()
      Cleanups to make auto-detection of method on net user smoother.
      Multiple changes:
      Lots more net consistency work:
      add utils/net_help.c to bin/net build
      Several updates to get server side sorting going:
      Use the new ads_do_search_all2 function.  It provides sorted results.  We now
      Add ads ldap server controls
      A few more updates:
      Add a few option externs for net_ads.c
      Rename of ads_do_search_all2() to ads_do_search_all() and removal of
      Add ads group account add function.
      Converged help on net group command.
      Start of net rpc group command.  List only right now.  Add and delete have
      Add ads group add and delete, allowing converged net group command.
      Converged net group command.
      Fix build.  Changed MSG_PRINTER_UPDATE to MSG_PRINTER_DRVUPGRADE.
      Ok, ok, I was too impatient...
      Add auto-detect of time server.  Uses master browser.
      Added ability to lookup ldap server, kdc, dc, and master browser.  Please
      Add configure support for __va_copy, which is required on Linux/390 systems
      Add __va_copy to talloc functions.  talloc_asprintf was causing all kinds
      Fix for non-__va_copy systems.  I had used AC_TRY_COMPILE, but even though
      Add an item about the __va_copy macro to prevent SEGV's on 390 and PPC Linux.
      Fix usage of va_list passed as an arg.  Use __va_copy before using it
      Don't forget the semicolon, you fool!
      Allow initial password set on net ads user add.  I need to do this on
      Looks like abartlet got a bit overexcited about using const...
      netfileenum was missing the username filter.
      Update netfileenum on both client and server sides to do an arbitrary number
      Update netfileenum to new api.
      Enable net rpc share and net rpc file commands (list subcommands only), and
      Add error index to netshareadd rpc.
      Add fns for netshareadd and netsharedel rpcs
      Add netshareadd and netsharedel client side rpc
      Enable all net rpc share subcommands and autoselect transport.
      Add rpc for file close, expand file enum to take username
      Update for new interface to netfileenum
      Add remainder of net rpc file subcommands, and autoselect transport on
      Since includes.h isn't included here, VA_COPY has to be defined here.  I don't
      Add user name to netsessenum RPC to stop 1783 messages
      Add user name to netsessenum RPC to stop 1783 messages.  Also fix where username was sent as machine name.
      Fix netsessenum RPC.  Correctly respond with as much info as we can.
      Move session gathering routine back into session.c so it can be called either
      merge 390 kernel workaround from SAMBA_2_2.
      Support utf8 on the wire for ads ldap.  DN's are converted, as well as strings,
      Reduce compiler warnings.
      Re-enable kernel change notification on s390 as it has been fixed in the
      Const cleanup...should only be 2 warnings left from calling lib/util_str.c
      Fix length in snprintf invocation to account for "dn:" in sasl gssapi bind.
      Add LSA RPC 0x2E, lsa_query_info2.  Only level implemented is 0x0c, which
      Fix the build for now..
      Fix length on mailslots.  Looks like it should have been 0x17, not decimal 17.
      Add SAMR 0x3e, which is samr_connect4.  Seems to be the same as our
      Add AD version of samlogon replies for getdc.  ATM it will only function
      Ooops...forgot to put this in with the new nmbd samlogon response code.
      Hmm, had too many objects added last time in the nmbd changes.  Don't
      Add client side support for samr connect4 (0x3e).  Seems to have one
      Use samr connect4, then fall back to samr connect if it fails.  This is
      Add lsa 0x2e (queryinfo2) client side
      Add lsaqueryinfo2, but keep under "lsaquery" command.  It will autoselect
      Code to generate uuids for ADS setups.  Uses our random generator but
      Add lib/util_uuid.c to build.
      Allow ADS PDC to exist
      Update secrets_fetch_domain_guid to generate and store it if it doesn't exist.
      Use byteorder.h macros
      Fix NTLMSSP challenge command and auth response.  We can now service joins
      Re-add the last empty item to the NTLMSSP info list, but this time do it
      Fix build.  Extra parm was added to cli_full_connection, but not in locktest2.c.
      Fix build.  An extra parm was added to cli_full_connection but not locktest2.c.
      Add extra parm to cli_full_connection call.  Tim, you should probably look at this.
      Add extra parm to cli_full_connection.  Tim, you should probably take a look at this.
      Format objectGUIDs on ads dumps.
      Move guid formatting functions over from HEAD.
      Merge from HEAD:
      Merge rest of Jelmer's popt_common updates from HEAD to fix build.
      Fix build.  Don't use BSD setenv.  Use POSIX putenv.
      Take out gcb2gtype and gtype2gcb fns.  They were using symbols not defined
      Steve Langasek's authentication lib (libpam, libcrypt) split didn't make
      One more instance of AUTHLIBS...hopefully we can get most 3.0 builds back
      Re-enable use of existing kerberos tickets.
      Add smbtrans subcommands so we can stop hardcoding them
      Stop using hardcoded transact commands
      Allow multiple fragment RPC's to be sent.
      Define smbtrans subcommands so we can stop hardcoding them
      Stop using hardcoded smbtrans subcommands
      Fix the build.
      Fix the build.
      What is wrong with you, Jim?  Check in the final version, not an interim one...
      Add enumkey command (EnumPrinterKey api)
      Add enumkey command (EnumPrinterKey api)
      Sync with HEAD to get enumprinterkey api.
      Implement enumdata command
      Implement enumdata command
      Add enumdataex command
      Add enumdataex command
      Add net help join text, from Steve Langasek.
      Add net help join text, from Steve Langasek.
      Add getdata and getdataex commands
      Add getdata and getdataex commands
      Bring smbmount.c in line with jra's global-cide.  global_scope was used here...
      Bring smbmount.c in line with jra's global-cide.  global_scope was used here...
      Next step of printer publishing.
      Back out some goofs that accidentally checked in with printer publishing.
      Next step of printer publishing.
      Next step of printer publishing.
      Revert ADS_ERR_OK change.  Some compilers didn't like it.
      Revert changes to ADS_ERR_OK() as in head.  Broke some compilers.
      Don't pass a function to ADS_ERR_OK().
      Don't pass a function to ADS_ERR_OK().
      get_nt_error_msg from APPLIANCE_HEAD is called nt_errstr in HEAD.  This should fix the build.
      get_nt_error_msg from APPLIANCE_HEAD is called nt_errstr in HEAD.  This should fix the build.
      Don't segfault when trying to delete a key when none exist.
      Don't segfault when trying to delete a key when none exist.
      Add defines for standard DsSpooler/DsDriver values that get published.
      Add defines for standard DsSpooler/DsDriver values that get published.
      fns for retrieving dns host name and domain name (get rid of lp_realm hacks).
      fns for retrieving dns host name and domain name (get rid of lp_realm hacks).
      Stop using hacks for dns host/domain names.
      Stop using hacks for dns host/domain names.
      Stop using hardcoded key/value strings, be more forgiving of dsspooler/dsdriver info existence.
      Stop using hardcoded key/value strings, be more forgiving of dsspooler/dsdriver info existence.
      Support printer info 7, used for publishing
      Support printer info 7, used for publishing
      Automatic printer publishing when using APW or choosing 'list in the directory' in printer settings.  Currently very little is published, and you cannot unpublish because of a bug in win2k clients.
      Automatic printer publishing when using APW or choosing 'list in the directory' in printer settings.  Currently very little is published, and you cannot unpublish because of a bug in win2k clients.
      More attributes to publish.  All DsSpooler attributes except REG_MULTI_SZ ones should be published now.
      Add some const
      Add some const
      More printer data to publish
      More printer data to publish
      More printer publishing code.
      More printer publishing code.
      Store printer guid in the dsspooler registry key so we don't have to
      Store printer guid in the dsspooler registry key so we don't have to
      Add win32 utility to query driver capabilities to publish
      Add win32 utility to query driver capabilities to publish
      Enable dynamic loading of RPC modules.  See docs/textdocs/RPC_PLUGGIN.txt for instructions.
      dlsym() can return NULL validly, so we can't use that as the error test.
      Fix some debug levels (were set to 0 with RPC module patch), and
      should be HAVE_KRB5_SET_REAL_TIME (HAVE_ was missing)...fix the build
      should be HAVE_KRB5_SET_REAL_TIME (HAVE_ was missing)...fix the build
      Properly display popt errors.  Also fix debug to be -d for consistency with other progs.
      revert accidentally committed changes
      Properly display popt errors.  Also fix debug to be -d for consistency with other progs.
      Try to get build working on systems with krb runtime but not devel libs.
      Try to get build working on systems with krb runtime but not devel libs.
      Try to allow old and new heimdal installs
      Try to allow old and new heimdal installs
      remove trailing 'a' from VFS_MODULES targets...fix build
      merge from HEAD - enable dynamic RPC modules
      Bring in line with HEAD version...mostly formatting changes to clean up diffs.
      Put dynrpc modules as part of make all, when specified in configure.
      Put dynrpc modules as part of make all, when specified in configure.
      Sync w/HEAD - add DES_CBC_CRC encryption type
      base64_decode() with heimdal libs, so I've renamed it base64_decode_inplace().
      base64_decode() with heimdal libs, so I've renamed it base64_decode_inplace().
      Add support for detecting method of listing encryption types (MIT v Heimdal)
      Try to get heimdal working with HEAD.
      Get non-krb systems to compile.  How the heck do I keep something from being sucked into proto.h?
      Fix segv in net ads join...an extra & was the culprit
      Fix segv in net ads join...an extra & was the culprit
      Correct way to keep fucntion from proto.h
      Can't return SAFE_FREE...put on its own line.
      Sync with HEAD for verifying kerberos tickets.
      libads/krb5_setpw.c
      From aliguori at us.ibm.com:
      rename 'winbind backend' to 'idmap backend'.  Put paramter in security section...does this make sense?
      Fix IRIX build...void fn can't return another void fn
      Fix IRIX build...void fn can't return another void fn
      Improve net ads lookup:
      cleanup some compiler warnings
      Move net ads lookup improvements over from HEAD
      replace pstrcpy
      replace pstrcpy
      use strnlen to prevent coredumps
      use strnlen to prevent coredumps
      use pstrcpy_base()
      use pstrcpy_base()
      The ldap idmap backend from Anthony Liguori (aliguori at us.ibm.com):
      Decode the PAC!  This patch just decodes it and then frees it, so it's just
      Some comment updates, notably that I haven't seen the group membership arrays
      Complete what I've seen (and then some)t of the PAC.
      Move PAC decoding over from HEAD.
      Fix length in findfirst2 responses, fix os/2 clients
      Fix length in findfirst2 responses, fix os/2 clients
      Get credentials before publishing printers.
      Allow net rpc user -l to list longer than 50 characters in a user comment.
      Like net rpc user -l, let net ads user -l allow more than 50 characters in
      Hopefully re-enable building heimdal.  It needs -lresolv included in LIBS
      Fix bug #4 for net rap.  Allow more than 50 chars for long form listings of users and groups.
      Fix bug #4 for net rap.  Allow more than 50 chars for long form listings of users and groups.
      Fix bug #98: DNS compression is required for proper building of the
      Fix bug #96: Use DNS decompression to properly parse cldap netlogon
      Fix bug #95: net did not build when ldap was installed, but --without-ads
      Fix bugzilla #117: winbindd looping on 100+char username
      Fix bug #137: krb5_set_password is already defined in MIT 1.3 libs, so
      More on bug 137: rename remainder of krb5_xxx functions to not start with krb5_
      More on bug 137: rename more of krb5_xxx functions to not start with krb5_
      Remove the -A option of wbinfo, leaving only the long version,
      Remove short -A option, but still leave in the --set-auth-user option.
      Fix bug #136: "passdb backend = " caused smbd to segfault.
      Fix bug #136.  Add message about erroneous empty "passdb backend" parameter.
      Doesn't re-prompt for password when it is specified on the cmdline
      Fix the build on Heimdal.  KRB5_KDB_BAD_ENCTYPE doesn't exist on Heimdal, and
      Fix copyright statements for various pieces of Anthony Liguori's work.
      Update my copyrights according to my agreement with IBM
      Update my copyrights according to my agreement with IBM
      Fix to properly set AP_OPTS_SUBKEY in heimdal.  In MIT it is a #define, but
      Fix email address in copyright statement
      Check for support for in-memory keytabs, which are needed to make heimdal
      Disable rc4-hmac on broken heimdal setups.  Pre-0.7 heimdal (or at least up
      Try to add memory keytab support.  It also includes much of the generic
      Updated 3.0 schema files for IBM Directory Server 5.1
      Updated 3.0 schema files for IBM Directory Server 5.1
      Add endpoint mapper rpc definitions
      Add (un)marshalling code for endpoint mapper map operation
      Add epmapper pipe
      Add endpoint mapper parse code
      uuid itself might not be aligned (as is the case in epm map requests), so
      Fix tower length calculations and add some const
      Add client side code to do endpoint map queries.  Currently does one
      Add epmapper client files to rpcclient build
      Add epmapper commands to rpcclient
      Several updates:
      Update structures after ethereal showed some marshalling/unmarshalling
      Fix typo
      Add server side support for epmapper pipe.  Currently only does a fixed
      Be sure referent ID is updated for incoming structures, too.
      Volker's fix for bug #668.  Change the \n after the password prompt to go
      Volker's fix for bug #668.  Change the \n after the password prompt to go
      Fix bug 451.  Stop net -P from prompting for machine account password.
      Fix bug 451.  Stop net -P from prompting for machine account password.
      New files for support of initshutdown pipe.  Win2k doesn't respond properly
      New files for support of initshutdown pipe.  Win2k doesn't respond properly
      Add initshutdown pipe commands to rpcclient.  Second part of fix to bug
      Add initshutdown pipe commands to rpcclient.  Second part of fix to bug
      Add shutdown abort try over initshutdown pipe first, then fall back to
      Add shutdown abort try over initshutdown pipe first, then fall back to
      First round of merging various UUID structures.
      Another round of GUID->struct uuid.
      More GUID->struct uuid changes.
      Ok, nearing the end of the GUID->struct uuid changes.
      Nearing the end of the GUID -> struct uuid changes.
      Last of the GUID->struct uuid changes.
      Add string to uuid fn.  Thanks aliguori.
      Fix net rpc join (at least newstyle) after it was broken by changing
      Fix net rpc join (at least newstyle) after it was broken by changing
      Fix another join problem.  Don't use a TALLOC_CTX before it has been
      Fix another join problem.  Don't use a TALLOC_CTX before it has been
      Start of merging HEAD changes.  Right now, just move one fn() to eliminate
      Start of merging changes with SAMBA_3_0.  Fix up some comments so that
      More sync between HEAD and SAMBA_3_0
      A couple of versioning adjustments.  Remove unused version #define, and
      Fix typo: fileds -> fields
      More sync between passdb on 3.0 and HEAD.
      Try to remove the last vestiges of unknown_3...
      Fix format error for generating SELECT, since unknown_3 is now gone
      Move tdbsam versioning/upgrade code into 3.0
      Fix a few comments/formatting issues to make it more in line with
      sync IBM Directory Server schema with openldap schema...add munged dial
      Sync with openldap schema.  Add munged dial and config attrs/ocs.
      Fix whitespace to reduce diff from HEAD
      Add bad password time fields
      Add bad password time fields
      Add functions to get/set bad password time
      Add functions to get/set bad password time
      Add bad password reset and display of bad password count/time
      Add bad password reset and display of bad password count/time
      Add bad pw count and autolock flag update fn()s
      Add bad pw count and autolock flag update fn()s
      Clean up bad pw count and autolock flag update fn()s
      Clean up bad pw count and autolock flag update fn()s
      Enable checking/resetting of account lockout and bad password based on policy
      Enable checking/resetting of account lockout and bad password based on policy
      Make default lockout duration and reset count time 30 minutes, to match windows, and also be valid (0 was invalid)
      Make default lockout duration and
      handle both 0 and -1 as disabling reset count and lockout duration
      handle both 0 and -1 as disabling
      Add calls to password lockout functions.  Should now work against tdbsam only.
      Add calls to password lockout functions.  Should now work against tdbsam only.
      Add bad password count/time attributes
      Add bad password count/time attributes
      Add bad password count/time attributes
      Add bad password count/time attributes
      Janitor for tpot...bugzilla #1098, msleep already exists on aix
      reset time and duration are set in minutes, not seconds.  Works from usrmgr.
      reset time and duration are set in minutes, not seconds.  Works from usrmgr.
      Do the query part of the previous fix...reset time and duration are set in minutes, not seconds.  Works from usrmgr.
      Do the query part of the previous fix...reset time and duration are set in minutes, not seconds.  Works from usrmgr.
      fix typo for callback bit
      fix typo for callback bit
      Merge fields_present function from HEAD.  Now, a field will not be updated
      quick for for usrmgr.  unknown_6 is really max dimension of logon hours array.  need to update passdb for this.
      quick for for usrmgr.  unknown_6 is really max dimension of logon hours array.  need to update passdb for this.
      more usrmgr fixes: display lockout timers in minutes, not seconds, for samr 2e
      more usrmgr fixes: display lockout timers in minutes, not seconds, for samr 2e
      Fix build farm, older compilers won't let you declare variables
      Fix build farm, older compilers won't let you declare variables
      Get MungedDial actually working with full TS strings in it for pdb_ldap.
      Merge from 3.0.  Fix munged dial in pdb_ldap
      Password lockout for LDAP backend.  Caches autolock flag, bad count, and
      merge from 3.0...LDAP password lockout support
      Fix bugzilla # 1208
      Use timegm, or our already existing replacement instead of timezone, as
      r53: Remove modifyTimestamp from list of our attributes.  We just check it for
      r91: Fix lsalookupnames.  Previously we'd fail if we didn't find the name, but
      r219: Obtain new tickets if current ones are expired.  Next part of fix for
      r221: Remainder of bug 1208.  We do not remove creds from _any_ FILE ccache,
      r555: Fix big-endian storage of jobids in jobs_changed list.  Found during
      r560: Fix bugzilla 1279: cannot control individual print jobs using cups
      r1750: This patch allows net ads lookup to rely on command line arguments if contacting an ADS server fails.  This allows net ads lookup to work with clapd (very useful for testing).
      r2131: Fixup format string.  The magic value format specifier was missing, so
      r2239: Fixup formatting errors in TDB_LOG calls.  Add printf attribute support to
      r2697: Fix for bugzilla #1732, patch by Satoh Fumiyasu, fumiya at samba.gr.jp
      r3727: Update from Rob Foehl (rwf at loonybin.net):
      r3761: Fix bug #1932: crash when non-root invokes net getlocalsid
      r3771: Fix bug #1952: no comment on XP shutdown
      r4514: Fix for bugzilla 1770.  Remove READ_ATTRIBUTES from GENERIC_EXECUTE, otherwise
      r4538: Fix bugzilla 2198, accounts which have password last set to 0 are getting
      r4651: Add "refuse machine password change" policy field.  This update will just
      r5163: Fix bugzilla 2062:
      r5339: Fix 'net rpc trustdom establish'.  Use the right pipe name, therefore the
      r5456: Increase limit of mapped SIDS to 0x5000, which is what 2k and later do.
      r5458: Generate a sane response to exceeding lookupsids limit.  Truncate list to zero
      r5460: Fix "restrict anonymous = 1".  If we have schannel connection, we must be
      r5580: Fix "net rpc trustdom add".  Much closer to what windows does.  Also stop
      r5591: Implement "net rpc trustdom del", including client side of
      r5592: Oops, accidentally committed test version of rpcclient.  Reverting changes.
      r5593: More reversal of accidental commit.
      r5594: Fix comment to read "remove" instead of "add"
      r5600: Bring IBM Directory Server schema up to date with openldap schema
      r5689: Allow for better protection of sensitive attributes in IBM Directory Server.
      r5831: Along with jra's recent checkins, fix dir/xcopy of empty dirs on OS/2.  Bugs
      r5854: Fix coredump when OS/2 checks for long file name support (with .+,;=[].).
      r5927: Fix ldapsam trusted enum_group_members.  We were searching in the user
      r5965: Apply Volker's patch for "ldapsam trusted = yes" for samr_lookup_rids.  Gives us
      r7148: Fix #2736: winbind race condition with detecting idle clients
      r8189: commit vampire ldif patch, mostly from Don Watson (dwatson at us.ibm.com).  Yes,
      r8432: Fix #2077 - login to trusted domain doesn't allow home drive map and login
      r9091: Fix #2954, aix 5.1 compile.  Stupid aix aio.h header defines aio_error and
      r9112: Fix #2953 - credentials chain on DC gets out of sync with client when
      r9242: Fix my fix for #2953.  I'd moved too much code until after we verify the user,
      r9261: Fix #2976: windows member servers wouldn't alloc connections from users
      r10247: Fix help text for net rpc shutdown.
      r10909: Give better shutdown messages
      r10911: part of #2861: add rename support for usrmgr.exe when using tdbsam
      r11228: Speed up string_to_sid by removing next_token calls, thus eliminating
      r11229: an even bigger speedup spotted by Volker.  string_to_sid() is now taking 1/5th
      r11230: Remove the '//' i was using to test something...oops
      r11236: Implement user rename for smbpasswd and ldap backends.  Some cleanup on
      r11886: Fix 3187: logon hours restrictions were off corresponding to our offset from
      r13187: IBM Tivoli Directory Server schema updates from John Janosik
      r13948: Fix the build.  Remove rpcclient.h include.
      r13957: Based on patch from Richard Renard <richard.renard at idealx.com>:
      r13968: fix typo, caught by Guenther
      r14053: Implement Simo's suggestion: don't use /dev/null for a 'bad' path for
      r14085: Fix coverity bg #152, uninit'ed var.
      r14135: Fix for Coverity #123: resource leak.  Also rework much of the code to
      r14147: Fix coverity #119.  alloc'ed memory returned not saved, so not freed.
      r14150: Fix coverity #118: not freeing alloc'ed storage returned from
      r14152: Fix coverity #117: free storage alloc'ed by sstring_sub
      r14153: Fix coverity #116: free storage alloc'ed by sstring_sub()
      r14155: Fix coverity #115: free storage alloc'ed by sstring_sub()
      r14156: Fix coverity #114: free storage alloc'ed by sstring_sub()
      r14252: Fix Coverity #72: free alloc'ed storage before return.  Also found one
      r14272: Fix Coverity # 81: free alloc'ed storage before returning
      r14278: Remainder of fix for Coverity #79,80,81: only allow GROUP or OWNER to be
      r14279: Fix coverity #86, 87, 88, 89:
      r14280: Fix Coverity #129 and 130: check before dereferencing a pointer.  This
      r14408: More on fix for coverity #36.  The previous fix would cause us to
      r14681: Get rid of hardcoded /tmp/add.ldif and /tmp/mod.ldif files.  Is there a
      r14683: Get rid of hardcoded output file.  With no arg, print to stdout,
      r14931: Fix #1374: can't join an OU with name that contains '#'
      r15630: adapt smbclient fix to smbtree to enable long share names
      r15872: Take one step toward getting this working on AIX.  the [-z ] stuff
      r15873: Use short signal names to placate ksh trap.  bash seems to accept either
      r16047: Remove unnecessary line, as this value is set in either branch of the
      r17179: Merge the vl-posixacls tmp branch into mainline. It
      r18660: Fix build, one uuid->GUID was missed.
      r18702: re-enable non-decimal specification of rid
      r18722: Fix up password change times.  The can change and must change times are
      r18724: Fixup time(0) -> time(NULL)
      r18748: Eliminate set of computed time values
      r18754: Get rid of some more invalid time sets
      r18758: Update net sam to use calculated times and force change password properly.
      r19058: Implement "user cannot change password", and complete "user must change
      r19158: Remove root and nobody users from ldif, from Björn Jacke
      r19647: Add some GPFS support in a vfs mod.  Also adds the kernel flock op to
      r19648: whoops, forgot to increment the vfs version number with the added flock
      r19655: Jeremy, please review:
      r19826: Fix typo
      r20089: Put gpfs acl function into vfs_gpfs module.  Thanks to Gomati Mohanan
      r20119: Update help info indicating how to use separators (forward slash only)
      r20136: Fix #4290.  Properly compute time to password expiration in message from
      r20717: Merge sharemode patch from Mathias Dietz <MDIETZ at de.ibm.com>.
      r21004: Patch from Mathias Dietz <MDIETZ at de.ibm.com> to fix multi-node
      r21324: Add linux setlease to the vfs layer.  Next round, as Volker points out,
      r21339: Fix the non-linux build.  This is more evidence that this needs to be
      r21637: Get "password never expires" account policy working.
      r22148: Fix gpfs module on posix-acl test.  Adds gpfsacl_sys_set_fd (calls
      r22504: Fix bug Jerry found during his tutorial.  Sorry :-(
      r23041: Remainder of fix for 4630: fix special case of unix_to_nt_time() for
      r23616: Fix bugzilla #4719: must change password is not set from usrmgr.exe.
      r25493: Fix typo in Jeremy's thread-safe winbind patch:
      r1596: Fix up copyrights.
      r3040: Add sleeps between operations to nbench.  Submitted by aliguori at us.ibm.com.
      r15281: A few updates for consistency's sake
      r15719: Fix build on systems (AIX) that don't have vsyslog or strcasestr, with
      r15869: Fix loop var to search paths for iconv
      r15883: Make sure timegm() prototype is available (on systems where we've had to
      r23231: Fix make test on build farm for 64-bit hosts.  There's no reason this should
      r23643: Fix the build farm tests.  We were incorrectly passing the
      Add ads-only options for net ads join
      Also update the HOWTO with the createcomputer information for net ads
      Add manpage for gpfs module.  Thanks to Chetan Shringarpure
      A few updates to the gpfs manpage.  Clarify some language, list setlease
      Add nfs4:chown option, and a few formatting changes.
      Enable winbind child processes to do something with signals,
      Merge branch 'v3-3-test' of git://git.samba.org/samba into 3.3-test
      Don't reset password last set time just because the expired flag
      Initial automated wintest.
      Missed these on the last commit
      Allow %u parameters for print job username - use advanced sub
      Prevent NT_STATUS 0xF1000000 errors from appearing when
      Fix the new vfs_smb_traffic_analyzer build for static links
      Don't look up local user for remote changes, even when root.
      Merge branch 'master' of /home/jmcd/samba/git.samba.org/samba-master into mymaster
      Detect tight loop in tdb_find()
      Don't require "Modify property" perms to unjoin bug #6481)
      Don't use ads realm name for non-ads case.  #6481
      Fix cifs.upcall builds on some platforms (zlib)
      Fix make test_shlibs for libnss_wins and libnetapi (zlib)
      s3: Fix incorrect rc check of nscd_flush_cache.
      s3: bug #6967: Prevent glibc error on net ads join:
      Prevent NULL dereference if group has no members
      Don't exit(0) on error
      Update copyright
      Display an error on net conf import failures.
      Fix i18n of net conf import error message.
      s3-libnet: fix bug #6364: Pull realm from supplied username on libnet join
      s3-printing: fix BUG 7280 - auto printers not loading with registry
      s3-libsmbclient Convert dos error codes to NTstatus in async libsmbclient.
      s3-winbind: BUG 8166 - Don't lockout users when offline.
      Update eDirectory schema

Jiri Popelka (1):
      Use ippGet/ippSet (accessors) for IPP API.

Joachim Schmitz (2):
      s3: define timespec before we use it
      libreplace: Bug 8107, Fix poll replacement to become a msleep replacement

Joe Smith (1):
      Fixed typo in source/utils/net_rap.c

Joerg Pulz (1):
      Make 'net rpc printer driver' behave the same as rpcclient enumdrivers

Joey Adams (1):
      lib/ccan/build_assert: Remove stale LGPL license comment.

John Blair (3):
      Uh... I'm checking stuff in.  Jeremy will by *so* pleased :)
      Added the APPLEDOUBLE macro for the name of the directory containing
      Added the '--with-netatalk' option to turn Netatalk support on at

John H Terpstra (19):
      Clarification that hosts resolution is done by winbind only on IRIX, all other systems use libnss_wins.so.
      Clarification that hosts resolution is done by winbind only on IRIX, all other systems use libnss_wins.so.
      Added TDB File documentation requested by some users.
      Fixed publishing date info.
      pdb_ldap: Raise level for debug message to avoid log file flooding.
      Added ability to revert to old modules for make revert.
      Fixes inspired by OPC Oota.
      Replace word noone with more correct word nobody. Thanks OPC Oota.
      Merge branch 'master' of ssh://jht@git.samba.org/data/git/samba
      Fix typos reported by OPC Oota.
      OPC oota edits
      Bug fix thanks to vjbangis viray
      Patches to fix typos thanks to OPC oota.
      Fix typos. Thank-you PC Oota.
      Change recommended bu PC Oota.
      Fixes for typos. Thank-you PC Oota.
      PC Oota Edits.
      Fix typo reported by Söderlund David <david.soderlund at baesystems.se>.
      Merge branch 'master' of git+ssh://git.samba.org/data/git/samba

John Terpstra (999):
      Updated Samba minor version so it announces itself as NT Server version
      Getting ready for release of RedHat Linux RPM build for 1.9.17
      New RedHat Linux RPM specification file for 1.9.17
      JHT sez ... Please pardon my dust, road works in progress!
      Getting ready for release of 1.9.17.
      Updated instructions.
      JHT ==> Just doing his thing again! Yuck!
      JHT ==> Spring cleaning. Please pay the rent!
      JHT ==> Been playing again! Whooooooo!
      JHT ==> Updating RPM build file, more expected -  so please ignore!
      JHT ==> Added copyright notations for my works. This is regretably needed!
      JHT ==> Still getting ready for 1.9.17 release.
      JHT ==> The new SMB.CONF master file for everyone!! Yes!
      JHT ==> Just tidying up for Release.
      Update of config files
      JHT ===> Getting ready for release of 1.9.17alpha5
      JHT ===> Just playin' wif da RPM 'tings. Ok?
      JHT ===> Just making sure any new tests do not announce as the last alpha!
      JHT ===> Fixed step numbering.
      JHT ===> Just a little bit of rearranging the deck chairs - more growth space.
      JHT ===> No longer needed here. Files moved to ~/packaging/redhat.
      JHT ===> Update only.
      JHT ===> Tidying up for public consumption.
      JHT ===> Added instructions for Windows 95 encrypted password change.
      JHT ===> More documentation for those who can't find the docs directory.
      JHT ===> The title says it all!
      JHT ===> Added a patch from Tim Small (UK)
      JHT ===> Just to complete Tim Small's add-ins.
      JHT ===> Added comment about internationaliasation and deleted dates.
      JHT ===> Documentation header updates only - inserting/mod Updates date.
      JHT ===> Just setting version to 1.9.18alpha1
      JHT ===> Changed behaviour of logon script processing so that all macros
      JHT ===> More hacks!
      JHT ===> Added Sun Solaris binary package building spec files contributed
      JHT ==> Fixing blocksize argument. Patch by: Llyod Whiteman
      JHT ===> Added smbadduser contributed by Mike Zakharoff.
      JHT ==> Luke, your forgot to change the modified date!
      JHT ==> Removed linefeed that caused problems.
      JHT ==> Getting ready for 1.9.18alpha1.
      docs/DIAGNOSIS.txt:
      Added Michael Johnsons' PAM modifications <johnsonm at redhat.com>
      Fixed small typo.
      Added comment submitted by Frank Varnavas.
      Fixed Upper/Lower case typos.
      Added DNS Proxy, Printing, [netlogon] share modes = no.
      Added in mods for new smb.conf "remote browse sync" option as posted to
      Fixed type that referred to regedit.exe instead of regedt32.exe.
      Following discussions with Cristian Gafton (Red Hat) we have decided to make
      Removed Brett Worth from Support.txt as per Bug#3833
      Added Newcast - UK Consultant to Support.txt
      Adding example config info for the ISC DHCP Server, An MS Knowledge Base article contributed by an anonymous person, and adding Caldera Inc. printing config notes to Printing.txt.
      Fixed typos. Anyone else like to vet this?
      Added MAXPRINTERLEN define in smb.h setting printer share name length to maximumof 15 characters. IF this needs to be limited to 8 characters again please do
      Getting ready for first Red Hat Linux RPMs for 1.9.19 pre-alpha release
      Updating note thanks to comments from Franky Liederkerke.
      Added remote machine and address to debug message in make_connection() function.
      Added const cast to struct args to get rid of compile time warning.
      Updated to include possible cause of failed TESTS 3/6 as bad broadcast address.
      Corrected the spelling of my Surname. Added several postscripts.
      Added additional comments from Bruce Wood
      As it says.
      Contributed software for Linux autofs support.
      Updated OSF1_ENH_SEC mode password handling.
      Fixed typos pointed out by Pekka Savola <Pekka.Savola at netcore.fi>
      Updating Unix installation notes.
      Updated in line with recent samba-bugs postings.
      Added as rapid config guide for cross subnet / cross workgroup browsing.
      Fixed typos and reformatted doco.
      Fixing Oops. Thought I had added these - but not!
      Fix "make clean" to also delete SPROGS.
      Adding first cut of the new Red Hat Linux packaging tools.
      Adding header and footer html files for SWAT, adding samba.gif file too.
      Added rpcclient and smbwrapper stuff.
      More yuck changes for Red Hat RPM production.
      Updated paths.
      Unlink zero length files that did NOT exist at the point of origin on a do_get() call.
      Packaging mods - make sure we always keep our config files and NEVER mv them to *.rpmsave
      Welcome to Pacific HiTech TurboLinux support.
      A little more tweaking and sqeaking. Now, will it work? Argh!
      Fixed spec file entry that was causing the CDRom installer to generate
      Path change only.
      Added description of reason for failure of test 3 due to blockage of the
      Changed build root to launch off /var/tmp instead of /tmp.
      Updating the password script and documenting password sync stuff.
      Added packing release script.
      Added first cut of the new packaging scripts for Digital Unix.
      Updates to handle glob.h - was causing problems on SCO 5.0.4
      Updated packaging files (new for Caldera).
      Added Example binary packaging instructions.
      Removed smbwrappers from build specs and from installation specs.
      Reviewed file permissions and removed other execute on samba start/stop script.
      Set sticky bit on /var/spool/samba.
      Updated packaging files in line with restructuring of Makefile.in
      Fixed typo. "Browsable is an acronym for browseable.
      Updated HEAD branch version to 2.1.0-prealpha in response to a user
      Updated version info and date in document headers.
      Updated packaging files from 2.0.0 branch - NOTE: Not yet operative.
      Updated makefile-path info contributed on the samba-technical mailing list.
      Changing to PHT standard SPEC settings.
      Modified packaging-prep script to remove use of "rm -f *".
      Folding into Samba-2.1.X tree documents added to 2.0.3.
      Put this back after it dropped off.
      Bringing samba-2.1.x samba2.spec.tmpl file into line with samba-2.0.x release tree.
      Updating build specs for TurboLinux 6.0 and later
      Adding files provided by Klaus Singvogel of Caldera
      Updating for Samba-3.
      Adding missing smbsh.1 man page source.
      Adding missing man pages.
      Adding Using_Samba book back to Samba-pre3.
      Adding pages oopsed.
      Adding build system files for Caldera OpenLinux.
      Adding build file.
      Updated by Patrick Powell <papowell at lprng.org>
      Fixes to allow wins.c to compile to allow building of libnss_wins.so.
      Added Using Samba book reference back into welcome page.
      Updating pampass from Samba-2.2 code tree. ===> JHT
      Updated Major/Minor version to 4.50 - see notes.
      Updated with Andrew Bartlett patch.
      Patch from Mandrakesoft to ensure we close all files.
      Added error reporting to pam_session code.
      Oops. Typos.
      Added Steve Langasek <vorlon at netexpress.net> pam_smbpass PAM module code.
      Added Steve Langasek <vorlon at netexpress.net> pam_smbpass support
      Adding developer mode option.
      Added notes about NetBIOS Scopes.
      Note: This does NOT work yet. More work is in progress - please wait before using.
      Initscript from 2.2.4 tree.
      Update to build 3.0.0 alphas
      Transient change - not final - don;t want to lose this between systems and testers.
      More temp. changes. - Bear with me, this will soon be resolved.
      Still hacking at it.
      Hack, hack, where is my sledge hammer?
      Added wins entry.
      Cleaning things up for test deployment.
      It builds the RPMS, now for the testing...
      Fix up location of libsmbclient.so so it always goes to /usr/lib.
      Update samba.pam from 2.2.4pre branch.
      Sorry, forgot to commit this last night.
      Fix ability to compile with CUPS support.
      Told make to build nsswitch/pam_winbind.so - someone changed the Makefile
      Added build option for "everything". Changed build options for libsmbclient.
      Added smbwrapper and everything to build options.
      Modified programs installed to /usr/bin and /usr/sbin
      Updated because I want this for now - NOTE: This will change before release
      Oops .. last update was committed before saving! Argh!
      Fix pathes.
      Fix location of binaries and make sure they get there. Still experimental.
      Add VFS Support
      x source path so this thing compiles.
      Remove VFS module build so RPMs can build for now.
      Removed samsync
      Changed Major/Minor version info reported to Server Manager to 4.9.
      Applied new display mode FLAGS for SWAT.
      Committing changes before I lose them. Work still in progress.
      Update to add DEVELOPER option to more parameters.
      Updated in preparation for samba-3.0.0alpha20
      Removed call to configure for VFS modules.
      Typos! Fix 'em!
      Fixing path to libsmbclient.h so it never gets crossed with a system installed one.
      Added from samba mailing lists. Might help someone one day.
      Removed Fax document no longer extant.
      Fix ability to locate if we are a WINS client.
      Remove make_printerdef from binary install process.
      Added Buchan Milne's DESTDIR patch.
      Adding Buchan Milne's updates.
      Adding Buchan Milne's updates from HEAD.
      Not sure why this is here - so off it goes.
      Applied Buchan Milne's patches.
      Another Buchan Milne patch that escaped the last commit.
      Added DESTDIR patch from Buchan Milne.
      Applying Buchan Milne's patches.
      Added the remainder of Buchan Milne's patches.
      Remove Faxing.txt no longer exits.
      Updated build spec file - removed make_printerdef and modified DESTDIR handling
      Added logon script generator provided by: Timothy Grant <tjg at craigelachie.org>
      Latest updates from author.
      Added install-everything option.
      Trying to fix module handling. Not final yet.
      Added more notes from Samba Mailing List so this info does not get lost!
      Another update from Kurt Pfeifle.
      This does not work - VFS module handling is broken.
      Update to include support for new vfs and pdb modules.
      Added pam_smbpass suppot back, added smbsh files.
      Typos! Argh!
      Added smbsh and smbwrapper.so.
      Changed conditional in .rpmmacros from -x to -r.
      Added another email - this stuff needs to go into a new chapter
      Fixed Typo.
      Updating changes from HEAD.
      Added Registry update to remove roaming profiles from local machine cache.
      Fixed typo.
      Applied typoe fix from SuSE.
      Updated from Samba-2.2.7 code tree.
      First set of Profile Manipulation Notes.
      Added note about Win2Pro RK.
      Adding more notes.
      Adding Win2K profile info.
      dded further comment.
      and another comment.
      More notes added.
      Added NT4 Profile Modification Docs, updated Win2K version.
      Adding genlogon obtained from a a mailing list posting in 2001.
      Adding genlogon (from 3.0.0).
      ck at documenting Win9X/ME Profile Handling.
      Merge from 3.0.0 tree.
      Added "passwd backend" to WIZARD section in SWAT.
      Added audit module that logs info to smbd log file as well as syslog.
      Added extended audit module.
      Added extended audit module that logs to smbd log as well as syslog.
      Added my name to copyright.
      A fixed type TRUE -> True, reported by Paul Green.
      Updating projdoc from HEAD brach.
      Adding some more docs from HEAD branch.
      Cleaning up SuSE build area in preparation for adding packaging for SuSE 8.1
      Packaging files for SuSE 8.1
      README file to explain that this is not a SuSE update.
      Updated for 3.0 release.
      Updating from HEAD branch.
      Merge from HEAD to define variable port_to_use. Needed to compile.
      More of the documentation overhaul. More to follow.
      And yet another doco update. Yet more to follow soon.
      Fixing typos. Who put them typos in there? Argh!
      Update to current projdoc level.
      More doco updates. Another few days and it will be cooked.
      More docs updates. Much more under way.
      New docs added.
      Some update and Fixes for typos.
      Updated CUPS info from Kurt Pfiefle's Samba-2.2 docs.
      Updating 3.0.0 from HEAD branch.
      Added new files from HEAD branch.
      Superceded file.
      Superceded files
      Obsoleted files. All content of value is now in the HOWTO Collection.
      Updated notes by jht.
      More edits on profile management.
      Merging HEAD to 3.0.0
      Filling in some more blanks.
      Filling in more blanks.
      Update for other contributors to.
      Fixed typos.
      Addinf InterdomainTrusts.sgml
      Adding Rafal's docs on InterdomainTrusts.
      Update HOWTO link.
      Update HOWTO link.
      Merging HEAD doc changes into 3.0.0
      Docs merge from HEAD.
      Updated status.
      Patch from Steve Langasek <vorlon at netexpress.net>
      Patch from Steve Langasek <corlon at netexpress.net>
      Making sure this info is not lost. Someone will eventually fix/update/extend/usurp it.
      Fixing typo. Metze made me do it!
      Removing superceded documents
      Remove superceded documentation
      Updated from HEAD
      More docs.
      More docs.
      Fixed typos.
      More types and fixes.
      Adding more docs.
      Oops - Add another module.
      Partial review of changes by mimir. Work in progress.
      Merge of HEAD document updates to 3.0.0
      New file from HEAD.
      Fix typo.
      Applying updates from Rafal (mimir) and from DAvid Lechnyr.
      Adding Mimir's edits.
      Small edits.
      Merge from HEAD.
      Edits in progress.
      Added smbgroupedit to PROGS2
      Updates and additions.
      Fix typo.
      More update stuff - not finished (ofcourse!)
      More updates - still a work in progress.
      Replacing file with correct version.
      Merged the two browsing documents into one. Added locking module to global.ent file.
      Updates.
      Fix typo.
      I hate typos!
      Adding more updates - maybe last one for today.
      Updating docs from HEAD.
      Updating from HEAD.
      Update from HEAD
      Update.
      Added editreg.
      Added jCIFS to projects.
      Added Stephen Roylance's patch - Adds to Status page, a Start All, Restart All
      Added Stephen Roylance's patch to add buttons to start/stop/restart all three
      Update - closed off for now
      Update - closed off for now
      Updated FLAGs - Affects only SWAT.
      More updates.
      More updates.
      More updates: Fix typo in VFS docs, added docs on pam_smbpass.so to PAM.
      More updates: Fix typo in VFS, added docs for pam_smbpass.so to PAM.
      Tidy up only.
      Added patch from Stephen Roylance.
      Added patch from Stephen Roylance.
      Fix for bad macro error.
      Updating from HEAD.
      Update from HEAD.
      Update from LanDude <landude at comcast.net>
      Update from LanDude <landude at comcast.net>
      Updates: ADS typo fix, ProfileMgmt: Additional docs on how to disable roaming profiles.
      Update: ADS: Type, ProfileMgmt: Docs on how to disable roaming profiles
      Corrections and edits from Jesse Jacobs <jesse at eazy.homeip.net>
      Corrections and edits from Jesse Jacobs <jesse at eazy.homeip.net>
      Fixing typos.
      Fixing typos.
      Update from Rick Segeberg <landude at comcast.net>
      Adding edits from Vance Lankhaar.
      Update from Rick Segeberg <landude at comcast.net>
      Merge from HEAD.
      Fixes for syntax errors.
      Many typos, syntax fixes, more. Multiple sources including mega patch from
      Many fixes for typos and syntax, includes patch from Jesse Jacobs <jesse at eazy.homeip.net>
      Added tdbbackup man page.
      Added man page for tdbbackup
      Update - jht
      Adding tdbbackup manpage to Makefile, fix typos, fix incorrect syntax on author entry.
      Update from HEAD.
      PAtch from VORLON
      Patch from Vorlon.
      Patch from Vorlon
      Fixed typo - tdbbackup is man sect 8 not 1
      Fix typo - tdbbackup is man sect 8 not 1
      Add reference to use of the add machine script for on-the-fly machine account creation.
      Adding further change to accommodate the add machine script facility.
      Merge from HEAD.
      Re-arrangement of Chapters 3-8, merges, updates - first installment only.
      Merge of new edits from HEAD.
      Updating ServerType. Now almost complete.
      Update.
      More updates.
      More updates.
      Updatting docs further. More to come.
      Updatting docs further. More to come.
      Fixing syntax problems.
      Fixing Syntax Problems.
      More updates.
      More updates.
      Fix typo.
      Fix typo.
      A few more little fixes, a few more edits, a bit lost here, and a lot gained there! :)
      Hackety, hackety, hack. More edits.
      Merge from HEAD.
      More stuffing, this turkey will soon be done!
      More stuffing, this turkey will soon be done.
      More updates. Now working on BDC Documentation.
      More edits. Now working on BDC Documentation.
      Fix missing closing para marker.
      Fix missing para marker.
      Another set of updates to the docs.
      Another set of updates.
      More edits, hackety hack.
      More edits. Hackety Hack.
      Fix typo.
      Typos and fixes resulting from VL feedback.
      Fixes for typos and other stuff resulting from VL's feedback.
      Fix typos in StandAloneServer
      Completion of Stand-Alone server docs.
      Completion of Stand-Alone server docs.
      Extending Access Control Docs
      Updating Global definitions.
      Extending Samba Access Control Info
      Rolling in VL's changes.
      Rolling in VL's changes.
      Adding more info on File and Directory conventions / differences.
      Added info on File and Directory info.
      More info on Unix permissions.
      More info on Unix permissions.
      More Edits.
      More Edits.
      Fixups and more edits.
      Fixups and more edits.
      More edits - added example.
      More edits - added example
      A few small edits to the locking file.
      A few small edits to the locking file. Source of info: Eric Roseme's whitepaper.
      Fix typo.
      Fix typo.
      Oh aye, another wee edit.
      Oh aye, another wee edit.
      A little edit. :)
      Update includes Jelmers' changes.
      Added Jelmer's patch from HEAD.
      Merge from HEAD.
      Fix typos.
      Fix typos, update to sync HEAD and 3.0.0.
      Metze's patches:
      Allow me to make just the HOWTO. We can remove this later.
      Update.
      An edit in progress.
      Fix typos.
      More edits.
      More stuff
      More updates.
      Another little edit. Still much more to be done.
      More edit food. More updates.
      Added a few example case thingies - called Common Errors.
      Added a Common Error.
      Added more info about backends.
      Added another Common Error
      Added a Common Error.
      Fix typos.
      Fixed typos.
      Minor edits.
      Fix typos.
      A few little edits - more updating ahead. It will get to be close enough
      A few fixes, a little tweaking, and it's getting into shape. Back to work now ...
      Adding new docs.
      Added more on anatomy of PAM. Note: This file is broken!
      Another update / edit. Still working on this.
      More edits.
      Added Common Error.
      More minor edits.
      Fix typo.
      Printing update from Kurt Pfiefle, curtesy of Ken Sarkies <matou at picknowl.com.au>
      A few little edits to clean up style and to blend this into current doc format.
      Fix typo.
      Fixing typos reported by Paul Eggleton <paule at cjntech.co.nz>
      Fix typos reported by Paul Eggleton <paule at cjntech.co.nz>
      Adding Kurt Pfiefle's new CUPS docs and Vance Lankhaar's fixes for typos.
      More Edits from Vance Lankhaar.
      An update long overdue. Please edit this further guys.
      Fix typo
      Updating smb.conf.5
      Added missing man pages.
      Updating html stuff.
      Adding missing documents and man page stothe tree.
      Adding missing docs to tree.
      Adding last two files.
      This patch is Vorlon's fault!
      Patch from vorlon at debian.org, see bugzilal #122
      Applied Vance Lankhaar's spelling fixes.
      Updating change from "winbind uid/gid" to "idmap uid/gid"
      Fix typos, add a little clarification.
      JMCD's fixes also.
      Adding idmap uid/gid smb.conf man page entries. Marking winbind uid/gid as deprecated.
      Adding profile acls man entry for smb.conf.5
      Typo fixes from Vorlon.
      Documentation Update for Beta3.
      Updating missing flags.
      Added buttons to change view mode. Fixes bug #212
      Fixes bug #243
      Format tidy up.
      Adding idmap backend man page section.
      Fix typo.
      Clarified what the SWAT FLAGS mean and what they do.
      Add buttons to Printers View
      Cleanup of loadparm and swat to correctly display all parameters as required.
      Corrected description of SWAT FLAGS since they have changed as a result of the
      Changed "winbind uid/gid" to "idmap uid/gid"
      Removed duplicated file, no longer in use. Note: profiles.1.xml is still
      Deleting obsoleted files in preparation for addition of new files.
      Updating SuSE build files for Samba3
      Missed one file. Now it's added.
      Tims' little fix.
      patch from Guenther Deschner <gd at suse.de>
      Adding docs for the CHANGESECRETPW command.
      Add missing markup tag.
      Relocate CHANGESECRETPW to correct level.
      Update pre-release of RC2. Note: Due to config errors not all manpages
      Adding new files needed for html files.
      Fix problem where stdarg.version would print the program name as smbd.
      Remove inaccurate notation.
      Fix typo.
      Fix typo.
      I'm still working on this. More to come.
      I'm still working on this. More to come.
      Update.
      Fix from Monyo.
      Changed output so all debug output goes to stderr, and all file processing
      Fixing barfed idmap entries and adding not on use of FLAG_HIDE.
      Fix typo.
      r921: Change notice from CVS to SVN.
      r922: Adding notes regarding location of documentation.
      r923: Fixes so tdbtool and tdbtest can be built. Added build specs for tdbdump and tdbbackup.
      r1942: Add missing semicolon.
      r2269: Copied from SAMBA_3_RELEASE 3.0.7 branch.
      r2279: Clarification changes only.
      r3221: Remove check for allow-trusted-domains so that this thing does not throw-up.
      r4208: Set version to 3.0.11
      r5653: Fixiing typos.
      r5790: Added ability to set account description.
      r5918: Fix typo.
      r6783: Fixes for Solaris 9.
      r6820: Remove claim that password can be set with account creation (RPC).
      r6823: Add deletion confirmation / error message.
      r6947: Removal of testprns from package spec.
      r7976: Adding debugging info.
      r8031: Adding contributed mklogon scripts.
      r8085: Updating info.
      r8188: Update from Dave Collier-Brown.
      r9353: Updating troublshooting error message.
      r9973: Update Maintainers file.
      r10039: Minor update.
      r10105: Fix typos. Oops, modules are called objects.
      r10106: Fix typos. Oops, more fixes.
      r12031: Added net idmap to common help list.
      r13327: Update install.html location & fix typo.
      r17172: Fix typo.
      Increasing SIZELIMIT to handle 200 groups.
      Adding Samba-Guide HTML file.
      Fixing omission of addition of idmap container.
      Fix link tag ref.
      Adding clarification of KRB support for SuSE and Red Hat Linux
      Fix typos.
      Fix typos.
      Clarify how to assure local profile use only.
      More fixes.
      Fix typo.
      Fix tdbbackup documentation per Andrew Tridgell feedback.
      Fix typo.
      Relocate name lookup info to correct section.
      More updates - more node-type doco is required.
      Add documentation on netbios node-type, clarify NetBIOS-less ops.
      Update VFS Extended Audit Module Debug Info.
      Add more debugging information, both generic and for the VFS extd_audit module.
      Fix typo.
      Fix typo.
      Make share writable
      Updates and fixes.
      Updates and fixes.
      Update version date and number
      Work in progress commit - Adding IDMAP documentation.
      Work in progress commit - Adding IDMAP documentation.
      Work in progress commit - Adding IDMAP documentation.
      Updates.
      Tiny update.
      Progress commit only - still going.
      Another progress update - more coming soon.
      Man page update for idmap backend with idmap_rid plug-in.
      More work in progress - further commits to follow.
      Fix provided by Robin Munn <rmunn at pobox.com>
      IDMAP Completion.
      Updated username mape man page to reflect post 3.0.7 operation.
      Replaced '%u' with '%U' which is expanded correctly on login.
      Fix small typo.
      Formatting updates and makefile update.
      Fix typo reported by  Stepan Kasal.
      Fixing more typos.
      Fixing documentation bug #1093.
      Fixing incorrect info. The code only checks that the users UID=0.
      Fix for bug report #1716
      Fixes and updates.
      Fix another typo.
      Fix semantics.
      Another attempt to clarify.
      Update path info.
      Fix typo.
      Replace drive root with environment variable that is portable.
      Addd instruction to run autogen.sh.
      Update information to point out that configure only needs to be built if it does not already exist in the tarball.
      Fixing groupmap errors.
      Fixing bugs.
      Fix to get around bug that causes use of the quote meta-tag to fail inside a screen metatag.
      Added Jerry's documentation on User Rights Management in 3.0.11.
      Oops. Forgot to add file. Here it is.
      Fix typo.
      Adding patches and updats.
      Fix typos.
      Commiting Lars Mueller's patch.
      Adding clarification for post 3.0.10 versions.
      Fix typo.
      Bug fix and update to clarify reason for upper-case share name.
      Updating in readiness for 3.0.12
      Further update. More to come.
      Further update. More to come.
      Another update - adding Privilege info to chapter 6, updating it also in the HOWTO.
      Formatting fix. More needed.
      Update publication date.
      Fixing bug in slapd.conf - owner notified that bugs are not allowed.
      Removal of the smbldap-tools pl extensions left behind in last edit.
      Updating version numbers.
      Adding JRA's documentation on large directory (files) support.
      More doco updates. More coming too.
      Another update.
      Fixing note in bug #2364
      Fixing bug #1105
      Fix for bug #2200
      Updated new Migration from NetWare Chapter
      Reverting from Global to pershare scope for printer admins parameter.
      Last update before massaging the content into its final place.
      Pre-Final Chap9. One more review to follow.
      Fixed typos.
      Fixed duplicated tag name.
      Added index entries. Revised introduction. Fixed typos.
      Fixup preface to include new chapter.
      More fixups. Sheesh, where is that feedback?
      Another formatting fixup.
      Another formatting fixup.
      Fixing typos reported by Will Enestvedt.
      Commit to preserve changes still in progress.
      This is the last update to the Samba-Guide for a little while. I'm about to tackle the HOWTO for a make-over.
      Adding notes regarding LDAP and Computer Accounts.
      Update from Misty Stanlet-Jones
      Clarification that Samba documentation is not an LDAP HOWTO.
      Added index entries.
      Fixed typo.
      Rectify information about file times displayed by ls.
      More review needed - this fixes a big glitch.
      Fixing missing group suffix info.
      Fix typos.
      Fix formatting.
      Fix bug #2476.
      Fix bug #2411.
      Updating smbldap tools references to 0.8.7.
      Updating references to smbldap-tools from 0.8.2 to 0.8.7
      Adding more info regarding winbind.
      Change of chapter name to clarify the subject.
      Fixing yet one more typo.
      Fix typo.
      Updates based on feedback.
      Update serial counters.
      Fix buggy location of markup.
      First installment of ACLs update.
      Another ACLs Installment.
      Fix missing LDAP server password problem.
      Fixups.
      Begin of another reorg.
      Another installment in the reorg.
      More updates in the reorg.
      More updates.
      Now for some new content. This is a reorg. you know.
      Another installment in the reorg.
      Last update tonite.
      Another update.
      Another update.
      Another update. Fix bugs.
      Fixed icons. Bummer - they were broken.
      Changed Warning Icon.
      Another update.
      Another update.
      Update while adding Index entries.
      Updating description of domain logons.
      Fix typo.
      Fixing newly introduced typos.
      Added chapter is now indexed.
      Fixing up the preface now that the rest is just about complete.
      Update as a result of major surgery.
      Adding convmv info suggested by Volker Lendecke.
      Small fixups.
      Update to add IDMAP_RID info etc.
      Fixing title corruption.
      Fixing glitches.
      More fixups and feedback item integration stuff.
      Incorporating feedback from reviewers.
      Fixing location of sambaDomainName info.
      Further updates.
      Fixing typos.
      More updates from feedback.
      More wonderful edits from feedback.
      More updates to follow.
      Update to include Misty's feedback.
      Fixup tag ids to avoid duplication between HOWTO and SBE
      Fixup preface.
      Final edit before copy edit phase.
      Fix typos and speeling meesteaks.
      Foratting update.
      Add title missing from an example.
      Adding fixes from feedback.
      Fixing typo.
      Fixing typos and repeats.
      Applying feedback fixes.
      More fixes.
      More fixes.
      More fixups.
      Ouch fixes.
      Fixing man pages.
      adding feedback.
      Fix typos.
      More updates from feedback.
      More fixes and updates.
      More fixes.
      Commencement of documenting Management.
      More updates in the pipeline.
      Fixing typos.
      Expanding warning info.
      Making sure all typos are fixed.
      Interim update.
      Folding Volker's and Guenthers contributions - interim commit.
      Another update.
      Work in progress update.
      Work-in-progress commit.
      Another progress update. More to come.
      Another work in progress commit.
      Fix typo so docs can build.
      Progress update only.
      Another progress update.
      Another progress update.
      Another progress update.
      Final progress update.
      First set of copy editors.
      Another copy editor update.
      Adding mention of ADS support for this option.
      Adding missing files.
      Fixed formatting.
      Updating Linux Account Manager info from R. Gruber.
      Fixes from Flatfender.
      Fixing oops.
      Updating man page info.
      Fixup based on info from Derrell.
      More fixes.
      A small copy editor's update.
      Tidied up file. More edits coming later.
      Tidied up file. More edits coming later.
      Another partial update.
      Added winbindd to daemon list.
      Another copy edit update.
      More edits.
      Edits to build PDF.
      Adding new foreword.
      Spell checked.
      Update.
      Update. Undoing last update.
      Fix typos - my typos
      Updating link.
      Updating config files.
      Another edit.
      More edits.
      Another progress edit.
      Progress update.
      Progress update.
      Progress update.
      Progress update.
      Progress update.
      More edits.
      More edits - I hate typos.
      More edits - I hate typos and omissions.
      Replacing dot delimited with colon for chown command.
      Replacing Symlink with actual file
      Minor edits prior to final copy edit.
      Fix small typo. Missing space that is essential for syntax.
      Fix typo reported by Dave Jeffs <djeffs at utah.gov>
      Fix typo.
      Removing man pages again.
      Another update.
      A progress update - more to be fixed.
      Another update.
      Another update.
      Fixup.
      Another update - more to go.
      Fixing running head spacing.
      Another update.
      Update.
      Stage 1 of PHPTR Edits.
      PHPTR Edit 2. More to come.
      Another edit and addon. This is a work in progress.
      Fix typos.
      Fixups.
      Fixups.
      Fix.
      More Updates.
      Update.
      More changes.
      More changes.
      another edit update.
      Another edit.
      More updates.
      Another partial update. More to follow.
      Added notes that this chapter is in flux.
      Progress update.
      Another progress update.
      Another update.
      Another update.
      Another update.
      More updates.
      Fixing index problems.
      Progress commit.
      Another partial update.
      Progress commit.
      Another update.
      Another update.
      Another update.
      Another update.
      Another update.
      Relocating Privilege info.
      Another update.
      Updating index exntries.
      Updates.
      Remove copy editor's comment and fix link.
      Fix another set of typos.
      Fix another set of typos.
      Updates.
      Updates.
      Updates.
      Updates.
      Fix typo.
      Update.
      Update.
      Update.
      Update.
      Updates.
      Update.
      Update.
      Update.
      Another Update.
      Update.
      Update.
      Fixes.
      Update.
      More updates.
      Update.
      Update.
      Update.
      Update.
      Update.
      Update.
      Fixes.
      Update.
      Update.
      Update.
      Update.
      Update.
      Update.
      Update.
      Update.
      Updating TOSHARG files
      Updates.
      Update.
      Adding place-holder for inside cover docs.
      Update.
      Editors updates.
      More copy edits and content updates.
      Fixes.
      Guenther's edits.
      Add notes regarding %L and port 139.
      Edit.
      Update inside cover notes.
      Edits.
      Final Addition. Copy layout is next.
      Remove port 445 so NBT works correctly.
      Add index entries, fix lingo.
      Fixes and updates.
      Fixes and update index entries.
      Fix typo.
      Fix typo.
      Fix typo.
      Fix line lengths.
      Fix line lengths.
      Fix line lengths and other formatting issues.
      Fixing smbldap-tools info.
      More fixes.
      Fixing appendix nomenclature.
      Fixes.
      Widow/orphan handling
      Fix to ensure chapters start on odd pages only.
      Fix DHCP ranges - thanks Eric.
      Fix changed link - thanks Eric.
      Fix changed link - thanks Eric.
      Fix changed link - thanks Eric.
      Formatting fixes before publication.
      Another layout fixes update. More to come.
      Another layout fixes update.
      More formatting edits.
      Fix URL.
      Fix URL.
      Fixups.
      Another fixup.
      More fixups.
      Another fix.
      Another fix.
      Removal of CRUFT. 50 lashes to those who created CRUFT. Argh.
      Ilia Chipitsine patches.
      Last PHPTR edits.
      Minor fixups.
      More updates.
      Fix two small typos.
      PHPTR update.
      Fix typo.
      More documentation regarding disabling of roamin profile paraphenalia.
      Fix typo.
      Fix typo reported by Raphael Langerhorst <raphael-langerhorst at gmx.at>
      Fix typo.
      Fixing missing link errors.
      Updating RID information.
      Further clarification regarding ldap suffix usage.
      Removing manpages from the version on Samba.Org.
      Fix typo.
      Clarification based on feedback.
      Re-clarification based on feedback.
      Formatting and other fixes to man pages.
      Updating parameter changes from 3.0.20 release notes.
      Adding info regarding account flags.
      Adding documentation for vfs_default_quotas module.
      Fixing typos.
      Fix typo.
      Adding missed comment mark-up.
      Fix typo.
      Add missing domains container. Reported by Arun Sharma <asharma at interstructures.com>
      Added description of the X flag, removed reference to Samba 2.2, and put in a pointer to the pdbedit man page.
      Removed statement that it would be problematic to make umount SUID, because it is on all commercial Linux distributions.
      Fix for bug #3148
      Fix for bug #3146
      Fix for bug #3139 - remove testprns man page.
      Another attempt to fix bug #3146.
      Fix bug #3061. Restart nmbd when editing wins.dat.
      Fix for bug #2692 - Do not use NetBIOS name PIPE.
      Fix for bug #2303.
      Replace macro with expanded text.
      Fixing bad XML to ascii code conversions by replacing smbconfblocks with programlisting tags. - Bug 2032.
      Remove another reference to editreg - a deleted application.
      Updated from 2.2 to Samba 3.
      Fix for Bug #3179.
      Fix for bug #3180.
      Apply docs patch from abartlet at samba.org.
      Adding map read only docs.
      Added mape read only parameter to the new parameter list.
      Docscovering the rename user script from jmcd.
      Fixes and reformatting from Bug #3190, plus a clean-up.
      Fix Bug #3183.
      Fix bug report #3225.
      A slew of fixups that were causing problems for some folk.
      Removing manpages again.
      Clean up file.
      Clean up file.
      Add information regarding PDC/BDC roles.
      Fix typo. Bug#3127.
      Fix paths. Bug#2743.
      Fix typos.
      Update to include Centrify information.
      Adding modification of Jeremy's documenation for for 3.0.21 large directory support and tidy up source file.
      Fix typos.
      Fixing messy man page information.
      Tidy up only.
      Update changed parameters for 3.0.21.
      Removal of parameter mistakenly readded into list.
      Added IDMAP dump/restore command info.
      Fixes only.
      Another touch-up.
      Updating documentation of tdb files some more.
      Further updates from one of Jerry's emails.
      Fix typo.
      Reformat source files, move 'default' info into body text.
      Added -c option to synopsis.
      Added -c option to smbpasswd.8
      Remove guest capability on secure public share - should not have been there.
      Update Outlook info, courtesy of Jon Johnson <jon at sutinen.com>
      Eventlog HOWTO - temporary copy,
      Added clarification regarding user rights and privileges.
      Fix typo.
      Reformat of source only.
      Fix typos and attempt to clarify the explanation.
      Fix typo.
      Fix incorrect path to source files.
      Removing mention of the winbind enable local accounts parameter.
      Fix typo.
      Removal of remains of old xmlsam info. Had to do this to fix breakage caused by partial delete.
      Remove one more reference to xmlsam.
      Added attribution.
      Fixup only.
      ldap Idmap suffix should only specify the relative dn.
      Fixup typos.
      Adding missed step reported by  Adam Nielsen.
      Updated changed parameters for 3.0.23
      Updating documentation for 3.0.23. Jerry, please check these changes.
      Fix typos.
      Samba-3.0.23 changes.
      Fixes for XSLT warnings.
      Adding samba user comments and feedback.
      Applying edits suggested by Jon Johnson.
      Fix incorrect value contributed by
      Correct clashing information for this parameter.
      Update from Mårten Svantesson - msv at kth.se
      More fixes.
      Fix ambiguity and erroneous info regarding name mangling and case preservation parameters.
      Edits by monyo.
      More cleanups to be done.
      Fixing bad info regarding UNIX file and directory access control.
      Fix typos reported in Bug#4358
      Fix reference to vfs_audit - pointed out by der Tom.
      Fix for Bug#3182.
      Fix provided by Gavin Henry.
      Fix typo notified by
      Removal of mulitple passdb backend notes.
      Fix a typo. Thanks to Thomas Bork.
      Switching to GPL3
      Add root directory GPL3 XML file.
      Remove symlink.
      Adding actual GPL3 XML file.
      First of a string of edits over the next weeks.
      Adding Eric Fosberg's additions.
      Adding notes provided by Rory Vieira.
      Changes following input from Petr Klima
      Temporary title change.
      Adding new manpages to inactive HOWTO template.
      Cleanup trailing whitespace.
      Fix for bug 4947.
      Name change of Ethereal to Wireshark. Patch provided by Gerald Combs (Wireshark).
      Fix for Bug#4731. Reporter: Debian package maintainers.
      Fix provided by William Jojo.
      Fix for Bug#4281 provided by Monyo.
      Fix for Bug#1890 submitted by Michele Baldessari.
      Fix for Bug#3625 provided by Christian Perrier.
      Fix typo.
      Fix typo.
      Fixed formatting issues. Removed -B option docs.
      Fix type reported by Mangaldeep Sandhu

Jonas Gorski (1):
      s3: Fix bug 6992, make test for getgrouplist cacheable

Jonathan Nieder (1):
      s3-param: Make "rlimit_max below minimum Windows limit" notification less scary

Joseph Tam (1):
      Fix bug #8877 - Syslog broken owing to mistyping of debug_settings.syslog.

Julien Kerihuel (12):
      pidl: Add --version argument.
      pidl: Allow fixed size arrays inside unions.
      Support ETT_FIELD keyword.
      Add INCLUDE command to pidl.
      This patch adds remaining padding bytes to the dcerpc_fault IDL structure and adds a const 4 bytes blob to pkt.u.fault.
      The following patch calls the op_bind operation for an interface which context is altered by dcerpc alter_context requests. It prevents dcerpc_server from returning errors (nca_s_fault_access_denied, then nca_s_fault_context_mismatch in further client requests) and keeps the connection alive.
      Remove events from require line:
      Fix if_version for interfaces with a if_version_minor field different from 0
      Install util/tevent_* public headers. Required by OpenChange for compiling IDL
      Choose between local tevent_status.h header file and installed one
      Add unique IP address binding for client connections (EPM and ncacn_ip_tcp levels)
      Add ncacn_http (RTS) IDL implementation in dcerpc.idl

Justin Maggard (2):
      s3: Fix bug 7578
      Detect Mac OS X as a separate client type.

Kai Blin (687):
      r23539: Remove code duplication and unify behaviour of winbind_nss_*.h files
      r23606: Merge Samba4 mkversion.sh to Samba3.
      r24353: Add a getpwuid lookup to wbinfo.
      r23311: Updating the samba4 winbind protocol to version 18.
      r23403: Make nsstest build on Samba4.
      r23481: As per metze's suggestion, move the nsstest files from torture/ to nsswitch/
      r23605: Update mkversion.sh to support git and git-svn checkouts.
      r23674: Merge changes from Samba 3 SVN r23539:
      r23675: Build libnss_winbind on linux.
      r23676: Added a .gitignore file to hide generated files from git status.
      r23876: Prepare to run nsstest from make test, just not add it to tests_all.sh yet.
      r24108: Split out samba3_parse_domuser to a seperate file and rename, so it can be
      r24109: Add a wb_name2domain call
      r24157: Merge from kai/samba4-gsoc.git;h=728deba680f8cf85cab168a6278a2cf657f65fdb
      r24363: Add template shell and template homedir settings to smb.conf
      r24364: Remove sync call from name2domain, bump debug level to 5
      r24365: Implemet backend for wbinfo -S, sid2uid
      r24366: Implemet backend for wbinfo -Y, sid2gid
      r24369: Don't use goto in wb_name2domain, fix wb_samba3_split_names call.
      r24370: Implement wbinfo -i backend (getpwnam)
      r24371: Actually add the glue to make wbinfo -S and wbinfo -Y work
      r24372: Implement backend for wbinfo -U
      r24373: Implement backend for wbinfo -G (gid2sid)
      r24374: Add a getpwuid lookup to wbinfo
      r24375: Implement backend for wbinfo --uid-infp (getpwuid)
      r24376: Missed this file from the checkin, sorry.
      r24395: Add check if talloc_strdup worked.
      r24396: Fix a typo.
      r24397: Bump debug level of sid2(u|g)id calls to 5.
      r24480: Bump another DEBUG down to level 5
      r24483: Implement backend for wbinfo -u (list users)
      r24486: Bump another DEBUG to level 5
      r24574: Fix a warning in wb_samba3_cmd.c
      r24575: Implement setpwent
      r24576: Implement endpwent
      r24577: Implement basic getpwent.
      r24795: When talking to squid, allocate the buffer size dynamically.
      r24796: Add bounds checking to ntlm_auth, increase initial buffer size to 300 to avoid
      vlp: Build vlp (virtual line printer) against current git on make
      r25642: Fix a small typo.
      r26047: spoolss: OpenPrinterEx with an invalid server/printer name returns WERR_INVALID_PARAM
      r26048: spoolss: Fix test_SecondaryClosePrinter.
      r26394: dcerpc: Use target_hostname() instead of peer_name() in dcerpc_server_name()
      r26395: spoolss: Add WinXP-like printer browsing test.
      r26396: dcerpc: Fall back to peer_name() if target_hostname() is not set.
      r26407: Janitorial: Remove a pstring and compiler warnings.
      r26416: Janitorial: Fix warnings in auth/gensec/
      r26418: Janitorial: Kill pstring in ntlmssp_parse.c
      r26428: spoolss: Fix a typo.
      r26451: Janitorial: fix warnings in lib/registry/
      r26452: Janitorial: Remove a pstring.
      r26453: Janitorial: Don't use a static char[] in smb_readline_replacement.
      r26457: Janitorial: Don't use pstring in tdb_unpack
      r26458: Janitorial: also free() var on continue.
      r26465: ntlm_auth: Remoce pstring.
      r26466: Janitorial: Remove pstrings and static char[]s from torture/basic/scanner.c
      r26500: README: Samba4 is not a technical preview anymore.
      r26511: Janitorial: Fix a warning for the 'printf' attribute on gendb_search_v
      r26514: Revert the talloc.c part of r26511, as talloc.h already takes care of thois.
      r26515: nsswitch: Get rid of a pstring
      r26528: dsdb: Fix a warning.
      r26588: Janitorial: Rename torture_*_add_*test to torture_*_add_*test_const.
      r26589: torture: Add non-const version of torture_tcase_add_simple_test
      r26605: masktest: Get rid of pstrings.
      r26606: masktest: Dynamically allocate strings.
      ldb: Get rid of a warning.
      gentest: Fix a warning.
      ejs: Remove cast to incompatible pointer.
      libnet: Rename a variable so it does not shadow a global.
      libnet: Fix includes to silence a warning
      wbinfo: Handle SID_NAME_COMPUTER in sid_type_lookup
      libsmb: Do not upper-case target name on NTLMv2 hash generation
      util_str: Don't return memory from talloc_tos(), use mem_ctx instead.
      ntlm_auth: Dynamically allocate the read buffer.
      ntlm_auth: Prepare for a deeper rewrite of the helper functions
      nltm_auth: Use struct ntlm_auth_state in helper functions.
      ntlm_auth: Rewrite manage_client_ntlmssp_request without statics.
      ntlm_auth: Get rid of statics in manage_squid_ntlmssp_request
      afs: Use talloc_stackframe() instead of talloc_init()
      util_sock: Fix memcache bug in get_mydnsfullname.
      util_sock: Don't return a pointer to freed memory.
      ntlm_auth: Add a blackbox test.
      ntlm_auth: Fix typos in the torture test script.
      ntlm_auth: test should honour configfile option to run on build farm.
      ntlm_auth: Fix another typo in the test.
      ntlm_auth: Parse configfile after parsing it's location, not before.
      popt: Use SMB_CONF_PATH environment var if no other configfile is set.
      dynconfig: Add missing prototypes and fix typoed ones.
      sidmap: Some source code cleanups.
      provision: Fix new user creation.
      autoconf: We build Samba from git now, not from SVN.
      loadparm: Clean up trailing whitespace
      util_ldb: Add a missing \n to debug string, fix trailing whitespaces.
      loadparm: Add configuration settings for idmap.
      idmap: Handle uid->SID mapping
      idmap: Handle gid->SID mapping
      idmap: Handle SID->uid
      idmap: Handle SID->gid
      howto: We need bin/smbpython to run python provisioning
      WHATSNEW: Added Kai's commits.
      make: Fix make valgrindtest-env
      idmap: Map SIDs to unixids instead of uids/gids
      ntlm_auth: Improve compliance to the Squid helper protocol
      ntlm_auth: Improve compliance to the Squid helper protocol.
      provision: Initialize uninitialized variables if "targetdir" is not
      util: Add talloc_get_type_abort() call.
      IRPC: Add include guards for the header.
      winbind: Bump down the debuglevel.
      wbclient: Add an async winbind client library.
      rpc_server: Use wbclient instead of sidmap in unixinfo pipe
      rpc_server: Remove references to sidmap from the lsa pipe code.
      ntvfs: Use wbclient in vsf_unixuid, not sidmap
      ntvfs: Use wbclient for pvfs_acl and pvfs_acl_nfs4
      idmap: Also store sid type in the idmap db
      provision: Set up id mappings in the idmap db, only map Administrator.
      WHATSNEW: Added information about the new idmap system
      provision: Remove backup group mapping
      blackbox: Add many more tests for wbinfo
      Add --uid-info option to manpage.
      --uid-info takes a uid as parameter
      libnet: Make UserInfo accept a SID as input as well, fix wb_cmd_getpwuid
      gitignore: Add *.swp files, *.patch files and export/libtdb.symb
      selftest: Use TESTS env var to specify tests to run like Samba4 does.
      selftest: Advertise as PDC and time server during make test
      tests: Add a net_misc test.
      net: Fix usage string.
      net: Some whitespace clean-up.
      net: Remove globals
      net: more whitespace cleanup
      AFS: The dummy afs_createtoken_str should return NULL, not False.
      configure: Kill linker warnings about 32bit libs on 64bit Linux.
      configure: Fix comment to match the current iconv check.
      net: Use true/false instead of True/False.
      net: more whitespace cleanup
      net: Split out common help functions.
      net: Move "net join" handling into a separate file.
      net: Split out "net user"
      net: Split out "net group"
      net: Split out "net file"
      net: Move more utility functions into net_util.c
      net: Split out "net afs"
      net: Split out "net share"
      net: Move printer help to net_rpc where it's used.
      net: Move help for "net status" to net_status.c
      net: The top level help function for net cmd is always net_cmd_usage
      client: Fix the proto header to fix the build.
      net: Move includes to net.h
      net: Move net_run_function/net_run_function2 to net_util.c
      net: Add net_run_function3
      net: Use functable2 to give a short help text for top-level functions.
      net: Use functable3
      net: Autogenerate "net help" output from net's functable.
      net: Add net_display_usage_from_functable()
      net: Don't try to look up a server if net time is called with a command.
      net: Make "net status" use functable3
      net: Make "net afs" use functable3
      net: Make "net cache" use functable3
      net: Make "net dom" use functable3
      net: Make "net groupmap" use functable3
      net: Make "net idmap" use functable3
      net: Make "net time" use functable3
      net: Fix comment for net_time_zone()
      net: Make "net usershare" use functable3
      net: Make "net ads" use functable3
      net: Make "net ads gpo" use functable3
      net: Make "net rap" use functable3
      net: Make "net rpc" use functable3
      net: Make "net rpc audit" use functable3
      net: Make "net rpc rights" use functable3
      net: Make "net rpc service" use functable3
      net: Use d_printf() instead of printf() in net_ads_gpo.c
      net: Make "net conf" use a functable similar to functable3
      net: Make "net registry" use functable3
      net: Make "net rpc registry" use functable3
      net: Make "net sam" use functable3
      net: Rename functable3 to functable, get rid of old functables
      net: Fix net_ads.c build for the HAVE_ADS == 0 case.
      wbinfo: Output string for sid type in lookupsid.
      net: Don't crash on invalid command line options.
      netapi: Correctly increase idx when displaying user information
      net: share_type is defined in net_rap.c, net_rpc.c needs to use that.
      r26514: Revert the talloc.c part of r26511, as talloc.h already takes care of thois.
      net: Make share type lookup a function.
      rpc: Fix the merged build breaking on StrnCaseCmp.
      vlp: Move closer to the code tested.
      ntlm_auth: Put huge NTLMv2 blobs into extra_data on CRAP auth.
      net: Fix net rap printq info documentation (bug #5892)
      libsmb: Fix up pointer passed to cli_send_trans in cli_link_internal
      ctags: Ignore source3/includes/proto.h for tags.
      s3-rpcclient: Fix a compile warning.
      s3-rpcclient; Really fix compile warning.
      libwbclient: Add placeholder functions for wbcQuery[GSU]idTo[GSU]id
      libwbclient: Add placeholder function for WINBINDD_GETGRLST
      libwbclient: Fix typo in wbcGetgrent docstring.
      libwbclient: Add placeholder function for WINBINDD_CCACHE_NTLMAUTH
      libwbclient: Implement wbcGetpwent
      libwbclient: Implement wbcGetgrent and wbcGetgrlist
      configure.in: Fix smbtorture_s3 tests.
      nsswitch: Move source3 files to top level dir.
      nsswitch: Move nsswitch files from source4 to top level nsswitch dir
      nsswitch: Fix paths for Samba4 blackbox wbinfo test
      Final part of fix for bug #5953 - smbclient crashes: cli_list_new segmentation fault (with NASBASIC server).
      (Fixed) Final part of fix for bug #5953 - smbclient crashes: cli_list_new segmentation fault (with NAS-BASIC server).
      Try to fix the build by fixing some typos in the vfs code
      Fix some tevent includes, trying to fix the build
      s4 libnet: Add group_name member to struct libnet_GroupInfo's out struct.
      s4 winbind: Avoid a "discards const" compiler warning.
      s4 winbind: Add implementation for WINBINDD_GETGRNAM
      wbinfo: Add --gid-info option.
      wbinfo4: Add --gid-info option
      s4 winbind: Fix typos in debug output
      s4 libnet: Add support for groupinfo by sid lookup
      s4 winbind: Add support for WINBINDD_GETGRGID call
      s4 winbind: Copy SID to avoid "discard const" warning
      s4 winbind: Correctly silence a "discard const" warning
      s4 winbind: Silence a "discards const" warning
      s4 torture: Fix the wbinfo blackbox tests
      s4 torture: Add another wbinfo test and fix a typo in another one
      s4-winbind: Add support for the WINBINDD_LIST_GROUPS command.
      s4-winbind: Remove a "knownfail" entry for the now implemented LIST_GROUPS
      async_req: Move to top level dir
      s4: add ../lib/async_req to the s4 build
      async_req: Fix the S4 build
      async_sock: Move to top level
      shared: Move dom_sid_* utility functions to top level
      s3: Fix the non-merged build.
      s3-wbclient: Use new tevent data types
      async_sock: Use unix errnos instead of NTSTATUS
      async_sock: Map ASYNC_REQ_TIMEOUT to ETIMEDOUT instead of ETIME
      tevent: Rename ev_timeval* functions to tevent_timeval, export them.
      async_sock: Use tevent_timeval instead of timeval functions
      wbclient: Fix use of wb_int_trans_send, queue parameter must not be NULL
      s4 selftest: Export the WINBINDD_SOCKET_DIR env var
      s4-build: Also search ../nsswitch for make (c|e)tags
      errormap: Add wbcErr to NTSTATUS mappings
      errormap: Change the WBC_ERR_UNKNOWN_ERROR to map to NT_STATUS_UNSUCCESSFUL
      s3 ctags: ignore all proto.h files for tag generation
      net: Use samba default command line arguments.
      s3 WHATSNEW: Mention the changes to net
      s3 wbc_async: Fix copyright notice cut&paste error.
      libwbclient: Add async call framework.
      libwbclient: Silence a compiler warning
      libwbclient: Store the winbind socket dir to use in the wb_context
      nsstest: Relicense header file to LGPLv3+
      libwbclient: Attempt to fix build on AIX
      net: Only use the in memory ccache when not already using a kerberos ticket in net ads
      libwbclient: Add debugging hooks.
      s4: Add libwbclient backend to auth_winbind
      s4 auth_winbind: Don't allocate the rids for the info3 structure within the loop
      s4 auth_winbind: Internally, info3 has utf8 buffers, not utf16 buffers.
      Revert "net: Use samba default command line arguments."
      s3: net ads user info should print primary group as well (bug #2658)
      s3 net: Initial top level support.
      s3 net: i18n support for net ads
      s3: Update i18n files
      s3 net: i18n for net ads gpo
      s3 net: Correct path for net_ads_gpo.c
      s3 net: i18n support for net cache
      s3 po: Update msg files
      s3 net: i18n support for net conf
      s3 net: i18n support for net dom
      s3 net: i18n for net eventlog
      s3 net: i18n support for net file
      s3 net: i18n support for net group and net groupmap
      s3 net: Remove uid==0 check from net groupmap
      s3 net: i18n support for net help
      s3 po: Make adding translated files less tedious
      s3 net: i18n support for net idmap
      s3 net: i18n for net join
      s3 net: i18n support for net lookup
      s3 net: i18n support for net lua
      s3 po: Regenerate msg files.
      s3 net: i18n support for net rap
      s3 net: i18n support for net registry
      s3 net: i18n support for net rpc
      Revert "s3: Update i18n files"
      s3 net: net i18n in it's own module
      s3 net: i18n support for net rpc audit
      s3 net: i18n support for net rpc join
      s3 net: i18n support for net rpc printer
      s3 net: i18n support net rpc registry
      s3 net: i18n support for net rpc rights
      s3 net: i18n support for net rpc samsync
      s3 net: i18n support for net rpc service
      s3 net: i18n support for net rpc shell
      s3 net: i18n support for net sam
      s3 net: i18n support for net share
      s3 net: i18n support for net status
      s3 net: i18n support for net time
      s3 net: i18n support for net user
      s3 net: i18n support for net usershare
      s3 net: i18n support for net utility functions
      i18n: Update s3 net German translation.
      librpc: rerun "make idl_full"
      s4 ctags: Stop *_proto.h files from cluttering up the tags
      s3 wbinfo: Get rid of lp_ functions
      s3 net: Add getauthuser/setauthuser commands.
      s3 wbinfo: remove --get-auth-user and --set-auth-user functionality
      s3 wbinfo: Use uint32_t instead of uint32
      s3 wbinfo: Avoid ADD_TO_ARRAY macro.
      s3 wbinfo: Don't use global_myname()
      s3 wbinfo: Use talloc_strdup instead of SMB_STRDUP
      s3 wbinfo: Explicitly include popt header, remove unused common options.
      s3 wbinfo: Remove unused functions, use C99-types
      libwbclient: Add wbcSidTypeString function.
      s3 wbinfo: use wbcSidTypeString instead of sid_type_lookup
      s3 wbinfo: Only call afs_settoken_str if compiled with WITH_FAKE_KASERVER
      wbinfo: Use one codebase for Samba3 and Samba4.
      s4 winbind: Implement a stubbed out version of WINBINDD_DOMAIN_INFO
      s4 winbind: Silence compile warning by adding new commands to the list
      wbinfo: Reduce test noise in the wbinfo blackbox test
      s4 winbind: Quiet down the WINBINDD_DOMAIN_INFO handler stub warning
      wbinfo: Fix up s3 blackbox test. wbinfo no longer needs a config file.
      s3 merged build: Don't build wbinfo twice.
      AD-Bench: A first go at an Active Directory benchmark.
      README.coding: Update rules about code blocks and braces.
      ntlm_auth: use data_blob_talloc() to allocate session key
      s3 aclocal.m4: Fix iconv checks, clean up m4 code
      s3 net: Add a few missing gettext calls.
      s3 net: Fix up a share type translation and translate some more strings
      selftest: Print reason when a test fails unexpectedly
      s3 winbindd: Get WINBINDD_CHECK_MACHACC torture test to work again.
      s3 selftest: Fix the WINBINDD_GETDCNAMEe test.
      s3 selftest: Allow the enumeration of users and groups
      s3 winbindd: Return number of groups in data.num_entries for WINBINDD_LIST_GROUPS
      s3 selftest: Fix WINBINDD_LIST_GROUPS test
      s3 selftest: Fix LOOKUP_SID test.
      s3 test: Fix WINBINDD-STRUCT tests
      s3 selftest: Enable the WINBIND-STRUCT tests
      s4 selftest: Ignore more winbind test known to fail
      s4 selftest: Fix and reenable WINBIND-STRUCT.NETBIOS_NAME test
      s3 net: Fix compile error with WITH_DNS_UPDATES
      s3 net/i18n: Use only one spelling for "Usage:"
      s3 net/i18n: update .po files
      s3 net: Fix compile warnings
      s3 net/i18n: Update .po files
      s4 includes: Include system/locale.h to get access to <ctype.h>
      tsocket: Fix description for tstream_readv_pdu_queue_send/recv
      tsocket: Fix the description of tstream_writev_queue_send/recv
      libwbclient: Zero out context on initialization
      libwbclient: Add async wbcPing_send/_recv
      libwbclient: torture-test wbcPing async functions.
      libwbclient: add wbcInterfaceVersion send/recv calls
      libwbclient: Add async wbcInfo_send()/wbcInfo_recv() calls
      libwbclient: Add wbcNetbiosName_send/recv calls
      libwbclient: Add wbcDomainName_send/recv call
      libwbclient: Add wbcDomainInfo_send/recv calls
      libwbclient: Add wbcInterfaceDetails_send/recv
      libwbclient: Implement wbcSidToUid_send/recv
      libwbclient: Implement wbcUidToSid_send/recv
      libwbclient: Implement wbcSidToGid_send/recv
      libwbclient: Implement wbcGidToSid_send/recv
      libwbclient: Implement wbcLookupSid_send/recv
      libwbclient: Implement wbcAuthenticateUserEx_send/recv
      libwbclient: Implement wbcLookupName_send/recv
      libwbclient: Test wbcLookupName async functions
      s4 idmap: Make the sid_to_xid and xid_to_sid calls static.
      s4: Switch to S3-style id mapping data types.
      s3 test: Make the netbios name test pass again
      libwbclient: Separate out the async functions
      libwbclient: Fix s4 build failure by fixing up includes.
      s3 ntlm_auth: Don't malloc data that will be talloc_free()d
      lib/replace: use correct inttypes in crypt.c
      lib/replace: Don't use StrnCpy inside crypt.c
      build: Enable more warnings when using the --pedantic configuration option
      build: Add a ctags command to build a ctags-style tags file
      build: rename s4 compare_config_h.sh helper and add a s3 version of it
      build: Check for various headers S3 needs.
      build: Add a basic wscript file for Samba3
      build: Check for CUPS
      build: Check for LDAP libraries
      build: Check for krb5 headers
      build: Check for syscall headers
      build: check for uint_t
      build: check size of dev_t, ino_t and time_t
      build: check for headers needed to generate stack traces
      build: check for inttypes.h
      build: check for inotify support
      build: Check for kernel change notify support
      build: Check for Linux kernel oplocks
      build: Check for IRIX kernel oplock types
      build: Check for kernel share modes
      build: Check for functions needed by Samba3
      build: Fix package name and package string case
      build: Check for various members of struct stat
      build: Check for POSIX capabilities
      build: check for int types included from rpc/rpc.h
      build: Check if the compiler will optimize out functions
      build: Change checks to conform to new CHECK_* behaviour
      build: Import conf decorator in samba_conftests.py
      s3-waf: check for default charsets
      nsswitch/wbinfo: Fix the S4 header check
      s3-waf: Correctly create symlink if SAMBA_BINARY targets are not in the current diectory
      build: Add an always parameter to CHECK_DECLS
      s3 i18n: Fix up missing newlines in pam_winbind translations
      s3 i18n: Fix up missing newlines in more pam_winbind translations
      build: Update the waf build to fix python header checks
      build: skip missing executables in testwaf.sh
      wbinfo: Add better libwbclient error reporting
      s3 smb2: Fix the build without kerberos
      s3-waf: Added support dynconfig cflags
      s3-waf: Add more objects trying to build smbd
      s3-waf: Fake some defines that need to be set by configure options later
      s3-waf: Check for KRB5_DEPRECATED handling
      s3-waf: Move cups, ldap and krb5 checks to the end of the wscript file
      s3-waf: Check for LDAP
      s3-waf: Add some more krb5 checks
      s3-waf: Fix the CUPS dependency
      s3-waf: Add helper that facilitates defining --with-x and --without-x options
      s3-waf: Allow using --enable/--disable options as well
      build: Don't look for krb5.h in libreplace
      s3-waf: Allow building without ads/ldap/krb5 even if the libs are installed
      s3-waf: Support smbd build without ldap and kerberos
      s3-waf: Build nmbd using waf as well
      s3-waf: Add ctags command
      s3-waf: build wbinfo using waf
      s3-waf: Don't recurse into tsocket dir during configure
      s3-waf dynconfig: s3 configfile default is $LIBDIR/smb.conf
      s3-waf: build testparm and winbindd
      s3-waf: Build LDB as a subsystem
      s3-waf: Fix install location of testparm and wbinfo
      s3-waf: Add configuration option for merged build
      s3-waf: Add dummy configuration option for PAM
      s3-waf: Add dummy configuration options for quotas
      s3-waf: Add dummy configuration option for sendfile-support
      s3-waf: Add dummy configuration option for utmp
      s3-waf: Add dummy configuration option for pthreadpool
      s3-waf: Get winbindd to build again with current master
      s3-waf: Don't build winbindd when --without-winbind is set
      s3-waf: Introduce more subsystems to reduce build time
      s3-waf: Fix global includes to fix waf configure --help output
      s3-waf: Fix the build --with-ldap
      s3-waf: Fix the minimal build
      s3-waf: fix up the LDAP objects if LDAP isn't built
      s3-waf: build winbindd again
      s3-waf: Build swat
      s3-waf: replace all - with _ in the configuration option names
      s3-waf: note that the options are broken
      s3-waf: Use a common subsystem for samba-popt code
      s3-waf: Use a common subsystem for the kerberos client code
      s3-waf: add eventlogadm binary
      s3-waf: Fix up the winbindd build
      s3-waf: add popt and tdb include dirs to the includes list
      s3-waf: Autogenerate the static and dynamic init function calls
      s3-waf: fix eventlogadm build with winbind
      s3-waf: tdb includes are in lib/tdb/include
      s3-waf: clean up dependencies a little
      s3-waf: create a SECRETS subsystem
      s3-waf: clean up includes
      s3-waf: autogenerate lists of static modules
      s3-waf: build shared modules as subsystems
      s3-waf: Remove references to LDB
      s3-waf: Some files moved during the rebase
      s3-waf: Fix up PIDL includes.
      s3-waf: fix the winbindd build again
      s3-waf: Fix build with ldap by adding a SMBLDAP subsystem
      s3-waf: more elaborate host_os check for STAT_ST_BLOCKSIZE
      s3-waf: Fix the build after rebase
      s3-waf: ndr string functions moved to top level
      s3-waf: Really disable winbindd build when --without-winbind is specified
      s3-waf: Actually make --with/--without-swat work
      s3-waf: Don't hardcode the name of the awk executable in wscript_build
      s3-waf: Add darwin to the host_os-specific checks
      s3-waf: Check for additional options on *xattr
      s3-waf: Fix the naming of some variables introduced recently
      s3-waf: Build smbclient binary
      s3-waf: Allow to build with kerberos support
      s3-waf: Also set "developer" env when building in developer mode
      s3-waf: Fix typo
      s3-waf: Fix the build of swat with --enable-cups
      s3-waf: Detect which version of krb5_enctype_to_string is used
      s3-waf: Fix the smbclient build with libcap
      s3-waf: Match the defines from the autotools build on PACKAGE_*
      s3-waf: Support builds with utmp accounting
      s3-waf: Set HAVE_GSSAPI if gssapi libs were found
      s3-waf: Add more darwin-specific options
      build: Also replace '-' by '_' when creating header defines
      s3-waf: support avahi builds
      s3-waf: Fix the build after rebase
      wafsamba: Correctly detect if bld.env.XSLTPROC is not set
      ldb: Revert signature file changes made in 151e239bcf2860411527a953d627b2d724c0a57e
      s3-waf: Fix build after ntlmssp_sign.c moved
      s3-waf: Check for broken nisplus include files
      s3-waf: Check if compiler supports LL suffix
      s3-waf: Add check for asm/types.h
      s3-waf: Check for device major and minor macros
      s3-waf: Add check for dirent.d_off member
      s3-waf: Fix the build
      s3-waf: Fixed dependencies of the the krbclient subsystem.
      s3-waf: Fix up smbclient dependencies
      s3-waf: Work around missing *netgrent prototypes on OSX 10.4
      s3-waf: Add check for iconv
      s3-waf: Fix the OSX 10.4 build by adding an explicit resolv dep on smbclient
      build: Allow for a custom message in CHECK_C_PROTOTYPE
      s3 configure: Check for (set|get|end)netgrent prototypes
      s3-waf: Change the (set|get|end)netgrent checks to match the configure.in checks
      s3: Attempt to fix the build on NetBSD
      s3 build: Fix *netgrent prototype detection on opensolaris
      s3: Fix netgrent configure checks for compilers not supporting -Werror-implicit-function-declaration
      s3-waf: Build libwbclient as dynamic library
      s3 waf: Remove iniparser source list from source3/wscript_build
      s3 waf: more correctly generate symbols for pdb/vfs/auth/etc. modules
      IDL: More types for the DNSP IDL file
      ndr: Add support for pulling/printing an ipv6address type
      ndr: Implement push function for IPv6 addresses
      dnsp: Allow parsing of AAAA records
      dnsp: Add MX record parsing
      dnsp: Parse TXT records
      dnsp: Add support for parsing HINFO records
      libwbclient: Remove half-finished async implementation
      lib/util: Add tevent WERROR wrappers
      s4 socket: increase the debuglevel to make add interface debug messages less verbose
      s4 dsdb kcc: Prefer msDS-hasMasterNCs over hasMasterNCs when replicating
      s4 dns: Import DNS win32 error codes from MS-ERREF
      netlogon.idl: Switch to explicit constants to remove dependency on nbt.idl
      idl: Add idl describing DNS structures
      dns/nbt: Fix spelling of the "authoritative" flag.
      s4 dns: Add a boilerplate DNS server implementation
      ndr dns: Add simple parser
      s4 dns: Reply to a name request with an A record.
      dnsp: Can't have two memebers of a union with the same name
      s4 dns: Fix a data corruption in the dns_string parsing
      s4 dns: Look up records in the ldb database
      s4 dns: Look up all names in the ldb database.
      s4 dns: Handle CNAME records
      s4 dns: Allow more components as part of a domain name
      s4 dns: start handling update requests, return correct error codes
      s4 dns: Better error handling when parsing invalid or unknown records
      s4 dns: Map between NTSTATUS and dns error codes
      s4 dns: More work on updates
      s4 dns: Split up the code into multiple files for easier development
      s4 dns: Switch to WERROR
      s4 dns: Add a prerequisites check for updates
      s4 dns: Add stub checking if updates are allowed
      s4 dns: Implement update record prescan logic
      ndr: Make sure ndr_dns.c has no lines wider than 80 chars
      s4 net: rename to samba-tool in order to not clash with s3 net
      tevent: Fix docstring, tevent_req_is_in_progress does not destroy private data
      s3 docs: Reword posix locking text to answer a common question
      ndr: Another try to support the build on non-IPv6 systems
      s4: Implement UDP echo server example
      s4 libcli: Add libcli_echo lib and torture test
      errormap: Add unix_to_werror() function
      s4 samba-tool: Implement "testparm" command
      s3 autobuild: Fix CFLAG check for netgrent tests
      s3 waf: Mimic the autoconf check for netgrent
      nsswitch: Fix build check logic
      s4 provision: split up DNS provisioning into generic and samba-specific ldifs
      s4 provision: Add some of the AD-specific DNS records to the directory
      s3 swat: Fix possible XSS attack (bug #8289)
      s3 swat: Allow getting the user's HTTP auth password
      s3 swat: Add support for anti-XSRF token
      s3 swat: Add XSRF protection to status page
      s3 swat: Add XSRF protection to viewconfig page
      s3 swat: Add XSRF protection to wizard_params page
      s3 swat: Add XSRF protection to wizard page
      s3 swat: Add XSRF protection to globals page
      s3 swat: Add XSRF protection to shares page
      s3 swat: Add XSRF protection to password page
      s3 swat: Add XSRF protection to printer page
      s3 swat: Add time component to XSRF token
      s3 swat: Create random nonce in CGI mode
      s4 winbind: Don't drop workgroup name for getpw*
      libcli/smb: Get rid of set but unused variable
      addns: Allow creating AAAA records during updates
      net: Don't register link local addresses with DNS
      addns: Remove unused empty header file
      errormap: Add unix_to_werror() function
      s3 net: Fix a discard const warning
      dns: The QCLASS is called IN, not IP
      dns: Do as BIND and MS DNS and drop quries with qdcount != 1
      s4 provision: Set server role default when called from command line to 'dc'
      wscript: Also generate ctags for python files
      dns: Add support for TXT record to idl file
      dns: Move the dns_srv_record to the correct place in the idl file
      s3 waf: Use upper case uselib_store parameter, otherwise the following checks won't find it
      s4 provision: Rename bind9 flatfile backend to BIND9_FLATFILE
      s4 provision: Reword opinionated dns backend help text, add NONE backend
      s4 provision: Default to win2k3 domain function level
      s4 provision/dns: Clean up backend handling
      s4 provision/dns: Clean up os level handling
      s4 provision: DNS backend should be set by caller
      s4 provision/dns: Move secretsdb_setup_dns to the AD DNS specific setup
      s4 provision/dns: Move DNS-related setup to sambadns module
      dns: Build the python bindings
      s4 dns: Support DNS_QTYPE_ALL queries
      s4 dns: Handle QCLASS_NONE queries
      s4 dns: the opcode is called OPCODE_UPDATE in the RFC, not OPCODE_REGISTER
      nbt: Fix offset check in ndr_pull_component
      dns: Fix offset check in ndr_pull_component
      s4 dns: Turn on internal DNS server during testing
      s4 dns: Add a first test case
      s4 dns: Reduce test output noise by upping log level for dns_name_packet logging
      s3 libaddns: Prevent a crash when dns_create_update fails
      s4 dns: Move dns_transaction_udp to other helper functions
      s4 dns: Check more of the returned values for the A query
      s4 dns: Test QTYPE_ALL query
      s4 dns: Test QCLASS_NONE query
      s4 dns: Test SOA queries
      s4 dns: Get rid of const qualifier for prereqs, we do need to allocate those
      s4 dns: More explicitly use the first question of an update packet only
      s4 dns: Add test to prove two updates in one packet are a FORMERR
      s4 dns: Update requests with QCLASS != IN or ALL trigger NOTIMPLEMENTED errors
      s4 dns: Fix some typos in comments and a whitespace
      s4 dns: Implement dns name equality check
      s4 dns: Implement dns record comparison function
      s4 dns: Move record lookup to dns_utils.c
      s4 dns: Give better test output on RCODE mismatch
      s4 dns: Update prerequisite checking conforming to RFC
      s4 dns: Implement RFC-compatible update prescan
      s4 dns: Actually handle the update request
      s4 dns: Add some debug output
      s4 dns: Allow updates based on smb.conf setting
      s4 dns: Fix TCP handling in the DNS server
      s4 dns: Add support for PTR queries.
      s3 selftest: Allow DNS updates during testing
      s4 dns: Support TXT queries
      s4 dns: Support TXT updates, add tests
      s4 dns: Clean up tests a bit
      s4 dns: Be less chatty during tests
      s4 dns: Test deleting records and fix a small bu
      s4 dns: Add a simple async client library
      s4 dns: Add a simple dns lookup helper
      s4 dns: Forward questions we can't answer to another server
      s4 dns: Only forward for zones we don't own
      s4 dns: Allow changing the dns operation flags in handlers
      s4 dns: Check smb.conf if we should allow recursion
      s4 dns: Only do recursive queries when allowed/desired
      s4 dns: Allow updating PTR records.
      s4 dns: Add TSIG and TKEY records to idl
      s4 dns: unify error handling when bailing out
      s4-dns: Use proper talloc hierarchy for AAAA records in create_response_rr
      s4-dns: Use proper talloc hierarchy for NS records in create_response_rr
      s4-dns: Use W_ERROR_HAVE_NO_MEMORY in create_response_rr
      Add myself as libcli/dns maintainer
      libcli/dns: Rename UDP-based calls to reflect their use
      s4 dns: Structure tests a bit better
      s4 dns: Correctly handle A questions for CNAMEs
      s4 dns: Negotiate GSSAPI-based TKEYs
      s4 dns: Store TKEYs in a ringbuffer
      s4 dns: Handle GSS-TSIG signatures
      s4 dns: Verify incoming TSIG signatures
      HACK remove debug statement
      hack: dns_sign_tsig correct memcpy
      drop me
      more tsig_verify stuff
      s4 dns: Make sure to remember incoming tkey name
      s4 dns: Allow configuring signed updates
      s4 dns: Revert erroneous push from wrong branch
      s4 dns: Create IDL entry for TSIG-like record needed for signature check
      s4 dns: Move dns_find_tkey to an extra file
      s4 dns: TKEY record needs to remember incoming algorithm
      s4 dns: When we got a TKEY, we need to remember which key to use for signing
      s4 dns: Handle GSS-TSIG signature creation
      s4 dns: Verify incoming TSIG signatures
      s4 dns: Make sure to remember incoming tkey name
      s4 dns: Allow configuring signed updates
      s4 dns: Check if signing user is allowed to update records
      s4 dns: Make debug output less noisy
      s4 dns: Improve logging of delegated dns updates
      s4 dns: Run python tests in fl2003dc env
      s4 dns: Add libaddns-based simple tests
      s4 dns: use the internal DNS server per default
      loadparm: dns is now a default server service
      WHATSNEW.txt: Update DNS server description
      s4 provision: Ask for the dns forwarder IP address during interactive provision
      s4 dns: Get rid of deprecated allocation result check
      s4 dns: Fix return code for deleted records
      libcli/dns: Time out requests after a while
      utils: Remove unused samba-dig tool
      samba-tool dns: Don't use "localhost" to connect to local host
      debug: Add debugclass for DNS server
      dns: Use new DNS debugclass in DNS server
      dns: Also add a print-out for the out_packet
      dns: Add support for MX queries
      dns: more debug debug options in the tests
      dns: Fix allocation of txt_record in txt record tests
      debug: Add ability to dump_data per debug class
      librpc: Add NDR_PRINT_DEBUGC to ndr print to a debug class
      dns: Also print packet information for DBGC_DNS
      swat: Remove swat.
      idl: Add support for parsing OPT records
      dns: Support larger queries when asking forwarder
      idl: Add DNS RP record support as per RFC 1183
      idl: Add DNS HINFO record support
      dns: Delete dnsNode objects when they are empty
      libcli: Remove uneeded debug message

Kamen Mazdrashki (623):
      Ignoring generated files:
      tort: Implement 'setup' and 'teardown' for DRSUAPI test cases.
      tort: Helper function to get DC info for testing
      tort: DsCrackNames - propagate torture context to all tests.
      tort: RPC-CRACKNAMES test case refactored
      s4/tort: CrackNames test update to work against W2K3.
      s4/tort: Make common setup/teardown drsuapi test funcs really common
      s4/tort: CRACKNAMES tests to use private structure for testing.
      s4/tort: Propagate torture_context and use torture_comment
      s4/tort: assert macro for drsuapi dcerpc call
      s4/tort: code clean up using torture_drsuapi_assert_call() macro
      s4/tort: RPC-DRSUAPI test case refactored to match torture architecture
      w32err: WERR_CLASS_NOT_REGISTERED updated
      w32err: NERR_ codes grouped together
      w32err: Sorting error codes in ascending order
      w32err: Re-define errors with numeric values
      w32err: Set hex format values for all errors
      w32err: use WERR_DC_NOT_FOUND name instead of WERR_DOMAIN_CONTROLLER_NOT_FOUND
      w32err: Script to fetch and prepare errors to be updated/added
      w32err: WERR_DOMAIN_CONTROLLER_NOT_FOUND error value fixed
      w32err: FRS_ group of errors replaced with numeric values
      w32err: WERR_DC_NOT_FOUND replaced with WERR_DCNOTFOUND
      w32err: WERR_USER_EXISTS replace with WERR_USEREXISTS name
      w32err: WERR_GROUP_NOT_FOUND renamed to WERR_GROUPNOTFOUND
      w32err: Importing auto-generated Win32 errors and descriptions
      s4-tort: Added assertion macro for DRSUAPI call
      s4-tort-drs: DsReplicaUpdateRefs test fixed and extended
      s4-tort-drs: Add bind_info for dcerpc_drsuapi_DsBind() call
      s4/drsuapi: ber_write_partial_OID_String() implementation
      s4/drsuapi: Internal implementation for ber_read_OID_String
      s4/drsuapi: ber_read_partial_OID_String() implementation
      util: fixed compile time "discards qualifiers" warning
      util: strhex_to_str() fixed to handle '0x' correctly
      s4/asn1: Added torture suite for ASN1
      s4/asn1: Added test for ber_write_OID_String()
      s4/asn1: Added test for ber_write_partial_OID_String()
      s4/asn1: Added test for ber_read_OID_String()
      s4/asn1: Added test for ber_read_partial_OID_String()
      s4/asn1: fixed typo in torture messages
      s4/asn1: local TALLOC_CTX should be child of torture_context
      s4/asn1: ber_read_OID_String() to be based on _ber_read_OID_String_impl()
      s4/drs(idl): Redefine drsuapi_DsReplicaOID in drsuapi.idl
      s4/drs(idl): Regenerate idl
      s4/asn1: Use explicite TALLOC_CTX in ber_write_OID functions
      s4/drs(NDR): Remove push/pull code for drsuapi_DsReplicaOID struct
      s4/drs(NDR): Print implementation for drsuapi_DsReplicaOID
      s4/drs: Propagate redefinition of drsuapi_DsReplicaOID into code base
      s4/drs(tort): TORTURE_DRS torture module - initial implementation
      s4/drs(tort): oid_from_attid() reference implementation
      s4/drs(tort): ignore drs/proto.h file
      s4/drs(tort): _drs_ldap_attr_by_oid() implementation
      s4/drs(tort): drs_util_DsAttributeId_to_string() function
      s4/drs(tort): _drs_util_verify_attids() to verify ATTIDs in objects received
      s4/drs(tort): fix compile time warning
      s4/drs: prefixMap module initial definition
      s4/drs(tort): prefixMap unit test initial implementatoin
      s4/drs(tort): fixed '==' to '>='
      s4/drs(tort): Comment typos fixed in drs_util.c
      s4/drs(tort): Unit test for prefixMap implementation.
      s4/drs: prefixMap main interface implementation
      s4/ldb: Fix double allocation for "ldb_url"
      s4/drs: Fix memory leek in prefixMap
      s4/drs: Move making of partial-binary-oid to a separate function
      s4/drs: Implement binary-oid-lookup into prefixMap
      s4/drs(tort): implement prefixMap comparison function
      s4/drs(tort): test for schema_prefixMap to/from drsuapi_prefixMap conversion
      s4/drs: schema_prefixMap to/from drsuapi_prefixMap conversion implementation
      s4/drs: Move schema_prefixMap allocation in separate function
      s4: Add DRS-UNIT test suite to LOCAL group of tests to be executed
      s4: DRS-RPC tests added to RPC group of tests
      s4/drs: dsdb_schema uses dsdb_schema_prefixmap definition
      s4/drs: dsdb_load_oid_mappings_drsuapi() -> dsdb_load_prefixmap_from_drsuapi()
      s4/drs: dsdb_get_oid_mappings_drsuapi() to use new prefixMap interface
      s4/drs: dsdb_verify_oid_mappings_drsuapi() replaced by dsdb_schema_pfm_contains_drsuapi_pfm()
      s4/drs: dsdb_map_oid2int() replaced by dsdb_schema_pfm_make_attid()
      s4/drs: dsdb_map_int2oid() replaced by dsdb_schema_pfm_oid_from_attid()
      s4/drs: dsdb_schema_pfm_from_drsuapi_pfm() to accept partial drsuapi_prefixMap
      s4/drs(tort): prefixMap to/from ldb_val serialization test case
      s4/drs: Load prefixMap from ldb_val moved in separate function
      s4/drs: refactor dsdb_load_oid_mappings_ldb() to use _dsdb_prefixmap_from_ldb_val()
      s4/drs(tort): Create temporary LDB for testing purposes
      s4/drs(tort): prefixMap read/write in LDB test case
      s4/drs: dsdb_read_prefixes_from_ldb() refactored
      s4/drs: dsdb_write_prefixes_from_schema_to_ldb() refactored
      s4/drs(tort): refactor - SCHEMA_INFO_DEFAULT defined on file scope
      s4/drs: prefixMap lookup by full_OID implementation
      s4/drs: dsdb_create_prefix_mapping() refactored
      s4/drs(tort): Test case for dsdb_create_prefix_mapping() implemented
      s4/drs(tort): _torture_drs_pfm_compare_same() should not fail tctx by itself
      s4/drs: remove unused num_prefixes and prefixes from dsdb_schema
      s4/drs: Remove unused structures and functions
      s4/drs: Refactor to be more SAMBA.Coding style compliant
      util: str_list_unique_2() test implementation
      util: str_list_unique() bugfix
      s4/drs(tort): 'DsPrivate.pipe' renamed - 'pipe' is a system call
      s4/drs(tort): 'DsSyncBindInfo.pipe' renamed - 'pipe' is a system call
      s4/drs(tort): replace 'printf' with 'torture_...' calls
      s4/drs(tort): use torture_drsuapi_assert_call() macro for error checking
      s4/drs(tort): replace DEBUG with torture_asert/comment/fail
      s4/drs(tort): Convert DSSYNC test to a test case fixture
      s4/drs(tort): DSSYNC test to print what is different in drs_msg also
      s4/schema(tort): Test LDB_SYNTAX_DN with extended_dn in [GUID;SID;DN] form
      s4/schema(tort): Add test for Object(OR-Name) syntax
      s4/schema(tort): Inject authOrig attribute into schema loaded for tests
      s4/schema: Object(OR-Name) syntax handling for DRS calls
      s4/schema: Handle Object(OR-Name) syntax in extended_dn_out module
      s4/schema(tort): Refactor DSDB-SYNTAX test for better performance
      s4-ldif: Fix memory leek in ldb_ldif_write()
      talloc: Fix write behind memory block
      tdr-test: Fix 'push_charset' test
      krb5: Fix leaked hx509_context pointer
      s4/smbstreams: Fix memory use after free.
      s4-drstest: Don't remove temp LDB so it can be reviewed if necessary
      s4-drs: Fix bug - prefixMap is not updated when adding new OIDs.
      s4-tort: Move Schema tests from ldap.py into separate module
      s4-tort: Tests for "msDS-IntId" attribute implemented
      Revert "s4-drs: cope with bogus empty attributes from w2k8-r2"
      s4-schema: Set ATTID in schema cache from "msDS-IntId"
      s4-schema: Constraints on msDS-IntId attribute
      s4-schema: Implement msDS-IntId attribute generation
      s4-dsdb-util: Utility function to process ldb_request in transaction
      s4-dsdb-util: Execute ldb_request using LDB_CONTROL_AS_SYSTEM
      s4-drs: Save prefix map using LDB_CONTROL_AS_SYSTEM control
      s4-tort: Test handling of different ATTID values in prefixMap interface.
      s4-drs: Implement constraints on ATTID values in prefixMap
      s4-net: Fix 'talloc_free with references ...' error
      s4-libnet: Python binding for libnet_SetPassword()
      s4-libnet: Simple test for net.SetPassword() python binding
      s4: Fix result check for getaddrinfo()
      s4/dsdb_schema: GET_UINT32_DS() macro to use supplied default value instead of 0
      s4/dsdb_schema: fetch msDS-IntId value during SCHEMA replication
      s4/dsdb_schema: use msDS-IntId value for attribute look-up
      s4/schema: Do not assign msDS-IntId value if LDB_CONTROL_RELAX_OID is passed
      Revert "s4-schema: Set ATTID in schema cache from "msDS-IntId""
      s4/dsdb_schema: Load msDS-IntId value separately when loading from LDB
      s4: Ignore few more auto-generated files
      s4/ldap: Fix nested searches SEGFAULT bug
      s4/ldap: Test to expoit ldb_ildap bug in case of nested search requests
      s4/idl: PrefixMap description for W2K3 and W2K8 Schema:prefixMap attribute
      s4/drsblobs: Custom ndr_print_ implementation for drsuapi_MSPrefixMap_Entry
      s4/idl: drsblobs IDL regeneration
      s4/ldif: Better control on ldif_write_NDR() errors processing
      s4/ldif: Handle Schema:prefixMap blobs in W2K3 and W2K8
      s4/idl: add DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY flag for DRSUAPI
      s4/idl: add DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V5 flag for DRSUAPI
      s4/idl: add DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V10 flag for DRSUAPI
      s4/idl: add DRSUAPI_SUPPORTED_EXTENSION_RECYCLE_BIN ext. flag for DRSUAPI
      s4/idl: Regenerate IDL for DRSUAPI interface
      s4/drs: propagate DRS_ extension flags in code base
      s4/idl: Naming reserved flags for DRSUAPI_SUPPORTED_EXTENSION_ field
      s4/idl: regenerating drsuapi.idl
      s4/net_drs: 'net drs' utility initial creation
      s4/net_drs: 'net drs bind' command implementation
      s4/net_drs: 'net drs kcc' command implementation
      s4/ldap: Refactor the fix for ldap nested searches
      s4/schema: Move msDS-IntId implementation to samldb.c module
      s4/idl: drsuapi.idl fix drsuapi_DsReplicaSyncRequest1 description
      s4/idl: drsuapi.idl fix drsuapi_DsReplicaSync definition
      s4/idl: Regenerate IDL for DRSUAPI interface
      s4/drs: Propagate drsuapi_DsReplicaSyncRequest1 changes in source base
      s4/drs: Propagate drsuapi_DsReplicaSync changes in source base
      s4/net_drs: Utility macros for conditions checking
      s4/drs_util: Move DRSUAPI connection data into separate object
      s4/drs_util: Refactor code to use net_drs_connection object for DRSUAPI connecitons
      s4/drs_util: Add public function for binding to a DC
      s4/drs_util: 'net drs replicate' command implementation
      s4/idl: rename 'guid1' to 'source_dsa_guid' in drsuapi_DsReplicaGetInfoRequest description
      s4/drs: Propagate drsuapi_DsReplicaGetInfoRequest... changes into source code
      s4/idl: drsuapi_DsReplicaGetInfoRequest2 - 'string1' to 'attribute_name'
      s4/idl: drsuapi_DsReplicaGetInfoRequest2 - 'string2' to 'value_dn_str'
      s4/drs: Propagate drsuapi_DsReplicaGetInfoRequest2 changes in source code
      s4/idl: Regenerate IDL for DRSUAPI interface
      s4/drs_util: 'net drs showrepl' command implementation
      s4/ildap: fine tune ildb_callback()
      s4/tort: fix annoying "union spoolss_PrinterInfo" undefined warnings
      doxygen: talloc_get_type name fixed in Doxygen documentation
      s4/idl: drsuapi_DsReplicaSyncOptions flags are no more used
      s4/idl: DsGetNCChanges - switch types should be unsigned
      s4/drs: DsGetNCChanges - Propagating IDL changes to source code
      s3/drs: DsGetNCChanges - Propagating IDL changes to source code
      s4/idl: DsReplicaUpdateRefs - switch types should be unsigned
      s4/idl: DsReplicaAdd - switch types should be unsigned
      s4/idl: DsReplicaDel - switch types should be unsigned
      s4/idl: DsReplicaMod - switch types should be unsigned
      s4/idl: DsGetMemberships - switch types should be unsigned
      s4/idl: DsCrackNames - switch types should be unsigned
      s4/drs: DsCrackNames - Propagating IDL changes to source code
      s3/drs: DsCrackNames - Propagating IDL changes to source code
      s4/idl: DsWriteAccountSpn - switch types should be unsigned
      s4/drs: DsWriteAccountSpn - Propagating IDL changes to source code
      s4/idl: DsRemoveDSServer - switch types should be unsigned
      s4/drs: DsRemoveDSServer - Propagating IDL changes to source code
      s4/idl: DsGetMemberships2 - switch types should be unsigned
      s4/idl: QuerySitesByCost - switch types should be unsigned
      s4/idl: drsuapi_QuerySitesByCostCtr1 'unknown' member is now known
      idl: Regenerate DRSUAPI idl files
      s4/idl: DsAddEntry - switch types should be unsigned
      s4/drs: DsAddEntry - Propagating unsigned switches to source code
      s4/idl: DIRERR error codes definition
      s4/idl: Update drsuapi_DsAddEntryErrorInfoX definition
      s4/drs: drsuapi_DsAddEntryErrorInfoX changes propagated to source code
      s4/idl: DsAddEntry - refactor DsAddEntryCtr2 structure
      s4/drs: DsAddEntry - extending error handling for V2 replies
      s4/idl: drsuapi_DsAddEntryError refactored
      s4/drs: drsuapi_DsAddEntry_ErrData propagate structure def in source code
      s4/idl: redefine drsuapi_DsAddEntryErrorInfo1
      s4/drs: pretty print for drsuapi_DsAddEntry_AttrErrListItem_V1
      s4/drs: Refactor error handling for DsAddEntry V3 replies
      s4/idl: Add DsAddEntry Name resolution error definition
      s4/idl: Add DsAddEntry Referral error definition
      s4/idl: Complete drsuapi_DsAddEntryErrorInfo description
      s4/idl: Remove drsuapi_DsAddEntryExtraErrorBuffer - it is not used anymore
      s4/drs: Implement DsAddEntry V3 error handling
      s4/idl: DsAddEntry V3 request description
      s4/drs: Pretty print for drsuapi_SecBufferType
      idl: Regenerate DRSUAPI idl files
      idl: drsuapi.idl - fix few more comments
      s4/torture: Suppress Valgrind warnings
      s4/idl: Schema:schemaInfo attribute description
      s4/idl: drsblobs IDL regeneration
      s4/ldif: Handle Schema:schemaInfo blobs
      s4/dsdb: Define dsdb representation for schemaInfo attribute
      s4/dsdb: dsdb_schema_info object implementation
      torture: add torture_assert_goto() convenience macro
      s4/tort: Unit test for schemaInfo implementation
      librpc/idl: Use [nopython] attr for types used in decode_PrimaryKerberos method
      s4: Add 'drsblobs' Python module
      s4/was: Add 'drsblobs' Python module
      s4/schema: Torture test for schemaInfo implementation
      s4/test: add shemaInfo torture test to automated test suite
      s4/samldb: schemaInfo attribute must be updated when adding new Schema object
      s4/waf: add new files to WAF build
      s4/test: Use drsut_schemainfo_new() instead of SCHEMA_INFO_DEFAULT local define
      s4/dsdb: Use dsdb_schema_info object to verify schema_info blobs
      s4/dsdb: Use dsdb_schema_info object to create default schemaInfo values
      s4/test: Add DRS-UNIT test suite to 'quicktests' list
      s4/dsdb: Let caller to control if valid invocationId is critical or zero-guid is acceptable
      s4/dsdb: split writing of schemaInfo blob in two parts
      s4/dsdb: Set schemaInfo attribute value during provisioning
      s4/libnet: Dump DRSUAPI_DIRERR_OK as unexpected
      s4/libnet: Add few new lines in the debug log so it is readable again
      s4/libnet: handle errors returned for DsAddEntry_v3 properly
      s4: fix a typo
      s4/py_net: Source code formatting fix
      s4/libnet: Allocate mem in supplied mem_ctx
      s4/dsdb: dsdb_validate_invocation_id() should validate by objectGUID
      s4/net_drs: Fix Connection name printed
      Revert "s4/dsdb: Set schemaInfo attribute value during provisioning"
      s4/test: schemaInfo may not to be set yet
      s4/dsdb: Use default schemaInfo value when no such value is given
      s4/samldb: Create initial schemaInfo value if it doesn't exists yet
      s4/dsdb: Update Schema cache with updated schemaInfo value
      s4/dsdb: remove unused dsdb_schema_info_create() function
      s4/dsdb: schemaInfo revision may be 0
      s4/tort: Add simple unit test for dsdb_schema_info object creation
      s4/dn: handle case 'base' dn has no components
      s4/tort: Add test for comparing special DNs
      s4/selftest: fix passwords in selftest-vars script
      s4/metadata: fix whitespaces
      s4/drsuapi: Add another set of predefined ATTIDs
      s4/drsuapi: Yet another set of predefined ATTIDs
      s4-drsuapi: Sort ATTID definitions by ATTID value
      s4/test: Replace hand-made field count to test
      s4/test: rename enum test_fields{} member names to be more descriptive
      s4/test: make test_cleanup() in libnet_user library more robust
      s4/test: remove unused code
      s4/test: Connect SAMR and LDARPC pipes before calling libnet_ functions
      s4/test: test_userinfo/_async tests should use passed user_name param value
      s4/test: refactor NET-USERINFO test to be more 'torture' friendly
      s4/test: make samr_close handle functio public
      s4/test: Refactor test_opendomain to address following
      s4/test: change prototype for test_opendomain()
      s4/test: remove torture/libnet/utils.h as we are using proto.h now
      s4/test: remove local impl for open_domain and use common one
      s4/test-libnet-utils: refactor test_user_create()
      s4/test-libnet-user: Remove test_createuser()
      s4/test-libnet: Remove multiple test_samr_close() impelementations
      s4/test: remove duplicated comment
      s4/test: Refactor test_user_cleanup to be more robust
      s4/test: libnet_user tests should use common test_user_cleanup
      s4/test: Remove duplicated test_opendomain() functionality
      s4/test: remove create/delete group implementation in API-CREATEGROUP test
      s4/test: Fix incorrect NTSTATUS comparison
      s4/test: Call test_user_cleanup with original RDN for the user
      s4/test-libnet: Helper func to initialize libnet_context
      s4/test: fix SEGFAULT in test_group_create when rid is NULL
      s4/test: use test_libnet_context_init() function to create libnet_context
      s4/test-libnet: Fix compile-time warning
      s4/test-libnet: remove unused code
      s4/test-libnet: Move LSA close handle function to a common location
      s4/test-libnet: add few comments for utility functions
      s4/test-libnet: Refactor test_user_create() little bit to:
      s4/test-libnet: Refactor test_group_create() a little to:
      s4/test-libnet: Re-align code a bit - more readable this way IMO
      s4/dsdb-schema: Index attributes on msDS-IntId value
      s4/dsdb: Move schema accessors cleanup in separate function
      s4/dsdb: msg_idx->dn should be allocated in msg_idx mem context
      s4/test: fix DC password in selftest-vars.sh
      s4/dsdb-test: fix usage comment
      s4/drs-test: Tests Deleted objects replication
      s4/utils: fix few 'net drs replicate' error messages
      s4/drs: DsReplicaSync should search partition to Sync
      s4/drs-test: Fix whitespaces and permissions for delete_object.py test
      s4/net-drs: Fix error messages typo and formatting
      s4/drs-test: Add few comments in DrsDeleteObjectTestCase test
      s4/drs: re-implement 'renaming' object replication
      s4/test: Run DrsDeleteObjectTestCase as part of S4 testing
      s4/ndr: Fix tuncating of constant to a 'long' type
      s4/repl_meta_data: remove duplicated (and commented out) log
      s4/dsdb: Add DSDB_FLAG_NEXT_MODULE flag
      s4-dsdb/samdb/ldb_modules/linked_attributes.c: make use of DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/repl_meta_data.c: Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/ridalloc.c: Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/rootdse.c: Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/samba3sid.c: Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/samldb.c: Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/schema_load.c: Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/subtree_delete.c: Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/util.c Use DSDB_FLAG_NEXT_MODULE flag
      s4/dsdb: Assert DSDB_FLAG_*_MODULE is always passed in function call
      s4-source4/dsdb/samdb/ldb_modules/util.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/schema_load.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/samba_dsdb.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/ridalloc.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/repl_meta_data.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/pdc_fsmo.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/partition_init.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/operational.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/naming_fsmo.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/linked_attributes.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/acl.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-dsdb: Implement module switching in dsdb_module_search_dn()
      s4-dsdb/util: Reorder DSDB_FLAG_* checks
      s4: fix warning: unused variable ‘i’
      s4-ldb: Implement ldb_msg_difference() function to accept a memory context from client
      s4-dsdb: use ldb_msg_difference() in source4/dsdb/schema/schema_set.c
      s4-dsdb/schema/schema_set.c: fix trailing spaces and comments spelling
      s4-tools: use ldb_msg_difference() in ldbedit - modify_record()
      s4-test: Use ldb_msg_difference() in torture/rpc/dssync.c test
      s4-pyldb: Use ldb_msg_difference() in py_ldb_msg_diff()
      s4-ldb: Write more explanatory comment for ldb_msg_add()
      s4-ldb: Add separate function to add empty element into ldb_msg
      s4-ldb: Use _ldb_msg_add_el() in ldb_msg_add_empty()
      s4-ldb: Use _ldb_msg_add_el() in ldb_msg_add()
      s4-ldb: Add ldb_msg_normalize() to accept a memory context from client
      s4-dsdb: use ldb_msg_normalize() in source4/dsdb/schema/schema_set.c
      s4-dsdb: use ldb_msg_normalize() in source4/lib/ldb/common/ldb.c
      s4-dsdb: use ldb_msg_normalize() in ldbadd-process_file()
      s4-test: Use ldb_msg_normalize() in torture/rpc/dssync.c test
      s4-test: Use ldb_msg_normalize() in sqlite3 backend
      s4-dsdb: use ldb_msg_normalize() in ldb_msg_difference()
      ldb: Mark _DEPRECATED_ ldb_msg_diff() and ldb_msg_canonicalize() functions
      s4: Remove trailing whitespaces
      s4-ldb: use TALLOC_CTX type instead of 'void'
      s4-test: Simplify test_GetInfo() - we have what we need through LDB connection
      s4-test-dssync: Issue warning in case we have diffrences in link attributes
      s4-test: Expand DSSYNC test to be executed against all partitions
      s4: fix comment typos
      s4-schema: More verbose error log when subClassOf is not found in schema
      s4-test: strip trailing white-spaces
      s4-test: Move dssync.c to torture/drs/rpc
      s4-test: Move RPC-DSSYNC test in DRS-RPC test suite
      s4-test: Move dsdb_schema loading into public function
      s4-dsdb: fix attributes_by_msDS_IntId index sorting
      s4-test: Implement DRS-RPC-msDSIntId test case
      s4-drs-test: Make the two DRS test suite a top-level test suites
      s4-test: Run all DRS-RPC.* tests in ncacn_ip_tcp_tests tests group
      s4-test: Add drs.rpc.msDSIntId test to knownfail tests
      s4-test-dssync: remove unused variable
      s4-dsdb: Add context structure for dsdb_syntax conversion functions
      s4-dsdb: Use dsdb_syntax_ctx in *_validate_ldb functions
      s4-dsdb: Use dsdb_syntax_ctx in *_ldb_to_drsuapi functions
      s4-dsdb: Use dsdb_syntax_ctx in *_drsuapi_to_ldb functions
      s4-schema_syntax.c: Fix white spaces and alignment
      s4: fix few comment typos
      s4-dsdb-syntax: ATTID should be msDs-IntId value for the attributeSchema object
      s4-drs: GetNCChanges() to return correct (in AD-way) ATTIDs
      s4-dsdb: No need for dsdb_syntax_one_DN_drsuapi_to_ldb() to be public
      s4-test: Enable drs.rpc.msdsintid test case - it should be passing now
      s4-test: Change attribute syntax and value for readability
      s4-test: make better error message for ATTID checks
      s4-drs: ATTIDs for deleted attributes should be based on msDs-IntId value if it exists
      s4-drsuapi: Implement custom printing for drsuapi protocol for
      s4-ndr_basic.c: Fix ndr_*_hyper() when [bigendian] data is processed
      s4-kcc: Assert when unexpected repsFromToBlob version is passed
      s4-testenv: Synchronize DCs after 'net vampire'
      s4-dreplsrv: Move partition cache update before scheduling another set of replications
      s4-dreplsrv: Implement irpc stub to be used to force dreplsrv to update internal cache
      s4-kcc: Notify dreplsrv that Topology has changed
      s4-drs-test: Use dns hostnames to run 'net drs replicate' command
      s4-util: Print more informative error messages in 'net drs replicate'
      s4-drs-test: Skip a check that may possibly fail
      s4-test-dssync: Print the reason for skipping FetchNT4Data test
      s4-dreplsrv: Add caller-specific data parameter for dreplsrv_fsmo_callback_t
      s4-dreplsrv: Helper to find NC by DN or GUID or SID
      s4-dreplsrv: Helpers to locate source DSA in a partition by GUID or DNS name
      s4-dreplsrv: Refactor drepl_replica_sync() to behave as described in MS-DRSR
      s4-drs: A quick fix for DRSUAPI_EXOP_FSMO_RID_ALLOC extended_op handling
      s4-idl: redefine dreplsrv_refresh() to be alike other RPC function definitions
      s4-test: refactor API-DELETEUSER test a little to:
      s4-drs: Dump exact error when failure occurs during DsReplicaUpdateRefs call
      s4-dreplsrv: Run NC replication synchronously if requested
      s4-drepsrv: Dump more info when drepl_replica_sync() fails
      s4-drepl_service.c: Update (C)
      s4-dsdb/repl/drepl_out_pull.c: Remove unused code
      s4-dreplsrv: Call dreplsrv_out_operation::callback in case we fail to even run the operation
      s4-drs-test: Add 'reset' and 'replace' tests for drsuapi_DsReplicaUpdateRefs
      s4-dreplsrv: Do allocations on long-living context so that callback gets called
      s4-drs-fsmo: try to dispatch ops in queue as soon as possible
      s4-dreplsrv: fix 'dn' for partition object being created
      s4-drs: Hanlde extended operations only once
      s4-drs: return DRSUAPI_EXOP_ERR_SUCCESS in extended_ret
      s4-irpc: Add value for "infinite" timeout for IRPC calls
      s4-irpc: Add 'timeout' param for dcesrv_irpc_forward_rpc_call() call
      s4-irpc: Don't install endtime-timer in case timeout is INFINITE for the call
      s4-drs: Wait DsReplicaSync for as long as it takes to complete
      s4-pyrpc: Print location and type name we got when checking for types
      s4-dsdb: Add dsdb_schema_info_blob_is_valid() to verify schemaInfo blobls
      s4-prefixMap: use dsdb_schema_info_blob_is_valid() for schemaInfo blob validation
      s4-schema: use dsdb_schema_info_blob_is_valid() to verify schemaInfo blob
      s4-schema: Helper func to compare schemaInfo signitures
      s4-test: Add unit test for dsdb_schema_info_cmp()
      s4-ldapcmp: Fix options parsing for common Samba options
      werror: Add W_ERROR_HAVE_NO_MEMORY_AND_FREE() macro
      s4-drs: Check for schema changes only in case we are *not* applying Schema replica
      s4-devel-getncchanges: Add common Samba options as a group to be displayed
      s4-dsdb-schema_prefixmap: Print debug message when internal failure occurs
      s4-dsdb-schema_prefixmap: return WERR_DS_NO_ATTRIBUTE_OR_VALUE when ATTID is not found
      s4-test: yet another test for ATTID-ot-OID conversion
      s4-ldapcmp: Enable comparisons between LDBs too
      s4-drs-test: Relax a check that may possibly fail
      s4-ldapcmp: Extend ldapcmp to be able to compare more than one context at a time
      s4-ldapcmp: Fix usage of 'paged_search' module for remote LDB connections
      s4-dsdb_schema_info.py: Fix usage of 'paged_search' module for remote LDB connections
      s4-ldap_schema.py: Remove unused LDB connection to GC port
      s4-sec_descriptor.py: Fix usage of 'paged_search' module for remote LDB connections
      s4-delete_object.py: Fix usage of 'paged_search' module for remote LDB connections
      s4-fsmo.py: Fix usage of 'paged_search' module for remote LDB connections
      s4-possibleinferiors.py: Fix usage of 'paged_search' module for remote LDB connections
      s4-python-samba: Fix few cosmetics
      s4-samba.samdb: Fix leading indention and trailing ';'
      s4-python-samba: 'file' is a built-in
      s4-samba.samdb: Fix masking names from outer context
      s4-python-test: Implement global connect_samdb() function
      s4-test-delete_object.py: Use common implementation for connect_samdb()
      s4-test-fsmo.py: Use common implementation for connect_samdb()
      s4-python-samba: Remove trailing ';'s
      s4-python-test: Common implementation for getting environment variable value
      s4-test-delete_object.py: Use common implementation for env_get_var_value()
      s4-test-fsmo.py: Use common implementation for env_get_var_value()
      s4-test-dsdb_schema_info.py: Simplify connection SamDB
      s4-test-dsdb_schema_info.py: Get rid of global module variables
      s4-test-fsmo.py: Implement kind of busy-wait for role transfer
      s4-getopt.py: Make Anonymous creds when no credentials
      s4-ldapcmp.py: Don't guess credentials for second Credentials object
      s4-test: Use absolute path for 'samba4srcdir'
      s4-test: Fix PYTHONPATH for python.drs_ tests
      s4-libnet_vampire: Reparent result.lp_ctx - we have already referenced it
      s4-provision: Reset "debuglevel" after "provision" take place
      heimdal-com_err: fix the build for systems with older 'com_err' library
      s4-test: Fix PYTHONPATH for samba4.schemaInfo.python(dc) test
      pytalloc: Fix warning that we are subtracting void* pointers
      s4-test-msds_intid: Simplify parameters for _make_error_message() function
      s4-test-msds_intid: Verify ATTIDs for Linked Attributes
      subunithelper: Don't access 'message' attribute directly as it deprecated
      s4-dsdb: Make dsdb_setup_sorted_accessors() public
      s4-dsdb-repl: Print what the error code for failure is
      s4-vampire: Initial implementation for multi-pass schema decoding from DRS data
      s4-vampire: Optimize Schema decoding conversion
      s4-libnet_vampire: Remove unused self_corrected_schema
      lib/util/asn1.c: comment spelling
      asn1_tests.c: Make test data static const
      s4-schema_init: Print more info about syntax we fail to recognize
      pytalloc: use talloc_unlink() to free py_talloc objects
      asn1: ber_write_OID_String() to be more picky about supplied OID
      asn1_tests: Implement negative unit-tests for ber_write_OID_String()
      s4-dsdb/schema_syntax: Separate validation for numericoid OID values
      s4-dsdb_syntax: Setup "String(Case Sensitive)" syntax
      s4-test: Print correct partition DN in msDSIntId test
      s4-test: Extend DRS-msDSIntId test to verify Configuration NC replica also
      s4-prefixmap: Use WERR_NOT_FOUND when OID is not found in current prefixMap
      s4-prefixMap: split dsdb_schema_make_attid() function into read-only and
      s4-pfm_test: Tests for dsdb_schema_pfm_attid_from_oid()
      s4-pfm_test: no need to test created prefixMap contents here - it already tested
      s4-dsdb_syntax: *_OID_oid_ldb_to_drsuapi() functions should use
      s4-pfm-test: Enrich and fix comment primary for testing data
      s4-pfm_test: Use single instance of global testing data to test with
      s4-schema_init: we should be able to resolve Syntax OIDs with prefixMap we have
      s4-resolve_oids: Remove redundant check - resolve_oids_need_value() handle this
      s4-drs_tests: drs_util_DsAttributeId_to_string() is not used anymore
      idl: Use DRSUAPI_ATTID_ prefix instead of DRSUAPI_ATTRIBUTE_ for ATTID values
      s4-druspia.idl: rename DRSUAPI_ATTID_NONE to DRSUAPI_ATTID_INVALID
      s4-dsdb_schema: Use DRSUAPI_ATTID_INVALID instead of 0xFFFFFFFF magic value
      s4-devel: Verify prefixMap is saved correctly in LDB on disk
      s4-ldb_module.h: use LDB error code for ldb_error() macro rather than LDB_DEBUG_FATAL
      s4-test: Initial implementation for Schema replication black box test
      s4-attid: Uppercase ATTID type constants
      s4-pydsdb.c: Fix small memory leak in py_samdb_set_domain_sid()
      s4-pydsdb-py_dsdb_get_oid_from_attid(): Avoid potential memory leak
      s4-pydsdb-py_samdb_ntds_objectGUID(): Avoid potential memory leak
      s4-pydsdb: py_dsdb_load_partition_usn() - simplify error handling in
      s4-pydsdb: py_dsdb_am_rodc() may call samdb_rodc() only once to get the job done :)
      s4-pyldb: Handle internal errors in py_ldb_contains() properly
      s4-test: repl_schema - Make sure LdbError and ERR_NO_SUCH_OBJECT are visible
      s4-repl: dsdb_convert_object -> dsdb_origin_object_convert
      s4-repl: dsdb_extended_replicated_objects_commit -> dsdb_replicated_objects_commit
      s4-repl: dsdb_extended_replicated_objects_convert -> dsdb_replicated_objects_convert/
      s4-dsdb_syntax: Add remote prefixMap member for dsdb_syntax conversions
      s4-dsdb_syntax: Use remote prefixMap to handle generic cases in drsuapi_to_ldb conversions
      s4-prefixMap: dsdb_schema_pfm_oid_from_attid() to use const prefixMap
      s4-dsdb_syntax: Warning message that we can't find requested ATTID in Schema Cache
      s4-repl: Propagate remote prefixMap in DRSUAPI data conversion functions
      s4-tests: Make repl_schema.py test part of Samba4 test suite
      s4-schema_load: Don't clean in_transaction flag until transaction is really finished
      s4-pyldb: Fix wrong type of 'self' parameter
      s4-pyldb: Move PyLdbMessage_FromMessage() in PyMessage group of functions
      s4-pyldb: Few miss-alignments aligned
      s4-pyldb_util: Move ldb Type searching into separate function
      s4-samdb.py: Use ldb.get_default_basedn() to avoid RootDSE search
      s4-pyldb: Move code to create a ldb_message from a Python Dictionary object into a separate function
      s4-pyldb: ldb.Message.from_dict class method to create LdbMessage object from dictionary
      s4-ldb.python: add test for ldb.Message.from_dict() method
      s4-ldb.python: Use $SELFTEST_PREFIX/tmp as a temporary directory for testing
      s4-pfm_verify: fix usage string
      s4-samba.tests: Explicitly pass LoadParm() instance to system_session() function
      s4-tests: Wrap connect_samdb() into a connect_samdb_ex() helper
      s4-test/repl_schema: Remote global ldb connections
      s4-pfm_verify: Explicitly pass LoadParm() instance to system_session() function
      s4-tests: Make all DRS python tests to start with samba4.drs.* prefix
      s4-test/repl_schema: Refactor the test a little bit to
      s4-tests/bind.py: Use samba.tests.connect_samdb() instead of directly using SamDB class
      s4-ranged_result.c: Fix memory context for ranged attributes handling
      s4-repl: Let dsdb_replicated_objects_convert() to accept schema from caller
      s4-dsdb/prefixMap: Add prefixMap shallow copy function
      s4-dsdb/schema: Add Schema shallow copy function
      s4-dsdb/schema: Implement multi-pass working schema creation function
      s4-dreplsrv: Use working_schema when replicating from Schema NC
      s4-dsdb/syntax: Implement Remote-ATTID to Local-ATTID mapping function
      s4-dsdb/syntax: Map remote ATTIDs for Attribute OID syntax
      s4-test/schema: Extend the test to replicate a Class with Attribute with "mayContain" relation
      s4-dsdb/descriptor: comment typo
      s4-test/repl_schema: Test classSchema and attributeSchema replication in separate tests
      s4-test/repl_schema: Make ERR_NO_SUCH_OBJECT visible to us
      s4-test/delete_object: Remove unused imports
      s4-test/fsmo: Remove unused imports
      s4-dsdb_syntax: Be a little bit more chatty when we can't an ATTID in our cache
      s4-test/repl_schema: Test class inheritance through subClassOf
      s4-dsdb/syntax: Map remote ATTIDs for Class OID syntax
      s4-schema_load: Strip a pointless check
      s4-repl_meta_data: Remove duplicated check
      s4-linked_attributes: Give more info where an error occured
      s4-repl_meta_data: Print function name when we can't find attribute in Schema cache
      s4-dsdb_schema: Seize using global_schema when referencing new schema for an LDB
      s4-test/repl_schema: New test to test a classSchema with custom attribute
      s4-test/repl_schema: use 'top' as default base class for our test classSchema objects
      s4-schema_syntax: Use remote prefixMap to map remote ATTID to local one
      s4-repl: Allow dsdb_replicated_objects_commit() to use different schema while committing objects
      s4-drepl: User working schema for commiting objects when replicating Schema NC
      s4-schema_syntax: We should use make_ATTID function when converting remote-ATTID to local one
      s4-dsdb_schema: We need base_dn in Schema's shallow copy too
      s4-drepl: We won't need a working schema for empty replicas sent.
      s4-schema_syntax: Log error message when _dsdb_syntax_OID_oid_drsuapi_to_ldb() fails
      s4-dsdb_schema: Handle remote ATTIDs based on msDs-IntId value
      s4-test/repl_schema: Make sure every object is with unique name
      s4-test/repl_schema: remove unused and commented out code
      s4-dsdb/tests/python: Explicitly pass comamnd line LoadParm() instance to system_session()
      s4-drepl: Fix log message to be shown on its own line
      s4-drepl: Reference current Schema cache into working_schema context
      s4-drepl: Make refreshed schema a global one
      s4-devel/pfm_verify: Extend the tool to verify schemaInfo attribute value
      s4-dsdb_schema: Copy info needed for Schema refresh in dsdb_schema_copy_shallow
      s4-drepl: During Schema replication, we need to save updated prefixMap if everything is OK
      s4-pydsdb: Use local memory context in py_dsdb_get_oid_from_attid()
      s4-devel/pfm_verify: Move schemaInfo getter into separate function
      s4-ldb_ldif: Don't check for LDB_FLG_SHOW_BINARY in ldb_should_b64_encode
      s4-ldb_ldif: Take into account LDB_FLG_SHOW_BINARY
      s4-repl_meta_data: We should not use USNs in metadata comparisons
      s4-repl_meta_data: Print out what is wrong when we fail to modify object
      s4-repl_meta_data: replmd_update_is_newer() should not return true if metadata stamps are equal
      s4-test/delete_object: Remove global ldb connections
      s4/samba-tool: Add --sync-forced flag to 'drs replicate' command
      s4/samba-tool: 'drs options' command implementation
      s4/samba-tool/drs: Move get_dsServiceName function at module level to be re-used
      s4/samba-tool/drs: Make use of Command.message() method instead of using 'print'
      s4/tests: Implement BlackboxTestCase.check_output() method
      s4/tests: Move command line processing into separate method to be reused
      s4/tests: Implement a blackbox test for 'samba-tool drs' command
      s4/ldb_modules/acl.c: Fix calculation for samAccountName string len
      s4-ldb_modules/util: Implement dsdb_module_find_ntdsguid_for_computer()
      s4-ldb_modules/acl: Get correct NTDSDSA objectGUID to check SPN for
      s4-ldb_modules/acl: Use ntds_guid for SPN check only we have a DC object
      s4-ldb_modules/operational: Make use of dsdb_module_reference_dn() function
      s4/drs-tests: Add a base class to hold common functionality for all DRS python tests
      s4/drs-tests: Inherit DrsDeleteObjectTestCase from DrsBaseTestCase
      s4/drs-tests: Inherit DrsFsmoTestCase from DrsBaseTestCase
      s4/drs-tests: Inherit DrsReplSchemaTestCase from DrsBaseTestCase
      s4/drs-tests: Split samba-tool command line generation into separate method
      s4/drs-tests: Allow _net_drs_replicate to force replication and return output from command execution
      s4/samba.tests: Extend CalledProcessError class to store STDOUT and STDERR for a failed rocess call
      s4/samba.tests: Raise BlackboxProcessError exception in case check_output method fails
      s4/drs-tests:Blackbox test to verify DsReplicaSync handling
      s4-drepl: Pass replication options from DsReplicaSync call
      s4-drepl: Refactor dreplsrv_run_pull_ops() to
      s4-drepl: Fix replica sync callback to really store last error rather than last success
      s4-drepl: Schedule event to trigger replication rather than calling run_pending_ops directly
      s4/drs-tests: Move enable/disable replication methods to DrsBase class so we can re-use them
      s4/drs-tests: Disable replication during 'deleted object' test
      s4/drs-test: remove netReplicateCmd test from 'deleted object' test case
      s4/drs-test: Remove unused imports
      s4/tests: Include 'replica_sync' test in S4 test suite
      s4/dsdb-util: Use DS_NTDSDSA_OPT_IS_GC flag definition
      s4-replicated_objects: Implement a mechanism to relax some attributes conversion
      s4-repl/working_schema: Ignore some attributes when bulding working schema cache
      s4-libnet_vampire: Ignore some attributes when building working schema cache
      selftest: Polish selftest-vars.sh a little so it can be used again
      s4/getncchanges: Fail extended request rather than failing whole request
      s4/getncchanges: Don't mask Extended operation result - callers need it
      s4/getncchanges: Move the code that collects objects into separate function
      s4/getncchanges: Implement placeholder for handling ex-op collection of objects
      s4/getncchanges: Pre-mark extended requests as success in case a sub-function "forget" to do this
      s4/getnc_exop: Initial implementation of a testsuite for GetNCChanges extended opeartion handling
      s4/drepl_fsmo: Add an CR so that message is visible in the logs
      s4/test/getnc_exop: Tune the the test to work against windows

Karolin Seeger (473):
      Add net rap file user
      Fix typo
      Add error message to net rap file and net rap file user
      Make output of net getdomainsid more meaningful. Unify spelling of SID. Display usage if superfluous arguments are given.
      Make smbclient to display error message and usage in the case of invalid options.
      Revert smbclient changes.
      Improve error messages of 'net rpc user [add|delete]' commands.
      Add missing quote. Fix bug 5172. Thanks to Jason Filley <jason at snakelegs.org> for reporting!
      Correct comment. Default debug level of smbclient is 1, not 0.
      Fix typo.
      Fix typo.
      Fix some typos.
      Fix typo.
      Fix typo.
      Change ldap search filter. This function is also used to search machine accounts which may be organized in a different ou.
      Change ldap search filter. This function is also used to search machine accounts which may be located in a different ou. This is an extension to e71a48bb80cee85afcccacbce2884c0d600f4d72.
      Change option name.
      Fix some typos.
      Add my changes to WHATSNEW.
      Ups... Sorry!
      Move my changes to the right section in WHATSNEW.
      WHATSNEW: Add new parameter 'config backend'.
      WHATSNEW: Fix some typos.
      Add missing full stops and blank lines.
      Add mount.cifs as a wrapper for mount.cifs.
      Remove smbmount.
      Update WHATSNEW.
      Merge commit 'origin/v3-2-test' into v3-2-stable
      Prepare for release 3.2.0pre2
      Fix release script.
      Update WHATSNEW.
      Update WHATSNEW.
      Update release date.
      Update release date.
      ask for the keyid in the release script.
      Start to prepare WHATSNEW for 3.2.0pre3.
      VERSION: Update pre release number.
      Fix usage message for 'net idmap dump'.
      WHATSNEW: Start to add changes since 3.2.0pre2.
      Fix typos.
      Fix typo.
      objectclass -> objectClass
      WHATSNEW: Update release date for 3.2.0pre3.
      WHATSNEW.txt: Update list of changes.
      Fix typos in idmap_rid manpage.
      Add some missing whitespaces.
      Add documentation for new net sam subcommand deletelocalgroup.
      Add comment about mount.cifs to the manpage of smbmount (fix bug #4581)
      Add comment about umount.cifs to the manpage of smbumount (fix bug #4581)
      Clarify the description of "inherit acls" in smb.conf manpage (hopefully fixing bugs #1806 and #1809)
      Add documentation for new net sam subcommand "unmapunixgroup".
      Fix typo: tipical -> typical
      Add documentation for 'winbind:rpc only' in smb.conf manpage.
      winbin:rpc only is no longer a parametric option -> update documentation
      Fix typos found by Bjoern Jacke <bj at sernet.de>
      Fix example for msdfs proxy.
      Add documentation for new winbindd -D switch added by metze with r24624 and r24625
      -Fix typo
      Add comment about max value for os level
      Remove superflous 'a'.
      Fix typo.
      Fix some typos.
      Fix typo.
      Fix more typos.
      Fix typo.
      Add manpages for ldb tools.
      Add patch from Harald Koenig <koenig at science-computing.de>
      Add comment about net rpc|rap file user (implemented now)
      Correct default value for change notify
      Add manpage section for the new parameter client ldap sasl wrapping
      Fix some typos
      Add missing blanks
      Correct parameter name
      Fix some typos
      Add missing end tag for paragraph
      Fix typo
      -Add section about net getdomain and setdomainsid
      Change idmap_ad to the new spelling to fix bug #3733.
      Rename common samba option logfile to log-basename according to
      Fix Typo reported by TAKAHASHI Motonobu <monyo at samba.gr.jp> (fix bug #4253)
      -Improve descriptions for net rpc trustdom add/del
      Fix bug #4729. The mount.cifs option 'ip' does not accept hostnames. Thanks to the Debian Samba package maintainers for reporting!
      Avoid useless use of 'cat'. Fix bug #4704. Thanks Christian Perrier <bubulle at debian.org> for reporting!
      Fix bug #4730:
      -Use '&stdarg.[server|client].debug' instead of '&stdarg.debug';
      -fix some typos
      Fix typo.
      Add list of currently implemented debug classes.
      Change default value for 'lpresume command' to an example as the default value depends on the printing system.
      Add documentation for new parameter 'debug class'.
      -Add missing whitespaces
      Fix typos.
      Fix escaped backslashes (bug #5194). Thanks to the Debian Samba package maintainers for reporting!
      Add documentation for vfs_xattr_tdb.
      Add description for vfs_xattr_tdb option 'xattr_tdb:file'.
      Fix typo.
      Fix typo
      Add missing end tags
      Remove manpages for smbmount and smbumount.
      Remove man page for smbmnt.
      Correct description of cups options. Patch from Björn Jacke <bj at sernet.de>.
      Correct usage of multiple LDAP servers as passdb backend. Patch from Björn Jacke <bj at sernet.de>
      mount.cifs: Zero mountpassword content before freeing.
      man smbcacls: Correct possible flag values.
      Developer's Guide: Fix typos.
      man pages: Correct version string.
      tests_all.sh: Do not execute $SMB4TORTURE --version if it is not available.
      man pages: Add documentation for new cluster parameters.
      sesssetup.c: Add debug message.
      man pages: Remove man page for 'mangled map'.
      man pages: Add documentation for new parameter 'ldap connection timeout'.
      Samba3-HOWTO: Add improvements/fixes.
      man pages: Remove wrong synonym.
      man pages: Fix synonyms.
      man pages: Fix typo.
      man pages: Fix broken smb.conf section about the 'get quota command'.
      man pages: Don't refer to numbered chapter of the HOWTO collection.
      man pages: Fix typo in smb.conf section about the 'deleteprinter command'.
      man pages: Fix indentation in smb.conf section about 'map readonly'.
      net: Fix several typos in comments.
      winbind cache: Don't create SN cache entries during name-to-sid queries.
      Fix typo.
      idmap: Fix typos in comments.
      Remove references to SVN.
      man pages: Move 'smbsh' man page to the examples directory.
      man pages: Correct version in man winbindd again.
      Samba3 HOWTO: Remove trailing whitespaces.
      rpc_client: Avoid warning in builds without krb5 headers.
      net ads: Fix typos.
      Revert "build: add symbol versioning when we build with gnu ld"
      Fix warnings on SuSE 9.0.
      Revert "winbind cache: Don't create SN cache entries during name-to-sid queries."
      man pages: Add missing whitespace.
      Fix typo.
      smbldap: Fix typo in debug message.
      Use LDAP macros instead of attribute names.
      Fix typos.
      man pages: "printcap name" is a global parameter, not a share specific one.
      rpc_parse: Unify spoolss debug messages.
      talloc_string_sub2: Don't return NULL if src is empty.
      man pages: Fix typos in man smbclient.
      pdb_interface: Fix typo in debug message.
      Samba3 HowTo: Fix duplicate chapter id.
      README.Coding: A few minor fixes.
      man pages: Add documentation about smbclient command "rename".
      man pages: Improve description of boolean values in smb.conf.5.
      WHATSNEW: Start WHATSNEW for 3.3.0pre1.
      VERSION: Raise version number.
      WHATSNEW: Start WHATSNEW for 3.4.0pre1.
      smbspool: Fix printing on port 139.
      loadparm: idmap backend is not depracated any longer.
      manpages: Add manpage for "init logon delay".
      manpages: Add manpage for "init logon delayed hosts".
      net: Add missing colon to unify usage messages.
      manpages: Add documentation for new 'net rpc vampire' subcommands.
      ldb: Fix permissions of new ldg files.
      man pages: Several fixes for man wbinfo.
      Fix typo.
      man cifs.upcall: Fix typo, wrap lines.
      create-tarball: Remove trailing/leading whitespaces.
      create-tarball: Don't remove /*.
      create-tarball: Adapt script to changed directory structure.
      printing: Add new parameter "cups timeout".
      printing: Rename new parameter "cups timeout" to "cups connection timeout".
      docs: Adapt version strings in man vfs_smb_traffic_analyzer.
      s3 create-tarball.sh: Remove dashes in git commands.
      build-docs: Use 'git clean' instead of 'git-clean'.
      manpages: Document new wbinfo idmapping options.
      docs: Add default value for "writeable" to man smb.conf.
      Samba3-HOWTO: Fix usage of 'net idmap restore'.
      docs: Add hint that "socket address" usually don't need to be set.
      docs: Fix typo in the idmap_ad manpage.
      docs: Remove comment about default backend.
      docs: "acl compatibility" is a global parameter.
      docs: Fix TOC of generated HTML docs.
      docs: Fix some formatting issues in the "ldap ssl" section of man smb.conf.
      s3/loadparm.c: Change default value for "ldap ssl".
      docs: Update section "ldap ssl" in man smb.conf.
      s3/smb.h: Remove unused LDAP_SSL_ON.
      docs: Fix typo in man idmap_hash.
      s3: loadparm: Clean-up list of parameters.
      docs: Document the -g option of smbclient.
      examples: Avoid bashism in perfcount.init.
      Revert "examples: Avoid bashism in perfcount.init."
      examples: Avoid bashism in perfcount.init.
      docs: Fix example in man vfs_recycle.
      docs: Improve description of the share commands in man smb.conf.
      docs: Improve man mount.cifs.
      s3/smbpasswd: Check if Unix account exists before asking for the password.
      s3/net: Display error message if user does not exist.
      S3-HowTo: Change 'winbindd -B' to 'winbindd -D'.
      S3-ByExample: Use 'winbindd -D' instead of 'winbindd -B'.
      build-docs: Add 'make clean'.
      build-docs: Change to the right directory before calling 'make clean'.
      build_docs: Use 'make distclean' instead of 'make clean'.
      s3/vfs_extd_audit: Don't ignore "syslog = 0".
      docs: Fix formatting issue in man libsmbclient.
      docs: Add manpage for vfs_shadow_copy2.
      docs: Describe "service" in man mount.cifs.
      s3/libads: Change "ldap ssl:ads" parameter to "ldap ssl ads".
      docs: Add description of "ldap ssl ads" to man smb.conf.
      docs: Clarify "ldap ssl" description in man smb.conf.
      s4/wrepl_server: Fix typo in comment.
      docs: Add man sharesec.
      s3/docs: Fix several typos.
      s3/docs: Add man vfs_acl_xattr.
      s3/docs: Add man vfs_acl_tdb.
      s3/docs: Add hint about getfattr in man vfs_acl_xattr.
      s3/docs: Fix typo in man mount.cifs.
      s3/docs: Add missing full stop.
      s3/packaging: Package new files properly.
      s3/packaging: Fix typo in comment.
      s3/docs: Fix typo.
      s3/smbconf_reg: Fix typo.
      s3/gpo_ldap: Fix typo.
      s3/loadparm: Fiy typos.
      s3/popt.h: Fix typo.
      s3/docs: Raise version number up to 3.5.
      s3/packaging: Add idmap_hash and idmap_adex to the list of built modules.
      s3/docs: Remove documentation of "use kerberos keytab".
      s3/docs: Fix serveral typos.
      s3/docs: Fix typo.
      s3/docs: Fix typos.
      s3/docs: Fix typo.
      s3/packaging: Add keyutils-devel to build requires.
      s3/docs: Remove unnecessary .sp.
      s3/packaging: Fix build on RHEL when ccache is not available.
      s3/docs: Fix shutdown script example.
      s3/docs: Fix typos.
      s3/docs: Fix typo in man idmap_rid.
      s3/docs: Fix build.
      Revert "s3/docs: Fix build."
      s3/docs: Correct version number.
      s3/docs: Fix typo.
      s3/docs: Fix typo.
      s3/passdb: Fix debug message: 'net setmaxrid' does not exist.
      s3/docs: Fix example.
      s3/docs: Fix typos.
      s3/libsmb: Fix debug message.
      s3/libsmb: Fix typo in error message.
      s3/i18n: Update German SWAT translations.
      s3/i18n: Add Russian translation for SWAT messages.
      s3/i18n: Add Russian to the list.
      s3/packaging: source -> source3
      s3/packaging: pam_winbind has been moved to section 8.
      s3/docs: Add documentation for 'net sam rights'.
      s3/docs: Fix typo.
      release-scripts: Remove RFCs in source4/.
      s3/docs: Fix typos.
      s3/smbldap: Fix typo in debug message.
      s3-docs: Update build howto.
      s3/docs: Raise version number.
      s3/VERSION: Raise version up to 3.5.0.
      s3/VERSION: Raise version number up to 3.6.0.
      asn1_tests: Fix typo in comment.
      s3/proto.h: Add lp_ldap_ref_follow prototype.
      s3/docs: Add missing meta data to man ldbrename.
      s3:packaging: Fix building RHEL packages.
      Fix typo.
      s4:test: Fix typo.
      s3:docs: fake dir create times is a global parameter.
      s3:docs: Public is not a synonym for access based shareenum.
      s3: Rename new parameter "ldap ref follow" to "ldap follow referral".
      s3/docs: Document new pdbedit -K option.
      s3/docs: Remove reference to nonexistent file.
      s3/docs: Fix typo.
      s3/docs: Document "enable spoolss".
      s3/docs: Add "max protocol = smb2" to man smb.conf.
      create-tarball: Make it more comfortable to use the --copy-docs option.
      s3:docs: Document "cache directory" and "state directory".
      s3:docs: Document "enable core files".
      s3:docs: Document "ldap page size".
      s3:docs: Document "aio write behind".
      s3:docs: Fix typo in man mount.cifs.
      examples: Fix the build of the example VFS modules.
      s3:auth: Fix typo in debug message.
      s3:docs: Document "directory name cache size".
      WHATSNEW4: Samba 3.0 is not up-to-date.
      s3:packaging: Fix typo in comment.
      s3:packaging: Fix source dir.
      s3:packaging: Fix version detection.
      s3:loadparm:  Change the "ldap deref" value "defualt" to "auto".
      s3:docs: Fix 'make manpages3'.
      s3-docs: Fix typos.
      s3/registry: Fix typo in comment.
      s3/docs: Fix typo.
      lib/popt: Fix typo in README.
      s3/winbind_ccache: Fix typo in debug message.
      s3-docs: Add missing para end tag.
      s3-docs: Fix make manpages3.
      s4-heimdal: Fix typos in comment.
      s3-docs: Remove trailing whitespaces and fix a typo.
      Fix typo in comments.
      Revert "s3:configure: add --enable-as-needed"
      Revert "Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to respond to a read or write."
      s3-passdb: Fix typo in debug message.
      s3-builtin: Add some builtin groups.
      security.idl: Add missing builtin groups.
      s3: Re-run make samba3-idl.
      s3-builtin: Add missing builtin groups.
      s3-testparm: Throw warning when 'workgroup' and 'netbios name' are identical.
      s3-util_sock: Rise debug level for getpeername failed messages.
      s4-krb5: Fix typos in comment.
      s3-docs: Fix typo in man idmap_ad.
      examples: Fix typo in comment.
      s3-winbindd: Fix typo in comment.
      s4-heimdal: Fix typo in comment.
      s3-docs: Improve "winbind nss info" section in man smb.conf.
      s3-docs: Move -D option to the right paragraph in man winbindd.
      s3-docs: Add documentation of the net g_lock subcommand.
      s3-docs: Unify capitalization.
      s4-cracknames: Fix typo in debug message.
      s4-heimdal: Fix typo in comment.
      selftest: Fix typo in comment.
      s4-configure: Fix typo in comment.
      s3-passdb: Fix typo in comment.
      s3-smbd: Fix typo in comment.
      s3-docs: Add missing whitespace.
      WHATSNEW: Start 3.6.0pre1 release notes.
      s3-docs: Remove older documentation of smb2 parameters.
      WHATSNEW: Update changes.
      WHATSNEW: Update changes.
      WHATSNEW: Update changes.
      WHATSNEW: Add information on changed security defaults.
      WHATSNEW: Update changed parameters.
      WHATSNEW: Update changed parameters.
      s3/docs: Remove superfluous bracket.
      s3-swat: Fix typo.
      s3-docs: Fix typos.
      s3-docs: Fix bug #7908.
      s3-docs: Fix typo.
      s3/packaging: Fix rpm build issues on RHEL.
      s3/packaging: Fix rpm build issues on RHEL4.
      s3-docs: overrided -> overridden
      s3-docs: Fix several typos.
      s3-net: Fix typo in comment.
      s3-po: Fix typo in comment.
      s3-docs: Fix bug #7930.
      s3-loadparm: Add synonym "private directory".
      s4-docs: Remove empty s4 HOWTO Collection.
      docs: Rename manpages-3 -> manpages.
      docs: Rename htmlman3 -> htmlman.
      docs: Bump version up to 4.0.
      docs: Fix typo.
      WHATSNEW: Fix some issues in the release notes.
      RHEL packaging: Try to fix makerpms.sh on RHEL.
      WHATSNEW: Start release notes for Samba 4.0.0rc2.
      WHATSNEW: Add changed parameters.
      librelease.sh: Move the GPG data to the library section.
      docs: Remove duplicate synonym min protocol.
      html docs: Remove link to Using Samba.
      samba-tool: Fix typo in usage.
      samba-tool: Clarify usage of --help.
      docs: Add man 8 samba-tool.
      samba-tool: Unify usage messages.
      samba-tool: Some more unifications...
      docs: Add '-V' to the list of options.
      docs: Add very basic samba manpage.
      smb2_server: Fix typo in comment.
      samba-tool: Fix typo in --help output.
      popt_common: Fix typos.
      docs: Fix version in man smb.conf.
      docs: Add some binaries to the "SEE ALSO" section
      docs: Rename man ntlm_auth.
      docs: man ldb.3: Add missing meta data.
      docs: man ldbadd: Add missing meta data.
      docs: man ldbdel: Add missing meta data.
      docs: man ldbedit: Add missing meta data.
      docs: man ldbmodify: Add missing meta data.
      docs: man ldbrename: Add missing meta data.
      docs: man ldbsearch: Add missing meta data.
      docs: man talloc: Add missing meta data.
      docs: man tdbtool: Add missing meta data.
      docs: man ndrdump: Add missing meta data.
      docs: man regdiff: Add missing meta data.
      docs: man regpatch: Add missing meta data.
      docs: man regshell: Add missing meta data.
      docs: man regtree: Add missing meta data.
      docs: man 8 samba: Add missing meta data.
      docs: man gentest: Add missing meta data.
      docs: man locktest: Add missing meta data.
      docs: man masktest: Add missing meta data.
      docs: man smbtorture: Add missing meta data.
      docs: man ntlm_auth4: Add missing meta data.
      docs: man oLschema2ldif: Add missing meta data.
      docs: Fix typo in the howto collection.
      lib/tdb: Rename manpages/ to man/.
      lib/talloc: Move manpage to man/.
      docs: Update man 7 samba.
      docs: Add samba.8 and samba-tool manpage to waf build.
      docs: Merge both samba.8 manpages.
      docs: ldb.3.xml: Correct meta data.
      docs: ldbadd.1.xml: Correct meta data.
      docs: ldbdel.1.xml: Correct meta data.
      docs: ldbedit.1.xml: Correct meta data.
      docs: ldbmodify.1.xml: Correct meta data.
      docs: ldbrename.1.xml: Correct meta data.
      docs: ldbsearch.1.xml: Correct meta data.
      docs: Fix typo.
      fault.c: Fix typo in comment.
      vfs_gpfs: Fix typos in comments.
      brlock.c: Fix typo in comment.
      srv_netlog_nt.c: Fix typo in comment.
      brlock_tdb.c: Fix typo in comment.
      wb_samba3_cmd.c: Fix typo in comment.
      srv_epmapper.c: Fix typo.
      docs-xml: Fix typo in vfs_smb_traffic_analyzer.8.xml.
      lib/subunit/README: Fix typo.
      lib/testtools/testtools/tests/test_testresult.py: Fix typos.
      pidl/TODO: Fix typo.
      Wireshark/Conformance.pm: Fix typo.
      netcmd/group.py: Fix typo.
      samba_tool/base.py: Fix typo.
      source3/libsmb/ntlmssp.c: Fix typo.
      source3/modules/vfs_catia.c: Fix typo in comment.
      source3/utils/ntlm_auth.c: Fix typo in debug message.
      source4/TODO: Fix typo.
      source4/auth/kerberos/kerberos-notes.txt: Fix typo.
      source4/dsdb/samdb/ldb_modules/local_password.c: Fix typo in comment.
      source4/dsdb/schema/schema_convert_to_ol.c: Fix typo in comment.
      source4/winbind/wb_samba3_cmd.c: Fix typo in comment.
      docs-xml/.gitignore: manpages-3 has been moved to manpages.
      build-htmlman-git: manpages-3 has been moved to manpages.
      build-htmlman-nogit: manpages-3 has been moved to manpages.
      build-htmlman-git: Run build-htmlman-git with bash.
      build-htmlman-nogit: Run build-htmlman-nogit with bash.
      docs: Fix typos in "use ntdb" section.
      WHATSNEW: Start release notes for Samba 4.1.0rc1.
      VERSION: Set version to 4.1.0rc1-GITSNAPSHOT.
      VERSION: Set version to 4.1.0rc1-GITSNAPSHOT.
      WHATSNEW: Start release notes for Samba 4.1.0rc1.
      WHATSNEW: Some updates.
      VERSION: Disable git snapshots for the 4.1.0rc1 release.
      VERSION: Bump version number up to 4.1.0rc2...
      WHATSNEW: Add release notes for Samba 4.1.0rc2.
      VERSION: Disable git snapshots for the 4.1.0rc2 release.
      VERSION: Bump version number up to 4.1.0rc3...
      docs: Add man page for vfs_linux_xfs_sgid.
      docs: Add basic man page for vfs_syncops.
      docs: Add man vfs_syncops.8 to waf build.
      docs: Fix variable list in man vfs_crossrename.
      ntdb.3.xml: Bump version up to 4.1.
      ntdbbackup.8.xml: Bump version up to 4.1.
      ntdbdump.8.xml: Bump version up to 4.1.
      ntdbrestore.8.xml: Bump version up to 4.1.
      ntdbtool.8.xml: Bump version up to 4.1.
      docs: Add man samba-regedit.8.
      WHATSNEW: Add release notes for Samba 4.1.0rc3.
      WHATSNEW: Update changes since 4.1.0rc2.
      VERSION: Disable git snapshots for the 4.1.0rc3 release.
      WHATSNEW: Update changes since 4.1.0rc2.
      VERSION: Disable git snapshots for the 4.1.0rc3 release.
      VERSION: Bump version number up to 4.1.0...
      WHATSNEW: Start to add changes since 4.1.0rc3.
      docs: Fix typos.
      VERSION: Set version to 4.1.0rc4.
      WHATSNEW: Add changes since 4.1.0rc3.
      WHATSNEW: Update changes since rc3.
      VERSION: Disable git snapshots for the 4.1.0rc4 release.
      VERSION: Bump version up to 4.1.0rc5...
      VERSION: Disable git snapshots for the 4.1.0rc4 release.
      WHATSNEW: Add release notes for Samba 4.1.0.
      VERSION: Bump version number up to 4.1.0...
      VERSION: Bump version number up to 4.1.1...
      WHATSNEW: Add release notes for Samba 4.1.1.
      VERSION: Disable git snapshots for the 4.1.1 release.
      Merge tag 'samba-4.1.1' into v4-1-test
      VERSION: Bump version number up to 4.1.2...
      WHATSNEW: Add release notes for Samba 4.1.2.
      VERSION: Disable git snapshots for the 4.1.2 release.
      VERSION: Bump version number up to 4.1.3...
      WHATSNEW: Add release notes for Samba 4.1.3.
      VERSION: Disable git snapshots for the 4.1.3 release.

Kelly Yeoh (1):
      ldbedit: prevent a transaction warning on failure

Ken Harris (1):
      CREATE in a compound CREATE/NOTIFY sequence was being passed through set_operation_credits()

Kirill Smelkov (15):
      tdb: kill last bits from swig
      tdb: fix typo in python's Tdb.get() docstring
      tdb: reset tdb->fd to -1 in tdb_close()
      tdb: add tests for double .close() in pytdb
      tdb: update README a bit
      pytdb: Add support for tdb_add_flags() & tdb_remove_flags()
      pytdb: Fix repr segfault for internal db
      pytdb: Update open flags to match those for tdb_open() in tdb.h
      pytdb: Add support for tdb_enable_seqnum, tdb_get_seqnum and tdb_increment_seqnum_nonblock
      pytdb: Add support for tdb_transaction_prepare_commit()
      pytdb: Add support for tdb_freelist_size()
      pytdb: Add TDB_INCOMPATIBLE_HASH open flag
      pytdb: Add support for tdb_repack()
      pytdb: Check errors after PyObject_New() calls
      tdb2: Fix typo in TDB1_porting.txt

Korobkin (1):
      Raise the level of a debug.

Kouhei Sutou (2):
      Rename ASN1_BITFIELD to ASN1_BIT_STRING.
      spnego: Support ASN.1 BIT STRING and use it in SPNEGO.

Kumar Thangavelu (1):
      s3/getdcname:  Fix 'net' crash.

Landon Fuller (3):
      Fallback to the internal resolver on EAI_FAIL.
      Remove incomplete check for IPv6 link-local addresses.
      Handle EMSGSIZE on UNIX domain sockets.

Larry Reid (1):
      Fix for servers that don't put a path separator at the end of the service.

Lars Müller (129):
      r7511: Add three new command line switches to testparm:
      r7512: Fix net share migrate files to also migrate the ACLs of the top level
      r7609: Move top level dir handling in from of the loop.  This makes the code
      r7960: Replace unknown SMB_XSTRDUP by known SMB_STRDUP macro.
      r8151: Add support to create position independent executable (PIE) code if the
      r8431: Ensure to use dev_private and not private after Jeremy's CPP reserved
      r8435: Use OPENX_FILE_EXISTS_OPEN instead of FILE_EXISTS_OPEN.
      r8641: Fix bug #2262.  Now we accept freebsd 5 till 9 as suggested by Timur
      r8653: Fix bug #2659.
      r8657: Add -fPIC which is the case for all other Samba shared libs.
      r9038: Revert svn rev 414.  Discussed with Jerry and Metze.
      r9051: Fix from Fernando Schapachnik <fernando at mecon.gov.ar> to add logon hours
      r11224: Add feature to get our configuration from config.log into installman.sh.
      r11728: Ensure to check for the config.log in ${SRCDIR}.
      r12076: Ensure setmntent() returns with != NULL in the disk_quotas() Linux
      r12077: Add configure switch to disable libmsrpc build.  Add new Makefile target
      r12871: Merge Volkers rev 12667 from trunk as his analysis hit the nail on the
      r12936: Fix bug #3264.
      r12964: Rewind rem_backend in the case we have to workaround the idmap_ prefix.
      r12986: Use d_fprintf(stderr, ...) for any error message in net.
      r13058: Add %w macro for the winbind seperator which allows us for example
      r13197: Add -k switch to dump the data of a single key.
      r13257: Fix python build with older python versions (e.g. 2.2.1) like in United         Linux 1 (UL) aka SuSE Linux Enterprise Server (SLES) 8.
      r13296: Align trunk with branches/SAMBA_3_0.
      r13306: Do not call netbios_setup() if this file is sourced by sh or bash.
      r13416: Remove superfluous -lc while linking libnss_wins.so and pam_winbind.so.
      r13417: Add .2 to the SONAME as version suffix if we link the nss modules on
      r13524: Add -t|--password-from-stdin option to pdbedit as we had with Samba 2.2.
      r13525: This is only a cleanup to have the memset() and SAFE_FREE() only one
      r13526: Remove superfuous extra spaces at EOL.
      r13527: Adjust copyright header with information got from the 2.2 cvs tree.
      r13528: Mention the tools and commandline option names used.
      r13529: No functional, line break changes to let it fit into 80 chares screen
      r13532: Add SWAT welcome _no_ doc page default page.  This is required by
      r13597: krb5 error codes are defined as long.
      r13598: Defining KRB5KRB_ERR_RESPONSE_TOO_BIG if not defined which is the case
      r13599: krb5 error codes are defined as long.  Also for the other direction.
      r13642: Fix install* scripts to use DESTDIR.
      r13643: Enable script debug output to get some more details why some hosts
      r13644: Do not shift anything inside the for loop away.  We ineterate over $@.
      r13645: Revert debug output.
      r13656: Use the new installdirs.sh syntax for all calls.
      r13663: make uninstall DESTDIR=/somewhere no longer leaves files.  This is done
      r13688: Revert change to set DAT_FILES and SWAT_MSG_FILES in the Makefile.
      r13713: Added installcifsmount and uninstallcifsmount rules for mount.cifs and
      r13714: Set MOUNT_CIFS_VENDOR_SUFFIX if _SAMBA_BUILD_ is set to
      r13717: Use AC_MSG_WARN if we did not called --with-cifsmount on a non Linux
      r13718: There is even no need to use AC_MSG_WARN in the case the user did not
      r13750: Cleanup line wrap to less than 80 chars.
      r13751: Call proto_exists before we create the precompiles headers.
      r13819: Remove accidently with rev 13713 submitted and never used MY_FLAGS
      r13946: Link pam_smbpass with the required object files.  Fix bug #3565.
      r13947: Use tabs instead of spaces for indention.
      r13997: Prefix $prefix by default even to rootsbindir as we else run in trouble
      r14052: Remove BASEDIR use in the Makefile.  BASEDIR=prefix=@prefix@ till now.
      r14056: Also install the mount.smbfs sym link to rootsbindir.  Therfore we have
      r14057: Remove generated script/gen-8bit-gap.sh while calling rule realclean.
      r14317: Use source/bin as dir to link pam_winbind instead of source/nsswitch/
      r14325: Add pam_modules rule which builds the configure(d) pam modules.  This is
      r14326: First catch of make test_pam_modules.
      r14331: Add a comment on top of test_pam_modules about what we're testing.
      r14584: Really follow with roosbindir by defaulr the setting we use for sbindir.
      r14617: Fix typo in comment.
      r14626: Only set libdir and mandir to the defaults if we haven't used --libdir
      r14627: Adapt the linkage text from pam_smbpass to pam_winbind.
      r14631: Add {,un}installpammodules rule and add it to the install rule.
      r14659: Fix installpammodules for shells where a
      r14869: Allow to dump a paramatrical option.
      r14922: Use BOOL for the returned value.
      r14923: Return False in the case a parametrical option is not configured in
      r15093: Align to the last winbind changes.
      r15094: Replace ; by # where we have a comment and remove superfluous spaces at
      r15180: Use tdb_lock_bystring_with_timeout().
      r15822: Add suggestion made by Ralf Haferkamp.
      r16294: Fix syntax error.
      r19747: Ensure to link with the required objects.
      r19748: Ensure to link against the required libraries.
      r20663: Do not install smbmount man page if we didn't called configure
      r20664: Set the environment variable _before_ calling the shell.
      r20666: Also do not install the smbmnt man page if SMBMOUNT_PROGS is not set.
      r20668: Also do not install the smbumount man page if we don't build smbumount.
      r21506: Allow old pre 3.0.22 multi passdb backend configurations to work with
      r21509: Merge lp_passdb_backend() from rev 21506 to 3_0_25.
      r21552: Ensure to check for proto_exists before linking any binary.  No make
      r21804: Create a reference after proto_exits was called once.  Else we link the
      r22099: Revert parts of revision 22056 as proto_exists is not required by
      r22102: Remove obsoleted SHLIBS_PROGS from {Makefile,configure}.in.
      r22103: No code change.  This is a spring time end of line clesnup checkin.
      r22318: If we're running as non root we might not be able to dump the core file
      r22320: Be more careful and check for the euid instead of the uid.
      r22805: Inform in examples/pdb about the location of the external support for
      r22839: Fix endif comment.
      r22841: Add comment to endif statement.
      r22869: Add bin/{ldap,nss,tdb}. at SHLIBEXT@ rules.
      r22870: Don't create shared objects of nss and tdb modules.
      r23154: Add INSTALLPERMS_DATA set to 0644 to install the header files with this
      r23155: Rename INSTALLPERMS to INSTALLPERMS_BIN to differenciate clearer from
      r23156: Install the smb_share_modes.h header file.
      r23166: Bring samba.org's iniparser copy in sync with the upstream version 2.17.
      r23704: Add pam_pwd_expire feature as discussed on samba-technical.
      r23705: Add suggestion for vim from Andreas 'GlaDiaC' Schneider to show tabs,
      r23707: - Move the asprintf() call to create the key even in
      r23708: - Add define for WINBIND_WARN_PWD_EXPIRE.
      r23733: Limit LDAP lookup in lookup_usergroups_member() to security groups.
      r24601: Fix if statements where we still expected cli_connect() to return BOOL.
      r25030: ip_srv_nonsite and count_nonsite are initialized in get_kdc_list() in any
      r25032: Contact an off site DC if non is available on site.
      r9038: Revert svn rev 414.  Discussed with Jerry and Metze.
      r9067: Use the right variable name in the example too.
      r9068: Move # sign.
      Document the new %w macro.
      It's spelled sep_a_rator.
      Document --parameter-name and --section-name.
      Add missing arguments.
      Document -t, --password-from-stdin feature.
      Add paragraph about how to dump a parametrical option.
      Fix type in SAM SET PWDMUSTCHANGENOW reported by Frederik Teichert of
      Add SMB_VFS_OP_RECVFILE to get it in sync with vfs.h
      Tweak with pam defines of older Linux versions
      Work around bad use of autoconf interna
      Merge branch 'master' of git://git.samba.org/samba
      Add cross option to samba_cv_linux_getgrouplist_ok
      Add dependency of bin/smbfilter to libwbclient.
      s3: Install and uninstall the static version of libwbclient
      Link testsuite/libsmbclient against required libtdb and libwbclient
      testsuite/libsmbclient use source3 in the path of the C and LFLAGS
      s3: normalize "Changing password for" msg IDs and STRs
      s3: let the pam_winbind po files reference the correct location
      s3: go straight to winbindd_dual_pam_auth() in case of !NT_STATUS_OK

Love Hörnquist Åstrand (15):
      r7638: krb5_closelog in heimdal-0.7 not longer leaks memory, so remove that comment
      r8356: avoid warning from AC_CHECK_HEADER that file is present but cannot be compiled
      r8361: ctype is* macros needs unsigned arguments
      r8362: change AC_INIT to the new version, improves failure reporting from autoconf
      r8390: (smb_pam_start): move variable to scope within #ifdef to avoid warning
      r8393: check for bswap16 and bswap32
      r8394: Make sure the argument to ctype is*(3) macros are unsigned char as
      r8444: make ./configure.mumble CC='ccache cc'
      r8647: no diffrences between the heimdal and no heimdal case when building
      r19175: If not in _SAMBA_BUILD_, define _PUBLIC_ to nothing.
      r19176: Also require <fcntl.h> and <sys/ioctl.h> for non samba builds.
      r19367: Solaris needs <sys/filio.h> for FIONREAD.
      r19409: Pull in <sys/time.h> for struct timeval for non samba build (don't
      r19367: Solaris needs <sys/filio.h> for FIONREAD.
      r19409: Pull in <sys/time.h> for struct timeval for non samba build (don't

Luca Lorenzetto (1):
      nsswitch: fix crash on null pam change pw response

Luca Olivetti (1):
      Fix bug #7263 - Unable to print using Samba 3.5.1 and cups-1.1.23-40.46 on SLES10.

Luk Claes (53):
      idmap_ad.8: use new syntax in ad backend example
      idmap_adex.8: Use new syntax in adex backend example
      idmap_hash.8: Use new syntax for hash backend
      idmap_nss.8: Use new syntax for nss backend
      idmap_rid.8: Use new syntax in rid backend example
      idmap_autorid.8: Use new syntax in autorid backend examples
      idmap_autorid.8: Avoid confusion with idmap uid and idmap gid options
      wbinfo.1: Avoid confusion with idmap uid option
      winbindd.8: Use new syntax in example
      idmap_tdb2.8: Use new syntax in example
      idmap_tdb2.8: Remove part about alloc backend
      idmap_tdb2.8: Avoid confusion with idmap uid and idmap gid options
      idmap_tdb2.8: Remove mentioning of deprecated idmap uid and idmap gid options as fallback
      idmap_ldap.8: Rework example to use new idmap syntax
      idmap_ldap.8: Remove references to idmap alloc backend
      idmap_ldap.8: Backend is not only used for searching
      idmap_ldap.8: Remove reference to idmap uid and idmap gid options as fallback
      idmap_tdb.8: Use new idmap syntax in examples
      idmap_tdb.8: Remove references to alloc backend
      idmap_tdb.8: Remove reference to idmap uid and idmap gid options as fallback
      winbindd.8: Fix typo
      winbindd.8: Use new idmap syntax for smbconfoptions
      idmap_ldap.8: Add example with readonly backend
      s3-libsmb: Generalise cli_state in smb2 read calls
      s3/libsmb: Generalise cli_state in smb2 close calls
      s3/libsmb: Generalise cli_state in smb2 create calls
      s3/libsmb: Generalise cli_state in smb2 flush calls
      s3/libsmb: Generalise cli_state in smb2 ioctl calls
      s3/libsmb: Generalise cli_state in smb2 query_directory calls
      s3/libsmb: Generalise cli_state in smb2 write calls
      s3/libsmb: Generalise cli_state in smb2 logoff calls
      s3:libsmb: remove unused (un)set_pending functions
      s3:libsmb: get rid of cli_sockopt
      s3:libsmb: get rid of cli_state_*_sockaddr
      s3:libsmb: get rid of cli_state_remote_name
      s3:libsmb: get rid of cli_state_protocol
      s3:libsmb: get rid of cli_state_capabilities
      s3:libsmb: get rid of cli_state_server_session_key
      s3:libsmb: get rid of cli_state_max_requests
      s3:libsmb: get rid of cli_state_encryption_on
      s3:libsmb: get rid of cli_state_server_challenge
      s3:libsmb: get rid of cli_state_server_gss_blob
      s3:libsmb: get rid of cli_state_security_mode
      s3:libsmb: get rid of cli_state_server_time_zone
      s3:libsmb: get rid of cli_state_disconnect
      s3:libsmb: get rid of cli_negprot
      s3:libsmb: get rid of cli_has_async_calls
      s3:libsmb: get rid of clisigning routines
      s3:libsmb: get rid of cli_ucs2
      s3:libsmb: get rid of cli_smb_req_*,cli_smb_wct_ofs,cli_smb_chain_send
      libcli/smb: introduce smb1.session for uid use
      s3:libsmb: use cli_state_{g,s}et_uid instead of smb1.uid directly
      libcli/smb: add smbXcli_tcon structure

Lukasz Zalewski (7):
      Modifications extending functionality of newuser cmd and new net group set of commands for group related operations on ldb
      Modifications extending functionality of newuser cmd and new net group set of commands for group related operations on ldb
      make test modules for net group set of commands and modification to the newuser to include additional parameters
      Fix to undo nasty hack for for grouptype conversion
      Addition of userPrincipalName attribute when new account is created
      Extension to the samba-tool group subcommand functionality to allow listing of the members of an AD group
      When listing group members allow fallback to cn attribute when samAccountName is not available

Luke Howard (1):
      do an explicit A record search for SRV entries

Luke Leighton (871):
      added word count 3 support into reply_tcon_and_X (see cifs6.txt).  the
      use of recursion_available and recursion_desired flag in netbios responses.
      added debug reporting to file listing / mod_time() checking routine.
      samba servers forcing local elections if they are not a local master.
      updated bit on kill -HUP to make it clear what effect this has, and its
      unbecome_domain_master and unbecome_logon_master were announcing
      added timestamp to "Denied connection" message.
      added code from Philip A Prindeville <philipp at enteka.com> which expands
      packet parsing routines.  for use in SMB and Mailslots
      added structures readable and writeable by smbparse.c routines into and out
      added some RW_XXXX wrapper macros with an extra i/o argument, to call XXXX
      proto.h:
      smb.h:
      processes LSA queries and responses to/from RPC data stream into structures.
      updating lsa and smb parsing routines and structures.
      Makefile:                      added lsaparse.c and smbparse.c
      lsaparse.c smb.h: added 32 bit "return status" to the response structures.
      pipes.c:
      pipes.c:
      updating lsaparse.c and smbparse.c in line with changes to pipes.c and smb.h
      loadparm.c proto.h:
      added api_lsa_lookup_sids() function
      added a dummy function (space in front so make proto doesn't pick it up)
      credentials.c:
      pipes.c:
      moved the array macros outside of the CAREFUL_ALIGNMENT define.
      added #ifdef NTDOMAIN.  added call to api_ntLsarpc instead of api_Lsarpc
      corrected paragraph giving the impression that samba can be a domain master
      Makefile:
      ipc.c :
      added lsa_reply_srv_pwset()
      added api_lsa_sam_logon() and api_sam_logoff().  that's it.  lots of
      the usual
      namelogon.c :
      added debugging macros (suitable eventually for use in tcpdump, hopefully)
      ipc.c:
      updated rpc header reply: callid wrong; alloc hint a uint32 not a uint16.
      getting somewhere.
      align_offset() adjusted pointer to wrong location.  oops.
      byteorder.h :
      checked in a file with a compile error.  oops!
      debug info added
      debugging... no idea what i'm doing.
      split pipes.c down into util, netlog and ntlsa.
      resolving some of the confusion over credentials.
      put a check around become_user().  doesn't authenticate the user, but doesn't
      lsa_io_r_req_chal() - challenge is not 4-byte aligned after the unicode
      another alignment of client challenge: this one in lsa_io_q_auth_2().
      changed *(uint32*)(clnt_cred) to SIVAL(clnt_cred, ....)
      credentials, query info reply.
      byteorder.h:
      pipentlsa.c :
      added srvsvc basic pipe, straight from paul's code.  does NETSHAREENUM
      smb.h smbparse.c pipenetlog.c :
      inside the auth 2 response bits, i wasn't storing the received client
      dealing with some stack overflow bug somewhere around the use of
      smb.h :
      set the wrong info level (0x0C00 0000 instead of 0xC000 0000) so that
      smbparse.c smb.h :
      pipenetlog.c lsaparse.c smb.h :
      make_unihdr() was setting the length to 1/2 the required value.
      put the NT_STATUS_ALLOTTED_SPACE_EXCEEDED error in instead of 0x99.
      pipes.c pipesrvsvc.c :
      added the following structures:
      Makefile :
      creating NetShareEnum parsing / reply creation.  compiles, but untested.
      debugging the srvsvc Net Share Enum.  some padding issues; some string length
      util.c password.c :
      removed home_share from user_info structure.
      updated briefly to mention NT domain support as working, but experimental.
      NTDOMAIN.txt:
      added copyright to headers.
      added description of parameters:
      added "domain groups" parameter, allowing you to specify the groups that
      loadparm.c :
      updated tel no and email address for my entry.
      loadparm.c :
      Makefile client.c clientutil.c clitar.c nmbsync.c :
      Makefile client.c :
      client.c :
      playing about, trying to SMBopenX a \PIPE\NETLOGON (should be a SMBopen)
      missed one of the files (lsarpc) in the touch and chmod instructions.
      general sorting out, from crashes generated by do_lsa_req_chal() in client.c
      missed nmbsync.c when adding setup count and setup pointer arguments to
      commas in the wrong places...
      renamed static cli_setup_pkt() to static cli_setup_packet() because it
      nterr.c :
      nmblib.c :
      default server_name if NIS server is unavailable should be the local
      updated to reflect the current state of play:
      Makefile :
      sam logon query creation functions.  written twice because i deleted it.
      got the SAM logon request generated, and received a SAM logon response back.
      added correct client-side credential generation / checking to the LSA SAM
      oops!
      latest version
      updated to describe smbclient work recently done.
      hooray.  hooray some more.  hooray a lot.  got the client-side working.
      added mention of compile-time experimentational NT Domain code.
      added LSA Open Policy query and response processing to smbclient
      documented LSA Open Policy Query.
      checks against file handle in api_fd_reply().  i don't know what error
      added LSA Query Info Policy.
      updated to indicate reported success with NT 3.51 as well as NT 4.0
      added LSA_Q_CLOSE and LSA_R_CLOSE (also to smb.h).  implemented in smbclient.
      smb.h smbparse.c pipeutil.c :
      byteorder.h :
      added frag field to make_rpc_hdr() function
      split ntclient.c down into appropriate modules.
      ipc.c :
      called dump_data() from show_msg().
      ipc.c ntclientpipe.c:
      typecast in calls to print_asc() wrong
      zero data parameter being passed to smb_io_rpc_hdr(), which couldn't cope.
      byteorder.h :
      update
      removed mechanism that created actual files NETLOGON, lsarpc and the like,
      updated documentation as chmodding files /tmp/lsarpc and /tmp/netlogon
      Makefiles for libraries.  the dependencies aren't quite right, and i
      Makefile:
      GLPL notice on the rpc_pipes/ directory
      storing pipe name state (from set named pipe handle state call) in the
      added a client-side "set named pipe handle state" function.  not known
      blanked out these files, so that if someone does make proto, they don't
      updating to latest version
      client.c clientutil.c proto.h
      added instructions advising people to set up 1.9.18alpha as a Win95 Domain
      updated version number.
      mention of GLPL for the rpc_pipe/ directory
      loadparm.c :
      documented "domain hosts allow/deny" parameters
      updated
      updated
      Christian Lademann's contribution:  new capabilities in smb.conf.
      added code that _uses_ arcfour.  arcfour itself, or anything remotely
      smb.h :
      following a cvs error, i am rewriting this monster-commit.  with bad grace.
      ipc.c :
      local time discrepancies between the date on my computer and the date on
      mod_smbpasswd() was junking the smbpasswd file...
      attempting to mark up 32 bit error codes, needed for NT domains.
      byteorder.h :
      file srv_lsa_hnd.c was initially added on branch BRANCH_NTDOM.
      cli_login.c :
      want all of data in show_msg at log levels > 50.
      created from a really useful discussion about Win95 / NT profiles.
      put server-side long dce/rpc code in main branch.
      ABOUT time.  dce/rpc long packet format now works, server-side.
      added NetShareEnum from Bartlomej Czardybon <czar at silesia.pik-net.pl>
      password.c:
      patches from jean francois: couple of minor bugs
      compiler warning for unimportant uninitialised variable
      jean-francois micouleau's well-alpha code for ldap password database stuff!
      created "passdb.c" which is an interface point to (at present) either
      moving gethexpwd into util.c, because it's used in both smbpass.c and ldap.c
      remove unused ldap functions: add stub start/get/endldappwent routines.
      added first pass at start/get/end-ldappwent functions.  unfortunately, lots
      added extra fields to struct smb_passwd
      renamed last_change_time to pass_must_change_time.  removed "if (bool==True)"
      added smb_grpid to smb_passwd struct
      added proto.h to .cvsignore
      proto.h was being a pain.  use "make proto" instead.  check release and
      removed proto.h from cvsignore
      added sam_passwd structure: don't want smb_passwd to be "polluted".
      ldap back-end database development
      add lp_domain_workstations() parameter.  this is a list of workstation names
      password back-end database support
      retired this file: it's not actually needed now that passdb.c provides
      removed lp_domain_workstation() parameter
      function comments wrong
      - removed ldap_get_trust()
      robert frank - some Next3 compilation errors detected.
      some pretty horrible formatting in standard_sub_basic(): makes the function
      two scripts from benny holmgren which a) create NIS+ table b) populate it
      adding copyright messages for Benny Holmgren
      first non-compiling, unused, mostly stub version of NIS+ password database.
      some databases have search capabilities.  acknowledging this in design
      Makefile:
      oops.  pressed ctrl-z while editing the previous cvs message: this was
      - renamed some of the passdb.c functions: they have a prefix pdb_ on them
      received update from jean francois for ldap.c: he is doing add / mod
      resolving compilation errors
      no include headers in ldap.c.
      creating and using some pdb_init_(sam/smb) routines.  putting ldap headers
      removed references to some of the smb_passwd routines from ldap and nis+
      sorting out removal of some smb_passwd functions by calling pdb_smb_to_sam()
      linker errors with -DUSE_NISPLUS_DB - difficult to spot when you're not
      ldap.c :
      removed "default" system for password database api: all functions must
      oops - got some of the default (conversion) functions wrong.
      made mod_smbfilepwd_entry() and getsmbfilepwent() static.  they need not
      dce/rpc net time command from jean-francois.  does not support timezones
      jean-francois calling the right function for the "net t.o.d" dce/rpc support
      fixed signed / unsigned warnings spotted by tim winders.  also fixed
      doesn't compile: don't care.  checking this in so people can see what's
      add_nisp21pwd_entry() finished but not tested.  module now compiles.
      - created pdb_sethexpwd(), to be called from all pwd apis that need to
      more warnings, from Tim Winders
      i wondered why nisppass.c came up with a linker error "pdb_set_last_set_time"
      added set logon, logoff, kickoff etc time functions.
      removed "domain sid = " parameter instructions
      latest messing about: probably doesn't compile; doesn't matter.
      added "domain admin group" and "domain guest group" parameters.  this is
      had what would be a compile error if it wasn't #if 0'd out in passdb_ops
      resource.h on FreeBSD 2.1 requires sys/time.h to come first.
      added loads of pointless rpcsvc/ and rpc/ include files, all because
      oops - added /usr/include/rpc includes.
      added 0x10 to the frag length in the "bind ack".
      nttrans.c:
      replaced one of the paragraphs describing nmbd problems.  could someone
      removed function names printed out in debug statements (duplicated in
      this fixes the last of the issues where USRMGR.EXE and SRVMGR.EXE were
      took out #ifdef'd code in make_samr_r_query_usergroups that copied
      qualifier name in session_enum was being assumed to exist.  if NULL, the
      not needed.
      added rpcclient program
      added wksinfo command to rpcclient, which don't work too good.
      added in samr commands.  assistance in returning the missing functions,
      rpcclient: got samr command "enumusers -g -u" working
      uchar / char typecast issues
      added in some pdb_xxx routines that are needed by nispass.c
      missed the pdb_sam_to_smb function needed by nispass.c
      lsa_lookup_sids command added.  severe debugging needed on lookup_sids
      microsoft is slowly fixing some buffer overflow errors in dce/rpc code (SP4).
      - static function "create_new_hashes" was identical to "nt_lm_owf_gen".
      Makefile.in :
      rpcclient srvsvc commands.
      using wrong cli_state in "security = domain" call.
      crc32 algorithm.  obtained from dr dobb's journal
      dce/rpc
      dce/rpc
      make proto required
      return False _and_ a break in a switch statement.
      added aclent_t autoconf test (defines as an int if it doesn't exist).
      dce/rpc
      added "permission obtained from John Erickson <jerickson at ddj.com> ...."
      dce/rpc
      anders blomdell spotted an unititialised fstring causing strlen to go
      dce/rpc
      basic client-side ntcreateX function (hard-wired values except filename)
      dce/rpc.
      signed / unsigned issues spotted by herb
      dce/rpc
      dce/rpc
      dce/rpc
      dce/rpc
      script that defines some useful developer compiler options (gcc)
      warnings spotted by ./configure.developer options
      unused variable in pipe_smb_write_X
      more warnings...
      tridge, i had to put a #ifdef _STAT_VER_LINUX_OLD round a bit of code
      16 changed to 8 by mistake in samoemhash.
      removed lkcl
      second implementation of crc32, used with permission of francesco ferrara
      bug-fixing against:
      getpwnam() failing is a serious error (corrupt smbpasswd database)
      rpcclient interactive login (with trust account changing if you are root)
      trust password
      rpcclient ntlogin test
      rpc client mods (ntlmssp flags)
      oops.
      setup_groups() - code clarification.  no functional change.
      cli_nt_session_open() encrypt arg removed
      made pass_check_smb() available for dce/rpc use.
      !pass -> pass != NULL is wrong: !pass -> pass == NULL is correct.  oops.
      strtoul replace with strtol
      strtoul removed, strtol used instead
      dce/rpc
      oops.
      - dce/rpc code
      output password change messages instead of debug message.
      oops
      calls to prs_grow() on array structures so that data construction doesn't
      some quite important bug-fixes i missed because i transferred the wrong
      dce/rpc.  bug-fix in ipc.c (introduced today :)
      signed / unsigned warnings (found by herb).
      fixing smbd encrypted rpcs (data lens, alloc hints, sequence nums argh).
      signed / unsigned issues
      oops!
      added "start index" skipping into querydispinfo.
      the next dialog: user-groups.  it's not very sensible what appears, but hey:
      domain aliases added a bit better: does local aliases if you query
      extern fstring global_myworkgroup should be a pstring
      bug fix in lsa_trans_names.
      rpctorture command
      enumeration tests (files, sessions, shares, connections).
      torture debug.
      possible bug in change oem password code: replaced E_P16 and E_md4hash
      set netlogon negotiation flags to 0x1ff, not to what the client requests.
      added domain and local group structures.  names may have to be 256 chars
      amazing.  the improvements to NT continue, evidence for which shows up
      debug string with no %s parameter.  oops
      removed comment line at end of file
      memory leak in SAM group code: need these to track it down.
      fix to some of the unicode string handling.  there are others pending
      updated this file a bit...
      split string and unicode string routines into these files.
      util_file.c:
      the start of the start of the SAM database API
      grumble, grumble off-by-one unicode string fixes, gonna stuff my other
      split socket util functions into util_sock.c.  util.c NOT committed
      util functions split into relevant modules, first pass.
      rpcclient registry commands.
      oops!
      registry modification requires a "sync" or "refresh" on the parent key.
      rpcclient registry key delete command: "regdeletekey".
      - renamed open_policy to open_hklm.
      renamed unk_1b to flush_key
      registry delete value command: "regdeleteval".
      changed syntax of registry commands so keys can start with HKLM or HKU.
      clearing up security descriptor
      security descriptor info, provided by jean-francois
      oops!
      security descriptors and registry.
      cleaning up conflicts between group code not yet committed and
      spelling corrections and such-like.
      spelling.  added line about command-line tools equivalent to nt admin tools.
      minor update.
      formatting
      jean-f. sent me some S-1-3-0,1,2,3 SIDs and names.  S-1-3 doesn't exist.
      security descriptors.
      sids in rpctorture changed from fstrings to DOM_SID
      security descriptors
      ZERO_STRUCTP does not check argument for NULL.
      use ZERO_STRUCTPN (checks for NULL) not ZERO_STRUCTP (doesn't check for NULL)
      oops - ZERO_STRUCTP() issues again...
      ZERO_STRUCTP not PN
      LOCAL_GRP and DOMAIN_GRP are return types
      need 32 bit status codes to be negotiated because of STUPID dos "error more
      - group database API.  oops and oh dear, the threat has been carried out:
      swapped username:uid:[groupridlist]:[aliasridlist] to
      make_uni_hdr() reverted accidentally with a -1 on username length
      somehow this file got missed in the groupdb commit.
      lookup_alias_name() %s not %d for sid_str
      unix instance of group database API
      remove / add / attempt to stop remove didn't work.
      someone had added code to convert rids to rids, assuming that the rids
      cvs is acting wierd.
      cvs being STUPID
      unused variable removed
      remove unused variable
      cvs being STUPID
      get rid of __wait boring warning, caused by rpc/clnt.h
      re-added includes for yp_prot.h and yp_clnt.h
      re-added ypprot.h and yp_clnt.h
      yp_prot.h and ypclnt.h correct: ypprot.h and yp_clnt.h wrong...
      uninitialised counter
      initialise not initialize...
      jean-francois pointed out problem with "lp_domain_role()" code, you
      sorting out difference between aliases and groups in the cases where
      added "domain group map" and "local group map" explanations.
      updated from yodl
      oops, forgot to rename smbfilegrp to smbunixgrp.
      clearer debug comments
      fixing domain join and domain login problems
      LsaLookupNames client call (first used as lookupnames command in rpcclient).
      fixing group database issues
      yeehaah got users to be included in S-1-5-xxx-yyy-zzz's local groups.
      we have a problem: resolution of "Primary Group RID" which we assumed
      weekend work.  user / group database API.
      "retired" two modules to preserve their cvs history.
      enabling optimisation switches on some compiler warnings
      cvs getting it wrong.  again.
      updated smb.conf - have not done a yodl2xxx.
      - adding builtin[alias]db.
      andrej spotted problem with connect_serverlist (starts off assuming
      builtin alias password API
      another attempt at a fix on connect_serverlist()...
      moving rpc/rpc.h to after netinet.h
      missed out endit()s, ta andrej.
      pwdb_initialise() in the wrong place: must load smb.conf first.  thanks phil.
      passdb.c now calls getpwnam() which returns results in a static buffer.
      attempting to fix "domain user map" up, but it's a bit complicated.
      adding some samr parsing calls (group / alias adding / deleting)
      fix to domain_namemap (domain, ntname wrong way round oops)
      hm.  removed the "if failed to map nt name to unix name, fail tcon call"
      andrej spotted that entries _not_ in domain map user were being refused.
      rpc_samr.h parse_samr.c srv_samr.c :
      fixing smbpasswd to link to smbd to obtain domain sid
      query_aliasmem code.  it works (hurrah).
      check server role before doing nt user to unix user mapping
      ok.  unix-nt mapping code issues
      adding group member code, made a start.  found that the group members'
      string_to_sid was using next_token() this is bad as it stops you from
      issues spotted by andrej: %s\\%s not %s\%s
      trailing backslashes spotted by andrej.
      removed check on name of domain having to be right, etc etc.
      ERRmoredata is an acceptable error code, it is not an error.
      added rid and sid_name_use to DOMAIN_GRP_MEMBER, for use in group member
      spotted the mistake in group_info1 parsing.
      updating smb.conf from yodl
      jeremy's going to do me in, again.
      adding group parsing: add/modify/delete/add members.
      jean-f spotted bug in test for existence of MACHINE.SID and SAM_NAME.SID.
      jean-f spotted race condition on generation of sam sid, from starting
      moved get_unixgroups it will be needed by the unix instance of the group
      create domain group command (creategroup) added to rpcclient.
      added createalias command to rpcclient
      - renamed do_samr_xxx to samr_xxx
      - oops, i got "add alias member" and "delete alias member" swapped.
      fixing "addgroupmem" and "enumgroups -m" commands, samr_open_group()
      added delete domain group and local group and delete domain group member.
      - lib/unix_sec_ctxt.c
      removed nt_pipe_fnum from struct cli_state.  need to be able to call
      first attempt at making unix setuid/setgid code that is independent of
      bugs in rpcclient.  add_aliasmem uses a DOM_SID2 not a DOM_SID.
      matthew chapman's ldap code, to date.  plus docs!
      issues spotted by herb.
      updated for Matt Chapman's ldap code
      added text and html versions of LDAP.yo.  smb.conf.5 not generated yet
      Matthew Chapman spotted that smbpasschange was assuming the existence
      added ldap files by Matthew Chapman.
      adding srvsvc pipe.
      compilation warnings due to missing (void) in ldap_close_connection.
      ldap_getpw() also needs to be (void)
      adding "Service Control Manager" commands to rpcclient.
      need to initialise global_myworkgroup
      adding some enumerate services code, client and server.
      oops, util_pwdb.c appears to be included in PASSDB_OBJ not LIB_OBJ.
      bugfix in smb_err_msg
      adding svcctl parsing code
      %U substitution should be unix user not nt user
      trying to track down issues in get_home_dir().
      added sid_name_use array argument to lsa_lookup_names and lsa_lookup_sids.
      server_cryptkey() now calling cli_connectserverlist().  stupid microsoft
      lib_sec_ctxt.o not .c
      adding start of remote lookup for domain member role.
      fix for potential lsass.exe crashing due to negative response from
      compilation errors due to addition of smb file handle parameter.
      - got client code cleartext passwords working again in cli_session_setup.
      set_port warning / unused / global/local variable overlap issues
      Service Control Manager - service enumeration.
      returned cli_session_setup to previous behaviour.  added a couple of
      error code cleanup
      rpcclient "Service Control Manager" svcenum [-i] command.
      uni_svc_name not uni_srv_name
      removed encrypt-password code pre-cli_session_setup(), session setup
      fix for enumerate domain users (bug spotted by sean matthews).
      comma after DOM_MAP_USER removed
      server type announcements modified to include the "role" of the server:
      multiple dce/rpc PDUs failed to work after ntlmssp update was added.
      cache unix groups so that two-level getgrent calls don't occur.
      corrections to get data stream for 2nd and subsequent pdus copied from
      %s not $s
      initialise my name (used in %h) prior to loading smb.conf files.
      iteration of sam passwd entries was an order n-cubed algorithm due
      reload_services needs to be called prior to init_files but after
      UNICODE byte ordering issue: typecast to uint16* replaced with SSVAL()
      pwdb_smb_to_sam was not returning NULL for nt name so that
      removal of the use of unistrn2 function: replace it with unistr2_to_str
      when multiple independent large rpc calls come in on the same pipe,
      groups and aliases being "manually" added which do not necessarily have
      Having Well-known Domain Groups ("Domain Admins/Guests/Users") returned
      use jeremy's versions of the UNICODE routines.
      uninitialised pointer being freed if lookupnames failed.  oops.
      refinement of random ipc$ SMBtrans torture test.  send requests, and
      enum dom users buffer was 0x80 not 0x8000.  must fix "enumeration" code
      the UNICODE issue...
      UNICODE issues.
      const issues with byte mod / byte read macros.
      const cast issues.  [p.s - tidy work, matt!]
      bitmap to strings
      rpcclient shutdown command
      problem been there for months: reg_r_info not aligning after string buffer.
      last unix group not being listed.  spotted by jacques sansdrap.
      samr_lookup_names "none found" error needed corrections with empty lists.
      added jeremy's new c++-like code for parsing of security descriptors.
      improving syntax / useability of rpcclient "shutdown" command:
      Benjamin Kuit's MYSQL SAM Database implementation.
      added <mysql.h> autoconf test.
      Benjamin Kuit's latest mysql mods.  issue with "make proto" needs to be
      Benjamin Kuit's mods.
      oops, put -DDEBUG_PASSWORD in wrong place.
      spelling mistake, #ifdef'd out for non-developers (oops!)
      Bejamin Kuit.  #define MYSQL and MYSQL_ROW to void iff <mysql.h> not found.
      oops, accidentally committed clear-text password reading last week.
      pass_check.c could receive encrypted password: printing it out as a %s
      - todd sabin spotted bugs in samr enum dom users / groups / aliases code:
      reverted access control flags in enum commands.
      oops, IS_BITS_CLR_ALL() macro was wrong!
      oh dear, it's this one again.  removed check for MAILSLOT\NTLOGON because
      mods to allow inter-domain trust accounts to be added to SAM database
      alignment issue in UDP SAMLOGON response.
      Greg Dickie spotted some wierd memory corruption problem with group
      Greg Dickie: spotted bug where smb_nt_passwd could be NULL.
      static password space needed.
      check for exactly _one_ key: for USRMGR.EXE.
      new "domtrust" test command.  r&d into inter-domain trust accounts.
      cli_setup_creds new arguments added.
      Stefan Walter: spotted *p_group == NULL which should be p_group == NULL.Stefan Walter: spotted *p_group == NULL which should be p_group == NULL.Stefan Walter: spotted *p_group == NULL which should be p_group == NULL.Stefan Walter: spotted *p_group == NULL which should be p_group == NULL.Stefan Walter: spotted *p_group == NULL which should be p_group == NULL.Stefan Walter: spotted *p_group == NULL which should be p_group == NULL.Stefan Walter: spotted *p_group == NULL which should be [...]
      alignment issue for UDP SAMLOGON response.
      Stefan Walters: purify spotted rverf should be alloc'd to 16 bytes not 8.
      SAMLOGON query - alignment issue is beginning to get to me.
      matt,
      double-checked the return results from new querysecret command, corrected
      Beau Kuiper: provided patch so that passwords could only be changed by
      valid_pol in lsa_query_secret() needed to be initialised to False.
      going to start adding inter-domain trust logons soon.
      return type of nt_decrypt_string2 set to BOOL.
      const char* instead of char* for input
      value->enc_secret not value->secret
      added a "createuser" command.
      dynamic memory allocation in samr enum dom users.  works with 849 entries now.
      removed 2 unnecessary args from make_uni_hdr.
      matt, you had removed a "pointer" from DOM_R_REF structure which made it
      NULL pointer handling in nt_lm_owf_gen
      SAM database "set user info".
      added SAMR_USER_INFO_24 info level to samr_set_userinfo.  this is used
      fixed issues with "Welcome to SAMBA Domain" for when admin user/pass is
      SMB_BIG_INT dir_total incompatible with %d: must use %llu (line 446)
      "User Manager" - create user + change password now work.
      added SamrQueryDomainInfo call info level 0x3 for kix32.exe support
      Dejan Ilic: spotted "NETLOGON" bug, failure of NT_STATUS WRONG_PASSWORD.
      md5 and hmac_md5
      added server ntlmv2 false/auto/true parameter, defaults to off.
      alignment needed after unicode string names in password change.
      added 2 more (unknown) NTLMSSP negotiation bits
      Jani Jaakkola's "getpwuid() / getpwnam()" hash-cache-hack
      clean-up of cache-getpw-hash code needed (make proto showed up loads
      had to move day display names into lib/util, to get rpctorture to compile.
      the times in sam_user_info_23 may not be in the right order
      variation of random SMBtrans2.  random delays in between reconnections
      #ifdef'd out hashed_getpwnam.
      debugging of NBT messages added.
      safe string error reporting functions (found a potential buffer overflow
      safe string version of nmb_namestr.
      use nmb_safe_namestr.
      improving authentication code (tidyup).
      smbclient modified to use cli_establish_connection().  smbclient therefore
      removed old code/comments.
      patch from michael stockman <pgmtekn-micke at algonet.se> to provide a static
      oops, set password lengths to a boolean value.
      smb_password_ok() checking incorrectly whether lm password exists.
      reporting failure to accept ntlmv2 (only) with down-level protocols (LANMAN1
      use of safe_cli_errstr() and cli_establish_connection().
      added jeremy's sys_getpwnam() and sys_getpwuid() routines from 2_0 tree.
      using jeremy's sys_getpwnam() call in the more critical area: Get_Pwnam().
      oops, refused lm when ntlmv2 was true not false/auto.  oops!
      added debug reporting to pwdb_sam_map_names() and pwdb_smb_map_names()
      use of dos_mkdir() in generate_sam_sid() should be unix mkdir
      issues with pwdb_sam_map_names() and pwdb_smb_map_names() returning NULL.
      allow safe_strcpy() to pass 0 for max length of string, resulting in no
      Ignacio Coupeau <icoupeau at unav.es> suggested modification to ldap search.
      fixed problem with NULL ntpasswd parameters causing crash in
      NULL pwdb_xxx_map_names() parameter can be passed here (which is a bug
      anon passwd connection: passlen=1; ntpasslen=0.
      Jean-Francois Micouleau's rewritten DFS patch, originally written by
      lengths of NT passwords when "encrypt passwords = no" can be completely
      Jean-Francois Micouleau's rewrite of Nigel William's DFS support
      dfs parsed string length was being set explicitly to value "6", overwriting
      renamed getfilepwent() and endfilepwent() to getfileent() and endfileent()
      removed strncpy()
      code from bertl to allow remap of default built-in names to anything.
      added %d %d to error message, try to track down the uid / smb_uid mismatch
      dfs issues
      more dfs stuff.  this looks like it's going to be more appropriate to use
      work-around for win95 NULL session bug: NULL password actually being
      copy of password struct needed to be made prior to calling copy_passwd_struct
      check to see if copy_passwd_struct() ever receives its own internal
      NTLMv2 check being actioned when NT password response was only 24 chars.
      use pstring for at command instead of fstring
      comments requested by jeremy as to why NT/95 NULL-password distinction hack
      BDC support.
      Tim Potter spotted compile error: matthew had added BDC support to smbd,
      commented location where lookup_sids(), a direct call to the password
      Jean-Francois spotted bug in use of file_modified() routine submitted
      renaming AUTH VERIFIER to AUTH NTLMSSP VERIFIER.  ready for adding
      close socket issues:
      attempting a connection to port 445 first, followed by a connection to 139
      bug-fix in connection to port 445.  cool!  it works!
      reverted jeremy's c++-like security descriptor modifications as the
      changing debug output message reg_io_unknown_1 to reg_io_close.
      reverted lookup change.  from ignacio.
      pnum should be a uint16.
      spelling mistake.
      added some usage info for rpcclient.
      patch from Michael Glauche to list connections from STATUS..LCK.
      adding lib/util_status.c to Makefile.in
      use read() instead of fread() as fread() fails on redhat 6.
      patch from Michael Glauche to call get_status_connections() instead of
      added back test to exclude unused connections.
      debug info display (netbios layer).
      event log update
      event log update, netsessenum, netconnenum update.
      display of session enum info
      patch from michael glauche to add session enum code into smbd.
      added experimental del_groupmem and del_aliasmem commands that were not
      improved "dominfo" rpcclient command
      added call to samr_query_groupinfo in enumgroups command (-m option)
      debugged enumgroups -g option
      matthew chapman identified 4 previously unknown samr functions.
      bertl <bs at niggard.org> patch for making samba listen on port 445, just like
      allan hourihane sent log 100 in which showed that some really old code
      oops, port 455 instead of 445
      - initialising mach_passwd_file locks to zero (prev. uninit.)
      using #define report
      restructuring
      added rpcclient SamrQueryDisplayInfo command "dispinfo"
      oops.
      wow!!!! this one's been here for two years!!!! alignment issues
      use DEBUGLEVEL not DEBUGLVL()
      #defines for port 445 to SMB_PORT2
      reading in smb server domain name from SMBnegprot response
      testing for attempts to get more info levels into samr_query_userinfo
      split matthew's sync command (only currently called from smbpasswd)
      memory problems associated with when lsalookupsids returns
      error-code checking in lsa_lookup_sids.  anonymous connections for
      permissions on SamrConnect changed to 0x02000000 (maximum allowed)
      splitting dom info into sam_query_dominfo function
      David van Geyn spotted that ulong is not defined on FREEBSD, not supposed
      - added rudimentary CAP_UNICODE support because i thought it was part of
      adding CAP_EXTENDED_SECURITY support in a hurry last week.  forgot to
      stop over-runs in reading / writing data stream.
      const issues
      removed unused static wait_keyboard()
      return results on prs_xxxxx() and all xxx_io_xxx() routines.
      renamed args due to global "class" variable
      oops!  srvinfo 2 command caught bug where strings in containers assumed
      renamed "class" local variable to avoid global clash
      adding error checking in parsing code
      added prs_struct "error" member, set and checked when prs_struct
      initialising enum dom users mem and account name ptrs to NULL.
      oops, added wait_keyboard back, but _this_ time wrapped it with
      need status codes from cli_net_req_chal() and cli_net_auth2().
      use DEBUGADD instead of DEBUG: clears up some of the more verbose trash.
      split modify_trust_account_password into a separate module.
      various.  debug levels changed.  nmbd doesn't need libsmb/clienttrust.c.
      turning some of the rpcclient functions dynamic.  this is likely to
      the dynamic memory alloc blood-fest goes on...
      one of those wonderful moments when running against a different MSRPC
      the new CAP_EXTENDED_SECURITY code needed to support NTLMv2.  also removed
      signed / unsigned and typecast issues
      - typecast malloc / Realloc issues.
      cut/paste code from smbclient for wait_keyboard() function.  oops.
      adding extra parameter back in to trust account functions (trust account name).
      created samr_query_groupmem() function from existing code.
      no CLIX, no !HAVE_READLINE blah blah.  argh.
      rewrote api_net_sam_logon() to be a little clearer.
      rewrote samr enum groups code a bit.
      removed samr_* variables from info struct.
      restructuring samr client code.
      restructuring sam enum dom groups code to do multiple calls to
      cli_nt_setup_creds() returns uint32 NT status code not a BOOL.
      using higher-order-function in enum groups as a test.  makes it really
      added HKEY_CLASSES_ROOT MSRPC open call.  reg_open_hkcr etc.  supported
      more reshuffling of enum groups code.  more higher order functions.
      using #defines for function prototypes
      rewrite rpcclient sam enum user code to use higher order functions.
      rpcclient regenum key client code rewritten to use higher order functions.
      added gnu readline command-line completion to the regenum command.
      messing with command-line completion.  it sort-of works to be able
      general, drastic improvements to rpcclient.
      NetServerTransportEnum parsing, client-side and rpcclient "srvtransports" added.
      connection info level renamed to transport info level
      added svcinfo <service name> command.
      command-line completion for new svcinfo command
      added yet another rpcclient command: svcstart <service name> [arg0] [arg1] ...
      added rpcclient svcstop <service name> command.  gnu readline
      rewrote rpcclient enumaliases command.
      added lsaenumdomains command.
      const char* issues
      yet another attempt to get lsaquerysecret working.
      dynamic mem allocation in enum dom groups and enum dom aliases
      free up memory allocated by enum dom groups / aliases
      added samalias <aliasname> rpcclient command (shows info on alias)
      three types of array-creation / array-deletion functions:
      had to move unistr2_dup(), unistr2_free() and unistr2_copy() into
      dynamic mem allocation in net_srv_transport_enum() parsing.
      created msrpc_srv_enum_tprt() function by massaging cmd_srv_enum_tprt().
      adding experimental set user password command to rpcclient, it returns
      samuserset <username> -p password.  YESSSSS :)
      rpcclient example scripts / programs.
      This is an experimental program to shutdown a  group of NTws in a
      experimental spoolss rpcclient commands
      spoolss openprinterex / closeprinter client-code.
      added rpcclient spoolenum command.  enumerates printers.
      fixed string function for reading in printer_info_N.
      added command-completion printer enum code.
      missed mem_grow_data call
      horrible code to do SMBwriteX / SMBreadX for large MSRPC reads.  ARGH!
      const feeding frenzy
      const feeding frenzy
      preparation for doing a spoolss enum jobs command.  had to rewrite
      riccardo sibilia spotted line 1884 has uint32 group_rid[0] not group_rid[1]
      debugging rpcclient spoolenum and spooljobs commands.  oh, did i forget
      split array-handling functions into separate module.
      - added DCE/RPC "fault" PDU support.
      added rpcclient "enumdomains" command.  enumerates names of domains
      added server-side samr enum domains.  fixed some parsing issues, server-side.
      Shirish Kalele <kalele at veritas.com> noticed that NT workstations are
      oops, mistake in parsing command-arguments.  repeated calls to
      added another dummy key so that NT5 can check in the registry whether
      added two new params: "trusted domains" and "trusting domains".
      attempting to get nt5 wksta to join domain.
      added regqueryval command (experimental) to get reg_io_q_info() and
      updating reg_value_info() parsing code to take BUFFER2 instead of just
      added samuserset2 rpcclient command to test ACB_XXX bit-setting on
      set "key does not exist" response to reg_query_val() (win32 status code
      responses to UDP samquery go back to SERVER<00> not DOMAIN<1c>, the
      added \PIPE\browser plus experimental brsinfo command.  you wouldn't
      - bug in nmbd registering DOMAIN_NAME<1c> to WINS server; recursion
      - surprise!  the number of UNICODE strings that didn't have alignment
      The First Necessary UNICODE String Support.
      nt5rc2 falling over because the LsaQueryInfoPolicy() response _must_
      added an rpcclient man page.  wow!
      yodl update - rpcclient
      adding some command descriptions behind the rpcclient commands.
      oops.
      yodl update
      explicit reference to tell people that rpcclient doesn't work with
      adding bits about SAM database security, and what the SAM commands are
      dynamic memory allocation i added a month ago: forgot to ZERO_STRUCT()
      doing a code reshuffle.  want to add code to establish trust relationships.
      modified domain_client_validate to take trust account name / type.  this
      attempting to establish inter-domain trust relationships.  modified
      oops, #ifdef'd cli_shutdown out, as the fun has _already_ started:
      moving create user function into msrpc_samr.c
      adding user session key into network netlogon response.
      hmmm... have to add client-side support in domain_client_validate() to
      you know what?  this sort of thing makes me laugh.  hmm, what functions
      implement server-side generation of NTLMv2 session key.  YESSS :-)
      okay :)  all cmd_() functions now take int argc, char **argv :)  that
      moved two more commands over to getopt.
      another one
      another two.
      another four next_token() removals (using getopt instead)
      the last one.  that concludes the removal of all next_token() calls
      shuffling msrpc code around so that it can be used independently of rpcclient
      adding svcctl 0x1b function
      oops!!!! wrong command!!!
      attempted a svcset command.  password is encrypted / messed up, therefore
      oops, freed argc,argv arguments twice.
      rewrote policy handle code to be generic (it's needed for client-side too)
      WARNING!  MOVED rpc_server/srv_lsa_hnd.c TO lib/util_hnd.c
      first stages of removing struct cli_state* and uint16 fnum from all
      ok.  *whew*.  this is the first completed part of the restructure.
      service control manager API completed.  svcenum -i works, but does not
      registry API moved over to new format.  reg_connect() is the top-level
      cool!  completed a samr* API that _would_ look like an msdn samr* api...
      previous commit added an abstraction function that didn't even have
      this file manages client states associated with handles.
      whoa.  _major_ restructure of rpcclient.  fixed some buuugs, created a few.
      bug-fixing registry commands and the rpcclient "rpcclient" command.
      enhanced samuser command to do same thing as enumusers command (-g -u -a)
      remove use of client_info lsa_info_pol.
      further abstraction involving client states.  main client-side code
      modified cli_connect_serverlist to take server list of format
      using "abstracted" cli_connection, got \PIPE\srvsvc commands up and running
      updated \PIPE\wkssvc commands to use new abstracted connection system.
      removed do_ prefix from srvsvc API
      this one's a handle-based one (missed in the first round).
      moved browser command brsinfo over to new abstracted connection
      moved at command over to new abstract connection system.  matthew, you
      well, i stuffed up the spooler commands.
      cool!  spooljobs works!  this surprised me very much :-)  helped to
      renamed PRINTER_HND to POLICY_HND.
      first attempt at getting \PIPE\NETLOGON working.  it's pretty horrible.
      ok.  got ntlogin command working.  argh, it maintains a connection to
      attempting to resolve the issue that multiple servers often specified in
      sam sync - one of the files that use multiple connection server list
      this is going to sound _really_ weird, ok, but i had to implement
      bug-fix
      ok.  this is where it gets interesting.  client states are now maintained
      added failed connections to the net use array, even though they'd been
      split display.c into modules.
      sys_select added one more argument (read, write selectors).
      1) when no domain used in ntlogin test command, should use default one
      improving createuser account command to be able to add workstations
      fixing joining to domain plus something weird going down with nt logins...
      damn, that took a while.  nt login password was being stored incorrectly
      make sure domain and name to generate trust account .mac file are upper case.
      cli_session_setup() now takes an extra argument (host name).  hey, what
      more cli_session_setup() calls.  what the heck are these doing???
      added net use (actually net -S srv -U user -W dom) and net del (actually
      clearing up connection-related stuff.  password credentials were messing
      improved enumdomains added -i option.
      default SID map now reads in "trusted domains" from smb.conf.
      oops, pwdb_initialise() called unnecessarily from here (failure to read
      need a domain resolving function, but get_trusted_serverlist() will do.
      added get_any_dc_name() function.
      cleaning up: removing those horrible references to server list
      domain_client_validate() no longer takes serverlist, it calls
      new get_any_dc_name() function allows lookups of trusted domains from
      promptline undefined (pline)
      cool!  a unix socket smb redirector.  code based on smbfilter and
      smb-agent improvements.  added -D (daemon) option.  smb agent is
      i always get caught out with non-gnu-readline code mods :-)
      starting "connection reuse" system in smb-agent.  added version number
      argh!  smb-agent redirection client reusage is a nightmare!
      argh!  you wouldn't believe what i had to do: use the mid (multiplex id)
      jeremy is going to hate me for this.
      trying to make redirector agent code same base.
      nmb agent memory free problems
      more similar agent code
      cool!  created higher-order function table for agent redirection.
      even more cool!  nmb-agent moved over to new vagent style, too!
      argh.  trying to get the nmb agent code to filter out "self" packets.
      argh!  how horrible!  spent ages working out why packets weren't being
      created create_pipe_socket() function.
      first version of msrpc agent redirector code.  client-side only.
      reenabled retry_time (commented out accidentally in name_status)
      the first independent msrpc daemon - lsarpcd.
      ABOUT TIME!!!!!!!!
      parsing code for transferring unix and nt security credentials over-the-wire.
      moved sys/un.h to after sys/socket.h.  done a gnu autoconf around sys/un.h
      jerry spotted that get_domain_sids() was being called with the wrong
      delineation between smb and msrpc more marked.  smbd now constructs
      final part of "first" phase converting over to msrpc daemon architecture.
      changed function name of get_home_dir() to get_unixhome_dir(), to stop
      simple mods to add msrpc pipe redirection.  default behaviour: fall back
      oops, must use read_data() not read(), as read() may only provide
      using read_with_timeout(), min data size 16 bytes (DCE/RPC header), max
      modified smbd/msrpc credential transfer system.  user session key
      SAMR_R_UNKNOWN_38 is 3 uint16 params (4-byte aligned) followed by status code.
      made cvs main up-to-date with samba_tng, with addition of process id to
      file srv_netlogond_nt.c was initially added on branch SAMBA_TNG.
      1) added void* state argument to tdb_traverse.  guess what!  there were
      richard got the short request for GETDC right (hooray!)  win9x _and_ nt
      added a tcon test: make two tconXs with the same user/pass, open a file
      computer too slow to compile with debug info (100mins), but i need all the
      indent went wrong.  grr.
      you know, when you do a cvs commit, you _really_ expect it to actually work.
      indent update to make t easier to see setuid mods in TNG.  some
      added the following message to all dce/rpc client/server code, except
      disabled code from HP that replaced get_sampwd_entries() with
      disabled the getgrent() code recently added that returns all unix groups
      rename static reload_services function to reload_nmbd_services because
      moved nmblib-specific code from util.c to nmblib.c.
      logic for domainsidsize is if size is zero, there's no sid, so don't
      ReadDirName calls vfs->readdirname calls dos_readdirname.
      torture test:
      2nd evil simultaneous read-write test.  forks.  one writer.  others
      cifs parser.
      security descs in spoolss.  needs parse_sec.c nttrans.c broken.
      fixed nttrans.c
      unistr_to_dos not unistr_to_ascii
      bug-fix from tim (insure).  dummy fn call for andrew to fill in.
      dummy trash in secdesc.
      TIMESTAMPS ARE IRRITATING AS HELL WHEN DEBUGGING!  NGGGH!!
      uninitialised variable "list"
      hack to get setprinter working, level2, null sec desc.
      SMBlockingX
      SMBtrans and SMBtrans2, some of it.
      SMBtrans response.
      prs_give_memory in wrong place, also poss. was losing mem.
      SMBnttrans.  modified io_uint8s to return address of actual data instead
      SMBntcreateX
      optional (0of or 1of) with "[+]" semantics.
      SMBulogoffX
      more SMBtrans, SMBnttrans stuff.
      debug output to /tmp.
      moved notif_y_table struct to spoolss_nt.c only used there.
      #ifdef not #if
      lp_server_role() + use in srv_reg.
      more templates.
      make proto
      messing about.
      space in front of lp_preexec() causing make proto to not detect this fn.
      make_sec_acl was passed pointer to static array ace[2], oops.
      added se_access_check.
      added a NET_USER_INFO_3 struct to user_struct.
      reverted jeremy's changes that removed NET_USER_INFO_3.  will you please
      dynamic allocation of NET_USER_INFO_3 gids.
      free NET_USER_INFO_3 gids when vuser invalidated.
      more update.
      jeremy,
      hey, jerry: turns out you _have_ converted to get_safe_nt_errmsg!!!
      restored IS_BITS_SET_xxx macros.
      getfileline() - line with length of zero -> filebuf[strlen(filebuf)-1]
      oops.  must return "" string and length zero when strlen(filebuf) == 0
      added NEGNOWAIT.  sent to secure at microsoft.com

Marc A. Dahlhaus (1):
      Fix bug #8047 - mdns registration doesn't work if "interfaces" is used in smb.conf

Marc Aurele La France (1):
      Fix bug 6707 - 3.4.1 segfault in parsing configs.

Marc VanHeyningen (5):
      Coverity fixes
      Tiny memory leak
      Negative conn cache uses gencache
      s3: zero an uninitialized array
      s3: Allow child processes to exit gracefully if we are out of fds

Marcel Ritter (2):
      Simple fix to prevent crash for non-pac principals
      Install spn_update_list to setup/ dir

Marcin Gryszkalis (1):
      s3: Show share path in swat statuspage

Martin Pool (332):
      Add check for working AF_LOCAL sockets, which are borken
      spoolss_io_devmode private data is binary and should be shown in hex,
      Fix typo.
      Cosmetic fix for libpopt-checking test.
      Add basic "make check" and "make installcheck" targets, using the
      Too much of samba depends on finding files in their installed
      Doc.
      Little note about what's happening with Satyr.
      #ifdef'd out suggestion for tim on making the winbindd protocol more
      Clean up message.
      Give sensible defaults to some variables that are set by the build
      Configuration file to run the Doxygen API documentation tool.  A few
      Leave doc comments in code listings for the web.
      Doxygen demo for Tim.
      Don't include the treeview -- for Samba it is too big and can lock up
      Ignore generated HTML and mkid output.
      Make CodingSuggestions show up in the Doxygen pages.
      Source file defining global variables for configuration paths.  This
      Ignore *.po objects, test tmpdirs, and ID files.
      Fix const warning.  Doxyfy comment.
      Store some path names in global variables initialized to configure
      Disable "installcheck" -- it's still too likely to clobber somebody's
      Quieten compiler warnings about a callback function prototype that has
      LMHOSTSFILE is now dynamically configured too.
      Oops, Tim says rl_completion_func_t doesn't exist in all versions of
      LIBDIR and LOCKDIR are dynamically configured too.
      oopsum.
      dyn_LOCKDIR should be const because it's never modified directly --
      Ignore .po files.
      Detect libreadline>=4.0, and set HAVE_NEW_LIBREADLINE.  At the moment
      Fix obvious typo.
      Move all other paths into dynconfig
      Fix typo.
      Do satyr work against a copy of the build farm scripts so as not to
      Make the smbpasswd options/usage message a little less bizarre: it now
      Also show $tree in diagnostics.
      Back out the change in 1.11 that set the poorly-named $pwd variable --
      Rename xmalloc, xmemdup, xstrdup to smb_$1 to avoid conflicts with the
      Rename $pwd to $test_root to avoid future confusion.
      I think you were passing the name of the SID, rather than the DOM_SID
      Finish 1.45 by removing redundant sid->string conversion in
      Quieten gcc const warning.
      More better now.
      Reference about SIDs from tpot.
      Writing decimal constants as "02" has been shown to cause cancer in
      Set errno in tdb_open in cases where we detect an error in opening the
      Magic file for TDB databases.
      Better error handling:
      Implement suggestion from tridge to leave the old tdb_open interface
      undo
      Fix headers.  This I know is correct.
      Fix headers.  This I know is correct.
      Put back changes to set errno, which seem to do no harm.
      (merge 1.130.4.93) Display results of checks for shared libraries.
      Explain why snprintf has to be overridden in this way.
      tdb_open_ex: Refactor to use a pointer to tdb, rather than an auto
      tdb_open_ex: Continue previous refactoring so that we consistently
      Doc.
      tdb_open_ex should always "goto fail" in case of error, rather than
      Refactor code to check whether already open into its own function.
      tdb_open_ex: More cleanups: just dynamically allocate the TDB_CONTEXT
      Allocate tdb name up front in case log functions want to use it.
      Also show LDFLAGS/LDSHFLAGS when starting compilation, because they're
      Log more error messages.
      Log more error messages.
      Allow for internal databases which may have no name.
      Doc.
      Add a panic action that tries to call gdb noninteractively to get a
      Make proto
      Add a very trivial talloc torture program, bin/talloctort.  Not built
      Start adding some debugging features to talloc based on Samba's
      Doc.
      Put PRINTF_ATTRIBUTE on talloc_init_named, talloc_asprintf,
      Doc
      Doc
      Make TALLOC_CTX and talloc_chunk private to talloc.c.
      Doc how to reply to messages.
      Use less memory, but scribble all over it, just in case there's
      Add --enable-dmalloc to link against the dmalloc malloc debugger.
      Ignore torture.tdb
      Add MSG_REQ_POOL_USAGE to get memory usage info.
      Factor out a broadcast_printer_notify() routine.
      Add an output parameter to message_send_all that says how many
      Add code to send MSG_REQ_POOL_USAGE.  (smbd doesn't respond yet.)
      Add option to pass NULL max_replies to wait_for_replies in case you
      smbcontrol in non-interactive mode was returning True for success --
      struct cli_state remembers the pipe name that it's talking to, if any,
      struct cli_state remembers the pipe name that it's talking to, if any,
      Also capture received data
      Doc.
      Add prs_dump_before to dump everything from the start of the prs
      Add instructions on using dmalloc.
      Oops, rerun autoconf after last change.
      debug output on receipt of message.
      If we receive a message that is not handled then emit a gentle warning
      Ignore dmalloc.log.
      smbd should register to receive MSG_REQ_POOL_USAGE.  Response should
      smbd now sends a reply to MSG_REQ_POOL_USAGE, though it's pretty
      Add talloc_asprintf_append, which grows an existing string buffer to
      Send back talloc allocation information when POOL_USAGE is received.
      talloc accounting now includes number of chunks and bytes allocated.
      Cleanup format.
      smbd children should also register for POOL_USAGE
      Cope nicely with pools with no name.
      Make talloctort call talloc_describe_all before exiting
      Put a name on lp_talloc pool
      Fix talloc msg registration
      Clarify doc for SAFE_FREE.
      Add harmless parentheses so that dmalloc doesn't get confused by a
      Fix macro name controlling inclusion of DMALLOC.
      Add UNUSED(paramname) macro to be used in parameter lists, to quieten
      Add UNUSED(paramname) macro to be used in parameter lists, to quieten
      Sample configuration for dmalloc.
      With --enable-dmalloc, also use dmalloc's wrappers around routines
      Better explanation message for dmalloc.
      FIXME: At the moment, if the user should happen to give the options
      Add two more memory-debug smbcontrol messages: these ones should
      browse_fn: FIXME: If the remote machine returns non-ascii characters
      Quieten warning about uninitialized variable.
      PSTRING_SANCTIFY:
      Move local variable to avoid warning when compiled without GSSAPI.
      FIXME We should turn the global list off when using Insure++,
      Add constness to filenames passed to functions.
      Add constness to parameters
      Add constness to parameters
      #ifdef variable that's not used without dmalloc
      Integrate with PSTRING_SANCTIFY.
      Split pstring definitions into their own header.
      Convert to the new pstring interface.  This diff is a pretty good
      Roll back PSTR insertion.
      Roll back PSTRING_SANCTIFY patch; just leave non-controversial type
      Make the -L option to smbclient slightly less gross:
      We have to do some initialization before the string conversion
      Add more string explanations of RAP errors that are already documented
      Doc.
      Back out 1.16.2.3:
      FIXME: Use next_token rather than strtok!
      Fix typo.
      Change the Makefile to rebuild proto.h as necessary -- note that this
      Refactor for systems like Solaris that cannot handle wildcards on the
      Take out autobuild dependency on proto.h; breaks some proprietary Makes.
      Add assertions that kill() is never accidentally passed a non-positive
      Roll back proto.h changes -- to hard to do them portably.  Leave
      Two small fixes for "make proto": wbrepld was never getting rebuilt
      Fix $MAKE
      Makes winbindd_proto handling consistent with the other header files,
      Add little meta note
      Merge tpot's patch to add targets to build Python stuff.  It's not
      Merge tpot's Python patch.  ./configure now writes to the Python
      Add --with-python=PYTHONNAME configure option, so that the libraries
      This patch has now been applied and no longer needs to exist separately
      Update documentation for newly merged modules
      Import my code to do reasonably fast tdbpack/unpack from Python
      Python's setup.py does not need to be munged by configure.in -- it is
      Build py_tdbpack as well.
      Put all Python modules into the 'samba' subpackage.  Now you need to
      Add python_install target.  Not called by default.  Delegates most
      Check in examples for tdb packer
      Give better error messages for TypeError, which will arise if e.g. you
      Import old pure Python version of tdbpack/unpack, so that we can do
      Test both new samba.tdbpack and oldtdbutil pack/unpack routines.
      Add FIXME about --with-python
      test_pack: Coercing a dictionary to a sequence as it is packed is not
      test_pack_failures: The old and new code is not exactly the same about
      pytdbpack_calc_reqd_len: Make exception be thrown correctly when a
      test_pack_failures: The old code does not complain when there are too
      test_pack_extra: The old code does not complain when there are too
      Doc
      pytdbpack_calc_reqd_len: It's no longer an error to supply more data
      test_pack_extra: Better way of testing packing with extra values.
      test_pack_extra: Add additional cases.
      Change to representing buffers ('B') as (LEN, STRING) in Python,
      pytdbpack_calc_reqd_len: Correct calculation of packed length of
      Comment out test cases where the old and new parser are different.
      Re-add some tests which do work with both implementations
      Make sure uint32 unpacking is unsigned, and generates a Python long so
      pytdbpack_pack_data: Allow 'd' and 'w' formats to take either Integer
      Add more test cases that now work.
      pytdbpack_unpack: Handle unpacking Buffers into (LEN, DATA): form list
      Update test cases.
      pytdbpack_pack_data: Oops, since B is separately encoded as buffer and
      pytdbpack_pack_data: If the first argument to a 'B' code is not an
      pytdbpack_pack_data: Allow first argument to be any kind of Number,
      Add another test case for repeated-unpack ('$')
      pytdbpack_unpack: Clean up, and correct the handling of '$'.
      Rewrite all the packing stuff so that it converts 'f' strings to CP850
      Remove non-integer Pointer values, which are no longer supported.
      Remove dead code for packing buffers which has now been reimplemented.
      Remove dead code for packing buffers which has now been reimplemented.
      Just reorder functions to put related ones together
      Rename pytdbpack_unpack -> pytdbunpack
      Rename unpack_* functions to be consistent
      If you don't specify --with-python, we assume "python" anyhow, because
      Add support for new 'F' format, which is a string in the default
      * Ignore .pyc and .pyo files produced as a side-effect of running
      CR1333: Fix memory leak when unpacking some structures.
      Correct misleading comment: winbindd_lookupname gets the SID for a
      tdb_chainlock_with_timeout: Add TODO: If we time out waiting for a
      Fix typo in comment.
      Fix bug where the existence of config.cache would cause functions like
      Run autoheader
      One more from waitpid() audit: Correctly interpret waitstatus when a
      Add FIXME about dodgy argument parser.
      Update towards automatic building on dp.samba.org:
      Doc
      Merge from HEAD to allow automatic Doxygen generation.
      waitstatus audit: Correctly handle case where smbmnt is killed by a
      Add FIXME about checking exit code for popen'd commands.
      Doc
      Start reworking rpcclient to use popt rather than next_token to parse
      Don't pstrcpy into an fstring.  (Harmless in this case since it comes
      Typo: /mized/mixed/
      Add comment explaining the -DDEVELOPER safe_strcpy overflow hack.
      Update config.guess, config.sub to the versions from the GNU autotools
      Doxygen janitor.  No other changes.
      Doxygen janitor and some doc typo fixes.
      add_initial_entry should fail if string_to_sid fails.
      Check return code from string_to_sid.
      init_dom_sid2s: Check return code from string_to_sid.  Skip tokens
      cmd_lsa_lookup_sids: Check return code from string_to_sid; skip SIDs
      Doxygen janitor.  No other changes.
      Remove obsolete comment.
      Check return code of string_to_sid.  (Merge from HEAD)
      Check return code of string_to_sid.  (Merge from HEAD)
      Remove reference to obsolete samba-bugs address.
      Remove reference to obsolete samba-bugs address.  Suggest people
      Remove tridge's old home address, and old samba-bugs adddress.  He can
      Remove old samba-bugs address, etc.  (Merge from HEAD)
      Remove old listproc address and webmaster mailing address.
      Remove old listproc address; update instructions for subscribing to
      Remove old listproc address; update instructions for subscribing to
      (Merge from APPLIANCE_HEAD)
      (Merge from APPLIANCE_HEAD)
      Doc
      Doxygen janitor
      Add comment about Samba character sets, from explanation by abartlet.
      Merge documentation from 3_0.
      Merge documentation from HEAD
      init_valid_table: Fix a memory leak that would lose the
      Merge 1.100 patch from HEAD:
      Doxygen janitor
      Doxygen merge from head
      Add simple test harness that exposes StrCaseCmp for testing.
      Add a comment about the meaning of samba's internal character set and
      Remove reference to "mainpage.dox" and CodingStandards, which have
      Remove reference to "mainpage.dox" and CodingStandards, which have
      Fix comment typo
      Doxygen janitor: check_domain_match parameter is spelled
      Doxygen janitor: rpc_resolve_dc parameter is spelled "trust_passwd"
      Doxygen janitor: fix parameter names, grammar, tag names.
      Doxygen janitor
      Doxygen janitor: add note that strequal is in fact case-insensitive.
      lp_string: Add note about dodgy StrnCpy use.
      FIXME about crash on failure case.
      Check for valgrind.h
      Include valgrind.h if present on the system.
      Clobber strings with 0xf1f1f1f1 before writing to them to check buffer
      Use "$@" to preserve shell quoting in case somebody passes an escaped
      Use "$@" to preserve shell quoting in case somebody passes an escaped
      Patch from Ronan Waide:
      Patch from Ronan Waide:
      When opening an existing DB, don't require the hash_size specified to
      When opening an existing DB, don't require the hash_size specified to
      If using --enable-developer and valgrind.h is present, define VALGRIND.
      Note about using Valgrind with tdbs.
      Remove valgrind_strlen function, hopefully no longer needed with
      Add example of string overflow which is now caught in developer mode.
      Update usage message.
      Start importing the Python testing framework that Tim and I have been
      Import ComfyChair framework from trunk.
      Import design notes by martin and tpot from ComfyChair and stf modules.
      Import Samba Testing Framework code from private CVS module.
      New import of ComfyChair, many changes
      Update for new version of ComfyChair: some methods are renamed to be
      In Valgrind 1.9.4, the headers have moved to <valgrind/valgrind.h>,
      In Valgrind 1.9.4, the headers have moved to <valgrind/valgrind.h>,
      In Valgrind 1.9.4, the headers have moved to <valgrind/valgrind.h>,
      Add bin/libbigballofmud.a non-shared library.  A bit easier to link to
      Merge from Subversion
      Add examples of ComfyChair
      Decode waitstatus values when a command fails.
      global_globber_region_function/line ought to be recorded before
      Speling fixes and a little extra documentation.
      Update comment: Valgrind 1.9.4 seems to always respect client
      The new string macros catch a bug at compile that previously only
      Remove static libbigballofmud, which just does not seem to link.
      Comment about deprecated macro overmalloc_safe_strcpy().
      Ignore .po and .po32 files.
      Ignore t_stringoverflow binary.
      Split "clobber" function and variables into its own file before it
      Add t_strcmp test/torture harness.
      Step one of optimizations for StrCaseCmp:
      Run test 10000 times to make measurement easier.
      Ignore .po and .po32 files.
      Ignore t_strcmp test case.
      Remove this .po file from the repository.  I meant to add a cvsignore
      Add the correct file :-( to ignore .po and .po32 files.
      A new STF test case!  This one checks strcasecmp correctness for
      Get rid of "make check" targets that call nonexistent code.
      Add an STF module that defines the tests to be run by "make check".
      Add additional StrCaseCmp test cases.
      If CFLAGS is set when running configure, then just use that.
      Merge from HEAD: 1.630 through 1.634:
      Test harness that exercises check_dos_char()
      t_doschar: Test harness that exercises check_dos_char()
      Merge from Subversion:
      Merge from Subversion r50.
      Merge test cases from HEAD
      StrCaseCmp_Ascii_Tests: comfychair.TestCase.runcmd has changed to
      t_doschar: Test harness that exercises check_dos_char()
      check_dos_char: Export this function so that it can be tested in
      lazy_initialize_conv: Remove redundant call to init_valid_table,
      check_dos_char: Change this to use a lazily-initialized lookup table
      Export lazy_initialize_conv so that it can be called from
      Merge from 3_0: Build a lookup table of valid DOS characters just
      Merge from 1.2.2.2:
      Integrate abartlet's t_push_ucs2 test into test framework:
      t_push_ucs2, t_strcmp: Run tests only once by default, rather than
      Set character set to default (UTF-8) before running tests.
      Ignore .po and .po32 files.
      bin/smbcontrol needs to be built to run tpot's new tests of it.
      StrCaseCmp tests: Add some tests in Katakana.  Convert strings to
      unix_strupper, unix_strlower: Remove fixed-length static buffer that
      Doc.
      Merge test cases from rsync.
      Add selected parts of the changelog to this file, to make merging into
      Remove SAFE_FREE() definition, which is not needed in this file.
      Add rules to build bin/t_snprintf, which exposes the snprintf test code.
      Build and run the lib/snprintf.c test cases from "make check".
      Merge from HEAD 1.36.
      Make a libbigballofmud.so.0 link, so that the linker can find the
      Merge from distcc:

Martin Schwenke (7):
      In net_conf_import, start a transaction when importing a single share.
      cluster_fatal() exit code should not indicate success.
      Fix -Wunused-but-set-variable compiler warnings in tevent_signal.c
      lib/ccan: Fix some typos in libccan.m4
      s3:build(autoconf): fix "no AC_LANG_SOURCE call detected" warnings
      lib/tevent: In poll_event_context, add a pointer back to the tevent_context
      lib/tevent: Add trace point callback

Masafumi Nakayama (1):
      s3-cli: fix bug 563, >8GB tar on BE machines

Mathias Dietz (2):
      Search for gpfs functions in both libgpfs_gpl.so an libgpfs.so
      Store winattrs in GPFS

Matt Kraai (21):
      s3/docs: Fix typo.
      s3:configure: define _LARGEFILE64_SOURCE on QNX
      do not redefine _INT32
      include unix.h if it's available
      libreplace: set SONAMEFLAG to "-Wl,-soname=" on QNX
      libreplace: undef AI_ADDRCONFIG on QNX 6.3.0 (fix bug #6630)
      Do not redefine strupr
      Ignore source4/dsdb/kcc/kcc_service_proto.h.
      Port the Samba 4 shm_setup to QNX.
      Port the Samba 3 shm_setup to QNX.
      Prepend "$libreplacedir/" to all objects in LIBREPLACEOBJ
      Use the method used by build_env.sh to discover the user name.
      README.Coding: Fix typos.
      Change uint_t to unsigned int in lib/replace
      Change uint_t to unsigned int in lib/crypto
      Change uint_t to unsigned int in lib/talloc
      Change uint_t to unsigned int in lib/util
      Change uint_t to unsigned int in libcli
      Change uint_t to unsigned int in pidl
      Change uint_t to unsigned int in source3
      Change uint_t to unsigned int in source4

Matthew Chapman (60):
      Finally committing my LDAP changes.
      Fixed typo in srv_samr.c where samr_add_groupmem and samr_del_groupmem were
      eclass != ERRDOS && num != ERRmoredata
      Added load_interfaces in smbpasswd to allow name resolution by broadcast and
      In security=user mode we must allow cli_connect_serverlist to connect to our
      Added init_nt_time function which initialises an NTTIME to -1.
      Fixed a domain functionality problem where NT clients would start
      Initialise NTTIME properly in make_reg_q_enum_key instead of using
      Must set password length to 24 after we encrypt a password.
      Fix for NT BSOD problem. There's no reason to have two "NT usernames" running
      UNICODE cleanup (see lib/util_unistr.c).
      Cut and paste error.
      Always null-terminate strings.
      Always null-terminate strings.
      Win9x user level security.
      Added "lookupdomain" rpcclient command. Not particularly useful currently
      Return either STATUS_BUFFER_OVERFLOW or ERRDOS/ERRmoredata depending on
      Don't forget to make proto.
      Added SVC_QUERY_DISP_NAME (corresponding to the GetServiceDisplayName API).
      Adding LSA_OPENSECRET (-> LsarOpenSecret) and LSA_QUERYSECRET
      Changed hard-coded number of users/groups in SAMR_QUERY_DOMAIN_INFO
      Added SVC_START_SERVICE rpc. An NT PDC will attempt to start the NETLOGON
      Implemented encryption algorithm used for a number of RPC buffers.
      querysecret now shows the real, fairdinkum, decrypted secret :-)
      Ensuring return status is aligned in SAMR_QUERY_DISPINFO response.
      The line:
      If a buffer pointer is NULL then its length_is() attribute should not be
      Another UNICODE issue - this time BUFFER2 was being transmitted incorrectly.
      #if defined(HAVE_MYSQL_H) || defined(WITH_MYSQLSAM)
      Same infinite loop bug as I fixed in SAMBA_2_0, but I just spent half
      ERRmoredata is informational and should not be treated as a hard error
      Fixed a typo where the RPC header mem_buffer was initialised as 0x8 bytes long
      Fixed LSA Lookup Names. There were a few too many NULL pointers in a
      Fix for endianness problem reported by Edan Idzerda <edan at mtu.edu>. A
      Mainly BDC-related changes.
      Mainly BDC-related changes.
      Mainly BDC-related changes.
      Mainly BDC-related changes.
      Incorrect length (number of unicode characters rather than buffer size)
      Fixed rpcclient's samuser command.
      Trying to improve DC location & browsing performance for the average user
      Allow "Yes" and "No" as well as "True" and "False" in the three-state
      Adding scheduler control pipe (\atsvc), client-side routines, and rpcclient
      Added new define NT_STATUS_MORE_ENTRIES = 0x105.
      New rpcclient command "at" for NT scheduler control, a slightly improved
      Adding scheduler control pipe (\atsvc), client-side routines, and rpcclient
      Adding "time" rpcclient command which displays the remote time.
      Some more BDC-related fixes, mainly to the NET_SAM_SYNC RPC with respect
      Fixing core dump bug with unix password sync, caused by a NULL
      BDC support.
      BDC support.
      BDC support.
      BDC support.
      BDC support.
      Some compilers want (void) instead of just () in function declarations.
      Fix for Win95 not being able to find PDC (for User/Server Manager, and
      Removing a stray return, probably inserted during debugging, which broke
      Fixed an annoying bug in the LDAP code. Attributes not present in the
      Fixed typo which was preventing the omission of seconds in the 'at' command.
      Fixed LsaQueryInformationPolicy level 3 to return primary domain info.

Matthew McGillis (6):
      always pass filename as const char
      Consolidate all get SEC_DESC into single procedure get_secdesc
      Consolidate all set SEC_DESC into single procedure set_secdesc
      added support for a -I flag
      added documentation for the -I flag
      Fix bug with incorrect flag values for inherited ace in some cases.

Matthias Dieter Wallnoefer (3):
      Prevent prefix=/usr being used without --with-fhs.
      Fix uninstallman.
      s4/provision: Use existing serverrole variable.

Matthias Dieter Wallnöfer (2005):
      Fix cases, add version number. (#4935)
      Fix typo in bugs.txt.
      Improve DNS and Group poicy configurations.
      Add extra bits to our 'netlogon' response in CLDAP and NBT.
      Add a torture test for the new 'netlogon' flags.
      Two useful "regshell" improvements
      Fix up the "reg_common_open_remote" call
      Fix uninstalling of binaries.
      NTLMSSP Server: Correctly fills in the DNS server name and server domain
      LDAP Server: Don't create the SASL SECBLOB output object twice
      Registry tool "regtree": Handle the default attribute in the right way
      Registry tool "regtree": Removing an error message
      Registry tool "regshell": Handle the default attribute in the right way
      Registry client: Various cleanups and charset conversions
      Registry tools "regshell" and "regtree": Small fixup's
      Registry client library: Various fixup's and corrections
      Registry client library: Fix some buffer problems
      Registry client library: Fixes the creation of new keys
      Registry tool "regdiff": Add the event context for remote connections
      Registry client library: Use "talloc_zero" to avoid uninitialized values
      Registry client: Implement the "winreg_QueryValue" call
      Registry client: Fixup the "patchfile" library
      Torture suite: Fixes the tests to not segfault again SAMBA 4 registry server
      Revert "Registry tool "regtree": Removing an error message"
      Registry client library: Remove two elementar conversion functions
      Registry client: Remove all conversion helper functions
      Torture suite: Revert some changes because they aren't necessary
      Cosmetic corrections for the DSDB module
      Cosmetic corrections for the LDB backend modules
      Cosmetic corrections for the LDB library
      Cosmetic corrections for the KERBEROS library
      Kerberos cosmetic changes: Revert a part of the patch
      Cosmetic corrections for the KERBEROS library
      Stop creating symlinks to libraries without sonames. (caused recursive
      Patch by Matthias that removes old SWAT support and fixes uninstall.
      Use UTF8 rather than the possibly different UNIX charset.
      Fix regressions in patchfile after last patch, several other minor fixes.
      Cosmetic corrections for the DSDB module
      DSDB cosmetic patches: Some enhancements
      The ldb async merge broke all MMC management utilties
      LSA Patch for User Manager
      Fix for the empty string (REG_SZ) problem
      Fix for allowing the REG_BINARY type and introducing the default attribute
      Fixes for the WINREG RPC server
      ldb_del_value: Free key data also when removing the default attribute
      reg_ldb_unpack_value: Change "CH_UTF8" in "CH_UNIX"
      ldb_get_value_by_id: Fix the return of the default value
      Registry server: More work to be compatible
      Cleanups of server files
      Registry server: Cosmetic corrections
      Registry server "reg_ldb_unpack_value": Let "data" pointer be NULL
      Revert "Registry server "reg_ldb_unpack_value": Let "data" pointer be NULL"
      Registry server "reg_ldb_unpack_value": Tests demonstrate that also "type" doesn't has to be NULL
      Registry server: Enhances commit "type" != NULL (when getting values)
      Revert "Registry server: Enhances commit "type" != NULL (when getting values)"
      Registry server: Fixes up the patch with "type" != NULL (used in "EnumValue" and "QueryValue")
      Revert "Fix for the empty string (REG_SZ) problem"
      Registry server LDB backend REG_SZ type: Fix up the empty string problem
      Registry server LDB backend REG_SZ type: Always use UTF8 encoding
      Registry RPC server: Reintroduce the "key" variable for better readability
      Registry server LDB backend REG_BINARY type: Save it directly in LDB
      Registry server LDB backend: Don't make copies of the same type
      s4-samr: Fix Bug #5946. userparameters handling in samr server.
      s4-samr: Fix Bug #5946. userparameters handling in torture test.
      Small cosmetic LDB patch regarding return values.
      Add missing includes, required for use of gensec by 3rd-party
      Fix typo
      Enable software rollout through AD
      NETLOGON pipe improvements
      Fixes for the "cldap" tests
      Correct handling of 32-bit integer attributes in SAMBA 4
      Fixed some uninitialised variables
      A fix in the ACL code used by both SAMBA 3 and 4
      Small patch for SPOOLSS pipe
      Fixes for SAMBA3RPC torture test
      Correct the headers of some SAMBA 4 setup python scripts
      Enhancement of "simple ldap map" with "systemFlags" attribute
      SAMDB: Don't check for "sAMAccountName" twice
      Correct some typos in the LDB partition module
      Adds the impersonation level in ntcreatex requests to SAMBA 3 misc torture test
      [SAMBA 4 directory] Adds the object version and "systemFlags" attribute to the display specifiers
      [SAMBA 4 directory] Adds the complete "objectclass path" to our self-created DC object
      [SAMBA 4 directory] Corrects the "systemFlags" attributes
      [SAMBA 4 directory] Changes "forceLogoff" and corrects the "subRefs"
      Cosmetic correction
      [SAMBA 4] Some cosmetic changes for the LDB modules
      Fix typo
      [SAMBA 4 directory] Refactoring and clean up of directory structure
      [SAMBA 4 / NETLOGON] Modify type of SAM contexts
      s4: Patch to implement nested group and privileges
      Adds new error codes (needed for enhancing error messages for SAMBA 4 AD LDAP server)
      s4: Enhances the LDAP server to display error messages like Windows Server
      s4: Adds a small test for the new enhanced error messages from the AD LDAP server
      s4: Correct renamed constants
      Merge branch 'master' of git://git.samba.org/samba
      s3: Remove invalid constant
      netlogon.idl: Removes the form "str[]" for string declarations
      netlogon.idl: Prework to enhance the "netr_LogonGetDomainInformation" call correctly
      s4: Enhancements in the "netr_LogonGetDomainInformations" call
      s4: Torture test for enhancements in "netr_LogonGetDomainInformations" call
      s3/s4: Add new autogenerated files from "make idl_full"
      s4: Change constant to comply with the merged build
      s4: Change my nested groups patch to don't include user's SID itself in the "groupSID"s structure
      s4:torture Remove some unwanted code in the LDAP test - hope this fixes up the test failures
      s4:torture The test logic for the target was wrong. This should correct it.
      s4:ldb Cosmetic corrections in "rdn_name" module
      s4:enableaccount script: Remove a redundant line
      s4: Simplify two lines in the "samdb.py" file (cosmetic)
      s4: Add a new script for setting password properties for a domain in a easier way
      s4:AD LDIFs - More refactoring
      torture/basic: in run_derefopen() the file could have been deleted before the last unlink
      s4:pwsettings script - Fix a small glitch
      s4:operational module - move and enhancements
      s4:samldb module - Remove duplicate line
      s4:test for "primaryGroupToken"
      ldb: Don't break the standalone LDB build (operational module removed)
      s4:operational - Remove some outdated comments
      s4: cracknames.c: Change the handling of the NT_STATUS_NO_MEMORY status results
      s4: Remove obsolete "samdb_password_quality_ok" function (it's just a one-line wrapper)
      s4: Better way to call "dom_sid_to_rid" from ldap.py
      s4: Correct the parameter logic of the "setpassword" script
      s4:ldb - Free the asynchronous result
      s4:samdb python bindings - we don't need the attributes here
      Revert "s4:samdb python bindings - we don't need the attributes here"
      s4:ldb python bindings: Handle the parameters of the connect call in the right way
      s4:pyglue Add a wrapper for loading the correct UTF8 casefolder
      s4:python tools - Centralise the lookups for the default domain (root) in the call "domain_dn" from SamDB
      s4: Major rework of the LDB/SAMDB/IDMAP python bindings
      s4: Fixed the int32 datatype support
      s4: Make the int32 problem more clear - and fix another error
      s4: int32 handling: previous fix was not fully correct
      s4:dsdb/common/util - Indentation fixes
      s4:dsdb/common/util.c - Copy parameters to prevent segfaults
      s4:ldb_errors - add spaces
      s4:pwsettings - Introduce the LDB modify flags in the right way
      s4: Fix typo
      s4:"linked attributes" modules - correct the comments
      s4:torture - Fix uninitialized variable
      s4:simple_ldap_map - Enhance it for supporting "primaryGroupID" in the right way
      s4:provision - Change the "provision_users.ldif" file to support the "samldb" changes
      s4:provision - Add a new delete function only for users and computers
      s4:samldb - Major rework
      s4:samr - Fix up the SAMR server to support the primary group of a user in the right way
      s4:sam - Implement also here the right primary group behaviour
      s4:provision - Change the module order to match Windows Server
      s4:ldap.py - Adds a test for the primary group behaviour
      s4:subtree delete module - Cosmetic adaptions
      s4:Foreign security principals - Fix them up
      s4:samldb - Fix typo
      s4:simple_ldap_map - "primaryGroupId"
      s4:LogonGetDomainInfo - add a basic check for the hostname
      s4: Let the "setpassword" script finally use the "samdb_set_password" routine
      s4:tests/iconv - Fix a warning
      s4:templates - Remove the latest relics (in "dcesrv_lsa_CreateSecret")
      s4:provision - Cosmetic: Indent the parameters better
      s4:setpassword script - Passwords set by this script are set by the administrator not the user
      Revert "s4: Let the "setpassword" script finally use the "samdb_set_password" routine"
      s4:netlogon - Put the "supported encryption types" more back in the "LogonGetDomainInfo" call
      util_strlist: Add some more "const"s
      util_strlist: Add some more "const"s - small correction
      netlogon.idl: indent correctly
      s4:ldb_map_outbound - fix memory leak
      netlogon.idl - rerun "make idl"
      s4:group policies - add the domain controller group policy
      s4:group policies - upcase directory names of default group policies
      s4:group policies - the default group policy objects are all system-critical
      util_smb: For some (unknown) reason the previous patch changed the permissions - Reset them
      libds/common/flags: various
      s4/python: flags
      s4/domain behaviour flags: Fix them up in various locations
      s4:provision - Some rework
      s4:libnet_become_dc - Fix some uninitialised variables
      s4:descriptor - cosmetic
      s4:descriptor module - Revert and const fixups
      s4:provision - Some rework (continuation)
      s4:provision - Bump down the domain and forest level to Windows 2000
      s4:pwsettings - Simplify the error handling a bit
      s4:domainlevel - Add a script which allows raising the domain/forest level
      s4:domainlevel - fix indentations
      s4:minschema/fullschema - add correct header comments
      s4:samdb.py - Unification of the interfaces
      s4:domainlevel/pwsettings - Remove unused import
      s4:various scripts under "setup" - Unification
      s4:scripts - Cleans also the rest under the "setup" directory up
      s4/provision_configuration - re-add the "sPNMappings"
      s4:provision_configuration - "sPNMappings": "http" missed on regeneration
      s4:samdb.py - further rework
      s4:provision_basedn_modify - fix the "auditPolicy" attribute
      s4:domainlevel - further improvements
      s4:provision_configuration - fix "sPNMappings"
      s4:ldb_parse - Fix the type of an array entry
      s4:domainlevel - fixed another error
      s4:server.c - add linespace (only cosmetic)
      s4:dsdb/common/util - Check for the right forest/domain function level
      blackbox:test_kinit - Remove the "-H" (hive) parameter
      s4:sec_descriptor - fix constant
      s4:samba3sam.py test - remove the primary group ID attribute here
      s4:python tools - try to fix some test problems
      Merge branch 'master' of git://git.samba.org/samba
      Revert "blackbox:test_kinit - Remove the "-H" (hive) parameter"
      s4:scripts - Reintroduce "-H" parameter
      s4:libnet_become_dc - bump down the level requested by abartlet
      s4:samdb/tools - That should fix now the last failures
      s4:provision - Fix up ProvisioningError class as suggested by Jelmer
      s3:vfs_default - correct function parameters
      s3:util_str "str_list_make_v3" - introduce also here the "const" result
      s3: Fix up various string "const" warnings
      s3:smbd/password - move list pointers into blocks
      s4:auth/gensec/schannel - fix a const warning
      s4:LDIFs - enhance the section comments
      s4:domainlevel - General rework
      s4:dsdb/common/util - remove introduced "samdb_is_capable_dc" call
      s4:provision - Lets the user choose between the supported forest/domain function levels
      s4:pwsettings - Improve error handling and introduce "choice" type
      Revert "python: create a script for reorgnizing an LDB file."
      Revert "s4:wmic - Output enhancements"
      s4:pyldb - Fixed the return value in "py_ldb_msg_diff"
      s4:samba.tests.samdb - remove last relicts of the templates
      s4:ldb_msg_diff - Fixes up possible memory leaks and the python binding of it
      s4:pyldb - Wrong error type (found only after the push)
      s4:libnet_become_dc - add checks for valid domain/forest function levels
      s4:provision - Change the default forest/domain function level back to Windows 2003 Native
      s4:dsdb/common/sidmap - Remove
      s4:provision - Cosmetic - right indentations
      s4:ldb.h - cosmetic - add whitespace
      s4:provision_users.ldif - Put potential primary groups in front of the file
      s4/srvsvc: deactivate a "ntvfs_connect" with a wrong parameter
      s4: fix various warnings (not "const" related ones)
      s4:samdb_set_password - cosmetic fixes
      s4:samdb_set_password - Return the maximum password age when requested (not the minimum one)
      s4:rdn_name module - a normal error message should be enough for this failure
      s4:ldap.py - major enhancements
      s4:LDB/LDAP - Re-allow renames
      s4:ldb_ildap - Don't segfault on a empty RDN
      s4:ldap.py - add a very special rename test (with invalid - empty RDN)
      s4:repl_meta_data - various
      Revert "s4:LDB/LDAP - Re-allow renames"
      s4:rdn_name - fix up the rename operation
      s4:dsdb Don't allow creation of systemOnly objectclasses
      s4:ldap.py - add a test for the "systemOnly" classes
      s4:ldap.py - add tests for valid parent and RDN
      heimdal - fix various warnings
      s4:ldb.h - add constant for LDAP EXOP password change
      s4:schema_inferiors - Fix wrong check
      s4:objectclass - Free unused memory from responses
      heimdal kerberos - fix memory leak (free the plugin list always - not only in error cases)
      s4:ldb_tdb - fix memory leaks
      s4:ldap.py - commented out the UTF8 tests (and fixed some deletion DNs)
      s3/s4 common: fix up header file
      s4:acl module - intendation fix and comment enhancement
      s4:rootdse module - intendation fixup
      s4:various LDB modules - "build_request" functions - propagate result codes back
      s4:ldb_tdb - Rework/Various
      s4:ldap server - remove unused error handlings
      s4:ldb - add a check which has to be done on beginning of a "modify" operation
      s4:ldap.py - Further enhancements
      s4:subtree_delete - Make the initialisation of the child counter more clear
      s4:ldb - SQLite: port some constraints from the TDB backend also to the SQLITE one
      s3/s4:samr.idl - Corrects the "userPwdChangeFailureInformation" structure
      s3/s4 - Adapt the IDL changes on various locations
      winbind: adapt the new reject constants also there
      Revert "s4:ldb - add a check which has to be done on beginning of a "modify" operation"
      s4:wbclient.h - add compatibility constants
      s4:objectclass ldb module - Check for empty messages
      s4:provision.py - simplify the "realm" variable handling a bit
      Enhance ".gitignore" file for s4
      s4:ldb_tdb - Revert some introduced "trivial gotos"
      s4:dcesrv_samr - Cosmetics
      s4:dcesrv_samr - Add additional "talloc_free"s
      s4:dcesrv_samr - prevent "ldb_modify" on a possibly empty message
      s4:dcesrv_samr - add another constant
      s4:hdb-samba4 - Don't double-free "db"
      s4:loadparm - adapt "realm" handling
      s4: Changes the old occurences of "lp_realm" in "lp_dnsdomain" where needed
      s4:torture - fix up "ldap_basic" test
      s4:password_hash - load the domain parameters from the "loadparm context"
      s4:torture cldap test - Add checks for the right forest DNS name
      s4:auth/credentials/credentials - fix uninitalised pointers
      s4:ntlmssp server - use also here the new "lp_dnsdomain()" call
      s4:w32err_code.py script - put it under "scripting/bin"
      s4:dcerpc_server - Read the generic session key out from "dcerpc_generic_session_key"
      s3: Try to fix the build on Solaris & AIX regarding the password change reject reason
      s4:winsdb - Substitute LDB result numbers with constants
      s4:auth_sam: Restructure tail in "authsam_get_server_info_principal" and fix a memory leak
      s3:srv_samr_nt - another fix for the reject reason
      s4:ldb_ldap - Fix intendation
      s4:ldb_msg - Use LDB constants on results
      s4:dcerpc_netlogon - unify the two workstation object lookups (DNS hostname and supported encryption types)
      s4:sites - get the server site (name) from DSDB
      s4:torture "cldap" test - rework and test more results
      Revert "s4:ldb_msg - Use LDB constants on results"
      s4:ldb_msg_check_string_attribute - add a comment about the result values
      s4:password_hash LDB module - substitute "lp_workgroup" with "lp_sam_name"
      s4:torture "cldap" test - restore the removed constraints and add more
      heimdal - hdb/ext.c - fix a "shadows variable" warning
      .gitignore: add "partition_proto.h"
      s4:provision - important fix for DNS domainname: lower realm
      s4:provision - rework the "guess_names" and "make_smbconf" method
      s4:smbtorture - Add "const" before "value"
      s4:libcli/security/access_check - Add "const" in front of "type"
      s4:ldb_sort - Add some more "const"
      s4:dsdb/samdb/cracknames - Remove unused header and add more "const"
      s4:provision - Reintroduce accidentally removed parameters and checks from "guess_names"
      ldb python bindungs - better use the "enum ldb_scope" for the search scope rather than "int"
      ldb:backend "connect" functions - convert result values to LDB constants
      Revert "ldb python bindungs - better use the "enum ldb_scope" for the search scope rather than "int""
      ldb:python bindings - make the intention by Jelmer ("int" vs. "enum") more clear
      ldb:tdb backend - be also here more careful with the result value
      s4:kdc/hdb-samba4 - Remove unused variable
      s4:nbt_server/wins/winsdb - Fix "const" warning
      s4:torture/raw/samba3misc - Add "discard_const_p" macro before a string
      s4:samdb python bindings - Reorder some function bodies to match the order in "ldb_wrap_connect"
      s4:samdb python bindings - make the python wrap connect more like the C one
      s4:samdb python bindings - add a wrapper for "dsdb_make_schema_global"
      s4:samdb_set_password/samdb_set_password_sid - Better comments and cosmetics
      s4:dsdb/common/util - Add a new utility function "samdb_check_password"
      s4:dcesrv_samr - Implement "dcesrv_samr_ValidatePassword" using my new check password call
      s4:torture/rpc/samr - Add a comment for "ValidatePassword" test
      s4:dcesrv_samr_ValidatePassword - I forgot to create an out buffer
      s4:torture/samr - Activate "ValidatePassword" test per default
      s4:torture/samr - Add status code on "ValidatePassword" test output
      s4:samdb_validate_password - Adapt the function to use the UNIX charset for the password data blob
      s4:dcesrv_samr_ValidatePassword - adapt call to "samdb_check_password"
      s4:dcesrv_samr_ValidatePassword - naturally this was only for debugging the failure
      s4:samdb_check_password - allow the password string to be NULL
      s4:dcerpc - fix DEBUG output warning
      s4:libnet_passwd - fix pointer type
      ldb_init: use constant for result of "ldb_setup_wellknown_attributes"
      s4:dsdb/common/util - samdb_result_hashes - use "unsigned int" for counters
      s4:lib/messaging - fix up the python bindings
      torture/basic/denytest - makes the code more compatible for TRU64 (consider buildfarm)
      s4:vfs_ipc - fix "ipc_open" for NTTRANS create requests
      s4:dcesrv_samr - Add more checks for invalid levels
      s4:ldap.py - Deactivates some at the moment pointless test parts
      s4:samdb util - add a call for generating a correct "lDAPDisplayName"
      s4:dsdb/repl/replicated_objects - Applicate also here the new "lDAPDisplayName" generator
      s4:ldap.py - enhance schema addition test
      ldb:python bindings - add a context on "py_ldb_delete"
      Revert "s4:dsdb/repl/replicated_objects - Applicate also here the new "lDAPDisplayName" generator"
      s4:SAMLDB module
      s4:SAMLDB DSDB module - Remove "\n" in LDB error messages
      s4:SAMLDB DSDB module - Add "\n"s on debug messages
      s4:provision_users.ldif - Descriptions generally begin with a majuscle
      s4:WINREG RPC server - remove a "talloc_free"
      ldb:ldb_tdb backend/indexes - DN comparison
      ldb:ldb_tdb backend/indexes - Outside API
      s4:ntvfs/posix/pvfs_acl - Remove unused variable "token"
      util/strlist: Fix up "const" warnings in the string list and test code
      tdb tools: Mostly cosmetic adaptions
      charset/tests/iconv - Remove the "const" from "ptr_in" to prevent "discard_const_p" use
      s4:WINREG RPC server - Cosmetic
      s4:torture/rpc/netlogon - Fix uninitialised variable
      s4:torture/raw/unlink - Remove unused variable and label
      s4:torture/smb2/notify - Rename nested "fname" variable to prevent warnings
      s4:torture/smb2/oplock - Remove unneeded "status" redeclarations
      s4:lsa RPC - Use more LDB constants
      s4:samr RPC - Use more LDB constants
      s4:lsa RPC - Fix type of variable "atype"
      s4:netlogon RPC - Fix up a comment
      s4:netlogon RPC - Fix up the error handling
      s4:netlogon RPC - Remove trailing whitespace
      s4:ldap.py - Add a check for the generated "schemaIDGUID"
      s4:ldap.py - activate test for operational attributes
      s4:libnet_become_dc - fix typo
      s4:ldap.py - fix the schema update test on Windows Server
      Revert "s4-netlogon: always set the dNSHostName in GetDomainInfo"
      s4:installmisc - install also the new "domainlevel" tool from the setup dir
      s4:operational LDB module - Don't do the write checks here
      s4:objectclass LDB module - Prevent write operations on constructed attributes
      s4:ldap.py - add a test for the enhanced operational attributes check
      s4:upgrade script - rename it to "upgrade_from_s3" and do some rework
      s4:howto.txt - add a notice about the upgrade possibilities and fix line spaces
      s4:WHATSNEW4.txt - Add also here a comment about the "upgrade_from_s3" script
      s4:setup/provision - make the interactive mode work again
      s4:provision.py - cosmetic output correction
      s4:provision - Fix up the provision of "standalone" and "member" mode
      s4:samba3.py - support the TDB version 3
      s4:samba3.py - don't read those informations out from the TDB
      s4:samba3.py - ignore comments in "smb.conf" files
      s4:upgrade.py - the import of WINS databases don't seem to work always
      s4:upgrade_from_s3 - Fix message outputs
      s4:upgrade.py - rework to make the upgrade s3 -> s4 possible again
      s4:tests.sh - Make also here the change from "upgrade" to "upgrade_from_s3"
      s4:upgrade.py - Umlaut problem
      s4:samba3.py (and test) - deactivate the tests until those parameters are fixed
      s4:provision.py - cosmetic
      s4:winbind - Fix it another time up
      s4:samba3.py - deactivate also the assertion on line 599
      s4:net utility - add a notice for the "help" operation and format it's output of the command list better
      s4:registry/util - Don't include the trailing '\0' in the internal data format but add it on the back-conversion to a string
      security.idl - Add some more wellknown SIDs/RIDs
      s4:security/sddl - rework of the security descriptor abbreviations
      s4:provision.py - remove hardcoded SIDs and RIDs
      s4:WINREG RPC server - Reintroduce the free operation on "CloseKey"
      s4:WINREG RPC server - add another "talloc_unlink" in "DeleteKey"
      s4:samba3.py/upgrade.py: Revert
      s4:upgrade.py - readd accidentally removed empty lines
      s4:upgrade.py - remove my copyright
      s4:setup/provision - Rework
      s4:upgrade_from_s3 - Move it back to "setup"
      Revert "s4:registry/util - Don't include the trailing '\0' in the internal data format but add it on the back-conversion to a string"
      lib/registry/util.c - Reorder the registry datatypes of the conversion functions
      util/util_strlist - add a call "const_str_list" for making "unconst" lists "const"
      s4:schema - Make some more (result) variables const and fix up warnings with "discard_const_p"
      s4:torture/ldap/ldap_sort - Add some casts to suppress warnings
      s4:torture/nbench/nbench - Add a cast before "str_list_make_shell"
      s4:torture/nbt/wins - Add more casts
      s4:torture/raw/lock - Fix "discard const" warnings by introducing "discard_const_p"s
      s4:ntvfs/posix/pvfs_resolve - Fix "discard const" warning
      s4:ntvfs/posix/pvfs_streams - Fix "discard const" warning
      s4:operational LDB module - Fix usage of LDB constants
      s4:libnet/libnet_become_dc - Fix a small glitch in "becomeDC_drsuapi1_add_entry_send"
      s4:utils/oLschema2ldif.c - remove (now) unused variables
      s4:operational LDB module - cosmetic - reorder an attribute list
      s4:"samdb_set_password_sid" - clean up created objects correctly
      s4:drsuapi/getncchanges.c - Update the list of operational attributes
      s4:dsdb/common/util - make NTTIME attribute wrappers use a "const" message
      s4:"samdb_set_password" - remove delete instructions
      s4:lib/registry/util.c - Reintroduce "FIXME"s
      s4:ldap_schema.py - Move generated attributes check
      s4:ldap_schema.py - add an additional check for validity of "defaultObjectCategory"
      s4:schema_load.c - Typo
      s4:SAMLDB LDB module - Rework to allow checks for wrong "defaultObjectCategory" attributes
      s4:SAMLDB LDB module - Fix trailing whitespaces
      s4:provision_self_join.ldif - Adapt comment after implementation of distributed RIDs
      s4:provision_users.ldif - Import all essential groups for Windows Server 2008 mode
      s4:provision_users.ldif - Remove foreign security principal S-1-5-17 for now
      s4:provision_users.ldif - Fix memberships regarding the denied password RODC replication group
      s4:provision_self_join_modify.ldif - Point out that account "dns" is s4 specific
      s4:provision_users.ldif - Add objects for IIS
      s4:repl_meta_data - Transform a "1" into a "true" on a boolean variable
      s4:upgradeprovision - Reformat comments
      s4:upgradeprovision - fix up the script regarding linked attributes
      s4:SAMR RPC - Fix the criteria for group searches
      s4:provision_users.ldif - Remove system objects from the wrong place
      s4:provision_users.ldif - Simple reordering
      s4:provision_users.ldif - Fix up errors on existing entries
      s4:provision_users.ldif - add the restant part of the objects needing for RODC support
      s4:provision_users.ldif - Add additional BUILTIN objects
      s4:provision_users.ldif - Add objects for IIS
      s4:provision_users.ldif - Add a comment that some objects under "Users" are now located elsewhere
      s4:libcli/util/tstream.c - Need to include "system/network.h"
      s4:include/includes.h - Need to include "system/network.h"
      Revert "s4:include/includes.h - Need to include "system/network.h""
      s4:mark the SYSTEM control always as non-critical
      s4:Heimdal build - never require the NSS wrapper for Heimdal Kerberos
      NSS wrapper - add dependency to "nsstest"
      s4:UID wrapper - Fix includes
      s4:UID wrapper - Make it work on older distributions
      s4:subtree_delete - "NULL" as format string isn't allowed on FreeBSD
      s4:Remove "Py_RETURN_NONE" compatibility code
      pidl - Remove "Py_RETURN_NONE" compatibility code
      check_python.m4 - Raise the minimum python version up to 2.4
      ldb_match - Ignore ":dn" part of extended matches for now
      s4:getopt.py - set the password callback only when no password has been provided
      s4:auth/credentials/credentials.c - Initialise the "lm_response" and "nt_response" structures
      s4:server.c - use always "return" instead of "exit" in the "binary_smbd_main" function
      s4:util.c - Corrected the location of the "Directory Service" object
      s4:popt_common.c - fix intendation
      s4:loadparm.c - the logfile parameter value needs to be duplicated
      s4:loadparm.c - prevent memory leaks
      s4:dcesrv_lsa.c - remove a superfluous empty line
      s4:provision.c - "provsion_store_self_join" - don't set the realm if it's NULL
      s4:AD content - Add the DFSR objects which exist on Windows Server >= 2008
      s4:AD content - adequate some revision levels to match Windows Server 2008
      s4:AD content - Implement the new password settings container
      s4:provision.py - try to use other addresses than "127.0.0.x" and "::1"
      s4:dsdb/util.c - Use LDB result constants in some more helper functions
      s4:password_hash - Fix up request message pointers
      s4:partition DSDB module - Cosmetic fixups
      s4:operational LDB module - enable support for passing referrals through it
      s4:torture/ldap/basic.c - add some "const"
      s4:registry/regf.c - specify the context when freeing the "regf" variable
      s4:netlogon RPC - fix the indentation
      s4:SAMLDB module - ignore referrals
      s4:LDAP server - Enable support for returning referrals through it
      s4:partition DSDB module - change the search and domain scope control handling
      s4:partition DSDB module - Generate basic referrals
      s4:torture/ldap/basic.c - add a basic test for referral return
      s4:cldap_server - make it "signed-safe"
      s4:auth - make some parts "signed-safe"
      s4:ldap_server - make it "signed-safe"
      s4:DNS update - change "i" to be unsigned
      s4:dcesrv_samr.c - Remove unused variable
      .gitignore - ignore display of "mit_samba.so"
      s4:script/installmisc.sh - install "dns_update_list" to target setup folder
      s4:provision.zone - fix port of "_ldap._tcp.gc._msdcs"
      s4:LDB - cosmetic fix for a "for" loop
      s4:epmapper RPC - make this one "signed-safe"
      s4:remote RPC - make this one "signed-safe"
      s4:spoolss RPC - make this one "signed-safe"
      s4:unixinfo RPC - make this one "signed-safe"
      s4:srvsvc RPC - make this one "signed-safe"
      s4:srvsvc RPC - revert one unsigned integer "i" back to signed
      s4:echo RPC - make this one "signed-safe"
      LDB:NSS - make LDB "signed-safe" on counter variables
      s4:dcesrv_samr - Fix up "EnumDomainGroups" and "QueryDisplayInfo" calls
      s4:dcesrv_samr - Also "OpenGroup" needs to support universal groups
      s4:torture/rpc/samr - enhance the "EnumDomainGroups" test regarding universal groups
      s4:torture/rpc/samr - Fix up SAMR-USERS test
      s4:srvsvc RPC - fix up the "ntvfs_connect" in "srvsvc_create_ntvfs_connect"
      s4:srvsvc RPC - "srvsvc_create_ntvfs_connect"
      s4:samdb.c - Make it signed-safe
      s4:ldif_handlers - Use "unsigned int" for counting purposes
      s4:provision - use the new "interface_ips" python call to detect the right host IPv4 address
      s4:operational LDB module - use right memory context int "construct_primary_group_token"
      s4:sam.c - change variable types to unsigned in "sids_contains_sid"
      s4:sam.c - cosmetic indentation fix
      s4:sam.c - make "authsam_expand_nested_groups" public
      s4:operational LDB - implement the "tokenGroups" constructed attribute
      s4:operational LDB module - make the counters unsigned
      s4:operational LDB - don't accidentally "ate" search helper attributes if we need them for more constructed attributes
      s4:ldap.py - add test for "tokenGroups"
      s4:ldap.py - give the "primaryGroupToken" test a better name
      s4:auth/sam.c - change base context for the "tmp_ctx" context in "authsam_expand_nested_groups"
      s4:torture/winbind/struct_based.c - fix up (un)signedness of a function argument
      s4:torture/rpc/samr.c - make some argument of function "test_SamLogon_with_creds" constant
      s4:torture/rpc/samr.c - add some decision possibility constants to some switch
      s4:cracknames - Change two counter variables to unsigned
      s4:samdb_privilege.c - Change two counter variables to unsigned
      s4:kcc - Change some counter variables to be unsigned
      s4:dcesrv_samr_AddAliasMember - wrap a long "DEBUG" statement
      s4:wrepl_server - change also here the counter variables to "unsigned"
      s4:repl - change also here the counter variables to "unsigned"
      s4:dsdb/util - Change also here counters to "unsigned"
      s4:drsuapi RPC - Change also here counters to "unsigned"
      s4:samr RPC - Change some counters to be "unsigned" where needed
      s4:lsa RPC - Change some counters to be "unsigned" where needed
      s4:lsa RPC - fix up "gendb_*" result codes
      LDB:tools - change counters to be unsigned
      s4:libregistry - change counters to be "unsigned"
      s4:provision.reg - call us Windows 2008 from the current version point of view
      s4:registry library - make "reg_ldb_pack/unpack_value" more robust
      s4:registry library - fix up "reg_ldb_set_value"
      s4:lib/registry/ldb.c - fix trailing whitespaces
      s4:schema_syntax.c - Change also here counters to "unsigned" where needed
      s4:schema - Change also here counters to "unsigned" where needed
      s4:partition LDB module - change counter variables to "unsigned" where appropriate
      s4:rootdse LDB module - change counter variables to "unsigned" where appropriate
      s4:resolve_oids LDB module - change counter variables to "unsigned" where appropriate
      s4:schema_data LDB module - change counter variables to "unsigned" where appropriate
      s4:proxy LDB module - Change counter variables to "unsigned" where appropriate
      s4:kludge_acl LDB module - change counter variables to "unsigned" where appropriate
      s4:linked_attributes LDB module - change counter variables to "unsigned" where appropriate
      s4:acl LDB module - change counter variable to "unsigned"
      s4:anr LDB module - change counter variable to "unsigned"
      s4:objectclass LDB module - change counter variabls to "unsigned" where appropriate
      s4:objectguid LDB module - change counter variables to "unsigned" where appropriate
      s4:ranged_results LDB module - change counter variables to "unsigned" where appropriate
      s4:local_password LDB module - change counter variables to "unsigned" where appropriate
      s4:repl_meta_data LDB module - change counter variables to "unsigned" where appropriate
      s4:extended_dn_out LDB module - change counter variables to "unsigned" where appropriate
      s4:ldif_handlers - Change "unsigned int" to "uint32_t" which fits better here
      LDB:map - make LDB "signed-safe" on counter variables where appropriate
      LDB:LDAP backend - change a counter variable to "unsigned"
      LDB:SQLITE3 backend - change counter variables to "unsigned" where appropriate
      LDB:TDB backend - change counter variables to "unsigned" where appropriate
      s4:ldb_ldap.c - fix indentation
      s4:LDB TDB index code - reintroduce accidentally removed code part
      LDB:common - Change counters to "unsigned" where appropriate
      LDB:paged results module - change counters to "unsigned" where appropriate
      LDB:paged searches module - change counters to "unsigned" where appropriate
      LDB:rdn name module - change counters to "unsigned" where appropriate
      LDB:sort module - change counters to "unsigned" where appropriate
      LDB:asq module - change counters to "unsigned" where appropriate
      Revert "s4:script/installmisc.sh - install "dns_update_list" to target setup folder"
      s4:"dns_update_list" file: install it properly into the private directory
      libcli/auth/schannel_state_tdb.c - fix an obviously wrong error handling
      s4:netlogon RPC - "LogonGetDomainInfo" - make the call compatible with >= Windows 2008
      s4:torture/rpc/netlogon.c - "LogonGetDomainInfo" test - make it compatible against Windows Server 2008
      s4:winbind/wb_cmd_getgroups.c - fix up warnings
      s4:winbind - use "unsigned" variables where possible
      s4:lib/registry/ldb.c - fix up registry backend to be more robust
      s4:winreg RPC - don't crash when incoming data wasn't correctly specified
      s4:registry/ldb.c - if "name" isn't set we should return WERR_INVALID_PARAM
      s4:winreg RPC - fix up the "QueryValue" call to work against the enhanced torture test
      s4:libnet_become_dc - change counter variables to "unsigned" where they count LDB objects
      s4:libnet - change variables to "unsigned" where needed
      s4:util.c - "dsdb_check_optional_feature" - counter should be "unsigned"
      s4:provision.py - small output improvement
      Revert "s4:provision Improve the handling of provision errors"
      NSS:winbind_struct_protocol.h - fix typo
      Reintroduce "s4:provision Improve the handling of provision errors""
      s4:registry - ldb.c - Move the "val" structure
      s4:registry - ldb.c - Consider result values in "reg_ldb_pack_value"
      s4:registry - ldb.c - remove superfluous "query" variable
      s4:registry - ldb.c - check more for possible "Out of memory" circumstances
      s4:registry - ldb.c - fix up the memory handling in "reg_ldb_unpack_value"
      s4:registry - ldb.c - fix up a strange LDB filter
      s4:registry - ldb.c - provide a mechansim for storing UTF8/binary REG_SZ/REG_EXPAND_SZ values
      s4:registry - ldb.c - provide a mechanism for storing UTF8/binary REG_DWORD values
      Revert "s4-smbtorture: skip extended SetValue test against Samba (both dont survive)."
      s4:registry - util.c - add harder checks for inputs on "reg_val_data_string"
      s4:registry - add support for REG_QWORD values
      s4:registry - fix up the output of hexadecimal values
      s4:registry - local testsuite - add a test for REG_QWORD
      s4:registry - util.c - move the "REG_NONE" case in the conversion functions on top of the switch
      s4:registry - util.c - treat unsupported and binary values as the same in the conversion functions
      s4:registry - rpc - don't crash when communication partner isn't available
      s4:dsdb/kcc/*.c - fix up wrong typed counters
      s4:registry - introduce the "REG_DWORD_BIG_ENDIAN" datatype
      s4:registry - add a test for the "REG_DWORD_BIG_ENDIAN" datatype
      s4:registry - check also for other registry value types in the generic test
      s4:registry - use a macro for reverse byte order
      s4:dsdb - fix up warnings
      s4:resolve_oids LDB module - not really a change but a nicer method to call "talloc_reference"
      security.idl - push generated code diff
      s4:wb_cmd_getgroups - fix failure in s4 winbind's "getgroups"
      libcli/auth/schannel_state_tdb.c - fix a memory leak
      s4:auth/kerberos/kerberos.c - fix also here a memory leak
      heimdal - free always "ctx->password" when it isn't needed anymore
      heimdal - fix overlapped identifiers in the "krb5" library
      heimdal - remove unused variable
      kerberos - set the memory to "0"s before freeing the password to prevent security issues
      s4:registry - "LDB backend" - Fix up the storage of binary REG_SZ/REG_EXPAND_SZ values
      s4:registry - "LDB backend" - fix up memory allocation for dynamic integers
      s4:torture WINREG - enhance test for "DWORD_BIG_ENDIAN" type
      s4:torture WINREG - enhance test for "QWORD" type
      s4:registry - handle type "DWORD_BIG_ENDIAN" as type "DWORD"
      s4:WINREG RPC - specify the performed create action for "CreateKey"
      s4:registry - "LDB backend" - don't test for "0" as string termination on binary and unknown typed values
      s4:WINREG RPC - we support only non-volatile keys
      s4:torture - WINREG RPC - reactivate test "SetValueExtended" for s4
      s4:WINREG RPC server - don't check for the "name" size in "EnumValue"
      s4:registry - "LDB backend" - reg_key_get_info - adapt max. subkey and value length
      s4:regshell - don't return an error code if we get a security descriptors error
      s4:regshell - here we don't need a newline - "ctime" itself provides one
      s4:registry - "LDB backend" - fix indentation
      s4:registry - "LDB backend" - make the key argument "const" of ldb_get_default_value
      s4:registry - "LDB backend" - "ldb_get_default_value"
      s4:registry - "LDB backend" - "reg_key_get_info"
      s4:registry - "LDB backend" - "reg_ldb_unpack_value"
      s4:regtree - fix counter variables to be "unsigned"
      s4:registry - "patchfile.c" - fix a typo
      s4:registry - "patchfile.c" - consider also the hives in the generated diffs
      s4:registry - "patchfile" - add comments
      s4:registry - "patchfile_dotreg.c" - fix a memory leak
      s4:registry - "patchfile_preg.c" - also here don't accumulate the memory usage
      s4:registry - "util.c" - "reg_string_to_val" - consider always the return values
      s4:registry - "patchfile" - add more "talloc_free"s to save memory
      s4:registry - "patchfile" - initialise the data blobs
      s4:registry - "patchfile" - check if strings could be allocated
      s4:registry - "RPC backend" - use "talloc_steal" and not "talloc_reference"
      s4:registry - registry.h - add memory contexts for delete value/key functions
      s4:registry - adaptions for "add memory contexts for delete value/key functions"
      s4:registry - "dir.c" - fix up dynamic memory allocation operations
      s4:registry - "util" - fix up memory allocated data
      s4:registry - "util" - make "reg_key_add_abs" consistent with "reg_key_del_abs"
      s4:registry - "util" - add also a memory context argument for "reg_key_del_abs"
      s4:registry - adaptions for "add also a memory context argument for "reg_key_del_abs"
      s4:registry - "util" - remove "const" from "reg_abs_path"
      s4:registry - add more "W_ERROR_HAVE_NO_MEMORY" invocations (on talloc'ed stuff)
      s4:registry - "samba.c" - add a "talloc_free"
      s4:WINREG RPC - add also here a "W_ERROR_HAVE_NO_MEMORY"
      s4:registry - "util.c" - initialise "result" in "reg_key_add_abs"
      s4:registry - "local" - add also here more "W_ERROR_HAVE_NO_MEMORY" macro tests
      s4:registry - "patchfile" - add another "W_ERROR_HAVE_NO_MEMORY" macro call
      s4:registry - "reg_import_hive_key" - change a "talloc_steal" into a "talloc_reference"
      s4:registry - "reg_key_del/add_abs": call "talloc_free" only on valid objects
      convert_string_talloc_convenience - print out the input buffer in a better way (using dump_data since it isn't always directly readable)
      s4:ldb_modules/util.c - fix two counter variables to be "unsigned"
      s4:registry - "LDB backend" - revert the binary storage of "REG_SZ", "REG_DWORD" and "REG_QWORD"
      Revert "s4:torture - WINREG RPC - reactivate test "SetValueExtended" for s4"
      s4:registry - "LDB backend" - revert the length check for UTF16 strings
      s4:registry - "LDB backend" - fix indentation
      s4:registry - "reg_ldb_pack_value" - provide workarounds when the server receives non-standard data.
      s4:WINREG torture - fix an error (missing "break" in a "switch")
      s4:auth/credentials/credentials.c - initialise more content
      WHATSNEW4.txt - updates
      howto4.txt - improve the content of chapter 2bis
      s4:registry/util.c - fix indentation
      s4:registry - move the UTF16 length calculation for "reg_key_get_info" into the RPC server code
      s4:registry/ldb.c - Always check the "name" attribute for != NULL
      s4:registry/ldb.c - Break with "NULL" as an error case when the data doesn't fit in the "reg_ldb_pack_value" function
      s4:.gitignore - update it for the new heimdal release
      s4:registry/tests/generic.c - fix the DWORD_* types test to work also against big endian platforms
      s4:registry/util.c - remove those "talloc_free"s
      s4:installmisc.sh - fix location of "dnspython" library
      s4:registry/tests/hive.c - make the test compatible with big-endian platforms
      s4:registry/tests/diff.c - try to make also this test compatible with big-endian platforms
      s4:torture/basic/denytest.c - use "typeof" in a better supported syntax
      s4:gensec_gssapi.c - make sure that "GSS_C_DELEG_POLICY_FLAG" is available
      libcli/nbt/dns_hosts_file.c - change "ULONG_MAX" into "UINT32_MAX"
      wbclient/wbclient.c - fix a typo
      s4:python/samba/__init__.py - import "sys" for "ensure_external_module" method
      Revert "s4:gensec_gssapi.c - make sure that "GSS_C_DELEG_POLICY_FLAG" is available"
      LDB:sample_module.c - remove code parts which generate warnings
      s4:auth/ntlm/auth_developer.c - "fixed_challenge_get_challenge" - fix the assignment of the challenge
      s4:torture - remove unused variables
      s4:net tool - add a "discard_const_p" to suppress the "PySys_SetArgv" warning
      s4:param/secrets.c - add some "char *" casts
      s4:provision - add a comment which explains why "paths.dns_keytab" is stored without path reference
      s4:pyregistry.c - fix indentation
      s4:WHATSNEW4.txt - further updates and corrections
      s4:winbind/wb_server.c - fix indentation
      s4:registry - "regf backend" - fix it up regarding REG_DWORD/REG_DWORD_BIG_ENDIAN_VALUES
      LDB:python bindings - also empty LDB message elements should have a python representation
      LDB:sample_module - reintroduce accidentally removed "ldb_msg_add_fmt" statement
      s4:registry - "patchfile_preg.c" - use "sizeof(uint32_t)" for some size specifications
      s4:registry - "patchfile_preg.c" - fix the read operation of the data length on big-endian platforms
      s4:WAF buildsystem - support out of "source4" directory builds
      s4:registry - "REGF backend" - don't ignore wrong-sized REG_DWORD/REG_DWORD_BIG_ENDIAN values
      s4:registry - "patchfile_preg.c" - make a SIVAL statement nicer
      s4:registry - "patchfile_preg.c" - assign a better type to the "i" counter variable
      s4:LDB - fix up "LDAPI" test
      s4:registry - "patchfile_preg.c" - fix a datatype
      s4:registry - "patchfile_preg.c" - fix indentation
      s4:registry - "patchfile_preg.c" - use more "sizeof"s on length specification
      s4:torture - "dbspeed" test
      s4:torture - "dbspeed" test
      s4:torture - "dbspeed" test
      s4:torture - "dbspeed" test - add newlines as we have them in the other failure messages
      s4:samdb_server_site_dn - free unused DNs in the right way
      s4:dbspeed torture - remove unneeded newlines on "torture_result"
      s4:dbspeed torture - improve also the TDB code part
      s4:torture/ldap/ldap_sort.c - There should be used the "base_dn" not the "root_dn" for the sort test
      s4:prefer "samdb_*_dn" basedn calls over the "ldb_get_*_dn" functions
      s4:auth/auth_sam_reply.c - fix counter types
      s3/s4:netlogon IDL - fix up "struct netr_SamInfo6" regarding the "forest" attribute
      s4:objectclass LDB module - remove a unneeded newline
      Revert "s4:prefer "samdb_*_dn" basedn calls over the "ldb_get_*_dn" functions"
      s4:remove "samdb_root_dn", "samdb_base_dn", "samdb_config_dn" and "samdb_schema_dn"
      s4:dsdb/common/util.c - add a call which determines centrally the forest DNS domainname
      s4:use "samdb_forest_name" for the forest DNS domainname lookup
      s4:acl/descriptor LDB module - distinguish between root and default basedn
      s4:CLDAP - "fill_netlogon_samlogon_reponse" - check for out of memory
      s4:fill_netlogon_samlogon_response - some rework of the detection code
      s4:dcesrv_netr_DsRGetDCNameEx2 - provide a much better implementation
      s4:torture/netlogon - enhance test for "dcesrv_netr_DsRGetDCNameEx2"
      s4:fill_netlogon_samlogon_reponse - fix a typo
      s4:samdb_server_site_name - fix indentation
      s4:"samdb_server_site_name" uses - proof for out of memory
      s4:kdc/db-glue.c - fix integer counter types
      s4:kdc/wdc-samba4.c - fix integer counter types
      s4:kdc/db-glue.c - use "TALLOC_FREE" insteal of "talloc_free" for the "priv" context
      s4:dsdb/dns/dns_update.c - fix a typo
      s4:torture/rpc/netlogon.c - fix typo
      s4:netlogon RPC - "fill_one_domain_info" - use "lp_workgroup" for the DC short domainname discovery
      s4:netlogon RPC server - fix a counter variable type
      s4:util - add a function which finds the matching client site using the client address
      s4:CLDAP server - make use of the new "samdb_client_site_name" call
      s4:netr_DsRAddressToSitenames[Ex]W calls - implement them correctly with the client site information
      s4:torture - DsRAddressesToSitenames - enhance the testsuite
      s4:dcesrv_netr_GetAnyDCName - improve the call according to the MS-NRPC documentation
      s4:torture - GetAnyDCName - adaptions
      s4:dcesrv_netr_DsRGetSiteName - provide an implementation according to the MS-NRPC docs
      s4:torture - DsRGetSiteName - move "skip" statement before the "computer_name" check
      s4:dcesrv_netr_DsrGetDcSiteCoverageW - provide a basic implementation
      s4:torture - DsRGetDcSiteCoverageW - adapt test to check for the sitename
      s4:netlogon RPC server - we don't need "are we DC" proofs
      s4:knownfail - remove tests which should pass
      Revert "s4-netlogon: fixed breakage of dcesrv_netr_GetAnyDCName in sites patch"
      Revert "s4:netr_DsRAddressToSitenames[Ex]W calls - implement them correctly with the client site information"
      s4:netr_DsRAddressToSitenames[Ex]W calls - implement them correctly with the client site information
      s4:wb_cmd_getdcname.c - fix s4 winbind up regarding the new correct "GetAnyDCName" behaviour
      s4:kcc_periodic.c - fix counter types
      s4:torture - DsRAddressToSitenames[Ex]W testsuite - make it IPv4-only compatible
      s4:fill_netlogon_samlogon_response - use "lp_workgroup" for the short netbios domainname
      s4:fill_netlogon_samlogon_response - reorder assign operations (to be consistent)
      nbt: samlogon/netlogon structures - unify denominations
      s4:cldap_server/netlogon.c - handle the domain SID correctly
      Revert "s4:web_server: use tsocket_address functions to get the local ip and port"
      s3:libads/ldap.c - fix a build breakage
      s4:LogonGetDomainInfo - remove singular "dNSHostName" check - this doesn't belong here
      s4:LogonGetDomainInfo - fix indentation
      s4:LogonGetDomainInfo - fix a potential crash source
      s4:py_nttime2string - removed unused variable "nt2"
      librpc:dcerpc_error.c - fix a warning
      s4:net utility - add an optional password attribute to "net user add"
      s4:samdb python bindings - remove idmap creation stuff from this call
      s4:net utility - remove unixname parameter of samdb.newuser
      s4:net utility - make outprinted description comments more consistent
      s4:blackbox/test_kinit.sh - Test the new "net user add <user> [<password>]" syntax
      s4:samldb LDB module - update the copyright notice
      s4:samldb LDB module - make "samldb_prim_group_users_check" synchronous again
      s4:samldb LDB module - make "samldb_member_check" synchronous again
      s3:provision_basedn_modify.ldif - add "msDS-NcType" attribute and fix comments
      s4:selftest - change test passwords
      s4:dsdb/util.c - Add a new function for retrieving password change attributes
      s4:acl ldb module - fix typos
      s4:dsdb: add new controls
      s4:password_hash - Various (mostly cosmetic) prework
      s4:password_hash - Rework unique value checks
      s4:password_hash - Rework to handle password changes
      s4:samdb_set_password/samdb_set_password_sid - Rework
      s4:samdb_set_password - adapt it for the user password change handling
      s4:passwords.py - add a python unittest for additional testing of my passwords work
      s4:password_hash LDB module - don't break the provision
      s4:password hash LDB module - check that password hashes are != NULL before copying them
      s4:password_hash LDB module - quiet a warning
      s4:password_hash LDB module - we might not have a cleartext password at all
      README.Coding - cosmetic changes
      s4:torture/rpc/netlogon.c - don't use constant "AF_LOCAL" but do use "AF_UNIX" instead
      s4:provision_users.ldif - Fix typos in user/group objects
      s4:provision_basedn_modify.ldif - fix up "maxPwdAge"
      s4:provision_users.ldif - fix up Administrator's "userAccountControl"
      s4:provision.ldif - fix up "NTDS Quotas" "systemFlags"
      s4:provision.ldif - "passwordSettingsContainer" add "showInAdvancedViewOnly"
      s4:provision_users.ldif - On Windows Server >= 2008 security principal S-1-5-20 doesn't exist anymore
      s4:provision.ldif - add more Windows 2008 domain operations
      s4:provision.ldif - add IP security objects as they exist on Windows Server
      s4:provision_configuration.ldif - "sites" object
      s4:provision_configuration.ldif - The "NTDS Quotas" object is system-critical
      s4:provision_configuration.ldif - set the right schedule on the default site in the NTDS site settings
      s4:provision*.ldif - always set the "msDS-NcType" attribute correctly
      s4:provision_configuration.ldif - "CN=94fdebc6-8eeb-4640-80de-ec52b9ca17fa" operation is of version 3
      s4:provision_configuration.ldif - the revision level of "Windows2003Update" should obviously be 10
      s4:provision_configuration.ldif - add more Windows 2008 forest operations
      s4:provision_users.ldif - fix up and reorder the well-known security principals
      s4:provision_configuration.ldif - add more extended rights objects
      s4:domain functional level - it is also specified in the domain object under partitions
      s4:domainlevel.py - update the script to handle both domain level occourrences on s4
      ldb:ldb_msg.c - use result constant
      s4:domainlevel - handle exceptions more precisely
      s4:samldb LDB module - remove unused variables
      s4:dsdb_cache LDB module - fix a typo
      s4:net domainlevel tool - fix up the error handling as Jelmer suggested
      s4:repl_meta_data LDB module - fix counter types
      s4:smb_server/smb/trans2.c - remove unused define "DEFAULT_SITE_NAME"
      s4:operational LDB module - fix warnings (missing parameters, unused variable)
      s4:ntvfs/posix/pvfs_wait.c - fix a "calculated value unused" warning
      s4:ntvfs/ipc/vfs_ipc.c - add more "const" in order to fix warnings
      s4:torture/raw/open.c - remove unused variables and fix error handling
      s4:torture/rap/rap.c - quiet discard const warning
      s4:setup/*.ldif - remove unneeded "cn" attributes
      s4:"rdn_name" LDB module - fix the creation of the RDN attribute (try to normalise it)
      s4:LogonGetDomainInfo - allow to set DNS hostname for the first time
      s4:dsdb_add_user - check the "cn"/"account_name" length (should be >= 1)
      s4:dsdb_lookup_rids - "unsigned" counters fit better than "signed" in this case
      s4:dsdb_enum_group_mem - use "unsigned" counters
      s4:torture/rpc/samr.c: Fix the "ValidatePassword" test
      flags.h - fix comment for "GTYPE_SECURITY_UNIVERSAL_GROUP" constant
      s4:client/client.c - fix "asprintf"s
      s4:regshell - don't use negative exit codes
      s4:regshell - fix an "asprintf"
      s4:libcli/clideltree.c - fix "asprintf"s
      s4:ntvfs/nbench/vfs_bench.c - change a "asprintf" into a "talloc_asprintf"
      s4:ntvfs/simple/svfs_util.c - change an "asprintf" into a "talloc_asprintf"
      s4:param/loadparm.c - fix "asprintf" call
      s4:scripting/python/modules.c - fix "asprintf" calls
      s4:smbd/pidfile.c - fix "asprintf" calls
      s4:utils/ntlm_auth.c - fix "asprintf" calls
      s4:web_server/wsgi.c - fix "asprintf" call
      s4:client/client.c - we don't need "&ctx" for talloc calls
      s4:web_server/wsgi.c - provide a better out-of-memory handling for an "asprintf" call
      nss_wrapper/testsuite.c - make sure to test always the "NSS wrapper" calls
      s4:auth/credentials/credentials.c - initialise "password_last_changed_time"
      s4:web_server/wsgi.c - free the "env" and "inputstream" objects on an "asprintf" failure
      s4:rpc_server/dcesrv_auth.c - Fix a RPC issue in conjunction with Windows 2000
      Revert "s4:rpc_server/dcesrv_auth.c - Fix a RPC issue in conjunction with Windows 2000"
      s4:dsdb/common/util.c - fix a counter variable
      s4:dsdb_module_search_dn - add code to handle NULL format string
      s4:dsdb/samdb/ldb_modules/util.c - make sure to always free temporary data
      s4:ldap.py - add more test cases to show invalid primary group change behaviour
      s4:samldb LDB module - rework the group change code to be again synchronous
      s4:ldap.py - add a test which shows the modification behaviour of important attributes
      s4:samldb LDB module - deny delete operations on some important attributes
      ldb:ldb_tdb/ldb_tdb.c - quiet a warning regarding TDB -> LDB error code conversions
      s4:tests/python/passwords.py - fix filter
      s4:torture/rpc/netlogon.c - add another "LogonGetDomainInfo" testcase
      s4:dcesrv_netr_DsrEnumerateDomainTrusts - fix an integer type
      s3/s4:netrEnumerateTrustedDomains - this call returns a "NTSTATUS" result
      s4:dsdb_load_udv_v1 - "uint32_t" counter type fits better than "unsigned int"
      ldb:ldb_msg_add_steal_string - prevent also there the addition of strings with length 0
      s4:samldb LDB module - start on a sequential trigger implementation
      s4:lib/ldb/pyldb_util.c - add a cast to quiet a warning
      s4:ldb_msg_element_compare - fix typo in comment
      s4:provision - fix typo in substitution variable
      s4:ldap.py - make sure that also the "posixuser" will be deleted on test breakages
      s4:urgent_replication.py - specify the "dnsRoot" attribute which is requested on "crossRef" entries
      s4:descriptor LDB module - cosmetic fixup
      s4:acl LDB module - fix counter types where appropriate
      s4:ridalloc LDB module - add more "talloc_free"s where useful
      s4:ldap_server/ldap_backend.c - send back also the extended error message if it exists
      ldb:ltdb_filter_attrs - fix a counter variable type
      s4:dsdb/common/util.c - provide a better implementation of the "samdb_msg_add_(add/del)val" calls
      s4:rdn_name LDB module - remove "rdn_name_find_attribute"
      s4:rdn_name LDB module - use "ldb_msg_remove_attr" for deleting attributes
      s4:ldap.py - enhance the RDN name test to show that invalid "name" attributes are allowed on add operations
      s4:get_last_structural_class - only real structural classes can be candidates for fetching the last one
      s4:samldb LDB module - this codepart isn't needed due to the objectclass LDB module
      ldb:ldb_msg_remove_attr - provide a better implementation
      s4:password_hash LDB module - adapt the module to the new "ldb_msg_remove_attr" behaviour
      s4:objectclass LDB module - fix header and add my copyright
      s4:objectclass LDB module - use "ldb_oom" for expressing out of memory
      s4:objectclass LDB module - fix error result if an entry doesn't contain a structural objectclass
      s4:objectclass LDB module - this "talloc_steal" is not necessary
      s4:objectclass LDB module - explain why the search can return with an empty return
      s4:objectclass LDB module - fix counter variable types
      s4:objectclass LDB module - remove duplicated code
      s4:objectclass LDB module - cosmetic change
      s4:objectclass LDB module - finally implement the correct entry rename protections
      s4:ldap.py - enhance the rename tests to demonstrate the functionality
      s4:samldb LDB module - finally we can remove the RDN check
      s4:objectclass LDB module - instanciate the schema variable centrally on the "ac" context creation
      s4:dsdb - introduce a new "objectclass_attrs" LDB module which performs the objectclass attributes checking
      s4:remove the "validate_update" LDB module - the task is now handled by the far more complete "objectclass_attrs" LDB module
      s4:samldb LDB module - adjust the module to set always a "defaultObjectCategory" on objectclass add operations
      s4:objectclass LDB module - remove "fix_check_attributes"
      s4:acl LDB module - adaption for "objectclass_attrs" module
      s4:acl LDB module - LDB attribute names should be compared using "ldb_attr_cmp" or "strcasecmp"
      s4:ldap.py - enhance the attributes testcase to demonstrate how the attributes are checked against the schema and the specified objectclasses
      s4:objectclass LDB module - rework the code which handles the objectclasses modification
      s4:ldap.py - add some "objectclass" behaviour tests
      s4:samba_dsdb LDB module - enhance/fix module rule comments
      s4:samba_dsdb LDB module - fix typos
      s4:rdn_name LDB module - move the "distinguishedName" write prevent check here
      s4:objectclass_attrs LDB module - move the single-valued attribute check into this module
      ldb:pyldb.c - we cannot use "ldb_dn_compare" if both message DNs are NULL in "py_ldb_msg_compare"
      s4:instancetype LDB module - prevent all types of "instanceType" manipulation
      s4:ldap.py - add a test to demonstrate the 'instanceType' behaviour
      s4:samba_dsdb LDB module - move the "objectclass_attrs" module back
      s4:dcesrv_samr_AddGroupMember - also the error code "LDB_ERR_ATTRIBUTE_OR_VALUE_EXISTS" is allowed
      s4:dcesrv_samr_Add/DelGroupMember - remove the account type check
      s4:dcesrv_samr_AddAliasMembership - Merge the two error blocks into one
      s4:dcesrv_samr_DeleteAliasMember - add more braces to fit better the coding styles
      s4:dcesrv_samr_GetAliasMembership - fix type of counter variables
      s4:dcesrv_samr_Add/DeleteAliasMember - provide better NTSTATUS return codes when something didn't work
      s4:samldb LDB module - don't create multiple "ac" module contexts on modify operations
      s4:samldb LDB module - fix up the case when the old and new "primaryGroupID" are the same
      s4:ldap.py - add testcase which demonstrates the reset of the "primaryGroupID"
      ldb:ldb_sqlite3 backend - remove checks which are now done elsewhere
      ldb:ldb_sqlite3 backend - remove a warning which has already been resolved
      s4:ldap.py - check if the "name" of an entry was really ignored
      s4:ldap.py - check how the directory server behaves when the 'distinguishedName' attribute wasn't set correctly
      s4:passwords.py - use "self" before "enable_account" to make really sure which LDB connection should be used
      s4:passwords.py - set the "dSHeuristics"
      s4:rootdse LDB module - use LDB result constants
      s4:ldif_read_prefixMap - don't cause memory leaks on error conditions
      s4:dcesrv_samr_EnumDomainUsers - make this call look more similar to "EnumDomainGroups" and "EnumDomainAliases"
      s4:dcesrv_samr_EnumDomainAliases - mostly small fixes
      s4:dcesrv_samr_EnumDomainAliases - return an empty array also when no entry was returned
      s4:dcesrv_samr_EnumDomainGroups - mostly small fixes
      s4:dcesrv_samr_QueryDomainInfo - allocate the "info" structure only when really needed
      s4:dcesrv_samr_QueryUserInfo - minor fixes
      s4:dcesrv_samr_QueryGroupInfo - make it more like "QueryAliasInfo"
      s4:dcesrv_samr_QueryAliasInfo - return "NT_STATUS_NO_SUCH_ALIAS" when it wasn't found
      s4:dcesrv_samr_EnumDomainGroups/Aliases - when we don't get a SID then the database is corrupted
      s4:dcesrv_samr_GetAliasMembership - provide a correct implementation
      s4:torture - SAMR testsuite - now we do support "GetAliasMembership" as expected
      s4:password_hash LDB module - fix comment
      s4:password_hash LDB module - this does really deactivate the MS LAN manager hash
      s4:dcesrv_samr_QueryGroupMember/GetMembersInAlias - unify the structure
      s4:dcesrv_samr_GetGroupsForUser - return error code if a SID wasn't found
      s4:fix allocated control OIDs for "password_hash" LDB module
      s4:SAMR server - on alias search operations do never use the domain DN as base dn
      s4:SAMR server - cosmetic fix
      s4:linked_attributes LDB module - cosmetics
      s4:linked attributes LDB module - strip trailing whitespaces
      s4:provision.py - we do now support the "Windows 2000 Native" domain function level
      s4:ldap.py - add another test about linked attributes
      s4:ldif_handlers.c - fix warning
      s4:dcesrv_netr_DsRAddressToSitenamesExW - fix the read of the IP packet version
      s4:torture/rpc/netlogon.c - activate "AddressToSitenames" tests which do run against s4
      s4:torture/rpc/netlogon.c - make sure that the address family is set in little endian in the "AddressToSitenames" tests
      s4:dcesrv_netr_DsRAddressToSitenamesExW - fix the detection of the address family in a better way
      s4:objectclass LDB module - move "mem_ctx" initialisation lower
      s4:ldap_backend.c - fix a small error (use "ModifyResponse" rather than "AddResponse")
      s4:ldap_backend.c - fix crash bugs when we got in error situations with "res" still set to "NULL"
      s4:cldap_server.c - here the counter variable should be "signed"
      s4:cldap_server/rootdse.c - simplify the code a bit
      s4:objectclass LDB module - handle the case when there is a retry to add the root basedn
      s4:objectclass LDB module - add an error message when someone tries to add entries without objectclasses
      s4:objectclass LDB module - add a better message when the parent DN is invalid
      s4:objectclass LDB module - use the old DN when displaying error messages
      s4:rootdse LDB module - refactor error messages
      s4:rootdse LDB module - Return "UNWILLING_TO_PERFORM" when no attribute fits on a change
      s4:rootdse LDB module - protect add and delete operations on the rootdse entry
      s4:rootdse LDB module - strip trailing whitespaces
      s4:objectclass LDB module - disable delete operations when "SYSTEM_FLAG_DISALLOW_DELETE" is specified
      ldb:python bindings - let also "py_ldb_delete" support controls
      ldb:python bindings - some small cleanup & improvements in "py_ldb_add"
      ldb:api.py - add a small test for the enhanced "py_ldb_delete" syntax
      s4:python/samba/__init__.py - now specify the "relax" control for the delete operation before the provision
      ldb:ldb_dn.c - don't support "ldb_dn_add_child" on a "" parent DN
      s4:ldap_backend.c - more customisations to match Windows Server error behaviour on renames
      s4:torture/ldap/basic.c - add more error code/messages tests
      s4:instancetype LDB module - "instanceType" is single-valued - MS-ADTS 3.1.1.5.2.2
      s4:ldap_controls.c - remove encoding functions for private recalculate SD control
      ldb:pyldb.c - some cleanups and adequations also in "py_ldb_modify" and "py_ldb_rename"
      ldb:pyldb.c - introduce a "mem_ctx" also on "py_ldb_search"
      s4:ldap_backend.c - add some newlines to make logs easier to read
      s4:samldb LDB module - remove "samldb_set_defaultObjectCategory"
      s4:python LDB __init__.py - remove completely unused "erase_partitions" call
      ldb:ldb.h - add classifications to the control declarations
      ldb:controls - add the "TREE_DELETE" control for allowing subtree deletes
      s4:dsdb - add a new dsdb delete function which understands the tree delete control
      s4:subtree_delete LDB module - now do support tree delete operations
      s4:ldap_backend.c - move function "ldb_mod_req_with_controls" to a better place in the code
      s4:ldap_backend.c - now also the LDAP server supports controls on delete operations
      s4:ldap.py - test subtree deletes through a new testcase
      s4:libpolicy - Solaris compatibility fix
      s4:libpolicy - fix printf output specifiers to suppress warning
      s4:rpc_server/service_rpc.c - deactivate the 0-length struct
      s4:rpc_server/service_rpc.c - fix warnings on Solaris
      s4:lsa_lookup.c - fix type argument
      s4:registry RPC server - quite some build warnings on Solaris
      s4:samr RPC server - fix Solaris build warning
      s4:registry/rpc.c - fix Solaris warnings by casts
      s4:registry/regf.c - add some casts to suppress build warnings on Solaris
      s4:kdc/db-glue.c - remove unreachable code
      s4:dsdb_load_partition_usn - free the right memory context (tmp_ctx)
      s3/s4 - remove "talloc_tos()" from common code since s4 doesn't support it
      s4:password_hash LDB module - fix another problem regarding the lanman hash
      s4:samr RPC server - make use of LDB constants in macros
      s4:operational LDB module - fix a misleading comment
      s4:libnet_join.c - always use LDB constants
      s4:setup/provision.reg - raise version to Windows Server 2008 R2
      s4:upgradeprovision - fix include order for "ldb"
      s4:provision_users.ldif - change a group description to be correct
      s4:provision.ldif - this Win2003 revision level seems always to be "9" on Windows Server 2008 machines
      s4:provision.ldif - fix the number of available RIDs
      s4:auth/gensec/gensec_gssapi.c - reorder constructor
      Revert "s4:provision.ldif - fix the number of available RIDs"
      s4:lib/registry/ldb.c - cosmetic - wrap lines
      s4:lib/registry/ldb.c - cosmetic - fix comment
      s4:provision.py - fix comment regarding DNS entries
      s4:kdc/kpasswdd.c - remove unreachable code
      s4:kdc/kdc.c - add cast to suppress warnings on Solaris 10 cc
      s4:winbind/wb_samba3_protocol.c - add cast to suppress warnings on Solaris 10 cc
      s4:rpc_server/dcesrv_auth.c - remove unreachable code
      s4:rpc_server/drsuapi/drsutil.c - remove unreachable code
      s4:lsa/lsa_lookup.c - use a better type for the "rtype" of the wellknown SIDs
      s4:rpc_server/lsa/dcesrv_lsa.c - remove unreachable code
      s4:rpc_server/wkssvc/dcesrv_wkssvc.c - remove unreachable code
      s4:rpc_server/srvsvc/dcesrv_srvsvc.c - remove unreachable code
      s4:torture/rpc/samr.c - test_SetPassword_LastSet - fix "pwdLastSet" test
      s4:samr_password.c - add a function which sets the password through encrypted password hashes
      s4:OemChangePasswordUser2 - return "NT_STATUS_WRONG_PASSWORD" when we haven't activated the the lanman auth
      s4:dcesrv_samr_SetUserInfo - implement case 18 which allows to reset the user password
      s4:dcesrv_samr_SetUserInfo - implement password set level 21
      s4:dcesrv_samr_SetUserInfo - port the "SAMR_FIELD_LAST_PWD_CHANGE" check from s3 to s4
      s4:dcesrv_samr_SetUserInfo - deny operations when "fields_present" is 0
      s4:dcesrv_samr_SetUserInfo - implement right "pwdLastSet" behaviour
      s4:selftest - activate the lanman password changes
      s4:torture - SAMR password tests - activate support for password sets on level "18" and "21"
      s4:torture/rpc/samr.c - test_SetPassword_LastSet - introduce the delays also for s4
      s4:knownfail - "pwdLastSet" test does work now
      s4:lsa RPC server - Fix up "dcesrv_lsa_DeleteObject"
      s4:selftest - also "rpc.samr.users.privileges" does work now
      s4:dcesrv_drsuapi.c - fix a counter variable
      s4:acl LDB module - fix counter type
      s4:repl_meta_data LDB module - fix counter type
      s4:auth/sam.c - "authsam_expand_nested_groups" - use "dsdb_search_dn" where possible
      s4:auth/sam.c - "authsam_expand_nested_groups" - cosmetic/comments
      s4:auth/sam.c - "authsam_expand_nested_groups" - small performance improvement
      s4:lib/registry/ldb.c - change the "ldb_get_value" implementation to use the value cache and not an LDB lookup
      s4:lib/registry/ldb.c - retrieve the classname correctly in "ldb_get_subkey_by_id"
      s4:lib/registry/ldb.c - remove really useless "local_ctx"
      s4:lib/ldb/registry.c - handle the classname in the right way
      s4:lib/registry/ldb.c - fix memory handling in "ldb_open_key"
      s4:lib/registry/ldb.c - add a missing brace
      Revert "s4/auth: Fixed authsam_expand_nested_groups() to find entry SID if not available in the DN."
      Revert "s4/dsdb: Fixed partition_search() not to pass special DN's to LDAP backend."
      ldb:ldb_dn - "ldb_dn_explode" - move the "dn->comp_num" initalisation upwards and use "LDB_FREE" for freeing "dn->components"
      s4:ldb_dn.c - make the code parts which free extended components consistent
      ldb:ldb_dn.c - "ldb_dn_set_extended_component" - free the linearized string when the components change
      s4:ldb - "ldb_dn_update_components" - fix free of invalid DN parts
      ldb:ldb_modules.c - "ldb_dso_load_symbol" - remove unneeded caste before "dlsym"
      ldb:ldb_map_outbound.c - "ldb_parse_tree_collect_attrs" - remove unneeded return value
      s4:dsdb/new_partition.c - remove the "ldb_next_request" call which we find also below the "if" block
      s4:smb_server/blob.c - remove unused code
      s4:smb_server/smb2/find.c - remove unused code
      s4:rpc_server/browser.c - remove unused code
      s4:ntp_signd/ntp_signd.c - add casts to suppress warnings on Solaris 10
      s4:ntvfs/ipc/vfs_ipc.c - add casts to suppress warnings on Solaris 10
      s4:ntvfs/ipc/vfs_ipc.c - remove unused code
      s4:auth/session.c - suppress a warning when freeing "group_string"
      s4:lib/registry/ldb.c - "ldb_add_key" - fix talloc handling
      s4:lib/registry/ldb.c - use "ldb_path" rather than "ldap_path" as LDB key varibale identifiers
      s4:lib/registry/ldb.c - refactor "reg_path_to_ldb"
      s4:lib/registry/local.c - support recursive key generation
      s4:registry - on key add operations we have to handle with paths not always only a name
      s4:lib/registry/tests/registry.c - test recursive key generation
      s4:registry - move some common constraint checks to the "local" backend
      s4:lib/registry/ldb.c - free some "msg" objects earlier through explicit "talloc_free"s
      s4:dsdb/tests/python/passwords.py - add the right result codes for user password changes
      s4:dsdb/tests/passwords.py - set and reset the "minPwdAge" properly
      s4:blackbox/test_passwords.sh - perform also here the adaptions for "minPwdAge" != 0
      s4:pwsettings net utility - change also here the "minPwdAge" to be the real default
      s4:setup/provision_basedn_modify.ldif - set "minPwdAge" to the right value
      s4:schema_load.c - jump to "failed" on an error condition
      s4:schema_set.c - fix typo
      s4:dsdb_module_load_partition_usn - check for "res->count" equal/unequal to 1
      s4:dsdb_schema_set_attributes - remove unneeded filter criterias
      s4:schema_set.c - Fix a comment
      s4:schema_load LDB module - fix a segfault condition on schema refresh
      s4:urgent_replication.py test - remove unneeded "relax" control parameters
      s4:dsdb/tests/python/ldap_schema.py - remove a now useless "schemaUpdateNow" request
      s4:kinit blackbox test - set/reset also here the "minPwdAge"
      s4:torture/rpc/samlogon.c - provide a function which sets and afterwards resets the minimum password age
      s4:torture/rpc/samlogon.c - strip trailing whitespaces
      s4:libnet - add missing "talloc_free"s for "c" contexts on "recv" operations
      s4:wb_cmd_list_groups.c - indentation and comment fixes
      s4:wb_cmd_list_groups.c - don't crash when we don't get any group at all
      s4:subtree_delete LDB module - fix comments and add my copyright
      s4:subtree_rename LDB module - Cosmetic fixes
      samr.idl:UserInfo structures - fix some names according to MS-SAMR documentation
      s4:samr RPC server - "SetUserInfo" - allow some more informations to be set
      s4:winbind/wb_cmd_setpwent.c - fix a possible crash condition in the "winbind struct test"
      s4:include/smbldap.h - introduce a placeholder for "LDAPMessage" if we don't link against a LDAP library
      s4:dsdb - samdb_result_force_password_change - also when "pwdLastSet" is "-1" we shouldn't force a password change
      s4:SAMR rpc server - "QueryUserInfo" - send back the password expired flag on level 21
      s4:SAMR rpc server - "SetUserInfo" - fix the implementation of the expire flag
      s4:new_partition LDB module - fix an uninitalised variable warning
      s4:samdb.py - "setpassword" - performs password sets using the "unicodePwd" attribute
      s4:drsuapi RPC server - "result_site_name" - fix variable denomination
      s4:acl LDB module - move a "mem_ctx" creation to the place where it is actually checked
      s4:acl LDB module - password attributes - check also the "dBCSPwd" attribute
      ldb:common/ldb_dn.c - "ldb_dn_get_parent" - no need to manipulate the real DN
      s4:dcesrv_netr_LogonGetDomainInfo - improve the client OS informations update
      s4:torture/winreg.c - add a FIXME comment on a codepart which isn't standard C-compatible
      s4:torture/winreg.c - remove unreachable code
      s4:torture/winreg.c - fix warnings of Solaris 10 cc through the appropriate casts
      s4:subtree_rename LDB module - "subren_ctx_init" - fix the "out of memory" return
      s4:dsdb/pydsdb.c - import "systemFlags" into Python
      s4:subtree_rename LDB module - introduce the "systemFlags" protection rules
      s4:ldap.py - performs some "systemFlags" testing
      s4:dsdb/samdb/ldb_modules/util.c - remove unused variables
      s4:subtree_rename LDB module - introduce out of memory checks
      s4:subtree_rename LDB module - rename "check_system_flags" into "check_constraints" and perform more checks
      s4:ldap.py - add a test for "CN=System" object rename behaviour
      s4:objectclass LDB module - implement additional delete constraint checks
      s4:ldap.py - perform tests on the additional delete constraint checks
      s4:urgent_replication.py test - adapt the test for the harder delete restrictions
      s4:acl LDB module - remove unused call "is_root_base_dn"
      s4:acl LDB module - remove the "forest DN" check
      s4:descriptor LDB module - remove the "forest DN" check
      s4:objectclass LDB module - consider the "instanceType" when adding NCs
      s4:instancetype LDB module - add checks requested by MS-ADTS 3.1.1.5.2.2
      s4:ldap.py - additional "instanceType" checks
      s4:ldap.py - remove superflous spaces
      s4:LDB modules - remove the "kludge_acl" module code
      s4:objectclass LDB module - "add" operation - free "mem_ctx" as soon as possible
      s4:objectclass LDB module - "add operation" - deny multiple "objectclass" message elements
      s4:objectclass LDB module - "add operation" - move two checks
      s4:objectclass LDB module - "add operation" - reject creation of LSA specific objects
      s4:dsdb/common/util.c - add a function "dsdb_add"
      s3:dcesrv_lsa.c - use the RELAX control in order to create LSA objects
      s4:urgent_replication.py - relax also here the add of a secrets object
      s4:ldap.py - proof for the impossibility to add a LSA-specific object over LDAP
      s4:objectclass LDB module - "add operation" - implement "objectCategory" validation
      s4:ldap.py - test for an invalid "objectCategory" attribute
      s4:objectclass LDB module - "add operation" - enhance and clean the "systemFlags" section
      s4:ldap.py - test the new "systemFlags" constraint
      s4:ldap.py - comment a test part which fails with another error code on Windows
      s4:kcc_connection.c - fix typo in error message
      s4:dsdb/common/util.c - use LDB constants whenever possible
      libds/common/flags.h - fix a comment's typo
      s4:dsdb/common/util.c - provide a call which returns the forest function level
      s4:objectclass LDB module - weak the check for the "rIDSet" delete constraint
      s4:torture/rpc/samr.c - fix a wrong torture error message
      s4:passwords.py - perform testing of wrong old passwords on change operations
      s4:passwords.py - test the error code when there doesn't exist any password yet
      s4:password_hash LDB module - fix wrong error codes
      s4:password_hash LDB module - implement the SAMR behaviour when checking old passwords
      s4:password_hash LDB module - improve an error message
      s4:samdb_set_password - return "NT_STATUS_WRONG_PASSWORD" when a user account doesn't exist
      talloc:documentation - explain that "talloc_free" works also with "NULL" pointers
      s4:libnet - free the "c" context also on error conditions
      werror.h - fix order and duplicate DS error codes
      s4:ldap_backend.c - fix a DS error code after WERROR change
      s4:subtree_rename.c - relax the checks when requested
      s4:ldap_backend.c - map error codes - add a change which allows custom WERROR codes
      s4:ldap_backend.c - Windows returns WERROR codes in majuscule HEX format
      s4:password_hash LDB module - allow to compare against both NT and LM hashes on password change operations
      s4:passwords.py - another special password test
      s4:password_hash LDB module - support this new password set syntax
      s4:password_hash LDB module - introduce the extended LDAP error codes on the important failure cases
      s4:samdb_set_password - implement the extended LDAP error code detection
      s4:passwords.py - proof the most important extended error codes
      s4:samdb_set_password - fix formatting
      s4:samdb_set_password_sid - fix comment
      s4:DSDB - rename the "DSDB_CONTROL_PASSWORD_CHANGE_OLD_PW_CHECKED_OID"
      s4:DSDB - DSDB_CONTROL_PASSWORD_CHANGE_OID - add a structure as value to the control
      s4:acl LDB module - support password changes over the DSDB_CONTROL_PASSWORD_CHANGE_OID control
      s4:password_hash LDB module - perform the adaptions to understand the new password change control
      s4:samdb_set_password/samdb_set_password_sid - make the adaptions to support the password change control
      s4:samdb_set_password/samdb_set_password_sid - make more arguments "const"
      s4:kdc/rpc server - adapt the "samdb_set_password" calls which perform password sets
      s4:samr RPC server - samr_password.c - make real user password changes work
      s4:kdc/kpasswdd.c - let the user change his own password with his own rights
      s4:netlogon RPC server - "ServerPasswordSet" operations - introduce also here the new password change syntax
      s4:getncchanges.c - fix some counter variable types
      s4:dsdb_module_find_dsheuristics - free the "DN" also on other exit cases
      s4:ntlm/auth.c - add a whitespace in a debug output
      libcli/auth/ntlm_check.c - fix parameter indentation
      s4:credentials_krb5.c - quiet a Solaris warning
      s4:ntvfs/posix/pvfs_*.c - quiet Solaris warnings
      s4:torture/raw/notify.c - freeable stuff shouldn't be "const"
      s4:torture/spoolss_access.c - fix discarded const warning
      s4:torture/rpc/winreg.c - set "error_message" to NULL in "test_HKLM_wellknown"
      s4:libcli/security/*.c - fix some wrong typed counters
      s4:torture/rpc/winreg.c - restore Solaris cc compatibility
      s4:client/cifsdd.c - restore Solaris cc compatibility
      s4:getncchanges_change_master - also in this call "i" needs to be unsigned
      s4:torture/rpc/winreg.c - hopefully this attempt fixes Solaris "cc" on the buildfarm
      s4:torture/ntp/ntp_signd.c - add more "char *" casts in order to suppress Solaris warnings
      s3/s4:libcli/tstream - add more "char *" casts in order to suppress Solaris warnings
      s4:libcli/wrepl/winsrepl.c - add more "char *" casts in order to suppress Solaris warnings
      s4:torture/locktest.c - add a cast in order to quiet a warning on Solaris cc
      s4:lib/policy/gp_filesys.c - remove dead code
      s4:client/client.c - fix wrong return codes in "do_connect"
      lib/replace:wscript - attempt to fix the features detection on Tru64
      lib/replace:wscript - don't check twice for type "bool"
      lib/replace:wscript - additional attempt to fix the build on Tru64
      libcli/auth/schannel_state_tdb.c - fix includes
      s4:dcesrv_samr_GetGroupsForUser - also universal group memberships are returned here
      lib/replace/wscript:Tru64 build - Better use version 600 for _XOPEN_SOURCE
      s4:ldb_register_samba_handlers - fix up and convert result codes to LDB/LDAP results
      ldb:tools/cmdline.c - make a counter unsigned where appropriate
      s4:rpc_server/common/common.h - introduce two forward declarations to suppress parameter declaration warnings
      s4:param/secrets.c - reorganise imports
      ldb:tools/cmdline.c - reorganise imports
      test_wbinfo.c - count more possible failures
      s4:fsmo.py - fix an obvious typo
      s4:samldb LDB module - make "samldb_check_sAMAccountName" synchronous again
      s4:samldb LDB module - rename "check_SamAccountType" into "check_sAMAccountType"
      s4:samldb LDB module - use also here the real attribute denomination "sAMAccountName"
      s4:samldb LDB module - get rid of the SID context variable
      s4:samldb LDB module - refactor the "primaryGroupID" check on user creation
      s4:samldb LDB module - refactor "samldb_find_for_defaultObjectCategory" to be again synchronous
      s4:samldb LDB module - add a comment to mark the beginning of the extended operation handler
      s4:samldb LDB module - move "samldb_prim_group_users_check" more down to see that it is only in use by the delete operation
      s4:samldb LDB module - simplify the message handling on add and modify operations
      s4:samldb LDB module - free the "ac" context after the delete checks
      libds:flag_mapping.c - fix counter variable types
      libds:flag_mapping.c - introduce a call which maps the "userAccountControl" to the default primary group RID
      s4:samldb LDB module - "samldb_check_primaryGroupID" - support RID derivation from "userAccountControl"
      s4:setup/provision_self_join.ldif - now the samldb LDB module detects automatically that this is a DC account
      s4:ldap.py - tests the primary group detection by the "userAccountControl"
      s4:util_samr.c - also here we've now the default primaryGroupID detection working
      s4:torture/rpc/samr.c - fix typos in outputs
      Revert "s4:util_samr.c - also here we've now the default primaryGroupID detection working"
      s4:samldb LDB module - remove a disastrous "talloc_free"
      Revert "s4:samldb LDB module - simplify the message handling on add and modify operations"
      testdata/samba3/provision_samba3sam.ldif - update also here the maximum domain controller functionality
      s4:cosmetic - the SID attribute is called objectSid - not objectSID
      s4:SID handling - always encode the SID using "ldap_encode_ndr_dom_sid" for LDAP filters
      s4:libcli/resolve/file.c - fix "const" warning
      s4:rpc_server/dcerpc_server.c - fix a "const" warning
      s4:drepl_out_helpers.c - fix a counter type
      s4:extended_dn_in LDB module - fix a counter type
      s4:rootdse LDB module - fix counter types
      ldb:ldb_msg_add_linearized_dn - handle NULL DNs
      ldb:ldb_match.c - fix counter variable type
      s4:password_hash LDB module - don't assign "lp_ctx" twice
      s4:rootdse LDB module - fix comment typo
      s4:rootdse LDB module - make more use of LDB result constants
      s4:python/samba/join.py - use constant for DC function level
      s4:python/samba/join.py - add a comment to point out that NCs have to be assigned dynamically
      libds:flag_mapping.c - support also the default read-only DC primary group
      s4:ldap.py - enhance SAM user/groups behaviour test regarding default primary groups
      s4:samldb LDB module - support the "userAccountControl" -> "primaryGroupID" detection also on modify operations
      s4:ldap.py - test default primary groups on modify operations
      s4:dsdb/common/util_samr.c - remove the primary group specifications
      s4:samldb LDB module - it isn't allowed to create user/computer accounts with a primary group specified
      s4:provision.py - make more use of "names.serverdn" on NTDS settings location
      s4:provision.py - support still not fully provisioned trees regarding the rootDSE module
      s4:torture/rpc/netlogon.c - remove the dependency on "samdb_server_site_name"
      s4:rootdse LDB module - better that the "edn" control handling is done last
      s4:rootdse LDB module - remove "priv" checks where not needed
      s4:rootdse LDB module - make "serverName" dynamic
      s4:provision - rootdse - remove the static attribute "serverName"
      s4:rootdse LDB module - introduce dynamic "dnsHostName" attribute
      s4:provision - rootdse - remove static "dnsHostName" attribute
      s4:rootdse LDB module - introduce dynamic "ldapServiceName"
      s4:provision - rootdse - remove static "ldapServiceName" attribute
      s4:ldap.py - add tests for the "dsServiceName", "serverName", "dnsHostName" and "ldapServiceName" rootDSE attributes
      s4:rootdse LDB module - make use of "dsdb_forest_functional_level"
      s4:lazy_commit LDB module - the "show_deleted" control is initialised by the "show_deleted" LDB module
      s4:repl_meta_data - also on delete operations the new RDN attribute has to be casefolded correctly
      s4:libcli/resolve/dns_ex.c - fix "const" warning
      s4:schema_samba4.ldif - update allocated controls list
      s4:getncchanges.c - fix some counter types
      s4:acl_read LDB module - fix counter type
      s4:ldap.py - fix "system only" test
      s4:ldap.py - delete the right object after test completition
      s4:dsdb_dn_val_rmd_flags - memmem - scan the whole string for occourences
      s4:objectclass LDB module - fix the delete behaviour of server containers
      s4:objectclass LDB module - fix the "crossRef" delete protection
      s4:subtree_delete LDB module - it is only responsible for non-deleted objects
      s4:repl_meta_data LDB module - consider the SYSTEM_FLAG_DISALLOW_MOVE_ON_DELETE flag
      s4:show_deleted LDB module - also support the "show_recycled" control
      s4:subtree_rename LDB module - also already deleted objects have to be renamed
      s4:dsdb/common/util.c - introduce "DSDB_SEARCH_SHOW_RECYCLED" flag
      s4:dsdb - substitute the "show_deleted" with the "show_recycled" control
      s4:dsdb python stuff - introduce also here the "show_recycled" control
      s4:ldap.py - remove the delete tests
      s4:deletetest.py - enhance the tests
      s4:patchfile_dotreg.c - use "size_t" when counting characters in DATA_BLOBs
      s4:urgent_replication.py - fix up the system flags handling
      s4:objectclass LDB module - introduce allowed system flags restriction
      s4:ldap.py - test allowed system flags restriction
      s4:kdc/db-glue.c - remove unused variable
      s4:dsdb/common/util.c - change the usage of the RECYCLED control
      s4:ldb_modules.c - fix a typo
      s4:kdc - use "userAccountControl" always unsigned
      s4:samldb LDB module - assign better memory contexts on two places
      s4:samldb LDB module - simplify/unify the message handling on add and modify operations
      s4:setup/provision_rootdse_add.ldif - provide informations in the right order
      s4:subtree_delete LDB module - remove the DN from an error message
      s4:samldb LDB module - remove "type" parameter of "samldb_fill_object"
      s4:dsdb/common/util.c - provide message set functions for integer types
      s4:dsdb/common/util_samr.c - use an LDB constant for result checking
      s4:ldap.py - split it up and move SAM related stuff to sam.py
      ldb:ldb_match.c - fix a counter type
      s4:samldb LDB module - first implementation of the samldb objectclass trigger
      s4:samldb LDB module - use the new "objectclass_trigger" for add operations
      s4:samldb LDB module - first implementation of the samldb primary group trigger
      s4:objectclass LDB module - deny the creation of "isCriticalSystemObject" entries
      s4:samldb LDB module - deny also the direct modification of "isCriticalSystemObject" on modify operations
      s4:setup/provision_self_join.ldif - let the samldb LDB module fill in "isCriticalSystemObject"
      s4:ldap.py - test the "isCriticalSystemObject" behaviour
      s4:samldb LDB module - support the group type changing properly
      s4:sam.py - add a test for the group type changing behaviour
      s4:samldb LDB module - proof the account type also on LDB modify operations
      s4:samldb LDB module - deny creation of temporary duplicate accounts
      s4:sam.py - tests for "userAccountControl" attribute
      s4:samldb LDB module - cosmetic fixups
      s4:samldb LDB module - attempt to fix integer handling on big-endian platforms
      s4:dsdb - remove "samdb_result_uint", "samdb_result_int64", "samdb_result_uint64" and "samdb_result_string"
      s4:dsdb - remove "samdb_msg_add_value"
      s4:libds/common/flags.h - fix typo
      s4:dsdb/common/util.c - samdb_msg_add_string - the attribute name doesn't need to be duplicated
      s4:dsdb/common/util.c - samdb_msg_add_* calls - proof for more OOM conditions
      s4:samdb_create_foreign_security_principal - proof error code of "samdb_msg_add_string"
      s4:samldb LDB module - cosmetic - use "ldb" variable rather than "ldb_module_get_ctx"
      s4:lsa RPC server - use LDB result constant
      s4:libnet_samsync_ldb.c - use LDB result constants
      s4:ntptr/ntptr_simple_ldb.c - use LDB result constants
      s4:lib/registry/util.c - strtoll call - better say explicitly that data is in hex format
      s4:lib/registry/util.c - cosmetic - fix indentation, trailing whitespaces
      s4:samdb_msg_add_int* - use "ldb_msg_add_string" rather than "samdb_msg_add_string"
      s4:torture/local/dbspeed.c - use LDB result constant
      s4:dsdb/common/util.c - describe the behaviour of the functions "samdb_msg_add_uint", "samdb_msg_add_uint64" and "samdb_msg_set_uint" a bit more
      s4:dsdb - fix unsigned integer save problems using the "%u" specifier
      s4:ldif_handlers.c - fix a typo
      s4:objectclass LDB module - implement the "isCriticalSystemObject" subtree delete protection
      s4:samba3sid LDB module - handle the RID as uint32_t
      s4:dsdb/samdb/ldb_modules/util.c - remove now unused functions which set integers
      s4:samldb LDB module - use appropriate fixed-length integer types where needed
      ldb:"ldb_dn_canonical" - use an "unsigned int" counter
      ldb:"ldb_dn_remove_base_components" - use an "unsigned int" counter
      ldb:"ldb_dn_add_child" - use "unsigned int" counters
      ldb:"ldb_dn_compare_base" - use "unsigned int" counters
      ldb:pyldb.c - remove pointless comment
      ldb:ldb.h - reorder controls/extended operations
      s4:libcli/ldap/ldap_controls.c - fix up the controls list
      s4:dsdb - make the RELAX control private
      s4:"wrap_casefold" - move it to "ldb_wrap.c" since it's only used there
      s4:ldb-samba/ldb_wrap.c - fix indentation and trailing whitespaces
      s4:lib/util/util_ldb.c - remove unused "gendb_add_ldif" call
      s4:remove "util_ldb" submodule and integrate the three gendb_* calls in "dsdb/common/util.c"
      Revert "s4:remove "util_ldb" submodule and integrate the three gendb_* calls in "dsdb/common/util.c""
      s4:"util_ldb" - remove some really unused dependancies
      ldb:ldb_tdb.c - improve the error outputs
      ldb:ldb_tdb.c - fix up counter variables
      ldb:"ldb_schema_attribute_by_name_internal" - switch back to 32bit counters
      ldb: always return PROTOCOL_ERROR if an operation is unsupported
      s4:ldap_server - use error code constant
      s4:samdb.py - use a more standard way to get to the domain realm/dns name
      s4:samdb.py - remove a pointless comment
      s4:dsdb/schema/schema_init.c - remove a duplicated "talloc_free"
      ldb:"ldb_schema_attribute_by_name_internal" - support the whole unsigned int range
      s4:nbt_server - fix a LDB counter type
      libcli/security/access_check.c - fix a memory leak
      ldb:ldb_pack.c - remove superflous "message->elements = NULL"
      ldb:ldb_tdb submodule - use "ldb_msg_new" where appropriate
      ldb:ldb_cache.c - fix memory contexts and memory leaks
      ldb:ldb_index.c - let "ldb_module_oom" generate the return code
      ldb:ldb_index.c - fix some memory leaks
      s4:lib/util/charset/iconv.c - remove a distinction which can never happen
      ldb:ldb_tdb/ldb_cache.c - in this function we don't use LDB return codes
      ldb:ldb_tdb/ldb_cache.c - remove a superflous "talloc_free"
      ldb:ldb_modules.c - if we don't find the associated dynamic object then please close the handle
      ldb:ldb_modules.c - "dlclose" could cause inference on "dlerror"
      tdb: commit the version 1.2.7 signatures
      s4:dns_server - fix counter types
      ldb:rename LDB_CONTROL_BYPASSOPERATIONAL_OID into LDB_CONTROL_BYPASS_OPERATIONAL_OID
      s4/ldb:introduce the LDB_CONTROL_PROVISION_OID control
      ldb:ldb.h - include a comment that the relax control is mainly used by the OpenLDAP backend
      s4:schema.py - reformat and fix the security descriptor
      s4:provision.py - add the correct "CN=Sites" security descriptor
      create_descriptor.c - fix comment
      s4:dsdb - use the more safe "samdb_msg_add_(u)int*" calls always where possible
      s4:dsdb - use LDB results in "add_time_element" and "add_uint64_element"
      s4:dsdb - remove some calls of "samdb_msg_add_string" when we have talloc'ed strings
      s4:samldb LDB module - assign better memory contexts in some cases
      s4:samldb LDB module - use "uint32_t" for available krbtgt number
      s4:samldb LDB module - fix indentations
      s4:provision_*_references.ldif - "add" and do not "replace" the "wellKnownObjects"
      s4:objectclass_attrs LDB module - deny multi-valued replace requests
      s4:ldap.py - prove the denied multi-valued replace requests
      s4:samldb LDB module - other indentation fixes on error messages
      ldb:gendb_* calls: support a "NULL" resultset parameter
      s4:"samdb_search_count" - introduce a "mem_ctx" parameter
      s4:samr RPC server - remove a somewhat pointless comment
      s4:samr RPC server - "dcesrv_samr_info_DomGeneralInformation" - count always all type of groups
      s4:objectclass_attrs.c - rework to support these special "description" constraints
      s4:ldap.py - enhance and activate the "description" attribute test
      s4:samldb LDB module - enhance the "member"-check trigger
      s4:sam.py - enhance users and groups test
      s4:ldap.py - add a test for attribute ranges - still very basic
      librpc/ndr/ndr.c - fix some counter types
      s4:setup/schema_samba4.ldif - this control isn't used anymore
      s4:samr RPC server - remove wrong implementation of ReplicaSourceNodeName
      s4:samr RPC server - provide the right "ReplicaSourceNodeName"
      s4:samr RPC server - DomainGeneralInformation - never return NULL on the oem name
      s4:samr RPC server - fix indentation of function parameters
      s4:samr RPC server - fix trailing whitespaces
      s4:torture/rpc/samr.c - test the "ReplicaSourceNodeName" only against s3
      s4:torture/rpc/samr.c - fix NTTIME warnings by casts
      s4:extended_dn_store LDB module - fix counter types
      s4:partition_init LDB module - fix counter type
      s4:resolve_oids LDB module - fix counter types
      s4:local_password LDB module - fix typos
      s4:rpc_server/common.h - quiet compilation warnings
      s4:samldb LDB module - "member" trigger
      s4:sam.py - enhance "member" tests
      s4:samr RPC server - the LDB error codes for adding or deleting a group member have changed
      s4:samldb LDB module - adapt the "samldb_prim_group_change" trigger to support multiple "primaryGroupID" modification entries
      s4:sam.py - add a short double swap "primaryGroupID" test
      s4:samldb LDB module - primary group change - free temporary messages to save memory
      s4:samldb LDB module - add a new function which handles special cases for single-valued attribute on SAM modifications
      s4:samldb LDB module - make the "userAccountControl" and "groupType" modify handlers separate functions
      s4:drsuapi RPC server - fix counter variables
      s4:samldb LDB module - check for the number of results after a search operation
      s4:samldb LDB module - implement the "dNSHostName" - "servicePrincipalName" change trigger
      s4:sam.py - add a test for the "dNSHostName" - "servicePrincipalName" update mechanism
      s4:netlogon RPC server - point out that the "LogonGetDomainInfo" "servicePrincipalName" generation is still needed
      s4:dsdb/dns/dns_update.c - increase the timeout for the SPN and DNS update scripts
      s4:scripting/bin/samba_spnupdate - also support adding all possible "servicePrincipalName"s
      s4:setup/spn_update_list - reorder and update with other SPNs
      s4:provision - remove the "servicePrincipalName" creation on the DC object
      s4:libnet_join.c - only write the really essential SPNs
      s4:netlogon RPC server - "LogonGetDomainInfo" - always check the LDB return codes
      s4:samldb LDB module - validate "sAMAccountName" modifications
      s4:sam.py - test the "sAMAccountName" attribute
      ldb:tools/ldbtest.c - fix build warning
      s4:torture - suppress printf "%llu" on uint64_t variables warnings
      s4:provision - adapt the "provision" so that SIDs are only set on entry creation
      s4:samldb LDB module - deny "objectSid" modifications
      s4:samldb LDB module - unify objectSid assignment error messages
      s4:sam.py - test "objectSid" modification lockdown
      s4:ldap.py/sam.py - simplify the objectclass specifications
      s4:setup/spn_update_list - the DNS SPN is only used in DNS mode
      s4:samldb LDB module - "sAMAccountName" checker
      s4:samldb LDB module - support now the full "servicePrincipalName" update trigger
      s4:sam.py - additional testing for "servicePrincipalName" updates
      s4:samldb LDB module - the "sAMAccountName" cannot be substituted by nothing
      s4:RPC server - cosmetic fixes - indentation, comments
      s4:RPC server - always set the response pad data in base of the request one
      s4:objectguid LDB module - remove "objectguid_find_attribute"
      s4:objectclass_attrs LDB module - simplify the invoke of the "dSHeuristics" checker
      s4:objectclass_attrs LDB module - refactor the "dSHeuristics" checker
      s4:objectclass LDB module - the structural objectclass has always to be specified
      s4:objectclass_attrs LDB module - introduce the hardcoded delete-protected attributes list
      s4:samldb LDB module - improve the "get_single_valued_attr" call and move it into "ldb_modules/util.c"
      s4:sam.py - assign valid values when performing the special-attributes constraint checks
      s4:descriptor LDB module - a bit cleanup
      s4:ldap.py/passwords.py - just use objectclass "user" for users
      ldb:ldb.h - reorder extended operations list
      s4:password_hash LDB module - fix indentation
      s4:samr RPC server - "dcesrv_samr_RemoveMemberFromForeignDomain"
      ldb:ldb_tdb.c - make "ltdb_add" more similar to "ltdb_modify"
      ldb:ldb_tdb.c - ltdb_check_special_dn - fix indentation
      s4:operational LDB module - "canonicalName" doesn't make use of the "distinguishedName" attribute
      s4:update_keytab LDB module - we don't need to search for the "distinguishedName" attribute
      s4:ldap.py - enhance the "distinguishedName" tests
      ldb:ldb_parse.c - "ldb_parse_hex2char" - always initialise "c"
      s4:descriptor LDB module - don't ignore referrals if we are executing an ordinary external search operation
      s4:descriptor LDB module - remove a "ldb_msg_sanity_check" call
      s4:descriptor LDB module - remove a bit pointless memory context
      s4:descriptor LDB module - by "dsdb_next_callback" we don't need anymore the default operation callback implementations
      s4:descriptor LDB module - save a pointer to the request message on the temporary "ac" context
      s4:torture/dssync.c - remove unused variable
      ldb:ldb_pack.c - the "dn" attribute isn't allowed in the message part, only the "distinguishedName" one
      s4:ldb_modules/util.c - "dsdb_get_single_valued_attr" - support the attribute fetch also on LDB add operations
      s4:descriptor LDB module - make the "nTSecurityDescriptor" attribute fully behave as in AD
      s4:upgradeprovision - remove some "recalculate_sd" uses
      s4:objectguid LDB module - objectGUIDs cannot be specified on add operations
      s4:objectguid LDB module - fix typo in output message
      s4:ldap.py - add more "objectGUID" related tests
      s4:drsuapi RPC server - writespn.c - fix indentations
      s4:objectguid LDB module - make use of "dsdb_next_callback"
      s4:objectclass LDB module - no idea why we'd need the "objectGUID" here
      s4:objectguid/repl_meta_data LDB module - deny "objectGUID" updates
      s4:pydsdb.c - introduce Python 2.4 compatibility defines
      s4:pydsdb.c - use "Py_ssize_t" for Python list counters
      ldb:pyldb.c - fix indentation
      ldb:pyldb.c - use "Py_ssize_t" for counting list entries
      ldb:pyldb.c - fix some "Py_ssize_t" output warnings
      ldb:pyldb.c - most of the times "time_t" is defined as "long int"
      ldb:pyldb.c - "py_ldb_contains" - return only "0" not found, "1" found, "-1" error
      ldb:pyldb.c - "py_ldb_msg_element_get" - here we can safely use "unsigned int" for the element reference
      s4:passwords.py - add another two failure cases
      s4:acl LDB module - define the delete passwords special case a bit better
      s4:password_hash LDB module - clear the fact that a delete of password attributes isn't possible
      s4:samdb_msg_find_old_and_new_ldb_val - rework
      s4:password_hash LDB module - deleting password attributes is a little more complicated
      s4:passwords.py - test empty password attributes behaviour
      s4:pyldb.c - fix "py_ldb_contains" according to the comment by Jelmer
      s4:password_hash LDB module - introduce a "userPassword" flag which enables/disables the two "userPassword" behaviours
      s4:provision - switch to "clearTextPassword" for setting passwords
      s4:provision.py - strip trailing whitespaces
      s4:provision_self_join.ldif - the object SID in AD is called "objectSid"
      s4:python tests - fix script names in the help text
      s4:speedtest.py - make it executable
      s4:speedtest.py - fix script name in the help text
      s4:speedtest.py - remove duplicated code
      s4:speedtest.py - use "unicodePwd" for setting user's password
      s4:upgradehelpers.py - use "clearTextPassword" rather than "userPassword"
      s4:acl.py - two password change tests are expected to fails on Windows 2000 function level
      s4:selftest/tests.py - skip the "passwords.py" suite on Windows 2000 domain function level
      s4:ldb_modules/util.c - "dsHeuristics" -> "dSHeuristics"
      s4:local_password LDB module - remove schema checking code and fix some typos
      s4:libnet/libnet_samsync_ldb.c - remove "userPassword" remove code
      s4:password_hash LDB module - move "samdb_msg_find_old_and_new_ldb_val" into the password_hash LDB module
      s4:password_hash and acl LDB modules - handle the "userPassword" attribute according to the "dSHeuristics"
      s4:passwords.py - add a test for the normal "userPassword" behaviour
      s4:objectclass LDB module - allow RDNs also to come from superclasses
      s4:dsdb - proof against empty RDN values where expected
      ldb:ldb_ldap.c rename operation - check for the RDN name and value
      s4:pytevent.c - fix a discard const warning
      s4:samldb/objectclass_attrs LDB modules - move "description" logic from "objectclass_attrs" into "samldb"
      s4:repl_meta_data LDB module - convert two debug messages into error messages
      s4:objectclass LDB module - we should not simply ignore additional "objectClass" attribute changes
      s4:objectclass LDB module - multiple "objectClass" change elements are unfortunately still allowed
      s4:upgradeprovision - why not directly use "provision:0"?
      s4:password_hash LDB module - return "ERR_CONSTRAINT_VIOLATION" on password conversion errors
      s4:objectclass LDB module - implement the "objectClass" change restrictions on Windows 2000 forest function level
      s4:objectclass LDB module - improve the default name context checking on modifications
      s4:torture/basic/base.c - fix output warnings regarding "time_t"
      s4:heimdal - fix the return code of a non-void function
      s4:objectclass LDB module - free "nc_root" after name context comparisons
      s4:subtree_rename LDB module - make use of "dsdb_find_nc_root"
      s4:objectclass LDB module - the "olddn" is the special DN for rename requests
      s4:descriptor LDB module - make more clear that special control entries never should be handled by modules
      s4:"dsdb_find_nc_root" - let it work also when the "namingContexts" attribute isn't available yet
      s4:descriptor LDB module - handle the NCs in a more generic way by using "dsdb_find_nc_root"
      s4:descriptor LDB module - also "get_default_ag" should make use of "dsdb_find_nc_root"
      s4:acl LDB module - use also here "dsdb_find_nc_root" to implement the NC-specific checks
      ldb:ldb_dn.c - ldb_dn_explode - free also the extended components on error cases
      ldb:ldb_dn_explode - point out that on error cases "data" is implicitly free'd
      s4:api.py - DN tests - test a bit more special DNs and merge the comparison tests
      s4:repl_meta_data LDB module - allow also special DNs to be renamed correctly
      s4:password_hash LDB module - remove unused headers
      ldb:skel.c - don't introduce trailing whitespaces by a module template
      s4:dsdb python tests - use "ldb.domain_dn"
      Revert "s4:api.py - DN tests - test a bit more special DNs and merge the comparison tests"
      s4:dsdb tests - use even more already defined pyldb functions to retrieve NCs
      s4:torture/ldb/ldb.c - add a small test for a DN with an escaped comma
      s4:netlogon/LogonGetDomainInfo - handle a NULL "dns_hostname"
      ldb:ldb_rename on ldap backends - handle the case when the RDN value is empty
      ldb:rdn_name LDB module - add more RDN name constraints
      s4:acl LDB module - it's more correct to count the password attributes using "unsigned int"
      s4:samldb LDB module - objectclass trigger - reorder template attributes
      s4:objectclass_attrs LDB module - add more delete protected attributes
      s4:repl_meta_data LDB module - move the "objectGUID" checks a bit higher
      s4:repl_meta_data LDB module - fix a counter type
      waf:lib/util - add missing dependency on talloc
      s4:provision_rootdse_add.ldif - add all possible LDAP policy values but outcommented for the moment
      s4:objectclass LDB module - some more or less cosmetic return value macro changes
      s4:objectclass LDB module - move one checks into the "objectclass derivation loop"
      s4:objectclass LDB module - LSA objects - allow them if the SYSTEM control is specified
      s4:lsa RPC server / objectclass LDB module - fix the creation of trusted domain objects
      s4:objectclass LDB module - move the "mem_ctx" allocation to a better place
      s4:objectclass LDB module - simply use "msg" when requesting the message
      s4:rootdse LDB module - remove unused variable
      s4:torture/drs/python/fsmo.py - fix comments and an error message
      s4:dsdb/tests/python/sam.py - we don't need the domain SID
      s4:dsdb tests - make use of "ldb.get_domain_sid()"
      s4:samba3sam LDB module - make the "pw_uid"/"pw_gid" conversion a bit clearer
      s4:samba3sam LDB module - correctly print out an unsigned value
      s4:role transfer - use always type "enum drepl_role_master" for role specifications
      tdb:tdbstore.c - remove an useless '\'
      MAINTAINERS.txt - fix typo
      s4:dsdb/samdb/samdb.h - fix include ordering in order to prevent warnings on Tru64
      s4:libcli/security/session.h - fix include ordering for "enum security_user_level"
      Revert "s4:rpc_server/common/common.h - introduce two forward declarations to suppress parameter declaration warnings"
      s4:wkssvc RPC server - better solution for srvsvc* enum's in server_info.c
      s4:param/secrets.h - fix "enum netr_SchannelType" include correctly
      s4:drsuapi RPC server - fix "enum security_user_level" warning on Tru64
      s4:torture/rpc/samsync.c - remove uninitialised "nt_status" check
      s4:torture/rpc/samr.c - fix uninitialised "status" variables
      s4:lib/registry/rpc.c - remove a duplicate assignment
      s4:dsdb/repl/drepl_out_helpers.c - print out the correct error message (werr)
      s4:drepl_service.c - fix error macro (use "_werr" and not "werr")
      s4:dsdb/repl/drepl_service.c - return the correct WERR result
      tdb:common/open.c - use "discard_const_p" for certain "tdb->name" assignments
      s4:netcmd/drs.py - use "objectClass" for discovering the server and it's NTDS settings object
      s4:dsdb/repl/drepl* - move "lib/messaging/irpc.h" include into "drepl_service.h"
      replace:wscript - change the "bool" checks to be compatible with more platforms
      Revert "s4:netcmd/drs.py - use "objectClass" for discovering the server and it's NTDS settings object"
      replace:wscript - reintroduce the size check for "bool" due to a request of metze
      replace:wscript - change the "bool" checks to be compatible with more platforms
      replace:wscript - reintroduce the size check for "bool" due to a request of metze
      s4:introduce casts before outputs of "time_t" variables
      s4:torture/smb2/acls.c - remove two unused variables
      s4:auth/gensec/gensec_gssapi.c - always print error messages on the same talloc context
      s4:param/pyparam_util.c - remove unused include
      heimdal:base/heimbase.c - remove an unused variable
      s4:auth/ntlmssp/ntlmssp_server.c - remove unnecessary ";"
      s4:torture - remove unreachable statements to quiet warnings of Solaris "cc"
      libcli/security/object_tree.c - remove unreachable statement
      s4:dns_server/dns_update.c - remove unreachable statements
      s4:dcesrv_drsuapi RPC server - remove unreachable statement
      s4:wrepl_server - remove unreachable statement
      s4:auth/gensec/gensec_tstream.c - quiet warnings on Solaris "cc"
      s4:lib/tls/tls_tstream.c - quiet warning on Solaris "cc" by casts
      s4:wrepl_server - add a cast on "iov_base"
      s4:torture - prefer the termination "return"s at the end of two unittests
      s4:torture - partially revert "s4:torture - prefer the termination "return"s at the end of two unittests"
      s4:ranged results LDB module - "rr_search_callback" - change some memory context
      s4:ranged results LDB module - cosmetic - fix some indentation
      ldb:ldb_msg_add_value - fix here a wrong memory context
      s4:dsdb/common/util.c - "samdb_msg_add_add/delval" - introduce also here the better memory context
      s4:dsdb/repl/replicated_objects.c - proof if "talloc_reference" doesn't return NULL
      s4:password_hash LDB module - allow empty ("") passwords
      s4:dsdb/samdb/cracknames.c - fix various KRB5 memory leaks
      s4:auth/sam.c-"authsam_expand_nested_groups" - don't fail if we've memberships on non-SAM objects
      s4:auth/sam.c - specify the SID ignore case better
      s4:auth/sam.c - fix the free of memory contexts
      s4:auth/sam.c - the check for the SAMDB needs to be on the top of the call
      s4:auth/sam.c - when printing out a string buffer we don't strictly need the width
      s4:libnet_JoinADSDomain - move away from "samdb_msg_add_string"
      s4:libnet/libnet_samsync_ldb,c - move away from "samdb_msg_add_string" when possible
      s4:lsa RPC server - "dcesrv_lsa_CreateSecret" - a bit of rework
      s4:lsa RPC server - always initialise "info" structures
      s3/s4:lsa.idl - QueryDomainInformationPolicy - the "unknown6" field is called "reserved"
      s4/kdc - fix a warning regarding a changed parameter type (kvno)
      s4:torture/rpc/samr.c - fix output message
      s4:dsdb/common/util_samr.c - "dsdb_enum_group_mem" - fix it up regarding non SAM members
      s4:samr RPC server - dcesrv_samr_GetBootKeyInformation - return NOT_SUPPORTED
      s4:dsdb/common/util_samr.c and auth/sam.c - fix error message
      s4:auth/kerberos/kerberos_pac.c - fix another memory leak regarding the KRB principal
      s4:auth/gensec/gensec_krb5.c - remove a pointless "nt_status" test
      s4:auth/gensec/gensec_krb5.c - fix/reorder memory free operations
      s4:kdc/kpasswdd.c - fix memory leaks
      s4:dsdb/samdb/cracknames.c - fix another memory leak
      s4:lib/messaging/*.h - fix compile warnings on gcc 3.4
      s4:dsdb/samdb/ldb_modules/util.h - fix a gcc 3.4 compile warning
      s4:cluster/cluster.h - fix another gcc 3.4 "struct" warning
      lib/util:tests/time.c - "test_timestring" - fix it on Solaris
      s4:fix some shadowed declaration warnings on Solaris by renaming the symbols
      s4:client/client.c - fix Solaris warning by a type cast
      s4:torture/locktest.c - fix one indentation
      s4:torture/locktest.c - fix "pid_t" printf warning on Solaris
      lib/util/fault.c - fix "pid_t" printf warning on Solaris
      Revert "lib/util:tests/time.c - "test_timestring" - fix it on Solaris"
      s4:acl_read LDB module - fix attributes list
      s4:libnet_samsync_ldb.c - introduce an error message on failed domain synchronisation
      s4:libnet_samsync_ldb.c - simplify a talloc steal call
      s4:kdc/kpasswdd.c - don't return an uninitialised NT_STATUS
      s4:param/loadparm.c - fix a warning by introducing a "const" cast
      s4:kdc/proxy.c - optimise includes in order to fix a build warning on Tru64
      s4:smbd/process*.c - fix PID warnings on Solaris
      s4:kdc/*.c - minimise includes
      s4:web_server/wsgi.c - add missing Python compatibility code
      s4:web_server/wsgi.c - fix a counter type
      s4:web_server/*.c - optimise includes
      ldb:pyldb - optimise includes
      s4:dsdb/pydsdb.c - clean up memory handling
      s4:lib/ldb-samba/pyldb.c - optimise includes
      s4:dsdb/pydsdb.c and web_server/wsgi.c - remove accidentally introduced Py_RETURN_NONE
      s4:libnet/py_net.c - add checks for OOM conditions
      s4:libcli/finddcs_nbt.c - optimise headers
      s4:libcli/finddc.h - fix header dependancies
      s4:param/provision.c - optimise includes
      s4:scripting/python/pyglue.c - optimise includes
      s4:scripting/python/pyglue.c - add a OOM handling
      ldb:pyldb.h - revert to the previous header behaviour
      s4:dsdb/pydsdb.c - don't throw another exception on "PyObject_AsDn"
      s4:auth/gensec/spnego.c - remove unused variable "principal"
      s4:dsdb/common/util.c - remove unused variable "ndr_err"
      lib/util/asn1.c - remove the "const" specifier from OID
      librpc/ndr/ndr_*.c - remove "const" from OIDs
      s3/s4:auth SPNEGO - adaptions for the removed "const" from OIDs
      s4:lib/ldb-samba/ldif_handlers.c - adaption needed for removed "const" on OIDs
      s4:dsdb/schema/schema_* - adaptions needed for removed "const" on OIDs
      s4:auth/session.h - use a forward declaration for type "struct ldb_context"
      ldb:tools/ldbdel.c - "replace.h" should be the first include
      ldb:pyldb.c - remove unused variable
      lib/util/time.c - make the "strftime" output locale independant ("%c" is not)
      dsdb:ldap.py - transform a test call into the new "msg.add" syntax
      lib/replace/testsuite.c - fix test output
      s4:torture/ndr/spoolss.c - add a "ULL" suffix for a 64 bit unsigned integer literal
      s4:acl LDB module - add a missing "talloc_free(tmp_ctx)" in an error path
      s4:acl LDB module - "acl_rename" - memory contexts fixup
      s4:dynconfig/dynconfig.h - fix ending newline warning
      ldb:ldb_dn_explode - remove/unify some duplicate initialisations
      ldb:ltdb_sequence_number - check for an OOM exception
      s4:winbind/idmap.c - we cannot use "failed" until we are in a transaction
      torture:drs/rpc/msds_intid.c - proof for the correct "intId"
      ldb:ldbsearch.c - fix possible uninitialised variable
      ldb:ltdb_sequence_number - initialise "tmp_ctx" to prevent uninitialisation warning
      s4:librpc/rpc/dcerpc_connect.c - fix uninitialised variable
      s4:extended_dn_out LDB module - initialise "have_reveal_control"
      s4:dns_server/dlz_bind9.c - initialise "ret" variables
      s4:torture/nbench/nbench.c - initialise "n"
      ldb:ldb_dn.c - fix counter type in "ldb_dn_minimise"
      s4:samldb LDB module - fix "userAccountControl" handling
      s4:urgent_replication.py - remove a now superflous RELAX control
      s4:web_server - immeditately assign "wdata" as private data for the stream socket
      s4:samr RPC server - always interpret filter integer values as signed
      s4:auth/ntlm/auth_sam.c - fix call to "get_server_info_principal"
      s4:dsdb_find_nc_root - fix it up to let the provisioning work correctly
      ldb: inherit parent flags on child requests in modules
      s4:dsdb/samdb/ldb_modules/objectclass.c - move LSA specific object checks into "objectclass_attrs" LDB module
      s4:ldap.py - check the write protection on LSA objects
      s4:auth/pyauth.c - temporarily add compatibility code for Python 2.4
      ldb:ldbadd tool - use LDB result constants for consistency
      ldb:ldbadd tool - use "%u" for printing out unsigned integers
      ldb:ldbadd tool - use LDB return codes where possible
      ldb:ldbdel tool - use LDB result constants for consistency
      ldb:ldbmodify tool - use unsigned counters for consistency with other LDB tools
      ldb:ldbrename tool - use LDB result constant where needed
      ldb:ldbedit tool - use LDB result constants where needed
      ldb:ldbedit tool - use "%u" for printing out unsigned integers
      ldb:ldbedit tool - use unsigned counters for consistency with other LDB tools
      ldb:ldbedit tool - fix bug #7914
      ldb:ldbedit tool - don't forget about the "do_edit" result code
      ldb:ldbsearch tool - use "%u" for printing unsigned integers
      ldb:ldbsearch tool - simplify error code return
      ldb:ldbsearch tool - use LDB result constants where possible
      ldb:tools - always check if ldb connection has been estabilished
      ldb:tools - return LDB_ERR_OPERATIONS_ERROR on generic errors
      s4:WAF build - remove "source4/configure.developer"
      libcli/security - fix two output format specifiers
      s4:acl LDB module - interpret "userAccountControl" as "uint32_t"
      s4:sam.py - add another "description" test case
      s4:samr RPC server - QueryDisplayInfo returns always all domains users, aliases and groups
      s4:torture/rpc/samr.c - fix up the "test_GroupList" suite regarding QueryDisplayInfo
      s4:scripting/python/modules.c - remove a really unnecessary variable
      libcli/security/display_sec.c - fix wrong counter type
      libcli/security/sddl.c - fix wrong counter type
      libcli/security/privileges.c - fix the counting of privileges
      libcli/security/privileges.c - fix wrong counter type
      libcli/security/security_descriptor.c - fix three wrong counter variables
      s4:scripting/python/modules.[ch] - explicitly say that "py_update_path" takes no argument
      s4:torture/rpc/netlogon.c - fix two build warnings by casts
      libcli/nbt/wscript_build - fix build of "lmhosts"
      Revert "heimdal_build omit #line statments to allow valgrind to work again"
      s4:remove many invocations of "samdb_msg_add_string"
      s4:libnet/libnet_samsync_ldb.c - add a "samdb_msg_add_string" wrapper
      s4:dsdb/common/util.c - fully remove "samdb_msg_add_string"
      s4:dsdb/common/util.c - remove "samdb_find_or_add_value"
      s4:dsdb - always handle the attribute "options" as 32bit unsigned integer
      s4:drsuapi RPC server - check for the "SPN" attribute != NULL
      s4:netlogon RPC server - "LogonGetDomainInfo" - check for NULL attributes
      s4:drsuapi RPC server - this resembles more "samdb_is_gc"
      s4:torture/rap/rap.c - remove unused variable "i"
      s4:objectclass LDB module - if we cannot find DN's parent then the DN itself is invalid
      s4:LDAP server - remove validation checks of input DNs
      ldb:ldb tools - ldbtest - convert other result values to LDB codes as well
      ldb:ldb tools - return LDB_ERR_INVALID_DN_SYNTAX on wrong DN parameters
      ldb:ldb tools - remove a superflous "return" (usage internally calls "exit")
      s4:libnet/libnet_site.c - make use of LDB return constants
      s4:objectclass LDB module - fix a comment
      ldb:ldb_request - handle here the DN checks
      Revert "s4:objectclass LDB module - if we cannot find DN's parent then the DN itself is invalid"
      s4:dsdb - we don't need to check if a DN != NULL if we call "ldb_dn_validate"
      s4/ldb - remove now superflous "ldb_dn_validate" checks
      ldb:rdn_name LDB module - more RDN constraint checks (from AD)
      s4:ldap.py - remove a debug output
      s4:ldap.py - other important RDN check testcases
      ldb:ldb_msg.c - use LDB result constants for checking return values
      s4:operational LDB module - readd "structuralObjectClass" -> "objectClass" mapping
      s4:operational LDB module - add "groupToken" as unsigned int (uint32_t)
      s4:operational LDB module - fix display of some constructed attributes
      s4:ldap.py - add a test in order to show the operational module fixed
      s4:ldap.py - rootdse tests should search for the rootDSE not the default DN
      s4:operational LDB module - fix attribute names to be right up/down-cased
      s4:setup/provision - fix an output message
      s4:partition LDB module - fix typo
      s4:partition_init LDB module - fix a typo
      s4:new_partition LDB module - fix comments
      s4:partition LDB module - add some comments
      ldb:ldb_controls.c - always allocate enough space
      ldb:ldb_controls.c - "ldb_save_controls" - allow that "saver" can also be NULL
      s4:partition LDB module - fill in parent requests for inheriting the flags
      s4:instancetype LDB module - use "ldb" pointer for referencing the LDB context
      s4:instancetype LDB module - don't impede control requests
      s4:instancetype LDB module - perform here only the "instanceType" constraint checks
      s4:new_partition LDB module - splitting up an "if" operation
      s4:repl_meta_data LDB module - remove the current partition control unless it was requested
      s4:repl_meta_data LDB module - don't remove the partition control twice
      s4:simple_ldap_map LDB module - enhance current partition control checks
      s4:partition LDB module - "partition_sequence_number" - remove meaningless "if"s
      s4:partition LDB module - "partition_replicate" doesn't handle the search requests
      s4:partition LDB module - move the "data" check a bit higher
      s4:partition LDB module - extended operations - make the initialisation check consistent
      s4:partition LDB module - the current partition control should only be added if requested
      s4:repl_meta_data LDB module - always ask manually for the current partition control
      s4:extended_dn_store LDB module - use the new request as generic memory contexts
      lib/util/fault.c - "call_backtrace" - no need to have "backtrace_size" as size_t
      s4:lib/tls/wscript - exclude known broken GNUTLS releases
      s4:auth/system_session.c - check for OOM
      s4:param/loadparm.c - check for OOM
      s4:python bindings - handle NULL returns from "loadparm_init_global"
      ndrdump - make "in_pipes" and "out_pipes" const
      async_rec/async_sock.c - add an additional "const"
      s4:smb_server/smb/trans2.c - "talloc_move" isn't strictly necessary here
      talloc - improve doxygen comment of "talloc_move"
      s4:lib/registry/registry.h - align a copyright line in header comment
      s4:lib/policy/gp_ldap.c - make more use of LDB result constants
      talloc - some documentation changes
      s4:objectclass LDB module - fix a comment - add a ")"
      ldb:common/*.c - check for some OOM conditions
      ldb:ldb/common/ldb_modules.c - always use LDB error codes if possible
      ldb:tests - "init.ldif" - deactivate empty "seeAlso" attribute
      ldb:ldbadd/modify tool - return error code when at least one operation has failed
      s4:objectclass LDB module - "ldb_msg_sanity_check" call not really needed
      dsdb:schema/schema_syntax.c - add some empty value checks on validate functions
      dsdb:schema/schema_syntax.c - correctly check error code of "ldb_string_utc_to_time"
      ldb:ldb_msg_check_sanity - clean it up from unneeded stuff
      ldb:ldb_msg.c - make "ldb_msg_find_attr_as_*" more robust against invalid values
      ldb:ldb/common/ldb_modules.c - trivial - fix integer output specifiers
      ldb:ldb/common/ldb_modules.c - change the request counter type to be "unsigned"
      s4:token_group.py python test - fix typos
      ldb:ldb_controls.c - fix comment indentation
      s4:repl_meta_data LDB module - quiet a discard const ptr warning
      ldb:tools/cmdline.c + tools/ldbtest.c - make use of LDB result constants
      s4:torture/rpc/testjoin.c - use a LDB result constant
      s4:"ldb_connect" calls - proof for "!= LDB_SUCCESS"
      ldb:tdb backend - cache - remove unused "last_attribute" structure member
      s4:auth/ntlmssp/ntlmssp_server.c - add "const" in front of "dnsdomain"
      s4:torture - always cast correctly when using the "%x" format string argument
      ldb:ldbtest.c - make more use of LDB constants
      ldb:tools/cmdline.c + tools/ldbtest.c - the connection flags are typed as "unsigned"
      ldb:ldb_sqlite3.c - all LDB flags should be handled as "unsigned"
      ldb:pyldb.c - all flags should be unsigned
      s4:ldb-samba/ldb_wrap.*-dsdb/samdb/samdb.c - handle LDB connection flags as unsigned
      s4:lsa RPC server - handle LDB flags as "unsigned"
      s4:samldb LDB module - fix the behaviour when changing the "userAccountControl"
      s4:sam.py - unchanged "primaryGroupID" when account type remains the same
      s4:samldb LDB module - fix "isCriticalSystemObject" behaviour
      s4:sam.py - tests for "isCriticalSystemObject" attribute
      s4:samldb LDB modules - only objectClass "computer" is allowed to embed all types of account
      s4:sam.py - uncomment/enhance some account type tests
      s4:samldb LDB module - convert a "dsdb_module_search" into "dsdb_module_search_dn"
      s4:samldb LDB module - better to call "samldb_prim_group_trigger"
      s4:samldb LDB module - check if the RODC group exists if creating an RODC
      ldb:ldb_msg.c - move away from "errno"
      s4:librpc/rpc/dcerpc.c - janitorial: use "void" for functions without arguments
      s3:passdb/pdb_samba4.c - fix a format specifier warning
      s4:smbd/server.c - quiet "time_t" format string warnings by casts
      s3:passdb/pdb_samba4.c - remove unused variable
      s3:auth/auth_samba4.c - remove unused variable
      s4:auth/ntlm/auth.c - fix incompatible pointer type warning
      s4:dsdb/schema_convert_to_ol.c - quiet enum warning
      s4:schema_convert_to_ol.c - fix memory contexts
      s4:winbind/wb_samba3_protocol.c - quiet enum warning
      s4:libnet/libnet_rpc.c - quiet an enum warning
      s4:ntvfs subsystem - quiet enum warnings
      s4:rpc_server/dcesrv_samr.c - quiet enum warnings
      s4:auth/ntlm/auth_unix.c - remove unused variables
      s4:ntvfs/smb2/vfs_smb2.c - remove unused variable
      s4:torture/ndr/string.c - fix type-punned warning and remove unused variables
      s4:libcli/raw/raw*.c - add unhandled enum values
      s4:ntvfs subsystems - rework it using concrete enum values
      s4:winbind/wb_samba3_protocol.c - rework it using concrete enum values
      s4:subtree_rename LDB module - fix the move/rename constraints
      ldb - two cosmetic fixes
      ldb:ldb_controls.c - cosmetic indentation fix
      s3:passdb/py_passdb.c - restore Python >= 2.4 compatibility
      ldb:pyldb.c - point out that "PyLdbResult_AsResult" does not convert everything
      ldb:ldb_controls.c - remove duplicate definition of "LDB_CONTROL_CMP"
      s4:samba-tool/domain.py - restore domain raise functionality
      s4:samba-tool/domain.py - rename arguments "domain" -> "domain-level", "forest" -> "forest-level"
      s4:lib/socket/interface.c - "ifaces" strictly needs to be initialised
      s4:upgrade_from_s3 - restore "get_testparm_var" method
      ldb:pyldb.c - "py_ldb_rename" remove superflous "ldb" pointer
      s4:upgrade_from_s3 - old s3 versions < 3.4.x don't have a "state directory" param
      ldb:"ldb_extended" -make the call more similar to "ldb_search"
      s4:auth - remove unused variables
      s4:libnet/py_net.c - fix up includes (in order to find all "struct"s)
      s4:ntvfs/common/brlock.c - remove unnecessary include "tdb_compat.h"
      s4:param/pyparam.c - suppress "P_SEP" compilation warning
      s4:ntvfs common - add "UTIL_TDB" and "tdb-wrap" as internal build dependency
      s4:ntvfs common - remove two outdated function prototypes
      s3:wscript_build - add dependency on "tdb-wrap3" for libnet dssync
      s4:upgrading-samba4.txt - fix mistakes reported by bug #8504
      s4:findprovisionusnranges - the default python path is detected over "env"
      ldb:ldb_autotransaction_request - fix a typo in a comment
      ldb:ldb.c - "ldb_set_errstring" can be implemented by using "ldb_asprintf_errstring"
      ldb:ldb.c/"ldb_request" - make "ldb_request" always return an error string
      ldb:ldb.c/"ldb_wait" - change "ldb_wait" slightly in order to introduce error messages
      ldb:ldb.c/"ldb_wait" - make "ldb_wait" always return an error string
      s4:ldap_backend.c/"map_ldb_error" - handle errors similar to "PyErr_SetLdbError"
      ldb:pyldb.c - py_ldb_* modification calls - error string shouldn't be set here
      ldb:ldb_autotransaction_request - error string shouldn't be set here
      ldb:common/ldb_modules.c - fix a typo in comment
      s4:torture/ldap/basic.c - fix a typo
      s4:ldap.py - reactivate some assertions in "test_all"
      s4:ldap.py - fix up the UTF8 tests
      s4:password_hash LDB module - fix compiler warning due to unsatisfied "switch"
      s4:objectclass LDB module - update copyright
      s4:objectclass LDB module - "check_rodc_ntdsdsa_add"
      s4:objectclass LDB module - "objectclass_add" - small optimisation
      s4:objectclass LDB module - forbid to add unrelated objectclasses
      s4:objectclass LDB module - objectclass modify operations
      s4:objectclass LDB module - objectclass modify op. - remove superflous "talloc_strdup"
      s4:ldap.py - enhance and fix up the object class test
      s4:ldap.py - we test the creation of secrets already in the "systemOnly" testcase
      s4:objectclass_attrs LDB module - implement the dSHeuristics length checks correctly
      s4:ldap.py - fix up the dSHeuristics test to check for the right behaviour
      s4:repl_meta_data LDB module - "dsdb_search_module_dn" already checks if len(res) == 1
      s4:repl_meta_data LDB module - always return the original LDB result codes on failure
      s4:repl_meta_data LDB module - remove pointless debug messages
      s4:repl_meta_data LDB module - rename operation - do not overwrite error messages
      s4:repl_meta_data LDB module - don't intercept the partition LDB module referrals
      s4:lib/registry/regf.c - always generate debug messages on error cases
      s4:lib/registry/ldb.c - don't use search filters for base searches
      s4:lib/registry/ldb.c - quit the deletion of a not-existing default value with WERR_BADFILE
      s4:lib/registry - enhance registry tests in respect to default values
      s4:samba-tool - fix Gémes Géza patch regarding parameter handling
      s4:samba-tool - other fix for Gémes Géza patch regarding parameter handling
      s4:samba-tool user command - always initialise the boolean arguments properly
      s4:join.py - fix up "DsAddEntry" against Windows Server 2000
      libcli/cldap/cldap.c - remove outdated comment
      s4:join.py - fix typo
      s4:torture/rpc/samr.c - use "NULL" instead of "0" when initialising pointers
      s4:partition LDB module - fix handling regarding special DNs on searches
      socket_wrapper/py_socket_wrapper.c - include Python 2.4 compatiblity code
      idl:netlogon.idl - add the Active Directory Web Service bit (DS_SERVER_WEBSERV)
      s4:update_keytab LDB module - no need to filter for the DN
      s4:libcli/finddcs_cldap.c - let "finddcs_cldap" work either with the IP address or the domain name
      s4:libnet/py_net.c - initialise optional keyword arguments
      s4:libnet/py_net.c: "py_net_finddc" - add an "address" parameter
      s4:netcmd/common.py: add a "netcmd" function to do a cldap netlogon request
      s4:cldap_server/netlogon.c - DS_SERVER_CLOSEST handling
      s4:netlogon RPC server - DsRGetDcNameEx - set the DNS name flags correctly
      samba-tool: domain info - add basic exception handling
      s4:selftest/test_samba_tool.sh - add a basic unit test for the new "domain info" command
      s4:torture/ldap/cldap.c - remove the "test_cldap_netlogon_flag_ds_dns_forest" test
      s4:lib/tls - call "gnutls_transport_set_lowat" only on GNUTLS < 3.0
      s4:dsdb/common/util.c - test LDB result against LDB_SUCCESS as we are always doing
      ldb:ldb_tdb.c - fix warnings in "ltdb_init_rootdse"
      s4:libcli/finddcs_nbt.c - free "req" consistently with "finddcs_cldap.c"
      s4:netlogon RPC server - dcesrv_netr_DsRGetSiteName - add a small explaination
      s4:torture/rpc/netlogon.c - factor out the computer name check in an own test
      ldb:ldb/common/ldb_controls.c - reference "err_string" variable correctly
      s4:torture/rpc/netlogon.c - enhance the "DsRGetDCName*" tests
      s4:torture/nbt/dgram.c - NBT samlogon requests don't return the PDC name as UNC path
      s4:repl_meta_data LDB module - set "isRecycled" time correctly
      s4:python tests __init__.py - do not depend on "subprocess.CalledProcessError"
      s4:python tests __init__.py - do not depend on "subprocess.check_call()"
      s4:join python code - write the SAM account name correctly
      s4:join python code - perform a fallback password set operation over libnet
      LDB:pyldb.c - use always the case insensitive comparison for attribute names
      s4:join python code - "msDS-KeyVersionNumber" does not exist on Win2k
      s4:samba-tool fsmo * - fix missing "takes_optiongroups"
      s4:lib/tls - include GNUTLS headers consistently using <...>
      examples/testsmbc.c - remove unused variables
      examples/testsmbc.c - remove unused function "print_list_fn"
      examples/testsmbc.c - quiet implicit cast warnings on OpenSolaris
      examples/testsmbc.c - substitute deprecated function "bzero" with "memset"
      s3:wscript_build - fix TDB dependency for source3/lib/util.c
      s3:smbd/utmp.c - fix the build on FreeBSD 9 without utmp.h
      s4:torture/smb2/ioctl.c - quiet format specifier warnings on 32 bit
      s4:samba-tool domain level raise command - reference SAMDB object correctly
      s4:upgradeprovision - fix some output messages
      s4:objectclass LDB module - clean up "objectclass_sort()"
      s4:objectclass LDB module - fix up the sorting in respect to structural or 88 objectclasses
      s4:dsdb - enhance "get_last_structural_class()" for optimisations
      s4:ldap.py - test the already mentioned structural object class sorting behaviour
      LDB/s4 - do not use the "(dn=...)" syntax on filters anymore
      LDB/s4 - deny the "(dn=...)" syntax on search filters when in AD mode
      s4:ldap.py - re-introduce the "(dn=CN=ldaptestUSER3,CN=Users,DC=wallnoefer2,DC=local)" test
      s4:dsdb/pydsdb.c - fix indentation
      s4:schema/schema_init.c - better use "ldb_attr_cmp" instead of "strcasecmp"
      s4:schema/schema_query.c - fix a comment
      LDB:ldb_msg.c - add another OOM check in "ldb_msg_copy()"
      s4:objectclass LDB module - remove unneeded build dependencies
      s4:acl LDB module - remove set but unused variables
      s4:dsdb - move "objectclass_sort()" out from the objectclass LDB module into the schema code
      s4:dsdb/samdb/ldb_modules/schema.c - inline "acl_check_access_on_class" to its only user
      s4:dsdb - introduce a only constant-time "get_last_structural_class()" call
      s4:dsdb/samdb/ldb_modules/schema.c - inline "get_oc_guid_from_message()" to its only user
      s4:dsdb/samdb/ldb_modules/schema.c - move "get_last_structural_class()" into "util.c"
      LDB:ldb_tdb/ldb_tdb.c - allow LDB modify replaces with different value ordering
      s4:dsdb/pydsdb.c - call the "objectClass" normalisation code from Python
      s4:dbchecker.py - integrate the "objectClass" fixing code
      s4:dsdb/common/util.c - samdb_is_pdc() - fail if the "fSMORoleOwner" attribute has not been set
      s4:samldb LDB module - implement "fSMORoleOwner" attribute protection
      s4:samldb LDB module - homogenize LDB search attributes arrays
      s4:samldb LDB module - make sure to not add identical "servicePrincipalName"s more than once
      s4:dbchecker - handle the "none" case correctly
      s4:kdc/wdc-samba4.c - fix user logins on specific workstations
      s4:dsdb_sort_objectClass_attr - use "data_blob_string_const" for setting values
      s4:dsdb_sort_objectClass_attr - simplify memory context handling
      LDB:ldif_handlers.c - LDB_OP_GREATER/LDB_OP_LESS are thought as ">=" or "<="
      s4:dsdb - always fail if a search filter could not be parsed
      LDB:ldbsearch - search filters do not only contain "="
      LDB:ldbsearch - add search filter tests
      LDB:ldb_tdb.c - deny multi-valued attributes manipulation with doublets
      s4:samldb LDB module - remove unused "member" attribute from search filter
      s4:dns_server - introduce the wildcard binding feature
      s4:dsdb python tests - set the executable flag
      s4:samldb LDB module - "userAccountControl" = 0 means UF_NORMAL_ACCOUNT on add
      s4:samldb LDB module - permit "userAccountControl" modifications without acct. type
      s4:samr RPC server - dcesrv_samr_SetUserInfo() - password expiration
      s4:samldb LDB module - MS-SAMR 3.1.1.8.10 "userAccountControl"

Matthieu Patou (632):
      Fix broken password quality check
      Return infinite time for last last logoff when last logoff = 0
      s4:torture Add test for correct server-side sorting over LDAP
      s4: Create helpers functions related to provision
      Return a correct value for Supported Encryption Type
      s4: Pass WINBINDD_SOCKET_DIR var in order to overide the location of the Winbind socket
      s4: Fix parsing of CSDVersion: treat this field as an string null terminated.
      s4:sites & services - Adds Intersite transport containers
      s4: Script to build or rebuild extend DN attributes
      pyldb: Don't segfault when invalid type is specified to as_sddl and from_sddl.
      python: create a script for reorgnizing an LDB file.
      pythonbindings: allow add() to have an array of controls as second parameter
      s4-ldb: Add new relax controls that allow relaxed x500 constraints checks
      s4-ldb: Use relax control to check in replace metadata module if we accept request that specify objectGUID attribute.
      pythonbindings: allow add() to have an array of controls as second parameter
      s4: Improve provisioning: use relax control
      s4: Create a script for updating a running provision with change introduced since the initial provision
      s4: Fix missing TLS dir when targetdir is not the default one
      s4:upgradeschema.py Cleanup
      s4:upgradeschema.py Update to reflect recent change in provision
      s4: Rename the script
      s4: update What's new and explain how to upgrade a samba4 provision
      s4: Improve updateprovision
      s4: fix SD update and password change in upgrade script
      s4: load the domain level of the current provision and create a provision with the same domain level
      s4: don't forget to update defaultSecurityDescriptor
      s4: Handle the case in secrets.ldb without name attribute
      s4: Remove targetdir as it can cause some trouble and can be replaced by an adapted -s smb.conf
      librpc/ndr: add support for relative_short pointers
      pidl: Introduce new dirrective: relative_short
      idl: introduce new file: dfsblobs.idl
      torture: add new tests for dfsblobs
      add ignore for autogenrated files as they are not used by s3
      s4: reorder action to permit old provision to be correctly upgraded
      s4: upgradeprovision rename also when there is a mismatch on the case of name attribute
      s4: upgradeprovision handle renaming and knownobjects
      s4: rename res/res2 to something more explicit
      s4: make ldbadd/ldbmodify/ldbdelete really use the --controls switch
      s4: tests controls parsing and using for ldbadd/ldbedit/ldbmodify
      s4: add python bindings for wrap_(s|g)etxattr
      s4: Create unit tests for python "samba.xattr" module
      s4: regroup gpo modification in one function, set acl on files accordingly with ACL in LDAP
      s4: Make unixid optional
      s4: Set acls correctly on all sysvol and scripts shares
      s4: ntvfs, create push_xattr_blob_tdb_raw and pull_xattr_blob_tdb_raw that do not depend on pvfs objects
      s4: update setntacl and getntacl to select the adaquate backend (fs/tdb) for storing xattr
      s4-python: add more unit tests for xattr manipulation in python
      s4-python: add unit test for ntacls manipulation in python
      s4-tests: register new unit tests
      provision: introduce use-xattr parameter for defining where to store attributes
      provision: use message and do not display warning if the user choosed delibarately posix:eadb
      s4: allow python code to dump NTACL object as well
      s4: utils recreate in python setntacl and getntacl
      Add a comment to tdb_wrap to explain why it should be used instead of directly using tdb
      upgradeprovision: never use xattr it's pointless in this usecase
      Revert "s4:upgradeprovision - fix up the script regarding linked attributes"
      upgradeprovision: improve info messages
      upgradeprovision: reformat + add groupType as possibly overwritten
      upgradeprovision: mark rIDAvailablePool never upgraded
      upgradeprovision: forbid running upgradeprovision when there is more than 1 DC
      s4-python: add some helper for converting ldb_flag to text
      selftest-s4: set the posix:eadb at the global level
      provision: Fix an error with eadb when using not default install dir and running as a non root user
      python-s4: use secrets.ldb instead of sam.ldb for reading domain SID
      provision: Use short name for assignee of ACE (BA, SA, CO, ...)
      dsdb: Add a more explicit error message for constructed attributes
      python: ntacls, fix a leftover that is not in the try/except branch
      s4: Winbind allow to behave more correctly when we have more than a few users
      upgradeprovision: split the big script to put reusable functions appart
      upgradeprovision: code cleanup
      upgrade provision: change the meaning of handle_security_desc to be similar to handle_special_case
      upgradeprovision: Allow script to be called with pydoc
      upgradeprovision: Move to pythondoc format
      nsswitch: libpam remove depedance on locale.h use directly LOCALEDIR
      s3: Allow pam_winbind.c to build without localedir.c
      s3: Move source3/iniparser to lib/iniparser to allow sharing between s3/s4
      s3: Fix build file due to file move. Use the new path of iniparser
      s4-build: fix SMB_LIBRARY and change its name so it didn't collide with s3 one
      s4:winbind: implement calls for allowing getent groups
      s4:winbind Implement logic for getgroups to work
      s4:winbind: Fix a misplaced returned info
      s4:winbind: stub implementation of WINBINDD_PAM_LOGOFF
      s4:unittest Fix unittest to reflect that wbinfo -r no longer fail
      s4: Modify auth/config.m4 to move pam tests to nsswitch.m4 so that we tests things in one place
      s4: create ../lib/iniparser_build/config.m4
      s4: allow pam_winbind.so to be build on samba4
      provision: make gpo related function more reusable for upgradeprovision
      s4: allow upgrade provision to fix acl and missing dir on GPO dirs
      s4 upgradeprovision: add information about upgrade in oEMInformation to keep a better trace of different updates
      Add partial information in whatsnew for the next release
      s4: complete the build instruction because the problem with the idl_full cames very often
      s4 provision: Remove hard coded ACL for GPO objects
      s4: Fix python binding for drsblobs
      s4: Add python binding to waf so that the drsblobs.so is also built in waf
      s4 python: Add a function to get the oid of an attribute when the attid is known
      s4 python: make the function dsdb_get_oid_from_attid reachable from a samDB object
      s4 python: add a unit test for function dsdb_get_oid_from_attid
      s4 dns: Allow to specify static grant entries to be added to the dynamicaly generated named.conf.update
      pidl: Fix the generation of py helper for 64 bit integer
      s4 python: fix glues functions manipulating NTTIME
      s4: Fix python binding for drsblobs
      s4: Do not display by default the message Failed to send DsReplicaSync is other host is just unreachable
      librpc/idl: fix errors and improve idl in dfsblobs
      s4 torture test: Adapt ndr-dfsblobs torture test to new idl
      s4 torture: Add tests for dfs referrals handling in SMB/trans2 requests
      s4:smb_server: fix trailling whitespace in trans2.c
      s4:smb_server: Implement GET_DFS_REFERRAL for domain referral requests
      s4:smb_server: add dfs smbtorture to selftests
      s3: Allow previous password to be stored and use it to check tickets
      s4: Remove an uselessly exposed control
      s4:ldb python bindings - implement comparison on Python LDB Message objects
      s4 python: add more unit tests to verify the compare tests
      unittest: Change the name of the base ldb test so that it can be easily called separatly
      s4 provision: Add information about provisioned usn range in sam.ldb
      s4 Add functions related to ldb manipulation when doing upgrade
      s4 upgrade provision: Fix style in gen_dn_index
      s4 upgrade provision: Refactor code to do all the modification within 1 transaction
      s4 upgradeprovision: fix style
      s4 upgradeprovision: Inform about new dns dynamic update if the provision didn't have it
      s4 upgradeprovision: Reformat attributes lists and reformat parser
      s4 upgradeprovision: Use replPropertyMetaData for better guess
      s4 upgradeprovision: Fix style
      s4 upgradeprovision: move some functions to upgradehelpers for unit tests
      s4 python: Add unit tests for upgradeprovision related stuff
      s4 upgradeprovision: Add documentation on the update process
      s4: Add comments about setup_secrets
      s4 python: Update unit tests related to create secrets
      s4 upgradeprovision: Move functions to helpers and improve code
      s4 upgradeprovision: Restyle imports
      s4 upgradeprovision: additional restyling
      ldb: add a new control bypassioperationnal
      s4: Using control bypassoperational allow the logic of this module to be bypassed for some given attributes
      s4 upgradeprovision: Add function for searching stored constructed attributes
      s4 unittests: add unit tests for upgradehelpers
      s4 upgradeprovision: add an option to force the rebuilding of FS ACLs on sysvols share
      s4 upgradeprovision: Emit message instead of crashing when not able to set acl
      s4 upgradeprovision: Check that the policy for DC is present if not warn the user
      s4 upgradeprovision: Make grouped commit / rollback more resistant to unexpected problems
      s4 upgradeprovision: fix the logging stuff so that it actually log
      pidl: Finish to fix the python generated code for 64bit integers
      ldb: Fix a wrong changetype in unit test
      s4 python: Add unit tests related to PyLong/PyInt handling
      s4 upgradeprovision: For SID > 1000 do not copy them, let the system regenerated a new one
      s4 net: Add spn module to list/add/remove spn on objects
      s4 unittests: remove the provision directory before (re)generating
      s4 provision: use correct GUID for default policies
      s4 provision: move update_machine_account_password to helpers
      s4: Add a simple script to change dc password
      s4: Unit test update_machine_account_password through kinit
      ldb: allow ldb_sequence_number to be called in python
      s4 dsdb: create a new control: changereplmetadata
      s4 dsdb: Use the changereplmetadata control
      s4 python: Add functions to samdb to manipulate version of replPropertyMetaData attribute
      s4 upgradeprovision: introduce a new function to update the field use for calculating msds-keyversionnumber
      s4: Add unit test for increment_calculated_keyversion_number
      s4 upgradeprovision: fix whitespaces
      s4 upgradeprovision: add function to backup the provision before updating
      s4 upgradeprovision: do not copy RID Set it's automaticaly created by the RID manager
      s4 upgradeprovision: Synchronize the calculated keyversionnumber with the one previously stored
      s4 ldb modules: relax some tests about attributes that should not be here
      s4 upgradeprovision: Adapt the list of attribute modified
      s4: create a simple version of ktpass
      s4 unittests: add blackblox test for ktpass
      s4-waf: add the missing bits for builing nss_winbind and pam_winbind
      s4 nss_switch: fix build problem on computer without the iniparser
      s4 pam_winbind: don't build if pam header are not installed
      s4 upgradeprovision, fix a typo preventing the ridset to be correctly identified
      s4 upgradeprovision: fix a typo and pass correct parameter to increment_calculated_keyversion
      s4 upgradeprovision: Fixes for increment_keyversion
      s4 upgradeprovision: upgrade_delta_samdb return a msg_diff of @ATTRIBUTES
      s4 upgradeprovision: Add a function for schema reloading
      s4 upgradeprovision: Deal with bootstrap indexing attribute to avoid useless reindexing
      s4 upgradeprovision: add more attrbutes the ignore list
      s4 upgradeprovision: exit with a non null return code so that it can be trapped in blackbox tests
      unit tests: debug to ease locating pb, remove dir if exists to avoid error
      s4 provision: Add some documentation to GPO related functions
      s4 provision: POLICY_ACL is already an FS acl no need to translate it
      dsdb: make the ATTRIBUTE NOT FOUND more clear
      python-ldb: allow ldb_rename to take optional control(s)
      s4 upgradeprovision: add dns_update_list if missing
      upgradeprovision: cleanup
      upgradeprovision: do not try to remove/change attribute before the RID Set object is present
      upgradeprovision: avoid working with None objects ...
      s4:unittest: Test wbinfo --group-info and --gid-info
      upgradeprovision: use the same case for hostname in reference provision as in the current provision
      s4 provision: Make GPO folder group writable
      s4 upgradeprovision: Copy versionNumber if not present it helps to make gpo valid
      s4 upgradeprovision: fix a bug with empty reference objects
      s4 provision: start with gpo of version 0 and be consistent between different policies
      upgradeprovision: fix a bug with not updated links
      upgradeprovision: Fix a bug with renamed entries
      upgradeprovision: fix a typo
      s4:heimdal: import lorikeet-heimdal-201009250123 (commit 42cabfb5b683dbcb97d583c397b897507689e382)
      heimdal: change the version string
      pyldb: test return code before trying to talloc_steal
      unittests: makes the unit tests for ldb.python back in order
      unittests: add a test to avoid regression on previous fix
      ndr: Handle the case of string array with all null terminated strings
      idl: dfsblobs fix glitches in the implementation
      dfs: Fix wrong size of referral, change order of dc referral
      torture: complete dfs referral tests
      build: make make tests SCREEN=1 work on freebsd
      torture: Add debug on what we are removing
      unit tests: do some cleanup after tests
      s4 rpc_server: fix a build error on freebsd
      s4 dsdb: fix sign problem on PPC and x86
      s4 param: change messaging directory name from messaging to msg
      selftest: correct the import of Time::HighRes
      selftest: use full path for selftest.pl instead of relative paths
      replace: use a wrapper around strtoll if it didn't behave as expected
      replace: use replace for non 'samba' compliant strptime
      waf: Mark the replacement zlib private so that it can build on machine without a system zlib
      replace: restore the order for #define + rep_strtoll
      Add a script for formating test result of st/subunit
      unit tests: remove smb2.dir
      unit tests: move backend testing to the end
      tls: Inform the user if the cert/ca/private key can't be saved
      build: remove warnings about redifinition of boolean use -KPIC on suncc
      build: Add XPG6 otherwise we have a configure pb on sun Solaris
      unit tests: use skip file to exclude smb2.dir instead of hack
      build: add the -fno-common flags to fix the link pb on mac os X
      build: set shared libraries flags correctly on mac os X
      build: strip -single_module when doing bundle on mac OS X
      provision: when deriving netbiosname from hostname force the netbiosname to be compliant
      build: make this test darwin only as it mess a bit more the freebsd build
      build: Remove zlib from the cache if we failed to pass all the tests
      provision: fix wrong tests
      build: check that if we provide -liconv we can build shared libs
      build: In some case the flags for the sun studio linker are wrong
      unit tests: allow make test to correctly and quickly exit in case of problem while provisionning a test environment
      unit tests: remove trailling white spaces
      fix in_screen so that it works on os that don't chdir to $PWD
      Add a script to make backup of samba provision
      Update WHATSNEW4 to add information related to samba_backup
      samldb: relax groupType modification checks
      upgradeprovision: update revision for forestupdate and domainupdate objects
      upgradeprovision: use the (upgrade)provision control also
      upgradeprovision: use the relax/(upgrade)provision when modifying object
      upgradeprovision: fix pb with dns-hostname, regenerate a correct keytab
      upgradeprovision: use relaxed control while adding missing object container
      unit tests: add testing for dns account password change
      Fix typo
      python: use the ldbMessage + modify notation instead of modify_ldif that we try to avoid
      ktpass: fix the search path for when running in samba's source dir
      ktpass: also use userPrincipalName for locating the principal
      selftest: fix tap2subunit detection on system with tap2subunit but not correct subunit libs
      Make log level of the server configurable in make test
      ldb-tdb: Add more information about full scan
      Fix endianess problems as discovered on the build farm
      Add timestamp when running with --maximum-runtime
      remove useless debug message :-)
      build: change compile flags on mac os x if we face pb with common symbols
      add handling for solaris
      fix bad shell
      build: update gdb_backtrace to make it search for gdb66 as it work on freebsd
      tls_tstream: increase the buffer size
      build: fix hpux build pb
      build: tru64 needs -shared for building libs
      smbtorture: use xxxULL notation instead of INT64_C(xxx)
      build: Cope with broken libiconv
      build: do not duplicate the checks for python in samba4
      build: finishing fixing broken libiconv on hpux
      build: introduce SAMBA_CHECK_PYTHON_HEADERS
      build: use CPP and CC values when calling pidl
      pidl: use $CC -E if $CPP is not defined, if both undefined use cpp
      build: detect if conf.env['CPP'] is an array or not
      build: reset cpp on host with xlr_c and let pidl use $CC -E
      build: compiler on aix is xlc_r not xlr_c
      build: add a function to test if -lc is needed
      build: cpp is prefixed by CPP=
      heimdal: unset SLIST_ENTRY only if we are with windows
      build: On AIX we need _XOPEN_SOURCE >= 500 for CLOCK_REALTIME
      build: add a dependency on lib iconv for lib intl if we are not able to find it
      build: add more CFLAGS for aix
      replace: add comments to make the #ifdef/#else/endif more readable
      build: add a check for _ss_family as it used on aix to replace ss_family
      build: change lib order to fix build on netbsd
      change searched name from _ss_family to __ss_family
      build: move the import near the place where need it, so that we can build on hosts with python's zlib
      build: remove -no-undefined and -as-needed on openbsd
      build do not add -no-undefined on openbsd
      wafsamba: change the default value for SAMBA_MODULE of pyembed to False
      build: fix bad syntax
      build: hpux didn't support -Bdynamic
      build: openbsd plateform is openbsd4
      s4: make pipes with underscore works also
      Add some debug in s4's winbind server
      idl: remove protected storage
      idl: Add IDL for remote key backup protocol (rkbp)
      torture: add ndr tests for backup key protocol
      s4 torture: add new rpc torture tests for backup key remote protocol
      ldb: remove "magic" string in ldb_controls, replace them with constants defined in ldb.h
      ldb: use the sizeof of the control variable as offset instead of hardcoded values, helps to avoid bugs
      librpc: add bindings for dnsp in python
      pyldb: fix a bug in the unit test which prevented ldb.python to run all the tests in the testsuite
      s4: Add server side implementation of backup key remote protocol
      s4: load the backupkey endpoint
      s4:selftest: add tests with seal and sign for backupkey
      ldb: controls marshalling/unmarshalling improvement
      s4-unittests: replace assertEquals(res, []) by assertEquals(len(res), 0)
      pyldb: create LdbResult, return value from ldb.search is now a LdbResult
      pyldb: Add tests for the ldb_result object
      pyldb: add tests for getting control results
      s4: avoid overwritting the dceprc.h file from toplevel librpc
      ldapcli: allocate control value on the control object not on the control container
      ldb:fix control parsing for dirsync
      upgradeprovision: Fix typo
      dsdb: acl_read fix a missed talloc_steal
      dsdb: read acl, sd can be null and ret == LDB_SUCCESS
      pyldb: add more tests for control manipulation
      pyldb: minor fixup, fix a memory leak
      s4: Update/Set local USN only on attribute that have been modified/created
      s4-dsdb: If current attribute list is empty use the one from the request
      s4-dsdb: Add more information on why we don't check the SD control
      samba-tool: fix machinepw command so that we use the full path to the secret database and raise an error if secret can't be found
      waf: introduce reverse logic for allowing unknown symbols
      provision: reorganize attributes so that we don't attribute with DN syntax that depends on non present object
      s4-samba-tool: allow specification of targetdir when joining as (RO)DC
      ldb: add custom flags and functions for the application that wants to manipulate them
      s4-python: raise an error if unable to bind remote ldap while joining
      s4-python: keep wheel_gid as an integer
      s4-python: add an option for just fixing gpo folders
      s4-dfs: fix bugs in idl and adapt code accordingly
      s4-dfs: clean the code
      s4-torture: Add more tests to DFS referral suite
      s4-dfs: Use a workaround for ndr relative pointer bug/limitation
      s4-dfs: Add workaround so that XP really works well
      torture: desactivate the level 4 tests for DFS referral
      torture-dfs: fix a typo that was causing the test to be flacky
      s4-python: move function find_provision_key_parameters to provision namespace as it can be used not only for upgradeprovision
      s4-python: Remove not used imports
      Add a script for renaming a DC
      Make the purge first so that the provision can reused during tests
      upgradeprovision: add hostname in the blackbox tests
      s4: add blackbox test for rename
      selftest: Allow to test samba4 with ACL on read set
      s4: do not change the critical flag when it's on a dirsync control
      s4-dsdb: create flag for requesting ACL relax in case of DIRSYNC request
      s4-dsdb: relax a bit the checks on read acl when dirsync control is specified
      s4-dsdb: introduce dsdb_module_search_tree
      s4-dsdb: implementation of the dirsync control
      s4-dsdb: add unit tests for dirsync control
      add a demo script for dirsync
      s4:samldb LDB module - don't change the "primaryGroupId" on LDB modifications unless we are a computer/dc/rodc
      s4:sam.py - add tests to check that setting "userAccountValue" on usersdon't impact the "primaryGroupID" attribute
      py-ldb: allow dictionnary like usage (ie. e.get("myattribute", defVal)
      s4-upgradeprovision: Fix an error, so that cursddl and refsddl are not the same
      s4-upgradeprovisision: fix bug 8063, old SD can miss some componenent (group, owner, ...)
      s4-python: fix wrong discovery of the site name in find_key_provision_parameters
      s4-upgradeprovision: handle_special_attributes don't really need ranges of USNs, just the information if we are using replPropertyMetadata for attribute selection
      s4-upgradeprovision: split update_present in two functions depending on the method used
      s4-upgradeprovision: add function to know if attribute is replicated or not
      s4-upgradeprovision: introduce invocation id in lastprovisionUSNs
      s4-upgradeprovision: clean up, reformating and update docs
      s4-upgradeprovision: don't print dn in the list of modified attributes
      s4-upgradeprovision: remove useless code
      s4-upgradeprovision: fix inverted logic and wrong flags on sd_flags control
      s4-upgradeprovision: change hashAttrNotCopied to be an array
      s4-upgradeprovision: dn must be skipped as delta.remove("dn") do not remove this attribute
      s4-upgradeprovision: if there is nothing to really modify then skip it
      s4: fix wrong index usage PRIMARY_USER_SID_INDEX when it should have been PRIMARY_GROUP_SID_INDEX
      s4-upgradeprovision: add a list of attribute that are not DSDB attribute that we don't want to copy
      s4-upgradeprovision: ignore objectSid
      s4-upgradeprovision: remove useless comment
      s4-python: make checks of sacl in get_diff_sddls optionnal
      s4-upgradeprovision: Rework completly how SDs are recalculated
      s4-upgradeprovision: handle the fact that oEMInformation might not be present
      s4-upgradeprovision: deltaattr can be empty or none too
      s4-provision: Remove hard coded SD for CN=Sites container
      s4-upgradeprovision: skip versionNumber, it's used by GPO
      s4-upgradeprovision: improve message output
      s4-sambatool: use correct way to call class methods
      s4-samba-tool: use correct object notation ie. obj.method rather than method(obj, ...)
      s4-samba-tool: remove unused imports
      s4-sambatool: extract the confirm function in a separte module for reuse
      s4: create script to find provision ranges for old provision without this information
      s4-upgradeprovision: propose the use of findprovisionranges if no ranges are present
      pyldb: add unit test for get(myattribute, defVal)
      s4-upgradeprovision: Don't forget to populate the non replicated objects, and don't touch rIDPreviousAllocationPool
      s4-samba_dnsupdate: set environment via the env parameter
      s4-schema: avoid segfaulting if id3.guid is NULL
      s4-dbcheck: remove unused include
      s4-dbcheck: fix uninitialized errstr in err_dn_target_mismatch
      dfsreferral: search client's site and use it
      s4-dsdb: check for single valued attribute in repl_meta_data module
      s4-dsdb: when replacing linked attribute take always the new dn as the old dn might be broken
      s4-provision: fix the value of creation timestamp to be a MS timestamp
      upgradeprovision: reduce the number of attribute that we skip
      s4-dsdb: if the provision control is specified, update replication metadata even if the data hasn't change
      s4-python: Add functions to get linkid and systemflags of an attribute
      s4-samba-tool: dbcheck, check and fix broken metadata
      s4-dsdb: allow objectsid to be specified in a modification operation
      s4-dirsync: do not return linked attribute if the target object is no more
      s4-drs: do not return links pointed to unexistant objects
      ldb-tdb: Introduce a flag on ltdb_add_internal to indicate whether unique value test should be performed or not
      s4-schema: add systemFlags to dsdb classes objects
      s4-dsdb: add dsdb_module_extended function similar to other dsdb_module_* functions
      s4-dsdb: In rootdse add extended dn info on all values for a given attribute
      update/add my copyright
      ldb-python: add a function to Dn object to compare the Dn with a base DN
      pyldb: add unit test for ldbDn.compare_base
      s4-dsdb: check group membership only for non deleted objects
      s4-dsdb: Use controls provided during the request while searching for object to delete
      tests: Add alpha13 dumped provision
      samba_backup: check that directory really exists
      s4-upgradeprovision: Detect recent provision in a more reliable way
      s4-dsdb: Improve the calculation of system flags according to 3.1.1.5.2.4
      s4-dcerpc: Do not return linked attribute on deleted objects it makes W2k8R2 loops when joining s4 domains
      s4-kcc: correctly populate the neighbor object when taking information from repsTo
      s4-upgradeprovision: try to fix the detection of @provision record
      s4-scripting: allow to specify the number max of iteration around getNcChanges
      pidl: don't expect to have quote when creating import headers
      pidl: generate code for dissecting null terminated strings
      pidl: rpc version is a 32 bit
      pidl: handle datablob for wireshark generator
      pidl: handle hyper attribute for wireshark
      pidl: If STR_NULLTERM we concider it's a string as well
      pidl: add subcontext handling for wireshark
      pidl: handle union when the switch variable is outside of the union for wireshark dissector
      pidl: For wireshark check also LIBNDR_FLAG_NOALIGN for not aligning
      pidl: for wireshark use only the major of the version
      idl: We don't need a context for FRSRPC_COMM_PKT_CHUNK_CO_EXTENTION_2 and avoid colision on bop attribute
      s4: create a small script to test drsuapi/crackname
      s4-drsuapi: crackname search also for deleted objects
      s4-dsdb: avoid printing a pointless debug line
      s4-drs: In dcesrv_drsuapi_DsRemoveDSServer use the subtree control to delete the NTDS entry
      pys4: really return an exception if the status if not correct
      python-s4: use PyErr_SetNTSTATUS instead of PyErr_NTSTATUS_IS_ERR_RAISE as it use NT_STATUS_IS_ERROR which is not completely the same as NT_STATUS_IS_OK
      Fix bug with Samba not recognising an 6to4 IPv6 interface.
      s4: check that the xattr are supported in the folder where we want to provision
      s4-interfaces: allow pure ipv6 to work
      provision: fix the doc
      s4-resolv: fix resolution of SRV records pointing to A and AAAA records
      libcli-cldap: avoid the case local == remote == NULL
      s4-cldap: fix cldap_socket_init to always specify the dest if local is NULL
      s4-vampire: Fix the output of fetched object for the schema-dn
      s4-domain-join: do not add DFSR entries when joining, this should be done in the code handling DFSR replication
      s4-join: Send ReplicaUpdateRefs at the end of the join
      s4-socket: do not segfault if the socket is NULL
      s4-resolver: make it work back with ipv4 only DNS records
      s4-python: add function to manipulate sites in python
      s4-selftest: add unit tests for sites's function in python
      samba-tool: add subcommand for sites manipulation
      s4-sites: Document, fix under optimal coding, use exceptions
      s4-resolver: fix bug with DNS servers returning AAAA records when asked for A records
      s4-socket: allow connect_multi_next_socket to try all the IP for a given host
      s4-librpc: do not limit to the first IP when trying to do a rpc connection
      s4: Simple test script to create lots of contacts to stress the LDB
      samba-tool: dbcheck avoid problems with deleted objects
      s4-drs: check if we have a domain level >= 2k8r2 as before the isRecycled do not exists and so is always False
      s4-dsdb: initialize correctly the value of originating_change_time for the Deleted Object Container
      samba-tool: allow dbcheck to correct the originating_change_time of the deleted object container
      s4-dsdb: rework the NC detection for the descriptor calculation
      s4-dsdb: Modify the repl_meta_data behavior to allow Metadata change on attribute interSiteTopologyGenerator even if the value didn't change
      smbtorture: avoid sigsev if the password is not correct
      s4-netlogon: return WERR_NO_SUCH_DOMAIN instead of WERR_DS_UNAVAILABLE if we are unable to translate the domain to a dn
      samba-tool: add a domain info command to get basic info
      s4-python: rename conflicting variable with the import option
      s4-python: externalize some function to the drs_utils module so that they can be reused
      s4-python: factorize the definition of get_dsServiceName
      samba-tool: add a function to cleanly demote a DC
      samba-tool: refuse to demote if the current DC has still roles
      s4: add blackbox test for the demote function
      s4-drs: mark WERR_DS_DRA_BUSY as a non error in DsReplicaUpdateRefs
      s4-resolver: do not use all the A and AAAA records, those after a NS are not the one we want to use
      s4-drs: do not try to contact for replication servers that are not anymore in reps*
      s4-join: replicate first with DRS_CRITICAL_ONLY and DRS_GET_ANC objects for the base dn partition
      s4-becomedc: replicate first with DRS_CRITICAL_ONLY and DRS_GET_ANC objects for the base dn partition
      s4-drs: avoid calling unecesserly ldb_msg_find_attr_as_* as this call in unefficient
      s4-drs: introduce a timeout in the getncchanges processing to always return something in less than x seconds
      s4-dsdb: Relax the conditions where we can't do a subtree delete
      s4-ldb: Add isRecycled when is defined in the schema
      s4-kcc: Remove also deleted objects that are not in the Deleted Object container
      s4-drsuapi: we store boolean in upppercase so we need to test them in uppercase
      upgradeprovision: treat provision without oem attribute as quite recent, it's provision that comes from Windows replication
      pyldb: raise an exception if we can't add the attribute
      upgradeprovision: do not hold references to messageElements
      s3: improve the code in the AES encryption.
      s3: check that a user in a bogus domain name is mapped to the localnetbios name of a domain member
      s3-winbind: don't try to do clever thing if the username is not found while authenticating through winbind
      s3-pid: Catch with pid filename's change when config file is not smb.conf
      s3-nmbd: don't discard DGRAM frames from local addresses when we are a DC
      s3-winbindd: set the can_do_validation6 also for trusted domain
      s3-waf: add dependency on talloc or it won't build if talloc.h is not in the default include path
      s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path
      s3: print a nice warning when HAVE_ADS is not enabled but you still try to do net rpc keytab vampire
      s3: don't replace the error message if already defined
      s4-upgradeprovision: Add options to do a DB backup only and not to fix acls in sysvol
      s4-selftest: create the st/provision if it didn't exists already
      lib/crypto: Detect CommonCrypto and use it if available
      autoconf: make autoconf build work on OS X 10.6
      Factorize code from findprovisionusnranges in order to solve bug #8504
      Rewrite findprovisionrange to use factorized functions
      upgrade provision didn't run findprovisionrange anymore
      ldb: Permit desactivation of autocomit for every ldb_xxx_ctrl function
      Add an option to have s3fs as file server for samba4
      s4: use enums instead of strings it's cheaper
      s4-schema: rename dsdb_attribute_from_ldb to dsdb_set_attribute_from_ldb  and dsdb_class_from_ldb to dsdb_set_class_from_ldb
      s4-schema: Generate some schema related attribute as MS AD is doing if they are not present in ldb requests
      s4-schema: remove unused variable
      s4-schema: set subClassOf by default to top if not specified
      samba_spnupdate: don't try to register DNS related SPN if we are not mastering the NC
      s4-kcc: avoid a false alarm with rodc
      idl: fix the charset for the source_dsa_address in DsReplicaDel call
      dfs_server: fix the response to please XP and Windows 2008R2 doing so avoid continious DFS requests from W2K8R2
      torture: change dfs tests now that we return a level 4 when level 4 is requested
      dns server: move very verbose debug to higher level 2 -> 8
      dsdb: change control from relax to dbcheck
      dsdb: more RELAX to DBCHECK control shift so that only dbcheck can do uncontrolled changes
      Add some debug for FOOBAR return case as they are hard to diagnose
      olschema2ldif: be more strict where checking for open/closed braces
      s4: use intermediate var, increase lisibility
      s4-schema: Validate more class attribute when adding a new class in the schema
      libcli: make it easier to understand that a control was not correctly encoded
      s4-dsdb: naming context needs to have the extended-dn syntax too
      s4-dsdb: allow modification of some deleted object if the show-deleted control is presented
      s3-winbindd: call dump_core_setup after command line option has been parsed
      s3-winbindd: add comments about dump_core_setup
      s4-dsdb: fix a warning about unused variable
      dsdb-schema: do not reload more often than schema_reload_interval
      s4-dsdb: Try to avoid much of the time a db search for msDS-IntID
      s4-dsdb: support otherWellKnownObjects
      ldb: add the VERIFY_NAME control
      s4-ldap: handle VERIFY_NAME control encoding/decoding
      s4-dsdb-linkedattributes: register the VERIFY_NAME control, handle it when we are a GC
      s4-drsuapi: rework the crackname implementation of functionnal names
      s4-drsuapi: Fix a const warning
      ldb: lay foundation for proper utc/generalized time handling
      s4-schema: generalized time use its own syntax now
      s4-schema: keep track of the timestamp of the most recently changed/created object
      s4-extended: do not try to fix if there is no schema
      s4-dsdb: move schema_load at the top of module stack
      s4-drs: if schema has changed during replication notify other process that they have to reload the schema
      s4-dsdb: Add/Update SCHEMA_SEQ_NUM key in the metadata.tdb after schemaUpdateNow
      s4-dsdb: Check for key SCHEMA_SEQ_NUM in metadata.tdb updates
      s4-schema: improve the documentation of the dsdb_schema structure
      s4-dsdb: operational handle modifyTimeStamp on the CN=aggregate DN
      selftest: schema is not automatically reloaded now so if you modify it you have to reload it
      osX define uint64_t as long long int
      uid_t is a synonym for int on osX
      Force cast to long as on some platform tv_usec is 32bit long
      panic action is defined as GLOBAL_VAR(szPanicAction) not GLOBAL_VAR(panic_action)
      s4-dns: fix a non handled memory out of memory
      s4-provision: do not skip setting the acls on sysvol
      getdcinfo: Check that the server object has a serverreference objects pointing to a DC object
      Implement the LIST_INFO_FOR_SERVER input format
      devel-crackname: Print if count > 0
      drs-crackname: if there is no sid do not return the domain
      kcc: return invalid parameter if the taskId is not 0
      drs-getncchanges: do not set the highestUsn to 0
      s4-drs: EXOP_REPL_SECRETS can be called by RW DC as well
      s4-drs: fix the logic to allow REPL_SECRET if the account has GET_ALL_CHANGES
      ldap-server: remove warning for the ret not being used
      ldap-server: sscanf result was never used to mistyped var
      lib-addns: ensure that allocated buffer are pre set to 0
      drs-replica-info: level_not_supported is wrong when we do support (partialy the level)
      drsuapi-idl: Fix the encoding of the source_dsa_dns
      drsuapi: check more carefully the validity of the NC
      drsuapi: Validate the input parameters for the drsuapi_UpdateRefs function
      s4-repl: make dreplsrv_partition_find_for_nc return BAD_NC only
      s4-join: add some documentation
      s4-join: factorize code, add info
      s4-dns: Ignore zones that shouldn't be returned currently
      s4-dns: fix a warning
      s4-dns: Fix the comments about ignoring zones in internal server
      s4-drs: Remove unused var
      Fix MD5 detection in the autoconf build
      libnet: set the invocation_id earlier in order to avoid annoying messages
      script: Add a script to display testsuite runtime sorted
      libnet-vampire: reports Exops as they rather than sync on some partitions
      dsdb-acl: Do not apply ACL on special DNs to hide attributes that the user shouldn't see
      dsdb-operational: Avoid doing the ldb_attr_cmp if bypass flag is not set
      Tests: rewrite ldap_schema to specify attributes
      Tests: avoid adding python options that are functions in the env
      Tests: remove redondent testsuites in provision
      dsdb: Fix warning about unused var
      dbcheck: look in hasMasterNCs as well for determining the instance type of a NC
      libcli-security: Add documentation for object_tree_modify_access
      security: Add documentation
      devel-getncchange: try to find the dest_dsa automatically
      devel-scripts: ask with WRIT_REP by default
      devel-script: add options for RODC and partial replica for replicate flags
      drepl-notify: change misleading message
      drsuapi: Add documentation
      libcli-acl: add documentation
      Tests: Fix the display of test vars in screen --testenv
      dsdb-cracknames: Fix potential double free and memory leaks
      dsdb-repl: do not ask to add ref when doing getncchange for an exop
      replmetadata: raise msg level for conflict resolution so that we don't polute logs
      dsdb-repl: make message more clearer
      ldb_tdb: raise level of full index scan message so that it starts to be really visible
      ldb-tdb: Fix a wrong parameter in ltdb_store
      ldb-tdb: Document ltdb_index_add1 for more clarity
      ldb: make test output more readable
      ldb: use strncmp instead of strcmp when comparing the val part
      ldb: Add more tests related to onelevel search
      dsdb-operational: rework the loop for attribute removal
      ldb: Add tests for the python api
      ldb: Add more data test data for one level test cases
      s4:dsdb: Fix warnings about not set / set but unused / shadowed variables
      fileserver: raise the debug level for share connection from non IPC to 2
      libsmb: call directly tevent_req_simple_finish_ntstatus
      configure: print a message when docbook.xsl is missing localy
      selftest: Output error when samba_tool user command fails
      selftest: do not run doc tests if we don't build manpages
      dsdb: make the name of non related class more obvious
      Export PROMOTED_DC related variable
      selftests-drs: make our generated class subclass of classschema
      dsdb-drepl: create a new schedulable event for running pending operations
      samba-tool/tests: Force the gecos of the user to a fixed value.
      drsuapi: Debug more clearly why NC is bad in updateRefs
      dsdb-schema: remove looping on all schema classes for system_possible_inferrior
      operational: remove double loops
      buildtools: Fix compilation warnings
      Fix a warning about a shadowed variable by renaming the shadowing var
      Fix warnings about set but unused variables
      Fix a warning about a set but unused variable by actually using it
      Fix more unused vars
      Fix warning by setting the variable from GUID to const GUID
      smbtorture: fix crash when the returning a crackname with an empty name
      smbtorture: fix a warning due to a set but unused var
      smbtorture: Show the list of cracknames we expect to have and the result
      ldb_tdb: Warn when reindexing is done
      dsdb-schema: make deduplication of class and schema possible (bug #8680)
      libnet-vampire: add attributes and classes from the replicated schema to the bootstrap schema (bug #8680)
      dsdb-drs: when replicating schema object checks ask for removal of previous version if exists (bug #8680)
      selftest: Improve test coverage of DRS (bug #8680)
      Fix a missing parenthesis in the LDAP search request
      smbtorture: Make cracksname easier to debug by outputing the offered format
      Make the output of the crackname script more readable
      Make the output of the crackname script more readable
      libcli: continue to read from the socket even if the size is 0

Matthieu Suiche (4):
      lib/compression: Import of lzxpress decompression algorithm
      librpc/ndr: add support for XPRESS decompression
      lzxpress: fix for decompression...
      lzxpress: Import of lzxpress compression

Michael Adam (3749):
      r22330: For my own convenience (changes discussed some weeks ago with
      r22341: Fix build of examples/VFS: adapt include for new place of tdb...
      r22401: Add bzr revision+nick support to mkversion.sh.
      r22411: Fix the build:
      r22412: Add a "deletelocalgroup" subcommand to net sam.
      r22489: Add a deletedomgroup command to rpcclient (samr).
      r22496: reg_enumvalue should return WERR_NO_MORE_ITEMS instead of
      r22529: Add implementation of HP-UX ACLs in the new vfs-module framework.
      r22537: Use a (more speaking) macro when there is one.
      r22615: fix prototype
      r22739: Make prototypes in include/util_tdb.h of some functions from
      r22777: Fix for [Bug 4543] - POSIX ACL support on FreeBSD.
      r22845: Modified and extended the winbindd cache validation code:
      r22847: The new validate_panic function calls exit (instead of setting
      r22848: Fix brace alignment.
      r22855: fix the build
      r22893: Use ldap_rename_s instead of deprecated ldap_rename2_s.
      r22918: Attempt to fix the build of the tru64acl module.
      r22919: Fix build on Tru64.
      r22931: Fix logic in detection of the need to replace dlopen and friends.
      r22932: Use the same symbol in sizeof and cast for talloc.
      r23040: Activate the winbindd cache validation code in the
      r23070: The lsa rpc lookup sids call has a maximum number of SIDS to be
      r23072: In winbindd_ads.c:lookup_groupmem, replace the bottleneck
      r23073: In the internal rpccli_lsa_lookup_sids_noalloc(), use a temporary
      r23078: Don't handle return code NT_STATUS_NONE_MAPPED from lookup sids
      r23081: Reorder the lsa_lookup_sids functions so that the order makes more sense...
      r23082: Ooops - that portion of the last checkin was by accident.
      r23108: Add defines of RTLD_NOW and RTLD_GLOBAL to replace.h.
      r23109: Redo the change from r22772 I accidentially undid in r23108.
      r23252: Complete the reworking of the ads lookup_groupmem function
      r23253: Add some debugging output.
      r23279: Replace occurrence of sid_binstring inside lookup_groupmem
      r23283: Use a temporary talloc context in ads:lookup_groupmem.
      r23284: Oh what a nasty typo! This gave me some headache,
      r23287: Use talloc_move instead of talloc_steal as this is what I really
      r23290: Fix another small and stupid but severe typo.
      r23291: Undo the somewhat naive change of r23279:
      r23317: Fix the build: r23315 was a little overeager in removing the
      r23340: Fix typo in debug ouput. Found by Karolin Seeger <ks at sernet.de>.
      r23363: Activate rep_pread and rep_pwrite in lib/replace/replace.h.
      r23379: Whitespace cosmetics, to reduce irritating diffs...
      r23387: 1. This unifies the POSIX ACL detection code:
      r23389: Disabling ACL support on Darwin/Mac OS X for now.
      r23432: Remove superfluous comment.
      r23433: remove superfluous semicolon.
      r23434: Coorect a comment.
      r23458: Cosmetic fix in debug output.
      r23459: Remove one superfluous cast.
      r23460: Re-add whitespace to reduce diff between branches.
      r23465: There was this diff between reg_printing in 3_0 and 3_0_26:
      r23468: Open registry.tdb with sequence number.
      r23485: This checkin consists mostly of refactorings in preparation of the
      r23489: (Re-)Add tdbtorture as a build target to 3_0_26.
      r23494: Synchronize some occurrences of BINARY_PREREQS and bin/.dummy.
      r23495: Replace literal occurrences of libsmb/errormap.o by $(ERRORMAP_OBJ).
      r23504: Use tdb_wrap_open (instead of usual tdb_open) in reg_db.
      r23507: Split one general function normalize_dbkey from reg_db.c into util_reg.c
      r23509: This activates the global options from the registry in loadparm.
      r23536: Fix a typo. James: Please check!
      r23543: Adjust comments.
      r23547: Ignore parameter "include" in regsitry globals.
      r23548: Fix comments.
      r23549: Make "net conf setparm" always use registry data type "sz".
      r23552: Use proper comparison function an fix logic.
      r23553: Also ignore "lock directory" in registry global options.
      r23566: Fix the sys_bsd_setgroups function. The actual workaround was inactive.
      r23575: Fix a segfault when lp_load is called before init_registry.
      r23578: When calling DeleteKey for a key that has subkey(s), Windows
      r23579: Up to now, the "allparameters" argument to lp_next_parameter was
      r23581: Move regkey_open_onelevel from reg_frontend to reg_api,
      r23583: Add a utility function to recursively delete a Registry
      r23584: Use a while loop instead of a for loop without increment... :-)
      r23585: Add a "drop" function to "net conf" that clears the
      r23592: Change a debuglevel to not clutter output when calling
      r23593: Mention "net conf" in top level net usage.
      r23600: First step in abstracting the winbindd cache validation
      r23610: Move some winbindd_cache specific flags and actions
      r23639: Eliminate trailing whitespaces in the new tdb_validate functions...
      r23641: Put check for forbidden values in smbconf into a function.
      r23652: Use the recursive delete function instead of the original one
      r23655: Fix a comment and adjust some code formatting.
      r23656: Add initial checking of the validity of a paramter
      r23657: Prevent setting of a global option in a share definition
      r23666: Rename lp_parameter_valid -> lp_parameter_is_valid.
      r23667: Prevent storing of forbidden parameter names in registry
      r23668: When creating a new string value, win2k regedit delivers
      r23669: Move a variable into the only block where it is used.
      r23706: Add a script to create domainusers,-groups and -aliases.
      r23711: Refactor the actual creation of object into its own small function.
      r23712: This script allows for adding lists of users (or other objects)
      r23713: Oops accidentially checked in the wrong file - sorry!
      r23714: but now:
      r23744: Remove TODO-comment. lp_load returns False if opening
      r23745: Fix: Check whether top subkeyname instead of whole registry key name
      r23746: Fix missing assignments to target string of asprintf in import function.
      r23747: Move formatting of a parameter's value into a value string
      r23748: Clean use of talloc in import_process_service:
      r23749: Simplify prototype of reg_setvalue_internal:
      r23750: Change the behaviour of net conf import when there is a global section
      r23751: Call tdb_close even when validation was not successful.
      r23760: Untangle use of strrchr_m and strequal and add some checks
      r23763: Fix a typo in DEBUG message.
      r23769: Move removal of the tdb from the generic tdb_validate function
      r23814: Fix a couple of comments and debug messages.
      r23819: It is currently unnecessary to pass the extended validation status
      r23822: Clean some debugging output (as well in content and
      r23828: Add entry and exit debug statments to tdb_validate
      r23850: Fix whitespacing in DEBUG output.
      r23853: Fix a very misleading error message in tdbbackup.
      r23925: Use NULL instead of 0 for a void * argument.
      r23930: Introduce tdb_validate_and_backup:
      r23931: Use the new tdb_validate_and_backup function instead of pure tdb_validate
      r23932: Fill extended status with information in case the validation traverse
      r23938: Add a debug message.
      r23950: unlink before rename is superfluous.
      r23952: Streamline and improve the logic of tdb_validate_and backup:
      r23957: Use tdb_open_log instead of tdb_open.
      r23972: Fix a bug in pwrite error detection in tdb_expand_file():
      r23975: Enhance some debug output.
      r23977: Im prove the pwrite-patch to tdb_expand_file of r23972:
      r23979: Fix another occurence of (written != requested) as an
      r23980: Fix one more use of pwrite in expand_file.
      r23981: Make tdb_validate_and_backup try harder to end up with a valid tdb:
      r24495: Add a function lp_canonicalize_parameter: It takes a name of a parameter
      r24496: Add initial synonym handling to "net conf":
      r24510: Fix logic. Thanks to Volker for the hint!
      r24513: Reformatting: eliminate trailing spaces, overly long lines
      r24519: Refactor printing of one parameter into a helper function of its own.
      r24525: Add output of synonym information to show_parameter_list().
      r24526: Refactor determiniation of the index of the canonical form of a
      r24527: Add a function lp_canonicalize_parameter_with_value that turns
      r24572: Allow for functions map_parameter_canonical() and is_synonym_of() to
      r24602: Add function lp_string_is_valid_boolean() to check if a string
      r24609: Fix the fix of r23668 for win2k giving one zero byte
      r24610: Add a debug message that the workaround has been activated...
      r24616: In set_boolean(), only pass the result back to the caller
      r24629: Make read_sock return the total number of bytes read instead
      r24630: Store Samba configuratin options only under the default name, not as aliases.
      r24636: Raise one debug level, since the callers (that want to do so)
      r24637: In order for "net rpc registry" to be able to write to
      r24738: Fix one more use of pwrite in tdb code in the spirit of r23972 and r23977.
      r24750: Fix one more caller of  name_resolve_bcast().
      r24784: Initialize uninitalized data to prevent segfaults.
      r24824: Create an initial talloc stackframe for the net binary.
      r24825: Give testparm an initial talloc stackframe, so it does not complain
      r24827: Give smbstatus an initial talloc stackframe.
      r24828: Give smbcontrol an initial talloc stackframe.
      r24829: Make use of a variable, that is available... :-)
      r24830: Add a winbindd cache validation function that does not do
      r24836: Initialize some uninitialized variables.
      r24843: Add a "validate-cache" control message to winbindd.
      r24845: Fix a segfault in smbcontrol when called with parameters but no extra args.
      r24847: Change standard failure return code of tdb_validate from "-1" to "1".
      r24848: Make tdb_validate() take an open tdb handle instead of a file name.
      r24877: Don't panic in tdb validation code when the fork or waitpid fails.
      r24879: Activate the winbindd cache-validation message handler.
      r24955: Reformat some object lists in Makefile.in to minimize the diff.
      r24970: Polish some comments and add my (C).
      r24990: Kill an incredible amount of trailing whitespaces...
      r24991: Kill all those lots of trailing whitespaces from secrets.c.
      r24996: Eliminate more trailing spaces...
      r24998: Add a function regval_compose() to compose a REGISTRY_VALUE from
      r24999: Use the new regval_compose() function in regval_ctr_addvalue().
      r25002: Refactor out code duplication created by the previous
      r25086: Fix interdomain trusts (this povides the fix expected in r22709):
      r25087: Reformatting: Get rid of an abundance of leading tabs...
      r25088: Change the objectclass sambaTrustedDomainPassword to
      r25090: Fix a syntax error just introduced into the LDAP schema.
      r25091: Start adding support for storing trusted domain passwords in LDAP
      r25092: Add support for storing trusted domain passwords in LDAP for
      r25139: Avoid code duplication: let regval_ctr_copyvalue() call regval_ctr_addvalue().
      r25140: Less red bars to hurt my eyes...
      r25160: Refactor out and slightly clean up canonicalization of the registry value
      r25162: Refactor further: add mapping functions between
      r25197: Change net_make_ipc_connection() and net_make_ipc_connection_ex() to
      r25198: Change net_rpc_join_ok() to return NTSTATUS for better
      r25200: Fix a debug message.
      r25201: Fight those red bars...
      r25223: Fix behaviour of rpccli_lsa_lookupsids_all() when
      r25224: Fix a potential segfault in lsa_lookupsids client code due to
      r25225: Add a debug message.
      r25226: Get rid of more red bars...
      r25247: Rename the rpccli_lsa_lookup_sids_all() function to rpccli_lsa_lookup_sids()
      r25254: Add my C - Michael
      r25258: Fix a panic message and remove superfluous return after the call to smb_panic().
      r25272: Fix a bunch of callers of pull_ucs2 that passed -1 for dest_len.
      r25281: Fix a caller of unistr2_to_ascii():
      r25285: Fix some more callers of unistr2_to_ascii to use the size of
      r25286: Fix one more caller of unistr2_to_ascii() that passed
      r25287: Eliminate a handful of red bars and overly long lines I just
      r25294: Tidy up callers of unistr2_to_ascii() to pass sizeof(target_area) to
      r25378: Add a vim configuration example to highlight overly long lines.
      r25422: Get rid of some cast warnings.
      r25424: Align log level (by two) in debugging output.
      r25426: Fix another implicit cast warning.
      r25434: Add the option to print the debug class (DBGC_CLASS) in the debug header.
      r25441: Make wbinfo --sequence output the sequence number if --domain
      r25598: Add missing become_root/unbecome_root around calls of add_aliases.
      r22931: Fix logic in detection of the need to replace dlopen and friends.
      r23108: Add defines of RTLD_NOW and RTLD_GLOBAL to replace.h.
      r23118: Make inet_pton and inet_ntop available through lib/replace.
      r23123: Fix two utterly simply typos that broke the whole build farm...
      r23363: Activate rep_pread and rep_pwrite in lib/replace/replace.h.
      r23561: Fix an output message.
      r23821: Extend the winreg test by a test for DeleteKey on a
      r23853: Fix a very misleading error message in tdbbackup.
      r23925: Use NULL instead of 0 for a void * argument.
      r23950: unlink before rename is superfluous.
      r23972: Fix a bug in pwrite error detection in tdb_expand_file():
      r23977: Im prove the pwrite-patch to tdb_expand_file of r23972:
      r23978: Merge r23161 from Samba3:
      r23979: Fix another occurence of (written != requested) as an
      r23980: Fix one more use of pwrite in expand_file.
      r24629: Make read_sock return the total number of bytes read instead
      r24738: Fix one more use of pwrite in tdb code in the spirit of r23972 and r23977.
      r25350: Add an initial winbindd list-users test.
      r25352: Add a basic WINBINDD_LIST_GROUPS test.
      r25409: Add SHOW_SEQUENCE winbind test (struct based).
      r25439: Extend the SHOW_SEQUENCE test somewhat to walk the list of trusted domains.
      r25440: Add simple WINBINDD_SETPWENT and WINBINDD_ENDPWENT tests.
      r25443: Enhance the WINBINDD-STRUCT-SHOW_SEQUENCE test:
      r25444: Add an initial version of a WINBIND-STRUCT-GETPWENT test.
      r25469: Finish WINBIND-STRUCT-SHOW_SEQUENCE test:
      r25477: Add user and group retrieval functions (used in LIST_USERS/GROUPS tests).
      r25509: Extend the WINBIND-STRUCT-LOOKUP_NAME_SID test to also
      r25515: Revert r25448:
      r25516: Sorry, I reverted too much of r25448 in r25515.
      r25532: Fix some more indentations. Sorry Günther, could not resist, after
      Add become_root/unbecome_root around one call of getsampwsid()
      Remove superfluous quotation marks around samba version
      Revert "Remove superfluous quotation marks around samba version"
      Streamline logic, reducing the amount of indentation.
      Enable building the zfsacl VFS module by specifying
      Fix a typo.
      Add two const's.
      Try to fix the build. There was one forgotten caller
      Fix a segfault.
      Fix another segfault and make smbfilter run again.
      Add a const.
      This is a proposed patch for Bug #5023.
      Don't repeat fast-pathing...
      Move some access check functions that are not posix-acl specific
      Try to fix the build on irix.
      Try to fix the build on systems without struct sockaddr_storage type
      r23706: Add a script to create domainusers,-groups and -aliases.
      r23711: Refactor the actual creation of object into its own small function.
      r23714: This script allows for adding lists of users (or other objects)
      Find and fix more GPL2 -> GPL3.
      The FSF has moved around a lot. This fixes their Mass Ave address.
      Fix the build: correct prototype.
      Fix build of the zfs_acl module.
      Fix potential orphaned open files.
      Fix bug #5083 (and duplicate bug #5084).
      Fix an implicit cast warning.
      Fix the build on RHEL5, when libcap-devel is installed.
      Fix an implicit cast warning.
      Fix for bug #4781: allow cleaning of /etc/mtab by canonicalizing mountpoint.
      Use the proper boolean constants - the type has been
      Give rpcclient a talloc stackframe.
      Allow calling "net rpc join" and "net rpc trustdom" without specifying server IP.
      Add check for ppc statfs.h header to workaround for broken capabilities.h.
      Move check for broken system capabilites.h headers to lib/replace.
      Reformat configure checks for broken capabilities.h.
      Remove workaround for broken capabilites.h from lib/system.c - now in lib/replace.
      Fix a debug message (missing newline).
      Improve a debug message.
      Remove an incredible amount of whitespace.
      Fix secrets_store_trusted_domain_password() after pstring removal.
      Fix logic and prevent segfaults in secrets trustdom tdb pack code.
      Fix for bug #4801: Correctly implement lsa lookup levels for lookupnames.
      Remove two unneeded functions.
      In cm_prepare_connection(), only get auth user creds if we need to.
      Streamline logic in cm_connect_netlogon()
      Let get_trust_pw() determine the machine_account_name to use.
      Refactor the lagacy part of secrets_fetch_trust_account_password() out
      Export logic of get_trust_pw() to new function get_trust_pw_clear().
      Rename get_trust_pw() to get_trust_pw_hash().
      Pass NULL instead of unneeded &sid: pdb_get_trusteddom_pw() checks.
      Refactoring out get_schannel_session_key logic.
      Streamline and fix logic of cm_prepare_connection().
      Refactor out assembling of trust creds (pw, account name, principal).
      Make cm_connect_sam() try harder to connect autheticated.
      Add flags for correctly implementing lsa_lookup_name levels.
      Fix typo in debug statement.
      Add combined flag LOOKUP_NAME_LOCAL.
      Fix flags in call of lookup_name() in pdb_default_create_alias().
      Fix flags in call of lookup_name() in srv_samr_nt.c: can_create().
      Fix flags in all callers of lookup_name() in net_sam.c.
      Fix flags in caller of lookup_name() in create_builtin_administrators().
      Fix for bug #4801: Correctly implement lsa lookup levels for lookupnames.
      Make usage message for net sam rights list a little more precise.
      Reformat: Remove trailing spaces.
      Remove direct caller of secrets_fetch_trusted_domain_password().
      Do not close netlogon pipe in get_schannel_session_key_common().
      Prevent another segfault.
      Fix logic error in cm_connect_sam().
      Fix a debug message: add missing space.
      Fix an error when accessing unallocated sid in error path.
      Change apply_default_perms() to not take an fsp.
      Change ensure_canon_entry_valid() to not take and fsp.
      Change canonicalise_acl() to not take an fsp.
      Remove the "is_directory" parameter from canonicalise_acl():
      Split get_nt_acl() into two functions: fsp- and non-fsp variant.
      Split smbacl4_GetFileOwner into two (f- and non-f-variant).
      Split smb_get_nt_acl_nfs4 into two (f- and non-f-variant).
      Prepare the gpfs acl module for the api change in get_nt_acl().
      Prepare the zfs acl module for the api change in get_nt_acl().
      Reformatting: wrap long lines and remove trailing spaces.
      Fix two debug statements: Add missing printf parameter.
      Change aixjfs2_get_nfs4_acl() to take file name instead of fsp.
      Prepare the aix2 acl module for the api change in get_nt_acl().
      Prepare the afs acl module for the api change in get_nt_acl().
      Change the prototype of the vfs function get_nt_acl().
      Only retrieve password policies in pam_auth when WBFLAG_PAM_GET_PWD_POLICY is set.
      r26253: Add check for broken RedHat 7.2 system header files to lib/replace.
      r26254: Add check for PPC statfs.h to workaround for broken capability.h.
      r26255: Work around another broken aspect of sys/capability.h on RHEL5.
      Remove redundant connection_struct from fd_close_posix() parameter list.
      Remove redundant connection_struct from fd_close() parameter list.
      Remove redundant connection_struct from check_magic() parameter list.
      Fix typo in output.
      Make libnet_smbconf_open_path_q() static.
      Move smbconf_value_exists() to libnet/net_conf.c
      Move logic of net_smbconf_delparm() to libnet/libnet_conf.c
      Replace direct deletion of registry value by use of libnet_smbconf_delparm().
      Remove occurrences of registry_key from libnet_join.c
      Move reg_setvalue_internal() to libnet_conf.c
      Move net_conf_setparm() to libnet_conf.c
      Reorder libnet_conf.c some, adding "section" comments.
      Make libnet_smbconf_set_global_param() call libnet_smbconf_setparm().
      Rename libnet_reg_createkey_internal() to libnet_smbconf_reg_createkey_internal().
      Move logic of net_conf_getparm() to libnet_conf.c.
      Remove redundant check of return value.
      Fix rights error in libnet_smbconf_delparm().
      Don't leak memory in libnet_smbconf_getparm().
      Make libnet_smbconf_key_exists() use talloc_stackframe().
      Make libnet_smbconf_value_exists() use talloc_stackframe().
      Use the appropriate boolean constants.
      Do not leak memory in libnet_smbconf_setparm().
      Do not leak memory in libnet_smbconf_delparm().
      Move reg_delkey_internal() to libnet/libnet_conf.c
      Rename reg_delkey_internal() to libnet_smbconf_delshare().
      Simplify libnet_smbconf_delshare().
      Add error reporting to net_conf_delshare().
      Use the proper boolean constants in net_conf.c
      Move drop_smbconf_internal() to libnet_conf.c
      Rename drop_smbconf_internal() to libnet_smbconf_drop().
      Remove talloc context parameter from libnet_smbconf_drop().
      Remove a d_fprintf() from libnet_smbconf_drop().
      Add comment header to function libnet_smbconf_drop().
      Typofix in comment.
      Remove talloc context parameter from libnet_smbconf_setparm().
      Add a missing free.
      Remove talloc context parameter from libnet_smbconf_delparm().
      Add two missing free-s.
      Remove now unneeded talloc ctx parameter from do_unjoin_modify_vals_config().
      Remove now unneeded talloc ctx parameter from do_UnjoinConfig().
      Remove now unneeded talloc ctx parameter from do_join_modify_vals_config().
      Remove now unneeded talloc ctx parameter from do_JoinConfig().
      Rename libnet_smbconf_open_path_q() to libnet_smbconf_open_path()
      Rename libnet_smbconf_open_path() to libnet_smbconf_reg_open_path().
      Rename libnet_smbconf_open_basepath() to libnet_smbconf_reg_open_basepath().
      Move libnet_smbconf_reg_open_basepath() in source file
      Move format_value() to libnet_conf.c.
      Rename format_value() to libnet_smbconf_format_registry_value().
      Hide the registry backend from libnet_smbconf_getparm().
      Handle NULL talloc context in libnet_smbconf_format_registry_value().
      Add a comment header for libnet_smbconf_format_registry_value().
      Add a couple of comment headers to the main libnet_conf functions.
      Make the main net_conf functions static in net_conf.c
      Move functionality of net_conf_showshare() to libnet_conf.c
      Move functionality of net_conf_listshares() to libnet_conf.c
      Add a comment header for libnet_smbconf_getshares().
      Rename libnet_smbconf_getshares() to libnet_smbconf_get_share_names().
      Fix a const warning.
      Move talloc-appending a string to an array to its own helper function
      Make sure libnet_smbconf_get_share_names() always lists "global" first.
      Dont return count - 1 but count from libnet_smbconf_reg_get_values().
      Return NULL (instead of unchanged) for no shares/parameters defined.
      Include libnet/libnet.h in libnet_conf.c to have prototypes available.
      Add a function libnet_smbconf_get_config() to libnet_conf.c
      Use libnet_smbconf_get_config() in net_conf_list().
      Remove list_values() from net_conf.c - it is not needed any more.
      Make libnet_smbconf_reg_open_basepath() static.
      Make libnet_smbconf_reg_open_path() static.
      Make pdb_tdb honour a private dir overridden in smb.conf.
      Remove all d_fprintf-s from libnet_conf.c
      Remove an unused variable.
      Remove an unused variable.
      Rename libnet_smbconf_key_exists() to libnet_smbconf_share_exists()
      Rewrite net_conf_addshare() to only use libnet_conf API functions.
      Change net_conf_import() to only use libnet_conf API functions.
      Fix a permissions error in reg_deletekey_recursive().
      Make grouping in if statement more explicit.
      Make the last two helper functions in libnet_conf.c static.
      Use the proper boolean constants.
      Rename libnet_smbconf_reg_open_basepath() to libnet_smbconf_reg_open_basekey().
      Choose a more apropriate parameter name.
      Hey, it is 2008 now.
      Rename libnet_smbconf_reg_open_path() to libnet_smbconf_reg_open_service_key().
      Use a better parameter name.
      Fix setting of error code in error path.
      Add debug output in error path.
      Abstract opening of registry path out of libnet_smbconf_reg_open_service_key().
      Use libnet_smbconf_reg_open_path() in libnet_smbconf_drop().
      Don't leak: Use a temporary context for the admin token and free it.
      Add libnet_conf API function libnet_smbconf_create_share().
      Rename libnet_smbconf_reg_createkey_internal to libnet_smbconf_reg_create_service_key.
      Fix a comment.
      Rename libnet_smbconf_reg_setvalue_internal() to libnet_smbconf_reg_set_value().
      Return existsing cache_tree if it has already been initialized.
      Happy new year again.
      Rename libnet_smbconf_add_string_to_array() to libnet_conf_add_string_to_array().
      Rename libnet_smbconf_reg_open_path() to libnet_conf_reg_open_path().
      Rename libnet_smbconf_reg_open_service_key() to libnet_conf_reg_open_service_key().
      Rename libnet_smbconf_reg_open_basekey() to libnet_conf_reg_open_base_key().
      Rename libnet_smbconf_value_exists() to libnet_conf_value_exists().
      Rename libnet_smbconf_reg_create_service_key() to libnet_conf_reg_create_service_key().
      Rename libnet_smbconf_reg_set_value() to libnet_conf_reg_set_value().
      Rename libnet_smbconf_format_registry_value() to libnet_conf_format_registry_value().
      Rename libnet_smbconf_reg_get_values() to libnet_conf_reg_get_values().
      Rename libnet_smbconf_drop() to libnet_conf_drop().
      Rename libnet_smbconf_get_config() to libnet_conf_get_config().
      Rename libnet_smbconf_get_share_names() to libnet_conf_get_share_names().
      Rename libnet_smbconf_share_exists() to libnet_conf_share_exists().
      Rename libnet_smbconf_create_share() to libnet_conf_create_share().
      Rename libnet_smbconf_getshare() to libnet_conf_get_share().
      Rename libnet_smbconf_delshare() to libnet_conf_delete_share().
      Rename libnet_smbconf_setparm() to libnet_conf_set_parameter().
      Rename libnet_smbconf_getparm() to libnet_conf_get_parameter().
      Rename libnet_smbconf_delparm() to libnet_conf_delete_parameter().
      Rename libnet_smbconf_set_global_param() to libnet_conf_set_global_parameter().
      Use GLOBAL_NAME constant.
      Add a comment header and do some slight reformatting.
      Make libnet_conf handle opening/initialization of the registry.
      Use the proper boolean constants.
      Fix the behaviour of "net conf setparm" to create the share if necessary.
      Remove the final regdb_close() from net_conf.c
      Map WERR_NO_SUCH_SERVICE with dos_errstr().
      Update the introductory comment to net_conf.c to mention linbet_conf.
      Remove the word "registry" from the help output of the "net conf" command.
      Fix a comment.
      Fix spacing - spaces mixed with tabs.
      Fix a DEBUG statement.
      Fix a misleading DEBUG message.
      Unindent function header.
      Enhance DEBUG-verbosity of ldap_open_with_timeout().
      Untangle assignment and result check.
      Add a debug message (when the LDAP server has really been connected).
      Re-Indent function ldap_open_with_timeout().
      Remove vlp.o in make clean.
      Remove superfluous fd parameter from SMB_VFS_FGET_NT_ACL().
      Wrap lines for readability.
      Remove superfluous parameter fd from SMB_VFS_FSET_NT_ACL().
      Remove unneeded parameter fd from SMB_VFS_PREAD().
      Adapt fset_nt_acl() and fget_nt_acl() in examples/VFS/ to vfs prototype change.
      Add some braces to if statement.
      Make wcache_invalidate_cache() return bool, not int.
      Fix a comment.
      Use the proper boolean constants.
      Remove redundant parameter fd from SMB_VFS_PWRITE().
      Remove redundant parameter fd from SMB_VFS_LSEEK().
      Remove redundant parameter fd from SMB_VFS_FSYNC().
      Remove redundant parameter fd from SMB_VFS_FSTAT().
      Remove redundant parameter fd from SMB_VFS_FCHMOD().
      Remove redundant parameter fd from SMB_VFS_FCHOWN().
      Remove redundant parameter fd from SMB_VFS_FTRUNCATE().
      Fix the build: Fix caller of strict_allocate_ftruncate().
      Remove redundant parameter fd from SMB_VFS_LOCK().
      Fix wrong unused opaque macro for kernel_flock().
      Remove redundant parameter fd from SMB_VFS_KERNEL_FLOCK().
      Remove redundant parameter fd from SMB_VFS_LINUX_SETLEASE().
      Remove redundant parameter fd from SMB_VFS_GETLOCK().
      Remove redundant parameter fd from SMB_VFS_SYS_ACL_GET_FD().
      Add comment.
      Remove redundant parameter fd from SMB_VFS_FCHMOD_ACL().
      Remove redundant parameter fd from SMB_VFS_SYS_ACL_SET_FD().
      Remove forgotton fd from solarisacl_sys_acl_get_fd().
      Remove redundant parameter fd from SMB_VFS_FGETXATTR().
      Remove redundant parameter fd from SMB_VFS_FLISTXATTR().
      Remove redundant parameter fd from SMB_VFS_FREMOVEXATTR().
      Remove redundant parameter fd from SMB_VFS_FSETXATTR().
      Remove redundant parameter fd from SMB_VFS_AIO_CANCEL().
      Fix examples/VFS after VFS API changes.
      Fix returns in void functions.
      Fix talloctort: move size check after referenced ptr check.
      Add a comment.
      Extend a comment.
      Don't leak data.dptr on error path.
      Fix prototype: Add a void to an empty function parameter list.
      Convert add_sid_to_array() add_sid_to_array_unique() to return NTSTATUS.
      Move content of comment.
      Change registry_create_admin_token() to return NTSTATUS.
      Ignore test directory.
      git-ignore generated files under examples/VFS/
      Fix memory handling in torture/cmd_vfs.c:cmd_open and don't leak fsp_name.
      Fix memleak in ldapsam_rename_sam_account() found by IBM checker.
      Fix a memleak found by the IBM checker.
      Try to fix the build on hosts that HAVE_LDAP but don't HAVE_KRB5.
      Enable building the notify_fam module.
      Try and fix the AIX build.
      Correctly abstract the transfer_file mechanism with callbacks and void ptrs.
      Fix a really silly typo.
      Make casts to (void *) explicit to remove compiler warnings.
      Reformat some code I just touched.
      Move transfer_file and transfer_file_internal to a module of their own.
      Remove redundant parameter fd from SMB_VFS_READ().
      Remove redundant parameter fd from SMB_VFS_WRITE().
      Fix the build of the cacheprime VFS module after API changes.
      Combine fsp and fromfd to fromfsp in SMB_VFS_SENDFILE().
      Remove now redundant parameter fd from prime_cache().
      Combine fsp and tofd to tofsp in SMB_VFS_RECVFILE().
      Fix panic in "net conf": Fix logic in error condition.
      Remove code accidentially submittet with last commit 83aed537c16f63.
      Introduce a libnet_conf context created by libnet_conf_open().
      Fix Compiler warnings by including the proper header.
      Remove auto-generation of missing share from libnet_conf_set_parameter().
      Add auto-adding of [global] to libnet_conf_set_global_parameter().
      Add a comment header to libnet_conf_set_global_parameter().
      Move libnet_conf_set_global_parameter() inside libnet_conf.c
      Add a function libnet_conf_get_global_parameter() to libnet_conf.c
      Add a function libnet_conf_delete_global_parameter() to libnet_conf.c
      Make use of the new libnet_conf_delete_global_parameter() function.
      Add explicit creation of shares to net conf import function.
      Add and modify comments in net_conf.c
      Fix a syntax error in script/tests/test_local_s3.sh .
      Reset the failed counter in test_wbinfo_s3.sh.
      Fix "make test_shlibs": it showed unresolved symbols for -lwbclient.
      Fix bug #5171 (perl syntax error) found by Jason Filley <jason at snakelegs.org>
      Add detection for need of update to the registry db.
      Remove some trailing spaces.
      Use the proper boolean functions.
      Re-order an option block in parm_table to re-unite the misc options.
      Add "MSDFS options" separator to parm_table.
      Add config parameter "config backend = registry".
      Add handling of [homes] and [printers] via registry shares.
      Initialise Globals.ConfigBackend from global var config_backend.
      Add utility function lp_config_backend_is_registry().
      Use lp_config_backend_is_registry() instead of lp_include_registry_globals().
      Remove special semantics of "include = registry" from loadparm.c
      Add my (C) to loadparm.c.
      Add "config backend" to the parameters forbidden in registry config.
      Fix an output message in samba3rpc torture test.
      Reformatting: Strip trailing white spaces from reg_frontent_hilvl.c.
      Use the proper boolean constants in reg_frontend_hilvl.c
      Make utility function reg_deletekey_recursive_internal() static.
      Add some sectioning comments to reg_api.c
      Convert sync_eventlog_params() to use reg_api instead of reg_frontend.
      Move reg_create_path() and reg_delete_path() to reg_api.c
      Comment out unused reg_create_path() and reg_delete_path().
      Add reg_api functions reg_getkeysecurity() and reg_setkeysecurity().
      Use reg_[gs]etkeysecurity() instead of regkey_[gs]et_secdes().
      Add a comment header comparing winreg.idl and reg_api.c.
      Add my (C) to reg_api.c - Michael
      Add a reg_getversion() function to reg_api and use it in srv_winreg_nt.c.
      Add and correct some WERROR codes.
      Fix typo in  debug message.
      Add a registry backend netlogon_params that replaces the former dynamic overlay.
      Use C99 structure initializers for netlogon_params_reg_ops.
      Use c99 struct initializers for REGISTRY_OPS in reg_smbconf.c.
      Use c99 struct initializers for REGISTRY_OPS in reg_printing.c
      Use c99 struct initializers for REGISTRY_OPS in reg_shares.c
      Volker is right: why keep commented out migrated dynamic reg overlays around?...
      Use constant KEY_NETLOGON_PARAMS instead of literal key.
      Fix registering Registry backends in reghook_cache_add().
      In reg_backend_netlogon_params, delegate fetch_subkeys() to regdb.
      Rename netlogon_params_fetch_reg_values() to netlogon_params_fetch_values().
      Some reformatting in netlogon_params_fetch_values().
      Add a registry backend prod_options that replaces the former dynamic overlay.
      Some reformatting in prod_options_fetch_values().
      Add a registry backend tcpip_params that replaces the former dynamic overlay.
      Some reformatting in tcpip_params_fetch_values().
      Add a registry backend hkpt_params that replaces the former dynamic overlay.
      Some reformatting in hkpt_params_fetch_values().
      Use some consts instead of literal strings for registry keys.
      Reorder the registry key name constants in a more systematic way.
      Add a registry backend current_version that replaces the former dynamic overlay.
      Some reformatting of current_version_fetch_values().
      Add a registry backend perflib that replaces the former dynamic overlay.
      Remove the dynamic registry overlay.
      Add some debugging output to reg_cachehook.c
      Add a debug message to fetch_reg_values().
      Do an explicit init_globals() when restarting for "config backend = registry".
      reg_eventlog.o and reg_perfcount.o are no longer neede for reg_smbconf.
      Makefile.in: extract registry backend objects to common variable.
      Makefile.in: Group together registry related object variables.
      Rename reg_printing.c to reg_backend_printing.c
      Rename reg_smbconf.c to reg_backend_smbconf.c
      Rename reg_shares.c to reg_backend_shares.c
      Rename reg_db.c to reg_backend_db.c
      Extract regkey_open_internal() from reg_frontend.c to new reg_util_legacy.c
      Extend/fix comments.
      Move reg_frontend_hilvl.c to reg_dispatcher.c
      Rename lib/util_reg_smbconf.c to registry/reg_init_smbconf.c
      Fix two debug messages.
      Add a check for talloc failure. - Pointed out by Volker.
      Use talloc_stackframe() for temporary contexts throughout libnet_conf.c
      Fix formatting of multi_sz registry values.
      Add another check for talloc failure to libnet_conf
      Fix tab_depth: it should not create an extra debug header.
      Initialize _domain_list to NULL.
      Fix panic: Don't free the logfilename in winbind_child_died().
      Fix assignment to request->data.init_conn.is_primary in init_child_connection().
      Add a debug message winbindd_can_contact_domain()
      Add a debug message to lookup_rids() printing the domain SID.
      Add debug message: show which domain_child is being forked.
      Add a debug message: show the sid lookup_sid() was called for.
      Fix lookup_sids to detect unix_groups and unix_users domain sids.
      Fix winbindd_can_contact_domain() on a samba DC.
      Fix a typo in a debug message.
      Prevent a segfault when "wbinfo -a" is called without password.
      Reformatting: Fix spacing in wbinfo.c .
      Use the proper boolean constants in wbinfo.c .
      Don't use the deprecated form of AC_INIT.
      Add support for LDAP debug output in Samba log file.
      Add configure check for LBER_LOG_PRINT_FN - to intercept ldap debug.
      Fix building with "make -j2" or greater by building shared libs first.
      Reformat SMB_EXT_LIB_FROM_PKGCONFIG: fix spacing and indentation.
      Fix the build: remove reference to inexistent header samba3_proto.h
      Fix talloctort: move size check after referenced ptr check.
      Add a comment.
      Make versions in lib/talloc/config.mk and lib/talloc/configure.ac the same.
      Raise version of talloc from 1.1.0 to 1.2.0 after adding talloc pools.
      Make versions in lib/talloc/config.mk and lib/talloc/configure.ac the same.
      Raise version of talloc from 1.1.0 to 1.2.0 after adding talloc pools.
      Fix copy & paste typo in function prototype.
      Add support for building libtalloc.a and libtalloc.so.
      Move the AC_LIBREPLACE_CC_CHECKS up before building SAMBA_CPPFLAGS.
      Use data from lib/talloc/libtalloc.m4 instead of hard coded data.
      Add support for linking talloc library statically or dynamically into samba.
      Simplify code by moving duplicate assignment to common place.
      Put talloc lib targets into variables and uses these.
      Remove some unneded variables: we always build and install some talloc libs.
      Fix some comment typos.
      Add forgotten file exports/libtalloc.syms ...  Thanks Günther!
      Add linking -ltalloc to libwbclient.so. Noted by Metze.
      Fix install: Add creation of include dir to installlibtalloc target.
      Fix build: Add missing prerequisites for libwbclient.so
      Use AS_HELP_STRING instead of (deprecated) AC_HELP_STRING.
      Change hand written configure help strings to use AS_HELP_STRING().
      Add libreplace objects to libtalloc.so.
      Only export talloc related symbols in libtalloc.so.
      Add -L./bin to LDFLAGS when building shared libs.
      Only use the needed objects for libnetapi.a
      Link in libnetapi as shared or static library (same mechanism as talloc).
      Use --with-static-libs=libtalloc instead of --with-static-libs=talloc
      Remove --enable-libwbclient-shared , use --with-static-libs=libwbclient instead.
      Try and fix the Darwin build with dynamic libs.
      Fix a typo.
      Add support for building and using shared and static libtdb library.
      Create symbols to export in libtdb dynamically from tdb.h.
      Clean up LIBTDB-related Makefile variables a bit
      Use the proper boolean constants.
      Remove the regfio objects from the ldb commandlin tools object list - unused.
      Fix path to talloc guide. Noted by "teferi" on irc.
      Fix building smbmount with shared libtdb.
      Fix build of smbumount with shared libtdb.
      Use -ltdb instead of bin/libtdb.so for linking.
      Fix build of cifs.spnego with libtdb.
      Remove useless build-target bin/samtest. (The objects exist no more.)
      Remove torture/samtest.h - last trace of late samtest.
      Fix compiling torture/smbiconv.c: allow to use realloc directly by #undef realloc.
      Fix linkage of bin/smbiconv by adding needed libs and objects.
      Add orphaned target smbiconv to "make everything" targets.
      Remove libwbclient.a from standard (static) libsmbclient object list.
      Try to fix the build of smbiconv on systems without native iconv.
      Fix two const warnings.
      Fix a pointer to int conversion warning: cast the int instead.
      Fix the build on IRIX by placing the object files before the shared libs in linking.
      Use -ltdb instead of bin/libtdb.so for linking.
      Add libtdb dependency to libsmbclient, libsmbsharemodes and libnetapi.
      Rename registry_init_regdb() to registry_init_smbconf().
      Adapt a comment to current circumstances.
      Move implementation of _winreg_SaveKey() from srv_winreg_nt.c to reg_api.c
      Move the implementation of _winreg_RestoreKey to reg_api.c
      Reformat copied reg_savekey/reg_restorekey code.
      Add missing dependency to libtdb to libnss_wins.so
      Create missing link for libnetapi.so.0
      Fix a comment typo.
      Add a check for success of fetch_reg_values().
      Fix segfault in svcctl_get_secdesc(): prevent premature TALLOC_FREE.
      Use BUILTIN\administrators as owner of the default registry key security descriptor.
      Reformat construct_registry_sd() slightly (stick to coding rules).
      Change construct_registry_sd() to return WERROR instead of the SEC_DESC *.
      Add NT Authority\System as group sid to default registry key security descriptor.
      Grab secdesc for key from registry for reg_savekey()
      Remove (now) unused function make_default_reg_sd().
      Fix a comment. REGISTRY_KEY has vanished from srv_winreg_nt.c
      Add a function libnet_conf_get_seqnum() to the libnet_conf API.
      Make regdb_init() behave like regdb_open() when registry is already opened.
      Use linbet_conf code in loadparm's registry handling.
      Makefile.in: Rework registry-related object collections.
      Fix paths for talloc into unpacked directory (rsync commands).
      Adapt source code checkout information to git repo in talloc website.
      Fix a typo.
      Remove relict SAMBA_CONFIGURE_CPPFLAGS from lib/replace.
      Remove unused m4 macro files.
      configure.in: move definition of build dir up.
      Move AC_ENABLE_SHARED and AC_DISABLE_STATIC to a more appropriate place.
      configure: move AC_SUBST's of certain directories to the corresponding checks.
      configure: Introduce "debug" variable set to yes by --enable-debug.
      Move the --enable-debug check up above all compiler checks.
      configure: move more developer/test related checks up before the compiler checks.
      configure: add default for developer and krb5developer
      configure: Also set debug=yes for --enable-developer and --enable-krb5developer.
      configure: move debug check to developer check
      build: change selftest_prefix from ./ to ./st .
      configure: Move path (and debug) checks to an m4 include file  check_path.m4.
      Remove relict SAMBA_CONFIGURE_CPPFLAGS from lib/replace.
      libreplace: Remove double item in case statement.
      configure: Use SAMBA_CONFIGURE_CPPFLAGS for AC_LIBREPLACE_BROKEN_CHECKS.
      Remove the getifaddrs checks from configure.in: they are now in lib/replace.
      libreplace: change samba_cv_ to libreplace_cv_ in getifaddrs.m4
      libreplace: change samba_cv_ to libreplace_cv_ in getpass.m4.
      libreplace: change samba_cv_ to libreplace_cv_ in system/config.m4.
      libreplace: change samba_cv_ to libreplace_cv_ in libreplace.m4.
      libreplace: change samba_cv_ to libreplace_cv_ in getifaddrs.m4
      libreplace: change samba_cv_ to libreplace_cv_ in getpass.m4.
      libreplace: change samba_cv_ to libreplace_cv_ in system/config.m4.
      libreplace: change samba_cv_ to libreplace_cv_ in libreplace.m4.
      Remove tests for vsnprintf snprintf asprintf vasprintf and va_copy from configure.
      Remove checks for ino_t, loff_t, offset_t, and comparison_fn_t from configure.in.
      configure: Move assemblage of samba version strings to m4 include file.
      configure: add --enable-shared-libs to control overall internal use of shared libs.
      Fix build with static libs: place tdb static lib after tdb-util objects.
      Fix the build on irix: Prevent empty line in TDB_OBJ
      Remove mmap check from configure.in
      Remove check for secure mkstemp from configure.in.
      configure: Abstract configuration of internal libs into an m4 macro.
      Move the definition of SMB_LIBRARY to aclocal.m4.
      Try and fix getifaddrs check on irix: dont't try to include config.h
      libreplace: fix compile errors in getifaddrs.c
      Try and fix getifaddrs check on irix: dont't try to include config.h
      libreplace: fix compile errors in getifaddrs.c
      Add missing initalizations of lastif in rep_getifaddr implementations.
      Fix linked list of ifaddrs in implementations of rep_getifaddrs.
      libreplace: fix creation of conftest files for getifaddrs tests.
      Add missing initalizations of lastif in rep_getifaddr implementations.
      Fix linked list of ifaddrs in implementations of rep_getifaddrs.
      libreplace: fix creation of conftest files for getifaddrs tests.
      Remove the implementations of _get_interfaces and autoconf test in interfaces.c
      libreplace: Fix comment originating from old samba source.
      Not all implementations of struct ifaddrs define ifa_broadaddr.
      libreplace: Fix comment originating from old samba source.
      libreplace: don't use socketwrapper for getifaddrs() implementations.
      libreplace: don't use socketwrapper for getifaddrs() implementations.
      Fix aix-build of libtalloc.so by exporting all necessary symbols.
      Fix the build on OpenBSD: ENOTSUP is not always defined.
      Fix build on some systems : don't pass libraries to mkproto.awk
      Fix build on VOS: socklen_t is needed for rep_inet_ntop: move it up.
      Fix build on VOS: socklen_t is needed for rep_inet_ntop: move it up.
      configure: put swat-part of config into m4-include file of its own.
      libreplace: Add tests for connect and gethostbyname.
      make idl: Only compile idl files newer than the output to be generated.
      Add libnet_join.idl to the IDL files to be processed by "make idl".
      Rerun make idl. To remove irritating semicolon.
      pidl: Remove superfluous semicolon in perl code.
      libreplace: Add tests for connect and gethostbyname.
      libreplace: fix standalone build on some systems.
      libreplace: fix standalone build - add necessary libs.
      Fix caller of node_status_query() to use sockaddr_storage().
      libreplace: standalone build: use -I$srcdir instead of -I.
      libreplace: fix standalone build on some systems.
      libreplace: fix standalone build - add necessary libs.
      libreplace: standalone build: use -I$srcdir instead of -I.
      Remove a useless variable.
      WHATSNEW: adapt section on registry configuration to new facts.
      WHATSNEW: Move Volker's post pre1 changes to the appropriate section.
      WHATSNEW: Merge additions from v3-2-stable's WHATSNEW. :-}
      WHATSNEW: fix a typo and spacings
      WHATSNEW: Fix spacings
      WHATSNEW: give a new date for the upcoming prerelease.
      WHATSNEW: Also merge changes in "Major enhancements" section from v3-2-stable.
      WHATSNEW: add two more items to my changes.
      WHATSNEW: add another change.
      WHATSNEW: Add changes by Andreas Schneider.
      libreplace: add extended getifaddrs test that prints out the interfaces.
      libreplace: use the new getifaddrs test also for autoconf.
      libreplace: try and fix rep_getifaddrs() for Tru64.
      libreplace: add missing semicolon to getifaddrs.
      libreplace: add missing newline in output of getifaddrs test.
      libreplace: fix silly crashbug in getifaddrs_test().
      libreplace: fix rep_freeifaddrs to not segfault on NULL input.
      libreplace: ifdef out ip6 code if unsupported.
      libreplace: add snprintf.c to test code for getifaddrs - needed on some systems.
      libreplace: add extended getifaddrs test that prints out the interfaces.
      libreplace: use the new getifaddrs test also for autoconf.
      libreplace: try and fix rep_getifaddrs() for Tru64.
      libreplace: add missing semicolon to getifaddrs.
      libreplace: add missing newline in output of getifaddrs test.
      libreplace: fix silly crashbug in getifaddrs_test().
      libreplace: fix rep_freeifaddrs to not segfault on NULL input.
      libreplace: ifdef out ip6 code if unsupported.
      libreplace: add snprintf.c to test code for getifaddrs - needed on some systems.
      Fix creation of replacetort.
      Fix linking of smbget when there is no shared library support.
      Revert "Add libnet_join.idl to the IDL files to be processed by "make idl"."
      Revert "make idl: Only compile idl files newer than the output to be generated."
      Eliminate tons of build warnings on non-IPV6 system.
      Fix linking of smbget when there is no shared library support.
      Makefile: Add explicit dependecies to libtalloc.so.
      Makefile: Add explicit dependecies to libtalloc.so.
      Makefile: untangle -ltalloc from LIBS, making use of libtalloc explicit.
      Makefile: reformat - break long target lines.
      Build: fix bin/net on Solaris - use -ltdb instead of bin/libtdb.so
      Test: Properly track current test binary for tracking crashes.
      Make test: set LD_LIBRARY_PATH for make test_shlibs and friends.
      Makefile: untangle -ltalloc from LIBS, making use of libtalloc explicit.
      Makefile: reformat - break long target lines.
      Build: fix bin/net on Solaris - use -ltdb instead of bin/libtdb.so
      Make test: set LD_LIBRARY_PATH for make test_shlibs and friends.
      Build: Add an rpath of $(LIBDIR) to binary targets.
      Revert "Build: Add an rpath of $(LIBDIR) to binary targets."
      Time to confess...
      configure: Add major version 4 to AC_INIT call.
      torture: fix escape sequence in test_chkpath().
      configure: fix quotation in SMB_LIBRARY for help output.
      Reformat: Remove indentation of part of pam_smbpass/support.c by one tab.
      loadparm: Reformat the parm table to use named initializers.
      loadparm: fix spacing in parm_table (training spaces and empty lines).
      loadparm: fix whitespaces in global and service parameter structs.
      loadparm: replace typedef struct {} global/service by struct global/struct service.
      loadparm: fix init_globals() to re-init all options event when called 2nd time.
      registry shares: prevent creating regular share called "global".
      loadparm: use a function to check for the registry config backend.
      loadparm: add utility function to check for config backend file.
      loadparm: fix a comment typo.
      loadparm: add a comment
      loadparm: add convenience wrapper lp_kill_all_services()
      loadparm: remove services read from smb.conf when starting over for config backend registry.
      loadparm: add a debug message.
      Add a debug message.
      init_srv_share_info_ctr: Add debug messages.
      init_srv_share_info_ctr: fix counting of services.
      fix build of asn1_compile when there is no system inet_aton() function.
      Fix %I macro expansion for IPv4 mapped IPv6 addresses.
      Allow parameter "include" in registry based configuration (again).
      libreplace: add an inet_aton() function that calls inet_pton().
      heimdal_build: fix linkage of asn1_compile and compile_et.
      libreplace: add -I$libreplacedir to CPPFLAGS for getifaddrs tests.
      libreplace: fix samba4 build (by not setting global LIBS).
      libreplace: add an inet_aton() function that calls inet_pton().
      libreplace: add -I$libreplacedir to CPPFLAGS for getifaddrs tests.
      libreplace: fix samba4 build (by not setting global LIBS).
      registry: migrate tdb registry backend to dbwrap.
      registry: rename tdb_reg to regdb after change to dbwrap.
      registry: rename tdb_refcount to regdb_refcount after change to dbwrap.
      registry: don't leak (to talloc_tos()) in init_registry_data().
      registry: explicitly use talloc context instead of talloc_tos()
      registry: reformat init_registry_data() some, killing long lines.
      registry: don't leak (to talloc_tos()) in regdb_store_keys_internal().
      registry: reformat regdb_store_keys_internal(), killing long lines.
      registry: don't leak (to talloc_tos()) in regdb_store_keys().
      registry: don't leak memory on transaction fail in regdb_store_keys().
      registry: separate cancel and failur exit paths in regdb_store_keys().
      registry: allocate tempory data in talloc stack in regdb_store_keys().
      registry: don't leak on success path in regdb_store_keys().
      registry: explicitly use talloc context instead of talloc_tos()
      registry: don't leak to talloc stack in regdb_fetch_keys().
      registry: don't use talloc_stackframe() instead of talloc_tos() als temp ctx
      registry: use talloc instead of malloc for tdb data in regdb_store_values().
      registry: use talloc_stackframe instead of hand crafted temporary context.
      registry: untangle assignments and if statements in regdb_set_secdesc().
      registry: remove an unused variable from regdb_set_secdesc().
      registry: use talloc instead of malloc and provide common exit point
      registry: convert regdb REGISTRY_OPS to named struct initializers.
      registry: untangle assignment and if-clause in init_registry_data().
      Move libnet_conf to a library lib/smbconf/ of its own, fixing the api.
      libsmbconf: rename all occurrences of libnet_conf_ to smbconf_ .
      testparm: fix a segfault triggered by setting "unix password sync = yes".
      testparm: fix irritating indentation.
      testparm: correctly check for empty lp_passwd_prog().
      testparm: only check for %u und passwd program when passwd program is given.
      smbtorture: fix typos in RAW-OPLOCK output.
      libreplace: put inet_aton.c under LGPL instead of GPL.
      libreplace: replace inet_ntoa() when it is missing
      libreplace: remove trailing white spaces.
      libreplace: remove duplicate entry of inet_ntoa from README.
      libreplace: put inet_aton.c under LGPL instead of GPL.
      libreplace: replace inet_ntoa() when it is missing
      libreplace: remove trailing white spaces.
      libreplace: remove duplicate entry of inet_ntoa from README.
      libreplace: move rep_socketpair() to its own module.
      libreplace: replace.c does not need system/network.h anymore.
      libreplace: move rep_socketpair() to its own module.
      libreplace: replace.c does not need system/network.h anymore.
      registry: refactor creation of subkeys out of init_registry_data().
      registry: add a transaction wrapper to init_registry_key_internal().
      registry: separate initialization of registry data from regdb_init().
      registry: untangle assignment and if-statement in regdb_init().
      registry: reformat regdb_init() slightly, breaking long lines.
      registry: in regdb_init, not only complain about INFO/version, store it...
      registry: use available string constant in debug statement.
      loadparm: remove unneeded include.
      loadparm: reenable checking files for updates while in registry configuration.
      smbd: fix session setup with security = share.
      libsmbconf: fix a comment
      libsmbconf: change smbconf_get_seqnum() to smbconf_changed().
      libsmbconf: fix indentation.
      libsmbconf: change the API to always take the smbconf_ctx parameter first.
      libsmbconf: put the smbconf context struct into a private header.
      libsmbconf: refactor autocreation of [global] into a helper function.
      libsmbconf: refactor out registry implementation of smbconf operations.
      libsmbconf: fix a comment
      libsmbconf: add check for NULL servicename to smbconf_share_exists().
      libsmbconf: add existence check for service to smbconf_get_share().
      libsmbconf: add existence check for service to smbconf_delete_share().
      libsmbconf: move smbconf_reg_initialize() down to the smbconf operations.
      libsmbconf: introduce a smbconf_ops layer to allow interchangeable backends.
      libsmbconf: add open and close operations to the smbconf_ops.
      libsmbconf: rename smbconf_open() to smbconf_init().
      libsmbconf: rename smbconf_close() to smbconf_shutdown().
      libsmbconf: fix comments
      libsmbconf: add shutdown handler to smbconf_ops.
      libsmbconf: add backend specific init function.
      libsmbconf: reformaat - fix some whispacing/tabs
      libsmbconf: move registry implementation to a module of its own.
      libsmbconf: add a comment.
      libsmbconf: group together functions in smbconf.c more appropriately
      libsmbconf: adapt a comment to new circumstances
      libsmbconf: add structuring comments to the prototypes in the public header.
      libsmbconf: add a "path" variable to the conf context.
      libsmbconf: add private_data section to smbconf_ctx.
      libsmbconf: add a comment.
      libsmbconf: add internal open/close handling to registry backend.
      registry: fix registry_init_smbconf() to close the registry at the end.
      registry: close regdb in error path (and use it) in init_registry().
      registry: remove unneeded talloc stackframe variable.
      registry: some whitespace cleanup in init_registry().
      registry: close registry in exit path in registry_init_smbconf().
      registry: add reg_init_basic() - init registry with only the db backend.
      libgpo: use reg_setkeysecurity() instead of regdb_set_secdesc().
      libgpo: replace hand-crafted registry initialization by registry_init_basic.
      libgpo: open the registry in gp_init_reg_ctx().
      build: don't autogenerate prototypes for util_tdb and dbwrap anymore.
      util_tdb: group prototypes in util_tdb.h thematically
      util_tdb: make the _byblob functions static - not currently used elsewhere.
      util_tdb: add the tdb_pack_append() prototype to util_tdb.h
      util_tdb: add a wrapper tdb_wipe() for traverse with tdb_traverse_delete_fn().
      util_tdb: add my (C) for the tdb validation code
      util_tdb: make the _byblob fetch/store functions public again.
      use tdb_wipe_all() instead of tdb_wipe() - it is faster...
      util_tdb: remove trivial and unused tdb_wipe().
      smbconf: reformat - fix intentation.
      loadparm: add userdata parameter to do_section() and do_parameter().
      libsmbconf: add a text backend to libsmbconf based on the params.c parser.
      net_conf: fix import function by using the new text backend of smbconf.
      net_conf: use talloc_stackframe() instead of talloc_init().
      net_conf: rename "ctx" to "mem_ctx" for clarity.
      net_conf: add casts to avoid compiler warnings.
      net_conf: reformat - re-indent one function call.
      libsmbconf: in text backend, put flushing of the cache into a helper function.
      libsmbconf: text - change the cache to be talloced
      libsmbconf: text - pass the cache instead of all private data to pm_process.
      net_conf: fix non-testmode import function.
      posix_acls: clarify loop condition code, removing unneeded counter variable.
      libreplace: fix coverity ID 517 - untangle close from open in test/os2_delete.c
      libwbclient: fix Coverity ID 536 remove duplicate error path (dead code).
      libreplace: fix coverity ID 517 - untangle close from open in test/os2_delete.c
      regdb: use != 0 instead of == -1 check for transaction_[commit|cancel]
      dbwrap: fix dbwrap_trans_[delete|store]() to stop when transaction_start() failed.
      regdb: use == 0 (instead of != -1) as indicator for success of dbwrap_trans_[delete|store]()
      net: add a "net registry" subcommand to locally access the registry.
      srv_winreg: add a debug message to _winreg_CreateKey().
      Add a talloc context parameter to current_timestring() to fix memleaks.
      winbindd_cache: add missing validation function for pwinfo cache entry
      Revert "regdb: use dbwrap->fetch() instead of fetch_locked() for readonly access"
      build: fix configure option --with-static-libs=libXYZ
      registry: reg_deletevalue should return error, when the value does not exist.
      test: in tests_all.sh, wrap calls to test scripts into shell functions.
      test: add possibility to select tests to run via tests_all.sh (make test)
      test: add (and unify) sectioning output of subtests in tests_all.sh
      test: add test script for testing "net registry".
      test: make registry tests more portable: use 'printf "%s"' instead of 'echo -e'
      test: make registry tests more portable: protect some grep patterns in ' '.
      test: be more portable: replace 'echo -n' by 'printf "%s"' in selftest.sh
      test: be more portable. replace 'echo -n' by 'printf "%s"' in test_functions.sh
      configure: be more portable, use 'printf "%s"' instead of "echo -n"
      installswat: be more portable, use 'printf "%s"' instead of 'echo -n'
      mkversion: be more portable, use 'print "%s"' instead of 'echo -n'
      po/genmsg: be more portable, use 'printf "%s"' instead of 'echo -n'
      test: fix use of printf in net_registry tests.
      test: fix net_registry tests to correctly capture output of commands inside one test
      test: some cosmetics to net_registry tests.
      test: fix net_registry test "set value to different type" to track error count
      test: add diagnostic message to net_registry test.
      libsmbconf: move initialization of registry value down after error checks.
      registry: remove parameter checks from smbconf backend: they are in libsmbconf.
      mapping.tdb: fix creation of entries with GROUP_PREFIX
      Makefile: reassign reg_init_basic.o to REG_BASE_OBJ, where it belongs...
      mapping_tdb: fix enumeration of mappings.
      net_registry: split utility function of common interest out into util module.
      net_rpc_registy: use function print_registry_key
      net_rpc_registry: use utility function print_registry_value().
      net_rpc_registry: use split_hive_key to normalize hive befor open.
      net: change split_hive_key() to properly allocate subkeyname
      net_rpc_registry: consistently return error upon wrong use.
      net_rpc_registry: return available error code on failure in deletevalue.
      winbindd: fix break out early condition in fill_grent_mem().
      dbwrap: fix more "tdb_chainunlock failed" messages
      net (registry util): refactor printing of value without name out.
      net registry: add a getvalue subcommand that prints a single given value.
      net rpc registry: add getvalue command.
      net: don't process net_registry_util.c with make proto
      vlp: fix an implicit cast compile warning.
      registry: add support for REG_MULTI_SZ to registry_push_value().
      charcnv: add talloc_strdup_lower() - talloc variant of strdup_lower().
      libsmbconf: move utility functions from main module to new smbconf_util.c
      libsmbconf: rename smbconf_txt_find_in_array() to smbconf_find_in_array()
      libsmbconf: reorder prototypes in smbconf_private.h
      libsmbconf: move smbconf_find_in_array() to smbconf_util.c
      libsmbconf: add smbconf_reverse_find_in_array() to find last occurence of a string.
      libsmbconf: search from the back when getting parameter from text backend
      libsmbconf: fix a comment
      libsmbconf: untangle assignment and test in for-loop condition.
      libsmbconf: reformat smbconf_format_registry_value() - indentations/tabs
      libsmbconf: add a "verbatim" parameter to smbconf_init_txt_simple().
      libsmbconf: load file after special initialization
      libsmbconf: pass txt_private_data instead of only cache to do_parameter/section
      libsmbconf: activate the verbatim-flag in text backend: store parameters as they come.
      libsmbconf: add get_includes() and set_includes() to the API.
      libsmbconf: add talloc context to the get_includes methods.
      libsmbconf: add testsuite to the library.
      libsmbconf: testsuite: add support for "--configfile" option.
      libsmbconf: testsuite: add talloc_stackframe to main().
      libsmbconf: testsuite: use POPT_COMMON_SAMBA instead of POPT_COMMON_CONFIGFILE
      libsmbconf: testsuite: set the debufg fd to stderr.
      libsmbconf: fill get_includes() in text backed to retrieve includes from cache.
      libsmbconf: testsuite: add test for "get_includes" and use it in the text backend test.
      libsmbconf: add "_global_" wrappers for get/set_includes.
      libsmbconf: testsuite: use the get_global_includes in get_includes test.
      libsmbconf: testsuite: test get_includes for registry backend
      libsmbconf: implement get_includes() and set_includes() for registry backend.
      libsmbconf: testsuite: refactor printing of string lists out.
      libsmbconf: testsuite: add test_set_get_includes() and use it in registry test
      libsmbconf: testsuite: fix handling of error message/overall status
      libsmbconf: more sanely print multi_sz values in registry backend
      libsmbconf: move registry_smbconf_valname_forbidden() to the registry backend
      libsmbconf: make registry_smbconf_valname_forbidden() static
      libsmbconf: rename registry_smbconf_valname_forbidden() to smbconf_reg_valname_forbidden()
      libsmbconf: refactor get_includes on opened key into smbconf_reg_get_includes_internal()
      libsmbconf: add function smbconf_reg_valname_valid() and use it in get_values()
      libsmbconf: add includes at the end of parameter list in reg_get_share().
      libsmbconf: consider "include" a forbidden parameter in regisry config again.
      libsmbconf: prevent getting/deleting value "includes".
      libsmbconf: fix crashbug - correctly check for existence of file.
      libsmbconf: let set_includes delete the includes paramter when given an empty list
      libsmbconf: add delete_includes mehtod to the api (and backend implementations)
      libsmbconf: return success and count 0 from get_includes when no includes present.
      libsmbconf: testsuite: add test for delete_includes
      test: run smbconftort testsuite from the local_s3 tests
      loadparm: drop debug level in map_parameter from 0 to 1
      net conf: fix import to correctly add includes (at the end)
      net conf: don't drop config in testmode
      net conf: reduce indentation by grouping testmode code together.
      net conf: add diagnostic message for failure to load text file.
      net conf: implement "net conf getincludes".
      net conf: implement a "net conf setincludes" command.
      net conf: implement "net conf delincludes".
      net conf: use talloc and talloc_strdup_lower throughout all net conf functions.
      winbindd: only call winbindd_validate_cache when not in offline logon mode.
      test: not only pretend to call smbconftort - really do it :-}
      libsmbconf: don't mark the API as "subject to change" any longer.
      update WHATSNEW
      util_tdb: fix a segfault caused by a fatal typo.
      libnetapi: fix interactive logging by preventing setup_logging from closing stderr.
      libnetapi: fix dependency problem by linking libnetapi statically (internally)
      build: group NTERR/DOSERR/ERRORMAP and LIBSAMBA object differently
      build: group RPC_PARSE_OBJ1 with LIBSAMBA_OBJ
      registry: move normalize_dbkey() from lib/util_reg.c to registry/reg_util.c
      build: regroup LIBSMB objects to for a smallest linkable uint (LIBSMB_ERR_OBJ)
      build: move SECRETS_OBJ into LIBSMB_OBJ
      build: move SECRETS_OBJ into LIBSMB_ERR_OBJ.
      build: smbconftort only needs LIBSMB_ERR_OBJ, not LIBSAMBA_OBJ
      dbwrap_tdb2: fix a C++ warning by making implicit cast explicit
      libnetapi: fix a C++ warning by making implicit cast explicit
      registry: remove the REGISTRY_HOOKS layer from the reghook cache.
      registry: adapt copied function header comments.
      registry cachehook: refactor normalization of keyname out.
      registry cachehook: fix memleak (to talloc_tos()): free key at the end.
      registry cachehook: eliminate a couple trailing spaces (empty lines).
      registry cachehook: add talloc failed debug messages.
      registry: make registry_init_smbconf() hook the registry ops onto given key.
      registry: change regdb_init() to return WERROR instead of bool.
      registry: unify debug output in the registry init functions.
      registry: change init_registry_key() and init_registry_data() to return WERR
      registry cachehook: compare cache_tree against NULL, not 0.
      registry: change reghook_cache_init() to return WERROR and use it in the callers.
      registry cachehook: revert logic to make fast path more obvious and reduce indent.
      adt_tree: change pathtree_add to return WERR instead of bool.
      registry cachehook: change helper function keyname_to_path() to return WERROR.
      registry: change reghook_cache_add() to return WERROR instead of bool
      registry: change registry_init_basic() to return WERROR instead of bool
      registry: refactor common part of registry initialization out.
      registry: change registry_init_smbconf() to return WERROR instead of bool
      registry: change init_registry() to return WERROR instead of bool.
      registry: rename init_registry() to registry_init_full() for consistency.
      net registry: remove superfluous regdb_close().
      registry: honour the WERROR that regsubkey_ctr_addkey gives in regdb_fetch_keys.
      registry: honour the WERROR that regsubkey_ctr_addkey gives us in reg_load_tree.
      libsmbconf: rename smbconf_init() to smbconf_init_internal().
      libsmbconf: remove the bool verbatim parameter from txt backend init function.
      libsmbconf: add a check for talloc failure to smbconf_txt_init().
      libsmbconf: move setting of verbatim variable into a more internal function.
      libsmbconf: add a smbconf init dispatcher smbconf_init().
      net conf: use the new smbconf_init() dispatcher instead of explicit backend init.
      loadparm: use the new smbconf_init() dispatcher for loading registry config.
      libsmbconf: add handling of "NULL" strings to smbconf_add_string_to_array()
      libsmbconf: add handling of NULL strings to smbconf_find_in_array().
      libsmbconf: allow NULL sharename in smbconf_share_exists().
      libsmbconf: default to the NULL section when a parameter is encountered w/o section
      net conf: fix output of out-of-share parameters in test mode import
      libsmbconf: make sure to always list the NULL section first in text backend.
      net conf: simplify logic in test output of net conf import.
      net conf: adapt output of NULL share params in net conf list.
      libsmbconf: don't complain with WERR_ALREADY_EXISTS for NULL share in smbconf_create_share().
      libmsbconf: add handling of NULL share parameters to registry backend.
      auth: add SeDiskOperatorsPrivilege to get_root_nt_token to fix registry shares.
      loadparm: remove pfunc parameter from process_registry_globals().
      libsmbconf: fix segfault in listing share names / config.
      build: add missing dependency for libtdb.so to pam_smbpass
      loadparm: reactivate special semantics of "include = registry" for now.
      vfs_cacheprime: fix C++ warning - make implicit cast explicit
      rpc_parse: fix "assignment discards qualifier" warning by using CONST_DISCARD.
      libwbclient: fix wbcResolveWinsByName() to take char * instead of const char **
      libwbclient: change wbcResolveWinsByIP() to take char ** instead of const char **
      loadparm: make lo_load_initial() only skip registry include.
      loadparm: rename bNoIncludes to bAllowIncludeRegistry (inverting logic)
      loadparm: reformat - fix whitespace/tab
      Move the posix pending close functionality down into the VFS layer.
      Don't modify the fsp in fd_close_posix() anymore.
      Change fd_close_posix() to return int instead of NTSTATUS.
      Slight reformatting of fd_close_posix(), while I'm at it.
      Remove redundant parameter fd from SMB_VFS_CLOSE().
      configure: fix a comment typo
      libsmbconf: rename text backend smbconf_txt_simple to smbconf_txt.
      libsmbconf: rename smbconf_init_txt_simple() to smbconf_init_txt().
      libsmbconf: text backend remove comment references to "simple".
      libsmbconf: fix comment headers in smbconf.h
      WHATSNEW: update my changes for 3.2.0pre3
      WHATSNEW: re-establish alphabetic ordering in smb.conf changes
      WHATSNEW: list special meaning of "include = registry" under smb.conf changes.
      WHATSNEW: update the section on registry configuration.
      WHATSNEW: add one more change.
      libsmbconf: add a struct smbconf_service to hold the parameter names + values.
      libsmbconf: rewrite API to use smbconf_service struct
      libsmbconf: remove unnecessary talloc success checks from smbconf.c
      libsmbconf: remove unnecessary talloc success checks from smbconf_reg.c
      libsmbconf: remove unnecessary talloc success check from smbconf_txt.c
      winbindd_cache: simplify logic in new key length check for UA keys.
      Add an initial amount of documentation of registry based
      Fix a couple of tags.
      Fix the section number of one reference to the "net" command.
      Adopt a note in the manpage to the verstion change introduced
      Add documentation for the "net conf" commands to the manpage.
      Add documentation for new parameter "config backend".
      Add description of parameter "config backend" to the man pages.
      Document default value of parameter "registry shares".
      Add more content to the description of "registry shares".
      Fix output of backslashes in SMBCONF registry key.
      Document new smb.conf options "ldap debug level" and "ldap debug threshold".
      manpages: update the section about registry configuration in smb.conf.5
      manpages: describe special meaning of "include = registry" in description of "include"
      docs: fix indentation in expand-smbxonfdoc.
      docs: fix the manpage output of parameters list in smb.conf.5.
      registry: use dbwrap_fetch_bystring() in regdb_fetch_keys().
      registry: use dbwrap_fetch_bystring() in regdb_fetch_values().
      registry: use normalize_reg_path() in regdb_fetch_keys()
      registry: combine talloc_strdup() and normalize_reg_path() in regdb_fetch_keys().
      registry: add a function for fetching a tdb record for a given keystring
      registry: use regdb_fetch_key_internal() in regdb_fetch_keys().
      registry: use regdb_fetch_key_internal() in regdb_fetch_values().
      registry: add function regdb_key_exists() to check for existence of a key.
      registry: check for existence of key init_registry_key and possibly save a write.
      registry: save writes in init_registry_data() if data does already exist.
      registry: skip writes of existing keys in init_registry_data().
      testsuite: use domain==workgroup in wbinfo tests now that we are PDC.
      testsuite: adapt informative message to say "Running _local_ registry tests".
      testsuite: add the ability to test "net rpc registry" with the net_registry tests
      testsuite: run the net rpc registry tests from the net_s3 tests.
      testsuite: give the testuser administrative rights in selftest.sh
      testsuite: make diagnostic output more appropriate in tests_all.sh
      testsuite: make structuring output of net_s3 tests stand out more.
      torture: use dom_idx after determining it in samba3rpc.c:get_usr_handle()
      testsuite: allow selection of posix_s3 subtests by env var POSIX_SUBTESTS.
      registry: change order of arguments of regdb_fetch_key_internal()
      registry: free temporary data in regdb_fetch_key_internal().
      registry: make normalize_reg_path() strip leading and trailing '/' chars.
      registry: Implement new semantics for existence of registry key in tdb.
      registry: free talloc context on error path in regdb_fetch_values().
      registry: check for existence of key in regdb_fetch_values() first.
      registry: check for existence of key in regdb_fetch_keys() before proceeding.
      registry: check for existence of key in regdb_store_values() before proceeding.
      registry: check for existence of key in regdb_get_secdesc() before proceeding.
      registry: check for existence of key in regdb_set_secdesc() before proceeding.
      registry: add a function regdb_key_is_base_key() to check whether is composite.
      registry: check for existence of non base key in regdb_store_keys() before proceeding.
      registry: add comment explaining workflow to make store_keys safe w/o transactions
      registry: regdb_store_keys: move storing the subkey list down after removing values.
      registry: adapt comment of last step in regdb_store_keys().
      registry: adapt comment to first step in regdb_store_keys().
      registry: change order of deleting value and subkey lists in store_keys().
      registry: add comments to removing lists in regdb_store_keys().
      registry: add removal of secdesc of a key to regdb_store_keys().
      loadparm: Fix activation of registry globals in lp_load_*.
      packaging: add x perms to samba-ctdb makerpms.sh script.
      packaging: add x perms to samba-ctdb filter-requires-samba.sh script.
      packaging: rename RHEL4-CTDB --> RHEL-CTDB
      packaging: fix GPL version in samba-ctdb specfile.
      packaging: remove references to smbmount and friends from samba-ctdb spec file
      loadparm: refactor initalization of registry config out into lp_smbconf_ctx().
      loadparm: refactor processing of service out of process_registry_globals()
      loadparm: add a function process_registry_shares()
      loadparm: add parameter allow_registry_shares to lp_load_ex().
      loadparm: add call to do_section() to process_registry_service().
      loadparm: add funcion lp_load_with_registry_shares().
      testparm: list registry shares with testparm.
      net_registry: add raw output of value to print_registry_value().
      net registry: refactor core of net_registry_getvalue() out
      net registry: add a getvalueraw command to print the value in raw format.
      net rpc registry: fix usage message of getvalue.
      net rpc registry: abstract add boolean "raw" to rpc_registry_getvalue_internal()
      net rpc registry: add a getvalueraw subcommand.
      net rpc registry: fix getvalueraw to really print raw...
      packaging: fix a comment typo in makerpms script.
      packaging: add a comment explaining EXTRA_OPTIONS to the makerpms script
      packaging: use docs tarball instead of docs dir in makerpms / samba.spec
      packaging: use git-archive in RHEL-CTDB/makerpms.sh
      packaging: fix RHEL-CTDB build by removing duplicate winbind-32bit paragraphs
      packaging: enable calling RHEL-CTDB/makerpms.sh from other directories
      packaging: re-introduce Release numbering ".ctdb.<number>"
      build: freeze proto.h
      winbindd: freeze winbindd_proto.h
      swat: freeze swat_proto.h from "make proto"
      smbclient: freeze client_proto.h from "make proto"
      ntlm_auth: freeze ntlm_auth_proto.h from "make proto"
      net: freeze net_proto.h from "make proto"
      build: freeze passwd_proto.h from "make proto"
      libnet: freeze libnet_proto.h from "make proto"
      build: remove reference to mkproto.sh from Makefile
      build: remove mkproto.sh and mkproto.awk
      build: remove "headers" and "proto" make targets.
      build: remove the "delheaders" target.
      build: remove the proto_exists target - it is not needed anymore.
      packaging: we are at release ctdb.27 in RHEL-CTDB.
      packaging: disable cups in the RHEL-CTDB build.
      rpc_client: use endpoint mapper to get the port for rpc_pipe_open_tcp().
      torture: add a test program rpc_open_tcp() to test the rpc_pipe_open_tcp() func.
      rpc_client: make rpc_pipe_open_tcp_port and rpc_pipe_get_tcp_port static.
      build: add a "make shlibs" target to build all the shared libraries.
      rpc_open_tcp: now drsuapi is complete, we can use it in the test program.
      build: remove PROTO_OBJ from Makefile.in - it is not needed any more
      Add generated library symbols files to .gitignore
      build: combine LIB_WITHOUT_PROTO_OBJ and LIB_WITH_PROTO_OBJ into LIB_OBJ
      loadarm: fix testparm with "config backend = registry".
      Add function is_dc_trusted_domain_situation().
      passdb: in get_trust_pw_clear() correctly fail if trusted domains not supported
      passdb: add comment explaining logic in get_trust_pw_clear().
      passdb: check for is_dc_trusted_domain_situation() in get_trust_pw_hash().
      winbind: correctly omit check for trusted domain support in cm_prepare_connection
      Remove unused function is_trusted_domain_situation().
      loadparm: fix process_registry_shares() when there is only [global] in registry.
      fix the build after prototype change.
      fix build: add missing prototype of msg_close_file()
      lib/events: use mem_context given to event_context_init().
      Remove reference to current_user from modules/nfs4_acls.c .
      testsuite: don't give the testuser administrative rights globally.
      testsuite: give admin rights to testuser only for the "net rpc registry" test.
      net sam: fix typo in debug message.
      net sam: fix typo in comment
      file_access: remove unneeded stat buf parameter from can_access_file_acl().
      smbd/dir.c: remove unneeded stat buf parameter from user_can_read_file()
      file_access: add a function header comment for can_access_file_acl().
      Fix Bug #5548 (segfauls in handle_include with %m macro expansion).
      testsuite: update introductory comment to test_net_regsistry.sh
      testsuite: add a testparm_s3 test script.
      testsuite: enable the testparm_s3 tests.
      loadparm: don't treat a missing include file as an error in handle_include().
      loadparm: use the return value of the special handlers in lp_load().
      libsmbconf: fastpaths first in smbconf_reg_valname_valid().
      libsmbconf: add "includes" to the forbidden_valnames[].
      smbd: don't panic if messaging_init() fails but return NULL
      smbd: untangle logic in smbd_messaging_context() slightly.
      winbindd: don't panic if messaging_init() fails - return NULL instead.
      winbind: untangle logic in winbind_messaging_context() slightly.
      winbind: remove duplicate debug message for failing messaging_init().
      nmbd: don't panic if messaging_init() fails - return NULL instead.
      nmbd: untangle logic in nmbd_messaging_context() slightly.
      messages: bump debug level to 1 for "messaging_ctdb_init failed".
      ctdbd_connect: bump debug level to 1 for "connect failed" message.
      credentials: gss_set_cred_option() needs gss_cred_id_t * argument, not gss_cred_id_t.
      pynbt: eliminate "initialization from incompatible pointer type" warning
      tdb_unpack: Eliminate "cast to pointer from integer of different size" warning on 64bit.
      ntlmssp: get rid of "cast to pointer from integer of different size" warning on 64 bit
      ntlm_auth: eliminate "cast pointer from integer of different size" warnings on 64bit.
      build: add ability to use library files of the form NAME.so.VERSION to create version script name.
      build: fix creation of talloc shared lib.
      build: fix the installlibtalloc target to install SONAME and \.so versions of shared lib.
      build: fix creation of link libtalloc.so on some systems.
      build: add an uninstalllibtalloc target
      build: add a cleanlibtalloc target.
      build: move libtalloc related targets together.
      build: fix installlibtalloc to not install symlink if the library is not there
      build: add structuring comments for libraries and libtalloc section.
      build: add more structuring comments to Makefile.in
      build: move top level targets for the libs into the corresponding sections in Makefile.in
      build: move all libtalloc related definitions into the libtalloc section in Makefile.in
      build: move libtdb related definitions and targets to libtdb section in Makefile.in
      build: fix creation of the libtdb shared library.
      build: create a cleanlibtdb target and use it in target clean.
      build: fix the installlibtdb target to install the soname file of libtdb.
      build: add an uninstalllibtdb target.
      build: move libnetapi related definitions and targets together into the libnetapi section.
      build: fix creation of the libnetapi shared lib: create soname library
      build: add a cleanlibnetapi target and use it in make clean
      build: fix installlibnetapi target - install symlink libnetapi.so (if appropriate)
      build: fix uninstalllibnetapi target - handle symlink libnetapi.so
      build: move libtdb target further down following common schema like with libtalloc
      build: move libwbclient related target to libwbclient section in Makefile.in
      build: fix creation of libwbclient shared lib by crating soname file
      build: fix the installlibwbclient target to use defined variables and install the symlink
      build: add uninstalllibwbclient to Makefile.in and use it for uninstall
      build: add a cleanlibwbclient target to Makefile.in and use it for make clean.
      build: move definition of SHLIBS to libraries section
      build: move libsmbclient related variables and targets to libsmbclient section
      build: rename (un)installclientlib to (un)installlibsmbclient
      build: slightly change and extend the logic of SMB_LIBRARY().
      build: handle libsmbclient by SMB_LIBRARY() and correctly create soname file.
      build: add cleanlibsmbclient target and use it in make clean.
      build: add structuring comment for libbigballofmud
      build: move libsmbsharemodes related vars and targets to libsmbsharemodes section in Makefile.in
      build: handle libsmbsharemodes by SMB_LIBRARY() and correctly create SONAME file.
      build: create cleanlibsmbsharemodes target and use it in "make clean".
      build: move libaddns related bits to the libaddns section in Makefile.in
      build: move LIBADDNS_OBJ0 up again -- needed for NET_OBJ :-\
      build: extend SMB_LIBRARY() to optionally take default value.
      build: handle libaddns by SMB_LIBRARY() and correctly create SONAME file.
      build: add a cleanlibaddns target and use it in "make clean"
      build: fix typo in use of cleanlibsmbclient target
      build: remove the SONAME_VER variable - not used anymore.
      build: fix shlibs target after internal changes, add libs target.
      build: combine the cleanlibfoo targets to one cleanlibs target
      build: extend SMB_LIBRARY() to take a version as an optional second argument
      build: set SONAME version of libraries from configure, not using library-versions
      build: remove library-versions.in - it is not used any more.
      build: fix creation of libsmbsharemodes.a - don't link in libtdb.a.
      build: fix creation of libaddns.a - don't link in libtalloc.a
      build: fix creation of libsmbclient.a - don't link in libtalloc.a
      tdbtool: fix off-by-one error in argument length. (bug #2344)
      tdbtool: fix off-by-one error in argument length. (bug #2344)
      build: fix build of smbget by moving LIBSMBCLIENT_OBJ* defs up again
      build: move definition of LIBADDNS_OBJ back up to LIBADDNS_OBJ0
      registry: fetch regdb_fetch_keys() when a key exists but not its subkey-record.
      testsuite: fix expr typo in net registry testscript.
      testsuite: fix another expr typo in net registry test script.
      registry: improve logic for deleting value records in regdb_store_keys().
      registry: fix logic in deleting subkeys record in regdb_fetch_keys().
      Revert "tdbtool: fix off-by-one error in argument length. (bug #2344)"
      Revert "tdbtool: fix off-by-one error in argument length. (bug #2344)"
      dsdb: eliminate disards qualifyer compile warning.
      libnet_domain: eliminate "discards qualifier" warning (const).
      ldb_map: eliminate "discards qualifyer" warning (const).
      docs: update the section about net conf in the net(8) manpage.
      docs: fix VERSION section in the net(8) manpage.
      docs: fix the net conf section of net(8) to mention "config backend = registry".
      build: introduce a installibs target and use it in "make install"
      build: distribute the cleanlibs target over the library-specific sections.
      build: use the libs target instead of the LIBRARIES variable as dependecy for "all".
      build: distribute the libs target over the library-specific sections.
      build: create a new uninstalllibs target and use it in "make uninstall"
      build: remove SHLIBS variable, and distribute deps for shlibs and test_shlibs target
      docs: fix the specified default of "password server" - it is *, not "".
      build: fix build of libaddns shared lib. symbols file was missing.
      build: fix build of libaddns shared lib : it needs socket_wrapper.
      build: use $(WINBIND_LIBS) instead of @WINBIND_LIBS@ in rules.
      build: use $(POPT_LIBS) instad of @POPT_LIBS@ in rules.
      build: use $(LIBTALLOC_LIBS) instead of @LIBTALLOC_LIBS@ in rules.
      build: use $(LIBTDB_LIBS) instead of @LIBTDB_LIBS@ in rules.
      build: link in $(WINBIND_LIBS) instead of @LIBWBCLIENT_SHARED@
      build: use $(LIBNETAPI_LIBS) instead of @LIBNETAPI_LIBS@ in rules.
      build: use $(LDAP_LIBS) instead of @LDAP_LIBS@ in rules.
      build: use $(WINBIND_NSS_EXTRA_LIBS) instead of @WINBIND_NSS_EXTRA_LIBS@ in rules.
      build: use $(WINBIND_NSS_PTHREAD) instead of @WINBIND_NSS_PTHREAD@ in rules.
      build: use $(PAM_WINBIND_EXTRA_LIBS) instead of @PAM_WINBIND_EXTRA_LIBS@ in rules.
      testparm: add a switch --skip-global-checks.
      testsuite: fix bug #5594 by using the new --skip-global-ckecks switch
      testparm: rename -g|--skip-global-ckecks to -l|--skip-logic-checks
      testparm: skip the per-share logic checks when --skip-logic-checks is specified.
      testparm: refactor the per-share logic checks out into do_per_share_checks().
      popt: add a popt_common_debuglevel set of options providing -d|--debuglevel
      testparm: allow the default debug level of 2 to be changed from the command line.
      dbwrap: when clustering = yes, don't fall back to db_open_tdb in db_open
      dbwrap: when clustering = yes, don't fall back to db_open_tdb in db_open_trans.
      registry: bump debug level to 1 in regdb_init() if opening the registry fails.
      registry: bump debug level to 1 in regdb_init() if storing version string fails.
      dbwrap: don't panic in db_open() when attaching to ctdb fails.
      dbwrap: don't panic in db_open_trans() when attaching to ctdb fails.
      dbwrap: don't panic in db_open_trans() if called with TDB_CLEAR_IF_FIRST.
      netapi: fix vim(?)-typo
      gitignore: ignore the proper genreated library symbol files.
      dssync: fix missing prototype warning by including the proper header.
      net rpc vampire: eliminate missing proto warning by making rpc_vampire_keytab_ds_internals static.
      rpcclient: use level 5 or level 8 in dsgetncchanges command based on bind-info.
      rpcclient: add ability to fetch single objects with dsgetncchanges command
      testsuite: fix expr syntax error in net registry test.
      testsuite: fix another expr syntax error. in tests_all.sh.
      testsuite: fix expr error on Tru64, triggered by uninitialized failed variable.
      re-run make idl after Jelmer's "poperly cast array lengths" pidl change.
      drsuapi.idl: add drsuapi_DsBindInfo48.
      drsuapi.idl: the last 16 bytes in DsBindInfo48 ar the GUID of the config dn.
      drsuapi.idl: add drsuapi_SupportedExtensionsExt bitfield.
      drsuapi.idl: add drsuapi_DsBindInfo48.
      drsuapi.idl: the last 16 bytes in DsBindInfo48 ar the GUID of the config dn.
      drsuapi.idl: add drsuapi_SupportedExtensionsExt bitfield.
      re-run make idl after adding drsuapi_DsBindInfo48 to drsuapi.idl
      rpcclient: make DsGetNCChanges work against w2k8 (add knowledge of DsBindInfo48)
      drsuapi.idl: change the u1 field in DsBindInfo* to "pid".
      Change occurrences of the u1 member of DsBindInfo* to pid after idl change.
      drsuapi.idl: change the u1 field in DsBindInfo* to "pid".
      re-run "make idl" after changing u1 member to pid in DsBindInfo*.
      Change occurrences of the u1 member of DsBindInfo* to pid after idl change.
      smbtorture: add support for the DSBindInfo48 to the RPC-DSSYNC test.
      smbtorture: add a warning for unknown BindInfo length to the RPC-DSSYNC test
      dsdb: teach dreplsrv_out_drsuapi_bind_recv() knowledge of DsBindInfo48.
      libnet_become_cd: teach becomeDC_drsuapi_bind_recv() DsBindInfo48.
      libnet_unbecome_dc: teach unbecomeDC_drsuapi_bind_recv() DsBindInfo48.
      drsuapi: always set the pid field of the outgoing DsBindInfo to 0.
      libnet_become_cd: add boolean option "become_dc:force krb5" to control krb5 auth.
      libnet_become_dc: send msDS_Behavior_Version == 3 (win2k8) in DsAddEntry
      re-run "make idl" after changing unknown1->reserved in drsblobs.idl
      re-run "make idl" after fixing idl for supplementalCredentialsSubBlob.
      re-run "make idl" after fixing unknowns in package_PrimaryKerberos (drsblobs.idl)
      re-run "make idl" after adding idl for idl for Primary:Kerberos-Newer-Keys
      rpcclient: Set the pid filed of the outgoing DsBindInfo to 0.
      run "make idl" after idl change "give some unknowns a meaning" (67de745)
      run "make idl" after idl change to unify Primary:Kerberos* structs (e8ae49f)
      testparm: Display warning if invalid values are used.
      dssync: replace the processing_fn by startup/process/finish ops.
      dssync keytab: refactor adding entry to keytab_context out into new function
      dssync keytab: add check for success of ADD_TO_ARRAY().
      dssync keytab: add prefix parameter to add_to_keytab_entries() for flexibility.
      dssync keytab: use add_to_keytab_entries() for pwd history in parse_object().
      libnet_keytab: add a libnet_keytab_search() function
      dssync keytab: add support for keeping track of the up-to-date-ness vector.
      dssync keytab: wrap printing of the uptodate vector in DEBUGLEVEL >= 10 checks
      dssync: add a drsuapi_DsBindInfo28 struct to the dssync_context struct
      dssync: record the bind info in the new remote_info28 in libnet_dssync_bind().
      dssync: either use the req5 or the req8 request, depending on the supported_extenstion
      dssync: skip analysis of the msDS_KeyVersionNumber attribute:
      dssync: pass uptodateness vector into and out of DsGetNCChanges request.
      dssync: allow replications of a single obj with net rpc vampire keytab.
      libnet_keytab: add enctype field to libnet_keytab_entry struct.
      dssync keytab: add store enctypes in the libnet_keytype_entry structs.
      libnet keytab: add enctype parameter to libnet_keytab_search().
      dssync keytab: add debugging output when skipping an object.
      dssync keytab: fix comma placement in debug output
      dssync keytab: add parsing and logging of servicePrincipalName-s
      libnet keytab: test for matching enctype in libnet_keytab_search().
      libnet_keytab: cleanup libnet_keytab_search().
      libnet keytab: add function libnet_keytab_remove_entries().
      dssync keytab: remove old UpToDateNess vectors from keytab before storing new one.
      dssync keytab: log the DN of the object to be parsed.
      libnet keytab: add function libnet_keytab_add_entry()
      libnet keytab: use libnet_keytab_add_entry() in libnet_keytab_add().
      dssync keytab: store the UpToDate vector with ENCTYPE_NULL.
      libnet_keytab: add some debug statements to libnet_keytab_search().
      dssync keytab: move handling of removal of duplicates to libnet_keytab_add_entry().
      dssync keytab: store the samaccountname in the keytab for diff replication.
      vampire keytab: add switch --repl-nodiff to trigger full replication.
      libnet dssync: refactor creation of request out into new function
      libnet dssync: simplify logic of libnet_dssync_process() main loop.
      libnet dssync: fix single object replication by adding one check.
      libnet dssync: refactor dsgetncchanges loop out into libnet_dssync_getncchanges().
      libnet dssync: move determination of request level into build_request()
      libnet dssync: support lists of dns (instead of one dn) for single object replication.
      libnet dssync: rename repl_nodiff flag to force_full_replication.
      net rpc vampire: rename --repl-nodiff to --force-full-repl.
      libnet dssync: rename flag single to single_object_replication
      dssync keytab: support storing kerberos keys from supplemental credentials.
      dssync keytab: when not in single object replication mode, use object dn list as write filter.
      vampire keytab: introduce switch --single-obj-repl.
      libnet keytab: use proper counter type (uint32_t) in libnet_keytab_add().
      libnet keytab: add flag clean_old_entries to libnet_keytab_context.
      libnet keytab: add parameter ingnore_kvno to libnet_keytab_remove_entries()
      libnet keytab: implement cleaning of old entries in libnet_keytab_add().
      dssync: add clean_old_entries flag to dssync_ctx.
      vampire keytab: add command line switch --clean-old-entries .
      libnet dssync: add my C after dssync keytab changes.
      dssync keytab: add comment header explaining add_to_keytab_entries().
      libnet dssync: fix memory allocation for error/result messages.
      libnet dssync: start memory allocation cleanup: use tmp ctx in libnet_dssync().
      registry: use _bystring wrappers to dbwrap_trans_(store|delete).
      idmap_tdb2: fix a race condition in idmap_tdb2_allocate_id().
      dbwrap: add comment describing behaviour of dbwrap_change_uint32_atomic().
      secrets: fix replacemend random seed generator (security issue).
      dbwrap: add comment describing behaviour of dbwrap_change_int32_atomic().
      libnetapi: fix build of shared library after libnet_join changes.
      libnet samsync ldif: fix the build without LDAP.
      build: fix a no previous prototype warning when building without ldap/gssapia
      lib/access: make client_match() public.
      lib/access: make list_match() public.
      loadparm: add two parameters "init logon delay hosts" and "init logon delay"
      nmbd_packets: make queue_packet() public.
      nmbd: add support for delayed initial samlogon packages.
      WHATSNEW: fix one occurrence of 3.2.0 to say 3.3.0.
      Fix unix_convert() for "*" after changing map_nt_error_from_unix().
      Make sure to always set errno on error path in OpenDir (and hence scan_directory).
      packaging: bump the rhel-ctdb rpm releas number to ctbd.28
      packaging(RHEL-CTDB): remove winbind init script and its linke from main pkg
      packaging(RHEL-CTDB): move "chkconfig --del winbind" to "%preun common"
      packaging(RHEL-CTDB): move service smb restart from %postun to %post
      packaging(RHEL-CTDB): use condrestart instead of restart in %post script
      packaging(RHEL-CTDB): in %preun, first stop the service then deactivate
      packaging(RHEL-CTDB): ignore errors from init scripts in pre/post scripts.
      packaging(RHEL-CTDB): use "/sbin/service smb" instead of "%{initdir}/smb"
      packaging(RHEL-CTDB): add "service winbind condrestart" to "%post common"
      packaging(RHEL-CTDB): bump rpm release to the next version ctdb.29
      packaging(RHEL-CTDB): fix placement and link direction of new shared libs
      packaging(RHEL-CTDB): remove duplicate block from spec file.
      packaging(RHEL-CTDB): use /usr/%{_libarch} instead of %{_libdir}
      packaging(RHEL-CTDB): remove the libnss_wins modules to reduce deps.
      packaging(RHEL-CTDB): bump Release to ctdb.33 for the next build
      packaging(RHEL-CTDB): update the build instructions in the README.
      packaging(RHEL-CTDB): bump Release number to ctdb.34 for the next RPM.
      packaging(RHEL-CTDB): Bump release number to ctdb.35 for the next RPM.
      packaging(RHEL-CTDB): bump Release number to ctdb.36 for next rpm.
      packaging(RHEL-CTDB): Bump release number to ctdb.37 for the next RPM.
      packaging(RHEL-CTDB): bump Release number to ctdb.37 for next rpm.
      packaging(RHEL-CTDB): Bump release number to ctdb.39 for the next RPM.
      packaging(RHEL-CTDB): Bump release number to ctdb.40 for the next RPM.
      dbwrap ctdb: remove erroneously duplicated comment.
      dbwrap ctdb: release the lock before calling ctdbd_persistent_store()
      dbwrap ctdb: add a retry loop to the persistent store operation.
      dbwrap ctdb: call db_ctdb_store() in db_ctdb_delete().
      dbwrap ctdb: add db_ctdb_delete_persistent() and use it for persistent DBs
      packaging(RHEL-CTDB): Bump release number to ctdb.41 for the next RPM.
      dbwrap ctdb: add a partial mapping from tdb_error to NTSTATUS and use it for store.
      dbwrap ctdb: don't retry when tdb_store failed in db_ctdb_persistent_store().
      idmap tdb2: fix broken logic in tdb2_store_bystring().
      idmap tdb2: fix broken logic in tdb2_delete_bystring().
      dbwrap ctdb: fix a DEBUG message.
      idmap tdb2: fix inconsistent mappings by checking for race and retrying to fetch mapping.
      packaging(RHEL-CTDB): we are now based on 3.2.1
      smbd/conn: fix prototype change of conn_close_all() in proto.h.
      smbd: prevent smbd from panicing with "clustering = no" but --with-cluster-support
      packaging(RHEL-CTDB): Bump release number to ctdb.47 for the next RPM.
      packaging(RHEL-CTDB): move to version 3.3.0 for the rpm build.
      packaging(RHEL-CTDB): don't call make proto for the 3.3.0 build.
      packaging(RHEL-CTDB): install the right libraries for 3.3.0.
      packaging(RHEL-CTDB): fix installation of libsmclient for 3.3.0 build.
      packaging(RHEL-CTDB): fix installation of libsmbsharemodes for the 3.3.0 build.
      packaging(RHEL-CTDB): check for success of x86_64 build before building i386
      Put prototypes of modules/vfs_posixacl.c into new modules/vfs_posixacl.h.
      Put prototypes of modules/vfs_tru64acl.c to new modules/vfs_tru64acl.h.
      Put prototypes of modules/vfs_solarisacl.c to new modules/vfs_solarisacl.h.
      Put prototypes of modules/vfs_hpuxacl.c to new modules/vfs_hpuxacl.h.
      Put prototypes of modules/vfs_irixacl.c to new modules/vfs_irixacl.h.
      Revert "Add a gpfs_prefetch module"
      build: fix a typo in the installlibtalloc rule.
      Makefile: print codepagedir in "make showlayout".
      proto.h: remove prototypes from dynconfig.c
      dynconfig: remove unused prototypes.
      dynconfig: remove commented-out old stuff from dynconfig.c and dynconfig.h
      configure: Add --with-modulesdir to accompany --with-libdir.
      dynconfig: add support for MODULESDIR.
      buildoptions: output MODULESDIR.
      Add modules_path() to construct paths to files in MODULESDIR.
      Use module_path() instead of lib_path() for loading shared modules.
      libgpo: use MODULESDIR instead of LIBDIR for the group policy extensions.
      svcctl: use MODULESDIR instead of LIBDIR for the svcctl script directory.
      popt: add support for setting MODULESDIR via popt_common_dynconfig.
      configure: remove the --with-libdir parameter.
      configure: use ${libdir} instead of \${LIBDIR}.
      configure: use libdir=${prefix}/lib and modules=${libdir}/samba as default with-fhs.
      configure: remove duplicate definition of --with-winbindd-socket-dir.
      configure: format help string for --with-fhs with AS_HELP_STRING().
      configure: use AS_HELP_STRING for --with-privatedir
      configure: use AS_HELP_STRING for --with-winbindd-socket-dir .
      configure: use AS_HELP_STRING for --with-winbindd-privileged-socket-dir.
      configure: use AS_HELP_STRING for --ntp-signd-socket-dir.
      configure: use AS_HELP_STRING for --with-lockdir.
      configure: use AS_HELP_STRING for --with-piddir
      configure: use AS_HELP_STRING for --with-logfilebase.
      configure: use AS_HELP_STRING for --with-selftest-prefix.
      configure: use AS_HELP_STRING for --enable-debug.
      configure: use AS_HELP_STRING for --enable-developer
      configure: use AS_HELP_STRING for --with-disable-ext-lib
      build: fix linking cifs.upcall when nscd_flush_cache() is found.
      build: rename LIBNETAPI_OBJ1 to LIBNETAPI_OBJ0 for consistency.
      build: remove duplicated and hardcoded definition of LIBSMBSHAREMODES
      build: fall down to the same place when using an internal lib statically.
      build: fix bug #5590 by not linking in the static libs but the objects.
      build: autogenerate symbols for libsmbclient.so
      gitignore: add libsmbclient.syms - this is now generated
      build: auto-generate symbols for libsmbsharemodes.
      gitignore: add libsmbsharemodes.syms - this is now generated
      gitignore: add lib/netapi/tests/Makefile
      gitignore: add examples/libsmbclient/tree
      libsmbclient examples: fix prototype for readlink
      libsmbclient examples: add Makefile.internal.in for building from a samba source
      libsmbclient examples: source/bin to the library search path for smbwrapper build
      build: add [clean_]libsmbclient_examples targets to top level Makefile
      gitignore: add examples/libsmbclient/Makefile.internal - a generated file
      run make idl after idl change "Handle arbitrary new PAC types"
      libnet: fix join by creating keytab after changing the config.
      libnet_join: streamline logic of libnet_join_post_processing()
      packaging(RHEL-CTDB): auto-detect samba version from spec in makerpms.sh
      packaging(RHEL-CTDB): remove unused variable from makerpms.sh
      packaging(RHEL-CTDB): remove library packaging hacks due to fixed Makfile.
      packaging(RHEL-CTDB): remove duplicate installation of pam_smbpass.so
      packaging(RHEL-CTDB): move libnss_winbind.so bits closer together
      packaging(RHEL-CTDB): fix direction of symlink for libnss_winbind.so.2
      packaging(RHEL-CTDB): Add the ldbtools' manpages to the package.
      packaging(RHEL-CTDB): add the cifs.upcall manpage to package.
      configure: fix typo in GNU ld version-script test.
      packaging(RHEL-CTDB): rename SRCDIR to RPMSRCDIR
      packaging(RHEL-CTDB): rename SPECDIR to RPMSPECDIR
      packaging(RHEL-CTDB): introduce variable TOPDIR
      packaging(RHEL-CTDB): autodetect the samba version number from version.h
      packaging(RHEL-CTDB): unify and extend (C) header
      packaging(RHEL-CTDB): extend and slightly reformat comment header block
      packaging(RHEL-CTDB): add fix for versions containing "-" signs.
      packaging(RHEL): fix version of GPL (2 --> 3)
      packaging(RHEL): use --libdir and --with-modulesdir instead of --with-libdir
      packaging(RHEL): don't make proto for samba 3.3
      packaging(RHEL): remove smbmount related stuff from spec file
      packaging(RHEL): remove duplicate installation of pam_smbpass.so
      packaging(RHEL): remove libmsrpc stuff which is no more...
      packaging(RHEL): fix libdir installation by using _libarch/_libarchdir
      packaging(RHEL): remove workaround code for libsmclient/sharemodes installation
      packaging(RHEL): add new libs (talloc, tdb, ...) to the common package
      packaging(RHEL): remove leftovers of smbmount from SPEC file.
      packaging(RHEL): fix installation of pam modules.
      packaging(RHEL): add cifs.upcall binary and manpage to client package
      packaging(RHEL): add ldbtools binaries and man pages to common package
      packaging(RHEL): use ccache if available
      packaging(RHEL): add makerpms.git.sh to build rpms from inside a git checkout
      packaging(RHEL): fix direction of link (.so) of nss libs.
      packaging: use "find" instead of "du" to find files... :-)
      Fix path to talloc guide. Noted by "teferi" on irc.
      Fix paths for talloc into unpacked directory (rsync commands).
      Adapt source code checkout information to git repo in talloc website.
      add generated files in packaging/RHEL[-CTDB]/ to .gitignore
      examples/libsmbclient: adapt to new samba3 source dir "source3/
      examples/libsmbclient: fix Makefile after merged build patch changes.
      build: fix autogen.sh - pidl has moved to ../pidl
      Makefile: add targets [clean_]libnetapi_examples to top lvl Makefile
      [s3]build: fix building bin/replacetort (lib/replace has moved)
      [s3]build: add dependency to libsmbclient to libsmbclient_examples target
      [s3]winbind_util: fix an implicit cast compile warning.
      [s3]winbindd: fix a comment typo
      [s3]winbindd_util: add prototype for fill_domain_username_talloc().
      [s3]winbindd_util: add fill_domain_username_talloc().
      [s3]winbindd_rpc: add domain prefix to username in lookup_groupmem().
      [s3]winbindd_ads: honour "winbind use default domain" in lookup_groupmem().
      [s3]winbindd_group: sanely handle NULL domain in add_member().
      [s3]winbindd_group: don't list the domain twice when expanding internal aliases
      [s3]loadparm: add a command test_lp_load to test the lp_load function.
      [s3]build: build the new test_lp_load command.
      [s3]testparm: free the popt context when it is no longer used.
      [s3]testparm: give testparm one common exit point and call gfree_loadparm().
      [s3]loadparm: rename process_registry_service() to process_smbconf_service().
      [s3]loadparm: refactor freeing of parametric options into free_param_opts().
      [s3]loadparm: fix memory error - free the right param_opt->list in copy_service.
      [s3]loadparm: refactor setting parametric options in list out
      [s3]loadparm: remove superfluous talloc context / talloc_stackframe call.
      [s3]loadparm: in lp_do_parameter() use function lp_local_ptr()
      [s3]loadparm: refactor freeing of parameter data out and reduce memleak.
      [s3]fix build --with-cluster-support after ndr_[pull|push]_struct blob changes.
      [s3]testparm: prevent "no stackframe around" warning.
      [s3]test_lp_load: fix "no talloc stackframe around" message
      [s3]build: use ..lib/util/params.c instead of param/params.c
      [s3]loadparm: remove param/params.c which is used no more.
      [s3]build: fix bug #5677 - fix test_{shlibs,nss_modules,pam_modules} on Solaris
      [s3]pdbedit: remove unused variable.
      [s3]test: fix testparm_s3 tests: don't create truncated smb.conf files.
      [s3]pidfile_create: use check is_default_dyn_CONFIGFILE() since we have it.
      [s3]libsmbconf: remove unused define.
      [s3]libsmbconf: add backend_requires_messaging() method to libsmbconf.
      [s3]libsmbconf: fix comment typo.
      [s3]libsmbconf: fall back to file backend when no valid backend was found
      [s3]libsmbconf: return WERR_BADFILE when no path to text backend is provided.
      [s3]libsmbconf: create text config in smbconftort
      [s3]libsmbconf: add method is_writeable() and wrapper smbconf_is_writeable()
      [s3]libsmbconf: add utility function smbconf_is_writeable_bystring()
      [s3]build: fix bug #5765 - fix installlibs on solaris by using portable "test -r"
      [s3]winbind: fix smbd hanging on Solaris when winbindd closes socket.
      [s3]winbindd: speed up fill_grent_mem (i.e. winbindd_getgrent) a lot.
      [s3]build: build cifs.upcall at build time instead of at install time.
      [s3]build: prevent make errors for picky makes when $(EXTRA_ALL_TARGETS) is empty
      [s3]make keytab filename argument mandatory to "net rpc vampire keytab"
      [s3]vfs_acl_tdb: fix the build.
      eventlog: don't crash in sync_eventlog_params().
      s3-winbindd_ads: prevent negative GM/ cache entries due to broken connections
      s3-winbindd_ads: use the reconnect methods instead of the rpc methods directly
      s3-winbindd: make all winbind rpc-methods static.
      [s3]nfs4_acls: make prototype header match definition for smb_set_nt_acl_nfs4()
      s3 build: don't specify ZLIB_LIBS (i.e. "-lz") in object collections.
      s3-build: do not auto-genereate ndr tables but use checked-in tables.
      s3 build: when detecting to use internal zlib, put "-I../lib/zlib" first in CFLAGS
      libcli/nbt: fix some extrasemi compile warnings.
      [s3]zfsacl: "return" is not a function.
      UNFINISHED - s3:idmap_ad: multi-domain
      Revert "UNFINISHED - s3:idmap_ad: multi-domain"
      s3:winbindd/nss_info: change nss_map_{to|from}_alias to take nss_domain_entry
      s3:winbindd/idmap_util: unify entering debug messages and add ouput of domain
      s3:winbindd/idmap: add diagnostic entry debug msg to idmap_find_domain().
      s3:winbindd/idmap: add diagnostic entry debug msg to idmap_backends_unixid_to_sid
      s3:winbindd/idmap: add diagnostic entry debug msg to idmap_backends_sid_to_unixid
      s3:winbindd/idmap_ad: rename ctx to mem_ctx in nss_ad_get_info()
      s3:winbindd/idmap_ad: refactor core of nss_{sfu|sfu20|rfc2307}_init to common function.
      s3:winbindd/idmap_ad: add support for trusted domains to idmap_ad (bug #3661)
      s3:winbindd/idmap_ad: add entry debug message to nss_ad_get_info()
      s3:winbindd/nss_info: add debugging to nss_init()
      s3:winbindd/nss_info: add entry debug message to nss_get_info()
      s3:winbindd_cache: add debugging to get_nss_info_cached()
      s3:winbindd/nss_info: whitespace cleanup.
      s3:winbindd/nss_info: fix default backend handling for ad backends.
      s3:winbindd/nss_info: make nss_domain_list_add_domain() static
      s3:winbindd/nss_info: remove unused variable from nss_init()
      s3:vfs_tsmsm: fix potential segfault (freeing uninitialized buffer)
      s3:winbindd: don't open a new dc connection in winbindd_getgrnam (main winbindd)
      s3:winbindd: don't open a new dc connection in winbindd_getpwnam (main winbindd)
      s3:winbindd: fix horrible mis-indentation of toplvl braces in getgrsid_sid2gid_recv
      packaging(RHEL-CTDB): adapt configure.rpm to changes to the spec file
      packaging(RHEL-CTDB): explicitly build the gpfs module
      packaging(RHEL-CTDB): fix installation of pam modules
      packaging(RHEL-CTDB): refactor creation of spec file from template out
      packaging(RHEL-CTDB): fix typo in makerpms.sh
      packaging(RHEL-CTDB): add the cifs.upcall binary to the client package.
      packaging(RHEL-CTDB): move the cifs.upcall manpage to the client package
      packaging(RHEL-CTDB): use ccache if available
      packaging(RHEL-CTDB): fix the build when ccache is not found.
      packaging(RHEL-CTDB): don't show failure messages in check for ccache
      s3:fix build of pam_winbind.so on older Linux systems.
      s3:loadparm: fix newly introduced leading whitespaces to tabs
      s3:loadparm: rename lp_local_ptr() to lp_local_ptr_by_snum()
      s3:loadparm: add lp_local_ptr() that operates on a service struct
      s3:loadparm: rename free_parameter() to free_one_parameter_by_snum()
      s3:loadparm: rename free_parameters() to free_parameters_by_snum()
      s3:loadparm: add service-struct based variants of the free-parameter routines
      s3:loadparm: fix copy service error (canonicalize_servicename: NULL source name)
      packaging(RHEL-CTDB): Fix accidential linebreak
      packaging(RHEL-CTDB): fix build of [u]mount.cifs
      packaging(RHEL-CTDB): fix typo in [u]mount.cifs installation
      s:Fix uid_to_sid mapping when the idmap cache is empty.
      s3:idmap: Remove passd check from idmap_backends_unixid_to_sid().
      packaging(RHEL): fix build of [u]mount.cifs
      packaging(RHEL): fix typo in [u]mount.cifs installation
      smbd: prevent access to root filesystem when connecting with empty service name
      nss_wrapper.pl: fix "Use of uninitialized value $i in array element" messages
      s3: make better use of ccache by not including version.h in every C-file.
      s3:vfs_acl_tdb: don't leak state_path() to talloc_tos() in acl_tdb_init()
      s3:nmbd: don't leak state_path() to talloc_tos() in wins_write_database()
      s3:vfs_xattr_tdb: don't leak state_path() to talloc_tos in xattr_tdb_init().
      s3:libads: give create_local_private_krb5_conf_for_domain() a common exit point
      s3:libads: use lock_path for creating paths to local krb5.conf files
      s3:passdb: put login_cache.tdb into cache_dir, not lock_dir.
      s3:winbindd: put winbindd_cache.tdb into cache_dir, not lock_dir.
      s3:put the browse list into cache_dir, not lock_dir.
      s3: put netsamlogon_cache.tdb into cache_dir instead of lock_dir
      s3: put printing/ under cache_dir, not lock_dir
      s3: put the gpo cache dir under cache_dir instead of lock_dir
      s3:docs: update the idmap_tdb manpage to reflect current facts.
      s3:docs: update the idmap_ldap manpage to reflect current facts.
      s3:docs: add a manpage for idmap_tdb2
      s3:docs: fix copy and paste error in the idmap_tdb2 manpage
      s3:docs: clarify explanation of allocator in the idmap_tdb2 manpage
      s3:docs: clarify explanation of the allocator in the idmap_tdb manpage
      s3:docs: clarify explanation of the allocator in the idmap_ldap manpage
      s3:docs: fix distclean target and add realdistclean target
      s3:create-tarball: also include the VENDOR_PATCH in the version
      s3:docs: fix ommission in fix of (real)distclean targets
      s3:docs: clean generated .png images in "make clean"
      s3:docs: clean build/catalog.xml in "make clean"
      build-docs: cleanup exit of the script
      s3:libsmbconf: remove unused function smbconf_is_writeable_bystring()
      s3:libsmbconf: remove the init headers from smbconf.h
      s3:libsmbconf: use talloc_free instead of TALLOC_FREE in smbconf.c
      s3:libsmbconf: use talloc_free instead of TALLOC_FREE in smbconf_util.c
      s3:libsmbconf: use talloc_free instead of TALLOC_FREE in testsuite
      s3:libsmbconf: use talloc_free instead of TALLOC_FREE in smbconf_init
      s3:libsmbconf: use talloc_free instead of TALLOC_FREE in txt backend
      s3:libsmbconf: use talloc_free instead of TALLOC_FREE in reg backend
      s3:libsmbconf: include smbconf headers with lib/smbconf prefix
      libsmbconf: move the non-registry parts of libsmbconf to top level
      pidl: reduce implicit cast warnings in gen_ndr server code
      run make idl_full, thus adding explicit casts to gen_ndr server code
      pidl/python: Add explicit casts, fixing implicit cast warnings.
      s3: run "make samba3-idl"
      libreplace: fix bug #6066 - netinet/ip.h present but cannot be compiled
      libreplace: fix detection of netinet/ip.h on solaris 8
      s3: separate tdb validation code out into its own source file
      s3:tdb_validate: clean up leading tabs/spaces and trailing spaces.
      s3:build: don't use $(FLAGS) in linking targets - it is useless
      s3:util_tdb: remove duplicate prototypes (from ../lib/util/util_tdb.h)
      s3:registry: always provision the registry, not only in smbd.
      s3:test: exit the net rpc registry tests when give_administrative_rights fails
      s3:winbind: remove prototype for non-existent function from winbind_proto.h
      s3: fix bug #6073: prevent ads_connect() from using SSL unless explicitly requested
      s3:smbd: make smbd_open_one_socket() static
      s3:build: fix build on AIX - only test for splice on linux
      s3:idmap: move IDMAP_VERSION to the idmap tdb backend, where it belogns.
      s3:proto.h: remove duplicate prototypes.
      s3:winbind_user: move initialization of domain up in winbindd_fill_pwent()
      s3:winbind_user: fix "getent passwd" to allocate new uids.
      s3:winbind_group: fix "getent group" to allocate new gids.
      s3:build: fix linking of bin/net when shared libs have been disabled
      s3:build: fix typo introduced in "fix build without shared libs"
      s3:idmap_tdb: add tmp talloc ctx to idmap_tdb_sid_to_id and remove an fstring
      s3:idmap_tdb: use transactions in idmap_tdb_allocate_id()
      s3:idmap_tdb: refactor out new function idmap_tdb_load_ranges()
      s3:idmap_tdb: simplify talloc usage with temp context from talloc_stackframe
      s3:idmap_tdb2: streamline idmap_tdb2_sid_to_id,
      s3:idmap_tdb2: move together code that belongs together in idmap_tdb2_alloc_load
      s3:idmap_tdb2: factor lodaing of ranges out into idmap_tdb2_load_ranges()
      s3:idmap_tdb2: untangle assignment and check in idmap_tdb2_alloc_load()
      docs: fix two typos in the mount.cifs manpage
      s3:net conf: remove check for sharename being a usernam in "net conf addshare"
      s3:winbindd_user: fix a debug message.
      s3:winbindd_user: create domain connection in winbindd_fill_pwent if necessary.
      Revert "s3:winbindd_user: create domain connection in winbindd_fill_pwent if necessary."
      packaging: add script fill-templates
      packaging: fix source dir to source3 in fill-templates
      packaging: fix fill-templates call to update-pkginfo to pushd appropriately first
      packaging: don't clutter the output of fillup-templates  with popd output
      packaging: remove commented out stuff from update-pkginfo
      packaging: make update-pkginfo callable from any directory
      s3:build: some implementations of "ln" are picky about  the order of arguments
      s3:packaging: paths cosmetics in fill-templates
      s3:packaging: fix path to calling update-pkginfo after pushd in fill-templates
      s3:packaging: fix parsing of include.h in fill-templates
      s3:build: improve the check for a working krb5-config.
      s3:winbindd: make do_async_domain() static.
      docs: extend the idmap_rid manpage
      docs: extend the example in the idmp_rid manpage to configure 2 domains with rid
      s3:mount.cifs: don't error exit on explicitly requested help...
      s3:mount.cifs: make "mount.cifs -V" print the version, not usage.
      s3:registry: provide transaction_start|commit|cancel fns for the registry tdb
      s3:registry: wrap deletekey_recursive in one big transaction.
      s3:libsmbconf: add transactions to the libsmbconf api
      s3:net: wrap net conf import into one big transaction
      Revert "Fix a O(n^2) algorithm in regdb_fetch_keys()"
      s3:registry: replace typedef "REGSUBKEY_CTR" by "struct regsubkey_ctr"
      s3:registry: don't directly access key->subkeys->num_subkeys in reg_api.c
      s3:registry: don't directly access key->subkeys->num_subkeys in reg_backend_db.
      s3:registry: don't directly access key->subkeys->subkeys[] in  reg_api.c
      s3:registry: don't directly access key->subkeys->subkeys[] in  reg_backend_db.c
      s3:registry: fix a comment
      s3:registry: add a regsubkey_ctr_init function for allocating a regsubkey_ctr
      s3:registry: add regsubkey_ctr_set_seqnum to hide implementation from caller.
      s3:registry: add regsubkey_ctr_get_seqnum() to hide implementation
      s3:registry: use regsubkey_ctr_init() in reg_api.c
      s3:registry: use regsubkey_ctr_init() in reg_backend_db.c
      s3:registry: use regsubkey_ctr_set_seqnum() in reg_backend_db.c
      s3:registry: use regsubkey_ctr_get_seqnum() in reg_backend_db.c
      s3:services_db: use regsubkey_ctr_init() instead of using talloc directly
      s3:registry: use regsubkey_ctr_init() in reg_eventlog.c
      s3:profiles: use regsubkey_ctr_init() instead of using talloc directly.
      s3:registry: remove definition of regsubkey_ctr from the surface.
      s3:registry: hash the list of subkeys in the regsubkey_ctr
      s3:net rpc registry: use regsubkey_ctr_init() instead of using talloc directly.
      s3: move definition of W_ERROR_NOT_OK_GOTO_DONE down to libcli/util/werror.h
      libcli/util/werror.h: add macro W_ERROR_NOT_OK_GOTO(x, y)
      s3:registry: add a create_subkey method to the backend ops.
      s3:registry: implement create_subkey for the db backend.
      s3:registry: implement create_subkey for the smbconf backend
      s3:registry: use create_reg_subkey() in reg_createkey().
      s3:registry: streamline reg_deletekey() somewhat.
      s3:registry: refactor deletion of value/secdesc/subkey list tdb records out
      s3:registry: streamline and cleanup regdb_set_secdesc() somewhat.
      s3:registry: refactor deletion of various subkey lists out of regdb_store_keys()
      s3:registry: add a delete_subkey method to the backend ops.
      s3:registry: implement delete_subkey in the db backend
      s3:registry: implement delete_subkey in the smbconf backend
      s3:registry: use delete_reg_subkey() in reg_deletekey()
      s3:registry: tighten the subkey loop in reg_deletekey_recursive()
      s3: fix the build JOB_STATUS_BLOCKED -> JOB_STATUS_BLOCKED_DEVQ
      s3: Fix a memleak in dbwrap_rbt.
      s3:net conf: reduce memory usage of "net conf import".
      s3:smbconf: move smbconf_share_exists checks into backend
      s3:dbwrap_ctdb_marshall_add: don't leak the ctdb_rec_data to the outside
      .gitignore source4/torture/ldb/proto.h
      version: fix handling of SAMBA_VERSION_VENDOR_PATCH.
      add a versiontest program to print samba_version_string().
      s3:build: prevent from setting "-O -g", check for $debug first.
      libreplace: use libreplace_SAVE_CPPFLAGS instead of SAVE_CPPFLAGS
      s3:build: make SHOWFLAGS target phony and add alias showflags
      Revert "s3/smbd: don't link against zlib"
      Revert "s3/swat: don't link against zlib"
      s3:build: line-wrap assignment of FLAGS for readability
      s3:build: add a SHOWCFLAGS target for debugging how CFLAGS are assebled
      s3:build: fix build of pam_winbind.so with static linking
      s3:build: first cut at fixing linking of shared/static libs internally
      s3:build: unify linking of libwbclient with a @LIBWBCLIENT_TARGET@
      s3:build: rename WINBIND_LIBS -> LIBWBCLIENT_LIBS for unification
      s3:build: no need to set LIBFOO_STATIC to the object collection any more
      s3:build: add LIBSMBCLIENT_LIBS and LIBSMBSHAREMODES_LIBS to Makefile
      s3:build: don't build the static libs unconditionally
      s3:build: add targets to show how libraries will be built / linked
      s3: fix the fix for bug #6195 - dont let smbd child processes panic
      s3:net conf: don't store share names as lower case, but as given.
      s3:registry: Prevent creation of keys containing the '/' character.
      s3: Fix uninstallmo
      s3: make installmo and uninstallmo scripts executable
      s3:fix build of the pam_smbpass shared module
      s3:net conf: support dangling parameters by specifying "" as the section name.
      s3:registry: replace typedef REGVAL_CTR by struct regval_ctr.
      s3:registry: replace typedef REGISTRY_VALUE by struct regval_blob
      s3:registry: make a comment more precise.
      s3:registry: replace typedef REGISTRY_KEY by struct registry_key_handle
      s3:registry replace typedef REGISTRY_HOOK by struct registry_hook.
      s3:registry: replace typedef REGISTRY_OPS by struct registry_ops
      s3:libsmbconf: fix a comment typo
      s3:nt_printing: fix a comment typo
      s3:mark registry shares without path unavailable just as with text config
      s3:loadparm: prevent infinite include nesting.
      pm_process():raise level of debug message
      s3:loadparm: refactor process_registry_service out or process_registry_globals
      s3:smbd/service: switch load_registry_service/shares to use loadparm routines
      s3:vfs: untangle logic for loading and probing modules in vfs_init_custom()
      s3:update config.guess form gnu.org (version 2009-04-27)
      s3:config.guess: move to GPLv3
      s3:config.guess: replace old FSF address by the web site url.
      s3:config.guess: clean some whitespace/tab mixtures that git complains about
      s3:update config.sub from gnu.org (2009-04-17)
      s3:config.sub: move to GPLv3
      s3:config.sub: replace old FSF address by the web site url.
      s3:config.sub: clean some space/tab mixup that git complains about
      s3:loadparm: use the returnvalue of service_ok() in process_smbconf_service().
      s3:loadparm: handle registry config source in file_list - fixes bug #6320
      s3: make release_ip() call (ctdb) cope with IPv4 mapped addresses
      s4:loadparm: fix brace indentation and add brace for clarity
      s4:loadparm: fix a comment typo. and line wrapping.
      s3:smbd: fix the fix for mapped IPv4 address handling in release_ip().
      s3:proto.h: remove old param/params.c prototype
      s3:loadparm: refactor freeing of file_list out into free_file_lists()
      s3:loadparm: free the file_list at the start of loadparm
      s3:build: support non-linux gnu ports
      s3:build: extend the support fo Debian GNU/kFooBar to kOpenSolaris
      s3:first cut at dbwrap_tool - a tdb tool that is CTDB-aware.
      s3:build: rename OBJ collection for dbwrap_tool consistently
      s3:build dbwrap_tool with make everything
      s3:build: add install-dbwrap_tool target
      s3:param: prevent includes from being dumped in dump_*() functions.
      s3:swat: hide "config backend" from swat
      s3:build: fix linking with --disable-shared-libs
      s3:fix bug #6371, unsuccessful net conf setparm leaves empty share
      s3:winbind:idmap_ldap: fix a crash bug in idmap_ldap_unixids_to_sids (#6387)
      s3:winbind:idmap_ldap: warn about duplicate XID->SID mappings (bug #6387)
      s3:winbind:idmap_ldap: warn about duplicate SID->XID mappings (bug #6387)
      s3:dbwrap_ctdb: fix some function header comments
      s3:winbind_util: remove trailing spaces
      s3:dbwrap_tool: add "erase" opearation
      s3:dbwrap_tool: remove superfluous command mapping
      s3:dbwrap_tool: add listkeys operation
      s3:idmap_tdb: filter out of range mappings in default idmap config
      s3:idmap_tdb: add an entry debug statment to idmap_tdb_db_init()
      s3:idmap_tdb2: filter out of range mappings in default idmap config
      s3:idmap: fix a comment typo
      s3:idmap_ldap: filter out of range mappings in default idmap config
      s3:pam_smbpass: make smb_update_db() static.
      libsmbclient: make SMBC_module_terminate() static.
      s3:add prototype of map_nt_error_from_wbcErr() to proto.h
      s3:pdbedit: fix "format not a string literal and no format arguments" warnings
      s3:build: link libtalloc statically if using internal libtalloc
      s3:build: check for availability of external libtdb and use it if available
      s3:build: remove LIBTDB_OBJ from TDBTORTURE_OBJ collection
      s3:build: build the tdb tools only when using the internal libtdb
      s3:build: build talloctort only when using the internal liballoc
      s3: fix make test with external libtalloc or libtdb.
      s3:passdb: fix bug #6509: use gid (not uid) cache in fetch_gid_from_cache().
      lib/util: fix building tevent_ntstatus without config.h
      s3:lib/sysquotas: fix usage of SMB_STRUCT_STAT (struct stat_ex).
      s3:fix build of old linux quota system and other unixes' quota implementation
      s3:build: check for external liblua, link lua statically if using internal lib
      lib/util: fix order of includes in tevent_ntstatus.c
      s3:build: remove ../libcli/nbt/tools/nmblookup.o and friends in make clean
      s3:build: remove the libgpo objects upon "make clean"
      Revert "[s3]pidfile_create: use check is_default_dyn_CONFIGFILE() since we have it."
      s3:dbwrap: add a wrapper dbwrap_trans_do()
      s3:dbwrap: add dbwrap_delete_bystring_upper()
      s3:dbwrap: add dbwrap_store_bystring_upper().
      s3:dbwrap: add dbwrap_fetch_bystring_upper().
      s3:dbwrap_util: add my C
      s3:registry: don't store differently cased entries for the same keys.
      s3:registry: add db_context argument to regdb_delete_key_with_prefix()
      s3:registry: add db_context argument to regdb_delete_values()
      s3:registry: add db_context argument to regdb_delete_secdesc()
      s3:registry: add db_context argument to regdb_delete_subkeylist()
      s3:registry: add db_context argument to regdb_delete_key_lists()
      s3:registry: add db_context argument to regdb_store_keys_internal()
      s3:registry: add db_context argument to regdb_fetch_key_internal()
      s3:registry: add db_context argument to scan_parent_subkeys()
      s3:registry: create regdb_fetch_keys_internal() with db_context argument
      s3:registry: rename regdb_store_keys_internal() to regdb_store_keys_internal2()
      s3:registry: create regdb_store_keys_internal() with db_context argument
      s3:registry: don't use exported transaction wrappers in regdb_create_subkey()
      s3:registry: panic upon failed transaction_cancel in regdb_create_subkey()
      s3:registry: in regdb_delete_subkey(), panic if transaction_cancel fails
      s3:registry: in regdb_delete_subkey(), don't use the transaction wrappers.
      s3:registry: don't loop transaction_commit in create_sorted_subkeys() upon error
      s3:registry: fix a comment in create_sorted_subkeys()
      s3:registry: panic upon error at transaction_cancel in create_sorted_subkeys
      s3:registry: add db_context argument to init_registry_key_internal()
      s3:registry: use transaction wrapper in init_registry_key().
      s3:registry: add a regdb_fetch_values_internal() that takes a db_context argument
      s3:registry: add regdb_store_values_internal() that takes a db_context argument
      s3:registry: use transaction wrapper in init_registry_data()
      s3:registry: refactor adding of builtin reg values out
      s3:registry: change regdb_store_keys_internal2() to return WERROR
      s3:registry: unify exit logic and remove leaking to talloc_stack in regdb_store_keys_internal()
      s3:registry: don't leak to talloc_stack in regdb_store_keys_internal2()
      s3:registry: use transaction wrapper in regdb_store_keys_internal().
      s3:registry: use transaction wrapper in regdb_create_subkey()
      s3:registry: add a comment header for the create_subkey set of functions
      s3:registry: add a comment header for the delete_subkey set of commands.
      s3:registry: use transaction wrapper in regdb_delete_subkey().
      s3:registry: restructure logic of create_sorted_subkes() slightly
      s3:registry: use transaction wrapper in create_sorted_subkeys()
      s3:registry: turn regdb_fetch_keys_internal() from int to WERROR return type
      s3:registry: add function regsubkey_ctr_reinit()
      s3:registry: flush the provided subkey_ctr in regdb_fetch_keys_internal()
      s3:registry: db backend: add my C
      s3:dbwrap: fix embarrassing typo :-)
      s3:dbwrap: use the transaction wrapper in dbwrap_trans_delete().
      s3:dbwrap: use the transaction wrapper in dbwrap_trans_store().
      docs: fix typos in the net man page.
      s3:winbind: use transaction wrapper in idmap_tdb2_set_mapping()
      s3:winbind: use transaction wrapper in idmap_tdb2_allocate_id()
      s3:winbind: in idmap_tdb2_id_to_sid(), use transaction wrapped stores.
      s3:winbind: in idmap_tdb2_sid_to_id(), use transaction wrapped stores.
      s3:dbwrap: change dbwrap_change_uint32_atomic() to return NTSTATUS not uint32_t.
      s3:dbwrap: change dbwrap_change_int32_atomic() to return NTSTATUS not int32.
      s3:dbwrap: don't leak in dbwrap_change_uint32_atomic()
      s3:dbwrap: don't leak in dbwrap_change_int32_atomic().
      s3:dbwrap: untangle assignemend and check in dbwrap_change_uint32_atomic()
      s3:dbwrap: untangle assignment and check in dbwrap_change_int32_atomic()
      s3:dbwrap: export logic of dbwrap_change_uint32_atomic into an action function
      s3:dbwrap: add dbwrap_trans_change_uint32_atomic()
      s3:winbind: use transaction in idmap_tdb2_allocate_id_action().
      s3:winbind: fix typo in debugmessage of idmap_tdb
      s3:winbind: fix typo in debug message in idmap_tdb.
      s3:winbind: use transaction store in idmap_tdb_set_hwm() to store new hwm.
      s3:dbwrap: change dbwrap_change_int32_atomic() to take int32_t, not int32
      s3:dbwrap: export logic of dbwrap_change_int32_atomic into an action function
      s3:dbwrap: add dbwrap_trans_change_int32_atomic()
      s3:secrets: use transaction wrapped store in get rand seed.
      s3:passdb: use transaction_wrapped write in tdbsam_new_rid()
      s3: refomat definitions of some generic access rights for better readability
      s3:smbcacls: forbid change of debug level from config file
      gpfs.so: map the file_inherit and dir_inherit flags away for files
      tevent: fix a comment
      s3: fix bug #6650, authentication at member servers when winbindd is not running
      util: fix comment and clarify argument name in DLIST_DEMOTE()
      s3-ldb: update dlinklist.h to match main copy (lib/util/dlinklist.h)
      s4-ldb: update dlinklist.h to match main copy (lib/util/dlinklist.h)
      talloc: add scripts to extract library symbols (exports file) from headers
      talloc: add script to extract signatures from header files.
      talloc: add script/abi_checks.sh. check for abi changes without gcc magic.
      talloc: add a target "abi_checks" to talloc.
      talloc: remove files generated by "make abi_check" in "make clean"
      talloc: run abi_checks as part of "make test"
      talloc: remove talloc_free from the exports
      talloc: move the original abi_checks script to script/abi_checks_gcc.sh
      tdb: add scripts to extract library symbols (exports file) from headers
      tdb: add script to extract signatures from header files.
      tdb: add script/abi_checks.sh. check for abi changes without gcc magic.
      tdb: add a target "abi_checks" to tdb.
      tdb: remove files generated by "make abi_checks" in "make clean".
      tdb: run abi_checks as part of "make test".
      tdb: move the original abi_checks script to script/abi_checks_gcc.sh
      One would expect I could spell my name.
      One would expect I could spell my name...
      tevent: add scripts to extract library symbols (exports file) from headers
      tevent: add script to extract signatures from header files.
      tevent: add script/abi_checks.sh. check for abi changes without gcc magic.
      tevent: move the original abi_checks script to script/abi_checks_gcc.sh
      tevent: add a make target "make abi_checks"
      tevent: remove filese generated by "make abi_checks" in "make clean".
      tevent: add abi_checks to "make test"
      tevent:mksyms: allow double pointer return value of functions.
      tevent:mksyms: allow characters after closing functions parenthesis.
      tevent:mksigs: ignore struct forward declarations.
      tevent:mksigs: correctly ignode multiline function typedefs
      tevent:mksigs: ignore symbols (like _DEPRECATED_) after closing function parentheses
      tevent:mksigs: normalize bool -> _Bool
      tevent:mksigs: allow PRINTF_ATTRIBUTE(..) macros function types as funcion args
      tevent:exports: add _tevent_req_cancel and tevent_req_set_cancel_fn.
      tevent:signatures: add _tevent_req_cancel and tevent_req_set_cancel_fn
      tdb:mksyms: allow double pointer return value of functions.
      tdb:mksyms: allow characters after closing functions parenthesis.
      tdb:mksigs: ignore struct forward declarations.
      tdb:mksigs: correctly ignode multiline function typedefs
      tdb:mksigs: ignore symbols (like _DEPRECATED_) after closing function parentheses
      tdb:mksigs: normalize bool -> _Bool
      tdb:mksigs: allow PRINTF_ATTRIBUTE(..) macros function types as funcion args
      talloc:mksyms: allow double pointer return value of functions.
      talloc:mksyms: allow characters after closing functions parenthesis.
      talloc:mksigs: ignore struct forward declarations.
      talloc:mksigs: correctly ignode multiline function typedefs
      talloc:mksigs: ignore symbols (like _DEPRECATED_) after closing function parentheses
      talloc:mksigs: normalize bool -> _Bool
      talloc:mksigs: allow PRINTF_ATTRIBUTE(..) macros function types as funcion args
      tevent:mksyms: fix spelling...
      s3:mksyms: fix spelling...
      talloc:mksyms: allow double pointer return value of functions.
      talloc:mksyms: allow characters after closing functions parenthesis.
      s3:dbwrap_ctdb: set dmaster in ctdb_transaction_store() also when updating an existing record
      dsdb: the samba3 ldap schema has no sambaAccountPolicy (any more at least)
      examples/LDAP: remove sambaAccountPolicy from the IBM-DS schema.
      tdb:tdbtool: add the "speed" command to the help text.
      tdb:tdbtool: add transaction_start/_commit/_cancel commands.
      tdb:tdbtool: fix indentation.
      build: add datadir to "make showlayout"
      build: add switch "--with-codepagedir=DIR" to configure.
      build: use AS_HELP_STRING() for --with-localedir
      s3: pdbedit: add option --kickoff-time/-K to set the user's kickoff time
      s3:dbwrap_ctdb: reformat a comment slightly to enhance clearness.
      s3:dbrwap_ctdb: add a function db_ctdb_ltdb_store()
      s3:dbwrap_ctdb: add a function db_ctdb_ltdb_fetch()
      s3:dbwrap_ctdb: use db_ctdb_ltdb_fetch() inside db_ctdb_transaction_fetch()
      s3:dbwrap_ctdb: use db_ctdb_ltdb_fetch() inside db_ctdb_transaction_fetch_start
      s3:dbwrap_ctdb: fix a race in starting concurrent transactions on a single node
      s3:dbwrap_ctdb: add new db_ctdb_transaction_active() that calls CTDB_CONTROL_TRANS2_COMMIT
      s3:configure: add a check for the new CTDB_CONTROL_TRANS2_ACTIVE
      s3:dbwrap_ctdb: fix race condition with concurrent transactions on the same node.
      s3:dbwrap_ctdb: split combined check in two and add descriptive debug
      s3:dbwrap_ctdb: add debug message to transaction_fetch_start()
      s3:registry: add safety check for return value of tdb_unpack to regdb_fetch_keys_internal()
      s3:registry: add an extra check for dsize==0 to regdb_fetch_keys_internal()
      s3:vfs_fs_capabilities: fix a debug message
      s3:smbd: make idmap cache persistent for "ldapsam:trusted".
      s3:smbd: also fill the memcache with sid<->id mappings in ldapsam_sid_to_id()
      packaging(RHEL-CTDB): The former release number has basically moved into VERSION
      packaging(RHEL-CTDB): extend makespec.sh to extract VENDOR_PATCH from version.h
      packaging(RHEL-CTDB): Build winbind-32bit package in the 64bit build
      packaging(RHEL-CTDB): makerpms.sh: build winbind-32bit libs in the 64bit build
      packaging(RHEL-CTDB): makeversion.sh: v3-4-test uses source3 instead of source
      packaging(RHEL-CTDB):makespec.sh: fix detection of version
      packaging(RHEL-CTDB):makerpms.sh: replace source/ by source3/
      packaging(RHEL-CTDB): don't "make proto" any more.
      packaging(RHEL-CTDB): don't pass CFLAGS to make.
      packaging(RHEL-CTDB): fix location of nsswitch/ directory for install
      packaging(RHEL-CTDB): add new binary ldbrename to the common rpm
      packaging(RHEL-CTDB): add new binary sharesec to the client package.
      packaging(RHEL-CTDB): add new pam_winbind.mo to the common package
      packaging(RHEL-CTDB): also pack libwbcient in winbind-32bit package
      packaging(RHEL-CTDB): disable the merged build.
      packaging(RHEL-CTDB): pam_winbindd man page has moved from section 7 to 8
      packaging(RHEL-CTDB): package the manpage of "sharesec"
      packaging(RHEL-CTDB): package the manpage of "ldbrename"
      packaging(RHEL-CTDB): package the manpage of the winbind_krb5_locator plugin
      packaging(RHEL-CTDB): package the winbind_krb5_locator.so plugin
      packaging(RHEL-CTDB): move the idmap and nss_info modules to the common package
      packaging(RHEL-CTDB): fix packaging of pam_winbind.mo file
      packaging(RHEL-CTDB): enable parallel build
      packaging(RHEL-CTDB): add the current githash to the rpm release number by default
      s3:pdb_default_uid_to_sid: fix some debug statements.
      s3:passdb: remove the uid_to_rid method - we only need uid_to_sid
      s3:passdb: bump interface VERSION 18->19 (removed uid_to_rid)
      s3:is_trusted_domain: shortcut if domain name is NULL or empty
      s3:is_trusted_domain: shortcut if domain name == global_sam_name
      s3:fix a comment typo
      s3:load_interfaces(): use function gfree_interfaces() that we have.
      s3: shortcut uid_to_sid when "ldapsam:trusted = yes"
      s3:pdb_ldap: fix a comment typo
      s3:idmap_ldap: trim the " chars from the location string in idmap_ldap_alloc_init
      s3:idmap_ldap: trim the " chars from the location string in idmap_ldap_db_init
      s3:fix endianness bug in dbwrap_change_uint32_atomic() (bug #6901)
      s3:fix endianness bug in dbwrap_change_int32_atomic() (bug #6901)
      s3:idmap_ldap: fix indentation: tab/space mixup
      s3:torture: move the torture-specific headers to new torture/torture.h
      s3: add dbwrap_torture - a tool to stress test tdb transactions through dbwrap
      s3:fix the merged build of bin/smbtorture4
      s3:torture: make t_stringoverflow.c compile at least (pstring is long gone)
      s3:fix linking of libbigballofmud (on my box at least)
      s3:fix linking of the t_str* test programs
      s3:add split_tokens, a cmdline tool to test next_token_talloc()
      s3:build: fix the build when no external talloc and tdb are installed.
      s3:build: fix detection of CTDB headers on systems without system-libtalloc
      s3:dbwrap_ctdb: increase the rsn of the __transaction_lock__ when storing
      s3:dbwrap_ctdb: increase the number of commit retries 5-->100
      packaging(RHEL-CTDB): package dbwrap_tool and dbwrap_torture in the common pkg
      packaging(RHEL-CTDB): make everything instead of all in the build stage
      packaging(RHEL-CTDB): add some checks to test the built smbd
      packaging(RHEL-CTDB): explicitly list all the vfs modules in the main package
      packaging(RHEL-CTDB): explicitly list all packaged idmap/nss-info/charset modules
      packaging(RHEL-CTDB): explicitly list library versions in samba-common
      packaging(RHEL-CTDB): explicitly list library versions in samba-winbind-32bit
      packaging(RHEL-CTDB): clean some commented out lines from the files sections
      s3:pdb_ldap:init_sam_from_ldap: untangle an assignment from the check
      s3:pdb_set_pw_history: free the old history before setting the new.
      s3:check_sam_security: untangle assignment from statement
      s3:auth:sam_password_ok: enhance readability (imho) by adding some pointers
      s3:auth:sam_password_ok: fix allocation of a data blob.
      s3:auth: use data_blob_null instead of data_blob(NULL, 0) in sam_password_ok()
      s3:auth:sam_password_ok: take username, acct_ctrl and nt/lm hashes, not sampass
      s3:auth:check_sam_security: null out sampass after it has been stolen.
      s3:auth:check_sam_security: create (and use) a common exit point
      s3:auth:check_sam_security: fix a leading tab/ws mixup
      s3:auth:check_sam_security: improve calling and logging of pdb_update_sam_account
      s3:smbd:password_in_history: treat entry with 0 salt as 0 + plain nt hash
      s3:passdb: store the plain nt passwords hashes in history, not salted md5
      s3:auth:check_sam_security: introduce a bool var to control pad_pw_count incrementation
      s3:auth: don't update the bad pw count if pw is among last 2 history entries
      s3:auth: add comment to nulling out stolen sampass
      docs: fix xml tag in the pdbedit manpage
      s3:auth: fix account unlock regression introduced with fix for bug #4347
      torture: add new test RPC-SAMR-PASSWORDS-LOCKOUT
      s4:selftest: add the samr-passwords-lockout test to knownfail
      s4:rpc-server:samr: fix setting of lockout duration < lockout window
      s4:torture: refactor setting account flags out into test_SetUserInfo_acct_flags()
      s4:torture: refactor setting of domain inf out into test_SetDomainInfo()
      s4:torture: create new test_SetDomainInfo_ntstatus()
      s4:torture: refactor querying of domain info out into test_QueryDomainInfo2_level()
      s3:dbwrap_ctdb: start rewrite of transactions using the global lock (g_lock)
      build: Add a configure check for CTDB_CONTROL_TRANS3_COMMIT.
      s3:dbwrap_ctdb: update (C)
      s3:dbwrap_ctdb: change db_ctdb_transaction_store() to return NTSTATUS.
      s3:dbwrap_ctdb: maintain a database sequence number that bumps in transactions
      s3:build: remove checks for deprecated ctdb controls.
      s3:dbwrap_ctdb: fix db_ctdb_fetch_db_seqnum_from_db() when NT_STATUS_NOT_FOUND.
      s3:dbwrap_ctdb: fix two "may be used uninitialized" warnings
      s3:dbwrap_ctdb: fix an uninitialized variable.
      s3:dbwrap_ctdb: fix logic error in pull_newest_from_marshall_buffer().
      s3:dbwrap_ctdb: fix brown paperbag bug in ctdb_transaction_commit.
      s3:dbwrap_ctdb: exit early when nothing has been written in transaction_commit.
      s3:dbwrap_ctdb: fix reading/storing of special key __db_sequence_number__
      s3:g_lock: remove an unreached code path.
      s3:ctdb_conn: add ctdbd_conn_get_fd() to get the fd out of the ctdb connection
      s3:g_lock: remove a nested event loop, replacing the inner loop by select
      s3:make "net conf addshare" atomic by wrapping all writes in one transaction
      s3:registry: eliminate race condition in creating/scanning sorted subkeys
      packaging(RHEL-CTDB): adapt configure.rpm to match the spec-file configure call
      nss_wrapper: fix segfault in print_group() in the testsuite
      s4:move the sddl code down to the top level
      libcli/security: fix sddl.c to be able to build it from source3
      s3: build sddl.c in samba3
      s3:smbcacls: add switch "--sddl" to output acls as sddl encoded strings
      s3:net: refactor getting of secdesc out of net_registry_getsd()
      s3:net: add new subcommand "net registry getsd_sddl" to print secdesc in sddl format
      s3:net: add i18n macro _() to one message
      s3:net: fix some i18n messages in net_registry_getsd_internal().
      s3:net: add a command "net registry setsd_sdd"
      s3:release-scripts: fix create-tarball to treat vendor patch level correctly
      s3:build: Fix automatic building of vfs_tsmsm if gpfs and dmapi are present.
      s3:smbcacls: also honour the "--sddl" flag when setting ACLs.
      s3:registry-legacy: use talloc_stackframe() instead of NULL in regkey_open_internal()
      s3:configure: fix a message
      s3:winbind:idmap_tdb: don't check ranges when an invalid entry was found.
      s3:winbind:idmap_tdb2_set_mapping: untangle assignment from check
      s3-waf: fix linking of swat by adding cap as dependency
      s3-waf: fix linking of eventlogadm by adding cap as dependency
      s4:torture:winreg: improve error messages in test_QueryValue_full
      s4:torture:winreg: improve error messages in test_HKLM_wellknown
      s3:fix configure after change "add Werror_FLAGS for IBM's xlc"
      s3:registry: add C to reg_cachehook, confessing considerable changes in 2008
      s3:registry: protect registry.h from multiple inclusion
      s3:registry: extract the reg_cachehook prototypes into their own header.
      s3:registry: extract the reg_util_legacy prototypes into their own header.
      s3:registry: remove superfluous comments from registry.h
      s3:registry: extract the reg_util prototypes into their own header.
      s3:registry: fix data_p arg of regval_compose to be uint8 * instead of char *
      s3:registry: fix regval_ctr_addvalue() to take data as uint8 *, not char *.
      s3:registry: adapt callers of regval_ctr_addvalue to uint8 * instead of char *
      s3:registry: extract the reg_backend_db prototypes into their own header.
      s3:registry: extraxt the reg_dispatcher prototypes into their own header.
      s3:registry: extract reg_perfcount prototypes into header of their own.
      s3:registry: extract reg_eventlog prototypes to header of their own
      s3:registry: move registry_create_admin_token() to new reg_util_token.c
      s3:registry: move prototype registry_create_admin_token() to new header reg_util_token.h
      s3:registry: rename reg_util.{c,h} to reg_util_internal.{c,h}
      s3:registry: rename lib/util_reg_api.c to registry/reg_util_marshalling.c
      s3:registry: extract registry_pull/push_value prototypes into own header
      s3:registry: move definition of registry_hook to reg_init_full.c - it's only user
      s3:registry:reg_objects: add regval_ctr_init()
      s3:registry:reg_objects: add regval_ctr_get_seqnum()
      s3:registry:reg_objects: add regval_ctr_set_seqnum()
      s3:registry: use regval_ctr/blob accessor functions in reg_api.c
      s3:registry: user regval_ctr/blob accessor functions in reg_backend_db.c
      s3:registry: use regval_ctr/blob accessor functoin in reg_eventlog.c
      s3:libads:use regval_ctr/blob accessor functions in ldap_printer.c
      s3:services_db: use regval_ctr_init() instead of direct allocation
      s3:srv_ntsvcs: use regval_ctr/blob accessor functions
      s3:nt_printing: use regval_ctr_init().
      s3:net rpc printer: fix use of a possibly uninitialized variable
      s3:net_rpc_printer: use regval_blob/ctr accessor functions
      s3:rpcclient:spoolss: use regval_ctr/blob accessor functions.
      s3:profiles: use regval_ctr_init() instead of direct allocation
      s3:net rpc registry: use regval_ctr_init() instead of direct allocation
      s3:registry: hide definition of regval_ctr and regval_blob in reg_objects.c
      s3:registry: move non-reg_objects definitions from reg_objects.h to registry.h
      s3:registry: move reg_objects.h to registry/ and use it only where needed
      s3:registry: add comment header block to registry.h
      s3:registry:reg_objects: Remove use of uint{8,16,32} in favour of C99 types
      s3:registry: add C for substantial changes to reg_objects
      s3:fix the waf build after registry changes.
      s3: remove prototype of non-existsing function idmap_tdb_tdb_close().
      s3: remove unused prototype for lp_idmap_domains().
      s3:pdb_ldap: fix bug 7505 - init_sam_from_ldap stores group in sid2uid cache
      s3:idmap_ldap: remove unreached code (and explicit error return code)
      s3:fix an outdated comment.
      s3:net rpc registry: make getsd succeed when key sd only gives access to SD not key contents
      s3:registry: use normalize_reg_path() in regdb_get_secdesc()
      s3:registry: use normalize_reg_path() in regdb_set_secdesc()
      s3:registry: remove unused function normalize_dbkey()
      s3:registry: fix some debug messages in regdb_ini()
      s3:registry: improve logic of upgrade code in regdb_init()
      s3:net [rpc] registry: be as user-friendly as possible wrt to the normalization change
      s3:registry: rename regdb_upgrade_to_version_2() -> regdb_upgrade_v1_to_v2()
      s3:registry: add a function regdb_store_regdb_version()
      s3:registry: use regdb_store_regdb_version() in regdb_upgrade_v1_to_v2()
      s3:registry: use regdb_store_regdb_version() in regdb_init().
      pidl: fix printing of server side ndr request debug messages
      s3:gdbtestenv: print the server's name in the icontitle instead of "server"
      s3:gdbtestenv: also set the xterm's window title appropriately
      s3:gdbtestenv: also start an xterm with nmbd. and start winbindd before smbd.
      s3:test: add a new "valgrindtestenv" target, similar to gdbtestenv
      s3:idmap_tdb2: fix a debug message
      s3:groupdb: allocate a gid after allocating a rid in pdb_default_create_alias()
      s3:pdb_ldap: move some code in ldapsam_create_dom_group()
      s3:net sam provision: allocate the uid after composing the sid for Administrator
      s3:net sam provision: compose sid before getting uid for Guest
      s3:net: change "net idmap dump" to use dbwrap instead of direct tdb access
      s3:net: rewrite "net idmap restore" using dbwrap
      libwbclient: unimplement wbcSetUidHwm()
      libwbclient: unimplement wbcSetGidHwm()
      s3:winbind: remove SET_HWM from winbind's API.
      s4: remove SET_HWM and SET_DUAL_HWM from wb_samba3_protocol
      s3:idmap: remove unused idmap_set_uid_hwm()
      s3:idmap: remove unused idmap_set_gid_hwm()
      libwbclient: unimplement wbcSetUidMapping()
      libwbclient: unimplement wbcSetGidMapping()
      libwbclient: unimplement wbcRemoveUidMapping()
      libwbclient: unimplement wbcRemoveGidMapping()
      s3:winbind: remove the method SET_MAPPING from winbind's API
      s4: remove SET_MAPPING from wb_samba3_protocol
      s3:idmap: remove unused idmap_set_mapping().
      s3:winbind: remove the method REMOVE_MAPPING from winbind's API
      s4: remove REMOVE_MAPPING from wb_samba3_protocol
      s3:idmap: remove unused idmap_remove_mapping().
      s3:idmap: remove the remove_mapping method from API and backends
      s3:idmap: remove unused method dump_data() from the idmap API
      s3:idmap: remove unused alloc method get_id_hwm from idmap API
      s3:idmap: remove unused method set_id_hwm from idmap API
      s3:winbind: increase interface version after removing calls
      s3:idmap: don't call idmap_new_mapping idmap_sid_to_unixid.
      s3:idmap: don't call idmap_new_mapping idmap_sid_to_gid
      s3:idmap: add a debug message to idmap_sid_to_uid
      s3:idmap: add a debug message to idmap_sid_to_gid
      s3:idmap: remove idmap_new_mapping() - now implemented in the backends
      s3:idmap: remove the set_mapping method from the idmap API
      s3:idmap: factor out common code of idmap_allocate_uid|gid()
      s3:idmap: add an allocate_id method to the idmap_methods struct.
      s3:idmap: use allocate_id() from the idmap_methods in idmap_allocate_unixid()
      s3:idmap: remove unused idmap_alloc_init().
      s3:idmap_tdb: make idmap_alloc_tdb_init() static.
      s3:idmap_tdb2: don't call smb_register_idmap_alloc() in idmap_tdb2_init
      s3:idmap_tdb2: remove unused idmap_alloc_methods.
      s3:idmap_tdb2: remove unused idmap_tdb2_alloc_close().
      s3:idmap_tdb2: remove unused idmap_tdb2_alloc_init().
      s3:idmap_tdb: don't call idmap_alloc_tdb_init in idmap_tdb_init
      s3:idmap_tdb: remove unused idmap_alloc_tdb_init()
      s3:idmap_tdb: remove unused idmap_alloc_methods
      s3:idmap_ldap: don't call idmap_alloc_ldap_init in idmap_ldap_init
      s3:idmap_ldap: remoce unused idmap_alloc_ldap_init
      s3:idmap_ldap: remove unused idmap_ldap_alloc_methods.
      s3:idmap: remove unused smb_register_idmap_alloc().
      s3:idmap: remove unused get_alloc_methods().
      s3:idmap: remove the alloc methods list from idmap.c
      s3:idmap: remove idmap_alloc_context from idmap.c
      s3:idmap: remove unused definition of idmap_alloc_methods.
      s3:loadparm: remove parameter "idmap alloc backend"
      s3:docs: remove documentation of removed parameter "idmap alloc backend"
      s3:loadparm: add new boolean parameter "idmap read only"
      s3:docs: add documentation for new "idmap read only" parameter
      s3:net: remove the "net idmap secret alloc" functionality.
      s3:docs: fix net manpage to reflect removal of net "idmap secret alloc" feature
      s3:idmap: add low_id and high_id to the idmap_domain struct
      s3:idmap: add a read_only flag to the idmap_domain struct.
      s3:idmap: parse ranges and "read only" in idmap_init_domain().
      s3:idmap: don't check range for passdb idmap domain
      s3:idmap: add idmap_unix_id_is_in_range() for checking an id against an idmap range
      s3:idmap_tdb2: re-implement allocated_id in idmap methods.
      s3:idmap_tdb2: add allocation of new mappings to idmap_tdb2_sids_to_unixids
      s3:idmap_tdb2: open the db after loading the ranges in idmap_tdb2_db_init().
      s3:idmap_tdb2: move definition of struct idmap_tdb2_context up.
      s3:idmap_tdb2: remove use of idmap_tdb2_state from idmap_tdb2_allocate_id
      s3:idmap_tdb2: move the idmap script from idmap_tdb2_state to idmap_tdb2_context
      s3:idmap_tdb2: also support idmap script for named domains
      s3:idmap_tdb2: pass idmap_domain instead of idmap_tdb2_context to idmap_tdb2_unixids_to_sids
      s3:idmap_tdb2: pass idmap_domain (not idmap_tdb2_context) to idmap_tdb2_sid_to_id
      s3:idmap_tdb2: use filter from idmap_domain rather than from idmap_tdb2_context
      s3:idmap_tdb2: use range from idmap_domain in idmap_tdb2_allocate_id
      s3:idmap_tdb2: honour the "idmap read only" flag in the tdb2 module.
      s3:idmap_tdb2: don't parse config and fill filter_low_id and filter_high_id
      s3:idmap_tdb2: remove filter_low_id and filter_high_id from idmap_tdb2_context
      s3:idmap_tdb2: add an idmap_domain struct argument to idmap_tdb2_open_db()
      s3:idmap_tdb2: give idmap_tdb2_alloc_load() and idmap domain arguemnt
      s3:idmap_tdb2: remove unused idmap_tdb2_state and idmap_tdb2_load_ranges
      s3:idmap_tdb2: move idmap_tdb2_alloc_load() up to reduce need for prototype
      s3:idmap_tdb2: rename idmap_tdb2_alloc_load -> idmap_tdb2_init_hwm
      s3:idmap_tdb2: talloc_zero (instead of talloc) the idmap_tdb2_context
      s3:idmap_tdb2: add the db_context to the idmap_tdb2_context
      s3:idmap_tdb2: don't check whether sid is already mapped in idmap_tdb2_new_mapping().
      s3:idmap_tdb2: use the right talloc context for db_open in idmap_tdb2_open_db()
      s3:idmap_tdb2: move idmap_tdb2_set_mapping() up to its _action callback.
      s3:idmap_tdb2: get rid of an extra variable in idmap_tdb2_db_init().
      s3:idmap_tdb2: move idmap_tdb2_new_mapping() up. spare a prototype.
      s3:idmap_tdb2: add my (C)
      s3:idmap_tdb: remove an extra blank line
      s3:idmap_tdb: convert idmap_tdb_allocate_id() to use transaction wrappers
      s3:idmap_tdb: add idmap_tdb_get_new_id() to allocate a new id given a domain
      s3:idmap_tdb: implement allocate_id in idmap methods for tdb backend
      s3:idmap_tdb: give idmap domain argument to idmap_tdb_id_to_sid
      s3:idmap_tdb: give idmap domain argument to idmap_tdb_sid_to_id
      s3:idmap_tdb: use filter from idmap_domain rather than from idmap_tdb_context
      s3:idmap_tdb: add idmap domain arg to idmap_tdb_upgrade and use domain range
      s3:idmap_tdb: remove filter_low_id,filter_high_id from idmap_tdb_context
      s3:idmap_tdb: move definition of struct idmap_tdb_context up.
      s3:idmap_tdb: rename idmap_tdb_alloc_init->idmap_tdb_init_hwm and use db from idmap_tdb_context
      s3:idmap_tdb: have idmap_tdb_open_db take an idmap_domain struct as argument
      s3:idmap_tdb: remove unused idmap_tdb_load_ranges()
      s3:idmap_tdb: move idmap_tdb_init_hwm up.
      s3:idmap_tdb: call idmap_tdb_init_hwm() from idmap_tdb_open_db().
      s3:idmap_tdb: give idmap_domain arg to idmap_tdb_allocate_id and use ctx->db
      s3:idmap_tdb: remove unused idmap_tdb_alloc_close().
      s3:idmap_tdb: remove unused idmap_alloc_db
      s3:idmap_tdb: remove unused struct idmap_tdb_state.
      s3:idmap_tdb: use transaction wrapper for idmap_tdb_set_mapping().
      s3:idmap_tdb: move the set_mapping code up
      s3:idmap_tdb: add a idmap_tdb_new_mapping().
      s3:idmap_tdb: rewrite sids_to_unixids to create mappings for unmapped sids.
      s3:idmap_tdb: prevent opening the idmap db more than once.
      s3:idmap_tdb: properly initialize the idmap_tdb context with zero
      s3:idmap_tdb: add my (C)
      s3:idmap_ldap: re-implement allocate_id in idmap methods.
      s3:idmap_ldap: use filter range from idmap domain, not idmap_ldap_context
      s3:idmap_ldap: don't load ranges - they have been loaded into struct idmap_domain
      s3:idmap_ldap: remove unused filter range from struct idmap_ldap_context
      s3:idmap_ldap: add idmap_domain arg to idmap_ldap_alloc_init and verify_idpool
      s3:idmap_ldap: use ranges from idmap domain in idmap_ldap_allocate_id()
      s3:idmap_ldap: remove the (now unused) range from idmap_ldap_alloc_context
      s3:idmap_ldap: call idmap_ldap_alloc_init from idmap_ldap_init.
      s3:idmap_ldap: make idmap_ldap_alloc_context a member of idmap_ldap_context
      s3:idmap_ldap: move idmap_ldap_set_mapping() further up.
      s3:idmap_ldap: add idmap_ldap_get_new_id() to allocate a new id given a domain
      s3:idmap_ldap: add a idmap_ldap_new_mapping().
      s3:idmap_ldap: create mappings for unmapped sids in idmap_ldap_sids_to_unixids()
      s3:idmap_ldap: add my (C)
      s3:idmap_rid: untangle assignment from check in idmap_rid_initialize()
      s3:idmap_rid: remove unused talloc ctx argument from idmap_rid_id_to_sid()
      s3:idmap_rid: remove unused talloc context var from idmap_rid_unixids_to_sids()
      s3:idmap_rid: remove unused talloc context arg from idmap_rid_sid_to_id()
      s3:idmap_rid: remove unused talloc context var from idmap_rid_sids_to_unixids()
      s3:idmap_rid: use ranges from idmap_domain struct in idmap_rid_id_to_sid()
      s3:idmap_rid: use range from idmap_domain in idmap_rid_sid_to_id()
      s3:idmap_rid: remove range from idmap_rid_context()
      s3:idmap_rid: remove unused domain_name from the idmap_rid_context.
      s3:idmap_rid: remove a comment that does not apply in that place.
      s3:idmap_ad: use range from idmap_domain in idmap_ad_unixids_to_sids()
      s3:idmap_ad: use range from idmap_domain in idmap_ad_sids_to_unixids()
      s3:idmap_ad: remove unused filter_low_id and filter_high_id from idmap_ad_context
      s3:idmap_ad: untangle two assignments from checks
      s3:idmap: add abstract idmap_rw new_mapping mechanism without registering backends
      s3:idmap_tdb2: add rw_ops to idmap_tdb2_context and initialize in idmap_tdb2_db_init
      s3:idmap_tdb2: use idmap_rw_new_mapping in idmap_tdb2_new_mapping
      s3:idmap_tdb: add idmap_rw_ops to idmap_tdb_context and initialize them in init_db
      s3:idmap_tdb: use idmap_rw_new_mapping in idmap_tdb_new_mapping
      s3:idmap_ldap: add idmap_rw_ops to idmap_ldap_context and init in db_init()
      s3:idmap_ldap: use idmap_rw_new_mapping in idmap_ldap_new_mapping
      s3:idmap: fix spacing/indentation
      s3:idmap: fix sid_to_unixid for builtin and own domain.
      s3:loadparm: make lp_load_ex static. We have wrappers for external callers.
      s3:smbd: add a nfs backend for sysquotas.
      s3:smbd: add nfs quota support to the linux-non-sysquota code
      docs:vfs_gpfs: improve the CAVEAT section on run and build time dependencies
      s3:registry: move higher level function reg_open_path to new module reg_api_util
      s3:registry: move (commented out) hilvl util functions to reg_api_util.c
      s3:registry: move prototypes of unused hilvl functions to ret_api_util.h and comment them out
      s3:services_db: untangle assignments from check in construct_service_sd().
      s3:services_db: untanlge assignments from check in read_init_file().
      s3:services_db: rewrite svcctl_set_secdesc() using reg_api calls instead of legacy
      s3:services_db: rewrite svcctl_set_secdesc to use tmp talloc ctx
      s3:services_db: fix a debug message
      s3:services_db: remove the TALLOC_CTX argument from svcctl_set_secdesc
      s3:services_db: use temp talloc ctx in svcctl_get_secdesc()
      s3:services_db: change svcctl_get_secdesc() to use reg_api functions
      s3:services_db: make svcctl_lookup_dispname() use a temp talloc ctx
      s3:services_db: change svcctl_lookup_dispname() to use reg_api functions
      s3:services_db: rewrite svcctl_lookup_description() to use a tmp talloc ctx
      s3:services_db: change svcctl_lookup_description() to use reg_api functions
      s3:services_db: factor out common code of lookup_dispname and lookup_description
      s3:services_db: publish svcctl_get_string_value()
      s3:srv_ntsvcs_nt: make fill_svc_config() use svcctl_get_string_value()
      s3:rpc_server: registry is not direclty used in the svcctl server any more
      s3:rpc_server:ntsvcs: use svcctl_lookup_dispname instead of legacy svcctl in _PNP_GetDeviceRegProp
      s3:rpc_server:ntsvcs: registry is not directly used an more.
      s3:services_db: remove unused legacy function svcctl_fetch_regvalues().
      s3:services_db: remove bogus comments
      s3:services_db: create the "Security" subkey if it does not exist in svcctl_set_secdesc()
      s3:services_db: extract core of svcctl_set_secdesc to _internal version
      s3:services_db: rewrite svcctl_init_keys() to use reg_api calls instead of legacy
      s3:services_db: does not need legacy registry code any more.
      s3:registry: remove now (finally) obsolete reg_util_registry.{c,h}
      s3:registry: regfio fix the build
      s3:services_db: convert get_common_service_dispname() to talloc
      s3:registry:reg_api: update (C)
      s3:registry: move the reg_api prototypes to their own header.
      s3:registry: move reg_api_regf prototypes to their own header file.
      s3:registry: move prototypes from reg_init_basic.c to their own header.
      s3:registry: move prototype from reg_init_full.c to its own header.
      s3:registry: move prototype from reg_init_smbconf.c to its own header.
      s3:registry: move the reg_db.h from include/ to registry/
      s3:registry: move regio.h from include/ to registry/
      s3:tests: fix misplaced '...' for grep pattern in test_net_registry.sh
      s3:registry: remove unneeded TALLOC_CTX argument from reg_deletekey_recursive
      s3:net: add subcommand net registry deletekey_recursive
      add script to build only the manual pages (not all the docs) - git version
      add script to build only the manpages (not the complete docs) - no-git version
      docs: use abs_top_builddir instead of BUILDDIR to let configure create correct catalog file
      no need any more to create catalog file manually in build-manpages-git
      no need any more to manually create catalog file in build-manpages-nogit
      s3:registry: try to fix the build of reg_parse_internal on HP-UX
      libsmbconf: parse an empty share as empty share, not as NULL.
      s3:registry: fix some trailing spaces in reg_backend_db
      s3:winbindd: fix query_user_list for users with NULL full_name
      s3:winbindd: fix query_user for users with NULL full name.
      util/charset: remove a duplicate comment.
      s3:lib/charcnv: add next_codepoint_ext() that accepts input charset.
      s3:lib/charcnv: reformat comments in next_codepoint_ext()
      s3:lib/charcnv: rename a parameter for clarity in next_codepoint_ext()
      s3:lib/charcnv: clarify comments in next_codepoint_ext()
      s3:lib/util_str: clarify the comment header for strlen_m().
      s3:lib/util_str: add strlen_m_ext() that takes input and output charset
      s3:util_str: add strlen_m_ext_term() - variant of strlen_m_ext() counting terminator
      lib/charset/charcnv: add next_codepoint_convenience_ext() that accepts input charset.
      lib/charset/charcnv: rename a parameter of next_codepoint_convenience_ext() for clarity
      lib/charcnv/util_unistr: add next_codepoint_ext() that accepts input charset.
      lib/util/charset/util_unistr: add strlen_m_ext that takes input and output charset
      lib/util/charset/util_unistr: add strlen_m_ext_term() - variant of strlen_m_ext() counting terminator
      lib/util/charset/util_unistr: clarify the comment header for strlen_m().
      lib/util/charset/charconv: clarify comments in next_codepoint_convenience_ext()
      librpc/ndr: use new strlen_m_ext_term() in ndr_charset_length(): fix bug #7594
      s3:smbd: remove some commented out legacy code
      s3:registry: improve debug messages about regdb refcount changes
      docs: clarify the idmap_ad manpage (bug #6322)
      docs: clarify the idmap_rid manpage (bug #7788)
      util_net: fix a comment typo in interpret_string_addr_internal()
      s3:net: disable dynamic dns updates at the end of "net ads join" in a cluster (bug #7871)
      s3:net: add net_update_dns_ext() that accepts a list of addresses as parameter (bug# 7871)
      s3:net ads dns register: add support for specifying addresse on the commandline (bug #7871)
      examples:createdombj: default prefix to target-type, not "group"
      s3:idmap_ldap: remove use of the ldap_idmap_alloc_context from verify_idpool().
      s3:idmap_ldap: don't call idmap_ldap_alloc_init in idmap_ldap_init.
      s3:idmap_ldap: remove unused idmap_ldap_alloc_init().
      s3:idmap_ldap: remove unused idmap_ldap_alloc_close_destructor().
      s3:idmap_ldap: remove use of alloc context from idmap_ldap_allocate_id().
      s3:idmap_ldap: remove alloc context member from ldap_idmap_context
      s3:idmap_ldap: remove unused idmap_ldap_alloc_context.
      s3:idmap_ldap: remove special handling of alloc secret (not used any more).
      s3:net: remove alloc parameter from idmap_store_secret() (net idmap store).
      s3:net: fix the usage for net idmap secret (removing alloc)
      s3:net: make idmap_store_secret static.
      s3:winbindd/idmap.c: add my C
      s3:winbindd/idmap_util.c: add my C
      s3:winbindd/idmap_ad.c: update my C
      docs: Remove template "itemizedlist/listitem" from man.xsl
      packaging/RHEL-CTDB: untangle the various %doc entries to single lines
      packaging/RHEL-CTDB: do not use an external docs tarball but build the manpages
      packaging/RHEL-CTDB: add the pam_winbind.conf manpage
      packaging/RHEL-CTDB: add the smbta-util manpage
      release-scripts: remove commented out line from git-version
      release-scripts: add gpl header comment to build-manpages-git
      release-scripts: add gpl header comment to build-manpages-nogit
      release-scripts: add build-htmlman-git
      release-scripts: add build-htmlman-nogit
      s3:vfs:shadow_copy2: fix indentation in _SHADOW2_NEXT_SMB_FNAME
      s3:docs: document "winbind max domain connections"
      s3:registry: fix comments in regdb_store_regdb_version()
      wbinfo: remove --set-uid-mapping - winbindd does not implement that any more.
      wbinfo: remove --set-gid-mapping - winbindd does not implement that any more.
      wbinfo: remove --remove-uid-mapping - winbindd does not implement that any more.
      wbinfo: remove --remove-gid-mapping - winbindd does not implement that any more.
      libwbclient: remove two unused defines
      libwbclient: remove wbcSetUidMapping() - not implemented any more
      libwbclient: remove wbcSetGidMapping() - not implemented any more
      libwbclient: remove wbcRemoveUidMapping() - not implemented any more
      libwbclient: remove wbcRemoveGidMapping() - not implemented any more
      libwbclient: remove wbcSetUidHwm() - not implemented any more
      libwbclient: remove wbcSetGidHwm() - not implemented any more
      libwbclient: bump version to 0.6 -> 1.0 due to ABI change (removed symbols)
      libwbclient: bump the libwbclient SOVER 0 -> 1 due to ABI changes
      docs: update wbinfo manpage: remove documentation of removed parameters
      s3:net registry: fix a debug message.
      s3:net registry: fix a debug message.
      s3:registry: in deletekey_recursive, fix return code upon error.
      s3:net registry: ignore WERR_BADFILE when --force is given in deletekey[_recursive]
      s3:net conf: fix a comment typo
      s3:loadparm: skip leading spaces in parameter values from the command line
      s3:popt: add POPT_COMMON_OPTION to provide only the "--option" feature
      s3:testparm: add "--option" to testparm
      s3:net idmap: fix error reporting in net_idmap_dbfile()
      s3:net idmap restore: correctly abort operation if dbfile could not be determined
      s3:net idmap dump: report correct database file when failed to open idmap db.
      Revert "nsswitch: remove unused code from wbinfo.c"
      Revert "nsswitch: libwbclient has vnum 1 now."
      Revert "libwbclient: bump version to 0.6 -> 1.0 due to ABI change (removed symbols)"
      Revert "libwbclient: remove wbcSetGidHwm() - not implemented any more"
      Revert "libwbclient: remove wbcSetUidHwm() - not implemented any more"
      Revert "libwbclient: remove wbcRemoveGidMapping() - not implemented any more"
      Revert "libwbclient: remove wbcRemoveUidMapping() - not implemented any more"
      Revert "libwbclient: remove wbcSetGidMapping() - not implemented any more"
      Revert "libwbclient: remove wbcSetUidMapping() - not implemented any more"
      Revert "libwbclient: remove two unused defines"
      Revert "wbinfo: remove --remove-gid-mapping - winbindd does not implement that any more."
      Revert "wbinfo: remove --remove-uid-mapping - winbindd does not implement that any more."
      Revert "wbinfo: remove --set-gid-mapping - winbindd does not implement that any more."
      Revert "wbinfo: remove --set-uid-mapping - winbindd does not implement that any more."
      Revert "libwbclient: bump the libwbclient SOVER 0 -> 1 due to ABI changes"
      libwbclient: doxygen: mark wbcSetUidMapping deprecated
      libwbclient: doxygen: mark wbcSetGidMapping deprecated
      libwbclient: doxygen: mark wbcRemoveUidMapping deprecated
      libwbclient: doxygen: mark wbcRemoveGidMapping deprecated
      libwbclient: doxygen: mark wbcSetUidHwm deprecated
      libwbclient: doxygen: mark wbcSetGidHwm deprecated
      s3:smbd: fix switch indentation level in get_ea_dos_attribute()
      s3:net: fix usage for "net rpc registry export"
      testprogs/blackbox/subunit: add testok() for easier integration of s3 tests.
      s3:test: add a simple blackbox test that succeeds.
      s3:test: add the success blackbox test as samba3.blackbox.success
      s3:test: add a simple failing blackbox testsuite
      s3:test: add the failure blackbox test as samba3.blackbox.failure
      s3:test: add the "blackbox.failure" test to the knownfail tests
      s3:test: use the blackbox subunit test driver in the net_misc tests.
      s3:test: use the blackbox subunit test driver in the net_registry tests.
      s3:test: add comment header to test_net_registry.sh
      s3:test: move the registry roundtrip test to a test script of its own
      s3:test: add the registry roundtrip test as samba3.blackbox.net_s3_registry_roundtrip
      s3:test: mark the net_registry_roundtrip test as knownfail
      s3:test: rename samba3.blackbox.net_s3_misc --> samba3.blackbox.net.misc
      s3:test: rename samba3.blackbox.net_s3_registry -> samba3.blackbox.net.local.registry
      s3:test: rename samba3.blackbox.net_s3_registry_rpc -> samba3.blackbox.net.rpc.registry
      s3:test: rename samba3.blackbox.net_s3_registry_roundtrip -> samba3.blackbox.net.local.registry.roundtrip
      s3:test: rename samba3.blackbox.testparm_s3 -> samba3.blackbox.testparm
      s3:test: remove the give/take admin rights code from the net(rpc)registry test
      s3:test: run the net.rpc.registry test under "dc" not "dc:local"
      s3:tests: use the blackbox subunit output formatter for the smbclient_s3 test.
      s3:tests: include subunit.sh instead of test_functions.sh in test_local_s3.sh
      s3:tests: use the blackbox subunit output formatter for the testparm_s3 test.
      s3:tests: include subunit.sh instead of test_functions.sh in test_wbinfo_s3.sh
      s3:tests: include subunit.sh instead of test_functions.sh in test_smbtorture_s3.sh
      s3:tests: include subunit.sh instead of test_functions.sh in test_ntlm_auth_s3.sh
      s3:tests: include subunit.sh instead of test_functions.sh in test_posix_s3.sh
      s3:tests: remove unused script/tests/test_functions.sh
      s3:tests: fix the smbclient_s3 test for multiple users running it.
      s3:tests: clean up old log directories of the registry.roundtrip test
      s3:tests: move the log directory of the smbclient_s3 test to st/
      WHATSNEW: document new nfs quota backend for linux
      WHATSNEW: document removed parameter "idmap alloc backend"
      s3: fix the waf build after adding smbd/msg_idmap.c
      s3:msg_idmap: The solaris cc compiler does not like unnamed unions as struct members - fix the build
      s3:test: fix registry roundtrip test on older systems (usage of mktemp)
      s3:test: fix smbclient test on older systems (usage of mktemp)
      s3:idmap_cache: remove an leftover wip comment
      s3:test: improve logging in the net registry roundtrip test steps
      s3:test: correctly react to each failing step in the net registry roundtrip tests
      s3:registry: fix invalid write in iconvert_talloc()
      s3:test: in net registry roundtrip test, exclude the files from exclude/logon
      s3:test: in net registry roundtrip test, mark "lock dir" as invalid parameter
      s3:test: mark vanished parameter "postscript" invalid in net registry roundtrip test
      s3:test: the registry roundtrip test passes now
      s3:idmap_ldap: fix a few typos in a comment
      s3:docs: fix xml of "printnotifybackchannel" parameter (missing closing tag)
      s3:idmap: remove the special treatment of the default domain "*" from idmap_init_domain
      s3:idmap: remove use of params from idmap_ldap_init - it is not used any more
      s3:idmap: remove special treatment of domain "*" from idmap_ldap_init.
      s3:idmap: remove the params argument from the init function
      s3:idmap: remove passdb argument from idmap_init_domain()
      s3:idmap: simply call idmap_init_named_domain for "*" in idmap_init_default_domain
      s3:idmap: remove (now) unneeded function parse_idmap_module()
      s3:loadparm: remove unused parameter "idmap read only".
      s3:docs: remove documentation of "idmap read only" which was removed.
      s3:WHATSNEW: remove mention of "idmap read only" as new parameter
      s3:loadparm: deprecate "idmap uid/gid/backend" and have them set "idmap config * : range/backend"
      s3:loadparm: set the default "idmap config * : backend" in initialize_globals().
      s3:idmap: make sure that the id mapping system is initialized for first access
      s3:WHATSNEW: document changes of the id mapping system
      s3:dbwrap_ctdb: fix non-locked fetch on persistent db's causing corruption
      s3:rpc_client: fix argument order of call to lsa_open_policy2 in rpccli_lsa_open_policy2
      s3:ctdb: correctly handle cstatus if CTDB_CTRL_FLAG_NOREPLY is set.
      s3:ctdb: samba can now handle the NOREPLY flag
      s3:ctdb: pass the ctdb control flags to the ctdb daemon when sending the control
      s3:dbwrap_ctdb: in ctdb_delete, send a SCHEDULE_FOR_DELETION control to local ctdbd
      s3:configure: fix a comment.
      s3:configure: remove unused variable CTDB_CFLAGS
      s3:configure: rework logic of ctdb/clustering checks
      s3:configure: add check for new CTDB_CONTROL_SCHEDULE_FOR_DELETION
      s3:configure: introduce "--enable-old-ctdb" to enable enforcing build against old ctdb
      s3:configure: allow building without SCHEDULE_FOR_DELETION with --enable-old-ctdb
      s3:waf:compare_config_h3.sh: specify autoconf-config.h as commandline parameter
      s3:waf:compare_config_h3.sh: make diff tool configurable as env var "DIFF"
      s3:waf: add cluster support / ctdb checks.
      s3:idmap_tdb2: fix build of tdb2
      packaging(RHEL-CTDB): replace Prereq by Requires.
      packaging(RHEL-CTDB): add BuildRequires to ctdb-devel >= 1.2.25
      packaging(RHEL-CTDB): Fix debuginfo builds
      docs: fix the missing parameter description section in the smb.conf manpage
      packaging(RHEL-CTDB): fix configure.rpm (honour additional cmdline parameters)
      s3:net idmap check: fix a couple of c++ implicit void * cast warnings
      s3:passdb:pdb_ipa: fix a C++ implicit void * cast warnings
      s3:net rpc trust: fix two C++ implicit void * cast warnings
      s3:net idmap check: fix output of an invalid record
      lib/replace: fix an #if HAVE_GSSAPI_GSSAPI_EXT_H to be an #ifdef
      libcli/auth: fix "no talloc stackframe around" message from the samba4.blackbox.kinit test
      s3:librpc: remove unneded gssapi includes from source3/librpc/crypto/gse.c
      s3:registry: fix a typo in a debug message
      s3:registry: rename create_sorted_subkeys() to create_sorted_subkeys_internal()
      s3:registry: turn create_sorted_subkeys_internal to NTSTATUS return type
      s3:registry: add create_sorted_subkeys() to delete and recreate the sorted subkeys key
      s3:registry: recreate the sorted subkeys cache when storing keys
      s3:registry: add a warning debug message when the sorted subkeys is created from key_exists()
      libcli/auth/smbencrypt: in E_deshash, use talloc_stackframe instead of "#if _SAMBA_BUILD_ == 3" and talloc_tos()
      s3:configure: add --enable-smbtorture4 switch
      s3:build: add an optional full version argument to the SMB_LIBRARY() macro.
      s3:build: add LIBWBCLIENT_FULLVER for consistency with SMB_LIBRARY()
      s3:build: print the full version number in the showlibs targets
      s3:build: reformat AC_ARG_ENABLE(external_libtalloc...)
      s3:build: fix typo in definition of --enable-external-libtdb
      s3:build: determine full version of libtalloc for the samba build
      s3:build: link libtalloc as shared lib if using shared libs at all
      s3:build: determine full version of libtdb for the samba build
      s3:build: link libtdb as shared lib if using shared libs at all
      s3:build: build libtdb.so.$VERSION with full version number instead only SO version
      s3:build: build libtalloc.so.$VERSION with full version number instead only SO version
      s3:build: install libtalloc with full version number instead of only SO version
      s3:build: install libtdb with full version number instead of only SO version
      packaging(RHEL-CTDB): Remove the packaging of the winbind-32bit compat package
      packaging(RHEL-CTDB): disable smbtorture4 in the rpm build
      packaging(RHEL-CTDB): update configure.rpm (--disable-smbtorture4)
      packaging(RHEL-CTDB): build libtdb and libtalloc packages ourselves
      packaging(RHEL-CTDB): enforce building of libtdb and libtalloc
      packaging(RHEL-CTDB): adapt configure.rpm
      packaging(RHEL-CTDB): honour rpm build target options handed in to makerpms.sh
      s3:net registry: polish output of net registry enumerate[_recursive]
      s3:passdb/proto.h: add GPL/copyright comment header
      s3:passdb/proto.h: add _PASSDB_PROTO_H_ guard
      s3:auth/proto.h: add GPL/Copyright header
      s3:auth/proto.h: add _AUTH_PROTO_H_ guard
      s3:locking/proto.h: add GPL/Copyright header
      s3:locking/proto.h: add _LOCKING_PROTO_H_ guard
      s3:smbd/proto.h: add GPL/Copyright header
      s3:smbd/proto.h: add _SMBD_PROTO_H_ guard
      s3:groupdb/proto.h: add GPL/Copyright header
      s3:groupdb/proto.h: add _GROUPDB_PROTO_H_ guard
      s3:winbindd/idmap_proto.h: add GPL/Copyright header
      s3:winbindd/idmap_proto.h: add _WINBINDD_IDMAP_PROTO_H_ guard
      s3:nmbd/nmbd_proto.h: add GPL/Copyright header
      s3:libads/ads_proto.h: add GPL/Copyright header
      s3:libads/ads_proto.h: add _LIBADS_ADS_PROTO_H_ guard
      s3:libads/kerberos_proto.h: add GPL/Copyright header
      s3:libads/kerberos_proto.h: add _LIBADS_KERBEROS_PROTO_H_ guard
      s3:libgpo/gpo_proto.h: add GPL/Copyright header
      s3:libgpo/gpo_proto.h: add _LIBGPO_GPO_PROTO_H_ guard
      s3:lib/eventlog/proto.h: add GPL/Copyright header
      s3:lib/eventlog/proto.h: add _LIB_EVENTLOG_PROTO_H_ guard
      s3:doc: update documentation of the "idmap config FOO : BAR" familiy of parameters
      s3:doc: document "idmap backend" as deprecated.
      s3:doc: remove the documentation of "idmap alloc backend", which has been removed
      s3:doc: document "idmap uid" as deprecated.
      s3:doc: document "idmap gid" as deprecated.
      s3:libads/ndr: include ../librpc/ndr/libndr.h instead of librpc/ndr/util.h
      s3:winbindd_nrd: include ../librpc/ndr/libndr.h instead of librpc/ndr/util.h
      s3:librpc: remove unused file librpc/ndr/util.h
      s3: add GPL/Copyright header to lib/idmap_cache.h
      s3: add _LIB_IDMAP_CACHE_H_ guard to lib/idmap_cache.h
      s3:rpc_server: add GPL/Copyright header to rpc_server/srv_access_check.h
      s3:rpc_server: add _RPC_SERVER_SRV_ACCESS_CHECK_H_ guard to srv_access_check.h
      s3:nmbd: add GPL/Copyright header to nmbd.h
      s3:nmbd: add _NMBD_NMBD_H_ guard to nmbd.h
      s3:passdb: add GPL/copyright header to machine_sid.h
      s3:doc: clean up the example section of the idmap_tdb manpage
      s3:idmap_ldap: rename idmap_ldap_allocate_id to idmap_ldap_allocate_id_internal
      s3:idmap_ldap: rename idmap_ldap_get_new_id to idmap_ldap_allocate_id
      s3:idmap_ldap: allow creation of ldap stored mappings for explicitly configured domains.
      s3:doc: update the ldap_user_dn documentation in the idmap_ldap manpage
      s3:idmap_autorid: add a talloc_stackframe() to idmap_autorid_initialize()
      s3:idmap_autorid: use "idmap config <DOMAIN> : rangesize" instead of "autorid:rangesize"
      s3:docs: fix the example in the idmap_autorid manpage to use "idmap config * : rangesize"
      s3:idmap_autorid: fail initialization if the domain is not "*"
      s3:net conf addshare: do not stat-check the share path.
      s3:registry/reg_parse_internal.h: add copyright information
      s3:registry/reg_parse_internal.c: add copyright information
      Revert "s3:idmap_autorid: fail initialization if the domain is not "*""
      Revert "s3:idmap_autorid: use "idmap config <DOMAIN> : rangesize" instead of "autorid:rangesize""
      Revert "s3:idmap_autorid: add a talloc_stackframe() to idmap_autorid_initialize()"
      s3:proto.h: remove prototypes of error functions moved to common code.
      s3:idmap_autorid: fail initialization if the domain is not "*"
      s3:idmap_autorid: use "idmap config * : rangesize" instead of "autorid : rangesize"
      s3:idmap_autorid: in initialize, don't leak storedconfig to talloc_tos() in the success case
      s3:idmap_autorid: remove redundant code
      s3: remove prototype of convert_string from proto.h
      s3: remove prototype of convert_string_error from proto.h
      s3:test: fix the net registry roundtrip test on older systems
      s3:test: fix the smbclient_s3 test on older systems
      s3:test: don't rely on pyhton being in /usr/bin/python in the sids2xids test
      s3:registry: add helper function regdb_delete_sorted_subkeys()
      s3:registry: when deleting the records for a key, also delete the sorted subkeys cache
      examples/VFS: add include path for s3's autoconf config.h
      s3:build: add a vfs_examples target.
      s3:build: add vfs_examples to the everything target
      selftest: eliminate a perl warning
      selftest: eliminate perl warnings (my $cmd masks earlier definition...)
      selftest: remove invalid use of the globbing operator <>
      s3:registry: don't skip base keys from existence check in regdb_delete_subkey()
      s3:registry: don't skip base keys from existence check in regdb_create_subkey()
      s3:registry: don't skip base key in existence check in regdb_store_keys_internal()
      s3:registry: don't update the sorted subkeys cache any more in regdb_store_keys_internal2()
      s3:registry: remove redundant write of zero-lentgh subkey list record
      s3:registry: refactor creation of subkey list out into regdb_store_subkey_list()
      s3:registry: create the empty list of subkeys of the new key in regdb_create_subkey
      s3:registry: add new mode to regdb_store_subkey_list() for handing in NULL parent key
      s3:registry: add regdb_create_subkey_internal() taking additional db context argument
      s3:registry: add regdb_create_basekey()
      s3:registry: rewrite init_registry_key_internal
      s3:registry: regdb_key_exists now checks only for the list-of-subkeys-record
      s3:registry: adapt the comment explaining the definition of the existence of a key.
      s3:registry: remove the code to create and search the sorted subkeys cache records
      s3:registry: don't delete the unused subkeys cache record any more
      s3:registry: remove unused regdb_delete_sorted_subkeys()
      s3:registry: fix a comment typo
      s3:registry: change regdb_store_regdb_version() to take db_context argument.
      s3:registry: wrap the whole db upgrade in one transaction
      s3:registry: add db_context argument to regdb_upgrade_v1_to_v2()
      s3:registry: set registry version to 3 and add upgrade code
      s3:registry: adapt a debug message to be more systematic
      s3:registry: add debug-level-10 verbosity to regdb_upgrade_v2_v3_fn()
      s3:registry: remove superfluous check for success of talloc_stackframe()
      s3:registry: replace use of deprecated talloc_destroy by talloc_free.
      s3:registry: remove unused function regdb_key_is_base_key()
      examples/VFS: try to fix the build on openbsd, adding alternative spellings of autoconf/header
      s3:registry: update copyright for the registry db implementation
      s3:test: catch more errors in test_access_check() in the smbclient_s3 test
      s3:loadparm: untangle assignment from check in do_section()
      s3:loadparm: fix a check that was accidentially an assignment in lp_servicebynum()
      s3:loadparm: szWinbindNssInfo is now a const char ** instead of a char ** - cast properly
      s3:loadparm: szNetbiosAliases is now a const char ** - cast properly
      s3:loadparm: add suppor for P_BYTES to equal_parameter() - fix build warning
      s3:loadparm: add support for P_CMDLIST to equal_parameter() - fix build warning
      s3:loadparm: add support for P_BYTES to print_parameter() - fix build warning.
      s3:loadparm: add support for P_CMDLIST to print_parameter - fix build warning.
      s3:loadparm: add support for P_BYTES to is_default() - fix build warning
      s3:loadparm: add support for P_CMDLIST to is_default() - fix build warning
      s3:loadparm: add support for P_BYTES to lp_save_defaults - fix build warning
      s3:loadparm: add support for P_CMDLIST to lp_save_defaults() - fix build warning
      s3:loadparm: add support for P_CMDLIST to lp_do_parameter - fix a build warning
      s3:loadparm: add support for P_BYTES to lp_do_parameter() - fix a build warning
      s3:loadparm: fix an implicit cast warning in string intialization in init_globals()
      s3:smbclient: add "logoff" command to close the session
      s3:smbclient: add a "tcon" command to do a tree connect (connect to a share)
      s3:smbclient: add a "tdis" command to do a tree disconnect (close a connection to a share)
      s3:smbclient: add a "tdis" command to view and change the tree id (tid).
      s3:smbclient: print nt status code when smb echo fails
      s3:loadparm: add reload_registry_shares() - reload only those shares already loaded
      s3:loadparm: fix the reload of the configuration: also reload activated registry shares
      s3:docs: document the smbclient "logoff" command
      s3:docs: document the smbclient "tcon" command
      s3:docs: document the smbclient "tdis" command
      s3:docs: document the smbclient "tid" command
      s3:idmap_tdb2: deprecate the idmap:script parameter and use "idmap config * : script" instead
      s3:docs:idmap_tdb2: update the documentation of idmap script
      s3:doc: clarify the idmap script section in the idmap_tdb2 manpage
      s3:docs: remove legacy text from the example in the idmap_tdb2 manpage
      s3:doc: add an example with idmap script to the idmap_tdb2 manpage
      s3:idmap_tdb2: fix a legacy comment that does not apply any more
      s3:idmap_tdb2: remove superfluous initialization with bogus comment
      s3:idmap_tdb2: remove legacy comment
      s3:idmap_tdb2: remove a legacy comment
      s3:idmap_tdb2: remove the undocumented option of the silly name "tdb:idmap2.tdb"
      s3:loadparm: rename parameter "allow_registry_shares" to "load_all_shares"
      s3:loadparm: add a convenience wrapper lp_load_global()
      s3:loadparm: add lp_load_client() that also sets the client state internally
      s3:loadparm: make lp_is_in_client() static - only used inside loadparm
      s3:smbclient: use lp_load_client()
      s3:smbspool: use lp_load_client()
      s3:libsmb: fix a call to lp_load to reinit the globals in any case
      s3:loadparm: add wrapper lp_load_globals_no_reinit()
      s3:loadparm: add wrapper lp_load_client_no_reinit()
      s3:libsmb: use lp_load_client() and lp_load_client_no_reinit() in libsmb_context
      s3:pam_smbpass: use lp_load_client() in pam_smbpass
      s3:loadparm: make lp_set_in_client() static - only used in wrappers in loadparm now.
      s3:libnetapi: use lp_load_global()
      s3:libsmbconf: use lp_load_global() in the testsuite
      s3:libnet_join: use lp_load_global() wrapper of lp_load()
      s3:nmbd: use the lp_load_global() wrapper of lp_load()
      s3:rpcclient: use the lp_load_global() wrapper of lp_load()
      s3:torture: use lp_load_global() in the locktest
      s3:torture: use lp_load_global() in locktest2
      s3:torture: use lp_load_global() in the masktest
      s3:torture: use lp_load_global() in the msgtest
      s3:torture: use lp_load_global() in the push_ucs2 test
      s3:torture: use lp_load_global in the strcmp test
      s3:torture: use lp_load_global() in the strstr test
      s3:smbtorture: use the lp_load_global() wrapper of lp_load()
      s3:dbwrap_tool: use lp_load_global()
      s3:dbwrap_torture: use lp_load_global()
      s3:eventlogadm: use lp_load_global()
      s3:net: use lp_load_global()
      s3:nmblookup: use lp_load_global()
      s3:ntlm_auth: use lp_load_global()
      s3:pdbedit: use lp_load_global()
      s3:smbcacls: use lp_load_global()
      s3:smbcontrol: use lp_load_global(): smbcontrol does not need to load the shares
      s3:smbcquotas: use lp_load_global()
      s3:smbfilter: use lp_load_global()
      s3:smbpasswd: use lp_load_global()
      s3:smbtree: use lp_load_global()
      s3: use lp_load_global() in smbw_sample -- whatever this is ... :-)
      s3:split_tokens: fix a nonempty blank line
      s3:split_tokens: use lp_load_global(), fixing the call to lp_load()
      s3:smbstatus: use lp_load_global() - smbstatus does not need to load shares!
      s3:winbindd: use lp_load_global() - winbindd does not need shares or IPC$
      s3:torture: use lp_load_global() in pdbtest - this does not need shares nor IPC$
      s3:modules:nfs4_acls: improve fix for bug #8330
      s3:dbwrap: explicitly include dbwrap.h in dbwrap_ctdb.c
      s3:modules:nfs4_acls: fix the include of dbwrap.h to not include "include/"
      s3:g_lock: explicitly include dbwrap.h
      s3:dbwrap: move db_open() to a file dbwrap_open.c of its own.
      s3:dbwrap: move db_is_local() from dbwrap.c to dbwrap_open.c
      s3-waf: replace the dbwrap_util library by a dbwrap library that contains the dbwrap core
      s3:dbwrap: move all .c and .h files of dbwrap to lib/dbwrap/
      s3:selftest: run the net rpc registry test under "s3dc" instead "s3dc:local".
      s3:idmap_tdb2: fix bug 8368 : correctly initialize "idmap config * : script" with NULL
      s3:build(autoconf): fix bug #8369: remove irritating "." targets when recent system libs exist
      s3:registry: fix regdb_key_exists: the record has to contain at least the 4-byte subkey counter
      s3:lib: fix a comment in tdb_unpack()
      s3:dbwrap_ctdb: improve transaction start/commit/cancel debugging
      s3:registry: enhance debugging of deletekey_recursive
      s3:registry: fix broken use of dbwrap store record in v1_to_v2 upgrade code
      s3:registry: hand db context in to v2_to_v3 upgrade code via private_data
      s3:registry: define a constant REGDB_VERSION_KEYNAME for the key INFO/version (and use it)
      s3:registry: fix the v1_to_v2 upgrade code so that it does not normalize the INFO/version key ...
      s3:registry: fix the v2_to_v3 upgrade code so that it does not create value list security records for the INFO/version key ...
      s3:smbd: remove an unused variable in dptr_create()
      s3:dbwrap_tdb: correctly catch the error from the return code of tdb_parse in db_tdb_fetch()
      werror: remove duplicate definition of WERR_INVALID_OWNER
      s3:rpc_server: fix two debug messages in svcctl_add_service()
      s3:registry: drop log level of unknown regdb version message in regdb_init() to 0
      s3:registry: add regdb_trans_do(): a transaction wrapper that will check the regdb version
      s3:registry: use the regdb_trans_do wrapper instead of using dbwrap_trans_do directly in the registry db code.
      s3:registry: change regdb_store_values_internal() from bool to NTSTATUS return code
      s3:registry: implement regdb_store_values() with regdb_trans_do()
      s3:registry: implement regdb_set_secdesc() with regdb_trans_do()
      s3:registry: rename REGVE_Vx toREGDB_VERSION_Vx for consistency
      s3:registry: introduce a define REGDB_CODE_VERSION and use it in regdb code.
      s3:registry: fix a debug message typo
      s3:winbind: put winbindd_cache into the state dir, not the cache dir
      s3:registry: fix a debug message in the v2_to_v3 upgrade code
      s3:g_lock: add a missing \n to a debug message in g_lock_init
      s3:dbwrap_tool: add popt support and standard samba options
      s3:dbwrap_ctdb: skip the internal __db_sequence_number__ key from (persistent) traverse and traverse_read
      s3:smb2-server: session setup replies should always be signed (except for guest sessions)
      s3:dbwrap_ctdb: improve the check for skipping the __db_sequence_number__ record in traverse
      s3:registry: fix the test for a REG_SZ blob possibly being a zero terminated ucs2 string
      examples/VFS: fix a typo in the README
      s3:dbwrap: move the db_open_ctdb() prototype to a new header dbwrap_ctdb.h
      s3:dbwrap: move the db_open_tdb() prototype to a new header dbwrap_tdb.h
      s3:dbwrap: move the db_open_file() prototype to a new header dbwrap_file.h
      s3:dbwrap: move the db_open_rbt() prototype to a new header dbwrap_rbt.h
      s3:dbwrap: move dbwrap_fetch() back to dbwrap.c, the core of the dbwrap subsystem
      s3:dbwrap: move dbwrap_delete() back to dbwrap.c, the core of the dbwrap subsystem
      s3:dbwrap: move dbwrap_store() back to dbwrap.c, the core of the dbwrap subsystem
      s3:dbwrap: move dbwrap_traverse() to dbwrap.c, the core of the dbrwap subsystem
      s3:dbwrap: reorganize dbwrap.h some
      s3:dbwrap: change the dbwrap_traverse() wrapper to return the count in an additional parameter
      s3:dbwrap: add a wrapper dbwrap_traverse_read()
      s3:dbwrap: add a comment
      s3:dbwrap: add wrapper dbwrap_get_flags()
      s3:dbwrap: add wrappers for transactions start/cancel/commit
      s3:dbwrap: add wrapper function dbwrap_get_seqnum()
      s3:dbwrap: add get-functions for db_record key, value and private_data
      s3:dbwrap: add dbwrap_record_store(), a wrapper for record->store
      s3:dbwrap: add dbwrap_record_delete(), a wrapper for record->delete_rec
      s3:dbwrap: add dbwrap_fetch_locked(), a wrapper for db->fetch_locked
      s3:dbwrap: convert dbwrap_fetch(), dbwrap_fetch_bystring() and dbwrap_fetch_bystring_upper() to NTSTATUS
      s3:dbwrap: use dbwrap_fetch_bystring() in dbwrap_fetch_[u]int32()
      s3:dbwrap: convert dbwrap_util.c to use dbwrap wrapper functions
      s3:dbwrap_tool: convert to using wrapper functions only
      s3:dbwrap_torture: convert to using wrapper functions only
      s3:serverid: use dbwrap_traverse() in serverid_traverse()
      s3:serverid: use dbwrap_traverse_read() in serverid_traverse_read()
      s3:net: fix the exit code of net serverid list
      s3:net: fix the exit code of net serverid wipe
      s3:serverid: convert to using dbwrap wrapper functions only
      s3:net: convert net serverid to only use dbwrap wrapper functions
      s3:sessionid: use dbwrap_travers() in sessionid_traverse()
      s3:sessionid: use dbwrap_travers_read() in sessionid_travers_read()
      s3:sessionid: convert to using dbwrap wrapper functions only
      s3:sharesec: convert sharesec.c to use dbwrap wrapper functions
      s3:talloc_dict: change to only use dbwrap wrapper functions
      s3:registry: convert reg_backend_db to use dbwrap wrapper functions
      s3:g_lock: convert to use only dbwrap wrapper functions.
      s3:privileges: convert privileges.c to use dbwrap wrapper functions.
      s3:libnet: convert libnet_dssync_passdb to only use dbwrap wrapper functions.
      s3:idmap: convert idmap_tdb to use dbwrap wrapper functions.
      s3:net: convert net idmap to use only dbwrap wrapper functions
      s3:net: convert net idmap check to use dbwrap wrapper functions.
      s3:passdb: convert pdb_tdb to use dbwrap wrapper functions.
      s3:passdb: convert machine_sid to use dbwrap wrapper functions only
      s3:passdb: convert account_pol to use dbwrap wrapper functions only
      s3:secrets: convert to use dbwrap wrapper functions only
      s3:printing: convert printer_list to use dbwrap wrapper functions
      s3:vfs: change the xattr_tdb module to use dbwrap wrapper functions
      s3:vfs: convert nfs4_acls sidmap db code to use dbwrap_wrapper functions
      s3:vfs: convert the acl_tdb module to use dbwrap wrapper functions.
      s3:conn_tdb: convert connections tdb to only use dbwrap wrapper functions
      s3:smbd: convert connections.c to use only dbrwap wrapper functions
      s3:smbd: convert session.c to use dbwrap wrapper functions only
      s3:smbd: convert notify db to use dbwrap wrapper functions
      s3:rpc_server: convert srvsvc to only use dbwrap wrapper functions
      s3:groupdb: convert mapping_tdb.c to use dbwrap wrapper functions only
      s3:messages: convert to use only dbwrap wrapper functions
      s3:locking: convert brlock to only use dbwrap wrapper functions
      s3:locking: convert locking.c to use dbwrap wrapper functions only
      s3:locking: convert posix.c to use dbwrap wrapper functions only
      s3:torture: convert torture.c to only use dbwrap wrapper functions
      s3:dbwrap: move definitions of db_record and db_contect structs to dbwrap_private.h
      s3:idmap_autorid: untangle function from check and log status in idmap_autorid_db_init()
      s3:idmap_autorid: make a debug message more precise
      s3:passdb:account_pol: use dbwrap_fetch_uint32, not dbwrap_fetch_int32 for the DB version
      s3:idmap_tdb: fix hwm-handling to use uint32 consistently
      s3:idmap_tdb2: fix hwm-handling to use uint32 consistently
      s3:dbwrap: convert dbwrap_fetch_int32() to NTSTATUS return code
      s3:dbwrap: change dbwrap_fetch_uint32() to NTSTATUS return type (instead of bool)
      s3:dbwrap: change dbwrap_store_int32() to NTSTATUS return type
      s3:dbwrap: change dbwrap_store_uint32() to NTSTATUS return type
      s3:registry: improve regdb_create_subkey_internal() to always complete incomlete keys
      s3:dbwrap_ctdb: fix check for skipping the __db_sequence_number__ in traverse
      s3:dbwrap_ctdb: improve the check for skipping the __db_sequence_number__ record in traverse
      s3:smbcacls: make get_domain_sid() static
      selftest: mark samba4.drs.delete_object.python knownfail
      s3:dbwrap_ctdb: fix the build after changing signature of tdb_wrap_open()
      s4:selftest: flakey test samba4.drs.delete_object.python should go into skip
      libreplace: add a missing "eval" to the AC_VERIFY_C_PROTOTYPE macro
      s3:net registry: fix segfault when net registry is called without subcommands...
      selftest:Samba3: fix a message printed when starting winbindd
      selftest:Samba3: fix signature for check_or_start()
      lib/util: untangle assignent from check in strhex_to_str()
      lib/util: fix function header comment to strhex_to_str()
      lib/util: skip single hex digit at the end of the input sting - fix potential segfault
      talloc: fix a comment typo
      s4:torture:smb2: fix broken indentation/formatting in torture_smb2_connection()
      s4:torture:smb2: be leass leaky in wrap_simple_2smb2_test()
      s4:torture:smb2: fix a comment
      s4:torture:smb2: fix a nasty double free error.
      s4:torture:smb2: avoid leaking tree connects up to the main function from the durable_open test
      s4:torture:smb2: fix the durable_open test to succeed against w7 and w2k8r2
      s4:torture:smb2: adapt comment in durable-open.lease test according to current information.
      s4:torture: test also break semantics between batch-oplocks and leases
      source4/libcli: add bool durable_open to smb2_create.out.
      s4:libcli: in smb2_create_recv, map SMB2_CREATE_DURABLE_HANDLE_RESPONSE buffer smb2_create.out.durable_open
      s4:torture:smb2: check wheter open was durable in existing tests
      s4:torture:smb2: add a new durable_open_basic1 test: test open against all oplock types
      s4:torture:smb2: add durable_open_basic2 test: test durable open against all lease types
      s4:torture:smb2: rename the durable-open.basic1 test to durable-open.open1 for clarity
      s4:torture:smb2: rename the durable-open.basic2 test to durable-open.open2 for clarity
      s4:torture:smb2: expand durable-open.open1 test matrix by all share-modes
      s4:torture:smb2: expand durable-open.open2 test matrix by all share-modes
      s4:torture:smb2: add a new durable-open.upgrade2 test to test all upgrade combinations
      s3:selftest: improve logging in the registry upgrade test
      s4:torture:smb2: change the test file name in the durable-open.oplock test
      s4:torture:smb2: lease.update2: some more reasonable struct names and a comment
      s4:torture:smb2: fix illegal write/uninitialized data bug in the lease.multibreak test
      s4:torture:smb2: extract map_lease() to util.c as smb2_util_lease_state().
      s4:torture:smb2: use common smb2_util_lease_state() in the lease tests
      s4:torture:smb2: extract map_sharemode() to smb2_util_share_access() in util.c
      s4:torture:smb2: move oplock() from lease.c to smb2_util_oplock_level() in util.c for re-use
      s4:torture:smb2: lease: oplock_level is uint8_t, not uint32_t or int
      s4:torture:smb2: use smb2_util_oplock_level() in the durable-open test for convenience
      s4:torture:smb2: move the smb2_create_*() utility functions from lease.c to util.c for re-use
      s4:torture:smb2: add smb2_generic_create_share() that also takes the sharemode as parameter
      s4:torture:smb2: add smb2_lease_create_share() that takes a sharemode as parameter
      s4:torture:smb2: add smb2_oplock_create_share() that takes sharemode as parameter
      s4:torture:smb2: rewrite the durable-open.open1 test to use smb2_oplock_create_share()
      s4:torture:smb2: rewrite the durable-open.open2 test to use smb2_lease_create_share()
      s4:torture:smb2: rewrite the durable-open.file-position test to use smb2_oplock_create()
      s4:torture:smb2: rewrite the durable-open.oplock test to use smb2_oplock_create()
      s4:torture:smb2: rewrite the durable-open.lease test to use smb2_lease_create()
      s4:torture:smb2: rewrite the durable-open.lock test to use smb2_lease_create()
      s4:torture:smb2: rewrite durable-open.open test to use smb2_*_create functions
      s3:registry: prevent unnecessary transactions in regdb_init
      s3:torture:smb2: add SMB2-SESSION-RECONNECT test
      s3:torture: add a new test SMB2-TCON-DEPENDENCE
      socket_wrapper: simplify include path for replace.h
      socket_wrapper: use libreplace headers based on "#ifdef HAVE_LIBREPLACE"
      s3:locking:posix: adapt use of dbrwrap_fetch() to new NTSTATUS semantics
      s3:locking:posix: remove uses of SMB_ASSERT() from  get_windows_lock_ref_count()
      s3:dbwrap_ctdb: re-use map_nt_error_from_tdb() in local tdb_error_to_ntstatus()
      s3:dbwrap: turn the fetch dbwrap method to NTSTATUS return code.
      s3:dbwrap_tdb: pass NTSTATUS code further up from db_tdb_fetch_parse in db_tdb_fetch()
      s3:registry: replace use of rawmemchr by portable equivalent use of strchr.
      Revert "Remove rawmemchr calls - found by Ira Cooper. These are glibc-specific calls, makes us completely non-portable."
      s3:net registry check: replace rawmemchr by functionally equivalent portable strchr
      lib/util/util_tdb: adhere to coding style for tdb_data_is_empty()
      s4:provision: improve a message
      s4:provision: add the possibility to provision "server services" in smb.conf
      s4:provision: add a server services line to the smb.conf template for the dc
      s4:provision: add "+dns" to server services if the dns backend is SAMBA_INTERNAL
      s3:net registry: fix a copy and paste error in a help text
      s3:net ads join: untangle assignment from check.
      s3:net ads join: reduce indentation and improve logging in the dns update code block
      s3:net ads join: untangle assignment from check, fix return code and improve error logging
      s3:net ads join: check for success of fetching machine password in dns update block
      s3:net ads join: check for malloc success and react accordingly in dns update block
      s3:net ads join: interpret return code of ads_kinit_password() in dns update block
      s3:net ads join: improve status evaluation for call to net_update_dns()
      s3:net ads join: improve comment for dns update block
      s3:net ads join: move dns update code out to new function _net_ads_join_dns_updates()
      s3:net ads join: reduce indentation in _net_ads_join_dns_updates()
      s3:net ads join: add a comment for the call to _net_ads_join_dns_update()
      s3:net ads join: remove a useless empty comment block
      s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used()
      loadparm: fix a load of uninitialized memory errors found by valgrind.
      s4:torture:smb2: remove an unused variable from torture_smb2_setinfo()
      s4:torture:smb2:notify: remove an unused variable
      s4:torture:smb2:notify: remove an unused variable
      s4:torture:smb2: check for success of talloc in secondary_tcon()
      s4:torture:smb2: talloc_free the right tree structure in secondary_tcon()
      s4:libcli/torture:smb2: change smb2_tree_connect to take a smb2_session instead of smb2_tree arguement.
      s4:libcli:smb2: don't allocate the smb2_tree struct earlier than necessary in smb2_connect()
      s4:torture: add smb2.durable_open test reopen1
      s4:torture: add smb2.durable_open test reopen2
      s4:torture: add torture_smb2_tree_connect() utility function
      s4:torture: add smb2.durable_open test reopen3
      s4:torture: add a torture_smb2_session_setup() utility function
      s4:torture: add a smb2.durable_open.reopen4 test
      s4:provision: don't log the ldap admin password - it is internal only
      s4:provision: generate the adminpass provision() instead of provision_fill()
      s4:provision: only print the adminpass if it was generated (not user-provided)
      wafsamba: fix blacklist handling in "make dist"
      wafsamba: exclude '.gitignore' from "make dist"
      wafsamba: exclude '.brzignore' from "make dist"
      s4:torture: improve comment for the smb2.durable-open.reopen1 test
      s4:torture:smb2: invalidate the handle after the connection has been killed
      s4:torture:smb2: fix a typo in the durable-open.open test file name
      s4:torture:smb2: move some initialization and call to smb2_create together in durable-open.open test
      s4:torture:smb2:durable-open: rename the open test to open-lease
      s4:torture:smb2: extend and prettify comment for durable-open.open-lease test
      s4:torture:smb2: add a durable-open.open-oplock test
      s4:smbcli:smb2: add a random GUID to the transport connection in smb2_transport_init()
      s4:torture:smb2:durable_open: use the correct tree in the final close call
      s4:torture:smb2:durable-open: make a comment more precise in the reopen4 test
      s4:torture:smb2:durable-open: introduce new variable for the new session
      s4:torture:smb2:durable-open: prevent using a disconnected handle in reopen4
      s3:libsmb:smb2: pass previous session ID to session setup, not previous session
      s4:libcli:smb2: add a previous session argument to smb2_session_setup_spnego()
      s4:torture:smb2: add previous_session argument to torture_smb2_session_setup()
      s4:libcli:smb2: add a previous session argument to smb2_connect_send()
      s4:libcli:smb2: add a smb2_connect_ext variant of smb2_connect that takes a previous_session argument
      s4:torture:smb2: add torture_smb2_connection_ext() that takes previous_session
      s4:torture:smb2: add durable_open.reopen2a - variant of reopen2 with session reconnect
      s4:torture:smb2: add new "session" testsuite starting with a session.reconnect test
      s4:selftest: remove old "samba4.smb2.persistent.handle1" from knownfail - test does not exist
      s4:selftest: skip smb2.session testsuite
      s4:torture:smb2:durable-open: fix a silly access-after-free panic
      libcli/smb/smb2_signing: rename smb2_key_deviration -> smb2_key_derivation
      s3:smbd:smb2_write: improve logging in the error case
      s4:torture:smb2: durable-open: make tables static
      s4:torture:smb2:durable_open: update (C)
      s4:torture:smb2: rename some of the durable-handle subtests more systematically
      libcli:smb: define DH2Q and DH2C tags for smb2 extra create blobs
      libcli:smb: add defines for SMB2.2 global capabilities
      libcli:smb: add defines for SMB2.2 share capabilities
      libcli:smb: upgrade SMB2_CAP_ALL to include the newly known caps
      libcli:smb: add new SMB2 share flags
      libcli:smb: define SMB2_DHANDLE_FLAG_PERSISTENT
      s4:libcli:smb2: add durable handle v2 data to the smb2_create i/o structure
      s4:libcli:smb2: add support durable handle request v2 blob in smb2_create_send
      s4:libcli:smb2: add support durable handle reconnect v2 blob in smb2_create_send
      s4:libcli:smb2: add support for parsing the durable handle v2 response in smb2_create_recv()
      s4:libcli:smb2: allow max protocol 0x0224
      smbXcli: add the possiblilty to negotiate client capabilites in smb >= 2.2
      s4:libcli:smb2: store the share capabilites in the smb2_tree object
      s4:libcli:smb2: set SMB2_CAP_ALL in the negprot
      s4:torture:smb2: start a testsuite for durable v2 handles: durable and persistent opens
      selftest: more precisely skip durable-open, not durable.open
      libcli:smb: define SMB2_HDR_FLAG_REPLAY_OPERATION
      testtools/matchers.py: fix a comment typo
      s4:selftest: add a new test for "samba-tool user list"
      s4:selftest: fix a message-typo in the "samba-tool user" testsuite.
      s4:selftest: fix message typo in test for "samba-tool user list"
      s4:selftest: remove python shebang accidentially re-added to the "samba-tool user" test
      s3:smbd: let smbd/nmbd/winbindd child processes terminate if the parent process died.
      s3:selftest: reactivate the writetimeupdatedelay speed-up
      s4:selftest: make the use of writetimeupdatedelay consistent across all tests
      s4:samba-tool: remove remains of patch conflict resolution
      s4:selftest: add a new testsuite for the "samba-tool group" command
      s4:samba-tool: add simple command "group list"
      s4:selftest: add test for "samba-tool group list"
      s3:vfs_tsmsm: Fix a misspelling of a config parameter in the doc-comment
      docs:man:vfs_gpfs: Fix documented values for gpfs:hsm
      docs:man:vfs_gpfs: fix formatting of values for gpfs:syncio
      docs: add a vfs_tsmsm manpage
      tsocket: Fix a couple of typos and spellings in tsocket_guide.txt
      s4:samdb:rootdse: implement the schemaUpgradeInProgress operation in ldap modify
      s4:torture:smb2: rename the session_reauth test to session_reauth1
      s4:torture:smb2: rename the file in the session-reauth1 test more systematically
      s4:torture:smb2: add a session.reauth2 test.
      s3:passdb: do not use the in-memory idmap cache (it will be removed)
      s3:id_cache: do not use the in-memory idmap cache (it is going to be removed)
      s3:memcache: remove the idmap-part from memcache
      s3:smbcontrol: remove an unused variable
      s3:registry: printing backend: use regdb options via ops struct, not directly
      s3:registry: make regdb_store_keys() static
      s3:registry: make regdb_fetch_keys() static
      s3:registry: make regdb_fetch_values() static
      s3:registry: make regdb_store_values() static
      s3:registry: make regdb_subkeys_need_update() static
      s3:registry: make regdb_values_need_update() static
      s3:registry:reg_api: fix reg_queryvalue to not fail when values are modified while it runs
      s4:torture:rpc:spoolss: also initialize driverName before checking it in test_PrinterData_DsSpooler()
      s3:registry: rename regval_ctr_key_exists() to regval_ctr_value_exists()
      s3:registry: add a new function regval_ctr_value_byname()
      s3:registry: fix a debug message typo
      s3:registry: improve log message in regdb_unpack_values()
      s3:registry: fix debug message in regdb_store_values_internal()
      s3:registry: don't leak the old contents when updating the value cache
      s3:registry: untangle assignment from check and add a debugmessage in reg_setvalue()
      s3:registry: fix race in reg_setvalue that could lead to data corruption
      s3:registry: untangle assignment from check in reg_deletevalue()
      s3:registry: wrap reg_deletevalue() in a transaction
      s3:registry: untangle assignments from checks in reg_createkey()
      s3:registry: wrap reg_createkey() in a transaction
      s3:registry: wrap reg_deletekey() into a transaction
      s3:registry:db: update the value container seqnum after storing/deleting to prevent next read from going to disk if possible
      s3:registry: update the seqnum in the subkey cache at the end of regval_store_keys
      s3:registry: fix seqnum race in fetch_values_internal
      s3:registry: fix seqnum race in regdb_fetch_keys_internal
      s3:registry: untangle assignment from check in regkey_open_onelevel()
      s3:registry untangle an assignment from the check in regkey_open_onelevel()
      s3:registry: convert reg_openkey() to use talloc instead of SMB_STRDUP etc
      s3:registry: let fill_subkey_cache return WERR_BADFILE when the subkey list could not be loaded
      s3:registry: use fill_subkey_cache to check exsistence in regkey_open_onelevel().
      s3:registry: remove a superfluous fill_subkey_cache() in reg_createkey()
      s3:registry: replace call to reg_openkey() in reg_createkey() by accesscheck.
      selftest: remove the "rpc.spoolss.printer" test from flapping
      selftest: remove .*printer.*print_test_extended from flapping
      selftest: mark failing print_tests more specifically
      selftest: mark the driver_info_winreg tests knownfail.
      selftest: remove samba3.rpc.spoolss.*printserver.openprinter_badnamelist from flapping
      selftest: remove printserver.enum_printers_servername from flapping
      s4:torture: add a rpc.samba3.smb-reauth1 test
      s4:torture: add a rpc.samba3.smb-reauth2 test
      s4:torture: add a rpc.samba3.smb2-reauth1 test
      s4:torture: add a rpc.samba3.smb2-reauth2 test
      s4:torture: add a check for talloc success in the rpc.samba3 suite
      s4:torture: add a check for talloc success in rpc.samba3.randomauth2
      selftest: make the knownfail patterns for the driver_info_winreg more specific
      s3:passdb: rename sids_to_unix_ids() --> sids_to_unixids() for consistency
      s3:passdb: remove a forward declaration of wbcSidToUnixId that has become unnecessary
      s4:torture:rpc: remove an accidentially committed character (in a comment)
      s4:torture:rpc: fix a comment typo in samba3.smb2-reauth2
      s4:torture:rpc: add a test samba3.smb2-pipe-read-close
      s4:torture:rpc: add a new test samba3.smb2.pipe-read-tdis
      s4:torture:rpc: add a new test samba3.smb2-pipe-read-logoff
      s4:torture: add a new smb2.session.reauth3 test - getting security descriptor
      s3:smbd: comment the lp_load call in reload_services()
      s3:registry: return error when Key does not exist in regdb_fetch_values_internal()
      s3:registry: implement values_need_update and subkeys_need_update in the smbconf backend
      s3:registry: let reg_subkeys_need_update() return true if the backend does not implement the method
      s3:registry: let reg_values_need_update() return true if the backend does not implement the method
      s4:torture: add a new smb2.session.reauth4 test: setting security descriptor after reauth to anon - works
      s4:torture: add a new smb2.session.reauth5 test: rename after reauth to anon - fails
      s4:libcli:raw: fix a comment typo in smb_setfileinfo()
      util: reformat the DEVELOPER definition of SMB_ASSERT
      util: use SMB_ASSERT with panic also in non-developer builds !!!
      s4:lib: remove unused wscript_build file
      smbconf: remove python shebang from wscript_build
      tevent: fix indentation in the wscript
      s3:dbwrap: move definition of dbwrap_lock_order to dbwrap.h
      s3:lib:dbwrap: use [u]int[num]_t consistently in dbwrap_util.c
      s3:lib:dbwrap: use [u]int[num]_t consistently in dbwrap_file.c
      s3:lib:dbwrap: use [u]int[num]_t consistently in dbwrap_ctdb.c
      s3:lib:dbwrap: use [u]int[num]_t consistently in dbwrap_rbt.c
      s3:lib:dbwrap: use [u]int[num]_t consistently in dbwrap_tdb.c
      s3:build: move lib/dbwrap/dbwrap_util.o to the other dbwrap objects...
      move the dbwrap library to the top level
      s3:idmap_cache: improve debug messages in idmap_cache_find_sid2unixid()
      s3:idmap_cache: add common exit point to idmap_cache_find_sid2unixid()
      s3:idmap_cache: improve checks for format of value string in idmap_cache_find_sid2unixid()
      s3:smbd: remove unused 'connection_struct->used'
      s3:build: fix some spacing in wscript_build
      s3:selftest: introduce a variable for binpath('nmblookup3') in tests.py
      s3:selftest: introduce a variable for binpath('smbclient3') to test.py
      s3:selftest: introduce a variable for binpath('wbinfo') in tests.py
      s3:selftest: introduce a variable for binpath('net') in tests.py
      s3:selftest: introduce a variable for binpath('smbtorture3') in tests.py
      s3:selftest: introduce a variable for binpath('ntlm_auth3') in tests.py
      s3:selftest: introduce a variable for binpath('dbwrap_tool') in tests.py
      s3:selftest: improve strange linebreaks for blackbox tests in tests.py for readability
      selftest: add a binary mapping for nmblookup4
      s3:selftest: add a binary mapping for nmblookup4
      selftest:Samba4: use the nmblookup4 binary mapping
      s4:selftest: determine nmblookup via binary mapping for blackbox test in tests.py
      build: add a build suffix ("4") for s4-binaries
      build: rename build targets nmblookup -> nmblookup4 and nmblookup3 -> nmblookup
      selftest: add a binary mapping for smbclient4
      s3:selftest: add a binary mapping for smbclient4
      s4:selftest: change the blackbox.smbclient test to use binary mapping for smbclient
      s4:selftets: change the blackbox.bogusdomain test to use binary mapping for smbclient
      s4:selftest: change the blackbox.samba_tool test to use a binary mapping for smbclient
      s4:selftest: change the blackbox.chgdcpass test to use a binary mapping for smbclient
      s4:selftest: change the blackbox.export.keytab test to use a binary mapping for smbclient
      s4:selftest: change the blackbox.kinit test to use a binary mapping for smbclient
      s4:selftest: change the blackbox.pkinit test to use a binary mapping for smbclient
      s4:selftest: change the blackbox.passwords test to use a binary mapping for smbclient
      s4:selftest: change the blackbox.samba_tool_demote test to use a binary mapping for smbclient
      build: rename build targets smbclient -> smbclient4 and smbclient3 -> smbclient
      wintest: introduce a variable to contain the (relative) path of smbclient
      wintest: use (renamed) smbclient4 tool as smbclient
      s4:dns-server: remove an extra blank line from handle_question()
      s3:smb.h: fix a comment typo
      s3:connections: add a CNUM_OFFSET for mapping between cnum and the bitmap index
      s3:smb: introduce a name TID_FIELD_INVALID for the invalid value for a cnum/tid
      s3:smb: change the value of TID_FIELD_INVALID from -1 to 0
      s3:include: change smb_request->tid to uint32_t
      s3:include: change connection_struct->cnum to uint32_t
      s3:include: change lock_context->tid to uint32_t
      s3:include: change lock_struct->fnum to uint64_t
      s3:smbd: remove ancient DMF_FIX from read_file().
      s3:smbd: remove unnecessary variable readret from read_file()
      s3:smbd: change set_file_oplock() to return NTSTATUS
      s3:smbd: explain parameters to filename_convert call in smbd_smb2_create_send()
      nsstest: fix use of a non-existent word (existant)
      lib/util: fix use of a non-existent word (existant) in a comment
      pidl/tests: fix use of a non-existent word (existant)
      ldb:tests: fix use of a non-existent word (existant)
      tdb:tests: fix use of a non-existent word (existant)
      lib/testtools: fix use of a non-existent word (existant)
      selftest: fix use of a non-existent word (existant)
      libsmbclient: fix use of a non-existent word (existant)
      s3:vfs:scannedonly: fix use of non-existent word (existant)
      s3:printing: fix use of a non-existent word (existant)
      s3:torture: fix use of non-existent word (existant)
      s4:heimdal: fix use of a non-existent word (existant)
      s4:registry:testsuite: fix use of non-existent word (existant)
      s4:provision: fix use of non-existent word (existant)
      s4:tests: fix use of a non-existent word (existant)
      s4:torture: fix use of non-existent word (existant)
      s4:gensec: fix a comment typo
      s4:kerberos: fix typos in kerberos-notes.txt
      s4:smbd: fix typos
      s3:smbd: refactor fsp_new() out of file_new()
      s3:files: reorder file_free() a bit
      s3:files: factor fsp_free() out of file_free()
      s3:include: define FNUM_FIELD_INVALID - the invalid value for the fnum
      s3:smbd: use FNUM_FIELD_INVALID instead of literal -1
      s3:smbd: change FNUM_FIELD_INVALID from -1 to 0
      s3:lib: remove part of a comment for fsp_str_dbg that does not apply any more.
      s3:lib: elaborate the comment for fsp_str_debug a bit.
      s3:lib: add a utility function "fsp_fnum_dbg" for logging the fnum of an fsp
      s3:locking: change brlock.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:locking: change locking.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:vfs_default: use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change aio.c to use fsp_fnum_dbg() for logging fsp->fnum.
      s3:smbd: change blocking.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change fake_file.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change files.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change nttrans.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change open.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change oplock.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change pipes.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change reply.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change smb2_break.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change smb2_close.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change smb2_find.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change smb2_flush.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change smb2_getinfo.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change smb2_ioctl.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change smb2_lock.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change smb2_notify.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change smb2_read.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change smb2_setinfo.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change smb2_write.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:smbd: change trans2.c to use fsp_fnum_dbg() for fsp->fnum logging.
      s3:vfs: change files_struct.fnum from int to uint64_t
      s3:idmap_tdb: fix miss in rename of dbwrap_trans_store_uint32() to dbwrap_trans_store_uint32_bystring()
      s3:waf-build: build the idmap backends tdb2, rid, and hash by default (shared)
      s3:autoconf-build: build the idmap backends tdb2, rid, and hash by default (shared)
      script: really sleep in "random-sleep.sh"
      s3:util: also compare the unique_id in procid_equal().
      s3:util: reformat procid_equal() to adhere to coding guidelines
      s3:smbstatus: use procid_equal() instead of equivalent cluster_id_equal()
      s3:util: remove (now) unused cluster_id_equal()
      s3:util: rename procid_equal() to serverid_equal()
      s3:move serverid_equal() to serverid.c
      Add current headers from ctdb master.
      autobuild: rename the "samba4" target to "samba"
      autobuild: rename the "samba4-libs" target to "samba-libs"
      autobuild: add a target "samba-ctdb" that builds samba (waf) with cluster support
      autobuild: add a target "samba3-ctdb" that builds samba3 (autoconf) with cluster support
      autobuild: run "samba-ctdb" by default to catch dbwrap_ctdb regressions
      autobuild: run "samba3-ctdb" by default
      s3:torture:smb2: pass smb2-session-reconnect test (add generosity in error case)
      s3:smbd: use smbXsrv_session_logoff_all() and smb1srv_tcon_disconnect_all() in exit_server_common()
      s3:smbd: remove now unused conn_close_all()
      s3:registry: make reg_delete_path() delete the path recursively.
      s3:net registry import: move precheck-and-import code to its own function
      s3:net registry import: reduce indentation and untangle assignment from check
      s3:net registry import: untangle nested function calls
      s3:net registry import: improve regdb_open/close layering
      s3:net registry import: fix the return code when transaction commit fails
      s3:net registry import: reduce indentation
      s3:net registry import: add an assert
      s3:net registry import: implement dry-run with "--test"
      s3:registry: use TALLOC_CTX * instead of const void * in reg_import_adapter()
      s3:registry: change reg_import.c according to coding guidelines.
      s3:dbwrap_ctdb: fix fetch/fetch_locked when samba is built against old ctdb
      s3:dbrwap_ctdb: remove commented out legacy code
      s3:dbwrap_ctdb: rename db_ctdb_own_record() -> db_ctdb_can_use_local_copy()
      s3:dbwrap_ctdb: expand the comment for the db_ctdb_can_use_local_copy() function
      s3:dbwrap_ctdb: fix a comment in db_ctdb_fetch()
      s3_dbrwap_ctdb: improve a comment in db_ctdb_can_use_local_record()
      WHATSNEW: prepare for 4.0 beta3
      WHATSNEW: Mention SMB 2.1 support (reauthentication/mulit-credit) and config default
      WHATSNEW: mention initial support for SMB3
      s3:smbd:smb2: change smbXsrv_session0 to smbXsrv_session in struct user_struct.
      s3:smbd:smb2: change smbXsrv_tcon0  to smbXsrv_tcon in smbd_smb2_request_check_tcon()
      s3:smbd: include smbXsrv.h before smbd/proto.h to have the smbXsrv_ structs available
      s3:smbd:smb2: fix prototype of make_connection_smb2() to use smbXsrv_tcon
      s3:smbd: Include smbXsrv.h before vfs.h (in smbd.h) so that the smbXsrv structures are available
      s3:smb: include "smbXsrv.h" before "vfs.h"
      s3:vfs: use smbXsrv_tcon instead of smbXsrv_tcon0 in connection_struct.
      s3:vfs: use smbXsrv_open instead of smbXsrv_open0 in files_struct
      s3:registry: untangle assignment from check in reg_enumvalue()
      s3:registry: untangle assignment from check in reg_enumkey()
      build: fix waf checks for seteuid on non-Linux platforms
      build: fix some indentation (tabs/vs spaces) in source3/wscript
      s3:passdb: remove commented out pdb_lookup_names code
      s3: rename sid_check_is_domain() to sid_check_is_our_sam()
      s3: rename sid_check_is_in_our_domain() to sid_check_is_in_our_sam()
      s4:registry: add a TALLOC_CTX argument to reg_open_remote()
      s4:registry:regdiff: add TALLOC_CTX * argument to open_backend()
      s4:registry:regdiff: use existing talloc context for the event context
      s3:ctdbd_conn: use unitX_t types consistently throughout the module
      s3:torture:delete: untangle function call from result check
      s3:torture:delete: untangle function call from result check
      s3:torture:delete: untangle function call from result check
      s3:torture:delete: untangle function call from result check
      s3:torture:delete: untangle function call from result check
      s3:torture:delete: untangle function call from result check
      s3:torture:delete: untangle function call from result check
      s3:torture:delete: untangle function call from result check
      s3:torture:delete: untangle function call from result check
      s3:torture:delete: untanlge function call from result check
      s3:torture:delete: untangle function call from result check
      s3:torture:delete: untangle function call from result check
      s3:torture:delete: untangle function call from result check
      s3:torture:delete: fix a message (counting the opens)
      s3:torture:delete: fix a message
      s3:torture:delete: fix a message
      s3:torture:delete: fix a message
      s3:torture:delete: fix a comment
      s3:torture:delete: really fail the test in a failure case
      s3:torture:delete: remove an else, reducing indentation
      s3:torture:delete: remove an else, reducing indentation
      s3:torture:delete: remove an else, reducing indentation
      s3:torture:delete: remove an else, reducing indentation
      s3:torture:delete: move the success message for a subtest to the correct place
      s3:torture:delete: add a comment
      s3:torture:delete: add a comment
      s3:torture:delete: add a comment
      s3:torture:delete: reduce indentation
      s3:torture:delete: simplify return code handling, fixing a couple of return codes in error cases
      s3:torture:delete: fix 11th test to work against windows
      s3:torture:delete: add a 12th subtest to the delete-on-close tests
      s4:torture:basic:delete: fix 4 vs 8 spc tab formatting in check_delete_on_close()
      s4:torture:basic: fix abundance of spaces in deltest6
      s4:torture:basic: fix a message typo in the delete17 test
      s4:torture:basic: check the return status of the last open in deltest16
      lib/util: add server_id_set_disconnected() and server_id_is_disconnected()
      s3: add a debug message for failed execv in sys_popen()
      s4:torture:basic: add more delete test - variants of deltest16 and deltest17
      s3:smbd: in sys_disk_free(), fix a debug message
      s3:smbd: in sys_disk_free(), fix line length and indentation of debug statement
      s3:smbd: in sys_disk_free(), improve a debug message
      s3:smbd: in sys_disk_free(), improve a debug message
      s3: in sys_popen(), fix a debug message
      s3: in sys_popen(), validate input before opening the pipe.
      s3: in sys_popen(), improve call to pipe and report error to debug
      s3: in sys_popen(), untangle assigment from check and add a debug message in failure case
      s3: in sys_popen(), untangle function call from result check
      s3: in sys_popen(), add a debug message for failed extract_args()
      s3: in sys_popen(), add a debug message for failed fork
      s3:locking: fix trailing space in brl_close_fnum()
      param: remove unused define FN_LOCAL_PARM_CHAR()
      s4:torture:smb2: add a test for alloc size behaviour under durable reconnect
      s4:torture:smb2: fix name of test file in the durable-open.alloc-size test
      s4:torture:smb2: fix cut'n'paste error in the durable-v2-open.reopen2 test
      s4:torture:smb2: in the durable-v2-reopen1 test, use a minimal request
      s4:torture:smb2: simplify the durable-v2-open.reopen1 test
      s4:torture:smb2: simplify the durable-v2.reopen2 test (using only one i/o struct)
      s4:torture:smb2: fix durable-v2-open.reopen2 to pass against windows
      s4:torture:smb2: change the durable-open.file-position test to use one connection only
      s4:torture:smb2: simplify durable-open.file-position test to only use one I/O and one handle
      s3:smbd: also close durable file handles in a tdis
      s3:vfs: add durable VFS operations
      s3:smbd: initial durable handle support: special treatment of durable handles in close
      s3:smbd: add basic support for durable handle request and reconnect
      s3:smbd: add basic support for durable handle v2 request and reconnect
      loadparm: remove remnants of removed option "share modes"
      s3: add an option "kernel share modes" to be able to switch off using kernel flocks
      s3:smbd: don't set kernel flock if "kernel share modes = no"
      s3:smbd: make fd_open() public
      s3: introduce a new share config option "durable handles" defaulting to "yes"
      s3:vfs_default: add basic support for durable handle request and reconnect
      release-scripts: adapt build-manpages-git to moved manpage directory
      release-scripts: adapt build-manpages-nogit to renamed manpage directory
      docs: have configure correctly report ability to build manpages
      docs: add desciption of new parameter "kernel share modes" to the smb.conf manpage
      docs: describe the new parameter "durable handles" in the smb.conf manpage
      WHATSNEW: list SMB3 as max protocol and durable handles as changes since 4.0 beta8
      docs:build: make target "manpages" .PHONY, so manpages do get built...
      lib/replace: remove duplicate check for inotify
      s4:torture:smb2: fix the durable-open.delete_on_close1 test
      selftest: smb2.durable-open.delete_on_close1 is not flapping any more
      selftest: pass smb2.durable-open.delete_on_close1
      s4:torture:smb2: add a durable-open.delete_on_close2 test
      selftest: we fail the smb2.durable-open.delete_on_close2 test
      s4:torture:smb2: remove an unused variable from the oplock-exclusive1 test
      s4:torture:smb2: remove an unused variable from the oplock-exclusive2 test
      s4:torture:smb2: fix error reporting in the oplock-brl1 test
      s4:torture:smb2: fix error reporting in the oplock-brl2 test
      s4:torture:smb2: fix error reporting in the oplock-brl3 test
      release-scripts: let build-manpages-git store generated docs under bin/docs/
      release-scripts: let build-manpages-nogit store generated docs under ./bin/docs
      release-scripts: run build-manpages-git with bash
      release-scripts: run build-manpages-nogit with bash
      s3:build: rewrite autogen.sh to be called from any directory
      build:waf dist: factor out function to add list of files to the tarball
      build:dist: extend samba_dist.DIST_FILES() to take optional parameter extend(=False)
      build:dist: for snapshot builds, call DIST_DIRS with extend=True
      build:dist: make use of file / distfile more obvious in handling of DIST_FILES in "make dist"
      build:dist: extend meaning of DIST_FILES to also recurse into directories
      build:dist: call build-manpages-nogit for make dist and package generated files
      build:dist: call source3/autogen.sh and packaged generated files
      WHATSNEW: prepare release notes for 4.0.0rc1
      VERSION: Release Samba 4.0.0rc1
      VERSION: Bump version up to 4.1.0pre1
      s4:torture: fix error reporting in the raw.oplock-brl3 test
      source3/script: fix installman.sh after the last build-manpages-nogit change
      libcli: add a define for the APP_INSTANCE_ID smb2 create context
      s4:libcli: add a app_instance_id member to the smb2_create input struct
      s4:libci: add a SMB2_CREATE_APP_INSTANCE_ID blob to the request if the in.app_instance_id is present
      s4:torture:smb2: add a new test durable-v2-open.app-instance
      selftest: we currently fail smb2.durable-v2-open.app-instance
      s3:winbind:idmap_tdb_common: improve readability of assignment by adding an "if"
      s3:winbind:idmap_tdb_common: improve readability of assignment by adding an "if"
      s4:torture:smb2: fix compound.related3 test to work against windows
      s4:torture:smb2: fix the compound.invalid3 test to work against windows
      s3:smbd:smb2: add check for session_status for compound requests
      s3:smbd:smb2: simplify smbd_smb2_request_validate() and smbd_smb2_request_dispatch()
      s3:smbd: remove struct member smbd_smb2_request.cancelled - it was only written
      s4:torture:smb2: don't skip the compound.interim1 test for non win7/win2k8
      s4:torture:smb2: don't skip the compound.interim2 test for non win7/win2k8
      s4:torture:smb2:compound: remove two unused macros
      selftest: we fail samba3.smb2.compound.interim2
      s3:smbd:smb2: initialize variable in vfs_default_durable_reconnect()
      selftest: skip the samba4.smb2.compound testsuite
      s4:torture:smb2: add a durable-open.read-only test
      s3:smbd: also log the "offline" flag when debugging the dos-mode
      s3:smbd: fix brace placements in validate_my_share_entries() for readability
      s3: fix comment header description for smbd_shim
      s3:smbd: move initialization of the smbd_shim from smbd_init_globals() to main()
      s3:smbd: remove duplicate prototypes for sys_utmp_claim() an sys_utmp_yield()
      s3:auth: remove duplicate propotypes for smb_pam_claim_session and smb_pam_close_session
      s3:smbd/durable: remove an extra blank line from vfs_default_durable_reconnect()
      s3:open_files.idl: add stat-info to vfs_default_durable_cookie.
      s3:smbd:durable: store stat info for disconnected durables and check at reconnect.
      build(waf): Fix the --with-cluster build
      s3:smbd:durable: factor stat checks out into vfs_default_durable_reconnect_check_stat()
      s3:smbd:durable: remove a TODO comment about write time updates
      lib/param: fix function name (lpcfg_file_list_changed) in a debug message
      lib/param: fix function name (set_variable) in debug statements
      lib/param: fix line length of DEBUG statments touched in previous commit in set_variable()
      s3:winbindd:cache: fix offline logons with cached credentials (bug #9321)
      s3:smbd:smb2: fix a comment typo in the crediting code.
      build(waf): fix a tab indentation to spaces
      build(waf): fix the cluster(ctdb) build without system talloc installed
      s3:param: make init_locals() static.
      configure(waf):  Fail "configure --with-ads" if ads support is not available
      libnet: Fix a typo in dbsync error message.
      ldb: fix a typo in the comment for ldb_req_is_untrusted()
      s4:tests/samba_tool/gpo.py: fix accidential line break
      s3:winbindd:util: add a comment explaining the function parse_sidlist()
      s3:winbindd: simplify winbindd_sids_to_xids_recv() a bit.
      s3:winbindd: factor lsa_SidType_to_id_type() out of winbindd_sids_to_xids_lookupsids_done()
      s3:winbindd: add explaining comment winbindd_sids_to_xids_send()
      s3:winbindd: convert some spaces to tabs in winbindd_sids_to_xids_send()
      s3:winbindd: factor winbindd_sids_to_xids into external and internal part
      s3:winbindd: use wb_sids2xids instead of wb_sid2uid in winbindd_sid_to_uid
      s3:winbindd: use wb_sids2xids instead of wb_sid2gid in winbindd_sid_to_gid
      s3:winbindd: add an explanatory comment to _wbint_Sids2UnixIDs()
      s3:winbindd: add an explanatory comment to _wbint_Sids2UnixIDs()
      s3:winbindd: use struct unixid instead of uint64 in Sids2Xids parent<->child
      selftest:Samba3: provision the domain adminstrators group in the s3 environments
      s3:winbindd: rename idmap_init_passdb_domain() -> idmap_passdb_domain()
      s3:winbindd: add idmap_find_domain_with_sid()
      s3:winbindd: also use idmap_passdb for own sam and builtin in wbint_Sids2UnixIDs()
      s3:winbindd: make idmap_find_domain() static.
      selftest:Samba3: call wait_for_start() from check_or_start()
      selftest:Samba3: add nmbd, winbindd smbd arguments to wait_for_start()
      selftest:Samba3: add "wbinfo -p" test to wait_for_start()
      selftest:Samba3: provision the BUILTIN\Users group if the environment runs winbindd
      s3:winbindd: change wb_fill_pwent to use wb_sids2xids instead of wb_sid2[ug]id
      s3:winbindd: change wb_getgrsid to use wb_sids2xids instead of wb_sid2gid
      s3:winbindd: change winbindd_getgroups to use wb_sids2xids instead of wb_sid2gid
      s3:winbindd: remove now unused wb_sid2uid and wb_sid2gid modules
      s3:winbindd: remove wbint_Sid2Uid() from the wbint.idl
      s3:winbindd: remove wbint_Sid2Gid from the wbint.idl
      s3:winbindd: remove unused server implementation of wbint_Sid2Uid()
      s3:winbindd: remove unused server implementation of wbint_Sid2Gid()
      s3:winbindd: remove unused idmap_sid_to_uid()
      s3:winbindd: remove unused idmap_sid_to_gid()
      s3:idmap_rid: force mapping type to ID_TYPE_BOTH for sid->unixid mapping
      s3:idmap_autorid: force mapping type to ID_TYPE_BOTH for sid->unixid mapping
      s3:test: fix intialization of WBINFO in test_wbinfo_sids2xids.sh
      s3:test:wbinfo_sids2xids: test the results with singular calls with filled and with empty cache
      s3:winbindd: remove unused function idmap_backends_sid_to_unixid()
      s3:lib: add utility function sid_check_is_for_passdb()
      build the new sid_check_is_for_passdb() function into passdb
      s3:winbindd: use the new sid_check_is_for_passdb() in idmap_find_domain_with_sid()
      s3:passdb: don't bail out in pdb_default_sid_to_id() if sid is not in our sam
      s3:passdb: factor pdb_sid_to_id_unix_users_and_groups() out of pdb_default_sid_to_id()
      s3:passdb: add sid_check_object_is_for_passdb()
      s3:passdb:pdb_ldap: pre-validate sid with sid_check_object_is_for_passdb()
      s3:passdb:pdb_ldap: treat "Unix User" and "Unix Group" in sid_to_id()
      s3:passdb: don't look into group mappings in legacy_sid_to_unixid()
      s3:selftest: extend sids2xids test script to cope with "ID_TYPE_BOTH mappings
      s3:passdb: fix building pdb_ldap as shared module
      s3:smbd:vfs_acl: fix a PANIC when setting an ACL fails with ACCESS_DENIED
      s3:smbd: don't apply create/directory mask and modes in apply_default_perms()
      s3:smbd: fix a cut and paste error in a debug message
      s3:auth: fix header comment for user_sid_in_group_sid()
      s3:auth: fix create_token_from_sid() to not fail in the winbindd case
      pidl: change strange spelling __donnot_use_enum_* to __do_not_use_enum_*
      s3:auth: fix function header comment for user_sid_in_group_sid()
      s4:torture:rpc:samr: add debugging of result of (many) dcerpc_samr_* calls
      s4:dsdb/password_hash: do the min password age checks first
      s4:rpc_server/samr: do WRONG_PASSWORD checks after the complexity checks
      s4:torture/samr: allow STATUS_PASSWORD_RESTRICTIONS from ChangePasswordUser
      s4:torture:rpc:samr: fix password age calculation in test_ChangePasswordUser3()
      selftest: skip the samba4.rpc.samr.passwords test in ncacn_np(dc) and s4member environments
      s3:auth: fix dereference level in talloc checks in  create_token_from_sid()
      docs: add an entity stdarg.option for the "--option" command line parameter
      docs: use the stdarg.option entity in the popt.common.samba entity
      docs: fix the stdarg.configfile entity to print a "=" sign after the long option
      docs: add popt.common.samba.server and popt.common.samba.client entities
      docs: use the entities popt.common.samba.server and stdarg.help in samba(8)
      docs: use the popt.common.samba.client entity in samba-tool(8)
      docs: document the command line options in dbwrap_tool(1)
      dbwrap: add dbwrap_is_persistent()
      s3:dbwrap_tool: add --persistent switch and mode for non-persistent DBs
      docs: document the "--persistent" option in dbwrap_tool(1)
      build(waf): fix the abi_match for the pdb library
      s3:winbindd: rename winbindd_getgrnam_lookupsid_done to winbindd_getgrnam_lookupname_done
      s3:winbindd: fix a cut'n'paste comment typo in wb_fill_pwent
      s3:winbindd: factor add_wbint_Principal_to_dict() out of wb_group_members_done()
      s3:winbindd: create group structs for gids that are coming from a user sid id-mapped with ID_TYPE_BOTH
      s3:winbindd:getgrnam: also produce a group struct for a user with ID_TYPE_BOTH
      s3:winbindd: check the correct variable for talloc success in rpc_query_user()
      s3:winbindd: change getpwsid() to return a passwd struct for a group sid id-mapped with ID_TYPE_BOTH
      s3:dbwrap_ctdb: ZERO_STRUCT(rec) just to be sure in traverse_read_callback()
      s3:dbrwap_ctdb: ZERO_STRUCT(rec) just to be sure in traverse_persistent_callback_read()
      s3:param: remove an old comment (that is not up-to date any more)
      s3:param: add a utility function lp_idmap_range() to get the configured range for a given domain.
      s3:param: add utility function lp_idmap_default_range()
      s3:auth: use new lp_idmap_default_range() instead of lp_idmap_gid() in create_token_from_sid()
      s3:param: remove unused functions lp_idmap_uid() and lp_idmap_gid()
      s3:net idmap: remove call to lp_idmap_backend() - this is useless.
      s3:param: remove unused function lp_idmap_backend()
      s3:param: add a comment
      s3:param: introduce new lp_idmap_backend() that takes the domain
      s3:param: add new lp_idmap_default_backend()
      s3:net idmap: use lp_idmap_default_backend() now that we have it.
      s3:net: introduce a talloc stackframe for net idmap delete
      s3:net: reduce indentation in net idmap delete for symmetry and consistency
      s3:idmap_autorid: fix freeing of non-talloced memory (uninitialized pointer) (bug #9653)
      s4:torture: add a durable-open-disconnect test (suite)
      s4:torture:smb2:durable: make test functions static
      s4:torture:smb2: fix segfault on error condition in durable-open.reopen2 test
      s4:torture:smb2: fix segfault on error condition in the durable-open.reopen2a test
      s4:torture:smb2: fix segfault on error condition in the durable-open.reopen3 test
      s4:torture:smb2: fix segfault on error condition in the durable-open.reopen4 test
      s4:torture:smb2: fix segfault on error condition in the durable-open.delete_on_close1 test
      s4:torture:smb2: fix segfault on error condition in the durable-open.delete_on_close2 test
      s3:smbd: add debugging to close code (regarding disconnect of a durable)
      s3:smbd:smb2: fix segfault (access after free) in durable disconnect code
      packaging(RHEL-CTDB): package the fake-acls vfs module
      packaging(RHEL-CTDB): remove unpackaged manpages (samba and samba-tool)
      gencache: unify a DEBUG message in gencache_del()
      gencache: unify a DEBUG message in gencache_iterate_blobs_fn()
      gencache: unify a DEBUG message in gencache_iterate_fn()
      gencache: unify a DEBUG message in gencache_set_data_blob()
      lib/util/time: strip a potential trailing newline in the asctime case.
      gencache: fix an extra newline in a DEBUG message in gencache_iterate_blobs_fn()
      gencache: fix an extra newline in a DEBUG message in gencache_iterate_fn()
      gencache: fix an extra newline in a DEBUG message in gencache_set_data_blob()
      s3:smbd: preserve file type mode bits in file_set_dosmode()
      s4:winbindd: do not drop the workgroup name in the getgrnam and getgrent calls.
      s4:winbindd: do not drop the workgroup name in the getgrgid call
      s3:smbd: fix missing space in debug message in initial_break_processing()
      s4:winbindd: fix spacing and line length in cmd_getpwnam_recv_domain()
      tevent: fix a comment typo in tevent_epoll.c
      tevent: add trace points BEFORE_LOOP_ONCE and AFTER_LOOP_ONCE
      s3:idmap: fix a debug message and lower its level
      s3:smbd:smb2: fix setting of scavenge timeout when reconnecting durable handles
      s3:locking:brlock: improve the comment for the brl self cleaning code
      s3:locking:brlock: explain the lockdb_clean semantic better in brl_reconnect_disconnected()
      s4:torture:smb2:durable_v2: remove an unused variable
      s3:smbd:smb2:scavenger: fix format error for debugging open_persistent_id in scavenger_timer()
      regedit: load the configuration after processing the command line
      s3:idmap:autorid: rename domainnum to rangenum
      s3:idmap:autorid: rename autorid_domain_config --> autorid_range_config and instances to "range"
      s3:idmap:autorid: rename autorid_range_config.sid to domsid, along with instances
      s3:idmap:autorid: rename range.multiplier to domain_range_index
      s3:idmap:autorid: make calculation in idmap_autorid_sid_to_id much more obvious
      s3:idmap:autorid: calculate the range's low_id in idmap_autorid_get_domainrange()
      s3:idmap:autorid: simplify the id->sid calculation
      s3:idmap:autorid: add a comment block explaining the calculations
      docs: update the description of the formulas in the idmap_autorid manpage
      build: simplify ncurses checks: --with-regedit does not take a path list
      build: fix --with-regedit to properly honour the yes/no/auto scheme
      build: default --with-regedit to "auto" instead of "yes"
      s4:idmap: break account_type check lines for readability in idmap_sid_to_xid()
      libsmbconf: fix documentation of transaction calls.
      net: use smbconf_create_set_share() in "net conf import"
      autobuild: remove remnants of removed samba3 targets
      build: Add missing new line to replaced python shebang line. (Fix bug #9909)
      s3:smbd: remove old comment about scavenger timer from vfs_default_durable_reconnect()
      s3:smbd: remove code duplication in smb2_create_send()
      s3:smbd: explain parameters in call to SMB_VFS_DURABLE_RECONNECT()
      s3:winbind: fail ads_cached_connection_connect() if realm == NULL
      client: add missing newlines to error messages for invalid iosize parameter.
      loadparm: add new parameter "acl allow execute always"
      s3:smbd: ease file server upgrades from 3.6 and earlier with "acl allow execute aways"
      docs: document "acl allow execute always"

Michael Karcher (1):
      Fix bug #7269 - Job management commands don't work for CUPS queues.

Michael Ströder (1):
      s4: Exceptions in "provision.py"

Michael Warfield (9):
      Two changes in this ball...
      Removed a redundant include for "includes.h"
      Fixed timing window created by daemonize function.  Smbmount was going daemon
      Earlier fix for smbmount timing window was the wrong patch.
      Ok...  Yet another round of fixes for smbmount and autofs.
      Minor change to bring smbmount in the main branch in line with some bzero
      Fixed a glibc glitch in smbumount.c and reenabled some debugging
      Added caching of user password if it was entered via getpass.  We were already
      Got to the bottom of another weird one...

Michael Wood (10):
      s4 upgradeprovision: Try to support older Pythons.
      Make upgrade procedure more explicit.
      s4: upgradeprovision: Improve wording, punctuation
      s4: samba_backup: Fix typos.
      s4/upgradeprovision: Typo and better word.
      s4/upgradeprovision: Fix help for --debugguess.
      Log short_princ instead of uninitialised filter.
      WHATSNEW: Fix 4.0 default for allow dns updates.
      docs: Avoid mentioning a possibly misleading option.
      param_table: Remove misleading allow dns updates options.

Michele Baldessari (4):
      Free protect_ids in secret_store_domain_sid() as the caller of fetch_secrets() must free the result in order to not leak memory.
      Free protect_ids in secret_store_domain_guid() as the caller of fetch_secrets() must free the result in order to not leak memory.
      Call TALLOC_FREE() before we return otherwise we will never free sam_account
      Set trans to a value that is not LDB_SUCCESS (all LDB_ constants are

Miguel Suarez (1):
      Fix bug #6085 - In vfs_default.c change utime( ) call.

Mike Sweet (2):
      smbspool: fix Kerberos support for CUPS 1.3.
      smbspool: Fix CUPS authentication protocol support.

Milan Crha (1):
      s4:heimdal - fix valgrind issue on Fedora 14

Motonobu Takahashi (16):
      added SWAT i18n support files for Japanese and Turkish
      Added SWAT i18n feature:
      Update configure from configure.in
      added files and directories to support gettext() feature
      fixed a typo
      fixed a typo in installman.sh
      now --with-i18n-swat works to install some international files
      sorry to forget re-run autoconf again...
      not to creat gmo files from po files during making
      fixed not to install in *BSD, but perhaps on Solaris, cannot install
      fixed in *BSD
      remove zh_CN.msg because there is no maintainer.
      added Italian message file from Simo Source
      added de.msg from Andreas Moroder
      added $(LDFLAGS) to link smbmount/smbmnt/smbumount to make Red Hat Linux
      added fr.msg from Fanch

Nadezhda Ivanova (174):
      Modified SamDB to accept options like Ldb.
      A script to compare the differences in nTSecurityDescriptor between 2 hosts
      Added "admin_session" method.
      Owner and group defaulting.
      security:idl Generated files
      Fixed a difference in domain sid type when SID is provided by user.
      Disable descriptor module unless enabled in smb.conf
      Initial implementation of security descriptor creation in DS
      Merge branch 'master' of git://git.samba.org/samba
      Merge branch 'master' of git://git.samba.org/samba
      Initial Implementation of the DS objects access checks.
      Merge branch 'master' of git://git.samba.org/samba
      s4:dsdb Fix of double addition of SD-s
      Fixed a dereferenced null pointer.
      Merge branch 'master' of git://git.samba.org/samba
      Removed the default DACL from token, as we will not be using it.
      Added some dn to the info in the log messages.
      Fixed a bug in object specific access checks.
      Fixed some missing flags and bugs in the security creation.
      Added security descriptor for the domain NC to provisioning.
      Version 1.0 of the directory service acls module.
      Fixes for some tests not eorking against Windows or Samba.
      Fixed some major bugs in inheritance and access checks.
      Fixed incorrect SID for RAS Servers.
      Added control copying for message types other than ldb_search.
      Some changes to allow processing of ldap controls on modify requests.
      Implementation of LDAP_SERVER_SD_FLAGS_OID on modify requests.
      Cosmetic patch - fixed case of attribute name.
      Implemented LDAP_SERVER_SD_FLAGS_OID on search requests.
      Fixed incorrect indentation.
      Implementation of sDRightsEffective, allowedAttributesEffective and allowedChildClassesEffective.
      Fixed a problem with duplicate values of allowedAttributesEffective.
      Removed ldb_modify_ctrl from ldb, implemented as a static in ldap_backend.
      Fixed incorrect checking of PRINCIPAL_SELF permissions.
      Added oid for AS_SYSTEM control, used to bypass access checks for system operations.
      Added freeing a successful req so it doesnt croud the ldb context
      Adapted acl module to skip checks if as_system control is provided.
      Adapted acl module to skip checks if as_system control is provided.
      Merge branch 'master' of git://git.samba.org/samba
      Merge branch 'master' of git://git.samba.org/samba
      Merge branch 'master' of git://git.samba.org/samba
      Fixed a problem with incorrect default SD owner/group.
      Implemented net fsmo command for transferring fsmo roles
      Fixed a bug caused by a typo. Infrastructure role didn't work.
      Refactored ACL python tests
      Added a check for permissions to modify the RDN attribute on rename.
      Fixed a bug in acl tests - python error when we create user/group/ou with a descriptor.
      A helper function to get the Infrastructure DN.
      Moved access_check_on_dn from acl module as an utility.
      Fixed ACL module to use dsdb_module_* API.
      Split the dsdb_access_check_on_dn.
      Added a net acl ds command for modification of ACLs on directory objects
      Fixed a problem with provision missing the default_dir/etc directory.
      A bit of refactoring in the SD creation code.
      s4:Added a test to make sure we ignore ACEs with ID flag set.
      s4:Replaced dsdb_get_dom_sid_from_ldb_message() with samdb_result_dom_sid()
      s4:Added a test for correct CO expansion in SD creation.
      Removed more excess looping and fixed problem with incorrect IO flag handling.
      Added a function to check if an attribute can belong to a filtered replica.
      Added a couple of systemFlags, needed for determining filtered attributes.
      Replaced DS_FLAG_ATTR_IS_CRITICAL with SCHEMA_FLAG_ATTR_IS_CRITICAL.
      Added guids for the validated writes.
      Adjusted ACL tests to use encripted connection.
      s4:Descriptor tests clean-up.
      Implementation of self membership validated right.
      Fixed incorrect use of cn instead of lDAPDisplayName
      Tests for user-change-password and force-password-change access rights
      s4-dsdb: Implementation of User-Change-Password and User-Force-Password-Change
      Changed passwords.py to use the correct account as acl checks now pass.
      Added a test to prove by default users can change each other's pass if the old is known
      s4: Reorganized dsHeuristics reset so the code can be reused
      Fixed system_session_anon to actually make an anonymous session
      s4: Added acl search tests for anonymous connection.
      s4-dsdb: Removed kludge_acl as it is no longer necessary
      s4-tests: Added tests for acl checks on search requests
      Added values for the flags in dSHeuristics
      s4-dsdb: Added utility functions for retrieving dSHeuristics from the module stack
      s4-dsdb: Removed an unnecessary space in dsdb_module_find_dsheuristics()
      s4-dsdb: Fixed a compiler warning.
      s4-drs: Refactored drepl_service and send_ridalloc_request so that the structures can be used for other extended ops
      s4-drs: Implementation of GetNCChanges extended op 6 - fsmo role transfer
      s4-irpc: Added internal rpc call DREPL_TAKEFSMOROLE
      s4-rpc: Added handling of fsmo role transfer to GetNCChanges
      s4-ldap: Added support for FSMO role transfer via LDAP by modify on rootDSE
      s4-ldap: Fixed a problem with NC's having a parentGUID attribute
      s4-dsdb: Fixed a call to the wrong ops function in dsdb_module_search_dn.
      s4-ldap: Added a control to apply the access checks on read via LDAP
      s4-dsdb: Moved some helper functions to a separate file
      s4-dsdb: A helper to determine if an attribute is part of the search filter
      s4-dsdb: Added a function to check access on a particular object by its guid
      s4-tests: Removed search tests with anonymous credentials as they fail againts Windows
      s4-tests: Added tests for search checks on attributes
      s4-ldbmodules: Added new module aclread to handle access checks on LDAP search
      s4-ldb: Added ldb_request_replace_control
      s4-dsdb: adapted check_access_on_dn for use in drs.
      s4-drs: Added drs_security_access_check function
      s4-drs: Added check for drs-manage-topology to updateRefs.
      s4-rodc: RODC should not accept requests for role transfer
      s4-ldb: Changes the aclread module to use LDB_HANDLE_FLAG_UNTRUSTED to determine the source of the request
      s4-ldb: Added the correct extended check for read access to nTSecurityDescriptor
      s4-dsdb: Implemented value restrictions for the dSHeuristics attribute
      s4-tests: Tests for the dSHeuristics attribute value restrictions
      s4-tests: Acl tests should use the existing samdb domain_dn method instead of defining a new one
      s4-tests: Descriptor tests should use the existing samdb domain_dn method instead of defining a new one
      s4-tests: Changed acl tests to use existing method in samdb for adding users to a group.
      s4-tests: Changed descriptor tests to use existing method in samdb for adding users to a group.
      s4-tests: Modified acl tests to use pyldb api to retrieve configuration dn.
      s4-tests: Modified descriptor tests to use pyldb api to retrieve configuration and schema dn.
      s4-dsdb: Added a helper to python SamDB for retrieving and setting minPwdAge.
      s4-tests: Adapted acl.py to use set_minPwdAge from SamDB.
      s4-tests: Adapted passwords.py to use set_minPwdAge from SamDB.
      s4-dsdb: Added python helpers for getting and seting dSHeuristics to SamDB
      s4-tests: Acl tests now use the get_dsheuristics and set_dsheuristics from SamDB.
      s4-tests: Password tests now use the get_dsheuristics and set_dsheuristics from SamDB.
      s4-tests: Ldap tests now use the get_dsheuristics and set_dsheuristics from SamDB.
      s4-dsdb: Added a python method to SamDB for creating organizationalUnits
      s4-tests: Modified acl.py to use SamDB.create_ou()
      s4-tests: Modified sec_descriptor.py to use SamDB.create_ou()
      s4-dsdb: Extended samdb.newuser to accept security descriptor for the object and optionally skip password reset
      s4-tests: Modified acl.py to use samdb.newuser instead of custom methods.
      s4-tests: Modified sec_descriptor.py to use samdb.newuser instead of custom methods.
      s4-dsdb: Changed filter to find the account of a user by samAccountName
      s4-tests: Modified acl.py to use samdb.newgroup instead of custom methods.
      s4-dsdb: Extended samdb.newgroup to set the group's security descriptor.
      s4-tests: Modified sec_descriptor to use samdb.newgroup instead of locally defined method.
      s4-tests: Added a common definition of delete_force.
      s4-tests: Modified acly.py to use common delete_force instead of defining its own.
      s4-tests: Modified bind.py to use samba.tests.delete_force
      s4-tests: Modified deletetest.py to use samba.tests.delete_force
      s4-tests: Modified ldap.py to use samba.tests.delete_force
      s4-tests: Modified ldap_schema.py to use samba.tests.delete_force
      s4-tests: delete_force was unused, removed it.
      s4-tests: Modified passwords.py to use samba.tests.delete_force
      s4-tests: Modified sam.py to use samba.tests.delete_force
      s4-tests: Modified sec_descriptor.py to use samba.tests.delete_force
      s4-tests: Modified speedtest.py to use samba.tests.delete_force
      s4-dsdb: Fixed wrong assignment of name attribute to description atribute in create_ou.
      s4-dsdb: Switched to using a dictionary in create_ou for consistency.
      s4-tests: Modified create_ou to only accept security.descriptor type for sd to avoid confusion
      s4-tests: Made acl tests to reconnect if dSHeuristics is being manipulated
      s4-acl: Moved aclread module below descriptor and acl.
      s4-acl: Some optimisation of the aclread module
      s4-acl: Remove unused variables from aclread module.
      s4-acl: Added a flag to mark an element as failing an access check.
      s4-acl: Changed the mechanism of attribute removal to speed it up.
      s4-acl: Fixed incorrect value of LDB_FLAG_INTERNAL_INACCESSIBLE_ATTRIBUTE
      s4-acl: Replaced talloc_reference with talloc_steal, as aclread is the only one using this result message.
      s4-tests: Moved some commonly redefined security descriptor methods to a utils class
      s4-tests: Modified acl.py to use the sd_utils helpers.
      s4-tests: Modified sec_descriptor.py to use the sd_utils helpers.
      s4-dsdb: Fixed incorrect LDAP return code when anonymous login is used.
      s4-tests: Added tests for LDAP add/delete/modify using anonymous login.
      s4-tests: Added a speedtest for LDAP search operations with different accounts.
      s4-dsdb: Added a helper function to get the default dns domain as string.
      s4-acl: Implementation of Validated-SPN validated write
      s4-tests: Tests for Validated-SPN implementation.
      security: Fixed bugs in expansion of generic information ACEs
      s4-tests: Tests for expansion of ACEs containing generic information.
      security: Fixed incorrect indentation in create_descriptor.c
      s4-tools: Added a --sort-aces option to ldapcmp
      s4-tools: Fixed a bug in ldapcmp - DACL was not retrieved correctly if the object had no SACL.
      s4-provision: Fixed owner/group for hard-coded Sites descriptor.
      s4-security: Fixed incorrect inheritance of IO flagged ACES
      s4-tests: Added a test for correct inheritance of IO flagged ACEs.
      s4-acl: Fixed returning uninitialized ldap error in case of some critical errors.
      security: Fixed some handling of ACEs with INHERITED flag provided by the user
      s4-tests: Some tests that prove behavior for INHERITED user-provided ACEs is different if the P flag is set.
      s4-tools: Added --sddl option, which allows the user to add an ACE to an object's security descriptor in SDDL format
      s4-descriptor: Replaced the synchronous descriptor_change with the synchronous descriptor_add.
      s4-descriptor: Replaced the async descriptor_change with synchronous descriptor_modify.
      s4-descriptor: Removed unnecessary descriptor_change function and unused callbacks.
      s4-descriptor: Fixed some compiler warnings.
      s4-descriptor: Fixed some missing curly braces.
      s4-descriptor: Fixed a typo in a comment and clarified it a bit.

Nathaniel McCallum (1):
      Two patches which fix issues on cross compiling/building

Nils Goroll (1):
      [s3]zfsacl: Prevent calling POSIX ACL vfs methods on zfs share.

Noel Power (1):
      CVE-2012-6150: Fail authentication for single group name which cannot be converted to sid

OPC oota (1):
      s3:docs: Fix a typo

Olaf Flebbe (9):
      make smbcontrol smbd ping work proper checking for arguments handle short pid_t correctly
      allow for outstanding_aio_calls to be decremented
      s3/loadparm: Fix severe HPUX compiler issue.
      correctly handle aio_error() and errno
      work around AIX6.1 name space pollution rename mod_name to module_name
      configure.in prevent generation of file "shlib.so"
      check if LD_AS_NEEDED breaks linking with libreadline fixes #7209
      Wrong assertion/comparison: Compare value not pointer
      s3: Correct documentation of case sensitive

Ole Hansen (1):
      Fix bug #6359 - smbclient -L does not list workgroup for hosts with both IPv4 and IPv6 addresses

Oliver Liebel (11):
      Generate Multi-Master Replication configuration for OpenLDAP
      Remove <tab> in OpenLDAP MMR config
      Use DIGEST-MD5 authentication for OpenLDAP replication
      Added mmr and olc to the OpenLDAP backend provisioning-scripts
      Updates to the recent cn=config support for the OpenLDAP backend
      WHATSNEW updates
      s4:setup Remove extra newlines that break OpenLDAP backend
      s4:provision Rework and further automate setup of OpenLDAP backend
      Fixed MMR-URL-Split and changed RID-Range OpenLDAP ITS6394
      Fixed OL-MMR make test
      Fixed --ol-mmr-url helpline

Olivier Sessink (4):
      s3: Add the "scannedonly" vfs virus scanner interface module
      Part 4 of bug #7028 - include scannedonly VFS module
      s3-docs: Add man page for vfs_scannedonly.
      scannedonly module: improve sleep behavior when reading a directory with multiple non-scanned files

Olly Betts (1):
      Fix "net usersidlist" not to skip every other user

Partha Sarathi (1):
      Fix bug #9932 - Currently the maximum number of aces in an SD is limited to 1000, but Microsoft supports around 1800.

Paul B. Henson (1):
      Fix bug #7909 - map SYNCHRONIZE acl permission statically in zfs_acl vfs module.

Paul Blackman (1):
      This change ensures that only the processes/locked files that

Paul Green (29):
      Rebalance parentheses in cliquota.c when LARGE_SMB_OFF_T is false.
      Move build farm template files to their own subdirectory so that their
      Backport changes from head to shorten the filenames of the test cases.
      Missed two references to a renamed file.
      Missed two references to a renamed file.
      Refactor existing sock_exec() and socketpair_tcp() functions into their own
      Refactor existing sock_exec() and socketpair_tcp() functions into their own
      Be consistent about using capital letters in the function names. (The only
      r93: Update VOS _POSIX_C_SOURCE macro to 200112L.
      r144: Move first use of AC_CHECK_HEADERS so it is always executed. Tidy up indendation.
      r192: Fix configure.in to only use $BLDSHARED to select whether to build static or shared libraries.
      r1890: Cut down on debug messages from is_in_path.  paulg
      r2231: Fix iconv.c to use the Samba-supplied uint8 type not the uint8_t type, which does not exist on all platforms.
      r11375: Update to the latest config.guess and config.sub files.
      r11653: Declare the correct return value for the static initialization functions.
      r11657: Tiny improvement to debug error message in dir_check_ftype.
      r15196: Update a comment that I found confusing (I confuse easily).
      r15218: Update Makefile.in to avoid building libmsrpc.so on systems that do not support shared libraries.
      r15283: Oh yeah. The build farm doesn't do much with head.  OK, here is the patch to SAMBA_3_0 to declare prototypes for the initialization functions.  These are the same changes I just made to head.  --paulg
      r15285: Fix the build.
      r15368: Remove some dead code. -- paulg
      r15644: Now that we are referencing uint32_t and other data types
      r16103: Properly rebuild timelimit on systems with executable extensions.
      r19992: Add support to the tdb Makefile.in for executable extensions and for
      r202: Fix aclocal.m4 to only use $BLDSHARED to select whether to build static or shared libraries.
      r1988: Let Samba use all POSIX features available on VOS.
      r15382: Use grp.h in this block; it has been cleaned out of the other headers that formerly included it for us.
      r19952: Fix socketpair() test case to write to fd(1) and read from fd(0) because
      r19989: Add support to the tdb Makefile.in for executable extensions and for

Pavel Březina (14):
      Talloc doc: talloc_strdup_append()
      Talloc doc: talloc_strdup_append_buffer()
      Talloc doc: talloc_strndup_append()
      Talloc doc: talloc_strndup_append_buffer()
      Talloc doc: talloc_asprintf_append_buffer()
      Talloc doc: talloc_set_abort_fn()
      Talloc doc: talloc_set_log_fn()
      Talloc doc: talloc_set_log_stderr()
      Talloc doc: TALLOC_FREE_FILL
      Talloc doc: talloc_pool() when not enough memory in the pool
      Talloc doc: when s == NULL in _append functions
      Talloc doc: talloc_strdup_append does not return duplicated string
      doc: Add talloc tutorial.
      doc: Remove latex to doxygen conversion leftovers in talloc.

Pavel Shilovsky (5):
      Fix bug #7928 - Samba problems with kernel oplocks option set to "no"
      smbtorture4 test for bug #7928 - Samba problems with kernel oplocks option set to "no"
      Ensure we send the direct levelII oplock break to the correct fid.
      s4: Don't grant level II oplock to a file with byte-range locks.
      Fix bug #9571 - Unlink after open causes smbd to panic.

Peng Haitao (3):
      When '--policies-reset' is success, the exit code should be 0.
      When message-type is drvupgrade, MSG_DEBUG should be replaced with MSG_PRINTER_DRVUPGRADE.
      smbcquotas.c: fix a bug of -t

Peter Rosin (1):
      Output %p as unsigned in snprintf replacement.

Peter Volkov (1):
      s3: make linking of cifs.upcall --as-needed safe

Peter Watkins (1):
      s3: Fix initgroups return check

Philip M. White (1):
      s4:waf - fix the build on Gentoo platforms

Pierre Carrier (3):
      winbindd: useless function
      winbindd: Add the client status in the clients list output
      Allows changing the maximum number of simultaneous clients in winbindd through an smb.conf option.

Pierre Lejeune (1):
      pyntdb: Fix init function for ntdb python module.

Praveen Arimbrathodiyil (1):
      Fix missing backtick.

Qiao Yang (1):
      Fix a memleak

Rafal Szczesniak (452):
      A few typo fixes Andrew eventually let off to me.
      Fix of two warnings.
      /tmp/newfun.msg
      Fresh meat in trusted domains code:
      Extending code to work both in case of domain membership
      We haven't implemented The Singing Contexts so far.
      Turn off using lsa_qos in OpenPolicy call. This way we avoid annoying
      Turn off using lsa_qos.
      Just a few formatting fixed caught while testing.
      Fix compiler warning.
      According to the result of voting, net has default debug level with
      Typo fixes.
      This creates passdb backend files automatically when adding first account.
      Small typo fix found while testing domain trusts.
      Removed -l parameter description to avoid duplication
      Give a temporary hint on how to delete trust account.
      In case of 'net rpc trustdom add' without domain name we were silently
      Typo fix.
      Omit html documentation tree because it has been moved to the separate
      > Omit html documentation tree because it has been moved to the separate
      Useful debug message. Patch by metze.
      Useful debug message. Patch by metze.
      Fix to correct checking of '$' name termination.
      Added useful information to debug lines.
      Added useful information to debug lines.
      Typo fix.
      Typo fix.
      Prototype version of trust passwords moved to SAM/pdb. This is
      Fixes to doxygen comment.
      Typo fix.
      This was cut-n-paste mistake, I guess... :)
      Doxygen comment fix.
      Typo fix.
      Trust passwords types for use with SAM_TRUST_PASSWD structure.
      Comment and formatting fix.
      Initial design of some of the functions to operate on trust passwords
      Remove unused function.
      Remove unused variables.
      Fix compiler warning.
      Disabling GUMS (gums_tdbsam2) temporarily, to fix the build.
      Adding ability to operate on trust passwords to pdbedit. This enables
      Added copyrights I forgot about looong ago...
      Added copyrights I forgot about looong ago...
      Fix to debug message lacking termination with '\n'.
      Fix to debug message lacking termination with '\n'.
      1) Two new functions to trust passwords interface in passdb:
      Forgot to put some more comments.
      Yet another '\n' termination of debug message.
      Yet another '\n' termination of debug message.
      r1332: Typo fix.
      r2813: Fix the build.
      r2814: Exactly the same as "main" build fix.
      r21893: Update comments so they actually reflect reality...
      r24771: Use infolevel 25 to set the machine account's password (just like winxp).
      r24789: Add implementation of machine-authenticated connection to netlogon
      r24853: Rename function as Jerry asked.
      r24977: Ensure negative caching for name2sid, sid2name and rids2names
      r4948: Typo fixes in comments.
      r5256: More verbose description of functions (as I learn the code).
      r5365: Initial code for adding user accounts via libnet call.
      r5366: added initial code for adding user accounts to libnet makefile.
      r5367: Minor typo fixes.
      r5380: Removed extra newline.
      r5381: Added net_user.c with net tool interface for managing user accounts.
      r5400: Slightly better handling of help messages in net tool.
      r5423: Change function table structure to allow short description
      r5424: Automatically generate basic help display on basis of name
      r5425: Convert function tables to new structure (with description)
      r5472: First approach to composite rpc call fetchin user info.
      r5474: Remove random notes put in code.
      r5499: Commit forgotten change what tridge immediately pointed out
      r5576: Bunch of fixes pointed by tridge. A few more to come...
      r5610: Starting libnet test of userinfo call. Unfinished yet, though
      r5651: A bit more code in userinfo test and hook up test function to
      r5652: Add libnet tests section to torture test.
      r5677: Split structure definitions from implementation.
      r5678: Torture tests require also libnet in order to run NET-* tests.
      r5679: Complete basic test of rpc_composite_userinfo function (which
      r6164: More comments in the code.
      r6381: Started working on user account management functions.
      r6382: New structure for useradd call.
      r6383: Add user management file to build.
      r6384: Formatting fixes.
      r6389: Incomplete test of composite useradd function.
      r6390: A couple of changes in useradd function regarding pointers.
      r6405: Complete NET-USERADD torture test for user add composite function.
      r6406: Include new NET-USERADD test in torture suite.
      r6414: Added composite user del function. Slightly broken still, but I don't
      r6415: Added NET-USERDEL torture test which proves something's wrong
      r6419: Fix strange behaviour of NET-USERDEL where account doesn't actually
      r6420: Close user account handle before calling tested function to better
      r6424: More comments and fixes to existing ones.
      r6425: Yet another comment.
      r6426: DCE/RPC bind string parsing is not needed anymore, as we use
      r6430: Delete existing test account if, for some reason, it hasn't been
      r6432: Restorin previous construction of conditions after a little discussion
      r6439: Clarify the comment.
      r6440: Adding libcli composite functions dependency, as we need to locate
      r6614: Basic approach to monitoring messages for composite functions.
      r6615: As usual, I forgot to commit new structure in this file...
      r6616: First (and totally untested) approach to monitoring userinfo
      r6624: I have put monitor function pointer into userinfo call, but I haven't put
      r6637: Test for asynchronous function and monitor messages.
      r6708: Another type of monitor message.
      r6709: Add monitor messages to useradd composite useradd function.
      r6717: - torture test of async useradd function and monitor messages.
      r6718: Formatting fixes.
      r6797: Typo fix.
      r6962: Severely simplified share functions. Removed call levels as we don't
      r6963: Further definitions for share manipulation code. Untested.
      r7247: User shorter and more convenient name for credentials in
      r7250: Starting work on composite domain open call.
      r7251: Initial work on composite domain open call.
      r7252: Formatting.
      r7323: Complete composite domain open call.
      r7324: Torture test for composite domain open function.
      r7325: Add composite domain open test.
      r7379: Simplify CreateUser function and io structure. Also, implementing
      r7380: Mistakenly put one file twice in command line. Here's source of
      r7381: Put more rpc specifics in libnet context.
      r7382: Convert net_user code so that is can be compiled against
      r7383: Add CreateUser test to torture suite.
      r7384: I've forgotten to commit test source.
      r7490: Rename functions and prefices s/rpc_composite/libnet_rpc/
      r7491: libnet functions used in tests have different names now.
      r7587: More comments.
      r7588: Fix lacking space in the comment.
      r7732: Implementation of very basic lookup function (to be used in more
      r7733: New io structure for name lookup function.
      r7734: A few missing pieces...
      r7735: Extend resolve_name function so that it's possible to pass resolve
      r7736: Propagate change in resolve_name function. Let's use default methods
      r7737: Test for libnet_Lookup function.
      r7738: It's actually an API function test.
      r7748: Use state structure in connection with io to get returned address.
      r7813: Make async request independent from config file routines.
      r7814: Propagate the change in resolve_name_send function.
      r7816: Implementation of "shortcut" function for those (probably many) who
      r7999: Fix lacking structure definition.
      r8075: Make rpc connect function part of libnet api, as I suppose many
      r8076: Put name resolution methods into libnet_context. This allows libnet based
      r8077: Propagate changes in rpc connect routine to functions using it
      r8078: rpc connect function uses structure now.
      r8079: Dcerpc pipe in libnet_context is just pipe now, instead of explicit samr.
      r8080: Use libnet_context where using libnet_Lookup functions now.
      r8081: Add simple test for RpcConnect function.
      r8094: Fix compiler warnings.
      r8095: Fix compiler warning.
      r8096: Remove function that has became libnet_Lookup fuction.
      r8098: Add my copyright and remove unecessary header dependency.
      r8128: Janitor work...
      r8692: Starting parts of code to provide user modify functionality.
      r8693: Test code for usermod routine.
      r8717: Add monitor message emiting in userdel and usermod calls.
      r8721: Further work on libnet_rpc_usermod function. Now it can change
      r8759: Another couple of fields in usermod routine.
      r8760: Rework monitor messaging code a bit, as Metze once suggested.
      r8761: Propagate changes in monitor messaging code.
      r8788: New monitor messages.
      r8789: Send new monitor messages from userdel routine.
      r8807: Modifying datetime field using struct timeval argument rather than
      r8808: More comments.
      r8810: Fix missing headers. Still doesn't fix the build but getting closer there.
      r8845: Removing unnecessary string length calculations. Thanks abartlet
      r8896: Handle more complex case where field being changed doesn't appear
      r8897: Add test for the comment field.
      r8898: Fix provision script to actually work, since location of smbscript
      r8902: Revert the small change as Andrew Bartlett asked. Now, let's go
      r8903: Update the howto as smbscript is now installed along with other
      r8904: Split off the query stage as a separate function.
      r8930: Add the libnet share tests based on code submitted by
      r8944: Get more verbose output from NET-API-LISTSHARE test.
      r8954: Use binding string to specify host rather than share path, as we use
      r8969: Make password field a password field, that is - prevent them from
      r8975: Very basic test for delshare function based on code submitted
      r8977: Put my copyright in share torture test.
      r9037: New fields in usermod function - allow_password_change and
      r9070: More fields in ejs credentials object.
      r9071: Set real and workstation fields in ejs credentials object.
      r9090: Another field in usermod function - account flags.
      r9477: Convert popt options to an ejs object. Doesn't seem to break anything
      r10089: Fix a typo breaking the Makefile generator and therefore - the build.
      r10631: Formatting.
      r10633: Formatting.
      r10635: Formatting for better readability.
      r10636: Formatting for better readability.
      r10679: Monitor messages should be issued from usermod functions.
      r10680: Fix a warning.
      r11281: Initial ejs interface for libnet functions.
      r11308: Correctly return status code in case of js error or libnet
      r11309: A trivial test script for ejs libnet interface.
      r11586: Further work on ejs interface for libnet. The idea is to split libnet
      r11587: Trivial testing code giving an idea of how could using
      r11588: Remove unused (at the moment) variable and quiet compiler warning.
      r11705: Fix segfaulting create user function.
      r11708: Fix allocation of too small buffer to hold ip address.
      r11747: Move buffer allocation to libnet_Lookup function so that the
      r11748: By default, use name resolution method provided by means
      r11749: 1) Buffer allocation's been moved and isn't needed here.
      r11750: More comments.
      r11813: Const-ify name resolution method list and use string list
      r11814: 1) Set name resolution methods according to smb.conf
      r11815: A bit more comments and spaces for better readability.
      r12001: Replace smbcli_full_connection call with composite connect used
      r12079: Fix to the comment for sake of completness...
      r12087: Split dcerpc pipe connection functions into separate file.
      r12088: Use a structure to pass arguments to dcerpc connection functions
      r12089: Couple of fixes in cases of memory outage before we sort
      r12103: Comments and a bit of formatting.
      r12104: Move to (sync) smb_composite_connect from smbcli_tree_full_connection()
      r12105: Formatting.
      r12135: Move named pipe connect on smb2 function to async implementation.
      r12162: More comments.
      r12294: Move dcerpc_pipe_open_sock() to async implementation.
      r12800: Replace tmp_ctx with mem_ctx to make variables name more
      r12835: RpcConnect test expansion to test connecting using ncacp_ip_tcp
      r13561: Turn all dcerpc connect and socket functions to async version.
      r13568: Comments to async rpc connect functions.
      r13572: Comments to async pipe open functions and copyright note.
      r13726: Fix indentation.
      r14123: Huge lump of code making all of our dcerpc connect code
      r14124: One more thing needed for async dcerpc connect code.
      r14125: Fix incorrect declaration caught on build farm.
      r14136: Fix bug causing segfaults in certain circumstances (gcc3.x among
      r14143: Replace old function with equivalent based on new async code.
      r14164: More comments.
      r14165: More comments and my copyright.
      r14175: More comments and my copyright.
      r14210: 1) Fix an issue with composite context when null event context
      r14211: More comments.
      r14238: This is not needed anymore, as the state structure is zeroed
      r14239: Fix indentation.
      r14560: Finally! Start working on async libnet_RpcConnect and other
      r14566: Remove unnecessary headers.
      r14568: Remove unused function.
      r14591: More comments.
      r14667: Fix indentation.
      r15021: Couple more comments and fixes in spirit of utility functions
      r15394: Put initial code for testing async dcerpc binding. Currently
      r15412: Put the test in a dangerous category.
      r15435: Turn libnet_RpcConnectDCInfo into another level of libnet_RpcConnect
      r15436: Add test for LIBNET_RPC_CONNECT_DC_INFO level. Display received
      r15439: Reorder the code a bit to be like in other calls. More comments
      r15440: Formatting.
      r15456: Inspired by a short discussion with abartlet on IRC.
      r15459: Add forgotten guid retrieval among other data and thus prevent
      r15487: More comments and a few minor changes (not even fixes).
      r15488: This structure is not needed any longer.
      r15489: Typo fixes.
      r15490: Typo fixes and remove long forgotten commented piece.
      r15502: Typo fix.
      r15588: Fix the build of smbtorture.
      r15625: Partial commit of my current work. It makes libnet api functions
      r15626: Modify the tests to fit them in current changes in libnet
      r15627: Disabling test of ejsnet till the time I find the reason why
      r15663: Turn libnet_DeleteUser into async function and fix subtle bug probably
      r15664: Add NET-API-DELETEUSER test for libnet_DeleteUser function.
      r15665: ejsnet test should be better now, after changes in delete
      r15666: Fix a silly typo.
      r15667: Make sure the rpc pipe pointers are zeroed during
      r15726: Comments and a couple of minor formattings in the code.
      r15784: Redesign of NET-API-RPCCONNECT tests to cover more cases of usage.
      r15785: Change the test names according to changes made in libnet torture test.
      r15919: - Create function checking prerequisites like valid domain
      r15920: Move userman.c and userinfo.c definition into respective
      r15921: Include new headers.
      r15926: Add NET-API-DELETEUSER test to the standard tests run on 'make test'
      r15937: Currently, we don't use nor support distinguished call levels, so remove
      r15938: Extend userinfo call with one optional stage - lookup for
      r15939: Add tests for userinfo call with username argument provided
      r15940: Add new field to pass username to libnet_rpc_userinfo function.
      r15941: We don't use call levels, at the moment. Remove them until we do.
      r15996: Implement a missing monitor message.
      r16211: Refactor domain_opened function a bit and add a few comments.
      r16342: Placeholder for a function implementing NET-API-MODIFYUSER test.
      r16476: Error in composite functions implemented the 'old way' (single event handler,
      r16530: Send monitor messages only after successful receiving result of a stage.
      r16531: Add a function preparing argument for modify user routine.
      r16532: Tell username from account name (source from target, when
      r16533: Perform a cleanup after testing. Also, add changed name argument.
      r16572: More comments and simple refactoring of one condition.
      r16573: Fixes in comments.
      r16692: More comments and further code in set_user_changes routine.
      r16693: Name type should be passed further down the lookup engine instead
      r16694: Store lsa rpc pipe pointer in a right place.
      r16791: Typo fix in a comment.
      r16895: Add continue function and prevent from segfaulting (or unpredictable
      r16896: Allow to use both binding and unc string to specify host name
      r16897: Don't pass allocated buffer for returned string as the lookup
      r16900: Nicer display of the test results.
      r17001: Prepare a new monitor messages.
      r17026: Make rpc connect routine a bit smarter. Try to connect again
      r17027: My copyright notice.
      r17028: Remove extra newline.
      r17079: Remove an attempt to connect on ncacn_ip_tcp transport after failure
      r17447: Add more fields to user modify routines.
      r17448: Define macros to set fields in api function modifying user account.
      r17449: Add another field to the test before expanding the whole test
      r17450: A bit more protection against memory allocation errors.
      r17471: Add a function generating pseudorandom set of changes to test
      r17472: Remove unused variable.
      r17484: Make last version of the function generating random set of changes
      r17670: 1) Refactor libnet context structure a bit, to have rpc connection
      r17671: Update the tests according to changes in libnet context.
      r17856: The two new functions - libnet_LookupName and libnet_UserInfo.
      r17857: A couple of new tests.
      r17858: Add new libnet domain open tests.
      r17938: More comments.
      r17939: Fix compiler warnings spotted on buildfarm.
      r17940: Fix a warning spotted on the buildfarm.
      r18017: Separate NET tests out of RPC. This way it's easier to run libnet
      r18050: Run more NET tests on the build farm.
      r18101: Use composite_create function and add monitor function pointer
      r18102: Fix close lsa NET test.
      r18104: A couple of important fixes to samr domain open so that
      r18105: Fix samr domain open, and implement samr domain close test.
      r18106: Add new samr domain NET tests.
      r18190: Add more NET tests to be run on the build farm.
      r18614: a bit of work done while on the plane.
      r18615: add more time fields and fix a silly mistake.
      r18626: fix cleanup function to safely recover after interrupted test
      r18631: correct unintentional commit.
      r18655: add more fields and better handle the error case where fields
      r18656: fix stupid mistake causing segfaults in torture test
      r18657: handle the case where rpc call went fine, but the result
      r18658: make the test change fields sequentially each one in turn.
      r18682: a bit of a change in setfield function.
      r18683: NET-USERMOD test changed to be able to perform multiple simultaneous
      r18691: Forgot to add copyright info.
      r18752: When change is a big one, it needs to be made in a couple
      r18753: expand the test so that it does a growing number of changes
      r18887: add flags found while on the plane.
      r18890: sort the flags out and remove unknown as there's still
      r19024: remove read-only and policy dependent fields and flags
      r19025: - remove read-only and policy dependent fields and flags
      r19053: match the flag values with the actual equivalents in samr.idl
      r19174: fix the test to pass against win2k3 server (username length
      r19251: fix silly typos causing the test to fail at account_name
      r19256: add missing infolevel and fields to SetUserInfo call
      r19379: add testing home directory field to the samr tests.
      r19380: forgot to add home drive testing as well as home directory...
      r19398: more comments
      r19583: a few prerequisite functions called from within libnet functions
      r19584: add the new file to the build.
      r19586: draft version of libnet_UserList function. still a bit of work
      r19587: Fix indentation and correctly set error string when completing
      r19592: a simple test for libnet_UserList
      r19593: add NET-API-USERLIST test
      r19630: Support specifying the realm name from command line.
      r19637: Leave --realm option only, as abartlet suggested.
      r19640: add some comments
      r19708: add a script for running net tests separately
      r19753: verify result of received request before sending the next one.
      r19922: Use new composite_create functions in composite context
      r19923: Update test to match the function changes.
      r19924: win2k3srv did not like that combination.
      r19925: Close the lsa handle in the end, and test calling libnet_UserList
      r19926: display user listing created by the test.
      r19937: fix sending monitor message (spotted by metze).
      r19938: Return function status instead of rpc layer status. This is
      r19956: remove unused function
      r19970: more comments and fixes
      r19971: typo fix
      r19972: put a placeholder of a new js function and use error strings
      r20103: Change the returned type of prerequisite checking functions,
      r20137: return the proper status.
      r20138: return the proper status for the other functions as well.
      r20143: a bit of experiments before doing serious changes in ejsnet.
      r20161: Prevent potential segfault in case account is unknown.
      r20162: Always return some error string.
      r20163: Return null object if no user is found.
      r20164: Disable the test till tomorrow when I find out what caused
      r20175: use libnet context instead mem_ctx as the latter gets
      r20176: Info method returns null object if the user is not found.
      r20177: return the actual function status code.
      r20222: return status unsuccessful when null pointers are returned
      r20328: use prereq function instead of local implementation.
      r20782: Place ejsnet files in a separate directory.
      r20783: Ejsnet files are now moved into a separate directory. I need to commit
      r20881: Sorting out NetUsrCtx methods. Still a couple of things left.
      r20882: Formatting.
      r20885: - I forgot the page size passed to enumeration function is actually
      r21786: My initial attempts in qooxdoo coding. Derrell, please take
      r21787: Add new module to the swat application.
      r21788: Add new JSON-RPC services.
      r21841: Rename the method and check parameters more strictly.
      r21852: Further work on initialising libnet context from netmgr.
      r21896: - Enable creating default NetContext when no explicit credentials are
      r22005: Add more code (doesn't work at the moment) preparing a place for
      r22136: Fix incorrect event handling.
      r22179: Store resource id along with the object itself to be able to return
      r22323: - add credentials property to NetContext object
      r22324: Another step closer to nice listing of user accounts.
      r22325: Typo fix
      r22346: Fix small mistake - after sending rpc request we should go to await
      r22487: Add a separate widget class for listing users and reposition
      r22499: UsrCtx should be created within UsersView. Tree widget just
      r22500: there's a better way to find out if there are any children
      r22501: dispatching events explicitly is not necessary.
      r22519: convert libnet_DomainOpenSamr function from state-handling routine
      r22565: add libnet_DomainList function.
      r22566: add a simple test of libnet_DomainList function.
      r22567: add NET-API-DOMLIST test to automatic testing.
      r22672: use composite_create calls instead of talloc_zero.
      r22734: - use samr pipe if it is already opened
      r22735: correct some comments
      r22763: replace talloc_zero calls with composite_create and add more
      r22764: - replace talloc_zero with composite_create
      r22804: convert libnet_rpc_userinfo function to use "continue" functions
      r22808: store default buffer size for samr operations in libnet context.
      r22809: use buffer size specified in libnet context.
      r22810: when a test runs against domain controller use domain name
      r22811: two more memory allocation checks.
      r22871: restore testing against host name instead of ip address
      r23047: Allow local inclusion of js files as well as from predefined
      r23065: revert local includes to prevent security problems (at least
      r23124: add host subcontext providing (at the moment) list of domains
      r23125: add host manager subcontext function.
      r23126: this was sitting on my laptop for a while...
      r23178: add simple js code I use for testing and which starts to look like
      r23179: I forgot ejsnet.js script is one of tests. Disable it temporarily.
      r23292: check for errors returned in a call result.
      r23959: add more monitor messages support that's been sitting around on my
      r24051: more monitor function calls and monitor msg names
      r24554: Add internal implementation (before api function) of group
      r24555: Add a test for libnet's group info call.
      r24679: Add (raw and untested) implementation of libnet_GroupInfo function.
      r24680: fix a couple of stupid typos from previous commit.
      r24681: add basic test of libnet_GroupInfo function.
      r24682: forgot to actually make the new test buil...
      r24732: Add comments and fix memory leak.
      r25256: Fix missing field set in libnet_ModifyUser routine.
      r25312: Replace the old-style composite calls.
      r25315: Revert my last change until I find out what's causing the
      r25353: Disable one more swig link to for 'make install' to work.
      r25356: Conversion from the old-style composite functions take 2.
      r25367: Add initial implementation of internal group add function.
      r25368: Add the test of group add routine.
      r25375: Put commonly used functions in one place.
      r25376: Add the new file to the build.
      r25377: Simplify code a little by employing commonly used functions.
      r26519: Add libnet_GroupList function. Totally untested (yet), but
      r26530: Add NET-API-GROUPLIST test.
      r26531: Prevent from displaying the results if the function
      r26532: Fix mistake in assignment.
      r26632: Add libnet_CreateGroup function.
      r26633: A couple of fixes in comments.
      r26634: Add NET-API-CREATEGROUP test.
      r26693: Add (untested) libnet_rpc_groupdel function.
      Added polish translation of the comment.
      Typo fix.
      Typo fix.

Ralph Wuerthner (15):
      s3:vfs_gpfs: fix ACL length calculation
      mkversion: Remove quotes around SAMBA_VERSION_VENDOR_PATCH string
      s3:vfs/time_audit: add path names to log messages
      s3:lib/charcnv fix typo in pull_ascii_base_talloc()
      s3:smbd: do not access data behind req->buf+req->buflen in srvstr_get_path_req_wcard()
      s3:smbd: convert srvstr_pull_req_talloc() into a function
      s3:smbd: do not access data behind req->buf+req->buflen in srvstr_pull_req_talloc()
      Add "repack" command to tdbtool documentation.
      tdb: Fix typos.
      Ensure gpfs kernel leases are wrapped in a become_root()/unbecome_root() pair.
      s3:smbd: return NT_STATUS_INFO_LENGTH_MISMATCH for GetInfo in case output_buffer_length is too small
      s3:smbd: allow GetInfo responses with STATUS_BUFFER_OVERFLOW to return partial, but valid data
      s3:smbd: allow status code in smbd_do_qfsinfo() to be set by information class handler
      s3:smbd: allow info class SMB_QUERY_FS_VOLUME_INFO to return partial data
      s3:smbd: allow info class SMB_QUERY_FS_ATTRIBUTE_INFO to return partial data

Ricardo Jorge (4):
      python/loadparm: Get shares listing working.
      param/pyparam: Cope with string list parameters being empty.
      Fix SharesContainer.__len__.
      pyrpc: Build the samba.dcerpc.srvsvc module.

Richard Sharpe (405):
      Changes to client.c support the need for directories to be processed by whatever
      smbclient.1 updated to reflect the new functionality and to document functionality
      Oops, fogot proto.h. It needs to be updated for changes to client.c
      Fix heaps of warnings when compiling with gcc under Digital UNIX. Include route.h
      Added bug fixes to clitar to ensure proper longfile name restores
      Real fix for clitar.c problems. Have now made all the right
      Se-submitting clitar.c/
      CLITAR changes to overcome some reported problems and add Jay's changes
      Damn, forgot the proto file again
      Re-submit changes for CLITAR.
      Remove the copyright to Canon Information Systems Australia, as we don't
      Arrrgh, one more fix. Restores of long file names were
      Digital UNIX does not seem to set OPTIND if there are no
      Updates smbstatus to have a -S and -L flag.
      Fixing clitar.c so that tar to stdout works correctly.
      Submitting the smbtar changes to the main branch as well.
      Adding rewritten restore code ... Old code is still there
      Fixed changes in clitar.c that Jeremey noted. One change was
      Fixed data corruption bugs in clitar.c with restores.
      Added a minor fix to clitar.c for a bug.
      Small update to clitar.c to omit warnings about servers not
      Fixed up more possibly uninitialized variables.
      Make sure that WINS Server = 127.0.0.1 in case we
      The previous fix for WINS on the WINS server was wrong. It
      Backed out that just as ill-considered change :-(
      Now have a better solution to the need to have smblcient find
      Fix another possibly unitialized variable ...
      Added E Jay Berkenbilt's fixes
      Added capability for smbclient to use the local WINS server on the same
      Add a DEBUG to unix_convert
      Added code to convert empty file names to "." so we avoid
      Try to make smbprint a better behaved citizen.
      Added changes to smbtar submitted by Sandy Whitesel
      Added some debugging to clitar ...
      Fixed problems in debug code because I did not compile
      A small change to clitar.c (really, I promise :-)
      Adding first of the fixes for SSL.
      Fixing up configure to properly support ssl
      More changes to get SSL working with 2.x.x
      Putting back the -p flag in smbclient.
      Changes to implement NET_AUTH based on NET_AUTH2, to get Win2000
      Fix minor typos in the yodl for smb.conf.5 and fix minor English problems :-)
      First pass at the libsmbclient code ...
      Comment out unused generate_name_trn_id ...
      Make the use of generate_name_trn_id conform to the usage elsewhere ...
      We only want to mark mailslot packets as loopback packets if they are to
      Add a new file clidgram with routines that are used by the libsmbclient code.
      I need a callback arg for cli_NetServerEnum and cli_RNetShareEnum, so I had
      Needed a callback arg on cli_list ...
      The latest changes to libsmbclient ...
      Arrgh, forgot to update proto.h with all the changes I have been making.
      Fix a small type in libsmbclient.h ...
      Fix a minor problem with listing servers in a workgroup and add a
      Fix some more bugs in libsmbclient.c and add functionality to tree.c
      Fix proto.h ...
      More fixes and implementation bits and pieces for libsmbclient
      Update the tree.c GTK+ App so it can walk down directories etc ...
      More bug fixen ...
      Get rid of 10.0.0.6 and replace it with 0.0.0.0 as my_ip address prior to
      Add support for logging to wherever smb.conf specifies.
      Many bug fixes to the libsmbclient.c code plus
      Some more bug fixes plus implementations of smbc_mkdir and smbc_rmdir,
      Fixed bugs relating to Win2K and the need for a codepage so that unicode
      Fix a problem with smbc_unlink on directories where it was returning EACCES
      Remove an inet_aton so that this code will compile on Solaris ...
      Add an extra error code translation to clierror.c so that libsmbclient
      Fix some bugs and prepare for some other bug fixes ...
      Fix some further small bugs in libsmbclient to make it pass the
      Implement two printing related functions and start the remaining two.
      Fix problems in libsmbclient with pring job struct plus add implementation
      Add Makefile.in target for installing smbclientlib ...
      Added commented/documented version of libsmbclient.h and fixed up a small
      Fix calls to smbc_init in testsmbc.c and tree.c
      Fixes to libsmbclient so it will work when browsing real Windows systems which
      Change code around and add retry to deal with the occassional loss of NetBIOS datagrams responses, either via TDB or direct receive ...
      Improve the sample GTK+ client program to make it a bit more functional.
      Opps, last one did not commit the correct changes ... Here they are.
      Fix a small problem where tree.c was using the creation time to display, rather than modification time. Creation time is not returned by the SMB protocol.
      Fix some errors uncovered in libsmbclient by the test suite
      Fix two problems identified by the test suite, one a major one
      smb.h: add one error code for no such printer job
      Implement smbc_lseekdir, but it will have to change ... because it has the
      Fix the definition and implementation of smbc_lseekdir ...
      Fixes to testsmbc to ensure it will compile on SGI ...
      More SGI type fixes ...
      Bulk add of the test suite for libsmbclient ...
      More documentation in the header in doxygen format
      One small Insure fix for a memory leak. More fixes to come perhaps ...
      More memory leaks fixed courtesy of Insure ...
      Make libsmbclient.so by default now.
      Change EUCLEAN to EINVAL, as some systems do not have EUCLEAN, and EINVAL
      Updated the inplace documentation to reflect change from EUCLEAN to EINVAL.
      Fix a stupid typo in Makefile.in that prevented the libsmbclient code
      Adding an examples directory for libsmbclient to the head branch along with
      Further recasts to sockaddr * rather than sockaddr_in *
      Ohh boy, I should be working on lots of other things, but I am pissed off, so
      Fix a small warning about char * vs unsigned char * that gets some compilers
      Ran a make proto to fix the problems ...
      Fix up the problems with calling smbc_init multiple times.
      Fix a stupid typo ...
      Added back the automatic build of libsmbclient.so in head.
      These changes cause the libsmbclient stuff to always build a non-shared library and to build a shared library only for the four OSes that we currently like.
      Modified Makefile.in to work properly. Define BLDSHARED as a variable in the makefile now.
      Fix another small problem with Makefile.in ... not doing the correct
      Add a static linking target to the examples Makefile so I can test out static linking ...
      Make sure we compile with gcc by default.
      Change the order of the -fPIC  and  -KPIC tests to ensure that UnixWare
      A serious set of changes to build libsmbclienmt. Copied much ofthis from
      Fix a stupid error in passing options to CC under AIX
      A few tweaks around linking libsmbclient
      Fix the PIC flag for IRIX
      OK, I think I have fscking IRIX figured out for building PIC code.
      Try and build shared on SCO. Assume that it is like others, but uses
      Fix the POOBAD_CC on Slowaris so we can handle things correctly ...
      One more possible fix for Solaris CC and GCC
      Fix some fscked up things that I added to the Solaris CC build of shared libs
      Make the Slowaris build a bit nicer with cc
      Another fine mess, err, fine tune to the Slowaris build ...
      Commit an updated configure, but the build_farm should run autoconf!
      Make sure that a shared library build of libsmbclient causes build
      Stop HP/UX building shared libraries for the moment ...
      Make sure that if there are no interfaces, name_register_wins does not
      Some small changes to configure to remove things like -X4 etc on compiles.
      Make sure to commit configure
      Tweak the building rules under Solaris with CC.
      Fix problems with lp_workgroup() being passed to routines that will modify
      Fix up libsmbclient in head.
      One more patch from Tom Jansen. Hope I didn't break the tree :-)
      Fix another memory leak spotted by Tom Jansen.
      Add the new smbprint shell script, smbprint-new.sh that is supposed to fix some problems under *BSD and etc ...
      Fix smbtorture so it can handle collisions etc ...
      Back out the wrong changes I made yesterday ...
      First part of adding flags returns from name_query ...
      Changes to allow head to translate NMB flags ...
      A small change to print out the error message only if we could not check the
      Commit Tom Jansen's changes to head.
      Fix some multibyte problems that I forgot about.
      Add these two files I forgot.
      Fix up the include file that had problems as well.
      Some fix ups but committing so Andrew can look at the problem I have.
      Your car depreciates in value, while obsolete parameters are deprecated.
      Some more minor doco fixes ...
      Another speling fix
      Fix some small spelling etc problems in the SGML.
      A small type and addition of an example add printer command script.
      Convert M_DEBUG(0 to M_DEBUG(10 for non-error cases ...
      The session key in NTLMSSP AUTH blobs is actually an empty string.
      Add type A to the small MSRPC generator ...
      Make sure that an NTLMSSP negotiate blob has the correct stuff in it!
      Parse the NTLMSSP Challenge in cliconnect.c.
      Fix the client side NTLMSSP. It now works between smbclient and smbd!
      Fix the struct_blob.
      Add a synonym for samdump ...
      Small, long overdue, fix for libsmbclient.
      Add net getlocalsid [name]
      Update some help. People keep forgetting that!
      Make sure that Alfred Perlstein's changes get into head as smbprint and
      Commit a fix to smbclient so that it will connect to EMCs and NetApp's machines.
      Make sure that variable does not shadow a parameter.
      Push Steve Langasek's fix ...
      Fix a small mistake.
      Fix John's little typo ...
      Add a small utility that can print out the SEC DESCs in NTUSER.DAT.
      Add more code to the profiles program and add Makefile.in support.
      Fix small typo ...
      Revert that stupid one line change.
      Fix a problem with spaces vs tabs
      Add more. Parse SIDs on the command line ... soon will actually mod the
      Add the changes to change the SIDs ...
      Make sure that %u is used for SID elements ...
      The fixes from Tom plus a minor update from me.
      Start handling Big Endian machines as well as little endian.
      Make all of the required (I think) changes to make this code work for
      See if char * makes the Irix C compiler happier than void *?
      A small fix by Andy Thomas. Now that incrementing the Auth index has
      Fix some problems with tree.c reported by users.
      One more small fix in tree.c
      The beginnings of a registry editing program.
      Some more updates ...
      Fix DAT_TIME so it becomes NTTIME and matches Samba source.
      Add definitions of the various NT Registry on-disk structures ...
      Define some macros for accessing shorts and ints in an endian independent manner.
      A small fix to Makefile.in from Bradley Longhurst.
      Fix the breakage, and start processing the first key record:
      Commit some more changes ... Start processing the sub-keys, recursively.
      Add some more handling of Key records ...
      Begin to decode Value Keys, names and values ...
      Start allocating structures to keep the in memory copy of the registry tree
      Handle the creation of more parts of the tree ... Still have to do SK records
      Clean up the code some more. Create more elements of the tree.
      Complete more of the code. An iterator is close to complete. Compiles,
      Add support to Makefile.in for editreg
      Tidy up some bits. We can now at least list all the keys.
      Improve the iterator wrt values ... Now prints keys and value names.
      Fix a small bug.
      Begin to handle Security descriptors for keys.
      More code to read in and create security descriptor entries ...
      Almost finished processing the registry encoded SEC DESC ...
      All the code for reading in the registy is done, but I have a malloc'd
      We now read in the whole of the registry, including security bits.
      Start adding code to allow the in memory version of the registry tree
      For some reason, the configure tests for sendfile support in FreeBSD
      Port the fix to cli_setup_write to handle offsets greater than 32-bits from
      Document the size constraints on a write request.
      Add profiles utility support to Samba 3.0.x
      Some fixes to editreg. Clientgen should not be touched, and an update to configure that Herb needs.
      Now that I am running config.developer, I decided to get rif of some warnings:
      Make sure that those cleanups actually went in.
      More janitorial duties. Pulling these in from samba-head.
      Remove a wayward file.
      Fix an error where the SK Offset was truncated to 16 bits. Variables needed
      Merge the fix from head about short variables.
      At the prompting, start to add infrastructure to detect the presence of
      Commit just a little more infrastructure for HAVE_GETDIRENTRIES
      Fix the dependency on GNU Make introduced by the DYNAMIC RPC stuff.
      One more try to get rid of the dependency on GNU MAKE
      One more fix ... Things link now if you don't use dynamic RPC stuff
      One more try to fix the GNU Make dependency
      Fix a mistake spotted by Metze
      Recover much of my changes to editreg.c. Add some const and start coding
      Do my janitorial duties to encourage others to do so.
      More janitorial duties, fixing the BIG_UINT changes for large offsets.
      Add code to allow us to specify the port to connect on when performing
      Add *SMBSERVER fallback code to smbtorture ...
      Some fixes to URL syntax from coolo.
      Fix some uncleanness with testsmbc.c
      More patches from coolo. One of these functions needs to be moved
      Commit some more fixes for Coolo ...
      More of coolo's changes for UTF-8 and some minor fixes of mine.
      Some castiness for Don McCall.
      Add some castiness for Don McCall.
      Some more good stuff from coolo.
      Fix debug handling in libsmbclient.c.
      Make autogen.sh more portable by having it work on both Linux and FreeBSD
      Fix the handling of smb.conf in libsmbclient.
      Janitorial duties to make autogen.sh portable.
      Updates to editreg.c to provide more functionality ...
      More updates ...
      Adding editreg.c ...
      More minor edits to add features ...
      Squelch some warnings, and move a bit of code around to make some future
      Some more work added ...
      MOre functionality ... got to test it.
      More functionality, esp around adding keys and inheritance of security
      The code is a bit of a mess right now.
      Complete most of the coding for adding keys. We can now add a key.
      Begin the code that handles key values ... Delete a key value and add a
      Add code to delete values ...
      Well, we can now add keys and values and delete keys and values ...
      Add a -f command-line flag to specify printing all paths or only terminal
      Some comments about the format of the on-disk reg file, as well as
      Start the outline of the code to store a registry tree ...
      Correct comments about breadth first, as the registry tree is stored in a
      More infrastructure for storing registry
      Commit more code dealing with allocating space in the HBIN blocks ...
      Complete the space allocation code for HBIN blocks ...
      Add more code to store keys and other records ... still more to go
      More functions to compute the space taken up by SIDs, ACEs, ACLs, SEC
      More code to do with constructing SK records and self relative SDs.
      Keep coding this boring stuff to lay out security descriptors ...
      More code to store ACEs and SIDs. I have almost enough to start testing
      Finish laying out the SD, and now back to finishing off NK records ...
      Getting ready for code that actually writes a registry file out.
      Syncronize head editreg.c with 3.0.0 ...
      Fix up some of the warnings that the build farm is finding ...
      Fix some compiler warnings about const etc ...
      Fix up a bunch of compiler warnings ...
      Fix up a bunch of problems in editreg.c
      Some more fixes for syntax problems on AIX etc ...
      Sync to the changes in head ...
      Add some static ...
      Some more static definitions ...
      Sync up to head ...
      A small patch from metze to fix builds on some platforms ...
      Some fixes for editreg.c, although I see that head seems broken ...
      More changes to editreg to make it less tetchy.
      More updates on editreg.c to bring it better in line with the Samba source.
      Fix an spelling mistake.
      Replace all use of bzero with memset ...
      Squelch one small compiler warning
      Fixing problems in the iconv discovery stuff in configure.in.
      Fix a small spelling mistake and push out the new version of aclocal.m4 to
      Fix a small problem I seem to have introduced into aclocal.m4
      Final piece of support needed to find iconv libraries on FreeBSD.
      Fix a small typo in a comment and pretty it up a bit.
      Clarify a debug log a little. The path might not exist, so say so.
      Hoist the code for checking whether or not iconv actually works up into the
      This is an intermediate commit ... we check for three different charsets
      Test for CP850 and reorder the tests, looking for ASCII, then CP850,
      A small tweak to allow IRIX to work by detecting ISO-8859-1 to UTF-8,
      Small tweaks to configure.in to support Irix and to remove the changing
      Small fix to include existing CPPFLAGS when looking for iconv.
      Add a better error message to wb_common.c when unable to connect to a pipe
      Pull my previous changes into head as well.
      Put back the changes that Simo reverted and fix a speling mistak.
      Remove DEBUG statement from wb_common.c as it should not be there.
      Apply the changes to libsmbclient that derrell has contributed. Fix some
      Check for va_copy before you check for __va_copy, since va_copy is the
      Some spelling mistakes in aclocal.m4 and the va_copy fixups in configure.in
      Commit Derrell's changes to libsmbclient plus a small change to configure.in
      Fix one other place VA_COPY is defined ... should fix NetBSD build.
      Apply latest of Derrell Lippman's changes to libsmbclient.
      Apply these patches as well ... not sure if they all build. They don't on
      Put in a work-around for ENOTSUP not being defined on OpenBSD.
      Remove some unused variables uncovered by the build farm.
      Apply the changes that Derrell Lipman supplied ...
      Minor comment updates ...
      Better handling of iconv support and etc because gnu libiconv on FreeBSD
      Make the recent changes more pretty.
      Apply the patch to fix iconv detection for FreeBSD to the Samba 3.0.0 branch
      A fix to allow configure to find iconv on a number of systems including those
      Fix a problem with configure on *BSD systems. Make sure we add -liconv etc
      Add testacl.c ... from Derrell Lipman.
      Keep configure.in in sync with SAMBA-3.0.0
      Fix a couple of warnings with casts.
      Squelch some warnings with more casty-foo.
      More casty-foo ...
      Add this to samba-head.
      Update Makefile ...
      Some simple tweaks to the IDL to make it more correct ...
      Fix up some things in the IDL, and fix up a mistake I made before.
      Add a 1004 level for srvsvc.
      Clean up a comment noticed by Jonathan Shao at Panasas.com and remove an
      A small fix to torture.c to cleanup the error handling and prevent crashes.
      Remove an unused parameter from reload_services_file.
      Remove an unused parameter in winbindd (reload_services_file)
      Commit Andrew Bartlett's interesting patch to smbclient that allows for
      Apply the multiple login stuff to smbclient ...
      Adds some more tests of renaming an open file that has been opened with
      Make sure we don't clobber the stack when response consists of the empty
      Commit Derrell Lipman's changes and fixes to libsmbclient. The build but
      Apply Craig Barratt's fixes to allow multiple exlusion files and patterns.
      Apply some more of Derrell Lipman's changes.
      r248: Add support for printing out the MAC address on nmblookup.
      r415: Return NT_STATUS_ACCESS_DENIED not some LOCK message ...
      r501: Fix a small cut-n-pasteo ...
      r505: Break out algorithmic_gid_to_sid so that those of us who need it can use it.
      r559: Some fixes from coolo ...
      r588: Some fixes from coolo ...
      r599: Bug #1178. Make the libsmbclient routines callable by C++ programs. Also
      r616: Bug #1333.
      r618: Bug #1333. Fix a problem pointed out by coolo where I was trying to ensure
      r654: There is no point in having two lines of:
      r740: Fix Bug #1301. Return NT_STATUS_SHARING_VIOLATION when share mode locking
      r1333: NFS Quota support from Dan Peterson.
      r1557: Add sigchld handling to winbindd. Next step is to have the child restarted if
      r2905: Apply the patch for bug #1822. Add -D_REENTRANT to CPPFLAGS and -lthread
      r2959: If we want to support writes >= 65536 with cli_write, then it had better
      r3292: A fix from  Narayana Pattipati <narayana[dot]pattipati[at]wipro\dotty/com> for
      r5318: Fix a small problem in where we ignore the response from a SamrGetGroupsForUser
      r7703: Fix the problem with MAP_PRIVATE not updating the file.
      r141: A number of changes to get things working on FreeBSD and reduce the breakage
      r142: Add detection of sendfile to configure.in so I can add support for sendfile
      r6118: Make it so that we can do --with-zlib=no in configure and also a couple
      r6182: Jelmer, I think we need to initialize the switch_list, else we are
      r6187: 1. Make sure that we don't try to delete . and .. in a more portable way.
      r6195: I think Metze meant SPOOLSS_ARCHITECTURE_NT_X86, but I could be wrong.
      r6196: Make the comparisons consistent with in the same expression.
      r6219: This change allows us to fall back to authenticating without
      r6226: A couple of small typos ...
      r6229: Back out these changes ...
      Fix a small but annoying cut-n-pasteo with the net groupmap modify exampled.
      Export init_stat_ex_from_stat for use in VFS modules.
      Add a missing include file to two VFS modules
      Free the memory talloc'd
      Add a torture test to test existing FSCTL responses
      Move FSCTL handling into the VFS. Initial code changes. Passes smbtorture NTTRANS-FSCTL. Test added to selftests.
      Add the new test_nttrans_fsctl.c to waf
      Improve configure.in so it can be used outside the Samba source tree.
      vfs: Make function pointer names consistent. They all end in _fn
      Another fix for bug #8556 - ACL permissions ignored when SMBsetatr is requested.
      Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER but has no permission for that, but token has SeTakeOwnershipPrivilege
      Trivial Comment fix: Supply a missing word in a comment
      Fix bug #8797 - Samba does not correctly handle DENY ACEs when privileges apply.
      Fix bug #8795 - Samba does not handle the Owner Rights permissions at all
      Make it possible for developers of out-of-tree modules to use the same names as in-tree modules.
      Improve the Makefile. Use a standard make macro, not a shell command.
      Fix the PyDoc comments in samba.smb.SMB and add a security_info argument to both get_acl and set_acl to allow the caller to specify what info is wanted. Defaults to 0 which means all info.
      Add DEBUG statements to show when access has been denied and why.
      Make sure we claim that a DACL or SACL is present if the SD says so
      Add an open and close method to samba.smb.SMB so we can open and close files.
      Fix some of the issues that Jelmer identified in my first patch. This might be
      Improve the VFS Makefile so that it is easier for use out of tree but still works with FreeBSD.
      Add an audit file VFS routine so we can handle auditing with SACLs.
      Fix the overwriting of errno before use in a DEBUG statement and use the return value from store_acl_blob_fsp rather than ignoring it.
      Check the return from create_acl_blob
      Make it possible to build under Solaris make as well as FreeBSD and Linux. Also add comments on changes that might be needed
      Add two flags to allow for handling of Extended Signatures (Session Key Protection) on a TCON_AND_X request and response.
      A small error message fix in source3/smbd/server.c
      smbd_open_one_socket does not use the messaging_context variable so why pass it in?
      Fix bug #9460 - Samba 3.6.x and Master respond incorrectly to FILE_STREAM_INFO requests.
      Improve the configure tests for aio_suspend to get rid of warnings. Timur provided the wscript method, I added the configure.in correction.
      Add a herald with version string to smbtorture
      Fix the maxfids test so that it does not fork lots of processes and so that it works for all cases of maxfids.
      Fix bug #9674 - Samba denies owner Read Control when there is a DENY entry while W2K08 does not.
      Make sure that domain joins work correctly when the DC disallows NTLM auth.
      Correct the name of the nss_winbind module for FreeBSD by creating a symlink
      Call smb_panic when we try to exit the server uncleanly. This gives us the normal traceback and memory dump, but also runs the normal panic action.
      Make sure that we only propogate the INHERITED flag when we are allowed to.
      Add a comment about why we are removing the INHERITED bit so people understand.
      Add a test that shows the difference between Windows and Samba with respect to DeleteOnClose.
      Tests processing an oplock break within a compound SMB2 request.
      Make sure that if an smbd is exiting because of an error we let the user know.
      Revert my accidental commit.
      Fix bug #10097 - MacOSX 10.9 will not follow path-based DFS referrals handed out by Samba.

Ricky Nance (9):
      s4-lib: Remove unused samdb_msg_set_int()
      s4-lib: Remove unused samdb_msg_set_string()
      s4-lib: Remove unused samdb_msg_set_value()
      wscript: Removed executable bit.
      samba-tool domain provision: DNS forwarder default
      Removed phpldapadmin inclusion for Samba 4.
      samba-tool processes: Make the output a bit neater
      s3fs: make the log warning go away
      samba-tool group list: add more info to samba-tool group list

Rishi Srivatsavai (2):
      Register the smb service with mDNS if mSDN is supported.
      Add smbclient support for basic mDNS browsing.

Roel van Meer (2):
      Fix one of the valgrind warnings from bug #6814 - Fixes for problems reported by valgrind
      Fix bug #7448 - smbd crash when sambaLMPassword and sambaNTPassword entries missing from ldap.

Ronnie Sahlberg (24):
      r22958: For SRVSVC/NetFileClose   only Administrator is allowed to close open files.
      r22986: error 2312 is returned when NetSessDel() fails because a matching session (username/clientname)
      r23721: For unions, The TAG and the ARM are aligned independently.
      r24767: add a torture test that performs "ping-pong" that works the same way as
      r24768: redo the pingpong torture using sync functions to make the code simpler
      r24772: add a bitmap that describes 6 of the specific accessmask bits for
      r24774: add 5 specific access mask bits for policy handles created for aliases
      r24775: add 5 specific access right bits for the accessmask that refers
      r24777: add 11 specific access rights  to the access mask for
      r24779: add 11 specific access rights that applies to accessmasks for User
      r25263: add a test to check the accessmasks and ACLs on policy handles returned on the
      r25264: add a test to verify that the ACLs are checked when a normal user connects to SAMR
      r25373: add three more authentication types
      r25374: create an enum for the authentication types instead of defining them as
      r25769: it looks like there are 9 uint32 before the TLV subcontext starts, not 6
      r25770: rename "unknown5" to tlv_size
      r25771: In traces unknown7 has the same pattern as a UNIQUE pointer referral id
      r25772: rename the tail fields
      r25773: update frsrpc.idl and add some more comments
      r25785: more small updates to frsrpc
      Use transaction start/cancel for persistent writes to avoid leaving the database in an inconsistent state if we crash during the operation
      pidl: import a patch to pidl made in the wireshark reporitory.
      add trailer alignment to structures
      New attempt at TDB transaction nesting allow/disallow.

Rusty Russell (424):
      Make tdb transaction lock recursive (samba version)
      tdb: fix locking error
      If the record is at the end of the database, pretending it has length 1
      realloc() has that horrible overloaded free semantic when size is 0:
      tdb: Revert "lib/tdb: if we know pwrite and pread are thread/fork safe tdb_reopen_all() should be a noop"
      tdb: Reimplementation of Metze's "lib/tdb: if we know pwrite and pread are thread/fork safe tdb_reopen_all() should be a noop".
      tdb: don't alter tdb->flags in tdb_reopen_all()
      s4: make install: prevent overwriting failure
      There is one signedness issue in tdb which prevents traverses of TDB records
      lib/tevent: remove spectacularly complicated manual subtraction
      lib/tdb: don't overwrite TDBs with different version numbers.
      lib/tevent: fix race with signals and tevent_common_add_signal
      lib/tevent: handle tevent_common_add_signal on different event contexts.
      lib/tevent: close pipe_fds on event_context destruction
      Tell newbie devs about ./configure.developer
      lib/tevent: a cleaner fix for be4ac227842530d484659f2db683453366326d8b segv
      lib/tdb: TDB_TRACE support (for developers)
      lib/tdb: wean off TDB_ERRCODE.
      lib/tdb: add -t (always use transactions) option to tdbtorture
      lib/tdb: add tdb_check()
      lib/tdb: make tdbtool use tdb_check() for "check" command
      tdb: give a name to the invalid recovery area constant (0)
      tdb: fix recovery reuse after crash
      tdb: cleanup: split brlock and brunlock methods.
      tdb: make _tdb_transaction_cancel static.
      tdb: cleanup: rename GLOBAL_LOCK to OPEN_LOCK.
      tdb: cleanup: rename global_lock to allrecord_lock.
      tdb: cleanup: tdb_nest_lock/tdb_nest_unlock
      tdb: don't suppress the transaction lock because of the allrecord lock.
      tdb: cleanup: tdb_have_extra_locks() helper
      tdb: cleanup: tdb_release_extra_locks() helper
      tdb: cleanup: find_nestlock() helper.
      tdb: use tdb_nest_lock() for transaction lock.
      tdb: use tdb_nest_lock() for open lock.
      tdb: use tdb_nest_lock() for active lock.
      tdb: use tdb_nest_lock() for seqnum lock.
      tdb: remove num_locks
      tdb: cleanup: always grab allrecord lock to infinity.
      tdb: suppress record write locks when allrecord lock is taken.
      tdb: tdb_allrecord_lock/tdb_allrecord_unlock/tdb_allrecord_upgrade
      tdb: cleanup: remove ltype argument from _tdb_transaction_cancel.
      tdb: rename tdb_release_extra_locks() to tdb_release_transaction_locks()
      tdb: remove lock ops
      tdb: don't truncate tdb on recovery
      tdb: add -k option to tdbtorture
      patch tdb-refactor-tdb_lock-and-tdb_lock_nonblock.patch
      tdb: handle processes dying during transaction commit.
      tdb: fix short write logic in tdb_new_database
      Since idtree assigns sequentially, it rarely reaches high numbers.
      tdb: workaround starvation problem in locking entire database.
      tdb: make check more robust against recovery failures.
      tdb: fix tdb_check() on read-only TDBs to actually work.
      tdb: fix tdb_check() on other-endian tdbs.
      tdb: put example hashes into header, so we notice incorrect hash_fn.
      Really enable core dumps in Linux
      tdb: add Bob Jenkins lookup3 hash as helper hash.
      tdb: automatically identify Jenkins hash tdbs
      tdb: TDB_INCOMPATIBLE_HASH, to allow safe changing of default hash.
      tdb: fix non-WAF build, commit 1.2.6 ABI file.
      idtree: fix right shift of signed ints, crash on large ids on AIX
      idtree: fix overflow for v. large ids on allocation and removal
      tdb: tdb_summary() support.
      s3:vfs:gpfs: fix logic when gpfs:winattr is false (the default!)
      tdb: fix transaction recovery area for converted tdbs.
      tdb: tdb_repack() only when it's worthwhile.
      Add -fno-common where supported (WAF only)
      gencache: don't use CLEAR_IF_FIRST as fallback.
      tdb: make sure we skip over recovery area correctly.
      tdb_wrap.h: not a public header.
      async_smb.c: convert cli->timeout properly
      lib/util/time.c: timeval_current_ofs_msec
      lib/util/time.c: timeval_current_ofs_usec
      libcli/cldap/cldap.c: don't hand huge values to tevent_timeval_add usecs
      lib/tevent/tevent.h: minor documentation fix.
      samba3sam.py: don't assume order of ldb results.
      lib/tdb/python/tests/simple.py: don't assume TDB ordering.
      tdb: enable VALGRIND to remove valgrind noise.
      lib: import ccan modules for tdb2
      smb_share_modes: don't use tdb_jenkins_hash.
      source3/lib/util.c: str_checksum to use Jenkins hash from CCAN.
      source3/smdb/files.c: file_name_hash to use Jenkins hash from CCAN.
      lib/tdb_compat: header for tdb1 vs tdb2.
      tdb_compat.h: divert every tdb build and includes to tdb_compat
      tdb_fetch_compat: use instead of tdb_fetch.
      tdb_delete: check returns for 0, not -1.
      tdb_store: check returns for 0, not -1.
      tdb_transaction_commit: check returns for 0, not -1.
      tdb_transaction_cancel: ignore return value.
      tdb_chainlock: check returns for 0, not -1.
      tdb_chainunlock: ignore return value.
      tdb_traverse/tdb_traverse_read: check returns for negative, not -1.
      tdb_unlockall/tdb_unlockall_read: ignore return value.
      tdb_compat: use tdb_firstkey_compat/tdb_nextkey_compat everywhere.
      tdb_compat: use tdb_errorstr_compat()
      ldb: replace 'struct TDB_DATA' with 'TDB_DATA'
      tdb2: #ifdef out TDB_ERR_NOLOCK and TDB_ERR_LOCK_TIMEOUT.
      tdb_validate: TDB2 support for tdb_validate_child and tdb_backup.
      source3/winbindd/idmap_tdb.c: tdb2 support for wrong endian.
      tdb2: tdb_parse_record() returns negative errors, not -1.
      tdb_compat: use tdb_open_compat.
      tdb_compat: Higher level API fixes.
      tdb2: add lib/tdb2 (from CCAN init-1161-g661d41f)
      tdb2: minor changes to SAMBIFY it.
      source3/lib/util_tdb.c: operation timeout support for TDB2.
      tdb2: python wrapper
      tdb2: create tdb2 versions of various testing TDBs.
      tdb2: tie it into build process if --enable-tdb2-breaks-compat
      tdb_compat: respect TDB_NO_FSYNC environment variable for tdb2.
      lib/ccan/tally.h: update for FreeBSD compile.
      ccan: fix configure tests for __builtin_clz etc.
      ccan/tally: don't use SIZE_MAX.
      lib/ccan: add README
      lib/ccan: update to init-1192-gdd04041
      tdb: increment sequence number in tdb_wipe_all().
      tdb2: fix build with --enable-tdb2
      ccan: fix likely redefinition warnings with --enable-tdb2
      MAINTAINERS.txt: ping me about CCAN changes
      tdb2: add full LGPL headers
      ccan: configure check for HAVE_BUILTIN_CHOOSE_EXPR
      tdb2: Fix to always use 64-bit offset definition
      tdb2: fix internal tdb_write_convert() error handling in tdb_open()
      tdb2: fix tdb_lock offset.
      tdb2: cleanup oob handling.
      tdb2: enforce TDB_CONVERT
      tdb2: move transaction lock
      tdb2: Hand error code to logging function.
      tdb_compat: adapt to tdb2 API change.
      tdb2: save open_flags instead of mmap_flags.
      tdb2: return TDB_ERR_RDONLY if trying to start a transaction on a R/O tdb.
      tdb2: add TDB_RDONLY flag, allow setting/unsetting it.
      tdb_compat: make tdb2s temporarily read-only for tdb_traverse_read()
      tdb2: save openhook, allow tdb_get_attribute() on it.
      tdb2: keep link of every non-internal tdb.
      tdb2: tdb_foreach()
      tdb2: make tests include a single mega-header to simplify future patches
      tdb2: import TDB1 code.
      tdb2: include tdb1 source in tests.
      tdb2: test: import tdb1's tests.
      tdb2: Remove unused tdb1 functions.
      tdb2: remove _PUBLIC_ in tdb1 functions.
      tdb2: get rid of TDB1 mark and nonblock functions.
      tdb2: remove TDB1 TDB_NO_FSYNC environment variable hack.
      tdb2: add tdb1 code to build.
      tdb2: rearrange tdb_context layout so tdb1_context can match
      tdb2: make tdb1 headers include tdb2 headers.
      tdb2: make TDB1 code use tdb2's TDB_ERROR and tdb_logerr()
      tdb2: Make tdb1 share tdb_store flags, struct tdb_data and TDB_MAGIC_FOOD.
      tdb2: approximate INCOMPATIBLE_HASH flag with tdb1_incompatible_hash()
      tdb2: Make TDB1 code use TDB2's open flags.
      tdb2: add TDB_VERSION1 flag.
      tdb2: Make tdb1 use the tdb_file structure.
      tdb2: make tdb1 use same low-level lock functions.
      tdb2: suppress tdb1 backend logging when locking returns EINTR or EAGAIN
      tdb2: don't cancel transactions on lock failures in tdb1 backend.
      tdb2: Make TDB1 use the same tdb_hash() wrapper as TDB2
      tdb2: use tdb->flags & TDB_RDONLY instead of tdb->read_only for TDB1 code.
      tdb2: merge tdb1_context into tdb_context.
      tdb2: remove double-open detection for TDB1 databases.
      tdb2: make jenkins_hash function non-static, rename to tdb_jenkins_hash.
      tdb2: make tdb1_open use attributes for logging, hash function.
      tdb2: add TDB_ATTRIBUTE_TDB1_HASHSIZE
      tdb2: disallow SEED attribute with TDB_VERSION1.
      tdb2: unify tdb1_open into tdb_open
      tdb2: unify tdb1_store into tdb_store
      tdb2: unify tdb1_fetch into tdb_fetch
      tdb2: unify tdb1_append into tdb_append
      tdb2: unify tdb1_delete into tdb_delete.
      tdb2: unify tdb1_store into tdb_store
      tdb2: unify tdb1_traverse into tdb_traverse
      tdb2: unify tdb1_chainlock et al. into tdb_chainlock
      tdb2: unify tdb1_parse_record into tdb_parse_record
      tdb2: unify tdb1_transaction_start etc. into tdb_transaction_start.
      tdb2: unify tdb1_check and tdb1_summary into tdb_check and tdb_summary.
      tdb2: unify tdb1_firstkey/tdb1_nextkey into tdb_firstkey/tdb_nextkey.
      tdb2: unify tdb1_get_seqnum/tdb1_increment_seqnum into tdb_get_seqnum/tdb_inc_seqnum
      tdb2: unify tdb1_wipe into tdb_wipe.
      tdb2: tdb_repack
      tdb2: make tdb1_null static.
      tdb2: expose and document tdb1_incompatible_hash.
      tdb2: add tdb_attribute_tdb1_max_dead
      tdb2: catch errors in tdb1_needs_recovery()
      tdb2: log an error when calling tdb_store() on read-only TDB in tdb1 backend.
      tdb2: increment seqnum on tdb_wipe_all in tdb1 backend.
      tdb2: add stats to tdb1 backend.
      tdb2: return TDB_ERR_RDONLY from transactions on R/O databases, log nesting
      tdb2: check lock owner in tdb1 backend.
      tdb2: fix bogus error from tdb_unlockall() after fork in tdb1 backend.
      tdb2: log allocation failures in tdb1 backend.
      tdb2: test: try (almost) all tests with TDB_VERSION1 flag.
      tdb2: don't continue if tdb1_find fails.
      tdb2: test: fix run-57-die-during-transaction.c to be more efficient.
      tdb2: test: convert (non-invasive) run tests to api tests.
      tdb2: speed up testing.
      tdb2: test: Speed up run-01-new_database.
      tdb2: delete old tdb1 tests.
      tdb2: enhance tdb1 porting document.
      tdb2: don't return -1 (ie. TDB_ERR_CORRUPT) on transaction write fail.
      tdb2: fix error handling for tdb1_transaction_commit.
      tdb2: make tests work in parallel.
      tdb2: set tdb_error() on tdb_transaction_prepare_commit.
      tdb2: add error conversion functions.
      tdb2: fix return handling in pytdb wrapper.
      tdb2: fix prototypes which return enum TDB_ERROR.
      dbwrap_tdb: handle tdb2 return values properly.
      util_tdb: return -1/0 from lock_with_timeout functions.
      tdb_compat: support tdb_reopen/tdb_reopen_all for TDB2
      tdb_compat: change offset of CLEAR_IF_FIRST lock.
      tdb2: remove bogus leftover .orig file.
      tdb2: allow readonly changes even while holding locks.
      tdb_compat: handle TDB_INCOMPATIBLE_HASH flag.
      tdb_compat: handle TDB_VOLATILE flag.
      tdb_compat: honour hashsize arg when using tdb2 with TDB_VERSION1 flag.
      tdb_compat: add "TDB_COMPAT_USE_TDB2" environment variable
      tdb2: change --enable-tdb2-breaks-compat to --enable-tdb2
      config.h: define HAVE_LIBREPLACE
      tdb2: use HAVE_LIBREPLACE instead of _SAMBA_BUILD_.
      tdb2: don't be fascist when TDB_VERSION1 is specified.
      lib/ccan/array_size: relicense under public domain.
      lib/ccan/htable: fix tools/speed.
      lib/ccan/typesafe_cb: fix example macro ordering in typesafe_cb_preargs documentation.
      lib/ccan/str: relicense to public domain.
      lib/ccan/str: fix warnings.
      lib/ccan/htable, strset: benchmarking tools.
      lib/ccan/htable: start empty.
      lib/ccan/htable: clean up interface, document htable_type better.
      lib/ccan/htable: HTABLE_INITIALIZER() for static initialization.
      lib/ccan/likely: use htable_type
      lib/ccan/htable: benchmark against hsearch(3)
      lib/ccan/asearch: fix example on 64 bit platforms.
      lib/ccan/compiler, ilog: IDEMPOTENT "idempotent does not mean what you think it means"
      lib/ccan/cast: fix warnings with -Wextra (specifically -Wmissing-field-initializers)
      tdb2: fix intermittant failure in run-50-multiple-freelists-fail.c
      tdb2: consolidate testing failtest suppression routines.
      tdb2: failtest: use a linked list for history, not an array.
      tdb2: simplify failtest helper.
      tdb2: suppress failtest more than once on mmap.
      tdb2: add an internal TDB_CANT_CHECK flag.
      tdb2: provide tdb_layout_write() rather than implying it by new_tdb_layout arg.
      tdb2: add a capability list from the header.
      tdb2: display capability information in tdb_summary()
      tdb2: tlist: remove type arg from tlist_top(), tlist_tail()
      tdb2: don't use TDB2 versions of test tdb files.
      lib/ccan: fix m4 tests for builtin_expect and compound literals.
      patch tdb-oob-fix.patch
      tdb: be more careful on 4G files.
      tdb: use same expansion factor logic when expanding for new recovery area.
      tdb: don't free old recovery area when expanding if already at EOF.
      tdb2: careful on wrap.
      tdb2: copy tdb1's changed expansion logic.
      ldb_wrap.c: fix TDB2-incompatible API usage.
      tdb_compat: only use hashsize attribute when O_CREAT
      samdb: use compat wrappers for tdb_fetch().
      tdb2: tools/tdb2backup
      tdb2: name tools the same as TDB1 tools.
      tdb2:tdbtorture: use TEST_DATA_PREFIX for files
      tdb2: add -1 and -2 options to tdbtorture
      tdb2: make --enable-tdb2 the default.
      tdb2: add --disable-tdb2
      tdb: make tdb_private.h idempotent.
      tdb: import unit tests from CCAN into tdb/test/
      tdb: wean CCAN-style unit tests off of tap.
      tdb/test: fix up tests for use in SAMBA tdb code.
      tdb: build and run unit tests in tdb/test/
      lib/ccan: define HAVE_CCAN.
      lib/tdb2: tools should use config.h, and replace where available.
      lib/tdb2: rename tdb2.pc to tdb.pc
      dbwrap_ctdb: handle read-only records.
      ctdbd_conn: fetch read-only copies of records.
      dbwrap_ctdb: only fetch a read-only copy if we had a record already.
      lib/ccan: import failtest and required ccan modules for TDB2 unit tests.
      lib/tdb2: adapt unit tests to SAMBA environment.
      lib/tdb2: wire up unit tests.
      lib/tdb2: add --valgrind, --valgrind-log options.
      failtest: don't assume FD_SETSIZE is maximum runtime fd.
      lib/tdb: fix tests for standalone out-of-tree.
      lib/tdb2: Add gcc-style format attribute to tdb_logerr.
      lib/tdb2: fix error string formatting.
      lib/tdb2: make summary handle capabilities properly.
      lib/tdb2: remove unneccessary _FILE_OFFSET_BITS define in test/.
      lib/tdb: remove unnecessary XOPEN and FILE_OFFSET_BITS defines in test/
      lib/tdb: fix up run-die-during-transaction test cases on Solaris.
      lib/ccan: namespacize ccan/list to avoid conflict with OpenIndiana's sys/list.h
      lib/ccan/failtest: compile fix for OpenBSD
      lib/replace: test for incoherent mmap.
      lib/tdb: fix OpenBSD incoherent mmap.
      lib/tdb2: fix OpenBSD incoherent mmap (tdb1 version)
      lib/tdb2: fix OpenBSD incoherent mmap (tdb2 version)
      lib/tdb2: fix -Wshadow warnings.
      lib/tdb2: fix -Wcast-qual warnings.
      lib/tdb: fix missing return 0 code.
      lib/tdb: fix test/run-die-during-transaction when HAVE_INCOHERENT_MMAP.
      lib/tdb: fix transaction issue for HAVE_INCOHERENT_MMAP.
      tdb2: fix prototype in tdb1 code.
      cast: test/compile_fail-cast_static.c should fail without COMPOUND_LITERALS.
      cast: make sure suncc sees a constant.
      lib/tdb2: build tests when built at toplevel.
      samba_util: mark smb_panic as _NORETURN_.
      ccan: import err module.from ccan revision 5add556a1cb64b49a664506aa76216d885b22c97
      ccan: make failtest use ccan/err.
      tdb2: use ccan/err instead of err.h
      ccan: check for err.h ourselves
      TDB2: make SAMBA use tdb1 again for the moment.
      TDB2: remove TDB1 compatibility.
      TDB2: more internal cleanups after TDB1 compatibility removal.
      TDB2: Goodbye TDB2, Hello NTDB.
      ntdb: remove ntdb_error()
      ntdb: catch any valgrind errors in test
      ntdb: catch any valgrind errors in test
      ntdb: reduce race between creating file and getting open lock.
      ntdb: print \n at end of log messages in tests.
      ntdb: make fork test more thorough.
      ccan: remove bogus debug print.
      ntdb: use NTDB_LOG_WARNING level for failed open() without O_CREAT.
      ntdb: enhance external-helper test code.
      ntdb: fix recovery data write.
      ntdb: make sure file is always a multiple of PAGESIZE (now NTDB_PGSIZE)
      ntdb: create initial database to be multiple of NTDB_PGSIZE.
      ntdb: remove last block transactoin logic.
      ntdb: reduce transaction pagesize from 64k to 16k.
      ntdb: simply disallow NULL names.
      ntdb: still prepare recovery area with NTDB_NOSYNC.
      ntdb: allocator attribute.
      ntdb: inline oob check
      ntdb: special accessor functions for read/write of an offset.
      ntdb: remove hash table trees.
      ntdb: add NTDB_ATTRIBUTE_HASHSIZE
      ntdb: reduce default hashsize on ntdbtorture.
      ntdb: add -h arg to ntdbrestore
      ntdb: optimize ntdb_fetch.
      ntdb: update documentation.
      lib/util_tdb: depend directly on tdb, not tdb_compat.
      lib/dbwrap: depend directly on tdb, not tdb_compat.
      ldb: use tdb directly, not tdb_compat.
      lib/tdb_wrap: use tdb directly, not tdb_compat.
      libcli: use tdb directly, not tdb_compat.
      ntdb: put it back into the build.
      ntdb: add autoconf support.
      ntdb: fix occasional abort in testing.
      ntdb: respect TDB_NO_FSYNC flag for 'make test'
      autobuild: always set TDB_NO_FSYNC.
      ntdb: hand correct error code when alloc_read allocation fails.
      ntdb: don't munmap the database on every close.
      ntdb: enhancement to allow direct access to the ntdb map during expansion.
      ntdb: allow direct access for NTDB_INTERNAL dbs during expansion.
      ntdb: make database read-only during ntdb_parse() callback.
      ntdb: test arbitrary operations during ntdb_parse_record().
      ntdb: take advantage of direct access across expand.
      util: util_ntdb.c
      util: ntdb_new() supports NTDB_CLEAR_IF_FIRST.
      util: util_ntdb.c gains bystring functions.
      util: util_ntdb.c gets NTDB_ERROR => NTSTATUS map.
      util: util_ntdb ntdb_fetch_int32/ntdb_store_int32 and ntdb_add_int32_atomic
      util_tdb: move timeout chainlock variants from source3/lib/util/util_tdb.c
      dbwrap: remove get_flags().
      dbwrap: dbwrap_local_open()
      dbwrap: add dbwrap_check() function.
      dbwrap: dbwrap_fetch_locked_timeout().
      dbwrap: dbwrap_transaction_start_nonblock().
      dbwrap: dbwrap_name().
      dbwrap: dbwrap_hash_size().
      tdb: make TDB_NOSYNC merely disable sync.
      tdb: don't use err.h in tests.
      tdb: finish weaning off err.h.
      source4/smbd/pidfile: don't panic if pid file is corrupt.
      ccan: we're subsystems, not a library.
      ccan: make it a grouping library.
      ntdb: make --disable-ntdb work properly.
      talloc: use a struct for pool headers.
      talloc: don't allow a talloc_pool inside a talloc_pool.
      talloc_stack: handle more than one talloc_stackframe_pool()
      talloc_stack: always include the location when creating a talloc_stackframe().
      talloc_stack: report lazy freeing (panic if DEVELOPER).
      smbpasswd: always free frame.
      source3/client/client.c: fix stackframe leak.
      nt_printing_tdb_migrate(): fix stackframe leak.
      source3/winbindd/winbindd_util.c: fix stackframe leak
      lib/util/modules.c: fix stackframe leak.
      source3/modules/vfs_xattr_tdb.c: fix stackframe leak
      source3/rpc_server/svcctl/srv_svcctl_reg.c: fix stackframe leak
      source3/winbindd/idmap_tdb_common.c: fix stackframe leak
      source3/registry/reg_backend_db.c: fix stackframe leak
      source3/lib/smbconf/testsuite.c: fix stackframe leak
      source3/winbindd/winbindd_pam.c: fix stackframe leak
      source3/utils/net_conf.c: fix stackframe leak
      loadparm: make the source3/ lp_ functions take an explicit TALLOC_CTX *.
      talloc_stack: abort in developer me if no stackframe on talloc_tos()
      source3/torture/pdbtest: allocate talloc_stackframe()
      source3/passdb/py_passdb.c: don't steal from talloc_stackframe().
      source3/passdb/py_passdb.c: wrap all calls in talloc_stackframe()
      source3/netapi: fix only caller which doesn't set up a talloc_stackframe()
      source4/torture: add talloc_stackframe()
      loadparm: Add ctx member to struct loadparm_global.
      source3/loadparm: make struct loadparm_service a talloc object.
      source3/smbd/conn.c: wean off string_set/string_free
      source3/loadparm.c: Move string_set/string_free inside.
      tdb: add tdb_rescue()
      tdb: tdbdump should log errors, and fail in that case.
      tdb: add -e option to tdbdump (and docment it).
      tdb: Make robust against shrinking tdbs
      ntdb: remove unused local variable.
      ccan: check for all the used config.h defines
      ntdb: fix database corruption when transaction doesn't change anything.
      dbwrap: dbwrap_ntdb.c
      source3: explicitly disable NTDB support.
      dbwrap_local_open: open NTDB if extension is .ntdb
      dbwrap_local_open: never open the .tdb if there is an .ntdb
      tdb_wrap: prevent tdbs called ".ntdb" or without extensions.
      param: 'use ntdb' flag (off by default).
      ntdb: switch between secrets.tdb and secrets.ntdb depending on 'use ntdb'
      vfs_btrfs: fix compile on 32-bit platforms.
      ntdb: don't call open hook when re-opening an existing database.
      Revert "vfs_btrfs: fix compile on 32-bit platforms."
      ccan: fix HAVE_BSWAP_64 for autoconf.
      autoconf: build in NTDB.
      source4/scripting/python/samba/samba3: handle ntdb files.
      lib/param: lpcfg_private_db_path()
      secrets: use lpcfg_private_db_path() convenience helper.
      libcli/auth: convert to dbwrap.
      schannel_store.tdb: make it schannel_store.ntdb if 'use ntdb'.
      Samba3-HOWTO: mention NTDB.
      source4/cluster and source4/ntvfs: convert to dbwrap, add ntdb option.
      ntdb: remove --disable-ntdb.
      tdb: fix logging of offets and lengths.
      Man pages for ntdb tools missing

S Hargagan (1):
      Fix bug #9085 - NMB registration for a duplicate workstation fails with registration refuse

SASAJIMA Toshihiro (1):
      Fix bug #7034 - vfs_cap causes signal 11 (SIGSEGV)

SATOH Fumiyasu (9):
      Fix bug #5688 LPQ process is orphaned if socket address parameter is invalid
      winbindd: vars for signals must be volatile sig_atomic_t
      nss_winbind: Solaris 64-bit fix and...
      commit b520befe6f51644d20434add9864d7a2fa30aa2e
      Fix bug #6496 - MS-DFS: cannot follow multibyte char link name.
      Fix bug 6572 - libsmbclient: unable to access 'msdfs proxy' share.
      vfs_netatalk: Segfault if hide files or veto files has no ".AppleDouble"
      s3: Fix the build of vfs_aixacl2.c
      s3-docs: Prepend '/' to filename argument (Bug #8826)

Salvador I. Gonzalez (3):
      Fix smbclient/tarmode panic on connecting to Windows 2000 clients.
      s3-selftest: Fix copy/paste error in test usage string
      s3-selftest: Add smbclient tarmode test

Sam Lang (2):
      Implements a vfs module for cephfs, a distributed file system
      source4/libcli: Only set ctemp set on success

Sam Liddicott (9):
      Make sure dom_sid.h is installed.
      Let ntvfs request transport close via ntvfs_request state
      vfs_cifs - Use ntvfs request transport close to close downstream session
      Add async support for reply_tcon* and ntvfs_connect
      s4:smb_server: initialy read the first 4 bytes only
      Have ntvfs_connect() accept union smb_tcon *tcon instead of char* sharename
      s4: smbcli_transport_send hit the socket right away if possible
      Upgrade ntvfs_map_*info to ntvfs_map_async_setup/ntvfs_map_async_finish
      s4:client

Samba Release Account (462):
      Initial version imported to CVS
      This commit was generated by cvs2svn to compensate for changes in r2,
      This commit was generated by cvs2svn to compensate for changes in r4,
      Initial version imported to CVS
      added issafe() define for "safe" characters
      upped version number
      fixed a typo in the select() emulation code
      added sequent fixes
      Changed to reflect new ownership by Microsoft
      added some more support entries from samba-bugs mail
      added QNX entry to MIRRORS
      Updated smbstat script with a better one, Paul.
      Updated references in doco to 'http://lake.can.....'
      Update the samba.faq file with what was current on the web site, there
      Made   chang
      Changed more references of 'nimbus.anu.edu.au/pub/tridge/samba' to
      Added check for something already binding to port 139 to TEST 3
      Updated general section to include more about current capabilities. Added
      Added reference to DIAGNOSIS.txt. Deleted the claim that tridge reads all
      General updating.
      added nimbus to list of mirrors
      preparing for release of 1.9.16alpha2
      preparing for release of 1.9.16alpha3
      remove cvs.log from cvs, instead use the release script to copy it to
      added this ages ago, but forgot to put it in cvs
      preparing for release of 1.9.16alpha4
      updated the entry for Phillip Hands
      preparing for release of 1.9.16alpha5
      preparing for release of 1.9.16alpha6
      preparing for release of 1.9.16alpha7
      preparing for release of 1.9.16alpha8
      preparing for release of 1.9.16alpha9
      preparing for release of 1.9.16alpha10
      Added source filename to give crude index
      - deleted reduntant blank line at end of file (JHT)
      Basic doc changes to keep up to date.
      luke's first attempt at using cvs
      added local and remote interfaces (didn't get done in first attempt)
      first draft of low-level design documents describing the operation of
      updated the NetBIOS code due to some bugs found by writing the first draft
      patch to fix NetServerEnum with multiple workgroup lists kindly supplied.
      updated low-level design documentation on nmbd. first draft of namework.doc
      as a result of the writing of namework.doc, namework.c has been tidied up,
      Started uninstall in Makefile
      modified become_master() to a state-based system. becoming a master
      namebrowse.c was using variable work uninitialised.
      Changed install scripts so they don't have hardcoded values
      Added uninstallation from Makefile, either in parts or total uninstall
      tidied up: code shuffling and documentation.
      added the recently shuffled and updated source files missed in the
      sorted out various timer delay bugs: nameannounce.c nameserv.c
      missed nmbd.c in previous update.
      updated docs to match code mods from last two or three updates. done
      Modified demo smb.conf to not have /tmp writeable by everyone by default.
      lots of changes to nmbd
      preparing for release of 1.9.16alpha11
      NeXT needs #define pid_t int in includes.h
      preparing for release of 1.9.16alpha12
      CVS:
      Sorry for last empty message.  Updated file to say that domain logons
      Some examples for printer accounting that I use with samba.  lp-acct is
      Lots of updating.
      preparing for release of 1.9.16alpha13
      local_only NetServerEnum syncs can now be issued.
      updated doc files to include a GPL header, with revision history in it.
      preparing for release of 1.9.16alpha15
      Tiny bug in doco reported to samba-bugs
      jht spotted error in Domain announcements: the comment was being displayed
      updating documentation to reflect code a little bit.
      updated comments in announce_server() to indicate that future work needs
      preparing for release of 1.9.16alpha14
      preparing for release of 1.9.16alpha16
      applying login updates from jim at oxfordcc.co.uk, sent in by
      preparing for release of 1.9.16alpha17
      JHT ==> Added a GOTCHAS.txt file	16/8/96
      preparing for release of 1.9.16alpha18
      changed the text a bit in Support.txt so that its clear that these
      - started on support for 'Internet Group names' - type 0x1c NetBIOS names
      - updated load_netbios_names() to cope with new wins.dat format
      - removed reference to my_workgroup() accidentally put back in nameserv.c
      - fixed wins.dat reloading (it wasn't happening!)
      preparing for release of 1.9.16alpha19
      i wondered why there was a cvs clash on namedbname.c
      preparing for release of 1.9.16alpha20
      preparing for release of 1.9.16alpha21
      preparing for release of 1.9.16alpha22
      preparing for release of 1.9.16alpha23
      preparing for release of 1.9.16alpha24
      JHT ==> Upgraded Samba to Windows NT Server version 4.1
      preparing for release of 1.9.16alpha25
      preparing for release of 1.9.16alpha26
      Updated Aquasoft Entry.
      Added descriptions of Windows NT Domain Control.
      Updated attribution list.
      preparing for release of 1.9.16
      preparing for release of 1.9.16p1
      - fixed bugs in nmb response packet checking.
      Doc updates
      fixed dircahe bug
      removed all of lukes recent changes. I need to do a p2 release but
      Updated to add the Windows NT password mechanism explaination.
      Edited doc directory to remove anything that pointed to Karl Auer, since he
      Tyop.
      Dan
      Added a version of tridge's comments on numbering to the faq.
      preparing for release of 1.9.16p3
      preparing for release of 1.9.16p4
      preparing for release of 1.9.16p5
      preparing for release of 1.9.16p6
      netbios registration and release response packets were being junked. a
      preparing for release of 1.9.16p7
      the response packets are being received (fix to process_nmb() worked)
      Did some editing, got frustrated, started converting to linuxdoc-sgml
      code was added to stop samba from replying to queries for its own names (?! :-)
      wrong answer response resource record type expected, so the response packet
      preparing for release of 1.9.16p8
      Jeremy <jra at cygnus.com>
      preparing for release of 1.9.16p9
      dealing with name queries and dns lookups etc.
      Added faq directory under docs. Translated the whole of the current
      debugged dns lookup / netbios name query code from yesterday.
      debugging the dns lookup changes
      Changed definitions of prototypes to take uint16 vuid's not
      Core of the changes for returning smb_uid's. smb_uid's are now
      Changed prototypes for accesses into validated_users structure.
      Modified all references to uid to vuid.
      Modified all references to smb_uid to be vuid's.
      Added definitions for vuid offset and invalid user smb_uid.
      Changed become_user to take a vuid as second arg.
      severe debugging session for nmbd. in fact, i'm surprised that browsing
      removed getdomainname() stuff and appending a '.' to the name in
      allowed packets coming in from 'unexpected' subnets.
      nmblookup was looking for 0x1b (domain master browser) not 0x1d (local
      queries for 0x1b names were resulting in dns lookups. not good.
      increased debug levels for name dump to same as that for workgroup dump
      Set num_validated_users to zero if Realloc fails.
      updated tectronic's entry to include the new contact name, and info about
      Added Volkers fix for bundary condition. Needed as word
      Added in veto files parameter create by Whistle.
      Added in changes for FreeBsd.
      Added in veto files parameter created by Whistle.
      Moved fcntl locking code into util.c to allow it to be
      Added in missing return statement.
      Added -f option for lock file.
      Added veto calls.
      Fixed quota support for FreeBsd.
      Added -f lockfile support.
      Fixed for FreeBsd.
      Added Whistle veto file functions. Moved fcntl locking from
      updated an entry for canberra.
      added Adital corp to Support.txt
      JHT ==> Added extensions for PAM (Pluggable Authentication Module) support
      JHT =>	Modified for RedHat Linux for DEC Alpha platform includes.
      spec files needed for redhat rpm building
      JHT ==>	Added just for RedHat support so I have a working copy of the RPM
      Added new entry.
      Added patches from Paul Eggert.
      JHT ==> Fixed typo in DOMAIN_CONTROL.txt, added Application_Serving.txt
      JHT ==> Updated files in preparation for release of Samba-1.9.16p10
      JHT ==> Ditto
      Makefile: Changes to split Solaris into Solaris2.3 and previous, and 2.4 and after from Paul Eggert.
      JHT ==> Added for those who like to roll their own!
      Added an extra parameter for unix_convert. If present this is the
      locking.c proto.h shmem.c smb.h status.c :
      Added fix for file descriptor re-use failing when
      JHT ==> Updated and commented RedHat Linux smb.conf file.
      Fixed proto problem with lp_veto_files().
      Fixed issue with null ypdomainname being used.
      JHT ===> Prepared now for release of Samba-1.9.16p10 RedHat RPMS
      JHT ===> Prepared now for release of samba-1.9.16p10 RedHat RPMS
      JHT ===> Guys, please check this out before release of 1.9.16p10
      line 1960 - call to atexit - address of higher order function killkids
      util.c: StrCaseCmp and StrnCaseCmp terminated incorrectly, giving false
      Fixed bug with NT and large directories.
      Fixed const definitions for StrCaseXXX calls.
      Fixed up problems with CDROM filesystems (return EROFS) and
      Fixed my stupid typo in earlier fix.
      JHT ===> Fixed potential PAM Security hole and second chance syndrome
      JHT ===> Beggining of fixes to RedHat config stuff - more to come!!
      JHT ===> **** WARNING **** Only updated version to 1.9.16p11
      JHT ===> Getting ready for relase of 1.9.16p11 RedHat RPMS
      JHT ===> Oops. Forgot about that renaming.
      JHT ===> Oops again. Too quick - try again.
      JHT ===> Added os level and activated max log size in standard smb.conf file.
      Fixed incorrect offset into array.
      updated preferred master parameter and added domain master parameter.
      updated this document.  now, when we get browsing questions, we can say,
      first draft of NetBIOS.txt - WINS server and Broadcast NetBIOS name
      JHT ===> William Yost patches integrated to fix leading path on 8.3
      Removed YOST code. Removal of leading ./ chars should
      Added trim_string(s, "./", 0) to unix_clean_name to remove
      Replaced YOST code with more functionally equivalent code that
      JHT ===> Updated RedHat RPM Makefile - not really used except to generate
      Fixed bugs in my YOST replacement code. Doing a trim_string
      Fixed inclusion of crypt.h bug when libdes is being used on Solaris
      JHT ===> Trying to enable RPM build from non-root area.
      JHT ===> Hack, Hack, Hack. I just wanna get this spec file stuff right
      JHT ===> Still mucking around with RPM building for RedHat Linux
      Fixed problem with renaming folder on top level share.
      JHT ===> Updated SV_TYPE defines in smb.h (added WIN95 entry)
      JHT ===> Updated default RedHat smb.conf file
      Makefile: Added cleandir target.
      Added documentation for directory mode/directory mask parameter.
      JHT ===> Set to 1.9.16p12alpha until someone thinks it's Beta prime time.
      Split maxxmit parameter into two : max_send (auto configured by the
      added debug_nmb_packet() call.
      added reference on CONFIG.POL being loaded from the root of the [netlogon]
      added warning to admin people about [nelogon] share must be read-only,
      added logon script and logon path parameters.
      Fixed typos.
      Added fix (lost contributor, sorry) for more than 10 parameters.
      Fix fro signed/unsigned problem with TIME_T_MIN from Anatoly V. Grabar
      quotas.c: Fixed typo in #ifdef'ed compile.
      Added better debug for what kind of netbios packet we got.
      preferred master option will force an election every 5 minutes if the
      1) updated ipc.c NetUserGetInfo - load \\%L\%U instead of \\%L\HOMES
      updating documentation on:
      added reference to thursby under section 3.1
      missed some bits.  added some more on profiles - e.g windows 95 description
      added code that checks whether the DOMAIN<1b> name is claimed on the
      added jeremy's patch to return Node Status info type in a Node Status
      updated the entry on the MAC, because thursby do DAVE.
      JHT ===> Moved MAJOR_VERSION and MINOR_VERSION defines to smb.h
      JHT ===> Blasted typos. BROWSER_ELECT_VERSION in smb.h should have been
      bug: when checking whether there is a PDC already on the current local
      become_domain_master(), become_local_master() and become_logon_server()
      compile errors. oops.
      finally!  doing a strequal() == 0 instead of just strequal().  too used to
      Removed 'Richard Bullington' from support doc at his request... he loves the product, but can't afford the time.
      Removed old info on Mac support and Samba, left lukes addition, added more info on Netatalk and CAP
      name_type for name_query with smbclient -M name should be used.  that way,
      Large changes from jra at cygnus.com. Mainly browser updates.
      jra at cygnus.com: Changed CHECK_TIME_MST_ANNOUNCE back to 15 from 1 (from test).
      removed reference to subnet_record and work_record, as neither are needed.
      two bugs jeremy and i found while at sgi.
      expiry of browser entries wasn't happening once the entry had synced.
      name_unregister_work() using strequal incorrectly.
      added automount home directory support.  contributed by simeon at bangor.co.uk
      added auto.home parameters - contributed by simeon at bangor.ac.uk.
      mod to directory mask doc
      'The mother of all checkins' :-). Jeremy Allison (jallison at whistle.com)
      Fixes for manpage from Bill Hawes <whawes at star.net>.
      Documented -b for brief option.
      status.c: Added brief option. Patch from ccctim at mailbox.ucdavis.edu
      use NULL instead of 0
      namedbname.c: Fixed *nasty* bug that caused nmbd to spin and eat memory
      dir.c:	Fixed double slash issue.
      Updated for 1.9.17alpha1.
      Added fix from Paul Nelson @ Thursby - smb_mid field could be
      Updated docs for 'local master' parameter.
      Added code to make nmbd always lose elections if 'local master'
      Makefile: Turned on FAST_SHARE_MODES by default for a bunch of machines.
      Updated for new 1.9.17alpha1 release.
      samba.faq: Updated with info on 'Dave'.
      Removed use of 'domain controller' parameter for browsing system
      README: Updated for 1.9.17. Andrew no longer listed as primary maintainer.
      coding standards issue: should never compare a boolean expression == False
      added veto files entry.  example lists files that DAVE (mac client)
      loadparm.c:	Ensure printer services cannot be read only and don't use share mode locking.
      Added
      charcnv.c:	Fixed silly bugs detected on IRIX.
      namedbname.c:	Added 'S' or 'R' flags to wins.dat to aid debugging. Forced all type 1e
      namepacket.c:		Block SIGTERM correctly - we can only take them at defined points.
      Updated changes made in text faq to sgml faq, more to come.
      Updated sgml and html FAQ.
      Updated txt faq.  Paul HMM. emacs... how do i quit...
      Updated txt faq again.
      nameannounce.c:		Made sure recurse flag set correctly.
      namedbname.c:	Fixed problem with remove_name code that could cause core dump.
      includes.h:	Added USE_SETSID for SGI.
      loadparm.c:	Made explicit max packet now ignored.
      Updated for 1.9.17alpha3
      FAQ Update
      Patch from Albrecht Gebhardt Albrecht Gebhardt - fixes domain
      Makefile:	Added quoata changes for Linux from Thorvald Natvig
      Added "client code page" parameter.
      added an entry for samba support (hey, jeremy - i did it!).  it reads
      charset.c:	Dropped debug message to level 6.
      Updated Support.txt - first responses to appeal for support providers.
      Updated with latest appeal - we *have* to sort this into geographical areas
      Fixed *really* stupid bug in register_vuid - only a problem
      More consultants....
      added bit about going anywhere, on the 'CAMBRIDGE - ENGLAND' line, so
      More consultants - we really need to alphabetize now :-).
      More....
      loadparm.c:	Added "force create mode" and "force directory mode" params.
      smb.conf.5:	Updated definitions of mode setting options. Added force
      Sorted list by region (finally).
      6 more....
      More consultants.
      shmem.c:	Changed debug to higher level
      2 more....
      Missed one.
      More...
      client.c:		New print queue query code from Jeff C. Foster " <jfoste at wgc.woodward.com>
      namedbsubnet.c: Added code for returning restricted lists of servers.
      added "hide files" option.
      made "hide files" and "veto files" into per-service parameter sections,
      Rolled back Lukes changes. Not quite ready for prime time.
      Fixed typos. 3 more consultants.
      Fixed compile warnings for FreeBsd & Linux.
      Fixed wierd bug with lowercase accented character directories.
      Fixes for UnixWare 2.x with shadow passwords from
      Changed default for max mux to 50 in line with source change.
      Updated in preparation for 1.9.17alpha4 release.
      Fix for deleting directories that contain only veto files.
      preparing for release of 1.9.17alpha4
      Makefile:	Added DGUX changes for intel.
      preparing for release of 1.9.17alpha4
      One more consultant. Jeremy (jallison at whistle.com)
      replaced the "wins proxy" to treat NetBIOS names as DNS names with new
      added description of new "dns proxy" option, which defaults to yes.
      added man page entry for "hide files".  updated "veto files" entry.
      added, tested and debugged new "hide files" option.
      missed one OpenDir() and two is_vetoed_name() calls, both of which take
      More consultants.
      Added explicit examples for veto files.
      Makefile:	Added AIX targets from Ole Holm Nielsen <Ole.H.Nielsen at uni-c.dk>
      Wrote man page for smbpasswd program as part of documentation
      Added -a option (for Andrew:-). Fixed bug where users with
      interface.c:	Fix for AIX4.x finding interfaces.
      trans2 query file/path info - unix change times being reported as dos create
      updating documentation a bit.  claiming NetBIOS.txt, adding copyright message.
      made header consistent with other headers (Contributor: Status: etc)
      added pretty printing of data section to show_msg(), for debug log level 10.
      counter loop % usage only worked if counters were an exact multiple of
      CIFS definitions for SMB_INFO_xxx etc.
      local.h:	Removed ununsed SHARE_MODES_XXX defines. Upped SMBD_RELOAD_CHECK
      Changed separators for veto & hide files back to /.
      Fix silly crash bug in FAST_SHARE_MODES (same bug as was in
      Makefile: Added krb5 option from Nathan Neulinger  <nneul at umr.edu>
      charset.c:	Split charset_initialise() into 2 - a charset_initialise() and
      Support.txt: Modified a consultant's entry (Italy)
      Fixed bug with -add code that put wrong password in nt md4 field.
      Added Australian consultant - removed Richard Sharpe duplicate.
      Added Canadian consultant.
      Removed lp_killunused() call from server main loop. This
      charset.c:	Fixed signed/unsigned issues.
      Makefile:	Added UNIXWARE 2.x with shadow passwords from fja at extratech.com
      Changed default create mask parameter to 0744 as per John's request.
      Added consultant.
      patch by glenn burkhardt to allow recursive excluding of directories.
      removed definition of strslashcmp - now a static in clitar.c.
      nameserv.c: split add_domain_names() into three functions:
      loadparm.c:	Changed default create mask to 755 to support MAP_ARCHIVE.
      Re-added shm stuff - keeps getting lost.
      client.c:	Added amanda fixes.
      Added one more consultant. Jeremy.
      Missed removing some redundent code.
      Minor text mods, mostly checking that CVS still works
      client.c:	Minor change to cast parameters for DEC unix.
      Made docs more up to date with source. Preparing for 1.9.17alpha5.
      loadparm.c:	Added new netbios aliases parameter (code from Cisco)
      smb.conf.5: Added netbios aliases entry.
      Updated for 1.9.17alpha5 release.
      Removed for 1.9.17alpha5 release.
      4 more consultants.
      Makefile: Added IRIX 6 target.
      updated smbpasswd to take the password on the command-line.
      failure to register DOMAIN<1b> netbios name caused nmbd to exit (a call to
      bug in num. arguments detection that stopped the -add option working
      updating comments.
      updated to include NT 4.0 Workstation profile setup.
      spelling.
      Faxing.txt: Updated.
      charset.c:	Fixed bug with 'valid chars' param.
      includes.h:	Fixed S_IFLNK for old DEC ultrix.
      connecting to IPC$ goes under the guest account.  the IPC$ share should
      Makefile:	Changed for HPUX10 tidyup.
      Support.txt: Added two more consultants.
      Fix suggested by "Christian Groessler" <chris at fast-ag.de>
      Changes to allow Samba to return the same error code as Windows NT.
      Kanji fixes for upper/lower case conversion with sjis characters.
      Removed the obsolete comment from the 'strip dot'
      fix several references to samba-bugs at anu.edu.au which should be samba-bugs at samba.anu.edu.au
      fix some more references to samba-bugs at anu.edu.au which should be
      Updated Manifest and DOMAIN.txt to refer to <your OS>_INSTALL.txt and
      Renamed from INSTALL.txt. Preparing for new docs structure.
      Changed DOMAIN.txt to try to explain terms like domain, workgroup,
      - clarified dan s's clarifications of the difference between domains and
      charset.c : Add mapping for code page 932 (KANJI).
      More mods to DOMAIN.txt, preparing for meta-FAQ itegration. Dan
      Minor mods to DOMAIN.txt. In DOMAIN_CONTROL.txt made it clear that a PDC is
      Removed samba team email address - replaced with samba bugs.
      smb.h: Added error code used for OS2 WPS.
      Way out of date. Dan
      From Jacco, unchanged. Destined for Samba-Client-FAQ. Dan
      Added draft cversions of the new Samba doco. Dan.
      Updated for 1.9.17 release.
      preparing for release of 1.9.17
      Spelling, refs to faqs, version numbersing. Dan.
      Added new MIRRORS.txt file at Dan's request
      This file has been moved to MIRRORS.txt
      Advice about firewalls (step 1) and tcp wrappers (step 8). Dan
      More sites for the non-UNIX ports, plus ftp.gwdg.de
      Changed ftp site and docs info in README (this file contains out-of-date
      added info about _not_ using \\SAMBA_SERVER\HOMES\profile - must use
      corrected it's (it is) documentation errors, when "its" should be
      doing that irritating compiler clash warning with the protos for standard_sub
      Put back the smb_shm_ proto's that Luke keeps breaking !
      charset.c: Added patch for client code page 852 (Eastern European) from
      Removed samba.faq from the docs directory, it was out of date. All FAQs in
      Oops forgot to run the sgml converters that one last time.
      More references to samba.canberra
      Updated mirrors, combined Sources and Sources&Binaries as our binaries
      updated Sunsite UK. (Paul)
      Added Finland ftp mirror (PR#175) (Paul)
      Updating an entry.Paul
      preparing for release of 1.9.18alpha2
      preparing for release of 1.9.18alpha3
      preparing for release of samba-1.9.18alpha4
      preparing for release of 1.9.18alpha4
      preparing for release of 1.9.18alpha5
      updated header to 1.9.18alpha6
      spelling mistake
      preparing for release of 1.9.18alpha6
      updated to current version number.
      preparing for release of 1.9.18alpha7
      preparing for release of 1.9.18alpha8
      preparing for release of 1.9.18alpha9
      preparing for release of 1.9.18alpha10
      preparing for release of 1.9.18alpha11
      preparing for release of 1.9.18alpha12
      Added 'missing feature' section for Chris.
      preparing for release of 1.9.18alpha13
      preparing for release of 1.9.18alpha14
      preparing for release of 1.9.18
      ypserver not available: AUTOMOUNT server and path don't work.
      preparing for release of 2.0.0 alpha
      preparing for release of 2.0.0 alpha 1
      preparing for release of 2.0.0 alpha 5
      preparing for release of 2.0.0 alpha 6
      preparing for release of 2.0.0 alpha 10
      preparing for release of 2.0.0 alpha 11
      preparing for release of 3.0-alpha0
      preparing for release of 3.0alpha1
      preparing for release of 3.0alpha2
      preparing for release of 3.0-alpha3
      preparing for release of 3.0-alpha4
      preparing for release of 3.0-alpha5
      preparing for release of 3.0-alpha6
      preparing for release of 3.0-alpha7
      preparing for release of 3.0-alpha8
      preparing for release of 3.0-alpha9
      preparing for release of 3.0-alpha10
      preparing for release of 3.0-alpha11
      preparing for release of 3.0-alpha12
      preparing for release of 3.0-alpha13
      preparing for release of 3.0-alpha14
      preparing for release of 3.0-alpha15
      preparing for release of 3.0-alpha16
      preparing for release of 3.0-alpha17
      preparing for release of 3.0-alpha18
      preparing for release of 19
      preparing for release of 3.0-alpha19
      preparing for release of 3.0alpha20
      preparing for release of 3.0alpha21
      fix typos in Makefile
      ensure that the target directory exists
      fix typo that prevented cups options param from being listed in smb.conf(5)
      fixing release target --jerry
      fix the broken generation of the smb.conf.5.html page

Samba-JP oota (8):
      This is typo fix patch for smbcacls.1.xml .
      s3-docs: Update 3.2 features.
      docs: Fix a bogus )
      s3: Fix a typo
      docs: Remove superfluous bracket.
      docs: Fix typo in vfs_tsmsm.8.xml.
      docs: Add missing ")".
      docs: fix typo in serverrole.xml

Samuel Cabrero (1):
      s4-dns: dlz_bind9: Create dns-HOSTNAME account disabled

Samuel Thibault (1):
      Fix linker flags on non-Linux GNU platforms.

Scott Lovenberg (2):
      Clean up client timeout definitions [rev. 2]
      Documentation: Add a warning to "socket options"

Scott Urban (1):
      s3: added per-client statistics to onefs perfcount module

Sean Dague (4):
      test: add directory and base class for samba-tool tests
      test: Add samba-tool time tests
      test: add samba-tool user tests
      test: enable time and user samba-tool tests

Sean Finney (4):
      libds/common/flag_mapping.c - fix another build dependency
      Fix numerous missing dependencies in WAF build scripts
      librpc/ndr: consolidate string conversion logic in ndr_pull_string
      librpc/ndr: add new LIBNDR_FLAG_STR_RAW8 for ndr_pull_string

Sergey Korsak (1):
      Fix Bug #8099 setpwent() actually does endpwent() and vice versa on FreeBSD

Sergey Urushkin (1):
      s4 rfc2307 gids mapping fix

Shekhar Amlekar (1):
      s3:rpc_server/srvsvc check access before doing work

Shirish Kalele (34):
      dded Microsoft Dfs services.
      Corrected DEBUG messages.
      Cleaning up the warnings from configure.developer.
      Cleaning warnings from configure.developer
      Cleaned up unused variables, returns from non-void functions etc.
      Cleaned up call_trans2getdfsreferral for when MS_DFS is not defined.
      Cleaning up call_trans2getdfsreferral.
      When parsing a dfs map for a service, see if the mount points exist that stand
      Corrected minor parsing errors.
      Added info level 1005 to netsharegetinfo (is the share a DFS root)
      The new msdfs implementation that uses symlinks to point to other
      Removed extra unistr_to_dos prototype from msdfs/msdfs.c
      Added the NETDFS pipe to allow remote administration of the msdfs symlinks
      Changed MS_DFS to WITH_MSDFS throughout.
      Fixed memory leak in RPC parsing code.
      Ran DFS on Linux and found that readlink() on Linux does not append NUL
      Adding Solaris packaging files to HEAD.
      Adding the "Using Samba" book to the packaging in HEAD.
      Sync'ing SAMBA_2_2 with HEAD.
      Allowing %S in dfs root paths. Other variables in standard_sub_advanced won't
      Fix typo.
      Add RESOLVE_DFSPATH to mkdir operations in HEAD.
      The "max data count" value in SMB transacts indicates how much the other end can
      Add msdfs proxy functionality; a CIFS share can directly be a stand-in for
      Add check to prevent non-Dfs clients from connecting to an msdfs proxy.
      Add 'msdfs proxy' description to smb.conf docs.
      Modify DfsEnum to handle 'msdfs proxy' shares. No NETDFS editing support for
      Add msdfs proxy functionality to HEAD.
      Fix the msdfs proxy handling code in dfsenum to return the cumulative number of
      Fix the msdfs proxy handling code in dfsenum to return the cumulative number of
      Handle deep referrals: check whether each component in the requested path of
      Handle deep referrals: check whether each component in the requested path of
      For deep referrals, track consumed path using a counter, and calculate the
      For deep referrals, track consumed path using a counter, and calculate the

Shirish Pargaonkar (5):
      umount.cifs: clean-up entries in /etc/mtab after unmount
      mount.cifs: add fakemount (-f) and nomtab (-n) flags to mount.cifs
      mount.cifs: clarify mapchars option
      docs: flesh out options section of umount.cifs manpage
      umount.cifs: do not attempt to update /etc/mtab if it is symbolic link

Simo Sorce (1604):
      4 new functions to retrieve single linked list of group and passwd entries
      Be sure to not use strlen with NULL pointer.
      initial support for paramter type P_LIST
      use next_token instead of strtok.
      fix compiler warnings
      fix compiler warnings
      handle P_LIST parameters
      uhm some pointer went wrong
      fixed error
      - fix bug in reply_nt- fix bug in reply_nt1
      "netbios aliases" and "interfaces" options change from P_STRING to P_LIST
      - sorry, forgot to test a pointer
      - sorry, forgot to check a pointer
      Test if machine password has expired.
      move the global_machine_password_needs_changing where we need it.
      Convert other parameters (read list, write list, valid users...) to the P_LIST format.
      better debug messages + fix typo in debug message
      Some fixes about malloc/Realloc and mem leak
      me stupid.
      Change all realloc() statements to Realloc() (ecxept for tdb.c)
      - avoid possible mem leaks in rpcclient/cmd_*.c (talloc_destroy not performed)
      Without this become_root()/unbecome_root() pair I was not able to login
      it was half committed last time,
      this is a big global fix for the ptr = Realloc(ptr, size) bug.
      some %things are not expanded properly in get share info levels
      compile fix
      so let admins shutdown their samba servers remotely if they want :-)
      let admins also abort a shutdown
      add a comment to make the code more readable
      this was a stupid typo,
      changed the data format in the tdb, as the time fields were not
      use variables _before_ freeing them!
      free memory before returning.
      introduce SAFE_FREE() macro as suggested by andreas moroder.
      move to SAFE_FREE()
      move to SAFE_FREE()
      move to SAFE_FREE()
      move to SAFE_FREE()
      typo
      move to SAFE_FREE()
      move to SAFE_FREE()
      move to SAFE_FREE()
      move to SAFE_FREE()
      move to SAFE_FREE()
      move to SAFE_FREE()
      move to SAFE_FREE()
      move to SAFE_FREE()
      move to SAFE_FREE()
      move to SAFE_FREE()
      move to SAFE_FREE()
      move to SAFE_FREE()
      - the inactive core of the new mangling code that use tdb
      memory leak fixes ..
      minor fixes
      get out unicode_from_buffer and buffer_from_unicode, unneeded.
      return NT_STATUS_NO_MEMORY istead of NT_STATUS_OK if we are out of memory.
      further devel and test kit.
      undef the code for now
      fix some possible memleaks and not tested reallocs spotted by Andreas Moroder
      init only in test code.
      more fixing and testing.
      tim suggested to add a copyright note :)
      initial support to error report in smbclient, useful when using smbclient -c in scripts.
      old fixes I forgot to commit
      ops, remove my test code, sorry.
      remove unused function in mangle.c
      introduce mangle backward compatibility functions
      lets try the new mangling code
      ops, some testing code in compat function let only mangled name come back.
      fix a logic bug on max size of a returned string,
      - fix string len for an ucs2_to_dos function as any ucs2 char may be up to 4 dos hars...
      change some more functions to the new mangle interface.
      another few changes to the new mangle code
      clear errno before a call, tdbsam will not update it.
      a big one:
      add convert_string_allocate() function
      fixed, moved and added some functions
      some bugfix and new functions,
      messed up with patches, this should be the right one,
      fixed some bugs.
      I see no reasons why we should limit username lenght while checking
      passing NULL to print_queue_status()'s status parameter could end in a segfault
      remove unneaded memory leaking code.
      util_sid.c - respect a const variabile (addedd strdup)
      freeing the wrong pointer, sorry my mistake.
      port mods from 2.2
      const religion
      ops, froget to set the values.
      the pdbedit tool manpage
      updates from 2.2
      fixes (asprintf) from 2.2
      fixes from 2.2
      replace getpwnam_alloc with plain getpwnam.
      fix also the comment.
      hmm, get it right this time.
      getpwnam_alloc -> getpwnam
      minor fixes
      micro fix :-)
      minor fix and checks
      update from 2.2
      better debug messages!
      compile fix from vance
      Start to switch away from the alghorithmic uid->rid mapping model
      more verbose checking in talloc and util_pw
      ops forgot this :-)
      second step to gain free uid<->rid mapping
      better check of called function's return
      uint32 store and fectch functions, a signed int is not enough sometimes
      a fix yet committed to 2.2 sometimes ago and reintroduced here!
      Fix incorrect zpadlen handling in fmtfp.
      sync with 2.2
      add collision/total indication to every collision report
      move to the FNV1 hash alghorithm seem good
      Had some environment problem to test the fix, so it would be really appreciated if packagers would be able to test their findsmb utility.
      move vsyslog() from snprintf.c to replace.c
      so here it is the code to introduce seriously debugggging classes.
      debug classized
      uhh, forgot to commit the DBGC_WINBIND definition :-)
      typo, sorry
      typo day :-(
      move debug stuff from messages.c to debug.c (Elrond)
      change: pdb_getsampwrid() ->pdb_getsampwsid()
      few fixes from Elrond(elrond at samba-tng.org) and Billy O'Connor(billy at oconnoronline.net)
      moved lp_list_* functions away from param/loadparm.c, put int lib/util_str.c
      more debug classess activated
      some support functions to ease the next commit.
      addedd new (t)alloc_sub_* functions
      Unneded extra check on len
      as per user request added windbind start/stop/restart in swat
      nice day today
      found nasty bug in intl/lang_tdb.c tdb structure was not tested to not be null before close
      people should be happier now.
      as suggested by Alexander Oswald <oswald at is.haw-hamburg.de>
      OK!
      forgot to change the makefile system, sorry
      fix log level, set a default, and also copy the value set in smb.conf into parm_struct.ptr
      updates the log level parameter man section
      commented out strupper before key check against internal db, it's no good
      passwords where not checked (you cannot check if the same buffer differs from itself).
      *** empty log message ***
      A new utility to test VFS system and modules
      improvements and bugfix
      O_NOFOLLOW does not exist on solaris 8 ??
      should make all platforms happy with popt
      make IRIX happy
      a new icon for the upcoming wizard
      fix typos
      implemented lock and mknod
      typos typos :)
      We never checked if the smb packet len is != 0
      do not expose special files, only files, directories and links (and we
      if muhammad does not go to the mountain ...
      add a trivial seeking function to xfile (tseek) that does not do SEEK_CUR
      avoid using libtool for VFS modules
      add the netatalk module
      patch from metze
      fix wrong check
      fix file_is_special test, was wrong.
      wrong way to handle things, bug found by kai
      move everything to flat VFS/ directory
      the current block module is completely broken, jelmer will commit a new one later.
      recycle.c:
      configure.in:
      forgot to commit configure with configure.in
      change parametric option name to vfs_recycle_bin it is more sane and do not pollute standard options namespace too much
      wrong alignment size calculation
      move all the passdb internal interface to NTSTATUS
      forgot include file, sorry
      try to put every security descriptors related definitions in the same file.
      forgot some bits from previous rpc_secdesc.h rework patch
      Some was asking to look at this code, so better it stay there until we decide what to do with it.
      port sec_desc headers reordering from HEAD.
      consolidate error mapping functions into a single file
      sync with head
      union is better to avoid problems with pointers
      make querygroup in rpcclient working, same fix as per 2.2 tree
      fix rpcclient querygroup command (from 2.2 and head)
      make vfs recycle use vfs facilities correctly!
      finnally put in Alexander parametric pacth
      updates to the gums
      forgont genstruct.pl is needed to build new include files for genparse
      oh god, I will forgot my name one of these days :-/
      Uhmm a bad day to commit changes :-((
      it's getting comic ...
      some more work on gums.
      the shutdown call does not have a 16 bit flags, but 2 byte representing booleans
      fix also net rpc shutdown
      ignore tdbsam2_parse_info.h
      fix for bad check spotted by Ray Simard <ray at sylvan-glade.com>
      from HEAD:
      untest fix from HEAD/2.2 for wide links parameter bug.
      untest fix for wide links parameter bug.
      fix dumb perror used without errno beeing set.
      fix dumb perror used without errno beeing set.
      correct init for vfs.conn, thanks Stefan
      correct init, tx Stefan
      move genparser to use talloc contexts instead of [m|c|re]alloc() and free()s
      forgot the altered include file
      Some progress towards gums and tdbsam2
      initial work for the new idmpa interface
      some more code
      more on idmap
      This is how combination of domain logons and security parameter best combine.
      THE Idmap patch :-)
      some more idmapping :)
      This commit make winbindd copy winbindd_idmap.tdb into idmap.tdb on the
      fix commit
      fix wrong string handling
      remove unneded instruction
      remove unnened and wrong instructions
      check braindead safe_* function length interpretation is correct
      ooops new_dir is already len +1 bytes
      some more debugging in case of failure
      reworked to not malloc PATH_MAX long strings
      collaps same repeted task into 2 code paths
      port HEAD mods
      strncat get sometimes optimized to strcat by glibc and that triggers our
      seem that someone changed the semanthic of unix_strlower without fixing all
      fixes
      use gid_t for gids not uid_t
      use gid_t for gids not uid_t
      some readline completion exancements
      A RID can never be zero
      let's suppose I want to specify exactly which SID a user should have ...
      back port from HEAD
      add idmap only parameter
      enhancements
      typo
      make winbind use idmap as well.
      default remote idmap backend is null
      prepare to get _nua out of the door (but back in from the window ;-)
      new helper functions to create users
      swat need idmap now
      ok next_rid out as well local_*id_to*id functions
      consolidate idmap code in one place
      forgot to add the file where things moved
      This is a nice rewrite:
      forgot to remove getpwnam
      auto-init for utility functions
      correctly initiazlize idmap tdb when creationg new
      *id_to_*id call reshape to return NTSTATUS errors
      proper wellknown sids initialization at startup
      init wellknown in pdbedit too
      fix wrong debug messages in idmap_util.c
      shouldn't wellknown group be well.. ..WKN_GRP ?
      remove testing debug line
      fix pam_smbpass
      exclude tdbsam2.h generation until it will be used
      fixes to *_util.c files
      move some things around
      restore structures from previous erroneous commit
      add mapping.h here
      sort out some include dependencies
      uff, forgot to put back this one :-/
      And finally IDMAP in 3_0
      add idmap_winbind unless I made a better way to solve SID type for domain
      add metze's patch for smb_register functions
      Fix from Alex Deiter <tiamat at komi.mts.ru>
      another bugfix from Alex Deiter <tiamat at komi.mts.ru>
      port fixes from 3.0
      avoid races in getting high watermark
      Ok, this patch removes the privilege stuff we had in, unused, for some time.
      Found out a good number of NT_STATUS_IS_ERR used the wrong way.
      add tdb backup function separation and winbind idmap upgrade code form
      do not forget the include file :-)
      Tought I already done.
      use the specific funtion we have to check if a SID belong to our domain
      port latest changes from SAMBA_3_0 tree
      fix online help
      fix online help
      split some security related functions in their own files.
      split some security related functions in their own files.
      make nt-time <-> unix-time functions nearly reversible
      make nt-time <-> unix-time functions nearly reversible
      So here it is a non-intrusive patch with my latest work on gums (the
      sorry folks, forgot to cvs add/remove before commit.
      fix typo
      created a new target: genparse
      Split smbldap in a core file and a utility file
      add also the schema attributes and object classes need by config_ldap
      do not build config_ldap by default
      reduce double explanation of FIXED ARRAYS
      typo
      1. The most part of this patch changed the unknown_3 flag to the now known
      Add test to set single fields in fields_present with info21.
      sorry for the conflict markers committed in by mistake :-(
      fix previously committed old version by mistake
      This should cure the problem with gums not compiling.
      reactivate pdb_gums as static module
      reformatting
      Ok here it is my latest work on privileges
      Sorry, forgot to commit an essential piece.
      Let's be polite with poorer backends ;-)
      2 fixes to enhance readability of source code and debug messages
      Do some checks about data passed to this function
      the buffer must be greater then src string len otherwise bad things happen!
      backport from head
      add privileges support to ldapsam too
      r730: move the current debian dir to debian-unstable
      r731: add the current debian directory for debian stable (woody) targeted releases
      r1468: Dump the parametrical options only once at the end of the service.
      r1478: Useful patch from Tom Alsberg <alsbergt at cs.huji.ac.il>, to export a single user from a backend.
      r1946: update debian stable package tree
      r1948: Some fixes for path changes
      r1960: sambaPasswordHistory had a duplicate OID
      r2070: Let's try to overload srnlen and strndup for AIX where they are natly broken.
      r2210: Fix misleading comment found by Heinrich Mislik <Heinrich.Mislik at univie.ac.at>
      r2331: check password script code and example from trunk
      r2333: check the script is not a 0 lenght string
      r2599: avoid free()ing our static unalloceted memory that ends up in memory corruption.
      r3637: update the debian packages changelog
      r4153: port from trunk of pdbedit changes
      r4845: Correct my name.
      r4846: do not keep outdated files here.
      r5176: Warn the user that print command is ignored when using cups libraries
      r5257: Upadate patches and control files
      r5912: - Enhance net rpc rights utility
      r6004: Let's make server manager able to kill a user session.
      r6016: Give access only to root and Domain Users
      r6034: Check only once
      r6116: update debian changelog
      r6575: use samba4 torture please message on samba 3 torture
      r6646: keep samba3 talloc inline with samba4 one
      r6648: do not annoy make proto
      r7961: randomize reloading so that smbds do not pverload cupsd
      r8682: fix vfstest, thanks to Rainer Link for spotting this one
      r11395: Update the Debian packaging.
      r11398: Keep s3 in sync with trunk
      r12495: Crackcheck utility enhancement based on patch sent by Tom Geissler
      r12497: add a simplex option
      r13132: Old fix from Lars
      r13136: Fix handling user sid and user gid
      r13137: make cleare where long ifdefs ends
      r13138: old fix I forgot to commit
      r13148: Fix bug: #3413
      r13222: Never assume mode_t is of type int.
      r13224: better to cast the return too
      r13374: new revision of the snprintf replace code
      r13411: Sync with the latest fix I've made to package 3.0.21b
      r13715: Put back the code that actually modify the account,
      r13776: Merge in the editposix ldapsam optimization
      r13843: Merge in net sam provision and some pdb_ldap fixes
      r13846: Take care of system that do not have LDAP libraries
      r14377: Fix coverity #4 for 3_0 too
      r15646: Implement an setdomainsid command as well
      r15965: Pam modules install fix, thanks to Ryan Novosielski for spotting this one
      r15971: Obey the manpage description and make changesecretpw accept a password via stdin
      r16800: correct a probable cut&paste error
      r17063: Update debian-sarge for 3.0.23
      r17408: Let us use netgroups even without a NIS domain but just using files
      r17459: As by Jerry's word commit this without his review.
      r17462: Fix a cut&paste bug that caused us to return a null SID on some error conditions
      r17469: remove unused variable
      r17508: I didn;t realize we had this in our packages, remove it
      r17509: same for old woody packaging stuff
      r18049: Backport SAMBA_4_0 snprintf changes
      r18413: Based on the new torture test I added in samba4 it turns out
      r18529: warn the user that putting the machine host name on the
      r18530: typos
      r18534: Fix grammar
      r19071: Backport to SAMBA_3_0 as well
      r19491: backport changes from samba4
      r19516: Fix the DN, to make searches using the domain as base
      r19690: Remove this ancient module, I never realized it was ported over.
      r19691: Fix the build
      r19692: Another fix.
      r19703: Don't free a string if you want to return it!
      r19979: Fix memleak on pw and change talloc_destroy to TALLOC_FREE for mem_ctx
      r19980: Implement pam account stack checks when obey pam restrictions is true.
      r19984: Must have been drunk yesterday.
      r19986: ooops
      r20116: Start merging in the work done to create the new idmap subsystem.
      r20117: 1st Error in the merge
      r20118: Fix some more warnings
      r20150: better memory handling for some functions, make sure we don't
      r20151: remove meaningless checks
      r20154: Fix nasty typo, hunting another bug
      r20155: revert, I misread
      r20169: Support for fallback to legacy mapping code was not completely tested.
      r20216: Fix fallback code.
      r20242: these are not really const as we set them in the function
      r20243: Make lookup_name resolve both the mapped and the real unix group name
      r20252: Revert back to const, but I have a fleble feeling we should go the ther way.
      r20289: IDMAP is part of winbind but not the main process.
      r20290: Remove unused call
      r20745: Commit Finnish transalation of SWAT after review
      r20774: I thought I committed this before Xmas holidays ...
      r21239: if the workgroup name is longer than 16 chars we get garbage in the string
      r21369: sys_disk_free return type is SMB_BIG_UINT.
      r21508: Fix memleak in new idmap_tdb, thanks Herb.
      r21606: Implement escaping function for ldap RDN values
      r21607: While committing I saw I had not newline terminated this string ...
      r21623: Fix copy/paste error
      r21776: fix bugs #4438 #4440
      r21919: now that the local passdb abd BUILTIN have been blacklisted and they always
      r22002: Fix bug #3974, there are still open issues with -N behavior (doc fix next)
      r22109: Readonly is automatically set in the generic init code, let's just log the fact there
      r22204: Workaround to quickly close bug #4508
      r22230: Let's just cast here, the 2 calls have different allocation mechanisms.
      r22343: Commit to 3_0 as well after adapting the patch.
      r22348: 3_0 as well
      r22388: clearer message, thanks David
      r22392: Remove leftover potentially segfaulty code.
      r22393: fix cut&paste error
      r22425: Avoid to segfault if we only have the realm.
      r22646: segfault fix in idmap_ldap.c from 3_0_25
      r22677: One line fix to make net idmap restore work again
      r22771: One liner fix for idmap_ldap
      r22974: enable relro with PIE if available, this gives extra protection to the ELF segment
      r22976: whoops typo
      r23051: sid_to_[ug]id fixes for smbd
      r23356: We missed to add the 'c' character to the list of valid ones for
      r23404: Fix wrong (and missing) action on error condition in ldap reply evaluation loop
      r23406: Evn if not strictly currently necessary do check for correct
      r23407: While verifying a bug I found out that for some reason
      r23411: We were missing displayName and that was preventing us
      r23524: Fix bug 2319.
      r23525: I believe this patch is ok, got no reply of it being not ok.
      r23527: Use existing escaping function pointed by James
      r23571: Fix, parsing of multi byte share names.
      r23682: Old patch I forgot in one of my 3.0.25 trees.
      r23683: Check ports are in the correct range (1-65535)
      r23691: fix for bug on touching files as described here:
      r23723: Alexander Larsson pointed me at a missing mapping in clierror.c
      r23782: I tested this against NT4 PDC, W2K Server, W2K3 Dc, and a Win XP std alone
      r24603: In case of error we need to free prefix_cache otherwise on re-init the first
      r24969: Fwd port "open" patch
      r25057: Add a schema file ready to be used in Fedora/RedHat Directory Server
      r25059: Apply to 3.2 as well
      r25060: Fix formatting, remove trailing spaces and cut lines longer than 80 chars
      r25062: Reformat, remove trailing spaces and fit lines into 80 columns
      r25063: Fix segfault in smbldp_set_creds when we want to use anonymous, the
      r25064: We use BOOL/True/False not bool/true/false
      r25107: Fix const warning caused by the way I reformatted this
      r25127: Add ol-schema-migrate.pl to the repo.
      r25573: Add my (C) as well
      r789: we return wrong number of entries
      r808: fix libtdb build by ifedffing out an smb_panic() and copying over CatchSignal fn from lib/signal changing it's name to TdbCatchSignal
      r1758: Move and enhance the add_string_to_array function as per volker job on trunk
      r1759: Add some helper functions to read and write data to a socket with timeout (again from volker in trunk)
      r1760: name the struct
      r1761: start porting valuable volker's work on ldap from trunk
      r1766: we do not have smb_read_error in samba4
      r1771: OK Let's add tests for ldap.
      r1785: remove unneeded dependencies on openldap client libraries
      r1792: split ldap_setup_connection() and provide an ldap_bind_simple() function
      r1793: try to bind multiple times as anonimous and user
      r1802: start to support SASL in our ldap libraries
      r1898: Check the context we are going to return.
      r1944: put ldif functions in a separate file
      r2601: avoid free()ing unallocated memory by mistake
      r2689: Use consistent naming Del -> Delete
      r2690: deleted by mistake
      r2694: DN -> DC these are domain components ...
      r2695: revert "Del" renaming
      r2754: Change sldb_trim_dn() to be sldb_fix_dn() as we are not really trimming.
      r2758: keep docos handy while developing it
      r2789: fix compile
      r2815: add some more docs
      r2820: complete the parsing routing with correct support for escaped chars
      r2874: Italian CodeJam commit :-)
      r2875: some fixes + (C) note
      r2908: fix typo
      r3754: merge in ldb modules support from the tmp branch ldbPlugins
      r3755: add missing files
      r3757: Some fixes for ldb_ldap
      r3760: mention -o switch in help message
      r3897: add a locking infrastructure
      r4502: add an error reporting function
      r4503: add an error reporting function (fixes)
      r4505: Add a first very basic schema module
      r4513: add experimental modification attribute checking
      r4714: move the ldb code to the new talloc interface (eg remove _p suffix)
      r4759: use ldb_attr_cmp() to compare attribute names
      r4775: use schema_attr_cmp wrapper to check for the special dn/distinguishedName case alias
      r4784: finally make schema module use a single ldb
      r4785: add schema objects to provision
      r4786: forgot to commit the exclusion for schema checking against our control entries
      r4844: - Remove the unused attrsyn structure
      r4859: changed a numbe rof things:
      r4862: - better structure schema tests
      r5583: some more docs
      r5584: add new experimental ldb module
      r5585: LDB interfaces change:
      r5587: more work around the samldb module
      r5588: We currently use a string representing an hex number so conform to that.
      r5670: simplify and clarify ldb_modules.c code
      r6084: - Introduce the samldb module dependency on samba4
      r6085: dc is case insensitive
      r6470: Remove ldb_search_free() it is not needed anymore.
      r6645: Add talloc_get_size() function.
      r6650: keep style consistent
      r6759: let us have a wildcard attribute so that we can set a default for all attributes
      r6768: Fix wrong comment
      r6794: spellfix
      r6867: this code will change the way the @ATTRIBUTES object is handled
      r6868: the @ATTRIBUTES object format has changed
      r6931: declare this to avoid warnings until we have loadable modules
      r6934: thanks to HotaruT for pointing out skel.c was not in line with the rest of the code
      r6935: don't do three things at a time :-)
      r7057: remove some ^M at end of lines
      r7058: Add experimenthal pam authentication for web pages
      r7222: remove double call to the same function in the same place, probable cut&paste error
      r7224: add some more usefull data to the auth_usersupplied_info struct
      r7231: remove some old stuff
      r7232: add some more auth stuff
      r7233: what about filling that new element ?
      r7234: that code path is died
      r7235: We do not need PAM here anymore
      r7236: uhmm this require to be in too
      r7237: we need to check for PAM here
      r7238: Add pam auth support in swat
      r7239: add a little test
      r7242: typo
      r7267: REMOTE_HOST is a better choice
      r7268: allocate the strings to avoid them disappearing under our feet
      r7334: I do not feel oblidged to use sqlite3 when I configure ldap support :-)
      r7338: let it be possible to run sqlite3 tests when it is compiled in
      r7343: handle url like ldb_tdb does
      r7582: Better way to have a fast path searching for a specific DN.
      r7608: bug fix after yesterday's change
      r7615: fix the build and simplify gendb_search_dn
      r7635: change the license of this file to lgpl like the rest of ldb
      r7805: add support to read binary files into attributes data like ldap tools does
      r7806: add test for binary files as attribute values
      r7851: We are case preserving let the DN be returned the same the user put it into.
      r7934: ported samba3 pass_check functions to auth_unix.c
      r7936: new ldb_dn_explode and ldb_dn_casefold functions and co
      r7937: main file was missing
      r8082: large rewite of ldb_dn.c
      r8083: check attribute type is valid (only ascii alphanum chars and '-' char)
      r8084: do not leak memory on errors
      r8091: fix invalid attribute names s/_/-/g
      r8259: We want to oset the provided flags not zero
      r8373: New wildcard matching code.
      r8377: forgot an ldif test
      r8499: clearer function name
      r8514: add docs
      r8515: ldb_dn_cmp now uses ldb_dn_compare so that the DNs are compared
      r8516: let us use all parameters of ldbsearch in ldb.search
      r8529: Matching against the wrong union
      r8530: Now our ldap server is able to fullfill present and substring searches
      r8585: add to ldb and ldap comparison functionality
      r8779: Add rdn module to makefile and headers
      r8917:   Better support for extended ldap search operations
      r8926: RFC 2891 - LDAP Control Extension for Server Side Sorting of Search Results
      r9385: Remove unused functions
      r9391: Convert all the code to use struct ldb_dn to ohandle ldap like distinguished names
      r9392: Fix ldb_dn_compose to make build farm happy
      r9393: Fix ldb standalone build
      r9394: avoid to use BOOL in ldb
      r9446: clean up old test file
      r9447: Add a new tool to convert openLdap schema files into an ldif
      r9451: some fixes now core.schema and cosine.schema are also read properly
      r9654: introduce the samdb_search_dn call
      r10231: seem I flipped these, fix.
      r10232: Some work on ldb_sqlite3.
      r10233: add commented PRAGMA to avoid fsyncs
      r10236: fix (C) note
      r10250: the comparison is caseless so we must caseless subtract
      r10251: some more work on ldb_sqlite3
      r10277: do not ovverride LIKE, thanks to derrel I found out how to do
      r10299: remove the public (un)lock functions and introduce a transaction based
      r10300: forgot to change the dsdb modules function names
      r10301: fix standalone compiple after tdb changes
      r10302: Introduce ldap like error codes
      r10303: check no attribute is given empty
      r10304: check for basic ldb_message sanity and return appropriate
      r10305: start implementing better error handling
      r10306: change these modules to use new error API
      r10419: Remove unused prototypes of locking functions (thanks Jelmer)
      r10477: expose transactions outside ldb and change the API once more
      r11567: Ldb API change patch.
      r11597: revert a commit by mistake
      r12148: add the docs for the paged results control
      r12604: fix make clean as Brad Hards <bradh at frogmouth.net> sugested
      r12605: docs patch from Brad Hards <bradh at frogmouth.net>
      r12643: don't fail make test
      r12733: Merge ldap/ldb controls into main tree
      r12734: forgot to add qsort
      r12743: Remove the ugly way we had to make a second stage init and introduce
      r12745: Initial work to support a syntax to pass over controls via
      r12748: Fix wrong handling of separation characters for RDNs
      r12769: Make ldb_next_request() evident, I was much confused on first sight
      r12770: Remove the alloca.h header as it is not used in the code afaics
      r12810: handle control options gracefully and don't segfault
      r12827: This was a very well concealed bug.
      r12828: add a test to check white spaces comparison
      r12833: complete ldbsearch support for controls
      r12880: Remove ldap partitions useless now and probably we
      r12905: add some ldap policies
      r12917: fix decoding of ldap controls
      r12925: implement client side of ASQ control
      r12941: Add Attribute Scoped Search control
      r12942: this way is better
      r12977: Some code to implement the client side of the Dirsync control
      r12988: delete an ancient file that misteriously survived till now.
      r12989: move the control parsing and handleng functions to cmdline.c
      r13166: Patches form Brad Hards
      r13167: handle cotrols' reply even in error
      r13189: suggest a couple of dev libs before compiling.
      r13289: Check the tree is not NULL
      r13307: docs
      r13324: From now on check attribute names obey rfc2251
      r13325: let samba register it's own utf8 aware functions in ldb
      r13328: After the attribute name check cleanup it turned up ldb_caseless_cmp()
      r13333: revert previous commit I will use ldb_caseless_cmp in attrib_handlers
      r13335: Fix the build and add an utf8 safe ldb_hadler_fold function
      r13336: Doh! We actually never optimized for the ascii case.
      r13347: - Now we compare values with an optimized utf8
      r13348: Put a reminder for now.
      r13349: In the end I could not use ldb_caseless_cmp
      r13352: Integrate Patch to support the ManageDSAIT control
      r13353: Fix a crash bug in rootdse when we do not pass in credentials
      r13354: Add tests to check that controls work properly
      r13355: check controls are correctly exported
      r13356: test utf8 usernames
      r13357: more docs
      r13360: Fix crash bug when 0 results are returned on the internal base search
      r13361: initial implementation of the vlv control
      r13369: let's have a way to show the samba4 version through ejs
      r13372: fixes ... still no joy
      r13374: new revision of the snprintf replace code
      r13580: fix broken client side sort
      r13592: Incredible how bugs like this can sweep in even after peer review and testing ...
      r13609: Get in the initial work on making ldb async
      r13615: Make ldb_set_errstring get ldb instead of module as parameter.
      r13742: Fix tests to work better with ldap
      r13743: Generic fixes and improvements
      r13744: Make ldb_ldap async
      r13773: Be consistent in the way you get out and free allocated data
      r13818: Make ldb_tdb 'fake' async.
      r13823: make async_wait part of the modules ops
      r13826: Try to keep this backend updated
      r13827: Minor enhancements or cosmetic changes
      r13900: don't segfault on error
      r13901: Backends need to be initialized even if there are no modules
      r13906: fix swig build
      r13985: Slowly start swig_ldb
      r13986: minor fixes
      r13992: change the way ldb_async_wait() works.
      r13993: First prototype of how an async module should be built.
      r13996: simplify ldb_async_wait() some more
      r13998: From now on ldb_request() will require an alloced request
      r14161: return early if we know the job is already finished
      r14162: Minor fixes on sort
      r14163: Remove LDB_WAIT_ONCE, we can hardly guarante we
      r14227: We are passing the wrong pointer here
      r14344: More helpful messages on error for command line specified controls
      r14364: operational -> async (untested)
      r14389: rootdse -> async
      r14390: the rootdse does not show a distinguishedName attribute
      r14391: rdn_name -> async
      r14401: Let samldb intercept the async requests.
      r14458: extended_dn -> async
      r14459: Make this async compatible
      r14465: kludge_acl -> async
      r15181: Don't try kerberos sign/seal when in SSL
      r15238: Add some code to automatically reconnect if we want to.
      r15241: Add helper function to set reconnect status defaults
      r15242: allow to use LDB_FLG_RECONNECT
      r15245: forgot one header
      r15288: fix some problems
      r15582: Commit some forgotten stuff that have been setting on my private tree fro long
      r15725: First shot at making password_hash async
      r15761: Fix-as-you-go ...
      r15762: It make no sense for rdn_name to implement modify, it will need to implement rename ...
      r15782: More fixes for async cases
      r15783: Fix previous commit, was the wrong way to deal with the problem
      r15786: another fix in rdn_name
      r15787: NET-API-CREATEUSER was crashing for me because of this uninitialized value...
      r15788: Do not crash when no result is returned
      r15789: hmm, damn, testing uncovcer all your bugs :-)
      r15795: Try to use the async code by default
      r15804: Fix SAMLOGON test
      r15846: An async version of ldbsearch
      r15847: We probably want to keep the global init
      r15913: Error passing in the async code is not in agood shape
      r15922: password_hash.c has proven to be a good way to research how to build an async module
      r15927: Optimize ldb module traverse while keeping the API intact.
      r15932: Remove per request creds
      r15933: remove the last sync call to ldb_request
      r15942: Remove the sync internal ldb calls altogether.
      r15944: rename LDB_ASYNC_ADD -> LDB_ADD, LDB_ASYNC_MODIFY -> LDB_MODIFY, etc...
      r15945: Check ltdb_modified results
      r16021: While studying how to make samldb really async I found a critical situation handled in the incorrect way.
      r16022: ooops, a bit too aggressive commit :-)
      r16036: Add a couple of new functions to corretly deal with timeouts.
      r16042: Fix crashbug caused by incorret error reporting.
      r16043: Fix error message
      r16070: Fix kludge_acls
      r16071: tdb has nested transactions
      r16784: - make some function in ldb static, they not need to be exported anywhere
      r17185: Oh, I wanted to do this for sooo long time.
      r17186: "async" word abuse clean-up part 2
      r17189: Add the new LDAP rfc series
      r17193: Remove ancient stuff never really used
      r17195: Start thinking how to implement extended operations.
      r17206: Add a modular API for share configuration.
      r17207: Add the ldb based shares configuration module
      r17208: Add a away to test the ldb module.
      r17209: Add dependency over the new share configuration module into smbd
      r17210: I wonder how I missed this, build farm caught it.
      r17350: Avoid a couple of memleaks, unnecessary code and use a more linear style
      r17370: Fix tdb searches, we need to return an LDAP_REPLY_DONE packet when done.
      r17398: avoid a memleak when we are returned 0 results and make a more creative use of memory contexts
      r17412: fix missing colon
      r17433: remove obsoleted RFCs
      r17434: update our index
      r17503: Add a useful function to search for a DN
      r17504: Do not use the invented unixID but use the rfc2307 uidNumber and gidNumber attributes instead
      r17505: we are setting the timeout with the provide function right after.
      r17507: pread and pwrite depends on HAVE_PREAD/HAVE_PWRITE not HAVE_PREAD_DECL/HAVE_PWRITE_DECL
      r17513: ldb_set_errstring is an ldb private string, samdb uses DEBUG() statements
      r17514: Simplify the way to set ldb errors and add another
      r17515: Fix warnings
      r17516: Change helper function names to make more clear what they are meant to do
      r17596: apply patch from Martin
      r17597: fix prefix path handling
      r17613: style fix
      r17614: Our first "client side' ldb module.
      r17631: Some syntaxes from MS in a now vanished internet draft
      r17632: This is the most accurate mappings between LDAP OID Syntaxes and AD Syntaxes.
      r17641: some more info, add oMObjectClass values (binary :-/)
      r17642: some more mappings
      r17648: update minschema.js
      r17651: Commit the set of classess used to generate our schema
      r17652: add oMSyntax to these attributes
      r17653: fix typo
      r17662: some more enhancements to our schema extraction tool,
      r17829: Fix the order of the bytes
      r17830: Set the default_basedn (hey, it comes from the "default" naming contex :-)
      r17839: do not reference possibleInferiors we have not extracted
      r17859: Fix some return values
      r17860: Let's commit the work down up to now on the new schema module.
      r17868: remove duplicated attributes from list
      r17894: better name for the internal syntax type
      r17898: handle objectcategory and isdefunct for classes
      r17926: add trustedDomain class
      r17998: start working on syntaxes
      r18046: Add 'z' specifier support and a configure test.
      r18272: Couldn't resist to change this.
      r18314: Handle the case where a dir has the sticky bit set and the OS gives back
      r18315: Implement netSrvGetInfo level 102
      r18316: Build the parent too
      r18317: Make sure we actually have a valid reply or fail
      r18318: Implement DiskEnum
      r18344: add a test to show hoe NetNameValidate behaves.
      r18345: test also flags
      r18412: Implement NetiNameValidate but just for share name right now (type 9)
      r18440: "builtinDomain" is not a child of "domain"
      r18542: Some late nite work.
      r18550: Return a path not just a disk drive
      r18558: Fix ShareCheck which was assuming all paths are "C:\"
      r18590: Some more work on the srvsvc pipe
      r18591: Better defaults for share creation
      r18676: Don't mix ShareInfo and ShareCtr definitions,
      r18740: Some more work around srvsvc
      r18757: Disable this for now
      r18777: add helper functions to create an ldb_request structure
      r18881: remove wrong check and statement.
      r18882: make style consistent
      r18885: Fix bug in our IDL pointed out by Ronnie
      r18908: Store the schema structure into an opaque pointer so that it can be reused by multiple connections
      r18909: use newer functions that were introduced after this code was made
      r19069: The sequence number is a 64 bit unsigned integer
      r19129: Add comment to clarify behavior
      r19299: Fix possible memleaks
      r19303: It seem ok to have around this amount of blocks hanging out of an ldb context for sam.ldb
      r19304: If you really want to look at the contents undef this one
      r19305: Potential memleak on the ldb_context if we don't use a temp mem context
      r19312: This should fix a nasty bug with values and names being freed before the results where used.
      r19313: Don't mess with hierarchies!!
      r19314: Commit tridge's fixes for a big mem leak in ltdb I introduced
      r19330: Fix memleaks
      r19331: Respect the mem hierarchy
      r19332: ldb_parse_tree leaks
      r19333: commit module changes I made some time ago before I loose them
      r19334: Commit commented provisioning code to activate the schema
      r19337: never alloc on module unless you mean to attach a context to
      r19338: leak on error
      r19370: Handle errors if talloc_reference fails
      r19375: very basic helper script to build ldb standalone
      r19452: Warn but don't die if registering against the rootdse is not possible
      r19453: Expose helper functions
      r19454: In standalone build init asq too
      r19455: forgot this
      r19456: Add an example application for ldb using the tdb backend
      r19457: committed by mistake, this binary is available from here anyway:
      r19458: Some info on the "schema"
      r19459: Do not build nss by default (it probably works only on linux)
      r19460: currently building when there is an existing previous build in place is broken
      r19461: Make sqlite3 work again (semi-async)
      r19489: Change ldb_msg_add_value and ldb_msg_add_empty to take a foruth argument.
      r19490: better to check the return result
      r19531: Make struct ldb_dn opaque and local to ldb_dn.c
      r19532: oops forgot this
      r19536: Make output understandable (newlines)
      r19831: Big ldb_dn optimization and interfaces enhancement patch
      r19832: better prototypes for the linearization functions:
      r19869: fix memleaks
      r19870: Simplify code
      r19871: simplify more
      r19886: ncName is specific to samba, not the generic ldb engine
      r19887: return "" string only if the dn is a valid one
      r19888: make it possible to use default attrib handlers from extensions
      r19903: This is a cut&paste error for sure
      r19904: port fies from samba3
      r19905: use ldb_dn_new_fmt() to avoid double strdups
      r19906: ldb_attr_cmp is used a lot
      r19907: this function is used a lot
      r19909: Make this one double as fast
      r19910: Make better use of our set of talloc utility functions
      r19911: talloc_apsrintf is not really required here
      r20032: Add ldb_search_exp_fmt()
      r20033: Never commit before testing
      r20034: Start using ldb_search_exp_fmt()
      r20100: Remove completely unused parameters
      r20101: Also rename a variable now that the unused parameter is gone
      r20106: Optional ONE Level indexing for ldb_tdb
      r20284: Simplify OID primitive BER parsing.
      r20656: This way the process flow should be much more readable.
      r20669: Simplifing more
      r20670: Make the logic more clear
      r20689: "pdc" and "bdc" have been replaced by "domain controller"
      r20924: Change the way searches are performed, also change a bit the layouts
      r20925: Rename file following naming qooxdoo's convention
      r20926: Modify the classname as well
      r20927: Remove leftovers
      r21048: Start coding add/modify widgets.
      r21065: The framework is complete (yes the gui layout still sucks but that will
      r21095: Expose all naming contexts
      r21118: Looks a bit better ...
      r21126: Enhance the modal window so that it gets focus and just presing enter works.
      r21136: First attempt at implementing add/modify rpc calls.
      r21249: Now the ldif is generated correctly, but still rpc is not happy
      r21252: Add operation works now, still to do mod and del ops
      r21266: Add/Modify/Delete operations seem to work correctly now
      r21328: Ok, now we can successfully modify the ldb and refresh the tree
      r21348: Fix the build.
      r21351: Change ldb ejs bindings return codes.
      r21366: Until we have a schema enforcing module (which will make it
      r21367: Clear out the table with a deleted object contents after the record is deleted.
      r21368: Adapy Json to the new ldb functions return object, this
      r21371: Ehmm I was reseting the wrong dataModel...
      r21418: Return the ratio as well
      r21419: Give some more clue about what's going on
      r22471: Convert more code to use proper LDB error codes.
      r22696: Make sure this is an ascii char
      r24650: Some more instructions to have make GSS-TSIG work
      r24651: Allow dynamic updates for the domain controller over its own name
      Fix default domains support using compat syntax.
      r25573: Add my (C) as well
      Fix warning
      Merge commit 'origin/v3-2-test' into v3-2-simo
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-simo
      Merge in J.Layton patch and resolve conflict.
      While 'data' is usually 0 terminated, nothing in the spec requires that. The correct way is to copy only 'length' bytes.
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-simo
      r26574: Do not call functions in the variable declaration, fix checking for tmp_ctx,
      r26581: Make ldb_wait uniform, so that it is easy to remove it completely from modules
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-simo
      Fix winbindd running on a Samba DC,
      Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test
      Revert "Merge in J.Layton patch and resolve conflict."
      Make sure mount.cifs.c compiles on Fedora 9 with gcc 4.3
      Update homepages for talloc, tdb and ldb subprojects
      Enable use of Relocations Read-Only, if supported, for enhanced security.
      Fix trusted users on a DC that uses the old idmap syntax. There was no default backend therefore on IDs were mapped by default.
      Make sure we do not reference req after it has been freed
      Fix problems with event context not being the parent.
      Add useful provisioning debugging options
      Remove more event_context_init() uses from function calls within deep down the code.
      Fix build
      Make sure we have an event context available
      Remove temporary debug statement
      Fix more failing tests to pass the event context.
      Revert "Add port number for ncacn_http epmapper."
      forgot to add docs for this new parameter
      fix bug #3434
      fix example usage of -D paramter
      Explain it in another way, that will not set up false expectations
      formatting
      mention idmap domains
      man page for IDMAP_AD
      Copy&Paste leftover for the example description, fix it.
      Fix idmap_ad sgml
      Document the ldapsam:editposix parametrical option
      Document the net sam options
      Auth info for idmap_ldap
      Make the manpage reflect the command behavior
      We don't use svnweb since long, correct the howto and point users to viewcvs
      Explain better what happens when you set to 0 these bits.
      Better doc mount.cifs.
      Make it possible to build libevents standalone.
      Make it possible to disable gnutls at configure time,
      This patch make it possible to build the events library completely
      Make up the right dependencies now that ldb depends on libevents
      Use a custom init function for samba4 that sets a samba4
      Fix events_aio
      Cosmetic fixes.
      Ups fix typo in error type
      Cleanup,
      Now that we pass down the event context, start removing calls to
      Cleanup.
      Note that making ldb the event context parent seem to lead to races when
      Fix cleanup.
      Fix ldb_wrap.c
      Fix build
      Try to get a bit further with provisioning
      Make code more readable, fix indentation and traling spaces.
      More clean up, indentation and trailing space removal
      Clean up the rest of the file too
      Clean up winbindd_group.c too
      Make again idmap_init static
      Add back mem leak fixes
      Remove one nested level by reversing if condition
      Fix regression introduced with 4086ef15b395f1a536fb669af2103a33ecc14de4
      Split lookup_name() and create a new functiong called
      Merge branch 'v3-devel' of ssh://git.samba.org/data/git/samba into v3-devel
      Merge branch 'v3-devel' of ssh://git.samba.org/data/git/samba into v3-devel
      The msync manpage reports that msync *must* be called before munmap. Failure to do so may result in lost data. Fix an ifdef check, I really think we meant to check HAVE_MMAP here.
      Revert "Split lookup_name() and create a new functiong called"
      Always free tmp contexts before returning
      Fix for bug 5571
      Fix spellings and file names
      Remove ancient remains of first experimentations about
      Update homepages for talloc, tdb and ldb subprojects
      The msync manpage reports that msync *must* be called before munmap. Failure to do so may result in lost data. Fix an ifdef check, I really think we meant to check HAVE_MMAP here.
      Add comment to explain version bump
      Fix standalone builds adjusting to new relative path.
      Add shared-build target to talloc.
      Add shared-build target to tdb.
      Fix libevents standalone build
      Fix ldb standalone build.
      Merge ldb_search() and ldb_search_exp_fmt() into a simgle function.
      Fix python test, we can't check only the first member, because the order
      Fix nasty bug that would come up only if a client connection to a remote
      Temporary build fix for the merged build
      LDB ASYNC: Core files
      LDB ASYNC: ldb_tdb backend
      LDB ASYNC: other backends
      LDB ASYNC: core modules
      LDB ASYNC: samba4 modules
      LDB ASYNC: ldb misc changes
      LDB ASYNC: misc changes
      Fix crash bugs in error paths: ac is not yet initialized here, and we don't
      Revert chunk applied by mistake as part of the cosmetic fixes fromi Mathias
      Fix very old bug in ASQ
      Transform the sequence_number operation into a normal extended operation as it should always have been. Make it also async so that it is not a special case.
      Length comparison of the linearized version is not correct.
      Revert "Length comparison of the linearized version is not correct."
      s4:cosmetic: Remove trailing tabs and spaces
      Fix LDB_MODULESDIR for ldb standalone builds
      Do not start a transaction this way.
      Fix the mess with ldb includes.
      Fix standalone configure scripts
      Fix misfiled headers.
      Add helper function to get a module name, may be useful for debugging.
      Fix all other modules to use ldb_module.h instead of ldb_private.h
      Bump up ldb version to 0.9.3 after latest changes
      Fix proxy module
      Do not install private headers
      Install mising public headers
      Explicitly include ldb_handlers.h where necessary
      Start restoring the sqlite3 backend
      Fix headers, only ldb.h is required
      Make schannel not depend on samdb anymore.
      For some unknown reason ldbrename was not being built in samba3.
      Make all transactions nested in ldb. The current samba4 code expects this
      Fix GDB_PROVISION mode
      Fix headers, ldb_includes.h is a private header,
      Use stdbool.h instead of manually defining bool
      Make struct tevent_req opaque
      Fix wbclient.c wrt tevent_req changes too.
      Fix potential segfaults using freed memory.
      Fix extended operation return path.
      Prevent reallocs of the talloc pool itself
      Avoid duplicate aces
      Fix profile acls in some corner cases
      Add release scripts for talloc and tdb
      Update tdb and talloc web pages
      Pass also sername to check password script
      Move smb_create_user() in samsync
      Consolidate user create/delete paths in smbpasswd
      Consolidate create/delete account paths in pdbedit
      Remove trailing whitespaces
      Make it possible to change machine account sids
      Add option to --disable-python on build
      Add new replace check for --version-script
      Add exports file and abi checker for tdb
      Add exports file and abi checker for talloc
      Add exports file and abi checker for tevent
      fix release scripts to always git clean
      Revert "For tevent to install tevent_util.h"
      Restore ABI compatibility for talloc.
      Expose functions need by backend writers
      Sort the signature files
      s3: Fix libtalloc so version
      ldb: cosmetic changes in ldb_dn
      ldb: Depend on libtalloc 2.0.0
      s3-smbpasswd: Fix Bug #6584: allow DOM\user when changing passwords remotely.
      Add release script for tevent
      Save and report the correct errno value.
      Check we read off the compelte event from inotify
      Fixing timeval calculation
      Fix builds with external talloc
      Fix builds with external tdb
      talloc: Change the way mksysms work
      talloc: Move release script under /script too
      talloc: Make abi checks in release script
      talloc: Fix exports and increment talloc version
      Fix map readonly in smb.conf, it is a single word
      Fix release script with newer versins of git
      Fix release script to work with recent git versions
      s4: Fix the build
      s4:ldb Fix declaration in the middle of the code
      s4:cleanups remove trailing spaces and tabs
      s4:cleanups More trailing spaces and tabs
      Fix comment
      Fix comment/debug messages
      Strip trailing spaces
      s4:kdc Simplify header files
      s4:PAC Streamline pac-glue
      s4:PAC Streamline pac-glue step 2
      s4:PAC make common functions public
      s4:windc move windc plugin in its own file
      cleanup: remove trailing spaces and tabs
      s4:kdc Use better db context structure
      s4:kdc Use a clearer name for the samba kdc entry
      s4:kdc move db functions in their own file
      s4:kdc Fill in more data fields
      s4:kdc remove dead code and comments
      s4:ldb add support for permissive modify control
      s4:ldb Fix check made conditional by mistake
      s4:ldb quiet down rootdse control registration
      s4:kdc Fix netbios name retrieval
      s4:kdc Streamline client access verification call
      s4:kdc streamline context initialization
      tdb: raise version to 1.2.1
      talloc: Fix abi checks and ifdefs
      talloc: Fix abi checks in release script
      release-scripts: parametrize scripts
      Introduce lp_safe_widelinks()
      s4:kdc Fix double free and uninitialized memory.
      s4:kdc Fill in created_by principal field
      s3:rpc streamline memory handling
      readability reformatting
      remove trailing tabs and spaces
      s4:lsa open trusted domain also with dns name
      cleanup
      s4:netlogon enhance DsrEnumerateDomainTrusts
      ldb:web Fix typo
      s4:netlogon fix segfault
      s4:netlogon GetTrustedDomainInformation
      s3 Fix the build
      s3 move the sitename cache in its own file
      s3:schannel more readable check logic
      s4:schannel more readable check logic
      schannel: merge header files
      s3:schannel fix memory hierarchy
      s3:schannel streamline interface
      schannel_tdb: make code compilable in both trees
      s4:schannel merge code with s3
      s4:cleanup remove unused schannel ldb code
      s4:netlogon remove wrong ZERO_STRUCT of output
      Revert "s4-smb: Migrate named_pipe_server to tsocket."
      s4:lsa cleanup trailing spaces and tabs
      s4:lsa avoid confusing ourselves over sam_ldb
      s4:lsa use the correct way to store a domain sid
      idl:lsa change string type
      s4:kdc make function static
      s4:kdc add mit plugin code
      s3:groupmap revert to tdb storage
      s3:ads fix dn parsing name was always null
      s3:tldap add own filter parsing
      s4:ldb fix escape parsing
      Fix typo
      Fix typo and convert spaces to tabs
      s4:idl change level to type in lsa_ForestTrustRecord.
      s4:idl add lsaRSetForestTrustInformation
      s4:torture-ndr add lsarSetForestTrustInformation ndr test
      s4:lsa Abstract crypto (un)wrapping in separate functions
      s4:lsa move code to add trusted domain user into its own function
      s4:lsa Functions to set Domain Trust Information
      idl:drsblobs add code to interpret msDS-TrustForestTrustInfo
      idl: fix forest trust information idl
      idl: fix comment and convert whitespaces to tabs
      tdb: update exports and signatures files
      s4:lsa implement lsaRSetForestTrustInformation
      s3-spoolss: Added winreg helper functions
      s3-spoolss: Add date and version winreg helpers.
      s3-spoolss: Move info_ctr conversion to a public helper.
      s3-spoolss: Added a winreg_add_driver function.
      s3-spoolss: Added a winreg_get_driver function.
      s3-spoolss: Added a winreg_del_driver function.
      s3-spoolss: Added a winreg_get_driver_list function.
      s3-smbd: group print relate data in own structure
      smbd: move printfile_offset() within write_file()
      s3-spoolss: Remove duplicate macro.
      s3-spoolss: Fixed winreg_printer_query_XXX.
      s3-spoolss: Make spoolss_Time_to_time_t public.
      Move standard printcap parsing to print_standard.c
      Make pcap headers private
      s3-spoolss: Removed the Phantom DeviceMode.
      tsocket: Improve the language in some parts of the guide.
      torture: fix typos
      named_pipe_auth: implement tstream_npa_accept_existing_send/recv
      s4:smbd: Add tstream to the stream_connection structure
      s4:smbd: Use tstream_npa_accept_existing to accept named pipe connections
      s3-rpc_server: Created a per connection spoolss pipe.
      s3-lanman: Migrated to rpc_connect_spoolss_pipe().
      s3:auth: add function to convert samu to netr_SamInfo3
      s3:auth add function to copy a netr_SamInfo3 structure
      s3:auth use info3 in auth_serversupplied_info
      s3:auth Free sampass as soon as we have server_info
      s3:auth add function to convert wbcAuthUserInfo to netr_SamInfo3
      Fix Out of memory checks
      s3:auth remove login_server from server info
      s3:auth Add comment to clarify usage of session keys.
      s3:passdb Fix memory leak
      s3:smbd Use the right num_sids
      s3:auth fix info3 duplication function
      s3:auth make it easier to trace auth modules
      s3:smbd make yp cache local.
      s3:smbd user_in_network() doesn't need sconn anymore
      s3:smbd user_in_list() doesn't need sconn anymore
      s3:smbd user_ok doesn't need sconn anymore
      s3:smbd map_username() doesn't need sconn anymore
      ldb: Remove unexisting and mistyped function from header
      Revert "ldb: Remove Samba-specific symbols."
      s3:auth make sure we set the right username
      s3:auth check the user is valid first
      s3:auth set the resolved user sid in the fake sam account
      s3:auth handle unix domain sids in samu
      s3:auth create nt token from info3 directly
      s3:auth remove unused structure member
      s3:passdb Export function to calculate the proper primary group sid
      s3:auth return the full passwd struct from check_account
      s3:auth make sure the primary group sid is usable
      s3:rpc fix potential out of bound memory access
      s3:rpc handles are used by all pipes, use better name
      s3:rpc make num_pipe_handles get an actual pipe as argument
      s3:smbd add utility function to check if there are open pipes
      s3:cleanup remove trailing spaces
      s3:cleaunp reformatting for readability
      s3:lib make server contexts generic
      s3:winbindd use common server context functions
      s3:rpc improve handles memory hierarchy and use better name.
      s3:auth fix samu->info3 conversion
      s3:auth Fix switch statement referencing a uninitialized variable
      s3:winbindd_samr Do not use static contexts
      s3:rpc user idl define dcerpc_ctx_list instead of custom RPC_CONTEXT
      s3:dcerpc Add prs_parse_dcerpc_bind
      s3:dcerpc Use prs_parse_dcerpc_bind
      s3:dcerpc Remove unused structure and functions
      s3-dcerpc: use dcerpc_push_ncacn_packet() in create_rpc_bind_auth3()
      s3-dcerpc: use dcerpc_pull_dcerpc_auth() in cli_pipe_verify_schannel()
      s3-dcerpc: use dcerpc_push_dcerpc_auth() in add_ntlmssp_auth_footer()
      s3-dcerpc: use dcerpc_push_dcerpc_auth in add_schannel_auth_footer()
      s3-dcerpc: use dcerpc_pull_dcerpc_auth() in rpc_finish_spnego_ntlmssp_bind_send()
      s3-dcerpc: make dceprc_push_dcerpc_auth public
      s3-dcerpc: make dcerpc_pull_dcerpc_auth() public
      s3-dcerpc: Use dcerpc_auth in api_pipe_bind_req()
      s3-dcerpc: Use dcerpc_pull_dcerpc_auth in api_pipe_bind_auth3()
      s3-dcerpc: Fix miscalculation of buffer start address
      s3-dceprc: Fix auth_length in auth3 response
      s3-dcerpc: Fix ntlmssp sign/seal.
      s3-dcerpc: Remove unused prototype
      s3-dcerpc: Use dcerpc_set_frag_length()
      s3-dcerpc: Remove unused headers
      s3-dcerpc delay rpc header unmarshalling
      sr-dcerpc: add dcerpc_push_ncacn_packet_header()
      s3-dcerpc: use dcerpc_push_ncacn_packet_header() in create_next_pdu_ntlmssp()
      s3-dcerpc: Use dcerpc_push_ncacn_packet_header() in create_next_pdu_schannel()
      s3-dcerpc: use dceprc_push_ncacn_packet_header in create_next_pdu_noauth()
      s3-dceprc use a DATA_BLOB to hold the curren pdu in pipes_struct
      s3-dceprc: Store opnum in its own variable
      dcerpc: move dcerpc_pull_auth_trailer into a the common dcerpc_util.c file
      s3-dcerpc: Use dcerpc_pull_ncacn_packet() to unmarshall dceprc requests
      s3-dcerpc: Remove unused functions
      s3-dcerpc: Remove unused members
      s3-dceprc: Add debug messages
      s3-dcerpc: pass the packet to setup_bind_nack()
      s3-dcerpc: fix dcerpc_push_ncacn_packet, pass arg by address
      s3-dcerpc: Rearrange api_pipe_bind_req() to do checks before allocating memory
      s3-dcerpc: Use a DATA_BLOB in bind processing and avoid one mem copy
      s3-dceprc: Use dcerpc_push_ncacn_packet() in api_pipe_bind_req()
      s3-dcerpc: Use dcerpc_push_dcerpc_auth() for spnego auth continuations.
      s3-dcerpc: Use dcerpc_push_ncacn_packet() in api_pipe_alter_context()
      s3-dcerpc: Remove unused functions and headers
      s3-dcerpc: Break memory hierarchy for shared structure
      s3-dcerpc: Break memory hierarchy for shared structure
      s3-dcerpc: Delay parsing rpc header in client code
      s3-dcerpc: Pull the whole packet at once instead of fetching just the header
      s3-dcerpc: Do not reparse the header
      s3-dcerpc: Remove unused function
      s3-dcerpc: Do not parse the packet twice.
      s3-dcerpc: Stop using hand marshalling in rpc_finish_auth3_bind_send()
      s3-dcerpc: Stop using hand marshalling in create_next_pdu_ntlmssp()
      s3-dcerpc: Stop using hand marshalling in create_next_pdu_schannel()
      s3-dcerpc: Stop using hand marshalling in create_next_pdu_noauth()
      s3-dcerpc: Remove unused functions and headers
      s3-dcerpc: Convert rdata from prs_struct to a simple DATA_BLOB
      s3-dcerpc: Convert frag from prs_struct to a simple DATA_BLOB
      s3-dcerpc: consolidate respones packet creation code
      s3-dcerpc: Refactor code and stop using ncacn_packet_header
      dcerpc: remove ncacn_packet_header and related functions
      s3-dcerpc: Padding is never done on a DCERPC_PKT_BIND_ACK packet.
      s3-dcerpc: Move common helpers into a common file
      Reformat and cleanup
      s3-dceprc: Use IDL defined constants for length calculations
      s3-dcerpc: Read a pdu in 2 steps, header first the payload
      s3-dcerpc: Use DATA_BLOB instead of prs_struct for incoming fragments
      s3-dcerpc: Use DATA_BLOB instead of prs_struct for reply_pdu
      s3-dcerpc: Avoid unnecessary memory allocation for dcerpc_ctx_list
      s3-dcerpc: Use DATA_BLOB instead of prs_struct for rpc_out
      s3-dcerpc: Use DATA_BLOB instead of prs_struct for req_data
      s3-dcerpc: Use DATA_BLOB for pipes_struct input data
      s3-misc: Move smb_io_time() to regfio.c
      s3-dcerpc: Use a local function to dump pdu regions
      s3-parse_prs: Remove unuesd functions
      Move the remnants of rpc_parse code under registry/
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s3-dcerpc: Fix ability to receive Big Endian PDUs
      s3-dcerpc: Move common cli/srv functions into a common file
      s3-dcerpc: Move mere processing functions from srv_pipe_hnd.c to srv_pipe.c
      s3-dcerpc: Fix build and remove unneeded headers
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s3-ntlmssp: Remove ntlmssp_end and let the talloc hierarchy handle it.
      s3-auth: Cleanup and readability fixes
      s3-auth: Simplify how we free the auth_context
      s3-auth: auth_make ntlmssp_state the parent context
      s3-auth: Use talloc hierarchies to properly free auth_ntlmssp_state contexts
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s3-auth: Remove unused variable.
      s3-auth: Refactor and rename auth_ntlmssp_server_info()
      s3-auth: Move auth_ntlmssp wrappers in their own file
      s3-auth: Add auth_ntlmssp wrapper for client side
      s3-dcerpc: Unifiy cli_pipe_auth_data and pipe_auth_data
      dcerpc: Clarify what the arguments of dcerpc_pull_auth_trailer() actually represent.
      misc: cleanup cli_krb5_get_ticket()
      misc: cleanup get_krb5_smb_session_key()
      s3-libsmb: Use data_blob_talloc to get krb5 ticket and session keys
      s3-dcerpc: Properly initialize output buffers on nak/fault
      s3-dcerpc: Fix potential memleak
      cleaup: Reformat cli_get_session_key()
      s3-rpc_server: Cleanup the way we free pipe auth data
      s3-spoolss: Migrated NT_DEVICEMODE to spoolss_DeviceMode.
      s3-spoolss: Migrated driver functions to winreg.
      s3-spoolss: Use spoolss_PrinterInfo2 for job info.
      s3-spoolss: Use spoolss_PrinterInfo2 in construct_printer_driver_info_level.
      s3-spoolss: Removed construct_dev_mode() function.
      s3-spoolss: Convert do_drv_upgrade_printer() to winreg functions.
      s3-spoolss: Use spoolss_PrinterInfo2 in notify code.
      s3-printing: Convert print_time_access_check.
      s3-printing: Convert print_driver_in_use.
      s3-printing: Converted printer publishing functions.
      s3-spoolss: Get rid of get_server_name.
      s3-spoolss: Use winreg_delete_printer_key to delete printers.
      s3-spoolss: Removed unused set_printer_dataex().
      s3-smbd: Added code to print via spoolss.
      s3-printing: Made print_job_start more robust.
      s3-printing: Handled case when smbd spools a file on behalf of spoolss.
      s3-smbd: Migrated to new spoolss functions for printing.
      s3-printing: Removed unused printfsp.c.
      s3-spoolss: Use WERROR for print_job_delete.
      s3-printing: Moved printing.c headers to include/printing.h.
      s3-smbd: Use the right check to test if we can print.
      s3-printing: Removed unused function print_job_fd().
      s3-smbd: Convert reply_printqueue to use spoolss.
      s3-spoolss: Fixed a possible segfault in winreg_get_printer.
      s3-spoolss: Avoid segfault, check drivername is actually not NULL.
      s3-dcerpc: Move marshalling of dcerpc_auth_header in the callers
      s3-dcerpc: Pass explicit arguments so that this is not client specific
      s3-dcerpc: Introduce generic helper function to add auth trailer
      s3-dcerpc: Move dcerpc_add_auth_footer() to the common helpers file
      s3-dcerpc: Use the common dcerpc_add_auth_footer() in the server code
      s3-dcerpc: Make dcesrv_auth_request() return NTSTATUS codes
      s3-dcerpc do not pass pipes_struct to dcesrv_auth_request()
      s3-dcerpc: Split auth checking into a generic function.
      s3-dcerpc: Add the same paranoia checks we have in the client code
      s3-dcerpc: Make dcerpc_check_auth() common code
      s3-dcerpc: Use dcerpc_check_auth in client code too
      s3-dcerpc: Set flags directly instead of calling unimplemented functions.
      s3-auth: Remove unimplemented functions
      s3-dcerpc: Cleanup and refactor create_rpc_bind_req()
      s3-dcerpc: Use dcerpc_AuthType in pipe_auth_data
      s3-rpcclient: Allow choosing spnego mech: (ntlm/krb5)
      misc: Remove unused structure elements
      s3-dcerpc: revive cli_rpc_pipe_open_krb5()
      s3-dcerpc: consolidate unmarshalling of dcerpc_auth
      s3-dcerpc: Add auth trailer only when appropriate.
      s3-dcerpc: Refactor calculate_data_len_tosend()
      rpcclient: Use DCERPC_AUTH_LEVEL_CONNECT if no sign/seal is set for krb5 auth
      s3-decrpc: Introduce gssapi support for dcerpc krb5 auth
      s3-dcerpc: Add next authentication step with gssapi
      s3-dcerpc: Add sign/seal with gssapi
      smbd: Fix build warning
      s3-dcerpc: Avoid ifdef, it is handled within dcerpc_gssapi.c already
      Do not refernece pipe_auth_data directly in dcerpc_gssapi.c
      s3-dcerpc: Try to fix build when gssapi_ext.h is not available
      rpcclient: Use DCERPC_AUTH_LEVEL_CONNECT if no sign/seal is set for ntlmssp
      s3-dcerpc: Add SPNEGO incapsulation for KRB5 auth
      s3-dcerpc: add sign/seal support when using SPNEGO/KRB5
      s3-dcerpc: use common spengo wrapper code for client SPNEGO/NTLMSSP
      s3-dcerpc: Remove unused functions
      s3-dceprc: consolidate use of dcerpc_push_dcerpc_auth()
      s3-dcerpc: Make function to guess pdu sizes common.
      s3-dcerpc: rationalize packet creation in the server code
      s3-dceprc: Improve dcerpc_guess_sizes() interface
      s3-dcerpc: Use dcerpc_guess_sizes in the server code too.
      cleanups: Trailing spaces, line length, etc...
      Add my (c)
      s3-dcerpc: Pull packet in the caller, before validation
      Change debug statements to use __location__
      s3-dcerpc: make a few local functions as static
      s3-dcerpc: Remove unused function
      s3-dcerpc: Check data and return appropriate error
      s3-dcerpc: properly implement gse/spnego_get_session_key
      s3-dcerpc: Use common send functions for ntlmssp too
      s3-ads: Remove unused function and file
      s3-ads: Split, simplify and cleanup keytab functions
      s3-ads: cleanup ads_keytab_add_entry()
      s3-ads: cleanup ads_keytab_create_default()
      s3-ads: cleanup ads_keytab_list()
      s3-ads: Remove unused wrapper and make function static
      s3-ads: Fix wrong test in if statement
      s3-dcerpc: Allocate structure members on the right context
      s3-auth: Add helper function to retrieve the unix user from a kerberos ticket
      s3-smbd: Use helper function to resolve kerberos user
      s3-smbd: User helper function to resolve kerberos user for smb2
      s3-auth: add helper to get server_info out of kerberos info
      s3-smbd: use make_server_info_krb5()
      s3-smbd: use make_server_info_krb5() in smb2 too.
      rpcclient: support starting sign/seal with krb5/spnego
      s3-krb: Reformat and add doxygen comment to decode_pac_data()
      s3-dcerpc: add krb5 helpers
      dcerpc-gssapi: add initial server side code
      dcerpc-gssapi: add function to check flags
      dcerpc-gssapi: add function to extract authorization data (PAC) form gssapi context
      dcerpc-gssapi: add function to extract authtime
      dcerpc-gssapi: add function to retrieve client name
      s3-dcerpc: Implement DCERPC_AUTH_TYPE_KRB5 server side
      Revert "s3-kerberos: use krb5 compat macros in fill_keytab_from_password()."
      s3-kerberos: use krb5 compat macros in fill_keytab_from_password()
      s3-spoolss: Rename session counter structure and use talloc.
      s3-spoolss: Allocate printer entries on the pipe struct.
      s3-spoolss: Move Printer_entry to srv_spoolss_nt.c
      s3-spoolss: Rename Printer_entry to struct printer_handle.
      s3-spoolss: Use a single structure for all the back channel data.
      s3-spoolss: Split function to send notification.
      s3-spoolss: Allow multiple client backchannels.
      s3-printing: Added a printer list database.
      s3-printing: Use printer list tdb in pcap.
      s3-printing: Add method to skip refresh if just happned.
      s3-misc: Introduce lp_ncalrpc_dir() in S3, like we have in S4.
      s3-rpc_server: Fixed unhandled error condition.
      s3-rpc_server: Make pipe destructor public.
      s3-rpc_server: Make process_incoming_data() public.
      s3-rpc_server: Added debug to see how much data has been read out.
      s3-rpc_server: Added initial generic RPC server infrastructure.
      s3-rpc_server: Add generic listener callback.
      s3-rpc_server: Addded function to create custom pipes_struct.
      s3-rpc_client: Added a tstream based transport.
      s3-rpc_server: Added helper functions to read data from a ncacn socket.
      s3-rpc_server: Accept connections and process requests.
      s3-rpc_server: Added support for internal connections to external daemons.
      s3-rpc_server: Convert rpc_connect_spoolss_pipe into a generic interface.
      s3-rpc_server: Renamed rpc_ncacn_np_internal.c.
      s3-rpc_server: Moved "external" pipe functions to rpc_ncacn_np.c.
      s3-rpc_server: Moved ncacn_np declarations in common header file.
      s3-winbindd: Use rpc_open_pipe_interface in winbindd.
      s3-dcerpc: move crypto stuff in /librpc/crypto
      gssapi: avoid explicit dependency on dcerpc specific structures
      gssapi: remove unused function argument
      s3-dcerpc: add server helpers for ntlmssp auth
      s3-dcesrv: use ntlmssp helper in srv_pipe.c
      s3-dcerpc: add server helpers for gssapi auth
      s3-dcesrv: use gssapi helper in srv_pipe.c
      spnego: avoid explicit dependency on dcerpc specific structures
      s3-dcerpc: move client spnego stuff in /librpc/crypto
      spnego: make spnego_context public
      s3-dcerpc: add spnego server helpers
      s3-dcerpc: use new spnego server code
      s3-dcerpc: finally remove the legaqcy spnego_type variable from pipe_auth_data
      srv_pipe: reorganize code so that related functions are close to each other
      s3-dcerpc: make auth context opaque
      s3-dcerpc: remove auth_data_free_func
      libcli: fix compile warning
      s3-dcerpc: Use spnego own sign/seal functions
      s3-dcerps: check auth_type
      talloc: make header C++ safe
      ldb: error out when modules are not found
      mit-samba: Allow nesting on the event context
      Increase minor version since a public header has changed
      Fix private libdir and codepages paths
      Fix broken build with make dist tarballs
      sr-epmap: Minor cleanups and fixes
      s3-epmap: add ncalrpc listener code
      Fix public header not to include private (not installed) ones.
      dcerpc: we do not need these as public headers
      lib-util: put data_blob back in the public library
      s3-epmapper: Fix allocation of data on the wrong context
      cleanup: fix some trailing spaces
      s3-epmapper: fix vars init and return errors
      s3:printing Make print_queue_receive public
      s3:spoolssd Add skeleton for spoolss daemon
      s3:spoolssd Create our own log file
      s3:spoolssd handle smb.conf reloads directly
      s3:spoolssd Add spoolss own signal handlers
      s3:spoolssd Initialize the spoolss rpc interfaces
      s3:spoolssd Start spoolss from smbd
      tdb_expand: limit the expansion with huge records
      tdb_backup: avoid transaction on backup file, use lockall
      rpc_server: Always use rpc_pipe_open_interface()
      s3-rpc_server: Move pipe/handles functions
      s3-rpc_server: Create common function to allocate pipes_struct
      s3-rpc_server: Do not set msg_ctx twice
      s3-spoolss: Improve memory efficiency.
      s3-rpc_server: Remove dead code
      s3-rpc_server: remove unnecessary talloc_free
      s3-rpc_server: remove useless code
      s3-rpc_server: Use talloc for pipe_rpc_fns
      talloc: preserve context name on talloc_free_children()
      s3:smbd - Move printing queue stuff
      s3:server Consolidate printing related initialization
      libutil: use AI_ADDRCONFIG only when AI_NUMERIC is not defined
      lib-util: Make useful function a common utility.
      lib-util: Make create_unlink_tmp argument optional
      tevent: cleanup nesting counter when doing a full reinit.
      s3-printing: No need to register to smbd's children list
      s3-prefork: implement prefork framework
      s3-prefork: add asynchronous functions
      s3-prefork: add way to manage number of clients per child
      s3-rpc: Expose some internal functions
      s3-rpc_server: add termination function
      s3-spoolssd: Use the prefork framework in spoolssd
      s3-spoolss: make listening asynchronous
      s3-spoolssd: Use parametric option for prefork parameters
      s3-prefork: provide means to expand the pool size
      s3-spoolssd: expand children pool when necessary
      s3-prefork: provide way to send a signal to all children
      s3-spoolssd: propagate SIGHUP to children
      s3-prefork: add support for multiple listning file descriptors
      s3-prefork: better timing out semantics
      s3-prefork: Inline Doxygen Documentation
      s3-prefork: Provide a cleanup function
      s3-printing: Rework how the background process is started
      s3:spoolssd Start spoolssd from printing_subsystem_init
      s3-prefork: Set up a SIGCHLD handler by default
      s3-prefork: Pass messaging context around too
      s3-prefork: Return tsocket_address for client and server
      s3-printing: Force pcap reload when all ready
      s3-prefork: Pass the child a child_id
      s3-spoolssd: Use the child_id to open log files
      s3-printing: Allow bq process to have own logfile
      s3-spoolss: Use a global variable for the pool
      s3-printing: make sure to block SIGHUP ...
      s3-prefork: Fix use of child id.
      s3-spoolss: Fix printers related messaging
      s3-printing: Add child handler to bq process
      s3-spoolss: do not call pcap_cache_reload() directly
      s3-printing: Do not try to force reload.
      s3-messaging: Remove obsolete class.
      s3-messaging: Fix messaging classes.
      s3-messaging: Change classification of MSG_SMB_CONF_UPDATED.
      s3-messaging: Do not register to classes we are not going to use.
      torture: use tevent_ functions names instead of the legacy event_ ones
      s4:messaging: use tevent_ function names instead of legacy event_ ones
      s4:dsdb: use tevent_ fn names instaed of legacy event_ ones
      s4:libcli: use tevent_ fn names instead of legacy event_ ones
      s4:librpc: use tevent_ fn names instead of legacy event_ ones
      s4:ntvfs: use tevent_ fn names instead of legacy event_ ones
      s4:smbd: use tevent_ fn names instead of leagcy event_ ones
      s4:lib: use tevent_ fns names instead of legcay event_ ones
      s4:misc: remove last usage of legacy event_ fn names
      replace: Check if we have mremap() available
      util: add function to extend anonymous shared memory
      s3-prefork: Do not use mmap/mremap/munmap directly
      s3-messaging: IDMAP_ messages belongs to the Winbind range
      Revert "s3-messaging: IDMAP_ messages belongs to the Winbind range"
      s3-rpc_server: Reduce code duplication
      s3-rpc_server: Add helper to define/retrieve daemons configuration
      s3-rpc_server: Move config helpers in one place.
      s3-rpc_server: Replace RPC_SERVICE_MODE_DAEMON checks
      selftest: Fix daemon testing to use the new syntax.
      s3-rpc_server: Use rpc_service_mode() in rpc_pipe_open_interface()
      s3-rpc_server: Use rpc_service_mode() in np_open()
      s3-rpc_server: Use rpc_epmapper_mode() in ep_register()
      s3-lsasd: Import fixes from spoolssd
      s3-spoolssd: Fix spoolss logging.
      s3-prefork: Allow better management of allowed_clients
      s3-spoolss: Introduce helper function to manage pool.
      s3-prefork: Add common utilities for daemons
      s3-spoolssd: Use prefrok utils to manage children
      s3-lsasd: Use prefrok utils to manage children
      s3-prefork: do not use a lock_fd, just race on accept()
      s3-prefork: Fix worker flags handling.
      s3-prefrok: Handle only valid children
      s3-prefork: add a few more utility functions
      s3-spoolssd: User new prefork helpers to simplify code.
      s3-lsasd: User new prefork helpers to simplify code.
      s3-prefork: Improve heuristics
      s3-prefork: Improve error detection when handling new connections
      s3-messaging: Add preforked child-parent message types
      s3-spoolssd: Send a message to the parent when we accept a connection
      s3-lsasd: Send a message to the parent when we accept a connection
      s3-prefork: Add parent->client messaging
      s3-lsasd: Listen on parent messages
      s3-spoolssd: Listen on parent messages
      s3-prefork: Fix code to retire children
      s3-lsasd: Remove useless check
      s3-spoolss: Remove useless check
      s3-prefork: Listening fds must be in non-blocking mode
      docs: Add documentation for the rpc_daemon parametric option.
      s3-group-mapping: Remove unused functions.
      s3-passdb: Cleanup use of fstring and move to talloc.
      ndr.pc: needs samba-util not samba-hostconfig
      pac: Fix wrong memory allocation check
      s3-group-mapping: Remove fstrings from GROUP_MAP.
      pdb-interface: Do not use unid_t here
      idl: Improve MS-PAC IDL
      s3-pdb: Break SECRETS3 dependency on PDB.
      s3-pdb: Make ADS-type backends updates secrets.tdb.
      krb5_wrap: remove duplicate declaration and dead ifdef
      gensec_gssapi: keep private header file close to the actual code
      s4-auth-krb: Make impersonate_principal_from_credentials static.
      s4-auth-krb: Make cli_credentials_invalidate_client_gss_creds static.
      s4-auth-krb: Move function into more appropriate header.
      s4-auth-krb: Make kerberos_enctype_bitmap_to_enctypes static.
      s4-auth-krb: Make kerberos_enctype_bitmap_to_enctype static.
      s4-auth-krb: streamline and rename enctype functions
      s4-auth-krb: Streamline and cleanup code to make it readable.
      s4-auth-krb: Move keytab functions in a separate file.
      s4-auth-krb: Move function to db-glue.c and make it static.
      s4-auth-krb: Simplify salt_princ handling.
      s4-auth-krb: Remove unneded dependency on kerberos_util.
      s4-auth-krb: Remove dependency on credentials too.
      auth-krb: Nove oid packet check to gensec_util.
      auth-krb: Use simpler method to extract keytype.
      auth-krb: Make functions static.
      auth-krb: Move pac related util functions in a single place.
      krb5_wrap: krb5_string_to_key / krb5_encrypt_block are deprecated.
      srv_keytab: Pass krb5_context directly, it's all we use anyways.
      gse: Remove unnecessary header.
      clikrb5: Move pure krb wrapper functions from libads to clikrb5.
      Fix typo
      Fix Error messages
      waf: Fix mispelling
      Move README file in the right place.
      loadparm: Fix broken lp_ulong utility function
      loadparm: Add convenience function to return long integers
      loadparm: Add helper function to fetch default lifetime policies
      Use loadparm helper to find lifetime defaults
      Move kdc_get_policy helper in the lsa server where it belongs.
      Make krb5 context initialization not heimdal specific
      For now just disable this Heindal specific stuff in the MIT build
      Make krb5 wrapper library common so they can be used all over
      krb5_samba: Add support for krb5_princ_size when using Heimdal
      Cracknames: use krb wrapper functions so it works with MIT
      Avoid warning about KRB5_DEPRECATE with MIT libs
      Fix pam_winbind build against newer iniparser library
      addns: clean up headers
      replace: Fix use of mktemp
      Fix krb5_samba.c build
      krb5samba: Remove unnecessary include file
      s4-auth-krb: avoid useless condition
      krb-init: define out heimdal specific stuff in mitkrb build
      Move kerberos_kinit_keyblock_cc to krb5samba lib
      Move kerberos_kinit_password_cc to krb5samba lib
      Split normal kinit from s4u2 flavored kinit
      s4-auth-krb: smb_rd_req_return_stuff is used only in gensec_krb5
      kerberos_pac: Fix code to work with MIT too
      keytab_copy: Fix style, whitespaces
      Fix keytab_copy to compile with MIT librariues too
      Move keytab_copy to krb5samba lib
      s4-auth-krb: Disable code in MIT build
      krb5samba: Add compat code to initialize keyblock contents
      s4-auth-krb: Use compat code to initialize keyblock contents
      Fix compiler warning
      krb5samba: Add compat krb5_make_principal for MIT build
      Fix incompatible assignment warning
      krb5samba: Add compat function for krb5_kt_compare
      s4-auth-krb: Make srv_keytab.c build against MIT Kerberos
      auth-session: MIT doesn't have import/export cred yet
      Fix direct access to krb5_principal structure
      krb5samba: Add krb5_free_checksum_contents wrapper
      addns: Fix talloc hiereachy
      s3-ad-dns: Use more standard uint and booleans defs
      s3-ads-dns: Break dependency on lp_parm
      s3-ads-dns: Avoid unnecessary dependencies
      Move source3/libads/dns.c to lib/addns
      addns: Make ads_dns_lookup_srv pulic
      s4-resolve: Remove dependency on libroken
      auth and s4-rpc_server: Do not use features we currently can't implement with MIT Kerbros build
      gensec_gssapi: Make it possible to build with MIT krb5
      Avoid overriding default ccache for ads operations.
      Support UPN_DNS_INFO in the PAC
      Add memory limiting capability to talloc
      Add tests for talloc_memlimit
      talloc: Convert error cecking macros into fns
      lsa4: Fix a set but unused variable warning

Slava Semushin (11):
      nsswitch/winbind_nss_aix.c(fill_grent): fixed memory leak.
      source{3,4}/torture/smbiconv.c(main): fixed file descriptor leak.
      source3/utils/log2pcaphex.c(main): fixed file descriptors leak.
      source3/torture/vfstest.c(process_file): fixed file descriptor leak.
      lib/tdb/tools/tdbtorture.c: fixed memory leak.
      testsuite/nsswitch/get{gr,pw}ent_r.c(dump_{gr,pw}ent): fixed wrong condition.
      Fix syntax error in lib/ldb/ldb_sqlite3/base160.c
      Fix resource leak in lib/ldb/tools/ldbmodify.c
      source4/client/client.c: Possible memory leaks
      lib/util/util_file.c(file_save): fixed file descriptor leak when read(2) fails.
      source4/lib/registry/patchfile.c(reg_diff_load): fixed possible resource leak.

Sreepathi Pai (3):
      Fix errors in MS-AD_Schema_Attributes_v20080618.txt
      Create schema.ldif at runtime directly from ad-schema files
      Allow ms_schema.py to produce output much like minschema_wspp

Stef Walter (1):
      getpass: Don't fail if stdin is not a tty

Stefan (metze) Metzmacher (2):
      Here's the prefixMap from w2k8.
      Add in Metze's new code to ndr encode the user.DOSATTRIB

Stefan Gohmann (3):
      s4:dlz_bind9: add missing earch bases for windows 2000 domains
      s4:dlz_bind9: Copy dn before changing in b9_has_soa
      s4-dns: dlz_bind9: Check result to avoid segfault

Stefan Metzmacher (9634):
      remove a useless assignment
      This patch adds a better dcerpc server infastructure.
      Update Copyright to 1992-2004
      update copyright to -2004
      update copyright to -2004
      a script which find unused or undefined vars in Makefile or Makefile.in
      fix XFS quotas the macro changed from HAVE_XFS_QUOTA -> HAVE_XFS_QUOTAS
      merge:
      * Fix XFS quotas: XFS_USER_QUOTA -> USRQUOTA
      merge:
      * Fix sys_chown() when no chown() is presend
      merge:
      remove all unused stuff from Makefile.in
      add make [un]installtorture
      let the event_add_XXX() function return a pointer of the allocated event structure
      make dcerpc_pipes[] completely const.
      - make the recalculation of ev->maxfd a bit more efficient.
      * Add SIGABRT to fault handling
      merge:
      initilize ev->maxfd = EVENT_INVALID_MAXFD; before the while() loop.
      sorry, the last commit went in by mistake:-(
      fix last commit, which went in by mistake
      - move the vars used by the backtrace stuff into the #ifdef
      merge the version.h autogeneration stuff from 3.0
      remove autogenerated version.h from CVS
      - remove all STFS related stuff
      - cosmetic fix in configure.in
      remove a lot of unused stuff from the header files
      remove a lot of unused smb.conf options
      add find_unused_options.sh
      remove unused configure checks and options
      merge:
      Makefile.in cleanups:
      fix PROTO_OBJS ... fix make proto on some platforms
      some systems doesn't have ./ in PATH
      remove unused .cvsignore file
      remove unused files
      some compilers don't like the #warning preprocessing directive
      some DEBUG and comment fixes
      - we now specify the object files in the subsystems config.m4 file
      readd this fix:
      const fixes
      remove some unused stuff
      - move all SMB server stuff to smb_server/*
      do some merging from 3.0
      make more function static, they are still available via the function pointers
      - port AUTH and PASSDB subsystems to new
      move include/ntvfs.h to ntvfs/ntvfs.h
      if vfs_cifs want to modify the ntvfs_ops struct, it should
      - add 'print' to the DCERPC binding strings
      remove unused Makefile vars and fix dublication in $(PROTO_OBJ)
      add the TORTURE SUBSYSTEM to the config.m4 scheme
      fix pdb_ldap build if LDAP support was detected
      -   remove unused 'evel ...' calls, we don't need them inside of
      the subsystem name is 'PASSDB' so name the modules 'passdb_XXX'
      as I renamed the PDB subsystem to PASSDB, we need to rename
      do not return a value in a void function
      move more code to the config.m4 scheme
      move the -lpopt replacement to a LIBPOPT subsystem
      move -lpopt replacement code from source/popt/* to source/lib/popt/*
      move the tdb lib code to lib/tdb/*
      move the tdb utils to utils/tdb/*
      move all old configure checks to build/m4/rewrite.m4
      move external configure test programs
      move some cryto stuff to lib/crypto/*
      remove pdb_nisplus, its also removed in samba3, because it was broken
      remove unused NISPLUS/AUTOMOUNT stuff
      don't inlcude rpc/rpc.h and rpcsvc/*.h anymore
      remove the python stuff, this will be rewritten on top of libsmb.so
      - creat the LIBCMDLINE subsystem
      renaming and restructuring of same object file lists
      let the popt replacement stuff survive a make proto
      make proto should not catch any function of the lib/popt/*.c stuff
      change my email address to the samba.org one
      r208: merge the version schema changes from 4_0
      r215: merge over svk fixes from 4_0
      r329: add the shadow_copy vfs module
      r340: fix a segfault in the login_cache code...
      r403: update version to 3.0.4pre1
      r408: - replace (conn->admin_user != True) with (current_user.uid != 0)
      r410: merge tpot's changeset 353 from trunk:
      r413: merge from 4_0:
      r675: merge from SAMBA_4_0:
      r817: - fix a configure logic bug for linux/XFS quotas
      r824: merge from: SAMBA_4_0:
      r840: use quota debug class
      r1007: merge from SAMBA_4_0:
      r2348: fix segmention faults
      r2388: fix client quota support
      r4573: merge -r 4572 from SAMBA_4_0:
      r5225: fix mem leak and debug message
      r6354: merge from 4_0 rev 6353:
      r6925: merge rev 6920 from 4_0:
      r10061: add some description to the default_quota module
      r10163: try to fix the build on fedora 4, when --with-quota is not used
      r10165: - use the sysquota interface on linux by default (as the configure --help, shows since a few years ago)
      r10962: fix setting of quotas on linux kernel with the
      r12660: Happy New Year!
      r14522: sync socket_wrapper code with samba4
      r14618: add --no-process-group to all server programms
      r14624: - add timelimit.c
      r14628: sync timelimit.c with the version from the build-farm repository
      r14632: add basic 'make test' using samba4's smbtorture
      r14676: add make valgrindtest and remove old 'make check' and old 'make test'
      r14678: - we need to use 127.0.0.2/8 as interface for the server
      r14744: allow ./timelimit 5 ./timelimit 20 ./ignore_all_signals
      r14809: - add my email address
      r14820: sync test_posix_p3.sh with test_posix.sh from samba4
      r14863: try to make the generation of bin/timelimit more portable
      r14865: - enforce timelimits for the tests
      r14883: add 'smbd:sharedelay' option, so that we can speed up BASE-DENY2 in make test
      r14884: this doesn't work and causes processes to be left when using ctrl-c (SIGINT)
      r14886: reenable BASE-DENY2 and BASE-DENY3
      r14892: allow:
      r15531: fix linking of smbmnt and smbumount with socket wrapper
      r15620: pass 'target:samba3=yes' to samba4's smbtorture when running samba3's make test
      r15682: fix option passing
      r15686: - start testing the RAW-* tests in make test
      r15691: - samba3 also pass RAW-CHKPATH, RAW-SEEK, RAW-SFILEINFO-BUG
      r15732: samba3 now passes BASE-DENY1
      r15735: also export PREFIX as testit from test_functions.sh needs it
      r15967: enable RAW-OPLOCK in samba3 make test
      r15989: try to make timelimit.c more portable
      r16025: make sure the samba4's smbtorture can be executed
      r16717: patch from Bjoern Jacke to fix compiler warnings on AIX
      r17922: sync samba3's talloc with samba4's and move the samba3 specific stuff to tallocmsg.c
      r17923: turn on null_tracking with the first talloc_init() call,
      r17949: change the comment, talloc_enable_null_tracking() should
      r17951: sync talloctort.c with samba4
      r17953: run bin/talloctort with samba3's make test
      r17959: sync with samba4
      r18065: build talloctort as part of 'make torture'
      r18069: it isn't a good idea to run the PIPE_NUMBER test on a file share...
      r18070: be more verbose when errors happen
      r18099: merge from samba4 to make tcc happy as the same struct name was used in multiple
      r18269: regenerate idl output
      r18373: copy over configure.developer from samba4 which adds
      r18379: make the gdb_backtrace executable
      r18380: the panic action command needs to be different in samba4
      r18390: give a better error code
      r18605: sync dlinklist.h with samba4, that means DLIST_ADD_END()
      r18606: - fix the detection of the working quota implementation
      r18608: -D_SAMBA_BUILD_ was already added in another place to CFLAGS
      r18612: remove RPC-ECHO till it gets fixed
      r18640: move to socket_wrapper to lib/socket_wrapper/
      r18644: bring in libreplace in lib/replace
      r18646: now we can have the socket_wrapper.c completely in sync with samba4
      r18647: print out the failing cammand, this is very usefull for the build farm
      r18648: this is provided by libreplace
      r18649: the PRINTF_ATTRIUTE() macro is provided by libreplace
      r18650: this isn't needed twice in include/includes.h
      r18651: this comment is wrong, was cut'n'paste...
      r18652: libreplace has replacements for strndup and strnlen
      r18653: this stuff is in libreplace...
      r18659: restore BOOL, sorry:-)
      r18662: print out the failing command for dynconfig.o too
      r18664: this stuff is included from libreplace
      r18669: fix the samba3 build...
      r18671: try to fix the build on solaris 10 and maybe some other hosts
      r18672: fix the build on Tru64
      r18673: define the macros even if we don't define bool ourself
      r18687: sync the lib/interfaces.c with lib/socket/netif.c from samba4
      r18698: this stuff isn't needed anymore
      r18699: bail out if the compiler doesn't know about C99 struct initializers
      r18700: nicer order of the tests
      r18701: this tests are in libreplace
      r18705: not all compilers like this
      r18709: add some useful function from samba4
      r18731: fix the build on aix
      r18742: this function returns WERROR
      r18784: hopefully fix the BOOL bug on AIX
      r18797: fix the loading of pam_winbind.so and libnss_winbind.so
      r18798: use libreplace headers in pam and nss modules
      r18804: resume_hnd isn't a ref pointer and can be NULL
      r18809: add a valgrind suppression file to prepare running make test
      r18810: use a copy of samba4's talloc under lib/talloc/
      r18812: newer compilers don't allow non consts in static arrays
      r18813: the generated rpccli_ functions give NTSTATUS
      r18814: diable immediate structs for now until we completely build with them again
      r18895: AIX need to call pidl with --uint-enums as the compiler doesn't
      r18901: try to fix the samba3 build without having ldap
      r18920: merge socket_wrapper changes from samba4
      r18949: use sys_usleep()
      r18950: I can't see where stropts.h and poll.h are needed
      r18951: socket_wrapper has only 16 interfaces anymore...
      r18952: fix compiler warning (merge from samba4)
      r18953: sync socket_wrapper with samba4
      r18955: fix the build on solaris where unistd.h needs to be includes before
      r18956: fix -pie and -fPIE together with configure -C
      r18958: merge from samba4:
      r18961: merge from samba4:
      r18973: we should always set LDFLAGS and DYNEXP depending on the host_os
      r18976: follow the advice from "William Jojo" <jojowil at hvcc.edu>
      r18993: merge from samba4:
      r18996: merge from samba4:
      r18998: - make more usage of PRINTF_ATTRIBUTE()
      r19015: we don't need talloc_* in proto.h
      r19026: we don't need this twice
      r19030: merge missing stuff from samba4:
      r19031: merge from samba4:
      r19034: merge from samba4:
      r19038: build libreplace testsuite as replacetort
      r19040: use more portable shellscripting, hopefully give better results on Tru64
      r19062: try to fix the valgrind noise in the build-farm
      r19085: merge from samba4:
      r19086: fix --disable-pie together with -C
      r19087: normalize vars before printing them
      r19088: filter out -Wl,-rpath combinations with /usr/lib too
      r19089: normalize KRB5_LIBS too
      r19090: - the LIBREPLACE_C99 isn't needed in aclocal.m4
      r19093: speed up the samba3 build from 8mins to 5mins:-)
      r19096: - fix the build with included popt
      r19099: merge socket wrapper changes from samba4
      r19100: merge from samba4:
      r19101: add sys_recv() wrapper
      r19102: fix typo, thanks derrell!
      r19119: try to be more portable...
      r19121: try to get rid of the difference between in system/iconv.h
      r19124: merge from samba4:
      r19130: fix the logic for the AC_PROG_CC_C99 check
      r19135: fix bugs...
      r19137: that looks nicer:-)
      r19145: talloc_reference() can fail!
      r19163: pass always a mem_ctx to functions and a ldb_context where needed
      r19164: merge the gdb_backtrace script from samba4
      r19168: use the correct configuration
      r19169: port the trick to only display the smbd and nmbd log output
      r19170: use a very clever trick to pass the binary name to the
      r19172: merge from samba4:
      r19177: merge from samba4:
      r19179: remove difference with samba4
      r19181: merge from samba4:
      r19182: merge from samba4:
      r19183: merge from samba4:
      r19185: merge comment from samba4
      r19190: merge from samba4:
      r19191: merge from samba4:
      r19192: merge from samba4:
      r19193: merge from samba4:
      r19232: merge from samba4:
      r19233: remove unused --with-spinlocks option
      r19235: merge from samba4:
      r19236: prepare for --with-pam=auto as default
      r19237: fix typo
      r19238: Let the comfigure check find that some krb5 functions
      r19239: make the acl configure check more readable...
      r19240: move the NO_CONFIG_H check to libreplace
      r19241: compile xattr wrappers on mac os 10
      r19244: fix the build on systems with broken krb5
      r19246: merge from samba4 rev 18207 and 18208:
      r19291: this should fix the build on heimdal systems
      r19342: we only have one BASE-LOCK test in samba4's smbtorture now
      r19374: fix the build with heimdal
      r19444: merge from samba4:
      r19718: define SHLIBEXT (prepare ldb merge from samba4)
      r19725: sync samba3's ldb with samba4
      r19730: as libreplace always provides dlopen(), we need to always define SHLIBEXT
      r19739: fix compiler warning
      r19741: fix compiler warnings
      r19744: merge from samba4
      r19935: always use discard_const_p() in lib/ldb/
      r19982: From Michael Adam (ma at sernet.de) (thanks!:-)
      r20197: merge talloc fixes from samba4:
      r20385: merge from samba4:
      r20386: remove unneeded dlopen related configure checks and includes
      r20388: add the library that contains dlopen to the global LIBS as it was before
      r20389: this needs to be after AC_LIBREPLACE_BROKEN_CHECKS :-)
      r20448: Happy New Year!
      r20578: - allocate an OID range for samba4 LDB/LDAP Controls
      r20585: - allocate an OID range for LDB/LDAP extended operations
      r20789: merge from samba4:
      r20811: fix comment
      r20817: sync lib/replace with samba4
      r20820: merge from samba4:
      r21157: this is 3.0.26 trunk
      r21312: merge from SAMBA_4_0:
      r21931: include acl/libacl.h is present
      r21932: fix compiler warning.
      r21934: fix the build sorry
      r21944: move acl header checks to the correct place only
      r21965: fix compiler warning
      r21972: - add string_term_tdb_data() it creates a null-terminates tdb key from a string
      r21973: make use of tdb_*_bystring() and string_term_tdb_data()
      r21974: make use of tdb_*_bystring() and string_term_tdb_data() in groupdb/
      r21975: if we use the _bystring() version when storing, we should use it on fetch too...
      r21976: make use of tdb_*_bystring() and string_term_tdb_data() in lib/
      r21977: little cosmetic change to remove a local var that's not really needed
      r21978: make use of tdb_*_bystring()
      r21979: make use of string_tdb_data()
      r21980: make use of tdb_*_bystring() and string_term_tdb_data() in smbd/
      r21981: as we use tdb_trans_store(), we should also use tdb_trans_delete()
      r21982: make use of tdb_*_bystring() and string_term_tdb_data()
      r21983: make use of tdb_*_bystring() and string_term_tdb_data()
      r21984: make use of tdb_*_bystring() and string_term_tdb_data()
      r21985: make use of string_tdb_data()
      r21986: make use of tdb_*_bystring() and string_term_tdb_data()
      r21987: split tdb_prs_*() functions in version which take a keystr and a TDB_DATA key
      r21988: make use of string_tdb_data()
      r21989: make use of tdb_*_bystring() and string_term_tdb_data()
      r21999: remove useless casts
      r22000: remove useless casts
      r22001: change prototype of dump_data(), so that it takes unsigned char * now,
      r22006: use string_term_tdb_data()...
      r22007: make string_tdb_data(NULL) possible...
      r22008: use string_term_tdb_data()
      r22009: change TDB_DATA from char * to unsigned char *
      r22033: remove useless line
      r22039: fix compiler warnings
      r22051: use libreplace headers
      r22054: merge from samba4:
      r22067: - fix --with-fhs, where confdir is set to \${sysconfdir}
      r22078: fix memory leak in not often used code, we only use it if the server
      r22092: - make spnego_parse_auth_response() more generic and
      r22093: send also the correct OID_KERBEROS5 not only the broken
      r22151: remove netgr functions from libreplace they're not used
      r22153: fix LDAP SASL "GSSAPI" bind against w2k3, this isn't critical
      r22221: merge from samba4:
      r22224: merge from samba4:
      r22227: merge from samba4:
      r22229: discard_const_p is in lib/replace now
      r22240: merge from samba4:
      r22244: merge from samba4:
      r22247: merge from samba4:
      r22249: move tdb code to lib/tdb/ as in samba4
      r22252: merge from samba4:
      r22254: merge from samba4:
      r22262: fix the build on systems without GSS_C_NT_HOSTBASED_SERVICE
      r22264: merge from samba4:
      r22268: merge from samba4:
      r22271: merge from samba4:
      r22274: merge from samba4:
      r22277: __location__ is defined in libreplace now
      r22280: merge from samba4:
      r22298: move ZERO_*, ARRAY_SIZE and PTR_DIFF macros into libreplace
      r22301: remove unused vars
      r22302: fix the build when no shared-library support is detected
      r22304: remove unused stuff completely to fix the build, sorry
      r22313: as discussed with simo:
      r22314: use libreplace headers
      r22315: move tdbback.c content into tdbbackup.c
      r22316: merge from samba4:
      r22317: add tdb_ prefix to non static function
      r22362: fix the build on othersystems
      r22363: merge from samba4:
      r22364: sync lib/tdb/ with samba4
      r22366: sync lib/talloc/ with samba4
      r22464: remove double code and use a function
      r22659: merge from SAMBA_4_0:
      r22759: sync lib/talloc with samba4
      r22998: merge from SAMBA_4_0:
      r23039: merge from SAMBA_3_0_26:
      r23305: merge from samba4:
      r23307: move readahead stuff out of libreplace and make it samba3 specific
      r23309: sync lib/replace with SAMBA_4_0
      r23314: For some systems it's needed to inject replace.h into
      r23315: - don't use the builtin and -liniparser together in bin/net
      r23328: don't typedef ber_tag_t when it's already done by openldap
      r23330: always include "winbind_client.h" as first header
      r23335: as not all source files include replace.h/config.h
      r23337: fix a crash bug...I wonder why only HP-UX 11.00 ans 11.11 noticed
      r23685: merge from SAMBA_4_0:
      r23863: handle NT_STATUS_RETRY and always print out the NTSTATUS string
      r23886: add ads_disconnect() function
      r23888: move elements belonging to the current ldap connection to a
      r23891: fix compiler warning
      r23893: add dummy callbacks for LDAP SASL wrapping,
      r23896: hopefully fix the build on most systems
      r23898: rename HAVE_ADS_SASL_WRAPPING -> HAVE_LDAP_SASL_WRAPPING
      r23900: LDAP_OPT_SOCKBUF doesn't exists on all platforms
      r23914: try to fix the build on Tru64
      r23916: use the correct io operations for debugging
      r23918: not all ldap libraries support debugging
      r23922: implement input buffer handling for the SASL read wrapper
      r23926: implement output buffer handling for the SASL write wrapper
      r23933: - implement ctrl SASL wrapping hook
      r23943: - always provide ads_setup_sasl_wrapping() function
      r23945: add infrastructure to select plain, sign or seal LDAP connection
      r23946: add support for NTLMSSP sign and seal
      r23948: add gsskrb5 sign and seal support for LDAP connections
      r23954: merge from 3_0-ctdb-tridge:
      r23956: merge from 3_2-ctdb-tridge:
      r24013: merge from http://samba.org/~tridge/samba_3_2_ctdb/:
      r24015: merge RHEL4-CTDB packaging stuff from
      r24017: merge from http://samba.org/~tridge/samba_3_2_ctdb/:
      r24019: merge from http://people.samba.org/bzr/metze/samba/3_2-ctdb-metze/:
      r24021: use MSG_BROADCAST_PID_STR as value for broadcast messages
      r24025: packet_send() expects DATA_BLOB elements as vaargs
      r24027: merge from http://people.samba.org/bzr/metze/samba/3_2-ctdb-metze/:
      r24029: merge from http://samba.org/~tridge/samba_3_2_ctdb/:
      r24037: only setup sasl wrapping after a successful bind
      r24039: remove unused global variable...
      r24042: add support for krb5 sign and seal in LDAP via "GSS-SPNEGO"
      r24062: fix logic for broken krb5 libs which always force
      r24072: Add "client ldap sasl wrapping" parameter.
      r24093: move gssapi/krb5 principal handling into a function
      r24095: add one more fallback alternative to
      r24098: - make use of the ads_service_principal abstraction
      r24103: add some useful debug messages, as not all LDAP
      r24104: fix the build, sorry...
      r24113: some little fixes to get the correct error message
      r24115: try to get the file name and share patch for printing
      r24117: use locking_key() instead of forming the TDB_DATA key
      r24120: add a file_id_create() hook into the VFS layer
      r24123: add file_id_create() to some vfs modules
      r24125: use TALLOC_FREE()
      r24128: fix double free in error path
      r24131: - make it more clear what the different min and max fields mean
      r24272: try to fix the build on irix...
      r24302: add a module that overloads the file_id_create VFS function
      r24304: patch from Bjoern JAcke <bj at SerNet.DE>:
      r24306: the check_fsp() function has an explicit user argument
      r24307: fill in choise with value -1 on error
      r24308: this needs a better fix that compiles...
      r24309: if no protocol matches, just return choise 0xffff
      r24310: we should not call END_PROFILE(SMBntcreateX); twice...
      r24311: add a reply_force_nterror() macro
      r24312: revision 24091 removed the 'FORCE'...
      r24355: move reply_outbuf() to the place where it's used
      r24450: merge from SAMBA_4_0:
      r24458: regenerate pidl output after pidl fixes:
      r24481: copy .bzrignore => .gitignore
      r24533: merge from SAMBA_4_0:
      r24537: regenerate after pidl fixes
      r24538: merge from SAMBA_4_0:
      r24541: merge from SAMBA_4_0:
      r24552: merge from SAMBA_4_0:
      r24558: merge from SAMBA_4_0:
      r24561: merge from SAMBA_4_0:
      r24564: regenerate after pidl changes...
      r24594: pass down the ndr_interface_table in the samba3 client bindings
      r24597: - talloc request structure for the samba3 server bindings
      r24599: patch from Karolin Seeger <ks at sernet.de>:
      r24605: remove some stuff samba3 doesn't need any more
      r24618: move printing out the version string and exit()
      r24621: - deferr calling build_options();exit(0);
      r24625: add '-D' option to winbindd
      r24627: merge from SAMBA_4_0:
      r24974: catch SIGINT and SIGQUIT like SIGTERM
      r24978: move domain_init_recv() near the functions that uses it
      r25074: as all requests in the winbindd child are sync, we can use talloc_tos()
      r25125: create prototypes for 'bool ' functions
      r25128: _XOPEN_SOURCE_EXTENDED and socklen_t are always provided by libreplace
      r25130: make use only of base types which are provided by libreplace
      r25143: rename public functions from winbind_client.h
      r25146: rename winbindd_nss.h => winbind_struct_protocol.h
      r25150: don't recursivly call call dump_core()
      r25152: fix headers used in wbinfo.c
      r25154: move winbindd code into winbindd/
      r25177: if configured using --enable-socket-wrapper
      r25179: fix libunwind detection on x86 based hosts
      r25227: Patch from "Steven Danneman" <steven.danneman at isilon.com>:
      r25230: sync lib/talloc with SAMBA_4_0
      r25232: sync lib/replace with SAMBA_4_0
      r25236: make it possible to alter WINBINDD_SOCKET_DIR via
      r25239: fix cut-n-paste bug in code with LIBUNWIND support
      r25241: remove sequence_number out of WINBINDD_DOMAIN_INFO call
      r25244: see what the build-farm says when we only use large file support
      r25245: rerun 'make idl'
      r25248: According to the build-farm all this defines are not needed
      r25252: move macro defines to the end of replace.h
      r25260: add trusted domains always to the end of the list.
      r25270: for internal domains we should not ask a remote DC.
      r25275: w2k3 (as PDC emulator) returns WERR_NO_SUCH_DOMAIN to netlogon_getanydcname()
      r25418: fix generation of git revision calculation
      r25429: Samba 3 doesn't need to selftest Samba4 code...
      r25470: use --immediate like in samba4 to get more usefull output
      r25503: ignore failing WINBIND tests
      r25567: make do_async() non static
      r25568: move idmap related functions into their own file.
      r25569: move more idmap stuff into winbindd_idmap.c
      r25570: move code of the locator child into its own file
      r25571: split up child_dispatch_table into domain, idmap and locator tables
      r25583: it makes no sense to run blackbox.kinit against samba3
      r25584: don't run WINBIND tests untill the faked users work with a running winbindd
      r55: if you try to use a custom bind or unbind hook in
      r125: use AC_CONFIG_FILES() instead of AC_OUTPUT()
      r126: - add first srvsvc and wkssvc server side stuff
      r127: NetWkstaGetInfo level 101
      r138: fix typo
      r147: - Remove dublicate ldap tests (richard the current test is in libads/config.m4 :-)
      r205: update to the new version schema
      r206: - we know use SVN not CVS:-)
      r211: svk has different revision numbers,
      r212: fix the svk stuff
      r277: fix the initialisation of subsystems for process model 'thread' and 'standard'
      r278: build and install LDB_PROGS and REG_PROGS by default
      r286: use talloc_array_p() instead of talloc()
      r310: add missing ','
      r311: add srvsvc and wkssvc rpc pipes to the default pipes
      r312: let ntvfs posix backend return NT_STATUS_ACCESS_DENIED in the connect hook
      r313: add the warning about fileaccess as user 'root'
      r411: make swig should not be the first make rule...
      r412: as we decide to not do 3.0.2a releases anymore,
      r419: Data::Dumper is not portable
      r424: let this code compile on every machine hopefully
      r425: add some comments to ugly code parts
      r432: fix the linking of the reg* tools
      r467: hopefully get the buildfarm compiling fine now...
      r491: regtree and gregedit also depend on LIBCMDLINE (popt stuff)
      r626: make the code a bit more readable
      r627: remove the precompiled header when we call make clean or make proto
      r638: remove unused dependency to Data::Dumper and dump
      r641: readd 'use dump;'
      r644: add SPNEGO auth type
      r649: return unknown interface when the client not yet
      r665: merge over the new build system from my tmp branch
      r666: readd 'make etags' and 'make ctags'
      r667: remove Data::Dumper dependecy
      r668: fix the build
      r669: display the version on top of configure
      r670: add make everything
      r671: fix make ./include/proto.h
      r672: disable gregedit for now
      r673: disable registry_gconf for now
      r674: use the same -I flags as before
      r677: fix: '$' -> '\$'
      r678: use ./config.smb_build.pl instead of config.smb_build.pl
      r679: fix make install
      r680: fail directly when we notice that perl is not there
      r681: don't init r.out.result.v
      r687: add newline at eof
      r688: add --enable-experimental
      r690: - ignore source/tags
      r691: add
      r695: don't add libs andlinkerflags to STATIC_LIBRARY
      r696: fix formating
      r697: make use of SMB_EXT_LIB for LDAP and KRB5
      r700: fix SMB_LIBRARY() to disable the lib by default
      r701: change debug messages a bit
      r702: fix krb5 linking
      r703: only use $PERL -W when --enable-debug
      r725: fix usage of $PERL to "$PERL" to handle perl -W correct
      r726: fix the build: libcli/raw/clirewrite.o is gone:-)
      r728: - let libldb_tdb depend on new subsystem LIBTDB
      r729: fix the build : inlcude lib/tdb/config.m4
      r733: remove unused files in source/
      r747: report an failure in mkproto.pl via mkproto.sh to make
      r748: get some more info about what the compilers in the build farm support
      r749: move the basic type checks
      r755: - disallow process_model _thread when we don't have pwread/pwrite
      r758: just move the util file to the additional object file list
      r765: add SMB_INCLUDE_M4() macro as wrapper arround sinclude()
      r766: convert ntvfs/* to a config.mk file
      r767: add a $flags argument to the std_CC make rule generater
      r768: remove unused msdfs directory
      r769: remove unused locking/ dir
      r770: remove unused pam_smbpass/ dir from samba4
      r771: don't know why but the SMB_INCLUDE_M4() didn't work correct
      r807: compile with PICFLAG by default
      r821: prompt user for password if not given by -U user%pass
      r822: use 'Last Change Rev:' instead of 'Revision:' from the svn info output
      r845: convert SUBSYSTEM LIBBASIC to a .mk file
      r846: convert DCESRV subsystem to a config.mk file
      r847: convert SMB SERVER SUBSYSTEM to a config.mk file
      r848: convert lib/tdb into the same layout as lib/ldb
      r849: move tdb/tools/Makefile to tdb/Makefile.tdb
      r850: convert SUBSYSTEM AUTH to a config.mk file
      r851: convert lib/registry/ to a config.mk file
      r852: remove unused utility progs
      r853: remove a real big bunch of unused code
      r854: remove unused file
      r857: fix the build of gregedit (typo:-)
      r858: - remove unused account policy stuff it's in our sam.ldb now:-)
      r860: convert SUBSYSTEM TORTURE to a config.mk file
      r861: remove the next round of unused stuff
      r862: remove acl and sendfile stuff
      r864: convert the smbd/* code to a config.mk file
      r866: convert the rest of the binaries to config.mk files
      r869: convert SUBSYSTEM PROCESS_MODEL to a *.mk file
      r882: - create TORTURE_AUTH SUBSYSTEM
      r884: convert samba4 to use [u]int32_t instead of [u]int32
      r888: more ..int32 -> ..int32_t stuff
      r889: convert samba4 to use [u]int16_t instead of [u]int16
      r890: convert samba4 to use [u]int8_t instead of [u]int8
      r899: remove the weird shell patterns from the makerules
      r943: change samba4 to use 'uint8_t' instead of 'unsigned char'
      r959: - a static WERROR function should return a WERROR:-)
      r960: convert 'unsigned int' to uint_t in the most places
      r961: convert 'uchar' to 'uint8_t'
      r962: convert 'unsigned' and 'unsigned int' to uint_t
      r967: move some configure checks to seperate files
      r968: use sinlcude() and no function, that's more portable between
      r969: remove some unused checks
      r970: - remove unused wchar_t check
      r990: fix tdb standalone build
      r1001: in samba4 we don't(shouldn't) use typedef's anymore...
      r1004: continue tridge's work on dcerpc server auth/crypto code
      r1005: there was one NTLMSSP_STATE left in:-(
      r1006: print out the SVN revision by configure,
      r1010: make the dcesrv_crypto code a bit more generic...
      r1013: WE NEED ALWAYS TO INIT THE OUTPUT VARS!
      r1022: add the session_info() call to the dcerpc server auth backends
      r1059: add dcesrv_crypto_schannel_session_info() dummy function.
      r1062: fix typo, found by valgrind
      r1065: some header file cleanups
      r1066: fix compiler warning
      r1067: fix compiler warnings
      r1068: make the dcerpc client side auth/crypto code much more generic
      r1073: import DYNEXP flags to smb_build
      r1077: fix segfault in schannel over ncacn_ip_tcp
      r1078: the dxesrv_crypto_* implementations should now explicit set
      r1227: use uint64_t instead of unsigned long long
      r1228: use int64_t instead of long long
      r1229: the name of the protocol should be in first place of a function name
      r1233: -move smb related code to smb_server/*
      r1234: valgrind found this uninitialised var...
      r1235: as the pidl code init all output data.
      r1239: move the old msrpc_<gen|parse>() functions to ndr_<push|pull>_format_blob()
      r1274: revert -r 1239 as discussed with abartlet
      r1277: rename struct server_context to smbsrv_ontext
      r1278: rename struct user_context to smbsrv_user
      r1279: rename struct tcon_context to smbsrv_tcon
      r1280: rename struct request_context to smbsrv_request
      r1281: move include/context.h to smb_server/smb_server.h
      r1286: rename struct tcon_context to smbsrv_tcon
      r1291: rename struct smbsrv_context to smbsrv_connection
      r1306: commit the first steps of my ASN.1 compiler
      r1307: remove unused stuff from pasn1
      r1308: move smb_panic() to lib/fault.c
      r1309: use #line 1 "filename.pl"
      r1310: one more #line statement
      r1321: find the '::=' directly by th lexer
      r1323: allow '-' in IDENTIFIERS
      r1334: remove unused stuff
      r1335: NT_STATUS_INTERNAL_DB_CORRUPTION
      r1336: check the vuid in old style sessionsetup too
      r1337: use sess->nt1. in sesssetup_nt1 :-)
      r1343: formating
      r1344: add gensec_start_mech_by_name()
      r1345: add extended security spnego support to the smb client
      r1346: revert my last spnego changes
      r1347: - remove typedef
      r1348: get gensec backend by OID instead of name
      r1349: don't segfault with empty data_blob
      r1350: - init nt_status- found by valgrind
      r1351: add derpc spengo wrapper
      r1359: fix uninit var - found by valgrind
      r1360: - remove unused state SPNEGO_CLIENT_SEND_MECHS
      r1363: add SPNEGO_NONE_RESULT as spnego_negResult value
      r1364: the SPNEGO_SERVER_TARG state is different from the SPNEGO_CLIENT_TARG
      r1365: in SPNEGO_SERVER_TARG we should not check the spnego_negResult
      r1366: handle the case where the client need to send the negTokenInit before
      r1367: SPNEGO know uses gensec_subcontext_start() in all places
      r1377: add examples for config.mk sections
      r1402: we should prompt for a password if it's not given by -U
      r1403: commit volkers initial RAP torture test
      r1406: I got spnego in the smb client working
      r1409: if we have no user name don't use extended security
      r1419: spnego inside of dcerpc using alter_context/alter_context_resp
      r1420: be more strict reject if the context has the wrong type
      r1421: fix a uninitialized var (thanks valgrind:-)
      r1429: enable spnego in smbclient too.
      r1463: fix the krb5 build
      r1467: disable gensec_krb5 by default till abartlet
      r1469: fix a segfault and compiler warning,
      r1479: print out domain too
      r1480: gwsam has unresolved symbols in it
      r1481: add idl file and torture test dummies
      r1482: today I saw DCERPC_AUTH_TYPE 16(0x10)
      r1483: build dynconfig.c also with PICFLAGS
      r1486: commit the start of the generic server infastructure
      r1494: fix debug message
      r1497: add forward declaration for struct auth_session_info
      r1499: combine struct user_struct and struct smbsrv_user
      r1513: change DEBUG level to 1
      r1514: close stuff from the server_connection not in the
      r1515: move dublicate code to a function
      r1516: remove the server_connection from the list on the server_socket
      r1524: add some comments
      r1525: share info level 1004 is invalid,
      r1526: some cleanups and fixes for the srvsvc torture tests
      r1527: add NetCharDev torture tests
      r1528: add NetCharDevQ torture tests
      r1529: add NetSrvGetInfo torture test
      r1530: we don't need to call srvsvc_NetShareGetInfo twice
      r1543: add srvsvc_NetRemoteTOD idl and torture tests
      r1544: add some comments and fix 'return True' -> 'return ret'
      r1545: add some comments and move a transport function to the transport section
      r1546: fix the build the function name has changed to srvsvc_NetRemoteTOD
      r1547: rename 'enum <bla>_level' -> 'enum smb_<bla>_level'
      r1552: commit the first version of the pidl generated krb5 PAC parser
      r1558: the unknown_time is the same as the logon_time in the PAC_LOGON_INFO
      r1585: add dcpromo.pl start, this should be configure a
      r1647: destroy mem_ctx
      r1648: the endpoints for the DRSUAPI pipe are
      r1649: do a join as dc and run this test as the machine account
      r1654: rename cli_ -> smbcli_
      r1679: fix add the extrasids and resource group array in
      r1708: fix jelmers bugs:-)
      r1737: don't segfault when a mech don't have a session_info hook
      r1747: don't segfault when the spnego mech only use one call from the client to finish
      r1748: don't segfault if there's no ticket
      r1756: merge volkers ldap client lib to samba4 for simo to start with the
      r1770: here's the krb5 server code,
      r1773: fix the build
      r1784: a few minor changes and debug the decoded PAC_DATA
      r1790: a few updates on krb5 PAC...
      r1794: fix the build MIT krb5
      r1798: fix the build
      r1801: fix the build
      r1803: more progress on sasl binds, but decoding the response still fails
      r1804: get a bit closer to a sasl bind
      r1805: ...I just forgot to say that the sasl bind actually works now:-)
      r1816: here's the initial idea of libnet
      r1836: - as abartlet said to me, we need to contact the users domain pdcfor doing a
      r1842: add fault code that happens with wrong password
      r1843: return DCERPC_FAULT_LOGON_FAILURE when the auth fails
      r1844: fix the build,
      r1845: map DCERPC_FAULT_LOGON_FAILURE to NT_STATUS_LOGON_FAILURE
      r1846: add helpstring
      r1847: add STR_BYTESIZE flag, to handle cases where
      r1848: fix LIBNDR_STRING_FLAGS to include LIBNDR_STRING_BYTESIZE
      r1849: use LIBNDR_STRING_BYTESIZE here
      r1850: when we have a username and use sign or seal on a dcerpc over np
      r1851: if we try to peek a subtag, check if the parent tag has remaining data
      r1855: fix compiler warning and output fromatting
      r1856: - move asn1 functions to asn1.c
      r1862: add invalid_creds ldap error
      r1872: revert -r 1845 because the caling function should look at the fault_code
      r1874: add dcerpc_errstr() function to display a fault code by name,
      r1875: - move 'net' code into a subdir
      r1876: rewrite net command completely
      r1877: since make proto catches all functions
      r1878: implemet libnet_context_{init,destroy}
      r1879: - add a user sub struct in net_context
      r1880: bugger, now I have used gcc 3.4.1 myself and have statements before declarations
      r1881: empty structs are not allowed by all compilers
      r1883: I don't know why this was broken...
      r1884: remove empty header file
      r1900: fix function prototypes
      r1901: add missing include of <fnmatch.h>
      r1902: we need to include popt.h before popt_common.h
      r1903: hmm a better solution is to include popt.h where it is needed
      r1904: catch the common gtk function prototypes with make proto
      r1905: add -Werror-implicit-function-declaration with --enable-developer
      r1907: init the configuration
      r1909: nicer format
      r1910: this should not be a local var in this block
      r1911: merge a few popt parameters from 3.0 move some to better places
      r1912: move popt_common.h
      r1913: add --version back
      r1914: use common popt stuff in net
      r1915: use popt's cmdline_auth_info to fill the net_context
      r1916: return a more clear error, we are miss configure in this case
      r1919: paasword change basicly works now:-)
      r1925: now we lookup the domain controller
      r1926: fallback to other SAMR ChangePasswordUser levels
      r1927: allow the domain to be a ip address
      r1928: give up on NT_STATUS_PASSWORD_RESTRICTION
      r1943: don't use the with --enable-*developer selected flags for
      r1947: fix cup & paste errors
      r1949: provide functions to access the username, userdomain and userpassword
      r1950: implement libnet_SetPassword_rpc()
      r1951: add 'net password set' call
      r1952: change the _RPC levels into _SAMR
      r1957: add cmdline_set_* functions
      r1961: print out the dcerpc fault code, when we got NT_STATUS_NET_WRITE_FAULT
      r1994: fix compiler warning
      r1995: a ndrdump file from abartlet make it clear that this isn't a pointer
      r1996: fix compiler warnings
      r1997: fix compiler warning
      r1998: fix compiler warning
      r1999: fix compiler warning
      r2000: remove unused var
      r2004: remove unused file
      r2005: fix compiler warnings
      r2010: trigger the config.smb_build.dump output by --enable-*developer not --enable-debug
      r2011: remove this broken and never reached test
      r2012: --enable-developer also sets debug=yes now
      r2017: fix compiler warnings
      r2019: fix compiler warnings
      r2020: fix compiler warnings
      r2021: add password change fallback to SetUserInfo level 25,24,23
      r2048: fix memory leak found by abartlet
      r2059: abartlet: is there a better way to fix this compiler warning
      r2060: fix compiler warning
      r2061: - split libnet header files
      r2064: fix some error cases
      r2065: add libnet_RemoteTOD() call with levels GENERIC and SRVSVC
      r2066: add 'net time' command
      r2071: - change smbtorture to use the popt_common stuff
      r2087: the ldb tools really don't need LIBSMB!
      r2088: add tdbtorture tdbdump and tdbtest to the build
      r2089: fix standalone build with LDAP, this needs -llber too
      r2092: fix the build(don't catch main() by make proto)
      r2121: fix compiler warning
      r2122: merge from trunk (-r 2120):
      r2124: merge from trunk (-r 2123):
      r2166: sync the asn1 stuff with trunk
      r2314: fix compiler warning
      r2315: change format
      r2318: - remove the --with-ads option
      r2319: let event_merge_contexts() return a pointer to the final context
      r2320: add my copyright
      r2321: add complately untested LDAP server start
      r2326: remove definition and usage of struct socket_context
      r2328: add the start of a new system and protocol
      r2343: - make socket_get_*_addr() return char * not const char *
      r2346: fix some minor stuff
      r2347: merge LDAP ASN.1 fixes from trunk
      r2365: remove MSG_NOSIGNAL
      r2387: fix segfault
      r2401: make our LDAP server useable:
      r2439: - function that return just an int don't need a TALLOC_CTX
      r2441: set exit code correct when we got EBADF from select()
      r2442: remove unused event_loop_once() call
      r2443: check return code of event_loop_once() to catch thet cases where the server
      r2446: implement socket_get_<peer|my>_<addr|port>() for ipv4
      r2447: let the server code use the new lib/socket/ stuff
      r2448: use SO_REUSEADDR=1 for the server
      r2449: use a blocking fd for smbsrv code
      r2464: fix the build
      r2468: print out the names of the fault codes#
      r2508: - implemented ldap_decode() for UnbindRequest and ExtendedRequest
      r2509: add a struct ldapsrv_call which is simular to the dcesrv_call_state struct
      r2523: - readd rootDSE reply
      r2525: fix a search response when the backend didn't support Search
      r2526: use LDAP error 53 (unwillingToPerform)
      r2527: - add a dummy for a simple ldb backend
      r2681: commit the first semi working search implementation
      r2682: as sambdb holds all search data, don't double free the data
      r2685: ALLOC_CHECK() after talloc_steal() isn't needed
      r2686: remove unused gtk+ check
      r2688: - fix case where listed attributes are asked
      r2693: - send a reply when no attributes there
      r2714: - add sldb_Add() implementation
      r2720: -implement sldb_Modify() call
      r2722: remove tmp debug messages
      r2723: fix some debug messages
      r2724: - use ldapsrv_service and set it up with the rootDSE and default partition
      r2727: mark the password fields as hidden
      r2731: use debug level 10 everywhere
      r2747: use DATA_BLOB for attribute values
      r2748: implement sldb_Compare()
      r2749: add asn1_read_implicit_Integer()
      r2750: decode AbandonRequest correct (untested:-)
      r2751: this is a new ntvfs design which tries to solve:
      r2757: some minor fixes
      r2816: fix 'Default-First-Site-Name' dn
      r2825: fix the build
      r2829: REALM and netbiosname are always uppercase
      r2850: - check for GENSEC_WANT_SEAL in gensec_unseal_packet()
      r2851: don't destroy the gensec context it's used for sign and seal
      r2853: add torture test to find the defaultNamingContext on the RootDSE
      r2855: fix error codes for Compare
      r2858: fix a few SMB_EXT_LIB_FROM_PKGCONFIG() bugs
      r2860: add gensec_have_feature() to check what feature are used in the connection
      r2861: encode and decode BindRequest/Response correct
      r2862: prepare LDAP SASL support for the server
      r2863: move the logical ldapsrv functions to a seperate file
      r2864: - Bind and Unbind are no directory partition operations
      r2867: make call_backtrace() public
      r2873: create a DNS zone file for a BIND name server
      r2876: - more than one rootDSE entry in the database is an error!
      r2877: the Bind and Unbind function are already moved...
      r2878: add server sasl support
      r2879: the domain name should be resolved to the ip addresses of all dc's
      r2880: move the rootdse.ldif template to the source/ dir
      r2881: also bind the ldap service on the global catalog service port
      r2882: fix mistake that caused a failure on a bind to a dynamic tcp port
      r2883: set BOOL to the internal values not the wire ones
      r2884: parse LDAP Control messages
      r2885: windows doesn't try to do sign or seal by default
      r2886: missing stuff from last commit
      r2887: fix comment
      r2888: - add 'Ds' prefix to Bind and Unbind call on drsuapi
      r2889: add DRSUAPI server
      r2890: fix segfault when call is destroyed and we dereference it
      r2891: call rootDSE only with LDAP_SEARCH_SCOPE_BASE
      r2892: fix compiler warning
      r2952: add idl and torture test for DsCrackNames
      r2953: add NTSTATUS_TALLOC_CHECK(x)
      r2954: add server cracknames code:
      r2970: - give somefields names and typdef enums for the possible values
      r2971: fix DsBind idl
      r2972: make names more consistent
      r2974: fix the build
      r2991: add drsuapi_DsGetDomainControllerInfo() idl and torture test
      r2992: drsuapi uses WERROR not NTSTATUS
      r2993: fix comment
      r3041: a start of a README/HOWTO for the samba4 build system.
      r3044: resolve the error code for WERR_DS_OBJ_NOT_FOUND to the name
      r3089: fix memleak
      r3091: link only the needed stuff
      r3092: prepare for build inside samba
      r3093: - implment ldb_rename() and ldbrename
      r3094: import all LDAP error codes from the RFC 2251
      r3095: - fix a free'ing of msg.dn
      r3096: typo
      r3097: - an empty string is a valid DN
      r3098: - fix segfault in sldb_Compare()
      r3099: implment sldb_ModifyDN()
      r3100: support 'bin/smbclient //w2k3-101/c$ -U \\administrator at w2k3.vmnet1.vm.base'
      r3101: some minor fixes
      r3102: typo
      r3113: make us able to generate the PAC with the same align as a MS KDC
      r3289: Mr. L. and Mr. B.!
      r3290: allow SID_ANONYMOUS ( "S-1-5-7" ) to be the users sid
      r3291: fix the build, thx to pipitas for finding this
      r3336: use a struct ntvfs_async_state to be able to do async chaning of ntvfs modules
      r3337: remove debug code and reanable the reall logging:-)
      r3465: fix SMB_SUBSYSTEM_NOPROTO()
      r3467: fix the build
      r3477: add '--with-disable-ext-lib=LIB' option to be able to disable
      r3484: - add support for conformant string arrays at the end of a struct
      r3508: fix the build
      r3509: - comment out a unused var
      r3510: fix build on SuSE 9.1
      r3511: teh PAC used 8byte alignment
      r3512: - support DsCrackName GUID strings ('{faedf4f9-0de8-4582-b8b6-c475efefbe5a}')
      r3527: I hate compiler warnings...
      r3577: add a torture_join_domain_ads_dc() function,
      r3581: fix some signedness warnings with gcc-4.0
      r3582: more gcc-4.0 signedness fixes
      r3583: - seperate the ldap client code and the ldap parsing code
      r3584: fix referral handling
      r3585: check sscanf return code
      r3722: - add userdomain in the binding dialog
      r3750: fix the build
      r3762: - only load the readed bytes into the input buffer
      r3769: fix the build of shared libraries
      r3770: - fix endless recursion loop in spnego fallback code
      r3782: use ldb_ namespace
      r3783: - don't use make proto for ldb anymore
      r3784: do a samdb lookup for the DsCrackNames server
      r3785: this strings are not const
      r3786: send a mechListMIC to make the current samba3 client happy
      r3787: a function to generate a random GUID
      r3788: give new accounts and groups a objectGUID
      r3789: - fix error handling
      r3809: fix compiler warning
      r3810: create a LIB_SECURITY subsystem
      r3869: in the NDR encoded replPropertyMetaData attribute in ADS
      r3876: fix compiler warnings
      r3899: fix compiler warnings
      r3900: fix compiler warning
      r3901: fix compiler warnings
      r3902: fix compiler warnings
      r3903: better fix for -r 3902
      r3906: fix compiler warnings
      r3910: add some error codes
      r3913: fix the build
      r3914: add idl, torture test and simple server for netr_DrsGetDCNameEx2()
      r3915: a few updates to the DsCrackNames() torture test
      r3920: - it seem that we need to send a magic bind_guid in DsBind()
      r3926: fix compiler warnings
      r3927: add idl file for NDR encoded LDAP attributes used for the directory service
      r3942: decode the 'replUpToDateVector' blob
      r3956: start to decode the repsFrom and repsTo fileds but not ready
      r3957: fix compiler warning
      r3958: fix the build for now
      r3959: fix compiler warnings
      r3960: fix compiler warnings
      r3961: - fix compiler warnings
      r3962: fix compiler warnings
      r3963: fix conpiler warnings
      r3964: fix compiler warnings
      r3965: fix compiler warnings
      r3966: fix compiler warnings
      r3967: fix compiler warnings
      r3968: fix compiler warnings
      r3969: fix compiler warnings
      r3970: fix compiler warning
      r3971: fix compiler warnings
      r3972: use GUID_* naming context and move GUID_* functions to one place
      r3984: success full parse the repsFrom/repsTo LDAP fields
      r3996: add some comments
      r3997: fix STR_CHARLEN pull case
      r3998: allow const arrays (see next commit to drsuapi.idl)
      r3999: - reply with the same DsBindInfo blob as w2k3 in the server function
      r4000: DATA_BLOB.data is uint8_t * not void * :-)
      r4001: fix segfault fix auth failed
      r4002: NT 4.0 sp6a can't do schannel 128
      r4003: run successful against a nt4 sp6 pdc with one nt4 sp6 trust and a w2k3 trust
      r4022: fix compiler warnings
      r4027: add a useful function for debugging
      r4038: fix sign/unsign bug I introduced in -r 4022
      r4040: sorry today is not my day...
      r4041: fix cut-n-paste typo
      r4042: fix segfault on server schannel connections
      r4044: only send supportedMech when we also send other data
      r4045: readd krb5 support defaulted to disable
      r4046: add more servicePrincipalName's for the dc account
      r4063: - change char * -> uint8_t in struct request_buffer
      r4064: use the same name for type on both ends
      r4070: move some defines from asn_1.h to the places they belong to
      r4075: implement RemoteTOD server function
      r4076: fix compiler warning
      r4077: don't add wrapping to empty blobs
      r4078: use clearer names
      r4079: implement the gensec_have_feature() correctly by asking
      r4080: missing file from the last commit
      r4081: use clearer names
      r4082: support alter_context requests
      r4084: add some more error codes
      r4085: print out dcerpc_fault's as names
      r4086: - make dcerpc_ndr_request_table_send() the default and rename it to just
      r4087: - add idl and torture tests for drsuapi_DsReplicaGetInfo()
      r4096: move the samdb code to source/dsdb/
      r4097: add missing file from last commit
      r4100: fix drsuapi_DsReplicaObjMetaData2() idl
      r4102: more uint64 vs HYPER_T fixes
      r4169: add descriptions about binding and unc strings to the
      r4172: commit a DsReplicaSync() torture test
      r4174: nicer debug output
      r4176: I just remeber that I have already implement STR_CONFORMANT
      r4177: add some more error codes
      r4178: the level is mostly singed not unsigned
      r4179: - nicer code layout
      r4180: use the same syntax as the other torture tests
      r4181: use int32 for level
      r4203: the bind_info blob isn't a const.
      r4288: don't use struct dcerpc_interface_table anymore in the
      r4308: [out,ref] pointer needs to set (don't corrupt the stack and segfault)
      r4309: idl and torture test for lsa_GetUserName()
      r4318: add missing template for trusting domains
      r4320: fix locations of new trusting domains and domsin controller
      r4321: objectClass trustedDomain uses "securityIdentifier" for the sid
      r4322: use a nicer name
      r4323: - implement the lsa_GetUserName() server call
      r4324: add some more ads constants before I forget them
      r4325: add the GENSEC_FEATURE_DCE_STYLE flag
      r4326: fix memory leak
      r4327: add usefull function if you don't want that the data will talloc_memdup()'ed
      r4328: mark the talloc data as DATA_BLOB
      r4338: reuse netlogon structs in the krb5 PAC
      r4339: - rename auth_guest to auth_anonymous
      r4340: - simplify lsa_GetUserName() server code,
      r4359: using talloc_free() of a child struct in a talloc_destructor is useless
      r4360: destroy the gensec context
      r4361: fix the build
      r4418: fix compiler warning and remove unused typedef
      r4419: move security_token stuff to the libcli/security/
      r4420: - add usefull helper macros for allocation failures,
      r4421: fix typo
      r4422: make lp_set_cmdline("torture:dangerous", "Yes") a bool parameter
      r4423: give lp_parm_int() and lp_parm_ulong() default values
      r4425: - move srvsvc and wkssvc server code to the new W_ERROR_HAVE_NO_MEMORY() macro
      r4426: fix same names
      r4431: add WERR_NET_NAME_NOT_FOUND
      r4432: - add srvsvc_NetShareInfo level 1006 and 1501 idl
      r4434: - fix some NetShare* idl functions
      r4435: add another error code
      r4436: add one more flag
      r4438: the ADMIN$ share is a diskshare but hidden
      r4439: unlimited connections is -1
      r4440: - add a start of srvsvc_NetShareCheck() server code
      r4482: in ads mixed mode there are also only one PDC and multiple BDC's
      r4483: - rename same structs, enums and uninons of the dssetup pipe
      r4484: - use the nTMixedDomain attribute to check if our domain is mixed mode or not
      r4485: remove unused TODO comment we already handle the DS_ROLE_STANDALONE_SERVER case
      r4506: fix compiler warnings
      r4507: this default is unnneded because the switch level is in the r->in
      r4508: - simplify the code and allocate only in one place
      r4532: - rename bitmap -> bits
      r4533: parsing support for:
      r4534: update the yapp generated code
      r4535: add full support for
      r4536: make use of the new enum and bitmap feature of pidl
      r4540: sync enum and bitmap code
      r4541: make use of new enum and bitmap features
      r4542: use bitmap for samr_FieldsPresent and samr_AcctFlags
      r4551: add support for a pidl extensions
      r4552: use samr_AcctFlags in netlogon.idl
      r4553: fix typo
      r4554: create svcctl_ServerType bitmap
      r4555: fix some dependencies
      r4557: support for [flags()] on typedef enum|bitmap
      r4558: more use of bitmaps and enums
      r4568: make use of SidType and move it to lsa.idl
      r4572: remove configure and include/config.h*
      r4607: add some usefull macros to make the code more readable
      r4608: - use better error codes
      r4609: add a usefull data_blob_dup_talloc() macro
      r4620: - add interface functions to the auth subsystem so that callers doesn't need to
      r4628: this function should be static
      r4629: we now have a global macro NT_STATUS_HAVE_NO_MEMORY()
      r4634: disable sign and seal in ldap_server for now.
      r4637: log packets when the server code returns an DCERPC_FAULT
      r4639: initialize all struct members!
      r4647: - use talloc_zero() instead of ZERO_STRUCTP()
      r4648: fix netr_ServerPasswordSet() bugs
      r4649: make more use of bitmap and enum's
      r4650: - make more use of bitmap and enum's
      r4676: NTTIME_1sec is a standard NTTIME for the calling code
      r4677: stub.pm must be synced with server.pm
      r4683: fix the build
      r4684: the smbsrv code should not know about rpc stuff
      r4685: only remove events when we have them
      r4686: cerate a function to create a socket by specifying an socket_ops struct
      r4687: use struct type and location for easier finding
      r4688: don't run male proto for lib/talloc/
      r4689: - make talloc_report_depth() public
      r4690: - add support for async rpc server replies
      r4701: remove debugs
      r4702: implment idl, torture test and server code for netr_ServerPasswordSet2()
      r4705: use an enum for reject_reason
      r4707: w2k3 don't restict passwords on
      r4709: fix compiler warnings
      r4715: alwys add the distinguishedName attribute
      r4716: add a real ugly hack to get all ldap queries of an
      r4725: make "password server" a string list
      r4726: - use the name tcon and tid instead of conn and cnum
      r4727: add a reference to the event context
      r4728: split up server_services into:
      r4729: add dummy "winbind" service
      r4730: remove unused struct elements
      r4804: add more emuns and bitmaps
      r4806: - add some data to the configuration naming context
      r4941: - all needed data is now in sam.ldb and hacked.ldb is not needed anymore by the hacked ldap backend
      r4958: fix compiler warnings
      r4959: fix compiler warning
      r4962: add infrastructure to use raw krb5 auth in dcerpc client code
      r5041: add more verbose output for the krb5 libs detection
      r5044: fix pidl--swig
      r5045: add TODO comment
      r5133: fix type mapping to internal types
      r5134: - fix types to always use _t types
      r5135: I prepare a clean up in includes.h
      r5136: fix types
      r5137: fix types
      r5138: don't create prototypes for samba3's winbind client lib
      r5139: fix types
      r5141: fix compiler warnings
      r5142: fix compiler warning
      r5143: don't generate prototypes for lib/tdb/
      r5144: add more forward declarations
      r5145: define struct ipv4_addr in misc.idl,
      r5147: remove unused var
      r5148: use ipv4_addr also in epmapper idl
      r5199: fix some minor configure bugs
      r5284: this is needed on my server
      r5285: add a generic dlist_item struct which has a void *ptr for the data
      r5373: prepare infrastructure for maing different events
      r5393: trigger timed events not to early, better do it a bit to late
      r5394: as the timing should be fixed in the server now, don't accept to early replies
      r5407: - this patch makes samba's event loop code more generic and makes
      r5409: - add a gtk events plugin
      r5445: move FormInfo1 struct to the place where it's used
      r5446: fix pulling of arrays in EnumXXX functions
      r5480: allow nopush and nopull on functions
      r5488: - let the request be a child of the pipe struct
      r5489: hide handwritten pull/push/print code from the caller
      r5498: fix OpenPrinter() idl and torture test
      r5500: ntvfs modules that are the final backend needs to set the
      r5501: check the return of talloc with the NT_STATUS_HAVE_NO_MEMORY()
      r5502: announce us as a print server by default
      r5503: - add torture test which tests for invalid printernames
      r5504: fix typo
      r5505: make usage of bitmap's :-)
      r5515: fix PrinterInfo3
      r5516: NT4 doesn't support GetPrinterDataEx()
      r5537: - make use of bitmaps and enums
      r5539: more bad name checks and don't check for \\localhost and \\127.0.0.1
      r5540: - some more input checking in OpenPrinerEx()
      r5601: add a gsskrb5 backend that uses lorikeet-heimdal's new gssapi with
      r5603: add "authservice()" property to the interface property list
      r5681: fix the build and compiler wanings
      r5682: fix the build
      r5736: fix to avoid endless recursion in ndr_size_*() calculation
      r5737: add some error codes
      r5742: - add torture test and idl for DsReplicaUpdateRefs()
      r5764: add support for embedded ref pointers
      r5765: remove unused var
      r5766: get some more DsGetNCChanges stuff parsing correct
      r5796: add ndr_* function for int8 and int16
      r5797: - add idl property [subcontext_size()]
      r5798: limit the size of an sid, 28 bytes complete is the biggest SID
      r5799: more DsGetNCChanges updates, I'm starting to understand it...
      r5800: fix recursiv printing in ndr_print_DsGetNCChangesInfo1()
      r5828: add some idl for DsAddEntry()
      r5830: start to analyse the attribute values, depending on the attribute type
      r5839: add LDAP DirSync control idl
      r5850: enable parsing of revision 4 security acl's
      r5940: fix schannel against w2k, it skips the confounder in the signature (24 bytes) for singed packets
      r5947: print out the password hashes when -d 100 is in use,
      r5949: give things more meaning, and reuse structs where it is possible
      r5998: I was wrong with the highwater mark...
      r5999: ups, remove the testvalue that I used against my w2k3 server
      r6000: add some notes about the cases where compression (or what ever this is)
      r6061: add start of compression support in our rpc code
      r6065: revert test value
      r6097: allow compression only on subcontexts
      r6098: fix parsing of empty union cases
      r6099: use the enum print function
      r6100: - fix nondiscriminant -> nodiscriminant (that takes me 2 days to find...:-( )
      r6101: only allow properties we know about, that helps to catch typos!
      r6109: nicer way to handle compression in the torture test
      r6112: try to decompress all chunks and put them together
      r6114: the marker is const and is 0x434B 'CK'
      r6115: don't try to decompress level 7 buffers yet
      r6128: fix the build
      r6129: - add our own MSZIP decompression implementation
      r6131: decompression of DsGetNCChanges level 2 responses works now
      r6132: allow up to 15 sub_auth in a dom_sid
      r6134: add a new type dom_sid28 which is a 28 byte fixed buffer with a dom_sid in it
      r6135: - make use of the new dom_sid28 type
      r6178: fix ncacn_np connection without sign or seal against NT4
      r6179: - add new spoolss tests for all spoolss_Enum*() calls which didn't need
      r6188: correct fix for rev 6182
      r6189: move function to the right place
      r6190: fix gensize on unions
      r6191: fix spoolss_Enum* push code
      r6192: remove handle->destroy function pointer, this should be done by talloc destructors now
      r6193: we don't need to store the handle type here,
      r6194: - fix some spoolss_*Form names and types
      r6197: fix for my last commit, I removed SPOOLSS_ARCHITECTURE, which was "Architecture"
      r6206: go baack 10 revisions to get DatabaseDeltas, this shows that the bdc only
      r6207: - clean up source topdir
      r6293: fix formating
      r6294: - add obfuscate support, which is used in MAPI rpc's, (the ^= 0xA5 stuff),
      r6295: - add idl for EcDoRpc from the exchange_emsmdb interface
      r6353: we need the english output from the svn commands
      r6483: fix anonymous connections, '-U %' or '-U ""%""' can be used for this
      r6484: fix NTLMSSP client against w2k and w2k3
      r6516: use only one list of scalar types and make "string" just a simple scalar type (mostly)
      r6517: this line should be removed in the last patch, (I readded it just for testing...)
      r6518: fix formatting
      r6519: move string handling functions to a seperate file
      r6571: create a simple smb.conf by provision.pl
      r6572: add "string_array" as new scalar type for handling SPOOLSS string array's
      r6574: send a value for embedded ref pointers,
      r6606: add a DCESRV_FAULT_VOID() marco to use in void functions
      r6607: fix the build
      r6609: remove double entry for [BINARY::getntacl]
      r6612: fix the build
      r6697: fix from Sven (wAmpIre) Velt
      r6703: fix the build
      r6704: fix compiler warning
      r6705: let the gensec module decide if messages can be signed and sealed in a different
      r6730: register gensec_krb5 also with the drcrpc auth type
      r6731: add a useful function for getting a guid with all bits to 0
      r6732: - move sasl send recv code to the ldap lib
      r6733: GSS_C_DCE_STYLE is not available for most builds
      r6734: most compiler don't like struct elements without a name...
      r6781: -add some comments on how attributes and objectClasses are identified in DRSUAPI
      r6884: the invocationID is only used as objectGUID on the NTDS Settings object on the
      r6904: use "krb5:kdc=yes" in your smb.conf when you have the lorikeet-heimdal kdc running
      r6920: display the SVN revision in svk build of tree's directly mirrored from samba.org
      r6921: preparing for cherry picking merging
      r6922: remove bad file...
      r6937: some minor fixes and updates
      r6938: a minor update, use a better name for the NDR compression subsystem
      r7006: fix a build problem with my gcc-4.0
      r7009: the correct for maing it all build with my gcc-4.0
      r7050: fix linking of smbd
      r7070: fix redirection when the client
      r7084: - readd the work from rev 6516,6517,6572
      r7098: - make use of the NDR table instead of the IDL table in the client and server generation
      r7099: make the password field a password field...
      r7100: install lately added files too
      r7102: fix subcontext(0)
      r7103: fix make installswat again:-)
      r7112: add RPC-SPOOLSS test to the w2k3 tests, only with ncacn_np for now
      r7115: specify what properties can be used on what objects...
      r7118: allways pull scalars and buffers when pulling the subcontext context
      r7119: the content of a subcontext can contain deferred data,
      r7120: make use of the new 'noopnum' property and get rid of handwritten
      r7167: fix the build
      r7177: fill in REMOTE_ADDR correctly
      r7179: remove compiler warnings
      r7181: add functions to calculate the buffer size needed for array buffer in the spoolss_Enum* functions
      r7182: remove current support for RELATIVE_CURRENT, this will be replaced with a better aproach later
      r7183: add some forward declarations ...
      r7184: remove unused ndr_pull/push_struct_start/end() functions
      r7185: fix formatting
      r7186: add [relative_base] property, which is allowed on typedef's
      r7187: fix alignment of unions
      r7188: make use of the new relative_base property for the spoolss_Enum* functions
      r7193: add some bail out checks and fix pushing of relative pointers
      r7194: fix pulling of the NDR_IN data, [validate] works for the NDR_IN side now...
      r7196: fix typo, that makes the spoolss test working with [validate]
      r7297: make the code more readable
      r7299: move the list of config.mk files to the source/
      r7302: remove dublicate includes
      r7303: autodetect the libkdc and our kdc support
      r7326: fix [validate]
      r7327: pass down the ndr->flags to the subcontexts
      r7328: fix GetPrinterData and SetPrinterData, with zero length subcontexts
      r7329: test some more PrinterData values
      r7330: use ParseExpr() also for subcontext_size()
      r7331: fix parsing of spoolss_SetPrinter()
      r7333: Pause and resume each printer
      r7336: make --with-sqlite3=auto possible
      r7337: - fix SetJob() idl
      r7340: fix the build
      r7341: fix StartDocPrinter() idl
      r7342: submit a test job for each printer and delete this job
      r7345: add WritePrinter(), AbortPrinter() and ReadPrinter() idl
      r7346: use StartPagePrinter(), WritePrinter() and EndPagePrinter() to print a few test pages
      r7357: some minor updates
      r7364: - remove '\' chars from copy paste
      r7368: some server side spoolss stuff, w2k3 shows the printers icon,
      r7369: allow no entries returned by Enum*()
      r7370: change debug levels
      r7387: enable extra smbtorture args to test_posix.sh
      r7388: - fix calling of test_posix.sh
      r7389: move socket wrapper dir also to the prefix-test dir
      r7392: more verbose debug output
      r7397: - don't exit when one test fails
      r7401: add config option to disable the TestSleep() test
      r7402: - don't stop after a failed test
      r7403: minimize the sharedelay
      r7421: - move test* functions to a seperate file
      r7424: add --uint-enums option to pidl to generate
      r7425: configure check to see if a compiler can handle negative enum values
      r7426: add an option to disable progress output
      r7427: disable torture progress outout from the build farm
      r7428: try to get some nicer output from the build farm
      r7429: make the shell happy and don't use [bla]
      r7432: export SMBD_TEST_FIFO
      r7434: - do local tests step by step for better build-farm output
      r7442: skip tests that require smbd, but smbd is down
      r7458: don't look at components[-1] :-)
      r7462: fix Enum* pushing, we need to send back a buffer of the same size as we got
      r7463: - move some more stuff into functions
      r7464: add newline to printf
      r7465: - return empty lists for now
      r7466: add RPC-SPOOLSS to the supported tests
      r7467: a little fix for the build-farm
      r7468: create better output
      r7469: fix typo
      r7486: fix for the build farm to display the panic messages and backtrace inside the per test frame
      r7487: check both files before and after setting the attribs on file1
      r7488: update the mode in the struct too,
      r7489: just a cosmetic change
      r7492: give better output
      r7536: doesn't spam the smbd_log in the build_farm...
      r7546: fix comment
      r7574: - seperate [in] and [out] buffers and buf_sizes
      r7575: - fix GetPrinterData() push side
      r7580: - add GetPrinterDriverDirectory() idl, torture test and server code
      r7631: - remove unused function, as the disgn of samba4 doesn't allow the old style
      r7634: move TestSleep functions so that all of them are together
      r7642: - test NULL server_name in GetPrinterDriverDirectory() too, (same result as "")
      r7643: This patch adds a new NTPTR subsystem:
      r7644: - remove some dublicate structures SetForm and AddForm uses the same struct
      r7646: - only allow modification of SPOOLSS_FORM_USER Froms
      r7679: update the documentation of security_description_create()
      r7731: change debug level to not spam the build-farm smbd log
      r7837: use some more 'make' features
      r7845: remove unused files
      r7875: try to see if this is portable
      r7932: don't use the nbt called name as server name, for dcerpc_server_name()
      r7955: we should not free a struct which is passed as a parameter, to a function
      r8020: - add --with-selftest-prefix option that specify the prefix used in make test
      r8021: we only need to return STATUS_BUFFER_OVERFLOW for the ipc_trans replies
      r8023: use a pointer to a DATA_BLOB for each reply,
      r8024: avoid one memcpy in the ipc_trans dcesrv_output() callback
      r8028: fix a crash bug in ulogoff, when the tree_connect failed before
      r8036: revert rev 8023/8024 as they have a bugs.
      r8042: give better error message
      r8044: give a better error code
      r8045: fix valgrind warning, add zero padding when the string doesn't fill the full FIXLEN
      r8046: - add somemore failure checks in the RPC-SPOOLSS test
      r8049: add function that returns the build version (of w2k3 here 3790)
      r8050: - make use of more [value()] properties
      r8052: that looks nicer:-)
      r8054: add OSVersion, OSVersionEx, DNSMachineName PrintServerData
      r8134: remove unused var
      r8135: fix the linking on my SuSE 7.3 box
      r8136: remove unused var
      r8146: fix compiler warning
      r8148: - make the PAC generation code a bit more readable and add some outof memory checks
      r8150: these should be static
      r8154: - fix some mem_leals
      r8156: I found out that the unknown[2] field of the unknown[4] array is a length too,
      r8157: add the algorithm for unique pointers that w2k3 uses.
      r8158: - use the timestring for the serial number of the bind zone file
      r8163: if sidcount is zero it happened that we return NT_STATUS_NO_MEMORY...
      r8164: - match the ordering w2k3 uses for the PAC_BUFFER:
      r8167: - use the same algorithm than w2k3 for 'unique' pointer values
      r8168: after testing I saw that w2k3 uses unique pointers on the mgmt pipe
      r8203: fix the build temporary,
      r8210: - make the ndr_token_* function public
      r8211: fix some cldap replies
      r8212: fix pushing of nbt_string's:
      r8222: 0 entries are no error, unless it's a base search
      r8223: fix the values of nt_version and type we reply in the server code,
      r8224: - add objectGUID ldif_handler
      r8225: make nETBIOSName case insensitive, so that lower case netbios domain REALM's
      r8226: w2k3 adds a '.' after the forest and domain dns names for the primary domain
      r8227: add STR_LARGE_SIZE flag, to support strings where the size is length+1,
      r8228: fix compiler warnings
      r8232: remove samr_String and netr_String as they are the same as lsa_String
      r8235: fix the build
      r8359: fix a shell warning
      r8363: - we need to correct the realm for the krbtgt/NETBIOSDOMAINREALM
      r8368: the type filed depends on the user being present or not
      r8370: remove the '$' from in the cn: attribute for computer and dc accounts
      r8371: the objectGUID is now stored in binary...
      r8375: - move from netr_StringLarge to lsa_StringLarge
      r8376: remove version info from configure.in
      r8429: fix compiler warnings
      r8430: readd my hack to display the hashes with -d 100
      r8474: add some more attid mappings
      r8476: add a note that DsAddEntry is very incomplete yet
      r8503: remove useless line
      r8505: - 'seal' and 'sign,seal' is the same
      r8867: try to fix the LOCAL-IRPC test on 64bit platforms
      r8868: add comfigure check for c99 struct initialization,
      r8871: add some debugging code to findout why LOCAL-IRPC fails on 64bit hosts
      r8873: add more checks
      r8874: test some more combinations
      r8876: check the result of AddOne and test some more values
      r8973: nicer output
      r9025: fix the build when it was stoped and you don't run make clean before make all
      r9026: remove autogenerated .x and .c files
      r9028: make some function static
      r9030: add a AC_SEARCH_FUNCS_EXT() which takes an extra argument that get the output libs
      r9031: don't use the global $LIBS variables for posix specific stuff
      r9049: - add property dependencies to include/proto.h
      r9050: fix make pch all
      r9055: fix header generation for string_array and some other  scalar types
      r9060: prepend not overwrite the libs
      r9063: - don't pollute the global $LIBS variable with -ldl
      r9077: HEIMDAL_ROKEN needs inet_aton and on solaris it's in -lsocket
      r9078: - move charset stuff to lib/charset
      r9105: match the prototype of netdb.h
      r9106: look for something more usefull in the -lnsl
      r9107: try to get the build on solaris going...
      r9108: try to get aix building...
      r9109: set HAVE_GAI_STRERROR when the function was found donnot know whz this
      r9110: use printf again
      r9111: actually use the roken inet_aton when nothing was found
      r9141: fix up output massage
      r9142: fix the output to the new names
      r9143: print out the rate of rounttrips
      r9148: remove the aix stuff it didn't fix the build
      r9149: add support for string arrays in GetPrinterData
      r9151: reverting to return char * again
      r9152: fix a crash bug
      r9157: fix white spaces
      r9170: fix crash bug
      r9196: - add a note about the Canonicalize KDCOPtion flag
      r9208: fix a crash bug
      r9240: - move struct security_token to the idl file, with this we can
      r9257: - I assume we don't need unistd.h in this file,
      r9258: return is only supported in function, not in plain shell scripts
      r9260: only overwrite destination files when the temp files was created correct
      r9318: fix searches with scope ONE and SUB,
      r9371: add the usefull trick hack for NT_STATUS_NO_MEMORY too
      r9372: - make the subcontext handling autogenerated code look nicer,
      r9373: - create a hierachical memory tree with recursiv ndr_pull_* functions
      r9473: - assume the case that happens on most boxes, to remove compiler warnings on them
      r9482: add --validate and --dump-data options to ndrdump,
      r9506: as the included file only contains a macro and no logic for configure move the
      r9509: start to fix the pushing of drsuapi_DsAttributeValueDNString structs,
      r9510: fix the memory tree
      r9511: - fix the memory trees
      r9513: - let us parse some more replies of DsAddEntry
      r9514: add some new error codes I was getting with DsGetNCChanges() and DsAddEntry()
      r9517: fix compiler warning: status.v initialized variable used in line 375
      r9518: - remove the subcontext_size() hack from rev 9509
      r9526: provide DCERPC auth type 16
      r9527: add the magic Bind GUID's, that are needed to fetch the whole
      r9638: add error code that you get when you call DsGetNCChanges() with a tmp_highest_usn which is
      r9795: fix the ndr_pull_string code to handle, some special cases,
      r9797: - let us parse replication packets with linked attributes fine,
      r9954: getntacl depends on EXT_LIB_XATTR
      r10075: fix warning with autoconf 2.59 on SuSE 9.3
      r10076: this macro was moved to build/m4/smb_cc_featues.m4
      r10077: - move gcc option checks to check_cc.m4
      r10078: - add a 'struct data_blob_list_item'
      r10081: - create a seperate WINSDB subsystem
      r10085: decode level 5 and 9 too
      r10112: - check attributes depending on the section type
      r10113: rename libcli/wins to libcli/wrepl
      r10115: bind client connection to the best interface, to the partner
      r10126: WREPL_REPL_UPDATE also takes a wrepl_table
      r10129: fix sinple ip's in wins replication, packets
      r10140: reorder some stuff, for nicer output
      r10141: if some of the LIBNDR_ALIGN_* flags and LIBNDR_FLAG_REMAINING are set,
      r10143: don't exit when the not all bytes are consumed,
      r10144: dump the whole data blob
      r10164: - add first assoc_ctx test
      r10167: add a test to check if we always get the same assoc_ctx, on one connection.
      r10237: fix parameter, how have I missed this...?
      r10312: fix compiler warning
      r10339: fix ndr_push_udlongr
      r10341: remove unused libads/ code, we'll never use this in samba4,
      r10346: here are only real ip-addresses valid, prevent dns lookups,
      r10426: - restructure the winbind server code a bit
      r10434: add a short path to the event context that should be used for async replies
      r10435: fill in the reference to the generic wbsrv_call in the wbsrv_samba3_call,
      r10449: remove double copyright header
      r10504: - seperate implementation specific stuff, from the generic composite
      r10506: set return data correctly
      r10508: - implement WINBINDD_NETBIOS_NAME, WINBINDD_DOMAIN_NAME and WINBINDD_INFO
      r10529: fix a crash bug in full async code the uses the composite_trigger_done() code
      r10530: - fix some crash bugs when we lost the connection...
      r10537: - we now use a much nicer way to handle talloc_free(timed_event)
      r10540: fix compiler warning
      r10542: if the transport is dead we need to return
      r10545: map ECONNRESET to NT_STATUS_CONNECTION_RESET
      r10547: - add wrepl_request timeout handling
      r10569: add all info that we have to wrepl_name, as we need it for replication :-)
      r10608: - fix hierachical memory handling in ndr_pull_nbt_name
      r10610: forgot one file in the last commit:
      r10627: - use a wrepl specific enum for the node type
      r10637: use the correct memory context in the ndr_pull_* function
      r10638: - add wrepl_socket_merge() function that creates a wrepl_socket on top
      r10653: give unknown levels a name basicly the *2 levels mean
      r10760: remove only one star from the pointers, and not from the stars that
      r10761: we need to use a pointer to a nbt_name to fix compiler warnings, because we can
      r10766: - make it possible to mark a wrepl_request as send only,
      r10768: add a function to create a stream_connection from an already
      r10830: we should use the same name in all places:-)
      r10832: free the old session info
      r10836: giving NT_STATUS_NO_MEMORY, when the connection fails wasn't a good idea...
      r10865: merge branches/SOC/SAMBA_4_0 into main the main SAMBA_4_0 tree
      r10867: add WERR_UNKNOWN_REVISION errorcode
      r10868: make flag(NDR_PAHEX) possible to use and show the union level in hex
      r10869: add dummy functions and dummy parsing of XPRESS decompression,
      r10870: decompress DsGetNCChangesCtr7 replies, that uses type 2 (MSZIP)
      r10871: make xpress compression choosable, by --option="dssync:xpress=yes",
      r10872: fix the length of the dummy XPRESS decompressed buffer
      r10873: check the complete payload header
      r10924: we don't need this line twice
      r10959: fix compiler warnings
      r10965: - only run the cross connection assoc test when running with -X
      r10967: move the function in the order they are used
      r10971: - test static records with the same owner too
      r10973: - make debugging a bit easier
      r10984: fix valgrind warnings, I had used that to check if w2k3 accept random values here,
      r10986: loop also when we use mszip compression
      r10987: add support for tcp kdc requests
      r10988: print out the password blobs, with
      r10991: - create always a valid bind_info28 blocks, so that we don't need to work with unions
      r10993: - make us able to check released records, we can only do that by finding out the old record was gone
      r10995: fix released vs. released
      r10997:  r11980 at SERNOX (orig r10037):  metze | 2005-09-05 14:21:40 +0200
      r11004:  r10083 at SERNOX:  metze | 2005-09-08 16:50:32 +0200
      r11007:  r10109 at SERNOX:  metze | 2005-09-09 12:29:12 +0200
      r11011:  r10124 at SERNOX:  metze | 2005-09-09 20:22:00 +0200
      r11014:  r10139 at SERNOX:  metze | 2005-09-10 10:32:36 +0200
      r11022:  r10309 at SERNOX:  metze | 2005-09-19 11:08:37 +0200
      r11023:  r10310 at SERNOX:  metze | 2005-09-19 11:21:39 +0200
      r11024:  r10311 at SERNOX:  metze | 2005-09-19 11:27:34 +0200
      r11025:  r10313 at SERNOX:  metze | 2005-09-19 12:19:27 +0200
      r11026:  r10318 at SERNOX:  metze | 2005-09-19 16:38:15 +0200
      r11027:  r10319 at SERNOX:  metze | 2005-09-19 18:31:23 +0200
      r11029:
      r11030:  r10338 at SERNOX:  metze | 2005-09-20 09:20:49 +0200
      r11032:  r10342 at SERNOX:  metze | 2005-09-20 11:00:26 +0200
      r11033:  r10343 at SERNOX:  metze | 2005-09-20 11:03:20 +0200
      r11034:  r10344 at SERNOX:  metze | 2005-09-20 11:35:54 +0200
      r11035:  r10347 at SERNOX:  metze | 2005-09-20 13:40:24 +0200
      r11036:  r10349 at SERNOX:  metze | 2005-09-20 15:38:31 +0200
      r11037:
      r11038:  r10351 at SERNOX:  metze | 2005-09-20 16:11:17 +0200
      r11039:  r10352 at SERNOX:  metze | 2005-09-20 16:50:04 +0200
      r11040:  r10357 at SERNOX:  metze | 2005-09-20 21:28:11 +0200
      r11041:  r10358 at SERNOX:  metze | 2005-09-20 21:40:03 +0200
      r11042:  r10361 at SERNOX:  metze | 2005-09-20 22:36:28 +0200
      r11043:  r10362 at SERNOX:  metze | 2005-09-20 22:37:28 +0200
      r11044:
      r11045:
      r11047:
      r11048:  r10539 at SERNOX:  metze | 2005-09-27 14:59:47 +0200
      r11051: fix the build,
      r11052: bring samba4 uptodate with the samba4-winsrepl branch,
      r11053: fix the logic,
      r11058: remove useless talloc context
      r11083: use the addresses from the record
      r11084: - allow hex numbers with 'a'...'f' digits to be parsed
      r11085: as ejs doesn't support '&' '|' bitwise AND and OR,
      r11086: add sys.unix2nttime() function
      r11087: - add type,name,scope as attributes to winsRecords,
      r11088: don't try to set empty strings values as attributes
      r11089: start the winsreplication task when we run with wins support = yes
      r11090: we need this to run correct under socket_wrapper
      r11091: add a NBT-WINSREPLICATION-QUICK test that passed the current samba4 server
      r11092: run NBT-WINSREPLICATION-QUICK test with make test
      r11108: - always test the old and new record
      r11115: add unique vs special group section
      r11116: - don't display cleanup updates
      r11117: add a normal group vs. normal group section
      r11119: add normal group vs. special group section
      r11121: - add normal groups vs. multihomed section
      r11142: - add special group vs. unique section
      r11144: - add special group vs. normal group section
      r11146: make sure we get the expected amount of addresses
      r11171: fix the build
      r11172: - start with special group vs. special group testing
      r11173: print out the correct messages
      r11174: - add special group vs. multi homed section
      r11175: - add multi homed vs. normal group section
      r11176: - add multi homed vs. special group section
      r11177: move unique vs * and normal group vs * into this form
      r11178: add some logic functions for the replica_vs_replica conflict handling
      r11179: revert to the old code, till jelmer find a solution how to
      r11185: - resolve attid for "supplementalCredentials" into a name
      r11186: - get rid of some .extra = True cases
      r11187: in case the msDS-KeyVersionNumber is replicated (I didn't assume this...)
      r11188: - add multi homed vs. multi homed section
      r11189: add some more special group vs. special group tests,
      r11241: - fix compiler warning
      r11265: add a bunch of owned vs. replica conflict tests
      r11276: fix compiler warnings
      r11277: fix compiler warning
      r11278: fix compiler warnings
      r11279: it should be only possible to register a 0x1C name, when the NBT_NM_GROUP flag is set
      r11329: the 0x1C must be registered as group name
      r11330: - split up owned,active vs replica and owned,released vs. replica
      r11331: add conflict cases owned,released vs. replica
      r11400: fix compiler warnings
      r11415: - create a seperate nbt socket for handling incoming packets
      r11416: add some more comments
      r11418: - add unique,owned,active vs. normal group section
      r11419: add owned,unique,active vs. special group replica section
      r11425: add owned,active,unique vs. multi homed section
      r11426: add owned,active,normalgroup vs. * replica sections
      r11429: - add owned,active,sgroup vs. unique, group and mhomed replica
      r11478: add owned,active,multi homed vs. * section
      r11479: fix compiler warning
      r11480: demonstrate the only the positive name query response cares,
      r11484: test some multi homed record merging
      r11485: prevent us from calling the request handler recursiv when
      r11487: thanks to make test I noticed a dead lock bug, in the last change,
      r11488: handle the stupid name release demand a windows there send...
      r11489: add the one replication cycle test to NBT-WINSREPLICATION-QUICK
      r11502: make sure we always use the 7 chars for the unix socket name.
      r11503: be quite...
      r11546: add more errno ntstatus mappings, to get more usefull errors from socket_wrapper
      r11547: - don't do pull replication when pullIntervall is 0
      r11552: fix indent
      r11553: give an error when the lookup failed
      r11554: make us able to run without depending on 127.0.0.1
      r11555: - change socket_wrapper to support multiple IP's
      r11599: remove local (and broken) version of strhaslower() strhasupper()
      r11600: remove unused code
      r11601: try to fix the build on IRIX 6.5 us4
      r11611: don't use unions without a instance name, not all compilers support that...
      r11634: - make crc table static
      r11635: fix a handling of packet_send in the smb client lib
      r11637: we need a session and a tcon for ntioctl() and ntrename()
      r11640: just a nicer format, and make adding more special cases easier
      r11641: remove unused parameter vuid
      r11642: add some error checks
      r11643: fix compiler warnings
      r11644: free the buffer when it's not used
      r11646: fix typos
      r11647: add smbcli_ prefix
      r11648: fix some bugs...
      r11649: - add support for ntcancel replies (they only happen in error cases,
      r11650: - as every call that goes down to the ntvfs layer need a valid tcon and session
      r11669: - make sure req is initialized
      r11670: fix the build
      r11671: - make sure req is initialized
      r11672: - add support for special group merge tests
      r11673: - update the max_version of the owner when we get some records
      r11675: a more general way of getting rid of compiler warnings and errors
      r11676: as tridge uses 0x%llx in his latest commits...
      r11677: print leading zeros
      r11678: - add suport for sgroup,replica vs. sgroup,replica tests
      r11722: make the smb2_push/pull functions take a smb2_request_buffer
      r11723: fix the build
      r11724: - move checks packet size and protocol version,
      r11740: add some EA error codes
      r11741: - the buffer code (first 2 bytes in the SMB2 body) seem to be the length
      r11742: fix pushing of 0 length blobs
      r11743: - push the length at the correct offset
      r11744: make sure the session is completed authenticated!!!
      r11745: one more check for a valid session
      r11746: revert my last commits, I now understand how we decide between
      r11757: make smb_server.c independent from the protocol
      r11759: fix up the SEC_SHARE handling, when we want to support that later
      r11774: - move SMB specific initialisation of the smbsrv_connection out of smb_server.c
      r11778: - remove unused memory contexts as req is already the temporary context for the current request
      r11779: fix crash bug
      r11781: rename tree to tcons to match the sessions substructure of smbsrv_connection
      r11782: - make the TID 32bit in the smbsrv_tcon structure, as SMB2 uses
      r11783: - make the VIUD field in smbsrv_session 64bit, as SMB2 needs it
      r11785: rename conn.c into tcon.c
      r11786: move all SMB protocol specific stuff to smb_server/smb/
      r11787: add missing file
      r11788: remove unused header files
      r11789: - add the start of a SMB2 server
      r11802: - add copyright
      r11827: add more sgroup vs sgroup tests
      r11828: split out the async helper function into a new subsystem WB_HELPER
      r11829: remove unused #if 1
      r11831: add some SGROUP not active vs. SGROUP any tests
      r11832: - some updates for the conflict resolving logic
      r11873: add some interval vars to the service context
      r11877: - give winsdb_add/modify/delete() ldb_context as first argument
      r11878: don't get only newer records than the last one we got
      r11879: some fixes for the new ldb api
      r11880: - we finally start to apply replicas to our database
      r11881: fix debug messages
      r11882: - use some better names
      r11887: reorder some tests
      r11895: - reorder some code to make it easier to follow, how the fields appear on the wire
      r11896: max_version of 0 means unlimited
      r11897: add 2 more sgroup vs. sgroup tests with the replica having no addresses
      r11899: add some usefull debug messages
      r11900: - make sure address and registered_by are replaced when they're not present
      r11908: implement SGROUP merging, that passes the different owner tests
      r11910: fix nbt_name_release and nbt_name_query, so that we pass the owned_released vs. replica
      r11911: as we pass the owned_released vs. replica test now, run it with make test
      r11912: fix nbt_name_registration, there's still some minor stuff todo,
      r11913: if we have a UNIQUE name with more than 1 address,
      r11941: fix cut'n'paste bug
      r11971: add nbt specific continue wrapper
      r11972: handle [noejs] property also on functions
      r11973: make it easier to find bugs
      r11974: only look at $pl->{POINTER_TYPE} when $pl is defined
      r11996: don't overwrite the buffercode
      r11997: for multidimentional array like this:
      r12012: fix renaming smbsrv_trees -> smbsrv_tcons
      r12013: fix compiler warnings
      r12014: free the irpc_request structure with the irpc_call_recv functions,
      r12019: - let us only reference libblkid stuff in one file
      r12020: fix memory hierachie
      r12021: remove shortpath for winsdb_lookup, this isn't needed
      r12022: add NBTD IRPC proxy calls for wins challenge and wins release demand,
      r12023: use the NBTD IRPC proxy calls for implementing the challenge and release demand
      r12024: do some extra sleeping to give the server the chance to handle our reply
      r12065: fix compiler warning
      r12066: - add a unique,active,owner vs. unique,active,replica tests where
      r12067: print out some more details
      r12068: a better fix to prevent crashing, on errors
      r12069: fix typo
      r12070: make sure a unique record with multiple addresses becauses mhomed
      r12071: - implement MHOMED merging
      r12072: fix sgroup,active,owned vs. sgroup,non-active case
      r12073: fix vlgrind error, calculate the correct size for memcpy()
      r12074: in accept() we need to set socket name of the child socket by looking
      r12075: remove NBT-WINSREPLICATION-QUICK test, as we now pass the NBT-WINSREPLICATION
      r12078: fix the build on hosts with old compilers
      r12090: use the _trigger_error() function in the function
      r12091: the SMB2 specific level are not available via SMB
      r12092: - add dummy functions for the missing SMB2 opcodes
      r12093: add missing file
      r12094: - implement dummy smb2srv_tcon()
      r12095: the most SMB2 opcodes need a valid session and tcon,
      r12101: revert my last commit, I breaks the build and I don't know why...
      r12102: for SMB2 we need to allocate tcons per session
      r12113: in SMB2 we should only allocate a new session
      r12114: - smb2_keepalive() acts on the smb2_transport
      r12115: bring SMB sesssetup_spnego in sync with SMB2 sesssetup
      r12121: remove some dublicate code
      r12122: add forward declaration for packet_context
      r12123: handle fde == NULL at the correct level
      r12124: we don't need this comment twice
      r12125: make the deferred connection termination the default,
      r12126: get rid of the local ->terminate hacks, we do that genericly now
      r12127: add --option=rpc_login:samr_auth=yes, to work against w2k3
      r12128: add --enable-socket-wrapper
      r12140: - add an additional_flags field to the fd_event struct, so that
      r12141: - move epoll related code into one big #ifdef, and use dummy #define's
      r12146: as epoll notifies EPOLLERR and EPOLLHUP implicit,
      r12151: match the select mode of the standard events system and the liboop system,
      r12153: work arround the fact that epoll reports EPOLLERR and EPOLLHUP, even if
      r12200: - move the the winsreplication client and server code to the packet_context
      r12211: remove unused element
      r12217: add my copyright
      r12228: fix the expire time for RELEASED records
      r12229: fix the expire time for released records
      r12230: prepare for a generic periodic processing scheduling of
      r12238: don't crash when an error happens while connecting and the packet_context isn't inplace yet
      r12239: as we only get error from our events system when we wait for read events,
      r12240: if the caller isn't interessted in the reply packet, just free it
      r12241: fix the inform push notifies
      r12242: - make the push notifications triggered by the change count
      r12247: - reject freeing the wrepl_socket inside of wrepl_socket_dead()
      r12255: - we don't use SIGUSR1 anymore, so ignore it
      r12260: move the string "smbd" to one place
      r12265: as all server_service modules are specified in smbd/config.mk
      r12266: add --with-libdir option to overwrite the result that is set by --with-fhs=yes/no
      r12284: use the correct name for logging
      r12285: move the smbd.tmp into piddir, --with-fhs piddir is different
      r12286: handle absolute path and url in lock_path() as in private_path()
      r12287: move the wins.ldb into lockdir
      r12288: make sure we always include heimdal_build/config.h, before
      r12301: FHS 2.2 says that /var/cache/* contains only cached data, which can we removed without
      r12302: - create the logfilebase directory with make install
      r12304: split out the wins partner configuration into a seperate ldb.
      r12309: fix a crash bug, which appens in an error case
      r12325: - remove the hostcc object files with make clean
      r12364: add UINT32_MAX and UINT64_MAX replacement defines
      r12370: - if we got a reply without a pending request, mark the socket as dead
      r12372: - make the periodic scheduling a bit easier, instead of passing
      r12378: fix perl warnings
      r12379: export the detected perl
      r12380: add a wraper script that calls the perl scripts in heimdal_build/
      r12385: call pidl with the perl found by configure
      r12388: fix debug messages
      r12391: use the new periodic schedule system for the pull replication too
      r12408: as we always add the destinguishedName as autogenerated value,
      r12412: - the 0x1E name must be registered as group name
      r12413: do some testing with 0x1E names
      r12424: static records should not be released
      r12425: match w2k3 and store 0x1D names when they're registered as group name,
      r12426: w2k3 refused 0x1B names registered as group names
      r12428: releases on 0x1D names are ignored
      r12429: make static records always active with a max expire time
      r12431: - the TIME_T_MAX needs to be a singed max value
      r12434: implement database scavenging, the only missing part is the verifying of active replicas
      r12435: the max wins ttl is 6 days in windows and samba3
      r12437: if the client gives us an unicast name query with recursion_desired,
      r12440: fix crash bugs
      r12442: only set the "wins server" parameter if it's not set
      r12448: add some usefull debug messages
      r12509: make the output for the buildfarm nicer
      r12539: fix the pidl tests
      r12559: use the selftest_prefix, we should use this for all make test output,
      r12577: filter the loopback addresses like this 127.*.*.* and not only 127.0.0.1
      r12578: - w2k3 allows entries with 127.0.0.1 as address, so we should do
      r12580: return the first 0x1B address as first address to 0x1C queries
      r12602: fix compiler warning
      r12606: - fix multihomed registrations
      r12607: fix the build
      r12609: - add some comments to a change that went in in the last 'fix the build' commit
      r12610: we need struct passwd on some systems
      r12611: fix compiler warnings
      r12613: workarround a BSD make bug, where $< gets expanded to 'torture/libnet/userman.c'
      r12615: prepare building with ../samba4/source/configure --srcdir=../samba4/source/
      r12616: remove unused function, and we have iface_local() as replacement
      r12617: create a winsdb_handle and pass that arround,
      r12618: use our primary interface address or the "winsdb:local_owner" -address
      r12619: make sure we don't return more than 25 addresses, as w2k3 crashes in that case
      r12638: fix the build on BSD systems
      r12639: - do some tests with 0x20 0x1B names
      r12641: - remove some unused functions
      r12642: only do push notifications when something changed
      r12644: prepare the dns proxy feature for the wins server
      r12647: make use of the str_list_add function
      r12648: implement the dns proxy feature
      r12649: use the same default('yes') for 'dns proxy' as samba3
      r12661: Happy New Year!
      r12673: create functions for get_maxVersion(), set_maxVersion() and get_seqnumber()
      r12674: make use of the winsdb functions
      r12675: fix some dependencies and don't use long lines
      r12677: get rid of the special cases for the local wins owner table entry,
      r12679: create a sperate function to create the 'winsOwner' part of the search filter,
      r12700: fix name release of replica records, we need to become the owner and allocate a new versionID
      r12701: the first scavenging run should happen after half of the renew_interval,
      r12702: - reload the partner configuration, when the sequenceNumber of the wins_config.ldb
      r12724: fix warnings
      r12725: some minor updates
      r12754: - sync TIME_T_MAX calculation from samba3
      r12755: check the return value of ldb_timestring(), as this fails,
      r12761: get the TIME_T_MIN and TIME_T_MAX right again, merging from samba3 was a bad idea...
      r12772: - create variables for the %(patsubst ...) statements for the idl files
      r12773: - remove unused variable, fix the build with some old compilers
      r12774: - fix the build on OpenBSD
      r12775: free elements early...
      r12776: use $ENV{TEST_DATA_PREFIX} for test files if available
      r12777: use TEST_DATA_PREFIX if available
      r12778: export TEST_DATA_PREFIX in make test
      r12779: allow static tomstones
      r12780: propagate local records, when replicas are rejected on conflicts
      r12784: implement a simplified version of verifying old active replicas, with the owner
      r12790: fix compiler warning
      r12791: fix compiler warning
      r12792: fix compiler warning
      r12793: fix bugs
      r12795: remember the gensec_security context
      r12796: use the correct address as initiator
      r12797: check for a error
      r12798: print timestamps into the log file, this is not nice code,
      r12799: print out function and location too
      r12803: if we free the ndr structure how should we access the private pointer anymore?
      r12805: merge from samba3
      r12806: tridge: in revision 12634 you introduced to validate the ndr_print output
      r12814: we need this here too, as we'll include replace.h for building heimdal/*
      r12815: try to fix the build on AIX
      r12829: fix ldb headers, to not include '<...>' files in .c files
      r12830: this can be const
      r12831: add 'extern' to public prototypes
      r12832: make it possible to pass -D_PUBLIC_... to the compiler
      r12836: use: -fvisibility=hidden -D_PUBLIC_="__attribute__((visibility(\"default\")))"
      r12838: make the ntvfs function public
      r12842: don't include system headers directly
      r12843: get special objects with ldbsearch -a too, to match ldbedit -a
      r12844: don't include system headers directly
      r12845: fix some typos
      r12846: some fixes
      r12847: add some ldb examples from Brad Hards (bradh at frogmouth.net)
      r12849: fix typo
      r12850: - add Doxygen comments to ldb
      r12856: make the logic much more sane
      r12896: IRIX make will fallback to gmake with this,
      r12897: make it possible to use nosync transaction to speed things up,
      r12898: prepare the 'wins hook' feature, but we only debug out a 'TODO: run script ...'
      r12899: - fix warnings on AIX
      r12906: return the correct nb_flags
      r12907: skip some tests for make quicktest in NBT-WINSREPLICATION
      r12908: use '_' also for indication we want to ask for the localmaster browser,
      r12909: add an ldb module for the wins.ldb,
      r12910: fix bug #3069
      r12911: try to fix bug #3365
      r12932: export function prototypes
      r12933: fix parsing of browse packets based on the infos on http://ubiqx.org/cifs/Browsing.html
      r12934: do somemore debugging of the received browse packets,
      r12948: fix compiler warning
      r12958: don't bind to '255.255.255.255'
      r12959: hopefully fix bug #3365 this time
      r12982: fix parsing of LDAP DIRSYNC cookies
      r12983: - fix using a DIRSYNC cookie from the command line
      r12984: add parse code and ldbsearch cmdline code for
      r12999: fix compiler warnings
      r13000: fix compiler warnings
      r13001: fix compiler warnings
      r13002: fix compiler warning
      r13004: fix compiler warnings
      r13005: - use nbtd:max_refresh_time=12345 also for name refresh with a wins server
      r13006: always debug the unicast and broadcast address
      r13007: let our winsclient code register multihomed records with
      r13035: active,special group replicas are overwritten by tombstone,special group replicas
      r13037: fill in the corrent maxVersion in table replies
      r13044: I finally understand that the [charset()] and [string] properties
      r13050: when we have reloaded the partners from wins_config.ldb
      r13051: this is correct
      r13059: stop playing ping-pong while replicating special group records,
      r13060: - return only active addresses in name query responses
      r13079: add SAMBA_VERSION_RELEASE_NICKNAME
      r13080: fix crash bug
      r13084: fix 'make test'!
      r13087: don't store timestamps for static records
      r13088: - handle non-active static entries
      r13111: w2k3 uses the naxVersion id for calculating the notification,
      r13112: merge over some stuff from samba3
      r13113: 4.0.0tp1 has just released,
      r13114: remove 'const' and make clear what the parameters are for
      r13115: call the wins hook script on modifications of the wins.ldb
      r13116: make sure we don't add more than 25 addresses to a record,
      r13117: the caller may reference the winsdb_addr struct,
      r13128: init the private_data to NULL
      r13129: fix the memory hierachie
      r13131: windows sends termination here, this fixes access with regedit
      r13163: as we don't import the raw magic configure vars for
      r13226: remove empty file
      r13227: revert some more stuff from 13208
      r13228: revert more stuff from 13208
      r13345: let us replicate with NT4sp6a
      r13346: use private proto header files for the torture tests
      r13359: make sure we don't look at s[-1]
      r13506: zero memory as some ASN.1 elements are optional, and we should initialize
      r13507: the 'data' element of LDAP controls is optional.
      r13508: some ASN.1 element in LDAP are optional,
      r13617: fix compiler warning
      r13618: fix compiler warning
      r13619: fix compiler warning
      r13620: initialize the CMD with 0 too
      r13621: add an idl structure to parse saslauthd requests
      r13623: - make sure ntvfs_map_qfileinfo isn't used for async replies
      r13624: as abartlet requested, move the saslauthd parsing stuff to a seperate file
      r13626: fix make test
      r13627: split the NBT-WINSREPLICATION tests into multiple tests
      r13628: fix the logic:-)
      r13629: export env-vars
      r13708: fix compiler warnings
      r13709: fix compiler warnings
      r13710: fix compiler warnings
      r13767: fix compiler warnings
      r13768: be less verbose...
      r13769: the "wins partners"-option will not be readded
      r13770: - do fsync() on the debug fd, as we do in samba3,
      r13807: print out the netbios name the packet is for
      r13808: remove unused define
      r13809: move ldb specific define
      r13810: global data types are defined in core.h now...
      r13811: nicer format...
      r13812: fix compiler warning
      r13813: fix compiler warnings
      r13857: add "Windows for Workgroups 3.1a" support to the server
      r13858: - use req_pull_ascii4() instead of doing strlen() on client provided buffers
      r13859: - remove useless fsync() calls
      r13860: - add support for SMB2 ("SMB 2.001") negotiation in SMB negprot requests
      r13862: rename chain_reply -> smbsrv_chain_reply
      r13863: this can be static...
      r13865: prefix functions with smbsrv_
      r13866: prefix more functions with smbsrv_
      r13868: remove useless talloc_free() wrapper
      r13870: prefix more functions with smbsrv_
      r13872: fix typo
      r13877: remove smbsrv_send_dos_error() and use smbsrv_send_error(..,NT_STATUS_DOS())
      r13917: fix detection of the visibility support,
      r13918: fix whitespaces
      r13919: for us the standard for the visibility is "hidden"
      r13920: "hidden" visibility is the default...
      r13921: rename DEFAULT_VISIBILITY -> STANDARD_VISIBILITY
      r13922: - fix whitespaces
      r13923: make the state_flags per dcesrv_connection
      r13925: fix dependencies
      r13927: fix dependency
      r13928: fix dependency
      r13929: fix dependencies
      r13930: this tools are currently just oneliners, which depend on printf()
      r13931: fix dependencies
      r13932: fix dependency
      r13933: fix dependency and make it possible to build as shared_library
      r13934: these are only needed for a standalone build
      r13935: add dependecies
      r13936: fix dependecy
      r13937: fix the build
      r13940: use the local vs. install linkerflag trick for shared libs too
      r13941: fix the build
      r13942: fix dependencies
      r13943: the -rpath-link should be only used for binaries,
      r13953: make more functions public
      r13956: make more functions public
      r13959: make more functions public
      r13961: make function public
      r13962: make functions public
      r13963: make symbols public
      r13964: make lp_* functions public
      r13967: change the standard visibility to "default" public again
      r13972: fix the build, jelmer can you please take a look at what's going wrong here
      r13973: fix the build
      r14037: add ntvfs_next_notify()
      r14038: reopen log files after a SIGHUP
      r14039: as samba4 drops the connection on multiple negprot requests
      r14040: report errors better
      r14041: be a bit less verbose
      r14063: libnet depends on dcerpc
      r14064: - split out MSRPC_PARSE into a speperate subsystem
      r14065: build gensec_schannel always static as libnet needs functions from it
      r14066: fix whitespaces
      r14067: give more usefull errors
      r14070: this functions need to be exported,
      r14071: fix the build
      r14072: - only add the 'lib' prefix to libraries not modules
      r14078: move ldb_global_init() to the main smbd code,
      r14079: I just found the setproctitle library from alt linux:-)
      r14082: fix the build of process model thread
      r14095: disable setproctitle support by default
      r14096: setup a service task for smbsrv and dcesrv
      r14100: print out the title with the thread specific debug messages
      r14104: version.h has changed the location
      r14105: fix whitespaces
      r14110: make ndr interface parsing code libraries,
      r14117: fix a perl warning
      r14120: make the rpc client code also libraries
      r14137: move **p2 to the _recv function for setup the second pipe
      r14138: this isn't needed
      r14140: block SIGPIPE in smbtorture
      r14157: - pass a struct ntvfs_request to the ntvfs layer
      r14160: don't write behind the buffer
      r14172: composite_is_ok(c) destroys c, when the status isn't ok.
      r14173: change smb interface structures to always use
      r14174: fix typos
      r14205: move smb specific stuff out of includes.h (finally!!!:-)
      r14206: fix warnings, the better fix for that will be to make the sidmap code
      r14237: fix the summary output (step 1)
      r14240: fix summary output (step 2)
      r14256: - rename smb_file -> smb_handle
      r14316: don't zero the smb_handle after it was set:-)
      r14318: fix warnings
      r14319: this is a test to see if this help to run NBT-WINSREPLICATION-OWNED on more systems
      r14371: - make 'make CC_CHECKER=foo' possible
      r14372: fix bug found by sparse
      r14373: remove unreached wrong code, found by sparse
      r14374: remove sparse warning
      r14386: - use echo "..." instead of echo ... in all places
      r14437: fix warnings
      r14438: fix warnings
      r14439: fix warnings
      r14440: demonstrate that the smbpid is attached to a session (vuid),
      r14441: try to get more hosts on the build farm pass the NBT-WINSREPLICATION-OWNED test
      r14442: the ACB_ flags are 32 bit...
      r14444: - make clear that a canceled notify directly returns without any other event
      r14445: add FILE_NOTIFY_CHANGE_STREAM_* flags from:
      r14446: demonstrate the notifies on files are not allowed
      r14447: remove unused stuff
      r14455: also add the:
      r14456: don't access the smbsrv_tcon inside the ntvfs modules
      r14472: fix typo
      r14485: mark smb commands as need session and need tcon explicit,
      r14486: remove the need of a stream_connection on a dcesrv_connection,
      r14487: split smbsrv_request into two parts, one will be moved to ntvfs_request
      r14504: make trans and trans2 able to use async ntvfs backends
      r14523: make async search request possible
      r14526: fix the size of the output buffer, we need 1 byte for the Word count
      r14536: add make gdbtest-all and make valgrindtest-all
      r14537: remove used file
      r14538: ok, I have better used make valgrindtest my self...
      r14540: fix a talloc hierachie problem,
      r14541: separate smbsrv_request and ntvfs_request,
      r14638: we need to call smbsrv_setup_reply() before using smbsrv_setup_error()
      r14639: the platform id is 32 bit...
      r14641: fix typo
      r14642: fix shadow warnings
      r14644: fix SMBecho, used by w2k clients, failing this,
      r14647: be a bit less verbose on common stuff
      r14653: make sure we always have a valid session_info
      r14672: the async_info desctructor needs access to the private struct,
      r14680: add some tests which demonstrate that closing the dir handle
      r14709: allways use the unicast socket of the interface, when reply to DGRAM
      r14710: make more clear that SMBexit only cares about the PID
      r14711: let windows clients retry after getting ERR_SKEW
      r14732: fix typo noticed by derrell, thanks!
      r14733: SMBtdis needs a TCON and doesn't need a SESSION,
      r14734: this demonstrates that a tcon isn't autoclosed by a ulogoff
      r14736: - the ntvfs subsystem should not know about smb_server.h
      r14738: do some different lookups
      r14739: keep the last request time for the smbsrv_connection,
      r14814: also run the BASE-DIR test with 'make test'
      r14815: BASE-DIR doesn't exists...
      r14817: rename some tests
      r14818: give an error on an unknown test
      r14819: list all tests smbtorture offers and explicit list tests
      r14822: if we use the snum used by the lp_* functions instead of the wire TID,
      r14826: initialize pid1 and pid2:-)
      r14840: - rename some functions
      r14842: fix parsing of NetDiskEnum replies
      r14843: the results of the srvsrv_* calls depends on the user,
      r14848: use the constant instead of the interger value
      r14856: fix bugs noticed by the ibm code checker
      r14857: fix bugs noticed by the ibm code checker
      r14858: fix bugs noticed by the ibm code checker
      r14859: fix bugs noticed by the ibm code checker
      r14860: create libcli/security/security.h
      r14861: regenerate the proto headers when the .mk file changes
      r14890: fix the usage of popt...
      r14891: fix a bug found by the ibm checker
      r14894: - add some 'const'
      r14912: don't crash if inotify isn't present...
      r14913: readd --with-selftest-prefix as it's needed
      r14929: add some comments
      r14939: don't use a void pointer
      r14944: pass any error of build/smb_build/main.pl to the caller of ./config.status
      r14950: make sure include/config.h is only updated when the content was changed
      r14951: - remove unused var 'path'
      r14961: fix compiler warning
      r14964: - move sidmap code from ntvfs_common to SAMDB
      r14965: the unixinfo pipe need the sidmap code from SAMDB
      r14966: make more functions _PUBLIC_
      r14967: load shared module torture test after we know where to search...
      r14990: talloc_reference() can fail
      r15055: this was my version for the crash bug in the messaging code...
      r15056: w2k3 gives NT_STATUS_ACCESS_DENIED instead of NT_STATUS_ACCESS_VIOLATION
      r15057: fix access masks for getting and setting security_descriptors
      r15066: - sync the dir_flags tests with the file_flags tests
      r15069: - don't crash on a NULL acl
      r15070: test the needed access masks for read/write the different
      r15071: fix typo
      r15076: give the correct return code
      r15077: map SID_BUILTIN_USERS
      r15078: add TODO about setting the full ACL with an NTTRANS_CREATE
      r15079: w2k3 returns NT_STATUS_PRIVILEGE_NOT_HELD if SEC_FLAG_SYSTEM_SECURITY is
      r15117: add more comments
      r15118: - do access checks also when the owner and group are not changed
      r15121: fix pushing of the FLAGS2_READ_PERMIT_EXECUTE flag in the
      r15122: test what access masks are needed when using the FLAGS2_READ_PERMIT_EXECUTE
      r15146: fix comments
      r15147: make some more stuff static
      r15148: make wreplsrv_pull_names static
      r15149: fix typo
      r15182: make stuff more portable
      r15235: fix all gtk tools...
      r15246: flags need to represented as bits 0x01,0x02,0x04,0x08,0x10,...
      r15259: try to find the place that causes trouble on some build farm host
      r15272: - implement NetShareEnum
      r15273: fix setproctitle support
      r15275: run RPC-SRVSRV in make test
      r15277: - fix the build on netbsd, where stdlib.h has the setproctitle() prototype
      r15280: - remove the 2nd check for __FUNCTION__
      r15290: don't spam the screen
      r15291: $f already has the $srcdir prefixed
      r15292: fix the IDL_* variable names
      r15315: - reenable the ildap backend
      r15319: remove unneeded macros
      r15405: remove define for STAT_ST_BLOCKSIZE
      r15505: - add 'generic' alias to smb_seek and smb_flush
      r15507: if we change the idl, we need to change the calling code too:-)
      r15513: only run 'svn info' and 'svk info' once
      r15522: allow cifs:map_trans2 per share
      r15532: add a BOOL body_dynamic_present, because the body_dynamic_size can be 0
      r15533: with this vista does a fine SMB2 TreeConnect against samba4
      r15535: fix the build
      r15603: True isn't a valid parameter here, PVFS_WAIT_TIMEOUT is...
      r15612: look at the lock_type and not at the notify_ptr being NULL or not
      r15613: the snum doesn't identify the tcon, but the brl_context pointer does
      r15614: the byte range locking error handling caches the last failed lock
      r15615: - add some tests for cancel pending locks by SMBexit, SMBulogoff and SMBtdis
      r15616: fix white spaces
      r15618: fix compiler warning
      r15619: use source/version.h again
      r15622: pass 'target:samba4=yes' to samba4's smbtorture when running samba4's make test
      r15624: add some useful helper functions
      r15628: fix compiler warning
      r15629: fix some warnings
      r15638: add a usefull macro to get a pointer the smb_handle union
      r15639: fix warnings
      r15640: - NT IOCTL calls also have an 'in' data_blob
      r15641: we know have source/version.h
      r15642: add an '--always-create' option to mkproto.pl
      r15643: add some FSCTL_ codes
      r15656: for NT IOCTL's we need to control the max_data field for some calls
      r15661: add NT_STATUS_OBJECTID_NOT_FOUND
      r15684: fix option passing
      r15685: let samba3 pass RAW-READ and ignore one bug
      r15688: windows sends 4 as max_setup count on NT IOCTL
      r15689: dummy commit
      r15690: - disable the lock cancel test against samba3
      r15693: fix the logic for the "cifs:map_trans2" parameter
      r15694: for the cifs backend it's desired that we pull and repush
      r15708: setup count is 8bit and param_count and data_count are 32bit
      r15709: - return an error is better than ignoring a non supported request
      r15710: - we no longer need to set the nttrans out fields to zero
      r15711: - make use of nttrans_setup_reply()
      r15713: - initialize ntioctl.in.max_data and ntioctl.in.blob
      r15714: fix async handling of ntioctl calls and push the DATA_BLOB into the reply
      r15715: add my copyright
      r15716: disable the cifs_posix ntvfs backend as it will not be updated
      r15718: - split the SMBflush with the 0xFFFF wildcard fnum into a different level
      r15734: This is a major change to the NTVFS subsystem:
      r15737: fix a typos and comment
      r15738: make the code more readable
      r15739: return False when the function is called with an invalid level
      r15740: add TODO, that we should check if the server supports
      r15741: move smb2 request structures into the main smb request structs
      r15742: use union smb_sessetup
      r15743: use union smb_tcon
      r15744: convert_string_talloc() handles src_len == 0 as error
      r15745: - reorder the elements of smbsrv_request
      r15746: - reorder elements of smb2srv_request
      r15747: move some functions to the protocol independend part of the
      r15748: - implement SMB2 TreeConnect server code
      r15749: - pass in a dummy oplock callback
      r15750: don't clear after setting
      r15751: thanks to talloc_get_type() I noticed that I used smbsrv_request in the smb2srv code
      r15752: - add generic mapping for RAW_OPEN_SMB2
      r15753: implement SMB2 Create
      r15754: - implement SMB2 Close
      r15756: handle RAW_OPEN_SMB2
      r15757: - add RAW_WRITE_SMB2 => generic mapping
      r15758: - handle RAW_FLUSH_SMB2 in the posix ntvfs backend
      r15759: samba4 currently only supports read sizes up to with UINT16_MAX
      r15760: - add RAW_READ_SMB2 => generic mapping
      r15766: fix parsing of srvsvc_NetGetFileSecurity() and srvsvc_NetSetFileSecurity()
      r15767: we need to free here
      r15768: make it possible that the caller of the ntvfs_subsystem doesn't
      r15769: this functions belong to params/ so move it.
      r15770: when there's a dynamic body, we need to send the first byte even if the
      r15771: this should be a o32s32 blob
      r15772: pass the messaging context and server_id to the dcerpc server subsystem
      r15773: - implement srvsvc_NetGetFileSecurity() and srvsvc_NetSetFileSecurity()
      r15774: take care of the SYSTEM_SECURITY flag
      r15775: add some privilege related WERROR codes
      r15802: merge tridge's fix to the SMB2 server
      r15803: the SMB2 server gives NT_STATUS_NOT_FOUND instead of NT_STATUS_INVALID_HANDLE
      r15814: add SMB2 Lock interface structure
      r15815: add SMB2 Lock client code
      r15816: add SMB2-LOCK torture test, which demonstrates what possible valid and invalid
      r15820: this line was just for testing
      r15829: we need to include socket.h before we can use enum socket_type
      r15857: don't clear the error string after setting it
      r15858: - initialize s->r.out
      r15862: add a LOCAL-EVENT torture test
      r15865: using dirname for a variable isn't that good,
      r15955: fix whitespaces
      r15956: fix warnings
      r15957: - add a test that fetches the schema from an windows LDAP server,
      r15962: fix a crash when connect fails
      r15963: fix warnings
      r15964: fix error handling in ldb_ildap backend
      r15970: add a more verbose comment to tridge's fix for bigendian hosts.
      r15978: - pass the error code back to the caller...
      r15979: some farmating...
      r15981: we need to initialize 'ret' before 'goto failed'
      r15988: try to fix the build on au2 IRIX 6.4
      r15991: try to fix the build on au2 IRIX 6.4
      r15992: fix the subsystem name,
      r15993: don't use u_int32_t, as the main heimdal code also don't use
      r16000: - use uint16_t instead of u_int16_t
      r16001: we don't use u_intX_t any more
      r16002: fix the build on solaris
      r16003: Tru64 doesn't have strtoll/strtoull but the size of 'long' is equal to
      r16004: - move #ifdef outof the real functions
      r16005: add support for XATTR's on MacOS
      r16006: only (f)getxattr returns ssize_t
      r16008: make debugging easier, and use the os name in the function name
      r16009: fix the build
      r16010: deal with the case that int64,uint64 are already typedef'ed
      r16011: we don't need sys/bitypes.h any more
      r16012: do the type checks before anythingelse
      r16013: hopefully fix the configure check for darwin
      r16023: we don't need a global variable here...
      r16024: OpenBSD doesn't have ENOTSUP so use ENOSYS
      r16341: newer autoconf versions export 'datarootdir',
      r16357: - start get rid of void parsing functions
      r16399: - split out pushing smb_fsinfo into a DATA_BLOB
      r16400: add more error checks
      r16401: keep the old pointer when realloc fails, this is needed for the
      r16402: start to remove the dependecy to smbsrv_request from the parsing functions
      r16403: remove dependency to smbsrv_request next part...
      r16405: fix compiler warning of missing smb2_handle
      r16406: use the generic smb_handle in smb2_getinfo/smb2_setinfo
      r16407: add parsing code the SMB2 GetInfo in the server
      r16410: remove some warnings of talloc_steal() usage without target
      r16440: split out passthru level into a new functions,
      r16441: - give old tests a chance to report errors
      r16442: if we want to use CHECK_SIZE(NULL, 3)
      r16443: add push code for SMB2 levels
      r16444: - split out qfsinfo passthru levels
      r16445: print out values
      r16446: talloc_set_name() allocates and can fail...
      r16447: print the result of talloc_set_parent()
      r16448: add more error checks
      r16449: move some code to a generic place
      r16450: fix the build...
      r16456: return on error...
      r16457: fix typo
      r16463: TORTURE_NBENCH should be a module...
      r16464: split client and server min/max protocol settings
      r16466: for SMB2_ALL_EAS it's not valid for the ntvfs backends to return
      r16467: implement SMB2 GetInfo server code
      r16468: implement SMB2_ALL_INFORMATION in the posix backend
      r16469: do some smb2 tests
      r16520: move smb2srv_break_recv back to fileio.c
      r16523: pass spoolss_XcvData calls to the ntptr backends...
      r16560: print out the correct value
      r16561: - create version.h relative to srcdir
      r16566: add pull function for a site32/offset32 blob
      r16568: add parsing code for SMB2 SetInfo
      r16569: - use push_string()
      r16571: - make push/pull_ascii()/_ucs() functions static,
      r16621: split out passthru levels of setfileinfo
      r16666: implement setting of security_descriptors via SMB2 SetInfo
      r16667: - use ndr_pull_struct_blob() to make the RAW_FILEINFO_SEC_DESC pull code
      r16668: test setting of security descriptors vis smb2 setinfo
      r16669: this calls don't expect any valid error codes than NT_STATUS_OK
      r16670: try to match the vista error codes a bit more
      r16671: allow usage of smbsrv_pull_passthru_sfileinfo() without,
      r16672: we don't need this twice:-)
      r16690: - fix bug 3896
      r16691: we should only look at rdata.data.length when we're in ndr_push mode
      r16699: the layout of SMB2 Read and Write is identical...
      r16705: fix a bug found by valgrind...
      r16706: for RAW_SFILEINFO_SETATTR attrib == 0 means set it to FILE_ATTRIB_NORMAL
      r16707: - test attrib = 0 in BASIC_INFO
      r16708: the packet format of SMB2 SessionSetup has changed,
      r16716: patch from Bjoern Jacke to fix compiler warnings on AIX
      r16724: fix typo...
      r16725: don't ignore errors
      r16730: that is correct...
      r16731: send a better error code, required for vista-beta2 client
      r16732: use the given macros
      r16733: implement SMB2 SetInfo
      r16734: the 2 bytes after the opcode and before the flags,
      r16735: vista beta2 reuses the tcp connect where it does the
      r16736: - convert unix times to nttime before sending it to the wire...
      r16737: if an error happens report it
      r16738: vista beta2 use FILE_CLOSED as error for an invalid file handle
      r16739: test SMB2-GETINFO SMB2-SETINFO by make test
      r16740: just say the directory is empty
      r16741: add a RPC-LSA-GETUSER test,
      r16776: fix typo
      r16815: split out search levels which are also used by smb2
      r16834: split the level's of smb_search_first/smb_search_next and the levels
      r16868: init some uninitialized values
      r16869: - if we know the blob length, we can preallocated the memory
      r16870: copy over the status from the ntvfs request to the smb2 request
      r16871: zero padding bytes
      r16872: when we know the data length we can preallocate the buffer
      r16873: - grow the buffer with the correct size, we maybe had 1 byte preallocated
      r16874: query all information
      r16875: implement SMB2 Find in the frontend
      r16876: implement SMB2 Find in the posix ntvfs backend
      r16877: run SMB2-FIND test
      r16889: implement SMB2 Ioctl in the frontend
      r16890: implement DCERPC over SMB2 in the IPC backend
      r16891: test dcerpc over smb2
      r16910: - don't search the wildcard handle
      r16911: the TID is only 32 bits...don't overwrite parts of the UID field
      r16912: I messed up the numbers for ipc and print shares...
      r16913: better return the same values as vista beta2
      r16918: the SMB2 Ioctls are sometimes called with a wildcard handle
      r16922: move some macros out of talloc.h as the don't belong to talloc
      r16923: remove unused substitude code
      r16949: add and fix some NOTIFY return codes
      r16950: remove the smb mid from the ntvfs layer and keep a list of pending
      r16951: add the year to the copyright...
      r16975: implement SMB2 Notify call in the client lib
      r16976: add a very simple SMB2-NOTIFY test
      r16977: do a few more notify tests
      r16979: - ntcancel should compare TID,UID,MID and PID
      r16980: - make struct smb_notify a union and add levels RAW_NOTIFY_NTTRANS,RAW_NOTIFY_SMB2
      r16981: check the returned values
      r16982: fix compiler warning, gentest will not use any SMB2 levels...
      r16989: implement SMB2 Notify in the frontend
      r16996: use the correct types, merge from samba3
      r17008: on SMB2 Create the delete_on_close flag isn't ignored for
      r17009: set the protocol version correct
      r17012: don't try to send any data when the socket is gone already...
      r17014: add whitespaces...
      r17015: add a test that closes the tcp connection with an outstanding
      r17019: don't timeout on notifies
      r17020: pass the real error to the failing requests
      r17061: - remove the currect talloc chunk from it's parent before freeing the children
      r17062: make correct use of talloc destructors, and make the code much simpler
      r17081: add idle handler support to the smb2 client lib too
      r17083: - implement SMB2 Cancel in the client
      r17084: implement SMB2 Cancel in the server,
      r17085: reuse the existing sec_desc_buf struct
      r17087: - make pvfs_notify_next_send static
      r17088: add ntvfs mapping function for notify
      r17109: - use AC_SYS_LARGEFILE so that type sizes are the same when talloc
      r17112: - fix the build of the ldap ldb backend with newer openldap header files.
      r17113: build tdb and ldb standalone with the same sizes of 'off_t' as from samba
      r17114: print some sizes for debugging
      r17156: check for the size of a pointer
      r17157: bail out if sizeof(size_t) < sizeof(void *)
      r17176: remove off_t from talloc. size_t is large enough to hold
      r17226: add some comments about ldap binds and pending requests
      r17227: don't call a function which takes some nonoptional args
      r17230: don't overwrite the error with NT_STATUS_NO_MEMORY
      r17237: - keep pointer to the different sockets
      r17240: move extended operations to a new file
      r17241: substitude @datarootdir@ with old autoconf versions:-)
      r17243: some svcctl idl fixes from <andrzej.hajda at wp.pl>
      r17251: - split out the starttls into its own function
      r17253: add configure checks for writev/readv to see how portable they're
      r17256: fix 2 crash bugs, which are introduced by making parameters
      r17257: make the size_t is to small error more verbose
      r17263: export talloc_free_children()
      r17264: - remove unused includes from talloc
      r17265: some reformatting
      r17267: - add an async interface for gensec_update() to the public gensec api
      r17268: change the smb2 session setup to use the new gensec_update_send/recv() api
      r17270: split the logic of saying this auth backend wants to handle this
      r17272: move the callback stuff into a substructure
      r17273: add an async version of auth_check_password() on the public
      r17274: fix typos
      r17277: we need to trigger an event when we return directly,
      r17278: fix un uninitialized value found by valgrind
      r17280: NT_STATUS_INVALID_HANDLE maps to ERRbadfid, which is wrong in this
      r17281: we now have client/server max protol
      r17282: test some simple operation with the LANMAN1 and LANMAN2 protocol,
      r17283: use the async calls of auth_check_password() and gensec_update()
      r17284: move the input checking stuff from ntlmssp_update() into its
      r17285: some reformating
      r17290: don't do any stuff that can fail in the _recv function
      r17305: allow 'declare [...] union foo;'
      r17306: fix compiler warning
      r17317: - add a composite_create() function that allocates and initialize
      r17318: make better usage of the composite api
      r17319: make better usage of the composite api
      r17320: - print the debug message before the composite context get received by the caller
      r17321: give better error codes
      r17322: make better use of the composite api
      r17323: make better use of the composite api and fix the memory
      r17324: make better usage of the composite api
      r17325: make better usage of the composite api
      r17326: make better usage of the composite api
      r17327: when the connect with the ipv6 socket was ok,
      r17328: make better usage of the composite api
      r17329: - after a composite_continue() we need to call return;
      r17336: make the logic a bit more easier to understand...
      r17337: make better usage of the composite api
      r17339: pass the event context and messaging context together to the
      r17340: initialize elements od dcesrc_call_state in one central place
      r17341: pass a messaging context to auth_context_create()
      r17342: implement a SamLogon via IRPC in samba4's winbind
      r17343: let auth_winbind use IRPC against the winbind task.
      r17344: move the gensec_update_request structure into the header file
      r17357: - fix the build
      r17359: http://www.cs.wisc.edu/~cao/cs739/draft-leach-cifs-v1-spec-01.txt
      r17360: add some comments
      r17361: check that file handles are only accessable
      r17362: session_info and smbpid are available from the ntvfs_handle
      r17381: - we don't need debug messages twice
      r17413: add a new case for the this:
      r17414: add new error code
      r17415: the ldif handlers can't do search as this now blocks foerever
      r17416: display the attributeSecurityGUID nicely.
      r17418: add client support for the LDAP_SERVER_SD_FLAGS control
      r17419: add client support for the LDAP_SERVER_SEARCH_OPTIONS support.
      r17420: add client support for the LDAP_SERVER_DOMAIN_SCOPE control
      r17429: implement the LDAP_SERVER_SHOW_DELETED control in the client
      r17430: implement the LDAP_SERVER_PERMISSIVE_MODIFY control in the client
      r17432: display more GUID values nicely,
      r17438: extend the comment
      r17441: add some more attribute with credentials in them
      r17442: print out credentials on the "secret" objectClass and "trustedDomain"
      r17488: - add SHA1 and HMACSHA1 functions, based on rfc 2104,2202,3174
      r17489: run the crypto tests with test
      r17490: add all test values from rfc 2202
      r17491: I forgot to commit this...fix make test...sorry:-)
      r17492: add a test with the example values from rfc1321 (MD5)
      r17493: fix typo
      r17494: add tests for the example values from rfc 1320 (MD4)
      r17495: run LOCAL-CRYPTO-MD4 and LOCAL-CRYPTO-MD5 with make test
      r17531: fix whitespaces
      r17532: merge from SAMBA_3_0 Revision: 17460
      r17533: add missing include, so that "socket options = TCP_NODELY" as
      r17537: if we replace inet_ntoa() we need a prototype of
      r17538: this function should be static...
      r17539: add HMAC-MD5 test code based on the example values from rfc 2104, 2202
      r17540: store command line args of selftest.sh in local vars
      r17564: we don't need a AC_TRY_RUN to test the compiler warning options
      r17565: expand the test for negative enum values, systems like Tru64
      r17566: test if the compiler support inline, this results
      r17567: add error code I got from DsGetNCChanges
      r17570: add dummy functions for the frsrpc and frsapi interfaces
      r17586: merge lib/netif into lib/socket and use -lnsl -lsocket on the
      r17588: this file doesn't exist anymore
      r17711: fix compiler warnings
      r17712: fix compiler warning
      r17713: fix compiler warnings
      r17714: fix compiler warnings
      r17715: make the cast explicit and remove compiler warnings
      r17716: make casts explicit and remove compiler warnings
      r17717: this cried for bugs...and they happened...
      r17742: make the casts explicit and remove compiler warnings
      r17743: fix compiler warnings
      r17744: we explicit want to get warnings about declarations after statements:-)
      r17747: ldb's make test should not try to install something
      r17748: make the casts much easier to understand
      r17752: using -1 in a uint16_t value causes compiler warnings,
      r17753: fix compiler warnings and make the code simpler
      r17754: remove the --always-create option from mkproto.pl
      r17755: fix the build...
      r17756: I don't know why but this only works with the standalone
      r17772: warn about unused macros
      r17773: this macros are unsed, with compiler warnings
      r17774: this macro is unused
      r17775: use an enum to get rid of compiler warnings
      r17776: these macros are also defined in libcli/raw/trans2.h
      r17777: these macros are unused...
      r17778: fix compiler warnings
      r17779: this macro is unused
      r17780: better fix this one correctly
      r17781: fix compiler warning
      r17782: fix compiler warning
      r17783: fix compiler warnings
      r17784: fix compiler warnings
      r17785: fix compiler warnings
      r17786: remove unused macros, fix compiler warnings
      r17787: ifdef out unused macros and generate a smb_panic()
      r17788: fix compiler warnings
      r17789: remove compiler warnings
      r17790: replace uses -ldl and should directly depend on it
      r17791: get rid of another compiler warning
      r17792: io.out.winsserver is a const char *,
      r17793: add -Wmissing-prototypes, -Wmissing-declarations, -Wmissing-field-initializers
      r17794: ifdef out unused macros
      r17838: revert rev 17754
      r17882: merge change from samba3
      r17883: check if talloc_asprintf() works correct
      r17885: use _TALLOC_TYPEPF() consitently
      r17886: add talloc_ptrtype() and talloc_array_ptrtype(),
      r17887: fix c++ warnings
      r17888: use talloc_*_ptrtype() macros as wrappers arround the talloc_*_size()
      r17889: allocate a valid element where the pointer can point to,
      r17890: add -Wc++-compat option to gcc but don't use it yet
      r17891: remove c++ warnings from talloc
      r17892: fix the last talloc c++ warning
      r17893: add a function to disable the null_context
      r17895: - talloc_increase_ref_count() can fail
      r17904: we don't want warnings about unused parameters
      r17905: fix c++ warnings
      r17907: - add a generic talloc_report_depth_cb() function which takes a callback
      r17950: sync talloc with samba3
      r17952: merge changes from samba3
      r17957: don't try to use an internet connection when generating the manpage
      r17958: as talloc_init() enabled null tracking, we should avoid to use it
      r17960: try to use gmake if present on IRIX
      r17961: source/po/ isn't justed in samba4, so remove it
      r17962: source/intl/ isn't used in samba4 anymore
      r17963: fix install logic for talloc.3
      r17964: try to support sun* hosts
      r17965: make talloc build more portable
      r17966: remove all generated files
      r18064: merge from samba3
      r18087: use m4_include() do notice missing files
      r18088: sometimes autoconf picks up some old stuff:
      r18089: sometimes autoconf picks up some old stuff:
      r18090: sometimes autoconf picks up some old stuff:
      r18091: sometimes autoconf picks up some old stuff:
      r18092: pass -Ilib/replace to autoconf/autoheader
      r18093: check for the headers first and check all functions
      r18094: try to fix the samba4 build
      r18095: correctly rebuild the dependencies not only the object file
      r18096: try to make tcc happy and don't the same struct names in a global and
      r18097: use m4_include(), so we notice that build/m4/core.m4 was gone
      r18098: use m4_include() instead of sinclude()
      r18100: actually make usage of libreplace :-)
      r18136: put lib/replace in the default include path
      r18138: LIBREPLACE provides stuff from -ldl so it should depend on it
      r18142: add make distclean to talloc build
      r18144: make the logic a bit more cut&paste friendly
      r18145: rename cc_feature.m4 into libreplace_macros.m4
      r18147: add make realdistclean
      r18148: - use PHONY for test
      r18149: fix make *clean
      r18150: fix make *clean
      r18151: remove testfile
      r18152: move our AC macros into lib/replace/libreplace_macros.m4
      r18153: html/ isn't needed
      r18159: always recreate the the archive and use -s (which does the same as ranlib)
      r18164: enable the SASL library if found
      r18173: PICSUFFIX isn't used anymore
      r18179: - move CC specific stuff to check_cc.m4
      r18181: use:
      r18183: - add LIBREPLACE globaly and add LIBREPLACE_HOSTCC
      r18184: make clear that autodepencies are disabled currently
      r18210: - reenable autodependencies
      r18213: don't list LIBREPLACE depdendecies explicit and
      r18214: don't add empty elements
      r18215: use a shorter version
      r18217: use shorter perl
      r18220: $#foo returns the index of the last element not the count of elements,
      r18222: filter out double entries from CFLAGS
      r18223: the perl array of dependecies is in reversed order
      r18260: fix the build on systems with broken readdir
      r18261: print out the version of gcc
      r18262: fix typos
      r18264: print the full list of flags
      r18265: print out the failling command
      r18266: we should bail out in configure if C99 structs are not support
      r18267: print out the failing command for .ho files too
      r18268: for samba3 define _PUBLIC_ empty
      r18273: AC_PROG_LD_GNU needs LD defined already
      r18291: don't add ./ for files in the top dir '.'
      r18292: import some autoconf 2.60 specific macros,
      r18293: use the correct name it's not always under $srcdir...
      r18294: remove leading ././ from .mk files
      r18296: this isn't needed anymore
      r18297: - remove leading ./
      r18303: we should just use -Ilib/popt as in all other places
      r18305: get some more debug output to fix the build on sambajail
      r18306: I hope that works better...
      r18326: these are not used anymore, I found the bug on *BSD
      r18329: print out special make variables when failing, to track down the
      r18333: $< is broken in older BSD version:
      r18338: this isn't needed anymore
      r18366: check if we can link using the selected flags
      r18381: make sure autoconf doesn't add '-O2' to CFLAGS
      r18382: define _XOPEN_SOURCE to hopefully bring in MAP_FAILED in
      r18383: ok we need _XOPEN_SOURCE 500 and include standards.h on Tru64
      r18384: this is a ref pointer like in samba3 and for the Gid version
      r18385: fix crashes in the RPC-UNIXINFO test
      r18386: start the unixinfo pipe by default
      r18388: remove _XOPEN_SOURCE it causes trouble on BSD and IRIX
      r18389: test RPC-UNIXINFO in samba4
      r18391: - match the samba3 protocol for UNIXINFO
      r18392: add sidtouid and sidtogid tests to RPC-UNIXINFO
      r18417: overload send() and recv() by socket wrapper
      r18418: Tru64 has a different prototype for seekdir() returning int
      r18419: fix include paths of the configure tests
      r18420: fix the build...
      r18421: support --target=samba3, I thought that was already supported
      r18423: record accept, connect and close events in socket wrapper
      r18424: there's no need to allocate a wrapped socket for unix sockets,
      r18426: use 'family' consistantly instead of mixing 'domain' and 'family'
      r18427: set sin_port correctly on autobound socket
      r18428: add my copyright
      r18442: run the os2_delete test in the testsuite too
      r18443: add object files only when needed
      r18444: return the correct value on error
      r18445: splitout the dlfcn related tests
      r18447: make sure we bail out if the config.h is not generated
      r18448: this gives nicer output...
      r18450: - autogenerate the OBJ_FILES for LIBREPLACE
      r18451: move repdir/ into the top dir
      r18452: add configure test for a getdirentries() based replacement for broken readdir()
      r18454: this was just for debugging...
      r18455: check if getdents() and getdirentries() are available.
      r18456: Tru64 doesn't have getdents() so we don't need this ifdef's...
      r18458: move wins32 stuff to the top dir
      r18460: split out timegm test and only add timegm.o when needed
      r18461: - extend make showflags
      r18462: make the output a bit nicer
      r18463: add some more warning flags, tested with gcc 2.95.3 on SuSE 7.3
      r18465: much better fix for a roken specifiv problem
      r18472: - use STDC_HEADERS for stdlib.h and stddef.h as autoconf does
      r18474: - we don't need to explicit check stdint.h and inttypes.h
      r18479: start hiding libreplace configure tests behind macros
      r18485: include libreplace.m4 in the aclocal.m4 files
      r18486: hopefully this fixes the panics on solaris
      r18499: this hopefully lets the code compile on OpenBSD
      r18500: move make related checks into its own file
      r18501: libreplace needs 'long long', bailout if not present
      r18502: remove unused lines
      r18503: - _GNU_SOURCE is defined by libreplace
      r18505: add configure checks for telldir() and seekdir()
      r18514: fix configure caching of AC_VERIFY_C_PROTOTYPE() macro
      r18544: - use AC_LIBREPLACE_LOCATION_CHECKS in samba4
      r18545: if yapp isn't availabe touch the target file, as it is commited to svn,
      r18548: don't use #elif as we don't notice when 2 HAVE_IFACE_ versions are defined
      r18549: move gcc version check to libreplace and reorder the tests a bit
      r18553: - confdefs.h is always included in configure checks no need to include them explicit
      r18555: use C:\ as default not C:
      r18592: we don't need this twice
      r18593: try to get the same socket_wrapper file building in samba3 and samba4
      r18607: remove unused structure element
      r18668: fix ref pointer related bugs, we should watch the compiler warnings!
      r18674: merge from samba3,
      r18675: merge from samba3:
      r18685: we don't need this here
      r18704: readd BOOL define to fix the build
      r18706: fix whitespaces
      r18708: much nicer fix
      r18783: fix make pch
      r18800: fix a write behind the buffer bug...
      r18903: merge from samba3:
      r18915: fix usage of popt, do make -W setting the recursive flag on SuSE 10.1
      r18918: - bail out with unsupported option to socket()
      r18944: talloc_reference() can fail...
      r18945: fix compiler warnings and end-of-non-void function bugs
      r18946: fix compiler warning
      r18947: overload listen() and ioctl() in socket_wrapper
      r18948: fix the build on solaris, the ioctl() prototype
      r18957: we need to include unistd.h in system/network.h because
      r18960: fix caching of some configure tests AC_CACHE_CHECK()
      r18974: we don't have the configure check that sets
      r18975: follow the advice from "William Jojo" <jojowil at hvcc.edu>
      r18992: prepare SOCKET_WRAPPER_PCAP_FILE support
      r18994: - torture_register_suite should be public
      r18995: - fix bug 4078
      r18997: we have a replacement for vsyslog in libreplace so libroken doesn't need to care about it
      r18999: merge from samba3:
      r19023: lets see what the build-farm says about trying the
      r19029: test if opendir() on a file sets errno = ENOTDIR
      r19032: let the getdents replacement fail and see what the build-farm says.
      r19033: prepare to use the libreplace testsuite as LOCAL-REPLACE in smbtorture
      r19035: add LOCAL-REPLACE test
      r19036: add LOCAL-REPLACE and reorder the testlist
      r19063: merge from samba3
      r19082: add the source vs. destination address and tcp logic
      r19084: make socket_wrapper more portable (standalone) and not use uintX_t
      r19091: merge from samba3:
      r19092: active replica records cannot expire!
      r19097: add support for SUCKET_WRAPPER_PCAP_FILE
      r19098: with
      r19122: merge from samba3:
      r19123: - pass LDFLAGS from configure to Makefile
      r19128: - make the gdb_backtrace script more portable
      r19131: merge from samba3:
      r19146: merge from samba3:
      r19149: ladebug needs to have the stoponattach flag set
      r19150: add a usefull tool to test the gdb_backtrace script
      r19171: change the socket wrapper license to
      r19173: see if HPUX 11.23 needs the same workaround as 11.11
      r19178: fix the standalone build of socket_wrapper by not using
      r19180: with "export MAKE_TEST_KEEP_PCAP=yes" make test
      r19186: that doesn't help...
      r19187: this function should be static...
      r19188: merge from samba3:
      r19195: this should fix should workaround the broken
      r19196: merge from samba3:
      r19198: fix typo...
      r19227: - add a AC_CACHE_CHECK() around the net/if.h test
      r19229: let mkversion.sh handle bzr trees
      r19234: fix configure test for net/if.h for some platforms
      r19242: merge from samba3:
      r19245: mrege from samba3:
      r19276: remove unused file
      r19341: ndr_push_union_blob() needs the same fix as ndr_push_struct_blob()
      r19344: run smbclient and cifsdd under valgrind and pass the correct configuration
      r19369: - we need to set the target:samba3 before calling torture_init()
      r19427: print out the currect name
      r19442: this real cause of the failures on *BSD came from the missing
      r19443: reset trap when we have removed the test specifc files already
      r19480: - clear the whole session struct (only let the pid untouched)
      r19481: - reset the vuid before trying a new session setup
      r19482: remove pointless cast
      r19492: - fix RPC-AUTHCONTEXT and RPC-SAMBA3-GETUSERNAME (sorry volker:-)
      r19496: remove unused file
      r19607: - remove mech_switch.h from objectfile list
      r19608: - basics comes in with $(ALL_PREDEP)
      r19609: fix uninitialized perl variabel, we need AC_SUBST() for all configure vars
      r19610: fix the build
      r19611: we have heimdal 0.8pre currently
      r19612: fix the build with auto dependencies
      r19613: remove diff between samba4 and lorikeet
      r19614: fix compiler warnings
      r19615: include roken.h.in as this still includes the ifdef's we need in samba4
      r19616: the heimdal spnego mech doesn't seem to use roken.h and isn't portable
      r19618: pass -D_SAMBA_HOSTCC_ when using the hostcompiler
      r19621: move enable-dso to check_ld.m4 again and add some checks and generate more output
      r19622: - remove unused var
      r19623: disable building of shared libs until we have fixed them,
      r19624: we have timegm in libreplace so heimdal should not replace it
      r19625: not all linkers like -Wl,rpath-link, so don't use it till we have configure checks
      r19638: convert resolve.c to the new composite api
      r19639: convert nbtlist.c to new composite api
      r19641: ldap_delete() is only allowed as user, we need to give credentials to the ildap backend
      r19642: convert host.c to new composite api
      r19643: make process_model thread compile again
      r19645: don't pass NULL as mem_ctx...
      r19661: - add resolve stage to dcerpc connects over tcp
      r19662: windows 2003 kdc's only rewrite the realm to the full form,
      r19663: merge changes from lorikeet heimdal:
      r19664: fix compiler warnings...
      r19674: auth didn't depdend on process_model!
      r19675: the process model don't depend on heimdal anymore
      r19697: use the same mailslot name as windows does,
      r19698: fix whitespaces...
      r19699: - use better names for the site strings
      r19714: - add an explicit default target (needs to be the first target in the Makefile)
      r19719: don't use 'new' as var name samba3 doesn't like it...
      r19720: - don't pass a pointer reference to ldb_search_default_callback()
      r19721: ldapsrv_SearchCallback isn't needed any more
      r19722: fix memory leaks and hierachie bugs
      r19723: don't use [,],(,) in test names to make the build-farm output happy
      r19724: add a helper functions to return an CLDAP error
      r19726: when a client explicit asks for the 'netlogon' attriubute on LDAP
      r19727: make it possible to run the ldap.js tests against non global catalog servers
      r19729: - split basedn related tests to a new function
      r19734: display LDAP error code nicer
      r19735: report the LDAP error code in the CLDAP replies to the caller
      r19736: handle rootdse call via CLDAP
      r19737: - add some more CLDAP rootdse tests
      r19738: tp3 is already released, so we have tp4-svn now
      r19740: fix compiler warning
      r19742: fix compiler warnings
      r19743: merge from samba3:
      r19847: add idl for DsRemoveDSServer(), this is used when a server unbecomes a DC
      r19854: readd support for 'sptr' pointers, to work against windows servers
      r19855: toplevel pointers are 'ref' by default:
      r19875: set torture:host and torture:share also when we are given a binding string
      r19876: test that we can do a session setup and tree connect using the workstation
      r19884: rename ldb_dn_key -> ltdb_index_key to make more clear what it's for...
      r19885: special dn's were not casefolded before rev 19831,
      r19902: give better errors...
      r19931: remove unused struct members
      r19933: something is really wrong here...
      r19934: - allow to pass a samr_UserInfo21 struct to be passed to libnet_SetPassword()
      r19949: add comment that the configuration_dn needs to be looked up
      r19951: this statement is true...
      r19954: allow more special dn's:
      r19964: make debuging easier and report usefull error messages
      r19965: make the output a bit nicer
      r19966: we don't need 2 versions of this functions
      r19967: this unknowns are max_object_count and max_ndr_size
      r19968: add some more notes about what's needed for becoming a ads dc
      r19969: split become ads dc TODO lists into W2K and W2K3 sections
      r19987: some more notes about how to w2k3 becomes a dc
      r19988: the first LDAP calls for becoming a ads dc
      r19994: complete section about finding details about the
      r19995: add section about finding details of the RID Manager fSMORoleOwner
      r19996: add section about finding site details
      r19997: section about finding the new_dc computer account
      r19998: add section for finding details about the new_dc server object
      r19999: add section for adding the server object
      r20000: 20000
      r20002: finish requests on the first LDAP connection
      r20008: add stubs for a libnet_BecomeDC() call
      r20009: use a composite context
      r20010: cosmetic fix
      r20011: define libnet_BecomeDC_state struct and add some dummy functions
      r20021: implement a CLDAP netlogon request to get some infos
      r20022: - implement the ldap connect code
      r20023: handle <SID=...> <WKGUID=...> dn's also in ldb_dn_new_fmt()
      r20024: lookup the infrastructure fSMORoleOwner on the 1st LDAP connection
      r20025: - implement the windows2003update revision search
      r20026: - store the infrastructure server_dn_str
      r20027: restore instanceType and systemFlags values, which got lost in
      r20028: fix typos
      r20029: - implement source_dsa site object search
      r20030: - implement the computer object search
      r20031: - implement earching for an existing server object
      r20038: document first rootdse search
      r20039: things which need to be done for unbecoming a dc
      r20040: uncomplete implementation start for libnet_UnbecomeDC()
      r20041: when unbecoming a dc:
      r20042: move the computer account to the CN=Computers container if needed
      r20043: when becoming a dc:
      r20044: implement the drsuapi connect and ds_bind
      r20045: implement the drsuapi_DsRemoveDSServer() call
      r20047: patch from Julien Kerihuel <j.kerihuel at openchange.org>
      r20051: handle the case where the server object exist, but doesn't have a serverReference
      r20052: implement the first drsuapi connection
      r20053: implement the DsBind on the 1st drsuapi connection
      r20055: implement dummy DsAddEntry call (without attributes yet)
      r20056: send a DsBindInfo28 struct in the DsBind() and take care of the DsBindInfo
      r20061: use a DsBindInfo28 structure
      r20062: send values in DsAddEntry(), but it didn't work yet (ACCESS_DENIED...)
      r20064: - fix pushing of DeReplicaObjectIdentifierX, this lets the DsAddEntry()
      r20065: make it possible to get the dns domain name and netbios domain name
      r20066: use the same sid "Domain Admins" for the security_descriptor
      r20067: use a global zero_sid
      r20068: handle DsAddEntry() errors
      r20070: implement the 2nd and 3rd drsuapi connection
      r20071: move common code into a function
      r20072: make sure WERR_ACCESS_DENIED gets mapped to NT_STATUS_ACCESS_DENIED
      r20073: update the computer_dn_str after ldb_rename()
      r20074: this values seem to be typos in
      r20075: start pulling the schema content.
      r20076: give the guids meanings
      r20079: the 2nd guid is the source_dsa invocation_id not the objectGUID,
      r20080: add error code that maps to NT_STATUS_INVALID_NETWORD_RESPONSE
      r20081: pull the whole schema partition
      r20083: move function together which belong to each other
      r20084: pull the config partition
      r20085: add _part to structure elements
      r20086: pull domain partition
      r20088: implement DsReplicaUpdateRefs() calls for all partitions
      r20093: some documentation updates
      r20094: this should be non-const
      r20095: make a complete copy of the binding string
      r20096: now I'm 100% sure:-)
      r20105: remove useless comments
      r20107: don't segfault when the server didn't send a supportedMech in a negTokenTarg
      r20108: match w2k3 and send 1.2.840.48018.1.2.2 before 1.2.840.113554.1.2.2
      r20109: let libnet_BecomeDC() work against w2k servers
      r20111: this is the total object count of the current replication cycle
      r20114: from Julien Kerihuel <j.kerihuel at openchange.org>, thanks!:
      r20115: from Julien Kerihuel <j.kerihuel at openchange.org>, thanks!:
      r20120: fix the talloc hierachy and make ildb a child of module
      r20121: pass down the ldb_request struct to ildb_request_send(),
      r20122: pass ildb to ildb_request_noop()
      r20123: - avoid some more talloc_get_type() calls
      r20125: fix some ugly mem leaks in the ldb_ildb backend
      r20126: fix talloc hierachy and make lldb a child of module
      r20127: - allocate ldb_handle under ldb_request! fix a mem leak
      r20128: get rid of more talloc_get_type() calls
      r20129: remove unused structure elements
      r20130: remove one more talloc_get_type()
      r20135: attach default gensec features to the cli_credentials structure,
      r20139: only add GSS_C_CONF_FLAG and GSS_C_INTEG_FLAG if the caller requested it!
      r20141: use the gensec_features of the cli_credentials for ildap connections,
      r20142: only the DDNS updates are missing for the full libnet_BecomeDC(),
      r20144: add NET-API-BECOME-DC test that tests libnet_BecomeDC()/libnet_UnbecomeDC()
      r20145: fix whitespaces
      r20166: we have a dom_sid_add_rid() function that adds the rid after allocating
      r20167: reenable the ejsnet tests
      r20168: start separating attributes and syntaxes
      r20182: make the composite api usage more consistant (only cosmetic change)
      r20184: change ldb_attrib_handler into ldb_schema_attribute, which has a pointer
      r20185: - SMB_ENABLE() needs upper case YES/NO
      r20187: fix the build on systems without sqlite3
      r20188: move back to an default attribute handler and not use the '*' attribute
      r20189: remove unused struct element
      r20190: fix the ldb_ldap backend
      r20191: fix bug found by the IBM checker
      r20192: I assume a 'break' is the correct thing to do here,
      r20193: - let talloc_parent_chunk() handle a NULL pointer
      r20194: inline all static talloc functions
      r20195: fix typo
      r20198: let the IBM checker ignore the warning about a missing break
      r20204: use symbolic constant
      r20205: remove unused var
      r20213: add 2 error codes related to the msDs-IntId attribute
      r20219: add enough knowledge to display the content of attributeSchema objects
      r20221: - move the dsdb_schema, dsdb_attribute, dsdb_class structs into
      r20223: this function is in the torture test now
      r20224: the struct element msDs_Schema_Extensions and the attribute name "msDs-Schema-Extensions"
      r20225: we can't use composite_error() in a _recv() function, as that would
      r20226: rename macros with a _LDB at the end, because I'll add macros with _DS
      r20230: I found more mappings of OID string to uint32 id
      r20231: - add more oid => uint32 id mappings
      r20232: specify attribute name and structure element name always together
      r20233: add functions to create a dsdb_attribute and dsdb_class from
      r20251: I found out that the oid-prefix to uint32-id-prefix mapping is transferred
      r20258: add functions to read and write asn1 encoded OID strings without leading tag
      r20259: add function to start a fake tag so that asn1_read_OID_String()
      r20274: add missing return statement and make it more explicit that we return a NULL DATA_BLOB
      r20275: we should check for the oid the caller gave us!
      r20276: remove unneeded talloc_strdup()
      r20277: make sure the asn1 structure has a welldefined state after a asn1_free()
      r20278: make it possible to use oid strings in the drsuapi instead of uint8_t arrays
      r20280: if the uint8_t array starts with 0xFF, then it's not a OID
      r20281: remove debug statement
      r20282: prepare callback infrastructure to check if the forest/domain
      r20283: pass in callbacks to libnet_BecomeDC() from the caller
      r20285: pass more info to check_options hook and move behavior versions etc.
      r20286: handle the non oid string cases for pushing too
      r20288: fix a mem leak and remove useless code
      r20291: implement prepare_db hook of libnet_BecomeDC()
      r20292: set ntds_dn_str if DsAddEntry() was successful
      r20293: implement store chunk hook for libnet_BecomeDC()
      r20303: try to fix 'make install' on solaris 8, ln -fs doesn't seem to work if
      r20305: as the oid mapping table is dynnamic it makes no sense
      r20306: remove the static oid mapping table
      r20307: remove unused vars
      r20316: fix compiler warning
      r20317: store references to all important naming contexts.
      r20318: do what the printf statement says:-)
      r20319: fix compiler warnings
      r20320: add missing prototypes
      r20321: fix the samdb_partitions_dn() and samdb_sites_dn() calls,
      r20322: I assume the options attribute of the nTDSDSA object contains
      r20323: allow empty dcerpc reqeusts, this fixes the RPC-COUNTCALLS test
      r20325: handle NULL strings in is_ipaddress()
      r20326: always set the binding->target_hostname!
      r20327: start to analyse the schema content
      r20331: the last entry in the oid mapping array which starts with 0xFF
      r20332: add mastered-By and msDs-mastered-By attributes to the domain object
      r20358: - fix ejs generated code for ipv4address
      r20359: level -1 of DsGetDomainControllerInfo gives back a list
      r20360: level -4 of DsReplicaGetInfo(), which gives back all open bind handles
      r20378: add new error code that says the schema mismatches between DC's
      r20379: - make sure the schema info blob is 21 bytes long
      r20380: verify the incoming schema info and oid mappings
      r20381: verify the incoming oid mappings and schema info for the config and domain partition too
      r20382: systemAuxiliaryClass and auxiliaryClass are also multivalued attributes
      r20383: only try to find dlfcn.h if the dlopen symbol was found,
      r20391: add idl for the content of the partialAttributeSet attribute
      r20392: initial idl for frsrpc_FrsSendCommPkt()
      r20400: this let ndrdump display the content of a frsrpc_FrsSendCommPkt()
      r20404: add error code for missing attribute syntax
      r20405: add an array with attribute syntexes
      r20407: the oMObjectClass values are not padded to 10 bytes!
      r20408: fix cut'n'paste error
      r20409: load the attribute syntax for the attribute
      r20410: add functions to access dsdb_attributes and dsdb_classes by oid, uint32_id or ldap name
      r20415: add a function to get the lDAPDisplayName for an objectClass
      r20416: fix compiler warnings
      r20417: - fix pushing of drsuapi_DsAttributeValueDataBlob
      r20418: start to get step by step rid of the union for the attribute
      r20419: remove unused ojectSid and NTTIME_1sec cases
      r20420: create infrastructure to convert attribute values from drsuapi to ldb
      r20421: - delay the schema analysis untill the full schema is tranferred
      r20425: a w2k3 forest doesn't have objects with attribute values
      r20435: implement the syntax conversation functions for most of the attribute syntaxes
      r20436: add more comments and add macros signed versions of the 64 bit
      r20437: add conversation function for OID's
      r20438: - bail out on conversation errors
      r20439: this should be const pointers
      r20440: some OID syntax attributes need special handling
      r20441: fix compiler warnings
      r20449: Happy New Year!
      r20450: implement conversation of unicode strings
      r20452: add conversation for DN strings.
      r20453: add conversation for the DN_BINARY attribute syntax
      r20461: this attribute syntaxes are not used for any attribute definitions in the w2k3 schema
      r20462: add functions to handle UTCTime strings
      r20463: implement conversation of NTTIME_UTC attribute syntax
      r20466: I removed the _all only for tests and forgot to revert it
      r20469: w2k3 handles String(Numeric), String(Printable), String(Teletex) and String(IA5)
      r20471: implement conversation functions for PRESENTATION_ADDRESS attribute syntax
      r20472: add a comment for Object(Replica-Link), it's not clear that
      r20473: remove special case for boolean values
      r20475: remove special case for GUID values
      r20476: get rid of extra case for uint32 values
      r20477: get rid of the spcial case for unicode strings
      r20483: Sorry Volker:-)
      r20484: get rid of the special case for DN strings
      r20504: we handle the attribute values always as DATA_BLOB's and
      r20506: - fix parsing of LinkedAttribute values
      r20510: fix spelling
      r20513: this values are the same as in drsuapi_DsReplicaObjectIdentifier3Binary
      r20514: implement idl for DsGetNT4ChangeLog() which transferres the meta data
      r20520: allow the caller to pass NULL if it doesn't want a session info
      r20522: make a copy of the objectguid ldb module because:
      r20523: match the lDAPDisplayName case insensitive
      r20529: very, very ugly...
      r20531: - create the rdn attribute which is an alias for the 'name' attribute
      r20551: use variable instead of hardcoded value for the default site
      r20553: add ${CONFIGDN} and ${SCHEMADN} instead of using hardcoded paths
      r20554: - use ${ROOTDN} for the rootDomainNamingContext
      r20555: fix typo...
      r20557: use ${DOMAINDN} instead of ${BASEDN}
      r20560: make it possible to configure the backend and modules
      r20565: configure the list of global ldb modules also in js code
      r20568: split out the rootdse ldif
      r20570: use talloc_asprintf() instead of talloc_asprintf_append()
      r20572: - prepare a test_samdb.ldb in the NET-API-BECOME-DC torture test
      r20573: fix handling of pointers handling to elements with the charset property
      r20575: apply records to the test_samdb.ldb (my birthday present to myself...:-)
      r20576: add functions to get and set dsdb_schema on the ldb context
      r20577: - allocate an OID range for samba4 LDB/LDAP Controls
      r20580: pass the DSDB_CONTROL_REPLICATED_OBJECT_OID with the ldb_add request
      r20581: - the ldb modules have explicit hooks for extended operations
      r20582: use void *data in the ldb_extended struct to match what we have in ldb_control
      r20583: implement the frontend calls for extended operations
      r20586: - allocate an OID range for LDB/LDAP extended operations
      r20587: prepare the DSDB_EXTENDED_REPLICATED_OBJECTS_OID handling
      r20588: handle extended operations in the ldb_next_request() call
      r20596: add prototypes for the ldb_extended functions
      r20598: add comments and make clear that the void *data element for extended operations
      r20599: - forward extended operations in the partitions module
      r20629: add a wrapper function for ldb_extended(ldb, DSDB_EXTENDED_REPLICATED_OBJECTS_OID, out, &ext_res);
      r20657: fix compiler warning and bug:-)
      r20659: add missing system/aio.h
      r20661: the golden rule: "make things private if possible!"
      r20678: add index for objectGUID
      r20679: make the init_handle stuff a bit easier and get rid of really ugly talloc_get_type()
      r20680: prepare the helper functions for applying replicated objects
      r20681: implement the DSDB_EXTENDED_REPLICATED_OBJECTS operation.
      r20682: make the dsdb_extended_replicated_objects_commit() interface a bit more useful,
      r20683: load indexes before applying replicated objects,
      r20684: if we don't have any indexes, then we should not waste time
      r20685: apply records using dsdb_extended_replicated_objects_commit()
      r20686: this is a generic uptodateness vector
      r20702: fix spelling
      r20703: fix minor memory leak
      r20704: add functions to get and set the ntds objectGUID and invocationId
      r20705: store the "replUpToDateVector" attribute in DSDB_EXTENDED_REPLICATED_OBJECTS
      r20706: the '@' chars should only be in front of each line,
      r20708: fix crash bug! we can't use stack memory for async requests...
      r20709: pass a repsFromTo1 struct down as it contains all needed info for the source dsa
      r20710: update or create the "repsFrom" values after applying replicated objects
      r20712: add a function to compare GUID's
      r20713: sort the cursors in replUpToDateVector by source_dsa_invocation_id,
      r20714: we can use talloc_asprintf_append() again, because strupper_talloc()
      r20715: set the dsdb_schema on the ldb_context
      r20716: add a dsdb_cache ldb module which will load the dsdb_schema and other things
      r20726: - only add the rdn attribute and it's meta_data when the 'name' attribute is there
      r20727: implement basic merging of replicated objects when it already exist
      r20728: the DSDB_CONTROL_REPLICATED_OBJECT_OID control isn't used anymore
      r20729: add a version number to struct dsdb_extended_replicated_objects
      r20730: this can be const
      r20731: we need the complex memmove() handling for removing an attribute only in one place
      r20732: add idl for storing the prefixMap attribute
      r20733: add a function to load the oid mappings from ldb_val's
      r20734: always terminate the string... so that an empty data_blob
      r20735: print out a headline and the oMObjectClass
      r20736: skip the NBT-WINSREPLICATION-OWNED test in make quicktest
      r20760: also handle the case where no private data is attached to the module
      r20761: let ldb modules call ldb_set_default_dns()
      r20762: load the default dn's after the rootdse module is initialized,
      r20763: add function to get the oid mappings in drsuapi or ldb form
      r20764: fix some little bugs
      r20765: add two more schema related error codes
      r20766: when creating dsdb_attribute or dsdb_class structs from ldb, try the oid mapping
      r20767: don't pass a dsdb_schema to dsdb_extended_replicated_objects_commit()
      r20768: store the prefixMap and schemaInfo attributes on the schema head object
      r20769: - it's wrong to add the schemaInfo blob as 2nd value to the prefixMap attribute...(was a typo)
      r20770: remove unused var
      r20771: add an ldb module which will force the Schema FSMO Role Owner
      r20772: fix segfault caused by ldb_set_default_dns() from init_context hook of the root dse module
      r20773: we need to include config.h and replace.h before we can use #ifdef statements
      r20775: - use the schema_fsmo module on the schema partition, which loads the schema
      r20776: require a loaded dsdb_schema for originating add and modify operations
      r20777: only include closefrom.c if the system doesn't have it.
      r20778: we don't need a talloc_steal here
      r20779: fix compiler warnings
      r20780: keep a dsdb_schema_fsmo struct as private data
      r20787: a subsystem doesn't need explicit dependencies to its modules
      r20788: - remove epoll configure checks from libreplace
      r20791: the ejsnet stuff can be a normal smbcalls module...
      r20792: fix the build, sorry...
      r20794: hopefully fix the build on systems without native linux aio
      r20795: dom_sid_parse_talloc() gets an null terminated string as input,
      r20797: make it more clear that this is a 32bit bitmap
      r20798: fix ndr_size_security_ace() it should include the optional sub object
      r20799: if any ace has the optional sub object, the acl revision needs
      r20800: fix compiler warnings
      r20801: try to always fix up the acl revision when we add or remove
      r20802: - don't add the same Makefile vars twice...
      r20803: fix compiler warning about extra semicolon
      r20804: work arround HPUX and Tru64 make which don't like $$startdir
      r20805: don't use hardcoded values for secrects.keytab and sam.ldb
      r20806: make it possible to configure the secrets.ldb url
      r20807: test static password for the test_*.ldb' files
      r20808: remove whitespace
      r20809: rename struct partition into struct dsdb_control_current_partition
      r20810: unlink the test file when the test is done
      r20813: fix the build with autodependencies
      r20814: always define SHLIBEXT, to fix the build on host with no support for shared libs,
      r20815: merge from samba3
      r20816: merge from samba3:
      r20819: - include system/aio.h
      r20825: control the subsystem default output type via a variable too
      r20826: make the dsdb_control_current_partition struct public and allocate an oid for the
      r20847: - split some code out into a new function find_partition()
      r20849: first step to move away from using find_backend() and use find_partition()
      r20852: add a function to add a ldb control to a ldb_request
      r20853: attach the DSDB_CONTROL_CURRENT_PARTITION_OID control when requests
      r20855: pass the DSDB_CONTROL_CURRENT_PARTITION_OID control also for the
      r20859: fix typo
      r20863: check that there's a current partition control attached to the request
      r20864: move common stuff into an extra function
      r20865: remove useless warning, we now always pass the current partition
      r20866: - fix debug messages missing new lines
      r20867: add modules to handle the domain naming and the pdc FSMO Roles
      r20868: load the pdc_fsmo and naming_fsmo modules
      r20869: - mark the rootdse with isSyncronized=TRUE after a successful replication
      r20870: implement the constructed attributes dsSchemaAttrCount,
      r20871: implement the validFSMOs constructed attribute on the rootdse
      r20872: make the password_hash module specific to the domain partition
      r20897: fix compiler warnings
      r20898: make it work to include ntvfs/ntvfs.h multiple times
      r20899: fix the build and compiler warnings
      r20900: fix compiler warnings
      r20901: - not all compiler like uint8_t data[0] elements!
      r20902: don't crash if the object isn't there yet
      r20906: allow LDAP simple binds using the following syntaxes in the DN field:
      r20907: reset krbtgt, machine and administator account passwords to "test"
      r20908: - fix uninitialized usage of 'ctx'
      r20909: add a module that implements the LDAP_CONTROL_SHOW_DELETED_OID control
      r20910: fix crash bug
      r20921: - only give password attributes to the SYSTEM account
      r20922: use the show_deleted module by default
      r20923: only allow extended operations for SYSTEM or administrators for now
      r20952: when a component is changed we need to rebuild the linearized string
      r20953: add templates in provision_become_dc()
      r20956: cn and instanceType are autogenerated values, later we need to remove them from all
      r20957: a value of FF0000000000000000000000000000000000000000 isn't stored as schemaInfo
      r20968: - add functions to sort the meta data and attribute arrays
      r20969: remove unused function, found my lcov
      r20971: we don't need this check twice:-)
      r20973: add functions to create the autocreated subSchema Attributes:
      r20974: add basic infrastructure for a DSDB replication service
      r20975: - implement handling of meta data an on originating add
      r20977: start the 'drepl' service, which currently does nothing by default,
      r20978: 300 seconds as interval is ok, when we do nothing
      r20999: - update the list of attributes for classSchema and atttributeSchema objects
      r21000: add some options to control what ldif is dumped
      r21059: add an option to implement what windows wins server confgure via
      r21072: fix compiler warning
      r21078: TP4 is just released
      r21085: implement something like the parameter
      r21086: add some notes
      r21142: fix compiler warnings
      r21235: fix crash bug
      r21236: store and orint the dcerpc session key, gensec session key and user nthash
      r21242: prepare trying to decrypt the encrypted attributes
      r21243: create the infrastructure to test a lot of crypto combinations
      r21244: fix typo...
      r21245: combination "c[3] s[1] e[1] d[0]..." was successful!!!!!!!!!!!!!!!!!!!!!!!!!!
      r21261: add support for getting to the plain nthash (and I assume others too)
      r21267: the first 4 bytes in each encrypted attribute is the crc32
      r21272: in the history fields each hash is rid crypted on its own
      r21281: move constinancy checks to the beginning of the function
      r21282: we only need one for loop...
      r21291: add two more error codes
      r21292: add become_dc:print = yes option to dump out the drsuapi traffic
      r21293: store the gensec session key for each drsuapi connection
      r21294: this is useless, now that there's no operation in between...
      r21295: pass down the gensec session key to the store_chunk hook
      r21296: remove the session specific encryption from the attributes
      r21298: protect windows password attributes too
      r21300: let the caller decide if it wants rid decrypted hashes or not
      r21301: - the history contains lm and nt history
      r21306: fix the RPC-LSA tests the admin couldn't no longer get the 'currentValue'
      r21307: make it possible to pass in NULL for domain or rid,
      r21311: fix very ugly "using free'ed memory" bug
      r21314: add more usefull debug output
      r21315: ldb now supports filters like (&(dn=%s)(&(objectClass=kerberosSecret)(privateKeytab=*))) again
      r21316: if we got an unexpected nbt packet that most times mean
      r21317: this happens very often when you have multihomed nodes
      r21323: add a start to parse the supplementalCredentials value,
      r21329: complete support for parsing the supplementalCredentials value
      r21330: move fetching of krb5 keys into its own function
      r21331: add comment about how the cleartext password is stored
      r21333: fix POPT handling in ndrdump
      r21334: compare the original buffer and the validated one byte by byte
      r21335: add dssync:save_pwd_blobs_dir=path/ option to store the password blobs
      r21337: add hack option to use DsGetNCChanges level 5 against w2k
      r21342: add parsing code for the trustAuthIncoming/trustAuthOutgoing attributes
      r21354: fix comment
      r21355: work in child domains, CN=Configuration isn't always under the domain dn
      r21356: we have a function to get the sites dn
      r21359: remove the rid encryption before storing the password hashes
      r21360: - put in the correct machine account password into test_secrets.ldb
      r21361: let samba3sam.js pass when we'll use unicodePwd for storing the nt hash
      r21362: rename:
      r21363: fallback to fetch the KEYTYPE_ARCFOUR out of the "unicodePwd" attribute
      r21364: cosmetic change: it's nicer to use the KEYTYPE_ macro
      r21380: add idl for parsing the Primary:Kerberos blobs
      r21389: give a better error when our parser hasn't consumed all data
      r21390: move fetching the key version number into the function
      r21391: add supporting for
      r21392: - decode the salt utf16 string into a unix string
      r21395: fix comments
      r21404: packages just contain utf16 strings not guids:-)
      r21405: add support for [flag(STR_NOTERM|NDR_REMAINING)] string_array foo;
      r21406: add idl for parsing the 'Packages' and 'Primary:CLEARTEXT' elements
      r21407: auto set the len values
      r21413: fix pushing of supplementalCredentials
      r21434: - get rid of "krb5Key"
      r21435: ntPwdHash,lmPwdHash,sambaNTPwdHistory,sambaLMPwdHistory and krb5Key
      r21436: Choose the TGT session key enctype also by checking what enctypes
      r21438: create the PAC element in the same order as w2k3,
      r21439: fix compiler warnings
      r21441: create a union for the PrimaryKerberosBlob content
      r21447: make handling of replying e_data more generic
      r21448: return the same error codes as a windows KDC
      r21451: if kerberos is requested ( -k yes ), we should use authentificated connections
      r21463: add a LDAP-UPTODATEVECTOR test, it shows that the "replUpToDateVector"
      r21464: add parsing code for the Primary:WDigest blob
      r21465: the LDAP-UPTODATEVECTOR test shows that the replUpToDateVector
      r21466: run the LDAP-UPTODATEVECTOR test in make test
      r21470: generate Primary:WDigest blob with precalculated digest-md5 hashes:
      r21499: fill in the correct forest dns name
      r21501: ugly but the windows 2000 mmc deturns decoding error without this
      r21502: add a very useful option "become dc:donnot leave=yes"
      r21503: add usefull function to get the site dn for the local server
      r21504: for simo...
      r21510: make it possible to push tags with length > 0xFFFFFF
      r21511: this seems to be the nicer fix for the problem with
      r21512: finish DsBind() in the DRSUAPI server:
      r21514: move away from a hardcoded "smbtorturedc"
      r21515: add some more PFC_FLAGS from the DCERPC spec, and fix some names
      r21516: - use the same assoc_group_id, for all 3 drsuapi connection
      r21518: fix panic, sorry...
      r21519: when we want to send non initialized data, then
      r21520: fix the altercontext test... sorry
      r21523: fix a valgrind warning, we write the struct content to the file and should not leave
      r21524: don't send unitialized data to the socket
      r21533: try to get rid of the valgrind warnings of uninitialized memory
      r21538: this looks better...
      r21539: try to get rid of all valgrind warnings...
      r21583: add missing CN=
      r21588: add a RPC-HANDLES-LSARPC-SHARED test, which demonstrates
      r21589: give an error when the assoc_group_id isn't 0
      r21590: add RPC-HANDLES-MIXED-SHARED test, which shows that
      r21591: add new error code
      r21592: compress_name() returns NULL for names longer than 15 chars
      r21593: give a more useful error, when we can't resolve a long name
      r21594: give the same error in all resolve backends
      r21595: add a constant and some comments
      r21772: add DS_BEHAVIOR_WIN2003_INTERIM constant
      r21773: fix typo orginating -> originating
      r21793: add replacement for unsetenv()
      r21794: add setenv()/unsetenv() testsuite
      r21795: fix the prototype of unsetenv()...
      r21796: check if unsetenv() works on an non-existing key
      r21797: remove the key directly from the environ array
      r21798: unsetenv() returns void on some platforms (BSD)
      r21799: tell roken.h.in to not generate prototypes for setenv() and unsetenv()
      r21817: give fields a meaning
      r21820: move function, so that all are in top-down order as they get called
      r21821: move comment about the becoming a dc to the code which implements it
      r21826: reorder functions
      r21827: move comments to the place where the functionality is implemented
      r21838: generate no metadata for constructed attributes
      r21839: add my email address
      r21842: fix typo in comment
      r21843: the computer_dn isn't needed anymore because we don't manually reset the password
      r21859: add a comment why we remove the rid_crypt obfuscation
      r21928: fix the interface uuid of wzcsvc.
      r21943: don't send unitialized data
      r22038: - fix perl warning
      r22041: merge trivial changes from samba3
      r22052: merge tdbtool from samba3 and build it
      r22053: remove samba3 specific stuff from tdbtool
      r22152: merge from samba3:
      r22186: fix build with autodependencies
      r22188: fix formating bug
      r22189: fix compiler warning
      r22190: fix compiler warnings and remove unused talloc_reference()
      r22192: fix compiler warnings
      r22193: fix compiler warning and formating
      r22194: fix compiler warning and
      r22195: fix compiler warnings and convert the whole torture/rpc/unixinfo.c code
      r22196: give better error codes to make RPC-UNIXINFO pass
      r22197: fix formating
      r22199: fix typo
      r22200: make ntvfs a subsystem as linking ntvfs.so.1 uses
      r22201: crash fix...
      r22215: add strptime replacement to libreplace based on the patch
      r22216: move strptime testsuite into it's own file
      r22217: merge from samba3 21944:
      r22218: fix libreplace standalone build
      r22222: a dummy commit:-)
      r22223: make comparing of struct tm more verbose and more portable
      r22226: move discard_const macros to librelace
      r22239: use strlcpy instead of strcpy to make the IBM checker happy
      r22243: remove useless printf's
      r22246: only test strtoll once
      r22250: try to fix the build on aix1 in the farm
      r22253: - make the strtoll tests more verbose
      r22257: disable shared libraries on IRIX for now
      r22258: make ntvfs a library again
      r22259: libreplace always provides strptime()
      r22263: use AC_HAVE_DECL() because AC_CHECK_DECLS() defines to 1 or 0
      r22267: protect #define __location__ with an #ifndef
      r22270: provide __location__ in replace.h
      r22273: - provide __LINESTR__ macro
      r22279: add a lot more detailed strtoll() and strtoull() tests
      r22296: heimdal/lib/roken/roken.h.in includes <socket_wrapper.h>
      r22297: move ZERO_*, ARRAY_SIZE and PTR_DIFF macros into libreplace
      r22300: fix make everything, we need to build shared libraries...
      r22305: fix make test using a absolute path for
      r22306: try to make the aix compiler happy
      r22307: when no lex or yacc is found:
      r22308: disabled shared libraries on aix and openbsd
      r22309: cosmetic changes...
      r22310: - use 'everything' instead of 'all libraries'
      r22311: use different ip-addresses for dc and member
      r22312: avoid the need of typing 'run' into each gdb xterm
      r22319: sync lib/tdb/ with samba3
      r22329: abstract the output handling of run_test()
      r22331: remove run_test_buildfarm() function
      r22332: escape bad chars with '_' to form a nice filename
      r22334: don't print the test output if the test passed
      r22335: output the error code
      r22337: print out the smbd log output after each test
      r22359: try to fix the start failures in the build-farm by creating the prefix dir
      r22360: print out the name of the PCAP file and move setup and cleanup
      r22361: warnings.pm isn't available on solaris 8
      r22365: prepare merge to samba3
      r22367: prepare merge to samba3
      r22368: remove unused header maybe this fixes th ebuild on some hosts
      r22369: add ZERO_STRUCT() ... macros to lib/util/util.h again
      r22371: readd discard_const() to lib/util/util.h
      r22372: split out become_daemon() into it's own function
      r22373: move in_list() to util_strlist.c to remove the dependency
      r22374: fix perl warnings
      r22375: implement check_env() logic in the frontend
      r22377: implement check_env() for samba4
      r22378: none needs to be checked first
      r22379: add missing file
      r22380: get the output of the exited smbd...
      r22381: fix memory leak
      r22382: fix memory leak
      r22383: maybe this fixes the mkdir not enough args failure
      r22384: print out the total selftest runtime
      r22385: remove unused include
      r22386: another unused include
      r22387: see if this fixes the build on the aix1 hosts
      r22396: remove unused vars
      r22397: hopefully fix the build on some aix hosts in the build-farm
      r22398: try to let all tests pass 5400 seconds is not enough
      r22399: fix major memory leak
      r22400: only add srcdir and builddir path if they differ
      r22403: this dependencies should be private
      r22404: more dependencies which should be private
      r22405: fix memory leak in error path
      r22406: this dependencies should also be private
      r22407: this dependecies should be private
      r22408: more private dependecies
      r22409: try to fix selftest.pl on systems with old perl versions
      r22410: disallow PUBLIC_ options on MODULE and BINARY
      r22414: use more portable perl
      r22420: fix smbd timeout
      r22436: allow:
      r22437: fix dependencies
      r22438: get rid of printf format warnings in heimdal code
      r22439: fix some dependencies
      r22440: fix autodependencies build
      r22442: fix the build without autodependencies
      r22451: allow
      r22452: fix creation of MK_FILES variable in Makefile
      r22454: - let asn1_deps.pl calculate the dependencies depending on the IMPORT line in the asn1 file
      r22455: split dependecies array for compiling and linking and use better names:-)
      r22470: merge handling of broken connections from wins replication client code
      r22472: Commit the start of the DRSUAPI pull replication service.
      r22485: don't crash when the main dcerpc code haven't setup
      r22486: add a flag to ignore timeouts of a request and don't close
      r22508: at option for the startup delay
      r22515: only steal pipe on success
      r22528: remember that the connection was marked dead and don't
      r22530: use message() to make --quiet work
      r22534: don't remove socket and fd_event before we told the
      r22535: pass down $(TESTS) to all test variants
      r22536: resolve name before passing to cldap
      r22538: same day late at night in au...:-)
      r22544: use the same syntax as in all other files
      r22545: fix formating and a compiler warning
      r22546: use the same error codes in both share backends
      r22547: fix some pathes and make sure we work with relative and abslute prefix pathes
      r22548: - maintain a global array of exported envvars
      r22549: export some more info ipaddress and in member env also the
      r22550: nmblookup -U needs an ip address otherwise we depend on gethostbyname()
      r22551: use fixed passwords, to make it possible to reproduce stuff
      r22552: this doesn't need a dc
      r22568: use the $SERVER_IP for the NET-* tests because I'll later change
      r22569: use the $SERVER_IP for the LDAP-* tests because I'll later change
      r22570: run the NBT tests against DC and MEMBER
      r22571: - don't use "localhost" anymore in our tests
      r22575: move script/tests/ -> selftest/
      r22579: disable progress printing in the build-farm
      r22580: remove not yet needed line...
      r22581: disable BASE-UTABLE and BASE-SMB on the ntvfs/cifs share
      r22597: try to pass on some more boxes in the build-farm without timeout
      r22601: run net join with the correct socket_wrapper and krb5 configuration
      r22606: don't every try to prompt within make test...
      r22607: work with the solaris version of popt
      r22608: use a shorter share name as testparm complained about
      r22609: skip BASE-UTABLE (400s) and BASE-SMB (837s)
      r22610: fix build with included popt
      r22617: assume we have defered elements if the type is just provides via
      r22618: handle the properties related to the type
      r22619: fix pidl warnings
      r22620: fix compiler warnings
      r22621: fix the 'sam' auth module
      r22622: make it possible to pass the config file via 'SMB_CONF_PATH' envvar
      r22623: export SMB_CONF_PATH from selftest.pl
      r22624: - configure other auth methods for the member server
      r22625: hopefully fix make test on solaris
      r22626: test member server with local and domain credentials
      r22627: fix crash msgs_tmp isn't always initialized
      r22628: convert to new composite api
      r22629: if irpc gets freed within event_loop_once() we crash...
      r22635: make it possible to not turn off dns canonicalization of hostnames
      r22640: - generate nicer output
      r22658: - add AC_GNU_SOURCE macro for systems which don't have it
      r22661: optimize the handling of directly triggered timed events:
      r22662: disable shared library support on Tru64
      r22667: revert revision 22640 as it breaks nested structs in idl
      r22669: fix uninitialized element which was causing a crash with 'net password set'
      r22683: fix the logic for skipping the pipe_dead()
      r22718: remove autoconf warnings, we should only include
      r22721: use only included talloc and tdb untill jelmer
      r22722: fix dependencies
      r22723: fix compiler warnings
      r22743: set the talloc name to the string...
      r22746: fix the build of the sqlite module
      r22748: fix memleaks by passing an mem_ctx to
      r22749: fix memory leak of nbt_name_request structure which are used to send replies
      r22752: bail out on talloc failure
      r22757: test if calling talloc_free() works on parent elements from within a destrutor
      r22758: - add missing _talloc_set_name_const(ret, ret); to talloc_append_string()
      r22774: correctly initialize the smbsrv_connection when switching to SMB2
      r22788: fix typo
      r22789: fix loading of internal samba4 modules
      r22790: fix initialization for chained requests
      r22791: make it possible to use smb2_create_blob_add() in the server code too
      r22792: only don't free on success
      r22793: use a state struct for r_do_release_demand to avoid a memleak on errors
      r22824: - add a simple test which shows how a lock rejects
      r22825: let longhorn beta3 work with samba4
      r22842: fix directory listing of SMB2 and include directories and hidden files
      r22843: pass smb2 lock requests to the ntvfs layer
      r22849: map smb2 lock to the generic level
      r22858: - let SMB2-LOCK-VALID-REQUEST pass against longhorn beta3
      r22863: in SMB2 mode we always need to return NT_STATUS_LOCK_NOT_GRANTED
      r22864: in SMB2 mode we need to cancel an existing lock with a conflicting lock
      r22865: handle pending locks in smb2
      r22866: handle incoming chained smb2 requests in our server code to let
      r22894: don't send a 2nd request before the last one returned (at least with
      r22896: we pass SMB2-LOCK now
      r22913: try to work arround the unaligned memory access bug on Tru64
      r22944: fix bug #4618:
      r22989: allow '@foo' attributes searchable as we allow '@foo' attributes
      r22990: free temporary memory also on success...
      r22991: ignore '@foo' attributes in the repl_meta_data module
      r22992: add a function to attach the dsdb_schema to a ldb_context
      r22993: - make it possible to load a dsdb_schema from ldif via the ejs bindings
      r22995: don't run LOCAL-ICONV twice...
      r22996: merge HPUX compiler flag fixes from SAMBA_3_0
      r22997: only if the output of which has a leading '/' the output is useful...
      r23033: regenerate schema.ldif with minischema.js
      r23037: actually fix the asn1 memory leak :-)
      r23043: allow more than UINT16_MAX - 1 handles on smb2 connections
      r23044: - use uint32_t for handle id's
      r23045: forward SMB2 oplock breaks to the client
      r23066: don't ignore errors
      r23067: use 'const union smb_search_data *file' also in the server code to get rid
      r23069: print out the command, to find out the problem on host 'tridge'
      r23071: print the command on failure only
      r23110: add --disable-shared option, very useful for the build-farm...
      r23111: nicer ./configure --help output
      r23114: we fail the new BASE-DELETE/deltest20a|b tests
      r23115: the attribute array needs to be NULL terminated...
      r23135: inet_ntop and inet_pton are now provided by libreplace
      r23137: make it possible to skip the pidl tests
      r23144: splitup RAW-OPLOCK into small units
      r23145: try to fix the build on solaris
      r23146: fix the build (temporary)
      r23187: revert 23145 and 23135 to fix the build on solaris...
      r23188: revert 23123 and 23118.
      r23205: abartlet please commit the correct content ...
      r23208: on some HP-UX boxes dlfcn.h is available and use unsigned int flags
      r23209: import getnameinfo.c, inet_ntop.c and inet_pton.c from
      r23265: HP-UX 11.00 also needs this, try to see if 11.23 is also happy
      r23266: HP-UX 11.23 doesn't like this, but HP-UX 11.00 and 11.11 need it
      r23288: give more info...
      r23293: the fix for HP-UX 11.11 doesn't work on HP-UX 11.00
      r23294: try to fix the build
      r23296: HP-UX 11.11 also gets sizeof(uint64_t) == 4
      r23303: so HP-UX 11.11 also likes the 11.00 workarround for broken
      r23306: pass down LDFLAGS to the link command in the libreplace standalone build
      r23339: merge from SAMBA_3_0:
      r23413: TP5 is releast...
      r23418: 'S' is 0x53...
      r23419: initialize variable...
      r23420: try to make the IBM checker happy
      r23487: fix the build with automatic dependencies
      r23488: hdb_openp has changed from void * to int...
      r23490: try to fix the build without automatic dependencies
      r23493: regenerate lex.c files with flex 2.5.33
      r23631: when linking shared libraries we need to make shure the linker doesn't
      r23635: fix the samba4 build...
      r23637: fix detection of visibility attribute support
      r23638: add SMB_LIBRARY() macro to create a LIBRARY::foo section in
      r23653: add dummy implementation for all nss calls to let nsstest
      r23681: merge 23670 from SAMBA_3_0:
      r23684: Only use the bzr and git information when there's
      r23687: not every compiler supports __typeof__()
      r23851: export _ABS versions of PREFIX and SRCDIR
      r23860: export WINBINDD_SOCKET_DIR into the testenv
      r23895: reapply rev 23493:
      r24407: $element->{ARRAY_LEN} doesn't exist...
      r24446: We only need one genric GenerateFunctionInEnv
      r24447: fix samba3-cli pidl tests
      r24448: merge formating fixes SAMBA_3_2
      r24449: length_is() isn't supported without size_is().
      r24452: bail out instead of only giving a warning on
      r24454: when level 0 is a pointer we need to look for an array in level 1...
      r24463: we have a function to correctly create an $env object
      r24482: white space cleanup only...
      r24484: pass down $ndr tree instead of the $pidl tree to Samba4/Header.pm
      r24487: fix formating and add defined($opt_header)
      r24488: enum's and bitmap's not have nested types
      r24489: only typedef enum { ... } foo; enum's should look
      r24490: For ParseBitmap() we use Parse::Pidl::Typelist::bitmap_type_fn()
      r24491: base_type() isn't supported anymore and the default for enums
      r24492: Parse::Pidl::Samba4::Header::Parse() now takes an $ndr tree
      r24493: - it turns out that
      r24494: add comment to remind me to look at the flags on a tconx
      r24505: pass down $fn one level
      r24506: pass $fn down one more layer
      r24507: pass $d down to HeaderTypedef
      r24508: add HeaderTypeNew() which will go if everything is converted
      r24509: pass down the full ndr elements instead of the old pidl elements
      r24511: pass the correct thing to fatal()
      r24514: IS_* elemements sound be perl integers consistantly...
      r24515: use fatal() wrapper instead of die() directly
      r24516: don't use ->{ORIGINAL}
      r24517: move skipping pointer before an array logic into the
      r24518: get rid of using ->{ORIGINAL} and move stuff
      r24520: make use of the new ElementStars() and ArrayBrackets()
      r24521: we don't yet have optional args to DeclLong()
      r24522: make the "skip pointer to an array" logic a bit easier
      r24523: we don't support multi-dimentional [out] arrays
      r24524: make use of ElementStars()
      r24532: rename struct dcerpc_syntax_id into struct ndr_syntax_id
      r24535: rename struct dcerpc_interface_call -> struct ndr_interface_call
      r24540: rename struct dcerpc_endpoint_list/struct dcerpc_authservice_list
      r24551: rename dcerpc_interface_table -> ndr_interface_table
      r24556: forgot to commit the winbind/ subdir...sorry
      r24557: rename 'dcerpc_table_' -> 'ndr_table_'
      r24560: rename some DCERPC_ prefixes into NDR_
      r24563: remove unused DCERPC specific stuff from the generated NDR code
      r24592: pass down the ndr_interface_table in the samba3 client bindings
      r24596: - talloc request structure for the samba3 server bindings
      r24606: move librpc/rpc/table.c -> librpc/ndr/ndr_table.c
      r24620: move printing out the version string and exit()
      r24623: add back '-D' option to smbd
      r24626: as TALLOC_ABORT() is defined to abort() by default
      r24900: - if we use try to create a 3rd dcerpc_pipe then use a 3rd variable
      r24907: now that we support bindings without a transport
      r24908: we should not set s = NULL as we set it to talloc_strdup("") before
      r24983: setup the correct talloc name for structures used in the generated
      r24988: LOCAL-IRPC needs a the pid dir setup (as LOCAL-MESSAGING)
      r24989: use $smbd_maxtime for smbd...
      r25112: make torture_temp_dir() available via tortore/torture.h
      r25113: fix compiler warning
      r25114: handle structs and unions without typedefs better
      r25115: move normalizing of the define string into a function
      r25122: fix interface detection code
      r25123: we only need lib/ldb/sqlite3.m4 and lib/ldb/libldb.m4,
      r25158: rename nsswitch/winbindd_nss.h => nsswitch/winbind_struct_protocol.h
      r25159: fix missing declarations warning
      r25181: sync winbind client code with samba3
      r25182: don't hide the envlog in plain mode
      r25183: return LOCKDIR too
      r25187: pass FIRST_PREREQ to Makefile so that the value can be used
      r25188: add infrastructure for WINBIND-* tests in smbtorture
      r25189: add first winbind test for the struct based protocol (WINBINDD_PING)
      r25192: try to fix the build on sun/solaris hosts
      r25205: $(srcdir) isn't expanded here...
      r25206: unify logic of talloc_strdup() and talloc_strndup(),
      r25207: remove one nesting level and use unlikely()
      r25208: add talloc_str[n]dup_append[_buffer]() functions
      r25209: unify logic of talloc_vasprintf_append() and talloc_vasprintf_append_buffer()
      r25210: fix typo
      r25211: fix compiler warning
      r25212: merge some stuff from samba3
      r25213: use talloc_strdup_append_buffer() instead of talloc_append_string()
      r25214: use talloc_strndup_append() instead of talloc_append_string()
      r25215: replace talloc_append_string() with talloc_strdup_append_buffer()
      r25216: make talloc_append_string() a deprecated macro instead of
      r25217: #define TALLOC_DEPRECATED 1 to get talloc_append_string() macro
      r25231: revert hunk that was commited together with the change to gplv3
      r25234: make WINBIND-STRUCT-PING a benchmark test
      r25235: add simple WINBIND-STRUCT-GETDCNAME test
      r25242: remove sequence_number out of WINBINDD_DOMAIN_INFO call
      r25251: move macro defines to the end of replace.h
      r25259: try to work arround the build failures on OpenBSD 3.7
      r25262: add WINBIND-STRUCT-LIST_TRUSTDOM torture test
      r25269: this doesn't fix the problems with BSD make completely...
      r25278: add a more extented macro for doing struct based winbind requests
      r25279: - test in the generic get_trusted_domains() function that we got
      r25280: call WINBINDD_GETDCNAME for each domain returned from WINBINDD_LIST_TRUSTDOMS
      r25282: add WINBIND-STRUCT-INTERFACE_VERSION test
      r25283: add WINBIND-STRUCT-NETBIOS_NAME test.
      r25284: add WINBIND-STRUCT-DOMAIN_NAME test
      r25288: add WINBIND-STRUCT-DOMAIN_INFO test
      r25289: add WINBIND-STRUCT-INFO test
      r25290: remove wrong comment
      r25291: add WINBIND-STRUCT-PRIV_PIPE_DIR test
      r25292: minor cleanup
      r25293: add WINBIND-STRUCT-CHECK_MACHACC test
      r25297: - fix sed arguments to make the replacement work
      r25298: regenerate lex.c files with config.h as first include
      r25302: try to fix the build
      r25349: add WINBIND-STRUCT-DSGETDCNAME test
      r25386: add 'make testsuite' target that tries to at least compile
      r25404: fix the build
      r25419: fix generation of git revision calculation
      r25421: SHLIBEXT comes in via samba's config.h already
      r25425: move LDB_MODULESDIR define into config.h
      r25427: fix SELFTEST RUNTIME calculation for the build-farm
      r25428: forward declarations of enums are not portable,
      r25433: - dcerpc_AuthType is a 8bit enum not 32bit
      r25435: actually pass the statistics to the buildfarm output module
      r25437: let the default env for 'make testenv' depend on the target
      r25438: start samba3's winbindd in the selftest "dc" env
      r25464: improve build-farm output...
      r25465: improve plain output...
      r25466: fix calculation of $expected_ret, when there're
      r25467: use uppercase netbios name for samba3.
      r25468: export WINBINDD_PRIV_PIPE_DIR
      r25504: run WINBIND tests for samba3
      r25512: reformat code...
      r25513: don't hide warnings in subunit mode
      r25514: don't blindly overwrite the result last_reason,
      r25576: BOOL -> bool
      r25577: BOOL -> bool
      r25578: BOOL -> bool
      r25579: BOOL -> bool
      r25581: move variable to the place it belongs to.
      r25582: build nmblookup with make testsuite as it's needed in the blackbox tests
      r25585: don't start winbindd untill the build-farm faked users work with it
      r25595: we pass the "blackbox.smbclient.*USER and PASSWD" test
      r25597: HPUX doesn't have INET_ADDRSTRLEN defined
      r25599: print the error...
      r25600: fix stupid typo...this should fix the build on sunX
      SAMBA_VERSION_VENDOR_SUFFIX doesn't need an extra '-'
      prepare the mkversion.sh infrastructure for git branches in the build-farm
      offsetof() is always present as shown in some
      cleanup and extent .gitignore
      remove unused print_test.c code
      missing stuff from samba4's libreplace
      reformat getpass() replacement code
      reapply: Allow ^C to interrupt smbpasswd if using our getpass. from Jeremy
      fix the compilation of getpass.c and it's configure test
      use "system/*.h" to get the system includes
      rename getsmbpass -> rep_getpass and provide the function prototype
      fix crash bug in pidl generated client code, this
      delete empty file lib/replace/system/getaddrinfo.h
      [libreplace] fix the standalone build of libreplace
      remove configure checks which are now in libreplace
      make gdb_backtrace executable
      don't skip some tests which samba3 passes (at least on my laptop)
      remove reference to removed code
      fix startup of smbd, nmbd, winbindd
      fix move to OPT_LOG_STDOUT
      r25567: make do_async() non static
      r25568: move idmap related functions into their own file.
      r25569: move more idmap stuff into winbindd_idmap.c
      r25570: move code of the locator child into its own file
      r25571: split up child_dispatch_table into domain, idmap and locator tables
      ignore source/cscope.out
      [crash fix] don't use already free'ed memory
      handle wellknown sids in winbindd_passwd.c
      one more struct in_addr => struct sockaddr_storage
      rerun make idl
      start smbd, nmbd and winbindd with the same startup message
      libreplace: we need to link to make sure the functions are available
      we should not ignore convert_string_talloc() failures.
      add win_errstr() as wrapper of dos_errstr().
      add '_PUBLIC_' prototypes into proto.h
      sync the most parts of librpc/ndr with samba4
      use nss_wrapper code in samba3 when --enable-nss-wrapper is given
      make test: activate nss_wrapper for make test
      remove faked_create_user() BUILD_FARM hack as we have nss_wrapper now
      we don't have build-farm specific tests anymore
      make test: start winbindd
      use samba4's librpc/ndr/uuid.c
      make test: try to get a more portable way to get UID and GID
      prepare changes in ndr code
      ndr: change NTSTAUS into enum ndr_err_code (samba3 handwritten stuff)
      rerun make idl
      ndr: change NTSTAUS into enum ndr_err_code (samba3 callers)
      smbd: close_stat() should be static
      printing: fix default printing subsystem detection
      libads: fix typo
      printing: remove emtpy print_test.c
      idmap: add a const to idmap_dump_maps()
      winbindd: rename child table struct elements
      winbindd: pass const char *logfile to winbindd_dump_maps_async()
      winbindd: remove unused WINBINDD_DUAL_NAME2*ID and WINBINDD_DUAL_*ID2NAME calls
      winbindd: remove unused WINBINDD_DUMP_MAPS support
      debug: fix crash bug when DEBUG() is used before setup_logging()
      Revert "Fix for bug #4801: Correctly implement lsa lookup levels for lookupnames."
      winbindd: move domain child specific stuff into its own file
      selftest: move workgroup name into WORKGROUP envvar
      selftest: add a bunch of wbinfo based tests for winbindd
      selftest: disable wbinfo tests
      add POPT_COMMON_CONFIGFILE which only provides --configfile (not -s)
      wbinfo: use POPT_COMMON_CONFIGFILE
      selftest: reenable wbinfo tests and pass --configfile instead of -s
      [GLUE] fix some executable bits on shell scripts
      Merge commit 'release-4-0-0alpha1' into v4-0-test
      r25601: replace.h should never imply any "system/*.h"
      r25602: don't imply "system/network.h" within replace.h,
      r25613: verify the length and type before checking the value,
      r25622: let --socket-wrapper-keep-pcap imply --socket-wrapper-pcap
      r25623: add 'make test-swrap-pcap' and 'make test-swrap-keep-pcap'
      r25674: fix crash bug in pidl generated client code, this
      r25677: add missing stuff from samba3
      r25678: reformat getpass() replacement code
      r25679: reapply: Allow ^C to interrupt smbpasswd if using our getpass. from Jeremy
      r25680: Volker's fix for bug #668. Change the \n after the password prompt to go to tty instead of stdout.
      r25681: r16245: Cope with string being zero len. Klocwork bug #410. Jeremy.
      r25682: r16320: Ensure variable is not null before calling fclose. Klocwork #412. Jeremy.
      r25683: fix the compilation of getpass.c and it's configure test
      r25684: use "system/*.h" to get the system includes
      r25685: rename getsmbpass -> rep_getpass and provide the function prototype
      r25686: Added in missing def for AI_ADDRCONFIG.
      r25687: Move #defined for getaddrinfo into network.h (as other
      r25695: [libreplace] fix the standalone build of libreplace
      r25697: make *clean doesn't work after a svn up when some *.mk files were removed
      r25711: only use sort if available
      r25712: try to fix the build, perl should handle by_path as comparison function
      r25713: [libreplace] include socket_wrapper.h after we have typedef'ed socklen_t
      r25714: [libreplace] move define of a constant to near to the others
      r25715: [libreplace] move definition of struct addrinfo so that it can use socklen_t
      r25718: [libreplace] if we replace types define the HAVE_<type> macro
      r25719: let "system/network.h" do the replacements first, then
      r25720: update .gitignore
      r25721: remove unused var
      r25724: - include getaddrinfo.h after we have defined struct addrinfo
      r25725: merge commit bc9008aa1dcb66890795f0ff2d3046da7df867d9 from v3-2-test:
      r25726: [libreplace] move and fix getaddrinfo configure checks
      r25727: include "system/network.h" instead of <sys/socket.h>
      r25728: [libreplace] define AI_NUMERICSERV as it's used in getaddrinfo.c
      r25732: import updated parse.y files from lorikeet-heimdal
      r25733: fix filename substitution and bail out if yacc output isn't generated
      r25734: regenerate yacc output (parse.[ch] files)
      r25735: make sure we include "config.h" as first header in
      r25736: make sure we include "config.h" as first header
      r25738: always include config.h first.
      r25744: add NDR_ERR_INVALID_POINTER
      r25745: [pidl] ndr_pull/push_error(ndr, NDR_ERR_INVALID_POINTER,..)
      r25746: [selftest] make plain output more readable
      r25751: use EJS_CHECK() instead of NDR_CHECK() in ejs code
      r25752: use EJS_CHECK() instead of NDR_CHECK()
      r25765: pidl: fix compiler warning in ndr_align test
      r25766: pidl: fix bugs in ndr_tagtype tests found by compiler warnings
      r25767: pidl: make it easier to debug errors in pidl tests
      r25768: pidl: NT_STATUS_IS_ERR() is NOT the same as !NT_STATUS_IS_OK()
      r25774: create ndr_pull_union_blob_all() and match the logic of the struct fns
      r25775: use ndr_pull_union_blob_all() in CLDAP code
      r25776: ndr compression: make use of NDR_CHECK() and not use NTSTATUS directly
      r25777: add NDR_ERR_UNREAD_BYTES and don't use NTSTATUS directly
      r25778: use NT_STATUS_HAVE_NO_MEMORY() and NDR_CHECK() macros
      r25779: the return value of ndr_pull_set_switch_value() should be checked
      r25780: fix bool return
      r25782: use NT_STATUS_HAVE_NO_MEMORY()
      r25783: socket_wrapper: don't include "includes.h"
      r25784: fix compiler warning
      r25789: print out what error happened...
      r25790: - remove some nesting by using error and out logic
      r25791: wrepl_request_finished() sets req->status, so make this explicit
      r25792: use NT_STATUS_HAVE_NO_MEMORY() and NDR_CHECK()
      r25793: check the return value of ndr_push_set_switch_value()
      r25794: use NDR_CHECK()
      r25795: whitespace cleanup...
      r25796: use NT_STATUS_HAVE_NO_MEMORY()
      r25797: use error and out logic
      r25798: - check return value of ndr_push_set_switch_value()
      r25802: fix the build on solaris, void functions doesn't return values
      r25804: move including ndr_compression.h into HeaderInterface()
      r25805: pidl: include libndr.h as first header in ndr_foo.h
      r25806: let libndr.h include needed stuff and remove pidl magic
      r25818: remove useless '\' chars at the end of lines
      r25819: make the success case more clear
      r25820: but still return the error...
      r25821: always use ndr_push/pull_error() to report errors and not NTSTATUS directly
      r25822: use NDR_CHECK()
      r25823: remove unneeded nesting by using error and out logic
      r25824: - NT_STATUS_IS_ERR() is not the same as !NT_STATUS_IS_OK()
      r25828: don't ignore errors
      r25829: - use DEBUG() instead of printf
      r25830: fix compiler warning
      r25831: remove unused include
      r25833: - we don't need --root twice
      r25834: nss_wrapper: add lib/nss_wrapper skeleton
      r25835: nss_wrapper: add support for passwd accounts
      r25836: nss_wrapper: add support for groups and return EPERM in initgroups()
      r25837: nss_wrapper: add nss_wrapper.pl
      r25838: libreplace: include nss_wrapper.h if NSS_WRAPPER is defined
      r25839: use nss_wrapper code in samba4 if
      r25840: make test: activate nss_wrapper for make test
      r25841: try to fix make install
      r25863: libreplace: we need include <unistd.h> before nss_wrapper.h
      r25864: libreplace: we should only have one location where we check for required functions
      r25865: libreplace: check for nss passwd|group get*_r functions
      r25866: nss_wrapper: not all systems have get*_r calls
      r25867: libreplace: solaris has different prototypes for getpwent_r and getgrent_r
      r25868: nss_wrapper: add solaris versions of getpwent_r and getgrent_r
      r25869: selftest: strip newline from `whoami` output, hopefully fix provision on mac os 10
      r25870: libreplace: AC_VERIFY_C_PROTOTYPE() needs AC_LANG_SOURCE() to bring in confdefs.h
      r25871: nss_wrapper: set the destination pointer in the get*_r functions
      r25872: nss_wrapper: revert solaris get*ent_r() functions
      r25873: nss_wrapper: hopefully a better fix for the solaris get*ent_r functions
      r25874: force specific versions for LEX and YACC.
      r25905: use data_blob_const() to set the DATA_BLOB
      r25906: libreplace: we need to link to make sure the functions are available
      r25907: use DEBUGADD() to match samba3
      r25908: add some wikipedia links about LDAP and LDIF
      r25909: Fix the snprintf checks, and fix a typo in pointer indirection.
      r25910: Try and fix the Solaris build by adding a missing define
      r25911: Remove more fstring/pstring bad useage. Go talloc !
      r25912: Two patches
      r25913: maybe some platforms have problems with echo -e
      r25914: selftest: fix the module pathes when using --with-selftest-prefix
      r25915: ndr/pidl: change NTSTAUS into enum ndr_err_code (pidl code)
      r25916: ndr: change NTSTAUS into enum ndr_err_code (basic stuff)
      r25917: ndr: move ndr_map_error2ntstatus to errormap.c
      r25918: ndr: change NTSTAUS into enum ndr_err_code (samba4 handwritten stuff)
      r25919: ndr: change NTSTAUS into enum ndr_err_code (ndrdump)
      r25920: ndr: change NTSTAUS into enum ndr_err_code (samba4 callers)
      r25924: fix bug in UNIX_INFO2 push code found make make valgrindtest
      r25925: torture/raw: fix sending unitialized bytes in RAW-SAMBA3ROOTDIRFID
      r25936: provision/newuser: don't try to set the 'memberOf' attribute
      r25954: we don't need this twice
      r25955: libreplace: add a useful link about linking shared libraries
      r25963: libreplace: samba3 doesn't use SONAMEFLAG on Mac OS 10, so also try this
      r25967: ldb: a module doesn't need to link against $(LIBS)
      r25968: ldb: we need to use @SONAMEFLAG@ directly so that the '#' trick can work
      r25969: ldb: link libnss_ldb.so.2 against the shared library
      r25970: libreplace: fix AC_N_DEFINE() so that some appears in config.h
      r25971: libreplace: remove AC_EXTENSION_FLAG as it's the same as AC_N_DEFINE
      r25972: tdb: fix usage of SONAMEFLAG
      r25973: talloc: fix usage of SONAMEFLAG
      r25974: libreplace: see what the build-farm says if we use _XOPEN_SOURCE=600
      r25975: build: split SharedModule from SharedLibrary
      r25976: libreplace: not all platforms like _XOPEN_SOURCE=600
      r25977: libreplace: add AC_LIBREPLACE_MDLD and AC_LIBREPLACE_MDLD_FLAGS macros
      r25978: build: use AC_LIBREPLACE_MDLD_* macros and use the result to build modules
      r25982: libreplace: try to ignore unresolved symbols in modules on Tru64
      r25983: ldb: link shared library against $(LDAP_LIBS)
      r25984: ldb: use MDLD macros from libreplace and use results to build share modules
      r25985: build: SHLD_UNDEF_FLAGS isn't used anymore
      r25986: libreplace: warn about unresolved symbols when link shared libraries
      r25987: libreplace: rename AC_LD_SHLDFLAGS into AC_LIBREPLACE_SHLD_FLAGS
      r25988: libreplace: add AC_LIBREPLACE_SHLD
      r25989: build: use AC_LIBREPLACE_SHLD
      r25990: talloc: use AC_LIBREPLACE_SHLD and use it for linking the shared library
      r25991: tdb: use AC_LIBREPLACE_SHLD and use it for linking the shared library
      r25992: ldb: use AC_LIBREPLACE_SHLD and use it for linking shared libraries
      r25993: build: HOSTLD should always match HOSTCC if not specified
      r25994: build: use HOSTCC, HOSTCC_FLAGS, HOSTLD and HOSTLD_FLAGS
      r25995: build: print out MDLD and MDLD_FLAGS with make showflags
      r25996: build: rename LD -> BNLD and LDFLAGS -> BNLD_FLAGS
      r25997: torture: fix variables passed by make gcov
      r25999: libreplace: add AC_LIBREPLACE_STLD and AC_LIBREPLACE_STLD_FLAGS
      r26000: build: use AC_LIBREPLACE_STLD_* macros
      r26015: fix dependecies
      r26016: remove unneeded include
      r26017: db_wrap.h doesn't exist anymore and we now need tdb_wrap.h
      r26018: dsdb/schema/proto.h doesn't exist anymore
      r26019: use <tdb.h> instead of "tdb.h"
      r26020: GENCACHE depends on TDB_WRAP
      r26024: fix make install
      r26025: libreplace: AC_LIBREPLACE_LD_ALLOW_SHLIB_UNDEF_FLAG should fill LD_ALLOW_SHLIB_UNDEF_FLAG
      r26026: libreplace: split some linker macros
      r26027: libreplace: rename AC_LIBREPLACE_LD_ALLOW_SHLIB_UNDEF_FLAG into AC_LIBREPLACE_LD_SHLIB_ALLOW_UNDEF_FLAG
      r26049: pidl: don't use ndr_pull_save anymore
      r26050: ndr: don't use ndr_push_save anymore
      r26051: ndr_string: don't use ndr_pull_save anymore
      r26052: ndr_krb5pac: don't use ndr_pull_save anymore
      r26053: IPC_RAP: don't use ndr_pull_save anymore
      r26054: ndr: remove ndr_push/pull_save
      r26102: libreplace: remove system/printing.h as it only contains samba3 stuff
      r26219: BASE-DELAYWRITE: make the tests more strict about the write time update
      r26220: BASE-DELAYWRITE: add more subtests to explore write time update details
      r26287: selftest: fix stupid typo LDB_MODULE_PATH -> LDB_MODULES_PATH
      r26288: events: events.h uses uint16_t so it needs stdint.h
      r26289: build: avoid nasty foo/./bla pathes for python stuff
      r26290: build: split add_dir() into add_dir_str() and add_dir_array()
      r26291: build: make use of output::add_dir_str() to avoid ugly foo/../bla pathes
      r26306: BASE-DELAYWRITE: print access time stamps and test fileinfo and pathinfo match
      r26307: BASE-DELAYWRITE: only set the write time
      r26391: samba4 doesn't support 'lmhosts' as resolve module
      r26392: cmdline: remove unused var
      r26413: we should check the return value of talloc_reference()
      r26414: build: bring in the content of EXT_LIB's for the .pc files
      r26415: LIBSAMBA-CONFIG used dlopen(), so it has to depend on LIBREPLACE_EXT for -ldl
      r26421: build: we now have HAVE_IFACE_GETIFADDRS as valid interface detection code
      r26422: build: let configure print out if we have working python module support
      r26423: try to fix the build on solaris
      r26425: fix crash bug, sorry I should have tested that...
      r26533: libreplace: hopefully fix the share library/module build on darwin
      r26534: configure: using == in shell scripts isn't portable
      Merge commit 'release-4-0-0alpha2' into v4-0-test
      r26550: libreplace: fallback to __ss_family of struct sockaddr_storage
      selftest: also export LD_LIBRARY_PATH for samba4's smbtorture
      prepare the mkversion.sh infrastructure for git branches in the build-farm
      Set -test in the vendor version
      Revert "Set -test in the vendor version"
      libwbclient: move wbc_err.h into wbclient.h as we only install one header
      libwbclient: install wbclient.h into the same path as smbclient.h
      libwbclient: add wbclient.pc.in
      nsswitch/: we don't need socket or nss wrapper in the winbind client code
      libwbclient: libwbclient.so doesn't need socket nor nss wrapper any more
      pam_winbind: pam_winbind.so doesn't need soecket wrapper any more
      nss_winbind: nss_winbind.so doesn't need socket wrapper any more
      krb5_locator: winbind_krb5_locator.o doesn't need socket wrapper any more
      libwbclient: don't link talloc.o into libwbclient.a
      Revert "libwbclient: don't link talloc.o into libwbclient.a"
      libwbclient: don't link talloc.o into libwbclient.a
      r25970: libreplace: fix AC_N_DEFINE() so that some appears in config.h
      r25971: libreplace: remove AC_EXTENSION_FLAG as it's the same as AC_N_DEFINE
      r25974: libreplace: see what the build-farm says if we use _XOPEN_SOURCE=600
      r25976: libreplace: not all platforms like _XOPEN_SOURCE=600
      r26102: libreplace: remove system/printing.h as it only contains samba3 stuff
      r26550: libreplace: fallback to __ss_family of struct sockaddr_storage
      Revert "Host SerNet-AIX has __ss_family instead of ss_family in sockaddr_storage"
      winbindd: remove useless strcpy
      libwbclient: use the same style in each switch case for the error mapping
      libreplace: getpwent_r/getgrent_r on IRIX are similar to solaris but use size_t
      libreplace: getpwent_r/getgrent_r on IRIX are similar to solaris but use size_t
      netlogon.idl: remove unused netr_GroupsMembership structure
      netlogon.idl: make use of bitmap samr_GroupAttrs
      netlogon.idl: remove unused netr_GroupsMembership structure
      netlogon.idl: make use of bitmap samr_GroupAttrs
      netlogon.idl: add some MSV1_0_ values from samba3 and use a bitmap32
      pidl/Samba4::Header: we don't need to check if (defined($enum->{ELEMENTS})) twice
      pidl: get rid of stupid ';' char to terminate bitmap defines
      netlogon.idl: add some MSV1_0_ values from samba3 and use a bitmap32
      rerun 'make idl'
      repl_meta_data: add some TODOs to replmd_modify_originating()
      configure.ac: we should only create ldb.pc when use the internal ldb
      configure.ac: we should use AC_CONFIG_FILES() in order to use AC_OUTPUT only once
      pidl/Samba4::Header: fix typedefs of unions and structs without elements
      configure: define HAVE_WORKING_PYTHON
      torture: the libnet torture test depend on python
      NET-BECOME-DC: always try to build ejs and python code
      pidl: be consistent and always ask pkg-config only for 'ndr'
      libndr: depend on samba-config, so that callers doesn't need to know about it
      pidl/Samba4::NDR::Parser: pass down the correct $var_name to AllocateArrayLevel()
      pidl/Samba4::NDR::Parse: move the calculation of NDR_PULL_SET_MEM_CTX() flags into one function
      pidl/IDL: don't strip ',' from the properties content
      pidl: cosmetic fix to use the same value everywhere
      CHECKED... pidl/Samba4::NDR::Parser: move logic for extra get_pointer_of() into a function
      CHECKED... TODO:MSG pidl/Samba4::NDR::Parser: fix ...
      CHECKED... pidl/Samba4::NDR::Parser: correctly get the name of an array element
      LOOKS OK... pidl: get the pointer types correct when an element has multiple pointers
      WORKS!!!...pidl/NDR: fix handling of multilevel pointers in function elements
      Works!!!...pidl/Samba4::NDR::Parser: fix support for embedded "ref" pointers
      pidl: revert changes it didn't want to push...sorry!
      pidl/Samba4::NDR::Parser: move logic for extra get_pointer_of() into a function
      pidl/Samba4::NDR::Parser: fix $var_name for arrays of scalar reference types
      pidl/Samba4::NDR::Parser: correctly get the name of an array element
      srvsvc.idl: don't use pointer_default_top() and specify "unique" explizit
      wkssvc.idl: don't use pointer_default_top() and specify "unique" explizit
      svcctl.idl: don't use pointer_default_top() and specify "unique" explizit
      winreg.idl: don't use pointer_default_top() and specify "unique" explizit
      netlogon.idl: don't use pointer_default_top() and specify "unique" explizit
      samr.idl: don't use pointer_default_top() and specify "unique" explizit
      spoolss.idl: don't use pointer_default_top() and specify "unique" explizit
      pidl: remove 'pointer_default_top()' support
      prefork: also reload stuff in the client processes
      win32-tests: add a very usefull w32 programm to explore midl features
      pidl: get the pointer types correct when an element has multiple pointers
      pidl/NDR: fix handling of multilevel pointers in function elements
      pidl/Samba4::NDR::Parser: fix support for embedded "ref" pointers
      wkssvc.idl: fix idl for wkssvc_NetrGetJoinableOus[2]()
      wkssvc.idl: fix idl for wkssvc_NetrGetJoinableOus[2]()
      pidl/Samba3::ServerNDR: use talloc_tos() instead of NULL
      rerun 'make idl'
      libwbclient: implement wbcErrorString()
      smbd: use make usage of wbcDomainInfo()
      composite: make it possible to call composite_is_ok() without callback fn
      nbt.idl: don't use astring15 anymore and use an charset() array
      spoolss.idl: don't use string32 anymore and use an charset() array
      librpc: remove special support for fixed length strings
      r25973: talloc: fix usage of SONAMEFLAG
      r25987: libreplace: rename AC_LD_SHLDFLAGS into AC_LIBREPLACE_SHLD_FLAGS
      Makefile: --enable-automatic-dependencies usage
      spoolss.idl: improve idl for EnumPrinterData and not use 'lstring' any more
      idl_types: remove unused lstring
      nsswitch: convert winbind_env_set(), winbind_on() and winbind_off() into macros
      libwbclient: include wb_common.o in libwbclient.a
      pidl: $size can be 'foo / 2' so we need to add '(' and ')'
      winbindd: add rids and other_sids arrays in WBFLAG_PAM_INFO3_TEXT mode
      libwbclient: add wbcAuthenticateUserEx() function
      wbinfo: use wbcAuthenticateUserEx()
      auth_winbind: use wbcAuthenticateUserEx()
      torture/eventlog: fix crash bugs!
      torture/eventlog: the NTSTATUS of dcerpc_ functions is the same as r.out.result
      cyrus_sasl: fix compiler warnings
      NET-API-BECOME-DC: at least find the 'provision' function in python mode
      krb5pac.idl: use charset() instead of string type with flags
      drsuapi.idl: use charset() instead of the exotic flags() and string
      ndr_sec_helper: create a completely zero sid, so that ndr_size_dom_sid28 can return 0
      dcerpc.idl: use charset() instead of ascstr3
      epmapper.idl: add link to official IDL
      epmapper.idl: don't use ascstr2 anymore
      libwbclient: wbcAuthenticateUserEx() be more strict regarding invalid parameters
      libwbclient: implement WBC_AUTH_USER_LEVEL_PLAIN in wbcAuthenticateUserEx()
      libwbclient: let wbcAuthenticateUser() use wbcAuthenticateUserEx()
      wbinfo: ask wbcAuthenticateUserEx() for user info to test the more complex code path
      lsa.idl: don't use ascstr_noterm anymore
      lsa.idl: add lsa_AsciiStringLarge
      lsa.idl: use strlen_m_term() in lsa_StringLarge to support NULL strings
      lsa.idl: strlen_m*() also for the lsa_AsciiString* versions
      drsblobs.idl: don't use asclstr
      winreg.idl: get rid of initshutdown_String and use lsa_StringLarge
      initshutdown.idl: get rid of initshutdown_String and use lsa_StringLarge
      samr.idl: windows uses lsa_AsciiStringLarge in QueryDisplayInfo
      srvsvc.idl: don't use STR_LEN4 anymore
      ldb_sqlite: fix the build
      selftest: fix --socket-wrapper-pcap
      Happy New Year 2008! :-)
      BASE-DEFER_OPEN: add torture:sharedelays option to run this test faster
      selftest: we pass the BASE-DEFER_OPEN test
      RAW-OPLOCK: fix typo (send oplock releases on the correct connection)
      RAW-OPLOCK: remove unused var
      pvfs_wait: 'private' -> 'private_data' and use talloc_get_type()
      pvfs_wait: use struct pvfs_wait * instead of void *
      pvfs: pass NULL to pvfs_can_*() when no odb_lock is needed by the caller
      pvfs: handle SHARING_VIOLATION and OPLOCK_NOT_GRANTED in pvfs_can_delete/rename()
      pvfs_open: unify talloc behavior in pvfs_can_delete/rename/stat()
      pvfs_unlink: pass down a struct pvfs_filename to pvfs_unlink_one()
      pvfs_unlink: pass down union smb_unlink completely to sub functions
      pvfs_unlink: move !name->stream_exists into the caller
      pvfs_unlink: add a fast path for the non wildcard case
      pvfs_unlink: splitup the logic into generic and file specific functions
      pvfs_unlink: move stream logic into pvfs_unlink_one()
      make test: pass --option=torture:sharedelay=100000 to samba4 smbtorture
      opendb: add odb_get_key() function to get the key back from a struct odb_lock
      opendb: send also the oplock break level on MSG_NTVFS_OPLOCK_BREAK
      opendb: add odb_update_oplock() call
      opendb: add odb_break_oplocks() function
      opendb_tdb: grant level2 oplocks
      opendb_tdb: attribute only opens doesn't conflict with BATCH oplocks
      opendb_tdb: add force break to none logic
      opendb_tdb: move sharemode, oplock logic into odb_tdb_open_can_internal()
      opendb_tdb: only file->delete_on_close == true should give DELETE_PENDING
      pvfs_setfileinfo_rename: map DELETE_PENDING to ACCESS_DENIED
      opendb: pass down open_disposition and break_to_none to odb_open_file()
      pvfs_open: pass down open_disposition and break_to_none to odb_open_file()
      opendb: unify the parameters of odb_open_file() and odb_can_open()
      pvfs_open: fix odb_can_open() callers after prototype change
      pvfs_open: make the retry logic indepdendent from open and sharing violations
      pvfs: add pvfs_setup_oplock() to receive oplock breaks and pass them to the client
      pvfs_open: call pvfs_setup_oplock() if an oplock was granted
      pvfs: handle oplock releases in its own function pvfs_oplock_release()
      pvfs_oplocks: add pvfs_break_level2_oplocks()
      pvfs: send oplock breaks to none to level2 holders on write/lock requests
      pvfs_setfileinfo: break level2 oplocks on setfileinfo() ALLOCATION_INFO and END_OF_FILE_INFO
      pvfs: add posix:oplocktimeout=30 option
      pvfs_unlink: retry unlink after oplock not granted
      pvfs_open: add pvfs_can_update_file_size()
      pvfs_setpathinfo: retry setpathinfo after oplock not granted on on setpathinfo ALLOCATION_INFO and END_OF_FILE_INFO
      selftest: Samba4 passes all oplocks tests now
      BASE-DEFER_OPEN: be less strict with to late responses
      pvfs_open: pass NTCREATEX_DISP_OPEN to odb_can_open()
      pvfs_open: pass down an access mask in pvfs_can_stat()
      pvfs_qfileinfo: down discard the return value of pvfs_can_stat()
      pvfs_open: pass down an access mask to pvfs_can_update_file_size()
      opendb_tdb: with break_to_none attribute only opens also break oplocks
      RAW-OPLOCK: BATCH15: make sure a qpathinfo doesn't break batch oplocks
      RAW-OPLOCK: rename test (NORMAL => EXCLUSIVE1)
      RAW-OPLOCK: add EXCLUSIVE2
      RAW-OPLOCK: add EXCLUSIVE3
      RAW-OPLOCK: add EXCLUSIVE4 a attribute only open doesn't break an exclusive oplock
      opendb_tdb: EXCLUSIVE oplock use the same matching logic
      pvfs_rename: add retry logic after sharing violation or non granted oplock
      pvfs_rename: we need a do a odb_rename() after pvfs_do_rename()
      RAW-OPLOCK: add BATCH16 and tests attribute only with OVERWRITE_IF
      RAW-OPLOCK: add EXCLUSIVE5 to test attribute only with OVERWRITE_IF
      RAW-OPLOCK: add EXCLISIVE6 test a rename on a file with an oplock
      RAW-OPLOCK: add BATCH17 test rename on a file with oplock
      RAW-OPLOCK: add BATCH18 test a ntrename with FLAG_RENAME
      RAW-OPLOCK: add BATCH19 test renaming via setpathinfo
      RAW-OPLOCK: add BATCH20 test renaming via setpathinfo() and setfileinfo()
      RAW-OPLOCK: use torture_result(TORTURE_FAIL) so that the knownfailures file work
      selftest: samba4 doesn't pass RAW-OPLOCK BATCH19 und 20 yet
      RAW-OPLOCK: be more strict with share modes against windows and samba4
      remove unused unixinfo.idl and generated files
      unixinfo.idl: don't use utf8string anymore
      opendb: return the path that should be deleted in odb_close_file()
      pvfs_open: use the delete_path of odb_close_file()
      pvfs: remove unused args from pvfs_delete_on_close_set()
      opendb: only return delete_on_close on odb_get_delete_on_close()
      pvfs_open: fix callers of odb_get_delete_on_close()
      call libnet_conf_get_seqnum() just once and fix compiler warnings
      Update WHATSNEW.txt with my changes for 3.2.0pre2
      winbind: use a struct element for WBFLAG_PAM_UNIX_NAME
      lsa.idl: don't use ascstr_noterm anymore
      lsa.idl: add lsa_AsciiStringLarge
      lsa.idl: use strlen_m_term() in lsa_StringLarge to support NULL strings
      lsa.idl: strlen_m*() also for the lsa_AsciiString* versions
      samr.idl: windows uses lsa_AsciiStringLarge in QueryDisplayInfo
      configure: Remove lib/repdir.c and related stuff
      configure: only build vfs_syncops if dirfd() is available
      pvfs_open: make pvfs_locking_key() non static
      opendb: add odb_get_path()
      pvfs_resolve: fix endless loop with trailing ".."
      pvfs_resolve: "\\" and a trailing "\" need to be reduced
      RAW-CHKPATH: also use qpathinfo NAME_INFO and check the returned name
      pvfs_resolve: add pvfs_resolve_name_handle()
      pvfs: use pvfs_resolve_name_handle() in qfileinfo and setfileinfo
      pvfs_setfileinfo: tell the opendb about renames
      selftest: we pass RAW-OPLOCK BATCH19 and 20 now
      pvfs_setfileinfo: support renaming of directories
      RAW-SFILEINFO-RENAME: test renaming by path while a handle is open on a file
      RAW-SFILEINFO-RENAME: test renaming of directories by path and handle
      pvfs_rename: move odb_rename() onto pvfs_do_rename()
      build: fix the build with --enable-automatic-dependencies=yes
      pvfs_oplock: move pvfs_oplock_release() parts into a helper function
      pvfs_oplock: only a break level2 oplocks...
      pvfs_oplock: auto release oplocks after a timeout
      RAW-OPLOCK: add BATCH21: a self write with an oplock doesn't break it
      RAW-OPLOCK: add BATCH22 and test the behavior of oplock break timeouts
      selftest: use the same oplocktimeout for smbtorture as for smbd
      Merge commit 'origin/v3-2-stable' into v3-2-test
      libcli/raw: make it possible to not send CAP_LEVEL_II_OPLOCKS
      ntvfs: pass down the client capabilities into the ntvfs layer
      pvfs_open: fix crash/leak in case pvfs_setup_oplock() fails
      opendb: add allow_level_II_oplock parameter to odb_open_file()
      pvfs_open: pass down allow_level_II_oplock to odb_open_file()
      RAW-OPLOCK: remove unused vars
      RAW-OPLOCK: add BATCH23 and test with a connection with no CAP_LEVEL_II_OPLOCKS
      RAW-OPLOCK: add BATCH24 test another case with a connection with no CAP_LEVEL_II_OPLOCKS
      RAW-OPLOCK: rename _ack_to_levelII() -> ack_to_given()
      vfs_cifs: disable level2 oplocks if the frontend client doesn't support them
      opendb_tdb: pass down struct messaging_context directly to odb_oplock_break_send()
      pvfs_open: always call odb_can_open() before odb_open_file()
      opendb: force odb_can_open() before odb_open_file()
      pvfs_open: fix the odb_open_file() callers
      we now define PACKAGE_BUGREPORT in config.h
      opendb_tdb: correctly initialize modified to false
      opendb_tdb: keep struct opendb_file arround for the lifetime of struct odb_lock
      libcli/raw: add RAW_RENAME_NTTRANS support
      events_signal: pass down the correct siginfo_t struct to the event handler
      smb_server: pass down RAW_RENAME_NTTRANS to the ntvfs layer
      pvfs: return NT_STATUS_NOT_IMPLEMENTED on RAW_RENAME_NTTRANS
      RAW-SEARCH: skip RESUME_KEY tests against samba3
      selftest: samba3 passes RAW-SEARCH now
      RAW-STREAMS: do what the comments say
      RAW-STREAMS: do a exit on the session after each sub tests
      RAW-RENAME: w2k3 just ignores a NTTRANS-RENAME!
      pvfs_rename: implement RAW_RENAME_NTTRANS as noop as w2k3
      ntvfs/cifs: fix the fnum on RAW_RENAME_NTTRANS
      opendb: pass down a pointer to the fd in odb_open_file()
      pvfs_open: pass down &f->handle->fd to odb_open_file()
      ntvfs/sysdep: add sys_lease abstraction to later support kernel oplocks
      ntvfs/sysdep: implement linux kernel oplocks based F_SETLEASE
      opendb_tdb: use sys_lease to setup kernel oplocks
      pvfs_open: pass O_NONBLOCK to open() so that we'll not block with kernel oplocks
      pvfs_open: retry pvfs_open() after an EGAIN or EWOULDBLOCK from open()
      configure: when detecting python we should disable pyconfig.h
      build: we don't rely on bash yet:-) '==' should be just '='
      build: compile_et also needs inet_aton()
      swig: make the code more portable and use NT_STATUS_V() and W_ERROR_V()
      swig: regenerate _wrap.c files
      messaging: fix a valgrind warning on 64bit hosts zero out padding
      pvfs_unlink: disable async retries for wildcard deletes
      pvfs_open: the pvfs_odb_retry structs need to be children of the request
      pvfs_open: set h->have_opendb_entry directly after odb_open_file()
      socket_wrapper: make pcap code more portable
      selftest: handle progress output in verbose mode
      RAW-BENCH-OPEN: fix the output and calculate the total operations
      RAW-BENCH-OPEN: avoid sync calls before the main loop
      socket_wrapper: make pcap code more portable
      selftest: use a separate var for printing out sub parts of lines with \r
      selftest: fix parsing of Subunit results
      ldb: fix the standalone build
      ldb: nothing uses "system/network.h" so don't include it
      ldb: remove configure with 'make realdistclean'
      libreplace: combine SOCKET_LIBS and NSL_LIBS to LIBREPLACE_NETWORK_LIBS
      libreplace: use LIBREPLACE_NETWORK_LIBS within some configure checks
      libreplace: for samba4 create LIBREPLACE_NETWORK as EXT_LIB
      lib/socket: use LIBREPLACE_NETWORK instead of EXT_SOCKET and EXT_NSL
      libreplace: remove unused SOCKET_LIBS and NSL_LIBS
      libreplace: combine SOCKET_LIBS and NSL_LIBS to LIBREPLACE_NETWORK_LIBS
      libreplace: use LIBREPLACE_NETWORK_LIBS within some configure checks
      libreplace: for samba4 create LIBREPLACE_NETWORK as EXT_LIB
      libreplace: remove unused SOCKET_LIBS and NSL_LIBS
      ldb: not every shell supports '==' so use '='
      heimdal_build: use LIBREPLACE_NETWORK because EXT_SOCKET and EXT_NSL doesn't exist anymore
      socket_wrapper: use LIBREPLACE_NETWORK because EXT_SOCKET and EXT_NSL doesn't exist anymore
      libndr: EXT_NSL doesn't exist anymore, but it wasn't needed anyway
      lib/util: use LIBREPLACE_NETWORK as EXT_NSL doesn't exist anymore
      opendb_tdb: enable oplocks per default
      selfteset: oplocks are enabled by default now
      dbwrap: add dbwrap_trans_store_int32()
      dbwrap: add db_open_trans()
      regdb: use dbwrap_trans_store_int32
      regdb: use dbwrap->fetch() instead of fetch_locked() for readonly access
      regdb: use regdb->transaction_start(regdb) != 0 consistent
      regdb: use db_open_trans()
      passdb/secrets: it's enough to use traverse_read() in secrets_trusted_domains()
      passdb/secrets: use db_open_trans()
      pdb_tdb: use db_sam->transaction_start(db_sam) != 0 consistent
      pdb_tdb: use db_open_trans()
      libreplace(samba4): let LIBREPLACE depend on LIBREPLACE_NETWORK for now
      cldap_server: fix compiler warning
      libcli/security: fix compiler warnings
      torture: fix compiler warnings
      libwbclient: add wbcLookupUserSids()
      libwbclient: add wbcListUsers() and wbcListGroups()
      libwbclient: remove prototype of non existing wbcDomainSequenceNumbers()
      wbinfo: use wbcLookupUserSids()
      wbinfo: use wbcListUsers() and wbcListGroups()
      wbinfo: use wbcGetgrnam()
      wbinfo: use wbcDomainInfo()
      libreplace(samba4): let LIBREPLACE depend on LIBREPLACE_NETWORK for now
      mapping_ldb: fix memory leak in group enumeration
      Merge commit 'origin/v4-0-stable' into v4-0-test
      wbinfo: use wbcPing()
      wbinfo: use wbcUidToSid()
      wbinfo: use wbcGitToSid()
      wbinfo: use wbcSidToUid()
      wbinfo: use wbcSidToGid()
      wbinfo: use wbcAllocateUid()
      wbinfo: use wbcAllocateGid()
      regdb: use dbwrap->fetch() instead of fetch_locked() for readonly access"
      regdb: get the seqnum before the record, to not miss something
      regdb: let regdb_fetch_keys() handle NULL and failure cases in the same way and return -1
      passdb/secrets: add secrets_db_ctx() to get the db_context
      passdb: guard pdb_generate_sam_sid() with a transaction
      pdb_tdb: use != 0 instead off == -1 for dbwrap functions
      mapping_tdb: use db_open_trans()
      mapping_tdb: use the correct sid for the key creation
      sharesec: use db_open_trans()
      dbwrap: add dbwrap_trans_store_uint32()
      dbwrap: fix a confusing "tdb_chainunlock failed" message
      account_pol: use dbwrap_trans_store_uint32()
      account_pol: use db_open_trans()
      smbd: ignore nttrans renames as w2k3 does
      libwbclient: use WBC_ERROR_IS_OK() in BAIL_ON_WBC_ERROR() macro
      libwbclient: add wbcInterfaceDetails()
      wbinfo: use wbcInterfaceDetails()
      smbd: always close the base_fsp even if the real close returned an error
      wbinfo: catch NULL domain string as in other places
      wbinfo: use wbcLookupSid()
      wbinfo: use wbcLookupRids()
      wbinfo: use wbcLookupNames()
      libwbclient: add wbcGetGroups()
      wbinfo: make use of wbcGetGroups()
      net_rpc: let get_user_tokens() use wbcListUsers()
      net_rpc: let get_user_sids() use wbcLookupName(), wbcGidToSid() and wbcGetGroups()
      locking: store the write time in the locking.tdb
      smbd: implement the strange write time update logic
      selftest: samba3 passes BASE-DELAYWRITE
      locking: combine get_delete_on_close_flag() and get_write_time() into get_file_infos()
      smbd: make it possible to disable get_file_infos() on searches
      smbd: make it possible to change the write time delay for testing
      BASE-DELAYWRITE: use timeval_* and make it possible to spefic the writetime update delay
      selftest: run the BASE-DELAYWRITE test 4 times faster in make test
      BASE-DELAYWRITE: be more friendly to filesystems without high resolution timestamps
      libwbclient: add wbcSet[U|G]idMapping() and wbcSet[U|G]idHwm() functions
      net_idmap: use wbcSet[U|G]idMapping() and wbcSet[U|G]idHwm() functions
      nsswitch: remove unused nsswitch/wb_client.c
      net: 'net' doesn't need wb_common.o anymore.
      messaging: add FLAG_MSG_DBWRAP message class flag
      messaging: add MSG_DBWRAP_TDB2_CHANGES flag
      messaging.idl: add structure to marshall dbwrap_tdb2 changes
      rerun 'make idl'
      dbwrap: add dbwrap_tdb2 backend
      dbwrap: use db_open_tdb2() in for db_open_trans() if "dbwrap:use_tdb2=yes"
      dbwrap: wait for tdb2 change notifies in smbd, nmbd and winbindd
      groupdb: readd groupdb:backend parametric option
      groupdb: make mapping_tdb compatible to mapping_ldb
      WHATSNEW.txt: list my changes
      Makefile: fix variable name automatic_deps -> automatic_dependencies
      lib/events: fix missing prototype of s4_events_aio_init()
      pdb_tdb: fix the upgrade code, db_traverse returns the number of records!
      lib/sharesec.c: fix the upgrade code, db_traverse returns the number of records!
      libwbclient: add wbcResolveWinsByName() and wbcResolveWinsByIP()
      wbinfo: use wbcResolveWinsByName() and wbcResolveWinsByIP()
      libwbclient: add wbcCheckTrustCredentials()
      wbinfo: use wbcCheckTrustCredentials()
      libcli/smb2: also offer the SMB2 dialect that what used in longhorn beta3
      libcli/smb2: make it possible to pass additional extra blobs in smb2_create()
      smb_server/smb2: initialize new create.in.blobs element untill it'll be supported
      torture/smb2: fix whitespaces
      torture/smb2: add torture_suite_add_2smb2_test() helper function
      selftest: ignore failures in the SMB2-PERSISTENT-HANDLES1 test
      torture/smb2: add SMB2-PERSISTENT-HANDLES1 test
      SMB2-PERSISTENT-HANDLES1: verify some more fields
      ntvfs_generic: map SMB2 oplock levels to the generic ones
      libndr: add dom_sid0 type that can later be used for CLDAP and MAILSLOT ntlogon packets
      nbt.idl: fix parsing und pushing of dom_sids by using dom_sid0
      nbt.idl: fix parsing und pushing of dom_sids by using dom_sid0
      messages_ctdbd: make sure a ctdbd connection is only used in the process that created it
      messages_ctdbd: autocreate a ctdb connection, this will fix segfaults in the client tools
      smbd: merge "smbd:backgroundqueue=no" option from the v3-0-ctdb tree
      util: add reinit_after_fork() function
      loadparm: make it possible to just load the config without following "include =" statements
      smbd: call reinit_after_fork() in the needed places
      smbd: create the messaging conntext earlier
      printing: call reinit_after_fork() in the backgroundqueue process
      nmbd: call reinit_after_fork() in all needed cases
      nmbd: create the messaging conntext earlier
      winbindd: call reinit_after_fork() in the child processes
      winbindd: create the messaging conntext earlier
      build: fix the build rule for .o files
      ntvfs_generic: fix mapping the granted oplocks for SMB2
      libcli: define structure for SMB2 Break
      libcli/smb2: add smb2_break() calls
      libcli/smb2: make it possible to handle incoming oplock requests
      smb_server/smb2: handle incoming oplock releases
      ntvfs_generic: map RAW_LOCK_SMB2_BREAK to RAW_LOCK_GENERIC
      torture/smb2: add a simple SMB2-OPLOCK-BATCH1 test
      SMB2-PERSISTENT-HANDLES1: close the handle before deleting it
      WHATNEW.txt: add my latest changes
      the parameter name is 'writeable' and 'writable' is just an alias of it.
      This is the documantation for the shadow_copy vfs module.
      libreplace: check how portable utimes() and futimes() are
      libreplace: check how portable utimes() and futimes() are
      build: fix path to lex_compile.sh
      libreplace: always provide utime() and utimes()
      pvfs: remove XATTR_ATTRIB_FLAG_STICKY_WRITE_TIME code
      libreplace: split out network checks into a AC_LIBREPLACE_NETWORK_CHECKS macro
      libreplace: use AC_LIBREPLACE_NETWORK_CHECKS only for samba
      libreplace: also use AC_LIBREPLACE_NETWORK_CHECKS for the standalone build
      libreplace: merge socket.m4 into libreplace_network.m4
      libreplace: merge inet_ntoa.m4 into libreplace_network.m4
      libreplace: merge inet_aton.m4 into libreplace_network.m4
      libreplace: merge inet_ntop.m4 into libreplace_network.m4
      libreplace: merge inet_pton.m4 into libreplace_network.m4
      libreplace: merge socketpair.m4 into libreplace_network.m4
      libreplace: merge getaddrinfo.m4 into libreplace_network.m4
      libreplace: merge getifaddrs.m4 into libreplace_network.m4
      libreplace: include inet_ntoa.o when the system one is broken
      libreplace: export LIBREPLACE_NETWORK_OBJS and LIBREPLACE_NETWORK_LIBS vars
      libreplace: make sure system/network.h is only used when AC_LIBREPLACE_NETWORK_CHECKS was used
      libreplace: try to fix the build on HP-UX which has if_nametoindex() in -lipv6
      lib/events: system/network.h isn't needed
      Revert "lib/events: system/network.h isn't needed"
      libreplace: always provide utime() and utimes()
      libreplace: split out network checks into a AC_LIBREPLACE_NETWORK_CHECKS macro
      libreplace: use AC_LIBREPLACE_NETWORK_CHECKS only for samba
      libreplace: use AC_LIBREPLACE_NETWORK_CHECKS only for samba
      libreplace: also use AC_LIBREPLACE_NETWORK_CHECKS for the standalone build
      libreplace: merge socket.m4 into libreplace_network.m4
      libreplace: merge inet_ntoa.m4 into libreplace_network.m4
      libreplace: merge inet_aton.m4 into libreplace_network.m4
      libreplace: merge inet_ntop.m4 into libreplace_network.m4
      libreplace: merge inet_pton.m4 into libreplace_network.m4
      libreplace: merge socketpair.m4 into libreplace_network.m4
      libreplace: merge getaddrinfo.m4 into libreplace_network.m4
      libreplace: merge getifaddrs.m4 into libreplace_network.m4
      libreplace: include inet_ntoa.o when the system one is broken
      libreplace: export LIBREPLACE_NETWORK_OBJS and LIBREPLACE_NETWORK_LIBS vars
      libreplace: make sure system/network.h is only used when AC_LIBREPLACE_NETWORK_CHECKS was used
      libreplace: try to fix the build on HP-UX which has if_nametoindex() in -lipv6
      build: readd ALL_OBJS which is needed for automatic_dependencies
      torture: add RPC-BENCH-SCHANNEL1 test
      lib/socket: remove unused configure check for HAVE_WORKING_AF_LOCAL
      lib/replace: add checks for HAVE_SOCK_SIN_LEN and HAVE_UNIXSOCKET
      lib/socket: remove unused configure checks for HAVE_SOCK_SIN_LEN and HAVE_UNIXSOCKET and rely on libreplace
      lib/replace: move sys/sockio.h and sys/un.h checks into AC_LIBREPLACE_NETWORK_CHECKS
      smbd: add session_info to struct stream_connection
      smbd: pass down lp_ctx to stream_new_connection_merge()
      configure: remove unused configure check for HAVE_WORKING_AF_LOCAL
      lib/replace: add checks for HAVE_SOCK_SIN_LEN and HAVE_UNIXSOCKET
      configure: remove unused configure checks for HAVE_SOCK_SIN_LEN and HAVE_UNIXSOCKET and rely on libreplace
      lib/replace: move sys/sockio.h and sys/un.h checks into AC_LIBREPLACE_NETWORK_CHECKS
      configure: remove some header checks which are already done by AC_LIBREPLACE_NETWORK_CHECKS
      configure: make use of LIBREPLACE_NETWORK_LIBS instead of redoing the tests
      build: only add enabled subsystems and modules to ALL_OBJS
      libreplace: add test for HAVE_IPV6
      lib/socket: use HAVE_IPV6 test from LIBREPLACE_NETWORK_CHECKS
      libreplace: add test for HAVE_IPV6
      configure: remove HAVE_IPV6 test as LIBREPLACE_NETWORK_CHECKS already have this
      configure: samba_cv_unixsocket was renamed into libreplace_cv_HAVE_UNIXSOCKET
      libreplace: we need to use AC_TRY_LINK() to make sure HAVE_IPV6 is correctly detected
      libreplace: we need to use AC_TRY_LINK() to make sure HAVE_IPV6 is correctly detected
      library-versions: use the same version for talloc and tdb as for the standalone builds
      build: autogenerate exports/libnetapi.syms
      pvfs_streams: directories don't have streams
      pvfs_resolve: stream_name = "" is only the same as NULL for files
      pvfs_open: return FILE_IS_A_DIRECTORY when opening a stream on a directory
      RAW-STREAMS: better test the bahavior of streams on directories
      build: pass .syms extention via @SYMSEXT@ from configure
      build: autogenerate exports/libtalloc.syms
      build: autogenerate exports/libwbclient.syms
      build: add symbol versioning when we build with gnu ld
      libwbclient: rename MAXSUBAUTHS => WBC_MAXSUBAUTHS
      libwbclient: add wbcLibraryDetails()
      build: make sure LIBWBCLIENT_*_TARGET is never empty
      krb5_init_sec_context: skip the token header when GSS_C_DCE_STYLE is specified
      BASE-DELAYWRITE: add missing time checks to make sure the server has updated the write time
      BASE-DELAYWRITE: fix test on filesystem without high resolution timestamps
      opendb: add write time handling
      pvfs: add PVFS_RESOLVE_NO_OPENDB flag and get the write time from the opendb
      pvfs: add posix:writetimeupdatedelay option
      pvfs: trigger a write time update 2 seconds after the first write
      pvfs_setfileinfo: update the write time in the opendb
      pvfs: correctly set the write time in the handle destructor
      pvfs_close: correctly handle the write time updates passed by close()
      pvfs: use utimes() instead of utime() to get better timestamp resolution
      selftest: set posix:writetimeupdatedelay
      selftest: pass torture:writetimeupdatedelay to smbtorture
      selftest: don't skip BASE-DELAYWRITE
      lib/crypto: remove unused sha1 and hmac-sha1 code
      kdc: we don't need any *_locl.h header from heimdal in the kdc
      build/m4: fix warnings with autoconf-2.62 rename SMB_BUILD_ => samba_cv_
      libreplace: fix warnings with autoconf-2.62 rename ac_ => libreplace_cv_
      libreplace: only include AC_USE_SYSTEM_EXTENSIONS fallback if required
      configure: we require autoconf 2.54
      configure: fix warnings with autoconf-2.62 rename smb_krb5_ => smb_krb5_cv_
      configure: fix warnings with autoconf-2.62 rename samba_stat_hires => samba_cv_stat_hires
      configure: fix warnings with autoconf-2.62 rename SMB_BUILD_ => samba_cv_
      configure: we require autoconf 2.54
      libreplace: fix warnings with autoconf-2.62 rename ac_ => libreplace_cv_
      libreplace: only include AC_USE_SYSTEM_EXTENSIONS fallback if required
      heimdal_build: rename config.m{k,4} => internal.m{k,4}
      socket_wrapper: truncate packets to a 1500 byte payload
      Some C++ warnings
      Revert "Add configure test for vdeplug library."
      r21671: Add initial simple tests for socket wrapper
      r22236: Update to Heimdal's socket_wrapper, which supports IPv6.
      r23420: try to make the IBM checker happy
      r25783: socket_wrapper: don't include "includes.h"
      socket_wrapper: sync missing stuff from v4-0-test
      socket_wrapper: truncate packets to a 1500 byte payload
      credentials: set GSS_KRB5_CRED_NO_CI_FLAGS_X to avoid GSS_C_CONF_FLAG and GSS_C_INTEG_FLAG
      smbd: make sure the parent smbd stays alive forever
      mkversion.sh: printf %s is more portable than echo -e
      lib/ldb: add forward declaration for struct event_context
      nbt_server/wins: add forward declaration for struct event_context
      credentials: gss_set_cred_option() doesn't like GSS_C_NO_BUFFER
      gsskrb5: fix gss_krb5_cred_no_ci_flags_x_oid_desc variable name
      gsskrb5: just don't force, but allow the flags when GSS_CF_NO_CI_FLAGS is given
      pvfs: pvfs_aio should be a subsystem instead of an extra ntvfs module
      pvfs: create a pvfs_acl subsystem
      ldb: fix the init function names for some modules
      ldb: allow ldb modules to specify LDB_MODULE(name) or LDB_BACKEND(name)
      smb_build: enable implicit make rules
      smb_build: use MERGED_OBJ instead of STATIC_LIBRARY
      lib/events: build as MERGED_OBJ instead of STATIC_LIBRARY
      lib/talloc: build as MERGED_OBJ instead of STATIC_LIBRARY
      auth: don't force the build of auth_server as shared_module
      ldb_ildap: don't force the build as shared_module
      dsdb: don't force the build of ldb modules as shared_module
      nbt_server/wins: don't force wins_ldb as shared_module
      drsuapi.idl: remove some unknows from DsGetNCChanges()
      drsuapi.idl: remove some unknows from DsGetNCChanges() (update samba4 callers)
      schema_fsmo: only set module->private_data in case we keep the struct for a long time
      schema_fsmo: move fsmo info into struct dsdb_schema
      schema_fsmo: prepare auto allocation of schema oid prefixes
      ldap_server: allow modifies to the root dse record and pass them to the ldb layer
      Merge commit 'release-4-0-0alpha5' into v4-0-stable
      Merge commit 'origin/v4-0-stable' into v4-0-test
      rpc_server: use the same chunk_size logic as we we use in the client
      dcerpc.idl: the signing overhead can be more than 32 bytes
      smb_server/smb: fix crash bug with fragmented trans calls
      smb_server/smb: transs and transs2 calls have different word counts
      libcli/raw: the nttrans setup count is only 8-bit
      libcli/raw: add a recv_helper hook infrastructure
      libcli/raw: use the new recv_helper infrastructure for nttrans replies
      libcli/raw: use the new recv_helper infrastructure for trans/trans2 replies
      libcli/raw: remove unused smbcli_request_receive_more() function
      libcli/raw: trans(2) setup count is uint8_t
      smb_server/smb: trans(2) setup count is uint8_t
      libcli/raw: make multi fragmented nttrans requests possible
      dcerpc_smb: trans->in.max_data should not depend on the smb max size
      rap: trans->in.max_data should not depend on the smb max size
      torture: .in.max_data should not depend on the smb max size
      libcli/raw: remove unused smb_raw_max_trans_data() function
      smb_server/smb: prepare multi fragmented nttrans requests
      smb_server/smb: handle incoming multi fragmented nttrans requests
      packet: make it possible to free the packet_context from the send_callback
      rpc_server: use the transport session_info if available
      NET-API-BECOME-DC: fix crash bugs because of unintialized variables
      become_dc: we need to replicate using krb5 auth to work against w2k
      drsuapi.idl: correctly handle xpress compressed payload
      drsuapi.idl: fix unknowns in drsuapi_DsReplicaCursor[2]
      drsuapi.idl: fix unknowns in drsuapi_DsReplicaObject*
      libnet/become_dc: an unknown field in drsuapi.idl changed to object_flags
      drsuapi.idl: fix unknowns in drsuapi_DsGetNCChangesCtr*
      drsuapi: total_object_count was the wrong guess
      drsuapi: get ctr6 out of xpress compressed level
      drsuapi: check ctr6->drs_error
      drsuapi: make use of the 'more_data' field in DsGetNCChangesCtr[1|6]
      drsuapi: print out the number of linked attribute values we got
      drsuapi.idl: remove some unknows from DsGetNCChanges()
      drsuapi.idl: correctly handle xpress compressed payload
      drsuapi.idl: fix unknowns in drsuapi_DsReplicaCursor[2]
      drsuapi.idl: fix unknowns in drsuapi_DsReplicaObject*
      drsuapi.idl: fix unknowns in drsuapi_DsGetNCChangesCtr*
      rerun 'make idl' after drsuapi.idl changes
      libnet_dssync: use ctr[1|6]->more_data
      libnet/become_dc: add a comment and explain why it's important to specify krb5
      rpc_server: be more strict with the incoming assoc_group_id
      RPC-DSSYNC: print 'supplementalCredentials' more verbosely
      hdb-ldb: fix crash bug in the error path
      hdb-ldb: fix comment about padding
      password_hash: don't add zero padding as w2k8 also don't add it
      drsblobs.idl: rename unknown1 -> reserved
      password_hash: ignore reserved value, but still set it like windows does
      drsblobs.idl: fix idl for supplementalCredentialsSubBlob
      password_hash: check the SUPPLEMENTAL_CREDENTIALS_SIGNATURE
      hdb-ldb: check the SUPPLEMENTAL_CREDENTIALS_SIGNATURE
      drsblobs.idl: fix unknowns in package_PrimaryKerberos idl
      password_hash: fix callers after idl change for package_PrimaryKerberos
      password_hash: simplify the logic if we have cleartext we always generate the hashes
      password_hash: split the generation of krb5 keys into a different function
      password_hash: order the supplementalCredentials Packages in the same order like windows
      drsblobs.idl: add idl for Primary:Kerberos-Newer-Keys blob in supplementalCredentials
      hdb-ldb: try to find Primary:Kerberos-Newer-Keys and fallback to Primary:Kerberos
      password_hash: add generation of the Primary:Kerberos-Newer-Keys blob
      drsblobs.idl: rename unknown1 -> reserved
      drsblobs.idl: fix idl for supplementalCredentialsSubBlob
      drsblobs.idl: fix unknowns in package_PrimaryKerberos idl
      drsblobs.idl: add idl for Primary:Kerberos-Newer-Keys blob in supplementalCredentials
      drsblobs.idl: give some unknowns a meaning
      drsblobs.idl: unify the Primary:Kerberos and Primary:Kerberos-Newer-Keys structs
      password_hash: fix the callers after drsblobs.idl changes
      hdb-ldb: fix the callers after drsblobs.idl changes
      smbtorture: add --extra-user option
      mamachinepw: add better error handling
      dcerpc.idl: add DCERPC_PFC_FLAG_SUPPORT_HEADER_SIGN flag
      dsdb/schema: dsdb_write_prefixes_to_ldb() should do the reverse of dsdb_read_prefixes_to_ldb()
      dsdb/schema: make more clear where we create the value for the new prefix mapping
      dsdb: add a comment about the parameter to DSDB_EXTENDED_SCHEMA_UPDATE_NOW_OID
      auth/credentials: use the same enctypes when getting a TGT and a TGS
      lib/ldb/tools: allow -W and --realm when build from samba4
      gensec_gssapi: add support for signing RPC messages
      auth/credentials: explain why we need to the enctypes for the gssapi layer
      libcli/smb2: sign SMB2 Logoff requests
      SMB2-CONNECT: remove reference to req->session before calling smb2_logoff_recv() on the invalid session
      libcli/smb2: fix per session signing state
      smb2srv: correctly hold the signing state per session
      smb2srv: sign SMB2 Logoff replies
      drsblobs.idl: give some unknowns a meaning
      drsblobs.idl: unify the Primary:Kerberos and Primary:Kerberos-Newer-Keys structs
      libcli/smb2: the session key for SMB2 signing is truncated to 16 bytes
      gensec_gssapi: use gsskrb5_get_subkey() to make smb2 signing with aes keys work
      rpc_server: remove unused variable
      Revert "gensec_gssapi: use gsskrb5_get_subkey() to make smb2 signing with aes keys work"
      Revert "Start implementind domain trusts in our KDC."
      auth_server: fix segfault reported by Julien Kerihuel <j.kerihuel at openchange.org>
      auth_server: fix the logic of server_get_challenge()
      auth/ntlmssp: don't crash when the backend give no challenge
      build: allow flex-2.34 together with bison-2.3
      heimdal: update to lorikeet-heimdal rev 801
      build with the new heimdal version
      heimdal: add missing file heimdal/lib/gssapi/mech/gss_pseudo_random.c
      auth_server: set the workstation name
      heimdal: add missing files
      build: autogenarate VPATH by configure
      build: autogenerate heimdal basics
      heimdal_build: we should only use PRIVATE_DEPENDENCIES
      gensec_gssapi: include <gssapi/gssapi.h>
      auth/kerberos: we don't need to include heimdal private headers
      kdc: use mostly only public kerberos headers
      build: remove warning about missing generated include file
      lib/crypto: remove dependency to internal heimdal
      heimdal: fix dependency
      heimdal_build/internal: add some useful defines
      auth/kerberos: remove dependencies to internal heimdal
      libreplace: include <krb5.h> and <com_err.h> and no heimdal specific headers
      heimdal: add experimental --enable-external-heimdal
      clikrb5: don't use krb5_keyblock_init() when no salt is specified
      libnet_keytab: fix the build with heimdal
      gensec: add GENSEC_FEATURE_SIGN_PKT_HEADER flag
      gensec_gssapi: add support for GENSEC_FEATURE_SIGN_PKT_HEADER
      librpc/rpc: pass struct dcerpc_pipe to dcerpc_auth3()
      librpc/rpc: add support DCERPC_PFC_FLAG_SUPPORT_HEADER_SIGN
      rpc_server: add support for DCERPC_PFC_FLAG_SUPPORT_HEADER_SIGN
      drsuapi.idl: directly use mszip in level 2
      drsuapi: fix callers after idl change
      import of zlib-1.2.3
      zlib: add inflateReset2()...
      lib: prepare the build of zlib
      gsskrb5: add support for DCE_STYLE and des and des3 keys
      krb5: always generate the acceptor subkey as the same enctype as the used service key
      gensec_gssapi: use gsskrb5_get_subkey() to get the session key
      gsskrb5: try to be compatible with windows for gss_wrap* and cfx
      gensec_gssapi: use the correct signature size for cfx/rfc4121 style signatures
      dcerpc.idl: add DCERPC_AUTH_TRAILER_LENGTH
      librpc/rpc: correct the chunk_size depending on the signature size
      rpc_server: correct the chunk_size depending on the signature size
      dcerpc.idl: remove used DCERPC_MAX_SIGN_SIZE
      gensec: add support for new style spnego and correctly handle mechListMIC
      gensec_gssapi: add a function to load the lucid structure once
      gensec_gssapi: fix compiler warnings
      gensec_gssapi: add support for GENSEC_FEATURE_NEW_SPNEGO
      NBT-WINSREPLICATION: be more robust to timing errors
      pidl: fix samba4.pidl.samba3-cli test
      libcli/smb2: async replies with STATUS_PENDING are not signed
      libcli/smb2: we don't need check the same thing twice...
      libcli/smb2: use smb2 signing in auto mode if the server supports it
      smb2srv: use defines instead of hex values
      smb2srv: sign replies when the request was also signed
      smb2srv: async replies with STATUS_PENDING are not signed
      libcli/raw: fix the special NTCREATE_OPTIONS_*_MASK values
      pvfs: fix handling of create_option flags
      libcli/smb2: add SMB2_CREATE_OPTIONS_NOT_SUPPORTED_MASK
      ntvfs_generic: fix handling of create_options for SMB2
      SMB2-CREATE: be more strict in error checking
      SMB2-CREATE: be more strict in checking file attributes
      SMB2-CREATE: add a special test for FILE_ATTRIBUTE_ENCRYPTED
      gensec_gssapi: only cache the session key in STAGE_DONE
      gsskrb5: always return an acceptor subkey
      Revert "krb5: always generate the acceptor subkey as the same enctype as the used service key"
      RAW-OPEN: be more strict in create_option checking
      zlib: we don't need the inflateReset2 prototype twice
      zlib: fix compiler warnings
      zlib: mark as modified for samba
      ndr_compression: use zlib's inflate() for decompression
      librpc: don't build the old mszip decompression code
      pidl/NDR::Parser: use $ndr instead of "ndr"
      pidl/NDR::Parser: pass $ndr to ->PULL_FN_BODY()
      pidl/NDR::Parser: pass $ndr to ->PUSH_FN_BLOB()
      pidl/NDR::Parser: pass $ndr to ->PRINT_FN_BLOB()
      pidl/NDR::Parser: pass down $ndr from the top functions
      pidl/NDR::Parser: use my $ndr = "ndr" in the remaining top functions
      pidl/NDR::Parser: pass $ndr to ParsePtrPush()
      pidl/NDR::Parser: pass $ndr to ParseMemCtxPull*()
      pidl/NDR::Parser: pass $ndr to ->start_flags() and ->end_flags()
      pidl/NDR: correctly check for valid properties
      pidl/NDR: generate a LEVELS array for typedefs
      pidl/NDR::Parser: pass typedefs through the ParseElement*Level() functions
      librpc/ndr: add support for Type Serialization Version 1 to subcontext
      ndr_compression: unify the common handling of mszip and xpress compression
      ndr_compression: remove the type serialization handling from the compression layer
      drsuapi.idl: readd type serialization headers to compressed DsGetNCChangesCtr*
      drsuapi: fix samba4 callers after drsuapi.idl changes
      kdc/pac-glue: pull/push the logon_info via the PAC_INFO union
      krb5pac.idl: make use of subcontext(0xFFFFFC01) to handle the type Serialization header
      smbd: fix the handling of create_options to pass RAW-OPEN
      ndr_compression: add common parts of ndr compression
      drsuapi.idl: use hand written push functions for the compressed blobs
      ndr_compression: implement mszip compression based on deflate()
      build: generate :: rules for automatic dependencies
      Revert "gsskrb5: always return an acceptor subkey"
      Revert "gsskrb5: add support for DCE_STYLE and des and des3 keys"
      kdc: move references to heimdal internals into heimdal_build/kpasswd-glue.h
      heimdal_build: split glue.c into krb5 and gssapi parts
      heimdal_build: add a fake sqlite keytab implementation
      heimdal_build: split out gssapi_spnego and gssapi_krb5 file lists
      heimdal_build: split handwritten and generated hx509 file lists
      heimdal_build: split heimdal/lib/asn1 file lists
      heimdal: remove unused old files
      heimdal_build: add fallback for AC_WARNING_ENABLE()
      heimdal_build: autogenerate heimdal/lib/roken/roken.h
      heimdal_build: autogenerate table files in heimdal/lib/wind/
      heimdal_build: autogenerate the heimdal private/proto headers
      heimdal_build: fix parse.h lex.c dependencies
      heimdal: import heimdal's trunk svn rev 23697 + lorikeet-heimdal patches
      heimdal_build: include heimdal's new EVP code to fix the build
      heimdal: add missing heimdal/lib/hcrypto/{evp-aes-cts.c,evp-hcrypto.c}, sorry...
      ndr_compression: use inflateReset() and inflateSetDictionary() instead of inflateReset2()
      ndr_compression: use deflateReset() together with defalteSetDictionary()
      ndr_compression: change debug levels
      Revert "zlib: we don't need the inflateReset2 prototype twice"
      Revert "zlib: add inflateReset2()..."
      zlib: we require zlib-1.2.3 or higher
      ndr_compression: fix the build after lzxpress_decompress() prototype change
      ndr_compression: add XPRESS compression support
      BASE-DELAYWRITE: test more details of the truncate write time update behavior
      BASE-DELAYWRITE: demonstrate that the time between the open and the first write doesn't matter
      BASE-DELAYWRITE: demonstrate that a truncate write doesn't update the write time after SET_FILE_INFO
      BASE-DELAYWRITE: test behavior of writeX, SMBwrite truncate, writeX and SMBwrite again
      BASE-DELAYWRITE: test behavior of SMBwrite truncate, writeX, SMBwrite truncate and writeX again
      smbd: some write time fixes
      drsblobs.idl: add parser for ExtendedErrorInfo see [MS-EERR]: ExtendedError Remote Data Structure
      UNIX-WHOAMI: fix compiler warnings
      prepare merging Samba3 and Samba4 together.
      rename swat => swat2, so that we don't conflict with samba3
      add '4' to the end of some filesnames
      rename packaging => packaging4
      client free credentials when not needed anymore
      rpc_server: correctly calculate the auth padding
      librpc/rpc: don't send auth trailers in level connect
      rpc_server: don't send auth trailers in level connect
      libreplace: include <krb5.h> and <com_err.h> and no heimdal specific headers
      Fix out of tree build.  Remove the embedded srcdir path from talloc and tdb.
      Fix warnings on SuSE 9.0.
      r26511: Janitorial: Fix a warning for the 'printf' attribute on gendb_search_v
      lib/talloc: sync build system changes from samba4
      lib/tdb: sync build system changes and python code from samba4
      Merge Samba3 and Samba4 together
      blackbox: fix source => source4
      build: fix path to pidl/config.m4
      s4:lib/com: fix the build with automatic dependecies
      libreplace: move main() out of testsuite.c
      s3: link libreplace/test/main.c into replacetort
      lib/talloc: move main() out of testsuite.c
      s3: link @tallocdir@/testsuite_main.o into talloctort
      process incoming connections and fork a samba3 in inetd mode
      s4: allways initialize the process model before it's used
      RPC-PAC: loop in gensec_update() untill the server side is ready
      ntlmssp: only give away the session key, when the authentication is done
      gensec_gssapi: only give away the session key, when the authentication is done
      gensec_krb5: only give away the session key, when the authentication is done
      libcli/raw: give the caller the chance to prevent the talloc_free(req) in the _recv functions
      libcli/raw: give the caller the chance to do the signing checks on its own.
      libcli/raw: in SMB_SIGNING_ENGINE_BSRSPYL state it's ok to accept any signature
      libcli/raw: real signing starts at seqnumber 2
      libcli/smb_composite: for spnego session setups check the smb signature manually
      s4:smb_server: remove the bogus smbsrv_signing_restart()
      selftest: test some smb signing combinations against the member server
      selftest: run smb signing tests as part of make quicktest
      s4:lib/charset: add missing prototype of talloc_strdup_upper()
      s4:libcli/smb_composite: we only check the signature when the server return OK
      s3:configure: add -L./bin also for the merged build
      build: fix the libcryptosrcdir for the merged build
      s3:lib/ldb: Don't return already freed pointer on error.
      s4:provision: don't do the full provision in the become_dc
      s4:dsdb: passdown DSDB_CONTROL_REPLICATED_UPDATE_OID for replicated updates
      lib/tdb: increase the version number after some critial changes
      s4:configure: require tdb >= 1.1.3 from the system
      s4:lib/ldb: disable sqlite3 backend always as it doesn't compile anymore
      s4:libcli/smb2: remove unused header
      s4:samldb: use the code path with async ldb
      s3:mapping_tdb: fix the del_aliasmem() function
      s4:selftest: add "smb.signing" to anon signing tests
      dcerpc.idl: add DCERPC_PFC_OFFSET
      s4:librpc/rpc: correctly sign or seal rpc request with an object guid
      s4:rpc_server: correctly handle dcerpc requests with object uuids
      s4:torture/rpc: add RPC-OBJECTUUID
      s4:selftest: make sure we test RPC-OBJECTUUID with seal
      s4:smb_server/smb: FLAGS2_SMB_SECURITY_SIGNATURES should only be echoed, not set always
      s4:drsblob: fix the build
      s4:lib/ldb: fix stupid <SID=...> dn parsing bugs
      s4:extended_dn: add support for <GUID=...>, <SID=...> or <WKGUID=...,DC=...> as basedn
      s4:kludge_acl: just fake support for the SD_FLAGS control
      s4:linked_attributes: fix a crash bug when the definition of a target attribute is missing
      s4:partition: pass down the SEARCH_OPTIONS control as uncritical
      s4:partition: register DOMAIN_SCOPE and SEARCH_OPTIONS controls
      s4:rootdse: for now don't pass down controls for the rootdse search
      s4:drsuapi.idl: fix some fields in drsuapi_DsRemoveDSServer()
      s4:setup: add wellknownObjects to the domain object
      s4:blackblox/test_ldb: test searches via wellknownObjects
      s4:blackbox/test_ldb: test search by <GUID=...> and <SID=...>
      s4:gensec: pass down want_features to the spnego backend mech
      s4:rpc_server: tell the gensec layer that we want to do header signing
      testprogs/win32/midltests: add missing Makefile
      s4: import lorikeet-heimdal-200810271034
      selftest: move gdb_* and valgrind_* scripts to selftest/
      s4: lsa-server: fix crash bugs related to [out,ref] ** changes
      s4: libcli/security: a NULL DACL allows access
      s4: ntvfs/posix: to set a DACL at open time SEC_DESC_DACL_PRESENT must be set
      RAW-ACLS: test the behavior of NULL DACL vs. empty DACL
      s4:torture: fix names of defines
      s4:torture: PROVISION isn't used by all tests
      s3: proto.h: add missing sys_[g|s]et_quota_vfs() prototypes
      librpc/idl: Add named_pipe_auth.idl to Samba4
      s4: smbd: implement stream_socket_named_pipe()
      s4: rpc_server: listen on named_pipes
      s3: rpc: let serverinfo_to_SamInfo3() work with no pipe_session_key
      s3: build ndr_named_pipe_auth.c
      s4: security.idl: split of dom_sid stuff into dom_sid.idl
      s4: security.idl: for now move server_id also to dom_sid.idl
      s4: ndr_sec_helper: remove unused include
      librpc/ndr: move ndr_sec_helper.c to the toplevel
      s4: fix samba4.samba3sam.python test
      s3: security.idl: split of dom_sid stuff into dom_sid.idl
      s4: use toplevel security.idl
      security.idl: sometimes ACEs have some padding at the end
      s3: make idl
      s4: dsdb/schema: fix the equality and comment of DN+String syntax
      s3: add missing librpc/gen_ndr/ndr_dom_sid.h
      s4:torture: fix the build with auto dependencies
      s4:libcli/resolve: don't ignore SIGCHLD anymore
      lib/util: hex_encode_talloc(): fix error path and set talloc name
      s4:librpc/ndr: integrate NDR_MISC into LIBNDR
      librpc/ndr: let GUID_from_data_blob() accept a ndr blob or a hex string too
      librpc/ndr: add GUID_hexstring()
      s4:dsdb/schema: we don't need to use find_syntax_map_by_ad_oid() as the syntax is already known
      s4:dsdb/schema: use pointers for rangeLower and rangeUpper.
      s4:dsdb/schema: add a function to generate the "extendedAttributeInfo" values
      s4:dsdb/schema: add a function to generate the "extendedClassInfo" values
      s4:dsdb/schema_fsmo: provide "extendedAttributeInfo" and "extendedClassInfo"
      s4:dsdb/samdb: don't allow objects without objectClass
      RPC sessions on np connections need the real session key transferred
      s3:libads/ldap.c: return an error instead of crashing when no realm is given
      s3:smbd: '|' isn't allowed in windows filenames
      s3:smbd: correctly verify stream names to pass RAW-STREAMS
      s3:smbd: wildcard characters are allowed in stream names
      s3:smbd: construct the correct newname for stream renames
      s3:smbd: return DELETE_PENDING on path based operations on streams, when the main file was deleted.
      s3:smbd: write times should be set on the base file instead of the stream name
      s3:smbd: only try and fallback to open a directory if it's not a stream open
      s3:streams_xattr: add support for renaming streams
      s3:streams_depot: map 'file::$DATA' to just 'file'
      s3:streams_depot: add support for stream renames
      s3:streams_depot: fix valgrind bug lp_parm_const_string() doesn't talloc the default value
      s3:streams_depot: add an option to disable the xattr checks
      s3:vfs: fix FCHMOD_ACL macros
      s3:smbd: give the correct error when trying to replace a stream
      s3:streams_xattr: recheck fsp->fsp_name after a rename
      s3:streams_xattr: fstat should do a stat on the base file
      s3:smbd: close the low level fd of the base_fsp, if the file was created
      s3:selftest: test the streams_depot module as it passes make test
      s4:pvfs: return the correct error code for invalid names
      s4:pvfs: correctly check stream names
      s4:libcli/clideltree: work against servers without NTSTATUS support
      RAW-CHKPATH: test every character in the range of 0x01 => 0x7F
      RAW-STREAMS: check some strange stream name combinations
      RAW-STREAMS: test valid character in the range of 0x01 => 0x7F
      RAW-STREAMS: some more tests...
      RAW-STREAMS: test stream renames
      libwbclient: avoid usage talloc_init() in library code
      s4: add some useful link and the patch for the ntp_signd support
      s3:net: fix password set of 'net rpc trustdom add'
      s4:netlogon: Implement netr_GetDcName() similar to netr_DsGetDCName()
      s4:netlogon: for now implement netr_GetAnyDCName() as wrapper of netr_GetDcName()
      RAW-NETLOGON: check netr_GetAnyDCName() result
      s4:selftest: we have netr_GetDcName() and netr_GetAnyDCName() implementations now
      s4:kdc: allow a trusted domain to get kerberos tickets
      s4:kludge_acl: allow everybody to read the sequence number
      s4:password_hash: really catch the clearTextPasswordAttr case...
      s4:winbind: move setting up the primary_sid into a new function wbsrv_setup_domains()
      s4:brwoser.idl: add idl for BrowserrQueryOtherDomains()
      s4:rpc_server: add dcesrv_browser template
      s4:dcesrv_browser: implement dcesrv_BrowserrQueryOtherDomains()
      s4:loadparm: start 'browser' rpc_server
      s4:librpc: add SUBSYSTEM::RPC_NDR_BROWSER
      s4:torture: add simple RPC-BROWSER test
      RPC-BROWSER: send the correct data in later requests
      s4:secrets: remove unused structure
      s4:winbind: fill in the correct variable...
      s4:rpc_server: make it possible for iface->bind() to specify the assoc_group_id
      s4:rpc_server: fix crash bugs in 26200f4fb1db81be7a9da51f317e46405351b170
      s4:rpc_server: initialize rpc server module also for the named pipe case
      s4:rpc_server: don't keep half finished dcesrv_connection_contexts
      s4:libcli/resolve: add resolve_name_all*() which return all addresses not only the first one
      s4:selftest: samba4 fails the changed delete test
      s4:fix segfault in rpc-server, when client binds to unsupported service.
      s3: correctly detect if the current dc is the closest one
      s3: libads: use get_dc_name() instead of get_sorted_dc_list() in the LDAP case
      s3: libsmb/namequery: fallback to returning all dcs, when none is available in the requested site
      s3:libsmb/namequery.c: add saf_join_store() function
      s3:libads/ldap.c: pass the real workgroup name to get_dc_name()
      s3:libads/ldap.c: if the client belongs to no site at all any dc is the closest
      s3:libads/ldap.c: store the dc name in the saf cache as in all other places
      s3:libnet_join: call saf_join_store() after a the join.
      s3:libnet_join: use DS_FORCE_REDISCOVERY
      s3:dsgetdcname: retry with the clients site
      s3:net_status: use dbwrap to open sessionid.tdb
      nsswitch: fix compiler warnings in winbind_nss_linux.c
      s4: fix LIBEVENTS dependencies and use more forward declarations
      s4:lib/events: move to toplevel directory as lib/tevent/
      s4:lib/tevent: add lib/events/ compat and let things compile
      lib/util: make it possible to use debug.h with using xfile.h
      s4:headermap: we need the pathes for gen_ndr headers with and without ../
      s4:headermap: dom_sid.h was renamed to server_id.h
      s4:lib/socket: remove unused code
      s4:lib/socket: we need to lookup the #20 netbios name when we connect to a remote server
      s4:libcli/resolve: don't use __RESOLVE_H__ it might be used by system headers too
      s4:libcli/resolve: add getaddrinfo()/dns_looup() resolving
      s4:libcli/resolve: let the "host" module use the dns_ex.c code
      s4:libcli/resolve: remove all backend specific sync functions
      s4:libcli/resolve: pass down flags to the resolver backends
      s4:libcli/resolve: optionally return the name that belongs to the returned address
      s4:libcli/resolve: specify the port for the resulting socket_addresses
      BASE-LOCK: fix LOCK5
      RAW-CHKPATH: not every server behaves like samba3...
      s4:ntvfs_generic: pass RAW-OPEN again
      s4:selftest: we pass raw.delete.delete21
      s4:libcli/replace: add some RESOLVE_NAME_FLAG* flags
      s4:libcli/wrepl: we don't need to resolve names
      s4:librpc/rpc: remove we should not redo the name resolving for secondary tcp connections
      s4:lib/socket: socket_connect_send() and socket_connect_ev() should only wrok with addresses
      lib/tevent: libtevent will change a lot until it's version 1.0.0
      lib/tevent: rename event_* => tevent_* in the header file
      pyglue: fix the build with automatic dependecies
      s3:dbwrap: fix dbwrap_store_uint32() to match dbwrap_store_int32()
      s4:libnet_samdump_keytab: pass down event_context explicit
      s4:kdc: pass down event_context explicit
      s4: Revert "r24284: change brlock_tdb.c to use the dbwrap API. This actually makes the"
      s4: remove unused dbwrap code
      s4:cluster: remove old/broken ctdb code
      s4:sys_lease_linux: use tevent
      s4:pvfs_aio: use tevent
      s4:lib/tevent: rename structs
      s4:cluster: fix dependency to TDB_WRAP
      s3:passdb: make marshalling struct samu from and to a buffer more generic
      s3:passdb: add SAMU_BUFFER_V4 with no changes
      s3:pdb_tdb: store the next rid counter in passdb.tdb instead of winbind_idmap.tdb
      pidl: don't generate invalid C code
      lib/tevent: fix standalone make distclean realdistclean
      Fix the merged build
      s3:cluster: register the client connection via CTDB_CONTROL_TCP_ADD
      s3:winbindd: we don't need to call messaging_reinit() twice
      Happy New Year!
      pidl: add dummy element for empty unions
      librpc/gen_ndr: rerun make idl_full after pidl changes
      Revert "s4 winbind: Avoid a "discards const" compiler warning."
      Revert "s4 winbind: Copy SID to avoid "discard const" warning"
      s4:pyregistry: use tevent_context_init()
      s4:tevent: move event_context_find() to tevent_s4.c
      s4:lib/events: deprecate event_context_find()
      tevent: use libreplace headers instead of system headers
      tevent: rename event_set_default_backend() => tevent_set_default_backend()
      tevent: rename event_loop_* => tevent_loop_*
      tevent: rename event_[s|g]et_fd_flags => tevent_fd_[s|g]et_flags
      tevent: rename event_context_init* => tevent_context_init*()
      tevent: rename event_register_backend() => tevent_register_backend()
      tevent: use HAVE_EPOLL instead of HAVE_EVENTS_EPOLL
      tevent: make tevent_add_*() macros arround _tevent_add_*()
      tevent: pass down handler_name and location to the backend layer
      tevent: rename events => tevent in tevent.pc
      tevent: rename ev_debug_ops => tevent_debug_ops
      tevent: use TEVENT_FD_* instead of EVENT_FD_*
      tevent: change pytevent to tevent_*
      tevent: only provide compat macros if the caller wants them
      s4:lib/events: convert to use tevent_* functions instead of compat macros
      s4:selftest: report tevent tests as 'tevent.python'
      s4:lib/events: remove unused events_internal.h
      tevent: raise version to 0.9.1
      tevent: fix standalone make test
      tevent: specify argument names for the event handlers
      tevent: move some common tevent_fd related functions into tevent_fd.c
      tevent: add tevent_fd_set_close_fn()
      tevent: add tevent_fd_set_auto_close()
      s4:sysdep/inotify: use tevent_fd_set_auto_close()
      s4:socket: use a socket_wrapper aware function to auto close the fd event for sockets
      tevent: remove dependency to SOCKET_WRAPPER via "system/network.h"
      tevent: remove TEVENT_FD_AUTOCLOSE feature
      tevent: raise version to 0.9.2 after AUTOCLOSE changes
      s4:auth/kerberos: convert to tevent_* api
      s4:libcli/ldap: convert to tevent_* api
      s4:smbd: convert to tevent_* api
      tevent: completely initialize tevent_fd structs
      s4:build: add SMB_MAKE_SETTINGS() macro
      tevent: move samba4 stuff from libtevent.m4 to samba.m4
      tevent: fix tevent_add_timer() and tevent_add_aio() macros
      s3:winbindd: move WINBINDD_CCACHE_ENTRY and WINBINDD_MEMORY_CREDS to winbindd.h
      s3:winbindd: rename fd_event => winbindd_fd_event
      s3:winbindd: recreate the per domain check_online_event without relying on global state
      s3:winbindd: cancel all ccache entry events and not just one
      s3:winbindd: regain tickets for all ccache entries, when we go online
      s3:events: remove unused stuff
      s3:events: move prototypes to event.h
      s3:events: change event_add_timed() prototype to match samba4
      s3:events: get rid of the stupid cancel_named_event() function
      s3:events: get rid of the stupid set_event_dispatch_time() function
      s3: build lib/tevent staticly into samba3
      s3:events: register as tevent backend
      s3:winbindd: also handle fd events from the winbind_event_context()
      tevent: make tevent_debug() a noop if ev is NULL
      tevent: keep a linked list of signal events
      tevent: keep a linked list of fd_events
      tevent: don't crash if te->event_ctx is NULL
      tevent: add tevent_context destructor that unlinks the events from the context
      tevent: add some debugging for timer events, that mostly matches samba3
      s3:events: use more tevent_common_* functions
      tevent: don't try to dereference fde->event_ctx when the event context doesn't exists anymore
      s4:smbclient: correct initialize smbclient_context
      s3:smbd: make mangle_fns const
      s3:smbd: make fake_files[] static const
      s3:smbd: remove pointless static variables in chgpasswd.c
      s3:smbd: it's pointless to have a global magic_char
      s3:smbd: make globals in utmp.c static const
      s3:smbd: make const globals in mangle_hash2.c really static const
      s3:smbd: make static const in mangle_hash2.c really static const
      s3:smbd: remove pointless static variable in uid.c
      s3:smbd: remove stupid static variables for the nfs quota code
      s3:smbd: keep dmapi globals in one context struct
      s3:smbd: open_sockets_smbd() don't need a static variable arrount atexit()
      s3:smbd: variables in a main() don't need to be static
      s3:smbd: move all globals and static variables in globals.[ch]
      s4:events: don't trigger \n in debug messages two times
      s4:blackbox: don't remove newlines in the subunit failure output
      s3:smbd: fix the build with dmapi support
      s3:events: install a tevent debug handler that calls DEBUG()
      s3:events: debug sys_select() errors
      s3:smbd: handle incoming smb requests via event handlers
      Revert "quote ' inside '...' and make sure shell isn't eating \ by using perl here."
      s4:debug: make setup_logging() a bit more compatible with samba3
      tevent: use for() loops instead of while() loops
      s3:libsmb: handle the smb signing states the same in the krb5 and ntlmssp cases
      pidl: remove references to EJS and SWIG code
      packaging(RHEL-CTDB): export CC - really use ccache...
      s3:vfs_fileid: readd "fileid:algorithm" as option.
      s3:docs: vfs_fileid manpage
      s3:cluster: fix ctdb ipv6 support
      NBT-WINS: initialize .dest_port explicit (we should fill the whole struct each time)
      Revert "Remove another use of global_loadparm."
      util_str: setup the correct talloc name for strings
      ndr_print: fix the output ndr debug messages only add header line once
      winsserver: we need to ignore duplicated name register requests.
      NBT-WINS: try to bind to port 137 in the NBT-WINS test
      NBT-WINS: if we're bound to port 137 trigger WACK reponses with timeouts
      NBT-WINS: we don't need the slow low port tests for every name
      NBT-WINS: test if the server ignores resent packets
      libcli/nbt: fix wack timeout handling
      wreplsrv: log replication failures at log level 0
      wreplsrv: log a successful replication cycle at level 1
      wreplsrv: don't log scavenging events at level 0
      nbt_server: add some debug messages which show the used interfaces addresses
      libcli/nbt: add nbt_set_unexpected_handler()
      libcli/nbt: add nbt_name_socket_handle_response_packet()
      nbt_server: redirect incoming response packets to the correct interface
      nbt_server: fix crash bug, the wins client interface may not have a nbtsock
      winsdb: the we_are_owner in winsdb_lookup() needs to be per address
      wrepl_server: use a local 'local_owner' variable to make the code more readable
      wrepl_server: fix the record expire time of sgroup merges
      wrepl_scavenging: add a comment to make the is_static case more clear
      winsserver_release: update the expire time if only one address is released
      winsserver: add "wreplsrv:propagate name releases" option
      wreplserver: add "wreplsrv:propagate name releases = yes" for replicated sgroup merges
      libcli/wrepl: return the major version of the server in wrepl_associate()
      wrepl_server: make 'use inform' the default and autofallback against old servers
      nbt_server/wins: use talloc_zero() to create struct winsdb_handle
      nbt_server/wins: add some const
      nbt_server/wins: winsdb_handle() can be static
      s3:dbwrap: add get_flags() hook to db_context
      s3:dbwrap: add dbwrap_delete(), dbwrap_store() and dbwrap_fetch()
      s3:idmap_tdb: convert to the dbwrap api
      tevent: rename signal handler functions to start with tevent_common_
      s3:smbd: call message_dispatch() before processing incoming PDUs
      s3:events: add support for signal events
      s3: reinit_after_fork() should reinit the event context before the messaging context
      s3:messaging: also recreate the local messaging backend in messaging_reinit()
      socket_wrapper: fix PCAP support broken by aaea68791cfea45c6fa69abc93ad6d0e832d0283
      s4:ldb: remove dependency to samba4's events wrapper
      s4:python glue: fix dependecy to pyldb
      selftest: bin/ is under $(builddir) instead of $(srcdir)
      selftest:Samba4: add bindir_path() utility function to construct the binary pathes
      s4:selftest: reference binaries via variables in tests.sh
      selftest: add --exeext parameter
      merged-build: propare to fix make test4
      s4:auth: move make_server_info_netlogon_validation() function arround
      s3:events: always run_events() before sys_select()
      s3: always call run_events() before and after sys_select()
      s3:smbd: restructure kernel oplocks code
      s3:messaging: start with to use signal events instead of the raw signal interfaces
      s3:smbcontrol: don't call message_dispatch() anymore, it's triggered by tevent_loop_once()
      s3:msgtest: don't call message_dispatch() anymore, use tevent_loop_once() instead
      s3:smbd: we don't need to call message_dispatch() anymore it's event triggered now
      s3:nmbd: we don't need to call message_dispatch() anymore it's event triggered now
      s3:winbindd: we don't need to call message_dispatch() anymore it's event triggered now
      s3:printing: handle tevent_context events in the sys_select() call
      s3:messages: finally make message_dispatch() static
      s3:printing: make some functions static and use tevent functions
      lib/replace: add defines to let the callers find out if pwrite and pread are thread/fork safe
      s4: we're on the way to alhpa7
      tevent: change SA_INFO_QUEUE_COUNT from 10 to 100
      s3:namecache: remove unused namecache_shutdown() function
      s3:smbd: we should setup the client socket in the same way in all code pathes
      s3:smbd: move all code that handles a client connection into smbd_process()
      s3:smbd: use signal events for SIGTERM, SIGHUP and SIGCHLD
      s3:winbindd: handle SIG_TERM, SIGHUP, SIGCHLD and SIGUSR2 via tevent
      s3:nmbd: install the SIG_DFL handler for SIGTERM while we're waiting for interfaces
      s3:nmbd: as the sig_term() handler only sets a flag we don't need to block SIGTERM
      s3:nmbd: handle SIG_TERM and SIGHUP via tevent
      s3:smbd: convert aio to use tevent_signal
      s3:smbd: remove pointless respond_to_all_remaining_local_messages() function
      s3:smbd: make kernel oplocks event driven
      s3:smbd: make inetd code path more clear
      s3:smbd: make mdns registration event driven.
      s3:smbd: wait for new connection via fd events
      s3:rpc_server: use get_client_fd() instead of smbd_server_fd()
      s3: try to make 'make selftest' work again
      s3:torture: support SMB_CONF_PATH envvar in smbtorture
      selftest: set 'lock dir' in client.conf
      s3:selftest: fix warnings with empty *_TEST_LOG variables
      s3:selftest: create BUILTIN\\Administrators at startup
      s3:selftest: fix 'make selftest'
      selftest: abstract Samba3 provision a bit
      selftest: Samba4 remove unused variable
      selftest: fix Samba3 bugs
      s3:seltest: make test_smbclient_s3.sh more strict
      selftest: add "member" environment for Samba3
      s3:selftest: import more tests from 'make test'
      s3:smbd: ignore open_socket_in() failures
      s3:ctdbd_conn: canonicalize ips before sending them to ctdbd
      s3:configure: autodetect ctdb/cluster support
      selftest: allow environment options
      s4:fix the build after 380874ef863866c94c999ef53252b9d30df65e88
      selftest: fix default option name
      selftest: fix "none" test
      pidl: fix samba3-cli test after change to cli->dispatch()
      selftest: don't export $CONFIGURATION anymore only $SMB_CONF_PATH
      s4:selftest: run ncalrpc tests in dc:local mode
      s4:selftest: run RPC-COUNTCALLS as dc:local
      s4:build: kill DEFAULT_HEADERS variable
      heimdal: don't include <ifaddrs.h> without knowing it's there
      heimdal: don't include <sys/cdefs.h> without knowing it's there
      heimdal:camellia-ntt.c: include config.h as first header
      s4:heimdal_build: include "system/network.h" via config.h wrapper
      heimdal:roken: arg_printusage() should not try to return a value.
      heimdal:roken: arg_match_long() should return a value
      s4:lib/util: fix the build
      lib/replace: check if we have dirfd()
      s4:heimdal_build: add a dummy define for dirfd()
      Revert "s4:heimdal_build: include "system/network.h" via config.h wrapper"
      heimdal:camellia: include roken.h
      lib/talloc: include replace.h in pytalloc.c
      lib/tdb: include replace.h and system/filesys.h in pytdb.c
      lib/tevent: include replace.h in pytevent.c
      s4:lib/ldb: include replace.h in pyldb.c
      heimdal:hdb: always include "config.h" first
      s3:smbconftort: don't use reserved words ('test:', 'failure:', 'success:')
      s3:tests: add a guard arround . $incdir/test_functions.sh
      s3:selftest: run the same tests as 'make test'
      selftest: pass down the path to python for provisioning samba4
      s4:heimdal_build: heimdal requires u_int32_t and u_char
      s4:lib/socket: don't use gethostbyname2()
      heimdal: void functions should not return a value
      s4:build: require ldb 0.9.3 when building against an external library
      s4:heimdal_build: fix the build of asn1_compile and compile_et
      lib/replace: move MAXHOSTNAMELEN to system/network.h
      s4:repl_meta_data: fix segfault after ldb changes
      s4:auth: try to fix the build on Solaris
      s4:nbt_server/wins/: fix compiler warnings in winsdb.c
      s4:kdc: avoid c++ reserved word 'private'
      s4:lib/messaging: avoid c++ reserved word 'private'
      s4:lib/messaging: fix warnings in testsuite
      s4:irpc: avoid c++ reserved word 'private'
      s4:auth/gensec: s/private/private_data
      s4:auth/kerberos: s/private/private_data
      s4:extended_dn_out: s/private/p s/new/nattrs
      s4:lib/messaging: s/private/private_data
      s4:lib/socket: s/private/private_data
      s4:lib/stream: s/private/private_data
      s4:libcli/cldap: s/private/private_data
      s4:libcli/clilist.c: s/private/private_data
      s4:libcli/dgram: s/private/private_data
      s4:libcli/raw: s/private/private_data
      s4:libcli/smb2: s/private/private_data
      s4:libcli/wrepl: s/private/private_data
      s4:libnet/: s/private/private_data
      s4:librpc/rpc: s/private/private_data
      s4:ntp_signd: s/private/private_data
      s4:ntvfs: s/private/private_data
      s4:ntvfs/cifs/: s/private/p
      s4:ntvfs/cifs_posix_cli: s/private/p
      s4:ntvfs/common: s/private/private_data
      s4:ntvfs/ipc: s/private/ipriv
      s4:ntvfs/nbench: s/private/nprivates
      s4:ntvfs/posix: s/private/private_data
      s4:ntvfs/simple: s/private/p
      s4:ntvfs/smb2: s/private/p
      s4:ntvfs/unixuid: s/private/priv
      s4:rpc_server/echo: s/private/private_data
      s4:rpc_server/remote: s/private/priv
      s4:smb_server: s/private/private_data
      s4:smbd: s/private/private_data
      s4:ntlm_auth: s/private/private1
      s4:web_server: s/private/private_data
      s4:winbind: s/private/private_data
      s4:wrepl_server: s/private/private_data
      s4:torture: s/private/private_data
      s4:includes.h: stdlib.h and stdbool.h are already included by replace.h
      s4:libcli/smb2: s/class/info_class
      s4:dsdb/schema: s/class/sclass
      s4:ldap_server: s/private/private_data
      s4:cluster: s/private/private_data
      s4:kludge_acl: s/class/sclass
      s4:cldap: s/private/private_data
      s4:dgram: s/private/private_data
      s4:smb2: s/private/private_data
      s4:rpc_server: s/private/private_data
      s4:web_server: s/private/private_data
      s4:wrepl_request: s/private/private_data
      s4:libcliraw: s/private/private_data
      s4:service_task: s/private/private_data
      s4:service_stream: s/private/private_data
      s4:libcli/raw: s/class/eclass
      s4:resolve/dns_ex: undefine class because it's used in heimdal/lib/roken/resolve.h
      libcli/nbt: s/private/private_data
      s4:update_keytab: s/delete/do_delete
      s4:loadparm: s/class/pclass
      s4:schema_fsmo: s/class/sclass
      s4:ldif_handlers: s/class/sclass
      s4:ldb_map: s/new/ntree
      lib/util: s/class/dclass
      lib/util: s/new/pn in idtree.c
      s4:libnet: s/new/n
      s4:rpc_server/lsa: s/delete/del s/open/opn
      lib/tevent: s/private/private_data
      s4:lib/registry: s/new/nkey
      s4:py_security: avoid 'this' and use 'py_self' and 'self'
      s4:torture/nbench: don't use 'new'
      s4:torture/rpc: avoid 'new' in samsync.c
      s4:torture/util_smb: s/class/classnum
      s4:torture/rpc: s/class/kclass in winreg.c
      s4:torture/rpc: avoid 'delete' and 'class' in samba3rpc.c
      s4:includes: copy #error DONT_USE_CPLUSPLUS_RESERVED_NAMES from source3
      selftest: remove source4 specific stuff from selftest.pl
      lib/tdb: the python bindings don't use swig anymore
      lib/tevent: the python bindings don't use swig anymore
      s4:auth: the python bindings don't use swig anymore
      s4:auth/credentials: the python bindings don't use swig anymore
      s4:lib/ldb: we should not silence warnings on handwritten python bindings
      s4:libcli: remove unused line in config.mk
      s4:param: we should not silence warnings on handwritten python bindings
      s4:scripting/python: we should not silence warnings on handwritten python bindings
      s4:param: swig_ldb was renamed to pyldb in d965ff05c9923c8a0e440e905d0d9fe662cc5db0
      s4:build: add a comment why we need CFLAG_NO_CAST_QUAL and CFLAG_NO_UNUSED_MACROS
      s3:selftest: pass correct arguments to $SCRIPTDIR/test_smbtorture_s3.sh
      s3:build: pass the path to smbtorture4 down to make with and without '-t' prefix
      s3:selftest: run test_posix_s3.sh tests
      lib/tdb: don't generate a static library for the samba4 build
      s3:test: try to find why creating BUILTIN\Administrators doesn't work in the build-farm
      merged-build: force non-shared build for samba4
      merged-build: link in LIBREPLACE into samba4 code as in the native build
      s4:lib/ldb: call ldb utils always via $VALGRIND ldbfoo$EXEEXT in the tests
      selftest: export BUILDDIR, BUILDDIR_ABS and EXEEXT
      selftest: don't use hardcoded path to nmblookup in Samba4.pm
      s4:selftest: don't use hardcoded pathes
      s4:selftest: avoid hardcoded pathes in blackbox tests
      Revert "s3:test: try to find why creating BUILTIN\Administrators doesn't work in the build-farm"
      Revert "s3:selftest: create BUILTIN\\Administrators at startup"
      s3:selftest: fix blackbox.net_s3 tests
      selftest/Samba3: use the same logic for make test and make selftest
      examples/VFS: fix the configure and make with the new directory layout
      s4:pvfs: fix some talloc related compiler warnings
      s4:pvfs: use talloc_get_type() to cast from void *
      s4:pvfs: remove compiler warning
      LDAP-UPTODATEVECTOR: fix segfault against samba4 as server
      s4:pvfs_aio: fix compiler warning
      s4:build: remove not commited files under librpc/gen_ndr with make clean
      s4:lib/registry: fix c++ warnings
      s4:pyparam: fix compiler warnings
      s4:pyldb: fix compiler warnings
      s4:pycredentials: fix compiler warnings
      s4:pyrpc: fix compiler warnings
      s4:pyauth: fix compiler warnings
      s4:pyregistry: fix compiler warnings
      s4:auth/ntlm: fix c++ warning
      s4:libcli/smb2: fix c++ warning
      s4:pyregistry: fix crash bugs introduced by e5a6eadd8214b56da34f733318a0fecaebbe5ef5
      testprogs/win32: add npecho_*2.c
      s4:Makefile: fix PUBLIC_HEADERS typo
      testprogs/win32: make it possible to run in byte or message mode in npecho_server2
      testprogs/win32: add an option to trigger small reads in npecho_client2.c
      selftest: add my copyright
      merged-build: pass PYTHON and PERL down to make test4
      selftest: add target::Template
      selftest: Samba3 protect against removing /*
      selftest: allow "skip" as max runtime for smbd, nmbd and winbindd
      selftest: s/SMBD/SAMBA/ in Samba.pm
      selftest/Samba4: split provision() into provision_raw_prepare() and provision_raw_run()
      selftest/Samba4: split out share configurations of provision_raw*()
      selftest/Samba4: split out ldap specific stuff from provision_raw_*()
      selftest/Samba4: pass down the kdc address down to provision_raw_*()
      s3:auth: add S-1-22-X-Y sids to the local token
      s3:auth: only create_local_token() should add S-1-22-X-Y sids
      s4:torture/samba3rpc: fix the build after get_myname() changes
      s4:ntvfs_generic: use talloc_get_type() to remote compiler warnings
      s4:libcli/ldap: use const char * const *attributes as in all other places
      s4:ldb_ildap: remove compiler warnings
      s4:lib/socket: add socket_address_copy()
      lib/tevent: remove broken tevent_aio support
      lib/tevent: expose ev_timeval_zero() for internal usage
      lib/tevent: add tevent_req.c as copy of lib/async_req/async_req.c
      lib/tevent: add tevent_req infrastructure
      tevent: raise version to 0.9.3
      s4:configure: require the same version for external and internal libtevent
      lib/tevent: change to LGPLv3+
      tevent: fix compiler warning in pytevent.c
      netlogon.idl: add NETLOGON_REG_SUPPORTS_AES_SHA2 flags and use correct names for some other flags
      librpc: rerun make idl
      s4:netlogon: always return correct negotiate_flags in Authenticate[2|3]()
      netlogon.idl: add idl for netr_LogonGetCapabilities()
      librpc: rerun make idl
      s4:netlogon: implement netr_LogonGetCapabilities with NT_STATUS_NOT_IMPLEMENTED
      s3:netlogon: implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED
      s4:netlogon: don't mix in and out negotiate_flags in dcesrv_netr_ServerAuthenticate()
      tevent: rename tevent_req_set_timeout() => tevent_req_set_endtime()
      tevent: add tevent_wakeup_send/recv()
      pidl:NDR/Parser: don't call [noopnum] function when creating the ndr_interface_table
      librpc: rerun make idl
      s3:librpc/ndr: if uninitialized variable in string_array code
      s4:librpc/ndr: if uninitialized variable in string_array code
      s3:example/VFS: fix the build
      s3: remove unused smb_ldap.h
      s4:libcli: split out LIBCLI_LDAP_MESSAGE subsystem
      s4:libcli/ldap: remove reference to DEBUG()
      libcli/ldap: move ldap_message.[ch] from source4/ to the toplevel
      libcli/ldap: move ldap_errors.h to the toplevel and install it
      libcli/ldap: fix compiler warnings
      libcli/ldap: move ldap_ndr from source4/ to toplevel
      s4:libcli/ldap: don't use 'void **out' as arguments as the behavior is not defined in C.
      libcli/ldap: move generic ldap control encoding code to ldap_message.c
      s3:Makefile: build libcli/ldap files
      s4:build: add some comments to the SMB_EXT_LIB() definition
      tevent: add tevent_req_poll() function
      tevent: add private_print function feature to tevent_req
      s3:events: map TEVENT_DEBUG_TRACE to debug level 10
      s4:lib/events: map TEVENT_DEBUG_TRACE to debug level 10
      lib/tdb: if we know pwrite and pread are thread/fork safe tdb_reopen_all() should be a noop
      s4:VERSION: mark as 4.0.0-alpha8 gitsnapshot
      s4:ldb_map: include ldb_includes.h first to get replace.h as first header
      libreplace: make it possible to disable socket_wrapper via -DSOCKET_WRAPPER_DISABLE=1
      s4:heimdal_build: don't always build setprogname.o
      s4:Makefile: try to fix 'make installheaders' on *BSD systems
      s4:heimdal_build: correrctly switch closefrom() and get/setprogname() replacements on and off
      tevent: add tevent_queue infrastructure
      lib/torture: fix depency to map_nt_error_from_unix()
      libcli/security: fix the source3 build
      libcli/security: fix the source4 build
      talloc: add talloc_get_type_abort()
      lib/util: remove samba specific talloc_get_type_abort()
      socket_wrapper: don't crash if we get EAGAIN from real_recv()
      s4:blackbox/test_ldb: make use of the $VALGRIND envvar
      socket_wrapper: prepare pcap support for ipv6 traffic
      socket_wrapper: pass down sockaddr instead of sockaddr_in to prepare pcap support for ipv6
      socket_wrapper: add ipv6 pcap support
      socket_wrapper: add multiple interface support for ipv6
      s4:errormap: map ECANCELED to NT_STATUS_CANCELLED
      s3:libsmb: smb signing works the same for extented and non-extended security
      s3:errormap: add ECANCELED, ERRDOS/ERRbadfid, NT_STATUS_CANCELLED mapping
      s3:signing: the seqnum should only be decremented by 1 for ntcancel requests
      s3:winbindd_cm: remove useless cli_setup_signing_state(*cli, Undefined) call
      s3:libsmb: remove cli_setup_signing_state() and add struct cli_state *cli_initialise_ex()
      s3:libsmb: merge cli_setup_signing_state() into cli_initialise_ex()
      s3:make_test: run CHAIN1 test
      socket_wrapper: make it possible to bind to '::'
      socket_wrapper: correctly handle connected dgram sockets
      socket_wrapper: downgrade ipv6 sockets to ipv4 is in connect() if the dest is ipv4
      socket_wrapper: try to make ipv6 support more portable
      s3:lib: interfaces.c isn't used in the configure tests anymore
      socket_wrapper: wrap readv() and writev()
      s3:libsmb: fix a lot of cli_push() bugs
      s3:libsmb: only treat a return 0 as end of file
      s3:libsmb: add an option to cli_push to let the caller provide the buffers
      tevent: add tevent_req_received() function
      tevent: add tevent_req_callback_data_void() macro
      lib/replace: make sure we include <sys/uio.h> before socket_wrapper.h
      async_sock: fix truncating of the temporary iovec in writev_send/recv()
      LDAP-BENCH-CLDAP: also test CLDAP rootdse searches.
      Revert "s3:libsmb: add an option to cli_push to let the caller provide the buffers"
      s4:ldb: setup tevent debug functions on a selfcreated event context
      talloc: add talloc_set_abort_fn()
      tevent: add tevent_signal_support()
      tevent: add tevent_set_abort_fn()
      tevent: pass __location__ to tevent_loop_once/wait()
      s3:events: pass __location__ to event_loop_*()
      tevent: don't allow nested tevent_loop_once() anymore
      s4:ldb: allow nested events until the code is fixed to avoid them
      s4:events: allow nested events until we fixed all code to avoid them
      tevent: add tevent_loop_set_nesting_hook()
      tevent: add tevent_loop_until()
      s4:build: try to fix the build with the ibm checker in the build-farm
      tevent: change version to 0.9.4 as the ABI has changed
      s4:build: require tevent 0.9.4
      lib/replace: use AC_TRY_LINK() to verify that getifaddrs() and freeifaddrs() are available
      nsswitch: only define TALLOC_ZERO if needed
      s3: only define TALLOC_ZERO if needed
      talloc: add TALLOC_ZERO()
      talloc: add useful talloc_array_length() macro
      talloc: change version to 1.3.0
      s4:build: use SAMBA_PKG_CONFIG_MIN_VERSION instead of PKG_CONFIG_MIN_VERSION
      tevent: let tevent_loop_once() just run one fd event
      tevent: check signal events first in event_loop_once
      tevent: add tevent_common_loop_wait() helper function and use it
      s3:events: make use of tevent_common_loop_wait()
      tevent: add support for immediate events
      s3:events: add support for immediate events
      tevent: use TALLOC_FREE() in tevent_req.c
      tevent: use an immediate event fot tevent_req_post()
      tevent: use an immediate event as trigger for tevent_queue
      tevent: store the location where a request was finished
      tevent: change version to 0.9.5 after the ABI has changed
      s4:build: require tevent 0.9.5
      s3:smbd: don't exit the parent when we have no connections
      s3:printing: use a fd event to monitor the pipe to the parent
      s3:printing: use tevent_loop_wait() instead of manual looping
      s3:smbd: use tevent_loop_once() in the parent event loop
      s3:winbindd: remove unused close_winbindd_socket() function
      s3:winbindd: move non event related code out of process_loop() in the the caller
      s3:winbindd: accept new connections via fd events
      s3:lib/util_sock: use sys_recv() instead of sys_read() on sockets
      s3:libsmb: fix smb signing for fragmented trans/trans2/nttrans requests
      s3:libsmb: always create bytes array in cli_trans code
      tevent: fix the nesting logic
      lib/tsocket: add generic socket abstraction layer
      lib/tsocket: add some useful helper functions
      lib/tsocket: add a tsocket_guide.txt with a description of the design
      lib/tsocket: add an implementation for bsd style sockets.
      lib/tsocket: add tsocket_recvfrom_send/recv()
      lib/tsocket: add tsocket_sendto_send/recv()
      lib/tsocket: add tsocket_sendto_queue_send/recv()
      lib/tsocket: add tsocket_connect_send/recv()
      lib/tsocket: add tsocket_writev_send/recv()
      lib/tsocket: add tsocket_writev_queue_send/recv()
      lib/tsocket: add tsocket_readv_send/recv()
      lib/tsocket: add tsocket_guide.txt section about the async _send/recv() helper functions
      lib/tsocket: add a fast path to tsocket_sendto_send/recv()
      lib/tsocket: add a fast path to tsocket_writev_send/recv()
      lib/tsocket: add tsocket_guide.txt section with specific details about bsd style sockets
      lib/util: build tevent_unix.o and tevent_ntstatus.o as UTIL_TEVENT subsystem
      s4:cldap: rewrite the cldap library based on tsocket
      move source4/libcli/cldap => libcli/cldap
      s3:build: compile lib/tsocket and libcli/cldap
      s3:libads: use libcli/cldap code
      s4:build: include ../libcli/cldap/config.mk
      selftest/Samba3: use the same sequence of signals to shutdown samba3 as with the shell scripts
      socket_wrapper: fix connect() for dgram sockets, if the destination isn't there yet
      s4:smbd: the name of the binary is "samba" now
      s4:selftest: rename SMBD_VALGRIND => SAMBA_VALGRIND
      selftest/Samba3: always use the same timeout for all servers
      s3:nmbd: implement a MAILSLOT => CLDAP proxy for NETLOGON_SAMLOGON requests
      LDAP-CLDAP: remove temporary debug statements...
      Revert "socket_wrapper: fix connect() for dgram sockets, if the destination isn't there yet"
      socket_wrapper: fix connect() for dgram sockets, if the destination isn't there yet
      s3:smbd: if we allow trans2 on the IPC$ share, then we have to allow transs2 too.
      s3:libsmb: rename smb_signing.c => clisigning.c
      s3:libsmb: add a much simplified smb_siging infrastructure
      s3:smbd: use new simplified snb_signing code in the server
      s3:libsmb: use new simplified smb_signing code for the client side
      selftest/Samba3: Test smb signing against the member server
      s4:auth/credentials: include gssapi/gssapi_krb5.h
      s4:auth/credentials: use krb5_data_free()
      s4:kdc: use krb5_data_free()
      s4:heimdal_build: define HAVE_STRLCPY, HAVE_STRLCAT, HAVE_STRCASECMP and HAVE_MKSTEMP
      s4:heimdal_build: provide heimdal_version and heimdal_long_version symbols
      tsocket: try to fix the build on solaris systems
      s3:build: make it possible to pass down CTAGS_OPTIONS or ETAGS_OPTIONS
      s4:build: make it possible to pass down CTAGS_OPTIONS or ETAGS_OPTIONS
      s4:torture/smb2: fix the build
      s4:torture/smb2: fix compiler warnings and bugs
      tsocket: more s/sun/un to make the build on solaris happy
      tsocket: try to fix the build on solaris FIONREAD was missing
      libcli/cldap: fix memory/resource leak
      lib/util: fallback to any id in idr_get_new_random()
      tsocket: split out a smaller tdgram_context abstraction
      tsocket: add tdgram_sendto_queue_send/recv()
      tsocket: optimize tdgram_bsd a lot
      libcli/cldap: convert to tsocket_* function to tdgram_*
      tsocket: remove DGRAM support from tsocket_context
      tsocket: use the correct 'ret' variable for tdgram_disconnect_send/recv()
      tsocket: reduce size of dummy variable
      socket_wrapper: fix crash bug in swrap_readv/writev
      s4:rpc_server: report available output for all replies
      s4:rpc_server: split out the parsing of the ncacn_packet from analyzing of the content
      socket_wrapper: fix the build on systems without ipv6 support
      tsocket: fix the build without ipv6 support
      s3:net_rpc: don't shutdown a cli_state passed from the caller
      s3:net: add --request-timeout option
      s3:docs: document the --request-timeout option of net
      s4:selftest: ignore smb2.lease test for now
      s4:librpc/rpc: ask for 0x2000 bytes in the ioctl case to match all othercases
      s4:torture/rpc: use dcerpc_ndr_request() for the object_uuid test
      s4:librpc/rpc: only use smb_trans for sync rpc calls
      s4:librpc/rpc: remove async argument from the sync dcerpc_request() function
      pidl:Samba4/client: use dcerpc_ndr_request() for sync requests
      s4:librpc/rpc: pass async as argument to dcerpc_ndr_request_send()
      pidl:Samba4/client: fix dcerpc_ndr_request_send() callers
      Revert "Use an absolute path to ensure that we can always regenerate tables.c"
      s3:libsmb: always use the tevent_req_nomem() for checking allocation failures
      s4:tortore: use torture api instead of printf in RAW-RENAME
      s4:selftest: s4 doesn't support osxrename and directory rename yet
      s4:torture: use torture api instead of printf for RAW-LOCK
      RAW-LOCK: samba4 behaves like windows 7 in regard of locking error codes
      s4:RPC-ECHO: disable the timeout test as it can't work with our client library
      s4:selftest: don't run the smb2.durable.open test
      s4:libcli/raw: write can return STATUS_BUFFER_OVERFLOW as a real error
      s4:libcli: remember operating system and lan manager strings from session setup
      tsocket: remove tsocket_context related stuff
      tsocket: fix dependecies
      tsocket: return EINVAL when tdgram_sendto_send() is used with len == 0
      tsocket: for unix domain sockets we need to use sizeof(struct sockaddr_un)
      tsocket: tdgram move input checks to the common code as there're needed for all backends
      tsocket: move tsocket_sendto_queue_send/recv() to tsocket_helpers.c
      tsocket: move tsocket_simple_int_recv() to tsocket.c
      tsocket: rename tdgram_unix_dgram_socket() => tdgram_unix_socket()
      tsocket: add tstream_context infrastructure similar to tdgram_context
      tsocket: add tstream implementation for bsd sockets (inet and unix)
      tsocket: add tstream_readv_pdu_send/recv()
      tsocket: add tstream_writev_queue_send/recv()
      tsocket: add tstream_readv_pdu_queue_send/recv()
      named_pipe_auth.idl: add level 2 and pass the client/server info and session key
      rerun "make idl"
      s4:smbd: add support for named_pipe_auth level 2 in service_named_pipe...
      libcli/named_pipe_auth: add tstream_npa_connect_send/recv()
      s4:smbd: depend on NAMED_PIPE_AUTH_TSTREAM...
      s4:rpc_server: convert the socket based part to use the tstream interface
      tevent: fix typo async_req_done() => tevent_req_done()
      s3:smbd: fix posix acls when setting an ACL without explicit ACE for the owner (bug#2346)
      s3:libsmb: fix layering of cli_ntrename_internal and its callers
      s4:smb_server: return after we have processed an invalid smb2 request
      s3:libsmb: let cli_smb_chain_send() also return NTSTATUS
      s3:libsmb: move read_smb_send/recv() static in async_smb.c
      s4:libcli/raw: initialy read the first 4 bytes only
      SMB2-LOCK: let the test pass against samba4
      s3:param: add PROTOCOL_SMB2
      s3:smbd: add infrastructure for SMB2 support
      s3:smbd: make negprot_spnego() non static
      s3:smbd: add support for SMB2 Negotiate
      s3:smbd: allow SMB 2.002 dialect in SMB1 negprot
      s3:smbd: add support for SMB2 Keepalive (SMB2 Echo)
      s4:libcli/smb2: fill in transport->negotiate.secblob with the correct data
      s4:libcli/smb2: use raw ntlmssp if the server didn't provide a sec blob
      s4:libcli/smb2: fix session setup with raw NTLMSSP
      s3:smbd: fix initialized memory in SMB2 responses
      s3:smbd: add smbd_smb2_request_done_ex()
      s3:smbd: move the callback functions of smbd_smb2_request_reply() closer itself
      s3:smbd: for now indicate raw NTLMSSP in the SMB2 Negotiate response
      s3:smbd: implement SMB2 Session Setup with raw NTLMSSP
      s3:smbd: check the incoming session id for SMB2 requests
      s3:smbd: we want to get the next command offset and not set it...
      s3:smbd: implement SMB2 Logoff
      tsocket: allow empty vectors at the end for tstream_writev()/readv()
      s3:smbd: SMB2 session ids are 64bit...
      s3:smbd: implement SMB2 Tree Connect
      s3:smbd: implement SMB2 Tree Disconnect
      s4:libcli/smb2: add some more SMB2 constants
      s4:libcli/smb2: use new SMB2_DIVELECT_REVISION constants
      s4:smb2srv: We only support SMB 2.002.
      s4:libcli/smb2: remove old dialect revision constants
      s3:smbd: return the correct security mode and capabilities in SMB2 Negotitate
      s3:smbd: add support for SMB2 signing
      s3:smbd: move SMB1 specific stuff into a substructure of smbd_server_connection
      s3:smbd: remove unused global 'orig_inbuf'
      SMB2-CONNECT: make it possible to specific the max write size via --option=torture:smb2maxwrite=12345
      s3:smbd: allow SMB2 only if we don't use security = share
      s3:smbd: remove old comment, we support SMB2 signing now
      s4:torture/libnetapi: fix netapi detection
      s3:smbd: move pending_auth_data list to struct smbd_server_connection
      s3:smbd: move negprot related globals to struct smbd_server_connection
      s3:smbd: move max_recv to struct smbd_server_connection
      s3:smbd: move already_got_session to struct smbd_server_connection
      s3:smbd: move some session specific globals to struct smbd_server_connection
      s3:smbd: move more session specific globals to struct smbd_server_connection
      s3:smbd: move tcon specific globals to struct smbd_server_connection
      s3:smbd: make make_connection_snum() non static
      s3:smbd: add a lazy mode for conn_new() and conn_free() for SMB2
      s3:smbd: create a user_struct for compat in SMB2 Session Setup
      s3:smbd: create a connection_struct in SMB2 Tree Connect
      s3:smbd: return more details in the SMB2 Tree Connect response
      s3:smbd: add smbd_smb2_fake_smb_request()
      s3:smbd: implement a simple version of SMB2 Create
      s3:smbd: implement SMB2 Close
      s3:smbd: implement SMB2 Flush
      s3:smbd: implement SMB2 Read
      s3:smbd: implement SMB2 Write
      nss_wrapper: call the nwrap_files_*() from nwrap_files_*_r()
      s3:smbd: fix potential fsp leak if print_fsp_open() fails
      s3:smbd: call set_current_service() when a SMB2 tcon will be used
      s3:smbd: ignore NTCREATEX_OPTIONS_SYNC_ALERT and NTCREATEX_OPTIONS_ASYNC_ALERT for SMB2 Create
      s3:smbd: add support for printers to SMB2 Create
      s3:smbd: implement smbd_smb2_request_error/done() as macros on top of the _ex() function
      s3:smbd: make smbd_server_connection_terminate() a macro
      s3:smbd: split smbd_smb2_read() into tevent_req based *_send()/_recv() functions
      s3:smbd: split smbd_smb2_write() into tevent_req based *_send()/_recv() functions
      s3:smbd: add missing return statements to the SMB2 read error cases
      s3:smbd: add missing return statements to the SMB2 write error cases
      nss_wrapper: fix segfault in nwrap_gr_copy_r()
      s3:smbd: add support for SMB2 Ioctl
      s3:smbd: add support for SMB2 Create on IPC$
      s3:smbd: add support for SMB2 Write on IPC$
      s3:smbd: add support for SMB2 Read on IPC$
      s3:smbd: add support for SMB2 Ioctl FSCTL_PIPE_TRANSCEIVE on IPC$
      s3:smbd: only setup the dyn iovec if a a dyn blob is given
      s3:smbd: fix the logic for compounded requests
      s3:smbd: keep the chain_fsp for SMB2 requests
      s3:smbd: add support for STATUS_BUFFER_OVERFLOW to SMB2 Ioctl
      s3:smbd: add support for SMB2 Ioctl FSCTL_DFS_GET_REFERRALS
      s3:smbd: fix the build in smb2_ioctl.c
      s3:smbd: split smbd_smb2_create() into a tevent_req based _send()/_recv() pair
      s3:smbd: split smbd_smb2_flush() into a tevent_req based _send()/_recv() pair
      s3:smbd: return the same things as Windows 7 for SMB2 Ioctl responses
      s3:smbd: FSCTL_PIPE_TRANSCEIVE on a none IPC$ share should give NOT_SUPPORTED
      async_sock: try fix the source4 build on FreeBSD, Solaris, SLES8
      talloc: try to fix the source4 build on AIX
      replace: add fallback define for IOV_MAX
      s3:Makefile.in: use LIBDL as make variable instead of a shell variable
      s4:libcli/smb2: prepare SMB2 signing code for compounded requests
      s4:libcli/smb2: add support sending compounded requests
      s4:libcli/smb2: only add the 1 byte dynamic buffer padding for non compounded requests
      s4:libcli/smb2: add smb2_transport_credits_ask_num()
      s4:smb2srv: remove the chained file handle on close
      s4:smb2srv: fix handling of multiple compounded requests
      s4:smb2srv: remove old TODO comment, we already check the seqnum
      s4:smb2srv: correctly fail remaining compounded requests after a failure
      s4:torture: add SMB2-COMPOUND test
      s4:smb2srv: don't allow the related flag on the first request in a compounded chain
      SMB2-COMPOUND: add some tests for invalid requests
      s3:smbd: don't include 1 byte padding for the dynamic buffer of SMB2 responses
      s3:smbd: for now ignore all non NBT Session Message requests for SMB2
      s3:smbd: more validation of the incoming SMB2 requests
      s3:smbd: skip file handle checks for SMB2 compounded requests
      s3:smbd: make sure we pad compounded SMB2 responses to 8 bytes
      s3:smbd: only pass the chained file handle for related compounded SMB2 requests
      s3:smbd: response with the same SMB2 flags as given by the client
      s3:smbd: only check the next_status for related requests
      s3:smbd: the SMB2-COMPOUND test shows that the related vs. unrelated flags isn't checked first
      s3:smbd: add smbd_smb2_send_oplock_break()
      s3:smbd: keep a list of outstanding SMB2 requests
      s3:smbd: add support for async interim SMB2 responses and prepare SMB2 cancel
      s3:smbd: send SMB2 interim responses for async calls
      tsocket/bsd: more correctly check if the cached tevent_fd is still valid
      tsocket/bsd: also ask for TEVENT_FD_READ when we want to write into a stream socket
      s3:pdb_ads: we need to make the fd for tldap/tsocket non-blocking
      s3:smbd: remove unused variables passed to parent_dirname()
      s3:onefs_open: remove unused variable passed to parent_dirname()
      s3:util: let parent_dirname() correctly return toplevel filenames
      s3:smbd: allow the offset to the path being 0 in SMB2 create
      s3:smbd: move global notify_changes_by_mid to smbd_server_connection
      s3:smbd: restore the 3.0.x bahavior of send_nt_replies()
      s3:smbd: push nttrans and trans2 responses with no data to the client
      s3:smbd: simplify the notify code a bit and always reply via change_notify_reply() -> send_nt_replies()
      s3:smbd: make change_notify_reply() more generic and hide send_nt_replies() behind a callback
      s3:smbd: add support for SMB2 Notify
      talloc: change TALLOC_MAGIC for version 2.0.0
      s3:smbd: add marshalling layer for SMB2 GetInfo support
      s3:smbd: add marshalling layer for SMB2 SetInfo support
      s3:smbd: add marshalling layer for SMB2 Break support (SMB 2.002 only)
      s3:smbd: add marshalling layer for SMB2 Find (QueryDirectory) support
      s4:libcli: move SMB2 lock flags to smb2_constants.h
      s3:smbd: add marshalling layer for SMB2 Lock support
      s4:heimdal: readd heimdal/lib/asn1/asn1parse.y which was parse.y before the last import
      SMB2-NOTIFY: windows7 uses a different maximum buffer size
      RAW-LOCK: fix the run against w2k3, w2k8, win7rc and samba3/4
      RAW-LOCK: fix a compiler warning and make a global static const
      s3:smbd: cancel all locks that are made before the first failure
      s4:auth/ntlmssp: let _unwrap fallback to seal if sign only doesn't work
      s3:smbd: fix parsing of invalid SMB2 requests.
      s3:smbd: fix parsing of SMB2 Lock requests with lock_count > 1
      s3:smbd: pass down the client pid to smbd_smb2_lock_send()
      s3:smbd: abstract the main locking logic from the LockingAndX parsing
      s3:smbd: make smbd_do_locking() non static
      s3:smbd: add support for SMB2 Lock
      s3:smbd: add missing return after reply_nterror()
      s3:smbd: split out smbd_do_qfilepathinfo() from call_trans2qfilepathinfo()
      s3:smbd: split calculation and mashalling of file index and access_mask
      s3:smbd: make smbd_do_qfilepathinfo() non static for use in SMB2
      s3:smbd: filter out SMB2 specific private query info levels for SMB1
      s3:smbd: add support for marshalling SMB2 FileAllInformation
      s3:smbd: add support for marshalling SMB2 FileFullEaInformation
      s3:smbd: start SMB2 GetInfo support for File*Information levels
      s3:smbd: split out smbd_do_setfilepathinfo() from call_trans2setfilepathinfo()
      s3:smbd: make smbd_do_setfilepathinfo() non static for use in SMB2 SetInfo
      s3:smbd: split out smbd_do_qfsinfo() from call_trans2qfsinfo()
      s3:smbd: make smbd_do_qfsinfo() non static for use in SMB2 GetInfo
      s3:smbd: close_file() handles named pipes just fine, no reason to return NOT_SUPPORTED
      s3:net: Fix Bug #6222. Default to DRSUAPI replication for net rpc vampire keytab
      torture/smb2: fix crash bugs in the new SMB2-DIR tests
      SMB2-CONNECT: unlink the test file at startup
      s4:libcli/smb2: add smb2_transport_credits_set_charge() to change the CreditsCharge value for the next request
      SMB2-GETINFO: test SMB2_ALL_EAS
      s3:make test: smbtorture from s3 needs to take the config file path via the SMB_CONF_PATH envvar
      s3:lib: map ENOSYS to NT_STATUS_NOT_SUPPORTED instead of NT_STATUS_ACCESS_DENIED
      s3:smbd: check quota access against sec_initial_uid() instead of 0
      s3:smbd: return NT_STATUS_INVALID_INFO_CLASS in SMB2 GetInfo
      s3:smbd: implement SMB2 GetInfo with Fs*Information
      s3:smbd: add support for SMB2 SetInfo File*Information
      torture/smb2: add missing new line to the new SMB2-DIR.FILE-INDEX test
      s3:ntvfs/posix: avoid unnesessary talloc_reference()
      s4:ntvfs/ipc: replace unnesessary talloc_reference() by a simple talloc_strdup()
      s4:heimdal_build: try to fix the build on Solaris
      s4:libnet: rename uint => uint32_t because uint is not portable
      s4:winbind: rename uint => uint32_t as uint isn't portable
      s3:tldap: fix the build - a void function should not return a value
      s3:libsmb: we need to include "includes.h" as first header to let code build on all platforms
      s3:smbd: try to fix a compiler warning on i386 : left shift count >= width of type
      tsocket: rename sa_len => sa_socklen, because sa_len is a macro on some platforms
      s4:heimdal_build: try to fix the build on Solaris
      s4:heimdal_build: tell heimdal we have inet_aton()
      tevent: try to fix the build on QNX qnx18 6.4.1 it doesn't have SA_RESTART defined
      s4:heimdal_build: try to fix the build on systems without ifaddrs.h
      s4:heimdal_build: predefine GSSAPI_DEPRECATED depending on the compiler version
      frsapi.idl: fix some unknown field names
      frsapi.idl: fill the frsapi_WriterCommand() function
      frsrpc.idl: almost complete the idl for the frsrpc_FrsSendCommPkt() function
      frsrpc.idl: make the chunk array in frsrpc_CommPktChunkCtr dynamic
      librpc: fix the merged build of ndr_frsrpc.c
      frsrpc.idl: add definition for frsrpc_FrsStartPromotionParent()
      frstrans.idl: add new DFS-R FrsTransport interface with dummy functions
      frsrpc.idl: add idl for frsrpc_FrsVerifyPromotionParent()
      frsrpc.idl: add definition of frsrpc_FrsNOP()
      s4:libcli/ldap: add support for new Recycle Bin Feature LDAP Controls
      s4:ldb: add support for the new Recycle Bin Feature LDAP controls
      s4:gensec/spengo: make sure we send the blob with the micListMech signature to the peer
      s4:gensec_gssapi: pass the correct oid to the gssapi layer.
      Revert "s4:kerberos Add 'net export keytab' command for wireshark decryption"
      pidl: add support for [string] on fixed size arrays.
      pidl: allow foo being on the wire after [length_is(foo)] uint8 *buffer
      librpc: rerun "make idl_full"
      frstrans.idl: add definition of frstrans_CheckConnectivity()
      frstrans.idl: add definition of frstrans_EstablishConnection()
      frstrans.idl: add definition of frstrans_EstablishSession
      frstrans.idl: add definition of frstrans_RequestUpdates()
      frstrans.idl: add definition of frstrans_RequestVersionVector()
      frstrans.idl: add definition of frstrans_AsyncPoll()
      frstrans.idl: add definition of frstrans_InitializeFileTransferAsync()
      s4:gensec/spnego: only generate the mechListMic when the server expects it
      pidl:Samba4/Python: fix mapType() => mapTypeName()
      s3:rpc_client: add dispatch_send/recv() to struct rpc_pipe_client
      pidl/Samba4.pm: allow an optional prefix passed to DeclLong()
      pidl:Samba3/ClientNDR: allow passing optional variable prefixes to ParseOutputArgument()
      pidl:Samba3/ClientNDR: rename ParseFunction => ParseFunctionSync and add ParseFunction as glue
      pidl:Samba3/ClientNDR: add support tevent_req based _send/recv() client functions
      librpc: rerun "make idl"
      s4:librpc: rename wins.idl => winsif.idl
      winsif.idl: add missing function calls
      winsif.idl: add definition of WinsRecordAction()
      winsif.idl: add definition of winsif_WinsStatus()
      winsif.idl: add definition of winsif_WinsTrigger()
      winsif.idl: add definition of winsif_WinsDoStaticInit()
      winsif.idl: add definition of winsif_WinsDoScavenging()
      winsif.idl: add definition of winsif_WinsGetDbRecs()
      winsif.idl: add definition of winsif_WinsTerm()
      winsif.idl: add definition of winsif_WinsBackup()
      winsif.idl: add definition of winsif_WinsDelDbRecs()
      winsif.idl: add definition of winsif_WinsPullRange()
      winsif.idl: add definition of winsif_WinsSetPriorityClass()
      winsif.idl: add definition of winsif_WinsResetCounters()
      winsif.idl: add definition of winsif_WinsWorkerThreadUpdate()
      winsif.idl: add definition of winsif_WinsGetNameAndAdd()
      winsif.idl: add definition of winsif_WinsGetBrowserNames_Old()
      winsif.idl: add definition of winsif_WinsDeleteWins()
      winsif.idl: add definition of winsif_WinsSetFlags()
      winsif.idl: add definition of winsif_WinsGetBrowserNames()
      winsif.idl: add definition of winsif_WinsGetDbRecsByName()
      winsif.idl: add definition of winsif_WinsStatusNew()
      winsif.idl: add definition of winsif_WinsStatusWHdl()
      winsif.idl: add definition of winsif_WinsDoScanvengingNew()
      .gitignore: ignore more generated files
      s4:auth: make sure we have elements returned at all in authsam_expand_nested_groups()
      util/asn1: fix potential memory leak in asn1_write_OID()
      librpc/ndr_drsuapi: fix a memory leak on ndr_push_drsuapi_DsReplicaOID()
      s4:build: make sure that we regenerate proto headers when source files change
      s4:libnet: use talloc_strdup() instead of talloc_reference()
      s4:tls: avoid using talloc_reference() in tls_init_server()
      s4:tls: avoid using talloc_reference() in tls_init_client()
      s4:ldap_server: the tls code steals the original socket on its own now
      s4:libcli/ldap: the tls code steals the original socket on its own now
      s4:ldap_server: make sure we shutdown the tls socket before stream_terminate_connection() removes the fd event
      s4:heimdal_build: define HEIMDAL_LOCALEDIR
      s3:smbd: don't ignore check_descend in get_dir_entry()
      epmapper.idl: avoid usage of 'pipe', this is a reserved word in IDL
      librpc: rerun 'make idl' after epmapper.idl changes
      librpc: fix callers after epmapper.idl changes
      pidl: fix formatting in idl.yp
      pidl: fix formatting in expr.yp
      pidl: parse idl 'pipe' typedefs, but print out a not supported message for now
      s3:smbd: add a smbd_server_connection pointer to connection_struct
      s3:smbd: conn_free_internal() can be static now
      s3:smbd: add generic smbd_dirptr_get_entry()
      s3:smbd: let get_dir_entry() use smbd_dirptr_get_entry()
      s3:smbd: implement get_lanman2_dir_entry() on top of smbd_dirptr_get_entry()
      s3:smbd: remove dirptr and dirpath from connection_struct
      s3:smbd: move dptr globals into struct smbd_server_connection
      s3:smbd: split the dir entry marshalling into smbd_marshall_dir_entry()
      s4:libcli/raw: also include smb2_constants.h into interfaces.h
      s4:libcli/raw: we don't need to include "smb.h" explicit
      s4:libcli: move SMB2 Find constants to smb2_constants.h
      s4:libcli/smb2: remove unused and redundant SMB2 security flags
      s4:libcli/smb2: move SMB2_GETINFO_* flags into smb2_constants.h
      s3:smbd: rename conn => sconn for smbd_server_connection structs
      s3:smbd: convert '\\' into '/' in SMB2 Create
      s3:winbindd: raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds.
      selftest: fix typo lock => lockdir
      selftest: configure "ncalrpc dir" for the client
      pidl: fix samba3-cli test after the async function were added
      pidl: fix parse_idl test after idl.yp changes
      s3:lib: map ECONNRESET to NT_STATUS_CONNECTION_RESET
      s3:smbd: correctly invalidate vuids when SMB2 is used
      s3:smbd: make sure we don't call conn_free() with a NULL pointer for SMB2
      s3:smbd: avoid 'goto out' in smbd_smb2_create_send()
      s3:smbd: as check_path_syntax() changes the string, we need to copy the string before
      libcli: move some common SMB and SMB2 stuff into libcli/smb/
      libcli/smb: move smb2_create_blob code to libcli/smb/
      s3:smbd: fix parsing of the SMB2 body
      s3:smbd: allow SMB2 Cancel to have the async flag set
      libcli/smb: add smb2_create_blob_find()
      s3:Makefile: build ../libcli/smb/smb2_create_blob.o as part of smbd
      tevent: add some more doxygen comments for tevent_req functions
      tevent: add tevent_req_cancel() infrastructure
      tevent: change version to 0.9.7 after adding tevent_req_cancel infrastructure
      s4:build: require tevent 0.9.7 with tevent_req_cancel()
      s3:smbd: implement SMB2 Cancel correctly.
      s3:smbd: add smbd_notify_cancel_by_smbreq()
      s3:smbd: add support for canceling SMB2 Notify calls.
      s4:librpc/rpc: fix DEBUG() message
      s3:smbd: parse context blobs in SMB2 Create
      s3:smbd: make smbd_check_open_rights() function non-static for use in SMB2
      s3:smbd: implement all SMB2 Create contexts except "ExtA"
      s3:smbd: add a generic smbd_dirptr_lanman2_entry() function
      s3:smbd: store a dirptr on the files_struct for SMB2 Query Directory
      s3:smbd: implement SMB2 Find (Query Directory)
      talloc: let talloc_total_blocks() and talloc_get_size() operate on the null_context
      talloc: report the size of reference handles as 0
      talloc: call return after abort, because an overloaded abort function might not exit
      talloc/testsuite: reset the globals after each subtest
      talloc/testsuite: add infrastructure to test aborts
      talloc/testsuite: report __location__ of testsuite failures
      talloc: let talloc_steal() only generate a warning if it's used with references
      talloc: add talloc_set_log_fn() and talloc_set_log_stderr()
      talloc/testsuite: use talloc_set_log_fn() and log to stdout
      talloc: remove unused build dependecies to samba
      talloc: remove ABI compat functions
      talloc: change version to 2.0.0
      talloc: add defines and functions for TALLOC_MAJOR/MINOR_VERSION
      talloc: update talloc.exports and talloc.signatures
      talloc: add --enable-talloc-compat1 to build a compat library for talloc 1.x.x
      s4:build: require talloc >= 2.0.0
      s4:cmdline: setup talloc log and abort functions
      s3:configure: require talloc >= 2.0.0
      s3:lib: setup talloc log and abort functions
      s4:heimdal_build: lib/hcrypto/evp-aes-cts.o belongs to HEIMDAL_HCRYPTO
      libcli/auth: remember schannel type in netlogon_creds_server_init()
      libcli/auth: remove some useless lines
      libcli/auth: add netlogon_creds_step_crypt() and netlogon_creds_first_step()
      s3:error_map: make NTSTATUS -> errno -> NTSTATUS mapping consistent for NT_STATUS_INVALID_PARAMETER
      s3:streams: check for :$DATA only in the backend (fix bug #6642)
      s3:smbd: add is_fake_file_path() that takes only the raw path as string
      s3:smbd: teach filename_convert() about fake files (2nd fix for bug #6642)
      tevent: change version to 0.9.8 after some critical bugs have been fixed
      s4:configure: require tevent >= 0.9.8
      lib/tdr: fix the build with --enable-automatic-dependencies
      s4:dsdb: correctly implement _dsdb_syntax_OID_oid_ldb_to_drsuapi()
      s4:drsuapi: add an incomplete DsAddEntry implementation
      s3:drsuapi: add a simple DsRemoveDSServer() implementation
      s4:repl_meta_data: remove unused code
      socket_wrapper: swrap_read() should use SWRAP_RECV* for swrap_dump_packet()
      s4:repl_meta_data: increment the attribute version with each change
      s4:heimdal_build: fix the build with --enable-automatic-dependencies
      s4:heimdal_build: fix one more problem with automatic dependecies
      lib/crypto: include aes.h into crypto.h
      libcli/auth: rewrite schannel sign/seal code to be more generic
      s4:heimdal/gssapi/krb5: set cred_handle in _gsskrb5_import_cred
      s4:torture: don't use 'pipe' as variable name it's a system call
      named_pipe_auth.idl: add infrastructure to pass delegated credentials
      librpc: rerun 'make idl'
      s4:service_named_pipe: accept delegated credentials
      libcli/named_pipe_auth: pass gssapi delegated credentials through the named pipe
      s4:rpc_server: export dcesrv_add_ep() so that torture tests can use it
      s4:torture: the spoolss notify test should listen on the ncacn_np endpoint
      s4:ntvfs_ipc: add real named pipe support
      s4:rpc_server: remove some now unused code
      drsblobs.idl: add decoding for repsFromTo2
      rerun: make idl
      drsblobs.idl: fix repsFromTo2 blob size calculation
      librpc: rerun 'make idl'
      s4:ldb: add ldb_parse_tree_copy_shallow() and change version to 0.9.7
      s4:build: require ldb 0.9.7
      dsdb/samdb: add resolve_oids module
      s4:provision: add the 'resolve_oids' on the top of the module stack
      blackbox/test_ldb.sh: test searching using OIDs instead of names for attributes and classes
      s4:dsdb/resolve_oids: check return values in recursion
      s4:dsdb/resolve_oids: add fast pathes for the common operations without oids
      tevent: make sure we don't set errno within the signal handler function.
      s3:lib/select: don't overwrite errno in the signal handler
      async_sock: return -1/EPIPE if we're getting an end of file on read.
      s3:winbindd: avoid writing to a closed connection and generate SIGPIPE
      s3:secrets_schannel: revert to using version 1
      Revert "r20074: this values seem to be typos in drsuapi"
      s3:rpc_server: we need to make a copy of my_name in serverinfo_to_SamInfo_base()
      Revert "s3:winbindd: use a tcp connection for lsa in case lookup_names/lookup_sids doesn't work over ncacn_np"
      s3:rpc_client: don't randomly fragment rpc pdu's in developer mode
      s4:schannel: fix some compiler warnings
      s3:winbindd_cm: don't invalidate the whole connection when just samr gave ACCCESS_DENIED
      tdb: rename 'struct list_struct' into 'struct tdb_record'
      libcli/auth: don't leak the ldb_msg in schannel_store_session_key_ldb()
      libcli/auth: fix memory leak in schannel_creds_server_step_check_ldb()
      s4:gensec/schannel: remove unused talloc_reference() in schannel_update()
      libcli/auth: initialize creds in netlogon_creds_client_init_session_key()
      s4:dsdb/partition_init: don't leak a talloc_new() in case we have no data yet
      s4:loadparm: don't leak the names of all shares in each lp_service() call
      s4:dcesrv_samr: always use mem_ctx as initial parent for samr_*_state
      s3:configure: only check for gpfs_gpl.h
      tsocket: remove prototype of non-existing tsocket_address_inet_set_broadcast()
      tsocket_bsd: return -1 and set errno to ENAMETOOLONG if the unix path is too long
      tsocket: rewrite tsocket_guide.txt to reflect the current APIs
      s4:kdc: remove unused struct kpasswd_socket
      s4:torture/drs: move intern/ => unit/
      NET-API-BECOME-DC: resolve the host name to an address before calling
      s4:heimdal_build: allow flex-2.5.35 with bison-2.3
      s3:libsmb: avoid passing a function call as function parameter
      README.Coding: fix error in "good example"
      README.Coding: add section about usage of helper variables
      selftest: Fix unexpected failure handline in Subunit/Filter.pm
      selftest: make sure we don't buffer any output
      s4:selftest: place summary file into selftest-prefix
      s4:selftest: allways start with $(ST_RM)
      s4:selftest: use "dc:local" instead of a hardcoded config file
      netlogon.idl: fix ndr_pull_netr_DatabaseRedo()
      librpc: rerun "make idl"
      s4:dsdb/schema: let schema_supclasses() return the correct pointer
      s4:selftest: add "rpc.netlogon.*.GetDomainInfo"
      s4:selftest: avoid running the slow BASE-DELAY-WRITE test on the cifs proxy share
      s4:selftest: for now skip the BASE-DELAY-WRITE test completely
      selftest/output/plain.pm: report the testuite name on error
      selftest: ignore empty lines in knownfailures
      s4:torture/test_gentest.sh: make use of the PREFIX argument
      s4:selftest: fix logic for --option=torture:progress=no
      s4:ntvfs_generic: check for valid SMB2_LOCK flags
      SMB2-LOCK: make use of torture_assert_*()
      s4:selftest: mark samba4.smb2.lock.*.VALID-REQUEST as known failure
      selftest: Subunit/Filter.pm only allow expected failures without errors
      tdb: always set tdb->tracefd to -1 to be safe on goto fail
      tdb: add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior
      tdb: change version to 1.2.0 after adding TDB_*ALLOW_NESTING
      librpc/ndr: remember the highest offset we parsed with relative pointer buffers
      pidl:NDR/Parser.pm: update ndr_pull->relative_highest_offset after handling relative pointers
      Revert "Work around ndr_unpack failing on structures with relative pointers."
      librpc: rerun "make idl"
      s4:lib/ldb: change version to 0.9.9 after some critical index fixes
      s4:min_versions: require ldb 0.9.9
      RAW-PING-PONG: use timeval_current/timeval_elapsed instead of start_timer/end_timer
      s3:dbwrap_torture: use timeval_current/timeval_elapsed instead of start_timer/end_timer
      s3:torture/nbio: use timeval_current/timeval_elapsed instead of start_timer/end_timer
      s3:torture: use timeval_current/timeval_elapsed instead of start_timer/end_timer
      pidl:NDR/Parser: $size can be 'foo / 2' so we need to add '(' and ')'
      pidl:Samba3/ClientNDR: $size can be 'foo / 2' so we need to add '(' and ')'
      librpc: rerun "make idl"
      s4:smb_server/smb2: don't reset highest_smb2_seqnum on SMB2 Cancel
      s3: require tdb 1.1.7 with tdb_check()
      s3: let tdb_validate_child() use tdb_check()
      s3: let netsamlogon_cache_init() use tdb_check()
      s3: let gencache_init() use tdb_check()
      s4:selftest: use ${selftest_prefix} instead of hardcoded st/
      RAW-STREAMS: convert failing tests to torture api
      s4:selftest: run RAW-STREAMS again
      s4:selftest: skip SMB2-ACLS for now
      librpc/ndr: add missing prototypes for relative_short functions
      tsocket: add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr()
      s4:prog_guide4.txt: remove obsolete comments
      s4:gensec: allow clearing local and remote address by passing NULL
      s4:kdc: convert UDP based communication to tdgram_context
      s4:kdc: setup the local and remote tsocket_address at accept time
      tevent: prefix types and defined with tevent_ and TEVENT_
      tsocket: allow AF_UNIX sockaddrs smaller than sizeof(sockaddr_un)
      tsocket: only copy the specific part of sockaddr*
      s4:lib/socket: add helpers functions to convert between socket_address and tsocket_address
      s4:lib/socket: add socket_get_{remote|local}_addr() to get a tsocket_address instead of a socket_address
      s4:smb_server: fix mixing socket_address and tsocket_address
      s4:smbd: hold tsocket_addresses on the stream_connection
      s4:kdc: use the remote and local address from the stream_connection struct
      s4:gensec: change gensec_update_send/recv to tevent_req
      s4:auth: change auth_check_password_send/recv to tevent_req
      s4:ntlmssp: fix whitespaces in ntlmssp.h
      s3:ntlmssp: rename NTLM_MESSAGE_TYPE into ntlmssp_message_type
      s3:ntlmssp: fix spelling
      s3:ntlmssp: fix whitespace in ntlmssp.h
      s3:ntlmssp: remove unused ref_count from ntlmssp_state
      s3:ntlmssp: remove unused ntlmssp_stored_response()
      s3:ntlmssp: move some indentation in ntlmssp_sign.c
      s3:ntlmssp: remove unused p24 variable from ntlmssp_sign_init()
      s4:auth: remove autogenerated auth/ntlm/auth_proto.h
      s4:auth: make auth_challenge_may_be_modified() public
      s4:auth: add auth_get_server_info_principal() prototype to auth.h
      s3:ntlmssp: change get_challange() to return NTSTATUS
      s4:auth/ntlmssp: let get_challenge() return a NTSTATUS and fill a stack buffer
      s4:ntlmssp_server: remove unused variable
      s4:ntlmssp: use data_blob_null in ntlmssp_server_auth()
      s4:ntlmssp_server: clear session key in ntlmssp_server_preauth()
      s4:ntlmssp_server: don't use mem_ctx in auth_ntlmssp_check_password()
      s4:ntlmssp_server: don't use a mem_ctx for ntlmssp_server_auth()
      s4:ntlmssp_server: always call ntlmssp_server_postauth() and decide there if it's a noop
      s4:ntlmssp: remove mem_ctx from check_password() callback to match s3
      s3: Happy New Year 2010
      s4: Happy New Year 2010
      blackbox/test_export_keytab.sh: use VALGRIND for samba4kinit
      blackbox/test_export_keytab.sh: correctly remove temporary files
      s4:dsdb/repl: convert dreplsrv_out_drsuapi_send/recv to tevent_req
      tdb: fix standalone 'make installdocs'
      s4:dsdb/repl: convert dreplsrv_op_pull_source_send/recv to tevent_req
      libcli/util: add tstream_read_pdu_blob_send/recv
      s4:kdc: the ->process function returns "bool"
      s4:kdc: use LIBSAMBA_TSOCKET
      s4:ldb: be more strict in parsing ldb time strings
      s4:dsdb/common: let samdb_msg_add_uint64() call samdb_msg_add_int64()
      s4:dsdb/common: let samdb_msg_add_uint() call samdb_msg_add_int()
      s4:ldb_msg: first try to decode integers as signed and then fallback to unsigned
      s4:dsdb/common: fix major bug in lsa_BinaryString to ldb_val conversation.
      s4:dsdb/repl: change dreplsrv_op_notify_send/recv() to tevent_req
      s4:dsdb/repl: reorder dreplsrv_op_notify* functions
      s4:ldb/tests: do a "schemaUpdateNow" after creating a new attribute in ldap_schema.py
      s4:dsdb/schema_load: add a TODO about schema reloading
      s4:dsdb/resolve_oids: also resolve oid in search attribute list
      s4:dsdb/schema: add dsdb_syntax_DN_STRING_* wrappers
      s4:dsdb/schema: add inftrastructure for dsdb_validate_ldb()
      s4:dsdb: add validate_update module
      s4:dsdb/schema: add dsdb_syntax_BOOL_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_INT32_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_INT64_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_NTTIME_UTC_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_NTTIME_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_DATA_BLOB_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_UNICODE_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_PRESENTATION_ADDRESS_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_DN_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_DN_BINARY_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_DN_STRING_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_OID_validate_ldb()
      s4:dsdb: use validate_update module
      s3:smbldap: add smbldap_talloc_first_attribute()
      s3:pdb_ldap: restore Samba 3.0.x behavior and use the first "uid" value.
      s4:smbtorture: add BASE-BENCH-HOLDOPEN
      s4:winsrepl.idl: add random interface uuid
      s4:libcli: remove unneeded talloc_reference() usage
      s4:auth_sam: avoid usage of data_blob_talloc_reference() and copy the session keys
      lib/util: remove data_blob_talloc_reference()
      security.idl: add wellknown TrustedInstaller SID
      librpc: rerun 'make idl'
      libcli/nbt: fix ndr_pull/push_wrepl_nbt_name()
      libcli/nbt: fix off-by-one bug in ndr_pull_wrepl_nbt_name()
      libcli/nbt: fix ndr_push_nbt_string() string labels with a length of 63 (0x3F) are allowed
      s4:wrepl_server: truncate the scope of a netbios name to 237 bytes as Windows 2008 does
      s4:winsserver: reject name registrations with a scope length > 237
      s4:NBT-WINSREPLICATION: use an array of nbt_names to loop over different names
      s4:NBT-WINSREPLICATION: fix compiler warnings
      s4:NBT-WINSREPLICATION: test replication with names including scopes
      s4:NBT-WINS: pass the expected rcode of the name registration to the test code
      s4:NBT-WINS: test large scopes
      s4:NBT-WINSREPLICATION: don't mark a local variable as static
      s3:libsmb: don't reuse the callers stype variable in cli_NetServerEnum()
      s3:passdb: fix a type Domain Users has RID -513
      libreplace: add check for NSS_WRAPPER_DISABLE similar to SOCKET_WRAPPER_DISABLE
      s4:heimdal_build: allow flex-2.5.35:bison-2.4.1 to regenerate files
      s4:heimdal: regerenate files
      s3: shortcut gid_to_sid when "ldapsam:trusted = yes"
      s3:passdb: speed up pdb_get_group_sid()
      s3:pdb_ldap: try to build the full unix_pw structure with ldapsam:trusted support
      s3:pdb_ldap: optimize ldapsam_alias_memberships() and cache ldap searches.
      s3:pdb_ldap: don't search for the users primary group, if we already know it
      s3:nmbd: also listen explicit on the subnet broadcast addresses
      s3:nmbd: change "nmbd:bind explicit broadcast" into "nmbd bind explicit broadcast"
      s3:docs-xml: document "nmbd bind explicit broadcast"
      s3:smbd: rename api_RNetServerEnum => api_RNetServerEnum2
      s3:smbd: add/improve some DEBUG messages in api_RNetServerEnum2()
      s3:smbd: implement api_RNetServerEnum3
      s3:libsmb: fix NetServerEnum3 rap calls.
      s3:passdb: only use gid_to_sid() result if the result is a group of our local sam
      s3:selftest: make selftest requires bash for now
      s3:smbd: Fix really ugly bool vs. int bug!!!
      s3:smbd: use StrCaseCmp() instead of strcasecmp
      s4:net/drs: use the full path to "utils/net/drs/net_drs*.h"
      s4:net_drs_bind: make some more stuff static
      socket_wrapper: also ignore AF_INET6 in swrap_setsockopt()
      tsocket/bsd: fix do_bind logic for AF_INET
      tsocket/bsd: fix bug #7140 use calculated sa_socklen for bind() in tstream_bsd_connect_send()
      tsocket/bsd: fix bug #7140 autodetect ipv4 and ipv6 based on the remote address if the local address is any
      tsocket/bsd: set IPV6_V6ONLY on AF_INET6 sockets
      tsocket/bsd: fix bug #7115 FreeBSD includes the UDP header in FIONREAD
      tsocket/bsd: fix comment in tdgram_bsd_recvfrom_handler()
      librpc/ndr_drsblobs: use ndr_push_relative_ptr2_start()/_end()
      librpc/ndr_krb5pac: use ndr_push_relative_ptr2_start()/_end()
      librpc/ndr: make ndr_push_relative_ptr2() static
      libndr: give an error when ndr_push_relative_ptr2_start()/_end() is used with the RELATIVE_REVERSE flag
      libndr: implement LIBNDR_RELATIVE_REVERSE handling
      libndr: for now align reverse relative pointers to 2 bytes by default.
      libndr: fix ndr_size_* calculation with relative reverse buffers
      spoolss: use subcontext in NDR_SPOOLSS_PUSH_ENUM_OUT macro.
      ndr_spoolss_buf: use LIBNDR_FLAG_NO_NDR_SIZE in NDR_SPOOLSS_SIZE_*
      spoolss: make all security descriptors and devicemodes 4 byte aligned and add missing subcontexts.
      librpc/ndr: don't overwrite the content in ndr_push_relative_ptr2_end()
      s3:winbindd: never mark external domains as internal!
      s3:selftest: $WORKGROUP doesn't exist, we should use $DOMAIN
      s3:cli_netlogon: keep the the correct negotiate_flags on the cli->dc structure
      s3:spoolss: construct the devmode the same way for level 2 and 8
      s3:rpc_transport_np: handle trans rdata like the output of a normal read
      s3:test_wbinfo_s3: test --check-secret and --change-secret
      s3:selftest: make wbinfo_s3 work on the "member" server too.
      s3:selftest: handle spaces in test names
      s4:libnet: use a connected CLDAP socket.
      s4:torture: use a connected CLDAP socket.
      s4:RPC-DSSYNC: pass the ip address to the cldap code instead of a name
      lib/util: add generate_random_password()
      s4:libnet: use generate_random_password()
      s4:torture/rpc: use generate_random_password()
      s4:pyglue: add generate_random_password()
      s4:provision: use generate_random_password()
      libcli/auth: print the error in the debug message
      s4:dsdb/schema: fix validation of DNs
      s4:ldb_dn: reset dn->ext_comp_num in ldb_dn_explode()
      s4:ldb_dn: remove dn->ext_linearized when ext_components is modified.
      s4:ldb_dn: fix an uninitialized variable (found by make valgrindtest)
      selftest/gdb_backtrace: call "info locals" too
      pidl:NDR/Client.pm: generate explicit _recv functions
      s4:libnet_become_dc: make use of explicit dcerpc_*_recv functions
      s4:libnet: make use of explicit dcerpc_*_recv functions
      s4:dsdb/repl: make use of explicit dcerpc_*_recv functions
      s4:winbind: make use of explicit dcerpc_*_recv functions
      s4:torture/rpc: make use of explicit dcerpc_*_recv functions
      s4:librpc/rpc: make use of explicit dcerpc_*_recv functions
      s4:drepl_notify: don't look at the internals of 'struct rpc_request'
      s4:drepl_out_helpers: don't look at the internals of 'struct rpc_request'
      s4:libnet_become_dc: don't look at the internals of 'struct rpc_request'
      s4:RPC-ECHO: don't look at the internals of 'struct rpc_request'
      s4:RPC-NETLOGON: remove useless rpc callback
      s4:rpc_server/remote: do async calls
      s4:RPC-ECHO: don't ignore errors in the Sleep test now that we support async rpc over ncacn_np
      s3:configure: add --enable-as-needed
      s3:winbindd: add DEBUG(10,...) for the end of each top level
      libcli/auth: add a const to des_crypt112_16()
      s4:torture/nbt: avoid the usage of wrepl_pull_table_send()
      s4:libcli/wrepl: avoid neested named structures
      s4:libcli/wrepl: use UTIL_TEVENT
      s4:libcli/wrepl: convert wrepl_pull_names_send to tevent_req
      s4:libcli/wrepl: convert wrepl_pull_table_send to tevent_req
      s4:libcli/wrepl: convert wrepl_associate_send to tevent_req
      s4:libcli/wrepl: convert wrepl_connect_send to tevent_req
      s4:libcli/wrepl: convert wrepl_associate_stop_send to tevent_req
      s4:libcli/wrepl: add my copyright
      s4:torture/nbt: use wrepl_request() instead of wrepl_request_send() followed by wrepl_request_recv()
      s4:torture/nbt: use wrepl_associate_stop() instead of build the request by hand
      s4:libcli/wrepl: move wrepl_request_send/recv => wrepl_request_internal_send/recv
      s4:libcli/wrepl: rename enum wrepl_request_state => enum wrepl_request_internal_state
      s4:libcli/wrepl: implement wrepl_request_send as a tevent_req based wrapper
      s4:libcli/wrepl: make struct wrepl_request private to winsrepl.c
      s4:libcli/wrepl: add wrepl_socket_is_connected()
      s4:wrepl_out_helpers: add a WREPLSRV_PUSH_NOTIFY_STAGE_WAIT_UPDATE stage
      s4:libcli/wrepl: rewrite the low level request handling to use tevent_queue and tstream_context
      lib/util: change samba_runcmd() to use tevent_req _send/_recv
      s4:dsdb/dns: change callers of samba_runcmd()
      s4:rpc_server/srvsvc: remove unused ZERO_STRUCT(r->out);
      s4:rpc_server/wkssvc: avoid ZERO_STRUCT(r->out) and use already allocated [out,ref] memory
      s4:rpc_server/wkssvc: remove unneeded talloc_reference()
      s4:rpc_server/wkssvc: don't reset [out,ref] pointer to 0
      s4:build/m4/public.m4: add realname argument to SMB_BUILD_LIBRARY()
      nsswitch: build libnss_winbindd.so only for the non merged build
      nsswitch: don't use socket_wrapper for winbind client code
      nsswitch: build libnss_winbind.so with SOVERSION = 2
      drsuapi.idl: finish drsuapi_DsGetNT4ChangeLog idl
      librpc: rerun make idl
      RPC-DSSYNC: fix the build after idl changes
      selftest: let the client also use the dns_host_file
      s4:rpc_server/drsuapi: don't reset [out,ref] pointer to NULL in dcesrv_drsuapi_DsRemoveDSServer()
      NET-API-BECOME-DC: convert to torture api
      s4:selftest: move samba4.net.api.become.dc from skip to knownfail
      s4:torture/libnet/libnet_user.c: fix double free in error path
      RPC-DSSYNC: handle DCERPC_FAULT_OP_RNG_ERROR as not supported for DsGetNT4ChangeLog()
      drsuapi.idl: don't mark drsuapi_DsGetMemberships as [todo]
      librpc: rerun make idl
      pidl:Samba/Python: don't generate methods for functions marked as [todo]
      pidl:Samba4/NDR/Client: don't generate client stubs for function marked as [todo]
      s4:librpc/rpc: add very basic dcerpc_binding_handle infrastructure
      s4:librpc/rpc: prepare dcerpc dependecies before pidl changes
      pidl:Samba4/NDR/Client: generate stubs for dcerpc_binding_handle abstraction
      s4:dsdb/repl: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet: keep a dcerpc_binding_handle for samr and lsa
      s4:libnet/group*: make use of tevent_req based dcerpc_binding_handle stubs
      s4:libnet_become_dc: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet_unbecome_dc: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet/libnet_domain.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet/libnet_group.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet/libnet_lookup.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet/libnet_user.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet/userinfo.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet/usernam.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet/libnet_rpc.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_async_helpers.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_cmd_getdcname: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_cmd_list_trustdom.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_cmd_usersids.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_connect_lsa.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_connect_sam.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_dom_info_trusted.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_init_domain.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_sam_logon.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:torture/rpc: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:librpc/rpc/dcerpc_schannel.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:librpc/rpc/dcerpc_util.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libcli/composite: get rid of composite_continue_rpc()
      s4:dcom: add a comment about unused code.
      pidl:Samba4/NDR/Client: make the old rpc_request style async functions static
      s4:lib/registry/rpc: convert to use dcerpc_binding_handle stubs
      s4:rpc_server/spoolss: make use of dcerpc_binding_handle stubs
      s4:client: make use of dcerpc_binding_handle stubs
      s4:libcli/util/clilsa.c: make use of dcerpc_binding_handle stubs
      s4:libnet/libnet_join.c: make use of dcerpc_binding_handle stubs
      s4:libnet/libnet_passwd.c: make use of dcerpc_binding_handle stubs
      s4:libnet/libnet_samsync.c: make use of dcerpc_binding_handle stubs
      s4:libnet/libnet_share.c: make use of dcerpc_binding_handle stubs
      s4:libnet/libnet_time.c: make use of dcerpc_binding_handle stubs
      s4:torture/ntp: make use of dcerpc_binding_handle stubs
      s4:torture/libnet: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/echo.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/dfs.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/spoolss.c: fix compiler warnings
      s4:tortore/libnet: fix crash bugs because of incorrect function prototypes
      talloc_stack: make sure we never let talloc_tos() return ts->talloc_stack[-1]
      talloc_stack: reset stackframe pointers to NULL
      s3:smbd: make sure we always have a valid talloc stackframe
      s4:torture/rpc/dsgetinfo.c: fix name resolving for ldap_url
      Revert "Revert "s4-smbtorture: skip extended SetValue test against Samba (both dont survive).""
      s4:torture/rpc/unixinfo.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/drsuapi*: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/dssync.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/dsgetinfo.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/srvsvc.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/wkssvc.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/atsvc.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/svcctl.c: make use of dcerpc_binding_handle stubs
      s4:tortore/rpc/eventlog.c: rename variable 'b' => 'br'
      s4:torture/rpc/eventlog.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/epmapper.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/initshutdown.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/oxidresolve.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/remact.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/mgmt.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/autoidl.c: make use of dcerpc_binding_handle stubs
      s4:tortore/rpc/spoolss.c: fix compiler warning
      s4:torture/rpc/spoolss.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/spoolss_notify.c: fix compiler warnings
      s4:torture/rpc/spoolss_notify.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/spoolss_win.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/winreg.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/remote_pac.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/lsa*: make use of dcerpc_binding_handle stubs
      s4:librpc/rpc: initialize p->binding_handle in dcerpc_secondary_context()
      s4:torture/rpc/samr.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/testjoin.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/schannel.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/netlogon.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/samlogon.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/bench.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/dssetup.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/samr_accessmask.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/samsync.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/samba3rpc.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/handles: check the correct last_fault_code
      s4:torture/rpc/handles.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/frsapi.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/ntsvcs.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/browser.c: make use of dcerpc_binding_handle stubs
      s4:utils/net/drs: make use of dcerpc_binding_handle stubs
      pidl:Samba4/Python: remove compiler warnings when using -Wc++
      pidl:Samba4/Python: remove compiler warnings
      s4:librpc/rpc: let pyrpc make use of dcerpc_binding_handle stubs
      pidl:Samba4/Python: make use of dcerpc_binding_handle stubs
      libcli/util: add more NT_STATUS_RPC_* defines
      s3:libsmb/nterr.c: fix/add NT_STATUS_RPC_* codes
      s3:librpc: remove unused stuff
      s4:librpc/rpc: add NCACN_INTERNAL from s3
      lib/util: add allocate_anonymous_shared()
      s3:libsmb: add a smb_signing_init_ex() function
      s3:smbd: add an option to skip signings checks srv_check_sign_mac for trusted channels
      s3:smbd: add smbd_[un]lock_socket() dummies
      s3:smbd: smbd_[un]lock_socket() while accessing the socket to the client
      s3:smbd: send keepalive packets under the socket lock
      s3:smbd: let reply_readbraw_error use the locked socket
      s3:smbd: pass down trusted_channel via receive_smb_talloc()
      s3:param: add "async smb echo handler" option
      s3:smbd: add echo handler information to struct smbd_server_connection
      s3:smbd: setup a shared memory area for the signing state
      s3:smbd: don't use recvfile if the echo handler is active
      s3:smbd: disable sendfile if the echo handler is active
      s3:smbd: disallow readbraw and writebraw if the echo handler is active
      s3:smbd: disable SMB encryption when the echo handler is active
      s3:smbd: don't allow SMB2 if the async echo handler is active
      dcerpc.idl: add nca_s_* status codes from the DCE 1.1 specification
      librpc/rpc: fix dcerpc_errstr() to handle all nca_s_* status codes and fallback to WERROR codes
      s3:librpc/rpc: move prototypes to dcerpc.h
      s4:libnet: don't include librpc/rpc/dcerpc.h directly
      pidl:Samba4/Python: librpc/rpc/dcerpc.h isn't needed anymore
      s4:lib/messaging: pymessaging needs libndr.h
      s4:librpc/rpc/pyrpc.h: librpc/rpc/dcerpc.h isn't needed anymore
      s4:ntlmssp: add a callback_private pointer to gensec_ntlmssp_state
      s4:ntlmssp: add definition of gensec_ntlmssp_context
      s4:ntlmssp: create a gensec_ntlmssp_context between gensec_security and ntlmssp_state
      s4:ntlmssp: remove backend specifix stuff from (gensec_)ntlmssp_state
      s4:ntlmssp: remove gensec_security from (gensec_)ntlmssp_state
      s4:ntlmssp: keep struct gensec_ntlmssp_context in gensec_security->private_data
      s4:ntlmssp: add NTLMSSP_FEATURE_* flags from s3
      s4:ntlmssp: remove more whitespaces...
      s4:ntlmssp: replace server_role by a server.is_standalone in (gensec_)ntlmssp_state
      s4:ntlmssp: calculate server names at startup and store them in (gensec_)ntlmssp_state->server.*
      s4:ntlmssp: remove server_name from (gensec_)ntlmssp_state and fill the server.* fields also for the client
      s4:ntlmssp: make user a 'const char *' in (gensec_)ntlmssp_state
      s4:ntlmssp: split gensec_ntlmssp_sign_packet() and ntlmssp_sign_packet()
      s4:ntlmssp: split gensec_ntlmssp_check_packet() and ntlmssp_check_packet()
      s4:ntlmssp: split gensec_ntlmssp_seal_packet() and ntlmssp_seal_packet()
      s4:ntlmssp: split gensec_ntlmssp_unseal_packet() and ntlmssp_unseal_packet()
      s4:ntlmssp: rename gensec_ntlmssp_state => ntlmssp_state
      s4:ntlmssp: remove unused server_multiple_authentications feature.
      s4:ntlmssp: keep a ntlmssp_server_auth_state to transport variables from preauth to postauth hooks
      s4:ntlmssp: move encrypted_session_key to ntlmssp_server_auth_state
      s4:ntlmssp: move NTLM2 session_nonce to ntlmssp_server_auth_state
      s4:ntlmssp: move doing_ntlm2 to ntlmssp_server_auth_state
      s4:ntlmssp: fix some formating
      s4:ntlmssp: use a 'bool ok' helper variable to make the code more readable
      s4:ntlmssp: inline ntlmssp_weakend_keys()
      s4:ntlmssp: rename calc_ntlmv2_key => calc_ntlmv2_key_talloc
      s4:ntlmssp: add calc_ntlmv2_key() from source3
      s4:ntlmssp: make use of calc_ntlmv2_key() for seal keys
      s4:ntlmssp: avoid usage of calc_ntlmv2_key_talloc()
      s4:ntlmssp: copy dump_arc4_state() from source3
      s4:ntlmssp: make use of dump_arc4_state()
      s4:ntlmssp: move sign/seal states to a private ntlmssp_crypt_state union
      s3:ntlmssp: use uint8_t in calc_ntlmv2_key()
      s3:ntlmssp: make use of C99 types in ntlmssp_sign.c
      s3:ntlmssp: replace server_role by a server.is_standalone in ntlmssp_state
      s3:ntlmssp: pass names to ntlmssp_server_start() and store them in ntlmssp_state
      s3:ntlmssp: remove server_name from ntlmssp_state and fill the server.* fields also for the client
      s3:ntlmssp: pass names and use_ntlmv2 to ntlmssp_client_start() and store them
      s3:ntlmssp: remove unused get_global_myname() and get_domain() from ntlmssp_state
      s3:ntlmssp: add some consts
      s3:ntlmssp: rename void *auth_context; into void *callback_private;
      s3:ntlmssp: make send_seal_key and recv_seal_key local variables
      s3:ntlmssp: inline ntlmssp_weaken_keys()
      s3:ntlmssp: fix some formating
      s3:ntlmssp: use a 'bool ok' variable to make the code more readable
      s3:ntlmssp: make whole_pdu const for ntlmssp_[un]seal_packet()
      s3:ntlmssp: add const for *sig in ntlmssp_unseal_packet()
      s3:ntlmssp: move sign/seal states to a private ntlmssp_crypt_state union
      s3:ntlmssp: remove unused ntlmssp_set_workstation()
      s3:ntlmssp: use client.netbios_name instead of workstation
      s3:ntlmssp: use c99 types
      s4:libcli/wrepl: correctly remove the tstream_context when the connection is dead
      s3:passdb: avoid sid_to_gid() if the sid is "domain users"
      s4:torture/rpc/echo.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/echo.c: remove NTSTATUS status variables
      s4:torture/rpc/samsync.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/lsa.c: add explicit check for NTSTATUS r.out.result
      s4:libnet/libnet_join.c: add explicit check for NTSTATUS r.out.result
      s4:libnet/libnet_samsync.c: add explicit check for NTSTATUS r.out.result
      s4:libnet/libnet_passwd.c: add explicit check for NTSTATUS r.out.result
      pidl:Samba4/Client: don't mix rpc and application NTSTATUS errors anymore for the new bindings
      s3:libsmb: don't let cli_shutdown() segfault with a NULL cli_state
      s3:libsmb: add cli_state_is_connected() function
      s3:rpc_transport_np: use cli_state_is_connected() helper
      s3:rpc_transport_np: add comment about bad usage in a destructor
      s3:rpc_client: don't mix layers and keep a reference to cli_state in the caller
      s3:rpc_client: add rpccli_is_connected()
      s3:rpc_client: add set_timeout hook to rpc_cli_transport
      s3:rpc_client: return at least 10 sec as old timeout in rpccli_set_timeout() instead of 0
      s3:winbindd_cm: use cli_state_is_connected() helper function
      s3:winbindd_cm: use rpccli_is_connected() helper function
      s3:winbindd: consistently use TALLOC_FREE(conn->foo_pipe) is we create a new connection
      s3:winbindd_cm: invalidate connection if cm_connect_netlogon() fails
      s3:winbindd_reconnect: don't only reconnect on NT_STATUS_UNSUCCESSFUL
      s3:rpc_client: remove unused code, we handle transport failures in the transport layer now
      s3:rpc_client: remove more unused code
      s3:winbindd: correctly retry if the netlogon pipe gets disconnected during a logon call
      s3:libads: retry with signing after getting LDAP_STRONG_AUTH_REQUIRED
      s3:smbd: handle SMB2 in deadtime_fn() and avoid disconnecting non idle clients
      s3:winbindd: make sure we don't try rpc requests against unaccessable domains
      s3:winbindd: only set child_domain in the child
      s3:winbindd: correctly invalidate the cached connection
      s3:winbindd: fix problems with SIGCHLD handling (bug #7317)
      s3:winbindd: remove unused variables
      build: make use on_results=True for some build rules
      Revert "socket-wrapper: not all systems have FIONREAD defined"
      s3:winbindd: make "smbcontrol winbindd validate-cache" reliable again
      s4:heimdal_build/wscript_build: create a HEIMDAL_ROKEN*_SOURCE variable
      s4:heimdal_build/wscript_build: remove useless dependecies of HEIMDAL_ROKEN_H
      s4:heimdal_build/wscript_build: we don't need separate subsystems just for optional source files
      lib/torture: also print intergers as HEX values in the torture_assert macros
      dcerpc.idl: fix typo DERPC_ => DCERPC_
      librpc: rerun make idl
      librpc/rpc: fix typo DERPC_ => DCERPC_
      s4:librpc/rpc: correctly initialize last_fault_code for bind and alter_context requests
      s4:torture/rpc/lsa.c: add test_lsa_OpenPolicy2_ex() that takes an expected status
      RPC-ALTERCONTEXT: let the test pass against w2k3 and w2k8
      s4:selftest: mark some smb2.compound tests as knownfail
      selftest: make sure filter-subunit and format-subunit use unbuffered io
      lib/replace: create a LIBREPLACE_H subsystem
      s4:heimdal_build/wscript_build: use LIBREPLACE_H for asn1_compile and compile_et
      s4:heimdal_build/wscript_build: remove more network related stuff from HEIMDAL_ROKEN_H
      s4:configure: generate Makefile from Makefile.in
      s4:autogen-waf: generate 'Makefile' instead of 'makefile'
      lib/replace/wscript: inline LIBREPLACE_GETPASS into 'replace'
      lib/replace/wscript: implement the same getpass detection logic as the autoconf version
      lib/replace/wscript: rename REPLACE_H_SOURCE => REPLACE_HOSTCC_SOURCE
      s4-waf: inline LIBREPLACE_NETWORK into 'replace'
      wafsamba: allow passing 'use_hostcc' to SAMBA_SUBSYSTEM()
      lib/replace/wscript: rename LIBREPLACE_H => LIBREPLACE_HOSTCC
      s4:heimdal_build/wscript: rename HEIMDAL_ROKEN_H => HEIMDAL_ROKEN_HOSTCC
      lib/replace/wscript: add dependency to 'dl'
      lib/nss_wrapper/wscript_build: 'replace' already includes 'dl'
      s4:param/wscript_build: 'dl' is provides via 'replace'
      lib/replace/wscript: inline LIBREPLACE_EXT into 'replace' as the autoconf system does
      wafsamba: don't add global dependencies to hostcc targets
      lib/replace/wscript: avoid global deps for LIBREPLACE_HOSTCC
      s4:heimdal_build/wscript_build: avoid global deps for hostcc stuff
      Remove unused swat2 code
      Remove unused pcp/ directory.
      s4:tortore/rpc/spoolss.c: fix declaration after code warning
      s4:tortore/rpc/spoolss: some compilers don't like .foo.bar = 5
      testprogs/blackbox/test_kinit: reorder arguments to "net time" to fix make test
      buildtools/wafsamba: make sure CHECK_FUNC() and CHECK_VARIABLE() work with -O3 in the CFLAGS
      s4:librpc/rpc: make PyErr_SetDCERPCStatus() static
      s4:librpc/rpc: the python bindings should use !NT_STATUS_IS_OK instead of NT_STATUS_IS_ERR
      s4:torture/rpc/dsgetinfo: first check the rpc layer status before looking at the application result
      s4:torture/rpc/winreg: fix compiler warnings
      s4:torture/rpc: rename rpc.h => torture_rpc.h
      s4:selftest/wscript: --enable-selftest and --with-selftest-prefix are configure options
      s4:winbind: wbsrv_samba3_priv_pipe_dir() needs to return the directory not the pipe path
      s4:winbind: use WINBINDD_SOCKET_NAME instead of WINBINDD_SAMBA3_SOCKET
      s4:libnet/libnet_join: don't look at p->last_fault_code for debugging anymore
      s4:util/net/drs: don't look at p->last_fault_code for debugging anymore
      s4:torture/rpc: don't look at p->last_fault_code for debugging anymore
      librpc/rpc: add dcerpc_fault_to_nt_status()
      pidl:Samba4/NDR/Client: map NT_STATUS_NET_WRITE_FAULT to the matching NT_STATUS_RPC_* code
      s4:librpc/rpc/pyrpc.c: map NT_STATUS_NET_WRITE_FAULT to the matching NT_STATUS_RPC_* code
      s4:torture/rpc/lsa.c: test for NT_STATUS_RPC_SS_CONTEXT_MISMATCH instead of NT_STATUS_NET_WRITE_FAULT
      s4:torture/rpc/handles.c: check for NT_STATUS_RPC_SS_CONTEXT_MISMATCH instead of DCERPC_FAULT_CONTEXT_MISMATCH
      s4:torture/rpc/alter_context.c: check for NT_STATUS_RPC_BAD_STUB_DATA instead of NT_STATUS_NET_WRITE_FAULT
      s4:torture/rpc/dssync.c: check for NT_STATUS_RPC_PROCNUM_OUT_OF_RANGE instead of DCERPC_FAULT_OP_RNG_ERROR
      s4:torture/rpc/alter_context: check for NT_STATUS_RPC_PROTOCOL_ERROR instead of DCERPC_NCA_S_PROTO_ERROR
      s4:torture/rpc/countcalls.c: check for NT_STATUS_RPC_PROCNUM_OUT_OF_RANGE instead of DCERPC_FAULT_OP_RNG_ERROR
      s4:torture/rpc/drsuapi.c: check for NT_STATUS_RPC_ENUM_VALUE_OUT_OF_RANGE instead of DCERPC_FAULT_INVALID_TAG
      s4:torture/rpc/samr.c: check for NT_STATUS_RPC_PROCNUM_OUT_OF_RANGE instead of DCERPC_FAULT_OP_RNG_ERROR
      s4:torture/rpc/scanner.c: check for NT_STATUS_RPC_* instead of p->last_fault_code
      s4:torture/rpc/spoolss.c: check for NT_STATUS_RPC_* instead of p->last_fault_code
      s4:torture/rpc/dsgetinfo.c: check for NT_STATUS_RPC_ENUM_VALUE_OUT_OF_RANGE instead of DCERPC_FAULT_INVALID_TAG
      s4:torture/rpc/autoidl.c: check for NT_STATUS_RPC_* instead of p->last_fault_code
      s4:libnet_rpc: check for NT_STATUS_RPC_PROCNUM_OUT_OF_RANGE instead of NT_STATUS_NET_WRITE_FAULT
      s4:libnet_passwd: check for NT_STATUS_RPC_PROCNUM_OUT_OF_RANGE in the ChangePassword calls
      s4:libnet_passwd: check for NT_STATUS_RPC_ENUM_VALUE_OUT_OF_RANGE for SetPassword
      s4:torture/rpc/countcalls: check for NT_STATUS_IS_RPC() instead of NT_STATUS_NET_WRITE_FAULT
      s4:dynconfig/wscript: ${LOCALSTATEDIR} already has var/ included
      Revert "s4:"dns_update_list" file: install it properly into the private directory"
      Revert "Revert "s4:script/installmisc.sh - install "dns_update_list" to target setup folder""
      s4:setup/wscript_build: install dns_update_list into ${SETUPDIR}
      s4:rootdse: only return "tokenGroups", when the client asked for them
      s4:winbind: fill response.data.num_entries for WINBINDD_LIST_TRUSTDOM
      s4:winbind: fill response.data.num_entries for WINBINDD_LIST_GROUPS
      s4:winbind: fill response.data.num_entries for WINBINDD_LIST_USERS
      s4:rpc_server/netlogon: add no memory checks
      s4:dynconfig: fix the autoconf build and pass -DPYTHONDIR=\"$(pythondir)\"
      lib/zlib/wscript: fix system zlib detection
      buildtools/wafsamba: make sure we create bin/default/ before trying to create symlinks in it
      buildtools/wafsamba: inline defines during configure into the tests
      lib/replace: add replacement for IPV6_V6ONLY on linux systems with broken headers
      lib/replace/wscript: add replacement for IPV6_V6ONLY on linux systems with broken headers
      lib/replace: make sure IPV6_V6ONLY is available for IPv6 support
      lib/replace/wscript: make sure IPV6_V6ONLY is available for IPv6 support
      Revert "tsocket: not all systems have IPV6_V6ONLY"
      lib/tsocket: add tsocket_address_is_inet() function
      lib/tsocket: add tsocket_address_is_unix() function
      s4:dsdb/common: if we don't have the ip of the client return the server site as client site
      s4:cldap_server: allow src_address = NULL in fill_netlogon_samlogon_response()
      s4:service_named_pipe: use the passed client and server addresses
      s4:rpc_server: remember the local and remote address
      s4:rpc_server/netlogon: use tsocket_address in dcesrv_netr_DsRGetDCNameEx2()
      s4:rpc_server/spoolss: use tsocket_address in dcesrv_spoolss_check_server_name()
      s4:rpc_server/srvsvc: pass tsocket_address to the ntvfs layer
      s4:rpc_server: remove 'socket_address' based functions
      s4:ntvfs: add tsocket based addresses to ntvfs_context
      s4:smb_server: pass tsocket_addresses to the ntvfs layer
      s4:ntvfs/ipc: pass the already given tsocket_address structures to the named_pipe_auth code
      s4:ntvfs: remove socket_address based functions
      s4:ntvfs/ipc: remote // debug comments
      s4:smb_server: remove unused socket_address functions
      s4:smb_server: use tsocket_address_string() to display the client address
      s4:smb_server: use tsocket_address_string() for debugging the client address
      s4:wrepl_server: use tsocket_address functions to get the peer ip
      s4:lib/registry: fix the waf build
      s4:wrepl_server: use tsocket_address functions to get the peer ip
      s4:smb_server: use tsocket_address_string() for debugging the client address
      s4:web_server: use tsocket_address functions to get the local ip and port
      s4:rpc_server: remove unused socket_address based functions
      s3:smbd: keep local and remote tsocket_address per connection
      s4:web_server: use tsocket_address functions to get the local ip and port
      libcli/named_pipe_auth: we need to hide length of the message mode header from the caller
      s4:smb_server/smb: SMBreadX can return STATUS_BUFFER_OVERFLOW
      s3:smbd: add comment about returning STATUS_BUFFER_OVERFLOW in pipe_read_andx_done()
      s3:smbd: make fsp->fake_file_handle a talloc child of fsp
      s4:dynconfig: reorder non fhs variables
      s4:dynconfig: fix fhs variables and list them all explicit
      s4: remove unused references to swat
      dsdb/password_hash: remove usage of msDs-KeyVersionNumber
      s4:selftest: add --socket-wrapper[-keep]-pcap options to "waf test"
      s4:blackbox password tests - more complex passwords
      s4:setup: mark DSDB_CONTROL_DN_STORAGE_FORMAT_OID 1.3.6.1.4.1.7165.4.3.4 as allocated
      s4:password_hash - Implement password restrictions
      README.Coding: fix good example
      s4:dsdb/password_hash: only try to handle a hash in the unicodePwd field if it's given
      Revert "s4:password hash LDB module - check that password hashes are != NULL before copying them"
      Revert "s4:password_hash LDB module - don't break the provision"
      s3:Makefile: build smbtorture4 as static binary with socket_wrapper support
      s4:heimdal_build: remove heimdal/lib/hcrypto/evp-cc.c from the build
      s4:heimdal: remove unused heimdal/lib/hcrypto/evp-cc.c
      tdb: commit ABI/tdb-1.2.2.sigs
      s4:dsdb: cached results of samdb_rodc()
      s4:heimdal_build: remove heimdal/lib/hcrypto/evp-cc.c from autoconf build
      s4:heimdal_build: undefine __APPLE__ as we don't need that magic
      s4:librpc: remove explicit ../librpc/gen_ndr/ndr_drsblobs.o from python_drsblobs
      s4:dsdb: fix samdb_result_logon_hours() and don't hardcode units_per_week
      s3:build: build smbtorture4 when the merged build is selected
      s4:heimdal_build: move #undef __APPLE__ to the end of roken.h
      wafsamba: use -D_XOPEN_SOURCE=700 for the build
      lib/util: fix waf configure tests for xattr functions on Mac OS 10.
      Revert "wafsamba: use -D_XOPEN_SOURCE=700 for the build"
      s4:dynconfig: let the autoconf build compile again
      s4:librpc: fix the autoconf build
      testprogs/win32/spoolss: rename Makefile => NMakefile
      testprogs/win32/spoolss: rename Makefile.mingw GNUmakefile
      testprogs/win32: explain how to use nmake with NMakefile
      testprogs/win32/npecho: use 'rm -f' instead of 'del' on unix
      testprogs/win32/spoolss: we don't need absolute pathes to mingw locations
      testprogs/win32: make it possible to specify MINGW_CC
      s4:ldb-samba: handle more GUID attributes
      s3-waf: Also include source4/ when looking for headers
      s3-waf: Add autogeneration with PIDL
      s4:ldb: add --controls support to ldbedit
      s4:libnet: use the new generated config from the provision for the self_join
      s4:ldb_controls: make it possible to pass arbitrary control via the command line
      s3:rpc_server: make sure we don't send uninitialized memory for the named_pipe_auth handshake
      s3:rpc_server: add np_read_in_progress() function
      s3:smbd: add PIPE_BUSY handling for SMBtrans calls on named pipes
      s3:rpc_server: pass down local and remote tsocket_address to np_open()
      s3:Makefile.in: add npa_tstream.o to the build of smbd
      s3:rpc_server: make use of the npa_tstream code to connect to named pipes
      s4-waf: Fixed the ldb build.
      buildtools/wafsamba: use build group 'final' for the creation of manpages
      s3:winbindd: make sure we only call static_init_idmap once
      s4:lib: merge LDB_WRAP and LDBSAMBA and make LDBSAMBA a library.
      pidl/wscript: call pod2man with the detected perl version
      pidl/wscript: only try to build pidl manpages if pod2man is available
      pidl/wscript: build manpages in build group 'final'
      selftest/Samba3: remove unused create_clientconf() function
      selftest: use 127.0.0.11-16 for the client
      selftest/Samba4: let localvampiredc use 127.0.0.2
      selftest/Samba4: let localfl2000dc use 127.0.0.5
      selftest/Samba4: make the naming of passwords more consistent
      s4:torture/rpc/remote_pac: use dcerpc_netr_LogonSamLogon_r() instead of dcerpc_netr_LogonSamLogon()
      s4:provision: don't use hardcoded 'Default-First-Site-Name'
      s4:ldb-samba: fix the build without a system ldb
      s4:ldb: only do ABI checking for the standalone build for now
      Revert "s4:ldb-samba: fix the build without a system ldb"
      libcli/named_pipe_auth: fix memory handling for temporary data
      libcli/named_pipe_auth: fix error handling in _tstream_npa_connect_recv()
      testprogs/win32: add prepare_dcpromo tool
      s4:provision: pass relax control also to modify_ldif
      s4:provision: don't use hardcoded values for 'nextRid' and 'rIDAvailablePool'
      s4:dsdb/ridalloc: add comment about windows behavior regarding rIDUsedPool
      s4:provision: add --next-rid option
      s4:provision: move Samba4 specific DNS stuff to its own file
      s4:provision: add entries for root dns servers
      s4:ldap_server: don't start if we can't bind to port 389
      s4:ldb/python: make it possible to run tests standalone
      s4:dsdb: move dsdb python tests from lib/ldb/ to dsdb/
      s4:dsdb/password_hash: fix some c++ compiler warnings
      s4:dsdb: allocate DSDB_CONTROL_BYPASS_PASSWORD_HASH_OID
      s4:dsdb/password_hash: implement DSDB_CONTROL_BYPASS_PASSWORD_HASH_OID
      s4:dsdb: add dsdb_msg_constrainted_update_int32/64() functions
      s4:dsdb: add dsdb_module_constrainted_update_int32/64() functions
      s4:dsdb: add dsdb_msg_constrainted_update_uint32/64() wrapper functions
      s4:dsdb: add dsdb_module_constrainted_update_uint32/64() wrapper functions
      s4:dsdb:ridalloc.c: fix C++ warning
      s4:dsdb:ridalloc: use dsdb_module_constrainted_update_uint64() to update rIDAvailablePool
      s4:dsdb:ridalloc: add ridalloc_ridset_values infrastructure
      s4:dsdb:ridalloc: use ridalloc_ridset_values infrastructure in ridalloc_create_rid_set_ntds()
      s4:dsdb:ridalloc: use ridalloc_ridset_values infrastructure in ridalloc_allocate_rid()
      s4:dsdb:ridalloc: use ridalloc_ridset_values infrastructure in ridalloc_allocate_rid_pool_fsmo()
      s4:drepl_ridalloc: only ask the rid master for a new rid pool if we need to.
      s4:drepl_out_helpers: don't return NT_STATUS_OK, if an extended operation doesn't return success
      s4:dsdb/repl: expose drsuapi_DsExtendedError to the caller (e.g. the ridalloc client)
      selftest/Samba4: set dreplsrv:periodic_startup_interval = 0
      s4:selftest: run RPC-SAMR-LARGE-DC against the vampire_dc to test the rid alloc code
      s4:drsuapi: don't return all linked attributes at the same time
      s4:drepl_notify: hide some bugs from the make test output
      s4:buildtools: make it possible to use advanced test options via the make waf wrapper
      s4:buildtools: add 'make show_waf_options'
      s4:libnet_UserList: allocate children strings on the correct talloc parent
      s4:libnet_GroupList: allocate children strings on the correct talloc parent
      s4:wb_cmd_list_users: also handle NT_STATUS_NO_MORE_ENTRIES
      s4:wb_cmd_list_groups: also handle NT_STATUS_NO_MORE_ENTRIES
      s4:winbind: let WBSRV_SAMBA3_SET_STRING() initialize the whole buffer
      testprogs/blackbox/subunit.sh: initialize failed to 0
      s4:provision: also use fixed GUID names of the default group policies for domain and domain controllers in tests
      s4:provision: remove --policy-guid and --policy-guid-dc cmdline options
      README.Coding: add examples for good and bad comments
      README.Coding: fix typos
      s4:librpc/rpc: use the correct ndr flags in dcerpc_ndr_validate_in()
      s4:blackblock/ktpass: use test specific user name
      s4:selftest: skip samba4.blackbox.ktpass for now as it's not portable
      s4:blackbox/newuser: use test specific user names
      s4:torture/rpc/winreg: fix the build with non gcc compilers (e.g. on solaris)
      s4:torture/rpc/winreg: fix "strict aliasing" compiler warnings
      s4:torture/libnet: avoid dereferencing dcerpc_binding_handle internals
      s4:librpc/rpc: avoid using DCERPC_NDR_REF_ALLOC for epm_Map()
      pidl: Samba3/ClientNDR - Correctly copy arrays, if r.out.size < r.in.size.
      s4:rpc_server/lsa: better include a .h file don't include a .c file
      s3:rpc_server: fix memory leaks in rpc_pipe_internal_dispatch()
      s3:smbd: fix valgrind warning, sizeof(16) != 16...
      s3:rpc_server: fix valgrind warning
      s4:RPC-SPOOLSS-NOTIFY: skip test_RFFPCNEx() for now, as the test is broken
      s3:utils/net_rpc_service.c: we also need some ndr_pull functions
      s3:libnet/libnet_samsync.c: we also need some ndr_pull functions
      s3:rpcclient: we also need some ndr_pull functions
      pidl:NDR: correctly handle bracket arrays with 'string'
      librpc/idl/mgmt.idl: add missing size_is()
      pidl:NDR: correctly handle no pointer bracket arrays with 'string'
      testprogs/midltests: add some example IDL files and there midltests.exe output
      pidl:Samba3/ClientNDR: ignore "todo" functions
      s4:librpc/rpc: autodetect the need of async call logic
      s4:librpc/rpc: fix dcerpc_log_packet() prototype
      librpc/rpc: add dcerpc_binding_handle abstration
      s4:librpc/rpc: add dcerpc_binding_handle dcerpc_pipe backend
      pidl:Samba4/NDR/Client: remove old dcerpc_pipe based sync stubs
      pidl:Samba4/NDR/Client: make use of the new dcerpc_binding_handle_call() infrastructure
      pidl:Samba4/NDR/Client: s/interface/if/
      pidl:Samba4/NDR/Client: convert code to $self->pidl()
      pidl:Samba4/NDR/Client: add non struct base dcerpc_binding_handle client stubs
      pidl:Samba4/NDR/Client: add sync dcerpc_pipe based stubs as compat for OpenChange
      s4:librpc/rpc: make struct dcerpc_binding_handle private
      s3:rpc_client: add dcerpc_binding_handle backend
      s3:rpc_server: add rpc_pipe_open_internal dcerpc_binding_handle backend
      s3:winbindd: add wbint dcerpc_binding_handle backend
      s3:Makefile: link in dcerpc client stubs
      pidl:Samba3/ClientNDR: implement rpccli_ stubs on top of dcerpc_ stubs
      pidl:Samba4/NDR/Client.pm: correctly copy fixed size out arrays
      s3:rpc_client: remove unused rpc_pipe_open_local()
      s3:rpc_client: remove unused cli_do_rpc_ndr* functions
      s3:rpc_server: remove unused rpc_pipe_internal_dispatch()
      s3:winbindd: remove unused wb_ndr_dispatch* functions
      s3:include: remove unused dispatch* fn pointers from rpc_pipe_client
      s3:winbindd: add binding_handle to struct winbindd_child
      s3:winbindd: use dcerpc_wbint_* functions instead of rpccli_wbint_*
      s3:winbindd: remove rpc_pipe_client references from winbind_dual_ndr code
      s3:winbindd: don't ignore 'result' in wb_dsgetdcname_done()
      s4:selftest: run ldapi tests in 'dc:local' environment
      s4:selftest: recreate $SELFTEST_PREFIX/s4client with each make test run
      Revert "waf: enable gccdeps in developer mode"
      librpc/rpc: call do_ndr_print hook in dcerpc_binding_handle_call*()
      s3:winbindd: fix error handling in wb_next_grent_fetch_done()
      s3:Makefile.in: use python with -u to disable stdin/out caching
      librpc/rpc: move dcerpc_read_ncacn_packet_send/recv() to dcerpc_util.c
      s3:librpc: make dcerpc_read_ncacn_packet_send/recv() available
      pidl:Samba3/ClientNDR: remove unused ParseOutputArgument function
      lib/tsocket: sa_socklen is a macro on irix, so better use sasocklen
      Revert "lib/tsocket: sa_socklen is a macro on irix, so better use sasocklen"
      s3:smbd: s/sa_len/sa_socklen , because sa_len is a macro on IRIX
      lib/util: remove implicit discard_const_p() from SAFE_FREE()
      selftest/Subunit.pm: fix perl warnings
      pidl:Samba4/NDR/Client: fix skip reason for unsized arrays
      pidl:Samba4/NDR/Client: correctly copy [out,charset()] buffers
      pidl:NDR: [in,out,string] doesn't need to pointers
      pidl:Samba4/NDR/Client: support argument based stubs for [in,out,string]
      librpc/ndr: correctly implement ndr_charset_length()
      docs-xml/vfs_gpfs: document 'gpfs:sharemodes'
      docs-xml/vfs_gpfs: document 'gpfs:leases'
      docs-xml/vfs_gpfs: document 'gpfs:getrealfilename'
      docs-xml/vfs_gpfs: document 'gpfs:winattr'
      docs-xml/vfs_gpfs: document 'gpfs:merge_writeappend'
      docs-xml/vfs_gpfs: document 'gpfs:refuse_dacl_protected'
      s4:lib/messaging: add some const to messaging_send()
      nsswitch/libwbclient: LIBWBCLIENT depends on LIBWINBIND-CLIENT
      s4:auth_winbind: fix compiler warnings
      s4:auth_winbind: fix segfault in winbind_check_password_wbclient()
      s4:auth_winbind: remove unused winbind_samba3 backend
      s4:lib/messaging/tests: fix some compiler warnings
      s4:lib/messaging: move messaging prototypes from irpc.h to messaging.h
      s4:lib/messaging: add irpc dcerpc_binding_handle backend
      s4:lib/messaging: add irpc_binding_handle_by_name() helper function
      s4:rpc_server/common: use irpc_binding_handle_by_name() in dcesrv_irpc_forward_rpc_call()
      s4:libcli/finddcs: use irpc_binding_handle_by_name()
      s4:dsdb/kcc: use irpc_binding_handle_by_name()
      s4:smbd/service_task: use irpc_binding_handle_by_name()
      s4:rpc_server/netlogon: use irpc_binding_handle_by_name()
      s4:libcli/wbclient: use irpc_binding_handle_by_name()
      s4:auth_winbind: use irpc_binding_handle_by_name()
      s4:wrepl_server: use irpc_binding_handle_by_name() in r_do_challenge()
      s4:wrepl_server: use irpc_binding_handle_by_name() in r_do_release_demand()
      s4:wrepl_server: use irpc_binding_handle_by_name() in wreplsrv_scavenging_replica_active_records()
      s4:lib/messaging: use irpc_binding_handle() for python bindings
      s4:lib/messaging/tests: make use of irpc_binding_handle()
      s4:libcli/composite: remove unused composite_continue_irpc()
      s4:lib/messaging: make irpc_request private and remove unused code
      s3:rpc_server: make it possible to use rpcint_binding_handle() directly
      librpc/rpc: add set_timeout() to dcerpc_binding_handle_ops
      s4:librpc/rpc: implement dcerpc_bh_set_timeout()
      s4:lib/messaging: implement irpc_bh_set_timeout
      s3:rpc_client: implement rpccli_bh_set_timeout()
      s3:winbindd: implement wbint_bh_set_timeout() as dummy
      s3:rpc_server: implement rpcint_bh_set_timeout() as dummy
      librpc/rpc: add dcerpc_binding_handle_set_timeout()
      s4:provision: remember the setup directory if it wasn't the default
      s4-errormap: map ERRSRV/ERRbaduid to NT_STATUS_USER_SESSION_DELETED
      s3-errormap: map ERRSRV/ERRbaduid to NT_STATUS_USER_SESSION_DELETED
      s3:torture: fix run_uid_regression_test
      s3:torture: fix printf output, lines can't start with lower case "test"
      selftest/s3-selftest.sh: knownfailure filtering for non-build-farm make test
      lib/tdb: change version to 1.2.4 after hash checking improvments
      tdb: add ABI/tdb-1.2.4.sigs
      s3:rpc_client: allow DCERPC_PKT_AUTH3 via rpc_api_pipe_send/recv
      s3:rpc_client: rpc_pipe_bind_step_one_done() doesn't need reply_pdu
      s3:rpc_client: use rpc_api_pipe_send() for auth3
      s3:rpc_client: remove unused rpc_pipe_set_hnd_state()
      waf: fix typos in GIT_COMMIT_* strings
      waf: add a '+' to the git hash if the working tree isn't clean
      s4:irpc: add padding to the IPRC header for 8 byte alignment
      s4:irpc: use LIBNDR_FLAG_REF_ALLOC for the server side when pulling
      s4:dsdb/kcc: we don't need to manually allocate [out,ref] pointers anymore
      pidl:NDR/Parser: fix range() for arrays
      libcli/util: let tstream_read_pdu_blob_* cope with variable length headers
      lib/util/asn1: add asn1_peek_tag_needed_size() and asn1_peek_full_tag()
      libcli/ldap: let ldap_full_packet() use asn1_peek_tag_needed_size()
      s4:schannel: handle move flag combinations in the server
      lib/util: change tevent_req_nterror() to a macro
      libcli/ldap: correctly marshall LDAP Unbind PDUs
      s4:libcli/ldap: fix sending oneway requests
      LDAP-BASIC: test AbandonRequest
      s4:torture/ldap: close connections with an UnbindRequest
      s4:irpc: optionaly pass the security_token via IRPC requests.
      tsocket: make sure we delete the fd event before calling close()
      s4:rpc_server: use SOCKET_FLAG_NOCLOSE to avoid calling close() on the socket fd twice.
      s4:wrepl_server: use SOCKET_FLAG_NOCLOSE instead of a dup()
      s4:gensec: add gensec_create_tstream()
      s4:lib/tls: add gnutls backend for tstream
      s4:gensec_tstream: remove plain socket handling
      pidl/Typelist: let typeIs() do TYPEDEF dereference in the HASH case
      pidl/Python: remove todo handling from PythonFunction(), it's done by the caller
      pidl:NDR/Client.pm: remove unreached code
      pidl/Python: use has_property($d, "noopnum") helper function
      pidl: remove unused async property handling
      librpc/ndr: remove 'async' from ndr_interface_call
      pidl:NDR/Client: make the generated code look a bit nicer
      pidl:NDR/Parser: simplify logic in ParseMemCtxPullFlags()
      pidl:NDR/Parser: remove unused code for array element index
      pidl: add support for pointers in typedefs
      testprogs/win32: add vs2010-metze.cmd
      midltests: move the current implementation to midltests_simple.exe
      midltests: add a midltests_tcp.exe tool
      midltests: make it possible to allow downgrades to NDR32
      midltests: add some usefull defines to midltests.idl
      midltests: add midltests-pipe-sync-ndr32-downgrade-01.idl example
      midltests/todo: add some random idl files I had tested month ago
      midltests: revert to a simple default midltests.idl
      midltests: improve NDR64 downgrade
      midltests: print out the alloc_hint for requests and responses
      midltests: support for fragmented RPC traffic
      midltests: add midltests-pipe-sync-ndr32-downgrade-02.idl
      netlogon.idl: add missing flags to DSGETDC_VALID_FLAGS
      s4:rpc_server/netlogon: don't use dcerpc_binding_handle_call_send/recv() directly
      s4:rpc_server/echo: fix compiler warning
      tsocket: make sure we delete the fd event before calling close()
      libcli/ldap: ldap_full_packet() requires at least 6 bytes
      lib/util/asn1: let asn1_peek_full_tag() return an error if we fail to parse tag hdr/len
      s4:ldap_server: rewrite to socket layer to use tstream
      Revert "s4:ldap_server: rewrite to socket layer to use tstream"
      s4:lib/tls: fix enabled logic in tstream_tls_params_server()
      s4:lib/tls: make more clear what the immediate event is for
      s4:lib/tls: buffer writes in tstream_tls_push_function()
      s4:ldap_server: rewrite to socket layer to use tstream
      socket_wrapper: Make it work on freebsd for udp packets
      librpc: Fixed memory context of dcerpc_binding_from_tower.
      libcli/util: add pipe related NT_STATUS_RPC_* codes
      s3:libsmb: add pipe related NT_STATUS_RPC_* codes
      s4:libcli/util: add pipe related NT_STATUS_RPC_* codes
      s4:nbt_server/wins: fix compiler warnings
      s4:nbt_server/winsclient: add a nbtd_wins_refresh_state
      libcli/nbt: move nbt_name_refresh_wins_send() to the top of all nbt_name_refresh_wins_* related code
      libcli/nbt: s/refresh_wins_state/nbt_name_refresh_wins_state
      libcli/nbt: s/name_refresh_wins_handler/nbt_name_refresh_wins_handler
      libcli/nbt: convert nbt_name_refresh_wins_send/recv to tevent_req
      s4:nbt_server/winsclient: add a nbtd_wins_register_state
      libcli/nbt: move nbt_name_register_wins_send() to the top of all nbt_name_register_wins_* related code
      libcli/nbt: s/register_wins_state/nbt_name_register_wins_state
      libcli/nbt: s/name_register_wins_handler/nbt_name_register_wins_handler
      libcli/nbt: convert nbt_name_register_wins_send/recv to tevent_req
      s4:nbt_server/register: add a nbtd_register_name_state
      libcli/nbt: move nbt_name_register_bcast_send to the top of nbt_name_register_bcast_*
      libcli/nbt: s/register_bcast_state/nbt_name_register_bcast_state/
      libcli/nbt: s/name_register_bcast_handler/nbt_name_register_bcast_handler
      libcli/nbt: convert nbt_name_register_bcast_send/recv to tevent_req
      libcli/nbt: we don't need LIBCLI_COMPOSITE anymore
      lib/replace: fix rep_strtoull() prototype
      lib/replace: use snprintf() in test code to avoid warnings in the IBM-Checker
      tsocket: ask the kernel for the specific local address after a tcp connect
      tsocket: let tstream_inet_tcp_connect_recv() optionally return the used local address
      misc.idl: add SEC_CHAN_LOCAL and SEC_CHAN_LANMAN
      s4:rpc_server/netlogon: netr_GetDcName should return WERR_DCNOTFOUND for invalid names
      s4:rpc_server/netlogon: validate flags in netr_DsRGetDCNameEx2() and callers
      s4:rpc_server/netlogon: handle DC_RETURN_NETBIOS and DC_RETURN_DNS in netr_DsRGetDCNameEx2()
      s4:rpc_server/netlogon: fix comment in netr_DsRGetDCName()
      s4:rpc_server/netlogon: netr_ServerAuthenticate3 should check the challenge after the account
      s4:rpc_server/netlogon: netr_ServerAuthenticate3 should reject invalid sec_channel_types early
      s4:rpc_server/netlogon: netr_ServerAuthenticate3 should return NO_TRUST_SAM_ACCOUNT
      s4 dns: Parse srv and soa records
      s4:librpc: we don't need dcerpc client bindings for dns.idl
      midltests: add more union_align examples
      pidl:Samba4/NDR/Parser: fix NDR64 union alignment
      s3:include: move MAX_DEBUG_LEVEL from local.h to debug.h
      s3:include: move debug.c prototypes to debug.h
      talloc: pytalloc should not depend on samba specific code
      autobuild: run ldb tests with TDB_NO_FSYNC=1
      autobuild: add some comments
      s4-waf: don't generate PACKAGE_* defines in config.h
      s3-waf: use git to calculate the version if available
      s3-waf: add NDR_STANDARD dependencies to fix the build
      s3-waf: use NDR_NTLMSSP subsystem
      s3-waf: use NDR_SCHANNEL
      s3-waf: use NDR_NETLOGON for ntlm_auth
      s3-waf: implement LIBMSRPC_GEN as tiny wrapper of 'NDR_STANDARD NDR_DSSETUP NDR_SPOOLSS'
      s4:librpc: we don't need dcerpc client bindings for dns.idl
      lib/util: remove useless ../lib/util/mutex.*
      wafsamba: support 'soname' attribute on SAMBA_LIBRARY()
      talloc: fix waf build for libtalloc-compat1
      MAINTAINERS: add myself as maintainer for tevent and tsocket
      s4:dsdb/tests/python/sam.py: test with member: <SID=...>
      s4:dsdb/samldb: avoid nested unindexed searches in samldb_member_check()
      replace/wscript: check for uint8_t
      replace/wscript: define bool to int instead of off_t
      replace/wscript: do the size checks directly after the type checks
      replace/wscript: add size checks for stdint.h types
      s4:dsdb/kcc: fix memory leak in kcctpl_copy_output_edges()
      s4:dsdb/common: fix memory leak in samdb_ntds_settings_dn()
      s4:dsdb/samdb: optimize samldb_prim_group_change()
      s4:dsdb/objectclass_attrs: not all objects have delete protected attributes as must contain
      s4:dsdb/drepl_notify: reuse dreplsrv_notify_operation structures
      tsocket: fill in sa.sa_len if the system supports it
      socket_wrapper: fill in sa.sa_len if the system supports it
      s4:DRS-RPC-DSSYNC: don't try to decrypt secret attributes twice
      s4:dsdb/common: create a DSDB_SECRET_ATTRIBUTES define with all secret attributes
      s4:rpc_server/drsuapi: let dcesrv_drsuapi_DsGetNCChanges() use DSDB_SECRET_ATTRIBUTES
      s4:rpc_server/drsuapi: make msg_attrs static const
      s4:rpc_server/drsuapi: don't ask for constructed "distinguishedName" if we don't use it
      s4:dsdb/schema/schema_filtered.c: use DSDB_SECRET_ATTRIBUTES
      s4:dsdb/schema/schema_filtered.c: make never_in_filtered_attrs static const
      s4:dsdb/local_password: use DSDB_SECRET_ATTRIBUTES
      s4:dsdb/common: add DSDB_SECRET_ATTRIBUTES_EX()
      s4:dsdb/operational.c: use DSDB_SECRET_ATTRIBUTES_EX()
      tdb: set tdb->name early, as it's needed for tdb_name()
      buildtools: fix --git-local-changes option
      talloc: add ABI/talloc-2.0.4.sigs
      tls_tstream: use a dynamic buffer for the push case
      lib/torture: add torture_assert_u64_equal_goto()
      s3:ntlm_auth: fix memory leak in the raw ntlmssp code path
      s3:ntlm_auth: free session key, as we don't use it (at least for now)
      s3:ntlm_auth: support clients which offer a spnego mechs we don't support
      libcli/auth: let spnego_write_mech_types() check the asn1_load() return
      buildtools: make sure we have no '+' in the version scripts
      buildtools: add the PRIVATE_EXTENSION for private libraries
      buildtools: private_libraries should not have a version in the soname
      s4:python: add PyString_FromStringOrNULL() to pyrpc_util
      pidl:Samba4/Python.pm: use PyString_FromStringOrNULL() from pyrpc_util
      talloc: remove unused PyString_FromString_check_null() from pytalloc-util
      talloc: mark pytalloc-util functions as _PUBLIC_
      talloc: build pytalloc-util with the same logic as libtalloc
      s4:ldb: build libldb and pyldb-util as private libraries when building for samba4
      s4:ldb: add ABI/ldb-0.9.20.sigs
      dcerpc.idl: fix typo 0x800000000 => 0x80000000
      talloc: pytalloc-util should not have an ABI-file yet
      s4:pyrpc_util: s/typename/type_name to avoid c++ warnings
      pidl:Samba4/Python.pm: don't handle scalar reference types special
      pidl:Samba4/Python.pm: ignore "SUBCONTEXT" levels
      drsblobs.idl: remove nopython from package_PrimaryKerberosBlob related stuff
      libcli/echo: lowercase testsuite names
      s4:selftest: use correct name for the test "ECHO-UDP" => "echo.udp"
      libcli/echo: fix off by 1 crash bug
      s4:heimdal_build: replace '+' by '_' for vscripts in HEIMDAL_LIBRARY()
      s3:selftest: fix knownfail for samba3.posix_s3.rpc.spoolss.*printserver.enum_printers_old
      s4:dsdb:util: dsdb_get_single_valued_attr() only needs a const ldb_messages
      s4:ldap_server: rename helper functions to ldapsrv_ prefix and pass ldapsrv_call
      s4:ldap_server: don't call ldb_req_mark_untrusted() on the privileged ldapi socket
      s4:ldap_controls: allow DSDB_CONTROL_BYPASS_PASSWORD_HASH_OID over sockets.
      s4:dsdb:password_hash: verify content if the BYPASS_PASSWORD_HASH control is used
      s4:gensec/spnego: only look at the optimistic token if we support the first mech
      s3:libsmb: add cli_np_tstream.c
      s3:libsmb: add tstream_is_cli_np()
      s3:libsmb: add tstream_cli_np_use_trans() and the needed logic
      s3:libsmb: add tstream_cli_np_set_timeout()
      s3:libsmb: add tstream_cli_np_get_cli_state()
      s3:rpc_client: let rpc_transport_tstream_init() create read and write queue
      s3:rpc_client/rpc_transport_tstream: timeout should be unsigned int
      s3:rpc_client/rpc_transport_tstream.c: add some logic to handle cli_np tstreams
      s3:rpc_client: implement rpc_transport_sock_init() on top of rpc_transport_tstream_init()
      s3:rpc_client: implement rpc_transport_np_init() on top of rpc_transport_tstream_init()
      s3:net ads dns register: use "cluster addresses" option if configured (bug #7871)
      s3:cli_np_tstream: if SMBtrans is desired, the readv needs to wait for the last writev chunk.
      s3:libsmb/namequery.c: don't leak 'pserver'
      s3:lib/gencache: fix memory leak in error path
      s3:libsmb: use 16 zero bytes as channel binding checksum in the gssapi checksum (bug #7883)
      tevent: add ABI/tevent-0.9.10.sigs
      tdb: add ABI/tdb-1.2.8.sigs
      Merge remote branch 'origin/v4-0-test'
      s4:ldb:python/api: use filename() instead of hardcoded filenames
      s4:ldb:python/api: use only one ldb file in test_contains()
      testprogs:test_kinit: create tmp files under $PREFIX
      tdb:tdbtest: use TEST_DATA_PREFIX for files
      tdb:tdbtorture: use TEST_DATA_PREFIX for files
      s3:selftest: mark samba3.posix_s3.smb2.lock (dc).rw-exclusive as known to fail
      selftest: setup $ENV{TEST_DATA_PREFIX}
      s4:selftest: selftest.pl already sets TEST_DATA_PREFIX
      s4:selftest: specify the gentest_seeds.dat location
      tdb: setup TEST_DATA_PREFIX for make test
      s4:ldb/tests: there's no need to copy samba4.png
      s4:ldb:python/api: use filename() instead of hardcoded filenames
      s4:ldb: setup TEST_DATA_PREFIX for make test
      .gitignore: cleanup old stuff
      WHATSNEW: fix indentation
      s3:winbindd: remove useless ';'
      tdb: add ABI/tdb-1.2.9.sigs
      s3:lib/netapi: don't set SAMR_FIELD_FULL_NAME if we just want to set the account name (bug #7896)
      script/autobuild.py: check that the source tree has no uncommitted changes after make
      s3: Happy New Year 2011
      s4: Happy New Year 2011
      libcli/auth: add netsec_outgoing_sig_size()
      s4:gensec/schannel: use netsec_outgoing_sig_size() to get the signature size
      s3:librpc: use netsec_outgoing_sig_size() instead of a hardcoded signature
      lib/crypto: add aes_cfb8_encrypt()
      s3:net_rpc_vampire_keytab: don't return -1 on success (bug #7899)
      nsswitch: remove includes.h dependency from nsstest.c
      Revert "nsswitch Add talloc depencency for nsstest"
      s3:build: don't use cli_wbint.c any more
      s3:rpcclient: use dcerpc_binding_handle client stubs in cmd_ntsvcs.c
      s3:build: don't use cli_ntsvcs.c any more.
      s3:rpc_client: use dcerpc_epm_Map() and don't ignore 'result' anymore.
      s3:rpcclient: use dcerpc_binding_handle bases client stubs in cmd_epmapper.c
      s3:rpcclient: improve "epmmap" output
      s3:build: don't use cli_epmapper.c anymore
      s3:rpcclient: use dcerpc_binding_handle based client stubs in cmd_dssetup.c
      s3:winbindd: use dcerpc_dssetup_DsRoleGetPrimaryDomainInformation()
      s3:net_utils: use dcerpc_dssetup_DsRoleGetPrimaryDomainInformation()
      s3:build: don't use cli_dssetup.c any more
      talloc: change version to 2.0.5 after a critical bugfix
      pidl: sync idl.yp with the CPP changes
      pidl: regenerate lib/Parse/Pidl/Expr.pm from expr.yp
      pidl:Samba4/Python: fix segfault when setting pointers to scalars.
      pidl:Samba4/Python: avoid ';;' in generated C code.
      buildtools/wafsamba: import 'sys' and 'Logs' if we use them
      pidl/wscript: let the developer use the standalone build with yapp
      script/autobuild.py: fix path to clean-source-tree.sh from within lib/tevent/
      script/autobuild.py: add pidl tests
      pidl/wscript: only warn about grammar file changes
      pidl:Samba4/Python: fix memory leak in _ndr_print functions
      s3:rpcclient: use ndr_dfs_c.h instead of cli_dfs.h
      s3:rpcclient: use ndr_dssetup_c.h instead of cli_dssetup.h
      s3:net: use ndr_dssetup_c.h instead of cli_dssetup.h
      s3:winbindd: use ndr_dssetup_c.h instead of cli_dssetup.h
      s3:winbindd: use ndr_wbint_c.h instead of cli_wbint.h
      drsuapi.idl: add some more DRSUAPI_ATTID_* values
      s3:rpcclient: use dcerpc_echo_X() functions
      s3:torture: use dcerpc_echo_X() functions
      s3:build: don't use librpc/gen_ndr/cli_echo.[ch] anymore
      pidl:wscript: don't warn about pidl gammar file changes for now
      s4:tls_tstream: fix partial reads, so that the gnutls layer doesn't read the same data twice
      s4:tls_tstream: also use a dynamic buffer for the pull side
      s4:selftest/skip: add samba4.tokengroups.python
      wafsamba: quote CPP and CC values when calling pidl
      lib/util: fix rounding to page size in allocate_anonymous_shared()
      lib/util: s/allocate_anonymous_shared/anonymous_shared_allocate/
      lib/util: add anonymous_shared_free()
      lib/util: add tests for anonymous_shared_allocate/free()
      s3:smbd: use anonymous_shared_free() for shared memory signing state
      s4:selftest/skip: remove samba4.tokengroups.python
      s4:selftest: mark samba4.nbt.winsreplication.owned as knownfail
      s3:librpc: remove prototype of dcerpc_binding_handle_set_ref_alloc()
      pidl:Samba4/NDR/Client: remove compat mode for dcerpc_pipe based bindings
      s3:libads: use dcerpc_spoolss_X() functions
      s3:net: use dcerpc_spoolss_X() functions
      s3:smbd: use dcerpc_spoolss_X() functions
      s3:srv_spoolss: use dcerpc_spoolss_X() functions
      s3:printing: use dcerpc_spoolss_X() functions
      libcli/ldap: use lib/ldb_compat.h for the s3 build
      pidl:Samba3/ServerNDR: correctly initialise ndr_push struct
      pidl:Typelist: fix perl warnings about recursiv function calls
      libcli/util: add NT_STATUS_RPC_SEC_PKG_ERROR define
      s3:libsmb: display NT_STATUS_RPC_SEC_PKG_ERROR in error strings
      s4:libcli/util: display NT_STATUS_RPC_SEC_PKG_ERROR in error strings
      dcerpc.idl: add DCERPC_FAULT_SEC_PKG_ERROR
      librpc/rpc: add dcerpc_fault_to_nt_status() mapping from DCERPC_FAULT_SEC_PKG_ERROR
      Revert "s3:events: Call all ready fd event handlers on each iteration of the main loop"
      Revert "s3: Fix starving the echo responder"
      s3:lib/events: don't loop over fd events is select gave -1
      s3:smbd: let smbd_server_connection_loop_once() check for select errors
      s3:lib/events: use DLIST_DEMOTE() for fd events
      midltests: explore 'ms_union' option.
      midltests: 'ms_unions' with enum vs. long
      midltests: unions with enum vs. long
      midltests: union alignment with enum as switch_type
      midltests: union alignment with enum as switch_type and 'ms_union'
      midltests: more union alignment example without ms_union
      midltests: more union alignment example with ms_union
      midltests: add examples of toplevel vs. embedded unions without 'ms_union'
      midltests: add examples of toplevel vs. embedded unions with global 'ms_union'
      midltests: add examples of toplevel vs. embedded unions with mixed 'ms_union'
      midltests: test encapsulated unions without 'ms_union'
      midltests: test encapsulated unions with 'ms_union'
      midltests: add todo/midltests-pipe-sync-ndr32-downgrade-02.idl
      midltests: add invalid/midltests_pipe_struct_union_01.idl
      pidl:NDR: add support for 'ms_union' property.
      pidl:Samba4/NDR/Parser: only do the switch type alignment when we have a switch type
      pidl:Samba4/NDR/Parser: add support for 'ms_union' style aligment
      pidl:Samba4/NDR/Parser: fix ndr_pull/ndr_push mismatch
      s3:rpcclient/cmd_netlogon: fix netr_DELTA_* display
      s3:libnet/libnet_samsync_display: fix netr_DELTA_* display
      s3:rpcclient/cmd_samr: remove useless ';'
      s4:rpc_server/netlogon: return INVALID_INFO_CLASS for invalid netr_Validation levels
      s4:rpc_server/netlogon: set *r->out.authoritative = 1 even on INVALID_PARAMETER/INFO_CLASS
      s4:rpc_server/netlogon: add dcesrv_netr_LogonSamLogon_check()
      s3:rpc_server/netlogon: add _netr_LogonSamLogon_check()
      netlogon.idl: add missing [default]; union arms
      netlogon.idl: use 'ms_union' as specified in [MS-NRPC]
      netlogon.idl: remove pointless union arms of netr_DELTA_UNION
      s4:torture/rpc/netlogon: test validation levels 2 and 3
      s4:torture/rpc/netlogon: test invalid LogonSamLogon levels
      s4:torture/rpc/netlogon: test invalid netr_LogonControl() level
      s4:torture/rpc/netlogon: improve comments in test_LogonControl2()
      s4:torture/rpc/netlogon: add invalid level tests for netr_LogonControl2
      s3:winbindd: catch lookup_names/sids schannel errors over ncacn_ip_tcp (bug #7944)
      s3:groupdb: allow machine accounts as members.
      s3:libnet: add 'process_links' to dssync_ops
      s3:net: "net rpc vampire" is an alias for "net rpc vampire passdb"
      s3:net: make some net_rpc_samsync.c functions static
      s3-dssync-passdb: implement accounts, aliases and groups
      s3:lib: allow_trailing_dollar should only allow '$'
      s3:libnet_dssync_passdb: remove useless DEBUG statements
      Revert "replace: Try to fix broken sys/capabilites.h on Linux."
      replace: Try to fix broken sys/capabilites.h on Linux.
      s3:rpc_server/netlogon: reject validation level 6 without ads support
      s3:winbindd: fix segfaults on addrchange errors and make DEBUG() statements more usefull
      s3:lib/addrchange: let addrchange_done() retry and ignore unknown message types
      s3:lib/addrchange: remove unused pointer
      s3:lib/addrchange: set ctx->sock to -1 after close
      s3:Makefile.in: use waf directly to build smbtorture4 and ndrdump4
      s4:selftest: skip samba4.rpc.backupkey for now
      s3:rpc_server: fix make_external_rpc_pipe_p() and create read and write queues
      script/autobuild.py: git diff has a '--stat' option, no need to use 'diffstat'
      s3:rpc_client: make rpccli_bh_create() non-static for now
      s3:rpc_server: create binding_handle in rpc_pipe_open_external()
      s4: Renable samba4.rpc.backupkey
      s4:ldapcmp: cope with range retrivals of multivalued attributes
      s4:drsuapi/getncchanges: make sure we don't process filteres objects more than once
      s3:auth: change num_groups to from size_t to uint32_t
      s3-waf: make use of LIBCLI_CLDAP subsystem
      s4:build: add RPC_NDR_ATSVC subsystem
      s4:librpc: let dcerpc-samr library use RPC_NDR_SAMR subsystem
      s3-waf: make use of LIBCLI_CLDAP subsystem
      s3:rpc_client: we need to pass a non-blocking socket to tstream_bsd_existing_socket()
      s4:dynconfig: add prototypes for *dyn_LOCALEDIR
      s4:dynconfig: fix segfault in the set_dyn_*() functions
      s3: Remove unused receive_packet
      Revert "Fix alignment issues in SPOOLSS "BUFFER" marshalling."
      TODO test/review librpc/ndr: let ndr_push/pull_DATA_BLOB() look at LIBNDR_FLAG_REMAINING before LIBNDR_ALIGN_FLAGS
      librpc/ndr: ndr align relative pointers based on the given flags
      TODO test/review librpc: align nstring and nstring_array to 2 byte
      TODO test/review librpc/ndr: remove align2 hack for relative pointers
      spoolss.idl: align spoolss_PrinterEnumValues 'data' based on the type
      spoolss.idl: align spoolss_DriverFileInfo relative pointer to 4 byte
      librpc/ndr: handle NOALIGN flag for relative pointers and alignment DATA_BLOBs
      librpc/rpc: let ndr_pull_spoolss_EnumPrinterDataEx() use a subcontext
      librpc/idl: remove unused string defines from idl_types.h
      socket_wrapper: don't allow connect() to the broadcast address
      socket_wrapper: fix compiler warnings
      socket_wrapper: move swrap_ioctl() above the send*/recv* functions
      socket_wrapper: readv() should only work on connected sockets
      socket_wrapper: replace recvmsg() correctly
      socket_wrapper: add swrap_sendmsg_before/after helper functions
      socket_wrapper: use swrap_sendmsg_before()/after() in swrap_sendto()
      socket_wrapper: use swrap_sendmsg_before()/after() in swrap_send()
      socket_wrapper: use swrap_sendmsg_before()/after() in swrap_sendmsg()
      socket_wrapper: use swrap_sendmsg_before()/after() in swrap_writev()
      lib/socket_wrapper: try to fix the build on solaris
      HEIMDAL:kdc: correctly propagate HDB_ERR_NOT_FOUND_HERE to via tgs_parse_request() and _kdc_tgs_rep()
      s4:kdc: fix calculation of the rodc kvno
      s4:kdc: add a kdc_proxy_unavailable_error() helper function
      s4:kdc: split the kdc_udp_proxy() logic from the main kdc logic
      s4:kdc: split the kdc_tcp_proxy() logic from the main kdc logic
      selftest/target/Samba4: splitout a mk_krb5_conf() function
      selftest/target/Samba4: regenerate the krb5.conf after the rodc join
      s4:selftest: test using the machine account of the rodc against itself
      s4:samba-tool: improve help messages for samba-tool password
      socket_wrapper: fix handling of addr and addrlen
      s4:lib/socket: use sockaddr_in6 in ipv6_tcp_accept()
      tevent: change tevent_fd->additional_flags to uint64_t
      tevent/poll: use fde->additional_flags to hold the array index
      tevent: change version to 0.9.11
      pidl/Typelist: dnsp_name and dnsp_string are scalar references
      pidl/Typelist: add is_fixed_size_scalar()
      librpc/ndr: add ndr_interface_call_pipe
      librpc/ndr: add ndr_push_pipe_chunk_trailer() and ndr_check_pipe_chunk_trailer()
      librpc/tools/ndrdump: add support for dcerpc 'pipe' elements in functions
      pidl/NDR: add ContainsPipe() function
      pidl:Samba3/ClientNDR: don't generate stubs for functions with pipe elements
      pidl:Python: don't generate functions with pipe elements
      pidl:NDR/Client: skip sync functions if pipe elements are used
      pidl:NDR/Client: skip all functions if pipe elements are used
      pidl/idl.yp: fill 'pipe' elements with array and count
      pidl: add support for 'pipe' at the NDR layer
      frstrans.idl: add idl for RawGetFileDataAsync() and RdcGetFileDataAsync()
      pidl:Samba4/NDR/Parser: fix compiler warnings in 'pipe' related code
      pidl:Samba4/NDR/Client: fix arguments to warning()
      s4:librpc/rpc: s/struct dcerpc_connection/struct dcecli_connection/g
      s3:librpc/rpc: remove unused dcerpc_pipe define hack
      librpc/rpc: move dcerpc_binding_handle stuff to rpc_common.h
      s4:rpc_server/remote: use dcerpc_binding_handle_call_*() instead of dcerpc_ndr_request_*()
      s4:torture/rpc/object_uuid: use dcerpc_binding_handle_call() instead of dcerpc_ndr_request()
      s4:librpc/rpc: remove unused dcerpc_ndr_request* code
      s4:librpc/rpc: s/dcerpc_security/dcecli_security
      librpc/rpc: move enum dcerpc_transport_t to rpc_common.h
      s3:librpc/rpc: add target_principal to struct dcerpc_binding
      librpc/rpc: move struct dcerpc_binding to rpc_common.h
      librpc/rpc: add dcerpc_binding_handle_raw_call()
      s4:pyrpc: fix memory leaks in error pathes
      s4:pyrpc: use dcerpc_binding_handle_raw_call() instead of dcerpc_request()
      s4:torture/rpc/autoidl: use dcerpc_binding_handle_raw_call() instead of dcerpc_request()
      s4:torture/rpc/countcalls: use dcerpc_binding_handle_raw_call() instead of dcerpc_request()
      s4:torture/rpc/scanner: use dcerpc_binding_handle_raw_call() instead of dcerpc_request()
      s4:librpc/rpc: make dcerpc_request_recv() static
      s4:librpc/rpc: remove unused dcerpc_request()
      s4:librpc/rpc: finaly make struct rpc_request and enum rpc_request_state private
      s3:librpc/rpc: add DCERPC_ANON_FALLBACK flag
      librpc/rpc: move DCERPC_ flags to rpc_common.h
      s4:ldb: don't install .pc files when building a private library
      s3:Makefile.in: make sure we rebuild bin/smbtorture4 if there where changes
      s3:locking: brl_get_locks_internal() should not expose a write lock if the caller wants read_only
      s3:locking: simplify the non cluster case of brl_get_locks_readonly()
      s3:smbd: remove uses of "./" in unlink_internals()
      selftest/Samba3: use 'debug pid=yes'
      s4:ntvfs/posix: grant SEC_STD_DELETE if the parent grants SEC_DIR_DELETE_CHILD
      s3:smbd: access checks should not depend on share mode flags
      libcli/security: make sure that we don't grant SEC_STD_DELETE to the owner by default
      s4:ntvfs/posix: name->dos.attrib isn't initialized in pvfs_access_check_create()
      Revert "Change strict allocate to default to true.
      s4:dsdb/repl_meta_data: normalize the rdn attribute name based on the schema
      s4:dsdb/repl_meta_data: allow passing an explicit attribute list to replmd_update_rpmd()
      s4:dsdb/repl_meta_data: update replPropertyMetaData on originating renames
      selftest:Samba4: setup DC_* variables in provision_rpc_proxy()
      talloc: use TC_HDR_SIZE instead of sizeof(struct talloc_chunk)
      talloc: add TC_ALIGN16() macro
      talloc: add TC_POOL_SPACE_LEFT() macro
      talloc: add TC_POOL_FIRST_CHUNK() macro
      talloc: optimize talloc_free() and talloc_realloc() for talloc pools
      talloc: use VALGRIND_MAKE_MEM_UNDEFINED() before memmove()
      talloc: add TC_INVALIDATE_FULL_CHUNK() macro
      talloc: add TC_INVALIDATE_SHRINK_CHUNK() marco
      talloc: add TC_UNDEFINE_GROW_CHUNK() marco
      talloc: add TC_INVALIDATE_POOL marco
      talloc: include valgrind headers if available
      talloc/testsuite: test more talloc_pool related things
      talloc/testsuite: avoid memory leak reported by valgrind
      talloc: fix compiler warnings with -Wc++-compat
      s3:WHATSNEW.txt: remove the "strict allocate" default value
      s3:smbd/trans2: make use of BVAL() and remove ugly LARGE_SMB_OFF_T ifdef's
      s3:includes: simplify BIG_UINT macros
      s3:includes: simplify INO_T_VAL macros
      lib/util: add RBVAL, RBVALS, RSBVAL and RSRBVALS macros
      s3:winbindd: let winbindd_lookup_sids() dcerpc_binding_handle functions
      s3:winbindd: let winbindd_lookup_names() use dcerpc_binding_handle functions
      s3:rpc_client: map fault codes to NTSTATUS with dcerpc_fault_to_nt_status()
      s3:lib/access: normalize IPv4 mapped IPv6 addresses in both directions (bug #7383)
      s3:lib/util_sock: listen on IPv6 addresses with IPV6_ONLY (bug #7383)
      docs-xml/smb.conf.5: %i and %I no longer contain IPv4 mapped IPv6 addresses
      s4:selftest: skip s3member tests for now
      s4:ntvfs/smb2: use sync version of smb2_connect()
      s4:libcli/smb2: convert smb2_connect_*() to tevent_req
      s4:libcli/smb2: rename step functions of smb2_connect_*()
      s4:libcli/smb2: move smb2_connect_resolve_done()
      s4:libcli/smb2: move smb2_connect_socket_done()
      s4:libcli/smb2: move smb2_connect_negprot_done()
      s4:libcli/smb2: move smb2_connect_session_done()
      s4:libcli/smb2: move smb2_connect_tcon_done()
      s4:libcli/smb2: move smb2_session_setup_spnego_send() to the top
      s4:libcli/smb2: let smb2_session_setup_spnego_* use tevent_req
      s4:libcli/smb_composite: better names for smb2_composite_setpathinfo_* funcs and vars
      s4:libcli/smb_composite: add smb2_composite_setpathinfo_close_done()
      s4:libcli/smb_composite: move smb2_composite_setpathinfo_create_done()
      s4:libcli/smb_composite: move smb2_composite_setpathinfo_setinfo_done()
      Revert "s4:selftest: skip s3member tests for now"
      s4:torture/nbt/winsreplication: use torture macros in order report failures
      s4:torture/nbt/winsreplication: assert the nbt name before the type
      s4:torture/nbt/winsreplication: ignore incoming broadcast messages
      selftest: use env.SELFTEST_PREFIX instead of hardcoded "${srcdir}/st"
      script/autobuild.py: make sure --with-selftest-prefix keeps working
      script/autobuild.py: don't force usage of ccache and gcc
      talloc: use TC_UNDEFINE_SHRINK_CHUNK() instead of TC_INVALIDATE_SHRINK_CHUNK() for realloc path
      libcli/util/ntstatus: NO_S4U_PROT_SUPPORT and CROSSREALM_DELEGATION_FAILURE
      s3:libsmb/nterr: NO_S4U_PROT_SUPPORT and CROSSREALM_DELEGATION_FAILURE
      s4:libcli/util/nterr: NO_S4U_PROT_SUPPORT and CROSSREALM_DELEGATION_FAILURE
      s4:ldb/ldif: add support for "modrdn"
      s4:ldb/tools: add support for "modrdn" to ldbmodify
      s4:ldb/tests: add tests for ldbmodify and 'modrdn'
      s4:ldb: change version to 1.1.0 after adding new functions:
      script: add hardcoded library release key id
      script/librelease: use a GPG_KEYID variable to hold the signing key
      script/librelease: set umask 0022
      script/librelease: add more error checking
      script/librelease: display the permission on the server
      s3:libsmb: make use of BVAL() and remove ugly LARGE_SMB_OFF_T ifdef's
      s3:lib/sysquota: remove ugly LARGE_SMB_OFF_T ifdef's
      s3:smbd/nttrans: make use of BVAL() and remove ugly LARGE_SMB_OFF_T ifdef's
      Revert "s3-vfs: another attempt to fix the Tru64 build."
      s3:include/vfs.h: remove very old hints for vfs modules with interface version < 8
      talloc: split the handling of FLAG_POOL/FLAG_POOLMEM in _talloc_free_internal
      talloc: make use of _talloc_free_poolmem() in _talloc_realloc()
      talloc: make really sure only optimize realloc if there's only one pool chunk
      talloc: setup the new 'tc' before TC_UNDEFINE_GROW_CHUNK()  _talloc_realloc()
      talloc: add memset() calls to test_pool()
      talloc: test talloc_steal out of a talloc_pool
      talloc: use _talloc_free_internal() in talloc_free_children()
      talloc: fixed a use after free error in talloc_free_children()
      talloc: splitout _talloc_free_children_internal()
      Revert "s3-rpc_server: Force ncalrpc dir to be mode 755."
      s3:rpc_server: create lp_ncalrpc_dir() with 0755 before lp_ncalrpc_dir()/np with 0700
      HEIMDAL:kdc: let check_PAC() to verify the incoming server and krbtgt cheksums
      HEIMDAL:kdc: pass the correct principal name for the resulting service ticket
      HEIMDAL:kdc: check and regenerate the PAC in the s4u2proxy case
      s4:gensec_gssapi: avoid delegation if s4u2self/proxy is used
      s4:auth/credentials: pass 'self_service' to cli_credentials_set_impersonate_principal()
      s4:auth/credentials: S4U2Self should force CRED_MUST_USE_KERBEROS
      s4:kdc: UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION => flags.trusted_for_delegation
      s4:kdc: split s4u2self and s4u2proxy checks
      s4:ntvfs/cifs: return NT_STATUS_INTERNAL_ERROR if no credentials are available
      s3:testparm: don't return an error for a warning message
      selftest: create ncalrpcdir with 0755 permissions
      s3:libsmb/cli_np_tstream: use larger buffers to avoid a bug NT4 servers (bug #8195)
      s3:libsmb:cli_np_tstream: use dynamic talloc buffers
      s3:libsmb/cli_np_tstream: s/TSTREAM_CLI_NP_BUF_SIZE/TSTREAM_CLI_NP_MAX_BUF_SIZE
      s3:selftest: add a few more raw.* tests
      server_id.idl: change unique_id to hyper
      s3:lib/util: use %llu consitently (instead of %d) in interpret_pid() to parse the pid
      s3:rpcclient: remove unused new_workgroup variable
      s3:libsmb/async_smb: let cli_smb_recv() initialize output values for one way requests
      s3:libsmb/async_smb: call cli_smb_req_unset_pending() instead of destructor directly
      s3:libsmb/async_smb: don't remove pending requests if the mid is set
      s3:libsmb/async_smb: add helpers to get and set the seqnum for signing
      s3:libsmb/clitrans: remove unused secondary_request_ctx
      s3:libsmb/clitrans: use uint32_t for param and data variables
      s3:libsmb/clitrans: marshall SMBnttrans[2] as the others
      s3:libsmb/clitrans: correctly marshall [nt]trans[s][2] requests
      s3:libsmb/clitrans: move MID handling to the end of cli_trans_send() and add a comment
      s3:libsmb/clitrans: use subreq2 as variable for the secondary requests
      s3:libsmb/clitrans: fix handling of multi pdu [nt]trans[s][2] calls
      s3:libsmb/clitrans: correctly transfer the seqnum between secondary and primary requests
      s3:libsmb/clireadwrite: calculate cli_read_max_bufsize() correct based on max_xmit
      s3:libsmb/clireadwrite: calculate cli_write_max_bufsize() correct based on max_xmit
      s3:libsmb: remove unused cli_state_seqnum infrastructure
      s3:smbd/quotas: add #include "system/filesys.h" (bug #8224)
      s3:utils/net_*registry: use c99 initializers which are supported by old gcc 2.95 compilers (bug #8226)
      s4:libcli/smb_composite: convert smb2_composite_setpathinfo_send/rev to tevent_req
      auth/kerberos/gssapi_pac: fix compiler warnings
      s3:rpc_server/svcctl: don't allocate return values on a temporary stackframe
      s3:rpc_server/svcctl: fix valgrind bugs in _svcctl_QueryServiceConfig2W()
      s3:rpc_server/svcctl: fix valgrind bug in _svcctl_QueryServiceObjectSecurity()
      Revert "s3-winbind: Fix paranoia checks in winbindd_samr.c."
      s3:wb_lookupsids: don't ignore 'result' and check if we got useable values
      s3:wb_lookupsids: add some paranoia checks to wb_lookupsids_recv()
      s4:auth/kerberos: don't ignore return code in kerberos_kinit_password_cc()
      s4:auth/kerberos: use better variable names in kerberos_kinit_password_cc()
      s4:auth/kerberos: don't mix s4u2self creds with machine account creds
      s4:auth/kerberos: reformat kerberos_kinit_password_cc()
      s4:auth/kerberos: remove one indentation level in kerberos_kinit_password_cc()
      s4:auth/kerberos: protect kerberos_kinit_password_cc() against old KDCs
      s4:auth/kerberos: add S4U2Proxy support to kerberos_kinit_password_cc()
      s4:auth/kerberos: protect kerberos_kinit_password_cc() against old KDCs
      s4:ntvfs/cifs: add option to use S4U2Proxy
      s4:winbind/wb_init_domain: use DCERPC_SCHANNEL_128 in order to work against w2k8r2
      Merge commit 'release-4-0-0alpha15' into master4-tmp
      Merge commit 'release-4-0-0alpha16' into master4-tmp
      s3:smb2_ioctl/FSCTL_PIPE_TRANSCEIVE: generate STATUS_BUFFER_OVERFLOW if needed (bug #8260)
      HEIMDAL:kdc: use the correct client realm in the EncTicketPart
      HEIMDAL:kdc: pass down the server hdb_entry_ex to check_constrained_delegation()
      HEIMDAL:kdc: don't allow self delegation if a backend check_constrained_delegation() hook is given
      s4:python/samba/samdb: add toggle_userAccountFlags() helper function
      s4:samba-tool: add "delegation" subcommands for S4U2Proxy and related stuff
      s4:kdc: implement samba_kdc_check_s4u2proxy()
      selftest/Samba4: correctly upper case the netbiosname variable
      s4:selftest: use wildcards for ntvfs.cifs tests in knownfail and skip files
      s4:selftest: test ntvfs.cifs with s4u2proxy
      s3:configure: remove unused --with-rootsbindir configure option
      HEIMDAL:kdc/windc_plugin.h: KRB5_WINDC_PLUGIN_MINOR 4 => 5
      HEIMDAL:kdc: pass down the delegated_proxy_principal to the verify_pac()
      s4:kdc: use KRB5_WINDC_PLUGIN_MINOR define instead of KRB5_WINDC_PLUGING_MINOR
      krb5pac.idl: add PAC_CONSTRAINED_DELEGATION (S4U_DELEGATION_INFO)
      s4:kdc: generate the S4U_DELEGATION_INFO in the regenerated pac
      s4:kdc/mit_samba: disable mit_samba_check_s4u2proxy()
      s3:nmbd_subnetdb: close all sockets attached to a subnet in close_subnet() (bug #8276)
      lib/util/string_wrappers: move everything into one HAVE_COMPILER_WILL_OPTIMIZE_OUT_FNS block
      release-scripts/create-tarball: always create a tag in form of samba-${version}
      script/librelease.sh: keep dots in the release tag
      s3:smb2_create: call 'return' after smbd_server_connection_terminate()
      s3:smb2_server: there's no reason to check the session id twice on a smb2_tcon request
      s3:sharesec: also initialize pgranted if get_share_security() returns NULL
      s3:sharesec: return an error if get_share_security() returns NULL
      s3:libsmb: fix error handling in cli_dfs_get_referral()
      s3:libsmb: don't use cli->inbuf in cli_dfs_get_referral()
      s3:libsmb: the SMB_QUERY_FS_VOLUME_INFO response needs at least 18 data bytes
      s3:libsmb: use clistr_pull_talloc() in cli_get_fs_volume_info()
      s3:libsmb: let cli_qfileinfo[_recv]() return recv_flags2
      s3:libsmb: use clistr_pull_talloc() in cli_qfilename()
      s4:torture/smb2: s/smb2cli_lock/test_smb2_lock
      s4:torture/smb2: s/smb2cli_unlock/test_smb2_unlock
      s3:utils: avoid cli_nt_error()/cli_errstr() if we already have the status
      s3:libsmb: make trans2_bytes_push_str() non-static
      s3:libsmb: add trans2_bytes_push_bytes()
      s3:libsmb: interpret_long_filename() short_name is always UNICODE
      s3:libsmb: use clistr_pull_talloc() for short_name in interpret_long_filename()
      s3:libsmb: use trans2_bytes_push_str/bytes() in cli_list_trans_*()
      s3:libsmb: use a talloc_stackframe in cli_dfs_get_referral()
      s3:libsmb: use trans2_bytes_push_str() in cli_dfs_get_referral()
      s3:libsmb: use trans2_bytes_push_str() in cli_set_ea_path()
      s3:libsmb: use trans2_bytes_push_str() in cli_tcon_andx_create() for the plaintext password
      s3:torture/scanner: use trans2_bytes_push_str() in scan_trans2()
      s3:torture/scanner: use trans2_bytes_push_str() in scan_nttrans()
      s3:libsmb: remove unused clistr_pull_fn()
      s3:libsmb: remove unused clistr_push_fn()
      s3:libsmb: finally remove unused cli_state->outbuf
      s3-torture: use nt_errstr() for cli_unlink() error handling
      s3:smb2_server: call change_to_root_user() or smbd_smb2_request_check_tcon()
      s3:libsmb: add basic smb2 client infrastructure
      s3:libsmb: add smb2cli_negprot*()
      s3:libsmb: add smb2cli_sesssetup*() and smb2cli_logoff*()
      s3:libsmb: add smb2cli_tcon*() and smb2cli_tdis*()
      s3:libsmb: add smb2cli_create*()
      s3:libsmb: add smb2cli_close*()
      s3:libsmb: add smb2cli_flush*()
      s3:libsmb: add smb2cli_read*()
      s3:libsmb: add smb2cli_write*()
      s3:libsmb: add smb2cli_query_directory*()
      s3:torture: add SMB2-BASIC
      s3:selftest: run SMB2-BASIC
      s3:wscript_build: remove unused variable
      s3:smb2_server: add some comments about change_to_user() and change_to_root_user()
      s3:auth_unix: remove unused var
      s3:auth: remove unused variable
      s3:auth_server: use cli->is_guestlogin instead of parsing cli->inbuf.
      s3:libsmb: remove use of cli_errstr() in SMBC_server_internal()
      s3:clitar: avoid usage of cli_errstr()
      s3:client: avoid cli_errstr() where we already have an NTSTATUS
      s3:client: use cli_nt_error() in order to avoid cli_errstr()
      s3:client: close the socket if receive_smb_raw() fails
      s3:libsmb: remove unused enum smb_read_errors infrastructure
      s3:libsmb: don't call cli_set_error() in cli_echo()
      s3:torture: use cli_is_nt/dos_error() in run_error_map_extract()
      s3:libsmb: don't use the cli->inbuf to store the last error
      s3:libsmb/smberr: make global const arrays static
      s3:libsmb: remove unused smb_dos_errstr()
      s3:libsmb: clistr_pull_talloc() doesn't need base_ptr and flags2 with STR_ASCII
      s3:client: use an inbuf on the stack in readline_callback()
      s3:libsmb: remove unused cli->inbuf and cli->bufsize
      tevent: fix comments for tevent_req_post()
      tevent: add tevent_req_defer_callback()
      tevent: change version to 0.9.13 after adding tevent_req_defer_callback()
      s3:smb2cli_base: rename 'result' => 'req' in smb2cli_req_create()
      s3:smb2cli_base: keep the order of pending requests
      s3:smb2cli_base: unset the destructor in smb2cli_req_unset_pending()
      s3:smb2cli_base: call smb2cli_req_unset_pending() before tevent_req_done()
      s3:smb2cli_base: fix memory hierachy in smb2cli_req_recv()
      s3:smb2cli_base: make use of tevent_req_defer_callback()
      s3:smb2cli_base: ask for the next response if there're still pending requests
      s3:smb2cli_tcon: use tevent_req_oom()
      s4:lib/socket: iface_list_wildcard() should only return "::" if we have ipv6 interfaces
      socket_wrapper: make sure interfaces are in the valid range on bind()
      s3:smb2cli_base: add my copyright
      s3:libsmb: also remember the local socket address after connect
      s3:libsmb: remove unused cli_set_port()
      s3:libsmb: make use of cli_state_is_connected()
      s3:libsmb: add cli_state_disconnect()
      s3:libsmbclient: don't log the lowlevel fd in smbc_free_context()
      s3:libsmbclient: use cli_state_is_connected() in SMBC_check_server()
      s3:client: simplify readline_callback() to only use cli_echo()
      s3:auth_server: make use of cli_state_is_connected()
      s3:auth_server: use cli_echo() to check if the server is alive
      s3:winbindd_cm: make use of cli_state_is_connected()
      s3:winbindd_cm: make use of cli_state_disconnect()
      s3:winbindd_cm: make use of cli->dest_ss instead calling getpeername()
      s3:winbindd_cm: make use of cli->src_ss instead of calling getsockname()
      s3:smbd/msdfs: let create_conn_struct() check the share security descriptor
      s3:smbd: make smbd_calculate_access_mask() non-static
      s3:smbd: check the share level access mask in smbd_calculate_access_mask()
      s3:smbd: use smbd_calculate_access_mask() also for fake_files
      s3:smbd: return the real share access mask in the SMBtconX response
      s3:smb2_tcon: return the correct maximal_access on the share
      s3:smb2_create: use smbd_calculate_access_mask() instead of smbd_check_open_rights()
      libcli/smb: add PROTOCOL_SMB2_02 constant
      s3:loadparm: use PROTOCOL_SMB2_02 instead of PROTOCOL_SMB2
      s3:smbd: use PROTOCOL_SMB2_02 instead PROTOCOL_SMB2
      s3:libsmb: remove unused cli->privileges
      libcli/smb: add NBSS message types
      s3:lib: s/SMBkeepalive/NBSSkeepalive
      s3:libsmb: s/SMBkeepalive/NBSSkeepalive
      s3:smbd: s/SMBkeepalive/NBSSkeepalive
      s3:include: remove SMBkeepalive
      s4:smb_server: s/SMBkeepalive/NBSSkeepalive
      s4:libcli/raw: remove SMBkeepalive
      s3:libsmb: remove unused cli_oplock_handler()
      s4:param: add "state dir" and "cache dir" options
      selftest/Samba4: setup "state dir" and "cache dir"
      s4:provision: place the sysvol share under "state dir" instead of "lock dir"
      selftest/Samba4: use "state dir" for persistent files
      s4:winsdb: place wins.ldb in "state dir" instead of "lock dir"
      s4:libcli/raw: s/SMBchkpth/SMBcheckpath
      s3:libsmb: remove unused cli_smb_inbuf()
      Revert "build: Put lockdir and cachedir in FHS-like locations by default"
      Revert "s4-build Change default paths and --with flags for a 4.0 release"
      dynconfig: use an option group for the samba specific options
      dynconfig: remember which options still have their default value
      dynconfig: add SambaIndentedHelpFormatter in order to support \n in option help text
      dynconfig: rework the logic to support --enable-fhs
      s3:configure: use the same dynconfig options and default values as the toplevel build
      dynconfig/wscript: use $libdir/security for PAMMODULESDIR as in config.m4
      lib/util/attr: add _UNUSED_ marco
      s4:heimdal_build: provide HEIMDAL_UNUSED_ATTRIBUTE
      s4:heimdal_build: only maintain lib/gssapi/{spnego,krb5} file lists once
      s4:heimdal_build: we need k5crypto and gssapi_krb5 aliases also when using system libraries
      s3:clikrb5: fix the build with newer heimdal versions
      s4:heimdal: import lorikeet-heimdal-201107150856 (commit 48936803fae4a2fb362c79365d31f420c917b85b)
      s4:heimdal: add missing files
      s4:heimdal_build: define HAVE_KRB5_PDU_NONE_DECL
      s4:auth/credentials: with the build after heimdal import
      s4:kdc: set *_strongest_*_key to true to restore the old behavior
      s4:kdc: restore the behavior before the last heimdal import
      s3:libsmb: smb_bytes_talloc_string() doesn't need a cli_state
      s3:libsmb: move cli->mid to cli->smb1.mid
      s3:libsmb: add cli->smb1.vc_num and hide it behind cli_state_get_vc_num()
      s3:libsmb: move cli->pid to cli->smb1.pid and hide it behind cli_[g|s]etpid()
      s3:libsmb: move cli->cnum to cli->smb1.tid and hide it behind cli_state_[g|s]et_tid()
      s3:libsmb: add cli_state_encryption_on()
      s3:libsmb: move cli->vuid to cli->smb1.uid and hide it behind cli_state_[g|s]et_uid()
      s3:libsmb: don't pass cli->called.name to NTLMv2_generate_names_blob()
      s3:include: remove unused cli_state->called and cli_state->calling
      s3:libsmb: replace cli_initialise[_ex]() by cli_state_create()
      s3:winbindd_cm: remove unused checks for address family
      s3:libsmb: fix compiler warnings in cli_state_create()
      s3:libsmb: move cli_state->pending to cli_state->conn.pending
      s3:libsmb: move cli_state->outgoing to cli_state->conn.outgoing
      s3:smbtree: try to fix completely broken logic in get_workgroups()
      s3:torture: use cli_state_disconnect() to close the socket on SIGALRM
      s3:libsmb: make use of cli_state_is_connected()
      s3:libsmb: make use of cli_state_disconnect()
      s3:libsmb: move cli_state->fd to cli_state->conn.fd
      s3:libsmb: add cli_state_[local|remote]_sockaddr()
      s3:winbindd_cm: use cli_state_[local|remote]_sockaddr()
      s3:libnet: use cli_state_remote_sockaddr() in libnet_DomainJoin()
      s3:libsmb: use cli_state_remote_sockaddr() in smb2cli_tcon_send()
      s3:libsmb: let cli_connect_nb() only expect a const sockaddr_storage *dest_ss
      s3:net_time: expect const sockaddr_storage in cli_servertime()
      s3:libsmb: only pass a const sockaddr_storage to cli_start_connection()
      s3:libsmb_server: pass NULL instead of a zero sockaddr_storage
      s3:smbcacls: pass down NULL instead of a zero sockaddr_storage
      s3:smbcquotas: pass down NULL instead of a zero sockaddr_storage
      s3:libsmb: only pass const sockaddr_storage to cli_full_connection()
      s3:auth_domain: add some const to sockaddr_storage
      s3:net_util: add some const to sockaddr_storage
      s3:net_util: pass const sockaddr_storage to net_make_ipc_connection_ex()
      s3:net_rpc_join: pass const sockaddr_storage to net_rpc_join_ok()
      s3:net_rpc_join: make use of cli_state_remote_sockaddr()
      s3:net_rpc: make use of cli_state_remote_sockaddr()
      s3:net_rpc_printer: make use of cli_state_remote_sockaddr()
      s3:libsmb: move cli_state->{src_ss,dest_ss} to cli_state->conn.{local_ss,remote_ss}
      s3:libsmb: remove const from cli_cm_display()
      s3:libsmb: add cli_state_remote_name()
      s3:auth_domain: we already have the dc_name, it's the same as cli->desthost
      s3:auth_server: make use of cli_state_remote_name()
      s3:client: make use of cli_state_remote_name()
      s3:lib/netapi: make use of cli_state_remote_name()
      s3:libnet_join: make use of cli_state_remote_name()
      s3:libsmb/cliconnect: make use of cli_state_remote_name()
      s3:libsmb/clidfs: make use of cli_state_remote_name()
      s3:libsmb/clifsinfo: make use of cli_state_remote_name()
      s3:libsmb/clirap2: make use of cli_state_remote_name()
      s3:libsmb/libsmb_dir: make use of cli_state_remote_name()
      s3:libsmb_server: make use of cli_state_remote_name()
      s3:cli_pipe: use result->desthost instead of cli->desthost
      s3:cli_pipe: make use of cli_state_remote_name()
      s3:cli_pipe_schannel: make use of cli_state_remote_name()
      s3:rpcclient: use rpc_pipe->desthost instead of cli->desthost
      s3:rpcclient: make use of cli_state_remote_name()
      s3:net_rap: make use of cli_state_remote_name()
      s3:net_rpc: use netr->desthost instead of cli->desthost
      s3:net_rpc: make use of cli_state_remote_name()
      s3:net_rpc_join: use pipe_hnd->desthost instead of cli->desthost
      s3:net_rpc_join: make use of cli_state_remote_name()
      s3:net_rpc_printer: make use of cli_state_remote_name()
      s3:net_rpc_registry: use pipe_hnd->desthost instead of cli->desthost
      s3:net_util: use server_name instead of cli->desthost
      s3:winbindd_cm: use controller instead of cli->desthost
      s3:libsmb: move cli_state->desthost to cli_state->conn.remote_name
      s3-torture: run_locktest7(): goto fail on read error
      s3-torture: run_locktest7(): replace cli_read_old() with cli_read()
      s3:libsmb_xattr: make use of the new cli_query_secdesc()
      s3:libsmb: remove unused cli_query_secdesc_old()
      libcli/security: add some const to marshall_sec_desc[_buf]()
      s3:libsmb: cli_set_secdesc() only needs a const struct security_descriptor
      s4:heimdal: build samba4kgetcred
      s4:auth/kerberos: activate windows related krb5 flags
      s4:heimdal: import lorikeet-heimdal-201107241840 (commit 0fdf11fa3cdb47df9f5393ebf36d9f5742243036)
      s4:heimdal_build: hdb.asn1 needs --sequence=HDB-Ext-KeySet --sequence=Keys
      s4:kdc: canonicalize the principal if HDB_F_FOR_TGS_REQ is given
      s4:samba-tool: ldapcmp needs CredentialsOptionsDouble
      s3:test_async_echo: unsure the desired smb message sequence
      pidl:NDR/Parser: use '0' instead of 'NULL' for an uint32_t value
      pidl:NDR/Parser: use interface->{UUID} and {NAME} instead of the raw {PROPERTIES}
      pidl:NDR/Server: use interface->{UUID} and {NAME} instead of the raw {PROPERTIES}
      s3:rpc_transport_tstream: call tstream_cli_np_use_trans() before tstream_writev_queue_send()
      eventlog6.idl: fix definition of eventlog6_StringArray
      pidl:NDR/Parser: allow [string,size_of()] together
      winsif.idl: fix comment about a pidl bug
      s3:smb2cli_base: smb2cli_req_send() needs to call tevent_req_post() on error
      s3:libsmb: add cli_state_capabilities()
      s3:include: make use of cli_state_capabilities() in SERVER_HAS_UNIX_CIFS()
      s3:winbindd_cm: make use of cli_state_capabilities()
      s3:torture: make use of cli_state_capabilities()
      s3:libsmb/libsmb_*: make use of cli_state_capabilities()
      s3:libsmb/cli*: make use of cli_state_capabilities()
      s3:include: change cli->protocol to enum protocol_types
      s3:libsmb: add cli_state_protocol()
      s3:winbindd_cm: make use of cli_state_protocol()
      s3:net_rpc: make use of cli_state_protocol()
      s3:masktest: make use of cli_state_protocol()
      s3:spoolss: make use of cli_state_protocol()
      s3:auth_server: make use of cli_state_protocol()
      s3:client: make use of cli_state_protocol()
      s3:libsmb/cli*: make use of cli_state_protocol()
      s3:libsmb/libsmb_server: make use of cli_set_timeout()
      s4:kdc: fix compiler warning
      s3:libsmb/clidfs: make use of cli_state_encryption_on()
      s3:winbindd_cm: make use of cli_set_timeout()
      s3:torture: make use of cli_set_timeout()
      s3:cli_np_tstream: make use of cli_set_timeout()
      s3:libsmb/clifile: make use of cli_set_timeout()
      s3:rpc_transport_tstream: only use tstream_cli_np_use_trans() for sync requests
      s4:netcmd/gpo.py: we don't need to set autogenerated attributes
      s3:web/swat: use strtoll() instead of atoi/atol/atoll
      s3:smb2_server: make sure we grant credits on async read/write operations (bug #8357)
      pyldb: fix uninitialized memory bug in PyArg_ParseTuple() argument
      pidl:Samba4/Python: PyArg_ParseTuple with "s#" returns 'int' instead of 'size_t'
      s4:pycredentials: PyArg_ParseTuple("i") requires an 'int' argument.
      s4:pyregistry: PyArg_ParseTuple("z#") requires an 'int' argument instead of 'size_t'
      s4:py_net: PyArg_ParseTuple("i") requires an 'int' argument
      s4:pyglue: PyArg_ParseTuple("I") requires an 'unsigned int' argument
      s3:lib/events: Fix a bug in run_poll_events().
      ndr_drsuapi: fix compiler warning
      script/librelease.sh: add git push for the release tag
      s3:torture/*: use CLI_BUFFER_SIZE instead of cli->max_xmit
      s3:libsmb/cli*: use CLI_BUFFER_SIZE instead of cli->max_xmit
      tevent: add tevent_queue_running() function
      tevent: allow tevent_queue_add() to take a NULL trigger function
      tevent: splitout tevent_queue_add_internal() from tevent_queue_add()
      tevent: add tevent_queue_add_entry() and tevent_queue_add_optimize_empty()
      tevent: fix some comments in tevent.h
      tevent: change the version to 0.9.14 after the tevent_queue changes
      tsocket: make use of tevent_queue_add_optimize_empty() to optimize for the empty queue case
      Revert "s3:test_async_echo: unsure the desired smb message sequence"
      s3:include: smb.h merge some stuff from source4
      s3:include: smb.h base old smb header offsets on new defines
      s3:smb_macros.h: simplify _smb_setlen() and _smb_setlen_large()
      s3:libsmb: store the remote_realm on the cli_state
      s3:libsmb: pass remote_realm to cli_session_setup_spnego() in cli_session_setup()
      s3:winbindd_cm: use cli_session_setup() instead of cli_session_setup_spnego()
      s3:libsmb: make cli_session_setup_spnego() static
      s3:selftest: run smbtorture3 CHAIN1/CHAIN2 tests
      s3:libsmb: add cli_state_notify_pending() and use it
      s3:libsmb: reset the destructor in cli_smb_req_unset_pending()
      s3:libsmb: call cli_smb_req_unset_pending() before tevent_req_done() also for chained requests
      s3:libsmb: use talloc_stackframe() in cli_smb_received()
      s3:libsmb: split out cli_state_receive_next() from cli_smb_req_set_pending()
      s3:libsmb: notify all request about failures in cli_smb_req_set_pending()
      s3:libsmb: make use of cli_state_receive_next() in cli_smb_received()
      s3:libsmb: use tevent_req_defer_callback() unless there's only one request in cli_smb_received()
      s3:libsmb: keep the request order in cli_smb_req_unset_pending()
      selftest:target/Samba4: use the correct configuration in setup_vampire_dc()
      s4:libnet: passdown the DsGetNCChangesReq* to the libnet_BecomeDC_StoreChunk handler
      s4:libnet_vampire: don't keep the replication state if DRSUAPI_DRS_CRITICAL_ONLY was used
      s4:py/samba/drs_utils: pass down req/req_level to self.net.replicate_chunk()
      s4:py/samba/join: add domain_critical_only=False to join_DC/join_RODC
      s3:samba-tool: add --domain-critical-only to "samba-tool domain join"
      selftest:Samba4: test --domain-critical-only in provision_vampire_dc()
      s3:smb2_server: make sure we prefer responses over requests on the client socket
      s3:libsmb: add missing TALLOC_FREE(frame) to cli_smb_received()
      s3:libsmb: split out cli_state_dispatch_smb1() from cli_smb_received()
      s3:libsmb: abstract the incoming dispatch function via a function pointer
      s3:libsmb: keep a cli_smb_state->one_way
      s3:smb2cli: allow 32bit dyn_len in smb2cli_req_create()/smb2cli_req_send()
      s3:smb2cli: pass more fields to smb2cli_req_create()/smb2cli_req_send()
      s3:libsmb: let cli_smb_req_mid() return the mid set by cli_smb_req_set_mid()
      s3:libsmb: use cli_smb_req_set_mid() in cli_smb_oplock_break_waiter_send()
      s3:libsmb: move cli_smb_oplock_break_waiter*() to clioplock.c
      s3:libsmb: move cli_session_request*() to smbsock_connect.c
      s3:libsmb: make cli_session_request_send/recv() static
      s3-build: move libsmb/clisigning.c to LIBSMB_SRC
      s3:include: add CAP_LWIO and CAP_DYNAMIC_REAUTH defines
      smb2_constants: add SMB2_HDR_CREDIT_CHARGE
      s3:smb2_server: keep compound_related on struct smbd_smb2_request
      s3:smb2cli: ask for a session key in smb2cli_sesssetup_send()
      libcli/smb: move smb2_signing.c to the toplevel
      s4:param: make use of PROTOCOL_SMB2_02
      s4:smb_server: make use of PROTOCOL_SMB2_02
      s4:ntvfs: s/== PROTOCOL_SMB2/>= PROTOCOL_SMB2_02/
      s4:ntvfs: s/!= PROTOCOL_SMB2/< PROTOCOL_SMB2_02/
      s4:libcli/raw: make use of PROTOCOL_SMB2_02
      s3:smbd: make use of PROTOCOL_SMB2_02
      libcli/smb: remove PROTOCOL_SMB2 alias of PROTOCOL_SMB2_02
      libcli/smb: add PROTOCOL_SMB2_10
      s3:smb2cli: don't use state->cli->smb2.mid++ as macro argument
      s3:smb2cli: disconnect the connection, if we're out of message ids
      s3:smb2cli: make sure requests are not finished, when we send when to the network
      s3:smb2cli: make sure we don't try to send requests on a disconnected cli_state
      s3:smb2_server: max_trans, max_read and max_write are limited to 64 kilobytes
      s3:smb2_server: return NOT_SUPPORTED if we don't find a common dialect with the client
      s3:smb2_server: add basic support for SMB 2.1
      s4:auth/gensec: gensec.h was moved to gensec_runtime
      s4:librpc: rpc_common.h was move to dcerpc-binding
      smb2_constants: add SMB2_WRITEFLAG_WRITE_THROUGH define
      s3:smb2_server: make use of SMB2_WRITEFLAG_WRITE_THROUGH
      s3:smb2cli: SMB2_SESSION_SETUP needs one dyn byte to that the structure size check works.
      s3:smb2cli: SMB2_CREATE needs one dyn byte to that the structure size check works.
      s3:smb2cli: SMB2_QUERY_DIRECTORY needs one dyn byte to that the structure size check works.
      s3:smb2cli: SMB2_READ needs one dyn byte to that the structure size check works.
      s3:smb2cli: SMB2_WRITE needs one dyn byte to that the structure size check works.
      s3:smb2cli: SMB2_TCON needs one dyn byte to that the structure size check works.
      s3:smb2cli: don't terminate the pathname in smb2cli_tcon()
      s3:smb2cli: don't terminate the pathname in smb2cli_create()
      s3:smb2cli: don't terminate the pathname in smb2cli_query_directory()
      s3:smb2cli: fix marshalling of smb2_create_blobs in  smb2cli_create()
      s4:torture/basic: relax base.trans2 midmight time checking
      s3:torture: relax TRANS2 midmight time checking
      s3:smb2_server: add smbd_smb2_request_verify_sizes()
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_negprot.c
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_sesssetup.c
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_tcon.c
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_break.c
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_close.c
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_create.c
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_find.c
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_flush.c
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_getinfo.c
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_ioctl.c
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_keepalive.c
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_lock.c
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_notify.c
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_read.c
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_setinfo.c
      s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_write.c
      s3:smb2_server: return BAD_NETWORK_NAME if the path is terminated in SMB2_TCON
      s3:smb2_server: return OBJECT_NAME_INVALID if the path is terminated in SMB2_CREATE
      s3:smb2_server: return OBJECT_NAME_INVALID if the path is terminated in SMB2_FIND/QUERY_DIRECTORY
      s3:smb2cli: pass the uid to the SMB2_SESSION_SETUP to support multi-leg-auth
      s3:smb2cli: let smb2cli_req_create() use the give pid, uid and tid values
      lib/replace: include <sys/uio.h> in "system/filesys.h" in order to have struct iovec
      s3:libsmb: pass CLI_FULL_CONNECTION_* flags to cli_state_create()
      s3:libsmb: pass CLI_FULL_CONNECTION_* flags via cli_connect_nb()
      s3:libsmb: don't handle CLI_FULL_CONNECTION_* flags in cli_start_connection()
      s3:libsmb: don't handle CLI_FULL_CONNECTION_* flags in cli_full_connection()
      s3:libsmb: add CLI_FULL_CONNECTION_FORCE_DOS_ERRORS
      s3:libsmb: add CLI_FULL_CONNECTION_FORCE_ASCII
      s3:torture: make use of CLI_FULL_CONNECTION_FORCE_DOS_ERRORS
      s3:torture: make use of CLI_FULL_CONNECTION_DONT_SPNEGO
      libcli/smb: s/FLAGS2_UNKNOWN_BIT4/FLAGS2_SMB_SECURITY_SIGNATURES_REQUIRED
      s3:libsmb: let cli_pull_raw_error() return NT_STATUS_OK as DOS-Error success
      s3:libsmb: check the wct of the incoming SMBnegprot responses
      s3:clitar: remove unused/not existing extern variables
      s3:libsmb: add cli_state_available_size()
      s3:libsmb: make use of cli_state_available_size() in cli_trans_format()
      s3:libsmb: make use of cli_state_available_size() in cli_sesssetup_blob_send()
      s3:libsmb: make use of cli_state_available_size() in cli_list_old_send()
      s3:libsmb: make use of cli_state_available_size() in cli_read_max_bufsize()
      s3:libsmb: make use of cli_state_available_size() in cli_write_max_bufsize()
      s3:libsmb: make use of cli_state_available_size() in cli_smbwrite()
      s3:torture: use CLI_BUFFER_SIZE instead of cli->max_xmit
      s3:libsmb: the smb2 server capabilities from the session setup are 32-bit
      s3:libsmb: don't mix smb2 share capabilities with smb1 capabilities
      s3:torture: there's no need to alter cli->max_xmit in order to test large writes
      s3:libsmb: better expect a max_xmit of 1024 instead of 0xFFFF for the CORE protocol
      s3:libsmb: check that max_xmit is not less than 1024
      s3:libsmb: set the MID to 0 in cli_setup_packet_buf()
      s3:libsmb: make sure cli->max_mux is valid in the return of the server
      s3:libsmb: add cli_state_max_requests()
      s3:libsmb: make use of cli_state_max_requests() in cli_pull_send()
      s3:libsmb: make use of cli_state_max_requests() in cli_push_send()
      s3:libsmb: add cli_state_security_mode()
      s3:auth_server: make use of cli_state_security_mode()
      s3:winbindd_cm: make use of cli_state_security_mode()
      s3:libsmb: make use of cli_state_security_mode()
      s3:libsmb: add cli_state_server_session_key()
      s3:libsmb: make use of cli_state_server_session_key()
      s3:libsmb: add cli_state_server_time_zone()
      s3:libsmb: add cli_state_server_time()
      s3:libsmb: make use of cli_state_server_time_zone()
      s3:net_time: make use of cli_state_server_time_zone() and cli_state_server_time()
      s3:smb2cli: split cli->smb2.gss_blob from cli->secblob
      s3:smbd: echo FLAGS2_SMB_SECURITY_SIGNATURES* and the signature field in the reply
      s3:smb_signing: add support for easier negotiation of SMB signing
      s3:libsmb: make use of new advanded SMB signing
      s3:smbd: make use of better SMB signing negotiation
      s3:smb2_server: SMB2_OP_GETINFO doesn't require at least 1 dyn byte
      s3:torture/run_oplock4: don't set cli->use_level_II_oplocks
      s3:libsmb: return NT_STATUS_CONNECTION_DISCONNECTED instead of NT_STATUS_CONNECTION_INVALID
      s3:rpc_client: return NT_STATUS_CONNECTION_DISCONNECTED
      s3:rpc_server: let rpcint handles return NT_STATUS_CONNECTION_DISCONNECTED
      s3:winbindd: let wbint handles return NT_STATUS_CONNECTION_DISCONNECTED
      s4:librpc/rpc: return NT_STATUS_CONNECTION_DISCONNECTED
      s4:lib/messaging: let irpc handles return NT_STATUS_CONNECTION_DISCONNECTED
      s4:libcli/wrepl: return NT_STATUS_CONNECTION_DISCONNECTED
      s4:wrepl_server: return NT_STATUS_CONNECTION_DISCONNECTED
      libcli/auth: add some const to SMBNTencrypt_hash() and SMBNTencrypt()
      s3:smbd: remember the client unix capabilities on the connection
      s3:smbd: SMB ReadX with size > 0xffff should only possible for samba clients.
      s3:libsmb: let cli_read_max_bufsize() return the max number of possible bytes
      s3:libsmb: let cli_write_max_bufsize() return the max number of possible bytes
      s3:client.h: remove unused defines
      s3:libsmb: align chunk_size for cli_pull/push() to a page size of 1024 bytes
      s3:libsmb: remove unused cli->is_samba
      s3:libsmb: make sure we always set cli->capabilities at the end of cli_negprot_done()
      s3:libsmb: no need to reset capabilities in cli_session_setup_lanman2()
      s3:libsmb: calculate all SMB1 capabilities we want to support for the connection
      s3:include: add some masks for SMB1 CAP_* flags
      s3:libsmb: calculate the negotiated SMB1 capabilities in cli_negprot_done()
      s3:libsmb: make use of SMB_CAP_BOTH/CLIENT_MASK in cli_session_setup_capabilities()
      s3:libsmb: use CAP_EXTENDED_SECURITY instead of cli->use_spnego
      s3:libsmb: use local variables in cli_state_create()
      s3:libsmb: add basic max_protocol support in cli_negprot()
      s3:libsmb: pass max_protocol to cli_negprot()
      s3:libsmb: don't set cli->protocol in cli_state_create()
      s3:libsmb: move cli->protocol to cli->conn.protocol
      s3:libsmb: move cli->capabilities to cli->conn.smb1.capabilities
      s3:libsmb: move cli->smb1.mid to cli->conn.smb1.mid
      s3:libsmb: move cli->max_xmit to cli->conn.smb1.max_xmit
      s3:libsmb: move cli->max_mux to cli->conn.smb1.server.max_mux
      s3:libsmb: move cli->sec_mode to cli->conn.smb1.server.security_mode
      s3:libsmb: move cli->*braw_supported to cli->conn.smb1.server.*braw
      s3:libsmb: detect lock_read and write_unlock support
      s3:libsmb: move cli->sesskey to cli->conn.smb1.server.session_key
      s3:libsmb: restructure cli_negprot_done() secblob handling a bit
      s3:libsmb: make sure cli->secblob.length is 8 if we get a challenge
      s3:libsmb: remove the guid from the cli->secblob in spnego mode
      s3:libsmb: add cli_state_server_challenge() and cli_state_server_gss_blob()
      s3:libsmb: make use of cli_state_server_challenge()
      s3:libsmb: make use of cli_state_server_gss_blob()
      s3:auth_server: make use of cli_state_server_challenge()
      s3:libsmb: split cli->secblob into cli->conn.smb1.server.{guid,gss_blob,challenge,workgroup}
      s3:libsmb: move cli->server{zone,time} to cli->conn.smb1.server.{time_zone,system_time}
      s3:libsmb: s/cli_encryption_on/cli_state_encryption_on()
      s3:libsmb: remove unused cli_*encryption* functions
      talloc: change version to 2.0.7
      s3:libsmb: forward declaration for struct smb_trans_enc_state
      libcli/smb: add PROTOCOL_SMB2_22
      libcli/smb: add SMB2_DIALECT_REVISION_222
      s4:selftest: skip flakey samba4.drs.repl_schema.python for now
      s3:smb2cli: SMB2_FLUSH responses have a body size of 4
      s3:SMB2-BASIC: test smb2cli_flush()
      s3:libsmb: return if tevent_req_set_endtime() fails
      s3:libsmb: return INTERNAL_ERROR if the request is in bad state when the caller ships it
      s3:smb2cli: initialize status if we got an unexpected response
      s3:smb2cli: validate the opcode from the server is as expected
      s3:smb2cli: check the response has the SMB2_HDR_FLAG_REDIRECT flag
      s3:smb2cli: ignore async interim responses and store the async_id
      s3:smb2cli: only use tevent_req_defer_callback() if we have more than one smb2 response
      s3:smb2cli: pass an array of expected status/body_size pairs to smb2cli_req_recv()
      s3:smb2cli: pass timeout to smb2cli_req_create/send()
      s3:smb2cli: s/smb2cli_sesssetup/smb2cli_sesssetup_ntlmssp/
      s3:smb2cli: s/smb2cli_sesssetup_blob/smb2cli_session_setup/
      s3:smb2cli: remove unused struct ntlmssp_state from smb2cli_session_setup_state
      s4:selftest: run the nbt tests before the smb tests
      s4:selftest: skip flakey samba4.nbt.winsreplication for now
      s3:smb2_server: fix a logic error, we should sign non guest sessions
      lib/util: move some timespec helpers from source3 to the toplevel
      s3:smbd: don't call smbd_terminate_connection in smb2_validate_message_id() (bug #8476)
      s3:smbd: disconnect the socket if we got an unexpected request
      s3:libsmb: call TALLOC_FREE(subreq) directly after cli_sesssetup_blob_recv()
      s3:libsmb: remove unused TALLOC_FREE(subreq) calls in
      s4:libcli/resolve: only try broadcast messages to ipv4 addresses
      s4:libcli/smb2: don't try to check the signing if we got NT_STATUS_USER_SESSION_DELETED
      s4:libcli/smb2: correctly sign SMB2_OP_CANCEL request if they belong to a session
      s4:libcli/smb2: ignore SMB2_OP_CANCEL responses
      s4:torture/smb2/lock: remove samba4 specific checks for NETWORK_NAME_DELETED/USER_SESSION_DELETED
      s3:smb2_server: SMB2_OP_CANCEL requests don't have to be signed
      socket_wrapper: pass down the fd explictly from the swrap_*() to the real_*() calls
      socket_wrapper: correctly handle dup()/dup2() ref counting
      s4:smb_server/smb2: make sure we sign the final session setup
      s3:smb2cli: fix the num_expected == 0 logic in smb2cli_req_recv()
      s3:param: use ROLE_DOMAIN_CONTROLLER for an AD domain controller
      lib/util: make sure panic action can attach a debugger on ubuntu (>=10.10)
      s3:lib/util: make sure panic action can attach a debugger on ubuntu (>=10.10)
      s3:configure.developer: add --enable-uid-wrapper
      selftest/Samba3: enable uid wrapper in nmbd, winbindd and smbd
      s3:lib: remove unused/empty modules.c
      s4:dsdb: fix the order of DSDB_CONTROL_* defines in samdb.h
      ldb/ldb_controls: allow oid up to 255 chars
      s4:dbchecker: make use of local_oid controls for dsdb.DSDB_CONTROL_DBCHECK
      Revert "ldb: support raw OIDs in control string parsing"
      s4:dsdb/password_hash: add DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OID
      dfs_server: add generic dfs_server_ad_get_referrals() call
      s4:smb_server: implement dfs referral handing on top of dfs_server_ad_get_referrals()
      s3:param: add lp_host_msdfs to loadparm_s3_context
      s3:vfs: add SMB_VFS_GET_DFS_REFERRAL() hooks
      s3:msdfs: implement setup_dfs_referral() on top of SMB_VFS_GET_DFS_REFERRALS()
      s3:msdfs: removed unused variables
      s3:modules: add vfs_dfs_samba4
      selftest: run dfs tests on plugin_s4_dc
      dnsserver.idl: avoid '//' comments
      s3:lib/netapi: avoid '//' comments
      s3:utils: avoid '//' comments
      s4:lib/wmi: avoid '//' comments
      s4:torture/drs: avoid '//' comments
      s4:torture/smb2: avoid '//' comments
      examples/VFS: fix names in skel_opaque.c
      examples/VFS: add skel_get_dfs_referrals()
      ldb: change version to 1.1.3 after pyldb changes
      libcli/cldap: pass tevent_context to cldap_set_incoming_handler()
      libcli/cldap: pass tevent_context to cldap_netlogon_send()
      libcli/cldap: pass tevent_context to cldap_search_send()
      libcli/cldap: make use of explicit tevent_contexts
      libcli/cldap: don't pass tevent_context to cldap_socket_init()
      s3:wscript: add 'gssapi' dependecy to 'errors3'
      s3:vfs_acl_common: also parse xattr.NTACL version 1
      script/autobuild.py: split 'samba3' 'make -j 4 everything' into multiple steps
      lib/param: fix typo _SAMBA_BUILD => _SAMBA_BUILD_ causing segfaults
      s4:torture/smb2: we only support 64KB reads/writes for now
      s3:smb2_server: remember the max_{trans,read,write} sizes we negotiated (bug #8473)
      s3:smb2_server: reject writes larger then the negotiated max_write size (bug #8473)
      s3:smb2_server: get/set info are limited by max_trans size (bug #8473)
      s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for persistent dbs
      s4:dlz_bind9: add no memory checks
      s3:auth_util: add the uid with WBC_ID_TYPE_BOTH also to the group array
      s4:auth/unix_token: match s3 behavior and add uid/gid to the groups array
      libcli/smb: add smb_[set]len_[nbt|tcp]() macros
      s3:include: use smb_[set]len_[nbt|tcp]() macros
      s4:lib/stream: make use of smb_len_tcp()
      s4:libcli/raw: make use of _smb_setlen_nbt()
      s4:libcli/smb2: make use of _smb_setlen_tcp()
      s4:smb_server/smb: make use of _smb_setlen_nbt()
      s4:smb_server/smb2: make use of _smb_setlen_tcp()
      s4:libcli/raw: remove unused smb_len(), _smb_setlen() and _smb2_setlen() macros
      s3:libsmb/smb_seal: make common_ntlm_[en|de]crypt_buffer static
      s3:include: move smb_seal.c prototypes to smb_crypt.h
      s3:libsmb/smb_seal: s/uint16/uint16_t
      s3:libsmb/smb_seal: move smb_set_enclen() to smb_seal.c and make it static there
      s3:libsmb/async_smb: in cli_state_notify_pending() we always disconnect
      libcli/smb: move some common defines to smb_constants.h
      libcli/smb: add smb_setlen_[nbt|tcp] macros
      s3:include: make smb_setlen() a macro
      s3:libsmb/smb_seal: make use of common [_]smb_[set]len_nbt() macros
      s3:libsmb/smb_seal: avoid ads_errstr() dependency and use gssapi_error_string()
      s3:libsmb/smb_seal: use plain malloc() in common_ntlm_encrypt_buffer()
      s3:libsmb/smb_seal: always use SAFE_FREE(buf) in common_free_enc_buffer()
      s3:smbd/seal: pass talloc_tos() auth_ntlmssp_update(), because we free a few lines later
      libcli/smb: move smb_seal.c to the toplevel
      libcli/cldap: make sure the local and remote address family matches
      s4:finddcs_cldap: finddcs_cldap_recv() returns NTSTATUS
      s4:finddcs_cldap: close the socket when it's not used anymore
      s4:finddcs_cldap: talloc free old memory before allocating a new netlogon struct
      auth/gensec: replace #if _SAMBA_BUILD_ == 4 by a feature test
      talloc/testsuite: remove #if _SAMBA_BUILD_==3
      dynconfig: replace #if (_SAMBA_BUILD_ >= 4) by feature tests
      lib/util: remove the "includes.h" dependeny from util_file.c
      lib/util: remove the "includes.h" dependeny from xfile.c
      talloc: simplifiy the logic to build talloc_testsuite in the standalone build
      s3:torture: avoid using read_smb()
      s3:libsmb: remove unused sync read_smb()
      s3:libsmb/read_smb: make use of smb_len_tcp()
      libcli/smb: move source3/libsmb/read_smb.* to the toplevel
      auth/gensec: fix missleading comment
      libcli/smb: move CAP_* defines to smb_constants.h
      libcli/smb: move more defines to smb_constants.h
      s4:libcli/raw: remove unuded CMD_REPLY define
      libcli/smb: merge LOCKING_ANDX_* and OPLOCK_* defines to smb_constants.h
      libcli/smb: remove unused includes from read_smb.h
      s4:libcli: rename smb_signing.h to smb_raw_signing.h in the install directory
      s3:libsmb/smb_signing: avoid usage of smb_ss_field
      s3:libsmb/smb_signing: make use of smb_len_nbt()
      s3:libsmb/smb_signing: make use of HDR_* defines
      libcli/smb: move smb_signing.[ch] to the toplevel
      s3:libsmb: use HDR_* defines in cli_pull_raw_error()
      s3:libsmb: make use of smb_[set]len_nbt() in async_smb.c
      s3:libsmb: use HDR_* defines in cli_state_dispatch_smb1()
      s3:libsmb: make use of map_nt_error_from_unix_common() in async_smb.c
      s3:lib/addrchange.h: include libreplace headers before others
      s3:libsmb: s/event_context/tevent_context/ in async_smb.[ch]
      s3:lib/errmap_unix: map EPIPE to NT_STATUS_CONNECTION_DISCONNECTED
      s3:smb2cli_base: make use of map_nt_error_from_unix_common()
      s3:smb2cli_base: make use of [_]smb_[set]len_tcp()
      s3:lib: make_unix_date() is the same as pull_dos_date()
      s3:lib: make_unix_date2() is the same as pull_dos_date2()
      s3:lib: make_unix_date3() is the same as pull_dos_date3()
      libcli/smb: merge NEGOTIATE_SECURITY_* flags to smb_constants.h
      libcli/smb: add smb_buffer_oob() helper
      s3:include: implement trans_oob() as wrapper to smb_buffer_oob()
      s3:libsmb: use smb_len_nbt() in clitrans.c
      s3:libsmb: make use of smb_buffer_oob() in clitrans.c
      s3:libsmb: use 'tevent_' instead of 'event_' in clitrans.c
      s3:libsmb: replace  smb_size - 4 with MIN_SMB_SIZE in clitrans.c
      s3:libsmb: avoid using smb_flg2 in cli_trans.c
      s3:libsmb: make use of map_nt_error_from_unix_common() in clitrans.c
      s3:rpc_client: remove references to auth_ntlmssp_state
      s4:librpc/dcerpc_smb: fix smb_write_callback()
      s4:librpc/dcerpc_smb2: fix smb2_write_callback()
      s4:lib/socket: don't pass -1 to close()
      s4:nbt_server/dgram: higher debug level for NBT_MAILSLOT_NETLOGON requests
      s3:smbd: also the parent smbd needs FLAG_MSG_PRINT_GENERAL (bug #8553)
      s3:smb2_server: echo the SMB2_HDR_CREDIT_CHARGE and SMB2_HDR_SIGNATURE fields
      s3:smb2_server: don't reset the tid and session id in the out hdr of compound requests
      s3:smb2_server: FLAG_CHAINED means we always use the last session_id and tid
      s4:smb_server/smb2: echo back more header fields
      s4:smb_server/smb2: always grant the requested credits
      s4:smb_server/smb2: correctly implement related compound requests
      s4:torture/smb2: fix compound.invalid2 against windows
      s3:torture: let SMB2-BASICS work against w2k8r2 and win8pre0
      s3:libsmb: restore the 3.6.x behavior signing config parameters
      s4:libcli/raw: only use smb signing if required
      s4:libcli/smb2: let SMB_SIGNING_AUTO behave like SMB_SIGNING_SUPPORTED
      s3:param: the behavior of "client/server signing = auto" is the same as "true"
      s4:smb_server/smb: make the SMB_SIGNING_AUTO behavior a bit easier to follow
      selftest/Samba4: use "server signing = on" for now
      s4:smb_server/smb2: add the same SMB_SIGNING_AUTO logic as for smb1
      libcli/smb: add SMB_SIGNING_DEFAULT
      s4:libcli/raw: SMB_SIGNING_DEFAULT matches SMB_SIGNING_SUPPORTED on the client for now
      s4:libcli/smb2: SMB_SIGNING_DEFAULT matches SMB_SIGNING_SUPPORTED on the client for now
      lib/param: change the default for "client signing" to "default"
      s4:smb_server: change the default for "server signing" to "default"
      lib/param: map "* signing = auto" to SMB_SIGNING_SUPPORTED
      s4:libcli/raw: remove unused SMB_SIGNING_AUTO handling
      s4:libcli/smb2: remove unused SMB_SIGNING_AUTO handling
      libcli/smb: SMB_SIGNING_AUTO is no longer used
      libcli/smb: add SMB_SIGNING_IF_REQUIRED as replacement for SMB_SIGNING_SUPPORTED
      lib/param: use SMB_SIGNING_IF_REQUIRED instead of SMB_SIGNING_SUPPORTED
      s4:libcli/raw: s/SMB_SIGNING_SUPPORTED/SMB_SIGNING_IF_REQUIRED/
      s4:libcli/smb2: s/SMB_SIGNING_SUPPORTED/SMB_SIGNING_IF_REQUIRED/
      s4:smb_server: s/SMB_SIGNING_SUPPORTED/SMB_SIGNING_IF_REQUIRED/
      libcli/smb: remove unused SMB_SIGNING_SUPPORTED
      libcli/smb: use the same values for SMB_SIGNING_* as the source3 code uses
      s3:param: make use of SMB_SIGNING_* constants
      s3:client: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:auth: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:nmbd: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:utils: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:web: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:winbindd: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:libnet: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:lib/netapi: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:lib: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:torture: s/Undefined/SMB_SIGNING_DEFAULT/ s/Required/SMB_SIGNING_REQUIRED/
      s3:libsmb: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:libsmb: make use of SMB_SIGNING_* constants
      s3:lib: make use of SMB_SIGNING_* constants
      s3:libsmb: make use of SMB_SIGNING_* constants
      s3:smbd: make use of SMB_SIGNING_* constants
      s3:param: change default of "* signing" to "default"
      s3:libsmb: the workgroup in the non-extended-security negprot is not aligned (#8573)
      s3:libsmb: also remember the optional server name from the negprot response
      s3:smbd: also send the server name in the negprot response
      s3:smb2cli: ignore the NBT/Length header in smb2cli_inbuf_parse_compound()
      s3:libsmb: get cmd of the chained request before changing wct_ofs
      s3:libsmb: remember the seqnum on all chained requests
      s3:libsmb: make sure have_andx_command() returns false for non AndX commands
      s3:libsmb: return NT_STATUS_OK for if a request is not the last one in the chain
      s3:libsmb: key_len is 8bit only in the NT1 case
      s3:libsmb: correctly parse the LANMAN2.1 negprot response from OS/2 (bug #8584)
      s3:libsmb: fix cli_write_and_x() against OS/2 print shares (bug #5326)
      s3:libsmb: consistently use state->size in cli_write_andx_create() (bug #5326)
      s3:smb2_server: grant credits in async interim responses (bug #8357)
      s3:smbd: avoid string_set() in dir.c
      s3:smbd: fully construct the dptr before allocating a dnum in the bitmap
      s3:smbd: don't limit the number of open dptrs for smb2 (bug #8592)
      s4:finddcs_cldap: debug the correct server address instead of NULL
      libcli/cldap: fix a crash bug in cldap_socket_recv_dgram() (bug #8593)
      s3:smb2_flush: outbody only needs 4 bytes
      selftest: planpythontestsuite() should fill 'name' is it's None
      selftest/selftesthelpers.py: construct a fullname with env in plantestsuite_idlist()
      s4:selftest: samba4.urgent_replication.python needs to run as "dc:local"
      s4:libnet: initialize forest structure in py_net_replicate_init()
      s4:dsdb/samldb: use DSDB_FLAG_AS_SYSTEM in samldb_schema_info_update()
      s4:python/samba/schema: pass down the schema_dn to set_from_ldif()
      s4:dsdb/pydsdb: pass down schema_dn to _dsdb_set_schema_from_ldif()
      s4:dsdb/schema: pass and remember the schema_dn in dsdb_set_schema_from_ldif()
      s4:param/provision: pass schema_dn to provision_get_schema()
      s4:libnet_vampire: use dsdb_modify(..., DSDB_FLAG_AS_SYSTEM) to store prefixMap
      s4:libnet_vampire: setup base_dn on the self_made_schema
      s4:dsdb/schema_data: make sure we only allow objects one level below the schema base
      s4:dsdb/schema_data: make sure we reject schema changes if we're not the schema master
      s4:dsdb/schema_data: reject changes to schemaInfo, msDs-Schema-Extensions, msDS-IntId
      s4:dsdb/schema: add "dsdb:schema update allowed" option to enable schema updates
      selftest/Samba4: allow schema updates
      s4:dsdb/schema_data: reject schema update unless they're allowed
      s3:smb2_server: always send STATUS_PENDING responses, but delayed by 0.5 milliseconds
      s3:smb2_server: pass explicit defer_times to smbd_smb2_request_pending_queue()
      s3:smb2_create: defer STATUS_PENDING for 2 seconds as before
      s3:smb2_ioctl: STATUS_PENDING is defered by 1 millisecond for SMB2_IOCTL
      s3:smbd/aio: add cancel_smb2_aio()
      s3:smb2_write: make it possible to cancel aio writes
      s3:smb2_read: make it possible to cancel aio reads
      s3:smbd/aio: pass ECANCELED to the smb2 aio handlers
      s3:smbd/aio: handle_aio_completed() should do nothing if aio_ex->fsp is NULL
      HEIMDAL:lib/wind: fix wind_ucs4utf8() and wind_ucs2utf8()
      HEIMDAL:lib/winbd: fix wind_ucs2write with WIND_RW_LE
      HEIMDAL:lib/wind: export wind_ucs2write()
      HEIMDAL:lib/krb5: add utf8 support to build_logon_name() for the PAC
      lib/util/debug: with log level = 10 we should be more verbose
      s3:libsmb: always init cli->{server_os,server_domain,server_type}
      Revert "Fix bug #8453 - smbclient segfaults when dialect option -m is used for legacy dialects"
      s3:smbd: calculate the negprot signing flags from the signing_state
      s3:winbindd_cm: remove unused ads_status
      s3:libsmb: only align unicode pipe_name (bug #8586)
      s3:libsmb: fix compiler warning in cli_pull_trans()
      s3:libsmb: verify num_setup for SMBnttrans in cli_pull_trans()
      lib/param: add "SMB2_22" to enum_protocol
      s3:smb2_negprot: add support for SMB2_22
      s3:libsmb: close fd on error in cli_connect_nb()
      s3:winbindd_cm: close sockfd on error in cm_prepare_connection()
      pidl:Samba4/NDR/Parser: don't generate code for [ignore] pointers
      smbXcli: cp source3/libsmb/async_smb.c libcli/smb/smbXcli_base.c
      smbXcli: rework smbXcli_base.c to use smbXcli_conn/smbXcli_req
      libcli/smb: copy smb2cli_req_* code to smbXcli_base.c
      smbXcli: rework smb2cli_req to smbXcli_conn/smbXcli_req
      s3:smb2cli: replace smb2cli_base.c code with the more generic smbXcli_base.c code
      smbXcli: set message id to UINT64_MAX for BREAK in smb2cli_req_create()
      smbXcli: split out a smb1cli_req_flags() function
      smbXcli: add state->smb1.recv_{cmd,status,iov}
      smbXcli: pass hdr to smb1cli_pull_raw_error()
      smbXcli: add smb1cli_inbuf_parse_chain()
      smbXcli: use smb1cli_inbuf_parse_chain() and remember more details per chain response
      smbXcli: rework smb1cli_req_recv() to expose an iov with 3 elements
      smbXcli: reorder smb1cli_conn_dispatch_incoming() to avoid too much nesting
      smbXcli: remove unused smb1cli_have_andx_command()
      smbXcli: simplify smb1cli_req_chain_submit()
      smbXcli: also notify chained requests about broken connections
      smbXcli: add helper functions to access the negotiated features
      smbXcli: add smbXcli_negprot_*
      smbXcli: pass client_guid to smbXcli_conn_create()
      smbXcli: add support for 2.??? negprot and PROTOCOL_SMB2_10
      smbXcli: add support for SMB2 multi-credit requests
      smbXcli: add support for PROTOCOL_SMB2_22 in smbXcli_negprot()
      s3:smb2cli: implement smb2cli_negprot() on top of smbXcli_negprot()
      smbXcli: add smbXcli_session infrastructure
      smbXcli: add support for smb2 signing
      s3:smb2cli: make use of smbXcli_session and setup the session key for SMB2 signing
      s3:smb2cli: make smb2cli_session_setup_send/recv non-static
      s3:smb2cli: add forward declaration for struct cli_state
      smbXcli: add smb2cli_session_create_channel()
      smbXcli: fix smb signing for SMBntcancel
      smbXcli: add support for tevent_req_cancel() on smbXcli_req
      smbXcli: add smb2cli_req_set_notify_async()
      s3:libsmb: implement cli_state based functions on top of smbXcli_conn/smbXcli_req
      s3:smb2cli: pass struct smbXcli_conn directly to smb2cli_req_create/_send()
      s3:SMB2-BASIC: use smbXcli_negprot() directly
      s3:smb2cli: remove unused smb2cli_negprot()
      s3:torture: add SMB2-NEGPROT test
      s3:selftest: run SMB2-NEGPROT
      smbXcli: cp source3/libsmb/clitrans.c libcli/smb/smb1cli_trans.c
      smbXcli: rework smb1cli_trans.c to use smbXcli_conn/smbXcli_req
      s3:libsmb: implement cli_trans* on top of smb1cli_trans*
      s3:libsmb: add SMB2 support to cli_session_setup()
      s3:torture: replace smb2cli_sesssetup_ntlmssp() with the more generic cli_session_setup()
      s3:smb2cli: remove unused smb2cli_sesssetup_ntlmssp*
      s3:libsmb: add cli_tree_connect() for a generic tree connect
      s3:winbindd_cm: make use of cli_tree_connect()
      s3:utils: make use of cli_tree_connect()
      s3:torture: make use of cli_tree_connect()
      s3:nmbd: make use of cli_tree_connect()
      s3:libsmb: make use of cli_tree_connect()
      s3:client: make use of cli_tree_connect()
      s3:torture: use cli_tree_connect() instead of smb2cli_tcon()
      s4:torture/smb2: use tctx->ev as event context for polling
      s3:smbXcli: keep two fd per connection in order to work with the epoll tevent backend
      s4:libcli/smb2: implement on top of smbXcli_conn/req
      s4:libcli/smb2: fix compiler warning in smb2_push_o16s16_string()
      s4:libcli/smb2: use talloc_zero() in smb2_request_init()
      s3:torture: add SMB2-MULTI-CHANNEL test
      s3:torture: add SMB2-SESSION-REAUTH
      s3:smb2cli: free session in smb2cli_logoff*
      s3:smb2cli: zero tid in smb2cli_tdis*
      s3:torture: test smb2cli_logoff and smb2cli_tdis
      s4:libnet: use talloc_zero(struct libnet_JoinDomain) in libnet_Join_member()
      s4:torture/rpc: use talloc_zero() in torture_join_domain()
      s4:libnet/py_net: ZERO_STRUCT() struct libnet_Join_member in py_net_join_member()
      s4:libnet: make it possible to join with a given machine password
      s4:py_net: add optional 'machinepass' parameter to py_net_join_member()
      s4:python/samba/join.py: add optional 'machinepass' parameter to class dc_join
      s4:python/samba/join.py: add optional 'machinepass' parameter to join_*()
      s4:python: add --machinepass option to 'samba-tool domain join'
      selftest/Samba4: pass '--machinepass' to 'samba-tool domain join'
      libcli/smb: remove unused smb_signing_set_bsrspyl() prototype
      smbXcli: use talloc_stackframe() instead of talloc_tos() in smb1cli_conn_signv()
      smbXcli: call tevent_queue_stop() for the outgoing queue on disconnect
      smbXcli: s/smb2cli_writev_done/smb2cli_req_writev_done
      smbXcli: allow up to 10 iovec elements for the bytes in smb1cli_req_create()
      smbXcli: rebuild smb1.recv_iov array if we expect more than one response
      smb1cli_trans: return the status from the server if possible
      smb1cli_trans: add support for tevent_req_cancel()
      s4:libcli/smb2: make sure only one idle event runs at a time
      s4:gentest: get the tid from the smbcli_tree struct
      smbXcli: add smb1cli_conn_server_{readbraw,writebraw,lockread,writeunlock}()
      smbXcli: add support for SMBreadBraw
      s4:torture: use tctx->ev as event context for polling
      s4:libcli/raw: add transport->ev as copy of transport->socket->event.ctx
      s4:libcli/raw: copy smbcli_transport_connect_* to clisocket.c
      s4:lib/socket: add socket_connect_multi_ex_*
      s4:libcli: convert smbcli_transport_connect_* to tevent_req
      s4:libcli: move smbcli_transport_establish() logic into smbcli_socket_connect()
      s4:libcli: use smbcli_sock_connect() in smbcli_socket_connect()
      s4:libcli/raw: remove unused functions
      s4:libcli: do the nbss session request within smbcli_sock_connect_*()
      s4:libcli/raw: implement on top of smbXcli_conn/req
      s4:gensec/spnego: only try the mechs that match the client given ones
      s4:libcli/raw: mark a request as error if we can't ship it
      s4:libcli/smb2: mark a request as error if we can't ship it
      s3:smbd: call sub_set_socket_ids() in smbd_process() again
      s3:smbd: remember the smbd_server_connection on pending_message_list
      s3:smbd: make struct pending_message_list private
      s3:smbd: remove references to the global smbd_server_conn
      s3:smbd: pass down smbd_server_connection via smbd_echo_state
      s3:smbd: remember the event context on smbd_server_connection
      s3:smbd/blocking: avoid usage of server_event_context()
      s3:smbd/close: avoid usage of server_event_context()
      s3:smbd/fileio: avoid usage of server_event_context()
      s3:smbd/ipc: pass 'state' as mem_ctx to np_read_send()
      s3:smbd/service: avoid using server_event_context() for notify_init()
      s3:smbd/oplock: avoid using server_event_context() in add_oplock_timeout_handler()
      s3:smbd/process: avoid using server_event_context() for smbd_deferred_open_timer events
      s3:smbd/process: avoid using server_event_context() for the forked echo handler
      s3:smbd/pipes: avoid passing server_event_context() as event context to np_{read,write}_send
      s3:smb2_lock: avoid using server_event_context()
      s3:smb2_server: use sconn->ev_ctx instead of sconn->smb2.event_ctx
      s4:python/samba/join: set msDS-Behavior-Version to '4' 2008_R2 on the nTDSA object
      s3:smb2_lock: pass smbd_server_connection as private_data to received_unlock_msg()
      s3:smbd/blocking: pass smbd_server_connection as private_data to received_unlock_msg()
      s3:smbd/clode: pass smbd_server_connection as private_data to msg_close_file()
      s3:smbd/close: pass smbd_server_connection to notify_deferred_opens()
      s4:pydsdb: remove unused variable from py_dsdb_am_pdc()
      s3:smbd/blocking: pass smbd_server_connection as private_data to process_blocking_lock_cancel_message()
      s3:smbd/conn_msg: pass smbd_server_connection as private_data to msg_force_tdis()
      s3:smbd: register MSG_SMB_FILE_RENAME after the fork
      s3:smbd/open: pass smbd_server_connection as private_data to msg_file_was_renamed()
      s3:smbd/server: remember the msg_ctx on the smbd_parent_context
      s3:smbd/server: remember the ev_ctx on the smbd_parent_context
      s3:smbd/server: create smbd_parent_context earlier
      s3:smbd/server: add parent specific SIGTERM and SIGHUP handlers
      s3:smbcontrol: remove unused "samsync" and "samrepl" commands
      s3:rpc_server/netlogon: remove unused send_sync_message()
      s3:smbd/server: remove unused msg_sam_sync()
      s3:messaging.idl: obsolete unused MSG_SMB_SAM_*
      s3:param: don't reference conn_snum_used directly in load_usershare_shares()
      s3:lib/dummyparam: remove unused conn_snum_used() dummy
      s3:smbd: add connections_snum_used()
      s3:smbd: use connections_snum_used() instead of conn_snum_used() for load_usershare_shares()
      s3:smbd/msdfs: enum_msdfs_links() doesn't need a smbd_server_connection anymore
      s3:smbd/oplock: pass smbd_server_connection to init_oplocks()
      s3:smbd/oplock: pass sconn as private_data to process_oplock_break_message()
      s3:smbd/oplock: pass sconn as private_data to process_oplock_async_level2_break_message()
      s3:smbd/oplock: pass sconn as private_data to process_oplock_break_response()
      s3:smbd/oplock: pass sconn as private_data to process_kernel_oplock_break()
      s3:smbd/oplock: pass sconn as private_data to process_open_retry_message()
      s3:smbd/oplock: pass smbd_server_connection to irix_init_kernel_oplocks()
      s3:smbd/oplock: pass smbd_server_connection to linux_init_kernel_oplocks()
      s3:smbd/oplock: pass smbd_server_connection to onefs_init_kernel_oplocks()
      s3:smbd: pass smbd_server_connection to smbd_setup_sig_term_handler()
      s3:smbd: pass smbd_server_connection to smbd_setup_sig_hup_handler()
      s3:vfstest: reload_services() doesn't need a messaging_context
      s3:smbd/oplock_onefs: pass smbd_server_connection to onefs_oplock_wait_record()
      s3:smbd/oplock_onefs: avoid using smbd_messaging_context()
      s3:smbd/server: move smbd_open_socket and smbd_parent_context to the top
      s3:smbd/globals: remove unused extern declarations
      s3:smbd/globals: change 'int am_parent' into 'struct smbd_parent_context *am_parent'
      s3:smbd/server: pass smbd_parent_context to smbd_setup_sig_chld_handler()
      s3:smbd/server: maintain the list of child processes under smbd_parent_context
      s3:smbd: remove unused smbd_messaging_context()
      s3:smbd/server: avoid msg_ctx_to_sconn() in smbd_accept_connection()
      s3:smbd: remove brl_register_msgs()
      s3:web/swat: use short term event and message contexts
      s3:smbd/blocking: use talloc_get_type_abort() as private_data can't be NULL
      s3:smbd/close: use talloc_get_type_abort() as private_data can't be NULL
      s3:smbd/conn_msg: use talloc_get_type_abort() as private_data can't be NULL
      s3:smbd/open: use talloc_get_type_abort() as private_data can't be NULL
      s3:smbd/oplock: use talloc_get_type_abort() as private_data can't be NULL
      s3:smbd/oplock: make process_oplock_async_level2_break_message() static
      s3:smb2_lock: use talloc_get_type_abort() as private_data can't be NULL
      s3:smbd: split ID_CACHE_* message handling into parent and child parts
      s3:smbd: split smb_conf_updated into parent and child versions
      s3:rpc_server/spoolss: remove reload_services check from delete_printer_hook()
      s3:printing/spoolssd: pass event and messaging context to check_updater_child()
      s3:smbd: pass smbd_server_connection and a snumused function pointer to reload_services()
      s3:smbd/globals: remove unused msg_ctx_to_sconn()
      s4:libcli/rap: initialize call->rcv_datalen
      s4:libcli/rap: remove unused members from struct rap_call
      s4:libcli/rap: use talloc_zero() and initialize everything
      s4:libcli/rap: call->ndr_push_{param,data} can be talloc childs of 'call'
      s4:libcli/rap: the caller should get talloc children from call->ndr_pull_{param,data}
      s3:lib/conn_tdb: avoid using sconn_server_id()
      s3:locking: avoid using sconn_server_id()
      s3:smbd: avoid using sconn_server_id()
      s3:smbd: remove unused sconn_server_id()
      s3:printing/spoolssd: avoid using server_messaging_context()
      s4:torture/rap/printing: check smbcli_rap_netprintqgetinfo() WERR status
      libcli/util: add NT_STATUS_NETWORK_SESSION_EXPIRED and NT_STATUS_ALL_SIDS_FILTERED
      s4:drsuapi/getncchanges: return WERR_NOMEM if talloc_array() fails
      libcli/smb: add SMB2_DIALECT_REVISION_224
      libcli/smb: add PROTOCOL_SMB2_24 support
      s3:smb2_negprot: add support for PROTOCOL_SMB2_24
      lib/param: add support for "SMB2_24" in smb.conf options
      s3:torture/test_smb2: also try PROTOCOL_SMB2_24
      s3-netlogon: Add support for LogonGetCapabilities.
      s3-rpc_server: Pass in our flags to netlogon_creds_server_init().
      s4-torture: Test rpc schannel netr_LogonGetCapability.
      s4:drsuapi/getncchanges: the default for isRecycled is FALSE
      s3:lib/ctdbd_conn: try ctdbd_init_connection() as root
      s3: Happy New Year 2012
      s4: Happy New Year 2012
      s4:torture/nbt/dgram.c: NBT samlogon requests without _EX return the PDC name as UNC path
      LDAP-CLDAP: demonstrate that pdc name is an unc path
      s4:cldap_server/netlogon.c: it is wrong to specify "\\" in front of the hostname
      LDAP-CLDAP: demonstrate that pdc name is not an unc path
      s4:pygensec: add session_key() method
      s4:pygensec/tests: check that the client and server have the same session key
      s4:pyrpc: add 'user_session_key' getter to the connection object
      s3:gse: MIT krb5 1.8.1 has a bug in gss_wrap_iov()
      s3:SMB2-SESSION-RECONNECT: also expect NETWORK_NAME_DELETED is signing isn't used
      pidl:Samba4/Python: add an optional 'allow_remaining' argument to __ndr_unpack__() hooks
      s4:python/samba/ndr.py: add an optional 'allow_remaining' to ndr_unpack()
      s4:scripting/devel: add repl_cleartext_pwd.py script
      talloc/testsuite: fix compiler warnings
      lib/param: avoid talloc_reference() in copy_service()
      s3:smbd: explicitly ask for GENSEC_FEATURE_UNIX_TOKEN
      auth/gensec: add gensec_*max_update_size()
      s4:pygensec: add set_max_update_size() and max_update_size() functions
      s4:auth/gensec/spnego: add support for fragmented spnego messages
      s4:pygensec/tests: add test for gensec_set_max_update_size()
      s4:repl_cleartext_pwd.py: correctly compare attids as uint32_t values
      s4:repl_cleartext_pwd.py: add 'attmode' parameter to convert the attname to utf8
      s4:repl_cleartext_pwd.py: add optional 'clear_utf16_name' parameter
      s4:auth/gensec: fix compiler warnings in spnego.c
      auth/gensec: make sure functions from gensec.c are in gensec.h
      auth/gensec: add some more functions from gensec_start.c to gensec.h
      s4:auth/gensec: inline packet_full_request_u32()
      auth/gensec: common helper functions should be in gensec_util.c
      auth/gensec: move spnego.c to the toplevel
      s3:build: add auth/gensec/spnego.o
      s3:selftest: rpcclient doesn't support smb2
      s4:dsdb/password_hash: require a "Primary:Kerberos" blob in supplementalCredentials
      s3:printing: avoid messaging_event_context() in print_queue_housekeeping()
      s3:smbcontrol: pass tevent_context down to subcommands
      s3:smbcontrol: pass tevent_context down to wait_replies()
      s3:smbcontrol: avoid using messaging_event_context()
      s3:lib/messages: remove unused messaging_event_context()
      dynconfig/config.m4: expand prefix, exec_prefix, sysconfdir, localstatedir and datarootdir in Makefile
      dynconfig: --with-modulesdir should be a Samba option
      dynconfig: overwrite --with-privatelibdir as a Samba option
      s3-gse gss_wrap_iov_length() only needs the type and length
      s3-gse: verify that we got GSS_C_DCE_STYLE when expected
      s3-gse: the server should not check for GSS_C_MUTUAL_FLAG
      dynconfig/wscript: correctly cleanup PRIVATELIBDIR and MODULESDIR defaults
      s3:configure.in: fix the shell logic in krb5 checks
      s3:build: for now do not require gsskrb5_extract_authz_data_from_sec_context
      s3:configure.in: move krb5_set_real_time check to other function checks
      s3:configure.in: require gssapi for ads support
      s3:configure.in: move gss_wrap_iov check to the other function checks
      s3:smbd/proto.h: remove unused do_map_to_guest() prototype
      s3:kerberos_verify: ads_dedicated_keytab_verify_ticket() only needs read access
      s3-gse: fix SECRETS_AND_KEYTAB fallback in gse_krb5_get_server_keytab()
      s3-gse: create memory keytab in gse_krb5_get_server_keytab()
      s3-gse: implement fill_mem_keytab_from_[system|dedicated]_keytab
      s3-gse: make sure GSS_C_CONF_FLAG implies GSS_C_INTEG_FLAG
      s4:auth/gensec: make sure GSS_C_CONF_FLAG implies GSS_C_INTEG_FLAG
      script/autobuild.py: cleanup on rebase failure
      Revert "build: Add -lz to wbinfo to fix build on some hosts"
      Revert "s3:build: for now do not require gsskrb5_extract_authz_data_from_sec_context"
      s3:smb2_sessetup: call set_current_user_info() and reload_services() on success
      s3:build: require gss_krb5_export_lucid_sec_context() for ads support
      s3-gse: add GENSEC_FEATURE_NEW_SPNEGO detection in gensec_gse_have_feature()
      auth/gensec_gssapi: sync gensec_gssapi_state with gse_context
      s3:gse: return NT_STATUS_LOGON_FAILURE instead of NT_STATUS_INTERNAL_ERROR
      s3:auth/auth_generic: for now call sub_set_smb_name() and lp_load()
      libcli/smb: fix smbXcli_negprot(..., PROTOCOL_NT1, PROTOCOL_SMB2_02)
      libcli/util: fix typo in nt_errs[] for NT_STATUS_NETWORK_SESSION_EXPIRED
      s3:auth/auth_generic: make use of gensec_spnego in the server
      s3:libsmb/auth_generic: make use of gensec_spnego in the client
      s3:smbd: always use the gensec code path in smb2_sesssetup.c
      s3:smbd: rework smbd_smb2_*_ntlmssp_auth* to smbd_smb2_auth_generic*
      s3:smbd: always use the gensec code path in sesssetup.c
      s3:smbd: remove pending_auth_data logic
      s3:smbd: remove unused code from sesssetup.c
      s3:smbd: rework reply_spnego_ntlmssp to reply_spnego_generic
      s3:smbd: the spnego session setup don't need to copy the in blob
      s3:smbd: inline code in reply_sesssetup_and_X_spnego()
      Revert "Fix bug #8139 - smbclient fails if server does not support Echo request."
      s3:client: ignore SMBecho errors (the server may not support it) (bug #8139)
      s3:auth: fix potential gap creation in wbcsids_to_samr_RidWithAttributeArray()
      s3:auth: fill the sids array of the info3 in wbcAuthUserInfo_to_netr_SamInfo3() (bug #8739)
      tevent: change the version to 0.9.15
      selftest: mark posix_s3.rpc.spoolss.printer as flakey test
      s3:vfs_gpfs: be less verbose in get/set_xattr functions
      s3:vfs_gpfs: make "gpfs:winattr" a per share option
      s3:vfs_gpfs: make "gpfs:ftruncate" a per share option
      s3:vfs_gpfs: make "gpfs:getrealfilename" a per share option
      s3:smbd/oplock_linux: don't overwrite private_data
      s3:rpc_client: fix comment
      docs-xml: remove docs for "send spnego principal"
      lib/crypto: fix hmac_sha256_final() prototype
      s3:torture/test_smb2: a reauth doesn't update the session/signing key
      s3:torture/test_smb2: remove explicit smb2_signing_check_pdu()
      libcli/smb/smbXcli: remove unused checks from smb2cli_session_create_channel()
      libcli/smb/smbXcli: maintain smb2 channel_signing_key separate from the signing_key
      libcli/smb/smbXcli: add smb2cli_session_application_key()
      s4:librpc/dcerpc_smb2: make use of smb2cli_session_application_key()
      s4:libcli/smb2: remove unused 'session_key' from struct smb2_session
      libcli/smb/smbXcli: remove unused if statement from smb2cli_conn_dispatch_incoming()
      libcli/smb/smb2_signing: rename session_key to signing_key
      libcli/smb/smb2_signing: pass down 'protocol' to smb2_signing_[sign|check]_pdu()
      s3:torture/test_smb2: fix missleading file name in reauth test
      s3:torture/test_smb2: show that a session is valid during a multi-leg reauth
      s3:torture/test_smb2: show that a session is not valid for path based calls during reauth
      s3:torture/test_smb2: check directory listing during reauth
      s3:torture/test_smb2: test a tree_connect during reauth
      lib/crypto: add aes_cmac_128* (rfc 4493)
      lib/crypto: add aes_cmac_128_test.c as local.crypto.aes_cmac_128 test
      libcli/smb/smb2_signing: add smb2_key_deviration()
      libcli/smb/smb2_signing: implement aes_cmac_128 based signing for SMB 2.24
      libcli/smb/smbXcli: use smb2_key_deviration() to setup SMB 2.24 keys
      s4:torture/smb2: remove unused var
      s3:torture/test_smb2: expect FILE_CLOSED on invalid handles in SMB2-MULTI-CHANNEL
      s3:torture/test_smb2: add a 3rd channel to SMB2-MULTI-CHANNEL
      s3:torture/test_smb2: do a reauth over multiple channels in SMB2-MULTI-CHANNEL
      s3:torture/test_smb2: test handle based calls during reauth in SMB2-MULTI-CHANNEL
      s3:torture/test_smb2: test path based calls during reauth in SMB2-MULTI-CHANNEL
      s4:winbind: use ncalrpc for connections to ourself
      s4:auth/gensec/schannel: make a copy of netlogon_creds_CredentialState in the client
      s4:auth/gensec/schannel: initialize struct schannel_state to zero
      s3:rpc_client: initialize struct schannel_state to zero
      s3:rpc_server: initialize struct schannel_state to zero
      s4:torture:smb2:durable_open: remove unused lease variables in the open-oplock test
      s4:test:smb2:durable_open: skip lease tests when the server does not support leases
      s4:torture:smb2:durable-open: skip the open-with-lease test on servers without lease support
      s3:libsmb: pass smb2 capabilities and client guid in cli_state_create()
      s3:smbd/globals.h: remove unused pollfd pointer
      s3:msdfs: set the 'cnum' field to invalid for faked connection_structs
      s3:smbd: keep 'num_users' and 'users' directly under smbd_server_connection
      s3:smbd: keep 'num_connections' and 'connections' directly under smbd_server_connection
      s3:smbd: keep 'num_files' and 'files' directly under smbd_server_connection
      selftest: mark samba3.smb2.durable-v2-open tests as knownfail
      selftest: mark samba4.smb2.getinfo.getinfo as knownfail
      s4:librpc/rpc: make dcerpc_bh_is_connected() more robust
      s4:librpc/rpc: make dcerpc_bh_raw_call_* more robust against disconnects and timeouts
      s4:torture/smb2: avoid hanging in smb2.session.reconnect against samba
      selftest: mark samba3.smb2.session tests as knownfail instead of skip
      s3:torture: talloc_dict_traverse() returns the number of entries
      s3:torture: fix segfault in LOCAL-TALLOC-DICT
      selftest: samba3.smbtorture_s3.LOCAL-TALLOC-DICT works now
      lib/util: don't start DEBUG output with 'error '
      lib/util: remove unneeded else branch in directory_create_or_exist()
      lib/util: do an early return on error directory_create_or_exist()
      lib/util: use a helper variable in directory_create_or_exist()
      lib/util: cope with races between lstat and mkdir in directory_create_or_exist()
      lib/util: only change umask during mkdir()
      s3:smbd: also create ncalrpc/np directory before forking rpc daemons
      s3:selftest: add support for 'make test FAIL_IMMEDIATELY=1'
      selftest/flapping: mark samba4.blackbox.gentest as flakey
      selftest/flapping: mark ^samba3.rpc.spoolss.*printserver.openprinter_badnamelist as flakey
      selftest/flapping: mark ^samba3.rpc.spoolss.*printserver.enum_printers_servername as flakey
      s4:librpc/rpc: if the connection is dead we don't want to be called recursivly.
      s4:librpc/rpc: if the connecion is dead we're done
      s4:librpc/rpc: ship requests via an immediate event
      s4:librpc/rpc: also notify requests which are not shipped about a dead connection
      s4:librpc/rpc: convert dcerpc_bind_send/recv to tevent_req
      s4:librpc/rpc: convert dcerpc_alter_context_send/recv to tevent_req
      s4:librpc/rpc: use tevent_req_defer_callback() in dcerpc_bind_*
      s4:librpc/rpc: use tevent_req_defer_callback() in dcerpc_alter_context_*
      s4:librpc/rpc: pass a mem_ctx to dcerpc_request_send()
      s4:librpc/rpc: avoid an unused talloc_reference() from dcerpc_request_send()
      auth/gensec_gssapi: gss_krb5_lucid_context_v1_t is not shared with the gse code anymore
      s3:smbd: call file_close_user() before removing tree connects in conn_close_all()
      s3:gse: fix debug message in gse_get_server_auth_token()
      s4:smb_server/smb: remove a request from the list before adding the next one in a chain.
      s4:smb_server/smb2: use helper variable smb2srv_chain_reply()
      s4:smb_server/smb2: fix memory leak in smb2srv_chain_reply()
      s4:smb_server/smb2: after smbsrv_terminate_connection() we have to return
      s4:smb_server/smb2: add missing 'return;' statements in smb2srv_chain_reply()
      s4:ldap_server: fix typo in DEBUG() message
      s4:librpc/rpc: don't mix up paylod ndr flags with the dcerpc layer
      s4:librpc/rpc: also parse ncacn_packet pdus with LIBNDR_FLAG_OBJECT_PRESENT
      pidl/NDR/Parser: declare all union helper variables in ParseUnionPull()
      pidl/NDR/Parser: simplify logic in DeclareArrayVariables*()
      pidl/NDR/Parser: split off ParseArrayPullGetSize() and ParseArrayPullGetLength()
      pidl/NDR/Parser: use ParseArrayPullGetLength() to get the number of array elements (bug #8815 / CVE-2012-1182)
      pidl/NDR/Parser: remember if we already know the array length
      pidl/NDR/Parser: use helper variables for array size and length
      pidl/NDR/Parser: do array range validation in ParseArrayPullGetLength()
      pidl/NDR/Parser: also do range checks on the array size
      s3:smbd/sesssetup: use a helper variable 'action' to mark guest access
      libcli/smb: make use of data_blob_string_const_null()
      libcli/smb: we should not force a session key for anonymous connections
      libcli/smb: add smb2cli_session_get_flags()
      libcli/smb: move smb2cli_session_setup_*() prototypes to the code.
      s3:libsmb/ntlmssp: an empty string should mean no password
      s3:libsmb: fix anonymous session setups against windows servers
      s4:libcli/smb2: remove unused dependency to LIBPACKET
      s4:libcli/smb2: fix anonymous session setups against windows servers
      s4:ldapcmp.py: pass down outf and errf
      Revert "s3:libsmb/ntlmssp: an empty string should mean no password"
      s3:libsmb/ntlmssp: remove some indentation in ntlmssp_set_password()
      s3:libsmb/ntlmssp: add ntlmssp_is_anonymous()
      s3:libsmb/ntlmssp: improve anonymous logins
      s3:libsmb/cliconnect: make use of ntlmssp_is_anonymous()
      s3-dbwrap: dbwrap_watch_record_stored => NT_STATUS_NOT_FOUND is ok...
      s4:libnet_become_dc: add missing 'return' after composite_error()
      s4:librpc/rpc: directly return after composite_error()
      s4:libnet: pass an explicit mem_ctx to libnet_rpc_userinfo_send() (bug #8889)
      s4:ntvfs/ipc: don't echo back the smb2 ioctl input_buffer
      libcli/smb: move SMB2_IOCTL_FLAG_IS_FSCTL to smb2_constants.h
      s3:libsmb: add smb2cli_ioctl*
      s3:libsmb/cli_np_tstream: remove unused tstream_cli_np_existing()
      s3:libsmb/cli_np_tstream: add support for SMB2
      s3:winbindd: also try SMB2 when connecting to "IPC$"
      s4:librpc: create a binding on the pipe if necessary in dcerpc_pipe_open_smb2_send()
      s3:idmap_cache: change DEBUG message to level 10
      s3:libsmb: remove unused reference to talloc_tos()
      s3:libsmb: use 'state' instead of 'talloc_tos()' in smb2cli_create*
      s3:libsmb: use 'state' instead of 'talloc_tos()' in smb2cli_ioctl*
      s3:libsmb: use 'state' instead of 'talloc_tos()' in smb2cli_tcon*
      s3:libsmb: add smb2cli_query_info*
      s3:libsmb: add smb2cli_set_info*
      s3:torture: do some query_info and set_info calls in SMB2-SESSION-REAUTH
      libcli/smb: add SMB3_DIALECT_REVISION_300
      libcli/smb: add PROTOCOL_SMB3_00
      libcli/smb: add #define PROTOCOL_LATEST PROTOCOL_SMB3_00
      libcli/smb/smbXcli: add support for PROTOCOL_SMB3_00
      s3:torture/test_smb2: add support for PROTOCOL_SMB3_00
      s4:libcli/smb2: use PROTOCOL_LATEST
      s3:smb2_negprot: add support for PROTOCOL_SMB3_00
      lib/param: add support for "SMB3_00"
      selftest: mark ^samba4.raw.session.reauth as flapping
      s4:torture/raw/session: make sure we got a reauth of the existing session
      selftest: samba4 doesn't support reauth
      s4:torture/raw/context: pass tctx to test_pid_exit_only_sees_open()
      s4:torture/raw/context: make use of torture_* macros and avoid 'printf'
      s4:torture/raw: make torture_raw_context a test suite
      s4:torture/raw/context: INVALID_PARAMETER vs. LOGON_FAILURE...
      s4:torture/raw/context: add subtests as torture testcases
      s3:libsmb: remove unused var in smb2cli_set_info_done
      selftest: mark ^samba4.raw.context.session1 as flapping, the test was wrong
      s4:torture/raw/context: test a session setup with a given invalid vuid
      s4:smb_server/smb: only create a new session with vuid == 0
      Revert "selftest: mark ^samba4.raw.context.session1 as flapping, the test was wrong"
      s3:smb2_ioctl: call SMB_VFS_FSCTL() as fallback for non SMB2 specific functions
      s3:smb2_ioctl: FSCTL_SRV_ENUMERATE_SNAPSHOTS is handles in SMB_VFS_FSCTL()
      libcli/smb/smb_constants: add FSCTL_VALIDATE_NEGOTIATE_INFO*
      s3:smb2_ioctl: allow functions to disconnect the smb connection
      s3:smb2_negprot: setup the protocol at the end of the negprot with a real dialect
      s3:smbd: introduce struct smbXsrv_connection
      s3:smb2_ioctl: implement FSCTL_VALIDATE_NEGOTIATE_INFO_224
      s3:smb2_ioctl: implement FSCTL_VALIDATE_NEGOTIATE_INFO
      s3:smb2_sesssetup: pass down in_previous_session_id to all layers
      s3:smb2_sesssetup: pass down in_flags to smbd_smb2_session_setup()
      s3:smb2_sesssetup: add smbd_smb2_session_setup_send/recv as wrapper
      s3:smb2_sesssetup: make the top level code async using
      s3:smb2_tcon: add smbd_smb2_tree_connect_send/recv as wrapper
      s3:smb2_tcon: make the top level code async using
      s3:smb2_close: don't do any marshalling in smbd_smb2_close() let the caller to it
      s3:smb2_close: add add smbd_smb2_close_send/recv as wrapper
      s3:smb2_close: make the top level code async using
      lib/tevent/testsuite: no longer use 'compat' symbols
      libcli/nbt: no longer use old 'event_' tevent compat symbols
      s4:lib/events: remove unused event_context_find() prototype
      s4:lib/events: no longer define TEVENT_COMPAT_DEFINES
      lib/util: add missing 'errors' dependency to 'tevent-util'
      s3:lib/util: use map_nt_error_from_unix_common() in tevent_req_poll_ntstatus()
      s3:torture: add #include "lib/util/tevent_ntstatus.h" to test_addrchange.c
      lib/util: move tevent_req_poll_ntstatus() to tevent_ntstatus.c
      s3:libsmb: s/\<event_context/tevent_context/gc in smb2cli_tcon.c
      s3:libsmb: s/\<event_context/tevent_context/gc in smb2cli_close.c
      s3:libsmb: s/\<event_context/tevent_context/gc in smb2cli_create.c
      s3:libsmb: s/\<event_context/tevent_context/gc in smb2cli_flush.c
      s3:libsmb: s/\<event_context/tevent_context/gc in smb2cli_ioctl.c
      s3:libsmb: s/\<event_context/tevent_context/gc in smb2cli_query_directory.c
      s3:libsmb: s/\<event_context/tevent_context/gc in smb2cli_read.c
      s3:libsmb: s/\<event_context/tevent_context/gc in smb2cli_session.c
      s3:libsmb: s/\<event_context/tevent_context/gc in smb2cli_write.c
      libcli/smb: git mv smb2_session.c smb2cli_session.c
      libcli/smb: move smb2cli_logoff_* from source3 to the top level
      s4:param/tests: remove "security=server" test
      s3-auth: remove "security=server" (depricated since 3.6)
      docs-xml: remove documentation of "SECURITY = SERVER"
      s3:auth: remove unused auth_server.c
      s4:auth: remove unused auth_server.c
      s4:ntvfs/cifs: remove misleading comment regarding security=server
      s4:ntvfs/smb2: remove misleading comment regarding security=server
      lib/ccan: add a missing dependency to 'execinfo' for 'backtrace()'
      s3:cli_np_tstream: include smbXcli_base.h, because we'll use functions from there
      s3:libsmb: avoid interpret_long_date() in smb2cli_create
      libcli/smb: move smb2cli_create.c from source3 to the toplevel
      libcli/smb: move smb2cli_close.c from source3 to the toplevel
      s3:onefs: remove all onefs related code as it not maintained anymore
      s3:smb2_sesssetup: make use of nt_status_squash() in smbd_smb2_session_setup_recv()
      s3:gse: remember the expire time
      s4:auth/gensec_gssapi: remember the expire time
      s4:auth/gensec_gssapi: add missing 'break' statements
      auth/gensec: add gensec_expire_time()
      auth/gensec: implement gensec_spnego_expire_time()
      s4:auth/gensec: implement gensec_gssapi_expire_time()
      s3:gse: implement gensec_gse_expire_time()
      s4:auth/gensec_gssapi: add "gensec_gssapi:requested_life_time" option
      s4:torture: remove unused vars in smb2.session.reauth*
      s4:torture: rename smb2.session.reconnect to smb2.session.reconnect1
      s4:torture: add smb2.session.reconnect2 test
      s4:torture: add smb2.session.expire1
      selftest/Samba3: add 'smbd:suicide mode = yes'
      s3:smbd: SMBtdis should return ERRSRV, ERRinvnid instead of NETWORK_NAME_DELETED
      s3:smbd: allow creating new spnego sessions only with a 0 vuid
      s4:torture: rename raw.session.reauth => raw.session.reauth1
      s3:smb2_ioctl: Fix Coverity ID 701771 Uninitialized scalar variable
      s3:smbd: use reply_force_doserror(req, ERRSRV, ERRbaduid) on SMBulogoff
      s3:smbd: add nt_status_np_pipe()
      s3:smbd: use nt_status_np_pipe for smb1
      s3:smb2_server: make use of nt_status_np_pipe()
      s3:smbd/files: remove unused VALID_FNUM()
      s3:smbd/proto.h: remove unused resolve_dfspath() prototype
      s3:rpc_server/dfs: pass allow_broken_path=true to create_junction()
      s3:smbd/files: fix error path and correctly cleanup
      s3:smbd/files: work without sconn->file_bmap and assign fsp->fnum = -1
      s3:smbd/msdfs: let create_conn_struct() also fake the 'smbd_server_connection'
      s3:smbd/msdfs: pass 'allow_broken_path' to get_referred_path()
      s3:smbd/msdfs: pass allow_broken_path to resolve_dfspath_wcard()
      s4:smb_server/smb: fix talloc_free() bug
      s3:smbd: remove unused var in smbXsrv_connection_init_tables()
      s3:smbd/files: split file_init_global() out of file_init()
      s3:smbd: only call file_init_global() in the parent smbd
      s3:smbd: remove global 'smbd_server_conn' !!!
      s3:smbd/signing: use smbd_server_connection as talloc parent for its smb1 signing state
      s3:smbd: remove unused get_number_of_exclusive_open_oplocks()
      s3:smbd: move global oplocks vars to smbd_server_connection
      s3:smbd: pass smbd_server_connection to should_notify_deferred_opens()
      s3:smbd: move global koplocks to smbd_server_connection
      s3:smbd: move global smbd_msg_state to smbXsrv_connection
      s3:selftest: run smbtorture3 CLEANUP3 in the s3dc:local environment
      s3:rpc_client: tstream_cli_np_open_send() doesn't expect a leading backslash
      s3:cli_np_tstream: pass a leading backslash for the pipe name for SMB1
      s4:torture/samba3rpc: add smb2-pipe-name
      s4:torture/samba3rpc: add smb1-pipe-name
      s3:smb2_create: do not remove leading backslash from pipe names
      s3:rpc_server: return OBJECT_NAME_NOT_FOUND instead of PIPE_NOT_AVAILABLE
      s3:smbd: only strip \\ off the name if present (for ntcreatex)
      s3:smbd: fix reply_open_pipe_and_X() to behave like windows (2008 R2)
      s3:rpc_server: don't do any magic in is_known_pipename() anymore
      s3:selftest: run rpc.samba3.smb[1|2]-pipe-name
      s4:ntvfs/ipc: fix protocol specific processing of pipe names
      s3:smb2cli_ioctl: fix requests without output_buffer.length > 0 against windows
      libcli/smb: add some more FSCTL_* defines
      s3:smb2_ioctl: add some more validation checks
      s3:smb2_ioctl: add more validation checks
      s3:smb2_ioctl: verify credit charge
      s3:libsmb: fallback to SMBtcon for old servers
      s3:libsmb: use cli_tree_connect() instead of cli_tcon_andx()
      s3:utils: use cli_tree_connect() instead of cli_tcon_andx()
      s3:libsmb: use nb_connect_send() directly instead of doing a 0 timer for port 139
      lib/dbwrap: remove unused per db_record pointer in dbwrap_rbt
      lib/dbwrap: fix db_rbt_store and update the per record node pointer
      lib/dbwrap: don't alter the record on failure in db_rbt_store()
      lib/dbwrap: make it possible to delete/store the current record during traverse
      s3:vfs_hpuxacl: remove unused file_find_fd() calls
      s3:smbd: use server_messaging_context() instead of sconn->msg_ctx in exit_server_common()
      s3:smbd/oplock: avoid procid_is_me()
      s3:smbd/open: avoid procid_is_me()
      s3:smbd/close: avoid procid_is_me()
      s3: Fix an assert to trigger in close_remove_share_mode
      s3:smbd/close: do an early return in close_directory()
      s3:smbd/close: remove unused goto out from close_directory()
      s3:smbd/close: call del_share_mode() directly before TALLOC_FREE(lck)
      Revert "s3: Fix bug 8371"
      s3:smbd: make conn_close_all() a void function
      s4:torture/locktest: fix compiler warning
      s3:libsmb: don't require a pinbuf in cli_smb_recv() to keep the memory
      s3:libsmb: remove unused 'inbuf' variable
      s3:libsmb: use inhdr instead of inbuf in session setup related functions
      s3:libsmb: use inhdr instead of inbuf in tree connect related functions
      s3:libsmb: change cli_sesssetup_blob_* to use uint8_t instead of char for inbuf
      s3:libsmb: fix the talloc parent of clistr_pull_talloc() in cli_notify_done()
      s3:lib: split things into a conn_tdb.h
      s3:smbd: make typedef write_cache private to fileio.c
      s3:smbd: remove typedef for struct write_cache
      s3:includes: move struct share_mode_lock to locking.h
      s3:smbd: add vfs_remove_all_fsp_extensions()
      s3:smbd: make use of vfs_remove_all_fsp_extensions() in file_free()
      s3:smbd: make struct vfs_fsp_data private to vfs.c
      s3:smbd: dup_file_fsp() never gets called for print files
      s3:smbd: fcb_or_dos_open() can be static
      s3:smbd: use print_spool_rap_jobid() in reply_ioctl()
      s3:smbd: use print_spool_rap_jobid() in call_trans2ioctl()
      s3:printing: make struct print_file_data private to printspoolss.c
      s3:printing: add print_spool_rap_jobid()
      s3:smbd: add change_notify_fsp_has_changes()
      s3:smbd: make use of change_notify_fsp_has_changes()
      s3:smbd: make struct notify_change_buf private to notify.c
      s3:smbd: move struct privilege_paths to smbd.h
      s3:smbd: move struct trans_state to smbd.h
      s3:includes: move union unid_t to vfs.h
      s3:include: move struct fd_handle/files_struct to vfs.h
      s3:include: move struct stream_struct to vfs.h
      s3:include: move struct connection_struct (and sub structs) to vfs.h
      s3:include: move struct smb_file_time to vfs.h
      s3:include: move struct smb_filename to vfs.h
      s3:smbd: move UCF_ defines to smbd.h
      s3:include: remove unused forward declaration of deferred_open_record in smb.h
      s3:include: move some prototypes (e.g. smb_register_vfs) to vfs.h
      examples/VFS: don't use smbd/proto.h
      s3:lib: we don't need smbd/proto.h in smbd_shim.c
      s3:modules: we don't need smbd/proto.h in vfs_shadow_copy2.c
      s3:utils: use smbd/smbd.h instead of just smbd/proto.h
      s3:torture: use smbd/smbd.h instead of just smbd/proto.h in vfstest_chain.c
      s3:printing: use smbd/smbd.h instead of just smbd/proto.h in queue_process.c
      s3:smbd: move forward declaration of struct aio_extra to smbd.h
      s3:smbd: use 'struct user_struct' instead of typedef'ed 'user_struct'
      s3:include: remove typedef user_struct
      s3:smbd: move struct user_struct to globals.h
      s3:include: move sys_acl prototypes to smb_acls.h
      s3:includes: change vuid_cache_entry->vuid to uint64_t
      s3:include: change connection_struct->vuid to uint64_t
      s3:include: change files_struct->vuid to uint64_t
      s3:include: move struct smb_request to vfs.h
      s3:include: change smb_request->vuid to uint64_t
      s3:smbd: change trans_state->vuid to uint64_t
      s3:include: change current_user->vuid to uint64_t
      s3:smbd: change conn_ctx->vuid to uint64_t
      s3:printing: let print_spool_open() take a uint64_t vuid
      s3:smbd: let open_fake_file() take a uint64_t vuid
      s3:smbd: let conn_clear_vuid_caches() take a uint64_t vuid
      s3:smbd: let make_connection() take a uint64_t vuid
      s3:smbd: use UID_FIELD_INVALID (0) instead of (uint16)-1 when calling close_cnum()
      s3:smbd: let close_cnum() take a uint64_t vuid
      s3:smbd: let fcb_or_dos_open() take a uint64_t vuid
      s3:smbd: change vuid to uint64_t in uid.c
      s3:smbd: pass down vuid as uint64_t in ipc.c
      s3:smbd: pass down vuid as uint64_t in lanman.c
      s3:smbd: let file_close_pid/file_close_user take a uint64_t vuid
      s3:smbd: change user_struct->vuid to uint64_t
      script/commit_mark.sh: add the current branch name
      tevent: expose tevent_context_init_ops
      tevent: change version to 0.9.16
      s3:smbd: readd START_PROFILE(smbd_idle)/END_PROFILE(smbd_idle)
      s3:smb2_close: add missing TALLOC_FREE(subreq) in smbd_smb2_request_close_done()
      s3:smbd: set req->smb2req->compat_chain_fsp in file_fsp()
      s3:smb2_lock: use smb2req->compat_chain_fsp instead of looking it up again
      s3:smb2_lock: use fsp->fnum as locking context
      s3:smb2_read: pass fsp->fnum to init_strict_lock_struct()
      s3:smb2_write: pass fsp->fnum to init_strict_lock_struct()
      s3:smbd: add file_fsp_smb2()
      s3:smb2_flush: make use of file_fsp_smb2()
      s3:smb2_close: make use of file_fsp_smb2()
      s3:smb2_break: make use of file_fsp_smb2()
      s3:smb2_find: make use of file_fsp_smb2()
      s3:smb2_getinfo: make use of file_fsp_smb2()
      s3:smb2_setinfo: make use of file_fsp_smb2()
      s3:smb2_notify: make use of file_fsp_smb2()
      s3:smb2_read: make use of file_fsp_smb2()
      s3:smb2_write: make use of file_fsp_smb2()
      s3:smb2_lock: make use of file_fsp_smb2()
      s3:smb2_ioctl: make use of file_fsp_smb2()
      Revert "s3:smbd: set req->smb2req->compat_chain_fsp in file_fsp()"
      heimdal:lib/asn1: try to fix the build on IRIX
      wafsamba: try to fix the build on AIX with xlc_r
      lib/ldb/tools: add missing "replace.h"
      libcli/nbt: remove unused system/network.h from libnbt.h
      s3-libsmbclient: change vnum to 0.2.0
      s4:ntvfs: add '_fn' suffix to all ntvfs_ops function pointers
      lib/replace: s/execute=1/execute=True
      Revert "lib/replace: Fix snprintf() override for systems with a broken snprintf()"
      lib/replace: add more condition to add snprintf.c
      Revert "replace: use replace for non 'samba' compliant strptime"
      lib/replace: execute strptime.c tests
      lib/replace: define HAVE_WORKING_STRPTIME instead of REPLACE_STRPTIME
      tdb: remove unused debug_fprintf() macro that breaks the build
      tdb2: remove unused debug_fprintf() macro that breaks the build
      s3:smbd: try to make fsp->fh->gen_id as globally unique as possible
      s3:smbd: only set fsp->fh->gen_id for a client connection
      s3:smbd: add a fsp_persistent_id() function
      s3:smbd: use fsp_persistent_id() as persistent_file_id part for SMB2 (bug #8995)
      auth.idl: mark confidential attributes as [noprint]
      heimdal:lib/hdb: <config.h> needs to be the first header
      s3:smbd: remember the request_time on an incoming request
      s3:smb2_server: remember the request_time on an incoming request
      selftest/flapping: mark samba4.nss.test using winbind(s3dc) as flakey
      heimdal:lib/krb5: don't name a struct 'token'
      heimdal:lib/wind: make sure errorlist_table.c includes config.h as first header
      heimdal:lib/wind: include <stdlib.h> at the end
      s3:configure: check for SPLICE_F_MOVE at configure stage
      lib/param: add missing prototype of lpcfg_parm_long()
      s3:autogen.sh: fix autoconf/lib/param/param_proto.h location
      s3:Makefile.in: fix 'make clean' after moving generated files to autoconf/
      s3:Makefile.in: fix 'make realdistclean' after moving generated files to autoconf/
      s3:Makefile.in: remove pidl generated files with 'make realdistclean'
      s3:autoconf: add -Iautoconf -Iautoconf/source3 at configure stage
      selftest/flapping: samba4.nss.test is also flakey for s3member
      wafsamba/irixcc: add '-c99' option to cc
      s3:rpc_server/lsasd: remove dependency to libgen.h and basename()
      Revert "s3-lib Remove unused sys_fcntl_long()"
      selftest/flapping: mark samba4.nss.test using winbind as flakey
      Revert "wafsamba/irixcc: add '-c99' option to cc"
      wafsamba/irixcc: next try to inject '-c99' the the build
      s3:include: add START/END_PROFILE_STAMP()
      s3:smbd: fix the build with the --with-profiling-data option
      script/autobuild: don't use make -j for small projects
      script/autobuild: don't use 'make -j 4' for bin/smbtorture4
      script/autobuild: delay start of small projects by 60 to 600 seconds
      s4:torture/smb2: add smb2.durable-open.delete_on_close1
      s3:winbindd: discard the expired gid cache if we're online (bug #9002)
      s3:winbindd: do not expose negative cache idmap entries as valid mappings (bug #9002)
      s3:idmap_cache: also store negative entries for unknown sids
      s4:torture/smb2: rename smb2.durable-open.lock to smb2.durable-open.lock-lease
      selftest: samba3.smb2.durable-open.lock => samba3.smb2.durable-open.lock-lease
      s4:torture/smb2: add smb2.durable-open.lock-oplock
      s4:torture/smb2: run smb2.session.reauth5 in a subdirectory
      s3:serverid: don't ignore the result of dbwrap_parse_record()
      s3:smbd: fix warning in smbd_tevent_trace_callback() without profile support
      s4:torture/raw: add raw.session.expire1
      selftest/knownfail: mark ^samba4.raw.session.expire1 as knownfail
      script/autobuild: fix path to random-sleep.sh
      dbwrap: intialize state.status in dbwrap_fetch_int32()
      dbwrap: don't ignore the result of dbwrap_parse_record in dbwrap_fetch_int32()
      s3:librpc: add smbXsrv.idl
      s3:librpc/idl/smbXsrv.idl: add smbXsrv_version_* structures
      s3:smbd: add smbXsrv_version_* infrastructure
      s3:smbXsrv.idl: add smbXsrv_session* structures
      s3:smbd: add smbXsrv_session infrastructure
      sq smbXsrv_session_global_store no connection
      s3:smbXsrv.idl: add smbXsrv_tcon* structures
      s3:smbd: add smbXsrv_tcon infrastructure
      s3:smbXsrv_session: init and disconnect smbXsrv_tcon for SMB2/3
      s3:smb2_sesssetup: make use of the smbXsrv_session infrastructure
      s3:smb2_sesssetup: add support for SMB 2.24/3.00 signing
      s3:smbd: make use of smbXsrv_tcon and smbXsrv_session for smb2
      s3:smbd: make use of smbXsrv_tcon for smb1
      s3:smbd: make use of smbXsrv_session for smb1
      s3:smbd: remove now unused invalidate_all_vuids()
      lib/param: add "SMB3" as alias for PROTOCOL_SMB3_00
      selftest/Samba3: 'server max protocol = SMB3'
      docs-xml: fix reference from "server min protocol" to "server max protocol"
      docs-xml: document "server max protocol" SMB3 and SMB3_00
      s3:smb2_sesssetup: implement dynamic re-authentication and expire sessions
      selftest/knownfail: only reauth5 still fails
      s3:selftest: run smb2.session as ntlm and krb5
      s3:selftest: run smbtorture3 SMB2-SESSION-REAUTH
      s3:smbd/sesssetup: implement dynamic re-authentication and expire session if client supports it
      s3:selftest: run rpc.samba3.smb-reauth1 and rpc.samba3.smb-reauth2
      s3:selftest: run raw.session
      s3:smb2_sesssetup: inline most of smbd_smb2_session_setup()
      s3:smb2_sesssetup: make use of gensec_update_send/recv
      s3:smb2_sesssetup: inline gensec_session_info() call
      s3:messaging.idl: define MSG_SMBXSRV_SESSION_CLOSE
      s3:smbXsrv.idl: add smbXsrv_session_close*
      s3:smbXsrv_session: add smb2srv_session_close_previous_send/recv
      s3:smbXsrv_session: react on MSG_SMBXSRV_SESSION_CLOSE
      s3:smb2_sesssetup: make use of smb2srv_session_close_previous_send/recv
      selftest/known: samba3.smb2.session.*reconnect passes now
      s3:selftest: run SMB2-SESSION-RECONNECT
      s3:smbXsrv_session: pass max_sessions explicitly for smbXsrv_session_table_init()
      s3:smbXsrv_tcon: pass max_tcons explicitly for smbXsrv_tcon_table_init()
      s3:wscript: use LOCKING subsystem for smbtorture3
      s3:brlock: add some const to print_lock_struct()
      s3:brlock: s/int/uint64_t for fnum
      s3:smbd/files: fsp->fnum is uint64_t not int!
      s3:smb2_create: add usefull DEBUG() message
      s3:smbd: change nt_open_pipe() to uint16_t pnum/fnum
      s3:smb2_server: start the connection with one credit granted to the client
      s3:smb2_server: call smbd_smb2_request_validate() also in smbd_smb2_first_negprot()
      s3:smb2_server: remove unused and confusing DEFAULT_SMB2_MAX_CREDIT_BITMAP_FACTOR
      s3:smb2_server: fix calculation of the next bitmap_offset
      s3:smb2_server: clear sequence window if we got the lowest sequence id
      s3:smb2_server: split out a smb2_validate_sequence_number() function
      s3:smb2_server: check the credit_charge against the already granted credits
      s3:smb2_server: make sure we don't grant more credits than we allow
      s3:smb2_server: make sure sequence numbers don't wrap at UINT64_MAX
      s3:smb2_server: implement credit granting similar to windows
      s3:smb2_server: grant extra credits for multi-credit requests
      s3:smb2_negprot: support SMB2_CAP_LARGE_MTU on everything but port 139
      s3:smb2_server: simplify smbd_smb2_request_verify_creditcharge() a bit.
      s3:smb2_server: make the logic in smbd_smb2_request_verify_creditcharge() simpler
      lib/param: let "SMB2" select PROTOCOL_SMB2_10
      s3:param: change "server max protocol" to "SMB2" (SMB2_10)
      docs-xml: document "server max protocol" "SMB2" selects PROTOCOL_SMB2_10
      s3:smb2_server: remove max_charge check in smbd_smb2_request_verify_creditcharge()
      lib/util: fix fd leak in anonymous_shared_allocate() if MAP_ANON is not available
      libcli/smb: add SMB2_CAP_DIRECTORY_LEASING to SMB2_CAP_ALL
      lib/ccan: readd execinfo dependency to failtest
      s3:smbXsrv.idl: add smbXsrv_open* structures
      s3:smbd: add smbXsrv_open* infrastructure
      s3:smbd: make use of smbXsrv_open for smb1/2/3
      s4:librpc/rpc/dcerpc_schannel: rework downgrade logic
      s4:librpc/rpc/dcerpc_schannel: just append NETLOGON_NEG_RODC_PASSTHROUGH as rodc
      s4:rpc_server/netlogon: implement netr_LogonGetCapabilities
      s4:rpc_server/netlogon: only return STRONG_KEYS if the client asked for it
      libcli/auth: add support for AES/HMAC-SHA256 schannel session key support
      libcli/auth: add support for AES/HMAC-SHA256 to the netlogon schannel sign/seal
      s4:librpc/rpc: add DCERPC_SCHANNEL_AES support
      s4:rpc_server/netlogon: add support for AES based netlogon schannel
      s3:rpc_server: add support for AES bases netlogon schannel
      s3:smbd: if a fsp has fsp->deferred_close, clients shouldn't be able to use it
      s3:smb2_tcon: reject access to shares mark as "smb encrypt = required"
      s3:test_smb2: copy the session_channel from the primary channel.
      libcli/smb: add SMB2_TRANSFORM macros
      libcli/smb: add SMB2_SESSION_FLAG_ENCRYPT_DATA
      lib/crypto: add aes_ccm_128
      libcli/smb: construct the signing_key before forming the message
      libcli/smb: add smb2_signing_[en|e]crypt_pdu()
      libcli/smb: only pass the smb2 buffer to smb2cli_inbuf_parse_compound()
      libcli/smb: check the buffer length in smbXcli_negprot_dispatch_incoming()
      libcli/smb: copy the application_key in smb2cli_session_create_channel()
      libcli/smb: prepare [en|de]cryption_key for SMB3
      libcli/smb: create 4 iovecs per request in smb2cli_inbuf_parse_compound()
      libcli/smb: parse the SMB2_TRANSFORM header and decrypt the SMB2 pdu
      libcli/smb: make use of SMB2_HDR_BODY as header size
      libcli/smb: maintain smb2.should_sign on smbXcli_req_state
      libcli/smb: increment nbt_len, when we have the fully created the SMB2 PDU
      libcli/smb: encrypt SMB2 traffic if nedded/desired.
      libcli/smb: set should_encrypt = true if we got SMB2_SESSION_FLAG_ENCRYPT_DATA
      s4:libcli/raw: setup a smbXcli_session for each smbcli_session
      libcli/smb: pass down smbXcli_session to smb1cli_req_create/send() and smb1cli_trans*
      s4:libcli/raw: fix SMBtconX response parsing
      s4:libcli/raw: parse extended SMBtconX responses
      s3:libsmb: make use of cli_state_[g|s]et_tid()
      s3:libsmb: use a smbXcli_tcon instead of uint16_t cli_state->smb1.tid
      s4:libcli/raw: setup a smbXcli_tcon for each smbcli_tree
      libcli/smb: pass down smbXcli_tcon to smb1cli_req_create/send() and smb1cli_trans*
      s4:libcli/smb2: setup a smbXcli_tcon for each smb2_tree
      s3:libsmb: setup a smbXcli_tcon for SMB2
      libcli/smb: pass smbXcli_tcon to smb2cli_create*()
      libcli/smb: pass smbXcli_tcon to smb2cli_close*()
      libcli/smb: pass smbXcli_tcon to smb2cli_read*()
      libcli/smb: pass smbXcli_tcon to smb2cli_write*()
      libcli/smb: pass smbXcli_tcon to smb2cli_flush*()
      libcli/smb: pass smbXcli_tcon to smb2cli_set_info*()
      libcli/smb: pass smbXcli_tcon to smb2cli_query_info*()
      libcli/smb: pass smbXcli_tcon to smb2cli_query_directory*()
      libcli/smb: pass smbXcli_tcon to smb2cli_ioctl*()
      s3:torture/test_smb2: make a copy of smbXcli_tcon
      s3:smb2_server: simplify the talloc_pool handling for smbd_smb2_request
      s3:torture: replace shm_setup() with anonymous_shared_allocate()
      s3:torture: remove unused shm_setup()
      s4:torture: replace shm_setup() with anonymous_shared_allocate()
      s4:torture: remove unused shm_setup()
      s3:libsmb: remove cli_state->smb2.tid
      s3:libsmb: remove unused tcon specific elements from cli_state->smb2
      libcli/smb: add smb2cli_tcon_capabilities()
      s4:torture/smb2: use smb2cli_tcon_capabilities()
      s4:torture/smb2: create temporary smbXcli_tcon/session structures instead of changing them
      s4:libcli/smb2: remove unused elements from smb2_tree
      libcli/smb: pass smbXcli_tcon to smb2cli_req_create/send()
      libcli/smb: there's no PID field in the SMB2/3 header anymore
      s4:libcli/smb2: remove unused variable
      s3:libsmb: remove unused cli_state->smb2.pid
      s4:libcli/smb2: remove unused smb2_session->pid
      libcli/smb: pass smbXcli_session to smb2cli_tcon_set_values()
      libcli/smb: setup tcon->smb2.should_encrypt in smb2cli_tcon_set_values()
      s3:smb2_ioctl: remove FSCTL_VALIDATE_NEGOTIATE_INFO_224 implementation
      s3:smb2_ioctl: allow clients to send padding at the end of FSCTL_VALIDATE_NEGOTIATE_INFO
      s3:smb2_ioctl: fix GUID_compare() check in FSCTL_VALIDATE_NEGOTIATE_INFO
      s3:libcli/smb: add SMB2_SESSION_FLAG_BINDING
      s3:smb2_sesssetup: reject SMB2_SESSION_FLAG_BINDING requests
      libcli/smb: introduce a smb2cli_session
      libcli/smb: add SMB2_HDR_CHANNEL_SEQUENCE
      libcli/smb: add basic session->smb2.channel_sequence handling
      s3:smbd: fix compiler warnings in notify_internal.c
      s3:smb2_negprot: return the current system time in the SMB2 NEGPROT response
      dfs_server_ad: return STATUS_NOT_FOUND if the client connects to an ip address
      dfs_server_ad: s/acct/aname as acct() is a function
      s3:dbwrap_ctdb: initialize db_record->db
      s3:smbd: move smbd_register_ips() next to release_ip()
      s3:smbd: use print_sockaddr() instead of client_socket_addr()
      s3:smbd: do a clean shutdown during release_ip() after CTDB_SRVID_RELEASE_IP
      libcli/smb: add smb1cli_session_set_session_key()
      libcli/smb: let smb1cli_session_set_id() reset the application_key
      libcli/smb: allow resetting of the smb1 application_key
      s3:libsmb: make use of smb1cli_session_set_session_key()
      s4:libcli/smb_composite: always use set_user_session_key() helper
      s4:libcli/smb_composite: make use of smb1cli_session_set_session_key()
      libcli/smb: add smbXcli_session_application_key()
      s4:librpc/dcerpc_smb2: make use of smbXcli_session_application_key()
      libcli/smb: remove unused smb2cli_session_application_key()
      s4:librpc/dcerpc_smb: make use of smbXcli_session_application_key()
      s4:librpc/dcerpc_smb2: sync smb2_session_key() with smb_session_key()
      s4:libcli/raw: remove unused smbcli_session->user_session_key
      s3:rpc_client: make use of smbXcli_session_application_key()
      s3:libnet_join: make use of cli_get_session_key() in libnet_join_joindomain_rpc()
      s3:utils/net_rpc*: make use of cli_get_session_key()
      s3:libsmb: remove unused cli_state->user_session_key
      s3:rpc_client: rename pipe_auth_data->user_session_key to transport_session_key
      libcli/smb: move some TCON related defines to smb_constants.h
      s3:libsmb: add a tcon_flags helper variable
      s3:libsmb: add a optional_support helper variable
      s3:smbd: make use of TCONX_FLAG_DISCONNECT_TID define
      s3:smbd: add a optional_support helper variable to reply_tcon_and_X()
      s4:libcli: send the TCONX_FLAG_EXTENDED_RESPONSE flag
      s4:torture: send the TCONX_FLAG_EXTENDED_RESPONSE flag
      s4:dsdb:replicated_objects: do not move 'instanceType' to the end of msg->elements on RODC replication
      auth/ntlmssp: avoid talloc_tos() in ntlmssp_client_initial()
      libcli/smb: change smb_signing to skip the NBT_HEADER_SIZE internally
      s3:smbd: skip nbt header in srv_check_sign_mac()
      libcli/smb: pass hdr/len to smb_signing_check/sign_pdu() and skip the nbt header
      libcli/smb: add smb_key_derivation() for TREE_CONNECT_ANDX_EXTENDED_SIGNATURES support
      libcli/smb: add smb1cli_session_protect_session_key()
      s3:libsmb: add EXTENDED_SIGNATURE support in cli_tcon_andx*()
      s4:libcli: add support for SMB_EXTENDED_SIGNATURES during SMBtconX
      s4:torture: add support for SMB_EXTENDED_SIGNATURES during SMBtconX
      s3:smbd: keep the "application session key" during SMB1 reauth
      s3:smbd: setup session->global->signing_/application_key during old SMB1 session setups
      s3:smbd: setup session->global->signing_/application_key during SPNEGO SMB1 session setups
      s3:rpc_server/netlogon: make usage of session_extract_session_key()
      s3:rpc_server/wkssvc: make usage of session_extract_session_key()
      s3:smbd: setup the application session key with the first tcon on a session
      s3:smbd: add support for SMB_EXTENDED_SIGNATURES in SMBtconX
      s4:domain join: setup RODC invocationId
      s3:smb2_read: remove unused in_smbpid
      s3:smb2_write: remove unused in_smbpid
      s3:smb2_lock: remove unused in_smbpid
      s3:smb2_server: use 'i' instead of '1' as vector index in smbd_smb2_request_pending_timer()
      s3:smbd: add helper macros to access smb2req->{in,out}.vector[]
      s3:smb2_break: make use of SMBD_SMB2_IN_BODY_PTR()
      s3:smb2_close: make use of SMBD_SMB2_IN_BODY_PTR()
      s3:smb2_flush: make use of SMBD_SMB2_IN_BODY_PTR()
      s3:smb2_notify: make use of SMBD_SMB2_IN_*_PTR()
      s3:smb2_read: make use of SMBD_SMB2_IN_BODY_PTR()
      s3:smb2_glue: make use of SMBD_SMB2_IN_HDR_PTR()
      s3:smb2_sesssetup: make use of SMBD_SMB2_* macros
      s3:smb2_find: make use of SMBD_SMB2_* macros
      s3:smb2_create: make use of SMBD_SMB2_* macros
      s3:smb2_tcon: make use of SMBD_SMB2_* macros
      s3:smb2_write: make use of SMBD_SMB2_* macros
      s3:smb2_negprot: make use of SMBD_SMB2_* macros
      s3:smb2_getinfo: make use of SMBD_SMB2_* macros
      s3:smb2_setinfo: make use of SMBD_SMB2_* macros
      s3:smb2_lock: make use of SMBD_SMB2_* macros
      s3:smb2_ioctl: make use of SMBD_SMB2_* macros
      s3:smb2_server: make use of SMBD_SMB2_* macros
      s3:smbd: remove unused variable in sesssetup.c
      s4:libcli/pyerrors: s/PyErr_WERROR_IS_ERR_RAISE/PyErr_WERROR_NOT_OK_RAISE/
      s4:libcli/pyerrors: add PyErr_NTSTATUS_NOT_OK_RAISE()
      s3:smb2_server: add smbd_smb2_inbuf_parse_compound()
      s3:smb2_server: remove const from smbd_smb2_first_negprot()
      s3:smb2_server: make use of smbd_smb2_inbuf_parse_compound() in smbd_smb2_request_create()
      s3:smb2_server: make use of smbd_smb2_inbuf_parse_compound() in smbd_smb2_request_read*()
      libcli/smb: use forward declaration instead of includes
      libcli/util: add NT_STATUS_FILE_NOT_AVAILABLE
      s3:smb2_server: move 'conn' to main block of smbd_smb2_request_dispatch()
      s3:smb2_server: introduce a smbd_smb2_dispatch_table (for now just with names)
      s3:smb2_server: add .need_session to smbd_smb2_dispatch_table
      s3:smb2_server: add .need_tcon to smbd_smb2_dispatch_table
      s3:smb2_server: add .as_root to smbd_smb2_dispatch_table
      s3:smb2_server: add and use smbd_smb2_call()
      s3:smb2_server: do one central session check if the operation requires it
      s3:smb2_server: do one central tcon check if the operation requires it
      s3:smb2_server: do one central as_root check if the operation requires it
      s3:smb2_server: add some more SMBD_SMB2_* defines/macros
      s3:smb2_server: make use of SMBD_SMB2_NUM_IOV_PER_REQ
      s3:smb2_server: make use of helper macros in smbd_smb2_request_validate()
      s3:smb2_server: make use of helper macros in smb2_calculate_credits()
      s3:smb2_server: make use of SMBD_SMB2_*_IOV_OFS
      s3:smb2_server: check for compound based on SMBD_SMB2_NUM_IOV_PER_REQ
      s3:smb2_server: make use of SMBD_SMB2_OUT_*_IOV smbd_smb2_request_reply()
      s3:smb2_server: check for compound based on SMBD_SMB2_NUM_IOV_PER_REQ
      s3:smb2_server: make use of SMBD_SMB2_OUT_HDR_PTR() smbd_smb2_request_pending_queue()
      s3:smb2_server: use memmove instead of copying single vector elements
      s3:smb2_server: there's no need to copy req->out.vector when we just keep the last request
      s3:smb2_server: fix SMB2 signing of compound responses
      s3:smb2_server: sign the last request at the start of smbd_smb2_request_reply()
      s3:smb2_sesssetup: remove TALLOC_FREE(session) from smbd_smb2_[re]auth_generic_return
      s3:smb2_sesssetup: remove unused code in smbd_smb2_reauth_generic_return()
      libcli/smb: smb2_signing_[en|de]crypt_pdu() check and set SMB2_TF_MSG_SIZE
      libcli/smb: do not set SMB2_TF_MSG_SIZE in the caller
      s3:smb2_server: don't try to update req->in.vector[0] in smbd_smb2_request_pending_queue()
      s3:smb2_read: fix indentation in schedule_smb2_sendfile_read()
      s3:smb2_read: use SMBD_SMB2_NUM_IOV_PER_REQ when checking for sendfile() support
      s3:smb2_server: use the common buffer layout for smbd_smb2_request_pending*
      s3:smb2_server: make use of SMBD_SMB2_* macros in smbd_smb2_request_verify_sizes()
      s3:smb2_server: make use of SMBD_SMB2_* macros in smbd_smb2_request_done_ex()
      s3:smb2_server: rewrite dup_smb2_vec3() using SMBD_SMB2_*_IOV_OFS and helper variables
      s3:smb2_server: remove useless variable 'i'
      s3:smb2_server: make use of SMBD_SMB2_OUT_HDR_PTR() in smbd_smb2_request_pending_queue()
      s3:smb2_server: s/i/idx in smbd_smb2_request_pending_queue()
      s3:nmbd: don't log get_domain_master_name_node_status_fail at level 0
      s3:nmbd: log a failure in get_domain_master_name_node_status_success() as level 1
      s3:smb2_server: do central file_id check if the operation requires it
      s3:smb2_server: check the session before we could response with an error.
      s3:smbXsrv.idl: add encryption_required to smbXsrv_tcon_global0
      s3:smb2_sesssetup: set global->encryption_required and enforce it
      s3:smb2_tcon: set global->encryption_required and enforce it
      s3:smb2_server: add smbd_smb2_request->do_encryption
      s3:smb2_read: don't try sendfile if encryption is used
      s3:smb2_sesssetup: setup global->[en|de]cryption_key
      s3:param: fix compiler warnings with FN_GLOBAL_CONST_STRING()
      s3:smbXsrv.idl: remove smbXsrv_*0 defines
      Revert "s3:smb: include "smbXsrv.h" before "vfs.h""
      Revert "s3:smbd: Include smbXsrv.h before vfs.h (in smbd.h) so that the smbXsrv structures are available"
      Revert "s3:smbd: include smbXsrv.h before smbd/proto.h to have the smbXsrv_ structs available"
      s4:dsdb/repl: avoid reallocation of msg->elements
      s4:dsdb/repl: make sure instanceType_e is not changed by a reallocation
      s4:dsdb/repl: ldb_errstring() takes a 'struct ldb_context' not 'int'
      s4:samba-tool/drs: print the dns name of the server belonging to a connection
      s4:dsdb/repl: fix the usage of 'GC/' prefixed principal names
      libcli/smb: all flags except SMB2_HDR_FLAG_ASYNC should be cleared in a cancel request.
      s3:smb2_server: do calculations based on SMBD_SMB2_NUM_IOV_PER_REQ in smbd_smb2_request_validate()
      libcli/smb: fix smb2cli_req_compound_submit for multiple encrypted messages
      libcli/smb: fix parsing of compounded messages within a SMB2_TRANSFORM pdu
      libcli/smb: verify decrypted SMB2 pdus correctly
      libcli/smb: support broken OS/2 error responses bug #9096
      tevent: change version to 0.9.17 after adding the "poll_mt" backend
      s4:cldap_server: set DS_SERVER_SELECT_SECRET_DOMAIN_6 if we're a RODC
      s4:cldap_server: only return DS_SERVER_*TIMESERV if "ntp_signd" is used
      s3:smb2_server: add some const to print_req_vectors()
      s3:smb2_server: verify the signature before the session_status
      s3:smb2_server: try to sign an error response if we have a signing key
      s4:libcli/smb2: reset trsnport->compound.related when a compound chain is finished
      libcli/smb: make sure the SMB2_TRANSFORM pdu is complete
      s3:smbd: make use of ENCRYPTION_REQUIRED()
      s3:smbd: lp_smb_encrypt() returns SMB_SIGNING_* values
      s3:smbd: don't disconnect the client when a share has "smb encrypt = required"
      s3:smb2_server: add SMB3 encryption support
      s3:smb2_negprot: annouce/negotiate SMB3 encryption support
      s3:selftest: add some tests against a share the requires encryption
      lib/util: add server_id_equal()
      s3:lib: implement serverid_equal() as macro of server_id_equal()
      lib/util: add server_id_from_string()
      s3:lib: implement interpret_pid() as wrapper of server_id_from_string()
      lib/util: let server_id_str() skip the task_id if 0 in the cluster case too
      s3:smb2_server: remove dump_data() from smbd_smb2_request_pending_timer()
      smbXsrv.idl: add nonce_* to smbsrv_session
      s3:smb2_server: use smbXsrv_session->nonce_*
      s3:smb2_break: encrypt OPLOCK BREAK notifications
      lib/param: fix usage of 'write list = +Group'
      s3:lib: remove CTDB_CONTROL_CHECK_SRVIDS optimization in serverids_exist() for now
      s3:lib: implement serverid_exists() as wrapper of serverids_exist()
      s3:g_lock: use serverid_exists() with SERVERID_UNIQUE_ID_NOT_TO_VERIFY
      s3:lib: implement process_exists() as wrapper of serverid_exists()
      lib/util: don't SMB_ASSERT() in process_exists_by_pid()
      s3:lib: SERVERID_UNIQUE_ID_NOT_TO_VERIFY only means not to verify the 'unique_id' part
      s3:lib: inline processes_exist() into serverids_exist()
      s3:lib: use server_id_is_disconnected() in serverids_exist()
      s3:lib: only loop over the server_ids we need to verify in serverids_exist()
      s3:lib: readd the CTDB_CONTROL_CHECK_SRVIDS optimization to serverids_exist()
      s3:lib: remove unused processes_exist()
      s3:lib: make sure we don't try to send messages to server_id's marked as disconnected
      libcli/smb: wscript_build => wscript
      libcli/smb: split out a smb_transport private library
      s4:librpc/rpc: use talloc_zero for 'struct rpc_request'
      s4:librpc/rpc: use dcerpc_req_dequeue() in dcerpc_request_recv_data()
      s4:librpc/rpc: also call dcerpc_schedule_io_trigger() after bind and alter_context responses
      s4:librpc/rpc: don't do async requests if gensec doesn't support async replies (bug #9097)
      s4:winbind: convert wb_sid2domain to tevent_req internally
      s4:winbind: convert wb_sam_logon_send/recv to tevent_req
      s4:winbind: convert wb_update_rodc_dns_send/recv to tevent_req
      s4:winbind: add a netlogon_queue (tevent_queue)
      s4:winbind: let wb_sam_logon_send/recv() use the netlogon_queue (bug #9097)
      s4:winbind: let wb_update_rodc_dns_send/recv use netlogon_queue (bug #9097)
      file_server: use 'subreq' as variable instead of 'req'
      s3:smb2_create: check for SMB2_CREATE_TAG_DHNC first
      s4:torture/smb2: don't expect a DHnQ response in a DHnC request
      s4:torture/smb2: check that the server should ignore the fname in a DHnC request
      s4:torture/smb2: add smb2.durable-v2-open.reopen{1,2} tests
      selftest/knownfail: samba3.smb2.durable-v2-open.reopen{1,2} fails currently
      selftest/knownfail: samba3.smb2.durable-open.alloc-size fails currently
      s3:smbXsrv.idl: add properties for durable handles to smbXsrv_open_global0
      s3:smbXsrv_open: add smb2srv_open_recreate() to support durable handles
      s3:locking: add mark_share_mode_disconnected()
      s3:locking: add brl_mark_disconnected() and brl_reconnect_disconnected()
      s3:smbd: add disconnected checks to the open code.
      s3:param: change "server max protocol" to "SMB3"
      docs-xml: change "server max protocol" to "SMB3"
      selftest/Samba3: don't explicitly set 'server max protocol'
      selftest/knownfail: we pass some samba3.smb2.durable-* tests now
      s4:provision: ask the admin about the desired DNS implementation
      s4:samba-tool: allow sys.exit(ret) to control the exit code
      s4:samba-tool: remove unused code in testparm.py
      s4:python/netcmd: give the Commad implementations access to the raw arguments
      s4:samba-tool: add 'samba-tool domain provision'
      s4:scripting: use the 'sbin_files' variable
      s4:scripting: install samba_kcc to SBINDIR
      s4:setup/tests: make use of samba-tool domain provision
      testprogs/blackbox: make use of samba-tool domain provision
      wintest: make use of samba-tool domain provision
      selftest/Samba4: make use of samba-tool domain provision
      s4:setup: remove standalone 'provision'
      s4:scripting: rename upgradeprovision -> samba_upgradeprovision
      WHATSNEW: provision and updateprovision have new names
      s4:selftest: run thet dlz_bind9. tests in the chgdcpass env
      s4:provision: don't add the dns-HOSTNAME account if we use the internal dns server
      s4:upgradehelpers.py: don't require a dns-$HOSTNAME account
      selftest:Samba4: don't provision with BIND9_DLZ
      s4:samba_upgradedns: delete dns-HOSTNAME account if using the internal dns server
      s4:dns_server: remove wrong and unused dsdb_check_access_on_dn() check
      lib/param: add some more alias for 'allow dns updates' options.
      lib/param: change the default for 'allow dns updates' to 'secure only'
      wintest: try to fix settings for the internal dns server
      selftest: let provision_plugin_s4_dc use SMB3
      packaging/RHEL-CTDB: fix the build
      packaging/RHEL-CTDB: try harder to set $RPMVER
      packaging/RHEL-CTDB: add "BUILD_GPFS=no configure.rpm" and "BUILD_GPFS=no makerpms.sh"
      libcli/smb: fix padding in smb2_create_blob*
      s4:torture/smb2: improve the smb2.create.blob test
      s3:smb2_server: fix usage of invalid memory in smb2_signing_check_pdu()
      dynconfig/config.m4: disallow --prefix=/usr and --prefix=/usr/local without --enable-fhs
      s3:smbd: release the share mode lock before calling exit_server() (bug #9191)
      libcli/echo: validate the message length
      lib/tsocket: fix receiving of udp packets from 0 bytes (bug #9184)
      s4:dns.py: reproducer for (bug #9184)
      s3:smb2_server: reset req->last_session_id and req->last_tid after using it
      s3:smb2_server: do the req->next_status check before the signing checks
      s4:torture:smb2: extend the compound.invalid1 test
      s3:smb2_server: avoid segfault in smbd_smb2_request_pending_queue()
      s3:smb2_lock: let smbd_smb2_lock_cancel() trigger NT_STATUS_CANCELED
      s3:smb2_notify: don't call tevent_req_done() from smbd_smb2_notify_cancel()
      s3:smb2_notify: make use of tevent_req_defer_callback() instead of custom tevent_immediate
      s3:smb2_lock: smbd_smb2_notify_recv() can already return NT_STATUS_CANCELED
      s3:smb2_lock: let smbd_smb2_create_cancel() trigger NT_STATUS_CANCELED
      script/autobuild.py: use some variables for rebase_remote and rebase_branch
      script/autobuild.py: use some variables for push_remote and push_branch
      script/autobuild.py: add --branch option
      script/autobuild.py: add log_base variable to avoid hardcoded values
      script/autobuild.py: add --log-base option
      script/autobuild.py: remove --rebase-master and --push-master options
      script/autobuild.py: set the default for --log-base to the current gitroot
      s4:rpc_server/drsuapi: fix a crash in dcesrv_drsuapi_DsGetDomainControllerInfo_1()
      s4:rpc_server/drsuapi: use talloc_zero instead of talloc() in dcesrv_drsuapi_DsBind()
      s3:smb2_create: don't take 'state->te' as indication for "was_deferred" (bug #9196)
      s4:torture/smb2: remove samba specific stuff from smb2.oplock
      selftest/knownfail: samba*.smb2.oplock.stream1 doesn't work
      libcli/smb: use an explicit TALLOC_FREE(subreq) in smb2cli_*
      libcli/smb: add smb2cli_echo*
      libcli/smb: add smb1cli_echo*
      s3:libsmb: make cli_echo* protocol independent
      s3:libsmb: use smbXcli_conn_remote_name() in smb2_tcon_send()
      s4:tortore/rpc/lsa: make more use of torture_assert*
      s4:samba-tool: add optional epilog to _create_parser()
      s4:samba-tool: use normal option parsing in SuperCommand
      s4:samba-tool: allow 'samba-tool --version'
      s4:scripting/python: add '-V' as alias for '--version'
      Revert "provision: Always create DNS user."
      selftest/knownfail: add samba3.rpc.lsa.privileges.lsa.Privileges
      buildtools/wafsamba: only display 'ok' if the result is True
      s3:smbd: update sconn->remote_hostname after the netbios session request
      s3:smbd: add exit_server to the smbd_shim hooks
      s3:smbd/utmp: remove ip address from utmp record
      s3:configure: check that struct utmp.ut_line is large enough for our use case
      s3:utils/net: remove unused "net connections"
      doc-xml: remove "net connections" documentation
      s3:smbXsrv.idl: add session_global_id to smbXsrv_tcon_global
      s3:smbd: fill tcon->global->session_global_id
      s3:smbd: don't call claim/yield_connection() in make_connection_snum/close_cnum()
      s3:smbd: remove unused claim_connection/yield_connection
      s3:lib: remove unused connections_fetch_entry*() and connections_init()
      docs-xml:smbd.8: document new smbXsrv_*_global.tdb files
      s3:smbd/durable: trigger pending write_time updates before disconnecting the file
      s3:smbd/durable: update the low level write_time before disconnecting the file.
      s3:open_files.idl: add write_time specific stuff to vfs_default_durable_cookie
      s3:smbd/durable: add write_time specific stuff to vfs_default_durable_cookie
      s3:rpc_server: avoid a level 0 DEBUG if tstream_npa_connect_recv fails (bug #9309)
      lib/tsocket: fix loop in tdgram_bsd_recvfrom() (bug #9184)
      s4:dns_server: fix formatting difference compared to v4-0-test
      libcli/smb: fix unitialized padding in smb2_create_blob_push_one() (bug #9209)
      s3:smb2_read: fix SMBD_SMB2_NUM_IOV_PER_REQ check for sendfile() support (bug #9341)
      lib/krb5_wrap: request enc_types in the correct order (bug #9272)
      libcli/smb: add smbXcli_session_set_disconnect_expired() (bug #9175)
      s3:winbindd: disconnection after getting NETWORK_SESSION_EXPIRED (bug #9175)
      s3:winbindd: use PROTOCOL_LATEST instead of PROTOCOL_SMB2_02 (bug #9175)
      lib/tsocket: disable the syscall optimization for recvfrom/readv by default
      lib/tsocket: optimize syscalls in tstream_readv_pdu_send()
      s3:vfs_default: optimize vfswrap_asys_finished() and read as much as we can
      s3:smbd: pass the current time to make_connection[_smb1]()
      selftest/skip: add samba.tests.samba_tool.gpo until it's stable
      s4:dsdb/acl: fix search filter cleanup for password attributes
      s4:dsdb/acl: reorganize the logic flow in the password filtering checks
      s4:dsdb/acl: only give administrators access to attributes marked as confidential (bug #8620)
      s4:dsdb/acl_read: fix whitespace formatting errors
      s4:dsdb/acl_read: make sure confidential attributes require CONTROL_ACCESS (bug #8620)
      lib/addns: remove pointless check for resp->num_additionals != 1
      lib/addns: don't depend on the order in resp->answers[]
      lib/addns: remove compiler warnings
      s4:samba-tool/testparm: report a CommandError if loading of the config file fails
      lib/ldb: add missing newline in the output of ldb_ldif_write_trace()
      lib/replace: replace all *printf function if we replace snprintf (bug #9390)
      s3:param: set "map archive = no" in ROLE_ACTIVE_DIRECTORY_DC
      s4:torture/rpc/handles: move a torture_comment()
      s4:torture/rpc/handles: try to make the assoc_group test less flakey
      s3:librpc: add support for PFC_FLAG_OBJECT_UUID when parsing packets (bug #9382)
      librpc/idl: teach ndrdump about dumping security.idl structures
      s4:torture/rpc/handles: try to make all assoc_group tests less flakey
      s3:vfs_aixacl2: make use of vfs_aixacl_util.h
      s4:smbd/open: add missing TALLOC_FREE(frame) to inherit_new_acl()
      s3:vfs_gpfs: make sure we return the correct errno in gpfs2smb_acl()
      s3:vfs_gpfs: add no memory check in gpfs2smb_acl()
      s3:util: fix usage of popt_burn_cmdline_password()
      s3:popt_common: Fix password processing.
      s4:dsdb/schema_data: fix debug message in schema_data_modify()
      s4:dsdb/dirsync: check result of replUpToDateVector fetch on nc_root
      s4:dsdb/dirsync: use the correct nc_root to fetch replUpToDateVector
      s4:dsdb/dirsync: explicitly ask for sdctr->secinfo_flags = 0xF
      s4:netcmd/gpo.py: s/ntSecurityDescriptor/nTSecurityDescriptor
      s4:netcmd/gpo.py: the nTSecurityDescriptor may not be visible for the current user
      s4:netcmd/gpo.py: only ask for OWNER/GROUP/DACL when validating the nTSecurityDescriptor
      s4:netcmd/gpo.py: let get_gpo_info explicitly ask for the full ntSecurityDescriptor
      s4:tests/samba_tool/gpo.py: add test_show_as_admin()
      s4:dsdb/rootdse: remove unused variable
      s4:dsdb/rootdse: do helper searches AS_SYSTEM
      s4:dsdb/objectclass: do helper searches AS_SYSTEM and with SHOW_RECYCLED
      s4:dsdb/extended_dn_in: do helper searches AS_SYSTEM and with SHOW_RECYCLED
      s4:dsdb/extended_dn_store: do helper searches AS_SYSTEM
      s4:dsdb/acl_util: do helper searches AS_SYSTEM
      s4:dsdb/acl_util: add dsdb_request_sd_flags() helper function
      s4:dsdb/descriptor: do searches for nTSecurityDescriptor AS_SYSTEM and with SHOW_RECYCLED
      s4:dsdb/descriptor: always use descriptor_search_callback if we return nTSecurityDescriptor
      s4:dsdb/descriptor: make use of dsdb_request_sd_flags()
      s4:dsdb/descriptor: make it clear that the SD Flags are ignored on add
      s4:dsdb/acl: do helper searches AS_SYSTEM and with SHOW_RECYCLED
      s4:dsdb/acl: remove unused "acl:perform" option
      s4:dsdb/acl: don't protect confidential attributes when "acl:search = yes" is set
      s4:dsdb/acl: calculate the correct access_mask when modifying nTSecurityDescriptor
      s4:dsdb/acl_read: do search for instanceType AS_SYSTEM and with SHOW_RECYCLED
      s4:dsdb/acl_read: specify the correct access_mask for nTSecurityDescriptor
      s4:dsdb/acl_read: enable acl checking on search by default (bug #8620)
      s4:dsdb/descriptor: give SYSTEM the correct default owner (group) sid
      s4:dsdb/descriptor: if the caller specifies no DACL/SACL the objects gets a default one
      s4:provision: add get_empty_descriptor()
      s4:samba_upgradeprovision: use the sd_flags:1:15 control with an empty sd
      s4:dsdb/descriptor: move special dn check to the start of descriptor_{add,modify,rename}
      s4:dsdb/descriptor: remove support for unused LDB_CONTROL_RECALCULATE_SD_OID
      s4:dsdb/descriptor: add some error checks to descriptor_{add,modify}
      s4:dsdb/descriptor: remove some unnecessary nesting
      s4:dsdb/descriptor: remove some nesting from descriptor_modify
      s4:dsdb/descriptor: make explicit that we don't support MOD_DELETE on nTSecurityDescriptor
      s4:dsdb/descriptor: the old nTSecurityDescriptor is always expected there on modify
      s4:dsdb/acl: also add DSDB_SECRET_ATTRIBUTES into the password attributes
      s4:dsdb/common: add pekList and msDS-ExecuteScriptPassword to DSDB_SECRET_ATTRIBUTES_EX
      s4:provision: add pekList and msDS-ExecuteScriptPassword to @KLUDGEACL
      s4:dsdb/dirsync: remove unused 'deletedattr' variable
      s4:dsdb/acl: require SEC_ADS_DELETE_TREE if the TREE_DELETE control is given (bug #7711)
      s4:dsdb/objectclass: do not pass the callers controls on helper searches
      s4:dsdb/subtree_delete: do an early return and avoid some nesting
      s4:dsdb/subtree_delete: do the recursive delete AS_SYSTEM/TRUSTED (bug #7711)
      s4:dsdb/subtree_delete: delete from the leafs to the root (bug #7711)
      s4:dsdb: define DSDB_CONTROL_SEC_DESC_PROPAGATION_OID
      s4:dsdb/objectclass_attrs: allow DSDB_CONTROL_SEC_DESC_PROPAGATION_OID on modify
      s4:dsdb/repl_meta_data: allow DSDB_CONTROL_SEC_DESC_PROPAGATION_OID on modify
      s4:dsdb/schema_data: allow DSDB_CONTROL_SEC_DESC_PROPAGATION_OID on modify
      s4:dsdb/descriptor: handle DSDB_CONTROL_SEC_DESC_PROPAGATION_OID
      s4:dsdb: define DSDB_EXTENDED_SEC_DESC_PROPAGATION_OID
      s4:dsdb/descriptor: implement DSDB_EXTENDED_SEC_DESC_PROPAGATION_OID
      s4:dsdb/acl_util: add dsdb_module_schedule_sd_propagation()
      s4:dsdb/descriptor: recalculate nTSecurityDescriptor after a rename (bug #8621)
      s4:dsdb/descriptor: inherit nTSecurityDescriptor changes to children (bug #8621)
      s4:dsdb/repl_meta_data: call dsdb_module_schedule_sd_propagation() for replicated changes
      s4:dsdb/tests: add SdAutoInheritTests
      s4:dsdb/descriptor: NULL out user_descriptor elements depending on the sd_flags
      s3:smbd/open: use Builtin_Administrators as owner of files (if possible)
      s3:smbd/open: try the primary sid (user) as group_sid if the token has just one sid
      s3:smbd/open: fall back to Builtin_Administrators if SYSTEM doesn't map to a group
      libcli/security: remove duplicate aces in se_create_child_secdesc()
      s3:libsmb: add cli_{query,set}_security_descriptor() which take sec_info flags
      s3:smbcacls: add --query-security-info and --set-security-info options
      s4:libcli/finddcs_cldap: try all NBT#1C addresses
      s4:libcli/finddcs_cldap: allow io->in.server_address as hostname
      s4:samba-tool/gpo: use the dns_domain from the server when creating gpos
      s4:samba-tool/gpo: use 'gPCFileSysPath' when deleting gpos
      s4:samba-tool/gpo: fix the operation order when creating gpos
      s4:python/ntacl: allow string or objects for sd/sid in setntacl()
      s4:python/ntacl: add 'as_sddl' option to dsacl2fsacl()
      s4:dsdb/password_hash: Honor password complexity settings.
      s4:dsdb/schema: fix dsdb_schema_set_el_from_ldb_msg() (bug #9470)
      s4:dsdb/schema_data.c: correctly move the CN=Aggregate attributes to msg->elements[i].values (bug #9470)
      s4:dsdb/acl_read: keep the ldb_message of the sub search (bug #9470)
      s4:dsdb/acl_read: improve debugging for fatal error
      s4:dsdb/descriptor: fix replication of NC heads
      s4:dsdb/dirsync: fix potential talloc hierachy problems (bug #9470)
      s4:dsdb/acl_read: check the ldb_attr_list_copy_add() result
      s4:dsdb/acl_read: fix the calculation of the attribute array for the sub search
      s4:dsdb/acl_read: give some variables a better name
      s4:dsdb/acl_read: return the nTSecurityDescriptor attr if the sd_flags control is given (bug #9470)
      s4:dsdb/operational: fix stripping of the nTSecurityDescriptor attribute
      s4:dsdb/tests/sec_descriptor: verify the nTSecurityDescriptor and sd_flags interaction
      s4:dsdb/tests/sec_descriptor: verify the search of a windows dc join keeps working
      libcli/security: implement object_in_list()
      libcli/security: calculate the correct inherited_object GUID
      s4:dsdb/descriptor: pass object_list to create_security_descriptor()
      s4:provision: set the correct nTSecurityDescriptor on CN=Partitions,CN=Configuration... (bug #9481)
      s4:provision: set the correct nTSecurityDescriptor on CN=Sites,CN=Configuration... (bug #9481)
      s4:provision: set the correct nTSecurityDescriptor on CN=Infrastructure,... (bug #9481)
      s4:provision: set the correct nTSecurityDescriptor on CN=Builtin,... (bug #9481)
      s4:provision: set the correct nTSecurityDescriptor on CN=Computers,... (bug #9481)
      s4:provision: set the correct nTSecurityDescriptor on CN=Users,... (bug #9481)
      s4:provision: set the correct nTSecurityDescriptor on CN=Domain Controllers,... (bug #9481)
      Revert "s4:dsdb/password_hash: Honor password complexity settings."
      s4:dsdb/password_hash: Honor password complexity settings.
      s4:dsdb/common: only pass the DSDB_CONTROL_PASSWORD_HASH_VALUES_OID if required
      selftest/flapping: mark samba4.rpc.samr.large-dc.two as knownfail
      lib/param: use the correct path names again
      Happy New Year 2013
      selftest/flapping: more samba4.rpc.samr.large-dc.two subtests are flakey
      s4:scripting/python: always treat the highwatermark as opaque (bug #9508)
      s4:dsdb/repl_meta_data: always treat the highwatermark as opaque (bug #9508)
      s4:dsdb/repl_meta_data: store the last results and timestamps in the repsFrom
      s4:dsdb/repl_meta_data: also update the last_sync_success in replUpToDateVector
      s4:dsdb/repl_meta_data: don't merge highwatermark and uptodatevector (bug #9508)
      s4:dsdb/common: use LDB_SEQ_HIGHEST_SEQ for our entry in the uptodatevector
      s4:dsdb/common: use 01.01.1970 as last_sync_success for our entry in the uptodatevector
      s4:dsdb/drepl: update the source_dsa_obj/invocation_id in repsFrom
      s4:drsuapi: move struct drsuapi_getncchanges_state to the top of getncchanges.c
      s4:drsuapi: remove unused 'highest_usn' from drsuapi_getncchanges_state
      s4:drsuapi: avoid a ldb_dn_copy() and use talloc_move() instead
      s4:drsuapi: always use the current uptodateness_vector
      s4:drsuapi: add drsuapi_DsReplicaHighWaterMark_cmp()
      s4:drsuapi: make sure we never return the same highwatermark twice in a replication cycle (bug #9508)
      s4:drsuapi: check the source_dsa_invocation_id (bug #9508)
      s4:drsuapi: make sure we report the meta data from the cycle start (bug #9508)
      s4:drsuapi: make use of LDB_TYPESAFE_QSORT() and pass getnc_state
      s4:drsuapi: try to behave more like windows for usn order (bug #9508)
      s4:lib/messaging: terminate the irpc_servers_byname() result with server_id_set_disconnected() (bug #9540)
      s3:smb2_negprot: set the 'remote_proto' value
      dsdb-acl: don't call dsdb_user_password_support() if we don't use the result
      dsdb-acl: talloc_free the private context when we pass to the next module
      dsdb-acl: fix the order of special and system checks
      libcli/security: don't look at the inherited type in get_ace_object_type()
      dsdb-acl: add helper variable 'ldb' in acl_sDRightsEffective
      dsdb-acl: calculate sDRightsEffective based on "nTSecurityDescriptor"
      dsdb-schema: make schema_subclasses_order_recurse() static
      dsdb-schema: make sure use clean caches in schema_inferiors.c
      dsdb-schema: make sure we build [system]PossibleInferiors completely
      dsdb-acl: introduce a 'msg' helper variable to acl_modify()
      dsdb-acl: introduce a 'el' helper variable to acl_modify()
      dsdb-acl: dsdb_attribute_by_lDAPDisplayName() is needed for all attributes
      dsdb-acl: attr is not optional to acl_check_access_on_attribute()
      dsdb-acl: add acl_check_access_on_objectclass() helper
      dsdb-acl: use acl_check_access_on_objectclass() instead of acl_check_access_on_class()
      dsdb-acl: remove unused acl_check_access_on_class()
      dsdb-acl: make use of acl_check_access_on_attribute() in acl_modify()
      dsdb-acl: make use of acl_check_access_on_{attribute,objectclass} in acl_rename()
      dsdb-acl: make use of acl_check_access_on_objectclass() for the object in acl_delete()
      dsdb-acl: the SEC_ADS_DELETE_CHILD checks need objectclass->schemaIDGUID
      libcli/security: fix whitespaces in access_check.c
      libcli/security: fix formating in access_check.c
      libcli/security: simplify get_ace_object_type()
      libcli/security: avoid usage of dom_sid_parse_talloc() in sec_access_check_ds()
      libcli/security: add init_mask to existing children in insert_in_object_tree
      dsdb-acl: remove unused variable
      ldb: fix a warning by converting from TDB_DATA to struct ldb_val
      libcli/security: calculate INHERIT_ONLY correcty for AUDIT and ALARM aces (bug #9481)
      tests/sec_descriptor: the default owner behavior depends on domainControllerFunctionality (bug #9481)
      dsdb-descriptor: get_default_group() should always return the DAG sid (bug #9481)
      dbckecker: fix nTSecurityDescriptor values from before 4.0.0rc6 (bug #9481)
      samba_upgradeprovision: don't reset 'whenCreated' when resetting 'nTSecurityDescriptor'
      samba_upgradeprovision: fix resetting of 'nTSecurityDescriptor' on schema objects
      provision: setup names.dns{forest,domain}dn
      provision: import/export get_dns_partition_descriptor()
      provision: add optional name_map={} argument to get_*_descriptor()
      schema.py: add optional name_map={} to get_schema_descriptor()
      provision: add get_{config,domain}_delete_protected*_descriptor()
      provision: add get_config_ntds_quotas_descriptor()
      provision: add get_dns_{forest,domain}_microsoft_dns_descriptor()
      provision: introduce names.name_map = {}
      provision: setup names.name_map['DnsAdmins']
      provision: fix nTSecurityDescriptor of CN={LostAndFound,System},${DOMAINDN} (bug #9481)
      provision: fix nTSecurityDescriptor attributes of CN=*,${CONFIGDN} (bug #9481)
      provision: fix nTSecurityDescriptor of containers in the DnsZones (bug #9481)
      samba_upgradeprovision: fix the nTSecurityDescriptor on more containers (bug #9481)
      provision: setup names.dns_backend
      samba_upgradeprovision: detect dns_backend for the reference provision
      selftest: rename 'promoted_vampire_dc' to 'promoted_dc'
      s4:service_task: prevent a segfault if task->msg_ctx is not initialized yet
      s4:service_task: add missing imessaging_cleanup() to task_server_terminate()
      s3:auth: wbcAuthenticateEx gives unix times (bug #9625)
      tevent_poll: call tevent_common_fd_destructor() from poll_fresh_fde_destructor()
      tevent_poll: fix the usage of tevent_re_initialise()
      tevent_poll: add poll_event_loop_wait()
      s3: use generate_random_password() instead of generate_random_str()
      dsdb/password_hash: make sure that io->n.cleartext_utf8.data is a null terminated string
      dsdb/password_hash: rename variable 'stat' to 'vstat'
      dsdb/util: rework samdb_check_password() to support utf8
      lib/util: improve check_password_quality() to handle utf8
      lib/dbwrap: talloc_strdup() name in db_open_file()
      s3:dbwrap_ctdb: setup result->name in db_open_ctdb()
      s3:dbwrap_ctdb: add "db_context" to "db_record"
      s4:scripting/python: add support for utf-8 passwords from the command line
      samba-tool/user setpassword: fix help message
      samba-tool/domain provision: add support for utf-8 passwords for --adminpass
      tevent: pass 'bool replay' to epoll_panic()
      tevent: make sure tevent_backend_init() only runs once
      tevent: make use of tevent_find_ops_byname() in tevent_context_init_byname()
      s3:smbd: use smbXsrv_open_close() instead of smbXsrv_open_update()
      s4:torture: fix segfault in test_durable_open_open2_oplock()
      lib/util: add samba_tevent_context_init()
      libcli/cldap: make use of samba_tevent_context_init()
      libcli/smb: make use of samba_tevent_context_init()
      librpc/rpc: make use of samba_tevent_context_init()
      s4:auth/kerberos: make use of samba_tevent_context_init()
      s4:lib/com: make use of samba_tevent_context_init()
      s3:libsmb: make use of samba_tevent_context_init()
      s3:libads: make use of samba_tevent_context_init()
      s3:lib: make use of samba_tevent_context_init()
      s3:libnet: make use of samba_tevent_context_init()
      s3:utils: make use of samba_tevent_context_init()
      s3:torture: make use of samba_tevent_context_init()
      s3:rpc_client: make use of samba_tevent_context_init()
      s3:winbindd: make use of samba_tevent_context_init()
      s3:includes: remove event_context_init() define for s3_tevent_context_init()
      s3:winbindd: s/struct event_context/struct tevent_context
      s3:torture: s/struct event_context/struct tevent_context
      s3:smbd: s/struct event_context/struct tevent_context
      s3:rpc_client: s/struct event_context/struct tevent_context
      s3:rpc_server: s/struct event_context/struct tevent_context
      s3:printing: s/struct event_context/struct tevent_context
      s3:nmbd: s/struct event_context/struct tevent_context
      s3:modules: s/struct event_context/struct tevent_context
      s3:libsmb: s/struct event_context/struct tevent_context
      s3:lib: s/struct event_context/struct tevent_context
      s3:lib/events: s/EVENT_FD/TEVENT_FD
      s3:winbindd: s/struct timed_event/struct tevent_timer
      s3:smbd: s/struct timed_event/struct tevent_timer
      s3:smbd: s/EVENT_FD/TEVENT_FD
      s3:rpc_server: s/struct timed_event/struct tevent_timer
      s3:modules: s/struct timed_event/struct tevent_timer
      s3:nmbd: s/struct timed_event/struct tevent_timer
      s3:lib: s/struct timed_event/struct tevent_timer
      s3:smbd: s/struct fd_event/struct tevent_fd
      s3:printing: s/struct fd_event/struct tevent_fd
      s3:modules: s/struct fd_event/struct tevent_fd
      s3:lib: s/struct fd_event/struct tevent_fd
      s3:modules: s/event_add_fd/tevent_add_fd and s/EVENT_FD_/TEVENT_FD_
      s3:smbd: s/event_add_fd/tevent_add_fd and s/EVENT_FD_/TEVENT_FD_
      s3:printing: s/event_add_fd/tevent_add_fd and s/EVENT_FD_/TEVENT_FD_
      s3:lib: s/event_add_fd/tevent_add_fd and s/EVENT_FD_/TEVENT_FD_
      s3:winbindd: s/event_add_timed/tevent_add_timer
      s3:rpc_server: s/event_add_timed/tevent_add_timer
      s3:modules: s/event_add_timed/tevent_add_timer
      s3:nmbd: s/event_add_timed/tevent_add_timer
      s3:lib: s/event_add_timed/tevent_add_timer
      s3:include: avoid TEVENT_COMPAT_DEFINES
      s3:torture: call fault_setup() to get usage backtraces
      s3:selftest: generate ${SELFTESTPREFIX}/subunit with the raw output
      s3:lib/events: add missing TEVENT_TRACE_BEFORE/AFTER_WAIT handling
      s4:pygensec: make use of samba_tevent_context_init()
      s4:pyregistry: make use of samba_tevent_context_init()
      auth/pycredentials: make use of samba_tevent_context_init()
      lib/util: allow samba_tevent_debug() to take a name as context
      lib/util: add samba_tevent_set_debug()
      s4:lib/events: make use of samba_tevent_set_debug()
      s3:lib/events: make use of samba_tevent_set_debug()
      s3:pylibsmb: make sure we get tevent debug messages
      s3:lib/events: make use of tevent_common_loop_timer_delay()
      wafsamba: add CHECK_VALUEOF() helper
      lib/replace: add AC_CHECK_VALUEOF() macro
      tevent: define TEVENT_NUM_SIGNALS based on configure checks
      tevent: fix some compiler warnings in testsuite.c
      tevent: fix compiler warning in tevent_context_init_byname()
      tevent: remember the errno from select(), poll() and epoll_wait()
      tevent: don't skip a fd event if the previous one was deleted during poll()
      tevent: make sure we cleanup the array passed to poll() after deleting an event
      tevent: use tevent_poll_event_add_fd_internal() in poll_event_add_fd()
      tevent: merge poll_fresh_fde_destructor() into poll_event_fd_destructor()
      tevent: maintain a list of disabled events in the poll backend
      tevent: traverse the ev->fd_event list instead of the poll_ev->fds array
      tevent: ignore POLLNVAL from poll() and disable the event
      tevent: revalidate fde->flags after poll()
      tevent: debug a FATAL message on EBADF from the select backend
      tevent: use DLIST_DEMOTE() before calling on fde handler after select() and poll()
      tevent: add epoll_{create,ctl}_panic_fallback() for testing
      tevent: avoid any operation on epoll_ev after a epoll_panic()
      tevent: don't call TALLOC_FREE(ev->additional_data) in std_fallback_to_poll()
      tevent: add std_event_loop_wait()
      tevent: remove unused if (epoll_ev->epoll_fd == -1) return; checks
      tevent: use helper variables to hold the epoll_ctl() result
      tevent: call epoll_panic() if EPOLL_CTL_DEL failed
      tevent: the content of event is ignored by EPOLL_CTL_DEL
      tevent: s/epoll_change_event/epoll_update_event
      tevent: always go through epoll_update_event()
      tevent: unify handling of HAS_EVENT and REPORT_ERROR in epoll_{add,mod,del}_event()
      tevent: ignore EBADF from epoll_ctl() and disable the event
      tevent: handle multiplexed fde's in epoll_add_event()
      tevent: Fix epoll_mod_event() to cope with modifying a multiplexed fde event.
      tevent: handle multiplexed fde's in epoll_event_fd_destructor()
      tevent: handle EPOLL_ADDITIONAL_FD_FLAG_HAS_MPX in epoll_update_event()
      tevent: In epoll_event_loop() ensure we trigger the right handler for a multiplexed fde event.
      tevent: preferr the write handler if there're two possible handlers registered with epoll
      tevent: use DEBUG_ERROR for the fallback message in epoll_panic()
      tevent: use better names for the subtests
      tevent: add test_event_fd1()
      tevent: add test_event_fd2()
      tevent: add a debug message in tevent_common_loop_timer_delay()
      tevent: optimize adding new timer events
      tevent: optimize adding new zero timer events
      tevent: change version to 0.9.18
      libcli/smb: add SMB_CAP_LEGACY_CLIENT_MASK define
      s3:libsmb: make use of SMB_CAP_LEGACY_CLIENT_MASK instead of SMB_CAP_CLIENT_MASK
      libcli/smb: defer failing for missing NEGOTIATE_SECURITY_SIGNATURES_ENABLED
      s3:libsmb: let cli_read_andx_create() accept any length
      s3:smbd: keep global_client_caps and max_send from the first successful session setup
      s3:smbd: remove silly (SMB_OFF_T_BITS == 64) checks
      s3:smbd: add some const to req_is_in_chain()
      s4:smb_server: fix large read_andx requests
      s4:torture: raw.read fix large reads against windows
      s4:torture: let raw.read accept larger reads than 0x10000
      s3:waf fix build on AIX
      libcli/auth: avoid using transactions a chainlock is enough
      s3:lib/gencache: place gencache.tdb into /var/cache/samba
      s3:lib/server_mutex: open mutex.tdb with CLEAR_IF_FIRST
      s3:modules: fix the build of vfs_notify_fam (bug #9545)
      wafsamba: display the default value in help for SAMBA3_ADD_OPTION
      s3:wscript: change --with-dmapi to default=auto to match the autoconf build
      s3:winbindd: avoid usage of procid_self()
      s4:torture/smb2: add NTCREATEX_SHARE_ACCESS_DELETE in smb2_generic_create_share()
      libcli/smb: add SMB2_LEASE_FLAG_* defines
      s4:libcli/smb2: add support for SMB2 LEASES v2
      s4:torture/smb2: add smb2_lease_v2_create_share() helper
      s4:torture/smb2: add v2 lease requests
      Revert "Remove a bunch of "unused variable _relative_save_offset" warnings."
      pidl:NDR/Parser: correctly set $ndr->[relative_highest_]offset for relative_short pointers
      talloc: only provide the --enable-talloc-compat1 in standalone build
      doc-xml/smbdotconf: fix server [min|max] protocol documentation
      lib/param: remove unused 'printer_admin'
      dsdb-schema: schema_fill_possible_inferiors() should rebuild everthing
      dsdb-repl: split out dsdb_repl_resolve_working_schema
      dsdb-repl: merge the logic from libnet_vampire_cb_apply_schema()
      libnet-vampire: make use of dsdb_repl_resolve_working_schema()
      tdb: add a 'new_size' helper variable to tdb_expand_file()
      tdb: add overflow/ENOSPC handling to tdb_expand_file()
      tdb: add overflow detection to tdb_expand_adjust()
      tdb: add proper OOM/ENOSPC handling to tdb_expand()
      s4:winbind: don't leak libnet_context into the main event context
      tdb: change version to tdb-1.2.12
      dsdb: use the correct talloc parent in dsdb_repl_merge_working_schema()
      dsdb: reset schema->{classes,attributes}_to_remove_size to 0
      s4:ldap_server: call irpc_add_name() at startup (bug #9905)
      s4:rpc_server: call irpc_add_name() at startup (bug #9905)
      s4:smb_server: call irpc_add_name() at startup (bug #9905)
      dsdb: use AS_SYSTEM | SHOW_RECYCLED for access check searches
      dsdb: don't allow a missing nTSecurityDescriptor in dsdb_get_sd_from_ldb_message()
      dsdb: remove a wrong comment in dsdb_check_access_on_dn_internal()
      Merge remote-tracking branch 'origin/v4-1-test' into master
      s3-lib: hide incomplete smbXsrv_tcon_global records
      lib/util: add 'ldb' debug class
      lib/ldb-samba: make use of DBGC_LDB
      lib/ldb-samba: only debug LDB_DEBUG_TRACE at level 10
      lib/param: sync debug related options with source3/param
      s4-lib/socket: Allocate a the larger sockaddr_un and not just a sockaddr_in in unixdom_get_my_addr()
      dsdb/samdb: use RECYCLED it implies DELETED...
      dsdb/repl_meta_data: split out replmd_deletion_state()
      s4:rpc_server: make sure we don't terminate a connection with pending requests (bug #9820)
      s4:server: avoid calling into nss_winbind from within 'samba'
      s3:client: avoid interpret_protocol()
      s3:torture: avoid interpret_protocol()
      s3:lib: remove unused interpret_protocol()
      s3:lib/netapi: make use of lp_cli_maxprotocol()
      s3:winbindd: make use of lp_cli_{min,max}protocol()
      s3:libsmb: use lp_cli_minprotocol() in do_connect()
      s3:libsmb: make use of lp_cli_{min,max}protocol() in SMBC_server_internal()
      libcli/smb: fix the credit handling on a SMB1 => SMB2 negotiate
      libcli/smb: calculate the credit charge on the input and output dyn_len
      libcli/smb: pass max_dyn_len to smb2cli_req_create()
      libcli/smb: pass max_dyn_len to smb2cli_req_send()
      libcli/smb: add smb1cli_conn_req_possible()
      libcli/smb: add smb2cli_conn_req_possible()
      s3:libsmb: rewrite cli_push* to use smb1cli_conn_req_possible()
      s3:libsmb: rewrite cli_pull* to use smb1cli_conn_req_possible()
      s3:libsmb: remove unused cli_readall*
      s3:client: use the default io size
      s3:client: fix compiler warning
      s3:libsmb: add SMB2 support to cli_push*
      s3:libsmb: add SMB2 support to cli_pull*
      s3:libsmb: add support for SMB2 in cli_writeall()
      s3:libsmb: make cli_tdis_send/recv static
      s3:libsmb: only set tcon to invalid in smb2cli_tdis*
      s3:libsmb: call smb2cli_tdis() from cli_tdis()
      s3:libsmb: make cli_ulogoff_send/recv static
      s3:libsmb: call smb2cli_logoff() from cli_ulogoff()
      python/pyglue: filter out loopback and linklocal addresses unless all_interfaces is given
      s4:samba_upgradedns: don't pass linklocal=False to interface_ips_v6()
      python/provision: remove unused linklocal=False argument from interface_ips_v6()
      libcli/smb: use SMB1 MID=0 for the initial Negprot
      libcli/smb: fix non mendatory signing against some vendor SMB2 servers.
      libcli/smb: only check the SMB2 session setup signature if required and valid
      Merge tag 'samba-4.1.0rc4' into v4-1-test
      Revert "Support UPN_DNS_INFO in the PAC"
      dsdb/tests/ldap: fix test_ldapServiceName against w2k8r2
      s4:dsdb/rootdse: report 'dnsHostName' instead of 'dNSHostName'
      libcli/smb: fix smb2cli_ioctl*() against Windows 2008.
      CVE-2013-4476: selftest/Samba4: use umask 0077 within mk_keyblobs()
      CVE-2013-4408:librpc: check for invalid frag_len within dcerpc_read_ncacn_packet_done()
      CVE-2013-4408:librpc: check for invalid frag_len within dcerpc_read_ncacn_packet_next_vector()
      CVE-2013-4408:s3:rpc_client: check for invalid frag_len in dcerpc_pull_ncacn_packet()
      CVE-2013-4408:s3:rpc_client: verify frag_len at least contains the header size
      CVE-2013-4408:s4:dcerpc: check for invalid frag_len in ncacn_pull()
      CVE-2013-4408:s4:dcerpc_smb: check for invalid frag_len in send_read_request_continue()
      CVE-2013-4408:s4:dcerpc_smb2: check for invalid frag_len in send_read_request_continue()
      CVE-2013-4408:s4:dcerpc_sock: check for invalid frag_len within sock_complete_packet()
      CVE-2013-4408:async_sock: add some overflow detection to read_packet_handler()
      CVE-2013-4408:s3:util_tsock: add some overflow detection to tstream_read_packet_done()
      CVE-2013-4408:libcli/util: add some size verification to tstream_read_pdu_blob_done()
      CVE-2013-4408:s3:ctdb_conn: add some length verification to ctdb_packet_more()

Stephen Gallagher (4):
      tevent: Remove erroneous comments about TEVENT_FD_AUTOCLOSE
      tevent: Added more documentation.
      Return NULL if tevent_add_fd() is passed a negative fd
      ldb: Move doxygen comments for ldb_connect to the right place

Steve French (102):
      Adding support for net password, net service, net user info, fixing net helps
      Added support for UserListGroups, ServiceEnum
      Added many more defines in service category, user category and others
      Add function to add those hosts who have added msbrowse (domain master browsers)
      Minor fixes to help display, and domain enumeration , and also preparation for new command option
      List of coding suggestions for submitters
      Add early prototype of cifs mount helper for Linux
      Checkin cifs vfs for Linux mount helper
      Fix Linux cifs vfs mount helper parsing of slashes
      Fix mount options for ro, dir_mode, file_mode
      Fixes to all mount.cifs to run more safely setuid
      Checkin cifs vfs manpage
      Update mount helper to take synonyms for file_mode and dir_mode (fmask and dmask)
      Fix incorrect smb flags2 for connections to pre-NT servers (causes smbclient to
      mount.cifs failed to mount to directory owned by user when run setuid
      cifs mount helper merge
      Add missing nosetuid and noexec options
      Mount helper fixes for nosetuid, noexec part two of two
      Update mount.cifs version to 1.1
      Disable suid on user mounts (can override with -DCIFS_ALLOW_USR_SUID)
      Disable dev (MS_NODEV) on user mounts from cifs vfs
      Fix incorrect strnicmp len
      Fixes to minor security bug pointed out by AB in the mount helper
      Fix credential file mountinf for cifs vfs
      r18: Fix free of incremented pointer
      r77: Fix path canonicalization of the mount target path and help text display in the cifs mount helper
      r88: Add missing guest mount option for mount.cifs
      r737: Handle -S and user mount parms
      r1616: Fix user unmount of shares mount with suid mount.cifs
      r2917: Fix ip address override in mount.cifs mount helper and clean up warning messages from the sparse tool and expand syntax help
      r3068: strip guest mount option off before sending to kernel mount routine to avoid logging spurious message
      r5236: Ignore users mount parm (since unneeded by cifs kernel code).  Suggested by Dirk Jagdmann.
      r5639: update smb.h with missing defines
      r5640: On failed mount (ENXIO) retry share name in uppercase (fix mount to FastConnect AIX SMB server)
      r5688: ignore user_xattr mount parm so as not to confuse it with a user name
      r5715: Update for new CIFS POSIX info levels
      r5896: Fix cifs mounts to handle commas embedded in prompted password, and password and credential files.
      r5897: Fix domain name parsing for cifs mount util
      r6103: Update list of mount options for mount.cifs
      r6167: Add more defines for POSIX extensions to match the newly added
      r6170: Remove redundant flag that I had just added.
      r6255: Initial checkin of cifs umount utility
      r6262: Minor updates to cifs umount helper
      r6349: Update cifs umount utility
      r6447: Add missing error mapping for EMLINK to NT_STATUS_TOO_MANY_LINKS (we have it the other direction
      r6482: Add support so umount.cifs can update mtab
      r6499: Add two newer mount options to syntax help for mount.cifs
      r6505: Add missing remount flag handling
      r6514: Allow domain= to be specified in credentials file. Fix umount.cifs help, allow root to unmount someone
      r7202: lock mtab when updating it during umount.cifs, also delete only one matching entry at a time
      r9225: Various minor CIFS mount helper fixes to less common error paths.
      r9401: Allow disabling mandatory byte range lock mount flag, and
      r11938: Fix cifs to handle non-numeric uid and gid parameters and merge trunk and SAMBA_3 versions of mount.cifs and cleanup cifs vfs help.
      r13697: Remove unneeded header (header not present on all Linux either) for umount.cifs.c
      r14126: resolve two warnings from the coverity scan
      r14127: Remove coverity warning on mount.cifs.c
      r14128: Remove warning generated by coverity scan tool (missing SAFE_FREE in error path)
      r21204: Add define for new QFS Info for "who am i"
      r21224: Initial checkin of cifs_host_name resolver helper script
      r21283: Do not display away debug output of cifs dfs resolver by default
      r21840: mount.cifs compile on old libc missing bind mount #define
      r22526: Support deep tree mounts after share (instead of having to specify
      r22560: Clean up frees of realloc memory in mount.cifs (thanks to Alex for
      r22779: Patch for not prompting for password on cifs mounts when "sec=none"
      r22979: Revert previous checkin (which had some debug junk) and fix misc frees that
      r22982: Do not prompt for password on sec=none for mount.cifs (and allow guest
      r25355: IP address parsing did not allow for fully expanded ipv6 addresses
      r5716: Add new Unix extensions defines for infolevels
      r9309: Incorrect null pointer check in return from talloc.
      r9310: Add two missing return statements after null pointer checks to fix potential oops in kdc code.
      r9311: Missing  null pointer check in ejsLib
      r15237: Add primitive Samba 4 backend for cifs posix clients (based on simple backend).
      r18564: update for cifs unix/posix extensions stub version to build and beginnings of smbtorture test for it
      r18570: Fix up function names in cifs unix/posix extensions backend. Enable tiny quick test for torture for them
      Update mount.cifs help
      Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-test
      fix description of mount.cifs credential file syntax
      Updated mount.cifs man page with current syntax
      Update cifs man page and add new umount.cifs man page
      Fix build break of mount.cifs.8 man page
      Fix mount.cifs man page build break part 2.
      Fixed typos, minor spelling mistakes
      Fix umount.cifs.8 build break
      Fix some typos in the umount.cifs.8 man page
      Fix description of umount -i (it was backwards).
      Update cifs vfs man page to add missing new mount options
      Fix multiple typos/spelling mistakes
      Add documentation for linux cifs client
      minor updates to linux client user guide
      Man page updates for mount.cifs, including adding in the missing
      cifs.upcall: fix compile warning
      cifs.upcall was not recognizing the newer name "dns_resolver" key type
      Merge branch 'v3-3-test' of git+ssh://sfrench@git.samba.org/data/git/samba into v33
      Backing out most of changeset 5222b8db3fb692e5071bfd1b41849a8eb0a17995
      cifs.upcall: fix manpage and comments
      Building cifs.upcall is giving this build warning:
      mount.cifs: unclear error message with "credentials"
      mount.cifs: if mount user not specified use USER environment variable
      Fix guest mounts
      Maximum password length check too short in mount.cifs
      Add missing CreateFile flags to smb.h
      Add missing SMB2/SMB3 share capability flag define

Steve Langasek (3):
      s3: Fix bugs in the detection of the GNU ld version (Bug #6147)
      Fix bug 8920, null dereference
      Check for alternative's presence before calling update-alternatives --remove-all, instead of silently ignoring all errors from update-alternatives.

Steven Danneman (91):
      Closed memory leak on error path.
      Forest root trust flags won't overwrite child trust flags
      Augmented "wbinfo -m" to list additional information about the type, direction, and transitivty of trusts.
      Fix bug 5419: memory leak in ads_do_search_all_args() when enumerating 1000s of entries
      Make WINBINDD_LIST_GROUPS handler asynchronous.
      Updated Doxyfile conf to doxygen version 1.5.3
      Cleanup of DC enumeration in get_dcs()
      Fix build warning on FreeBSD
      Fixed "uninitialized variable" build warning
      Fixed "uninitilized variable" build warning
      Whitespace and >80 column cleanups.
      Fix extended DN parse error when AD object does not have a SID.
      Added ability to set id mappings in wbinfo.
      Added ability to remove id mappings in wbinfo and libwbclient.
      Clean-up various trailing space and >80 column lines.
      Fix to allow setting of NULL DACL/SACL
      Set PRESENT flag when returning NULL [SD]ACL like Windows does.
      Make nt4_compatible_acls() non-static for use by VFS ACL modules.
      Add support for OneFS ACLs
      Cleaned up whitespace issues in sharesec.c
      Make sharesec utility part of the default binary install.
      Make sure share_info.tdb is open before attempting to delete an entry
      Change error messages in sharesec util to go to stderr instead of stdout
      Add -D option to sharesec util to delete the entire security descriptor.
      Make STATEDIR and CACHEDIR configurable through ./configure and loadparm.c
      Audit usage of get_dyn_STATEDIR() and replace with state_path()
      Covert several persistant tdb files to use state_path() instead of lock_path()
      Move S3 specific parameters to S3 conf file in make test.
      Add an optional SMB_STRUCT_SMB parameter to VFS_OP_READDIR
      Pass stat buffer down through all levels of VFS_READDIR wrappers
      s3: Added SMB_VFS_INIT_SEARCH_OP to initialize data at the beginning of SMB search requests.
      s3: OneFS bulk directory enumeration support
      Added nsswitch/ object files to make clean
      s3: Added new parameter "map untrusted to domain"
      s3 onefs: rename custom parameter to plural to match previous usage
      Added torture tests to RAW-NOTIFY
      s3: Modifications to generic notify structures to allow implementation of OneFS notify.
      s3: Make change notify immediately return a catch-all packet on underlying error
      s3: OneFS implementation of change notify
      Moved become_daemon() and close_low_fds() to shared util lib
      s3: Refactor of madvise() usage in c441f58d
      s3: Fix build break in d9a842b2
      s3: Wrap usage of rlimit in configure checks
      Refactored sys_fork() and sys_pid() into shared util library
      s3: fix guest auth when winbindd is running
      s3: Remove madvise support
      Add missing newlines to debug statements
      s3:onefs.so fix issue with missing entries when enumerating directories
      s3:onefs.so Change system function names
      s3 Reorder loadparm to keep aliases together
      s3/docs Add manpage for "map untrusted to domain" parameter
      s3/auth map NULL domains to our global sam name
      s3/winbindd: Remove unnecessary check for NULL SID
      s3/debug: make SPENGO OID list appear under one debug header
      s3/smbd: open the share_info.tdb on startup instead of tconx
      lib/util: add unique string generator helper function
      s4/torture: add new torture_assert_*_todo() macros
      s4/torture/smb2: Fix several small bugs and style issues in SMB2 dir tests
      s4/torture/smb2: removed SMB2-FIND test
      s3 onefs: Fix a race condition exists in onefs_open.c between multiple opens to the same file.
      s3 onefs: Fix 1 second share mode delay handling
      s4/torture: Allow receiving of oplock break requests in any order
      s4/torture: fix RAW-OPLOCK-STREAM1 test after commit a11bb14
      s4/torture: fix typo in test comment
      s4/torture: Ported SMB oplock torture tests to SMB2
      s4/torture: rename oplocks.c to oplock.c to match SMB1 file layout
      s4/torture: second try on renaming oplocks.c to oplock.c
      s4/torture: Add server target of OneFS
      s4/torture: fix build break "implicit declaration of function 'isprint'"
      torture/smb2: make SMB2 BRL tests pass against W2K8R2
      s4/libcli: Initialize client PID for SMB2 connections
      s4/libcli: rename previously reserved field in SMB2 LOCK struct
      s4/torture: port SMBv1 RAW-LOCK tests to SMBv2
      s4/torture: Add target functionality parameters to SMBv1 BRL tests
      s4/torture: fix build warnings by removing unecessary const
      s4/torture: add addition multiple lock tests
      s4/torture: add multiple lock cancel test
      s4/selftest: knownfail some locking tests until bugs are fixed
      s4/torture: fix >80 column spacing issues
      s4/libcli: add define for exclusive lock mode
      s4/torture: add test for zero byte read contention with byte range locks
      s4/torture: add more lock cancellation tests
      s4/torture: fix small bug in lock test
      s4/torture: Parameterize output in LOCK tests based off server support
      s3/smbd: Fix string buffer overflow causing heap corruption
      s3/smbd: change locking behavior when "lock spin time = 0".
      s4/torture/smb2: Add two new SMB2 compound tests
      s4:libcli: Modify S4 client library to check for proper CN alignment
      s4:libcli:smb2 Rename pending_id to async_id and make 64-bit
      s3:events: Call all ready fd event handlers on each iteration of the main loop
      s3:smbd: Increase unsupported IOCTL debug message to 2

Sumit Bose (74):
      remove all '\n' from ldb_debug
      s4:rpc_server/lsa/dcesrv_lsa.c - fix typo
      Fix RPC-LSA-TRUSTED-DOMAINS for changed IDL
      s4-smbtorture: Make test_SetupCredentials3 public
      s4-smbtorture: Added a torture test for forest trusts
      s3-waf: build samldap passdb backend
      Fix array size of  a memmber of struct cli_ulogoff_state
      replace: Add missing eval to m4 script
      s3-passdb: Add minimal stub for IPA passdb backend
      s3-ipasam: Disable old trustdom_pw calls
      s3-passdb: add {get,set,del,enum}_trusted_domain calls
      s3-passdb: make priv2ld() public
      s3-ipasam: implement {get,set,del}_trusted_domain
      s3-ipasam: implement enum_trusted_domains
      s3-lsa: Let _lsa_CreateTrustedDomainEx2() use pdb_set_trusted_domain().
      s3-lsa: make lsa_lookup_trusted_domain_by_name() use pdb_get_trusted_domain().
      s3-lsa: make _lsa_DeleteTrustedDomain() use pdb_del_trusted_domain().
      s3-lsa: Implement _lsa_EnumTrustedDomainsEx()
      s3-ipasam: add wrapper for ipasam_enum_trusteddoms()
      s3-ipasam: add ipasam_get_trusted_domain_by_sid()
      s3-lsa: fix lsa_QueryTrustedDomainInfo
      s3-lsa: Use pdb_get_trusted_domain_by_sid in _lsa_QueryTrustedDomainInfo()
      s3-ldap: Update LDAP schemata to include sambaTrustedDomain.
      s3-lsa: Extract auth info from trustDomainPasswords
      s4-smbtorture: Two fixes for forest trust test against samba.
      s3-ipasam: add pdb_ipasam_capabilities() and pdb_ipasam_get_domain_info()
      s3-lsa: fix return code of _lsa_QueryTrustedDomainInfoByName()
      s3-lsa: Add and remove trusted domain account
      s3-ipasam: add IPA specific attributes
      s4-smbtorture: Fix for RPC-LSA-FOREST-TRUST.
      s3-lsa: Implement lsaRSetForestTrustInformation
      s3-ldap: Add sambaTrustForestTrustInfo to LDAP schemata
      s3-netlogon: Implement NetrServerGetTrustInfo and NetrGetForestTrustInformation
      s3-ipasam: Add aliases for trusted domain user
      s3:net Find uid before using it
      s3-net: Do not use uninitialized value
      s3-pdb_ipa: Fix indentation
      s3-smbldap: make octet_strings/DATA_BLOBs const.
      s3-pdb_ipa: Use new smbldap_make_mod_blob() without a return value
      s3-pdb_ipa: Detect IPA server
      s3-pdb_ipa: Add ipasam_create_user()
      s3-net: add IPA provision
      s3-pdb_ipa: Add ipasam_create_dom_group()
      s3-pdb_ipa: Create DN for new object
      s3-net: Add net trust utility
      s3-net: Add delete op for net trust utility
      s3: Fix tldap_make_mod_blob_int() debug messages
      Fix typos in LDAP schema files
      Improve documentation for net rpc trust
      s3-passdb: Implement new pdb trust calls for the default backend
      s4-lsa: Fix typo
      tevent: Set FD_CLOEXEC on epoll handle
      tevent: fix documentation for tevent_context_init_byname()
      s3-pdb_ipa: Derive domain GUID from SID
      s3-lsa: Fix typo and use right pdb interface
      s3-lsa: Fix access mapping in_lsa_OpenTrustedDomain_base()
      s3-ldap: Add sambaTrustForestTrustInfo to NDS LDAP schema (again)
      s3-ldap: Add Posix offset and encryption types to LDAP schema
      s3-pdb_ipa: Add posix offset to struct pdb_trusted_domain
      s3-pdb_ipa: Add supprted encryption types to struct pdb_trusted_domain
      s3-lsa: Update _lsa_QueryTrustedDomainInfo()
      s4-smbtorture: Add tests for lsaQueryTrustedDomainInfoByName() and lsaSetTrustedDomainInfoByName()
      s3-lsa: Add _lsa_SetInformationTrustedDomain() and related calls
      s4-smbtorture: Add trust password to CreateTrust test
      s3-lsa: Add conversion for auth info structs
      s3-auth: fix uninitialized server_info
      build: added autoconf --disable-silent-rules option
      s3-lsa: Let passdb backend handle the DOMAIN$ user
      s3-netlogon: Add support to authenticate trusted domains.
      s3-netlogon: use dsgetdcname() instead of get_dc_name()
      s3-auth: On successful user mapping set mapped_to_guest to false.
      s3-winbindd: Allow DNS resolution of trusted domains if DNS name is avaliable
      Use work around for 'winbind use default domain' only if it is set
      s3-rpc_server: Fix password encoding in _netr_ServerGetTrustInfo().

Surbhi Palande (1):
      -ENOTSUP translates to NT_STATUS_NOT_SUPPORTED

Suresh Jayaraman (2):
      doc: clarify that mount.cifs never uses smb.conf
      doc: update mount.cifs man page with nounix option

Susant Kumar Palai (1):
      VFS plugin was sending the actual size of the volume instead of the total number of block units because of which windows was getting the wrong volume capacity.

Sven Neumann (1):
      Fix bug 7754 - samba uses index(), marked as legacy.

TAKAHASHI Motonobu (1):
      Fix bug 5901: Default for streams_depot location

TAKEDA Yasuma (1):
      * install setup/display-specifiers files which are needed by provision script

Ted Percival (1):
      Probably fixes a crash during name resolution when log level >= 10

Theresa Halloran (6):
      s4/samba-tool: Move samba-tool enableaccount to samba-tool user enable command.
      s4:samba-tool: Move samba-tool setexpiry to samba-tool user setexpiry <user>
      s4: samba-tool subcommand rename - change samba-tool user add to samba-tool user create
      s4: samba-tool user --help documenation improvements
      s4: samba-tool group --help documentation improvements
      s4: samba-tool time --help documentation improvements

Thomas Nagy (10):
      build: replace h_file when replacing md5
      build: allow the waf build to work with python 3.0 and 3.1
      buildtools/wafsamba: fix build group ordering
      s4-waf: Replace local includes in header files with proper system names.
      wafsamba: Disable the abi checks when gdb is not available
      Substitute the pidl files without using 'headermap.txt'
      solve the error "ldb.inst.h does not exist"
      Do not use headermap.txt for the header installation
      Disable gccdeps if -MD is not supported
      Add include/lib folders from the commandline

Tiago Batista (1):
      Tiago Batista posted a patch to fix the build:

Tim Potter (2905):
      Fix for -fpic rules (.c.po and .c.po32) when using --enable-maintainer-mode.
      Added an index.html for the html documentation taken from the web site.
      Someone else is already doing this.
      Replaced ZERO_STRUCT() with ZERO_STRUCTP() in cli_connect_serverlist().
      Now uninstalls man pages from correct source location.
      Added configuration parameter 'vfs object' to specify loadable object
      Added struct vfs_ops describing virtual filesystem operations.
      Use VFS operations for file I/O.
      Use VFS operations for file I/O.
      Use VFS operations for file I/O.
      Use VFS operations for file I/O.
      Call VFS initialisation, share connect and share disconnect functions.
      Use VFS operations for file I/O.
      Wrapped up all VFS disk I/O functions for portability.  I remember
      Wrote VFS initialisation routines.
      Added smbd/vfs.o and smbd/vfs-wrap.o to object list for smbd.
      #ifdef'ed out functions obsoleted by VFS:
      Use VFS operations for file I/O.
      Use VFS operations for file I/O.
      Fixed up incorrect calls to read_file().
      Updated for VFS merge.
      Fixed spelling typo in Kerberos configure option.
      Documentation for VFS construction.
      Disable VFS routines if no libdl available.
      Use VFS I/O for stat_cache_lookup()
      Fix incorrect conversion of fd_attempt_open() calls to vfs_ops.open().
      Under IRIX, a void function may return a value, even if that value is
      Changed calls to strncat() to safe_strcat().  Fix from SAMBA_2_0 branch.
      Forgot about closedir() function for VFS.  Hoo embarassing.
      Always do a compile before CVS commit!  )-:
      Modification to compile under egcs 2.91.63.
      Fix compile warning in nametouid().
      Removed unused vfs_read_data() function at the request of tridge.
      Broke out of smb.h
      Changed arguments to fsync() function to break dependency on
      Broke out vfs structures to separate header file.
      Changed the way a VFS is initialised.  The vfs_init() function is
      Added dummy connect and disconnect VFS operations to avoid the
      Rewrite of VFS initialisation routines.
      Make proto for VFS init changes and VFS fsync() stuff.
      Fix compiler warning.
      Avoid a symbol conflict with /usr/include/sys/vfs.h under AIX.
      Bumped version number in README to avoid confusion with SAMBA_2_0 branch.
      Hived off debugging code from smb.h and put into debug.h
      Moved code that changes the pw_passwd entry (i.e shadow password and
      Modified to cope with functions that return a const something.
      Return a #error if no functions could be found to wrap around.
      Return a (void *)0 instead of NULL in readdir64() wrapper.
      make proto
      Hived off string routines into a separate file.
      Put back in GNU readline support for smbclient accidentally trashed by
      When making anonymous connections, must pass pointers to real nt
      Partial GNU readline support for rpcclient.  Only command line history
      Moved a whole bunch of macros out of smb.h and into their own #include
      Added service name to vfs_connection_struct.
      Pass VFS options defined in smb.conf to vfs_init() function.
      Copy service name into vfs_connection_struct.
      Support for arbitrary VFS options in smb.conf.  Options are of the
      make proto
      'export BEANS=ham' is a bash-ism.  For those who don't have a symbolic
      Fixed quoting/escaping bug in example code.
      Don't print out a message in svcenum command for the ERRmoredata
      According to params/loadparm.c, the "case sensitive", "casesignames",
      Fixed typo in automatic printer install share name.
      Pass arguments to ./configure
      system_name not server_name
      Some strange CVS weirdness happening here.  I had SAMBA_TNG tags in my
      Busting up of source/include/smb.h into smaller pieces which can be
      Added .dummy file.
      Added smbd/vfs.o and smbd/vfs-wrap.o to smbd objects.
      Add -rdynamic to LDFLAGS if libdl found.
      Comments to use vfs_* functions instead of dos_* unless really
      Added 'vfs object' and 'vfs options' smb.conf parameters.
      Mega-VFS merge.  Yeah baby!
      make proto
      Backed out -rdynamic linker option.  It seems to be GNU ld specific.
      Put back lots of missing calls to dos_to_unix().  Thanks to
      Hopefully these changes will actually stick.
      Fix some compile warnings.
      Fixed compile warning in locking.c:traverse_fn()
      Fix some more compile warnings.
      file ntdom.c was initially added on branch SAMBA_TNG.
      Not enough args to DEBUG statement.
      Return "Invalid tdb context" instead of crashing when tdb_error called
      tdb_traverse() now takes three arguments.
      More checks for passing NULL tdb contexts to tdb functions.
      Updated docs for tdb_traverse.
      Don't assume that the (files_struct *) passed to fd_attempt_close()
      Added tdbtool to .cvsignore list.
      Allow tdb databases to be created "in memory" without having a file
      Modifications to tdb_traverse() arguments to remove compile warnings.
      Oops - put back filename argument to tdb_open().
      Makefile for tdb directory.
      Check for null tdb context in tdb_exists()
      Added standard shell command thing using '!' as first character.
      Adding libtool support to HEAD branch.  We're going to need this for
      More Japanese filename fixes wrt VFS code from
      Fixed spelling of Andrew's name.  (-:
      Removed unused parameter vuid from rpc_server api_* calls.  For the very few
      Snuck in some whitespace cleanup while I was visiting these files.  (-:
      Improved clean target.
      Added *.so
      fsync() returns an int rather than void.
      file ntdom_config.h was initially added on branch SAMBA_TNG.
      file winbindd_ntdom.h was initially added on branch SAMBA_TNG.
      Fix for crash bug in OpenConfFile() if no smb.conf exists.
      Initial version of winbindd manual page.
      Added winbindd parameters to smb.conf documentation.
      Added tdb_store_by_string() and tdb_fetch_by_string() functions to store
      Initial version of appliance spec file.
      Changed all references of ntdom to winbind.
      HTML version of yodl doc.
      Manpage version of yodl doc.
      simple build script for appliance rpm
      Nuked changelog - use cvs log instead.
      While we're all making incompatible tdb changes, I changed the implementation
      Merge from TNG.
      Added signal handling section.
      Updated VFS examples to use ftruncate() and lock() functions.
      Added -W workgroup command line option.
      Routines for driving smbclient from DejaGnu.
      Environment variables for single server test scripts.
      Test wildcard rename function.
      Testharness for masktest program.
      Test various operations on ipc$ share.
      Fix to return buffer output properly.
      Test transfer of large random file w/o corruption.
      Start of test blurb.
      Fixed last remaining instance of MS_DFS to WITH_MSDFS.
      Someone wrote a man page for smbspool - how nice!
      Copied across NT_Security documentation from 2.0
      Updated samba appliance example.
      Forgot attr entry for private dir.
      Created manpage for wbinfo program.
      ZERO_STRUCT() of info3 structure before using it.
      Merged parse_domain_user() from TNG.
      Merge from TNG.
      #include nsswitch/winbind_nss.h
      Changed server side lsa_lookup_sids function to look up SIDs that we are
      Added nsswitch/common.o to SMBD_OBJ1
      Removed some debugs.
      Simplified server pipe implementation by changing arguments passed down
      Simplified server pipe implementation by changing arguments passed down
      Simplified server pipe implementation by changing arguments passed down
      Simplified server pipe implementation by changing arguments passed down
      Pass the vuid from the connection_struct to the printing back end functions.
      Added print_access_check() function for checking printer security
      Call print_access_check() function from printing back end.
      Added some permission constants that are set for NT printer security
      Changed function prototype for pipe api functions to take a pipes_struct
      Pass the vuid from the connection_struct to the printing back end functions.
      make proto
      Whoops - dodgy make proto.
      Forgot pipes_struct conversion for api_samr_enum_dom_aliases()
      A neater way of solving the S_ISSOCK, S_ISFIFO problem.
      I've been working on refactoring some of the mess that is the become_user()
      Removed save directory argument to become_root() calls.  Probably most of
      Call init_sec_ctx() instead of init_uid().
      Added smbd/sec_ctx.o to smbd objects.
      Moved some static functions to sec_ctx.c
      Delete OriginalDir stuff.
      Added MAX_SEC_CTX_DEPTH
      make proto
      Tests for new security context stuff.
      Added return for become_authenticated_pipe_user() function.
      Added parenthesis around definition of PRINTER_ACE_PRINT.
      Removed unused variables.
      Got a bit carried away deleting things.
      Some compile fixes.
      make proto
      Test harness stuff for compiling things.
      Don't return a value for a void function.
      Updated documentation for wbinfo and winbindd.
      Added more args to smbclient wrapper - there's probably a better way
      Merge from TNG.
      Re-ran autoconf
      Renamed generic_request() to winbindd_request()
      Some more sec_ctx changes.  Modified some fields in the pipe_struct
      Merge of wbinfo program from TNG.
      Bracked unbracketed macro arguments while looking for another bug.
      Moved lib/util_seaccess.o from LIB_OBJ to SMBD1_OBJ as it is only used by
      Changed checking for WINBINDD_OK return value instead of NSS_STATUS_SUCCESS
      Make prototypes for functions returning an enum nss_status.
      Added global_sid_NULL S-1-0-0 to list of global sids.
      Pass pipes_struct rather than vuid down to startdocprinter, setprinter and
      Pass either an authenticated pipe or SMB user in a current_user struct down
      Rewrite of se_access_check() function.  Added comments and fixed a bunch of
      Include nss.h if present or define enough values to allow client access to
      Moved printer ACE mask values from nt_printing.h to rpc_spoolss.h
      Moved authenticated pipe user details into a current_user struct.
      Implemented NT printer descriptor checking.  Yay!
      Don't check NT permissions when printing from lanman.
      se_access_check() tests.
      Added some useful debugging stuff.
      Fix for passing NULL pointer as an array parameter in
      Spelling fixes.
      Re-instated lanman printing security checks (oops).
      make proto
      Moved winbind client functions from various odd locations to
      Fixes for various compile warnings on Solaris 8.
      Added wbinfo and .libs
      Uninitialised variables.
      Don't return winbind groups or users when responding to samr_enum_dom_users
      Added some debugs.
      Renamed a parameter in init_request() function.
      Renamed arguments to se_access_check()
      Moved access check for nt_printing_setsec() up into rpc function.
      Allow job owner to delete own print job.
      make proto
      make proto
      Initialise current time to time(NULL) in add_a_printer_2()
      Free security descriptor after access check in update_printer_sec()
      Reverted changes from rpcclient merge - contains memory leak!
      Missing var.
      Test for reloading smb.conf after SIGHUP.  Needs to be run as root.
      Run main server loop with sys_select() instead of sys_select_intr().  The
      Fix for mounting a printer as a share.  Not that there's anything
      Fixed memory leak in modify_trust_password()
      Fixed memory leaks in _spoolss_addprinterdriver()
      Fixed memory leaks in root and non-root password changing.
      Fixed read overrun in init_string2()
      In cli_error() return ENOENT when an ERROR_INVALID_NAME is received instead
      NT printer permissions test program.
      Merge.
      Merge of uninitialised variable fix from APPLIANCE_HEAD.
      Patch from John Reilly <jreilly at hp.com> for not processing duplicate files
      Updated file with version in TNG.
      Replaced "\\MAILSLOT\\NET\\NETLOGON" with NET_LOGON_MAILSLOT constant.
      Merge from appliance branch.
      Oops - missed a file.
      Merge bug - still getting used to dirdiff.
      Removed compiler warning.
      Fix for swat to return correct MIME type for text files.  From "Ron
      Hopefully this should fix the primary group permission problem.
      Updated manual pages to point at http://lists.samba.org instead of old
      Added missing break statement for manage documents check in
      When creating a print job entry for the printing backend, use the Windows
      Removed emacs backup file from repository.
      Modified test.h generator to return error if structure passed to vluke
      Removed annoying unecessary debug message.
      Fixed compiler warnings.
      Added uid and gid to push_sec_ctx() debug.
      Spelling flames.  (-:
      global_myname is actually a pstring.
      Remove duplicate group initialisation function.
      Don't initialise groups twice.
      Modified initgroups to provide a get groups a user is a member of
      Renamed WINBINDD_INITGROUPS constant to WINBINDD_GETGROUPS.
      Fixed merging mess.
      Added documentation for winbind enum users and winbind enum groups
      Fixes for io_q_setprinter rpc parsing.
      Merge of rpc parse buffer underflow debug code.
      Renamed WPrintQueuePurge to WPrintQueueCtrl as this function can purge, pause
      Removed null user checks to enable lanman print queue pausing and print job
      Fixed missing bracket on debug statement.
      Merge from appliance-head
      Small change to process of joining a domain with samedit.
      Removed erroneous +1's on length of unicode domain names for various
      proto.h was out of date.
      Merge of comment repair.
      Added smbsh to list of ignored files.
      Added a authentication hook to smbwrapper which allows a (username,
      Merge of printing improvements/fixes from appliance branch.
      Fix some compiler warnings.
      Added documentation for printer-notify smbcontrol command.
      Merge of printer security descriptor, info level and printerdata
      make proto
      Merge of latest round of printing fixes from appliance branch.
      More merging of printing stuff from appliance.
      make proto
      Merge fest!!!
      Fetch authentication info before actually using it.
      Use lp_codepagedir() instead of CODEPAGEDIR when loading the unicode map.
      Run configure script using dirname of $0.  This allows configure.developer
      Allow zero length smb.conf files.
      Fixed some debugging code.
      Reformatted to look nicer on 80-character screen.
      Mask value now displayed as READ/CHANGE/FULL for standard permissions, or
      Removed lsa lookup warnings (I'll remember).
      Added some cli_errstr() calls.
      Fixed compiler warning.
      Update required after changes to configure.in
      tdb_unlockchain() no longer returns a value
      Fixed compiler warning.
      tdb_chainunlock() no longer returns a value.
      make proto again
      Print debug if domain_client_validate() cannot fetch the trust account
      Added undocumented -t command for testing parsing of acl entries.
      Added smbcacls binary.
      First cut at a manual page for smbcacls.
      Removed compiler warning.
      Compile fixes for changes in make_sec_desc() interface.
      Added pdbedit binary to list of ignored files.
      Modified argc passed to rpc_client cmd_* functions to include argv[0].
      Port of lsa_lookup_sids() and lsa_lookup_names() rpc client functions from
      Cosmetic fixups for large file support message.
      Removed a dead function.
      return NULL instead of return False in char *prs_mem_get();
      Compile fix for new arg to create_nt_token()
      Fixed some accidentally reversed patches.
      Fix error string.
      Better error checking for ACL parsing.
      Don't print out the security descriptor type as it is automatically
      Added support for SERVICESF shared variable to change configuration file
      Wrong length for unistr2 in init_q_lookup_names()
      make proto
      Server side changes for dynamic names in lsa_lookup_names
      Lightweight rpc client library.  Uses only routines in libsmb and
      Convert names to sids when modifying ACLs.  Convert sids to names when
      Add libsmb/cli_lsarpc.o and rpc_client/cli_pipe.o to LIBSMB_OBJ.  Not so
      OK so I shouldn't have added cli_pipe.o to LIBSMB_OBJ.
      I think it's time to go home.
      Cache lsa connection and policy handle for resolving names and sids.
      Updated smbcacls documentation.
      Renamed parameters and variables called acl to the_acl as it conflicts
      Streamlined exit path.
      Added query info policy call.
      Cleaned up SidToString() and StringToSid() exit paths.
      Replace magic number with constant.
      Added a cli_nt_create_uni() to do a ntcreate&x with a unicode filename,
      Some systems seem to only accept a ntcreate&x with a unicode filename
      Don't call string_to_sid after cli_lsa_lookup_names() fails.
      make proto
      If extra arguments passed make yodl docs for these files rather than *.yo
      Documentation updates for smbcacls program.
      Return appropriate exit codes for various situations:
      Fixed -d option for rpcclient.
      Return EACCES for bad password.
      Return an empty directory for a stat on a share we aren't allowed to
      Added extra argument to calls to smbw_share_add()
      Codepages and stuff for Turkish language support.  Contributed by
      Fixed authenticated pipe access.
      Added init functions, cli_samr_connect(), cli_samr_close(),
      Added init functions, cli_spoolss_open_printer_ex(),
      Start of a rewrite of rpcclient based on the libsmb rpc client routines.
      Merge of various fixes from the tng headers.
      General clean up.  Merged routines for parsing enum_trust_dom rpc call.
      General clean up.  Merge of access_mask fixes for some unknown fields from
      make proto
      New makefile and proto for rpcclient.
      Removed link errors between rpcclient and smbd.
      RPC server fixes for RPC client changes merged from TNG.
      Use MAXIMUM_ALLOWED_ACCESS when doing a cli_spoolss_open_printer_ex()
      Memory leak fixes spotted by insure.
      Memory leak fixes and uninitialised variables spotted by insure.
      Printer name unistr is null terminated in make_spoolss_q_open_printer_ex()
      Pass correctly formatted args to cli_spoolss_open_printer_ex()
      Compile fix for smbw_dir_add function.
      Added remaining samr functions needed by winbindd.
      rpcclient functions for remaining samr and lsa functions.  All functions
      New proto and some small changes to rpc_samr.h
      Some ugly mucking around to get the new rpcclient compiling and linking
      Fix for no master browser present.
      Set the tdb->map_ptr to NULL if mmap() returns -1.
      Patch to get smbcacls and rpcclient to compile together.
      Some systems don't support SEC_RIGHTS_MAXIMUM_ALLOWED for lsa_open_policy()
      Turned down noisy debug statement.
      Fix for KOI8-R codepage from Andrey Kiselev <dron at at1895.spb.edu>
      Missing sys_endpwent() call in get_passwd_entries()
      Fixed duplicate free_sec_acl() call in free_sec_desc() function.
      Added Baltic codepage support.  From Toomas Soome <tsoome at ut.ee>
      Convert netbios name to dos codepage in make_nmb_name().  This allows
      Updated proto.h
      Merge of i18n fixes from appliance branch.  Samba can now talk to a network
      Update to Baltic codepage support.
      Baltic codepage fixes from Toomas Soome <tsoome at ut.ee>
      Merge of i18n password fix for smbclient.
      Fixed compiler warning.
      Updated broken links.
      Changed usage message for query_groupmem and query_usergroups as they don't
      Fixed some compiler warnings.
      Added a caching system to smbsh.  Previously access to workgroup or server
      Getting medieval with compiler warnings as Jeremy puts it.
      Grr - fixed compile error in smbwrapper stuff.
      Merge from TNG branch.
      Allow ctrl-d to exit rpcclient.
      More usability fixes.
      Added cli_samr_enum_dom_groups() function.
      Added cmd_samr_enum_dom_groups() function.
      Added a SMB_ASSERT() so that two cli_state structures aren't opened
      renamed unknown field to access mask in open alias structures.
      Added cli_samr_query_aliasmem() and cli_samr_open_alias() functions.
      Zero fnum when initialising a cli_state.
      Added some missing winbind parameters.  Yes they're already documented.
      Renamed unknown field to access mask in open alias parsing functions.
      Tidyup of server vs servername, username vs user to remove compiler
      Added queryaliasmem function.
      Merge of struct acct_info from TNG.
      make proto
      Fixed compiler warning.
      Fixed a compiler warning.  Still more const warnings though.  )-:
      Some reformatting (sorry Gerald).
      iAdded querydispinfo and querydominfo functions.
      Some versions of readline don't have rl_completion_func_t.  )-:
      Preliminary merge of winbind into HEAD.  Note that this compiles and links
      iAdditional files for winbind merge.
      Ignore *.po files.
      OK so I couldn't be as clever as I wanted to be with winbindd_glue.c
      Removed unused variable.
      Hey what happened to my debug messages?  Early exit from reopen_logs()
      Fix for query_dispinfo()
      iinit_samr_q_lookup_rids() didn't actually copy the rids into the
      Misc fixes to get winbindd working.  We can now do a 'getent passwd'
      Fixed querydispinfo command.
      Fixed typo in comment.
      make proto
      Added winbindd to list of binaries.
      Removed S_ISSOCK() macro as it's only used within winbind client code.
      Added S_ISSOCK macros for systems which treat UNIX domain sockets as FIFOs
      The substitution of %U and %D in the 'template homedir' is nowdone
      Fixed compiler warning.
      More compiler warning fixes.
      Cleaned up bitrot in nsswitch testsuite.  Merged tests across from TNG
      So the samr_io_userinfo_ctr was requiring a SAM_USERINFO_CTR to be passed
      Fixes from nsswitch testsuite.  Lots of stuff works much better now.  (-:
      Reverted samr_io_userinfo_ctr() patch because it broke too much other
      Bumped up debug level on set socket options from 3 to 5.
      Added sid_peek_rid() function to return the rid of a sid.  Saves mucking
      Replaced a whole bunch of lookup_name() requests in
      Use sid_peek_rid() instead of sid_split_rid().
      make proto
      Added talloc_strdup() funcion.
      Memory leak fixes plus general cleanup.
      Use talloc_strdup() instead of strdup().
      Added arg to querygroupinfo.
      Compile fixes for dynamic samr_query_userinfo() stuff.
      So I promised Andrew that a winbindd_proto.h file wouldn't be necessary.
      make proto
      Cosmetic changes in make proto output.
      Fixed lookup of entire /etc/{passwd,group} file line.
      Memory leak fixes from insure.
      Removed extraneous semicolons from some lp_ parameter definitions.
      Fixed up SAM_USERINFO_CTR dynamic stuff in cmd_samr_query_user()
      Removed reference to obsolete listproc address.
      Added winbind programs to build for supported systems (i.e linux and
      Broke out change trust account password routines into separate file
      Fixes to get pam_auth() functionality working again.
      Test login using pam_winbind.so and group membership.
      Added stubs for SRVSVC and NETLOGON rpcclient commands.
      Replaced next_command() with call to next_token().
      Removed some level 0 debugs accidentally left in - oops.
      Added a init function for net_q_logon_ctrl2 so we can make this call
      Added logon control2 client call.
      Added srv_get_info client command.
      Added server side reponse to net_logon_ctrl rpc.  We can now respond
      Fixed compiler warning.
      Added srvinfo and partial logonctrl and logonctrl2 commands.
      Added structures for LOGON_CTRL rpc.
      i18n fix for domain_client_validate()
      The manual page for swat referred to nmblookup in the synopsis.
      Fixed compiler warning.
      Add border=0 in included swat images to get rid of the link border stuff.
      Added a comment.
      Added *.po to .cvsignore files.
      Added a --with/without winbind option to configure.  The default is to
      If a debug class was explicitly set to zero the debug system would not
      Oops.
      i18n bugfix merge from appliance.
      Removed irritating and unecessary debug message.
      Merge of i18n domain name fix for lsa_query_info_policy() from appliance
      Update prototype file.
      Compile fix for wbinfo on solaris.
      Compile fix for solaris.
      Compile fix for Solaris.
      More compile fixups for winbind portability.
      Added add domain user to rpcclient.
      Merge of lsa_lookup_names() i18n bugfix from appliance.
      Converted init_samr_q_lookup_names() and samr_io_q_lookup_names()
      Fixed bug in cli_samr_create_dom_user()
      Fixups for new args to cli_samr_connect()
      Indent dodgy function prototype to avoid make proto picking it up and
      Prototypes update.
      Added stubs for dfs rpc client routines.
      Added stub dfs client commands to rpcclient.
      Converted SAMR_Q_LOOKUP_NAMES structure to tallocated memory instead of
      Fix for cli_samr_connect() arg change.
      Correction to winbind nss library install process.  So how do I update the
      Fixed bug in winbind_sid_to_gid() function.
      Added comment about possible optimisation to winbindd_pam_auth()
      Fixed typo in #ifndef at head of file.
      Removed commented out msdfs code that was being called anyway.
      Fixed typo in debug message.
      Renamed -d option (make verbose) on smbstatus to -v.
      Added some msdfs client routines.
      Oops - proto.h contained junk from another workarea.
      Fixed some return code checks for cli_initialise() from False to NULL.
      Merged encode_pw_buffer() and nt_owf_genW() functions from TNG branch.
      Add password length field to SAM_USER_INFO24 structure and fix init
      Added a unix error code for NT_STATUS_PATH_NOT_COVERED.
      Prototype update.
      Fixed typo in configure error message.
      Fixed typo in nmblookup example.
      Removed silly Get_Hostbyname() wrapper as DNS names are case-insensitive
      Added $(PROFILE_OBJ) to winbindd objects.
      Fixed typo in debug message.
      Fixed typo.
      Merge from appliance branch:
      Added delete domain user rpcclient command.
      Added cli_samr_delete_dom_user() function.
      make proto
      Merged cli_read_one() function for reading DCE/RPC reply fragments.
      Use cli_read_one() for reading DCE/RPC reply fragments.  We need to check
      Spelling fix.
      Cleanup of cli_lsa_enum_trust_dom().  talloc() doesn't like attempts to
      Cosmetic fixups found while playing with the server manager.  Added support
      Fixed bug introduced by changeover of security descriptor code from
      Put an 0x in front of a hex number.
      Added doco for the -d parameter.
      Added some missing entries to usage().
      Replaced memcpy() with memmove() to make safe_strcpy() safe for overlapping
      Win9x weirdness.  When setting the named pipe handle state on a Unicode
      Removed another silly static array.
      Experimental support for joining a domain without creating an account in
      Only build the pam_winbind module if --with-pam used.
      Re-ran configure.
      Fixed quoting bug - shell programming sucks.
      Reran autoconf.
      Fixed incorrect comment for cli_NetServerEnum()
      Split pam_winbind out of WINBIND progs so it can be build separately
      Removed bogus server_n local variable in connect_one() function.
      Renamed formal parameter fd to fnum because we're talking about SMB file
      A program to display a tree of domains, servers and shares similar to the
      Removed unused local variables.
      Removed unused variable.
      Changed instances of TRUE, FALSE to True, False as some compilers don't
      Reran autoconf.
      #ifdef'ed out some unused functions.
      Added some documentation for using -U with -j in order to join a domain
      Merged across rewritten version of winbindd_kill_connections().  This now
      It looks like the rpc client code in libsmb hasn't been converted to the
      Changed the cli_lsa_lookup_sids() function to unpack the domain and user or
      Started adding some help/usage info for rpcclient commands.
      In cli_lsa_lookup_sids() don't append a separator character between domain
      ^$&%&*$&)% readline uses \n characters instead of letting the terminal wrap
      Added a warning debug if cli_samr_lookup_rids is called with more than 1000
      Call cli_samr_lookup_rids() in bunches of < 1000 rids to avoid crashing
      cli_samr_query_dispinfo() can return STATUS_MORE_ENTRIES which isn't an
      In wb_samr_query_dispinfo() pass back the 32-bit status code from
      make nsswitch target wasn't building the winbind pam module.
      Store winbindd in the sbin directory.  Make the winbind pam module also as
      Merge of change machine account password race fix from appliance branch.
      Re-ran autoconf.
      Held a shoot-out between NT_STATUS_NO_PROBLEMO and NT_STATUS_NOPROBLEMO.
      Return an exit code when connect failed.
      Ignore some of the autoconf files.
      Added and populated .cvsignore files for packaging subdirectories.
      Added some command line argument checking and usage info.
      Fixed up compilation of pam_winbind.so to be consistent with value of
      Rewrite of winbind autoconf fragment.
      Added autogenerated spec files for various rpm versions.
      Reran autoconf.
      Tweaked the installdirs target to ignore errors.  This allows RPMS to be
      Modifying spec files is PITA.
      Fix for smbpasswd set_userinfo24 was in the wrong place!
      Another winbind test - fill in later.
      Added smbtree to list of ignored files.
      Changed lone malloc() call to talloc().  Spotted by
      Cleaned up error handling in cli_initialise() to fix a memleak found by
      We don't use indent in the HEAD branch.
      Fixed another possible memleak in cli_initialise()
      A collection of fixes/cleanups to the security descriptor code by
      Patch for having spaces in tdb keys, NULL termination fixes and other
      Factored out common rpc pipe initialisation and shutdown code.
      Merge of modesty patch from 2.2 spec file.
      Link fix for smbpasswd.
      Changed the order of arguments in make_oem_passwd_hash().  All the other
      Moved dos error codes from smb.h into new file doserr.h
      Replaced the duplicate DOS constants with appropriate ones from doserr.h to
      Removed nt_error field from cli_state as it was not used anywhere.
      More constant conversions.
      A rewrite of the error handling in the libsmb client code.  I've separated
      Use the new client error api.
      Use new client error api.
      Fixes for new client error api.
      Had the test for cli_is_error() reversed.  You idiot Stimpy!
      Debug cleanups.
      Fixed crash bug when attempting to list contents of non-existent
      Fixed up 'orrible formatting.
      Fixed typo in debug message.
      Converted to new error API.
      Moved across definition of dos error types from smb.h to doserr.h
      Distinguish between NT informational and error codes.
      Added cli_lsa_open_policy2()
      Added another authentication interface to winbindd.  The Challenge Response
      Link in smbdes routines for new wbinfo authentication stuff.
      Added copyright for me and AB.
      Fix for filers sending -1 for the maximum read request length on the
      Fixed detection of CUPS.  We need to check for the presence of the cups
      Set secure channel type depending on server role.
      Fixed typo in debug message.
      Fixed incorrect debug.
      Make domain_client_validate return a status code instead of a boolean.
      Only register the #1b name if we are ROLE_DOMAIN_PDC rather than
      Process the SAM/UAS change notification message.
      Fixed debug in cli_establish_connection() - print out the called name on
      More status32 conversions.
      Fix bug in usage().
      Convert to NTSTATUS.
      Fix for make proto when srcdir != cwd.
      Fixed description in file header.
      Added copyright header (taken from include/doserr.h)
      Merge from TNG - function to initialise NTTIME structure.
      Fixed typo in comment.
      Added sam sync and sam replication smbd message constants.
      Send a MSG_SMB_SAM_REPL when a UAS/SAM change netlogon message is
      Merge of SAM delta type constants and BDC replication types from TNG.
      Send a MSG_SMB_SAM_SYNC when a netlogon_ctrl2 message is received.
      Added dummy handlers for SAM_SYNC and SAM_REPL messages.
      Added samsync and samrepl (untested) message types to smbcontrol.
      Merge of sam sync code from TNG.
      Start of samsync program invoked by smbd to perform sam synchronisation and
      Added additional objects to rpcclient for sam sync/repl support.
      Should be dbgtext, not dbg_text.
      Fix uninitialised variables.  Spotted by "Esh, Andrew" <AEsh at tricord.com>
      Renamed rwlock_t type to tdb_rwlock_t to avoid conflict with Solaris 8
      Added samsync binary to list of ignored files.
      Set acb_info to ACB_SVRTRUST if we are joining the domain as a BDC without
      Fixed some compiler warnings.
      Welcome to tpot's exploit world!
      Don't overwrite an existing /etc/xinetd.d/swat on install file since we
      Don't crash if run with no command line arguments.  (-:
      oh foo
      Merged cli_net_req_chal() and cli_net_auth2() from rpc_client/cli_login.c
      Logon workstation checks from Toomas Soome <tsoome at ut.ee>
      Annotated definition of NEW_PW_FORMAT_SPACE_PADDED_LEN constant.
      Removed 18 duplicate #undef entries.
      Started a cleanup of smbpasswd related stuff.  I've created a new file
      Converted to NTSTATUS return codes.
      Added a string for NT_STATUS_OK, m'kay?
      Standardised on 'var = value' when referencing smb.conf parameters, rather
      Fixed some bad markup.
      Update from sgml source.
      Moved and renamed DFS error constants from include/rpc_dfs.h to doserr.h to
      Converted DFS error returns to WERROR instead of uint32.
      Hmm - needs to be converted to pull/push unistr routines.  But at least it
      Some patches to authentication:
      Fixed typo.
      Ignore torture test binaries.
      String length fix from Toomas Soome <tsoome at ut.ee>
      Converted msdfs referral server code to use rpcstr_push() functions.  Still
      Terminate dfs referral alternate path string.  DFS now works again in head
      Fixed return value for cli_dfs_exist() - nt4 returns 1, w2k returns 2.
      Discovered a whole lot more opcodes on the LSA pipe while writing a rpc
      Oops.
      Removed CHECK_STRUCT macro - it isn't used anywhere.
      Use session key from cli_state struct rather than the uninitialised one
      Merge of sam_pwd_hash() function from tng.
      Decode 68-byte password blocks using sam replication password key (which
      Merge prs_hash1() function from tng.
      Produce correct lanman and nt hashes in samsync smbpasswd output.  The
      Doc fix merge from 2.2
      Converted cli_net_auth2() and cli_nt_setup_creds() to return NTSTATUS.
      Added copyright and include guards.
      Added copyright (not sure who owns it though) and #include guards.
      Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header.
      Added a comment about not changing the magic timestamp values without
      Move CLI_POLICY_HND to be internal to winbindd.
      Remove winbindd_glue.c dodgy hack and add winbindd_cm.c for managing
      Add CLI_POLICY_HND as a valid return type.
      This is the start of a bit of a rewrite of winbindd's connection handling.
      More work on winbindd connection rewrite:
      Implemented sam group handle stuff.  getent group now works.
      Fixed some compile warnings.
      Got the rest of the group functions working.  Did some reformatting (man
      Merge from 2.2
      Removed some unused code from the recent cleanup.
      Some old stuff hanging around since the CIFS conference.  Big cleanup of
      Moved to rpcclient subdirectory.
      Moved from include subdir.
      This file is really old and not used anymore.
      fixed compiler warning.
      Converted a few winbind functions to use a talloc context that is destroyed
      Resurrected sam sequence number code.
      Pass domain structure around in cache code rather than the domain name.
      Some reformatting.
      charset_initialise() doesn't exist anymore.
      Now compiles under head branch.
      Renamed vfs_init() to smbd_vfs_init() to allow vfs modules to compile.
      Converted some more functions to create and dispose of a talloc context on a
      Fixed some memory leaks introduced by connection handling rewrite, as well
      Converted a bunch of 0x85 constants to SMBkeepalive.
      Fix for fussy Solaris compiler.
      Don't get stuck in an infinite loop in vfs_connect.
      Made default vfs ops static so we can use this symbol in actual modules.
      Removed unused function.
      Renamed global_vfs_ops to default_vfs_ops and made static.
      Updated copyright notice.
      Fixed compile warning.
      Added some connection checking code.  Doesn't work yet though.
      Fixed confusing debug message - it was always printing uid 0 instead of the
      Don't reference tallocated memory that has already been disposed of.  The
      Hey where did those 4 character tabs come from?
      Converted a bunch of functions to use sscanf %i instead of atoi to
      Fixed typo in debug message.
      Added samlogon command to test against win2k native mode server.  I think
      Display some errors if the initial connection to the server could not be
      Removed confusing comment.
      Allow the logon level to be passed to cli_netlogon_sam_logon() rather than
      Allow the logon level to be passed to cli_netlogon_sam_logon() rather than
      Fix debug in domain_client_validate() when password server = *.
      Some tweaking to make the samlogon function look more like NT on the wire.
      Don't accidentally return success when sending a broken NET_SAMLOGON
      This one's a doozy.  A cut&paste bug incorrectly sets the max string length
      Added some extra fields to the auth_serversupplied_info structure.
      Removed unneeded extern.
      Don't put a \n on the end of the arg to exit_server()
      Removed duplicate debug.
      Use cli_nt_login_network() instead of domain_client_validate() to perform
      Fixed compiler warnings.
      Renamed make_user_info_for_winbindd() to be more consistent with the
      Fixed some compiler warnings.
      Wrote some stubs for new win2k only spoolss rpc commands:
      Removed totally annoying verbose debug in sid_to_string()
      Fixed looking up domain (winbind) users ahead of local users in
      Added delheaders as a dependency for clean.
      Fixed incorrect debug message.  )-:
      Removed #ifdef TDB_DEBUG around tdb_dump_all() and tdb_printfreelist()
      Spelling fixes.
      Reformatted to 75 columns.
      Removed unused variable.
      Close the socket and set the file descriptor to -1 if there was a socket
      Random connection robustness related fixes.  Display some debugs about
      Bit of a cleanup of signal handling code.
      Fixed display of uninitialised buffer in debug.
      Get list of trusted domains if we haven't fetched them yet.
      Cache positive and negative name domain controller lookups.
      Added free_domain_info() function.
      Added free_domain_info() function.
      FALSE -> False
      Jeremy, I'm not sure what you were trying to do with the process activity
      Caching user, group and domain sam handles was a stupid idea.
      Added comment about why not to cast the assignment of
      Don't resolve the hostname in smbd as we can pause for a long time while
      Cosmetic fix for debug statement.
      Merge from 2.2.
      Fixed sizeof vs array length bug in make_user_info_winbind_crap()
      Spelling fix, reformatted comment.
      More spelling fixes, comment reformatting.
      Made a libsmbclient doxygen group and moved all the libsmbclient groups
      Oops - opening wrong pipe name in cli_lsa_initialise() helper function.
      Removed unused variable.
      Ignore *.po files.
      Fixed check machine account function.
      Removed TimeInit() call from every client program (except for one place
      Don't initialise static pointers to NULL.
      Fixed bug in canned results list for checking the error code of wbinfo.
      Got rid of that stupid parse_domain_user() warning when compiling
      Added constants and error message for dos error code 1326 (logon failure).
      Finally worked out why a enumerate trusted domains was returning a
      Added --eparser to call ethereal parser generator.
      Initial version of ethereal parser generator.  Works with test.idl
      Renamed functions from Dump* to Parse*
      Fixed compiler warning.
      Allow lookup of users with spaces in their name.
      Fixed some indentation.
      Ignore *.po files.
      Removed bogus SAFE_FREE() call of talloced return data from
      Fixed compiler warnings and dyn_CONFIGFILE related breakage.
      dyn_CONFIGFILE fixups.
      Got medieval on another pointless extern.  Removed extern struct ipzero
      Merge from appliance-head: when creating a default security descriptor
      challange -> challenge
      Another merge from appliance-head: in [ug]id_to_sid don't call the
      More compiler warnings fixed.  Some minor reformatting.
      Ignore *.pidl
      Start generating code for unions.
      Start generating some ethereal code that may actually compile with
      Some reformatting.
      Added a 'keys' command to tdbtool which prints out all keys in the tdb.
      Decorate some of the parse functions with element names.  This is starting
      Don't pass decorative name to policy handle or ntstatus dissectors.
      I think the lookup_pdc_name() should be called lookup_dc_name() and the
      Comment deconfusification.
      Missing return in free_privilege()
      Renamed sid field in SEC_ACE to trustee to be more in line with MS's
      Updated definition of fstring.
      Don't display any data if tdb_fetch() failed in the tdbtool "fetch"
      Added error message for ERRdiskfull.
      Don't pass down drep (data representation) arg from top level fn.
      Fixed typo in fix for typo in debug. (-:
      Moved processing of function arguments and structure elements
      Made hyper a simple type.
      Reinvented has_properties() function lost after HD crash. )-:
      Removed old commented-out code.
      Convert a bunch of "prs_foo()" to "offset = prs_foo()"
      wchar_t is a scalar.
      Misc fixes:
      Typo spotting.
      Formatting fixup.
      Added client and server code for the GetPrintProcessorDirectory SPOOLSS
      Merge of memory leak fixes from APPLIANCE_TNG.
      Fix for pointers to structures in function args.
      Added "return offset;" to end of generated function.
      Compile fix.
      Doing some research into ACLs on the LSA and SAM policy objects.
      Removed unused variable.
      Grr - people who put const everywhere should fix up all the warnings they
      SAMR query sec obj returns different results depending on which sam handle
      Removed unreferenced getopt() externals.
      Converted wbinfo to use popt instead of getopt - popt is very nice!
      Modify winbindd to use authenticated user info from secrets.tdb when making
      Oops, the -a option disappeared.
      Fix some compiler warnings.
      Added comment.
      Set the debuglevel after the call to lp_load() so the change sticks.
      Merge from 2.2 to allow net rpc join -U to complete even if the workstation
      Display a nice error message for NT_STATUS_LOGON_FAILURE in connect_to_ipc()
      Display a nice error message if the user%password specified for net rpc
      FALSE -> False
      Added some constants for registry data types.
      Replaced some hardcoded hex numbers with constants.
      Fixed bad args to debug statements.
      Removed unused function, delete_fn()
      Fixed uninitialised variable warning.
      A fix to override the location of a user's home directory if it is
      Added some comments showing hex values of some constants.
      Grr - numbers printed in hexadecimal should be preceeded by 0x
      Fix for null command description in rpcclient help.  From Benjamin Kuit
      Append to log.winbindd instead of overwriting it so we are consistent with
      Unicode byte ording fix from Benjamin Kuit <bj at it.uts.edu.au>
      Removed reference to rpc_client/cli_netlogon.o from dependencies for
      Removed unused #define
      The werror<->nt status code map has changed and has broken all the spoolss
      Initialise result on success in cli_spoolss_enum_printers() so we don't get
      Fixed crash bug in display_print_info_1()
      Welcome to preprocessor hell.  Had to put a #ifndef around SAFE_FREE to
      Fixed crash bug in display_print_info_2()
      DOS error 31 is ERRgeneral, General Failure.  This is the WERROR equivalent
      Display nicer message when server name could not be resolved.
      Added a get_dos_error_msg() function to mirror the get_nt_error_msg()
      Minor doc cleanups.
      Define a rpc_client doc group.
      spoolss rpc client cleanup:
      Check for winbind separator in user name for cli_session_setup()
      Converted enumprinters and enumports cli functions to return WERRORs.
      Converted enumprinters and enumports cmd functions to use WERROR
      Don't log the password in pam_sm_authenticate() unless DEBUG_PASSWORD is
      Spelling fix.
      Converted getprinterdriver to WERROR - it always returns dos error 6
      Sed error.  The status value in the PRINTER_INFO_2 structure isn't a WERROR
      For hysterical raisins you must use string_set() to set the value of a
      Merge from appliance-head:
      Although configure.in and configure were checked in at the same time
      Spelling fix.
      A big tidyup while thinking about getting trusted domains being re-read
      Since AB has been changing the winbind interface it's time to add the "mock
      Some memory leak fixes.
      Correct4ed comment.
      Always query the PDC for the list of trusted domains rather than interating
      Removed fprintf(stderr, ...); calls which should not be present in library
      Merge of name_status_find() debugs.
      Quieten some pointer cast warnings.
      Fixed typo.
      Added some guards.
      Made a debug look nicer.
      Spelling fixes.
      Spelling fix.
      Having a const parameter for set_socket_options() causes too much confusion.
      Call pidfile_create() as part of init sequence.
      Added comment about running lp_load() before calling pidfile_create().
      Display tdb name of "unknown" in logging debug when tdb has not been named.
      Raise log level of warning produced when the open() of the tdb fails.
      Sync up startpageprinter with appliance.
      Removed unused static variable.
      Initialise password server to "*" in init_globals()
      Remove check for passwordserver = "*" as we now initialise it.
      Much more useful handling of backup domain controllers in winbindd.  Honour
      Removed dodgy init of local variable.
      Since we have dynamic initialisation in the group mapping code, make
      Removed silly fprintf(stderr, ...) debug.
      Fix for password change from Samuel Ziegler <sam at xpedion.com>
      Unused file.
      Removed version number from file header.
      Added wrepld_proto.h
      Addd wrepld (what a cool name!)
      Added constant for WERR_FILE_EXISTS.
      Added some constants for the flags field in the FORM_1 structure.
      Added addform, setform and deleteform commands.  The only one I could get
      Added addform, setform and deleteform cli functions.
      Added make functions for SPOOL_Q_{ADD,SET,DELETE}FORM.
      Added administrator access check for server side add, delete and setform
      Removed unused variables.
      0x is the traditional prefix for displaying hex numbers.
      Merge of smbclient print crash bug fix from app head.
      Removed some random crap that isn't used anymore.
      Added comment in lp_string() about debugging memory problems.
      Added some splint annotations from andreas.
      int -> uint32 fixes from andreas
      int -> uint32
      Do a smb_panic() if sec_initial_[ug]id() or non_root_mode() is called
      Remove dynconfig.{o,po} in clean target.
      Whoops, typo.
      Added cli_spoolss_initialise() function.
      Converted cmd_spoolss_enumprinterdrivers() to use new
      make proto
      Converted {cmd,cli}_spoolss_getprinter() to WERROR and offered/neede.
      Converted remaining spoolss rpcclient functions to werror/needed/offered.
      Added error for invalid form size.
      Implemented client side functions for SPOOLSS addform, getform, setform and
      Merge of printing performance fixes from appliance.
      Fixed usage of uninitialised variable in strict_allocate_ftruncate()
      Fixed typo for winbind on solaris and hpux.
      Fixed compiler warning about unused variables.
      Removed unused static function.
      Spelling fixes.
      Removed duplicate \n from debug message.
      Compile fixes for the pdb nisplus module.
      argc == 0 is an impossible condition.
      Fixed a bunch of crash bugs for enumprinters at various info levels.
      Cosmetic fixup for enum_printers
      Added case statment for decoding enumprinters level 0 result.
      Doc.
      Removed bogus calles to D() debugging function.  Perhaps these should
      Added tdbbackup.
      Merge of enumprinters vs getprinter naming patch from 2.2
      Fixed bodgy printf arguments in debug statment.
      Backed out enumprinters stuff - leave it for another day.
      getpid() -> sys_getpid()
      Remove studly  gaps from prs_werror() calls so the same debug text is
      Renamed get_nt_error_msg() to nt_errstr().
      Added dos_errstr() function.  Not all errors in list yet.
      Don't try to sort a list of zero length in internal_resolve_name()
      setup.py for samba python wrappers
      Patch to configure.in and Makefile.in for Python extensions.
      Merge from app-head:
      Merge of Richard's lookupsid fix.
      Initial version.
      Ignore autogenerated setup.py
      Cache call to winbind separator.
      Remove nsswitch from include directories.
      Added name_to_sid and sid_to_name functions.
      Pass $(CFLAGS) and $(CPPFLAGS) to python compile instead of $(FLAGS)
      Added enum domain users and enum domain groups.
      Actually use flags passed in PYTHON_CFLAGS variable.
      Compile fix for --with-profiling-data
      Added enumerate trusted domains and check secret.
      Make debug statment less confusing.
      Stomped on some header file version numbers that have crept back in.
      Spelling fixes.
      Renamed internal methods so as not to clash with symbols within Samba.
      Pass $(srcdir) to setup.py
      Append $(srcdir) to include directories.
      Moved form related functions as methods in the policy handle object.
      Samba structure <-> Python dictionary helper functions.
      Port related functions.
      Regenerated patch.
      Added ports and conversion routines.
      #include "py_conv.h"
      Moved conv functions to separate file.
      Added code for smb messaging.  winbindd now responds to the smbcontrol
      Unblock sigusr1 on startup.
      Moved printer driver related calls here.
      Moved general printer related calls here.
      Converted to #include *.c format to avoid namespace pollution and
      Fixed bug in guards.
      Moved pyconv definitions across.
      Broke out stuff into other files.
      Converted to #include *.c format.
      Script to generate patch to Makefile.in and configure.in
      Updated version.
      Use winbind separator in sid_to_name() function.
      Use headername when closing off include file guards.
      Added another return type.
      Aborted experiment to avoid namespace pollution and prototype hell and
      Removed unused variable.
      Fixed C++ comments.
      Use Py_InitModule3() instead of Py_InitModule4() when we only want to set
      Docstring updates.
      Start to make argument ordering consistent.
      Add -D__INSURE__ to the CPPFLAGS if CC=insure.
      Rerun autoconf.
      Fixed memory leak in make_pdb_context_name()
      Free popt context after argument parsing.
      Also look for libinsure.so where the full version installs it.
      Use m4-mode when editinging configure.in under emacs.
      Rerun autoconf.
      Fixed memory leak in cli_lsa_enum_trust_dom().  Use talloc_strdup() instead
      oops
      Call poptFreeContext() as appropriate.
      Spelling.
      If compiling with Insure, mallocate a byte of memory and attach it to the
      More spelling.
      Fixed some compile warnings.
      Make bin/nsstest as part of torture target.
      Added functions to return Python tuples (error code, error string)
      Don't include py_spoolss_conv.h by default.  We want to hide these
      Throw a spoolss.werror exception when the rpc client routines return
      New routines to convert between structures and python dictionaries.  We now
      make proto
      Added py_spoolss_printers_conv.c to spoolss extension.
      Converted drivers, forms and ports functions to use new conversion routines
      Removed unused label.
      Fixed dodgy looking prototypes for py_to_* functions.
      Added new files for drivers, forms and ports conversion routines.
      make proto
      New version of patch.
      Spelling.
      The useless_ptr must be non-zero for addform and setform client functions
      Added constants for form types and WERROR values.
      Fixed setform and addform functions.
      Added WERR_INVALID_FORM_NAME constant.
      Fixed some compiler warnings.
      Fixed typo in debug statement.
      When printing a tdb log message display "unnamed" instead of "unknown" if
      Moved definition of winbind username/password secrets into secrets.h
      Added cli_spoolss_enumjobs() function.
      Fixed missing alignment in spoolss_io_q_enumjobs() function.
      Added a whole bunch more permission constants.
      Ignore bin directory.
      Implemented a setup_logging() function that takes two keywords:
      Implemented a setup_logging() function that takes two keywords:
      Moved open_pipe_creds() function to common file.
      More open_pipe_creds() refactoring.
      Starting work on lsa module.
      Generate proto for lsa.
      Made a comment clearer.
      Fixed comment.
      Fixed debugs.
      Added copyright.
      Moved function prototypes to py_common_proto.h
      Moved security descriptor routines into their own file.
      New file to hold common prototypes.
      Added a status code for lsa_lookup_{sids,names} returning the fact that
      Added error string for STATUS_SOME_UNMAPPED
      The cli_lsa_lookup_{names,sids} functions were returning useless
      Added enumerate trusted domains.
      Shutdown cli_state in the dealloc function.  This happens automatically
      Call PyErr_SetString instead of fprintf to stderr.
      Explicitly return a list in py_ntstatus_tuple() and py_werror_typle().  Not
      Rename new_policy_hnd_object() to new_spoolss_policy_hnd_object()
      Added hex values as comments for the standard access rights.
      Fixed incorrect debug.
      Merge of comment fix.
      Merge of print server permission handling fixes from HEAD.
      Whoops, removed debug 0 that snuck in.
      Merge of print server permission handling fixes from HEAD.
      Merge of lsa lookup names/sids patch from HEAD.
      Skeleton for SAMR module.
      Stubs for connect, domain, user, group and alias policy objects.
      Fixed command line argument parsing.
      make proto
      Started working on setprinter code.
      Return exception text if getprinter level not [0..3]
      Merged [fp]strterminate macros from HEAD to fix compile.
      Added constant and message for invalid security descriptor dos error.
      Merge from HEAD:
      Removed unused variable.
      Implemented routines to convert from a Python dictionary to a SEC_DESC
      Implemented py_to_PRINTER_INFO_3() helper function.
      make proto
      Got setprinter level 3 working!
      Some examples using the spoolss python module.
      Re-order args for enumprinterdrivers function.
      Removed unused arg to deleteform.
      Allow lookup_sids() and lookup_names() to take either a list of strings or
      Fixed compile warning.
      Fixed more compiler warnings.
      Grr - the removal of the nnecessary prs_align() from relative unicode
      DOS error 1307 is returned when an invalid owner for a security descriptor
      Merge from HEAD:
      Added cli_spoolss_enumjobs() function.
      Added cmd_spoolss_enumjobs() function to rpcclient.
      Merge from HEAD:
      rpcstr_pull() src_len fix.
      Added enumjobs command.
      Remove unused variable.
      Changed some error returns to return a werror tuple (status code and text
      Added setjob() command.
      Added client side spoolss rpc commands for startpageprinter,
      Added commands for startpageprinter, endpageprinter, setjob and getjob.
      Removed libtool.m4 includes.
      Fix for Solaris nscd issue pointed out by Mike Gerdts
      Added findsmb to .cvsignore list.
      Merge of Solaris winbindd fixes.
      Merge of secrets_init() paranoia fix from 2.2
      Merge of secrets_init() paranoia fix from 2.2
      Rerun autoconf.
      Merge of --set-auth-user updates from 2.2
      Merge of --set-auth-user updates from 2.2
      Added startdocprinter and enddocprinter.
      Support for client side startdocprinter.
      RPC client function for startdocprinter and enddocprinter.
      Registry module.  Only contains REG_xxx constants used by the spoolss
      Added getprinterdata and setprinterdata functions.
      Removed irritating CR at end of file.
      Updated patch.
      Added entry for winreg extension.
      Don't store domain with username in secrets.tdb
      Merge from HEAD:
      General cleanup of compiler warnings etc.
      Added enumprinterdata.
      Added getprinterdata and enumprinterdata rpc client routines.
      The cli_spoolss_setprinterdata() function interface changed slightly.
      Change make_spoolss_q_{get,set}printerdata() take a char* and length rather
      Added writeprinter command.
      Added writeprinter rpc command.
      Moved PyDict_SetItemString for printer info level structures into conv functions.
      Fixed bug in enumprinterdrivers.
      Added deleteprinterdata function.
      make proto
      Added lots of new functions to the method tables.
      Added deleteprinterdata client rpc.
      Implement py_to_DRIVER_INFO_3()
      Return a dictionary of printer drivers in enumprinterdrivers() instead of a
      Comment that deleteprinterdataex isn't supported by a samba server.
      Fixed a memory leak in enumprinters.
      Method entry for addprinterex()
      make proto
      Renamed functions that are methods of a printer handle object from
      Cleaned up help docstrings.
      Added addjob command.
      Refactored open_pipe_creds() function to remove unused parameter.
      More cleanups.
      Shorten some debug messages.
      Fix return value for enumprinterdrivers(), getprinterdriverdir().
      Set exception object when enumjobs returns non-zero NT status.
      Fix memory leaks and return values in error returns for enumports().
      Fix memory leaks and return values in error returns for enumprinters().
      Renamed 'printer_name' field in python printer info to 'name' to be
      Removed unused variable.
      Return enumerated forms as a hash of hashes instead of a list of hashes.
      to_struct() now returns a boolean which is false if not all the elements of
      Added a utility function to extract the info key from a dictionary.
      Call get_level_value() utility function.
      addform(), setform():
      Add level field when converting FORM_1 to dict.
      Use get_level_value() utility fn.
      NT sends the server name prepended with \\ for a enumerate printers RPC
      Fixed compiler warning.
      Patch to only set SV_TYPE_PRINTQ_SERVER in default_server_announce if a
      Spelling fix.
      No need to pass a fstring in make_spoolss_q_enumprinters()
      There's probably a pointer to a buffer at the end of a enumprinterdrivers()
      OK that last commit was incorrect - this call is parsed properly.  I only
      Set level key in driver info structures.
      When converting from a dictionary to a Samba structure, check for any
      Decode info level 3 for getprinterdriver.
      py_to_DRIVER_INFO_3: remove level key on copy of dictionary before calling
      Remove level and name fields from dictionary copy in py_to_FORM()
      A tdb module based on some tips from Mike Noriega.  This version supports
      Added a reminder about programs using the tdb bindings having to be
      Got gdb and gpl confused.  (-:
      Another change to the GPL "abandon hope all who enter here" warning.
      A graphical tdb browser using the gnome-python bindings.
      Compile fix for enum trust dom wrapper.
      Fixed incorrect comment.
      Some rearrangement of header files.
      Fixed dodgy arguments to PyArg_ParseTupleAndKeywords()
      Fixed compiler warning.
      Honour return value of to_struct() when converting to Samba structures.
      Convert open_pipe_creds() to use new cli_full_connection() interface.
      Check types of dictionary elements in to_struct()
      Use new version of open_pipe_creds() function.
      Use new version of open_pipe_creds() function.
      Use new version of open_pipe_creds() function.
      Use new version of open_pipe_creds() function.
      Use new version of open_pipe_creds() function.
      More automatically generated prototype madness.
      Use a fixed size font for displaying tdb values.
      Allow None to be used as a valid credential in open_policy.
      Allow None to be used as a valid credential for functions that take a
      Raise a ValueError if server names aren't given in UNC format.
      Raise a ValueError if server name isn't given in UNC format.
      Separate error handling for cli_full_connection() and cli_nt_session_open()
      Some fixes for enumerating domain groups and aliases:
      Hmm - you can do NT_STATUS_IS_OK on a WERROR and not get a compile warning/error.
      Added netshareenum command at level 1 and 2.
      When marshalling a netshareenum request the share ctr has to be initialised
      Added netshareenum cli command - the rpc structures here are really bizzare
      Spelling fixes.
      Cleaned up srvsvc constants a bit.
      Added netremotetod to try and figure out which srvsvc commands are denied
      Added some comments for NTLMSSP negotiation flags.
      Added netfileenum (sorry - no output though (-:) command.
      Resurrect the 'restrict anonymous' parameter but make it an integer.
      Return access denied for net_share_enum when restrict anonymous > 0
      Fixed crash bug in querydispinfo.
      The last element of the definitions of enums can't have a trailing
      Fixed bogus alignment in unmarshalling of SAMR_GET_DOM_PWINFO reply.
      Removed unused variable.
      Added cli_samr_get_dom_pwinfo() function.
      Added getdompwinfo function.
      Move restrict anonymous checks into a general function called
      Restrict anonymous checks for the SAMR pipe.  This is done by
      Removed unused function.
      Added tdb_delete_by_string() function.
      Fix long list scrolling bug.
      Fixed some formatting.
      Fixed compiler warning.
      Store the key for a name to sid cache entry in upper case rather than
      Store cache entry keys that have RID values in decimal to be
      Spelling fix.
      Fixed out of date comment for _spoolss_rffpcnex()
      Moved some notify related constants into srv_spoolss_nt.c since
      Fix compile error - doh!
      Removed eff_name field from cli_struct as it wasn't being used anywhere.
      Spelling fixes.
      Ignore winbindd_proto.h
      Spelling.
      Fixed typo in debug.
      Fixed typo in debug.
      Fixed compiler warning.
      Compile fix for new arguments to cli_full_connection()
      Added samr_open_domain() call.
      Renamed policy handle field in object containers to avoid cut&paste bugs.
      Got rid of unused flags field in lanman api_commands[].
      Changed level of "bind succeded on port %d" debug to 10.
      Fixed incorrect debug.
      Merge of constant renames from APPLIANCE_HEAD.
      Fixed incorrect debug.
      Remove C++ comments.
      Added -I option to rpcclient.
      Documented -I option to rpcclient.
      Merge of init_domain_list() fix from APPLIANCE_HEAD.
      Compile fix for flags field to cli_full_connection()
      Another compile fix.
      Usage fixes from APPLIANCE_HEAD.
      Regenerated.
      Use codepage 850 as a default for the dos character set.
      Fixed a compiler warning.
      Don't try and sys_dup2(dbf->fd) if dbf == NULL.
      Renamed all the new_cli_netlogon_* functions to cli_netlogon_*
      Name get and set dir drive functions consistently.
      Fix up dir drive call.
      Merge from APPLIANCE_HEAD.
      Sync with APPLIANCE_HEAD branch (whitespace, const only)
      Print out a friendly message on error instead of a python exception when
      Updated patch.
      Merge from APPLIANCE_HEAD:
      Skeleton for a libsmb python wrapper.
      A place to store common popt routines.
      Use common popt definition for -d option.
      Add lib/popt_common.o
      Added extern for popt_common_debug.
      Started to get samsync to insert account information in the passdb.  It's
      Our include popt is starting to get a bit old - fixed some compile
      Fixed for memory leak in connection caching code when a dc is
      Do AC_MSG_RESULT(yes) when using included popt.
      Reran configure.
      Some crash fixes for netshareenum returning zero shares.
      Fixed compiler warning.
      Merge of print notify fixes from APPLIANCE_HEAD.
      Broke out unpacking of a username/password stored in a Python
      Added connect, session_request, session_setup and tconx methods.
      Moved rpc client routines from libsmb back to rpc_client where they belong.
      Spelling fix.
      Compile fix for new cli_lsa_enum_trust_dom() argument list.
      Merge of incomplete rffpcnex testing code from APPLIANCE_HEAD.
      Merge of case fixes from APPLIANCE_HEAD.
      Merge some usage info from APPLIANCE_HEAD.
      Updated smbcontrol manpage for new printnotify commands.
      The unknown_0 field in a CREATE_USER2 reply is the access granted.
      Removed unused variable.
      Rename unknown_0 field in create_user2 reply in the actual struct.
      Rename unknown_0 field in create_user2 reply in the actual struct.
      The unused variable was actually needed.  The correct fix is to move
      Merge of netbios namecache code from APPLIANCE_HEAD.
      Return access granted in create_user2.
      Added comment about our implementation of the trans2
      Added README written by Jelmer - thanks!
      Spelling fixes.
      Fix compile warnings.
      More compile warnings.
      Put back in BDC support in set_server_role().  Tidied up debugs.
      Spelling fixes.
      Added some new delta types discovered by Ronnie from ethereal"
      Fix for change in cli_netlogon_sam_sync()
      Don't take the sizeof(struct in_addr) * -1
      Moved calculation of secure channel type into a new function.
      Cope with negative cache dns entries better.
      Pass the object name down to the enum_printers rpc.  By default this is the
      New arguments to cli_spoolss_enum_printers()
      Don't try to convert enumprinters name to a unc name.
      Implemented enum_domain_groups function.
      Fix typo in debug.
      Sync up namecache code with HEAD and APPLIANCE_HEAD.  Rerun unit tests.
      Some debugs for panic_action.
      Abstract out the functionality of gtdbtool into a dictionary browser
      Forgot to check in some of the libsmb stuff.
      Implemented some more client side spoolss functions:
      Implemented some more client side spoolss functions:
      Fix transposed args in open_pipe_creds() function.
      Added methods for getprinterdataex, setprinterdataex and enumprinterdataex.
      make proto
      Add a 'key' field to printer data dictionary.
      Return data from enumprinterdataex by deep copying on passed in tdb context.
      Return dictionary of printerdata in enumprinterdataex.
      Implement deleteprinterdataex
      Ignore *.pyc files.
      Rewrote to use gtkdictbrowser.
      A printerdata browser I whipped up in about 5 minutes.  (-:
      Added utility function to convert python strings to hex dump + ascii.
      Display printerdata values in hex.
      Change JOB_INFO_CTR to return a pointer to an array rather than array of pointers.
      Change JOB_INFO_CTR to return a pointer to an array rather than array of pointers.
      Implemented client function for deleteprinterdataex.
      Fix setprinterdata rpcclient command to use new cli_spoolss_setprinterdata
      Fixed enumjobs command to use new JOB_INFO_CTR structure.
      Convert to new REGISTRY_VALUE cli_spoolss routines.
      Conver cli_spoolss routines to use REGISTRY_VALUE and REGVAL_CTR code.  Nice one jerry!
      Quietened some debugs.
      Fix typo in comment.
      The new popt_common_debug code obviates the need to muck around with
      Roussed on Jeremy for not putting in enough debugs in the new print
      A netshareenum reply always contains an enum_hnd.  win2k returns zero
      Send any queued up print notify messages in exit_server() so they
      Delivery notify messages over the back channel in *reverse* order in
      cli_spoolss_enumprinterdrivers:
      Display debug data we are marshalling/unmarshalling a UNISTR in a
      level keys are inserted by conv routines.
      Decode list of dependent files in printer driver info3 and info6.
      Move printerdata dictionary object into it's own file.
      Initial version of printerdata_ex browsing.
      Update patch.
      Check no extra fields are present when parsing credentials.
      Remove todo comment.
      Return WERR_UNKNOWN_LEVEL for getprinterdriver level 6 as we don't
      Return WERR_UNKNOWN_LEVEL for unknown info levels.
      Formatting tidyup.
      Pass level keyword down to cli_spoolss_getform()
      Fix crash bugs in getprinter info level code (yay unit tests).
      Updated examples for new top level module layout.
      Change 'import spoolss' to 'from samba import spoolss'.
      Ignore *.pyc
      Bugfix merge:
      Put pid number in invalid request size debug.
      Fix imports for printerdata browser.
      Fix some dodgy stuff that accidentally was committed.
      Added char *, uid_t and gid_t types to generic conversion routines.
      Implemented getpw{nam,uid} functions.
      Spelling fix.
      Merge of cut&paste fix from appliance.
      Merge of winbind auth cleanups from appliance.
      Merge undone cleanups.
      Updated some comments in the NET_USER_INFO_3 structure for the other_sids
      Merge of 'other_sids' patch from appliance.
      Don't display debugs of the nt user token twice.
      Default to "python" for --with-python option.  This saves having to run
      Rerun autoconf.
      Added --with-ads option, defaults to yes.  If you run ./configure
      Rerun configure.
      Added --with-ldap (default=yes) option.  We should now be able to
      Fixed compiler error when HAVE_KRB5 not defined.
      Display the repr() of non-string dictionary values.
      Implement printerdata_ex as Python dictionary.  Read only at the moment.
      Moving to subdirectory.
      Fixed bug in keyword args for enumprinterdataex
      Bong!  The devmode could be NULL.  Don't crash if this is the case.
      Clean up python extensions in clean target.
      Remove hardcoded -I stuff.  Hooray!
      remove proto headers on realclean
      Don't uppercase the username and domain in a session setup.
      The security descriptor in a PRINTER_INFO_2 could be NULL. (Bong?)
      Tidyup of file specific access mask bits.
      Merge of file/directory access bits changes.
      Fix for new arguments of cli_nt_session_open()
      open_pipe_creds() now takes a pipe index instead of a pipe name.
      make proto
      Do a SMB_ASSERT() in cli_nt_session_open() when the pipe index is out
      Merge of SMB_ASSERT.
      Ignore python build directory.
      Ignore python build directory.
      When unmarshalling a relstr, don't unmarshall the string data if the
      Merge NULL relstr fix from HEAD.
      Added stubs for query/set security descriptors on files.  Not even close to
      Bugfix for pidfile_create() from Kelledin.
      Bugfix for pidfile_create() from Kelledin.
      Zero tallocated memory in decode_printer_info, decode_driver_info,
      Zero tallocated memory in decode_printer_info, decode_driver_info,
      Fix a silly memset typo.
      Fix a silly memset typo.
      Fixed DRIVER_INFO_3 conversion function to check for dependent_files
      Stricter validation in python->C conversion functions.
      level should be a uint32 in enum_ports function.
      Merge of validiation cleanups from head.
      Zero some more return values.
      More cleanups of validation functions.
      Merge.
      Whoops - this should be in py_smb.c
      Fixed up tconx function.  Implemented nt_create_andx, query_secdesc
      The libsmb module uses py_ntsec.o
      Fixed bug in session setup kwlist.
      Added close and unlink functions.
      Fix boog in argument list for nt_create_andx.
      Tidyup of some DCERPC pipe connection debugs.  The new LSA_DS stuff
      Tidyup of some DCERPC pipe connection debugs.  The new LSA_DS stuff
      Display pipe name in rpc bind failure debug.
      Display pipe name in rpc bind failure debug.
      Handle the case where the password used in RPC connections (for restrict
      Handle the case where the password used in RPC connections (for restrict
      Some winbindd cleanups I made trying to fix cr1020:
      Some winbindd cleanups I made trying to fix cr1020:
      Fix --set-auth-user command to delete entries from the secrets file when an
      Fix --set-auth-user command to delete entries from the secrets file when an
      Sync with HEAD.
      Fix mysterious error message when running 'make python_{ext,install}'
      Rerun autoconf.
      Remove DRIVERFILE constant.  It was removed with the old win95
      Merge of lp_talloc_free() call in init_domain_list() from APPLIANCE.
      Ignore profiles binary.
      Merge of get_dc_list() api change.  This was slightly more intrusive
      Merge of get_dc_list() api change from HEAD.
      Fix compiler warnings.
      Moved function to parse a list of unicode strings into util file.
      Added enumprinterkey function.
      Client side functions for enumprinterkey.
      For a BUFFER5, don't parse the buffer if the buffer length is zero.
      Call winbindd_param_init() earlier on in the piece so we don't get stuck in
      Sync up python stuff from HEAD.
      Remove lp_security() checks for winbindd as this is how we act as a PDC.
      Perform my janitorial duties.
      Don't set global_machine_password_needs_changing if
      Don't set global_machine_password_needs_changing if
      Sync with HEAD.
      Quieten status message when linking libsmbclient.so
      A cool idea from mbp: create a big shared library of all Samba objects
      A cool idea from mbp: create a big shared library of all Samba objects
      Added for the people who want to use Windows XP with plaintext
      Added for the people who want to use Windows XP with plaintext
      Renamed uuid_to_string() to guid_to_string() to avoid conflict with OSF DEC
      Bug fix from appliance - we must initialise the winbindd server state
      Merge from HEAD:
      Bug fix from appliance - we must initialise the winbindd server state
      Fix typo in docstring.
      Merge from HEAD:
      Merge from HEAD:
      Merge from appliance:
      Merge from appliance:
      Spelling fix.
      Ignore automatically generated Makefile.
      Sync docbook directory with HEAD.
      Fixed some globals that escaped the recent globalcide.
      Fixed some compiler warnings.
      Added some extra code to test absence/presence of LM and NT passwords.
      Here's a bit of a cleanup of the {configure,Makefile}.in files.  I've
      Rerun autoconf.
      Fix some argument checking bugs found by testsuite.
      Make lp_winbind_separator a const string.
      Merge of compiler warning fixes from HEAD.
      Merge of global_myname() fixes from HEAD.
      Merge of argument check fixes from HEAD.
      Merge from HEAD:
      Another global_myname() fix from HEAD.
      Merge from HEAD:
      Rerun autoconf.
      Fix up smbwrapper target.
      Rerun autoconf.
      Fixed silly bug.
      Ignore ntlm_auth binary.
      Merge a bunch of trivial changes from HEAD.  The difference remaining
      Fixes for EXEEXT - must use \$ signs when you want an actual $ sign to
      Defaulting python breaks the clean target it python isn't installed.
      Rerun autoconf.
      FUNCTION_MACRO change broke the Python modules.
      Remove FILE_MACRO as __FILE__ is ANSI C.
      Rerun configure.
      Merge from appliance, Revision 1.223.2.41:
      Merge from HEAD,  Revision 1.379:
      Merge from HEAD:
      Merge from HEAD:
      Some more tweaking for compilation of py_tdbpack.
      Merge of compile tweaks for python tdbpack module.
      Merge of #include <smb.h> removals.
      Guy Harris points out that the level and ptr fields in a
      Fix fnum leak under error condition in cacl_dump.
      Fixed bug in debug statement when tconX fails.
      Ignore python compiled files.
      Merge from HEAD:
      Merge some more FUNCTION_MACRO stuff.
      Merge from HEAD.  lp_winbind_separator() is now a const string.
      Merge from HEAD.
      Merge of comment about apparent spoolss_io_user_info weirdness.
      Whitespace syncup.
      Merge from HEAD:
      Merge of some kind of bugfix from idra.
      Merge from HEAD:
      Formatting syncup.
      Merge removal of unpopular winbind client environment variable.
      Some more profiles merges from HEAD (cvsignore and a stray const).
      Remove unused variable.
      'index' is the name of a libc function.  Rename to 'ndx' to avoid compiler
      Rename a local variable to avoid a warning.
      Display an error message when the server cannot be resolved when running at
      Removed pointless null statement in signal handler.
      Moved smbd process counting functions from smbd/server.c to smbd/process.c
      Remove dead function.
      Remove read_with_timeout() and replaced its only caller (the passwd chat
      Merge of remove "winbindd holding pattern" from appliance.  It's a bit
      Added a comment in case anyone is thinking of doing a SMB_ASSERT in winbindd.
      Remove wrapper function _get_trust_account_password() as it doesn't
      Added comment about a SMB_ASSERT()
      Removed level 0 DEBUG leftover from testing.
      Sync up compiler warning fixes.
      Remove debugging stmt.
      Merge of holding pattern stuff from HEAD.
      Remove unused variable in reply_spnego_ntlmssp_ok
      Let's clean up client side ntlmssp!
      Er, I think this is a better spelling.  (-:
      Deleted arguments to help output - they didn't work.
      Make the valstr and timeout return pointers optional so a caller can
      Keep the list of dead WINS servers in gencache.tdb instead of in
      Updated some comments.
      Merge: Make torture tools in everything target.
      Merge of wins server dead list into gencache.tdb
      Merge of kerberos changes to make this branch build again!
      Merge: remove dead function.
      Minor merges from HEAD.
      Sync with HEAD.
      Sync with HEAD.  The -L/usr/local/lib bit looks a bit dodgy though.
      Fixed typo.
      Fixed typo.
      Merge of max log file fixes from appliance:
      Merge of increment_smbd_process_count() fix from appliance.
      Quieten debug about gencache.tdb not being able to be opened.
      Return 0 instead of crashing when a NULL source string is passed
      Remove NULL buffer checks before rpcstr_pull() as they're now done
      Removed duplicate fn to avoid compiler warning.
      Pass down max_size parameter to init_samr_q_query_dispinfo() instead
      Pass down max_size parameter to cli_samr_query_dispinfo() instead of
      Use new interface for cli_samr_query_dispinfo().
      Move debug level message handling into debug.c from messages.c
      The REQ_DEBUGLEVEL message returns a string not a list of integers.
      Merge of REQ_DEBUGLEVEL messaging and debug_count fixes from HEAD.
      Merge of controversial 'max log size' fix.
      Sync of Heimdal kerberos stuff with HEAD.  If this breaks I'm blaming
      smb signing compile fix
      Sync with HEAD version.
      Merge of nicer error message for gencache open error from HEAD.
      Merge of smbcontrol debuglevel fixes from HEAD.
      Fix for trusted domains scan not working inspired by Ken Cross.
      Mop and bucket for trusted domain enumeration fix.
      Simplify some return values in gencache functions:
      Return a WERROR instead of a NTSTATUS like the rest of the srvsvc
      Add KRBCLIENT_OBJ to PYTHON_OBJ list.
      Added SRVSVC pipe support.  I've started implementing NetServerGetInfo()
      Cleanup of header files for python extensions.
      We don't use mkproto stuff for the python extensions anymore.
      Merge of cleanups and srvsvc implementation from HEAD.
      Merge some random looking setenv related kerberos stuff that makes
      Merge cleanups of return values.
      Merge NTSTATUS vs WERROR return for cli_srvsvc_net_srv_get_info()
      Merge typo fix.
      Fix for only specifying one command with -c
      Exit path cleanup for cli_samr_enum_dom_users()
      Added enumdomusers command.
      Fixed compiler warning.
      Fixed another compiler warning.
      Fix another compiler warning.
      Doesn't anyone run ./configure.developer anymore?
      Ignore errors on python_clean target.
      Ignore errors on python_clean target.
      Merge:
      Quieten compiler warning.
      Fixed up some const related compiler warnings.
      Fix breakage done by myself yesterday.
      Fix unused variable warning when ENCTYPE_ARCFOUR_HMAC is not defined.
      More const fixes and flow on fixes from yesterday's const-fest.
      Fix compiler warning.
      Merge: fix compiler warning.
      Merge: const fixes.
      Merge: const fixes.
      Merge: const fixes.
      Merge: add popt_common_version to command line options table.
      Merge: newline on debug message.
      Merge of python prototype header removal.
      Merge of exit path cleanup for EnumDomainUsers.
      Link wbinfo with popt_common.o
      Merge from appliance:
      Use PRINTER_ALL_ACCESS instead of MAXIMUM_ALLOWED_ACCESS in setprinter
      Remove obsolete file.
      Remove obsolete file.
      Fixed crash bug when calling tdb_unlockkeys() with no locked keys.
      Added chainlock, chainunlock, lock_bystring and unlock_bystring methods.
      Merge of some commentary for getprinter info levels supported by win2k+
      Merge of added locking functions from HEAD.
      Merge of tdb_unlockeys() crash fix.
      Some cosmetic changes to make the popt --usage output look nicer.
      Ignore .pyc files.
      Applied waider's patch to return DOS error codes for pipes that
      Call AC_MSG_ERROR if jw, perl or htmldoc is not installed rather than
      Run autoconf.  Shouldn't we have an autogen.sh here?
      Added a slightly modified version of Tridge's note about securing
      Fix building --with-smbwrapper.
      Start of a unit test for info3 caching.  Much unfrastructure required
      Added #ifdef'ed out implementation of auth_smbd python fn.  Uncomment
      Merge of #ifdef'ed out auth_smbd wrapper.
      Merge of popt help cleanups.
      Merge of enumdomusers rpcclient command.
      Merge of waider's rpcclient return type patch.
      Remove py_samba.c experiment - it didn't work.
      Add function prototype.
      Removed unused variable.
      Fix compiler warning.
      GCC 3.x has deprecated multi-line string constants.
      Cleanup bogus initialisation in SID_NAME_USE enum.
      Merge new .cvsignore files.
      Merge of removal of py_samba.c
      Merge of compiler warning fixups.
      Started working on python routines to add and delete domain users.
      distclean fixups from Paul Green.
      Break the current build dependency on perl.  Perl is required for
      Cleanup of winbind client side code.
      autoconf change to compile winbindd for AIX.  The client side code
      Placeholder for winbind aix client.
      Tidyup of winbindd client OS specific autoconf code.
      syncup with head
      This file deleted in HEAD.
      Whitespace syncup.
      Merge of winbind nss library cleanup from HEAD.
      Merge of Paul Green's make clean fixes.
      Forgot to merge configure.in changes for winbind client tidyup.
      Fix a compile warning in slprintf format string.
      Abort configure if --with-ads and --without-ldap.
      Fixed compiler warning.
      Removed unused variables.
      Updated warning messages for when configure.in is updated.
      Fix compiler warning - cli_lsa_query_info_policy actually returns the
      SAMR lookupdomain rpc client patches from amber palekar <amber at nu3.net>
      Added description for lookupdomain SAMR function.
      Remove duplicate "tallocdump" message from tdb messaging system.  The
      privilaged -> privileged
      Create a pidfile, even when running in interactive mode.
      Added some preprocessor tricks to stop TRUE and FALSE from continually
      Winbind client for AIX.  Written by Steve Roylance.
      Autoconfiscate the name of the winbind shared library file.  Under
      Install libsmbclient.h from $(srcdir)
      Install libsmbclient.h from $(srcdir)
      Rewrite of smbcontrol - it was a bit of a mess.  It should now be much
      poptify smbcontrol
      Ignore testtmp directory.
      Tests for smbcontrol.
      Can I suggest this modification to the documentation Makefile?  If
      Fixes to linker flags for AIX winbind client from Stephen Roylance.
      A new RPC pipe!  The \pipe\echo named pipe is for testing large RPC
      Merge of Simo's strncat -> StrnCpy fix.
      Copy across new tests from HEAD.
      Merge removal of some unused functions.  Commit mistakenly included with
      Syncup stf directory with HEAD.
      Remove duplicate forward reference of smb_ldap_privates.
      Merge a bunch of updates from HEAD:
      Merge a bunch of updates from HEAD:
      Merge create/delete domain user samr calls from HEAD.
      Merge of samr lookup domain rpc client call from HEAD.
      Merge of TRUE/FALSE preprocessor traps from HEAD.
      Multi-line string constants have been deprecated in newer versions of gcc.
      Merge of tdbtool multi-line string fix.
      Merge of rpcecho pipe for testing large dcerpc requests and responses.
      Syncup with version of config.guess from HEAD.
      Remove outdated file.
      New file from HEAD.
      Missing file from HEAD.
      Merge of doxygen updates from HEAD.
      Whoops - missed some tdb message registrations from a previous merge.
      Fix a compiler warning.
      Merge of new sid type (SID_NAME_COMPUTER) and tidyup.
      Whitespace syncup.
      Merge new popt_common.h include file.
      Syncup popt changes with HEAD.
      Merge Jelmer's popt updates from HEAD.
      Merge Jelmer's popt updates from HEAD.
      Whitespace syncup.
      Comment syncup.
      Syncup new HEAD version.
      Array size fixup for construct_nt_devicemode() from HEAD.
      Merge: remove tallocdump messages.
      Merge:
      Merge:
      Merge:
      Merge rewrite of smbcontrol.
      Merge of bugfix for cli_lsa_query_info_policy() usage.
      Merge of Jelmer's usage updates for net.
      Merge:
      Merge:
      Merge:
      Merge cliconnect.c so smbtree builds.
      Fixed incorrect argument to debug.
      Removed unused variables.
      Add PAC_DATA as valid return type for make proto.
      decode_pac_data() needs a talloc ctx as an argument.
      Removed unused variable.
      Remove unused variables.
      Merge: incorrect arg to debug.
      Merge: remove unused variable.
      Merge: add PAC_DATA as valid return type.
      Merge: remove unused variables.
      Fix broken regexp in cvsignore for *.po{,32} files.
      Update check-programs target.
      Ignore check programs.
      Ignore check programs.
      Fix broken regexp in cvsignore for *.po{,32} files.
      Updates to compile correctly with --with-included-popt
      A struct must contain at least one declaration according to C99, but
      Merge:
      Use picobjs when building python extensions.  Spotted by Steve Langasek.
      Add string message for WERR_SERVER_UNAVAILABLE.
      Typo in comment.
      Merge of python extension picobj fix.
      Merge of server unavailable error string.
      Merge of comment typo.
      Patch from waider to set exit code of last executed command specified
      When calling cli_samr_enum_{dom,als}_groups in a while loop, the
      Minor cleanup of enum domain groups/aliases:
      Merge:
      Minor cleanup of enum domain groups/aliases:
      Missed another condition on a while loop.
      Merge of missed another while condition when enumerating aliases.
      Return NT_STATUS_UNSUCCESSFUL if the sourcedata and echodata rpcs
      Merge from HEAD:
      Merge of const fixes from HEAD.
      Merge stf updates from HEAD.
      Merge of a debuglevel downgrade from HEAD.
      Ignore t_snprintf binary.
      Merge: we need a rule for t_snprintf
      Two character tabs - I don't think so.
      Whitespace syncup.
      Merge:
      Fix compiler warning.
      Fix compiler warning.
      Replace workgroup global variable with lp_workgroup()
      Merge of -W fixes for bug #39:
      Perform lp_load() before popt to fix -W option.
      Merge:
      Added missing documentation for 'max reported print jobs' parameter.
      Fleshed out the description of restrict anonymous parameter.
      Apparently we do support RA=2.
      AIX doesn't append $SHLIB_EXT to NSS libraries.
      AIX doesn't append $SHLIB_EXT to NSS libraries.
      Fix some compiler warnings.
      Fixed typo introduced in reverted patch from version 1.12.4.5
      Fixed typo introduced when reverting patch from revision 1.19
      A good reason to use make variables instead of autoconf substitutions
      Merge of backslash @LDAP_LIBS@ fix from HEAD.
      Fix for bug #60.  Our autoconf code adds both libraries and linker
      Add a new entry to make check.  If we have compiled python extensions,
      There appears to be no reason why we have to execute the
      Whoops - that wasn't a whitespace syncup after all.
      Another attempt at undoing my bogus patch 1.55.2.19
      Added some more diagnostic tests to check out a theory that having either hash
      Fix two bugs that were stopping net rpc vampire from working over secure
      Re-enable secure channel for net rpc vampire.
      Sync up with 3.0 version.
      Add pythoncheck to make check target.
      spelling
      spelling
      spelling
      spelling
      Fix pointer return bug in get_unix_attributes()
      Fix pointer return bug in get_unix_attributes()
      Move some #ifdefs and function prototypes around to avoid a compiler
      Move some #ifdefs and function prototypes around to avoid a compiler
      Removed (incorrect) emacs mode setting.  Use emacs' built in autoconf
      Merge of incorrect emacs mode fix.
      Merge get_global_sam_name() from 3.0 to fix compile breakage.
      Clarify a comment: The secure channel connection must be opened on the
      Merge: clarify secure channel connection comment.
      Updates for AIX winbind client from Stephen Roylance.
      Updates for AIX winbind client from Stephen Roylance.
      We don't support level 0 and do support level 5 for the enumprinters command.
      head(1) portability patch from Guenther Deschner.
      Merge of head(1) portability patch.
      Bug 83: fixes for building when $srcdir != $builddir from David Lee
      Ignore *.po files.
      Spelling.
      This fixes net rpc vampire when talking to win2k (<sp3).  win2k sends
      Ignore autogenerated file.
      Ignore t_stringoverflow binary.
      Merge of fix for bug #60.
      Formatting syncup.
      Added file from SAMBA_3_0 branch.
      Merge from SAMBA_3_0: initialise return value in run_tcon_devtype_test()
      Merge: ignore autogenerated file.
      Comment syncup.
      Whitespace syncup.
      Merge: add DFS error constant.
      Jelmer was really excited about copyrights this year.
      Sync up sid types enum.
      Merge from 3.0: Fix set_local_machine_name() for both *SMBSERVER and
      Added string error for NT_STATUS_NOT_A_REPARSE_POINT error.
      Merge from 3.0: quieten debug message for trust acct password change.
      Merge from 3.0: remove bogus static initialisers.
      Merge the remaining bits of fix for bug #60.
      Merge of secchan fix from 3.0 that was eaten by CVS yesterday.  I think
      Whoops - tried to merge to wrong branch for bug #60 merge.  This redos
      This should be the correct fix for merge of bug #60 from 3.0.
      Fix extra arg for cm_get_netlogon_cli()
      More fixes for builddir != srcdir.
      Fix shadow parameter warning in free_empty_sys_acl()
      Fix shadow parameter warning in free_empty_sys_acl()
      Fix printf warnings in debug statments.
      I'm pretty sure these uint32's should be uid_t's.  Can the passdb guys
      Fixed unused variable warning.
      Fix unused variable warning.
      Squash another compiler warning.
      Squash another compiler warning.
      Merge of uint32/uid_t mismatch from 3.0
      Merge from 3.0:
      Merge of pull_ascii() and pull_ucs2() termination fixes from 3.0
      Merge of formatting fixups from 3.0
      Merge of rpcstr_pull() termination fixes from 3.0
      Whitespace syncup.
      Merge of cut and paste fix from 3.0
      Merge of non-static initialisation fixes from 3.0
      Syncup with HEAD:
      Spelling.
      The constants for NetBIOS domain and server names in a NTLMSSP name list were
      Merge of NTLMSSP name type fix from 3.0
      DNS domain/server name constants were also swapped.
      Delete outdated file.
      Fix shadow variable warning.
      Rename some uuid functions so as not to conflict with system
      Fix some compiler warnings.
      Build libnss_wins.so as part of nsswitch target.  Fix for bug #160
      Update nsstest to cope with wins NSS module as well as winbind NSS
      Quieten debug message.
      Quieten another debug message.
      Make net rpc vampire return an error if the sam sync RPC returns an error.
      Back out some of the changes to nsstest.  I've kept the NULL pointer
      The default action for AC_CHECK_LIB is to add the library to $LIBS so
      Repair indentation in autoconf Kerberos detection code.  This should
      Produce an error if Active Directory support is requested and we don't
      Change AC_MSG_ERROR() in krb5.h detection code to AC_MSG_WARN()
      More sensible behaviour for bug 152.  If we don't have krb5.h and were explicitly
      More tuning of Kerberos detection - don't fall through to detect kerberos libs
      Don't trash the values of CFLAGS and LIBS while engaged in Kerberos
      Only append to KRB5_LIBS when doing AC_CHECK_LIB for libkrb5.
      Metze assures me that this will fix Heimdal et al.
      Fix shadow variable warnings.
      Fix more shadow variable warnings.
      Yet more shadow variable warnings.
      #ifdef out apparently unused function.
      Uppercase first letter of debug level 0 statements.
      Update my email address.
      Suggest the user runs kinit if smbclient -k returns NT_STATUS_MORE_PROCESSING_REQUIRED.
      Fix poptOption definition for --no-pass and --kerberos options.  The 'value'
      The default_realm parameter needs to be set in a minimal krb5.conf.
      Fix bug in doxygen comments for ads search functions.
      Implemented 'net ads printer search' which searches the directory for
      Some fixes for ads printer publish:
      Display libraries detected by configure but before configure
      Call the synchronous version of the ldap delete function otherwise we end up
      Spelling.
      Initialise the uid and gid values to a safe default in make_server_info()
      Fix shadow parameter warning.
      Ignore *.po
      Fix for bug 203.  Avoid using an autoconf expanded variable preceeded by a backslash
      Fix references to plain password registry files pointing at an old
      Remove references to obsolete codepage binaries, codepages and unicode
      Ignore autogenerated files.
      Fix yet another place where we store a Samba version number.  )-:
      Undo 'Fix compiler warning'.  It didn't work because the value of inbuf changes so
      Delete obsolete comment.
      Don't bomb out when trying to unmarshall a zero length printerdata value.
      Fix from Dragan Krnic for handling files in tar archives > 8GB.
      Spelling.
      Don't use pstrcpy on non-pstrings.
      Fix for bug 222 from Marcin Owsiany.
      Uninstall modules as part of uninstall.  Partial fix for 236.
      Fix spelling typo.
      Metze's AD/LDAP detection patches mainly to do with library detection.
      Use lp_idmap_[ug]id() instead of lp_winbind_[ug]id()
      Replace the eight (!) copies of dummy become/unbecome root with a single one.
      Use %p for a pointer type in a printf-style format string.  Also casting
      Fixup a bunch of printf-style functions and debugs to use unsigned long when
      Another round of uid/gid/pid format string changes I missed the
      Fix two memory leaks in the smb module:
      A fix for bug 174.  I'm pushing this to the tree to test it on one of
      Typo in comment.
      Move a function to avoid a warning.
      Fix out of date comment.
      Ensure a prototype is generated for smb_snprintf()
      Some more [ug]id_t printf fixes.
      More printf fixes - size_t is long on some architectures.
      Jean-Baptiste Marchand on the ethereal list used some auditing tricks to
      Make wbinfo -p work again.  Fixes bug 251.
      More printf portability fixes.  Got caught out by some gcc'isms last
      Add debug output api's from lsa/spoolss modules to smb module.  Patch
      Memory leak fixes from Brett A. Funderburg - don't use the connection talloc
      More memory leak fixes from Brett!  It turns out PyDict_SetItemString
      Typo fix for bug 258.
      Turn on automatic winbindd support for FreeBSD and see what the compile farm
      Whoops - this is probably better shell syntax.
      Fix memory leak in py_smb_set_setdesc()
      More patches from Brett:
      Memory leak fix for create_rpc_bind_req()
      Fix unused variable warning.
      Spelling.
      Fix for bug 269.  Change wbinfo and ntlm_auth to convert domain, username
      Fix syntax error!
      Don't print out error in ads_do_search_retry() when it suceeds.
      Follow on from herb's patch for 1.300.2.145 - define SYSV for solaris to fix
      Undo SYSV define for Solaris.  Things are more complicated than they
      Update last scan time in rescan_trusted_domains().
      Print an error instead of crashing if no argument is specified for
      Add log2pcap to everything target.
      Fix some compiler warnings.
      We don't need to #include memory.h here.  It's a BSD'ism and just includes
      Fix bug 342.  Short version of --add now -a instead of -A.
      Fix for bug 261.  Create a configure #define for FreeBSD and a check in
      Fix typo, right branch this time.
      Produce an error if --with-pam is specified but no PAM headers can be
      Quieten level 0 debug when probing for modules.  We shouldn't display so loud
      Produce an error if --with-pam_smbpass is specified and we can't
      More FreeBSD PAM compile fixes.  Don't redefine PAM_AUTHTOK_RECOVER_ERR
      Removed {OLD,NEW}_NTDOMAIN cruft from mkproto.awk
      Return 0 DFS links instead of -1 when dfs support is not enabled.
      Move $(KRBCLIENT_OBJ) to libnss_wins PICOBJ variable so it is converted to
      Fix for bug #73.  Name types can be specified using name#type notation.
      Fix for bug 282 that didn't get checked in.
      Removed text about --with-msdfs configure option which no longer exists.
      Remove another reference to --with-msdfs.  Put back accidentally
      When enumerating dfs shares loop from 0 to lp_numservices() instead of
      Reformat debug.
      Fix for bug #334.  We don't unmarshall the trusted domain or secrets
      Rename FOOLIBS to FOO_LIBS to be consistent with the rest of the
      Fix for bug #299.
      Set PICFLAG="-fPIC" for gcc under HPUX.
      Removed accidentally re-added file.
      Remove autogenerated file.
      Remove another dead file.
      Remove tags file for distclean.
      Remove tags file for distclean.
      Formatting fixups for help output.
      Use opt_target_workgroup instead of lp_workgroup() in vampire code so
      Fix error return path memory leaks in vampire code for creating users.
      Fix error message when calling namedtogid() fails adding a group map
      Merge from samba-3.0:
      Merge from samba-3.0:
      Merge from samba-3.0:
      Merge from samba-3.0:
      Fix another crash bug in samsync.
      For some reason testparm runs at debug level 2 which causes the module probe functions to
      Merge from Samba 3.0:
      Merge from Samba 3.0:
      Merge from Samba 3.0:
      Merge from Samba 3.0:
      I think this is a bugfix that somehow was dropped from the 3.0 tree.
      Merge from Samba 3.0:
      This ldap_value_free() looks like it was part of Jeremy's recent rampage
      Merge from Samba 3.0:
      Merge from Samba 3.0:
      Merge from Samba 3.0:
      Merge from Samba 3.0:
      Merge from Samba 3.0:
      Merge from Samba 3.0:
      Merge from Samba 3.0:
      Remove quotes in smb.conf ldap example - the quotes actually turn
      Fixed typo in debug.
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Applied Steve Langasek's patch for bug #450.
      Change error message displayed when --without-libiconv is used as
      Quieten a compiler warning.
      The -P option to smbclient no longer works - update all smbprint scripts to
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Put in some DEBUGs for swat language selection.  Part of bug 456.
      Applied Monyo's patch for bug #412 which allows \n characters to
      Fix bug #456 for 3.0.0 release.
      Install message translation files for swat.
      Another round of merges from 3.0:
      Another round of merges from 3.0:
      Another round of merges from 3.0:
      Allow d_printf() to handle strings with escaped quotation marks since the
      Change title of SWAT globals page from 'Global Variables' to 'Global
      Removed japanese swat icons at the request of Monyo.  More work on
      More bug #413.  Fix bad html table row termination in SWAT wizard code found by
      Change AC_CHECK_LIB_EXT to prepend libraries instead of append.  This
      Fix broken wins hook functionality.  A i18n fixe caused the name type
      Apply some NULL pointer paranoia to previous wins hook fix.
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Remove Japanese swat image files.
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Portability fix from Joachim Schmitz.  Closes bug #546.
      Explicitly initialise the value of AR for vendor makes that don't do
      Moving towards better i18n support in SWAT.  This commit contains a
      Add script to generate msg files from SWAT sources.
      Fix spelling mistake.
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Updated welcome file from Monyo.
      Undo previous commit because it breaks the build.
      Ignore autogenerated tdbsam2_parse_info.h
      Use @PICSUFFIX@ instead of .po in Makefile.in since we have gone to
      Use @PICSUFFIX@ instead of .po in Makefile.in since we have gone to
      Set errno = ENOSYS if mmap not supported.
      Set errno = ENOSYS if mmap not supported.
      Delete unused label to fix compiler warning.
      Break out of samsync loop on error.
      Enclose usage of st_blksize and st_blocks struct stat members in
      Enclose usage of st_blksize and st_blocks struct stat members in
      Delete unused label to fix compiler warning.
      Build fix for wrepld.  From MORIYAMA Masayuki.
      Add configure test for krb5_keytab_entry keyblock vs key member.  Bug #636.
      If we have blacklisted mmap() try to avoid using it accidentally by
      Merge of spelling fix from HEAD.
      Merge of wrepld link fix.
      Merge of krb5_keytab entry key vs keyblock member check from HEAD.
      Merge of mmap blacklist fix from HEAD.
      Merge of another fix from Monyo.
      Add some debugs in the error paths for tdb_brlock() to help track down
      Remove trailing comma on typedef enum.  albert chin (china at thewrittenword.com)
      Remove trailing comma on typedef enum.  albert chin (china at thewrittenword.com)
      Implement raw SMBtrans by backending the SMBtrans2 send code.  Receive is
      Add data structures for initial dcerpc support.
      Initial version of raw dcerpc client support.
      Cli level code for initial dcerpc client support.
      Add raw and cli dcerpc code to LIBRAW_OBJ and LIBSMB_OBJ, respectively.
      A fix for making transfer syntax a pointer instead of an array of pointers
      Add RPC-OPEN test as an example for using the new dcerpc client code.
      Compile fix for tdbbackup when Samba needs to override non-C99
      Merge of some fixes from 3.0:
      Merge from 3.0: Sync up comments.
      Sync up formatting of the va list stuff - the HEAD version was nicer.
      Sync up some indentation.
      Sync up with 3.0
      Merge from 3.0:
      Fix some unused variable warnings.
      Merge from 3.0:
      Fix spelling mistake.
      Fix another unused warning.
      Formatting syncup with 3.0
      Whitespace syncup with 3.0
      Merge from 3.0:
      Re-order link command for smbd, rpcclient and smbpasswd to ensure $LDFLAGS
      Whoops - missed a place where HAVE_STAT_ST_{BLOCKS,BLOCKSIZE} guards
      Merge of fix for bug 661 from 3.0
      Cast to fix warning on Solaris sendfile - check buildfarm output
      Add prototype for smbc_remove_unused_server() to fix compiler warning.
      Use putenv() instead of setenv() in the winbind_{off,on}() functions.  Some
      Fix duplicate libs problem in iconv detection code.
      Tidy up calls to uname so as not to produce output on stderr if
      Printf fixes for 64-bit size_t.
      Fix some uninitialised variable warnings.
      Fix more 64-bit printf warnings.
      Use a static string instead of malloced one in winbind_{off,on}() utility
      Fix missing bracket in quota quote - my fault.
      Generate 64-bit clean printf's for build options.
      Fix typo in debug statement.
      Use the actual size of the buffer in strftime instead of a made up value
      Add ldaplibs to pdbedit link line.  Fixes bug #651.
      Fix crash bug in smbclient completion.  Closes bug #659.
      Patch from James Henstridge to allow rpcclient adddriver command to specify
      Merge from 3.0:
      Merge from 3.0:
      Merge of uname cleanups from 3.0
      Merge from 3.0:
      Merge from 3.0:
      Merge from 3.0:
      Merge of setenv->putenv for winbind client.
      Merge of some compiler warning fixes.
      Merge from 3.0:
      Merge of 64-bit printf warning fixes.
      Undo last commit to get things building again.
      Ignore tallocdump binary.
      Undo accidentally committed stuff.
      Ignore tallocdump binary.  Previous commit was printf warning fixes and an
      Final round of printf warnings fixes for the moment.
      Add vendor name to rpm preamble.
      Set vendor string.
      Set vendor name.
      Fix bug in generation of function ndr_pull code generation.  This patch
      Skeleton IDL for SPOOLSS pipe.  For this inital version, only OpenPrinterEx
      Added IDL for EnumPrinters and ClosePrinter.
      Added tests for EnumPrinters and ClosePrinter.
      Added push/pull routines for uint8_buf IDL type used for spoolss buffers,
      Commit autogenerated code for EnumPrinters and ClosePrinter.
      Initial version of printer info 1 for tridge.
      Working on EnumPrinterData.  There appears to be an alignment problem
      Added ATSVC pipe.
      Add initial work on eventlog - doesn't quite work yet.
      More work on eventlog - still doesn't work.  (-:
      Start of winreg idl.  Implement OpenHKLM, GetVersion and CloseKey.
      Implement DeleteKey, DeleteValue, FlushKey.
      Convert all NTSTATUS return codes to WERROR.
      Strings in the winreg pipe are terminated.
      String termination fix.
      Call enumkey for tridge.
      Actually call right function name.
      Add a strlen_m_term() function for returning the length of a string
      Check NT_STATUS code from dcerpc call function before checking the
      Removed unused variable.
      Modify WINREG test program to recursively enumerate keys in all known
      Spoolss functions return WERROR not NTSTATUS.
      Add bind nak to dcerpc_payload.
      Implemented EnumForms and GetForm.
      Correct freebsd 5.1 support for winbind contributed by Aaron Collins.
      Implemented AddForm RPC.  The mystery of the useless_ptr has been
      Add DeleteForm, start cleaning up tests.
      Implemented SetForm RPC.
      Added EnumJobs, GetJob, SetJob RPCs.
      Fix bug in EnumPrinterData test.
      Add SetPrinterData, DeletePrinterData.
      GetPrinterDataEx, SetPrinterDataEx, DeletePrinterDataEx.
      Added EnumPrinterDriver, GetPrinterDriver (still in progress)
      Hide gcc error message if using a compiler that can't precompile headers.
      Updated some of the function names in the IDL.
      Change PICFLAG -> PICFLAGS to keep in line with version from source
      Fix comment.
      Added routines for arrays of uint16s.
      Got winreg_EnumValue working - what a mess!
      Small cleanup of test code.  Rename enum indexes to be the same name
      Delete old python bindings.
      Fix typo.
      Remove Makefile targets for old python extensions.
      Autodetect service_type in cli_tree_full_connection() if the caller
      Fix typo in RW2 torture test.  Closes bugzilla bug #924.
      Fix for bug 905.  Remove POBAD_CC as it doesn't seem to be applicable
      Merge of POBAD_CC removal from 3.0
      Don't log an error in tdb_brlock() if a non-blocking lock returns EAGAIN -
      Merge from 3.0:
      Include sys/acl.h in check for broken nisplus include files.  Bug #1025.
      Merge from 3.0:
      Replaced .po with . at PICSUFFIX@
      Replace .po with . at PICSUFFIX@
      Convert libcli routines to use cli_tree instead of cli_state. Port
      Apply James' printf format checking patch for SGI MIPSPro compiler.
      Apply James' printf format checking patch for SGI MIPSPro compiler.
      Convert libcli routines to return NTSTATUS instead of BOOL.  Again, the
      Move around function to fix build after recent static rampage.
      Applied James Peach's stack backtrace patch for IRIX.
      AIX has already has a function called msleep().  Bugzilla #1098.
      printf -> d_printf
      printf -> d_printf
      The file descriptor argument to cli_getattrE() is a fnum not a fd.
      Fix for writable printerdata problem - bugzilla #1112.
      Fix for writable printerdata problem - bugzilla #1112.
      Fix bugzilla #1144 where running configure --with-fhs=anything would
      tdbdump doesn't need to #include <sys/mman.h>
      Merge from HEAD.
      Enclose use of fchown() with guards.  Bugzilla #1155.
      Merge from HEAD.
      Fix typo.
      Fix typo.
      Use possessive in message asking for user's password.
      Merge from 3.0
      Path for bugzilla #1152 from Timur Bakeyev.  Allow python modules to
      This is the start of a C API to the DCERPC client routines.  Currently
      r384: Relicense tdb python module in trunk and 3.0 branch as LGPL since the
      r421: Fix debug message.  Closes bugzilla #1305.
      r422: Compile fix for OpenBSD (ENOTSUP not supported - ha ha).
      r1599: Use -Bsymbolic when creating shared libraries to avoid conflicts with
      r1908: Bugzilla #1541.  Fix recursive ls in smbclient.  Fix by Josef Zlomek.
      r2006: Fix bug 1653 discovered by Luke Mewburn.  The script code to generate the
      r2007: Fix typo in Jeremy's copyright.  From the output of cvs annotate a year
      r2198: Correct fix for #1360.  Need to use -Wl when passing flags to the linker.
      r2245: Typo fix from trunk.
      r2246: Some good fixes for HPUX from JBravo on #samba-technical:
      r2248: Merge of tridge's PRINTF_ATTRIBUTE fixes from samba4.
      r2263: When testing whether building shared libraries actually works, use
      r2264: Fix for #1741.  Define a struct nss_groupsbymem (thanks lukeh!) for
      r2334: Update LDSHFLAGS for HPUX as -Wl is not necessary as we are invoking LD
      r2338: Remove lonely looking definition of DYNEXP for HPUX in the configure
      r2364: Include yp_prot.h before ypclnt.h as AIX 5.2 spits the dummy otherwise.
      r2453: I think this is the last lot of fixes to get shared libraries working on
      r2736: Fix bug in Python printerdata wraper found by Daniel Jarboe.
      r2759: Fix for winbindd on AIX 5.1.  Apparently it doesn't have as many methods
      r2760: Another patch from The Written Word.  Don't declare function prototypes
      r2822: Fix parameter confusion in priming of name-to-sid cache.  Found by
      r2823: Patch from Brett Funderburg to pass create options parameter to
      r2828: Fix for bugzilla #1864 from Brett again.
      r2834: Netapps can return NT_STATUS_ACCESS_DENIED when trying to return the
      r2835: Since we always have -I. and -I$(srcdir) in CFLAGS, we can get rid of
      r2894: Certain versions of GNU ld the default is not to have the
      r2899: Change some #if DEBUG_PASSWORD's to #ifdef DEBUG_PASSWORD.
      r2924: Another #if that should be an #ifdef.
      r3228: Fix for bugzilla #1884 from Brett Funderburg.  Use the value of
      r3504: Fix incorrectly applied patch.  My fault - sorry!
      r3928: Fix duplicate call to pdb_get_acct_desc().  Bugzilla #2080.
      r4259: Fix cast in SMB_XMALLOC_ARRAY.  Bugzilla #2168.
      r4260: Change the license for the winbindd external interface more liberal.
      r4268: Merge fix for bugzilla #2150.
      r4270: Add some const as a fix for bugzilla #2135.
      r4273: Same fix for r4272 in SAMBA_3_0 branch.
      r5111: Fix up changed prototype for setsampwent pdb function.
      r5112: Fix for shared object creation in examples.  Bugzilla #2058.
      r5246: We can't use a pointer to struct lsa_info until is has been
      r5283: Merge -r5279 and-r5280 from trunk.
      r5612: Add -Wdeclaration-after-statement to CFLAGS for --enable-developer.
      r5645: Add an autoconf test for -Wdeclaration-after-statement so we don't add it
      r5786: Bugzilla #2443.  Fix gcc4 compile found by Mark Loeser.
      r5909: Remove some unecessary casts.  Patch from Jason Mader for bugzill #2468.
      r5916: Only one C++ guard is necessary, not one around each smbc function.
      r6175: Fix crash bug and compiler warnings in strchr_m() test.  Bugzilla #2565.
      r6176: Fix a possibly uninitialised variable warning.
      r6407: Fix for bugzilla 2623 and 2630: $< and $* are not valid in explicit
      r6408: Fix compile error lurking where PATH_MAX is not defined.  Bugzilla #2560.
      r6411: Remove configure check for FTRUNCATE_NEEDS_ROOT as it's not actually
      r6412: Add fflush(stdout) after displaying username prompt in smbsh if
      r6739: Fix for segfault in samba.winbind.auth_crap module found by Ed Plese.
      r6769: Fix bugzilla #2538 and #2527.  Unused variables found by Jason Mader.
      r7788: Update install swat message to reflect the fact that swat/README
      r8572: Remove crufty #define NO_SYSLOG as it's not used at all anymore.
      r8573: Fix set but not used warning in srvsvc server-side code.
      r8592: I'm pretty sure this should be != instead of =!.  Bugzilla #2893.
      r8595: Delete unused prototypes.
      r8596: Don't wrap non-existent functions.  Bugzilla #2895.
      r8597: Use UNI_STR_TERMINATE (an enum value) instead of STR_TERMINATE (a
      r8894: Fix a warning.  Bugzilla #2939.
      r8935: Fix signed/unsigned comparison warning.  Bugzilla #2943.
      r8941: Fix unused variable warning.  Bugzilla #2940.
      r8946: Some casts to fix warnings when time_t is an unsigned type.  Fixes
      r8949: Fix incorrect SHLIBEXT is set when running configure script on HPUX IA
      r9272: Patch for fixing unused variables warning from Jason Mader.  Fixes
      r9275: Remove some dead code.  Bugzilla #2982.
      r9276: Fix another unused variable warning.  Bugzilla #2981.
      r9277: Another unused variable.  Bugzilla #2985.
      r9278: Remove unused variable.  Bugzilla #2983.
      r11729: Remove space from DYNEXP flags declaration for HPUX.  Fixes bugzilla
      r12802: Fix for bugzilla #3389 from William Jojo.  This fixes failures on AIX in
      r13363: Honour the $(DESTDIR) Makefile variable when installing Python
      r13612: #define NO_SYSLOG is dead as a doornail.
      r13648: Duh.
      r13705: Fix a typo (and janitor for myself).
      r13706: Fix typo in typo fix.  (-:
      r15255: Add return statement after abort to placate fussy compilers.  Closes #3721.
      r15289: Put references to $PICFLAGS in quotes.  Fixes #3725.
      r210: More work on DCERPC client functions:
      r354: Tridge convinced me that writing some wrapper functions by hand was a
      r355: Fix a bunch of compiler warnings in the registry code.
      r356: Start of auto-generated client functions.  Tridge can you take a look
      r382: More C++ friendliness fixes.
      r383: Scripting extensions using swig.  This commit includes only a (LGPL)
      r550: Remove clientfns.pm module - it was a bad idea.
      r589: Fix IDL dump module so --dump and --diff options to pidl.pl work
      r597: Start generating parser code - only supports uint16, uint32 and policy
      r600: Get rid of trailing whitespace which freaks out emacs' fontification.
      r602: Autogenerated packet-dcerpc-samr.c now compiles!
      r604: Better dumping of in,out,ref properties.
      r617: Sync some minor updates with repository:
      r744: A bunch of minor fixes.  The ethereal pidl parser now dissects simple
      r746: Add entry in proto tree when we don't handle an IDL type.
      r750: Rename global $name -> $module.
      r753: Big reorganisation of everything - also fixes handling of dissectors
      r756: Handle default element in union.
      r757: Handle empty union arms (ala rid only entries in netlogon).
      r759: Fix some perl warnings.
      r806: Checkin of workarea - tridge gave me some good ideas today for a better
      r948: Tridge suggested that the best way to write the ethereal parser is to
      r953: Remove unused Pull and Print parse functions.  Remove Push from
      r954: Start working on typedef parsing.
      r985: Add stub function for dumping enums to prevent perl warnings in eparser.
      r986: Attempt #3 at eparser.  This time use the 'pull' code as a base as it's
      r987: Start replacing ndr_* functions with e_ndr_* and removing stuff related
      r1002: Add helper files for eparser output.
      r1003: Removed e_ndr stuff - too verbose.
      r1026: Spelling.
      r1045: Wow - we actually compile (but not link) the autogenerated parser from
      r1047: Now samr eparser compiles, links and doesn't crash ethereal.
      r1052: Remove autogenerated file.
      r1053: Make tdb build standalone:
      r1054: Build extra binaries in bin directory like ldb does.
      r1055: Standalone build fixes for ldb:
      r1083: Generate prototypes for structs and unions marked "public" in the idl.
      r1099: Set $module variable to name of module.
      r1100: Comment out functions that we now get from other sources (misc.idl and
      r1152: Checkin of workarea.  The parser can now dissect a big chunk of the samr
      r1153: We can now dissect security descriptors.
      r1158: Fix bug in dissection of array count.  Arrays mostly work now with the
      r1159: Implement functions to dissect 64-bit values (nttime, hyper_t, int64,
      r1160: Some minor cosmetic fixes to make the generated code look nicer.
      r1162: Give each struct it's own subtree in the ethereal gui.  Much more
      r1164: Whoops - remove debugging printfs and Data::Dumper reference.
      r1166: Convert (commented out) ndr_pull_error() calls into proto_tree_add_text()
      r1167: Misc cleanups:
      r1174: Remove $var_prefix parameter for all functions.  We don't need it for
      r1185: Hey look an endpoint for the spoolss pipe!
      r1188: Use generated pidl template for this file and return DCESRV_FAULT instead
      r1201: Skeleton versions of OpenPrinterEx() and ClosePrinter() to get the hang
      r1204: decrpc -> dcerpc
      r1205: Whoops - this should fix the build.
      r1206: Give the spoolss pipe an endpoint.
      r1207: Add spoolss to the list of endpoint servers.
      r1208: Return some dummy printer information for the EnumPrinters RPC.
      r1210: A skeleton spoolssdb, based on samdb.
      r1211: Some output from rpcclient -c enumprinters to remind me what a relative
      r1226: Return dummy information for two printers.  Note that ndr_push_array()
      r1264: Make sure to initialize ofs_list when creating new ndr_{push,pull}
      r1266: Start to split out EnumPrinters into a separate fn for each info level.
      r1268: varient -> variant
      r1269: Add a 'base' field to the ndr_ofs_list structure which is the base to
      r1270: Start to break samdb into general bits so we can share code with other
      r1271: Return spoolss enumprinters info level1 from spoolss.ldb - woot!
      r1275: Make spoolss_PrinterInfo2 and spoolss_PrinterInfo5 public so we can
      r1276: Return data for enumprinters level 2 and 5.
      r1313: Split up OpenPrinterEx into functions to handle opening printers and print
      r1374: Fix signed/unsigned warnings (actually found by g++) after unsigned int
      r1534: Alternate method of grouping togethers buffers and scalars which actually
      r1535: Create a subtree for each array element.
      r1540: - Remove return statements when a parse error is detected as ethereal
      r1586: Finally, a technique for putting buffers in scalars in the same
      r1592: Fix up subtrees for non-scalar types instead of hardcoding module subtree.
      r1593: Fix bug in get_subtree() where we were always looking at the head of
      r1594: Remove some array checks that we can't do because we don't store state
      r1595: Always use a loop variable named $e when iterating over lists of
      r1611: Put a brace on a new line.
      r1767: Checkin of workarea.  Sorry Jelmer but this overwrites some of your changes
      r1815: Update parser for recent changes to perl parser.
      r1826: Implement some stub functions: ndr_pull_{save,restore,set_offset}()
      r1986: Janitor for myself.  Merge -r1907:1908 from SAMBA_3_0 branch.
      r2154: Merge of Jim's format string fixup in r2130:2131
      r2167: Implement some stubbed out functions.
      r2168: Move these files into a separate ethereal-pidl-plugin svn repository.
      r2183: Tidy up naming of ethereal fields.  The field names are taken from the
      r2221: Experiment with extra properties for telling the ethereal parser what
      r2222: Generate correct function prototypes for unions marked as public.
      r2223: Include autogenerated header file for idl file we are processing with
      r2226: A bunch of fixes to get python tdb module building again.  I'm not
      r2227: Get rid of annoying compiler warning.
      r2228: Finally commit bits of old workareas together to get dcerpc python
      r2229: Have dcerpc_pipe_connect() throw an exception if non-zero NTSTATUS is
      r2230: Wrapper for dcerpc_samr_Connect2().  All this glue code should be
      r2234: Tridge, this is a patch to allow people to set the REF_ALLOC flag on
      r2235: When creating exception data, use Py_BuildValue instead of doing it
      r2236: Zero request structure to let the REF_ALLOC flag work its magic.
      r2243: Include definition for PRINTF_ATTRIBUTE in Python tdb wrapper.
      r2247: talloc_destroy -> talloc_free
      r2253: Add test program, as small example of what's going on.
      r2255: Don't do experimental swig stuff by default.
      r2256: Include autogenerated interfaces for lsa and samr pipes.  Typemaps are currently
      r2276: Remove garbage collection debugs.
      r2277: Generate stubs for input and output typemaps.
      r2278: Add some more helper functions.
      r2289: Autogenerate some more attractive looking stubs for converting
      r2295: Convert simple scalar types and policy handles between dcerpc function
      r2296: Correct setting of access_mask in test program.
      r2297: Add string conversion functions.
      r2298: Convert to and from string parameters.
      r2299: Map a (C) NULL pointer to (Python) None and vice versa.
      r2300: Start writing a Python torture test suite based on the smbtorture rpc tests.
      r2322: More renames of autogenerated functions so they all have approximately
      r2323: More tweaks to get things building again.
      r2324: Add hand-written versions of functions from misc.idl.
      r2325: Generate conversion stubs for IDL unions.
      r2335: Zero function parameter struct so we can do a bit more testing.  To be removed later.
      r2336: Add another conversion function to allow union arms that contain structures
      r2342: Remove obsolete file.
      r2344: Return PyDict_New() in stub functions instead of Py_None to avoid
      r2345: Add test for samr_QuerySecurity()
      r2357: Start coding conversion routines for security descriptors, acls and sids.
      r2358: More renaming of functions to keep things consistent.
      r2359: More consistency fixes: pass a talloc context to every function that
      r2398: Import Data::Dumper module safely so it doesn't hurt the build farm.
      r2399: Display text description of rpc fault in debug message.
      r2408: Tridge suggested that all the structures from misc.idl (policy handles,
      r2409: Convert NULL pointers to Py_None, and vice versa.
      r2410: Add test for samr_SetSecurity().
      r2411: The other half of getting autogenerated code working using misc.idl:
      r2414: samr_Connect.system_name is now an array.
      r2415: Throw a TypeError exception if a scalar value doesn't have the correct
      r2416: More argument checks.  Raise an exception instead of segfaulting if a
      r2417: Add comments to the interface generator as well as some commentary in
      r2418: Handle a pointer to a scalar when converting a field from Python.
      r2419: Write tests for samr_EnumDomains() and samr_LookupDomain().
      r2421: Fix test for lookupdomain for a non-existent domain.
      r2422: Convert PyDict_{Get,Set}Item() calls to PyDict_{Get,Set}ItemString().
      r2423: Add some instructions for building extensions.
      r2424: Refactor handling of non-OK NTSTATUS returns to be more swiggish.
      r2425: Found another place for a type check.  When convert a dictionary value
      r2426: Handle pointer to scalars converting C to Python.
      r2427: Add tests for samr_GetDomPwInfo, samr_RemoveMemberFromForeignDomain,
      r2428: Handle unions as [out] parameters by passing the value of the switch_is
      r2429: Add tests for samr_QueryUserInfo(), samr_QueryUserInfo2(),
      r2458: Rename policy handle parameters for the SAMR pipe.  Parameters now
      r2461: Update samr.py torture test after policy handle parameter renames.
      r2486: Use correct type checks when checking 64-bit quantities (int64, uint64,
      r2489: Rename account_flags in EnumDomainAliases() to acct_flags.
      r2490: Some changes to take into account non-error NTSTATUS codes being returned:
      r2491: Handle pointers to scalars when converting to a Python dictionary (i.e
      r2492: Some cleanups.
      r2496: Check that reference parameters are not None.
      r2501: The AddMemberToAlias test doesn't need a domain_handle.
      r2502: Finish off samr torture test: samr_CreateUser2, samr_SetUserInfo,
      r2511: Add NT status codes.
      r2516: Remove duplicate line.
      r2555: Start of a rpcclient type program.
      r2559: Python ints can't hold the full range of uint32 values so store them
      r2560: Don't require structure fields that have the pidl value() property
      r2576: Some userspace tools for getting and setting ntacls via the 'security.ntacl'
      r2582: Merge checks for xattr and acl libraries from Samba3 so the {get,set}ntacl
      r2597: A small program that takes SID strings on stdin and produces a marshalled
      r2728: Break arg parsing stuff out of samr.py into a standalone program.
      r2739: Start of torture test for winreg wrappers.
      r2764: Use hand-written function for all occurrences of IDL strings, not just
      r2765: Allow functions containing WERROR values to be compiled.
      r2766: Test OpenKey, QueryInfoKey, EnumKey, CloseKey functions.
      r2767: Get rid of some unnecessary %s formatting.
      r2777: Correctly abort if an idl file fails to parse.  Bloody perl...
      r2780: Add conversion routines for DATA_BLOB.  I'm not convinced that DATA_BLOB's
      r2781: Got winreg_EnumValue() working.  Check it in so I don't break it trying
      r2782: Reformat IDL for winreg_EnumValue()
      r2790: Add code to generate WERROR exceptions.  Arrange inclusion of autogenerated
      r2795: Split status code constants into a separate file.
      r2801: Wrapped functions that return a DOS error code can return DCERPC
      r2805: Handle NULL pointers when converting structures to Python.  All the
      r2806: Add winreg.i to dependencies for dcerpc.i
      r2807: OK I think winreg_EnumValue() finally works.  The previous version
      r2817: Get winreg_GetKeySecurity() working but use data blob instead of
      r2962: Tweak to get conversion function for pointers to union compiling again.
      r2963: Handle structures that contain more than one union as members.
      r2964: Add spoolss to list of wrapped client functions.
      r2965: Ignore *.pyc files in torture directory.
      r2966: Handle conversion of DATA_BLOB fields from Python in a slightly nicer
      r2967: Add some printer enum constants from Samba3's rpc_spoolss.h
      r2975: Try to emulate NT_STATUS_IS_ERR() functionality for WERRORs.  Unfortunately
      r2986: Add correct value to dict when generating wrapper for functions that
      r2994: More cleanups.  Move the generation of NTSTATUS and WERROR exceptions
      r3001: Expose unmarshalling functions for structures marked "public" in the
      r3007: uint32 values need to be stored in Python longs, as on 32-bit machines
      r3009: Fix up unmarshall functions to return Python dict instead of a NTSTATUS.
      r3010: Do some more PyInt vs PyLong checks.
      r3022: Work on unmarshalling arrays of structs in a buffer (Python string) for
      r3036: Add function to pull an array of structures.  Abstracts away the
      r3060: Replace magic number with a C99 constant.
      r3196: Grr - add more useless dependencies to get swig wrappers to build.
      r3204: Got unpacking of an array of PrinterInfo union elements working.  Phew.
      r3215: access_required -> access_mask for OpenPrinterEx
      r3216: Add tests for OpenPrinterEx and ClosePrinter.
      r3217: Start of a spoolss_GetPrinter test.
      r3250: Add idl for printer info level 0.
      r3287: The devicename and formname fields in a device mode are fixed length
      r3302: The security descriptors in spoolss_PrinterInfo2 and spoolss_PrinterInfo3
      r3303: Call pull function for correct type instead of spoolss_PrinterInfo when
      r3308: Handle servers that don't have samr_Connect5.
      r3309: Add wrapper for dcerpc_server_name() function.
      r3310: Update dependencies for swig wrappers.
      r3311: Consistency updates for form name members.
      r3396: Rename form_name -> formname.  This time, check smbtorture builds before
      r3401: Fix IDL for SetForm RPC.
      r3402: Fix idl for spoolss_JobInfo1.
      r3403: Add test for operations on print server handle.
      r3404: Rename name of DATA_BLOB in GetPrinterData()
      r3405: Test EnumPrinterData and GetPrinterData.
      r3406: Don't throw a werror exception for WERR_NO_MORE_ITEMS and WERR_MORE_DATA.
      r3410: Handle conversion of DATA_BLOBs and pointers to DATA_BLOBs from python.
      r3411: Ignore some autogenerated files.
      r3429: Fix IDL for EnumPrinterDataEx()
      r3430: Add tests for EnumPrinterDataEx, SetPrinterDataEx (doesn't work),
      r3456: Add appropriate #includes to fix Python extensions build.
      r3459: Fix cut&paste error in copyright header.
      r3460: Add LIBNDR_GEN_OBJS and LIBNETIF_OBJS to swig objs.
      r3473: Add LIBCRYPTO_OBJS to python extensions.
      r3474: Add conversion functions for the time_t type.
      r3505: #include dynconfig.h
      r3506: Test EnumPorts function.
      r3521: Collect printer driver names in EnumPrinterDrivers.
      r3587: Add status_codes.i as a dependencies for dcerpc.i
      r3588: Fix bug in converting SIDs containing large unsigned integers from Python.
      r3589: Add some extra status codes.
      r3590: Add some more commands to rpcclient from a patch by jbm.  Add
      r3607: EnumDomainAlises doesn't take a max_size parameter.
      r3870: Delete wrappers for tdb_lockkeys() and tdb_unlockkeys().
      r4099: Spelling fixes.
      r4197: Remove silly extra const.
      r4200: Fix some more warnings.
      r4201: Remove duplicate const.
      r4341: Fix const warning.
      r4468: Don't be a slacker and leave out parameter names when generating
      r4469: Version n + 1 of the pidl ethereal parser generator.  This version is
      r4471: Running 'make eparser_idl' doesn't need --header anymore.
      r4489: Remove an obsolete file.
      r4495: Some more regexps for handling stuff in the lsa and samr pipes -
      r4509: Add missing cr.
      r4511: Remove a crapload of dead code.
      r4512: Give arrays of scalar types their own subtree.
      r4517: Revert previous commit about giving arrays of scalars their own subtree.
      r4546: Use talloc_p() instad of talloc()
      r4548: Convert to talloc_p() and talloc_array_p() where appropriate.
      r4578: Minor cleanup of ndr_pull_array() and ndr_pull_array_foo() regexps.
      r4599: Remove some duplicated code in pidl.pl.
      r4600: Remove Data::Dumper import leftover from debugging.
      r4606: Start adding some more comments and some indentation for the eparser
      r4613: Fix stuff I broke in the last commit with the /x regexp flag.
      r4770: Change from processing ndr_*.[ch] files all at once to line-by-line.
      r4771: Fix some indentation.
      r4773: Handle arrays of scalar types as function arguments.
      r4796: Get rid of unecessary #include
      r4797: Add the name of what we are pointing to when dissecting pointers.
      r4798: When dissecting structures, name the protocol tree after the field name,
      r4815: Handle uint8 and uint16 bitmap types.
      r4816: Note that NTTIME is 4-byte aligned which makes the comment about alignment
      r4841: Handle levels that are signed integer types.
      r4842: Set the end of a structure so that when you click on the proto tree,
      r4865: Fix up subtree name when dissecting unions.  E.g in LSA, The subtree
      r4930: Update my copyright.
      r4940: Add a variable to hold a list of typedefs for which we shouldn't generate
      r4973: Add a RAP scanner to smbtorture.  win2k has call numbers 0-215 although
      r4974: Update location of talloc_guide.txt
      r4975: Update usage of talloc in rap torture code.
      r4979: Return NT_STATUS_INVALID_SYSTEM_SERVICE for unimplemented RAP calls as
      r4980: Copy RAP callno constants from Samba 3 and start to use them.
      r4981: Fix swig build.
      r4982: Start to move swig dependencies into new build system.  Unfortunately
      r4983: On second thoughts don't include the config.mk file for the swig stuff
      r4990: Generate value strings for pidl enumerations.
      r4991: Remove debugging statement.
      r4993: Generate nicer name for enum hf.
      r5005: Add missing size specifiers to various bitmaps.
      r5006: Implement parsing of pidl bitmaps in ethereal parsers.  This works
      r5007: Fix bug in regexp where we were eating the strings "in" or "out" from
      r5008: 32-bits is the default bitmap size.
      r5009: Put bitmaps in their own subtree.
      r5010: Handle weird-ass NTTIME_1sec and NTTIME_hyper types.
      r5016: Use LIBRARY instead of BINARY for inserting the swig stuff into the
      r5017: Fix bug in output typemap for uint32 (!)
      r5018: Initialise required subsystems (by hand, generated by substituting
      r5019: Some tweaks to building the swig .i files.
      r5024: Fix build.
      r5026: Don't build the swig stuff by default until it's a bit more stable.
      r5033: Remove --with-eparserdir configure option and eparser_idl make target.
      r5047: Fix swig dependencies.
      r5072: oDecrease the amount of autogenerated code (sorry tridge) and use swig's
      r5073: Call new autogenerator function for swig stuff instead of old one.
      r5074: Remove dead code.
      r5087: Add --swig to pidl flags so that swig .i files are generated with
      r5094: Use builtin swig types for converting between fixed width integer types.
      r5095: uint32 -> uint32_t
      r5188: Add config.mk file for swig.
      r5190: Grr - typo.
      r5223: Rename dom_sid2 to dom_sid as we don't care about the difference
      r5224: Add in/out typemaps for resume handles.  This saves us having to much
      r5241: Generate swig wrappers for unions as well as structures.
      r5242: Check that argument is an integer or a long for uint32_t input
      r5243: Woohoo - memory leak city!  Comment out talloc_free() call until I
      r5244: Convert this module to use the new structure mapping SWIG stuff instead of
      r5245: Remove dead code.
      r5247: Fix rpcclient to work with new swig interface.
      r5293: Map an empty policy handle to None when creating policy handles, and
      r5335: Add a Close() method to SamrHandle object.
      r5348: Implement the remaining samr connect functions and fix up setsecurity.
      r5350: Implement an input typemap for NTSTATUS.
      r5351: Add wrapper for nt_errstr and array functions for samr_ConnectInfo.
      r5353: Throw a NTSTATUS exception if a NT error code is returned.
      r5364: Rename string fields called 'domain' and 'name' to be 'domain_name'.
      r5368: Fix ups for domain_name field name change.
      r5369: Rename torture modules so they don't conflict with files in scripting/swig.
      r5550: Initialise retry count - valgrind was freaking out because this value
      r5551: Protect against falling off the end of the name resolve order list
      r5552: Don't try to read the value of r.out.result when the dcerpc client
      r5553: Add idl and test for spoolss_AddPort().  It always seems to return
      r5554: Constants and untested IDL for spoolss_SetPrinter()
      r5769: Fix unused variable warning.
      r5777: At some stage SIG_ATOMIC_T was renamed to sig_atomic_t.  This should
      r5778: Remove tdb_set_lock_alarm() function from wrappers at tridge's request.
      r5779: Remove signal and timeout gubbage from tdb.
      r5780: Remove unused arguments.
      r5781: Fix build.
      r5782: Use standard input for reading packet data if filename not specified.
      r5827: Make ndrdump accept a uuid as well as a pipe name to specify
      r6148: Add a showflags target to display the various compiler flags a la
      r6177: Use here documents instead of print() statements to generate the
      r6208: Add cli_credentials support for swig wrappers.  For the moment it
      r6210: Call cli_credentials_set_conf() when initialising credentials in
      r6211: Use cli_credentials_set_{domain,username,password}() to fill in
      r6212: Treat uint8 and int8's as integers instead of chars.  Swig maps a char
      r6213: Add %array_functions for struct samr_String so we can create and
      r6214: Fix typo in DomainHandle.OpenUser() function.
      r6215: Add test for LookupNames.  Fix CreateUser2 test.
      r6322: Fix compile warning for struct sockaddr.
      r6324: Pass server name instead of binding string on command line (always use
      r6325: Rename aliasname -> alias_name in CreateDomAlias function.
      r6326: Add %array_functions for struct lsa_SidPtr.
      r6327: Add LSA objects to dcerpc swig library.
      r6328: Fix bug in OpenAlias.
      r6329: Write tests for newly implemented alias functions.
      r6350: Add a newline to make things look prettier.
      r6359: Fix compiler warning with struct sockaddr.  I'm sure I fixed this a few
      r6360: Quieten unused variable warning.
      r6361: Update howto and provisioning script with the moves made in r6207.
      r6466: Spelling.
      r6469: Add CreateDomainGroup, GetAliasMembership.
      r6504: Fix incorrect value for SERVICE_STATE_ALL found by Karl Melcher.
      r6506: Rename parameter to GetDomPwInfo.
      r6507: Fix syntax error in GetAliasMembership().
      r6508: Fix typo - yay testsuite.
      r6510: Initialise rid parameter in samr_RidToSid().  This is faulting for me
      r6511: Implement GetUserPwInfo(), QueryUserInfo(), QueryUserInfo2().
      r6512: Refactor samr torture test to use the nicer OO interface instead of the
      r6520: Fix unused variable warning.
      r6521: Include system/network.h to fix compiler warning.
      r6527: Resurrect getntacl utility program.  At the moment we only display the
      r6538: Somehow building shared libraries was broken.  Either AC_CANONICAL_HOST
      r6539: A patch from jbm:
      r6540: Implement a bunch more SAMR functions.
      r6589: Make the library versioning options for building a shared library optional.
      r6590: Remove bogus library versioning variables from swig wrappers.
      r6591: Add some comments.
      r6592: Throw an IOError exception if tdb_open() or tdb_open_Ex() returns NULL.
      r6610: Fix a const warning in the gensec spnego implementation.  (A make proto
      r6674: Fix some compiler warnings.
      r6675: Fix printf warning.
      r6676: Fix unused variable.
      r6677: Unused variables.
      r6767: Fix compiler warning.
      r6810: Rename auth/{ntlmssp,gensec,kerberos} mk and m4 files to be called
      r6847: Fix some unused variable warnings in the libnet torture test.
      r6848: Remove some dead/unused code.
      r6851: Typo in comment.
      r6919: Jelmer, here is my script for filtering individual binaries/subsystems/etc
      r6929: LIBCLI_NBT depends on LIB_SECURITY_NDR for various security descriptor
      r6930: Use NBT_NAME_CLIENT instead of the number 0.
      r6932: Comment out static function - not used anywhere?
      r6933: Add a couple of helper functions for creating nbt names.
      r6936: Have RPC compression depend only on NDR_DRSUAPI instead of NDR_RAW which
      r6939: Get rid of SUBSYSTEM::NDR since all it did was require NDR_RAW.
      r6951: Fix all calls to setup_logging() that use 'True' as a second argument.
      r6952: Remove unneeded include of popt_common.h
      r7010: Merge libcli/libsmb.mk into libcli/config.mk
      r7060: Fix use of uninitialised variable.
      r7061: A ejs scripting client.  This should allow javascript to be run in a
      r7062: Merge scripting/swig/config.mk with scripting/config.mk
      r7063: Do error checking on the ejs functions.
      r7064: Clean up handle parameter passing after peeking at tridge's ejstest.c
      r7065: Move ejs from web_server to lib so it can be shared with smbscript.
      r7066: Rename http_exception to ejs_exception.
      r7068: Missed one!
      r7080: Fix typo in error message.
      r7081: Add mprToInt() function.
      r7082: Call load_interfaces() in smbscript initialisation.
      r7083: Add a ejs hook to the resolve_name() function.
      r7137: Add a couple more dummy idl files for the DNS server and Windows
      r7138: Doh - fix some typos.
      r7212: Disambiguate dummy functions to avoid linker problemos.
      r7213: Add a small bit to the ejs parser to ignore a #!/path/to/interpreter
      r7214: Undo my interpreter patch.  Tridge thought of a much better way to do it
      r7215: Convert smbscript to use ejsEvalScript() and file_load() instead of
      r7223: Advance script past interpreter line.
      r7225: Create a MprVar object from a NTSTATUS, e.g:
      r7253: Fix build.
      r7254: Add a mprWERROR() function with the same attributes as mprNTSTATUS.
      r7255: Change syntax of resolveName() js function to be more like the
      r7256: Demonstrate use of resolveName() js function.
      r7261: Pass by reference is done in js via MPR_TYPE_OBJECT.  Update argument
      r7262: Add a length property to ARGV array.
      r7263: Exit smbscript with the intepreter return value (defaults to 0).
      r7266: Split the different types of js function defines into separate files,
      r7350: Remove unused label.
      r7351: Start of ejs smb client library.  I need to figure out a nice API here
      r7365: Remove unused variables.
      r7422: Create a ejs object to wrap a smbcli_transport pointer.
      r7455: Remove some talloc contexts that aren't used.
      r7456: Add a simple type that represents a pointer.  The ejs people may ask us
      r7457: Return an ejs C pointer object from the ejs connect() function.
      r7477: Add MPR_TYPE_PTR to ejs_typeof().
      r7479: ifdef out some more stuff to fix compiler warnings.
      r7481: Add a mprVarIsPtr macro.
      r7482: Rename smbcli_send_tconX() to smbcli_tconX() so as not to get it
      r7500: Initialise module subsystems.
      r7501: Fix credential initialisation in ejs session setup.  Implement four
      r7505: Add more argument forms for session_setup().
      r7569: Fix typo in comments.
      r7570: Add tree, session and socket disconnect ejs functions.
      r7627: Fix warning in unused (?) function.
      r7628: Unused variables.
      r7629: Unused labels.
      r7630: Unused variable.
      r7802: Remove a junk file.
      r7922: Comment out complicated connect/session/tree API for the moment.  Replace
      r7924: Add mkdir() and rmdir() functions.
      r7928: Add rename, unlink and list commands.
      r8101: Fix some indentation.
      r8103: Add an argument separator between the hardcoded args and $PIDL_EXTRA_ARGS
      r8105: Add ejsrpc push/pull functions for uint16 and uint8.
      r8171: According to Samba 3 and Ethereal, the winreg_OpenUnkown stuff is
      r8288: The SMB_ASSERT_ARRAY macro isn't used anymore.
      r8351: When finished sending call stream_terminate_connection() with a nice
      r8353: Use a PNG instead of a GIF for padding.  Also fixes a file not found
      r8357: Call lp_load() so we can access the various lp_functions().
      r8358: Return an error message if js include path not set instead of silently
      r8403: Reinstate linkpad.gif at Deryck's suggestion.
      r8414: Some C++ friendlyness fixes - 'not' is apparently a keyword in C++.
      r8713: Experiment to try and fix warnings on 64-bit machines without breaking
      r8714: Oops - get it right this time!
      r8878: Spelling fixes.  (-:
      r8910: An initial parser to parse structures in smb_interfaces.h.  This will be
      r8918: Handle const elements in structures or unions.  This is a bit yucky but
      r8919: Return references to structs and unions in parse tree.  Fill in type
      r8920: Make NAME hash entry for struct elements a list.
      r8925: Start generating header and implementation files for smb_interfaces.h
      r8932: Handle non-anonymous unions and structures better.
      r8934: Some refactoring of smb_interfaces code generator.
      r9089: Start generating module init and top level ejs functions for smb_interfaces.
      r9092: Generate some more stub functions.
      r9096: Spelling.
      r9099: Start generating code to pull/push fields.  Generate functions to call
      r9101: Check in file generated by Parse::YAPP.
      r9102: Generate files in $srcdir/libcli/gen_raw instead of $srcdir.
      r9123: Add ejs_pull_DATA_BLOB() and ejs_pull_BOOL() although leave DATA_BLOB
      r9124: Handle more types pointers to simple types.
      r9129: Start working on nested anonymous structures and unions.  A better
      r9130: Fix up awful indentation.
      r9145: Some work on eventlog since jerry is doing some in Samba3.  (-:
      r9154: Change eventlog enums to bitmaps.
      r9155: Fix ReadEventLog() test so it now works.
      r9156: Add IDL and test for FlushEventLog() but it always seems to return
      r9185: Make second pass over the parser tree and tidy things up to make it a
      r9191: Generate headers for nested structures that need pushing or pulling.
      r9199: Another go at recursive flattening of structs.
      r9202: OK now we are getting somewhere.  Generate js stubs for top level structs
      r9205: Generate more stub code for smb_raw ejs functions.
      r9207: Start generating ejs_push/pull calls for structure elements.
      r9220: Start trying to get autogenerated code to compile.
      r9222: Rename smb_tree_connect() to smb_raw_tcon() to match other raw function
      r9223: Rename smb_raw_session_setup() to smb_raw_sesssetup().
      r9237: Fix eventlog_Record typedef so it decodes records source and computer
      r9238: Some test code to do user-unmarshalling of eventlog_Record data.
      r9239: I think this is the right IDL for the eventlog record.  Pidl is
      r9279: In Samba3 debuglevel 10 used to print RPC debugs.  I think this should
      r9284: Whitespace.  (-:
      r9291: Add a stub for smb_raw_lpq() which is in smb_interfaces.h but doesn't
      r9292: More compiles fixes for autogenerated smb_interfaces ejs wrappers.
      r9295: Tridge had some good suggestions for simplifying the smb_interfaces ejs
      r9296: Reinstate generation of push/pull functions for each field in a struct
      r9297: Add a NDR_CHECK() around each ejs push/pull.
      r9357: Remove DBGC_CLASS cruft copied over from Samba 3.  I would like to
      r9381: Line wrapping.
      r9382: Add a dummy registry for HKEY_USERS to get rid of the annoying dialog
      r9423: Fix a typo.
      r9424: Remove duplicate interface name in DCERPC subdissector strings.  Also
      r9550: Adjust some indentation.
      r9553: Some cosmetic things to make the atsvc dissector output look prettier
      r9554: Do a quick once-over to make the ethereal auto-generated parser code a
      r9558: Add more whitespace to generated output.
      r9563: I think this INIT_OBJ_FILES should be ADD_OBJ_FILES so that the lib/samba3
      r9577: Fix some indentation.
      r9611: Reset global variables (hf and ett lists) for each parser run.  This
      r9612: Don't generate handoff code for idl files that don't implement a pipe
      r9625: Get rid of "duplicate const" warning.
      r9677: Don't generate duplicate function names when processing structure elements
      r9682: Jelmer, I think this fixes another case where the parser generator was
      r9683: OK that last fix was too good to be true.  (-:
      r9734: The ethereal parser generator was generating duplicate functions for
      r9876: Fix some 64-bit warnings for Itanium machine.
      r9879: A quick check to see if nested initialisers (?) is portable across the
      r9880: Convert remaining initialisers to more portable form.  This should
      r9881: I can't believe this can make a difference...
      r9883: More nested initialiser fixes.
      r9884: Fix compiler warning.
      r9885: Fix code before declarations.
      r9980: Fix some warnings.
      r9982: Strip prefixes off the check for noemit in the conformance info so you
      r9983: Make the NOEMIT conformance directive with no argument mean do not
      r9984: Honour the NOEMIT conformance directive for entire IDL files.
      r9990: Fix some 64-bit size_t warnings.
      r9991: Some more 64-bit size_t warnings.  There are a few more but they are
      r9992: More fixes from the 64-bit warning police.
      r9993: Gcc is fussy about the lack of parentheses around assignment statements.
      r9994: Unused variable.
      r10000: Congratulations to me for getting the 10,000th commit.
      r10046: Don't generate any ethereal dissectors for security.idl
      r10047: Translate an idl NTTIME to an ethereal FT_ABSOLUTE_TIME instead of
      r10048: Dissect a security_secinfo as a uint32 just to get the winreg
      r10103: Put an #ifdef guard around ENOTSUP to fix systems  that don't have it
      r10104: Fix code before declaration.
      r10184: Fix a stack of unhandled enumeration warnings.
      r10185: Fix another two sets of unhandled enumeration warnings, plus correct some awful indentation.  (-:
      r10197: Assume that external dissectors are structs which I think is always the
      r10238: Add a entry for sec_info to treat it as a uint32 for now.
      r10255: Fix some more 64-bit warnings.
      r10256: Fix some unhandled enumeration warnings.  There's one still left,
      r10257: strlen returns a size_t which can be 64 bits long.
      r10258: Fix an unused/duplicate local variable.
      r10327: Use CPPPATH instead of appending -Idir to CCFLAGS.
      r10328: Add more emacs python-mode markers.
      r10329: Perhaps we shouldn't get too ahead of ourselves just yet.
      r10334: Use CPPDEFINES instead of CCFLAGS for adding preprocessor symbols.
      r10335: Build tdb tools into bin directory.
      r10369: You don't need to put leading or trailing spaces on variables.  It's
      r10376: Argh - not quoting dictionary/hash keys is a bit of a perlism.
      r10377: Save configuration stuff to sconf.cache so it isn't annoyingly run
      r10378: Build config.h file from dictionary of defines and always use it.
      r10379: Add files for ldb and tdb to proto_files.  The tool for building proto.h
      r10414: Fix building of proto.h
      r10415: The ldb and tdb libraries are bad examples to test out the make proto
      r10416: Detect some more types to get rid of spurious warnings in the
      r10418: Fix comparison_fn_t test I busted.  Add $HOME to the environment as some
      r10436: Some thoughts on getting pidl working in scons.
      r10442: Build librpc/libndr_misc.a from librpc/idl/misc.idl.  Doesn't quite work
      r10443: Fix emitter for NdrMarshaller tool.
      r10444: Add LIBBASIC files to proto.h
      r10445: Add --header to pidl flags.
      r10446: Add ndr_base and rpc_base sources to proto.h
      r10447: Add gensec sources to proto.h
      r10448: Add librpc SConscript file to build.
      r10481: #define _GNU_SOURCE for comparison_fn_t test.
      r10482: Add files to proto_files enough to build libcli and librpc directories.
      r10497: Export the list of dsdb ldb modules.
      r10498: Detect some more networking headers.
      r10499: Export cli_ldap library.
      r10500: More progress to getting ldb tools building.  Create a list of ldb modules
      r10646: Hey Jelmer what do you think of this?  The SConscript for the libcli
      r11210: Log registry open function name when starting hive tests.
      r11211: Append an error message to COL_INFO if the RPC call returned an error.
      r11258: Dissect all access_required fields as hex using the same hf.
      r11259: Map system_name and handle fields to new hf fields.
      r11260: Delete a leftover scons file.
      r11261: Rename access_required field in winreg idl to access_mask so it matches
      r11262: Try to get the equivalent of a subcontext in pidl ethereal conformance
      r11318: Tweak import statement for decoding KeySecurityData as a NT security
      r11362: Remove attempt to decode uint8 array as a security descriptor.  Pidl thinks
      r11624: Use enum names instead of magic numbers.
      r11625: NULL terminate list of strings.  For some reason this wasn't causing a
      r11626: Fix unhandled enum in case statement warnings by noting appropriately
      r11633: Fix some more warnings.
      r11709: Comment out unused function.
      r11965: Try to fix some 64-bit warnings.
      r11967: Fix more 64-bit warnings.
      r11968: More warning fixes.  We're on track to getting to double digits for
      r12971: Fix spelling.
      r14798: Get swig building again (by commenting out dcerpc stuff for now).
      r14801: Move swig testing makefile fragment into swig's config.mk and out of
      r14802: Fix typo.
      r14804: Start writing a more Pythonic tdb module.
      r14836: Keep constants in the right order, and line things up nicely.
      r14854: Finish off swig wrapper and torture tests for tdb.
      r14870: Update to link with dynamic instead of static objects.
      r14871: We don't need to import UserDict anymore.
      r14873: Add skeleton swig ldb interface.
      r14878: Write swig wrappers for ldb_init() and ldb_connect().
      r14879: Fix bug unpacking ldb_messages.
      r14880: Doc.
      r14881: Unpack ldb_message_element and ldb_val arrays.  Python can now access
      r14897: Do more error checking of tdb function returns and raise IOError or
      r14901: More work on ldb swig interface.  Wrap some more functions.
      r14915: Work in progress - getting ldb_add() working.
      r14968: Move tdb and ldb swig wrappers in to lib/tdb and lib/ldb directories.
      r14970: Add configure stuff for Python to tdb and ldb standalone builds.
      r14971: Update test script with new location of tdb and ldb wrappers.
      r15017: When making up our own inotify functions, make sure glibc exports the
      r15065: Remove duplicate prototype.
      r15090: Since we wrap the swig wrapper in another layer of Python, there isn't
      r15091: Raise LdbError instead of IOError when ldb function calls return an
      r15092: Remove some swig stuff that didn't work out and the %rename call.
      r15095: Fix up typemap for struct ldb_val so that ldb_msg_add_value() wrapper
      r15096: Fix typo.
      r15097: Add constants for ldb errors.
      r15109: Wrap ldb_global_init()
      r15110: Start rewriting higher level ldb wrapper.
      r15113: Add a ldb_strerror() function.
      r15177: Wrap ldb_strerror() function.
      r15178: Fix ldb function calls after big swig rename.
      r15339: Signature for tdb_reopen_all() has changed.
      r15343: Some small cleanups.
      r15345: Add a read-only test to tdb torture tester.
      r15346: Doc.
      r15348: Start adding a dict interface and tests to LdbMessage class.
      r15388: Fix cut&paste typo.
      r15389: Add some better torture tests for LdbMessage.
      r15390: Make test output a bit prettier.
      r15391: Wrap up the nbt_name_query() function as a bit of an experiment.  It
      r15395: Fix build by adding another copy of the Python detection m4 fragment.
      r15397: Fix typo.
      r16089: Make doxygen target work if $DOXYGEN variable is empty.
      r16090: Fix standalone build after the rename of enum ldb_request_type in
      r23753: Fix bitrot afflicting the ldb Python swig bindings.
      r25018: Remove non-existent tdb_logging_function() as well as less useful
      r25044: The has_key() method should return a boolean, not an integer.
      r25045: Add constants for enum TDB_ERROR.
      r25046: Ditch tdb_traverse() as it doesn't lend itself to any Python idioms
      r25220: Comment out obsolete functions.
      r25221: Experiment with Jelmer's new generic loadparm code.
      r25329: A solution to SWIG not being able to handle a structure and a function
      r25348: Start working on another Python wrapper.
      r26677: Implement and test iter{keys,values,items} for tdb bindings.
      r26678: Check in auto-generated swig files.
      Adding missing calls to va_end().
      Replace C++-style comments with C.
      Check return code of secrets_init() function.
      Fix off-by-one bugs in subcommand argument passing.
      Fix possible close of invalid fd if call to socket() returns -1.
      Fix memory leaks on error path
      Fix double free bugs after calling regfio_close()
      Remove reference to non-existent configure option --with-msdfs as DFS is always on now.
      Remove CVS directory checked in to svn.
      Handle dia not being present more gracefully.
      Fix some misuse of the smbconfoption element.
      Add some documentation for the 'iprint server' parameter.
      Add a note that the 'nt acl support' parameter also maps POSIX ACLs as
      Although uneffected is probably a word, it's a bit awkward.
      s4-smbd: Fix compiler warning in prefork smbd.
      Fix some warnings at higher -W levels in pidl generated code.
      Include misc.idl for policy_handle in srvsvc.idl.

Tim Prouty (312):
      Cleanup size_t return values in convert_string_allocate
      Cleanup size_t return values in callers of convert_string_allocate
      Helper functions to enable domain groups to be added to builtin groups at domain join time
      Refactored the code that adds Domain Users to BUILTIN\Users to use the new helper functions.
      Refactored the code that adds Domain Admins to BUILTIN\Administrators to use the new helper functions.
      Enabled domain groups to be added to builtin groups at domain join time
      Removed redundant logging from create_builtin_users and create_builtin_administrators
      Fixed "declaration shadows global declaration" warnings.
      Fixed build warning "passing arg from incompatible pointer type"
      Changed variable name from f19086872ec734fff3f2119712ff24117bec4e5e to match v3-[23]-test
      Fixed "might be uninitialized" warning
      Add support for autogen to take a --version-file argument
      remove common lib object files on make cleanlib from source3
      Check for f_frsize when using statvfs
      Remove extraneous comment from 0a33d8bd312cc4497d08bbe0f4dd2abcce67bd0b
      Fixed a variable undeclared compilation error
      Fixed "argument differ in signedness" warning on linux
      Fix "parameter has incomplete type" build warning.
      Fix "ndr_size_PAC_LOGON_INFO defined but not used" build warning
      s3: fix simple "incompatible pointer type" build warning
      s3: fix a few "shadows a global declaration" warnings
      s3: Add support for make test to use a share dir outside of the prefix dir
      s3: Add support for storing dos attributes as st_flags in the stat struct.
      s3/s4 build: Add additional LDFLAGS in check_python.m4 to allow it to pass on more systems
      Fix build break
      Fix build warning introduced by making SERVICE_CONTROL an enum
      s3/s4 build: Fix makefile expression to work on more systems
      s3/s4 build: Fix execinfo and sasl build error when the libs/headers are in non-standard locations.
      s3 build: Fix incomplete types warnings
      s3/s4 build: Fix "might be unitialized" warning
      s3: Fix 'ctx' might be used unitialized warnings
      Add OneFS VFS module skeleton.
      s3: Change sockaddr util function names for consistency
      s3: Add SMB_VFS_CREATE_FILE to the vfs layer
      s3: Add new "is_dos_path" argument to SMB_VFS_CREATE_FILE
      s3: Add SMB_VFS_CREATE_FILE to vfs_full_audit module
      s3: Modify direct callers of create_file_unix_path to call SMB_VFS_CREATE_FILE
      s3: Modify direct callers of open_file_ntcreate and open_directory to call SMB_VFS_CREATE_FILE
      s3: Modify direct caller of open_file to call SMB_VFS_CREATE_FILE
      s3: Simplify the create_file_unix_path->open_file_ntcreate path
      s3: Change SMB_VFS_CREATE_FILE to take a create_file_flags argument
      s3: Fix FILE_FLAG_POSIX_SEMANTICS handling underneath SMB_VFS_CREATE_FILE
      s3: Make a few open utility functions non-static
      s3: Refactor getting sec_info from a security_descriptor into separate function
      s3: Refactor calculating path from relative_fid into a separate function
      s3: Call fd_close from close_directory
      s3: Add onefs_open.c with code copied verbatim from smbd/open.c
      s3: Add the OneFS SMB_VFS_CREATE_FILE implementation
      s3: [1/3] Fix a delete on close divergence from windows and the associated torture test
      s4: [2/3] Fix a delete on close divergence from windows and the associated torture test
      s3: [3/3]: Fix a delete on close divergence from windows and the associated torture test
      s3: Fix a few build warnings
      s3: Fix "differing signedness" build warnings
      s3/s4: Fix "shadows a global declaration" warning
      s3/s4: Fix DCOM idl bug
      s4: Fix include path to work with tevent
      s4: Fix a getaddrinfo/EAI_NODATA portability issue
      s3: Fix stream marshalling to return the correct streaminfo status
      s3 build: Fix warning
      s4: simplify some overly-complicated logic
      s3 build: Remove redundant #defines that are in idl generated headers
      s3/s4: Move CONST_DISCARD into lib/util so it's available from s3 and s4
      pidl: Fix a const build warning in the samba3 merged build
      librpc: Re-run make idl-full from source3
      s3 build: Revert previous patch to fix the build
      s3: Fix caller of print_fsp_open
      s4 torture: Add more rename tests to RAW-STREAMS
      s3: Allow renames of streams via NTRENAME and fix stream error codes on rename
      s3: Remove a few unnecessary checks from the streams xattr module
      s3: Remove a few unnecessary checks from the streams depot module and fix to work with NTRENAME
      s3 merged build: Remove redundant #defines that are in idl generated headers
      s3 merged build: Fix include error
      s3/s4 build: Fix Py_RETURN_NONE to work with python versions < 2.4
      s4 torture: Add new create disposition test to RAW-STREAMS
      s3: Add delete_all_streams to proto.h
      s3: Fix open path to delete streams depending on the create disposition
      s3: Remove rendundant op_tuple entry in xattr streams
      tevent: Fix build break
      s3: General cleanup of the open path in the OneFS vfs module
      s3: Add OneFS alternate data streams implementation
      s3: Differentiate between posix files with colons and actual streams
      s3: Fix uninitialized variable in OneFS streams
      pidl: Add max property to be used instead of range for unsigned types.
      librpc: Change a uint16 to use the max property instead of range
      librpc: Re-run make idl_full
      s3: Remove an incorrect const
      pidl: Remove "max" and make "range" smarter about unsigned types
      librpc: Remove usage of max and replace with improved range.
      librpc: Re-run make idl_full
      librpc: Fix warning caused by some empty debug strings
      s3: Fix warning
      s3 ldb: Fix vasprintf segfault that has been the source of build machine failures this week
      talloc: Change the two other definitions of TALLOC_FREE to match the primary version
      s3 make test: Add the ability to specify a custom smb.conf for make test
      s3 make test: Fix a bug in the previous commit
      s3 build: Eliminate the gmake-specific Makefile syntax
      s3: Fix shadowed declaration
      s3: Add a new SMB_VFS_GET_ALLOC_SIZE vfs operation
      s3 onefs: Add the OneFS implementation of SMB_VFS_GET_ALLOC_SIZE
      s3 build: Fix "shadows global declaration warning"
      s3 build: Remove unused fstat check to fix a bunch of HAVE_FSTAT warnings
      s3 onefs: Fix onefs ACLs to work with updated ACL syscall
      s3 build: Fix "assignment discards qualifiers from pointer target type" warnings
      pidl: Fix a const build warning in the samba3 merged build
      librpc: Re-run make idl_full from source3
      s3 async: Fix the build on systems that have ETIMEDOUT but not ETIME
      s3 spoolss: arch needs to be set before it's passed to get_version_id.
      s3 vfs: Add a destructor to the fsp extension data API
      s3 oplocks: Differentiate between releasing an oplock vs. downgrading to Level 2 for kernel oplocks
      s3 oplocks: Make the level2 oplock contention API more granular
      s3 oplocks: Add capabilites flags field to the kernel_oplocks struct
      s3 oplocks: Remove oplocks before handling delete on close semantics
      s3 OneFS: Add kernel oplocks implementation
      s3 OneFS: Change ACLs to do a stat-only open before get/set_security_descriptor
      s4 torture: Change nttransrename to use a normal access mask
      s3: Remove some unused vars
      s3 libsmbclient: Fix fstatvfs to be more portable
      s3: Fix uninitialized const char *
      s3 vfs: Fix SMB_VFS_RECVFILE/SENDFILE macros
      s3 OneFS: Add recvfile implementation
      make receive_smb_raw_talloc more readable
      s3 OneFS: Add defaults to the fake timestamp parameters
      s3 perfcount: Fix segfault with smbclient 'echo 3 foo'
      s4 torture: Add additional streams create disposition test
      s3: Fix bug opening streams with truncating disposition
      s4 torture: Add new test to create a file with a lot of streams
      s3: Modify SMB_VFS_FILE_ID_CREATE to take a stat struct
      s3: Add extid to the dev/inode pair
      s3: Remove unused inform_level2_message struct
      s3: Change the vfs_GetWd cache to use the file_id struct
      s3 OneFS: Add file_id_create implementation to take advantage of snapshots
      s3 OneFS: Add shadow copy module
      Fix shadowed declaration warning
      Revert "s3 auth: Add parameter that forces every user through an NSS lookup"
      s3: If sendfile returns 0 bytes read, fall back to the normal read path
      s3 OneFS: Add an atomic sendfile implementation
      s3 OneFS: Add a parameter that unconditionally allows execute access
      s3 OneFS: Fix a double free in an error path
      s3: Fix a bug that prevent core files from being created
      s3 OneFS: Fix uninitialized variable
      s3: Fix 'assignment differ in signedness' warning
      s4 heimdal: Link libintl correctly
      s4: make libintl a build dependency of heimdal_krb5 so all dependent binaries are linked properly
      s3 OneFS: Add .snapshot directory configuration handling
      s3: Refactor and cleanup the error paths in dump_core_setup
      s3: Report the correct path when dumping core on FreeBSD
      s3 OneFS: Refactor config code and cleanup includes
      s3: Fix incompatible type warnings
      s3 OneFS: Add parameter to ignore streams
      s3 passdb: Add back some useful debug statements
      socket wrapper: Fix 'might be used uninitialized' warning
      s3: Change open_streams_for_delete to call through the vfs layer
      s3 OneFS: Use the public open_streams_for_delete
      pidl: Don't generate variables declarations for pointless array counters.
      librpc: Re-run make idl_full from source3
      s3 torture: Simple warning fix
      tevent: Fix might be unitialized warning
      s3 torture: Fix unitialized variable to avoid closing a random fnum
      s3: Don't return in a void funtion
      s3 onefs: Correctly error out when the read returns EOF
      s3: Remove redundant comment
      s3 OneFS: Remove usage of non-existant function
      s3: parse_packet can return NULL which is then dereferenced in match_mailslot_name
      tdb: Remove unused variable
      s3 onefs: Add missing newlines to debug statements in the onefs module
      s4 torture: Add new streams oplock test
      s4 torture: Remove unused parameter
      s3 onefs: Quiet a log message about oplocks being requested on streams
      s3 oplocks: Refactor level II oplock contention
      s3 onefs: Simplify level 2 oplock self-contention
      s3 oplocks: Add back procid_str to debug message
      s3 onefs: Fix case-insensitivity for mangled names
      libcli: Fix shadowed variable warning
      s3 torture: Fix comparison is always true warning
      s3 torture: Only close if open was successful
      libcli: Fix shadowed name in header also
      s3: Fix chained sesssetupAndX/tconn messages
      s3: Fix strict locking with chained reads
      s3 onefs: Fix ignore sacl parameter
      s3 sendfile: Fix two bugs in sendfile
      s4 torture: Fix typo
      s3: Change unix_convert (and its callers) to use struct smb_filename
      s3 onefs: Fix invalid argument from the unix_convert smb_filename struct patch
      s3 torture: Fix warning
      tdb: Fix some recently introduced warnings in tdbtool
      s3 tdbtorture: Fix linking issue
      s3: Fix a few more users of stat to use stat_ex
      s3 onefs: update the onefs module to be compliant with stat_ex
      s3: Remove unused stat structs being passed to SMB_VFS_CREATE_FILE
      s3: Remove extraneous calls to unix_convert
      s3: Make all callers of SMB_VFS_CREATEFILE call unix_convert first
      s3: Remove unix_convert handling from createfile implementations
      s3: Remove the now unused CFF_DOS_PATH flag
      s3: Add utility function for copying an smb_filename struct
      s3: Prepare the first set of SMB_VFS_CREATE_FILE callers to take an smb_filename struct
      s3: refactor utility function to handle splitting the directory from the mask
      s3: Prepare the do_unlink path for passing smb_filname to SMB_VFS_CREATE_FILE
      s3: Prepare the rename path for passing smb_filename to SMB_VFS_CREATE_FILE
      s3 passdb ads: add missing character
      s3: Add smb_filename utility functions and fix a bug in copy_smb_filename
      s3: Plumb smb_filename through SMB_VFS_CREATE_FILE
      s3 onefs: Change onefs modules to use the new createfile api
      s3 onefs: Fix reading over the end of the array, because the incorrect array was being read.
      s3: Plumb smb_filename from create_file all of the way down to fd_open
      s3: Change SMB_VFS_OPEN to take an smb_filename struct
      s3 onefs: Remove dfs resolution from create_file() now that it's being done at a higher level
      s3: Convert is_visible_file to use talloc_asprintf instead of malloc
      s3: Plumb smb_filename through SMB_VFS_STAT and SMB_VFS_LSTAT
      s3: Change set_ea() and its callers to use smb_filename
      s3 onefs: Plumb smb_filename through onefs createfile path
      s3: Remove get_full_smb_filename() from open_directory()
      s3: simplify some redundant logic in is_ntfs_default_stream_smb_fname()
      s3 file_access: Convert some more functions over to use smb_filneame
      s3: pass a valid stat into file_ntimes()
      s3 docs: Add documentation for 'kerberos method' and 'dedicated keytab file' parameters
      s3: Plumb smb_filename through SMB_VFS_RENAME
      s3 onefs: Fix failure in POSIX smbtorture test
      s3 audit: Remove the usesless static function declarations from the audit modules
      s3 audit: Remove some recently introduced memory leaks in the audit modules
      s3: Plumb smb_filename through SMB_VFS_UNLINK
      s3: Add ability to pass NULL to filename_convert for the char *fname
      s3: Change some filename_convert to pass in NULL for char **fname argument
      s3: Plumb smb_filename around SMB_VFS_CHFLAGS
      s3 sticky write time: Removed unused args and tighten up a function by making an arg const
      s3 catia: Remove pointless VOPs from catia
      s3: Plumb smb_filename through SMB_VFS_NTIMES
      s3 audit: Fix a memory leak
      s3 smb2: Fix unused variable warning
      s3: Update streaminfo implementations now that only base names are passed through the vfs
      s3: Remove unnecessary const qualifiers
      s3: Migrate a few functions in open.c to take smb_filename
      s3 onefs: Fix a few bugs from the smb_filename migration
      s3: convert unix_mode to take an smb_filename
      s3: Plumb smb_filename through dos_mode() and related funtions
      s3: Remove is_ntfs_stream_name() and split_ntfs_stream_name()
      s3: Make some arguments to (parse|unparse)_share_modes() const
      s3: Change the share_mode_lock struct to store a base_name and stream_name
      s3 plumb smb_filename through smb_set_file_allocation_info()
      s3: Prepare open.c to switch fsp_name to an smb_filename struct
      s3: Repace a char * with an smb_filename struct in reply_rmdir
      s3: Fix two arguments that broke when plumbing smb_filneame through dos_mode()
      s3 smb2: Remove unused variable
      lib util: Fix const warning
      s3: Change file_structs to be allocated with talloc instead of malloc
      s3 onefs oplocks: Replace static fstring with talloc'd dbg_ctx()
      s3: Change fsp->fsp_name to be an smb_filename struct!
      s3: Finish plumbing the fsp->fsp_name smb_fname conversion through the modules.
      s3: Move is_ntfs_stream*() to filename.c
      s3: Separate out a new file: filename_utils.c
      s3: Plumb smb_filename through open_fake_file
      s3: Add some asserts to the filename util functions
      s3: Plumb smb_filename through map_open_params_to_ntcreate
      s3: Remove unnecessary fname argument from callers of filename_convert
      s3: Fix RENAME_FLAG_RENAME path to stop calling unix_convert twice
      s3: Remove the now unused fname parameter from filename_convert()
      s3: Remove unnecessary callers of get_full_smb_filename
      s3: plumb smb_filename through some of the trans2 posix_* functions
      s3: Convert some callers of vfs_stat_smb_fname to SMB_VFS_STAT()
      s3: Convert some callers of vfs_lstat_smb_fname to SMB_VFS_LSTAT()
      s3: Change unix_convert to use an smb_filename struct internally
      s3: Allow filename_convert() to pass through unix_convert_flags and let the caller know if the path has a wildcard
      s3: Simplify rename_internals() by passing in smb_filename structs
      s3 onefs: Fix the onefs modules after the big refactoring
      s3: Remove a few callers of get_full_smb_filename()
      s3: Convert a few callers of unix_convert() over to filename_convert()
      s3: Attempt to fix hpuxacl module
      s4 torture: Extend the RAW-RENAME test to more fully test directory renames.
      s3: Fix a bug in renames of directories
      s3: Add more helpful debugging to some of the streams code
      s4 torture: Fix RAW-STREAMS to request more specific permissions
      unlink defer torture test
      s4 torture: Split up the torture suite setup for RAW-SFILEINFO
      s4 torture: Add two new setfileinfo tests
      s4 torture: Allow onefs to be checked like samba3 and samba4
      s4 torture: Change RAW-OPLOCK to use the documented version of SET_END_OF_FILE_INFO
      s3 setfileinfo: Open with FILE_WRITE_DATA when setting the file size
      s3 selftest: Add RAW-SFILEINFO-END-OF-FILE to selftest
      s4 torture: Move target macros to a common header instead of redefining them in multiple files
      s4 torture: Change RAW-SFILEINFO-END-OF-FILE to check for share modes by default
      Revert "s4 torture: Allow onefs to be checked like samba3 and samba4"
      s4 torture: Update RAW-SFILEINFO-END-OF-FILE to test some additional corner cases
      s4 torture: Change oplock to use passthrough for exclusive3/batch11
      s3: Fix smbd to correctly return INVALID_LEVEL on set_file_end_of_file_info for paths
      s4 torture: Allow some implementations to break from level1 to none with two breaks
      s4 torture: Convert to a more modern version of read in RAW-OPLOCK-BATCH4
      s4 torture: Add a few more windows target types
      s4 torture: Convert an error to a warning in RAW-OPLOCK-BATCH22
      s4 torture: Close the third handle in RAW-OPLOCK-BATCH22
      s4 torture: Add a new RAW-OPLOCK test: BATCH26
      s4 selftest/quicktest: Update known failures for the sfileinfo and oplock changes
      s4 torture: Fix the streams create disposition tests to actually return an error on failure
      s4 torture: Add a new RAW-STREAMS test to simulate the summary tab
      s4 torture: Update RAW-RENAME to pass against win7
      s4 torture: Convert RAW-STREAMS to a set of test suites rather than a monolithic test
      s4 torture: win 7 doesn't like the sequential_only flag for directories
      s4 torture: Add a new torture:hide_on_access_denied parameter
      s4 quicktest: exclude raw-streams from quicktest until bug is fixed
      s4 torture: Cleanup RAW-ACLS a bit
      s4 torture: Add SHARE_DELETE to create_directory_handle
      s4 torture: close handle instead of using exit
      s4 torture: RAW-STREAMS-CREATEDISP Use a normal deny mode
      s4 torture: Parameterize streams delete behavior rather than commenting out the check.
      s4 torture: Add RAW-STREAMS-RENAME3 to show error when trying to overwrite a stream with an open handle
      s4 torture: RAW-STREAMS-NAMES Make sure the create time of the streams are different from the base file
      s4 torture: Fix RAW-STREAMS-DELETE to pass against samba3
      s4 torture: Do a better job of closing open files in RAW-OPLOCK.
      s4 torture: Be more permissive with share modes for oplock testing
      s4 torture: Update raw oplock to use win7 as the baseline for rename oplock break behavior
      s4 torture: Add RAW-OPLOCK-EXCLUSIVE7 which is similar to BATCH19
      s3 torture: Prevent smbcli segfault when running smbtorture3 against an smbd with security=share
      s4 torture: Add RAW-OPEN-NTCREATEDIR to test error checking for open directories as files
      s4 torture: RAW-SEARCH: Only test supported info levels

Timur (5):
      Fix cut and paste error in quota code.
      Fix display of POSIX ACLs.
      Fix aio on FreeBSD.
      build: format the header check for netinet/ip.h more nicely
      build: fix detection of netinet/ip.h on FreeBSD

Timur Bakeyev (1):
      Fix bug # 9666 - Broken filtering of link-local addresses.

Timur I Bakeyev (1):
      Fix installation path of the subunit python modules.

Timur I. Bakeyev (10):
      Use PYTHON_VER rather than PYTHON_VERSION, as the first is already
      rl_event_hook detection
      Make tunable for modulesdir
      Add langinfo.h to the system/locale.h
      Check for dmalloc at the end of the configure
      Set SIGRTMIN to NSIG
      SIGRTMIN additions
      Small fix to SMB_LIBRARY macro
      Fix make test_pam_modules
      Add ad-schema/*.txt and utils to the installmisc.sh

Todd Stecher (1):
      s3: Add support for access based share enumeration

Tomasz Krasuski (1):
      Fix bug #5928 - Option --version in testparm does not work.

Tomoki AONO (1):
      1. lib/system.c (xattr code for Solaris) could not be

Torgeir Lerkerod (2):
      Fixed problemed showed on a number of systems on the buildfarm.
      Fix errornos assumption that all compilers are gcc

Torgeir Lerkerød (2):
      S4: Building on a system with libintl
      S4: ldb_map modules uses defines that are reserved

Torsten Kurbad (1):
      s3: Fix a missing </listitem> in vfs_crossrename.8.xml

Tsukasa Hamano (1):
      Fix bug #9471 - SEGV when using second vfs module.

Vadim Zhukov (2):
      More generic check for OpenBSD platform
      pidl: Recent Perl warns about "defined(@var)" constructs.

Vance Lankhaar (5):
      r1656: Patch from James Peach:
      r1273: An initial doc about what I'd like to see in the swat for samba4. Please
      s/seperate/separate/g
      Since English is my first language, I suppose I qualify for "someone more
      Apparently Herb is more fluent than me...

Vicentiu Ciorbaru (44):
      s3-rpc_client: Added dcerpc_winreg_enumvals() function.
      s3-rpc_client: Added dcerpc_winreg_delete_subkeys_recursive() function.
      s3-rpc_client: Migrate to dcerpc_winreg_enumvals() function.
      s3-rpc_client: Migrate to dcerpc_winreg_delete_subkeys_recursive().
      s3-rpc_server: Removed no longer used functions.
      s3-net: Fixed typo in net conf
      s3-net: Fixed a small typo in net conf function table
      s3-net: Fixed whitespace errors
      s3-net: Added the command rpc conf to the net binary.
      s3-net: Added the net rpc conf list command.
      s3-net: Added rpc_conf_open_conf function
      s3-net: rpc_conf_list now uses the wrapper rpc_conf_open_conf
      s3-net: Added net rpc conf listshares command to net rpc conf
      s3-net: Implemented net rpc conf listshares command.
      s3-net: Added net rpc conf showshare command to net rpc conf
      s3-net: Implemented net rpc conf showshare command
      s3-net: Added net rpc conf drop command to net rpc conf
      s3-net: Implemented net rpc conf drop command
      s3-net: Added net rpc conf delshare command to net rpc conf
      s3-net: Implemented net rpc conf delshare command
      s3-net: Added net rpc conf getparm command to net rpc conf
      s3-net: Implemented net rpc conf getparm command
      s3-net: Added net rpc conf getincludes command to net rpc conf
      s3-net: Implemented net rpc conf getincludes command
      s3-net: Added net rpc conf delincludes command to net rpc conf
      s3-net: Implemented net rpc conf delincludes command
      s3-net: Created function net_rpc_conf_del_value
      s3-net: Refactored part of rpc_conf_delincludes_internal
      s3-net: Added net rpc conf delparm command to net rpc conf
      s3-net: Implemented net rpc conf delparm command
      s3-net: Added net rpc conf setparm command to net rpc conf
      s3-net: Implemented net rpc conf setparm command
      s3-net: Added net rpc conf setincludes command to net rpc conf
      s3-net: Implemented net rpc conf setincludes command
      s3-net: Added net rpc conf addshare command to net rpc conf
      s3-net: Implemented net rpc conf addshare command
      s3-net: Added net rpc conf import command to net rpc conf
      s3-net: Implemented net rpc conf import command
      s3-test: Enhanced the net registry roundtrip test script
      s3-test: added samba3.blackbox.net.rpc.registry.roundtrip testsuite
      s3-test: Added new testsuites for test net [rpc] conf
      s3-test: Added net conf tests to tests.py
      docs: Added documentation for net rpc conf.
      s3-net: Added documentation for net_rpc_conf functions

Vladimir Marek (1):
      Fix service control for non-internal services.

Volker Lendecke (7792):
      Added 3 commands:
      the real source code for the smbfs utilities. Forgot to do
      Added manpages.
      *** empty log message ***
      *** empty log message ***
      Added SuSE packaging files.
      Added mksmbpasswd.sh to binary package
      Added my course notes. Had asked Jeremy some weeks ago.
      Print an error message if database could not be opened.
      This is Jeremy pretending to be Volker, 'cos the
      Fixed a little typo.
      Fixed typo.
      Mention 'delete veto files' in 'veto files' description
      Change default 'name resolve order' to WINS before DNS.
      Fixed paragraph about byte range locking. Jerry, could you make a pdf of this?
      Added -s configfile to smbcontrol.c.
      From 2.2.
      How often did I read the CVS commit message
      Don't force winbind to use non-local DC's.
      As pdb_ldap.c does not compile in HEAD anyway, a not-compiled merge
      Don't close tdb twice.
      Minor typos
      Clarify a little
      Large expansion of my german book project.
      Same as in 2_2
      Merge from 2.2
      Merge from 2_2.
      3 branches might become a pain... :-)
      Fix debug level initialization for net.c
      just comment typos
      Add 'net rpc getsid' to fetch the PDC's SID into the local secrets.tdb
      global_myname is a pstring, not an fstring
      pdbedit needs global_myname to be set in order to display the
      Replaced reference to global_myworkgroup by calls to lp_workgroup().
      Merge from 2_2.
      There's no MACHINE.SID anymore...
      'No news is good news' might sometimes be confusing, at least to me :-)
      There's more work to be done on samsync. Intermediate commit, now
      Removed some misleading comment.
      Fix segfault in net command
      small typo, kai is german :-)
      usrmgr expects unicode as ProductType.
      Fixed a little, long standing bug: smbclient -M <name> should resolve
      Merge the cli_shutdown change from 2_2. All except one call to
      First code for 'net rpc vampire'. We should probably find a more
      trivial comment fix
      Sorry for the new parameter, but I think to really reflect what's coming
      Change parsing of policy and privs delta to what Ethereal says.
      Add the ability to view/set the current local domain SIDs.
      tdbdump also needs signal.h. Thanks to Guenther Deschner <gd at suse.de>
      Cosmetic fix for debug message.
      Ok, getting a bit more ambitious. Stop me, if this is wrong. ;-)
      Ok, what's this? Samba as a PDC wants to authenticate a user coming in
      This is a first working version of net rpc vampire. First do a net rpc
      Add -r parameter to smbgroupedit. With -r you can manually choose
      Do not update manpages directly...
      An example of a group creation command that can handle failures
      Sorry to touch such an internal function. But I was quite surprised that
      Touching somebody else's code again... Sorry, Richard.
      Thanks to abartlet I looked at that function a bit closer. What did
      Ok, hopefully final fix for this one. abartlet told a bit about the
      We have to hand out info on Builtin here as well. They are stored in
      Some more work on vampire.
      Second part of my fix -- incorrect merge.
      Third part of my fix for usrmgr. Assuming automagic mapping
      In my test, sync_context simply has to be incremented. Can
      Create group mappings on the fly.
      No functional change. I'm trying to understand pdb_ldap.c and
      Revert changes
      Revert changes
      This fixes some bugs for NT4 usrmgr.exe
      Fix full_name for info23 as well. Thanks, Andrew.
      I was somewhat annoyed by 'pdbedit -a vl' spitting an error message
      This moves the group mapping API into the passdb backend.
      pdb_unix.c did not really expect group RIDs dictated by a PDC and looking
      Same segfault as in add_groupmem.
      Implement 'net maxrid'. Needed to find the maximum current rid to
      search & replace doesn't always work reliably :-)
      Force algorithmic rid base to sane values and talk about it.
      One more const. Andrew, you seem to have krb5 :-)
      We still have 'ldap server' and 'ldap port'. Could somebody please
      We still have 'ldap server' and 'ldap port'. Could somebody please
      Create a machine account correctly if the unix account exists.
      Merge from HEAD.
      Fix memory leak. Thanks, Herb!
      Fix memory leak. Thanks, Herb!
      Make account flags editable with pdbedit.
      merge from HEAD
      Revert Flag testing upon abartlet's request ;-)
      Invert flag testing
      cmd_srvsvc.c
      Dummy commit, I can't get through to samba-cvs at samba.org. It can't really
      strcpy_base from HEAD and trivial fix for smbclient -L
      Some conversion to pstrcpy_base.
      Fix memory leak.
      Fix memory leak.
      Fix debug message not to use an uninitialized variable.
      Fix debug message not to use an uninitialized variable.
      Put group mapping into LDAP.
      Put group mapping into LDAP.
      If we fail, return an error code :-)
      Hey -- there is an error code NT_STATUS_CANNOT_DELETE :-)
      merge from HEAD
      Fix typo.
      Fix typo.
      Add paramter 'ldap del only sam attr'.
      Merge from HEAD.
      Merge Herb's change.
      I like debug level 10, but these messages always get into my way
      Fix typo
      Merge from HEAD
      NT4 as well as W2k respond with IPC regardless of what service
      Merge from HEAD
      This changes the way we do LDAP updates. We don't use LDAP_MOD_MODIFY
      This changes the way we do LDAP updates. We don't use LDAP_MOD_MODIFY
      Never touch complicated if/else/elsif structures :-)
      Never touch complicated if/else/elsif structures :-)
      Metzes change:
      Metzes change:
      This adds 'ldap delete dn' as the recommended parameter
      Merge from HEAD:
      The group mapping functions are not called
      The group mapping functions are not called
      This does two things:
      This does two things:
      Implement abartlet's suggestion to add attribs to ldap if they
      Implement abartlet's suggestion to add attribs to ldap if they
      Apply metze's change correctly this time. Playing 'patch' by
      Must have been somewhere else last sunday...
      Make auth.c compile again. I'm not sure what this does though...
      Fix schema error not detected by OpenLDAP 2.0.23 but by 2.1.16.
      Fix schema error not detected by OpenLDAP 2.0.23 but by 2.1.16.
      This is no functional change. It just makes pdb_ldap.c a bit
      This is no functional change. It just makes pdb_ldap.c a bit
      This changes our handling of invalid service types that the
      This changes our handling of invalid service types that the
      This fixes group updates in LDAP the same way as user updates
      This fixes group updates in LDAP the same way as user updates
      This sets the domain for the user in vampire. Otherwise
      This sets the domain for the user in vampire. Otherwise
      Waider's cosmetic change to print out the database type when
      Waider's cosmetic change to print out the database type when
      3 things:
      Hey, we're making progress with the docs ;-)
      3 things:
      This is a merge of the NETLOGON schannel server code from Samba
      Merge the TNG netlogon schannel from HEAD.
      Put the core schannel functions to parse_prs.c. They are also used by
      Put the core schannel functions to parse_prs.c. They are also used by
      A little clarification in the rpc auth header struct.
      A little clarification in the rpc auth header struct.
      Auth2, not also Auth3 sends us flags back, although all the callers
      Auth2, not also Auth3 sends us flags back, although all the callers
      This is the netlogon schannel client code. Try a
      This is the netlogon schannel client code. Try a
      Set the default schannel parameters to False until we know more.
      Set the default schannel params to False until we know more.
      Survive a samdump with an alias that has no description
      Survive a samdump with an alias that has no description
      Address gcc warnings.
      Address gcc warnings.
      Merge a trivial fix across from HEAD. Not that this
      Setting the credentials for the netsec netlogon pipe connect upon each
      Setting the credentials for the netsec netlogon pipe connect upon each
      parse_string is only used for the authentication negotiators.
      parse_string is only used for the authentication negotiators.
      As nobody really objected to this patch, I opted to create facts :-)
      As nobody really objected to this patch, I opted to create facts :-)
      Fix a confusing error message
      Typo in error message
      Now that multi-pdu schannel works and a but in the negotiator has been
      This puts back wins.dat into nmbd for easy editing. It leaves most of
      This puts real netlogon connection caching to winbind. This becomes
      Revert a patch that somehow slipped in...
      Ok, this is a hack. On a netsec bind reply I did not see anything
      When we have a NT4SP0 PDC trust us, we first have to check the
      Set the password for a newly created trustdom account. Tested against
      Fix an insufficient alloc when querying alias members.
      Fix an insufficient alloc when querying alias members.
      Correctly initialize winbind auth method.
      Correctly initialize winbind auth method.
      Fix compile.
      Fix 'security = domain' without winbind. This stores the sid we got
      Sorry idra for messing around with your stuff, but this was obviously not
      Set the user's primary unix group from usrmgr.exe.
      Andrew is right, this is probably the wrong approach.
      Fix typo found by Vance
      Get rid of a const warning.
      Fix some misleading debug messages.
      Andrew's change to make 'security = domain' work again. Leave the user and group
      Working on bug#3. We want all of the aliases, so start with 0.
      Fix for bug#3. Show comments when doing 'net group -l'.
      Trivial extension to 'net' to dump current local idmap.
      Add 'net idmap restore'. This restores a broken idmap file
      Fix misleading debug message.
      This glosses over John's problem at SambaXP 2003. When we want to join
      Const fixes by metze
      Fix memory leak in idmap. Valgrind is soooo cool.
      Fix a memory leak in pdb_tdb.c.
      And more other memory leaks. One new (idmap) and one ancient (groupdb).
      Better panic cleanly than segfault later when no sid can be found and created.
      And some more memory leaks in mapping.c and pdb_tdb.c. tdb_nextkey
      There's nothing particularly secret in idmap.tdb, so create it with
      Fix memory leak. secrets_fetch allocates memory.
      Fix a warning in a DEBUG
      Add the 'guest' passdb backend automatically if
      Don't set a mapping that is already there.
      Fix a segfault found by metze & valgrind...
      Fix two memory leaks. tdb_search_keys allocates space for the key
      Different fix for memleak just committed. This belongs into
      Add const
      pdbedit should not call idmap anymore. Otherwise pdbedit -L would
      We have an API to compare the domain parts of two SIDs, so use it.
      Argl. Thinking twice and looking at the rest of callers of sid_compare_domain
      Jim, could you please look at this? smbpasswd -a <username> was broken
      Fix memleak
      Fix memleaks
      We should report if a group mapping fails. This should fix bug#225.
      Fix memleak
      typo
      Fix memleak
      Ban getgrouplist on linux glibc systems with glibc <= 2.3.
      Disconnect an idle LDAP connection after 150 seconds.
      Fix two memleaks in pdb_ldap.c.
      Fix memleak
      Fix memleak
      This adds gss-spnego to ntlm_auth. It contains some new spnego support
      bin/net needs server_mutex as kerberos_verify now uses it.
      Apply some const
      This fixes an error I must have made when playing with spnego.c found
      Fixes for memory leaks in gss spnego handling by aliguori.
      spnego.c has function definitions. Prototype them.
      Fix off-by-one found by valgrind.
      locking.c now refers to map_nt_error_from_unix, so link it in with
      Fix a memory leak. I did not check all the calls to winbindd_request, but
      Add ntlmssp client support to ntlm_auth. Find the corresponding cyrus sasl
      Changes to make gss-spnego ntlmssp client work against W2k AD.
      When doing 'net groupmap add', default to algorithmic mapping for the rid.
      Store the server domain from the ntlmssp challenge in the client struct
      We get the server and workgroup list only over port 139. Fall back to that
      Fix typos.
      Apply some const
      Fix a segfault in ntlm_auth when we can't find a domain or hostname.
      Revert the latest fix. Need to investigate further.
      I think this is the one to check...
      Fix client autonegotiate signing.
      Clarify gss spnego ntlmssp server a bit
      Some more shuffling around gss-spnego server
      This adds *experimental* kerberos gss spnego client support to ntlm_auth.
      Apply a little const
      Only close anything that is not fid 0. Was very confusing in ethereal...
      Don't wrap up anything that is not there. Otherwise upper layers
      Fix the build for non-kerberos environments.
      In ads_verify_realm, all we use in the ADS_STRUCT is the
      Don't ask twice for the password
      Fix memleaks.
      Don't ask, it's too embarrassing :-)
      Add the gss-spnego kerberos server side to ntml_auth. This uses the
      Latest heimdal snapshot has a krb5_set_real_time with a slightly
      Fix segfault. krb5_free_ticket does not check if it got a NULL ticket.
      Fix memleak.
      Very weird. On my SLES8 installation ntlm_auth would give missing
      Nobody complained on the team-list, so commit it ...
      Add a descriptive comment to our usage of setresuid. lib/afs.c needs
      This only touches the fake kaserver support. It adds two parameters:
      Document the two new params.
      Don't #ifdef an AFS option with WITH_ADS. Thanks, jerry!
      Minor typos. No, not merged to all branches...
      Make pdb_ldap.c compile with SUN iPlanet headers. Whether this works will be
      Two fixes, thanks to "Stefan Kanthak" <skanthak at arcor.de>
      We are doing NT error codes now.... If we have an NT error, report that
      It's a perfectly valid condition to have zero alias members.
      In cli_lsa_lookup_sids don't leave the domain field uninitialized if
      Merge from 3_0:
      According to Ethereal we have a 32-Bit quantity here. And with SSVAL valgrind
      Merge from 3_0:
      After a phonecall with jra finally commit this.
      Merge from 3_0:
      This binds the nmbd sending socket to the 'socket address'.
      From 3_0:
      AC_CHECK_MEMBER seems to have problems for some versions of autoconf, at least
      From 3_0:
      Compile tdbdump by default.
      Compile tdbdump by default.
      Simple rename of get_socket_addr to get_peer_addr and get_socket_name to
      From 3_0:
      Implement %i-Macro for the locally used IP address. With this you can again
      From 3_0:
      Skip over the winbind separator when looking up a user.
      From 3_0:
      This fixes a bug when establishing trust against a german W2k3 AD server. In
      From 3_0:
      Get rid of a const warning
      Get rid of a const warning
      Implement "net rpc group members": Get members of a domain group in
      Implement "net rpc group members": Get members of a domain group in
      Only ask for 512 names at a time.
      Only ask for 512 names at a time.
      Implement 'net rpc group list [global|local|builtin]*' for a select listing of
      Implement 'net rpc group list [global|local|builtin]*' for a select listing of
      I needed a decently parseable format of smbstatus. Looking at smbstatus code
      I needed a decently parseable format of smbstatus. Looking at smbstatus code
      Beautify the net status help message a bit
      Beautify the net status help message a bit
      In the brief 'net rpc group' listing, don't cut off group names at 21 chars.
      In the brief 'net rpc group' listing, don't cut off group names at 21 chars.
      Two trivial warnings
      Two trivial warnings
      When parsing 'param = value', don't split 'value' at spaces.
      abartlet pointed me at the fact that the order and flags in loadparm.c are
      abartlet pointed me at the fact that the order and flags in loadparm.c are
      Fix our parsing of the LDAP url. We get around it as all decent systems seem
      Fix our parsing of the LDAP url. We get around it as all decent systems seem
      This is metze's LDAP rebind sleep patch:
      This is metze's LDAP rebind sleep patch:
      Collecting some minor patches...
      Collecting some minor patches...
      Collecting another little patch from gd at suse.de
      Collecting another little patch from gd at suse.de
      Preliminary fix for our signing problem with failed NTLMSSP logins. This patch
      Preliminary fix for our signing problem with failed NTLMSSP logins. This patch
      Fix Bug # 924
      Fix Bug # 924
      The AFS pts command always generates completely lower-case user names. As case
      The AFS pts command always generates completely lower-case user names. As case
      Another little one: Make pdb_test.c at least compile, although its way out of
      Another little one: Make pdb_test.c at least compile, although its way out of
      Fix for bug 707, getent group for huge ads groups (>1500 members)
      Fix for bug 707, getent group for huge ads groups (>1500 members)
      After talking with abartlet remove the fix for bug 707 again.
      After talking with abartlet remove the fix for bug 707 again.
      And yet another const
      And yet another const
      Commit the translation of the realm to the netbios domain name in the kerberos
      Commit the translation of the realm to the netbios domain name in the kerberos
      Fix warning
      Fix typo..
      Correctly detect AFS headers on SuSE in /usr/include/afs/afs/
      Correctly detect AFS headers on SuSE in /usr/include/afs/afs/
      There is a German translation of swat -- surprise :-)
      Merge Translation fixes
      Fix a segfault in winbindd. Calling getusersids with a SID that results in 0
      And another memory corruption in winbind. Arg 3 of safe_strcpy does not
      Don't substitute stuff in lp_afs_username_map, this is explicitly
      reply_spnego_kerberos did not set the domain of the user handed to
      reply_spnego_kerberos did not set the domain of the user handed to
      Commit sid<->[ug]id extensions to libnss_winbind.so on Linux, as well as a
      Patch from "Stoian Ivanov" <sdr at bultra.com>: Add -g (greppable..) to
      Patch from "Stoian Ivanov" <sdr at bultra.com>: Add -g (greppable..) to
      Display some nicer error messages for login via 'net'. I don't
      Display some nicer error messages for login via 'net'. I don't
      Fix compiler warning
      Fix compiler warning
      Fix decoding of base64. We got the length wrong when the result was not
      Fix decoding of base64. We got the length wrong when the result was not
      Fix typo
      Fix typo
      On my SuSE 8.2 (glibc 2.3.2) the getpwnam inside pdb_getsampwnam reset
      Fix memleak just introduced. Thanks to abartlet :-)
      Remove bogus check. No functional change, just cosmetics.
      Remove bogus check. Cosmetics.
      Fix the build & get rid of a compiler warning.
      And another build fix.
      Expand 'net rpc group members' to local groups.
      Expand 'net rpc group members' to local groups.
      Fix success message for net groupmap modify
      Fix success message for net groupmap modify
      Cosmetic fix: Use sid_is_in_our_domain instead of doing it per hand.
      Cosmetic fix: use sid_is_in_our_domain.
      If there are no alias members, don't ask for their sids :-)
      If there are no alias members, don't ask for their sids.
      In samr_lookup_names Windows does not return WKN_GRP(5) but ALIAS(4) when
      In samr_lookup_names Windows does not return WKN_GRP(5) but ALIAS(4) when
      Don't try to show groups that could not be listed.
      Don't try to show entries that could not be listed.
      Be able to set alias info for builtin as well.
      Also set alias info for builtins.
      When creating a group via a script, don't let winbind do it as well.
      When creating a group via a script, don't let winbind do it as well.
      'net idmap restore' is too useful to be left broken :-)
      'net idmap restore' is too useful to be left broken :-)
      Remove unused variable.
      Remove unused variable.
      Add 'net rpc group add'. For this parse_samr.c had to be changed: The
      Add 'net rpc group add'. For this parse_samr.c had to be changed: The
      Apply some const
      Apply some const
      And another little const
      And another little const
      Implement 'net groupmap set' and 'net groupmap cleanup'.
      Implement 'net groupmap set' and 'net groupmap cleanup'.
      That const was one too many
      That const was one too many
      Fix my fix to net rpc group list. We can certainly have more than a single
      Fix my fix to net rpc group list. We can certainly have more than a single
      Add 'net rpc group [add|del]mem' for domain groups and aliases.
      Add 'net rpc group [add|del]mem' for domain groups and aliases.
      Print an informative error message if trying to add/remove members from
      Print an informative error message if trying to add/remove members from
      Trivial commit to make 'smbdiff 3_0/source head/source' two files smaller.
      net_rpc.c: Don't complain if [add|del]mem was successful.
      net_rpc.c: Don't complain if [add|del]mem was successful.
      Apply my experimental aliases support to HEAD. This will be a bit difficult to
      Add aliases to winbindd_getgroups().
      When asked to delete an alias member, don't add it ...
      Fix Tim's fix for #1144. Tim, could you look at that again?
      Expand aliases for winbind-generated groups.
      Idra, your privileges patch allowed login only with tdbsam. The problem is
      This adds winbind-generated groups showing up in 'getent group'. It is not
      Fix typo.
      Fix typo.
      Another typo, sorry for samba-cvs spam :-)
      Another typo, sorry for samba-cvs spam :-)
      There's a specific error message NT_STATUS_ALIAS_EXISTS.
      There's a specific error message NT_STATUS_ALIAS_EXISTS.
      This might not be used a lot and might not survive for long, but at least it
      This might not be used a lot and might not survive for long, but at least it
      Mention wb_delgrpmem fix
      Get us a little closer to Windows LSA semantics.
      Get us a little closer to Windows LSA semantics.
      Don't pass DOM_SIDs around when pointers are enough.
      Apply some const
      Remove expanding sids from smbd, this will be done in winbindd.
      lsa_enumaccounts lists all SIDs that have been granted privileges. Simo,
      Add find_alias, create_alias, delete_alias, get_aliasinfo, set_aliasinfo and
      Remove the prototype for alias support in winbind again. This will be
      Add alias support to winbindd_passdb. Sorry, Simo, this does not leave too
      Rest of my winbindd_passdb alias support
      Make alias membership maintainable via net rpc group add/delmem. Alias
      When trying to remove a user from a group, winbind should be informed
      When trying to remove a user from a group, winbind should be informed
      Add and delete aliases via srv_samr_nt. For that I added a RID allocation call
      Fix 'getent group aliasname', this did not look in pdb.
      Clean up a bit :-)
      Ok, one of the latest cleanups did too much... :-)
      Two little annoyances:
      Two little annoyances:
      Fix sambaUserWorkstations for network samlogons against us as DC. Strip
      Fix sambaUserWorkstations for network samlogons against us as DC. Strip
      Fix sambaUserWorkstations on a Samba DC
      After briefly talking to jerry, commit this:
      Move the Client-IP based msdfs target expansion to a VFS module.
      Some fixes to expand_msdfs module.
      Without words...
      Apply some const
      Merge a fix from HEAD to 3_0
      Remove some unused code
      Apply some const
      Cosmetic: Fix a const warning.
      This restructures lib/afs.c so that the token data can be but into a
      Implement NETLOGON GetDCName client side. You can ask a DC for the name of
      r38: Fix caching of name->sid lookups
      r63: Remove -lcrypto from wbinfo. Sorry.
      r139: Apply some const
      r145: pdb_create_alias now returns NTSTATUS. More of this to follow.
      r153: Fix memleak
      r160: Fix msdfs proxy. Could others please also test this, this code is soo
      r223: According to Thomas Mueller, thomas.mueller at christ-wasser.de, the two lines
      r229: Don't list domain groups from BUILTIN.
      r238: Fix memleak
      r269: Patch from Krischan Jodies <kj at sernet.de>: Implement 'net rpc group delete'.
      r272: mention net rpc group delete
      r316: Fix split_domain_name. This defaulted to get_myname() instead of
      r319: Fix a segfault in winbind. Thanks to Guenther Deschner for his valgrind log
      r370: The 'it does never happen -- error on close()' does happen when you exceed
      r378: Add an option extd_audit:parseable=True. This gives messages of the form
      r404: Revert the change 378 to vfs_extd_audit.c, the parseable auditing
      r405: Some docs of vfs_full_audit.c as comment :-)
      r446: Close the open NT pipes before the tdis.
      r449: Two AFS-related things:
      r545: Handing a NULL blob to base64_encode_data_blob leads to an invalid write of a
      r942: If using DOS error codes, we need to return ERRDOS/ERRbadpath for chkpth even
      r964: The max_size field in cli_samr_enum_als_groups is more like an account_control
      r977: Implement 'net rpc group rename' -- rename domain groups.
      r979: Implement the 'cups server' option. This makes it possible to have virtual
      r988: When adding local aliases' gids to the user token, don't do a idmap_sid_to_gid
      r989: Calling sid_to_gid from within winbind makes no sense, as this calls
      r1101: Implement 'rpcclient setprintername'.
      r1104: get_called_name is used in the printing subsystem. In case of multi-homed
      r1106: Lars Mueller <lmuelle at suse.de> asked me to apply this patch, as this is needed
      r1108: Index: pdb_ldap.c
      r1175: Nowadays we actually do have local groups, so add the corresponding SIDs to
      r1202: This hopefully fixes our memory use when unmarshalling strings. The test case
      r1237: Correctly honor infolevel argument. Thanks to Guenther Deschner <gd at sernet.de>.
      r1282: gcc 3.2 on SuSE 8.2 does not like #ifdefs inside a macro argument (DEBUG).
      r1283: Fix typo
      r1285: Put variable definitions into a block before the statements...
      r1287: Attempt to fix the build for systems without kerberos headers.
      r1295: To be able to send a message to the background queue updated, we need to be
      r1297: Yes, it does survive valgrind for my tests :-)
      r1314: Restore the 2.2 'force unknown acl user' parameter. When getting a security
      r1318: Install libsmbclient into $(LIBDIR), not into hardcoded ${prefix}/lib. This
      r1328: Fix the build
      r1330: Fix the build for systems without ldap headers
      r1338: A netlogon schannel failure is a normal event with XP clients. They cache the
      r1340: _samr_lookupsids with more than 32 (MAX_REF_DOMAINS) SIDs failed. This
      r1375: When setting writable=yes in smb.conf and only allow read access in the
      r1396: Give the build farm a chance to be clean before 3.0.5. We don't accept
      r1430: Although prepared for only one remote backend, make the 'idmap backend'
      r1444: Another attempt to fulfil the 100% promise. There might be two dots at the
      r1531: smbd/tdbutil.c isn't used anymore. Bug 1443 is suspected to be a tdb
      r1532: Remove unused structure element
      r1560: Not that anybody uses this stuff (yet...), but at least get it correct :-)
      r1562: Make winbind for -S (sid->uid) and -Y (sid->gid) check whether the sid
      r1588: This is one of the more pathetic patches I ever checked in. Many hours of
      r1590: Small fixes from Günther Deschner
      r1638: Dont always uppercase "afs username map"
      r1658: Expand aliases for getusersids as well.
      r1716: Get rid of a compiler warning. "pipe" is a symbol that is defined as a system
      r1853: Improved NT->AFS ACL mapping.
      r1906: Revert lukeh's change for primary uid/gid change. This creates a recursion
      r2001: Fix bug 1622. Thanks to Qiao Yang for the patch and Sven Thomsen for testing
      r2023: If there's garbage in the pidfile, we should not panic but assume that no one
      r2093: Fix for Bug 1416. This must have been a cut&paste error from add_gid....
      r2258: Attempt to fix Bug 1715. Not sure if all of ldapsam_compat works now, but this
      r2340: Solve the problem of user sids ending up with gid's and vice versa: This
      r2351: Fix use of an uninitialized variable. valgrind is sooo useful.
      r2378: Remove two confusing #defines
      r2440: Use sys_fork instead of fork for the dual daemon so that we get the
      r2444: Based on jmcd's patch, implement special lists for the ldap user attributes to
      r2466: Fix memleak found by sean.chandler at verizon.net.
      r2470: Fix bug 1797: winbind and nmbd ignored "-l" option.
      r2566: Fix creation of aliases via usrmgr. Winbind was too strict checking the type
      r2584: After talking to jerry, commit the strlower patch to getent username and
      r2619: Only issue the ldap extended password change operation if the ldap server
      r2691: Increase a debug level for a quite frequent operation.
      r2729: Fix ldapsam_compat homeDrive. Thanks to jason at env.leeds.ac.uk
      r2935: This is a long-standing one in my patch-queue: A pair of net commands
      r3143: Allow for multiple DC's to be named as #1c names in lmhosts.
      r3407: Fix the build
      r3408: Another build fix
      r3525: Fix a memleak
      r3559: If called interactively, on shutdown dump the talloc contexts left. Idea
      r3561: Since we have tdb_reopen_all() after all forks, the local_pid logic is not
      r3563: During a typical logon a modern workstation makes a lot of anonymous session
      r3566: Completely replace the queryuseraliases call. The previous implementation does
      r3702: This is a getpwnam-cache. It is mainly to speed up Samba with slow nss
      r3704: Implement a cache get saves the result of a pdb_getsampwnam for later
      r3705: Nobody has commented, so I'll take this as an ack...
      r3758: Increase a debug level. This error condition can actually happen in real life
      r3811: Believe it or not, but this patch seems to be necessary. If someone sets a
      r3824: Fix crash in api_RNetShareEnum. ServicePtrs[] may contain invalid
      r3839: Some more specific NT security descriptors we've come across. Map them to
      r3841: Time out in ads search queries. Even AD servers can hang.
      r3843: If a connection to a DC is requested, open connections simultaeneously to all
      r3844: Attempt to get the build farm in line. Some systems seem to have defined
      r3846: Typo fix. Bug 2055. Lars, I'm available on irc.... :-)
      r3848: Fix for bug 2057. Only partially applied the patch, the second part seems not
      r3850: I get the impression that some developers here are using gcc 3.4. This one
      r3852: Fix the build...
      r3853: Fix an uninitialized variable warning. Jeremy, there are some of these in
      r3871: Fix memleak
      r3873: The semantics of the parameter 'printcap name' are a bit tricky. I had seen
      r3882: Fix bug 2069 -- thanks to jason at ncac.gwu.edu
      r3883: Fix error return -- thanks to rsharpe
      r4128: Cron jobs etc seem to do an initgroups for root quite frequently. So
      r4217: Fix open_any_socket_out.
      r4219: Fix samba3 samr "idl"... According to samba4 idl samr_DomInfo2 contains a
      r4222: Always compile before commit...
      r4224: Today is not my day ....
      r4248: Implement smbstatus -n, don't lookup users and groups. On heavily loaded
      r4251: AFS does not cope with spaces in file names. Implement a stupid mapping that
      r4252: Comment clarification from Love Hörnquist Åstrand <lha at stacken.kth.se>.
      r4254: Add an undocumented hack. I had to delete a wrong mapping (a user that had
      r4256: Add a patch from kllin at it.su.se: New Parameter 'afs token lifetime' tells the
      r4561: This looks a lot larger than it is, this is to reduce the clutter on future
      r4570: Replace cli->nt_pipe_fnum with an array of NT file numbers, one for each
      r4604: Attempt to fix the buildfarm build.
      r4731: Fix the build
      r4732: Even if we have 'password server' set, we need to look up the native DC name
      r4749: Fix memleak
      r4750: Fix cli_samr_queryuseraliases. There can be more than one sid, thus more than
      r4751: This is a domain policy, not a user one
      r4760: Make wbinfo --user-sids expand domain local groups. Andrew B., my testing
      r4933: List not only the first 10 trusts with rpcclient -c enumtrust.
      r4946: Our notion the other_sids in the info3 SamLogon struct was
      r4967: Not being in any domain local groups is obviously valid...
      r5096: Attempt to fix the build
      r5098: Next round build-fixing
      r5125: Fix bug 2113 -- thanks to jason at ncac.gwu.edu
      r5127: Fix Bug 2289 -- thanks to jason at ncac.gwu.edu
      r5228: Fix typo, mention officially supported samba3/SLES8 packages on ftp.sernet.de.
      r5314: Some const, and an uninitialized variable fix.
      r5316: Get 'net afskey' into a subcommand of its own, 'net afs key'.
      r5331: Support SIDs as %s replacements in the afs username map parameter.
      r5419: Fix some unitialized variable warnings
      r5421: Fix a memleak
      r5428: Apply some const. LDAP attribs should now be declared const char *attr[]. This
      r5467: Optimize _samr_query_groupmem with LDAP backend for large domains.
      r5469: Fix error codes of samr_lookup_rids: There's also STATUS_SOME_UNMAPPED.
      r5471: In cli_samr_lookup_rids, flags is not a flags but an array size. W2k3 rejects
      r5481: Fix a memleak
      r5484: Fix a memleak
      r5647: Caches are good for performance, but you get a consistency problem.
      r5654: Fix bug 1604 -- make winbind work with more than 10 trusted domains.
      r5657: Fix uninitialized variable warning
      r5692: Fix compile warnings
      r5724: Fix compiler warning
      r5767: Get rid of some compiler warnings
      r5770: Get rid of some compiler warnings
      r5861: Apply some const
      r5862: And some more const
      r5880: From the comment....
      r5905: Fix two warnings found by AIX. They might actually be bugs on 64-bit
      r5910: Partial fix for bug 2438. I'll leave the debug message in place, that fix is a
      r6080: Port some of the non-critical changes from HEAD to 3_0. The main one is the
      r6110: Close handles on user creation. This allows easy mass creation of users with
      r6216: Brown paper-bag bug fix for wbinfo --user-sids.... Nobody seems to really use
      r6217: After talking to jerry, commit the partial fix for wbinfo -r. This fixes the
      r6263: Get rid of generate_wellknown_sids, they are const static and initializable
      r6273: Remove some unused code, minor cleanup
      r6275: Implement RAP version of enumusers/enumgroups level 0. No, I've not gone mad,
      r6277: This implements a new caching API for enumerating the pdb elements. It is
      r6279: Convert the RAP enum functions to the pdb_search API. Who is using this
      r6281: Fix the build for FreeBSD 4 -- no winbind
      r6282: Before converting enum_dom_groups, better get the previous version a bit
      r6351: This is quite a large and intrusive patch, but there are not many pieces that
      r6367: Slim down pdb_interface.c a bit. next_entry and search_end are function
      r6401: Fix a debug message
      r6445: Make us survive the PARANOID_MALLOC_CHECKER. Should we enable that for
      r6488: net rpc printer migrate should not try to set stuff that's not there. This
      r6536: Jeremy, did you actually test this part of revision 801? I just tested that
      r6627: Fix debug message
      r6639: Attempt to fix the build with talloc
      r6640: Attempt to fix 'make everything' with the paranoid malloc checker.
      r6651: It's not the smartest thing in the world to #define _SAMBA_BUILD_ in a file
      r6652: Next step getting the build farm happy.
      r6654: Make talloc.c 4.0-ready
      r6656: Samba 4 is Samba 3.9...
      r6658: Sorry for the spam... I think now I've got a version that should compile on
      r6743: Merge r6741 from 4_0
      r6748: With reconnects, state->connection->ldap_struct can change in smbldap_search
      r6770: Fix bug 2705. Thanks, John, for beating my stuff :-)
      r6772: Fix a valgrind error for samr_open_alias uncovered by one of John's test.
      r6774: Fix 2 memleaks
      r6777: Fix vfs_full_audit.c after jra's change.
      r6779: Use the SID in the user token for the %s expansion in 'afs username map'. This
      r6849: Merge revision 6845 from Samba 4
      r6880: Fix bug 2070 after positive feedback from Leon Vernikov. Thanks!
      r6900: Fix bug 2725. Thanks, John, for finding it.
      r6953: Many compilers in the build farm don't like static variables initialized with
      r7217: Only allow schannel connections if a successful Auth2 has been done
      r7243: Don't look at gencache.tdb for the trusted domains if winbind is around.
      r7344: Correctly return if malloc fails.
      r7371: On one build farm box dirtest1 does not return, I think this might be due to
      r7390: Revision 7371 did not help :-(
      r7423: Fix the build on sol10
      r7718: Remove some unused code
      r7730: Some merges
      r7785: This looks much larger than it is. It changes the top-level functions of the
      r7835: Add the forgotten GPL header. This source code file is distributed with Samba
      r7836: Fix the bug where users show up as trusting domains.
      r7877: Attempt to fix a smb_panic reported by Pavel Rochnyack.
      r7902: Fix the build
      r7903: Attempt to fix the AIX build
      r7904: Fix a memleak in vfs_afsacl
      r7998: Fix usage message
      r8029: Fix bug 2841. Thanks to Brett Trotter.
      r8047: "oid" is defined in a heimdal header. With my gcc this generates a ton of
      r8062: Remove some unused code
      r8092: Attempt to fix the socket wrapper stuff for Samba 3.
      r8093: Next round. Now it compiles with --enable-socket-wrapper.
      r8231: Patch from James Peach to fix the IRIX build.
      r8360: Some ioctl constants, found by Björn Jacke <bj at sernet.de> with
      r8366: Root-level files don't have a slash, but acls need to be settable on
      r8492: open_mode_check does not use the parameter p_flags, so remove it.
      r8508: Rename EXCLUSIVE_BREAK_SENT to BREAK_TO_NONE_SENT.
      r8521: Another micro-step: Don't pass down a flag where not necessary.
      r8531: Fix a memleak
      r8798: Save one system call per SMB. smb_run_idle_events right now is only used to
      r8833: Fix some uninitialized variables.
      r8869: Get rid of a warning.
      r8889: Another warning
      r8989: Fix a warning
      r9095: Add crude chainlength statistics to the crude tdbtool.
      r9189: Add the capability to set different registry value types (string, dword and
      r9198: Convert hex_encode and strhex_to_data_blob to take a talloc context.
      r9200: Add support for REG_BINARY to rpcclient getdata and setprinterdata.
      r9201: Ouch.... :-(
      r9584: Fix a race condition in Samba 3. If two files are opened simultaneously with
      r9619: Fix messages_pending_for_pid actually do what it's meant to do. This might be
      r9709: Fix two bugs found by Brian Moran: Any request sent to winbind while the child
      r9738: Adapt tdb_torture to the new CLEAR_IF_FIRST semantics. We need one parent
      r10152: 64-bit fix for bug #3082. Thanks to Robin Hill for tracking this down with
      r10239: Fix cut&paste error
      r10267: Exit if winbind can't find or generate a SID -- there's no point in
      r10658: It's so nice to have CVSIN to blame for this kind of bugs :-)
      r10671: Attempt to fix the build on machines without kerberos headers.
      r10672: Attempt to fix the IRIX build. James, could you test the Oplock code on a box?
      r10674: We no do define timeval_current
      r11251: Fix a comment
      r11253: Fix an annoying timeout when no nmbd is around
      r11266: Speed up loading smb.conf for large numbers of share definitions. The problem
      r11286: Fix a potential segfault
      r11319: read_buf_len and write_buf_len are no longer used, remove them.
      r11320: Fix error handling for rpccli_netlogon_getdcname. Jeremy, the other functions
      r11323: Fix usage of rpccli_netlogon_getdcname. Add some debug messages.
      r11324: Re-formatting before I can get a very *narrow* focus on the bugs in here. ;-)
      r11326: Fix alignment in getdc response
      r11327: Make user domain settable by pdbedit
      r11328: Actually verify that the bind on a pipe succeeded with a samr_connect or
      r11368: Remove a memleak that just cost me half an hour: If we terminate inside a
      r11381: Correctly connect to 445 and 139 after a successful getdcname.
      r11551: Add a few more initialize_krb5_error_table
      r11556: Fix "make everything"
      r11585: Implement the possibility to have AFS users as SIDs in pts.
      r11667: Fix a debug message
      r11704: methods->alternate_name is not used anymore -- remove it
      r11706: Implement dsr_getdcname client code. It's handy: It not only gives you the IP
      r11707: alt_names[i] might be NULL for i>0 also...
      r11734: Remove unused variable
      r11739: As per Jeremy's request, add a panic action for developers. Now configure.in
      r11784: Fix minor glitch found by Rainer Weikusat <rainer.weikusat at sncag.com> -- Thanks
      r11898: Add a missing become_root().
      r11909: Implement 'reset on zero vc'. This kills other connections when a session
      r11914: After talking to Jeremy, implement passdb:expand_explicit with a default of
      r11915: Remove unused extern declarations
      r11916: auth_get_sam_account is only used in auth_rhosts.c -- move it there
      r11917: Move nt_token_to_group_list to srv_netlog_nt.c. srv_util.c is empty now.
      r11918: Remove two unused variables
      r11919: The generic mappings in srv_samr_nt.c are only used there -- make them
      r11920: Rename local_lookup_rid to lookup_global_sam_rid, add lookup_builtin_rid.
      r11921: samr_open_domain can only open "our" domain and BUILTIN.
      r11922: Looks bigger than it is: There's no point in allocating arrays in
      r11923: Add samr_lookup_rids for the builtin domain. Doing it this way feels a bit
      r11947: Back out passdb:expand_explicit until we find consensus. I'll file this as a
      r11975: Fix valgrind error -- bug 3291
      r11998: Add lookupname to rpcclient query_user as a fallback, we now accept both rid
      r11999: Re-add "passdb expand explicit".
      r12046: Fix typo
      r12051: Merge across the lookup_name and lookup_sid work. Lets see how the build farm
      r12052: Remove unused typedefs
      r12055: More cruft
      r12129: Fix uninitialized variables.
      r12133: Fix an uninitialized variable in new code in rpc_server/srv_samr_nt.c.
      r12163: Change lookup_sid and lookup_name to return const char * instead of char *,
      r12169: Remove an unused function
      r12170: Fix a segfault -- this is post-3.0.21 code
      r12182: Cosmetic cleanup
      r12185: Cosmetic cleanup
      r12290: Typo
      r12291: Make getgroups_user static.
      r12303: Move split_domain_and_name to util_getent.c and make it static there.
      r12305: Reformatting
      r12306: Reformatting
      r12307: Reformatting plus a trivial if/else simplification. There's no point in doing
      r12308: Reformatting
      r12311: Reformatting
      r12312: Reformatting and a trivial change: is_share_read_only_for_user only uses
      r12313: Introduce yet another copy of the string_sub function:
      r12438: Remove an unused function
      r12460: Fixes for bug 3349
      r12474: Fix a warning
      r12475: Actually configure with profile support this time ...
      r12476: Apply some const
      r12477: Remove a gcc -O6 warning
      r12544: Fix segfaults in winbind, smbpasswd and net
      r12581: And another one :-)
      r12603: NO, I'm not claiming maintainership of this.
      r12645: Fix some memleaks. This will also be in the trunk checkin that comes next.
      r12663: Fix a memleak
      r12678: One more
      r12721: GPFS 2.4 on Linux will contain some windows semantics, ie share modes and
      r12735: After talking to Tridge and Jeremy... This needs to be made more generic
      r12760: Fix bug 3384
      r12771: Apply patch from bug 3374, attempt to fix build on tru64.
      r12781: Support the level parameter for lsa_lookupsids.
      r12837: - configure check for Tru64 EA functions (not yet implemented)
      r12839: - apply changes from svn r4963 also for VFS configure - KRB5_CONFIG should not
      r12840: Add -W to smbpasswd. Thanks to William Jojo <jojowil at hvcc.edu>.
      r12993: Ouch...
      r12994: Fix cut&paste error, thanks to Björn Jachke <bj at sernet.de>
      r13202: Fix the build for --with-aio-support. Sorry.
      r13209: Make smbpasswd -a work again if passdb did not exist.
      r13211: Fix remote password changing if password must change is set
      r13291: NT checks the minimum password age dynamically. That means we have to ignore
      r13309: If the sid in the winbind name2sid cache is not valid (NT_STATUS_NONE_MAPPED),
      r13337: Attempt to fix the AIX build
      r13338: Remove the experimental pdb modules
      r13343: More sql cleanup
      r13350: Implement rpccli_samr_set_domain_info. Weird that it was not around :-)
      r13351: Fix copyright
      r13366: Add popt to the include path for examples/VFS. The modules themselves don't
      r13371: Remove an unused function
      r13378: Not sure what this breaks, but we have to do the popt processing after the
      r13379: Andrew correctly noted that this breaks -s. Not sure what to do...
      r13389: get_ldap_filter is only used once, make it static
      r13394: Fix rpcclient to obey the -W parameter. Not that I *like* the smbclient
      r13477: Fix code before declaration
      r13486: Two more -- fix bug 3503
      r13493: module_name and module_location are the same string. Fix a valgrind
      r13494: Merge the stuff I've done in head the last days.
      r13517: Fix typo -- thanks to Karolin Seeger <ks at sernet.de>
      r13544: -O1 janitor work :-)
      r13579: Next try to fix the AIX build. Thanks to Björn for nagging...
      r13678: Remove unneeded braces
      r13683: Fix the 'valid users = +users' problem I introduced.
      r13690: Check in Björn's LDAP Solaris fix.
      r13693: More Solaris/LDAP fixes from Bjoern <bjoern at j3e.de>
      r13694: Committing patch from Aleksey Fedoseev <aleksey at fedoseev dot net> to NULL
      r13727: Fix a segfault
      r13728: No, we have not talked about this on irc less than 24h ago... ;-)
      r13729: Fix smbpasswd -x
      r13791: Having S-1-1-0 show up in winbind lookupsid does not really make sense.
      r13816: Volunteering :-)
      r13841: Fix an uninitialized variable warning.
      r13895: As agreed upon with gd on the phone, remove WBFLAG_PAM_CONTACT_TRUSTDOM. This
      r13914: Fix Coverity bug #151.
      r13916: Fix Coverity bug #29. Looks like my code. I wonder how much there is still
      r13950: Fix Coverity bug #168
      r13951: Fix Coverity Bug #163.
      r13955: Fix Coverity ID 139.
      r13958: Fix Coverity Bug # 141
      r13979: We've dereferenced my_methods already, so there's no point in checking for
      r13980: Fix Coverity bug # 63. Jeremy, could you take a look at this?
      r13981: Fix Coverity bug # 138
      r13983: Fix Coverity bug # 111
      r13984: Fix Coverity bug # 98
      r13987: Fix Coverity bug # 74. This tool is good...
      r13991: Fix Coverity bug # 69
      r14017: Okay, okay, I have turned a double-free into dead code :-)
      r14022: Fix Coverity bug # 92
      r14025: Remove unused code. When we want to export samsync, we better first port
      r14033: Fix Coverity bug # 126
      r14034: Fix Coverity id # 125.
      r14035: Fix Coverity bug # 124
      r14036: Ok, the last one generated a const warning. Also fix Coverity # 119.
      r14098: Fix Coverity # 112
      r14099: Fix Coverity # 113
      r14101: Fix a segfault in trustdom establish, cli is NULL here.
      r14102: Fix Coverity bug # 70
      r14103: Fix a memleak found by valgrind (!!)
      r14131: Fix Coverity bug # 127
      r14132: Fix Coverity bug # 150.
      r14133: Fix Coverity bug # 140
      r14134: Fix Coverity bug # 137
      r14214: Fix Coverity Bug # 57
      r14216: Fix Coverity bug # 8
      r14217: Fix Coverity Bug # 7
      r14218: Fix Coverity Bug # 2
      r14224: Fix Coverity bug # 6
      r14225: Fix Coverity Bug # 67
      r14226: Fix Coverity bug # 109
      r14228: Fix Coverity bug # 217
      r14232: Fix Coverity Bug # 218
      r14233: Fix Coverity bug # 206
      r14234: Fix Coverity bug # 93
      r14235: Fix Coverity bug # 91
      r14236: Fix Coverity bug # 90
      r14241: Fix Coverity bug # 146
      r14242: Fix Coverity bug # 82
      r14243: Fix Coverity bug # 143
      r14244: Okay, had not seen that this happened twice.
      r14245: We've dereferenced argv before, no point in checking.
      r14246: Fix Coverity bug # 85
      r14247: Fix Coverity bug # 136
      r14248: Fix Coverity bug # 84
      r14249: We've dereferenced the_acl before, no point in checking.
      r14298: The other half of Coverity # 217
      r14367: Not that I fully understand what's going on here, but the code as it was here
      r14480: Kill one boolean flag passed down :-)
      r14509: Attempt to fix the build on "sun1"
      r14559: Oplocks have changed, process_smb can be static again
      r14695: Patch from Björn Jacke:
      r14889: Fix smbwrapper compile
      r14895: Merge the 3.0.22 change
      r14896: Remove unused files
      r15009: Add a check for NULL
      r15011: Fix bug # 2413. net rpc info can't reliably work anonymously anymore.
      r15034: Attempt to make the build farm happy
      r15035: It seems that many preprocessors do not like comments in macro args..
      r15039: Fix an uninitialized variable. I _think_ this should default to
      r15068: Fix a shadowed variable warning
      r15098: Make smbclient -L use RPC to list shares, fall back to RAP. This should list
      r15101: Little step towards getting Samba4 tdb into 3: tdb_lock_bystring does not
      r15102: u32 is a tdb-only thing that's not exported by samba4 tdb. Replace by uint32.
      r15103: Okay, looking closer: Samba4 tdb not exporting u32 is a bug in samba4's
      r15104: Implement Samba4's tdb_name().
      r15119: Initialize our global sam sid first, quite a lot of the other initialization
      r15132: Fix some shadowed variable warnings
      r15133: in_server is not used anywhere
      r15136: Fix join consistency check
      r15137: Refuse to join if our netbios name is longer than 15 chars. I think this is
      r15173: Fix a non-critical memleak
      r15174: Check in Ronan Waide's wbinfo -i. Thanks :-)
      r15175: Try to get Stratus VOS back to build. Thanks, Paul.
      r15227: Fix a valgrind error. We are marshalling here, not unmarshalling.
      r15266: Fix bug 3720. I wonder why -O1 compiles did not catch this...
      r15320: default "passdb expand explicit" to no
      r15359: Fix typo
      r15360: Fix bug # 3741. One more place where the algorithmic mapping needs to stay.
      r15471: Clarify error message
      r15472: Remove an unused function parameter
      r15475: Ugly and disgusting patch to fix the username map problem I created by
      r15476: Transfer the was_mapped flag from user_info to server_info also in auth_sam
      r15477: Committing parts of the patch Timur has submitted for bug 2961, as agreed upon
      r15478: Likewise for bug # 3763
      r15479: Check in patch from bug # 3746 -- Thanks Timur
      r15483: Fix 'declaration after code' warnings.
      r15494: Fix debug statement
      r15495: current_user_info is not referenced in process.c
      r15496: current_user_info is not referenced in loadparm.c
      r15562: Attempt to fix Coverity bug # 283
      r15566: Fix Coverity bug # 284. The lp_ldap_xx_suffix function only return NULL if
      r15569: Fix Coverity bug # 287. Jerry, can you check if WERR_NOMEM is a correct error
      r15570: Fix Coverity bug # 286. I really wonder why gcc -O1 did not catch this one.
      r15571: Fix Coverity bug #285
      r15583: Add a comment while trying to understand this code
      r15589: While trying to understand the vuid code I found that security=share is broken
      r15600: Correctly fill in the gid for local users.
      r15601: Fix segfaults with 'security=share' and 'guest only = yes'
      r15608: Fix a couple of Coverity errors
      r15635: Fix a bogus gcc uninit variable message
      r15657: Fix some Tru64 warnings
      r15660: Without this when using smbcquotas I get
      r15705: Fix bug number 3788. Thanks to Jeff Wright.
      r15755: Fix Coverity bug # 294. Apparently password can be NULL, but cli_session_setup
      r15817: Remove some unused code
      r15845: Ok. This was a tough one. If for some reason the tconX fails towards a domain
      r15904: This does two things:
      r15909: Implement recycle:subdir_mode
      r15910: vfs_full_audit does not need current_user
      r15911: Make us survive rpc-authcontext committed next
      r15917: Activate RPC-AUTHCONTEXT in "make test"
      r15918: Attempt to bring Solaris into make test. The Solaris shell does not like the
      r15924: Ok, the Solaris fix broke AIX. Next try :-)
      r16014: Correctly set the group RID in init_sam_from_buffer.
      r16046: Hmmm. I don't fully understand popt, but this is necessary for smbclient to
      r16060: This is one of the more dirty patches I've put in lately. Parse enough of
      r16064: Bug fix for another one Tom Bork has reported:
      r16065: Re-add a strlower_m(account) in samr_create_user that was dropped for no
      r16141: Dummy commit to make the build farm re-test against Samba4 16140
      r16150: Fix possible NULL dereference found by Klocwork ID # 17
      r16153: Fix possible NULL dereference found by Klocwork # 252
      r16156: Fix storing NULL in the wrong place. Klocwork id's 127 and 128.
      r16196: A bit of defensive programming:
      r16197: Fix Klocwork id 1338
      r16198: Fix Klocwork 1023
      r16201: Fix Klocwork 439
      r16203: Fix potentially writing one result of strtok beyond the end of alt_path.
      r16204: Fix Klocwork # 14
      r16247: Fix Coverity ID 296
      r16248: Fix Coverity ID 297
      r16249: Fix Klokwork ID 130
      r16250: Fix Klokwork IDs 148, 151, 152, 154.
      r16251: for i in `seq 1 1000`
      r16252: Fix Klocwork ID 1119, 1121.
      r16290: Fix Coverity bugs 298 and 298
      r16301: Fix a memleak
      r16334: Fix Klocwork ID's 1087, 1095, 1096, 1098, 1099, 1101, 1102, 1105, 1107, 1109,
      r16335: Fix Klocwork IDs 107 108 109 111 112 113 114 116 117 118 121
      r16336: Fix Klocwork ID's 1087, 1095, 1096, 1098, 1099, 1101, 1102, 1105, 1107, 1109,
      r16337: Add configure fixes by Bjoern Jacke <samba at j3e.de>.
      r16338: Fix Klocwork ID 150
      r16339: Fix Klocwork ID
      r16340: Commit Bjoern's fix for the AIX PIC suffix. 'make test' still does the first
      r16360: Fix Klocwork ID 136 520 521 522 523 542 574 575 576 607
      r16361: Fix Klocwork ID 1731 1770 1771 1775 1796
      r16362: That's the best way to fix a Klocwork bug: Remove the (unused...;-) code
      r16363: Fix Klocwork ID 981 1652
      r16409: Fix Klocwork ID's.
      r16411: Fix compilation of vfs_afsacl, thanks to Greszler Szilard for trying
      r16427: Fix bug # 3848. Thanks to Wilco Baan Hofman for testing the release candidate!
      r16490: Fix a memleak and two typos
      r16676: .o generates other warnings, use the Solaris trick with .po.o also for AIX.
      r16755: Hunting warning has some benefits....
      r16766: A warning found by RHEL3. This might actually be 3.0.23 code, maybe there are
      r16864: Intermediate checkin -- swap the sid_check_is_in_unix_users and
      r16865: This is a proposal to fix bug 3915. Before sending patches around, this is
      r16866: No idea why I did not see the warning, sorry....
      r16955: Fix an uninitialized var -- Jerry, please check.
      r16960: Some warnings from host "opi"
      r17010: If winbind is not around, add S-1-22-1-<uid> to the user's token.
      r17011: Back out r17010 after talking to Jerry. Another fix pending...
      r17016: Different and smaller fix for the valid users = username problem.
      r17022: Fix the build farm -- maybe this is the real fix, testing more
      r17032: I thought I had already merged this from trunk:
      r17033: Restructure init_srv_share_info_ctr so that there's only one loop, not a dozen
      r17039: Eliminate snum from enumshares and getshareinfo. Get rid of some pstrings.
      r17047: Fix a typo and a possible NULL dereference
      r17060: Some c++ warnings
      r17064: lsa_GetUserName needs to return the name for S-1-5-7 on an anonymous login.
      r17075: Even without talloc_steal you can still create memory problems.... ;-)
      r17077: Activate RPC-SAMBA3-GETUSERNAME in the build farm
      r17078: Ouch....
      r17089: Fix a possible null dereference and some memleaks.
      r17095: Activate RPC-SAMBA3-SHARESEC
      r17096: Simplify share_access_check a bit: It takes the sharename instead of the snum,
      r17097: Move share_access_check from rpc_server/srv_srvsvc_nt.c to lib/sharesec.c
      r17116: Jerry, I can't reach you right now, but r17110 broke the build.
      r17134: Fix a debug message
      r17136: Fix alignment on lsaquery. This broke in particular level 6, where the client
      r17138: In preparation for the cluster merge, add an empty configure option :-)
      r17177: Get rid of a global variable by adding a private data pointer to
      r17184: Attempt to get rid of some warnings on HP/UX. Without _XOPEN_SOURCE_EXTENDED
      r17188: Dump lsa_lookupsids3. I could not make it work at all against W2k3, the
      r17190: Remove a warning from "opi", a 64-bit machine
      r17191: Forgotten file, sorry!
      r17192: Make this actually survive valgrind. We NEED pidl here...
      r17194: To run rpc-samba3-lsa in the build farm, we can't rely on geteuid()==0. Adapt
      r17199: Add comment to the RID/SID miracle
      r17228: Modest reformatting
      r17229: Indent-style reformatting -- getting used to the code again :-)
      r17231: Some patch cosmetics
      r17254: Simple flattening of an if-statement, no logic change.
      r17279: conn->cnum is the tid we've given to the client. This has nothing to do with
      r17312: Do some reformatting on net rpc samsync ldif. Not doing this checkin easily,
      r17313: Non-Ascii attribute values need to be encoded as base64, with an attribute
      r17315: Make talloc and tdb C++-warning-free. Would this also be interesting in talloc
      r17316: More C++ warnings -- 456 left
      r17333: Some C++ warnings
      r17334: Some C++ warnings
      r17335: Some more fixes to net rpc vampire ldif. Still not good though :-(
      r17345: Some C++ warnings
      r17347: Some C++ warnings -- 271 left
      r17348: Some C++ warnings
      r17356: Also transfer the sambaHomePath attribute.
      r17363: Some C++ warnings
      r17364: Another NT4 join bug: The idealx tools set the primary group sid, and if we do
      r17374: Get rid of a silly "System User" default for "description", also fetch the
      r17375: If a field containts only whitespace, we need to do base64 as well.
      r17399: Some C++ warnings
      r17404: Is this XP (extreme programming)? :-)
      r17406: We need to do a translation of winbind separator -> '\\' in
      r17425: Add the multi-key wrapper. If it's necessary to add general blobs as keys,
      r17446: Fix some C++ warnings and two memleaks found by Coverity, IDs 304 and 305.
      r17451: Change pdb_getgrsid not to take a DOM_SID but a const DOM_SID * as an
      r17452: Some C++ warnings
      r17457: Add a test to do some operations on group mapping.
      r17460: First step at fixing the build breakage with the groupmapping test. On Linux,
      r17463: A bit of cleanup work:
      r17465: Get rid of add_initial_entry. In the two places it was called in it seemed a
      r17468: To minimize the diff later on, pre-commit some changes independently: Change
      r17470: This is the group mapping rewrite announced a few days ago. I'm afraid it's
      r17477: Add talloc_asprintf_len and make use of it.
      r17535: Reformatting, this had many tabs instead of ^$
      r17536: Add a debug message citing the reason why an LDAP connection failed, inspired
      r17550: Fix a few bugs in the tdb_multikey code. Thanks to tridge for pointing them
      r17551: Move some DEBUG to d_printf in interactive functions and return
      r17552: Attempt to fix tdb transactions on IRIX
      r17554: Cleanup
      r17555: Cleanup
      r17556: Remove duplicate entries. Thanks to Michael Adam <ma at sernet.de>
      r17557: Change net_join_domain to return NTSTATUS instead of int.
      r17568: Reformatting -- more than 100 cols is too much :-)
      r17569: Make 'max smbd processes' more robust. Counting on the child to decrement a
      r17571: Change the return code of cli_session_setup from BOOL to NTSTATUS
      r17572: Fix the build
      r17573: Fix typo
      r17583: Change internal cli_session_setup functions to NTSTATUS.
      r17584: Some C++ Warnings
      r17585: Don't let ads_status throw away the error information.
      r17589: Check in the really uncontroversial patch from Michael
      r17590: Some C++ Warnings
      r17591: machine_account is unused, and ctx must be freed. Thanks Michael
      r17592: Remove some unused functions pointed out by John E. Malmberg, make
      r17602: Make check_ads_config return NTSTATUS, set some error codes in net_ads_join.
      r17603: Make net_ads_join_ok return NTSTATUS.
      r17604: Fix a bug caught by g++.
      r17605: Some C++ warnings
      r17606: Introduce krb5_to_ntstatus.
      r17607: Adapt the Samba4 directory structure for tdb. Makes it easier to diff.
      r17620: Fix two C++ Warnings and a memleak
      r17622: Add a framework for a printing backend designed to support the build farm. If
      r17623: Revert accidential commit
      r17625: Fix the build
      r17626: Some C++ Warnings
      r17804: Fix a enum/int mixup found by the IRIX compiler.
      r17805: Sorry Jerry, I could not stand the warnings... :-)
      r17807: Fix a file descriptor leak pointed out by John Malmberg. Thanks!
      r17831: Attempt to fix the build farm: 0x7fffffffffffffff needs special casing too I
      r17832: Fix bug 4050
      r17833: Next step to fix the build farm.
      r17835: Fix Coverity bugs 306, 309, 310.
      r17836: Don't create zombies in the children, thanks to Jeremy!
      r17845: Remove a Solaris warning
      r17847: Dummy commit
      r17850: Another dummy checkin for the build farm to retry
      r17851: Fix a warning & attempt to fix the Tru64 build
      r17852: Remove a pointless NULL assignment
      r17853: Fix an uninitialized variable (m_time2). Jeremy, please check.
      r17854: Steal the LDAP in NTSTATUS trick from Samba4
      r17855: Fix the build on systems without LDAP
      r17880: On host "tridge" in the build farm the tests fail because smbd hangs in in
      r17881: Another microstep towards better error reporting: Make get_sorted_dc_list
      r17896: Reformatting. I did not want to do it anymore, but these ones looked just
      r17906: Port the snprintf bugfix from 4. I wonder why we never hit this....
      r17924: Get rid of warnings now that talloc is merged.
      r17976: Fix typo
      r17977: To be honest, I have NO idea whatsoever what this does, but it fixes what I
      r18005: The ntlmssp fix is not correct yet, working on it
      r18008: Ok, same fix as before. But this time also allocate the session key. This had
      r18016: OpenBSD apparently does not have ENOTSUP
      r18019: Fix a C++ warnings: Don't use void * in libads/ for LDAPMessage anymore.
      r18020: Fix SunX (with LDAP but without ADS)
      r18027: Fix some 64-bit warnings
      r18028: Fix warnings on non-krb5 systems
      r18029: More C++ stuff
      r18030: When compiling with C++, nested structs lead to nested class definitions which
      r18047: More C++ stuff
      r18048: More nested structures
      r18066: It's a bit pointless to send ourselves a signal just to check if we exist :-)
      r18310: Add a little test for some gencache routines
      r18311: Simplify gencache_get by using strtol instead of sscanf
      r18312: Change gencache_get slightly: Delete expired keys, and only strdup the value
      r18313: Nobody said "no" (yet.... gd?), so commit it:
      r18369: I've got a sniff where NT4 sends just a single byte after the 516 byte
      r18402: Comment and (hopefully) fix remote command completion for smbclient.
      r18449: Attempt to fix the build on non-linux platforms: Many of those don't have
      r18453: Attempt to fix the non-ldap build
      r18457: Argl :-)
      r18464: Solaris has LDAP_SCOPE_ONELEVEL. Linux seems to have it as well.
      r18466: Attempt to fix the AIX build
      r18519: Copy over the Samba4 code to figure out options for the named initializers.
      r18527: Janitor for Jeremy ;-)
      r18543: Fix Coverity ID#312
      r18556: Implement "net sam policy", thanks to Karolin Seeger <ks at sernet.de>.
      r18597: A C++ warning
      r18598: Add marshalling support to smb_io_time.
      r18638: This is an attempt to fix the AIX build. Jeremy, as you are busy talking
      r18643: Fix a 64-bit warning
      r18661: C++ warnings
      r18665: Remove two type-punned warnings
      r18667: Two C++ warnings
      r18760: Fix typos, remove unneeded code
      r18761: Even if only offering NTLMSSP Windows (tested with Vista & XP) sends 0 as the
      r18771: Sequel to r18761: If we always set the keylen to 0 there's no point in passing
      r18772: Now that we don't have a one-byte keylength in the extended security case
      r18773: Change negprot_spnego to return a blob
      r18785: Check in Peter Somogyis build fix
      r18845: Fix a type-punned warning that turned out to be a real bug: The secdesc
      r18854: Disable the AC_LIBREPLACE_CC_CHECKS, this breaks the HAVE_IMMEDIATE_STRUCTURES
      r18855: Tell the diff between WERROR and NTSTATUS
      r18857: Re-enable the CC checks from libreplace after Tridge's fix. Thanks for that!
      r18874: Fix some NTSTATUS/WERROR mixups
      r18875: The comment field can be empty
      r18876: Fix smbclient -L
      r18877: More WERROR/NTSTATUS bugs
      r18878: With the recent checkins for me Samba3 compiles again with the NTSTATUS/WERROR
      r18886: First, RPC_SRVSVC is called RPC-SRVSVC and second, we're so far off on that
      r18888: Fix a 64-bit warning
      r18889: Add some const. What's the policy here? Should I do this in Samba4 as well?
      r18891: Fix "double const" warning from host opi
      r18892: Copy over the Samba4 valgrind suppressions
      r18893: Attempt to fix the Solaris build
      r18900: Next attempt to fix the Solaris build. Not sure about whether to merge this
      r18991: Fix bug 4133 -- Thanks to Olaf Flebbe
      r19000: Merge the max tcon check from 3_0_23. Thanks to James Peach that this was not
      r19001: Fix comment
      r19008: Fix a segfault
      r19010: Fix bug 4137
      r19011: Attempt to fix the BSD RAW-CHKPATH failures: In Samba3 we rely on opendir
      r19012: Fix an uninitialized variable
      r19013: Fix some 64-bit warnings.
      r19016: As per Samba4 coding standards, turn tabs into spaces
      r19028: Implement getprinterinfo level 6 (only the status) and get rid of snum in the
      r19037: Fix a segfault
      r19041: Make us connect to Vista RC1. Apparently metze had done the same patch some
      r19042: Fix the non-krb5 build. This needs sooo severe cleanup ... :-)
      r19043: There's no point in #ifdef'ing the detection whether we were offered KRB5 in
      r19046: It does not do much yet, but activate RPC-SAMBA3-SPOOLSS
      r19060: Attempt to fix the valgrind suppressions for "fort"
      r19064: This code block is already #ifdef'ed by WITH_ADS which should imply
      r19065: No functional change, just a trivial simplification
      r19066: Fix a memleak
      r19067: Fix a potential NULL dereference
      r19070: If there's an error in the data struct, there's no point to continue with
      r19072: Fix a potential NULL dereference. Simo/Tridge, not merging yet to 4_0, I'd
      r19073: mapping_dn can fail
      r19075: Fix a potential NULL dereference
      r19076: ldb_dn_copy_partial can fail
      r19077: Fix an uninitialized variable
      r19078: talloc_strdup can fail
      r19079: talloc_array can fail
      r19080: Fix a potential NULL dereference
      r19083: Fix objectclass
      r19126: Fix some uninitialized variable warnings
      r19127: Fix bug 4152
      r19132: Fix some C++ warnings. Is there interest to have them in Samba4 as well?
      r19133: More C++ warnings -- Merge across?
      r19147: This is WRONG, but the way the VFS works this is the only fix to get rid of
      r19151: Create some dummy printers in the build farm
      r19154: Trivial logic simplification: Get rid of two indentation levels. Survives the
      r19156: Make enumprinters use the share iterators.
      r19157: Fix the build
      r19184: W2k3 returns its name for the GetServerInfo RAP call. Do the same.
      r19203: Part two of returning our real name. This code is a bit ancient... :-)
      r19218: With the new RPC server infrastructure all backend functions are filled, at
      r19220: Check if a backend has set rng_fault_state and send a dce-level fault pdu.
      r19221: Monster-Checkin after "make idl"
      r19224: Add setting the rng_fault_state to the already converted pipes.
      r19248: Activate RPC-SAMBA3-WKSSVC
      r19287: As requested by Bjoern Jacke <bjoern at j3e.de>: Check in the NetBSD winbind module by Luke
      r19288: tdb_prs_store is right now used to store printer and share security
      r19290: regedit running on nt4 will cut off the last character from a enumkey without
      r19292: Avoid some potential segfaults: In winreg_EnumValue all pointers are unique
      r19445: Attempt to fix net rpc share
      r19446: Comment can be NULL now
      r19447: Do not throw away information
      r19448: Convert delete_share_security to struct share_params plus some cleanups
      r19450: Fix smbtree's use of netshareenum.
      r19451: Another cleanup of 18802. Referring to structures after the block has been
      r19468: Fix some potential NULL dereferences
      r19469: Another user of NetShareEnum
      r19484: Fix Coverity #329
      r19485: Fix Coverity # 319
      r19486: Probably Coverity is wrong here, but this fixes their ID 317. Not sure whether
      r19487: Fix coverity # 313
      r19656: Correctly check for malloc failure
      r19657: Correctly check for malloc failure
      r19665: Fix a memleak
      r19666: Talloc_guide text on multithreading by Remi Turboult
      r19667: Fix incorrect null check
      r19668: Convert the locking params to use struct share_param instead of snum
      r19669: set_share_security does not need a mem_ctx passed
      r19685: Two changes inspired by problems with huge tdbs. tdbtool's list command now
      r19686: Fix the build
      r19687: Fix uninitialized variables found by Coverity (and gcc -O1... ;-))
      r19688: Fix a deadcode warning by Coverity.
      r19689: Fix a NULL dereference found by coverity (the call to strlen).
      r19766: Fix a const-warning. Jerry, what did you want to fix with this line?
      r19773: TALLOC_FREE checks for NULL itself
      r19774: Fix typo
      r19775: Fix typo
      r19776: Hmmm. I should have done one instead of three commits. Sorry :-)
      r19777: Make regsubkey_ctr_addkey return WERROR. Nobody checks this so far, but this
      r19778: Make regkey_open_internal take a talloc ctx
      r19779: Fail properly on talloc_strdup failure
      r19780: Ok, regkey_open_internal needs a regkey_close_internal. Giving a talloc ctx is
      r19786: My last checkin to winreg_StringBuf killed rpccli_winreg_EnumKeys against
      r19790: Check in the PIDL change and the converted unixinfo and winbind pipes without
      r19793: Change the lsa calls to the new calling convention. Nobody uses the changed
      r19794: Convert DFS
      r19797: Convert the remaining pipes to the "new" unique out ptr handling
      r19803: Fix problem reported by Chetan S: QueryInfoKey needs to report the max name
      r19804: Fix a valgrind error
      r19807: First attempt at wrapping something sane around the registry API. Will be
      r19811: Decode REG_MULTI_SZ and REG_BINARY
      r19812: dump_regval_buf is not needed anymore
      r19817: Implement net rpc registry setvalue (only dword and sz so far)
      r19818: Remove reg_split_hive, make use of registry_openkey
      r19819: Windows returns an empty string instead of NULL here
      r19820: Limit the stat cache to 1MB by default (Bug 4244). Thanks to Bjoern Jacke
      r19821: Make net_rpc_registry use net_run_function2.
      r19822: Implement net rpc registry createkey, deletekey and deletevalue
      r19824: Fix the max value calculation in QueryInfoKey
      r19825: To create a key, smbd also needs read privs assigned
      r19827: Move registry_push/pull_value to lib/util_reg.c
      r19828: Add a helper function to pull *and* unparse local registry values
      r19835: Some net sam policy improvements.
      r19837: Some reformatting (Jerry, I hope you do not mind
      r19838: We have to delete the value record as well, otherwise the old values pop up
      r19839: Fix the build, we are not there yet :-)
      r19840: Fix an uninitialized variable
      r19841: Wrap regdb_store_keys and regdb_store_values in tdb transactions
      r19853: Update a link
      r19857: Make the perfcounter compile after tdb changes
      r19858: Fix a memleak, add a const
      r19860: Streamline _winreg_QueryValue a bit. We've been pushing around memory
      r19867: Introduce struct regkey_info in srv_winreg_nt.c to be able to re-add the
      r19872: Move the value cache to srv_winreg_nt.c. Fix some minor issues found while
      r19883: Fix bug 4248 -- thanks to Pascal Terjan :-)
      r19889: Fix klokwork ID 2187
      r19890: Fix klokwork ID 2188
      r19891: Fix klokwork id 2189
      r19892: Fix klokwork id 2190
      r19893: Fix klokwork id 2191
      r19894: Fix klokwork id 2192
      r19895: Fix klokwork id 2278
      r19896: Fix klokwork id 2279
      r19898: Fix klokwork ids 3127, 3128, 3129, 3130
      r19899: Fix some C++ warnings and klokwork ID 3147
      r19900: Fix klokwork ID 3148, 3149
      r19912: Move the subkey cache to srv_winreg_nt.c
      r19913: Fix a const warning
      r19914: The "default" value with the name "" need different 0-length treatment as the
      r19915: Fix two type-punned warnings
      r19916: Fix some c++ warnings
      r19917: Fix warnings
      r19918: Convert winreg_CreateKey to use a ref ** instead of a unique *. W2k3 can still
      r19919: Convert winreg_EnumKey to use ref ** instead of a unique *.
      r19927: Fix klokwork ID 4702
      r19928: Fix klokwork id 4509, 4573, 4574.
      r19929: Fix indentation
      r19930: Revert the winreg idl changes. At least enumkey does not work anymore today.
      r19932: Add some const
      r19942: Fix Coverity id 333, a dereference before a NULL check.
      r19943: Fix bug 4267 -- Thanks to David!
      r19944: Fix from Don Watson -- thanks
      r19945: Fix a segfault -- lookup_rids needs to init the names even on failure
      r19946: in SetKeySec, sd is just a [in,ref] ptr
      r19947: Change regkey_open_internal to take the parent key and a talloc_ctx as
      r19948: Fix a memleak
      r19950: talloc_destroy is replaced these days
      r19963: Add 'registry shares = yes' and registry key security descriptors.
      r19978: More "net sam policy" improvements. Thanks to Karolin Seeger <ks at sernet.de>
      r19990: Fix comment
      r19991: Sorry for this 2000-liner...
      r20001: Fix bug 4273, thanks to Pascal Terjan
      r20003: Fix error message
      r20004: Remove a const, "name" is allocated anyway
      r20005: reg_open_path should become the replacement for regkey_open_internal.
      r20006: Convert the registry shares to use the new API
      r20007: Fix a const warning just introduced
      r20012: Reformatting
      r20013: Fix segfaults: parm_error is a unique in/out ptr
      r20014: Ouch.... "res" is not a flag here, it is the service number...
      r20015: We have to zero out handle on key_close, otherwise the NT4 regedit will re-use the handle
      r20016: Add two utility functions for easy opening/creating registry keys
      r20017: Make srvsvc_NetShareAdd & friends take care of registry shares
      r20018: Fix a memleak in reg_createkey
      r20019: Replace one set of tricky code by calls to another set of tricky code:
      r20020: Arglll... eventlogadm links against reg_db but not the rest of the registry
      r20036: Merge ldb_search_exp_fmt -- Thanks simo
      r20037: Reduce code size slightly by shuffling stuff around
      r20046: Add ldb_search_exp_fmt and port comment to 4
      r20048: Fix vfs_full_audit after Jims kernel_flock addition
      r20049: Reformatting
      r20050: Remove a bogus NULL check, LTDB_OBJECTCLASS is a static string
      r20054: Revert my changes, Simo promised to work on it :-)
      r20063: Fix a missing protoype warning in freelistcheck.c
      r20069: Fix logic bug I introduced
      r20209: Fix two memleaks
      r20210: registry_fetch_values is not needed anymore, fix typo
      r20211: send_nt_replies does not need the inbuf arg
      r20212: Attempt to fix the Solaris build
      r20214: Fix a type-punned warning. Simo, Jerry, please check
      r20215: Next step trying to fix the Solaris build.
      r20217: uid_t and gid_t are not necessarily 32 bit. In assignments we get an automatic
      r20218: Same fix as r20217 -- can we consolidate that duplicated code a bit?
      r20227: Simplify logic in vfs_MkDir() a bit
      r20228: Bring the calling conventions of inherit_access_acl and change_owner_to_parent
      r20229: Avoid a silly function call in mkdir_internal. None of the callers look at
      r20253: Reduce some code duplication, make reply_mkdir go through the same code paths
      r20255: Activate BASE-SAMBA3ERROR in the build farm
      r20257: Hey, change_owner_to_parent is now static :-)
      r20264: Two lines above this we just checked if (fsp->is_directory) ...
      r20271: Fix the build
      r20310: We've checked for EA's and support for them further up already.
      r20312: Fix a memleak
      r20313: Make trans2_mkdir also go through open_directory for all the fancy inherit_acl
      r20333: Fix a couple of Coverity errors in one run, this was a potential NULL dereference
      r20334: Activate RAW-MKDIR
      r20335: Port oplock return logic from ntcreate&x to NT_TRANSACT_CREATE. Fixes parts of
      r20336: Fix some memleaks in trans2open and simplify trans2mkdir a bit: We now have
      r20338: Restructure open_directory a bit. This gets rid of a race condition regarding
      r20339: Make mkdir_internal static to open.c
      r20340: Join vfs_MkDir to its only caller
      r20342: Move the lstat into mkdir_internal, for the FILE_OPEN case in open_directory
      r20343: Split change_owner_to_parent fd-based (for file opens) and a name-based (for
      r20344: Move the calls to inherit_access_acls and change_owner_to_parent together.
      r20345: Simplify call_nt_transact_create by using tmp_talloc_ctx()
      r20355: Fix some C++ warnings
      r20356: Consolidate the calls to parent_dirname() per open to one.
      r20393: Debug level 1 is a bit excessive here
      r20394: This is a *VERY* early start of my work on notify.
      r20424: No, we do not have to do that here :-)
      r20432: Apply some const
      r20433: Work in progress: Survive more of RAW-NOTIFY.
      r20434: Revert an accidential commit
      r20442: Slight rewrite of the change notify infrastructure. This now survives the
      r20443: Fix a compiler warning
      r20451: Survive the first of the filter-tests (mkdir).
      r20454: Get rid of a bogus variable that was only assigned but never read.
      r20465: Get rid of a redundant !NT_STATUS_IS_OK(status)
      r20470: Jeremy, another one to check:
      r20478: Make us survive & activate RAW-UNLINK
      r20479: Both remaining calls of can_delete called it with check_is_at_open==False,
      r20482: Make us survive and activate RAW-CLOSE
      r20496: Some changes to make Samba3 the RAW-OPEN test. Checking in to both 3_0 and
      r20498: Two 64-bit warnings
      r20499: Activate RAW-OPEN in the build farm
      r20501: Check in config.h fix from Michael Adam <ma at sernet.de>
      r20502: Activate RAW-RENAME, my Linux box passes this
      r20503: And one more 64-bit warning
      r20507: smbcli_setattr("") always returns ACCESS_DENIED, test extension to follow.
      r20524: Simplify logic of close_remove_share_mode().
      r20525: Closing a dir with del-on-close set requires the same as files: Don't actually
      r20541: Fix some obvious glitches in wait_for_aio_completion. Hmmm. It seems
      r20542: Make close_remove_share_mode retun NTSTATUS. Not that anybody cares yet...
      r20544: Change copy_file() to return NTSTATUS. This is in preparation of turning
      r20546: Fix some IBM checker errors
      r20589: Re-add lost bad_path handling, sorry.
      r20597: Survive some of the notify mask tests.
      r20602: Fix coverity ID 339. SMB_ASSERT does not panic without -DDEVELOPER.
      r20603: Slightly simplify logic
      r20604: Fix two memleaks, Coverity ID 337, merge to 3_0_24
      r20605: Simplify logic in reply_setatr slightly
      r20606: bad_path == True has been covered further up in reply_setatr.
      r20607: Next micro-step for reply_setatr
      r20608: ENOENT->NT_STATUS_OBJECT_NAME_NOT_FOUND is covered in the standard unix error mapping table
      r20610: Fix a Solaris warning
      r20611: All but one callers to set_bad_path_error have had the bad_path==True argument
      r20612: A checkin I've wanted to do for ages: For bad_path==False set_bad_path_error
      r20614: Dummy-checkin to trigger the build
      r20617: Do not notify if the delete failed
      r20618: Fix a bug in bad_path handling that also exists in 3.0.23: For reply_unlink
      r20619: bad_path is handled somewhere else, so can_delete does not need it anymore
      r20626: Fix a memleak found by the IBM checker -- not on 3.0.24
      r20627: orig_name is not needed anymore, and slightly simplify logic by doing early
      r20628: Looks bigger than it is. This is just re-indenting the if (dirname) that we've
      r20632: The extended RAW-SAMBA3BADPATH test led me to some wrong assumptions, in
      r20634: A *LOT* more work is necessary before touching notify remotely starts to make
      r20636: Remove notify leftover
      r20644: Make some functions static, thanks to Michael Adam <ma at sernet.de> for the hint.
      r20654: Fix from Karolin Seeger <ks at sernet.de>: Accept "forever", "off" and "never" as
      r20699: This is an attempt to fix bug 4326.
      r20700: In the main processing loop we select() on the fam socket. If it fires, it
      r20707: Clean up pdb_interface.c a bit -- patch from Michael Adam <ma at sernet.de>
      r20725: Get rid of a bool passed down -- gd, please check
      r20738: Remove unused variable
      r20740: Get rid of some if-statements
      r20759: Dummy checkin to let the build farm pick up the new smbtorture4
      r20796: Fix the same problem Jeremy has fixed (improper handling of deferred opens)
      r20824: Send access to the trusted domain passwords through the pdb backend, so that
      r20827: Increment the interface version.
      r20833: Reformatting
      r20846: Before this gets out of control...
      r20851: To read account policies from LDAP we need root.
      r20854: Ok, now I think we're at a point where looking at notify starts to make sense
      r20856: Make "struct notify_mid_map" private to notify.c
      r20858: change_notify_reply_packet is static
      r20876: Fix bug 4346 -- Thanks to YAMASAKI Hiroyuki
      r20877: Random notify fixes
      r20878: Fix build with --enable-profiling
      r20931: This changes the notify infrastructure from a polling-based to an event-driven
      r20932: This is the basic infrastructure for inotify support. This is far from being
      r20933: Fix the build without inotify
      r20979: Fix description, thanks to Michael Adam <ma at sernet.de>
      r20982: Fix a segfault -- I wonder why my make test did not show this earlier...
      r20998: Fix debug message
      r21005: Add a debug message for EAGAIN error of setresuid.
      r21064: The core of this patch is
      r21073: Fix compiler warning
      r21074: Preparation for the import of samba4 notify: Add the file notify.idl and the
      r21076: Two pieces of infrastructure from Samba4: An API-compatible messaging wrapper
      r21077: A step to minimize the diff later: This pulls in unmodified files from Samba4,
      r21079: Minimizing diff: Adopt the Samba4 style ChangeNotify flags.
      r21080: Reformatting
      r21081: Add forgotten function
      r21082: Make canonicalize_path static to service.c -- we do have conn->connectpath
      r21083: Actually make it static... :-)
      r21084: Make the Samba4 files compile in Samba3, not activated yet.
      r21087: Make the param list of notify_fname match notify_trigger
      r21088: Apply some const
      r21089: Do notifies on rename
      r21090: Add some helper routines
      r21091: Fix the build without inotify
      r21092: Ok, that's the one that activates the Samba4 notify backend.
      r21093: Remove the hash and dnotify backends. Disabling FAM for this checkin, I'm
      r21104: Rename struct watch_context to struct inotify_watch_context
      r21107: Adapt notify_fam.c to the new infrastructure. This works in my test, but does
      r21108: Send sys_notify_watch through the VFS, FAM is next
      r21109: Send notify_fam.c through the VFS. Lets see how the build farm likes this.
      r21111: Reorganize the change notify params a bit. We now have the per-share
      r21113: Increment vfs version, thanks to metze for pointing it out
      r21114: Fix 'net usershare': Adding "guest_ok=y" required a correct acl. Set the
      r21115: notify_internal.c needs to remove the table entry if a process has crashed. So
      r21116: Fix the build -- sorry!
      r21120: Make notify a bit more robust: Delete the notify records if we figured out
      r21121: Fix error message, based on RAW-NOTIFY
      r21123: Make notify_fsp() static to notify.c.
      r21127: Add a mitigating comment ;-))
      r21131: Some notify fixes
      r21150: Activate RAW-NOTIFY
      r21165: Lets try the build farm without inotify, we're seeing some
      r21181: Add some debug, fix the NT_STATUS_IO_TIMEOUT problems in the RAW-NOTIFY test
      r21184: Dummy checkin to let the build farm pick up r21183 of Samba4
      r21202: On some build hosts, the first tests fail with CONNECTION_REFUSED. On my
      r21217: Just found a system that does not define in_addr_t but only struct
      r21218: Fix typo
      r21219: Speed up the initial startup time of smbd on systems with loaded disk
      r21251: Okay, after Jeremy has kindly tested this, check it in :-)
      r21263: getpeername() returning -1 is not a reliable indication if a TCP connection is
      r21264: LDAP_OPT_ERROR_NUMBER seems more portable than LDAP_OPT_RESULT_CODE
      r21265: Fix some valgrind errors -- not in 3_0
      r21269: Reformatting
      r21277: Fix an off by one error in the signal handler for aio: We can actually receive
      r21278: The main goal of this was to get rid of the NetInBuffer / set_InBuffer. But it
      r21279: Get rid of 'aio write behind', this is broken.
      r21280: Fix an uninitialized variable warning. Jeremy, please check.
      r21303: As discussed on samba-technical: Change the static array for the in-memory
      r21319: Remove functions not needed anymore
      r21365: Lets see which build farm machines have makecontext & friends
      r21379: Attempt to fix the build on "gwen"
      r21409: saved_status1 is not used anymore after aio write behind was removed
      r21410: We have to increment the sequence number also when tdb_update_hash()
      r21412: The last patch also incremented the seqnum when tdb_store failed. Not as bad
      r21444: Check in tdb_parse_record. Not merging to the other branches yet, we need to
      r21445: Apply tdb_parse_record Tridges error return, merge to 3_0_25 and 4_0
      r21446: Karolins "printjob username"
      r21449: Talked to Jerry on irc, he does not see what might break with this: Change
      r21461: Not strictly necessary, as data_blob() panics if it can't allocate. But I'd
      r21547: Fix from Michael Adam <ma at sernet.de>: Refuse registry shares without path.
      r21549: Only create DISP_INFO structs for domain handles, the others don't need
      r21550: make disp_info_list static to get_samr_dispinfo_by_sid(), add a comment :-)
      r21551: Ok, this is more subtle. More tomorrow :-)
      r21563: Fix a memleak: We only need dispinfo structs for "our" and for the builtin
      r21581: Add an error code I just got
      r21642: Fix bug 4365. Please note that this was only tested with Vista so far, it
      r21706: get_delete_on_close_flag() is the perfect candidate for tdb_parse_record()
      r21722: Add the dead record functionality presented on samba-technical at samba.org. If
      r21723: Make use of the per-hashchain "freelists"
      r21747: Cosmetic checkin to bring ntcreate and nttranscreate closer together
      r21748: More cosmetic alignment. One change to call_nt_transact_create(): We were
      r21753: Enable building ndrdump with the builtin popt. Jelmer, please check!
      r21782: Fix a memleak
      r21784: Replace smb_register_idle_event() with event_add_timed(). This fixes winbind
      r21785: Avoid an unnecessary gettimeofday() call
      r21801: Fix Coverity ID # 342
      r21818: Remove some unused code
      r21819: Wrap all steps in secrets_store_machine_password into one single
      r21823: Let secrets_store_machine_password() also store the account name. Not used
      r21831: Back out r21823 for a while, this is going into a bzr tree first.
      r21851: Obvious typos...
      r21853: Fix a valgrind error
      r21866: Remove unused "lock spin count" parameter
      r21867: Simplify calling convention of timeout_processing. lp_deadtime is only
      r21868: Remove check_log_size from the central smbd processing loop. This can be done
      r21869: Move sending keepalives out of the main processing loop into idle event.
      r21870: Move sending auth_server keepalives out of the main loop into an idle event.
      r21871: Move deadtime processing into an idle event. While there, simplify
      r21872: Fix a debug message
      r21873: This is winbindd_pam.c, not pam_winbind.c :-)
      r21878: Fix a bug with smbd serving a windows terminal server: If winbind decides smbd
      r21879: Move process_blocking_lock_queue to a timed event.
      r21892: Mini-Patch from Michael
      r21904: Fix HP build -- thanks, Don
      r21935: Revert obviously not sufficiently tested code -- sorry for the pain. I am afraid I was basically off the net for the day
      r21941: Attempt to fix bug 4460
      r21958: Fix Coverity ID 343 (dead code)
      r21959: Merge a comment fix from Michael Adam -- more to come :-)
      r21960: Fix bugs 4463,4464,4465,4466. Thanks Jason :-)
      r21962: Make pdbedit use the configfile specified by -s
      r21964: Add tdbtorture target to main makefile -- Thanks to Karolin Seeger
      r22019: Jeremy, this hopefully fixes the build farm currently. But I think we need
      r22043: Comparing lanman.c with -r22013 is now MUCH easier, thanks! This looks much
      r22044: Remove the only skip_string(...,2) caller
      r22059: Over-allocate and NULL out 100 bytes for lanman.c.
      r22091: Fix an uninitialized variable warning
      r22125: Fix a warning
      r22126: Fix a bogus uninitialized variable warning
      r22135: Check in most of Michael Adam's net conf utility. A good share of this patch
      r22146: Attempt to fix the build
      r22147: Next try
      r22213: We can't use become_root() here, as it does DEBUG()
      r22214: Fix incompatible pointer type warnings. Simo, please check and merge to 3_0_25
      r22458: Fix a comment
      r22533: Use lib functions where we have them
      r22553: Fix the build
      r22554: Fix an assumption that TALLOC_ARRAY(.., 0) != NULL.
      r22561: Fix a memleak in lanman.c: Nobody would free the session_list.
      r22613: Fix an uninitialized variable warning
      r22688: Change lock_data in struct byte_range_lock from void * to struct lock_struct *
      r22691: Fix a 64-bit warning and a const const discard warning
      r22692: Fix compilation of explicit --without-winbind.
      r22693: Always compile before checkin.... I've now installed dmapi on my laptop :-)
      r22695: Dummy checkin (reformatting) to make the AIX hosts retry.
      r22736: Start to merge the low-hanging fruit from the now 7000-line cluster patch.
      r22738: Fix a debug message.
      r22740: Move debug_*_user_token to token_utils.c
      r22744: Fix a valgrind error. parse_domain_username does not necessarily fill in
      r22745: Add local groups to the --required-membership-sid test. This needs
      r22747: Fix some C++ warnings
      r22751: Next step for the cluster merge: sessionid.tdb should contain a 'struct
      r22755: Second half of r22754. As it stands now, string_replace expects a
      r22761: This introduces lib/conn_tdb.c with two main functions: connections_traverse
      r22766: Merge from 3_0:
      r22767: Argl. Typed in 'svn ci' in the wrong branch. Revert.
      r22775: For the cluster code I've developed a wrapper around tdb to put different
      r22786: Some cleanup by Karolin Seeger: Remove unused pdb_find_alias, and change
      r22787: More from Karolin: Make map_unix_group() static to net_sam.c, add "net
      r22819: Fix Bug 4613. We just dumped the must change & friends. With the
      r22844: Introduce const DATA_BLOB data_blob_null = { NULL, 0, NULL }; and
      r22846: Chunk one to replace message_send_pid with messaging_send: Deep inside
      r22868: Replace some message_send_pid calls with messaging_send_pid calls. More
      r22895: Convert some more calls from message_send_buf to messaging_send_buf
      r22900: Convert profile/ to messaging_send_pid/messaging_register
      r22902: Add an event_context and a messaging_context to nmbd. Not used yet.
      r22905: cli_send_mailslot had a message_send_pid inside
      r22906: Some more message_send_pid
      r22907: Fix the build with --enable-profiling-data
      r22908: All callers of message_init now also call messaging_init. Unify those.
      r22910: Make message_send_pid static to messages.c
      r22911: Pass a messaging_context to message_send_all
      r22929: Attempt to fix some build farm failures: On port 139 the first
      r22930: Next attempt to get the build farm in line.
      r22934: Change smbcontrol to use messaging_register instead of message_register
      r22942: Some message_register -> messaging_register conversions
      r22943: More message_register -> messaging_register
      r22953: Well, this apparently has never been tested. But *this* code never saw a
      r22954: More messaging_register
      r22994: Fix HP/UX compiler flags by Don McCall. Lets see how the other HP/UX
      r23015: Make message_(de)register static to messages.c
      r23022: Reformatting
      r23023: Get rid of the only caller of message_send_pid_with_timeout(). This replaces
      r23024: Ok, neither the duplicates_allowed nor the timeout argument to
      r23025: Some logic simplifications
      r23055: Rewrite messages.c to use auto-generated marshalling in the tdb. I'm
      r23068: Fix some uninitialized variables in the solarisacl module
      r23077: Minor cleanup
      r23091: Add rpccli_netlogon_sam_network_logon_ex, fix its parsing. This does not
      r23112: Trim down the message.c API slightly: The messages_pending_for_pid is now
      r23116: Fix typo, found by Karolin Seeger
      r23117: Factor out local messaging.
      r23161: Add TDB_VOLATILE as open_flag to activate the per-hashchain dead record
      r23162: Make use of messaging_send_buf
      r23163: Convert locking.tdb to dbwrap
      r23164: Minor cosmetic checkin
      r23165: Convert brlock.tdb to dbwrap
      r23167: Remove an unused parameter
      r23168: Move the lp_max_connections() into service.c.
      r23169: Merge 535 of Tridge's bzr tree:
      r23170: Add map_nt_error_from_tdb()
      r23171: Convert connections.tdb to dbwrap
      r23172: Change shutdown_other_smbds to use connections_traverse instead of
      r23173: Convert sessionid.tdb to ctdb. The 3.0.26 patch is a bit larger because
      r23183: Check in a change made by Tridge:
      r23184: Checkin for Tridge: Add a speed test to tdbtool
      r23185: Try to fix the IRIX build, also add the forgotten file_id.c in .26
      r23186: Checkin on behalf of Tridge:
      r23195: Add void *private_data to brl_forall
      r23204: Add MSG_SMB_BRL_VALIDATE. Tridge, this is a bit different from your bzr
      r23219: Two warnings
      r23220: Add traverse_read to dbwrap
      r23221: Fix a bad merge, avoid a memory leak and tdb lock problem
      r23222: share_mode_forall() is only for counting and status display stuff, so
      r23223: Convert a leftover direct tdb access to sessionid.tdb
      r23224: Move map_nt_error_from_unix to lib/errmap_unix.c. This function is
      r23225: Attached find a patch that makes use of NetSamLogonEx in
      r23226: Make the "debug prefix timestamp" output a bit more readable by making
      r23228: Merge cleanup to the gpfs module from Tridge. Also potentially disable
      r23236: Another bad merge: Correctly free and unlock the session record in
      r23241: In preparation for the cluster messaging import the parent smbd needs to
      r23263: Remove an unused variable -- Fix Coverity ID 358
      r23297: This introduces the winbind:ads parameter which defaults to True. Setting it
      r23313: Janitor for tridge:
      r23316: Ouch... This would not have run in production without cluster code
      r23343: Fix error return
      r23344: Better error message
      r23362: Respect "use mmap" in tdb_wrap_open(). Tridge, you might want to merge
      r23368: Make "winbind:rpc only" a full blown parameter. Thanks to Karolin for
      r23375: Fix a 64-bit warning
      r23376: More warnings
      r23408: Remove a bogus comment
      r23410: Merge the core of the cluster code.
      r23426: Correct a comment. The default timeout is not 1min, but 30s. While
      r23429: Ooops, sorry.
      r23446: Restore Jeremy's original formatting, just fix the comment.
      r23457: After Jeremy's ack:
      r23466: Fix RAW-NOTIFY: by using delete on close the notify is triggered deep
      r23467: Next little simplification: In rename_internals it's a bit pointless to
      r23469: Fix a comment
      r23482: Slightly simplify the rename code: Remove two local variables that are
      r23483: Revert 23482, I must have run 'make test' in the wrong subdir.
      r23486: Ok, this time with a hopefully successful make test in the right place:
      r23500: Two changes to survive the now activated test for rename_internals_fsp:
      r23501: Move notify_rename before rename_internals_fsp and call it from there.
      r23517: After Jeremy has given is ack on irc:
      r23518: Remove the silly assumption that string_replace requires a pstring.
      r23522: Save us a kilobyte stack space in a hot code path: I can't see a reason
      r23523: Gaa -- had renamed "name" to "path" and apparently not compiled after
      r23528: Two changes to make the valgrind massif (heap profiler) output readable:
      r23537: Revert the inbuf/outbuf part of r23528: This caused the Solaris CC make test
      r23538: Fix for wild-card rename: We can't return directly on error, we need to
      r23567: Fix bug 4721
      r23594: Fix parsing of local pids if cluster support is compiled in but no
      r23595: One pstring a day...
      r23596: Add notes about smbfs/cifs to usage() in smb[u]mount
      r23612: Revert 'net idmap dump' to the 3.0.24 behaviour.
      r23658: One pstring a day....
      r23659: file_pload is not used outside of util_file.c
      r23660: Anybody know what check_dos_char() was used for? It wasn't called at
      r23661: Another static pstring
      r23662: According to simo, check_dos_char is needed
      r23665: Remove two unneeded global variables
      r23670: Fix mkversion.sh for the git case: Only use the first line where
      r23671: Remove unused code -- 16416 bytes of bss space...
      r23709: C++ warnings
      r23710: Remove some code duplication, we do have a random number generator
      r23722: Fix the build of the catia module
      r23724: Reduce access to the global inbuf a tiny bit. Add a struct smb_request
      r23725: Remove get_current_mid()
      r23726: Explicitly pass down the FLAGS2 field to srvstr_pull_buf. The next
      r23727: Explicitly pass down FLAGS2 to srvstr_get_path.
      r23731: Forgot one reference to inbuf
      r23738: Re-add commented out code snipped that got lost by accident
      r23743: Simplify stat_cache_lookup() logic. For the history of this, see
      r23755: Fix Coverity id 384
      r23756: Fix Coverity id 388
      r23757: Fix Coverity id 386
      r23758: Fix Coverity id 385
      r23759: Fix make test -- sorry
      r23761: Rename reduce_name to check_reduced_name
      r23764: Do restore_case_semantics in an error path. Jeremy, please check!
      r23765: Another error-path restore_case_semantics().
      r23768: Get rid of the three global variables for the case semantics. I think
      r23773: One pstring a day...
      r23808: Make us a bit more C++ friendly. Thanks to Constantine Vetoshev
      r23813: Remove unused global variable
      r23823: Memory leak fix from Atsushi Nakabayashi <nakabayashi at miraclelinux.com>
      r23865: Fix a type-punned error
      r23866: Fix a 1-byte buffer overrun
      r23877: Fix two segfaults in (very unlikely) error paths, found by the IBM
      r23878: Fix an error return, found by the IBM checker
      r23879: Fix two memleaks, found by the IBM checker
      r23882: Fix Coverity id 389 -- finally (I hope)
      r23883: Fix Coverity ID 380
      r23884: Fix Coverity ID 379
      r23885: Fix make test on opi.
      r23903: Fix a potential reason for the segfault Steve found
      r23904: Remove an unused variable reference
      r23953: Some C++ warnings
      r23967: Memleak fix from Atsushi Nakabayashi <nakabayashi at miraclelinux.com>
      r23974: Fix Coverity ID 361.  num_rids == 0 is caught on function entry
      r23986: Some const
      r23987: Remove static pid in switch_message()
      r23988: Looks a lot more scary than it is: This just unwraps the else-branch of
      r23989: For testing purposes, add "echo" to smbclient
      r23990: Reformatting for 80 cols and trailing whitespace
      r23991: Some const
      r23992: Some const
      r23996: One more const
      r23997: Check in the infrastructure for getting rid of the global InBuffer/OutBuffer
      r23998: Convert reply_close to the new API
      r23999: Convert reply_open_and_X
      r24000: Add message_push_blob() and message_push_string().
      r24001: Separate out the parsing of the client's requested protocols
      r24002: Convert reply_negprot to the new API
      r24003: Convert reply_tcon_and_X to the new API
      r24004: Convert reply_checkpath to the new API
      r24005: Attempt to fix the build on host deckchair
      r24006: Some more paranoia in reply_negprot
      r24007: Attempt to fix the build on host "gwen". The Makefile ended up with an
      r24008: Fix Bug 4792. Thanks to David Gajewski <dgajews at math.utoledo.edu> and to
      r24009: Revert to the 3.0.25 logic for parsing the client's protocols. hpisgr8
      r24031: Fix some 64 bit warnings
      r24032: It helps testing tremendously if the cluster messaging actually sends
      r24033: We need to be able to cope with packet_handler calling itself
      r24034: Print the full cluster pid in print_lock_struct
      r24044: Fix an uninitialized variable warning
      r24046: Fix a 64-bit warning
      r24047: With -Wmissing-prototypes these two always generate warnings. They
      r24048: Fix the C++ warnings in our version of popt
      r24049: Some more 64-bit warnings
      r24050: Fix a typo
      r24054: Fix some warnings
      r24056: Another big one: This converts reply_sesssetup_and_X to the new API. As usual,
      r24057: Fix some uninitialized variables found by the IBM checker
      r24058: Fix some memory leaks in ads_secrets_verify_ticket.
      r24065: According to gd, this breaks heimdal. Thanks for checking!
      r24067: Fix a type mismatch found by the IBM checker
      r24068: Fix Coverity id 366 (dead code). We have checked for argc >= 3 above.
      r24069: Fix Coverity ID 368. We would segfault if 0 < data.dsize < 8
      r24070: Apply some const
      r24071: Fix a missing END_PROFILE call
      r24077: Convert reply_tdis to the new API
      r24078: Add reply_unixerror
      r24079: Convert reply_dskattr to the new API
      r24084: Convert reply_mkdir to the new API
      r24085: Convert reply_rmdir to the new API
      r24086: Convert reply_ulogoffX to the new API
      r24087: Fix bug 4836, patch by Matthijs Kooijman <matthijs at stdin.nl>. Thanks!
      r24088: Convert reply_unlink to the new API
      r24089: Add reply_prep/post_legacy
      r24090: Separate parsing in reply_ntcreate_and_X
      r24091: Convert reply_ntcreate_and_X to the new API
      r24092: Convert do_ntcreate_pipe_open to the new API
      r24097: Convert reply_ntcreate_and_X_quota to the new API
      r24100: Convert reply_ntcancel to the new API
      r24101: Move prohibited_ea_names[] into samba_private_attr_name()
      r24102: Pass the fid instead of inbuf and an offset to file_fsp.
      r24106: Pass fnum instead of buf/offset into get_rpc_pipe_p
      r24107: Fix bug 4849. Thanks to Matthijs Kooijman <matthijs at stdin.nl>
      r24119: Convert reply_exit to the new API
      r24130: Explicitly pass flags2 to srvstr_push
      r24133: Explicitly pass flags2 down to push_string_fn
      r24134: talloc smb_request for handle_trans2
      r24135: Convert call_trans2open to the new API
      r24136: get_lanman2_dir_entry() does not need access to inbuf/outbuf
      r24137: Convert call_trans2findfirst to the new API
      r24138: Convert call_trans2findnext to the new API
      r24139: Convert call_trans2mkdir to the new API
      r24140: Convert call_trans2findnotifyfirst/next to the new API
      r24141: Add check_fsp as a replacement for CHECK_FSP
      r24142: Remove some direct inbuf references from call_trans2qfilepathinfo
      r24143: Convert call_trans2qfilepathinfo to the new API
      r24144: Fix the build
      r24145: Fix a comment
      r24147: Remove some inbuf refs from call_trans2setfilepathinfo
      r24148: Remove some inbuf refs from subcommands of call_trans2setfilepathinfo
      r24149: Convert call_trans2setfilepathinfo to the new API
      r24150: Convert call_trans2qfsinfo to the new API
      r24151: Convert call_trans2getdfsreferral to the new API
      r24152: Convert call_trans2ioctl to the new API
      r24153: Convert call_trans2setfsinfo to the new API.
      r24154: handle_trans2 does not reference inbuf/outbuf anymore
      r24155: Check wct in reply_trans2
      r24156: Convert reply_trans2 to the new API
      r24159: Convert reply_transs2 to the new API
      r24160: process_trans2 in smbd/blocking.c used send_trans2_replies.
      r24161: handle_trans2 takes care of errors itself, no need to do it in reply_transs2
      r24162: send_trans2_replies is now static in trans2.c
      r24163: Remove the send_trans2_replies_new wrapper
      r24165: Fix Coverity ID 369.
      r24166: Fix Coverity ID 391
      r24167: Fix Coverity ID 365
      r24223: Convert reply_echo to the new API
      r24224: Check wct in reply_trans
      r24225: Convert reply_flush to the new API
      r24229: Push allocating InBuffer/OutBuffer into reply_transs
      r24230: Push down reply_prep_legacy in reply_trans
      r24231: Push allocating InBuffer/OutBuffer into reply_transs
      r24232: Push down reply_prep_legacy inside reply_transs
      r24233: Push reply_prep_legacy into handle_trans
      r24234: Reformatting -- SCNR
      r24235: Make handle_trans reply to errors itself
      r24236: Push reply_prep_legacy() into named_pipe()
      r24237: Add send_trans_reply_new
      r24238: Push down reply_prep_legacy one level
      r24239: Push reply_prep_legacy into api_fd_reply
      r24240: Push down reply_prep_legacy one level inside api_fd_reply
      r24241: Remove reply_prep_legacy from api_WNPHS and api_SNPHS
      r24242: Remove reply_prep_legacy from api_rpc_trans_reply
      r24243: Remove reply_prep_legacy from api_reply
      r24244: Complete the conversion of reply_trans[s]
      r24254: Fix a segfault in r24102
      r24265: Add the tdb_hashsize:<tdbname> parameter
      r24266: Remove the "open files database hash size" parameter
      r24267: Fix the build farm
      r24268: Fix two crashes for spoolss
      r24269: Check wct in reply_write_and_X
      r24270: Fix some END_PROFILE(SMBwriteX)
      r24271: Push reply_prep_legacy into reply_write_and_X
      r24278: Push down reply_prep_legacy in reply_write_and_X
      r24279: Remove reply_prep_legacy from reply_write_and_X
      r24280: Fix the build of vfs_afsacl.c
      r24291: Fix Coverity ID 364
      r24314: Attempt to fix bug 4868
      r24316: Fix an uninitialized read
      r24318: Print a prominent warning when reply_prep_legacy is called
      r24319: Check wct in reply_read_and_X
      r24320: Fix the wct checks in reply_trans2 and the reply_trans calls
      r24321: Attempt to fix the "hape" cc build
      r24322: Wrap reply_read_and_X in reply_prep_legacy
      r24323: Remove the reply_read_and_X wrapper function
      r24324: No reply_prep_legacy() in reply_pipe_read_and_X
      r24325: Push down reply_prep_legacy in reply_read_and_X
      r24326: Fix the build for Solaris CC
      r24327: First round of fixes to chain_reply
      r24328: Restore chain_reply error handling
      r24329: Fix a 64-bit bug
      r24330: Fix a 64-bit error
      r24331: Fix an error where gid_t != 32 bit
      r24332: schedule_aio_read_and_X does not need InBuf/OutBuf
      r24346: Push reply_prep_legacy into send_file_readX
      r24347: fake_sendfile does not need Inbuf/Outbuf
      r24348: Do not use inbuf/outbuf in the sendfile path of read_and_X
      r24349: For large read&x we need more than 64k of outbuf.
      r24351: Remove reply_prep_legacy from reply_read_and_X
      r24354: Remove offsetof macro
      r24356: Add send_nt_replies_new wrapper
      r24357: Check wct in reply_nttrans[s]
      r24358: Push reply_prep_legacy into reply_nttrans[s]
      r24359: Fix the build
      r24361: Push reply_prep_legacy down in reply_nttrans[s]
      r24362: Initialize padding also when no params are sent back
      r24367: Push reply_prep_legacy into handle_nttrans
      r24368: Push down reply_prep_legacy one level
      r24381: Push reply_prep_legacy into call_nt_transact_create
      r24382: Remove reply_prep_legacy from call_nt_transact_create
      r24383: Convert call_nt_transact_ioctl to the new API
      r24384: Convert call_nt_transact_set_security_desc to the new API
      r24385: Convert call_nt_transact_query_security_desc to the new API
      r24391: Convert call_nt_transact_get_user_quota to the new API
      r24392: Minor simplifications
      r24393: Convert call_nt_transact_set_user_quota to the new API
      r24394: Convert call_nt_transact_rename to the new API
      r24398: Convert call_nt_transact_notify_change to the new API
      r24399: Change change_notify_reply to use send_nt_replies_new
      r24400: Fix a valgrind bug
      r24401: Push reply_prep_legacy into send_nt_replies
      r24402: Fix a 64-bit warning
      r24403: Remove reply_prep_legacy from send_nttrans_replies
      r24404: Remove get_OutBuffer usage from blocking.c
      r24405: Check wct in reply_lockingX
      r24406: Push reply_prep_legacy into reply_lockingX
      r24408: Remove reply_prep_legacy from reply_lockingX
      r24409: Check wct in reply_open
      r24412: Convert reply_open to the new API
      r24414: Convert reply_mv to the new API
      r24415: Convert reply_getatr to the new API
      r24417: Convert reply_setatr to the new API
      r24422: Convert reply_ctemp to the new API
      r24423: Convert reply_lseek to the new API
      r24425: Convert reply_write to the new API
      r24426: Convert reply_read to the new API
      r24427: Convert reply_lock to the new API
      r24428: Convert reply_unlock to the new API
      r24429: reply_setdir is not used...
      r24430: Convert reply_writeclose to the new API
      r24431: Convert the reply_printXX calls to the new API
      r24433: Convert reply_ntrename to the new API
      r24436: Convert reply_lockread/writeunlock to the new API
      r24439: Convert reply_get/setattrE to the new API
      r24440: Convert the reply_sendXX functions to the new API
      r24441: Convert reply_ioctl to the new API
      r24442: Convert reply_copy to the new API
      r24443: Convert reply_search/fclose to the new API
      r24444: Convert reply_find[n]close to the new API
      r24453: Remove the read and write bmpx calls
      r24457: Convert reply_tcon to the new API
      r24461: Fix Bug 4852, thank to anto <sistemac at prosoft.ba> for reporting it.
      r24485: Even in the failure case unix_convert must pass the already converted
      r24497: Revert r24485 -- this needs more thought
      r24512: Fix RAW-NOTIFY
      r24547: Fix #4897, patch from David S. Collier-Brown <davecb at spamcop.net> -- Thanks!
      r24548: Fix the case-changing renames
      r24549: Fix unix_convert to return the already converted part
      r24550: Attempt to fix the non-LDAP build
      r24571: Only look at errno if the close call actually failed
      r24595: Fix Coverity ID 393
      r24649: Attempt to fix bug 4917. Simo, please check!
      r24659: Some formatting changes helping to minimize the 3_2_0 diff
      r24661: Fix some obvious diffs between 3_2 and 3_2_0
      r24699: Actually write 24 zeros instead of zero 24's...
      r24701: Fix the swat build
      r24702: Remove the old API pointers
      r24744: Increase length by what we got from recv, not from ioctl
      r24773: Fix a ctdb connection lockup
      r24782: Fix C++ warnings
      r24802: Activate new tests
      r24803: For some funny reason us4/gcc seems to fall over the '
      r24809: Consolidate the use of temporary talloc contexts.
      r24826: Fix two memleaks in idmap_cache.c, bug 4917
      r24902: DEBUG might use talloc_tos() itself...
      r24903: One more tick in #if 0 code
      r24943: Some stackframes
      r24949: Remove some static buffers
      r24951: Warn if "os level" > 255
      r24993: Apply some const
      r25024: Fix a whole bunch of Coverity bugs
      r25025: Remove an unused function
      r25036: Fix a become/unbecome_root() pair
      r25040: Add "net sam rights"
      r25055: Add file_id_string_tos
      r25061: Pro-actively shut up Coverity :-)
      r25169: Fix bug 4028
      r25184: Fix some C++ warnings and an uninitialized variable
      r25274: Attempt to fix RPC-SAMBA3-GETUSERNAME
      r25311: Patch from Heinrich Mislik <Heinrich.Mislik at univie.ac.at> to fix AIX
      r25317: Activate raw-samba3rootdirfid
      r25323: Fix the build
      r25324: Fix "msdfs proxy"
      r25327: Normalize the path we return for 'msdfs proxy'
      r25480: Fix a segfault
      r25481: Fix some typos, don't panic as non-root on net getdomainsid
      r25482: Slightly simplify logic
      r25484: Fix srvsrc_NetFileEnum listing only for one user
      r25499: Fix rpc_file_list_internals
      r25502: Fix bug 5006
      r25528: Only do transactions on registry.tdb if anything changes
      r25533: remove a pstring
      r25534: Apply some const
      r25538: Revert r25533
      r25561: Make use of [un]marshall_sec_desc
      r25563: Show which local-substitute subtest fails
      r25564: Pass sharename to delete_share_security()
      r232: Test whether querydispinfo and enumdomgroups return the same set of
      r386: Another torture test to survive.
      r605: Implement CreateDomainGroup, essentially cut&paste from CreateUser2.
      r615: Implement samr_OpenGroup, samr_QueryGroupInfo, samr_SetGroupInfo,
      r963: Tridge, according to ethereal this is an 'Acct Ctrl' field. My tests also
      r1342: When fixing _lsa_lookupsids in samba3 I wanted to find out the number of SIDs
      r1453: Change the RAP client to use the ndr routines for moving bytes around.
      r1454: Today is the day of broken builds, now I get my share ... :-)
      r1470: Get the smb_trans2 structure out of the rap_cli_call struct.
      r1814: Fix the build.
      r1823: No real changes, I just did not like the ^M's an the line ends :-)
      r1886: Fix the build
      r1894: Convert // to /* */
      r1917: Attempt to push the AIX machine a bit further in the compile. I'm not sure,
      r1920: This needs more inspection by the IDL experts. Reverting my last change.
      r2173: Fix asn1 BOOLEANs. Thanks to Love Hornquist-Astrand.
      r2208: little attempt to (almost) fix spoolss relative
      r2818: On AIX, for some reason pidl fails in dcom.idl:29. The only thing
      r2830: // style comments are not supported by pure C preprocessors. Please DONT use
      r2831: // style comments are not supported by pure C preprocessors. Please DONT use
      r2895: Another nut to crack, not sure how hard: The statinfo on a file does obviously
      r2912: Test for the sort-of weird file stamp semantics. The last_write seems to be
      r3129: typo
      r3218: Fix the build
      r3219: Hi, Andrew B.!
      r3317: Fix the build
      r3434: Fix memleak
      r3660: This simulates the logon sequence of a XP login session I'm currently tuning
      r3756: Fix netbios session request reply. The buffer should not be a stack-based
      r4332: Fix a potential memleak.
      r4335: Fix some potential memleaks, implement CreateDomAlias. Hmmmm. Isn't there
      r4344: Unify memory handling in dcerpc_samr.c a bit
      r4345: Unify the representation of grouptype and samaccounttype to hex. Without any
      r4366: Fix ldb_modify_internal: Adding values to an existing attribute you could end
      r4367: Implement samr_AddGroupMember, samr_DeleteGroupMember and
      r4372: Implement samr_LookupRids
      r4374: Follow metzes hint, change LookupRids a bit
      r4375: Implement samr_OpenAlias, samr_QueryAliasInfo and samr_SetAliasInfo. Fix IDL
      r4376: Implement samr_AddAliasMember, samr_DeleteAliasMember and
      r4377: Fix default groupType attributes.
      r4378: Implement samr_EnumDomainGroups and samr_EnumDomainAliases.
      r4380: Implement samr_QueryDisplayInfo. This probably needs some polishing (Do we
      r4381: Add my copyright
      r4392: Fix samr_GetAliasMembership idl
      r4393: Trivial bugfix for a silly bug
      r4397: Fix a bug where '(&(objectclass=domain)(!(objectclass=builtindomain)))' fell
      r4398: Make usrmgr.exe believe we're a DC. Otherwise it will not show global groups.
      r4399: Implement samr_GetAliasMembership and samr_GetGroupsForUser. With these two,
      r4414: Various bits&pieces:
      r4415: Implement samr_RemoveMemberFromForeignDomain. This is needed to delete a user
      r4416: [in,out] variables do have an r->out component...
      r4417: Reply to samr_QueryDomainInfo with the same static value as level2 does.
      r4456: NT4 usrmgr.exe asks for 4096 accounts, allow twice that.
      r4597: Recently I've come across a case where I suspect the GetAnyDCName request to
      r4605: Fix a confusing comment :-)
      r4622: Clarify a comment a bit
      r4949: First version of a fetchfile composite function which connects to a server and
      r6513: Commit talloc_free_children.
      r6660: Sorry for the spam... I think now I've got a version that should compile on
      r6907: Unixinfo for samba4, not activated by default.
      r7069: Add a little usage message to smbscript and fix a compiler warning. My
      r7399: Try to get the AIX compile one step further.
      r7430: Next step in AIX build
      r7433: Another little AIX one...
      r7435: Another little step, sorry for the spam... :-)
      r7436: As far as I see it, these are the last two "real" ones for Samba4 on AIX to
      r7441: Get rid of // comments. Tridge, if this breaks anything, please revert it. More tomorrow
      r7621: Trivial reformatting while trying to understand share modes. Still survives
      r8099: clean up after BASE-TCON
      r8176: Exploring the share mode database...
      r8177: More explorations.
      r8179: Delete-on-close is really a shared DB. Setting it on one connection(!) and
      r8182: Little more testing delete-on-close: Check flag with qfileinfo.
      r8185: Delete on close on directories:
      r8229: A level2 oplock does not conflict a no-oplock open, but is broken on first
      r8258: Release the opendb lock in pvfs_change_create_options.
      r8321: Fix some uninitalized variable warnings
      r8875: Rename timeval_diff to timeval_until and revert the arguments. timeval_diff is
      r8883: Apply some const.
      r8886: Exchange the arguments of timeval_compare, this makes it behave like strcmp.
      r9431: Check an error code in BASE-DELETE.
      r9584: Fix a race condition in Samba 3. If two files are opened simultaneously with
      r10353: Fix typo
      r10363: Nobody loudly screamed "noo", so commit the samba3 winbind interface to
      r10365: Use nsswitch/winbindd_nss.h in winbind/, update that file to the current 3_0
      r10390: Remove fstring, pstring and uint32_t from winbindd_nss.h.
      r10395: While playing with winbind, I found a segfault because I had given
      r10472: Check for strndup
      r10479: Apply some const
      r10491: First step towards wbinfo -t: This issues a name request for the primary
      r10675: Connect to the DC's IPC$
      r10677: Add smb_composite_connectmulti: Send out multiple SYN packets at once, use the
      r10681: Convert dcerpc_open_smb to a composite function.
      r10683: Samba3's wbinfo -t should give the correct answer now.
      r10684: Add a nasty hack for the failure case of wbinfo -t. Tridge has a proper fix
      r10685: Why wait 5 seconds...
      r10686: Fix the build
      r10687: Another one...
      r10690: Fix a bug that metze pointed out: Leaving the "rejecting" destructor around
      r10691: This gets half-way to wbinfo -n. It acquires an lsa pipe, and does a
      r10825: Complete wbinfo -n
      r10834: Work in progress on winbind. With some helper routines the composite functions
      r10838: Get us an schannel'ed netlogon pipe.
      r10843: Reformatting
      r10846: Create a "wbsrv_domain", change wb_finddcs to the style of the rest of the
      r10852: Continuation-based programming can become a bit spaghetti...
      r10853: Convert wbinfo -n to properly init the domain.
      r10859: Make the flow a bit clearer
      r10878: Reply to some comments by tridge and metze:
      r10934: Fix a gcc 4 warning
      r10936: Commit work in progress: wb_pam_auth_crap made async. This does not work yet,
      r10940: add struct definition
      r10941: Hmmm. Making that fn static is more correct.
      r11068: Fix pam_auth_crap, remove the sync code. I don't know what it was when I
      r11070: Fix a cut&paste error, now wbinfo can properly separate domain and user...
      r11082: Fix a segfault
      r11093: Implement wb_queue_domain_send: If the domain is not yet initialized, do that
      r11094: Connect to SAM, implement getdcname
      r11095: Implement wb_getuserdomgroups.
      r11120: calling_name is used later in sesssetup_nt1, so hang the names to the right
      r11122: Fix some talloc hierarchy errors
      r11181: Implement wbinfo -s and wbinfo --user-sids. The patch is so large because
      r11192: Too many contexts around... :-)
      r11193: Implement wbinfo -m
      r11248: Fix anon fallback with spnego
      r11263: Some cleanup
      r11264: Winbind does not rely on the hostname resolution mechanisms of
      r11267: Fix a memleak and an uninitialized variable. Andrew Bartlett, this was the one
      r11271: Fix a warning and an infinite recursion
      r11274: Start a connection attempt to the DC's port 389. To do this properly, make
      r11369: Implement socket_connect_multi: Connect to multiple ipv4 tcp ports in
      r11378: Fix an uninitialized variable warning. Tridge, I'm 99.999% sure this was a
      r11392: After confirmation from Love, fix a compiler warning
      r11422: Remove unused args
      r11423: Add some TALLOC_CTX
      r11424: Fix an uninitialized variable warning
      r11473: Based on work by Jelmer, implement the [async] flag for rpc requests. If it's
      r11515: Add some talloc_get_type
      r11516: Fix a valgrind bug I introduce with queued requests
      r11517: Cleanup time, this looks larger than it is. This mainly gets rid of
      r11518: Fix a warning
      r11519: And an uninitialized variable...
      r11526: And another warning...
      r11527: Has this ever been run?
      r11528: Separate finding dcs from initializing a domain. Makes it easier to possibly
      r11532: Enable kerberos session setup for winbind smb connections
      r11533: Be a bit less intrusive
      r11721: Fix warnings
      r11727: Minor cleanup
      r11796: Two more uses of !composite_is_ok
      r11803: New start for RPC-LOGIN load test, this time async. It's gonna be fun to see
      r11804: Asyncify the anonymous bind, convert the calls in xplogin.c.
      r11805: dcerpc_bind_auth is only used in dcerpc_bind_auth_password
      r11806: Minor cleanup
      r11807: Make dcerpc_alter_context async. Same thing: Please look at this
      r11808: Fix socket_connect_ev
      r11809: Make dcerpc_bind_auth async.
      r11810: Fix talloc hierarchy
      r11811: Revert 11808, this broke the selftest. No idea why though. Why do we to the
      r11812: Convert winbind to the async bind routines. Also remove tridge's hack for the
      r11825: Fix a debug msg
      r11826: A few steps down the login
      r11834: More steps towards XP login
      r11835: Restore comments
      r11836: More work in progress
      r11837: Add a timeout before starting a torture test. It's really fun to watch 50
      r11868: Get the wks and user accounts from a file.
      r11869: talloc has been ported :-)
      r11883: Also look up the membership in the domain local groups.
      r11884: Download ntconfig.pol
      r11885: Add forgotten files
      r12150: Reformatting
      r12154: Torture test for bug # 3303.
      r12161: Fix a memleak and do the -O1 janitor :-)
      r12405: I'm afraid I can't take care of the xplogin test in the near future, so remove
      r12764: Add a test for lsa_lookup. This will be expanded when I get around to add
      r12765: Revert an accidential commit
      r12766: fix the build
      r12767: Add some trusted lookups
      r14131: Fix Coverity bug # 127
      r15087: Quick stress test that does more or less what the tool "iometer" does.
      r15100: Port the bugfix for #3569 to Samba4
      r15120: Minimize the diff between Samba3 and Samba4 tdb: In Samba3 we don't allow C++
      r15706: This is a very specific test that helps me in making sure I don't screw up too
      r15836: Test an invalid DOS share mode.
      r15912: Run an rpc request with an invalid uid and make sure NT_STATUS_INVALID_HANDLE
      r15916: Modify RPC-AUTHCONTEXT so that it can be anabled in samba3 make test
      r15930: Attempt to fix the buildfarm segfaults -- thanks Tridge for the hints
      r16044: Create a samba3 specific file in torture/rpc. The tests in there survive
      r16045: RPC-SAMBA3SESSIONKEY tests the different variants of joins (anon/auth smb,
      r16058: Test a Join using SetUserInfo level 25, as XP does if the user did not
      r16059: Remove accidential commit
      r16091: Without this patch Samba3 will not accept this, and simply setting the "92" to
      r16123: Samba3 in the buildfarm will happily create (faked(!!)) users anonymously. Disable that test for now.
      r16140: How on earth does this work on most build farm machines.... ?
      r16149: This is a very Samba3 specific test: It tests whether 'hide unreadable' and
      r16151: |= fix found by metze
      r16182: Better test the 15 out of 20 tests we right now survive than not test at
      r16657: Test Jerry's iTunes bug, along with some more error conditions
      r16756: Some machines on the build farms sporadically fail the test
      r16759: Jeremy, another little error case for you :-)
      r16842: Jeremy, I almost don't dare checking this in.....
      r16907: Add an index parameter to torture_open_connection. Next step is to enable the
      r16909: Change torture_open_connection to look at torture:unclist.
      r16956: Walk some of the samba3 srvsvc code
      r16958: We also do level 1501 on NetShareGetInfo
      r16988: Extend locktest to enable cluster testing byte range locks. -l <unclist> will
      r17064: lsa_GetUserName needs to return the name for S-1-5-7 on an anonymous login.
      r17065: NT4 does not like "0" here, W2k3 does not care...
      r17069: Make us pass RPC-NETLOGSAMBA3 against w2k3 again
      r17074: Extend the rpc-samba3-getusername test: This creates a normal user and we
      r17082: Add a test that walks and tests denying tconX access via the share security
      r17187: Beginnings of a little lsa walker for Samba3, if only to prevent the
      r17205: Even if this makes me look foolish, at least start to scratch on the surface
      r17417: Try to fix random failures in the build farm for 3_0.
      r17624: Samba3 does not yet do getprinterinfo level 6
      r17826: Add line numbers to the d_printfs
      r17827: Fix an error message
      r17840: A step towards building on Solaris which appears not to have strnlen.
      r17841: Revert 17840, libldb.a defines strnlen. Sorry for the noise
      r17842: After talking to Simo, apply the next attempt to resolve the strnlen
      r17844: The AIX compiler thinks { } is a syntax error
      r17846: Ok, this is a patch that needs further discussion. On Solaris, snprintf seems
      r17848: Ok, this did not do it. Still got the same problem.
      r17849: Next round for RPC-SAMBA3-SHARESEC
      r17884: Shape up the snprintf fix after Metzes comments
      r18018: Fix the build on OpenBSD. No license problem this time, I've written strnlen
      r18027: Fix some 64-bit warnings
      r18661: C++ warnings
      r18686: Fix typo protocl->protocol
      r18851: Some C++ warnings
      r18894: Merge const fixes from 3_0
      r18991: Fix bug 4133 -- Thanks to Olaf Flebbe
      r19017: Merge from Samba3:
      r19027: Modify RPC-SAMBA3-SPOOLSS so that it can be activated in the build farm
      r19068: Fix a potential NULL dereference
      r19074: Merge from 3_0: Fix a potential NULL dereference.
      r19075: Fix a potential NULL dereference
      r19076: ldb_dn_copy_partial can fail
      r19079: talloc_array can fail
      r19134: Merge the second set of C++ warning fixes from Samba3. I'll leave r19132 to
      r19136: No conflict, after "svn up" it applied correctly", merge 19126 from 3_0
      r19152: A simple consistency check for enumprinters
      r19153: Simple consistency check for enumprinters level 2 as well
      r19200: Implement smbcli_rap_netservergetinfo. To be used in RPC-SAMBA3SPOOLSS and
      r19201: rap_cli_do_call only needs smbcli_tree, not smbcli_state
      r19202: Make RPC-SAMBA3-SPOOLSS work against w2k3 again
      r19204: Samba3 does level6 now
      r19205: Some consolidation
      r19219: Fix a memleak in the generated srv_code.
      r19247: Ok, figured out that wkssvc wksgetinfo also gives the server name. I thought I
      r19293: Add RPC-SAMBA3-WINREG, the start of a test of what Samba3 is able to perform
      r19485: Fix Coverity # 319
      r19684: Talloc_guide text on multithreading by Remi Turboult
      r19790: Check in the PIDL change and the converted unixinfo and winbind pipes without
      r19897: Fix klokwork ids 2278 and 2279
      r19901: Fix a potential NULL dereference
      r20046: Add ldb_search_exp_fmt and port comment to 4
      r20272: Fix for BASE-BENCH-READWRITE from Mathias Dietz <MDIETZ at de.ibm.com>
      r20308: ContextSimple can be zero length -- seen in a multi-step gssapi ldap bind. Did
      r20309: Don't treat non-supported EAs as fatal against Samba3.
      r20311: Check one more samba3 error path for t2mkdir
      r20341: Make sure we do not regress on r20338 in Samba3
      r20357: run_trans2test and torture_trans2_scan are two separate tests
      r20422: A torture test extension for Jeremy
      r20423: Fix debug output
      r20474: Skip the delete-on-close test on a non-empty directory in raw-unlink for
      r20480: In Samba3 we don't yet have support for all 4 file times on all platforms (do
      r20481: Fix the build -- Stefan, please look at this ;-))
      r20497: Two changes to RAW-OPEN that Samba does not fulfil:
      r20508: Confirm a special case in samba3 reply_getatr that getatr("") always returns
      r20525: Closing a dir with del-on-close set requires the same as files: Don't actually
      r20549: obvious bug fix..
      r20552: Little Samba3 test to force smb_close to return an error. Set delete on close,
      r20595: W2k and XP don't always show the top directory as hidden, w2k3 does. I think
      r20609: Additional torture test for our bad_path handling. Most of it is disabled for
      r20613: The individual tests are fine, I did run samba3badpath, but raw-samba3hide
      r20618: Fix a bug in bad_path handling that also exists in 3.0.23: For reply_unlink
      r20632: The extended RAW-SAMBA3BADPATH test led me to some wrong assumptions, in
      r20652: Attempt to fix the build
      r20653: If this is the wrong way to fix the build, I apologize. But these includes are
      r20758: Adapt RAW-UNLINK error returns for wildcard unlinks to Samba3.
      r20934: I *hate* deep indents :-)
      r20972: "private" -> "private_data"
      r20983: Two no-mem error returns
      r21041: Change some "private" to "private_data", and change one (void **) function
      r21042: Fix typo
      r21104: Rename struct watch_context to struct inotify_watch_context
      r21124: Samba3 does not support create times correctly.
      r21125: Tridge, please check this closely if this relaxed notify test is
      r21134: Attempt to quieten the build farm for Samba3
      r21141: Attempt to fix the build
      r21178: Adapt RPC-SAMBA3-SHARESEC to new smbd behavior
      r21183: Commit the big/little endian fix for nttrans setup[] handling.
      r21270: Fix a memleak
      r21275: Reformat the bench-readwrite test a bit
      r21276: Actually fire off multiple parallel read/write requests.
      r21303: As discussed on samba-technical: Change the static array for the in-memory
      r21410: We have to increment the sequence number also when tdb_update_hash()
      r21412: The last patch also incremented the seqnum when tdb_store failed. Not as bad
      r21421: Fix a memleak. This made tdb look considerably worse than necessary.
      r21445: Apply tdb_parse_record Tridges error return, merge to 3_0_25 and 4_0
      r21722: Add the dead record functionality presented on samba-technical at samba.org. If
      r22680: Fix a talloc ctx name
      r22694: It seems that AIX 5.3 with XLC has difficulties with <ctype.h>. This is
      r22886: Workaround to make RAW-NOTIFY a bit more reliable against Samba3. It
      r23491: Split out the RENAME trans2 call into a separate test
      r23492: Also activate the split out test...
      r24041: After metze's ack, check in torture_comment from Zack Krisch
      r24054: Fix some warnings
      r24313: Merge r23377 from 3_2
      r24529: Against samba3, treat EAS_NOT_SUPPORTED as acceptable for t2open
      r24569: Add two tests
      r24570: Attempt to fix make test
      r24798: RAW-SAMBA3POSIXTIMEDLOCK
      r24800: Don't execute RAW-SAMBA3POSIXTIMEDLOCK
      r25186: Fix a memory corruption in base-mangle
      r25296: Apply patch by Elrond <elrond+sambaclassic at samba-tng.org>: Put
      r25310: Make sure we do not regress on r25309
      Remove bogus comment
      Also find loopback interfaces
      Fix a segfault with an unknown interface
      Fix an uninitialized variable warning
      Use strlcpy instead of strncpy
      Fix get_interfaces detection
      Fix one more place for IFF_LOOPBACK
      r17064: lsa_GetUserName needs to return the name for S-1-5-7 on an anonymous login.
      r16050: Set the session key "SystemLibraryDTC" on ntlmssp binds. We only do INTEGRITY
      Fix an incompatible pointer type warning
      Fix two type-punned warnings
      Don't segfault if locking.tdb can't be opened
      Two patches
      Enable vfs objects = /full/path/to/object.so
      save memory
      Fix for bug 5021
      Make load_registry_service return the share number
      pstring removal
      static pstring removal
      Fix the smbmount build
      Fix a debug message
      Remove unnecessary code
      Fix dbwrap debug output
      pstring removal
      Remove the silly "user_socket_options" global variable
      Make base64_encode_data_blob return a talloced string
      Add some comments
      Fix some warnings
      nss_wrapper: Fix some warnings
      Fix some warnings
      Sanitize smbcacls slightly
      Add ndr_errstr
      Convert ctdb_conn.c to enum ndr_error_code
      Remove a static fstring
      Remove a static fstring
      Cosmetic fix
      Some pstring removal
      Make [f]get_nt_acl return NTSTATUS
      Fix a valgrind error
      Add a comment
      Add stackframes to public libsmbclient functions
      Fix a type-punned warning
      Fix an uninitialized variable
      Add a missing prototype
      Cosmetic fix
      Do not link in SOCKET_WRAPPER_OBJ twice
      add talloc_stackframe() to eventlogadm
      Make remote_password_change return malloced error strings
      Remove a static
      In libsmbclient, map NT_STATUS_OBJECT_PATH_NOT_FOUND to ENOENT
      Fix a C++ warning
      Improve debug message
      Fix bug 5055
      Remove a global
      Remove some statics
      Add a warning for a potential bug I've run into
      Fix some C++ warnings
      Fix an uninitialized variable
      Fix some C++ warnings
      In nttransact_create, we also need to check for delete readonly
      Bump up debug level
      Fix some bogus uninitialized variable warnings
      Reformatting
      add SESSSETUP_BENCH
      tiny refactoring
      Tiny refactoring
      consolidate srvstr_get_path in ntcreate_and_X
      TALLOC_FREE early
      Tiny refactoring
      Tiny refactoring
      Put posix semantic calculation in the same place in both routines
      Reformatting
      Move pulling the ea list out of the way
      Align formatting, one TALLOC_FREE is enough
      Reformatting
      Split out sd parsing
      Tiny refactorings
      Reformatting, also allow quotas for transact_create
      Implement create_file()
      Fix debugs
      Fix error returns
      Fix attribute calculation for ntcreate&x
      Fix debug
      Fix an uninitialized variable
      Move create_file to open.c
      Remove a static, and "signal_received" needs to be sig_atomic_t
      Make share_info_db_init static
      Remove some globals
      remove some statics
      There's no point in passing down a 0
      Fix two unused variable warnings
      Make fname arg to create_file a "const char *"
      Re-arrange create_file() parameters
      More parameter shuffling
      Pass only internal oplock request values to create_file
      Attempt to fix make test :-)
      Fix two incompatible pointer warnings
      Fix C++ warnings
      Get rid of the msgbuf[1600]
      C++ warning
      Don't copy the rpc function pointers
      remove a static
      Remove two statics
      Remove a static
      Tiny simplifications
      int->bool
      Move stuff from data to text
      Increase debug level
      Simplify add_session_user
      Correctly unbecome_root() on error
      Add dbwrap bystring service routines
      Add db_tdb_fetch
      Add rbtree.[ch] from the Linux kernel
      Make the Linux rbtrees compile within Samba
      dbwrap_rbt
      Convert ServiceHash to dbwrap
      use dbwrap_rbt in loadparm.c
      Remove two completely unnecessary globals
      Move INTERNAL_OPEN_ONLY calculation out of the way
      Move more stuff out of the way
      separate out create_file_unixpath()
      Convert the posix_pending_close_db to dbwrap_rbt
      Fix a segfault
      add sid_string_talloc
      Use sid_string_talloc where we have a tmp talloc ctx
      Add debug_ctx according to an idea by Tridge
      Add sid_string_dbg
      Replace sid_string_static by sid_string_dbg in DEBUGs
      Use sid_string_talloc where we have a tmp talloc ctx
      Replace sid_string_static with sid_string_tos
      Use sid_to_string directly
      Replace sid_string_static with sid_to_string
      sid_string_static is no more :-)
      Use dom_sid_string for sid_string_talloc
      s/sid_to_string/sid_to_fstring/
      Remove unused code
      Make smb_np_struct talloc'ed
      Remove a static fstring
      Cut down memory usage of registry initialization
      make use of [un]marshall_sec_desc, allow for fd==-1 in get/set_secdesc
      make use of unmarshall_sec_desc
      Make check_dos_char static
      Make init_doschar_table() static
      Tiny fixes to init_valid_table()
      get rid of doschar_table[]
      Remove t_doschar.c
      Add a in-memory cache
      Add forgotten cache.h
      Rename cache.[ch] to memcache.[ch]
      Today is not my day...
      Zero the tdb key, there might be padding
      Some paranoia checks
      packet_struct is used in several places as raw memory
      Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-716-g12cce3b
      Fix debug messages
      Fix a "no prototype" warning
      Remove Get_Pwnam and its associated static variable
      Attempt to fix the build
      r25688: Add a simple test for a samba3 regression
      r25827: Start of samba3-regconfig test
      r26029: In RAW-STREAMS test listing of streams
      r26103: Leave streams around to unlink
      r26104: Revert 26103 -- breaks make test
      r26111: Fix an uninitialized variable
      r26184: Streams are tricky....
      Add a global cache
      Add memcache_add_talloc
      Convert the pwnam cache to memcache
      Remove next_token_nr_talloc and its associated global
      Make data_blob_string_const return null terminated strings
      Add a singleton cache
      Remove some statics from md4.c
      Fix a missing prototype warning
      Fix a C++ warning
      Fix a C++ warning
      Some C++ warnings
      Some C++ fixes
      Fix the build on Solaris
      tiny simplification
      Fix wbcPing()
      Fix wbcAllocate[GU]id
      Convert the [gu]id_sid cache to memcache
      Attempt to fix the Solaris build
      Attempt to make the build farm run s4torture again
      r26568: Revert r26482
      r26569: Jelmer tells me that ldb must inevitably be build as a shared library,
      Attempt to fix the ifreq detection
      Fix the build
      Revert "Attempt to fix the ifreq detection"
      Interface detection should not go through the socket wrapper
      make clean should remove everything in bin/
      Next try to fix get_interfaces detection
      ifreq needs more from lib/replace
      AIX iface test needs rep_vasprintf
      Host SerNet-AIX has __ss_family instead of ss_family in sockaddr_storage
      We need to return the correct atime
      Add tdbsam_search_users
      smbpasswd_search_users
      Properly destroy the pdb search object
      Convert pdbedit to use pdb_search_users
      Remove the sampwent interface
      Fix some memleaks
      typos
      Wrap the DEBUG checks in a "unlikely"
      Fix the build
      Remove a silly static
      Fix the non-gcc branch of "likely"
      Fix setting the initial permission bits
      bin/vlp needs a dependency on @LIBWBCLIENT_SHARED@
      Convert csamuser to memcache
      Remove a static array
      Remove static zeros
      don't store cache_readonly in gencache
      Remove a global
      Convert get_root_nt_token to memcache
      passdb.tdb is located in the private directory
      Attempt to fix the AIX make test failures
      Fix uninitalized variables
      Apply some const
      Fix a panic
      Remove tiny code duplication
      Make use of [un]marshall_sec_desc
      Make [un]marshall_sec_desc use librpc/ndr
      Remove tiny code duplication
      Use NULL instead of 0
      Convert reply_open to create_file
      Convert reply_open_and_X to create_file
      Convert reply_mknew to create_file
      Convert call_trans2open to create_file()
      Add comments
      Trivial simplification
      allocate share_mode_str only when needed
      talloc_stackframe only needs 1 talloc
      Change db_tdb_fetch_locked to use only one talloc
      make db_tdb_fetch use tdb_parse_record
      Do not talloc_strdup filename and servicepath
      Allocate dirp->name_cache on demand only
      Only realloc the talloc stack if necessary
      Don't shrink a talloc area if we have less than 1k to gain
      Save one popular malloc
      ensure uni_name.buffer is initialised
      Replace an uninitialized variable
      Reduce stat cache size default
      Attempt to fix the compile of source/utils/net_dns.c
      Fix the max_dead_record calculations
      Implement talloc_pool()
      Form a proper hierarchy in talloc_stack
      Fix suspicious Makefile line
      Mark talloc_pool memory for valgrind
      talloc_free_children can only reset pool if it's empty
      Fix a c++ warning
      use talloc_tos in a few more places
      Some more talloc_tos()
      use talloc_tos() in share_access_check()
      Tiny cosmetic fix
      --enable-libwbclient-shared
      There's no point in calling FLOCK on a non-existing fd
      delete on close even prevents stat opens
      One more empty line
      Restructure dbwrap_rbt
      Convert OpenDir to talloc, use talloc_tos()
      Get the inbuf on talloc_tos()
      Remove an unused variable
      Trivial simplification
      Don't early delete the share mode tdb data
      Fix the max_dead_record calculations
      Implement vfs_ea_tdb
      Fix some warnings -- Jeremy, please check
      Fix bug 5055
      rename vfs_ea_tdb to vfs_xattr_tdb
      ea_tdb->xattr_tdb also inside the module itself
      Fix a crash bug in nt_printer_publish_ads
      Fix a missing prototype warning
      Fix some C++ warnings
      Fix an uninitialized variable warning
      default to tdbsam instead of smbpasswd
      Next try to fix the max dead record calculation
      Don't try ftruncate when the tdb is opened read-only
      Revert "default to tdbsam instead of smbpasswd"
      Fix two uninitialized variables in vfs_hpuxacl.c
      Add the "allinfo" command to smbclient
      Always return nlink=1 for directories
      Link ndr_xattr.o with LIBNDR_GEN_OBJ
      Fix the build
      Make get_ea_value public
      Add get_ea_names_from_file to sanely list posix xattrs
      The remote storage op is gone
      Fix error return in xattr_tdb_load_attrs
      Use SAFE_FREE instead of free
      Add the STREAMINFO vfs call
      Add an error mapping for ENOATTR
      Add "split_ntfs_stream_name()" together with a torture test
      Add streams support
      vfs_streams_xattr module
      vfs_streams_depot
      Some systems do not have XATTR_ defined
      Fix a segfault
      Complete the ea->xattr rename in vfs_xattr_tdb
      Support XATTR_CREATE and XATTR_REPLACE in vfs_xattr_tdb
      Really remove the _NEXT_ from vfs_xattr_tdb.c
      For pread/pwrite we need to do the setxattr on base_fsp
      Add some DEBUG
      In streams_xattr_pwrite, base_fsp does not have an fd
      Do not use an unfinished fsp in streams_xattr_open
      Don't test split_ntfs_stream_name
      NT_STATUS_OBJECT_NAME_NOT_FOUND also means "no streams around :-)"
      Fix valgrind errors
      Active RAW-STREAMS in make test
      Add an exception for S3
      Activate SMB_QUERY_FILE_STREAM_INFO
      Free case_state earlier
      Fix some "set but never used" warnings
      Link smbd on AIX with -bexpfull instead of -bexpall
      Add SMB_VFS_FS_CAPABILITIES
      Attempt to fix the darwin build
      Fix a segfault
      Fix get_ea_names_from_file for many EAs
      Fix a ton of IBM checker uninitialized variable warnings
      Hide streams from the EA API
      Avoid use of uninitialized memory
      Move samba_extended_info_version to smbd/trans2.c
      replace svn references with git ones in Readme
      Remove two unused variables
      strtok -> strtok_r
      read_socket_with_timeout has timeout=0 handling
      More read_data -> read_socket_with_timeout
      Fix Coverity ID 465
      Fix Coverity ID 463
      Fix Coverity ID 454
      Attempt to fix the build on OpenBSD
      Remove a pointless while loop
      Tiny simplification
      Fix Coverity IDs 451, 452
      Fix bogus uninitialized variable warnings
      Fix uninitialized variables
      Remove an unused external reference
      We need to leave the corepath around
      Fix a memleak
      Fix uninitialized variables
      Re-enable async I/O for non-TSM systems
      Fix some IBM checker warnings
      NetBSD needs PAM_SM_SESSION
      NetBSD defines innetgr() in <netgroup.h>
      NetBSD does not support AI_ADDRCONFIG
      Fix a typo
      NetBSD needs LD_LIBRARY_PATH
      Return NOTFOUND from db_tdb_delete if the record does not exist
      Add read_socket_with_timeout_ntstatus
      Convert read_smb_length_return_keepalive to read_socket_with_timeout_ntstatus
      Convert read_smb_length_return_keepalive to return NTSTATUS
      Convert read_smb_length to return NTSTATUS
      Convert read_packet_remainder to use read_socket_with_timeout_ntstatus
      Convert read_packet_remainder to return NTSTATUS
      Convert receive_smb_raw_talloc_partial_read to NTSTATUS
      Convert receive_smb_raw_talloc to NTSTATUS
      Convert receive_smb_talloc to NTSTATUS
      Get rid of read_socket_with_timeout
      read_socket_with_timeout_ntstatus->read_socket_with_timeout
      Convert receive_smb_raw to NTSTATUS
      Make get_srv_read_error static to process.c
      Convert read_data() to NTSTATUS
      Convert receive_message_or_smb to NTSTATUS
      Remove dependency on get_srv_read_error() from main loop
      Remove smb_read_error global
      Remove a static
      tiny simplification
      Fix valgrind errors
      Simplify str_list_xxx
      Always pass a TALLOC_CTX to str_list_make and str_list_copy
      str_list_free is not needed anymore
      Fix bug 5421 -- thanks to MJ Anthony
      Augment the samr_Connect4 call
      Fix a debug message
      Don't shrink a talloc area if we have less than 1k to gain
      Implement talloc_pool()
      Mark talloc_pool memory for valgrind
      talloc_free_children can only reset pool if it's empty
      Fix a c++ warning
      Add a missing return
      Remove a bogus comment
      Remove unused code, make fns static
      Inform level II oplock holders when we write using AIO
      Update position information also for AIO
      NetBSD needs LD_LIBRARY_PATH
      NetBSD does not support AI_ADDRCONFIG
      fix typo
      Don't use fname after create_file has been called
      Respect the return value of asprintf
      make idl: Check return value of asprintf
      Check the return value of fgets
      Fix a C++ warning
      Check return value of dup(2)
      Check return value of pipe(2)
      Fix a C++ warning
      Fix a C++ warning
      Fix typo
      AIO on streams does not work (yet...)
      Export aio_request_done()
      Allow "max mux" async i/o requests
      Fix confusing error message -- bug 5252
      Do the formatting change in all 3 places :-)
      Fix inotify detection
      Correctly check return of rename(2)
      Fix some warnings
      Add some entries to WHATSNEW
      Add another WHATSNEW
      Add explicit buf arg to cli_encrypt_message and cli_calculate_sign_mac
      Add explicit buf arg to cli_check_sign_mac
      Make cli_struct a talloc parent
      Add cli_setup_packet_buf
      Add basic infrastructure for general async requests
      Add infrastructure to support async SMB requests
      Add async cli_pull support
      Convert cli_read to use cli_pull
      Add vfs_aio_fork
      Attempt to fix the build
      Fix warnings
      Check the right variable for being NULL
      Restore 3.0 behaviour with empty /etc/hosts
      Revert "Fix warnings"
      Revert "Convert cli_read to use cli_pull"
      Revert "Add async cli_pull support"
      Revert "Add infrastructure to support async SMB requests"
      Revert "Add basic infrastructure for general async requests"
      Revert "Convert cli_read to use cli_pull"
      Revert "Add async cli_pull support"
      Revert "Add infrastructure to support async SMB requests"
      Revert "Add basic infrastructure for general async requests"
      Restore 3.0 behaviour with empty /etc/hosts
      Zero out the out policy handler in lsa_Close
      Zero out the out policy handler in lsa_Close
      Fix a memleak -- Coverity ID 222
      Fix Coverity ID 565
      Fix coverity ID 525, 526, 527, 528, 529 and 530
      Fix coverity ID 525, 526, 527, 528, 529 and 530
      Respect FAMChanged -- attempt to fix bug 5307
      Respect FAMChanged -- attempt to fix bug 5307
      Check the right pointer for non-NULL
      Fix a memleak
      Fix an uninitialized variable, Coverity ID 481
      Add basic infrastructure for general async requests
      Add infrastructure to support async SMB requests
      Add async cli_pull support
      Convert cli_read to use cli_pull
      Use io_bufsize as window size in smbclient get command
      Change default bufsize to 512k
      Fix a "nested extern declaration" warning
      Build aio_fork by default
      Fix some typos
      Pass specific packets to build_nmb and build_dgram
      Move inbuf handling to before the PDU handling
      Correctly calculate the max read size
      Print out the used seed in smbtorture
      Fix Coverity ID 551
      Use talloc_tos() in secrets_init
      Avoid some pointless checks
      Make use of talloc_asprintf_strupper_m in secrets.c
      add dbwrap_change_int32_atomic
      Add transactions to the dbwrap API
      Add dbwrap_trans_store and dbwrap_trans_delete
      Convert secrets_lock_trust_account_password to talloc
      Use a separate tdb for mutexes
      Convert secrets.c to use dbwrap
      Cleanup after pstring removal
      Clean up add_mapping_entry slightly
      Convert mapping_tdb.c to dbwrap
      Fix bug 4901
      Fix bug 5317
      Allocate one 0-byte in asprintf replacement when len==0
      Fix Coverity ID 564
      Fix Coverity ID 563
      Fix Coverity ID 555
      Fix Coverity ID 554
      Need to close the /dev/zero fd
      Fix Coverity ID 567
      Convert pdb_tdb to use dbwrap
      Add "net idmap aclmapset"
      Use right control to attach to persistent databases
      Merge leftovers of 0e1a86bc845 in 3-0-ctdb
      In smbstatus, mark locking.tdb and sessionid.tdb as CLEAR_IF_FIRST
      Some simplifications
      Allocate one 0-byte in asprintf replacement when len==0
      Fix bug 5334
      Check the return value of fgets
      Fix Coverity ID 554
      Fix bug 5338 -- thanks to Yuya Katayama <yuya999 at gmail.com>
      Fix some "nexted extern" warnins
      Merge dd9e0bea31751 from 3-0-ctdb -- use NetSamLogonEx when possible
      Fix a warning
      !NT_STATUS_IS_OK != NT_STATUS_IS_ERR
      Fix some warnings in the tsmsm module
      Fix an uninitialized variable warning
      Fix a warning
      Add the workstation to the anon sessetup credentials
      Prove that a setuserinfo level 25 does set the pwdlastset field
      A level 25 setuserinfo does change the pwdlastset
      Fix Coverity IDs 553, 552
      Fix Coverity ID 548
      Add my copyright
      Fix Coverity ID 547
      Fix Coverity ID 538
      Fix Coverity ID 537
      Fix Coverity ID 507
      Fix Coverity ID 506
      Fix Coverity ID 473
      On Solaris, size_t seems to be only 32 bit.
      Fix Coverity warnings
      Fix Coverity ID 436
      Fix Coverity ID 432
      Fix Coverity ID 462
      Fix Coverity ID 453
      Fix Coverity ID 450
      Fix Coverity ID 480
      Fix Coverity ID 479
      Fix Coverity ID 478
      Fix Coverity ID 477
      Fix Coverity ID 472
      Fix Coverity ID 471
      Fix Coverity ID 487
      Fix Coverity ID 488
      Fix Coverity ID 503
      Fix Coverity ID 504
      Fix Coverity ID 514
      Fix typo
      Fix a segfault
      Fix a valgrind error
      Fix wbinfo -a trusted\\user%password on a Samba DC with trusts
      printclose has only 1 vwv
      Make some fns static
      Fix a memory leak
      Fix a confusing variable name
      Fix a segfault
      More ssize_t->SMB_OFF_T
      Fix a segfault (an uninitialized variable)
      Protect group_mapping.tdb ops with transactions
      Convert share_info.tdb to dbwrap
      Add dbwrap_[fetch|store]_uint32
      Convert dbwrap_trans_store to NTSTATUS
      Convert dbwrap_trans_delete to NTSTATUS
      Add dbwrap_trans_*_bystring
      Convert account_pol.tdb to dbwrap
      Re-run "make idl"
      wbcAllocateGid returns a gid_t, not a uid_t
      Remove external refs to winbindd_fd
      Fix a C++ warning
      Fix a misleading debug message
      Fix bug 5375
      Fix an uninitialized variable
      Remove reference to pointless socket options
      Try anonymous session setup
      Also accept 0x15 getdc replies
      Fix bug 5366
      Remove some write-only fstrings
      Remove a redundant TALLOC_FREE
      Update WHATSNEW entry for pre3
      Fix the build of db_open_trans with CLUSTER_SUPPORT enabled
      Make use of ZERO_STRUCT instead of memset in namequery.c
      Fix some "ignoring asprintf result" warnings
      Enable multiple fd events on a single file descriptor
      Remove namedpipe_transact fn pointer from smb_np_struct
      Remove two pointless else branches
      Fix an uninitialized variable
      Fix bug 5398
      Fix bug 5399
      Fix bug 5400
      Fix a bogus uninitialized variable warning in IDL-based nbt code
      Set the right domain\user in cli_rpc_pipe_open_ntlmssp_internal
      Refactoring: Make struct rpc_pipe_client its own talloc parent
      Add "desthost" to rpc_pipe_client
      Fix two "ignoring asprintf result" warnings
      Move srv_name_slash from cli_state to rpc_pipe_client
      Introduce rpccli_set_timeout()
      Use rpc_pipe_client->user_name instead of rpc_pipe_client->cli->user_name
      Remove some unused code referencing pipe_names[]
      Remove the pipe_idx variable from rpc_pipe_client
      Refactoring: Move stuff around for creating a pipe
      Replace cli_rpc_pipe_close by a talloc destructor on rpc_pipe_struct
      Remove a redundant reference to rpc_pipe_state->cli from srv_spoolss
      Introduce rpc_pipe_np_smb_conn()
      Make convert_samr_dispinfo_to_NET_DISPLAY() static
      Fix some empty lines with just spaces
      Remove the "pwd" struct from rpc_pipe_client
      Fix wbinfo --group-info if the winbind separator set to non \
      Make nsstest valgrind-clean: buf is referred to by the parsed grp struct
      Increase level of debug msg when a regkey is not found
      Correctly initialize lp_load in smbstatus in the presence of registry on tdb2
      Add smb.conf entry for "winbind nested groups"
      Document 'cups server'
      Document force unknown acl user
      Add smb.conf entry for ldapsam:trusted.
      Fix typo
      Document recycle:touch_mtime
      Document "reset on zero vc"
      Document passdb:expand_explicit
      Document "passdb expand explicit" properly
      Remove references to sql and xml modules from the Samba3-HOWTO
      Two fixes by Karolin Seeger <ks at sernet.de>
      Document 13085 and 13086
      Small (but I think important...) fix for the idmap backend parameter syntax.
      Document changed default
      Clarify smb.conf entry
      Document recycle:subdir_mode, thanks to Thomas Bork
      Fix Bug 4240. Thanks to Karolin <ks at sernet.de> for bugging :-)
      Docs fix for r19820
      Some smbconf fixes from Karolin Seeger <ks at sernet.de>. Removing the
      Remove a section assuming multiple password backends
      Docs for "printjob username"
      Talked to Jerry on irc, he does not see what might break with this: Change
      After merging the notify stuff to 3_0_25, check in the docs
      Fix doc defaults report by Tom Bork -- Thanks :-)
      More doc fixes by Tom Bork -- thanks :-)
      Typo found by Tom Bork -- thanks
      Fix idmap manpages. Thanks to Karolin Seeger! :-)
      Change contents from fam_notify to notify_fam
      Rename fam_notify to notify_fam.
      Fix a quite significant typo found by Björn Jacke <bjacke at sernet.de>.
      Remove the docs for "open files database hash size"
      Remove "read bmpx" man page entry
      Fix sample for base_rid parameter
      Fix typo
      document changed default
      Add docs for "hidden" parameter
      "hidden"->"administrative share"
      Fix CLEAR_IF_FIRST handling of messages.tdb
      Refactoring: Make cli_pipe_auth_data a pointer off rpc_pipe_client
      Move user/domain from rpc_pipe_client to cli_pipe_auth_data
      Create rpccli_xxx_bind_data functions
      Make use of rpccli_xxx_bind_data
      cli_rpc_pipe_open_noauth must take the user/domain from the smb session
      Introduce rpccli_pipe_txt(), describing a pipe for debug messages
      Introduce a redirection for ncacn_np and ncacn_ip_tcp in rpc_pipe_client
      Add basic ncacn_ip_tcp client infrastructure
      Attempt to fix the non-krb build
      Attempt to fix the build on IRIX: Bug 5420
      Next round fixing bug 5420, build on IRIX
      Fix two uninitialized variable warnings
      Remove connection_struct->mem_ctx, connection_struct is its own parent
      Fix dfs_Enum: In form_junctions, correctly check for malloc failure
      Fix allocation of conn->vuid_cache entries
      Second half of 50c891d3: Correctly clear the vuid cache
      Revert "Second half of 50c891d3: Correctly clear the vuid cache"
      Revert "Fix allocation of conn->vuid_cache entries"
      Make the namelist arg to set_namearray const
      pipes_struct->pipe_user_name is unused, remove it
      Remove "homedir" from "struct user_struct"
      Remove unix_homedir from struct user_struct
      Remove "logon_script" from "struct user_struct"
      Remove "nt_user_token" from "struct user_struct"
      Remove the unix token info from "struct user_struct"
      Remove "guest" from "struct user_struct"
      Remove "session_key" from "struct user_struct"
      Fix typo
      Remove unused set_current_user_guest()
      Fix a typo
      Remove "userdom_struct user" from "struct user_struct"
      Fix a C++ warning
      Remove unused dir_status_struct
      Fix a valgrind bug in the new [ug]id2sid cache
      Fix a panic in the [ug]id2sid valgrind bug fix
      Remove some unused code
      Fix a memleak in construct_printer_info_7()
      Fix a memleak introduced after refactoring "struct user_struct"
      Use talloc_stackframe() in find_forced_group
      Use talloc_tos() for a temporary getpwnam_alloc in make_connection_snum
      Rename server_info->was_mapped to server_info->nss_token
      Fix the build with DNS_UPDATES
      Make copy_serverinfo non-static, add mem_ctx
      Add a mem_ctx argument to make_server_info_guest()
      Add function make_serverinfo_from_username()
      Add create_connection_server_info() -- not used yet
      "status" -> "pstatus" in make_connection_snum
      Remove unused "force_group" from connection_struct
      Add "server_info" to connection_struct
      Simplify make_connection_snum: Copy connection_struct info from server_info
      Replace find_forced_user by a direct call to make_serverinfo_from_username
      Do not unnecessarily mess with the results in find_forced_group()
      Add an error return in find_forced_group()
      find_forced_group can directly change the token in server_info
      Next try at making the vuid cache circular
      Make use of talloc_tos() in change_to_user()
      Use TALLOC_ZERO_P instead of separate ZERO_STRUCTP in dup_nt_token
      Empty some nonempty blank lines
      Replace nt_user_token with server_info in connection_struct
      Remove the unix token info from connection_struct
      Add a comment explaining server_info in connection_struct
      Remove "user" from connection_struct
      Fix a memleak
      Fix a memleak in new auth_serversupplied code
      With force user, we have the same base token for all vuids
      Make sure we have serversupplied_info->sanitized_username everywhere
      Revert "Fix signing bug found by Volker. That one was *subtle*."
      Fix signing problem in the client with transs requests
      Fix an uninitialized variable introduced by 3045d391
      In torture_leave_domain, say what account was deleted
      Fix an uninitialized variable warning
      Fix two C++ warnings
      Make rpc-bench-schannel1 use two wks accounts if --option=torture:multijoin=true
      Simplify fake_file logic
      Factor out generation of an info3 struct from a serversupplied_info
      If no node number is given, default to the current node in smbcontrol
      Don't block smbcontrol online/offline if !"winbind offline logons"
      Convert messages_local.c to use "struct tdb_wrap"
      Fix a memleak in irpc_remove_name
      Change wks password in rpc-bench-schannel1
      Fix a valgrind error in _samr_LookupNames
      Fix memcache_flush()
      Fix nesting tdb_traverse in a transaction
      Fix some signed/unsigned warnings
      Fix type error in debug message
      Fix nesting tdb_traverse in a transaction
      Fix a comment
      Rename rpc_pipe_client.tcp.sock to rpc_pipe_client.sock.fd
      rpccli_schannel_bind_data only needs the schannel key
      Add client support for NCACN_UNIX_STREAM
      rpc_client: add a destructor to close the socket for pipes over tcp.
      Compile endpoint mapper pidl output
      Fix a (bogus) uninitialized variable warning
      Remove stuff from client_proto.h
      Remove reference to current_user_info from lanman.c
      Remove the reference to current_user_info from share_access.c
      Remove some references to get_current_username() and current_user_info
      Move ber_[read|write]_OID_String protypes to proto.h
      Fix a const warning
      Fix two bogus uninitalized variable warnings
      Fix two c++ warnings
      Fix security=server, bug 5502
      Fix location of smbldap-tools
      Always set "registry shares = yes" for "include = registry"
      Fix a memleak in ads_find_dc() in case get_sorted_dc_list() fails
      Fix a memleak caused by a crappy get_sorted_dc_list() API
      Make the gencache based conncache use talloc_tos()
      Add prototype for delete_negative_conn_cache
      Fix a crash in add_failed_connection_entry
      Fix a memleak in fetch_ldap_pw
      Fix a memleak in secrets_fetch_trust_account_password_legacy
      Fix a memleak in secrets_fetch_afs_key
      Add STREAMINFO op to vfs_full_audit
      Fix the compile on NetBSD -- readlink and read are macros there
      Fix the compile on NetBSD -- missing prototypes
      shrink ldbtools
      Fix some scary FC9 warnings
      Correctly find a [u]int32_t replacement
      Fix max_fd calculation in event_loop_once
      Add -brtl to the AIX linker flags
      AIX build fixes from William Jojo -- thanks
      Fix a crash in _winreg_QueryValue
      Fix a handle leak for error returns in ldb_try_load_dso
      Correctly check for presence of cups-devel
      Use the correct cups-devel test for HAVE_IPRINT also
      Compare the pointer "vuser" to NULL, not 0
      Consistently use snum in check_user_ok
      Group the access checks together in check_user_ok()
      Slight refactoring for check_user_ok: It only needs vuid and server_info
      Move connection-specific vuid cache clear to uid.c
      Fix group parsing in libwbclient's copy_group_entry()
      Fix an uninitialized variable found by the IBM checker
      Remove the reference to current_user from file_access.c
      Remove unused "extern struct current_user" from dir.c
      Remove the current_user reference from fake_file.c
      Remove the current_user references from open.c
      Add forgotten protoypes
      Fix bug 5500 -- thanks to mathion at thorrovydeti.com for reporting
      Add some debug to notify
      Revert "Fix a memleak in ads_find_dc() in case get_sorted_dc_list() fails"
      Revert "Fix a memleak caused by a crappy get_sorted_dc_list() API"
      Fix a memleak in wbcAuthenticateUserEx()
      Replace a very unusual variable declaration by a more conventional one
      Fix a segfault in wbcLookupSid
      Fix a segfault in wbcLookupRids
      Fix a memleak in svcctl_init_keys()
      Fix a brown paper bag segfault in clitar
      Revert "Fix a memleak in svcctl_init_keys()"
      Fix the build on FreeBSD 4.6.2
      Fix typo
      Remove some code
      Remove the dependency on $(abspath) in makefiles
      Include events_util.h in events_aio.c
      Fix checks in can_delete_file_in_directory()
      RWX on a file does not imply DELETE access
      current_user is not used in vfs_aixacl2.c
      Remove current_user_info reference from vfs_expand_msdfs.c
      Remove current_user_info reference from vfs_fake_perms.c
      Remove current_user_info reference from vfs_recycle.c
      Remove the "current_user" arg from check_fsp
      Remove the "current_user" arg from fsp_belongs_conn
      Wrap the unix token info in a unix_user_token in auth_serversupplied_info
      Remove reference to current_user from reply.c
      Remove some current_user references from trans2.c
      Remove current_user references from trans2.c
      Remove current_user references from nttrans.c
      Fix a SAFE_FREE/TALLOC_FREE mixup
      Make pipes_struct its own talloc ctx
      Use "init_shared_module" instead of "init_module" for initializing .so's
      Attempt to fix the darwin build
      Fix a double-closedir() in form_junctions()
      Fix an uninitialized variable access in callers of parse_msdfs_symlink
      Fix a crash in _dfs_Enum
      Fix an abort in junction_to_local_path
      Reduce memory usage in form_junctions() a little bit
      Check for sec_initial_uid() instead of uid==0 in dfs management
      Remove the "exists" parameter from create_msdfs_link
      init_shared_module -> init_samba_module
      Move the responsibility to keep the cwd from srv_dfs_nt to msdfs.c
      Correct calculation of "remark" in srv_srvsvc_nt.c
      Remove "conn" from pipes_struct
      Fix the build
      Add server_info to pipes_struct
      Fix typo
      Now that we have p->server_info, use p->server_info->user_session_key
      Remove a check on p->vuid in _netr_LogonSamLogon/off
      Remove p->vuid
      Change print_access_check to take auth_serversupplied_info instead of current_user
      remove unused extern current_user from lanman.c
      Remove current_user reference from printfsp.c
      remove unused extern current_user from nt_printing.c
      Fix a debug message
      Fix a segfault in rpcclient adddriver
      Fix valgrind errors in _spoolss_addprinterdriver
      Remove a strlen check that will never kick in
      Fix an "invalid operation involving NULL pointer" found by the IBM checker
      Fix two IBM checker warnings
      Fix the definition of abspath for gnu make < 3.81
      Fix a non-empty line with just spaces
      Do not segfault if corepath is not set up properly
      Fix the build
      Factor out create_outbuf, creating an outbuf just given an inbuf
      Let send_trans_reply work on only the inbuf
      Fix a file descriptor leak in add_port_hook
      Fix two memory leaks in an error path in idmap.c
      Make idmap_init() static
      Fix typo
      Fix a debug msg, this was probably a leftover from gencache
      Fix indentation
      Fix nonempty whitespace only lines
      fix typos
      Fix nonempty whitespace only lines
      Tiny logic simplification: Remove an unnecessary else branch
      Fix typo
      Make use of sid_check_is_in_unix_users/groups
      Don't scream, better explain a bit in comments
      Fix indentation
      Pass NULL to gencache_get when we are not interested in the timeout value
      Return timed out entries from gencache_get if timeout param != NULL
      Remove gencache_[un]lock_entry
      Remove an unused variable
      Simplify idmap_cache_build_[s]idkey a bit
      Simplify idmap_cache_set() a bit
      IDMAP_READ_CACHE_DATA_FMT_TEMPLATE is unused, remove it
      Slightly increase the default idmap cache time
      Convert idmap_cache to gencache
      Make use of ADD_TO_ARRAY
      Tiny logic simplification -- remove an else branch
      Fix alignment problems on sparc, bug 5512
      Give a nice error message if trying to join with a non-privileged user
      A brown paper bag bug fix for "net sam rights"
      Fix a segfault in base64_encode_data_blob
      Fix some uninitialized variable references via ndr_print
      Fix some memleaks regarding trustdom passwords
      Fix the build of nfs4_acls.c
      Revert "Tiny logic simplification -- remove an else branch"
      Revert "Make use of ADD_TO_ARRAY"
      Revert "Convert idmap_cache to gencache"
      Revert "Slightly increase the default idmap cache time"
      Revert "IDMAP_READ_CACHE_DATA_FMT_TEMPLATE is unused, remove it"
      Revert "Simplify idmap_cache_set() a bit"
      Revert "Simplify idmap_cache_build_[s]idkey a bit"
      Revert "Remove an unused variable"
      Revert "Remove gencache_[un]lock_entry"
      Revert "Return timed out entries from gencache_get if timeout param != NULL"
      Revert "Pass NULL to gencache_get when we are not interested in the timeout value"
      Revert "Fix indentation"
      Revert "Don't scream, better explain a bit in comments"
      Revert "Make use of sid_check_is_in_unix_users/groups"
      Revert "Fix typo"
      Revert "Tiny logic simplification: Remove an unnecessary else branch"
      Revert "Fix nonempty whitespace only lines"
      Revert "fix typos"
      Revert "Fix nonempty whitespace only lines"
      Revert "Fix indentation"
      Revert "Fix a debug msg, this was probably a leftover from gencache"
      Revert "Fix typo"
      Revert "Make idmap_init() static"
      Revert "Fix two memory leaks in an error path in idmap.c"
      Remove an unused extern reference in vfs_aixacl2.c
      Remove a silly "typedef struct _param_opt_struct param_opt_struct"
      Tiny logic simplification: Remove an indentation by using an early return;
      Sequel to c10aad9f13: Ignore whitespaces in parametric options
      Add the interface ID to the rpc_pipe_register_commands call in s3 srv code
      In api_pipe_bind_req(), decode the bind request before checking the pipe
      Add ndr_syntax_id_equal()
      In api_pipe_bind_req(), check for the iface id, not the pipe name
      Change the directory parameter in streams_depot to become consistent
      Document the streams modules
      Simplify the RPC servers: remove get_pipe_fns
      Fix the build of vfs_zfsacl.c
      Fix RAW-OPEN against Samba3
      Ooops, GUID_equal was already around :-)
      Make use of ndr_syntax_id_equal
      Introduce is_known_pipename
      Make the pipe_names[] array static to cli_pipe.c
      The PIPE_ pipename macros are only used in cli_pipe.c
      Simplify pipe_names: we only do ndr_transfer_syntax anyway
      Store copies of the syntax ids in rpc_pipe_client
      Allocate rpc_cli->dc in rpccli_netlogon_setup_creds()
      Refactoring: Change calling conventions for rpc_pipe_open_np
      Refactoring: Change calling conventions for cli_rpc_pipe_open
      Refactoring: Change calling conventions for cli_rpc_pipe_open_noauth
      Refactoring: Change calling conventions for cli_rpc_pipe_open_ntlmssp
      Refactoring: Make get_schannel_session_key_common return NTSTATUS
      Refactoring: Make get_schannel_session_key return NTSTATUS
      Refactoring: Make get_schannel_session_key_auth_ntlmssp return NTSTATUS
      Refactoring: Change calling conventions for cli_rpc_pipe_open_schannel_with_key
      Refactoring: Change calling conventions for cli_rpc_pipe_open_ntlmssp_auth_schannel
      Refactoring: Change calling conventions for cli_rpc_pipe_open_schannel
      Refactoring: Change calling conventions for cli_rpc_pipe_open_krb5
      Refactoring: libnetapi_open_pipe takes an interface instead of pipe_idx
      Refactoring: rpcclient uses ndr_syntax_id instead of pipe_idx
      Refactoring: run_rpc_command uses ndr_syntax_id instead of pipe_idx
      Refactoring: net_sh_run uses ndr_syntax_id instead of pipe_idx
      Refactoring: connect_dst_pipe uses ndr_syntax_id instead of pipe_idx
      Remove now unused cli_get_iface
      Remove now unused cli_get_pipe_idx
      Remove now unused cli_get_pipe_name
      Remove some fully outdated sample code
      Remove one reference to PI_LSARPC
      Remove one reference to PI_NETLOGON
      Remove some unused code
      Remove a reference to pipe_idx
      Refactoring: CLI_DO_RPC_* uses interface instead of pipe_idx
      Remove unused function rpccli_is_pipe_idx
      Make idl: cli_do_rpc_ndr does not use pipe_idx anymore
      YESS -- remove the PI_* pipe constants
      Update Roadmap
      s3 cli_do_rpc_ndr does not use PI_* anymore
      Make use of TALLOC_FREE when freeing the per-winbindrequest memory context
      Remove unused request_finished_cont()
      Fix a race condition in winbind leading to a crash
      Fix an incompatible pointer warning
      Make api_rpcTNP static to srv_pipe.c
      Create doxygen comments for async_req.[ch]
      Refactor make_internal_rpc_pipe_p: connection_struct is not needed
      Refactoring: Make close_internal_rpc_pipe_hnd a talloc destructor
      make read/write to internal pipes available externally
      Save 128 byte (32-bit platform) or 256 byte (64-bit) per connection_struct
      Add "mymachinepw" to fetch our machine password out of secrets.ldb
      Remove unused extern struct current_user from substitute.c
      Make create_conn_struct() public
      Fix srvsvc_Net[Get|Set]FileSecurity
      Remove a pointless CONST_DISCARD
      Fix a debug message
      Attempt to fix bug 5616
      Fix a typo
      cli_request_new() already gave use the req, remove a pointless function call
      Fix a build failure on host sunX
      Add simple async wrappers around send, recv and connect
      Remove an unused variable, process.c has its static copy
      Fix andx offset calculation for more than 2 chained requests
      fix smb_len calculation for chained requests
      Make events robust against their event_context being freed
      Move the uid2sid cache to the parent winbind process
      Move the gid2sid cache to the parent winbind process
      Directly call backends from idmap_[ugs]_to_[ugs]id
      Remove the multi-ID lookup code and the 3.2.0 version of idmap_cache
      idmap rewrite
      Remove "idmap alloc config : range" parameter
      Fix prototypes
      Some doxygen comments for idmap
      Document idmap rewrite
      Make the docs actually build
      Do not create a new mapping if a domain with an explicit config fails
      Remove two unused variables
      Attempt to fix the build on Irix CC
      Attempt to fix bug 5684
      Add winbind:online check timeout parameter
      Do not call testparm in /etc/init.d/smb
      Bump up version number
      Fix README: DOCS_DIR is replaced by DOCS_TARBALL
      Package 32-bit versions of libtalloc into the winbind rpm
      Exit smbstatus cleanly if messaging_init fails
      Correctly return NULL from messaging_ctdbd_connection if messaging_init failed
      bump version number to 32
      Add a gpfs_prefetch module
      If it is a forced DOS error, nt_errstr should say so
      Revert "If it is a forced DOS error, nt_errstr should say so"
      Revert "Add winbind:online check timeout parameter"
      Attempt to fix Coverity ID 595
      Attempt to fix Coverity ID 596
      Fix a memleak in calculate_next_machine_pwd_change
      Use talloc_stackframe() in machine_password_change_handler
      Fix some nonempty blank lines
      Protect against short read&x replies
      Revert "Protect against short read&x replies"
      Fix some C++ warnings
      Fix some nonempty blank lines
      Move idmap_cache.c from winbindd/ to lib/
      Increase the default positive idmap cache time to a week
      Refactoring: Add the routine cli_request_send()
      Add async cli_close
      Add async open&x
      Remove cli->event_ctx, pass it explicitly
      Add cli_pull_reply
      Move "struct cli_request" from client.h to async_smb.h
      This adds the code to allow chained requests in libsmb/
      Activate code to enable chained requests
      Add cli_request->recv_helper
      Add async smbecho client support
      Remove cli_request_get()
      Fix Coverity ID 592
      Remove a duplicate retval check
      Fix Coverity ID 589, dead code
      Fix Coverity ID 587
      Fix typo
      Slightly simplify logic: remove an else branch
      Fix some nonempty blank lines
      Remove unused CLI_DO_RPC macros
      Tiny logic simplification: remove an else branch
      factor prs_append_some_data out of prs_append_some_prs_data
      Do proper error handling if the socket is closed
      Protect against a closed socket
      Remove some duplicate code
      Thanks metze for pointing out the missing extern :-)
      When setting an NFSv4 ACL, map generic bits
      Fix calculation of useable_space for trans2 and nttrans replies
      Fix a memleak in cli_qfilename (only used in smbtorture)
      Add a utility function to append a DATA_BLOB to a talloc object
      make smb_bytes_push_str public
      Add utility function cli_in_chain()
      Move setting the mid field in req->outbuf from _cork to _uncork
      Add some debug to reply_nttrans
      Add async trans/trans2/nttrans calls to libsmb
      Convert cli_qfileinfo to the async trans call
      Convert cli_query_secdesc to the async trans call
      Fix make test on sparc and possibly also on AIX
      Attempt to correctly find python on host sunx
      Fix some bogus compiler warnings
      fix nonempty blank lines
      Add a paranoia check on incoming PDUs
      remove a pointless empty line
      Add a more explaining comment
      Fix "make test" -- gna...
      Factor out validate_smb_crypto
      Correctly find a [u]int32_t replacement
      Fix bug 5400
      Attempt to fix bug 5684
      Remove a cast -- thanks metze
      Make use of TALLOC_ZERO_P
      Fix the build -- appweb is no more
      Attempt to fix bug 5778
      Fix make pch in the merged build
      S3 puts smb.conf and lmhosts in lib/, s4 into etc/
      Fix async_connect
      Fix bug 5798: "CFLAGS info lost in configure"
      Attempt to fix the build on IRIX
      The IRIX compiler does not like embedded unnamed unions
      "gwen/cc" does not like the double const :-)
      Fix a potential NULL deref in line 258 found by the IBM checker
      Fix an uninitialized variable found by the IBM Checker
      Fix an unlikely memleak found by the IBM checker
      Fix an uninitialized variable warning
      OS/X does not have rl_done in readline.h
      Fix some missing error handlings
      Remove an unused variable
      Re-enable build of smb_samba3.c after the rename smbd->samba
      smbd3 is unhappy if stderr is not open
      Fix some nonempty blank lines
      Store a local schannel key in secrets.tdb
      Add dyn_NCALRPCDIR
      Add netlogond auth method
      Log in the parent winbind log where a request is going
      If name_to_fqdn fails, retry with the dns domain the DC gave us
      Remove unused CHECK_FSP macro
      Fix a typo
      Remove a pointless level of indirection
      Make use of ZERO_STRUCT (the first memset was actually wrong)
      Fix a "nexted extern declaration" warning
      Fix some nonempty blank lines
      Make use of talloc_tos()
      Fix the build
      Remove unused #defines
      Make get_rpc_pipe() static
      Revert "Make get_rpc_pipe() static"
      Fix "make etags" -- args list was too long for my etags
      Fix "warning: initialization discards qualifiers from pointer target type"
      Fix bug 5691: SIGBUS on Solaris
      Pass struct smb_request to file_fsp
      Pass struct smb_request to file_new
      Pass struct smb_request to file_free
      Remove the chain_fsp global
      Use "struct files_struct" for pipes instead of smb_np_struct
      Remove smb_np_struct
      Make the internal pipe functions static
      Remove the current_spoolss_pipes_open thingy.
      Remove unused stuff
      Add the oplock-batch25 test showing that a writeattr does not break an oplock
      Inline the once-used macro "init_dfsroot"
      Move the global hosts_allow() check out of the processing loop
      Use a direct compare instead of calling strncmp in valid_smb_header
      "fn_new"->"fn" in smb_messages[], we got beyond that :-)
      Fix nonempty blank lines
      Fix 64-bit printf warnings
      Fix a valgrind error in idmap_ad_sids_to_unixids()
      Fix two trivial typos
      Fix bug 5840: Segfault in "rpcclient lsaaddacctrights"
      Fix a debug message in send_nt_replies()
      Don't push the data out to the client in reply_sesssetup_blob()
      Slightly simplify reply_sesssetup_blob(): Remove an else branch
      Optimize x_fread to speed up the smbclient put command
      Make use of a large buffer for smbclient put command
      Remove "pipe_handle_offset" -- pipes now use "struct files_struct"
      Fix "make etags" -- the args list gets really long for s4 with the prefix
      Add str_list_check[_ci] to s3's proto.h
      Move the is_known_pipename check into np_open
      Add proxied named pipe support
      wbcGetDisplayName
      wbinfo --sid-to-fullname
      Typo
      Remove a pointles call to smb_bufrem
      Remove unused extern declaration
      Make use of smb_bufrem()
      Add a "buflen" struct member to smb_request
      Apply some const to np_write()
      Apply some const to get_lock_*()
      In reply_search(), don't write to inbuf when splitting directory and mask
      In reply_copy, don't write to inbuf when splitting directory and mask
      Remove a bunch of direct inbuf references by adding "buf" to smb_request
      Kill some fstrings
      The non-talloc versions of srvstr_pull are not longer needed
      Add srvstr_get_path_req[_wcard]
      Simplify params of srvstr_pull_buf_talloc()
      Remove some direct inbuf references by adding smbreq_bufrem
      Rename "inbuf" to "base_ptr" in srvstr_get_path_*
      Remove an unused variable
      Fix bug 5860: safe_strcpy gives a nasty error message for overlong strings
      Remove a bunch of direct inbuf references by adding "vwv" to smb_request
      Use "vwv" in trans parsing
      Pass smb_request to send_trans_reply to match with send_[nt]trans[2]_reply
      Make a [un]become_root wrap a bit tighter
      Remove a direct inbuf reference in reply_negprot
      Remove the inbuf reference from map_checkpath_error()
      Remove some inbuf references by adding "cmd" to smb_request
      Make a comment match its function definition
      Fix nonempty blank lines
      Trigger (and fix) a bug in Samba3 making smbd an infinite data source
      Ignore 3.0 style invalid group mappings during upgrade to ldb
      Use talloc for struct aio_extra
      Fix nonempty blank lines
      Add construct_reply_common_req wrapper
      Make "inbuf" a talloc child of "smb_request" for normal smb requests
      Rewrite aio.c to keep the whole smb_request structure, not just the inbuf
      Convert blocking.c to use talloc
      Slightly simplify logic in cancel_pending_lock_requests_by_fid()
      Slightly simplify logic in remove_pending_lock_requests_by_mid()
      Slightly simplify logic in process_lockingX()
      Simplify logic of cancel_pending_lock_requests_by_fid()
      Convert blocking.c to store a smb_request instead of just inbuf
      Fix a const warning
      Fix the build
      For proxied named pipes, connect to np/<pipe_name> and send auth info
      Converting notify.c to store a request, not an inbuf
      Remove the change to the user context in process_blocking_lock_queue()
      Remove a direct inbuf reference (should have been removed with 8987641d...)
      Remove a direct inbuf reference from reply_nttrans()
      change CHECK_READ to use smb_request instead of inbuf
      Remove direct inbuf refs from send_trans_reply
      Do not write into inbuf for the transs request
      Make "construct_reply_common" static
      fix typo
      sys_pwnam doesn't return talloced memory, so don't mix up the returned struct.
      Rename some variables in getpwnam_alloc() for clarity
      Actually finish memcache_add_talloc
      Make memcache_add_talloc NULL out the source pointer
      Attempt to fix the build
      Fix trans2findfirst for the large directory optimization
      Add "net machinepw"
      fix the build
      Fix an uninitialized variable warning
      Add auth_serversupplied_info to create_conn_struct
      Convert move_driver_to_download_area to use create_conn_struct
      Convert get_correct_cversion to use create_conn_struct
      Convert delete_driver_files to use create_conn_struct
      Remove unused make_connection_with_chdir()
      Get rid of pipes_struct->pipe_user, we have server_info now --- YESSS!
      Fix nonempty blank lines
      Fix the offset checks in the trans routines
      Remove two direct inbuf references from reply_sesssetup_and_X_spnego()
      Remove an unused variable
      Remove the variable "size" from reply_trans
      Remove the variable "size" from reply_nttrans
      Move cli_trans_oob to lib/util.c
      Consolidate the buffer checks for the reply_trans style functions
      Remove inbuf references from the trans2ioctl code
      Remove "conn" parameter from np_open, smb_request contains it
      fix nonempty blank lines
      Do not build the session request if it si not used anyway
      fix nonempty blank lines
      remove the explicit mem_ctx from ntlmssp_state, use the state itself
      Fix a debug message, append the correct \n
      Attempt to fix a build failure on AIX
      Implement type multi_sz for "net registry setvalue"
      Fix for crash bug freeing a non-malloc'ed buffer if the client sends a non-encrypted packet with the crypto state set.
      Slightly simplify cli_session_setup_ntlmssp
      Fix nonempty blank lines
      Replace some pointless variables in reply_open_pipe_and_X by comments
      Factor out smb_splice_chain(), to be used by chain_reply() in smbd
      Add a "bytes_padding" parameter to smb_splice_chain
      Streamline the async_sock API a bit
      Simplify async programming a bit with helper routines
      Add infrastructure to transfer winbindd_request/response asynchronously
      Add wb_trans_send/revc
      Rename "scan_directory" to "get_real_filename"
      Apply some const
      Change get_real_filename() to unix syscall conventions, make it non-static
      Pass the get_real_filename operation through the VFS
      Fix some merge omissions for GPFS
      Fix nonempty blank lines in vfs_gpfs.c
      Make use of smbd_gpfs_get_realfilename_path in unix_convert
      Also search for -lgpfs which is available as GPL in GPFS PTF8
      Fix the build
      Revert "Fix the build"
      Revert "Also search for -lgpfs which is available as GPL in GPFS PTF8"
      Revert "Make use of smbd_gpfs_get_realfilename_path in unix_convert"
      Revert "Fix nonempty blank lines in vfs_gpfs.c"
      Revert "Fix some merge omissions for GPFS"
      s3:modules/gpfs: Fix nonempty blank lines
      Fix nonempty blank lines in vfs_gpfs.c
      Make use of smbd_gpfs_get_realfilename_path in unix_convert
      Also search for -lgpfs which is available as GPL in GPFS PTF8
      Fix the build
      Fix error code when smbclient puts a file over an existing directory
      For read&x replies, check the offset
      Fix a valgrind error in get_relative_fid_filename
      Micro-Optimize cliconnect.c
      Remove a static variable
      Remove a pointless static variable
      Remove a pointless static variable
      Move 128 bytes from the data to the text segment
      Remove the global "cmdline_auth_info" from source3/lib/util.c
      Add the Lua distibution from http://www.lua.org/ftp/lua-5.1.4.tar.gz
      Compile liblua
      net lua
      Fix a valgrind error
      cli_negprot_send -> cli_negprot_sendsync
      Make cli_negprot return NTSTATUS instead of bool
      Make cli_negprot async
      Remove two write-only variables
      Factor out cli_write_max_bufsize
      Move some bytes from data to text, make use of the ARRAY_SIZE macro
      Prefer network writes over reads
      Fix a "ignoring function call result" warning
      Pass "bytes_alignment" up through cli_request_send
      Fix the padding calculation in smb_splice_chain for "bytes_padding!=0"
      Add some comments
      For large smbwrite&x, we need more than 64k bcc
      Convert cli_request->outbuf to uint8_t
      Add a doxygen comment line I forgot to merge
      Remove the direct inbuf reference from construct_reply_common()
      Add the cli_wct_ofs routine to calculate the offset for write&x
      Fix setting smb_len for huge write&x calls
      Add async cli_write_andx and cli_pull
      Make smbclient "put" use cli_push
      Add a torture test simulating Windows write behaviour
      Extend the chain1 test with write&x
      Add sys_writev
      Add write_data_iov
      Make write_data use write_data_iov
      Attempt to fix bug 5953: Make cli_send_smb_direct_writeX use writev
      Add code to test write_data_iov a bit
      Fix SESSSETUP_BENCH torture test for long runtimes
      Simplify invalidate_all_vuids() slightly
      Simplify is_partial_auth_vuid slightly
      Simplify invalidate_vuid slightly
      Move a comment to its place
      First part of bugfix for #5933
      Second part of the bugfix for #5933
      Print the vuid in BENCH-SESSSETUP
      Fix a spinning smbd when printing
      Fix a memory leak in cups_pull_comment_location
      Fix an ancient uninitialized variable read
      Enable individual smbtorture_s3 subtests in make test
      recvfile can't be used for printing so far
      Remove unused function get_numlist()
      Make use of TALLOC_MEMDUP in parent_dirname_talloc()
      Use parent_dirname_talloc instead of parent_dirname in vfswrap_mkdir
      Use parent_dirname_talloc instead of parent_dirname in copy_internals
      Use parent_dirname_talloc instead of parent_dirname in smb_unix_mknod
      Remove unused function parent_dirname
      Rename parent_dirname_talloc() to parent_dirname()
      Fix a "nested extern" warning
      Try to fix recvfile using splice on Linux
      Disable the use of splice(2)
      Replace "goto again" by "return NT_STATUS_RETRY" in receive_message_or_smb
      Make a CONST_DISCARD unnecessary by applying some const
      Fix some nonempty blank lines
      Replace a static variable and alarm() calls by using sys_select()
      The Tru64 shell doesn't like (*) in a case statement
      Remove two pointless globals
      fix some nonempty blank lines
      Remove a global variable
      Fix bug 5913.
      Revert "s3:idmap: Remove passd check from idmap_backends_unixid_to_sid()."
      Revert "s:Fix uid_to_sid mapping when the idmap cache is empty."
      Alternative fix for 45db33e73 and 0d443ae7931
      packet.h API: The callback is now responsible to talloc_free() "buf"
      Optimize for the common case that packet.c received exactly one full packet
      Replace some SMB_ASSERTs with NT_STATUS_INTERNAL_ERROR
      Remove unused argument "vuid" from make_internal_rpc_pipe_p
      struct async_req doesn't really need to carry an event_context
      Fix retval of async_syscall_result_int
      open_socket_out is always used with SOCK_STREAM, remove argument "type"
      Add async timeout helpers
      Add an async queueing mechanism
      Actually do a non-blocking connect.... :-)
      Convert async_connect to "normal" style
      Move winbindd/winbindd_reqtrans.c to lib/wb_reqtrans.c
      Remove wb_trans_send/recv
      async libwbclient infrastructure
      Add a quick test of wb_trans_send/recv
      Async wrapper for open_socket_out_send/recv
      Add open_socket_out_defer_send/recv
      Simulate the Windows behaviour to fire 445 and after a timeout 139
      Fix the build of smbfilter
      Remove a duplicated comment
      Fix a typo found by the IBM Checker
      Fix bug 6012: Add "get_real_filename" to full_audit
      Add create_file to vfs_op_names
      Fix a bad memleak in vfs_full_audit
      Use talloc_tos in vfs_full_audit.c:do_log
      Fix bug 6014 -- mget shouldn't segfault without arguments
      Attempt to fix the build with dnssd
      Attempt to fix the build on netbsd5
      Move the "rid_name" typedef to the only place where it might be used
      s3/swat: Fix creation of the first share using SWAT.
      Add a NULL check and some const to dcerpc_floor_get_lhs_data()
      Add some const to dcerpc_binding_build_tower()
      Add a talloc failure check
      Several fixes to our use of splice
      Remove unused struct CLI_POLICY_HND
      Attempt to fix the build
      Simplify init_pipe_handle_list a bit
      Make samr_info a talloc context of its own
      Make use of a talloc_destructor for free_eventlog_info()
      Make use of a talloc_destructor for free_printer_entry
      Use TALLOC for struct lsa_info
      Now that all policy_handle free_fn's are just TALLOC_FREE, dump free_fn
      Fix some nonempty blank lines
      Simplify find_pipe_fns_by_context slightly
      Fix some nonempty blank lines
      start rpcclient epmapper
      Add derpc_transport_string_by_transport(), apply some const
      Pass the full ndr_interface_table into the s3 rpcserver when registering
      Fake up ndr_table_spoolss
      Call rpc_srv_register instead of rpc_pipe_register_commands in eventlog and svcctl
      Remove the rpc_srv_register wrapper around rpc_pipe_register_commands
      Fix a C++ warning
      Fix a type-punned error
      Move cli_api_pipe() to its only user cli_pipe.c
      Even for srclen == 0 we have to return something
      Always read with offset 0 from a named pipe
      Slightly simplify rpc_read: It should not do the resize
      Check the fragment size the server has sent us
      Remove an unnecessary size check
      Simplify rpc_read a bit
      Make rpc_read() match the control flow normally used in Samba
      Make rpc_read look like a real read call
      Add a new implementation of chain_reply
      Correctly calculate the offset for read&x
      remove the old chain_reply code
      Slightly simplify the paths after rpc_api_pipe()
      Fix some real bugs found by "type-punned" gcc warnings
      Make rpc_read async
      Make cli_pipe_get_current_pdu async, rename it to get_current_pdu
      Remove sync rpc_read wrapper
      Make cli_api_pipe async
      Always check the max send sizein rpc_api_pipe, not just with DEVELOPER
      Move initialization of the reply prs_struct to rpc_api_pipe
      Rename the async version of get_complete_pdu to get_complete_frag
      Make rpc_api_pipe async
      Remove unused sync functions
      Add rpc_write_send/recv
      Tiny simplification of prs_set_offset
      Add async rpc_api_pipe_req
      Remove sync rpc_api_pipe_req
      Fix an uninitialized variable
      Make rpc_pipe_bind async
      Remove unused functions
      Add code to torture the fragmentation code a bit
      Add a macro async_req_setup()
      libnetapi_open_pipe does not need to return cli_state
      simplify gencache_iterate a bit, fix nonempty blank lines
      Remove unused tdb_search_keys()
      Attempt to fix the merged build
      Fix the same bug as 8b618d0 fixes, this time in winbindd_passdb.c
      Make use of TALLOC_FREE
      Remove some smb fsp knowledge from rpc_server/
      Remove some unused code
      Fix some nonempty blank lines
      "userdom_struct" does not need "full_name" anymore -- unused
      Fix a typo
      cli_get_pipe_name_from_iface does not need the cli_state
      Actually complete 3662c2b...
      Fix a segfault: rpccli_* expect the reply_pdu to always be initialized
      Add struct rpc_cli_transport
      RPC_CLIENT_OBJ is the right variable for cli_pipe.o
      Add the named pipe rpc client transport
      Add the socket rpc client transport
      Abstract away the transport in cli_pipe.c
      talloc_free() copes with a NULL pointer just fine
      Fix a segfault in parse_logentry
      Fix chain_reply for pipe reads
      Make smb_bytes_push_str deal with a NULL buf returning NULL
      Fix an error path memleak
      Decouple clistr_pull from struct cli_state->inbuf
      Fix a valgrind error when the socket dies
      Avoid valgrind errors
      Fix the build on "opi"
      cli_ucs2
      Add the strlen to push to smb_bytes_push_str, return the converted size
      Make cli_session_setup_guest async
      Make cli_tcon_andx async
      Add async cli_ntcreate
      Make rpc_transport_np_init async
      Add the "SMBD" rpc transport
      pass NULL to prs_give_memory, that is a pointer
      Fix memleaks
      Make is_andx_req non-static
      Remove the global variable "chain_size"
      make send_file_readbraw static
      Add an async np_write wrapper
      Add an async np_read wrapper
      Convert api_rpc_trans_reply to async np_*
      Make-np_write-handle-0-byte-writes-as-NT_STATUS_OK
      Make reply_pipe_write_and_X async
      Make reply_pipe_write async
      Remove unused np_write sync wrapper
      Make reply_pipe_read_andx async
      Remove unused np_read sync wrapper
      Fix the build on Solaris CC
      Just for fun: Move some bytes from bss to text
      Fix nonempty blank lines
      cli_get_pipe_name_from_interface does not really need a talloc_ctx
      Fix some type-punned warnings
      Replace pipe names in pipes_struct by ndr_syntax_id
      Move rpc_pipe_open_internal to srv_pipe_hnd.c
      Convert api_RNetUserEnum to use the srv_samr_nt.c directly
      Split up async_req into a generic and a NTSTATUS specific part
      Attempt to fix "make test" on host "tridge"
      Next step disentangling async_req from NTSTATUS
      Fix Coverity ID 870
      s3: Fix 'net rpc join' for users with the SeMachineAccountPrivilege.
      Ensure null termination of the password in mymachinepw, remove a debug
      Fix a valgrind error: rpc_bind talloc_move()s the auth struct
      Restore correct handling of "is_data_available" for the socket transport
      Don't use recvall in the proxied np_read_send
      Fix coverity ID 876 (FORWARD_NULL)
      Close samr_handle if open_domain failed
      Fix resume handle for _samr_EnumDomainGroups
      Convert api_RNetGroupEnum to use samr instead of pdb
      Make current_in_pdu in pipes_struct allocated
      Fix a couple of memleaks in mapping_ldb.c
      Fix memleaks in chain_reply for async requests
      Fix some nonempty blank lines
      Most RPC requests do not need a full fragment, start smaller
      Make prs_struct->out_data.current_pdu dynamically allocated
      Fix count in _srvsvc_NetDiskEnum()
      Attempt to fix the build
      Add read_pkt_send/recv
      Add queueing to np_read_state, simulate message-type named pipes.
      Add queueing to np_write
      Fix an uninitialized variable. Tim, please check!
      If we receive a DOS error code, nt_errstr should display it
      Do not use strlen if not necessary... :-)
      Fix some nonempty blank lines
      Convert api_NetUserGetGroups to use samr instead of pdb
      Remove an unused extern reference
      Fix an uninitialized variable
      Only assign argv[1] after the argc check, thanks Tim!
      Fix Coverity ID 519 (NEGATIVE_RETURNS)
      Fix "make etags" properly :-)
      Fix Coverity IDs 879 and 880 (RESOURCE_LEAK, REVERSE_INULL)
      Fix Coverity ID 872 -- we have alread dereferenced "ac" 2 lines above
      Fix Coverity ID 871 -- do not dereference "sp" before checking for NULL
      Fix Coverity ID 745 (RESOURCE_LEAK)
      Fix Coverity ID 744
      Fix Coverity ID 742 (RESOURCE_LEAK)
      Fix Coverity ID 707 (RESOURCE_LEAK)
      Replace get_myname() with the talloc version from v3-3-test
      Fix an uninitialized variable, introdued with 4d100f2f
      Remove the s4 version of smbspool.c
      Fix Coverity ID 740 (RESOURCE_LEAK)
      Fix a valgrind error
      Attempt to fix the build on Solaris 8
      Add two variable assignments to shut up gcc
      Fix a warning and a bug: pipe(2) can fail
      Add missing prototype for "tevent_req_print"
      Add missing include to shut up missing prototype warnings
      Make smb_load_perfcount_module static
      Fix some C++ warnings
      Replace a // style comment with a /* */ one
      Rename lp_smb_perfcount_module() to lp_perfcount_module() to match the parameter name
      Fix some nonempty blank lines
      Remove a pointless NULL check
      Fix an invalid typecasting
      Interesting C compiler you have there... :-)
      Fix a buffer handling bug when adding lots of registry keys
      Fix a O(n^2) algorithm in regdb_fetch_keys()
      Fix an uninitialized variable
      Fix an uninitialized variable
      Move some bytes from the data to the text segment
      Do not close an fd we know is -1
      Fix a typo
      Remove the static "chal" from ntlmssp.c:get_challenge()
      Fix some nonempty blank lines
      Fix the build on Solaris
      Convert name_mangle() to use talloc
      Add tevent_req_is_unix_error
      tevent.h requires bool and uint[16|32|64]_t
      Convert async_connect to tevent_req
      Add async writev
      Use async writev in wb_req_write
      Use async writev for wb_resp_write
      Use async_writev in np_write
      Remove async sendall
      Fix async writev
      Add async read_packet
      Replace read_pkt by read_packet in np_read
      Remove read_pkt
      Use read_packet for wb_req_read
      Use read_packet for wb_resp_read
      Remove unused recvall
      Remove unused param_connect struct
      Add more conventional async_send
      Add more conventional async_recv
      Fix some C++ warnings
      Attempt to fix the OpenChange build -- sorry for the break
      Convert rpc_sock_read to use tevent_req base async_read
      Remove async_req based async_recv
      Convert rpc_sock_write to use tevent_req base async_send
      Remove async_req based async_send
      Fix an incompatible pointer passed to winbind_get_groups
      Fix a missing prototype
      Speed up "net conf list"
      Speed up "net conf list"
      Add dbwrap->parse_record
      Add db_tdb_parse
      Add sorted subkey cache
      Add a comment describing the sorted subkeys
      Wrap creating the sorted subkey cache in a transaction
      Add tevent_ntstatus
      Add tevent_req helpers to includes.h
      Convert open_socket_out to tevent_req
      Remove a temporary debug message -- sorry
      Use talloc_tos() in regkey_access_check()
      Simplify async_connect_send slightly
      Fix async reading winbindd_response
      Only copy sharename up from rap_to_pjobid
      Attempt to fix the build
      Make use of gpfs_get_real_filename optional
      Attempt to fix the build on IRIX
      Complete the fix for bug 6100
      Fix some nonempty blank lines
      Fix a smbclient segfault against security=share servers
      Shape up pdb_search a bit by making it a talloc ctx with a destructor
      Add "queue" to writev_send
      Add tevent_req wbc helpers
      Convert wb_req_write to tevent_req
      Convert wb_req_read to tevent_req
      Convert wb_resp_read to tevent_req
      Convert wb_resp_write to tevent_req
      Move "struct req_read_state" where it belongs
      Add parameter "queue" to wb_int_trans_send
      Convert wb_int_trans to tevent_req
      Convert wb_connect to tevent_req
      Convert wb_open_pipe to tevent_req
      Don't copy the winbindd_request in wb_trans
      Fix a typo
      Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog
      Add a vfs_preopen module to hide fs latencies
      Make opt_nocache static to winbindd.c
      Fix #6167: winbindd -n should disable the winbind idmap cache
      Fix #3954
      Add queue argument to wb_resp_write
      Fix a malloc/talloc mismatch when cli_initialise() fails
      Use tevent_wakeup_send in open_socket_out_defer
      Convert open_socket_out_defer to tevent_req
      Use tevent_wakeup_send in wb_trans
      Remove some unused code from async_req.[ch]
      Make struct wb_context private to wbclient.c
      Remove an unnecessary variable
      Convert wb_trans to tevent_req
      Remove unused async_req references from wb_reqtrans.c
      Fix a valgrind error
      Convert np_write to tevent_req
      Convert np_read to tevent_req
      Remove some transitional code in writev_send
      Fix #6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped members
      Add a basic Doxyfile for talloc
      Convert the contents of talloc_guide.txt to doxygen-style talloc.h comments
      Delete talloc_guide.txt
      Add a default "undocumented" module
      Add some initial hook to the front page
      Reformatting
      Document talloc_pool()
      Add a talloc_internal "module"
      Document _talloc
      Document TALLOC_FREE()
      Document talloc_parent, talloc_parent_name and talloc_is_parent
      Document talloc_zero_array()
      Revert "Document talloc_zero_array()"
      Revert "Document talloc_parent, talloc_parent_name and talloc_is_parent"
      Revert "Document TALLOC_FREE()"
      Revert "Document _talloc"
      Revert "Add a talloc_internal "module""
      Revert "Document talloc_pool()"
      Revert "Reformatting"
      Revert "Add some initial hook to the front page"
      Revert "Add a default "undocumented" module"
      Revert "Delete talloc_guide.txt"
      Revert "Convert the contents of talloc_guide.txt to doxygen-style talloc.h comments"
      Revert "Add a basic Doxyfile for talloc"
      Use StrCaseCmp in the dirsort module
      Document the dirsort module
      Only build the dirsort module if we have the dirfd function
      talloc_array_length: talloc_get_size deals fine with NULL
      Fix connect to port 139 only -- thanks gd for bugging me :-)
      Disable dns_sd by default
      Add avahi detection to configure
      Add tevent avahi binding
      Use avahi to register _smb._tcp in smbd
      Fix bug 6097
      Add tevent_req_simple_recv_ntstatus()
      Convert rpc_read to tevent_req
      Convert rpc_write to tevent_req
      Convert get_complete_frag to tevent_req
      Convert cli_api_pipe to tevent_req
      Convert rpc_api_pipe to tevent_req
      Convert rpc_api_pipe_req to tevent_req
      Convert rpc_cli_transport->read to tevent_req
      Convert rpc_cli_transport->write to tevent_req
      Convert rpc_cli_transport->trans to tevent_req
      Convert rpc_pipe_bind to tevent_req
      Fix two memleaks in the encryption code
      Avahi disables a timer by tv=NULL in avahi_timeout_update(), do not crash
      Fix a scary "fill_share_mode_lock failed" message
      Fix a talloc/malloc screwup in file_lines_pload
      Fix the build of nfsv4_acls.c
      Fix external np read after conversion to tevent_req
      Fix a debug msg typo
      Fix an uninitialized variable valgrind error
      Print an error if trying a merged build without a system kerberos lib
      Use procid_str in debug messages for better cluster-debuggability
      Use cluster-aware procid_is_me instead of comparing pid's
      Use recv instead of read in read_packet_handler
      Pass the current debuglevel down to the forked smbd
      Ensure 0-termination for the forked-smbd debug output
      Keep the forked-smbd stdout reader around longer
      Fix smbd crash for close_on_completion
      Remove async_req dependency from cli_pull_trans
      Remove a silly check
      Use the server config file for smbpasswd -a user in make test
      Fix two c++ warnings in vfs_gpfs.c
      Add prototype for smbd_gpfs_get_realfilename_path
      Make some functions static to vfs_gpfs.c
      Add read_smb_send/recv, dumping keepalives
      Add new async libsmb infrastructure
      Remove the CHAIN1 test -- will come back later
      Convert cli_echo to tevent_req
      Convert cli_trans to tevent_req
      Convert cli_session_setup_guest to tevent_req
      Convert cli_negprot to tevent_req
      Convert cli_tcon_andx to tevent_req
      Convert cli_ntcreate to tevent_req
      Convert cli_read_andx to tevent_req
      Streamline cli_pull sync wrapper
      Convert cli_write_andx to tevent_req
      Streamline cli_push sync wrapper
      Convert cli_close to tevent_req
      Convert cli_open to tevent_req
      Re-add the CHAIN1 test
      Remove async_req based async libsmb infrastructure
      Never hand out 0xffff as a mid
      Add async oplock waiter
      Make cli_oplock_ack async
      Add a bad hack to enable level 2 oplocks in torture_open_connection_share
      Correct sync wrappers in cli_pipe.c
      Convert rpc_transport_np_init to tevent_req
      Convert get_anon_ipc to tevent_req
      Convert rpc_cli_smbd_conn_init to tevent_req
      Convert rpc_transport_smbd_init to tevent_req
      Convert cli_pull to tevent_req
      Convert cli_push to tevent_req
      Remove async_req
      Use talloc_tos() for a temp convert_string_allocate()
      Fix a memleak in an unlikely error path in change_notify_create()
      Fix some nonempty blank lines
      Extract and print the server name type the client connects to
      write_data already guarantees everything was written
      Reactivate get_socket_port
      Add "netbios retarget"
      Fix a bug in smbclient not sending the correct called name
      We have to deny a level 2 oplock if kernel oplocks are enabled
      Use convert_string_talloc, thanks Andrew!
      Rename notify_context->db to db_recursive
      Add notify_onelevel.tdb
      Add some const
      Add type-safe policy_handle_create/find
      Convert the samr connect_handles to type-safe calls
      Make "struct policy" private to srv_lsa_hnd.c
      Add "uint32_t access_granted" to policy handles
      Make get_samr_info_by_sid use recent coding conventions
      Remove flag "builtin_domain" from samr_info
      Remove flag "builtin_domain" from disp_info
      Make force_flush_samr_cache use a dom_sid to find what to flush
      Convert the domain handles to type-safe policy handles
      Do not use the file system GET_REAL_FILENAME for mangled names
      Reproduce a bug with a custom GET_REAL_FILENAME
      Do not vasprint stuff where not necessary
      Convert the user handles to type-safe policy handles
      Convert the group handles to type-safe policy handles
      Convert the alias handles to type-safe policy handles
      Fix samr_SetSecurity
      Fix _samr_QuerySecurity
      Remove "struct samr_info"
      Remove some shadowed definition warnings
      Fix some nonempty blank lines
      Move serverinfo_to_SamInfo3() to rpc_server/
      Fix Coverity ID 884: DEADCODE
      Fix Coverity ID 628, Andrew B., please check!
      Fix Coverity ID 626: DEADCODE
      Fix a pointless static
      Fix a type-punned warning
      Fix an uninitialized variable
      Fix a couple of warnings
      Revert "Do not use the file system GET_REAL_FILENAME for mangled names"
      Add missing prototypes
      Fix a type-punned warning
      Do not panic unnecessarily
      Fix annoying debug messages when no snapshots are used
      Fix a type-punned warning
      Fix Coverity ID 853 (UNINIT) -- Kai, please check!
      Fix a missing prototype warning
      Fix notify_onelevel: notify is not necessarily enabled
      Re-import the v3-3 version of str_list_make().
      Add thread pool
      Add fncall_send/recv
      Add getaddrinfo_send/recv
      Many build farm boxes do not have clock_gettime
      Attempt to the build on NetBSD5 and a few others
      Fix a malloc/talloc mixup
      Attempt to fix the merged build on OpenSuSE 10.2
      Fix Coverity 911: FORWARD_NULL. Metze, please check!
      Explicitly link in pthreads for lib/pthreadpool if required
      Attempt to fix the build on SerNet-sles8
      Fix a warning on host "gwen"
      Of course, s_addr is a #define somewhere else .... (Solaris...)
      Clean up after Tridge's util_strlist changes
      Fix a bunch of type-punned warnings -- gd, please fix properly :-)
      Fix some warnings due to uint16_t!=-1 always being true
      Fix an invalid type warning
      Fix Coverity ID 913 (NEGATIVE_RETURNS) -- gd, please check!
      Increase debug level of "create_connection_server_info failed" message
      Do not crash in ctdbd_traverse if ctdbd is not around
      Fix bug 6302: Give the VFS a chance to read from 0-byte files
      Fix Coverity ID 897: REVERSE_INULL
      Fix bug 6336: "net groupmap set" segfaults
      Make cli_session_setup_guest chainable
      Make cli_tcon_andx chainable
      Add simple test chaining up sesssetup and tcon
      Fix a typo
      Adapt wb_reqtrans to "recent" coding conventions
      Convert lib/wb_reqtrans.c to unix calling conventions
      Fix some nonempty blank lines
      Remove a misleading comment
      Fix some type-punned warnings
      Do not call SMB_VFS_GET_REAL_FILENAME if the name is mangled
      Fix the mangle1 test
      Add wb_simple_trans_send/recv
      wb_int_trans -> wb_simple_trans in wbclient.c
      Fix an unitialized variable warning
      Fix SMB2_CAP_DFS
      Move SMB2 constants to a separate file
      Fix some nonempty blank lines
      Fix bug 6157
      Convert response.extra_data.data from malloc to talloc
      Remove an unused struct definition
      Fix some nonempty blank lines
      Add some const
      Fix a type-punned warning
      Remove two unused variables
      Fix bug 6361: Make --rcfile work in smbget
      Fix the merged build -- thanks jelmer for the hint!
      s3-events: If immediate requests are pending, the timeout is 0
      Fix a typo
      Fix static linking of vfs_notify_fam
      s3-events: Not only timed, also immediate events generate a timeout return
      Fix a type-punned warning
      Fix broken pipe handling
      Fix a race condition in vfs_aio_fork with gpfs share modes
      Add "file_walk_table" to do stuff with all open files
      In aio_fork, we have to close all fd's, we might hold a gpfs share mode
      Fix bug 5681: Do not limit the number of network interfaces
      Move down the become_root()/unbecome_root() calls into the VFS modules
      Use TDB_VOLATILE instead of tdb_set_max_dead()
      Fix detection of "enum FAMCodes"
      Another attempt at fixing the static build of vfs_notify_fam
      Fix an uninitialized variable in wb_context_init
      Fix wb_trans_done after conversion to unix calling conventions
      Make local-wbclient flexible in # of connections and ops
      Simplify the logic of tsocket_bsd_pending
      Set errno=ENOMEM if tevent_add_fd fails
      Only build the krb5 locator when building shared libs
      Do not do a merged build without shared libs
      Demonstrate a bug we have when dealing with real os-level share modes
      Fix bug disclosed by lock8 torture test
      Use SMB_VFS_NEXT_CLOSE. This VFS stuff is really opaque to me...
      Allow NULL queue to writev_send
      Add "err_on_readability" to writev_send
      Fix wb_simple_trans queueing
      Fix closed_fd(): select returning 0 means no fd listening
      Do queueing in wbclient.c
      Change async_connect to use connect instead of getsockopt to get the error
      Don't set a timeout deep inside wb_connect
      Don't limit the number of retries in wb_trans.
      use epoll for local-wbclient test
      Fix a race condition in winbind leading to a panic
      TALLOC_FREE happily lives with a NULL ptr. Tim, please check!
      Attempt to fix a debian build problem
      Introduce "struct stat_ex" as a replacement for SMB_STRUCT_STAT
      Fix some nonempty blank lines
      Attempt to fix the build on NetBSD
      Attempt to fix the build on HP/UX
      Gna, how long do I program in C now??? :-)
      Fix some nonempty blank lines
      Fix a size_t/int warning
      Fix the build of nfs4_acls.c
      Add smbldap_pull_sid
      Do not segfault in pdb_search_destructor if no real search was started
      TALLOC_ZERO_P->talloc_zero
      Make sid_binstring & friends take a talloc context
      Fix some nonempty blank lines
      Fix some nonempty blank lines
      async_sock: Change license to LGPLv3+
      s3 async wbclient: Change license to LGPLv3+
      util: Change license on tevent_unix to LGPLv3+
      Add smbldap_talloc_single_blob()
      Re-Add the "dropbox" functionality with -wx rights on a directory
      Handle EINTR in async_sock.c
      talloc_strdup "dir" in wb_context_init
      Move ads flags mapping to lib/
      Move a comment where it belongs
      Fix a C++ warning
      Fix some nonempty blank lines
      Remove a variable used just once
      Add SMB_VFS_CONNECTPATH operation
      Add a "connectpath" operation to the shadow_copy2 module
      Support getting gpfs birthtime
      Only err on readability if writev_send was explicitly asked to do so
      Add tevent_req_notify_callback
      Increase tevent version for tevent_req_notify_callback()
      Fix bug 6392: Exit log2pcaphex if a requested output file can't be opened
      Fix a couple of warnings in log2pcaphex.c
      Allow AF_UNIX for open_socket_out
      Fix an uninitialized variable read in async_connect_send
      Use data_blob_null instead of data_blob(NULL, 0)
      Fix some nonempty blank lines
      Add the early start of an async ldap library
      Add some samba-style tldap utility functions
      Allow access as SYSTEM on a privileged ldapi connection
      Add an early prototyp of pdb_ads.c.
      Attempt to fix the build without system-ldap.
      Fix after making tldap independent of ldap.h
      req_del and req_abandon are ASN1_APPLICATION_SIMPLE
      Fix syntax of sending a delete request
      Return full info in pdb_ads_search_users()
      Make "net sam list" work for groups, aliases and builtins
      Add tldap_pull_uint32
      More pdb_ads stuff
      Add "net sam createdomaingroup"
      Fix bug 6449
      Fix a valgrind error in "net rap user add"
      Further fix for 6449
      Implement pdb_ads_create_dom_group()
      Implement pdb_ads_delete_alias
      Pass a talloc_ctx to pdb_enum_aliasmem
      Implement pdb_ads_enum_aliasmem
      Do not use a variable format string
      Add tlda_add_mod_str
      Implement pdb_[add|del]aliasmem
      Fix two 64-bit warnings
      Fix some nonempty blank lines
      Make "net ads listmem" also work for domain groups
      Implement pdb_ads_enum_group_members
      Implement "net sam deletedomaingroup"
      Implement pdb_ads_delete_dom_group
      Make "net sam [add|del]mem" work for domain groups
      Implement pdb_ads_[add|del]_groupmem
      No need to free twice -- thanks gd :-)
      Do not pull samAccountName twice
      Some more fields in pdb_ads_init_ads_from_sam()
      If there are no mods, don't bother the ldap server
      Fix a segfault in pdb_ads_delete_user()
      Implement pdb_ads_lookup_rids
      pdb_default_aliasinfo is just fine for pdb_ads right now
      Implement pdb_ads_set_aliasinfo
      Implement pdb_enum_alias_memberships
      Add debugging facility to tldap, analogous to tevent
      Add basic tracing of tldap messages
      Activate tldap tracing in pdb_ads
      Fix wb_req_more(): Return 0 when done, read_pkt_send needs that
      Simplify close_normal_file()
      Fix bug 6440
      Make winbindd_cli_state->request a pointer instead of a struct member
      Convert the main winbind client communication to wb_reqtrans.c
      Convert the winbind parent->child communication to wb_reqtrans
      Remove some unused code
      Add wb_domain_request_send/recv
      Add an async wb request loop
      Add async wb_ping
      Convert async_domain_request to wb_domain_request_send
      Add winbindd_dual_ping to all children
      Convert winbindd_domain_info to wb_domain_request_send
      Remove unused init_child_connection()
      Do not use "finished" in winbind child
      Avoid scanning the client list when a client exits
      Do not store the listening fde
      Make rescan_trusted_domains a timed event
      winbind: replace process_loop() by tevent_loop_once()
      Fix an error message: We get the errno in "err"
      Remove an unused struct member in winbindd_cli_state
      Make winbindd_cli_state->response a pointer instead of a struct member
      Remove "winbindd_request" and "winbindd_response" from winbindd_cli_state
      Fix a = vs == error in writev_handler
      Do a correct TALLOC_FREE in an error case
      Fix the posixtimedlock test
      Fix bug 4699: Remove pidfile on clean shutdown
      Add tldap_context_[gs]etattr
      Make tevent_req_is_ldap_error public
      Add tldap_fetch_rootdse
      Add tiny tldap test
      Fix Coverity IDs 922 and 933
      Add a missing talloc_move() in tldap_search_recv
      talloc_tos() aborts if it can not get a stackframe
      Fix empty lines
      Fix setting passwords in pdb_ads
      Prepare control support
      tldap control support
      Add tldap_entry_has_attrvalue
      Add tldap_supports_control
      Move asn1_blob() to lib/util/asn1.c
      Move asn1_load_nocopy() to lib/util/asn1.c
      Reorganize retrieving errors and server-sent controls
      Add tldap paged searches, together with two helper routines
      Only set the password if there is one
      Reenable the LDAPI socket for the merged build
      Add a \n to a debug message in smbacl4_nfs42win
      Fix a typo in a comment
      Fix some dead code warnings from SUN Studio
      The solaris linker seems to require an extra mention of dependent libs
      s3/lanman: Workaround for KB932762.
      Fix some nonempty blank lines
      Stop listening for inotify data when there's none
      tldap: Don't fire off more than one read_ldap request during searches
      Properly free a downlevel readv request. Metze, please check
      Add tstream_read_packet
      Convert tldap to tstream
      Move read_ldap_done after read_ldap_send
      tldap_msg_received: Properly free the asn1_struct in case of an error
      Add tldap_search_va
      If the connection is down, don't try another write.
      Make pdb_ads survive a restart of Samba4
      Turn the pdb_rid_algorithm into a capabilities call that returns flags
      _lsa_QueryInfoPolicy: Use symbolic info level names
      Fix bug #6431 - local groups from 3.0 setups no longer found.
      Attempt to fix the build
      Test error codes on popular streams
      For non-existent streams we have to return OBJECT_NAME_NOT_FOUND
      Fix two pointless statics
      tldap: Do not do a return before we got the search_result
      Make pdb_ads return an additional flag
      Add pdb_get_domain_info
      Implement QueryInfoPolicy2 similar to s4: Make it the same as QueryInfoPolicy
      Handle LSA_POLICY_INFO_DNS
      Add tldap_pull_guid
      pdb_ads: Fetch the domain GUID
      pdb_ads: Use tldap_fetch_rootdse in pdb_ads_connect
      Fix some warnings
      Add pdb_ads_get_domain_info
      pdb_ads: For cached samu entries, priv is NULL
      Fix some nonempty blank lines
      Actually increase PASSDB_INTERFACE_VERSION to 18 :-)
      Make check_bind_req static to rpc_server/srv_pipe.c
      Introduce null_ndr_syntax_id
      Remove "typedef struct ndr_syntax_id RPC_IFACE;"
      Add const to init_rpc_hdr_ba
      Use null_ndr_syntax_id instead of zeroing null_interface manually
      Attempt to fix the build of vfs_catia.c -- Tim, please check!
      Make escape_ldap_string take a talloc context
      Attempt to fix the build -- jlayton, please check!
      Fix our base64 implementation for blobs of length 4....
      Fix&Run local-gencache
      Quieten events and tldap debug messages
      Return 0 domains from enum_trusteddoms
      TALLOC_FREE(sd) in check_open_rights upon an error
      Create a correct talloc hierarchy in make_sec_acl()
      Create a talloc_stackframe for each file in wildcard unlink
      Attempt to fix the build
      Fix bug 5886
      Replace ASSERTs in gencache with "return false"
      TDB_CONTEXT -> "struct tdb_context"
      Remove gencache_[un]lock_key
      Fix some nonempty blank lines
      Remove gencache_init/shutdown
      Add tdb_data_cmp
      Make gencache more stable
      Consolidate string and data_blob routines in gencache
      Consolidate gencache also every 100 writes in a single process
      3.4 is released...
      Fix a few type errors in VFS modules
      Fix some C++ warnings
      Fix some nonempty blank lines
      Some more VFS type errors
      Fix a few uninitialized variable warnings
      In chain_reply, copy the subrequests' error to the main request
      Fix the chain2 test
      Make the smbd VFS typesafe
      Move the "enum _vfs_op_type" to full_audit
      add my copyright after the VFS rewrite
      First patch for "new VFS" portability
      Fix some nonempty blank lines
      Use a switch statement in charset_name()
      Fix a winbind memleak
      Move 16 bytes from data to r/o text segment
      No explicit initialization necessary for a zero blob
      Remove a pointless static fstring
      Cleanup patch after "struct stat_ex"
      Cleanup patch after "new VFS"
      Fix a 32/64bit stack corruption bug
      Fix a valgrind error in _samr_DeleteUser
      Fix valgrind errors in DeleteDomainGroup and DeleteDomAlias
      Fix a valgrind error in cli_ctemp_done
      Fix some nonempty blank lines
      Fix a valgrind error in winbind
      Fix a typo
      Fix a valgrind error in chain_reply
      Lift the event loop in rpc_api_pipe_req() one level into cli_do_rpc_ndr
      Remove a duplicate prototype
      Fix unqualified "net join"
      shadow_copy2: The system getrealfilename() can't deal with a 0-length fname
      Slightly restructure the async winbind request calling convention
      Provide a mem_ctx for child requests
      Remove a pointless variable
      Fix some nonempty lines
      Rename LOOKUP_NAME_EXPLICIT to LOOKUP_NAME_NO_NSS
      Refactoring: mem_ctx is not needed as an argument to centry_sid
      Fix indentation
      Place a comment correctly
      Some mods for recent coding conventions
      Refactor 9b78af1f: Fix lookupname recursion
      Fix some nonempty blank lines
      Fix some nonempty blank lines
      Fix a typo
      Add some const to winbind_userinfo
      s3:winbind: Add NDR-based parent-child communication to winbind
      s3:winbind: Make wcache_sid_to_name externally visible
      s3:winbind: Add async wb_lookupsid
      s3:winbind: Convert WINBINDD_LOOKUPSID to the new API
      s3:winbind: Remove old version of WINBINDD_PING
      s3:winbind: Make wcache_name_to_sid visible externally
      s3:winbind: Add async wb_lookupname
      s3:winbind: Convert WINBINDD_LOOKUPNAME to the new API
      s3:winbind: Add async wb_sid2uid
      s3:winbind: Convert WINBINDD_SID_TO_UID to the new API
      s3:winbind: Add async wb_sid2gid
      s3:winbind: Convert WINBINDD_SID_TO_GID the new API
      s3:winbind: Add async wb_uid2sid
      s3:winbind: Convert WINBINDD_UID_TO_SID the new API
      s3:winbind: Add async wb_gid2sid
      s3:winbind: Convert WINBINDD_GID_TO_SID the new API
      s3:winbind: Make wcache_query_user externally visible
      s3:winbind: Add async wb_queryuser
      s3:winbind: Make fillup_pw_field publically available
      s3:winbind: Add async wb_getpwsid
      s3:winbind: Convert WINBINDD_GETPWSID to the new API
      s3:winbind: Convert WINBINDD_GETPWNAM to the new API
      s3:winbind: Convert WINBINDD_GETPWUID to the new API
      s3:winbind: Make wcache_lookup_useraliases available publically
      s3:winbind: Make parse_sidlist take a const char *
      s3:winbind: Add async wb_lookupuseraliases
      s3:winbind: Convert WINBINDD_GETSIDALIASES to the new API
      s3:winbind: Make wcache_lookup_usergroups externally visible
      s3:winbind: Add async wb_lookupusergroups
      s3:winbind: Convert WINBINDD_GETUSERDOMGROUPS to the new API
      s3:winbind: Add async wb_gettoken
      s3:winbind: Convert WINBINDD_GETGROUPS to the new API
      Fix some nonempty blank lines
      Make wbinfo also print the members when querying a group
      Implement db_rbt_traverse
      s3:winbind: Simplify _wbint_[GU]id2Sid
      s3:winbind: WINBIND_USERINFO -> wbint_userinfo
      s3:winbind: Add async wb_seqnum
      s3:winbind: Add async wb_seqnums
      s3:winbind: Convert winbindd_show_sequence to the new API
      s3:winbind: Fix a potential segfault in libwbclient
      s3: Add talloc_dict.[ch]
      s3:winbind: Make wcache_lookup_groupmem available publically
      s3:winbind: Add async wb_group_members
      s3:winbind: Add async wb_getgrsid
      s3:winbind: Add const to normalize_name_map
      s3:winbind: Make fill_grent publically available
      s3:winbind: Add winbindd_print_groupmem
      s3:winbind: Convert WINBINDD_GETGRGID to the new API
      s3:winbind: Convert WINBINDD_GETGRNAM to the new API
      s3:winbind: The get[gr|pw]end functions need access to the client state
      Make refusal of SEC_DESC_DACL_PROTECTED configurable
      s3:dsgetdcname: Inline dsgetdcname_cache_refresh
      s3:dsgetdcname: Fix a crash in dsgetdcname
      s3:winbind: Fix the talloc hierarchy in wb_queryuser_done
      s3:winbind: winbindd_dual_ndrcmd should output what it's doing
      s3:winbind: For internal domains it is pointless to connect to a DC
      s3:winbind: Do not drop the first user in sam_query_user_list
      s3:winbind: Even on a domain controller, "our" domain is internal
      s3:winbind: Fallback to the forest root for lookupname
      Do an early TALLOC_FREE
      Add some const to dsgetdcname
      Add a parameter to disable the automatic creation of krb5.conf files
      s3:winbind: Fix Coverity ID 942: Resource Leak
      s3:winbind: Factor out wcache_fetch_seqnum
      s3:winbind: Add a generic cache for NDR based parent-child requests
      s3:winbind: Factor out wcache_store_seqnum()
      s3:winbind: Some calls are not cacheable
      s3:winbind: Remove the manual caching for the async wb_ functions
      s3:winbind: Fix a typo
      s3:winbind: Convert WINBINDD_GETUSERSIDS to the new API
      tevent: Fix a segfault upon the first signal
      s3:winbind: Rename wbint_GroupMember to wbint_Principal
      s3:winbind: Rename wbint_GroupMembers to wbint_Principals
      s3:winbind: Fix a typo
      s3:winbind: Fix a bug found by RPC-SAMR
      s3:winbind: Make wb_seqnums.c update the winbind cache seqnums
      s3:winbind: simplify wb_seqnums_done a bit
      s3:winbind: Add async query_user_list
      s3:winbind: Add async fill_pwent
      s3:winbind: Add async next_pwent
      s3:winbind: Convert the GETPWENT routines to the new API
      s3:winbind: Add an async dsgetdcname call
      s3:winbind: Convert winbindd_dsgetdcname to the new API
      s3:winbind: Add async wb_dsgetdcname
      s3:winbind: Convert the GETDCNAME routines to the new API
      w3:winbind: Convert WINBINDD_LOOKUPRIDS to the new API
      s3:winbind: Add async QueryGroupList
      s3:winbind: Add async wb_next_grent
      s3:winbind: Fix a typo
      s3:winbind: Add some missing error checks
      s3:winbind: Add a comment about fill_grent_mem_domusers...
      s3:winbind: Convert the getgrent functions to the new API
      s3:winbind: add a fake NDR winbind cache validator
      s3:nsstest: Fix a very confusing behaviour in nsstest
      s3:winbind: Convert WINBINDD_LIST_USERS to the new API
      s3:winbind: Convert WINBINDD_LIST_GROUPS to the new API
      w3:winbind: Convert WINBINDD_ALLOCATE_UID to the new API
      w3:winbind: Convert WINBINDD_ALLOCATE_GID to the new API
      s3:winbind: Fix bug 5626
      s3:libwbclient: Fix bug 6349, initialize domain info struct
      s3:libsmb: Attempt to fix bug 6665
      s3:winbind: Fix Coverity ID 940: Resource Leak
      s3:smbd: Fix Coverity ID 937, REVERSE_INULL
      s3:winbind: Fix Coverity ID 933: FORWARD_NULL
      s3:libsmb: Convert (state->received) to (state->received != 0)
      s3:winbind: Make the pam_auth subfunctions static
      s3:winbind: Remove pointless <cond> ? true : false;
      s3:winbind: Use fstr_sprintf, it is simpler than talloc_asprintf->fstrcpy
      s3:smbd: Add the ntstatus to the smb_panic in share_mode_lock_destructor
      s3:winbind: Convert WINBINDD_CHECK_MACHACC to the new API
      s3:winbind: Convert WINBINDD_SET_MAPPING to the new API
      s3:winbind: Convert WINBINDD_REMOVE_MAPPING to the new API
      s3:winbind: Convert WINBINDD_SET_HWM to the new API
      s3:smbd: Add a "hidden" parameter "share:fake_fscaps"
      s3:docs: Add info about how to obtain cifs module in cifs mount helper manpage
      s3:vfs: Fix the build of vfs_tsmsm after the VFS rewrite
      s3:libsmb: Fix bug 6606 -- short reads in smbclient were not handled
      s3: Test short reads in the build farm
      s3:vfs_modules: Fix Coverity ID 946: OVERRUN_STATIC
      s3:vfs_catia: Use talloc_zero for simplification
      s3:vfs_catia: Make some fns static
      Second part of bug fix for 6606.
      s3: Add some debugs to streams_xattr
      s3: Fix reading beyond the end of a named stream in xattr_streams
      s3:winbind: Fix some enum type mismatches found by the Solaris compiler
      s3:smbd: Fix an inappropriate pointer return in a bool fn
      s3:smbd: Attempt to fix the build on HP/UX
      s3:smbstatus: Fix some nonempty blank lines
      s3:smbstatus: Fix bug 6703, allow smbstatus as non-root
      s3: Fix Coverity ID 581 -- NEGATIVE_RETURNS
      s3:winbind: Fix an uninitialized variable
      s3:gencache: Add a "was_expired" argument to gencache_get_data_blob
      s3:gencache: Remove some over-paranoid locking
      s3:gencache: Make gencache_del() return success for expired entries
      s3: Make the vfs_gpfs compile at least
      s3: Remove an unused variable
      s3: Forgot to check in one build failure for vfs_gpfs.c
      s3:winbind: Make append_data publically available as append_auth_data
      s3:winbind: Sanitize the args for find_auth_domain: It only needs the flags
      s3:winbind: Make "check_request_flags" publically available
      s3:winbind: Make check_info3_in_group, sanitize its memory handling
      s3:gencache: Add my copyright
      s3:winbind: remove a pointless initialization
      s3: Remove the lua interpreter again
      s3: Document the "share:fake_fscaps" parameter, fix bug 6765
      s3: Make default_[static|shared]_modules a bit more readable
      s3:winbind: Fix a debug message
      s3:winbind: use talloc_tos() instead of NULL in fillup_pw_field
      s3:winbind: No point in using strequal to detect a 0-length string
      s3:winbind: use wb_fill_pwent in wb_getpwsid
      s3: Fix nonempty blank lines
      s3: Remove a scary error message -- talloc_move can not fail :-)
      s3: Attempt to fix machine password change
      s3:winbind: Fix typos
      s3:winbind: Slightly simplify the logic of nss_init(), make it static
      Revert "s3: Attempt to fix machine password change"
      s3:winbind: Make query_user_list in winbindd_rpc a bit more readable
      s3: Fix shadow copy display on Windows 7
      s3: Fix a memleak reported by dmarkey
      s3: Fix some nonempty blank lines
      s3:rpc: Fix is_known_pipename for dynamically loaded pipes
      s3:libsmb: Add cli_notify
      s3:torture: Add a notify-bench test
      s3:net: Fix a segfault in "net rpc trustdom list" for overlong domain names
      s3:winbind: Fix bug 6793 -- segfault in winbindd_pam_auth
      s3:winbind: Fix a double-free
      s3:winbind: Move fillup_pw_field() as static to wb_fill_pwent.c
      s3: Remove a pointless #endif/#ifdef pair
      s3: Fix the RPC server SUBSYSTEM declaration
      uuid.c: Remove some dead code
      s3: Make "debug hires timestamp" default to true
      s3: Fix a 100% CPU loop when ctdbd dies during a traverse
      s3: Remove debug_ctx()
      s3: Add parameter "ctdb timeout"
      s3: Fix the talloc hierarchy in notify_remove_onelevel
      s3: Fix a crash in notify_remove_onelevel when "change notify = no"
      s3: get_pipe_name_from_iface -> get_pipe_name_from_syntax
      s3: Get rid of explicit pipe names
      s3: Get rid of a NULL terminator
      s3: Register the ndr_interfaces dynamically
      s3: Do the printing for DEBUGLEVEL>=10 centrally
      tdb: Fix a C++ warning
      s3: Do not directly reference the ndr_table_* in rpcclient
      s3: Do not reference ndr_table_<pipe> in the cli_ routines directly
      s3: Consolidate getting the name out of a pipes_struct
      s3: Do not reference the ndr_tables in the server calls directly
      s3: Do not reference ndr_table when calling rpc_srv_register
      s3: Make run_rpc_command take strings instead of a ndr_interface_table
      s3: Make libnetapi_open_pipe take strings instead of a ndr_interface_table
      Revert "s3: Make libnetapi_open_pipe take strings instead of a ndr_interface_table"
      Revert "s3: Make run_rpc_command take strings instead of a ndr_interface_table"
      Revert "s3: Do not reference ndr_table when calling rpc_srv_register"
      Revert "s3: Do not reference the ndr_tables in the server calls directly"
      Revert "s3: Consolidate getting the name out of a pipes_struct"
      Revert "s3: Do not reference ndr_table_<pipe> in the cli_ routines directly"
      Revert "s3: Do not directly reference the ndr_table_* in rpcclient"
      pidl: Fix selftest after s3 code changed
      s3: Try to avoid dns searches with an empty site
      s3: Convert libsmb/cli_message to the async API
      s3: Fix debug messages in check_reduced_name
      s3: Convert cli_unix_extensions_version to async
      fix bogus "out of memory" winbind msg
      Fix large paged search
      s3: Tiny logic simplification
      Introduce tevent_req_simple_finish_ntstatus
      Introduce tevent_req_poll_ntstatus
      s3: Convert cli_set_unix_extensions_capabilities_send to async
      Attempt to fix the s4 build -- we can not use map_nt_error_from_unix in lib/
      s3: Add min_setup, min_param and min_data to cli_trans_recv
      Mention typedef struct in README.Coding
      s3: Fix a memleak in sys_popen
      s3: Fix the build on Solaris
      s3: Do not talloc in readdir
      s3: Replace some create_synthetic_smb_fname() calls
      s3: Do not kill the whole smb session if a machine pwchange failed
      s3: Factor timeval_string out of current_timestring()
      s3: Add some debugs to the winbind machine pwchange machinery
      s3: Re-check the timeout in machine_password_change_handler()
      s3: Protect against flooding the DC with pwchange requests
      s3: Avoid races to change the machine password in winbind
      s3: Cache brlock.tdb entries for the fast read&write strict locking code path
      s3: Remove a pointless memset
      s3: Tune if-conditions in a very hot codepath
      s3: Convert cli_get_fs_attr_info to the async API
      s3: Fix a bool/enum mismatch
      s3: Avoid two calls to strcmp()
      s3: Fix some nonempty blank lines
      mount.cifs: Fix a const error
      s3: Make the implicit reference to Protocol in mask_match() explicit
      s3: Make the implicit reference to Protocol in mask_match_list() explicit
      s3: Make the implicit reference to Protocol in is_in_path() explicit
      s3: Make the implicit reference to get_Protocol in lp_use_sendfile() explicit
      s3: Move the global variable Protocol to struct smbd_server_connection
      s3: Make alloc_sub_basic() static
      s3: Remove a struct typedef
      s3: Fix some nonempty blank lines
      s3: Fix bug 6338 -- net rpc trustdom list always display "none"
      s3: Move a variable declaration to its only use
      s3-winbind: In _wbint_CheckMachineAccount, there is only one child domain ever
      Revert "s3: Move the global variable Protocol to struct smbd_server_connection"
      Revert "s3: Make the implicit reference to get_Protocol in lp_use_sendfile() explicit"
      Revert "s3: Make the implicit reference to Protocol in is_in_path() explicit"
      Revert "s3: Make the implicit reference to Protocol in mask_match_list() explicit"
      Revert "s3: Make the implicit reference to Protocol in mask_match() explicit"
      s3: Always try SamLogonEx
      tevent: Fix a comment
      s3: Pass the "fake dir create times" parameter to sys_*stat
      s3: client "newer" does not look at the create timestamp
      s3: "dotareof" only looks at the file type
      s3: "tar_parseargs" only looks at the mtime
      s3: "parse_usershare_file" only looks at the mode and uid
      s3: "process_usershare_file" only looks at the mode and size
      s3: "process_usershare_file" only looks at the dev, ino, mode and size
      s3: "usershare_exists" only looks at the mode and mtime
      s3: "load_usershare_service" only looks at the mode and uid
      s3: "load_usershare_shares" only looks at the mode and uid
      s3: "disk_quotas" only looks at the devicenumber
      s3: "check_magic" only looks at the size
      s3: "print_job_end" only looks at the size
      s3: "cgi_download" only looks at the mode and size
      s3: "get_share_list" only looks at the mode and uid
      s3: "info_fn" only looks at the mode and uid
      s3: "count_num_usershares" only looks at the mode
      s3: "net_usershare_add" only looks at the mode and uid
      s3: "net_usershare_add" only looks at the device and inode
      s3: "net_usershare_add" only looks at the mode, device and inode
      s3: "net_conf_addshare" only looks at the mode
      s3: "write_block" does not use the sbuf at all
      s3: "read_block" only looks at the size
      s3: "regf_hbin_allocate" only looks at the size
      s3: "check_log_size" only looks at the size
      s3: "sys_path_to_bdev" only looks at the devicenumber
      s3: "socket_exist" only looks at the mode
      s3: "get_file_size" only looks at the size
      s3: "startsmbfilepwent" only looks at the inode -- is that enough?
      s3: Pass fake_dir_create_times down to file_exist_stat, none of the callers look at the mtime
      s3: Move directory_exist_stat to testparm.c, it only looks at the mode
      s3: Pass up fake_dir_create_times from atalk_build_paths
      s3: "copy_reg" only looks at mode, uid, gid, atime and mtime (no birthtime)
      s3: Restore "fake directory create times" as a share parameter
      s3: Factor out torture_setup_unix_extensions
      s3: Add a regression test for bug 6898
      s3: Fix some nonempty blank lines
      s3: Fix an uninitialized variable reference
      s3: Fix a "not handled in switch" warning
      s3: Fix bug 6288
      Fix bug 6546: Avoid accessing buf[-1] if NUL byte comes from fgets
      s3: Cope with older external libtdb
      s3: Fix explicit stat64 support
      s3: Support NetWkstaGetInfo 101 and 102
      s3: First cut at _wkssvc_NetWkstaEnumUsers
      s3: Add rpcclient wkssvc_enumerateusers
      s3: Simplify usr_info_cmp by calling timeval_compare()
      s3: Small simplification: qsort deals fine with just one entry
      s3: talloc_array_length deals file with a NULL argument
      s3: Fix a const discard warning
      s3: de-deprecate "write cache size" to prevent its removal without a proper alternative
      s3: Fix a very embarrassing build failure
      s3: Allow up to 20480 entries in LookupSids, as mandated by the official IDL
      s3: Fix _samr_GetAliasMembership for results with 0 rids
      smbtorture4: Add rpc-samba3-getaliasmembership-0
      s3: Run RPC-SAMBA3-GETALIASMEMBERSHIP-0 in make test
      s3: Fix an error case in cli_negprot
      s3: Remove unused winbindd_lookupsid_async
      s3: Remove unused winbindd_lookupname_async
      s3: Remove unused winbindd_getsidaliases_async
      s3: Remove unused query_user_async
      s3: Remove unused do_async_domain
      s3: Remove unused winbindd_sid2uid_async
      s3: Remove unused winbindd_sid2gid_async
      s3: Remove unused winbindd_uid2sid_async
      s3: Remove unused winbindd_gid2sid_async
      s3: Remove unused do_async
      s3: Remove some unused dual functions
      s3: Remove unused winbindd_dual_userinfo
      s3: Remove unused winbindd_dual_lookupsid
      s3: Remove unused winbindd_dual_lookupname
      s3: Remove unused winbindd_dual_getdcname
      s3: Remove unused winbindd_dual_getuserdomgroups
      s3: Remove an unused struct definition
      s3: Remove unused winbindd_dual_getsidaliases
      s3: Remove unused get_sam_group_entries
      s3: Fix some nonempty blank lines
      s3: Shrink winbindd_proto.h a bit
      s3:winbindd: Fix a brown paper bag bug in wbinfo -t ...
      s3:winbind: Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc
      s3: Move smb_splice_chain to smbd/process.c, its only user
      s3: Remove a pointless else branch
      s3: Restore correct timeouts for SMB requests
      s3: Remove unused sendto_child()
      s3: Remove some unused code
      s3: wbinfo --ping-dc is not cacheable
      s3: Remove some pointless casts
      s3: Remove some pointless SMB_ASSERTs
      s3: Fix a 64-bit error
      s3: Fix a comment in conn_cache.c
      s3: Remove some unnecessary variables from libsmb/conn_cache.c
      s3: Remove unused flush_negative_conn_cache()
      s3: Remove unused delete_negative_conn_cache()
      s3: getgrent_state has been replaced by grent_state
      s3: winbindd_cli_state->getgrent_state is no longer used
      s3: Fix some nonempty blank lines
      s3: Replace IS_DOMAIN_OFFLINE by a function
      s3: Fix a bogus uninitialized variable warning
      s3: Fix a typo found by Matthias Dieter Wallnöfer <mdw at samba.org> -- thanks :-)
      s3:winbind Make the normal client exit message a bit more understandable
      s3: Simplify "setup_domain_child" slightly
      s3: Simplify winbindd_list_trusted_domains() slightly
      s3: Remove some unused code
      s3: Simplify winbindd_ads.c:trusted_domains()
      s3: Pass netr_DomainTrustList instead of names and sids through (*trusted_domains)
      s3: Move a lp_winbind_trusted_domains_only() check to wb_getgrsid()
      s3: Check for lp_winbind_trusted_domains_only in wb_gettoken()
      s3: Introduce domain_is_forest_root() helper function
      s3: Adapt sid_dup_talloc to README.Coding
      s3: Make free_domain_list() static
      s3: Avoid adding a domain twice
      s3: Use global_sid_Builtin in find_builtin_domain
      s3: simplify find_root_domain, find_our_domain() never fails
      s3: Fix a typo
      s3: Convert cli_session_setup_kerberos to the async API
      s3: NT_STATUS_MORE_PROCESSING_REQUIRED is a valid sesssetup return value
      s3: Convert cli_sesssetup_ntlmssp to the async API
      s3: Remove some unused code
      libwbclient: Remove a pointless check
      s3: Fix some nonempty blank lines
      s3: Slightly simplify winbindd_dual_ccache_ntlm_auth
      s3: Convert cli_tdis to the async API
      s3: Convert cli_ulogoff to the async API
      s3: Fix an uninitialized variable warning
      s3: Fix a shadowed variable warning
      s3: Trim down smbcontrol a bit
      s3: Avoid a memset(, 0, ) call
      s3: Fix a typo
      s3: Simplify pdb_set_plaintext_passwd() slightly
      s3: Simplify pdb_set_plaintext_passwd() a bit
      s3: Make use of talloc_array in pdb_set_plaintext_passwd()
      s3: Simplify pdb_set_plaintext_passwd by using talloc_zero_array
      s3: Simplify pdb_set_plaintext_passwd: memcpy deals fine with 0 bytes
      s3: Simplify pdb_set_plaintext_passwd() by removing a redundant condition
      s3: Add a paranoia check to pdb_set_plaintext_passwd()
      s3: Simplify pdb_set_plaintext_passwd: pwHistLen==0 was checked above
      s3: Simplify pdb_set_plaintext_passwd: pwhistory==NULL can not happen anymore
      Simplify E_md5hash a bit
      s3: Factor password_in_history() out of check_passwd_history()
      s3: Lock down some srvsvc calls according to what w2k3 seems to do
      s3: Remove some code that has become unnecessary
      s3: Fix a segfault in winbindd_dual_ccache_ntlm_auth()
      s3: Slightly simplify winbindd_store_creds
      s3: Remove a pointless "else" branch from add_ccache_to_list()
      s3: Trim down some utilities a bit
      s3: Trim libnss_wins.so
      s3: Remove the typedef for "auth_usersupplied_info"
      s3: Remove the typedef for "auth_serversupplied_info"
      s3: Remove unused samr_make_sam_obj_sd
      s3: Replace most calls to sid_append_rid() by sid_compose()
      s3: Use sid_check_is_in_our_domain instead of a direct sid_peek_check_rid
      s3: Use sid_check_is_domain instead of a direct sid_equal
      s3: Fix some nonempty blank lines
      s3: Remove some unused variables
      s3: Add a zfsacl:denymissingspecial parameter
      s3: Remove a pointless if-statement
      s3: Lift the version of the scannedonly VFS module
      s3: Fix a winbind segfault in "trusted_domains"
      s3: Fix a crash in libsmbclient used against the OpenSolaris CIFS server
      s3: Fix some nonempty blank lines
      s3: For "smbcontrol <pid> pool-usage", print the first 50 bytes of a string
      s3: Protect against an invalid bcc in SMBsendtxt
      s3: Fix the format string for smbcontrol pool-usage
      s3: Remove a comment from ancient times that no longer applies
      s3: Fix a typo
      s3: Move "yesno" to the only place where it is used: client.c
      s3: Make "init_smb_request" static to process.c
      s3: Initialize the seqnum in "init_smb_request"
      s3:pdb_ldap: Fix large paged search.
      s3: Fix a typo in a comment
      s3: Fix some nonempty blank lines
      s3: Fix some nonempty blank lines
      s3: Use global_sid_Builtin in net_groupmap_memberships
      s3: Remove some pointless uses of string_sid_talloc
      s3: Fix sending NULL sids to lookupsids3
      s3: Remove a call to string_sid_talloc
      s3: Remove string_sid_talloc
      libreplace: Fix a C++ warning
      libcli/security: Remove a call to strncasecmp
      libcli/security: Convert some strtol calls to strtoul
      libcli/security: Fix a valgrind error in dom_sid_parse
      libcli/security: Prohibit SID formats like S-1-5-32-+545
      s3: Add a little torture test for dom_sid_parse
      s3: Make string_to_sid a wrapper around dom_sid_parse
      nsswitch: Make some functions static
      nsswitch: Move nss_err_str to its only caller
      libwbclient: Remove a pointless talloc_strdup
      libwbclient: Use winbindd_free_response()
      s3: Remove some calls to memset -- reduces text size by some bytes for me
      s3: Add wbinfo --ccache-save
      s3: Add the session key to the ccache_ntlm_auth response
      libwbclient: Actually implement wbcCredentialCache()
      s3: Add NTLMSSP_FEATURE_CCACHE
      s3: Add ccache use to cli_session_setup_ntlmssp
      s3: Add -C (--use-ccache) to popt_common_credentials
      s3: Use -C in smbclient
      s3: Add CLI_FULL_CONNECTION_USE_CCACHE
      s3: Enable -C in rpcclient
      s3: Fix a bug in net's use of popt
      s3: add libnetapi_set_use_ccache()
      s3: Add --use-ccache to net
      s3-libsmbclient: Add smbc_setOptionUseCCache()
      Revert "libcli/security: Prohibit SID formats like S-1-5-32-+545"
      Revert "s3: Make string_to_sid a wrapper around dom_sid_parse"
      Revert "libcli/security: Fix a valgrind error in dom_sid_parse"
      Revert "libcli/security: Convert some strtol calls to strtoul"
      Revert "libcli/security: Remove a call to strncasecmp"
      s3: Enable use of ccache by default for libsmbclient
      s3: Fix some DEBUG messages
      tdb: fix an early release of the global lock that can cause data corruption
      s3: Simplify the code a bit: Catch (len==0) early
      s3: Fix some nonempty blank lines
      s3: Hide some uses of pdb_get_init_flags (which I would love to remove...)
      s3: Make guest_user_info() static
      s3: Remove a pointless if-statement
      s3: Make use of ZERO_STRUCTP
      pam_winbind: Use strchr instead of strstr for a single character
      pam_winbind: Remove a nested if-statement. Bo, please check!
      libwbclient: wbc_create_error_info is always called with mem_ctx==NULL
      libwbclient: wbc_create_password_policy_info is always called with mem_ctx==NULL
      libwbclient: wbc_create_logon_info is always called with mem_ctx==NULL
      s3: Fix some nonempty blank lines
      s3: Fix some comments
      s3: Remove some unused code
      s3: Make cli_get_fs_volume_info() use cli_trans()
      s3: Fix some DEBUG statements
      libreplace: Attempt to fix bug 5910, detect a broken getaddrinfo
      s3: Make pdb_copy_sam_account also copy the group sid
      s3: notify_onelevel does not use seqnums, so don't open asking for it
      s3: Implement global locks in a g_lock tdb
      s3: Add ctdb_conn_msg_ctx()
      s3: setup debug for smbtorture
      s3:torture: add a test LOCAL-DBTRANS to torture dbwrap with transactions.
      s3: Add tdb_data_equal
      s3:dbwrap: If "-n" is given to dbwrap_torture, open db with CLEAR_IF_FIRST
      v3-4-ctdb: Do not do any logrotation
      tdb: Apply some const, just for clarity
      s3: Fix a C++ warning
      s3: Fix a typo
      Use ZERO_STRUCTP
      use ZERO_STRUCT
      s3: Fix some nonempty blank lines
      s3: TREE_NODE -> struct tree_node
      s3: SORTED_TREE -> struct sorted_tree
      s3: Make adt_tree data definitions private to adt_tree.c
      s3: Remove unused comparison fn from "struct sorted_tree"
      s3: Fix typo found by jhell <jhell at DataIX.net>
      s3: Fix bug 5198 -- parse chfn(1)-change gecos field
      s3: Fix Coverity ID 629: DEADCODE
      s3: Fix a typo
      s3-docs: Document 'smbclient -C'.
      s3: Fix handling of processes that died in g_lock
      s3: Optimize g_lock_lock for a heavily contended case
      s3: Avoid a thundering herd in g_lock_unlock
      s3: Avoid starving locks when many processes die at the same time
      s3: Slightly increase parallelism in g_lock
      s3: Fix timeout calculation if g_lock_lock is given a timeout < 60s
      s3: Fix bug 7139
      s3: Add cli_smb()
      s3: Convert cli_raw_ioctl to use cli_smb()
      s3: Convert cli_qpathinfo_basic to use cli_trans()
      s3: Fix a typo
      s3: Remove a "typedef struct"
      s3: Fix some nonempty blank lines
      s3: Slightly simplify the logic of completion_remote_filter
      s3: Add printf why LOCAL-dom_sid_parse failed
      s3: Rename LOCAL-dom_sid_parse to LOCAL-string_to_sid, add some tests
      s3: Make string_to_sid survive the LOCAL-string_to_sid test
      s3: Use the status from cli_raw_ioctl in torture_ioctl_test
      s3: Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send
      s3: Add a talloc_move for the inbuf to cli_smb_recv
      s3: Explicitly handle inbuf in cli_smb_oplock_break_waiter_done
      s3: Explicitly handle inbuf in cli_session_setup_guest_done
      s3: Explicitly handle inbuf in cli_sesssetup_blob_done
      s3: Explicitly handle inbuf in cli_tcon_andx_done
      s3: Explicitly handle inbuf in cli_negprot_done
      s3: Explicitly handle inbuf in cli_echo_done
      s3: Explicitly handle inbuf in cli_ntcreate_done
      s3: Explicitly handle inbuf in cli_open_done
      s3: Explicitly handle inbuf in cli_getattrE_done
      s3: Explicitly handle inbuf in cli_getatr_done
      s3: Explicitly handle inbuf in cli_dskattr_done
      s3: Explicitly handle inbuf in cli_message_start_done
      s3: Explicitly handle inbuf in cli_read_andx_done
      s3: Explicitly handle inbuf in cli_write_andx_done
      s3: Explicitly handle inbuf in cli_trans_done
      s3: Consolidate server_id_self into the equivalent procid_self()
      s3: Consolidate some pid_to_procid() calls to procid_self()
      s3: Make connections_fetch_record() static
      s3: Copy the mapping.c license header to mapping.h
      s3: Fix but 7145 -- duplicate sam and unix accounts
      tdb: If tdb_parse_record does not find a record, return -1 instead of 0
      s3: Fix the CHAIN1 torture test
      s3: Remove unused count_all_current_connections()
      s3: Use talloc_tos() in yield_connection()
      s3: Remove unused "mypid" from count_current_connections() state
      s3: Make connections_forall open connections.tdb r/w
      s3: Make the difference between r/o and r/w in connections_db_ctx more obvious
      s3: Add connections_forall_read()
      s3: Abstract access to sessionid.tdb, similar to conn_tdb.c
      s3: Fix an uninitialized variable warning
      s3: Fix some C++ warnings
      s3: db->persistent==true was handled earlier, make this more obvious
      s3: Remove the unused parameter "persistent" from fetch_locked_internal
      s3: Make "smbcontrol xx debuglevel" print the correct cluster pid
      s3: Fix the build of net_afs.c with --fake-kaserver=yes, bug 7216
      s3: Fix a typo. Thanks to Christian Ambach for pointing me at it :-)
      s3: Fix a NULL pointer dereference
      s3: Make TLDAP_IS_ALPHA and TLDAP_IS_ADH static functions
      s3: Fix a long-standing problem with recycled PIDs
      s3: Make init_smb_request return bool
      s3: Fix some "net registry" usage messages
      s3: Fix a comment
      s3: Actually use mem_ctx in net_g_lock_init()
      s3: Add "g_lock_do" as a convenience wrapper function
      s3: Add "net registry increment"
      s3: Make tdb_wrap_open more robust
      s3: Convert unexpected.tdb to use tdb_wrap_open
      s3: Fix some nonempty blank lines
      s3: Remove some unused code
      s3: Use a switch to implement map_nt_error_from_tdb
      s3: Remove some unused #defines
      s3: Fix an uninitialized variable read
      s3: Fix some nonempty blank lines
      s3: Remove a typedef
      s3: Make login_cache_read take a pointer, avoid a malloc
      s3: Make login_cache_write take a pointer
      s3: Fix bug 7202
      Trim an overlong line
      Use calloc instead of ZERO_STRUCTP in talloc_stackframe_create()
      Use TALLOC_FREE in talloc_pop()
      s3: Fix bug 7202 for multi-threaded applications
      Fix an uninitialized variable
      s3: Fix some nonempty blank lines
      s3: file_walk_table -> files_forall
      s3: Add "log writeable files on exit" parameter
      s3: Fix a bad memleak in winbind
      s3: Implement an asynchronous echo responder process
      s3: Add the "ctdb locktime warn threshold" parameter
      tdb: Fix bug 7248, avoid the nanosleep dependency
      s3: Optimize gencache for smbd exit
      Fix some nonempty blank lines
      tdb: Fix indentation in tdb_new_database()
      s3: Fix some nonempty blank lines
      s3: Make sure our CLEAR_IF_FIRST optimization works for messaging.tdb
      s3: Make sure our CLEAR_IF_FIRST optimization works for the notify tdbs
      s3: Make sure our CLEAR_IF_FIRST optimization works for serverid.tdb
      s3: Add a comment to messaging_tdb_parent_init, this is pretty confusing
      s3: Add a comment to serverid_parent_init, this is pretty confusing
      s3: Add a comment to notify_internal_parent_init, this is pretty confusing
      tdb: Add a non-blocking version of tdb_transaction_start
      s3: Fix typos in a debug message in vfs_init_custom
      Revert "s3: Optimize gencache for smbd exit"
      s3: Use tdb_transaction_start_nonblock in gencache_stabilize
      s3: Fix some nonempty blank lines
      s3: Fix indentation in conv_str_size
      s3: Slightly simplify logic in conv_str_size
      s3: Fix the memory hierarchy in bitmap_talloc
      s3: Use TALLOC_ZERO_ARRAY in bitmap_talloc
      s3: Fix a memleak in bitmap_talloc
      s3: A NULL context might be perfectly valid for bitmap_talloc
      s3: Use bitmap_talloc in loadparm
      s3: Use bitmap_talloc in files.c
      s3: Use bitmap_talloc in init_dptrs
      s3: Use bitmap_talloc for smb1 server tcons
      s3: Use bitmap_talloc in vfs_full_audit.c
      s3: Remove unused bitmap_[allocate|free]
      Attempt to fix the build on AIX, that system seems to have a #define for s_type
      s3: Slightly simplify unmap_unix_group
      s3: Attempt to fix the build on AIX, shm_ptr seems to be a macro there
      s3: Fix bug 7212, "getent group does not return group members"
      s3-winbind: Make append_auth_data() static
      s3: Make check_info3_in_group static
      s3: Ensure null termination in winbindd_pam_chauthtok()
      s3: Fix an error message in winbindd_pam_chauthtok()
      s3: fix a typo in winbind_client_response_written
      s3: Fix a typo in winbindd_pam_logoff
      s3: Ensure NULL termination before printing in winbindd_pam_logoff
      s3: Fix a comment
      s3: Remove some pointless break statements
      s3: Add wbinfo --logoff
      libwbclient: Both talloc_free and wbcFreeMemory deal with NULL
      libwbclient: Fix a memleak in wbcCredentialCache
      libwbclient: Streamline result processing of wbcCredentialCache()
      s3: Fix the GNU ld version detection on SLES
      libwbclient: Fix a memleak in wbcListTrusts
      libwbclient: Fix memleaks in tests
      libwbclient: Fix a memleak in wbcListTrusts
      s3: Fix a cut&paste error in winbindd_list_groups_done
      Fix related to bug #7326 - can't read/write any files with full_audit
      s3: Fix bug 7327 -- Build fails while building without kerberos
      s3: Fix a typo
      s3: Remove the separate "child" argument from setup_domain_child()
      libwbclient: Fix some memleaks in the tests
      s3: TALLOC_FREE(command) correctly in map_username()
      s3: Use talloc_tos() as talloc ctx for fd_lines_load() in map_username()
      s3: Fix a typo
      s3: Check 0 termination in GETALIASES
      libwbclient: Ensure correct 0-termination in wbcGetSidAliases
      libwbclient: Fix a memleak in wbcGetDisplayName
      s3: Remove domain selection from dual_pam_auth
      s3: Use IS_DC macro in get_global_sam_name()
      s3: Cosmetics -- I could not spot where "chal" was initialized
      s3: Fix some nonempty lines
      s3: Make "auth_context" its own talloc parent
      s3: Fix a typo
      s3: Remove the make_auth_methods routine
      s3: Fix a memleak in user_in_group_sid
      s3: Use talloc_stackframe() in create_token_from_username
      s3: Use talloc_stackframe() in user_in_group_sid
      s3: Use talloc_stackframe() in user_in_group
      s3: Use sizeof(chal) instead of a constant
      libcli/auth: Fix an uninitialized variable
      s3: Move user_in_group() and create_token_from_username() to token_utils.c
      s3: Replace "auth_context" by "challenge" in sam_password_ok args
      s3: Replace "auth_context" by "challenge" in need_to_increment_bad_pw_count args
      s3: Make check_sam_security public
      s3: Move check_sam_security to auth/check_sam.c
      s3: Move make_server_info to auth/server_info.c
      s3: Move sanitize_username to lib/util_str.c
      s3: Move make_server_info_sam to auth/server_info_sam.c
      s3: Move [make|free]_user_info to auth/user_info.c
      s3: Move serverinfo_to_SamInfoX to auth/server_info.c
      s3: Cache the result of the username map script
      s3: Remove a bogus 0-check, "isspace" can not return true for \0
      s3: Little refactoring: Factor out skip_space
      s3: Apply some const
      s3: Cache the username map in gencache
      libwbclient: Remove a pointless variable
      libwbclient: Re-Fix a bug that was fixed with e5741e27c4c
      s3-winbind: Authenticate SAM users
      s3: Fix a typo
      s3: Fix some nonempty blank lines
      s3: Slightly simplify the logic of check_password_complexity()
      s3: Slightly simpify samr_ValidatePassword_Change
      s3: Slightly simpify samr_ValidatePassword_Reset
      nsswitch: Fix a memleak in wbinfo
      s3: Fix a typo in winbindd_ccache_save
      s3: Fix a memleak in discover_dc_netbios
      s3: Fix indentation in remove_ccache
      libwbclient: Add wbcAllocateMemory()
      libwbclient: Make wbcLibraryDetails not use talloc
      libwbclient: Make wbcGuidToString not use talloc
      libwbclient: Make copy_passwd_entry not use talloc
      libwbclient: Make copy_group_entry not use talloc
      libwbclient: Convert wbcSidToString to not use talloc
      libwbclient: Add wbcStrDup
      libwbclient: Make wbcLookupSid not use talloc
      libwbclient: Test wbcLookupRids
      libwbclient: Add wbcAllocateStringArray
      libwbclient: Make wbcLookupRids not use talloc
      libwbclient: Fix some pointless macro calls
      libwbclient: Take -21 into account in length guessing
      libwbclient: Fix some pointless macro calls
      libwbclient: Simplify test_wbc_domain_info a bit
      libwbclient: Test wbcGetSidAliases
      s3: Add some debug to GETSIDALIASES
      libwbclient: Make wbcGetSidAliases not use talloc
      winbindd: Fill in num_entries where available
      libwbclient: Make wbcListUsers not use talloc
      libwbclient: Make wbcListGroups not use talloc
      libwbclient: Test wbcGetDisplayName
      libwbclient: Make wbcGetDisplayName not use talloc
      libwbclient: Make _SID_COMPOSE a function instead of a macro
      libwbclient: Test wbcAuthenticateUser[Ex]
      libwbclient: Make wbcInterfaceDetails not use talloc
      libwbclient: Make wbcDomainInfo not use talloc
      libwbclient: Make wbcResolveWinsByName not use talloc
      libwbclient: Make wbcResolveWinsByIP not use talloc
      libwbclient: Make wbcAddNamedBlob not use talloc
      libwbclient: Test wbcLogonUser
      s3: Convert WINBINDD_PAM_AUTH to the new async API
      s3: Convert WINBINDD_PAM_AUTH_CRAP to the new async API
      s3: Convert WINBINDD_PAM_CHAUTHTOK to the new async API
      s3: Convert WINBINDD_PAM_LOGOFF to the new async API
      s3-winbind: Allow changing the password for pdb
      libwbclient: Abstract out test_wbc_authenticate_user for reuse
      libwbclient: Test wbcChangeUserPassword
      s3: Change the make test password to "testPw"
      libwbclient: Make wbcLookupUserSids not use talloc
      libwbclient: Make wbcLookupDomainController not use talloc
      libwbclient: Make wbc_create_domain_controller_info_ex not use talloc
      libwbclient: Make wbcGetGroups not use talloc
      libwbclient: Test wbcGetGroups
      libwbclient: Make wbc_create_password_policy_info not use talloc
      libwbclient: Make wbc_create_auth_info not use talloc
      libwbclient: Make wbc_create_logon_info not use talloc
      libwbclient: Make wbcAuthenticateUserEx not use talloc
      libwbclient: Make wbcCredentialCache not use talloc
      libwbclient: Make wbc_create_error_info not use talloc
      libwbclient: Make wbcListTrusts not use talloc
      libwbclient does not need talloc_free anymore
      libwbclient: remove async libwbclient and talloc from libwbclient.so
      s3: Test for wb ccache access by smbclient
      nsswitch: Add wbinfo --pam-logon
      s3: Move the in-memory ccache to the parent
      s3: Remove a leftover of my lua experiments
      libwbclient: Fix wbcListUsers against too small num_entries
      libwbclient: Fix wbcListGroups against too small num_entries
      libwbclient: wbcFreeMemory deals fine with a NULL pointer
      s3: Fix a cut&paste error in a debug message in check_oem_password()
      s3: Fix a winbind crash when scanning trusts
      s3: Convert WINBINDD_PAM_CHNG_PSWD_AUTH_CRAP to the new async API
      libwbclient: Remove some pointless BAIL_ON_WBC_ERROR macro calls
      s3: replace some data_blob_talloc by data_blob_const
      libwbclient: Actually copy something in wbcChangeUserPasswordEx
      s3: init_dc_connection() can't init for internal domains
      s3: Allow pdb password change using WINBINDD_PAM_CHNG_PSWD_AUTH_CRAP
      libwbclient: Test WBC_CHANGE_PASSWORD_LEVEL_RESPONSE
      s3: Simplify (bool != True) to !bool
      s3: sendto_domain() is lo longer used
      Revert "nsswitch: Fix a memleak in wbinfo"
      libwbclient: Talloc is no longer used
      s3: Make "struct trustdom_state" its own talloc context
      s3: Simplify trustdom_state
      s3: Convert add_trusted_domains() to wb_domain_request_send()
      s3: async_domain_request is no longer used
      s3: Implement "net rpc user setprimarygroup"
      s3: Make a debug msg more readable
      s3: Fix some nonempty blank lines
      s3: Fix an uninitialized variable in idmap_tdb2_sid_to_id()
      s3: range-check idmap script output
      s3: Fix the code order in append_auth_data
      s3: Fix a typo
      s3: Unify DEBUG_KRB5_TKT_REGAIN and DEBUG_KRB5_TKT_RENEWAL
      s3: Fix a memleak in check_pac_checksum
      s3: Fix bug 5972 -- remove -L testparm parameter
      s3: Fix the build
      s3: Test for "__attribute__((destructor))"
      libwbclient: Fix a fd-leak at dlclose-time
      s3: Remove unreachable code
      s3: Attempt to fix the non-gnumake build
      s3: Next step to fix the build on OpenSolaris
      s3: Factor out compiler-independent defines
      s3: Another non-gnumake fix
      s3: Fix a typo found by ITPFS oota <t-oota at dh.jp.nec.com>
      fix a typo
      s3: Remove an unused variable
      s3: Fix a bad memleak in the async echo responder
      s3: Don't announce readraw and writeraw with the async echo responder
      s3: Fix some debug messages
      s3: Add vfs_linux_xfs_sgid
      s3: Fix the build of the nfsv4 acl code
      Revert "s3:auth Change auth_ntlmssp_server_info API to return NTSTATUS"
      Revert "s3:smbd Give the kerberos session key a parent"
      Revert "s3:smbd Fix segfault if register_existing_vuid() fails"
      s3: Fix bug 7253
      tevent: Fix maxfd calculation in tevent_select
      s3: Add a dummy test to prove the maxfd calculation
      s3: Fix EnumDomainAliases when no aliases are in LDAP
      s3: Fix starving the echo responder
      s3: Fix some nonempty lines
      s3: Add "smbd_server_connection" to smb_request
      s3: Pass sconn to init_smb_request()
      s3: Use "sconn" argument in smbd_[un]lock_socket_internal
      s3: Initialize smb_request->sconn in smbd_smb2_fake_smb_request
      s3: Remove sconn arg from smbd_notify_cancel_by_smbreq
      s3: Remove some global references to smbd_server_conn
      s3: Explicitly pass sconn to negprot_spnego()
      s3: Remove smbd_server_conn from reply_smb2002
      s3: Remove smbd_server_conn from send_nt_replies
      s3: Remove smbd_server_conn from reply_ntcancel
      s3: Remove smbd_server_conn from change_to_user
      s3: Remove smbd_server_conn from make_connection_snum
      s3: Remove smbd_server_conn from reply_tcon
      s3: Remove smbd_server_conn from reply_tcon_and_X
      s3: Remove smbd_server_conn from reply_search
      s3: Remove smbd_server_conn from reply_fclose
      s3: Remove smbd_server_conn from reply_ulogoffX
      s3: Remove smbd_server_conn from reply_send_file_readbraw
      s3: Remove smbd_server_conn from reply_readbraw
      s3: Remove smbd_server_conn from reply_lockread
      s3: Remove smbd_server_conn from reply_read
      s3: Remove smbd_server_conn from send_file_readX
      s3: Remove smbd_server_conn from reply_read_and_X
      s3: Remove smbd_server_conn from reply_writebraw
      s3: Remove smbd_server_conn from reply_rmdir
      s3: Remove smbd_server_conn from smbd_do_locking
      s3: Pass sconn explicitly to reply_special
      s3: Explicitly pass sconn to reply_readbraw_error
      s3: Explicitly pass sconn to is_valid_writeX_buffer
      s3: Remove smbd_server_conn from register_existing_vuid
      s3: Remove smbd_server_conn from send_trans2_replies
      s3: Remove smbd_server_conn from call_trans2findfirst
      s3: Remove smbd_server_conn from call_trans2findnext
      s3: Remove smbd_server_conn from smbd_do_qfsinfo
      s3: Remove smbd_server_conn from call_trans2setfsinfo
      s3: Remove smbd_server_conn from reply_findclose
      s3: Remove smbd_server_conn from send_trans_reply
      s3: Explicitly pass sconn to the api_ functions
      s3: Remove smbd_server_conn from reply_spnego_kerberos
      s3: Remove smbd_server_conn from reply_spnego_ntlmssp
      s3: Remove smbd_server_conn from reply_spnego_negotiate
      s3: Remove smbd_server_conn from reply_spnego_auth
      s3: Remove smbd_server_conn from reply_sesssetup_and_X_spnego
      s3: Fix a typo
      s3: Remove smbd_server_conn from reply_sesssetup_and_X
      s3: Remove smbd_server_conn from change_notify_add_request
      s3: Explicitly pass sconn to the change_notify_remove_request
      s3: change_notify_reply() does not need its "conn" argument
      s3: Explicitly pass sconn to the remove_pending_change_notify_request_by_mid
      s3: Remove smbd_server_conn from break_level2_to_none_async
      s3: Remove smbd_server_conn from switch_message
      s3: Remove smbd_server_conn from brl_timeout_fn
      s3: Remove smbd_server_conn from push_blocking_lock_request
      s3: Remove smbd_server_conn from cancel_pending_lock_requests_by_fid
      s3: Explicitly pass sconn to remove_pending_lock_requests_by_mid_smb1
      s3: Explicitly pass sconn to blocking_lock_was_deferred_smb1
      s3: Explicitly pass sconn to recalc_brl_timeout
      s3: Remove smbd_server_conn from blocking_lock_cancel_smb1
      s3: Explicitly pass sconn to process_blocking_lock_queue
      s3: Explicitly pass sconn to find_open_smb2req
      s3: Explicitly pass sconn to open_was_deferred_smb2
      s3: Explicitly pass sconn to [remove|schedule]_deferred_open_message_smb2
      s3: Remove smbd_server_conn from push_blocking_lock_request_smb2
      s3: Explicitly pass sconn to process_blocking_lock_queue_smb2
      s3: Remove smbd_server_conn from cancel_pending_lock_requests_by_fid_smb2
      s3: Remove the pointless SERVICE macro
      s3: Remove the pointless PRINTERNAME macro
      s3: Remove some leftovers from macros
      s3: Remove fsp_belongs_conn
      Fix aio_read detection for -lrt
      s3: Remove some dispensable ()
      s3: Make g_smb_perfcount_handlers static
      s3: Fix a type-punned warning
      s3: Remove an unreachable line of code
      s3: Fix some enum/int mixup warnings
      tsocket: Fix some type-punned warnings
      tldap: Fix a type-punned warning
      s3-winbind: Make KRB5_EVENT_REFRESH_TIME a function
      s3: Fix some valgrind errors
      s3: Fix a winbind crash
      s3: Fix a winbind crash
      s3: In copy_netr_SamInfo3 copy all of the sids array
      s3: In make_server_info_info3, check the result of copy_netr_SamInfo3
      s3: Fix some valgrind errors
      s3: Do an early TALLOC_FREE
      s3: free -> SAFE_FREE
      s3: Re-arrange winbindd_ads.c:query_user
      s3: Fix a valgrind error
      s3: More cleanup in winbindd_ads.c:query_user
      s3: Make some routines static in smbldap
      wbinfo: Fix error messages
      s3: Fix bug 7336: Enable idmap_passdb module build as shared
      s3: Fix some nonempty blank lines
      s3: Fix bug 7338, smbget skips leading slash when using a custom outputfile
      s3: Don't attempt to deregister from serverid twice
      s3: Slight reshaping of server_exists_parse
      s3: ALWAYS run make test before checkin ....
      s3: Remove serverid_[de]register_self
      s3: Fix some nested extern warnings
      s3: Fix some type-punned warnings
      s3: Re-initialize the server_id in messaging_reinit
      s3: Pass the new server_id through reinit_after_fork
      s3: Use msg_ctx->id in messaging
      s3: Replace register_message_flags() with serverid_register_msg_flags()
      s3: Remove unused msg_flags from connections.tdb
      s3: Remove an unused variable -- thanks, metze!
      s3: Keep the connections.tdb data format fixed
      s3: Create a unique id for the smbd parent
      s3: Pass procid_self() explicitly to messaging_ctdbd_connection()
      s3:Fix a bogus uninitialized variable warning
      s3: Add msg_ctx to smbd_server_connection
      s3: Add messaging_server_id
      s3: Add missing prototype for smb2_opcode_name
      s3: Add sconn_server_id()
      s3: Remove procid_self() from exit_server_common
      s3: Remove procid_self() from session_claim()
      s3: Remove procid_self() from break_kernel_oplock()
      s3: Remove procid_self() from reply_negprot()
      s3: Remove procid_self() from push_blocking_lock_request_smb2()
      s3: Remove NULL checks from claim_connection()
      s3: Remove procid_self() from claim_connection()
      s3: Remove procid_self() from make_connection_snum()
      s3: Remove procid_self() from init_strict_lock_struct()
      s3: Remove procid_self() from fill_share_mode_entry()
      s3: Remove smbd_messaging_context() from notify_deferred_opens()
      s3: Remove smbd_messaging_context() from close_normal_file()
      s3: Remove smbd_messaging_context() from exit_server_common()
      s3: Remove smbd_messaging_context() from send_break_message()
      s3: Remove smbd_messaging_context() from reply_lockread()
      s3: Remove smbd_messaging_context() from reply_writeunlock()
      s3: Remove smbd_messaging_context() from reply_lock()
      s3: Remove smbd_messaging_context() from reply_unlock()
      s3: Remove smbd_messaging_context() from rename_open_files()
      s3: Remove smbd_messaging_context() from smbd_do_locking()
      s3: Remove smbd_messaging_context() from reply_to_oplock_break_requests()
      s3: Remove smbd_messaging_context() from contend_level2_oplocks_begin_default()
      s3: Remove smbd_messaging_context() from push_blocking_lock_request()
      s3: Remove smbd_messaging_context() from reply_lockingX_error()
      s3: Remove smbd_messaging_context() from process_lockingX()
      s3: Remove smbd_messaging_context() from process_trans2()
      s3: Remove smbd_messaging_context() from blocking_lock_cancel_smb1()
      s3: Remove procid_self() from push_blocking_lock_request()
      s3: Remove procid_self() from generic_blocking_lock_error()
      s3: Remove procid_self() from cancel_pending_lock_requests_by_fid()
      s3: Remove procid_self() from remove_pending_lock_requests_by_mid_smb1()
      s3: Remove procid_self() from process_blocking_lock_queue()
      s3: Remove procid_self() from blocking_lock_cancel_smb1()
      s3: Remove smbd_messaging_context() from linux_oplock_signal_handler()
      s3: Remove smbd_messaging_context() from smb_set_posix_lock()
      s3: Remove procid_self() from irix_oplocks_read_fde_handler()
      s3: Remove smbd_messaging_context() from push_blocking_lock_request_smb2()
      s3: Remove smbd_messaging_context() from remove_pending_lock()
      s3: Remove smbd_messaging_context() from reprocess_blocked_smb2_lock()
      s3: Remove smbd_messaging_context() from make_connection_snum()
      s3: Remove smbd_messaging_context() from shutdown_other_smbds()
      s3: Remove procid_self() from query_lock()
      s3: Remove procid_self() from do_lock()
      s3: Remove procid_self() from do_unlock()
      s3: Remove procid_self() from do_lock_cancel()
      s3: Remove procid_self() from fill_deferred_open_entry()
      s3: Remove procid_self() from remove_pending_lock()
      s3: Remove procid_self() from cancel_pending_lock_requests_by_fid_smb2()
      s3: Remove procid_self() from srv_spoolss_drv_upgrade_printer()
      s3: Remove procid_self() from brl_close_fnum()
      s3: Put serverid_key and serverid_data together
      s3: Remove some type-punned warnings
      s3: Remove procid_self() from ctdb_read_req() and ctdb_handle_message()
      s3: Remove procid_self() from srv_spoolss_reply[open|close]printer()
      s3: Make talloc_attrs() static
      s3: Fix another winbind crash
      s3: Fix a segfault in the RPC server
      s3: Fix another aspect of bug 7262 and make paged results work again
      s3: Slightly simplify make_server_info_pw
      s3: Optimize the write cache for sequential writes
      s3: [ug]id_to_unix_... can not fail
      tsocket: Fix some unreachable code
      s3: Fix crashes in the printing code
      s3: Right now we do not have includes in Makefile.in
      s3: Fix some 64-bit warnings
      s3: Really fix the 64-bit warnings
      Fix a typo
      pam_winbind: Fix shadowing a global on FreeBSD
      s3: Don't use as-needed
      s3: Remove a direct use of procid_self()
      s3: Fix some nonempty blank lines
      s3: Work better without the aio sighandler
      s3: Fix an uninitialized variable
      s3: Actually use the usecs in aio_fork_suspend
      s3-docs: Add more verbose description of "username map cache time".
      s3-docs: Add more verbose description of "ctdb locktime warn threshold".
      s3-docs: Add more verbose description of "log writeable files on exit".
      s3: Avoid pwrite calls for the 1-byte writes with zero content
      s3: Fix two uninitialized variables
      s3: Fix a typo (missing space)
      s3: use dump_data in query FILE_BASIC_UNIX_INFO
      s3: Fix cli_posix_stat
      s3: cli_qpathinfo->cli_qpathinfo1
      s3: Add async cli_qpathinfo
      s3: Convert cli_posix_readlink to cli_qpathinfo_send
      s3: Convert cli_posix_getfacl to cli_qpathinfo_send
      s3: Convert cli_posix_stat to cli_qpathinfo_send
      s3: Factor out parse_ea_blob
      s3: Convert cli_get_ea_list_path to cli_qpathinfo_send
      s3: Remove some unused struct members
      s3: Fix a structure mess-up
      s3: Convert cli_qpathinfo1 to cli_qpathinfo
      s3: cli_qpathinfo2 expects at least 68 bytes
      s3: fix a typo
      s3: Log the correct core path on Linux if core_pattern is set
      s3: Callers of cli_qpathinfo_recv might ignore the output
      s3: Use error status instead of cli_errstr
      s3: Convert cli_qpathinfo2 to cli_qpathinfo_send
      s3: Convert cli_qpathinfo_basic to cli_qpathinfo_send
      s3: Factor out parse_streams_blob
      s3: Convert cli_qpathinfo_streams to cli_qpathinfo_send
      s3: Early start of an async nbench
      s3: Remove a typedef (struct file_info)
      s3: Fix cli_qpathinfo2
      s3: Avoid an unnecessary ftruncate call
      Revert "s3: Avoid pwrite calls for the 1-byte writes with zero content"
      s3: Do the ftruncate write cache optimization in one place
      s3: Remove "cli" from "struct finfo"
      s3: Fix an uninitialized variable
      s3: Fix some nonempty blank lines
      s3: Fix a C++ warning
      s3: Fix an uninitialized variable
      s3: Use cups-config --libs
      s3: Fix in-path shadowcopy2 module
      s3: Fix shadow copies after the change for in-path @GMT-
      s3: Use data_blob_null
      s3: Convert cli_list() to return NTSTATUS
      s3: Fix a crash in masktest
      s3: Save the received trans2 from the inbuf in cli_trans
      s3: Remove some pointless wrapper functions
      s3: Remove some pointless wrapper functions
      s3: Explicitly pass flags2 to clistr_pull_talloc
      s3: Remove a pointless wrapper function
      s3: Remove some direct cli->inbuf references in interpret_long_filename
      s3: fail db_open_ctdb if ctdb is not around
      s3: Remove some explicit calls to procid_self()
      s3: Remove some explicit calls to procid_self()
      s3: Remove an unnecessary NULL check
      s3: Remove a pointless "else"
      s3: Remove smbd_messaging_context() from send_stat_cache_delete_message()
      s3: Add msg_ctx to pipes_struct
      s3: Remove procid_self() from connections_fetch_entry()
      s3: Remove some references to smbd_messaging_context()
      s3: Remove a reference to smbd_messaging_context()
      s3: Remove references to smbd_messaging_context() from the spoolss server
      s3: Remove some references to smbd_messaging_context()
      s3: Fix typos
      s3: Fix a type-punned warning
      s3: Remove references to smbd_messaging_context()
      s3: Remove a direct reference to smbd_server_conn
      s3: Lift the smbd_messaging_context from make_internal_rpc_pipe_p
      s3: Lift the smbd_messaging_context from np_open
      s3: Lift the smbd_messaging_context from rpc_pipe_open_internal
      s3: Lift the smbd_messaging_context from nt_printing_tdb_migrate
      s3: Lift the smbd_messaging_context from winreg_printer_openkey
      s3: Lift the smbd_messaging_context from winreg_printer_opendriver
      s3: Lift the smbd_messaging_context from winreg_create_printer
      s3: Lift the smbd_messaging_context from winreg_update_printer
      s3: Lift the smbd_messaging_context from winreg_get_printer
      s3: Lift the smbd_messaging_context from winreg_get_printer_secdesc
      s3: Lift the smbd_messaging_context from winreg_set_printer_secdesc
      s3: Lift the smbd_messaging_context from winreg_set_printer_dataex
      s3: Lift the smbd_messaging_context from winreg_get_printer_dataex
      s3: Lift the smbd_messaging_context from winreg_enum_printer_dataex
      s3: Lift the smbd_messaging_context from winreg_delete_printer_dataex
      s3: Lift the smbd_messaging_context from winreg_enum_printer_key
      s3: Lift the smbd_messaging_context from winreg_delete_printer_key
      s3: Lift the smbd_messaging_context from winreg_printer_update_changeid
      s3: Lift the smbd_messaging_context from winreg_printer_get_changeid
      s3: Lift the smbd_messaging_context from winreg_printer_addform1
      s3: Lift the smbd_messaging_context from winreg_printer_enumforms1
      s3: Lift the smbd_messaging_context from winreg_printer_deleteform1
      s3: Lift the smbd_messaging_context from winreg_printer_setform1
      s3: Lift the smbd_messaging_context from winreg_printer_getform1
      s3: Lift the smbd_messaging_context from winreg_add_driver
      s3: Lift the smbd_messaging_context from winreg_get_driver
      s3: Lift the smbd_messaging_context from winreg_del_driver
      s3: Lift the smbd_messaging_context from winreg_del_driver_list
      s3: Lift the smbd_messaging_context from set_printer_hnd_name
      s3: Lift the smbd_messaging_context from construct_printer_info0
      s3: Lift the smbd_messaging_context from enum_all_printers_info_level
      s3: Lift the smbd_messaging_context from enumprinters_level0
      s3: Lift the smbd_messaging_context from enum_all_printers_info_1
      s3: Lift the smbd_messaging_context from enum_all_printers_info_1_local
      s3: Lift the smbd_messaging_context from enum_all_printers_info_1_name
      s3: Lift the smbd_messaging_context from enum_all_printers_info_1_network
      s3: Lift the smbd_messaging_context from enum_all_printers_info_2
      s3: Lift the smbd_messaging_context from enumprinters_level1
      s3: Lift the smbd_messaging_context from enumprinters_level2
      s3: Lift the smbd_messaging_context from enumprinters_level4
      s3: Lift the smbd_messaging_context from enumprinters_level5
      s3: Lift the smbd_messaging_context from construct_printer_driver_info_level
      s3: Lift the smbd_messaging_context from update_dsspooler
      s3: Lift the smbd_messaging_context from enumprinterdrivers_level_by_architecture
      s3: Lift the smbd_messaging_context from enumprinterdrivers_level
      s3: Lift the smbd_messaging_context from get_md4pw
      s3: Lift the smbd_messaging_context from netr_set_machine_account_password
      s3: Lift the smbd_messaging_context from printer_driver_in_use
      s3: Lift the smbd_messaging_context from printer_driver_files_in_use
      s3: Lift the smbd_messaging_context from print_access_check
      s3: Lift the smbd_messaging_context from print_time_access_check
      s3: Lift the smbd_messaging_context from nt_printer_remove
      s3: Lift the smbd_messaging_context from store_printer_guid
      s3: Lift the smbd_messaging_context from nt_printer_publish_ads
      s3: Lift the smbd_messaging_context from nt_printer_publish
      s3: Lift the smbd_messaging_context from check_published_printers
      s3: Lift the smbd_messaging_context from is_printer_published
      s3: Lift the smbd_messaging_context from construct_printer_info7
      s3: Lift the smbd_messaging_context from print_job_delete
      s3: Lift the smbd_messaging_context from print_job_pause
      s3: Lift the smbd_messaging_context from print_job_resume
      s3: Lift the smbd_messaging_context from print_job_checks
      s3: Lift the smbd_messaging_context from print_job_start
      s3: Lift the smbd_messaging_context from print_queue_pause
      s3: Lift the smbd_messaging_context from print_queue_resume
      s3: Lift the smbd_messaging_context from print_queue_purge
      s3: Fix the build without ADS
      s3: Remove smbd_messaging_context from dummysmbd
      s3: Lift the smbd_messaging_context from reload_printers
      s3: Lift the smbd_messaging_context from reload_services
      s3: Lift the smbd_messaging_context from smbd_sig_hup_handler
      s3: Lift the smbd_messaging_context from smbd_setup_sig_hup_handler
      s3: Lift the smbd_messaging_context from start_background_queue
      s3: Lift the server_messaging_context from print_queue_update
      s3: Lift the server_messaging_context from print_queue_length
      s3: Lift the server_messaging_context from print_job_end
      s3: Lift the server_messaging_context from get_stored_queue_info
      s3: Lift the server_messaging_context from print_queue_status
      s3: Lift the server_messaging_context from print_notify_event_send_messages
      s3: Lift the server_messaging_context from send_spoolss_notify2_msg
      s3: Lift the server_messaging_context from send_notify_field_values
      s3: Lift the server_messaging_context from send_notify_field_buffer
      s3: Lift the server_messaging_context from notify_printer_status_byname
      s3: Lift the server_messaging_context from notify_printer_status
      s3: Lift the server_messaging_context from notify_job_status_byname
      s3: Lift the server_messaging_context from notify_job_status
      s3: Lift the server_messaging_context from notify_job_total_bytes
      s3: Lift the server_messaging_context from notify_job_total_pages
      s3: Lift the server_messaging_context from notify_job_username
      s3: Lift the server_messaging_context from notify_job_name
      s3: Lift the server_messaging_context from notify_job_submitted
      s3: Lift the server_messaging_context from notify_printer_driver
      s3: Lift the server_messaging_context from notify_printer_comment
      s3: Lift the server_messaging_context from notify_printer_sharename
      s3: Lift the server_messaging_context from notify_printer_printername
      s3: Lift the server_messaging_context from notify_printer_port
      s3: Lift the server_messaging_context from notify_printer_location
      s3: Lift the server_messaging_context from notify_printer_byname
      s3: Lift the server_messaging_context from pjob_store_notify
      s3: Lift the server_messaging_context from pjob_store
      s3: Lift the server_messaging_context from pjob_delete
      s3: Lift the server_messaging_context from print_unix_job
      s3: Lift the server_messaging_context from traverse_fn_delete
      s3: Lift the server_messaging_context from print_queue_update_internal
      s3: Lift the server_messaging_context from print_queue_update_with_lock
      s3: Lift the server_messaging_context from print_job_set_name
      s3: Lift the server_messaging_context from print_job_delete1
      s3: Lift the server_messaging_context from print_job_write
      s3: Lift the server_messaging_context from print_job_endpage
      s3: Lift the server_messaging_context from update_monitored_printq_cache
      s3: Pass messaging_context through s_notify_info_data_table
      s3: Lift the server_messaging_context from construct_notify_printer_info
      s3: Lift the server_messaging_context from construct_notify_jobs_info
      s3: Lift the server_messaging_context from construct_printer_info2
      s3: Lift the server_messaging_context from construct_printer_info6
      s3: Lift the server_messaging_context from spoolss_setjob_1
      s3: Make check_reload() static
      s3: Lift the server_messaging_context from check_reload
      s3: Lift the server_messaging_context from housekeeping_fn
      s3: Pass sconn to smbd_process
      s3: Remove some smbd_messaging_context references from smbd_process
      s3: Remove the smbd_messaging_context from spoolss_init_cb
      s3: Remove the smbd_messaging_context from smb_conf_updated
      s3: Remove the smbd_messaging_context from cups_pcap_load_async
      s3: Remove the smbd_messaging_context from cups_cache_reload
      s3: Remove the smbd_messaging_context from pcap_cache_reload
      s3: Remove the smbd_messaging_context from load_printers
      Fix a typo
      s3: ?true:false is a *bit* pointless :-)
      s3: Slightly simplify the logic in smbd_server_connection_handler
      s3: Slightly simplify the logic in smbd_server_echo_handler
      s3: Reduce the load on the echo handler
      s3: Replace some cli_errstr calls by nt_errstr
      s3: Fix some error messages
      s3: Fix an uninitialized variable
      s3: Remove a conn NULL check from claim_connection
      s3: Fix a typo
      s3: Add debugs to shutdown_other_smbds
      s3: Increase debug level for shutdown_other_smbds
      s3: Remove some unused code
      s3: Remove get_client_fd()
      s3: Remove an unused struct definition
      s3: Fix some type-punned warnings
      s3-printing: Lift the use of smbd_server_fd from job_submit.
      Fix a typo
      s3: Lift smbd_server_fd() from read_target_host
      s3: Simplify the logic of check_access by an early return
      s3: Add "sock" to smbd_server_connection
      s3: Remove smbd_server_fd from schedule_aio_write_and_X
      s3: Remove smbd_server_fd from handle_aio_read/write_complete
      s3: Remove smbd_server_fd from generic_blocking_lock_error
      s3: Remove smbd_server_fd from blocking_lock_reply_error
      s3: Remove smbd_server_fd from send_nt_replies
      s3: Remove smbd_server_fd from send_trans_reply
      s3: Remove smbd_server_fd from api_dcerpc_cmd_read/write_done
      s3: Remove smbd_server_fd from send_break_message_smb1
      s3: Remove smbd_server_fd from pipe_write_done
      s3: Remove smbd_server_fd from reply_special
      s3: Remove smbd_server_fd from smbd_initialize_smb2
      s3: Remove smbd_server_fd from send_trans2_replies
      s3: Remove smbd_server_fd from vfs_write_data
      s3: Remove smbd_server_fd from vfs_pwrite_data
      s3: Remove smbd_server_fd from netbios_session_retarget
      s3: Remove smbd_server_fd() from fake_sendfile
      s3: Remove smbd_server_fd() from sendfile_short_send
      s3: Remove smbd_server_fd() from reply_readbraw_error
      s3: Remove smbd_server_fd() from send_file_readbraw
      s3: Remove smbd_server_fd() from send_file_readX
      s3: Remove smbd_server_fd() from reply_writebraw
      s3: Remove smbd_server_fd() from reply_echo
      s3: Remove smbd_server_fd() from make_connection_snum
      s3: Remove smbd_server_fd() from setup_new_vc_session
      s3: Remove smbd_server_fd() from share_sanity_checks
      s3: Remove smbd_server_fd() from make_connection
      s3: Remove smbd_server_fd() from receive_smb_raw_talloc_partial_read
      s3: Remove smbd_server_fd() from smbd_server_connection_loop_once
      s3: Remove smbd_server_fd() from switch_message
      s3: Remove smbd_server_fd() from construct_reply
      s3: Remove smbd_server_fd() from chain_reply
      s3: Remove smbd_server_fd() from smbd_server_connection_read_handler
      s3: Remove smbd_server_fd() from smbd_server_connection_handler
      s3: Remove smbd_server_fd() from keepalive_fn
      s3: Remove smbd_server_fd() from smbd_echo_reply
      s3: Remove smbd_server_fd() from smbd_echo_reader
      s3: Remove smbd_server_fd() from smbd_echo_loop
      s3: Remove smbd_server_fd() from smbd_process
      s3: Fix a ton of type-punned warnings
      s3: Remove smbd_server_fd() from write_data()
      s3: Remove unused "pos" arg from print_job_write
      s3: Directly call write_data from print_job_write()
      s3: Lift smbd_server_fd() from read_fd_with_timeout()
      s3: Lift smbd_server_fd() from read_data()
      s3: Lift smbd_server_fd() from read_smb_length_return_keepalive
      s3: Lift smbd_server_fd() from receive_smb_raw_talloc
      s3: Remove smbd_server_fd from receive_smb_raw
      s3: Move read_smb_length() to smbd/reply.c
      s3: Remove smbd_server_fd() from read_smb_length()
      s3: Remove smbd_server_fd() from session_claim
      s3: Lift smbd_server_fd from reload_services()
      s3: Add smbd_server_connection->client_id
      s3: Remove unneeded "client_address" from connection_struct
      s3: Add "client_id" to pipes_struct
      s3: Move initializing pjob.clientname to print_job_start()
      s3: Use pipe_struct->client_id->name for pjob.clientmachine
      s3: Fix an uninitialized variable
      s3: Fix serverid_register_msg_flags
      s3: Add cli_flush
      s3: async cli_list
      s3: Remove an unused variable
      s3: Remove smb_pam_accountcheck from the auth modules
      s3: Use sconn->client_id in session_claim
      s3: Fix bug 7635
      s3: Replace calls to check_access by allow_access
      s3: Move check_access to cgi.c, its only user
      s3: Fix some nonemtpy blank lines
      s3: Rename auth.c:backends to auth_backends
      s3: Pass the rhost through smb_pam_accountcheck
      s3: Turn two macros into functions
      s3: PAM_RHOST and PAM_TTY are enums on FreeBSD
      s3: Make srv_send_smb take an sconn instead of a sock fd
      s3: Move "trans_num" to smbd_server_connection
      s3: Make char_flags and base_reverse const arrays
      s3: Remove smbd_server_fd from expand_msdfs_target
      s3: Fix typos
      s3: source/ is long gone :-)
      s3: Pass rhost through to smb_pam_passchange
      s3: Cache results of finding printer names
      s3: Pass "private_data" through string_combinations()
      s3: Lift smbd_server_fd() from smb_pam_start
      s3: Lift smbd_server_fd() from smb_pam_passcheck
      s3: Those functions are no macros anymore :-)
      s3: Fix smb_pam_passcheck
      s3: Fix some nonempty blank lines
      s3: Lift smbd_server_fd() from password_check()
      s3: Lift smbd_server_fd() from pass_check()
      s3: Remove smbd_server_conn() from check_unix_security
      s3: Remove the dependency of g_lock on procid_self
      s3: Fix a typo
      s3: Remove smbd_server_fd() from set_local_machine_name()
      s3: Fix some DEBUGs
      s3: Fix a (highly unlikly) memleak in set_local_machine_name()
      s3: Remove some references to smbd_server_fd()
      s3: Remove an unused macro
      s3: Remove a use of smbd_server_fd
      s3: Remove some uses of smbd_server_fd()
      s3: Set the client_id in substitute.c once
      s3: Pass sconn instead of msg_ctx to housekeeping_fn
      s3: Pass sconn to check_reload
      s3: Remove a use of smbd_server_fd() in smbd main()
      s3: Lift smbd_server_fd() from release_ip()
      s3: Lift smbd_server_fd() from msg_release_ip()
      s3: Remove smbd_server_fd() from smbd_register_ips
      s3: Remove smbd_server_fd() from srv_netlog_nt
      s3: Remove two uses of smbd_server_fd()
      s3: Remove smbd_server_fd()
      s3: Fix the build without cluster
      s3: Fix an uninitialized variable
      s3: Fix the build of the nfs4_acl module
      s3: Fix some uninitialized variable warnings
      packaging: Attempt to fix the RPM build
      packaging: Build with -O3
      s3: Fix a segfault in the printer code using create_conn_struct
      packaging: cifsutils are no longer part of Samba
      packaging: build fixes
      s3: Make ctdbd_init_connection static
      s3: messaging_ctdbd_init potentially modifies my_vnn
      s3: messaging_ctdbd_connection() was only called with procid_self()
      s3: Print the IP of the server that stopped responding
      s3: Remove unused nss_info_adex_init()
      s3: On Solaris, iov_len is an int
      s3: Prune the printername cache when a printer is deleted
      s3: Remove a superfluous ;
      s3: Check for sid instead of name in cm_connect_sam
      s3: Simplify cm_connect_sam a bit
      s3: Fix a typo
      s3: Make winbind_add_failed_connection_entry static
      s3: "== false" looks wrong :-)
      s3: Remove unused winbindd_dual_show_sequence()
      s3: Remove unused winbindd_update_creds_by_sid
      s3: Remove unused arg "user_sid" from winbindd_store_creds
      s3: Remove redundant flag checks
      s3: Fill in domain in winbindd_pam_auth_crap_send
      s3: Fill in workstation in winbindd_pam_auth_crap_send
      s3: Remove a nested if-statement
      s3: Remove "mem_ctx" from lookup_cached_name()
      s3: Remove "mem_ctx" from wcache_save_creds()
      s3: Remove "mem_ctx" from a few functions
      s3: These assignments are overwritten immediately
      s3: Ensure NULL termination for "workstation" in auth_crap
      s3: Fix messsssages
      s3: auth.krb5ccname and auth.unix_username are both fstrings
      s3: Simplify generate_krb5_ccache slightly
      s3: Simplify the logic in generate_krb5_ccache
      s3: Remove a nesting level in winbindd_dual_pam_chauthtok
      ntlm_check: Fix some nonempty blank lines
      s3: Fix wbinfo arg for --pam-logon
      s3: Do not directly log off after a pam_logon
      s3: Fix a typo (authentictaion->authentication)
      s3: Fix a typo
      ntlm_auth: Fix a valgrind error
      s3: Remove some unnecessary if-statements
      s4: Fix two typos
      Fix a typo
      s3: Fix some debug msgs in ntlm_auth
      s3: Wrap the ntlm_auth loop with a talloc_stackframe
      s3: Split off output generation from manage_squid_ntlmssp_request
      s3: Fall back to raw NTLMSSP for the gss-spnego protocol
      s3: Correctly unwrap the krb ticket in gss-spnego
      s3: Add the PAC info3 struct to the netsamlogon_cache in ntlm_auth
      s3: Fix some nonempty blank lines
      s3: Fix bug 7688, rpcclient command line completion crashing
      s3: Add a missing prototype
      s3: Fix the charset_pull routine (bug 7531)
      s3: Remove a pointless if-statement
      s3: Remove a global variable in bugfix for bug 7665
      s3: Fix pam_smbpass logging on FreeBSD
      s3: Use asprintf where appropriate
      s3: tdbdump does not use our libs
      tdb: add restore
      talloc: Add a warning about talloc_autofree_context() and dlclose()
      s3: Fix bug 7470
      s3: Fix some 64-bit warnings
      s3: Fix a typo
      s3: Remove talloc_autofree_context() from init_system_info()
      s3: Fix a memleak in make_new_server_info_system()
      s3: Lift talloc_autofree_context() from make_auth_context()
      s3: Lift talloc_autofree_context() from make_auth_context_text_list()
      s3: Lift talloc_autofree_context() from make_auth_context_subsystem()
      s3: Lift talloc_autofree_context() from make_auth_context_fixed()
      s3: Avoid an explicit ZERO_STRUCT
      s3: Remove talloc_autofree_context() from get_root_nt_token()
      s3: Remove talloc_autofree_context() from ctdb_read_req()
      s3: Remove talloc_autofree_context() from messaging_tdb_parent_init()
      s3: Remove talloc_autofree_context() from serverid_parent_init()
      s3: Remove talloc_autofree_context() from serverid_db()
      s3: Remove two talloc_autofree_context() calls
      s3: Remove talloc_autofree_context() from pdb_init_ads()
      s3: Remove talloc_autofree_context() from lookup_unix_user_name()
      s3: Remove talloc_autofree_context() from net_sam_provision()
      s3: Remove talloc_autofree_context() from smbpasswd
      s3: Remove talloc_autofree_context() from swat
      s3: Remove talloc_autofree_context() from change_to_guest()
      s3: Remove talloc_autofree_context() from notify_internal_parent_init()
      s3: Remove talloc_autofree_context() from getpwnam_alloc()
      s3: Remove talloc_autofree_context() from guest_user_info()
      s3: Remove talloc_autofree_context() from nametouid()
      Lift talloc_autofree_context() from OpenConfFile()
      Remove talloc_autofree_context() from pm_process
      s3: Fix some comments
      s3: Remove some unused code
      s3: Make file_fnum static
      s3: Remove talloc_autofree_context() from receive_unexpected()
      s3: Remove "server_fd" global variable
      s3: Move "Files" to smbd_server_connection
      s3: Lift smbd_server_conn from file_fnum
      s3: Remove smbd_server_conn from file_new and file_free
      s3: Remove smbd_server_conn from file_close_conn
      s3: Remove smbd_server_conn from file_close_pid
      s3: Remove smbd_server_conn from file_close_user
      s3: Remove smbd_server_conn from files_forall
      s3: Lift smbd_server_conn from file_find_dif
      s3: Lift smbd_server_conn from file_find_di_first
      s3: Remove smbd_server_conn from file_find_subpath
      s3: Remove smbd_server_conn from file_sync_all
      s3: Slightly simplify file_fnum
      s3: Remove smbd_server_conn from file_fsp
      s3: Lift smbd_server_conn from file_find_fd
      s3: Remove talloc_autofree_context() from files.c
      s3: Remove some remaining files.c globals to sconn
      s3: Remove talloc_autofree_context() from myhostname()
      s3: Remove two calls to procid_self()
      s3: Lift smbd_messaging_context() from open_sockets_smbd()
      s3: Increase the debuglevel for connection termination msgs
      s3: Attempt to fix bug 7518
      s3: Fix a typo in dump-domain-list smbcontrol usage msg
      s3: Re-introduce a procid_self()
      s3: Add "smbcontrol winbindd ip-dropped <local-ip>"
      s3: Fix a 64-bit BUG
      s3: Attempt to fix bug 7665
      s3: Attempt to fix the non-ads build
      s3: Remove talloc_autofree_context from pdb_interface
      s3: Remove talloc_autofree_context() from srv_samr_nt.c
      s3: Remove talloc_autofree_context() from unexpected.c
      s3: Remove talloc_autofree_context() from dmapi.c
      s3: Attempt to fix a ton of warnings on the build farm
      s3: Attempt to fix the IRIX build
      s3: Move #define VALGRIND to config.h
      s3: I thought I had compiled this....
      s3: Add msg_ctx_to_sconn
      s3: Lift smbd_server_conn from initial_break_processing
      s3: Remove smbd_server_conn from process_oplock_async_level2_break_message
      s3: Remove smbd_server_conn from process_oplock_break_message
      s3: Remove smbd_server_conn from process_kernel_oplock_break
      s3: Remove smbd_server_conn from smb2 receive_unlock_msg
      s3: Remove smbd_server_conn from msg_close_file
      s3: Remove smbd_server_conn from validate_my_share_entries
      s3: Remove smbd_server_conn from msg_file_was_renamed
      s3: Remove smbd_server_conn from smb1 receive_unlock_msg
      s3: Remove smbd_server_conn from process_blocking_lock_cancel_message
      s3: Remove smbd_server_conn from msg_force_tdis
      s3: Attempt to get the Tru64 build a bit further
      s3: Fix a pointer error
      s3: Stop using the write cache after an oplock break
      s3: Make the write end of the echo responder pipe non-blocking
      tevent: Only call handlers that ask for events
      s3: Fix the async echo responder for netbios keepalives
      s3: Fix input check in is_encrypted_packet
      Move talloc_enable_null_tracking() to the s3 daemons
      tevent: Do not use talloc_autofree_context
      s3: Implement echo_TestSleep
      s3: Add a little test for the echo responder
      s3: Remove talloc_autofree_context() from loadparm.c
      s3: Remove talloc_autofree_context() from get_printer_list_db()
      s3: Call printer_list_parent_init in the parent
      s3: Hang the linux kernel oplocks off the NULL ctx
      s3: Hang the irix kernel oplocks off the NULL ctx
      s3: Hang the isilon kernel oplocks off the NULL context
      s3: Rename "conn" to the more used "sconn" in process_smb()
      s3: Remove some explicit smbd_server_conn refs in process_smb()
      s3: Lift smbd_server_conn from receive_smb_raw_talloc_partial_read
      s3: Lift smbd_server_conn from receive_smb_raw_talloc
      s3: Lift smbd_server_conn from receive_smb_talloc
      s3: Remove smbd_server_conn from construct_reply
      s3: Cope with EINTR in smbd_[un]lock_socket
      s3: Add some DEBUG
      uid_wrapper: The gid wrapper does not require a destructor
      s3: Don't use talloc_autofree_context in map_file
      s3: Add any_nt_status_not_ok
      s3: Use any_nt_status_not_ok in winbind
      s3: Make "unpack_pjob" static
      s3: Rename cli_fileinfo() to cli_fileinfo_basic()
      s3: Add async cli_qfileinfo
      s3: Convert cli_qfilename to cli_qfileinfo
      s3: Convert cli_qfileinfo_basic to cli_qfileinfo
      s3: Replace cli_qfileinfo_test with a call to cli_qfileinfo
      s3: Remove unused cli_get_ea_list_fnum
      s3: Initialize output vars in parse_ea_blob
      Add print_asc_cb()
      Add dump_data_cb()
      s3: Add "geteas" to smbclient
      s3: Add "setea" to smbclient
      s3: Add async cli_setpathinfo
      s3: Pass down a level instead of a flag to cli_posix_link_internal
      s3: Use tevent_req_simple_recv_ntstatus where appropriate
      s3: Use cli_setpathinfo in cli_posix_link_internal
      s3: Use cli_setpathinfo in cli_posix_chown_chmod_internal
      s3: Avoid passing down a boolean to cli_posix_unlink_internal_send
      s3: Use cli_setpathinfo in cli_posix_unlink_internal
      s3: Pass tdb_flags to ctdbd when attaching to a db
      s3: Package tdbrestore in RHEL-CTDB
      s3: Fix some DEBUG msgs
      s3: Make gpfs winattrs work again
      s3: FILE_WRITE_DATA & friends have gone from includes.h
      s3: Fix the registry upgrade code
      s3: Streamline regdb_normalize_keynames_fn a bit
      s3: Fix a typo in a DEBUG msg
      s3: Do not connect to ctdb if it is blocked for some reason
      s3: Add "net registry getvaluesraw"
      s3: Fix a getgrent crash with many groups
      s3: Align nttrans replies the same way Windows does it
      s3: Remove an unused prototype
      s3: Remove the use of cli_send_trans from cli_get_fs_full_size_info
      s3: Allow disabling of mdns registrations
      s3: Remove some duplicate prototypes
      s3: Fix a typo
      s3: Make proper use of sid_check_is_in_xx routines
      s3: Consistently use stdbool types in new code
      s3: Put some parentheses around conditionals
      s3: Build idmap_autorid by default
      s3: Fix an uninitialized variable
      raw.h is only needed in the S4 build
      s3: Package autorid module
      s3: Quieten a bogus error message
      s3: Untangle an if-expression
      s3: Remove some dead code
      s3: Make split_dfs_path return bool
      s3: cli_dfs_check_error does not need to depend on cli->inbuf
      s3: Convert cli_dfs_get_referral to cli_trans
      s3: Convert cli_set_ea() to cli_trans()
      s3: Remove two pointless variables
      s3: Make cli_set_ea_path return NTSTATUS
      s3: Make cli_set_ea_fnum return NTSTATUS
      s3: Well... Fix a stupid error
      s3: Convert cli_get_posix_fs_info() to cli_trans()
      s3: Avoid two calls cli_errstr
      s3: string_to_sid does thorough syntax checking
      s3: Remove some unused code
      s3: Move parse_sidlist to the only calling file
      "bool ? true : false" is a bit pointless
      s3: Remove a reference to "winbindd_cli_state" from append_auth_data
      s3: Remove a reference to "winbindd_cli_state" from append_unix_username
      s3: Remove a reference to "winbindd_cli_state" from append_info3_as_ndr
      s3: Remove a reference to "winbindd_cli_state" from append_afs_token
      s3: Remove a reference to "winbindd_cli_state" from append_info3_as_txt
      s3: Remove a reference to "winbindd_cli_state" from append_auth_data
      s3: Fix a missing return value
      s3: Make winbind recover from a signing error
      s3: Call sid_check_is_domain instead of dom_sid_equal
      s3: Remove some unused code
      s3: Make ads_do_search_retry_args() static
      s3: Remove unused ads_search_retry_extended_dn
      s3: Fix some nonempty blank lines
      s3: Make ads_ranged_search_internal static
      s3: Make ads_get_attrnames_by_oids static
      s3: Remove unused ads_get_attrname_by_oid
      s3: Remove a #define used just once
      s3: Use sid_check_is..
      s3: Fix some typos
      s3: Add a word of warning about "winbind use default domain"
      s3: Correctly calculate the wbinfo -s result
      s3: Fix filling in the pam_auth_crap domain name
      s3: Return the correct result from winbindd_dual_auth_passdb
      libwbclient: Fix a division by zero
      libwbclient: Correctly order the wbcAllocateMemory args
      s3: Use localtime_r, libreplace defines it
      s3: Add gencache_parse
      s3: Convert gencache_get_data_blob to gencache_parse
      s3: Add gencache_iterate_blobs
      s3: Properly print binary values "net cache"
      s3: Add cli_shadow_copy_data
      s3: Add shadow copy info to smbclient allinfo
      s3: Fix bug 7832
      s3: Attempt to fix the shadow_copy2 module
      s3: Fix a typo
      s3: Attempt to please autobuild
      s3: Fix bug 7841: WINBINDD_LOOKUPRIDS asks the wrong domain
      s3: Fix bug 7842: WINBIND_LOOKUPRIDS does not return the proper domain name
      s3: Fix bug 7844: Race in winbind
      s3: Fix serverid_exists
      s3: Add -P as an alias for --ping-dc
      s3: Document wbinfo -P/--ping-dc
      s3: Fix some typos
      s3: re-add some debugs to check_reduced_name
      s3: Did I say this module is from hell?
      s3: Fix some nonempty blank lines
      s3: Reply correctly to FSCTL_IS_VOLUME_DIRTY
      s3: FreeBSD has getpeereid(), use it
      s3: Remove two pointless slprintf calls
      s3: netsamlogon_clear_cached_user only needs the SID
      s3: wcache_invalidate_samlogon only needs the SID
      libwbclient: Put the wb_reqtrans definitions into wb_reqtrans.h
      Move wbc_async.[ch] to its only user: smbtorture3
      wb_reqtrans is not used in libwbclient
      s3: Use the right uid winbindd_raw_kerberos_login()
      s3: Fix bug 7066 -- wbcAuthenticateEx gives unix times
      s3: "make etags" should not grow TAGS infinitely...
      lib: Protect against tevent nterror mismatches
      s3: Remove some unused variables
      s3: Always retry the DC connection in auth_domain
      s3: Remove unused "retry" from cli_full_connection
      s3: Remove unused "retry" from cli_start_connection
      s3: Add some const to name_mangle()
      s3: Add async cli_session_request
      s3: Add an async smbsock_connect
      s3: Add smbsock_any_connect
      s3: Test smbsock_any_connect
      s3: Retry *SMBSERVER in nb_connect
      s3: Use smbsock_any_connect in winbind
      s3: Remove unused open_any_socket_out
      tevent: Fix a typo
      tevent: Some documentation fixes
      tevent: More doc fixes
      tevent: More documentation updates
      async_send->sendto, async_recv->recvfrom
      s3: Fix some typos
      s3: Remove an ancient typedef
      s3: Make node_status_query return NTSTATUS
      Fix a crash in libnss_wins
      Fix a memleak in nss_wins
      s3: AllowDebugChange is gone
      s3: Make name_query return NTSTATUS
      Use sockaddr_storage in async sendto/recvfrom
      s3: Allow more control over smbsock_[any_]connect
      s3: Fix two uninitialized variables
      s3: Fix some nonempty blank lines
      s3: Add some const to send_getdc_request
      s3: Add some const to receive_getdc_response
      nss_wins: Fix a type-punned warning
      s3: Fix some nonempty blank lines
      s3: cli_send_mailslot -> cli_prep_mailslot
      s3: Factor out prep_getdc_request
      s3: Remove unused mem_ctx arg from set_getdc_request
      Fix a valgrind error
      s3: Fix a memleak in receive_getdc_response
      s3: Fix some nonempty blank lines
      s3: Basic infrastructure for /tmp/.nmbd/unexpected
      s3: Make nmbd listen on the unexpected socket
      s3: Add packet_trn_id()
      s3: Add sock_packet_read
      s3: Add nb_trans_send/recv
      s3: Make node_status_query use /tmp/.nmbd/unexpected
      s3: Make name_query use /tmp/.nmbd/unexpected
      s3: Lift my_mailslot from prep_getdc_request
      s3: Factor out parse_getdc_response
      s3: Fix a valgrind error
      s3: Add nbt_getdc
      s3: Use the new nbt_getdc in dsgetdcname()
      s3: Use the new nbt_getdc in winbindd_cm
      s3: Limit the number of unexpected packets per client to 10
      s3: Limit the number of unexpected clients to 200
      s3: Remove some unused code
      s3: Make nmbd socket dir configurable
      s3: Fix some nonempty blank lines
      s3: Fix a type error
      s3: Avoid a ton of registry writes at startup
      s3: Fix some warnings in the zfsacl module
      s3: Fix two incompatible pointer type warnings on Solaris
      s3: Convert enc_blob_send_receive to cli_trans()
      m4: Don't AC_MSG_ERROR when too old python is found
      s3: Remove superfluous ;
      s3: Remove a pointless else
      s3: Fix some nonempty blank lines
      s3: Fix bug 7917: Yet another bug in chain_reply
      s3: Fix some nonempty blank lines
      s3: Convert cli_set_secdesc to cli_trans
      s3: Avoid some calls to cli_errstr
      s3: Remove cli_send_trans from cli_oem_change_password
      s3: Remove cli_send_trans from cli_qpathinfo_alt_name
      s3: Fix a C++ warning
      s3: Fix some nonempty blank lines
      s3: Convert cli_get_user_quota to cli_trans
      s3: Convert cli_set_user_quota to cli_trans
      s3: Convert cli_list_user_quota to cli_trans
      s3: Convert cli_get_fs_quota_info to cli_trans
      s3: Convert cli_set_fs_quota_info to cli_trans
      s3: Move dump_ntquota* to smbcquotas.c
      s3: Convert try_nttrans to cli_trans
      s3: Remove unused cli_send/receive_nt_trans
      s3: Rename cli_setpathinfo->cli_setpathinfo_basic
      s3: Add cli_setpathinfo
      s3: Make cli_setpathinfo_basic use cli_setpathinfo
      s3: Convert cli_api to cli_trans
      s3: Convert try_trans2 to cli_trans
      s3: Remove unused cli_send/receive_trans
      s3: Remove unused cli_send_keepalive
      s3: Make passing up "result_parent" from cli_smb optional
      s3: Convert cli_locktype to cli_smb
      s3: Convert cli_lock to use cli_locktype
      s3: Convert cli_lock64 to cli_smb
      s3: Remove some unused code
      s3: Avoid a few calls to cli_errstr
      s3: Make sure we call wbcAuthenticateUserEx correctly
      s3: Add wbinfo --dc-info
      s3: Fix the code to immediately disconnect from a non-working ctdbd
      packaging(RHEL-CTDB): explicitly build the tsm vfs module.
      s3:winbind: Protect against invalid winbindd_cache entries in lookuprids
      s3:vfs:shadow_copy2: Fix shadow-copy module for drag&drop from a snapshot
      s3: Fix a deadlock between smbd and ctdbd
      s3:winbind: Fork multiple children per domain
      s3: Fix connecting to port-139 only servers
      s3: Fix an infinite loop
      Revert "s3: Fix an infinite loop"
      s3: Lift winbindd_cli_state from winbindd_raw_kerberos_login
      s3: Lift winbindd_cli_state from winbindd_dual_pam_auth_samlogon
      s3: Do not use state->mem_ctx in fillup_password_policy
      s3: Lift winbindd_cli_state from fillup_password_policy
      s3: inline get_uid_from_state
      s3: Remove an unneeded check
      s3: Make _lp_maxprotocol static
      s3: On FreeBSD, compile zfsacl if sunacl.h is around
      s3: Add support for AF_NETLINK addr notifications
      s3: test addrchange
      s3: Send a dropped_ip message if we lose an IP
      s3: Fix the build on sles8
      s3: Fix bug 7940 -- fall back for utimes calls
      s3: Fix a typo
      s3: Fix a typo
      s3: Fix some nonempty blank lines
      s3: Use strlcpy in pdb_ads_connect
      s3: In pdb_ads, cope with artificial samu structs
      s3: Fetch the machinepw via ldapi in pdb_ads
      s3: Fix a potential memleak in secrets_fetch_trusted_domain_password
      s3: Fix auth_netlogond to cope with netlogon_creds_CredentialState
      s3: Add primary group in pdb_ads_enum_group_memberships
      s3: Only build auth_netlogond for the developer build
      s3: Use the right credentials in check_netlogond_security
      s3: Make "endpoint_table" static
      libcli/security: Make del_sid_from_array take a uint32_t
      libcli/security: Make add_sid_to_array_unique use a uin32_t counter
      s3: Fix some nonempty blank lines and some typos
      tevent: Fix typos
      s3: Fix some nonempty blank lines
      s3: Slightly simplify winbind_write_sock
      s3: Align tldap_add and tldap_add_send
      s3: Align the args in tldap_modify
      s3: Add more checks and better fallback to addrchange
      s3: Avoid a select call per smb
      s3: Skip the CHAIN1 tests
      s3: Make "smbpasswd <user>" work with pdb_ads
      tdb: Fix a C++ warning
      s3: Align the args of pdb_ads_update_sam_account to tldap_modify
      Fix some nonempty blank lines
      s3: Convert tldap_add_mod_blobs args to "array, count"
      s3: Convert tldap_add_blob_vals args to "array, count"
      s3: Convert tldap_make_mod_blob_int args to "array, count"
      s3: Convert tldap_make_mod_blob args to "array, count"
      s3: Convert tldap_make_mod_fmt args to "array, count"
      s3: Add an explicit counter to tldap_add_mod_[blobs|str]
      s3: Convert tldap_entry_values args to "array, count"
      s3: Fix some nonempty blank lines
      Fix typos
      s3: Remove an unneeded proto
      s3: Add error checking to asn1_read_OctetString_talloc
      s3: Use tlap_simple_recv in tldap_sasl_bind_recv
      s3: Make "net sam list [users|workstations]" list only the right things
      s3: Add "comment" and "description" to pdb_ads
      s3: Fix a typed-punned warning
      s3: Fix a C++ warning
      s3-amend: Don't overwrite existing values
      s3: Add userWorkstations and userParameters to pdb_ads
      s4: Fix a typo
      s3: Add "country_code" to struct samu
      s3: Pass "country_code" through samr
      s3: Support "country_code" in pdb_ads
      s3: Add "code_page" to struct samu
      s3: Pass "code_page" through samr
      s3: Support "codePage" in pdb_ads
      tevent: Fix a comment
      s3: Fix pdb_ads_pull_time
      s3: Let pdb_ads write accountExpires
      s3: Add "len" to pdb_set_hours
      s3: Pass logonHours through pdb_ads
      s3: Fix some nonempty blank lines
      s3: Slightly simplify Get_Pwnam_alloc
      s3: Convert init_system_info to NTSTATUS
      s3: NO_SUCH_USER is a lot more likely than NO_MEMORY
      s3: Make QueryDispInfo and QueryInfo match for guest
      s3: Add ACB_NORMAL to workstations, match RPC-SAMR
      s3: Fix return code of pdb_ads_getsamupriv if the user does not exist
      s3: Protect tldap_errstr against a NULL ld
      s3: Improve a debug message, we have more than pdb_tdb.
      s3: Fix error returns in pdb_ads_mod_groupmem
      s3: Fix pdb_ads_enum_group_members for empty groups
      s3: Fix a debug message
      s3: Support SetGroupInfo in pdb_ads
      s3: Fix pdb_ads_enum_aliasmem for empty aliases
      s3: Fix a typo
      s3: Fix some nonempty blank lines
      s3: Fix filtering in pdb_ads_search_users
      s3: Improve an error msg in vfs_gpfs
      s3: Fix an uninitialized variable use
      s3: Fix 64-bit errors
      s3: Fix a 64-bit warning in vfs_gpfs.c
      s3: Fix pdb_ads_enum_group_memberships args
      nss_wrapper: Make nwrap_module_init a bit more readable
      nss_wrapper: Fix a segfault when libnss_winbind.so is not loadable
      s3: Improve a dbg msg in aio_fork
      s3: Make is_zero_addr take a sockaddr_storage
      s3: Fix a debug message
      s3: properly find our standard nss_info backends
      s3: Use strndup in parse_nss_param
      s3: Fix some nonempty blank lines
      s3: Fix a comment
      s3: Fix a typo
      s3: Add timeval_to_msec
      libreplace: poll based on select
      s3: Add sys_poll
      s3: Use poll for the event loop
      s3: Use poll in smbd
      s3: Use poll in winbind
      s3: Use poll in nmbd
      s3: Remove select-based s3 event backend
      s3: Add poll_one_fd()
      s3: Eliminate select from packet_fd_read_sync
      s3: Eliminate sys_select from fd_is_readable
      s3: Eliminate sys_select from g_lock_lock
      s3: Add sys_poll_intr
      s3: Add poll_intr_one_fd
      s3: Eliminiate sys_select_intr from client.c
      s3: Eliminate sys_select_intr from read_fd_with_timeout
      s3: Eliminate sys_select_intr from smbfilter
      s3: Eliminate sys_select from do_smb_browse() -- untested
      s3: Eliminate sys_select from do_smb_resolve() -- untested
      s3: Eliminate select from libaddns
      libcli: Eliminate select from smb_readline_replacement
      tevent: Add a poll backend
      Remove sys_select[_intr]
      nsswitch: Eliminate select from wb_common
      s3: GPFS can't deal with mangled names
      s3: Attempt to fix the build on IRIX
      s3: Print all flags in "smbclient allinfo"
      s3: Fix operation names in vfs_full_audit.c
      s3: Pass smb_filename through the is_offline vfs op
      s3: Pass smb_filename through the set_offline vfs op
      s3: Announce HSM in the gpfs module
      s3: Ask GPFS for the IS_OFFLINE operation
      s3: Pass the aio_force operation through vfs_gpfs
      s3: Fix some nonempty blank lines
      s3: Remove an obsolete comment
      s3: Use dom_sid_string in _lsa_lookup_sids_internal
      Add dom_sid_string_buf
      s3: Use dom_sid_string_buf in sid_to_fstring
      s3: Fix a memory leak in check_sam_security_info3
      nsswitch: wbcFreeMemory deals fine with NULL
      libwbclient: Add wbcSidToStringBuf
      libwbclient: Use wbcSidToStringBuf
      pam_winbind: Use wbcSidToStringBuf
      s3-net: Use wbcSidToStringBuf
      wbinfo: Fix a debug message
      wbinfo: Use wbcSidToStringBuf
      Fix some nonempty blank lines
      s3: Fix uninitialized variables
      s3: Move EXOP definitions to smbldap.h
      s3: Remove unused args from get_nss_info
      s3: Remove unused args from nss_get_info
      s3: Remove unused args from nss_get_info_cached
      s3: Remove some unused code
      s3: Remove an obsolete comment
      s3: Remove an unnecessary if-statement
      s3-idmap-rid: private_data is a talloc child of dom
      s3-idmap-ldap: private_data is a talloc child of dom
      s3-idmap-tdb: private_data is a talloc child of dom
      s3-idmap-ad: Make ad_schema properly talloced
      s3: Replace idmap_ad_close by a destructor
      s3-idmap-hash: Make "hashed_domains" properly talloced
      s3: Remove close_fn from idmap_methods
      s3: state->ev is not needed in winbindd_lookupsid
      s3: "ctx" is not needed in idmap_nss_unixids_to_sids
      s3: "dom_name" is not needed in idmap_nss_sids_to_unixids
      s3: Use talloc_tos() in idmap_nss_sids_to_unixids
      libsmbclient: Fix a typo
      libwbclient: Remove a pointless check
      libwbclient: Add some input check
      s3: Fix paranoia check in sam_rids_to_names
      Quite some callers of sid_split_rid do not care about the rid
      s3: sid->domain_sid in winbindd_samr sam_rids_to_names
      s3: Fix a typo
      s3: Fix bug 8009
      Revert "s3: Fix bug 8009"
      s3: Enhance error messages in idmap_tdb2_init_hwm
      s3: This module needs rewriting...
      s3: Fix the talloc hierarchy in shadow_copy2_connectpath
      s3: Fix bug 8009 - net rap session cannot get username
      s3: Change tldap_entry_attributes to the "array,count" convention
      s3: "hex_encode" does the same as "binary_string"
      s3: Remove some unused code
      s3: Read uidNumber/gidNumber in pdb_ads_sid_to_id
      s3: Fix Coverity ID 2290: Uninitialized read
      s3: Fix Coverity ID 2289: Uninitialized read
      s3: Fix Coverity ID 2288: Uninitialized read
      s3: Fix Coverity ID 2287: Uninitialized read
      s3: Fix Coverity ID 2286: Uninitialized read
      s3: Fix Coverity ID 2285: Uninitialized read
      s3: Fix Coverity ID 2284: Uninitialized read
      s3: Fix Coverity ID 2283: Uninitialized read
      s3: Fix Coverity ID 2282: Uninitialized read
      s3: Fix Coverity ID 2281: Uninitialized read
      s3: Fix Coverity ID 2280: Uninitialized read
      s3: Fix Coverity ID 2279: Uninitialized read
      s3: Fix Coverity ID 2278: Uninitialized read
      libwbclient: CID 2199 -- NULL pointer return
      s3: Use jenkins hash for str_checksum, fix bug 8010
      s3: Fix a cut&paste error in pdb_ads_connect
      s3: Fix Coverity ID 2319: Uninitialized read
      s3: Fix Coverity ID 2318: Uninitialized read
      s3: Fix Coverity ID 2317: Uninitialized read
      s3: Fix Coverity ID 2100, BAD_SIZEOF
      s3: Fix Coverity ID 1034, CHECKED_RETURN
      s3: Fix Coverity ID 1018, CHECKED_RETURN
      s3: Fix Coverity ID 1017, CHECKED_RETURN
      s3: Fix Coverity ID 1013, CHECKED_RETURN
      s3: Fix Coverity ID 1012, CHECKED_RETURN
      s3: Fix Coverity ID 2213, PASS_BY_VALUE
      s3: Fix Coverity ID 1402: PASS_BY_VALUE
      s3: Fix Coverity ID 2148, FORWARD_NULL
      s3: Fix Coverity ID 2147, FORWARD_NULL
      s3: Fix Coverity ID 2144, DEADCODE
      s3: Fix Coverity ID 2140, DEADCODE
      s3: Fix Coverity ID 2234: REVERSE_INULL
      s3: Fix Coverity ID 2233, REVERSE_INULL
      s3: Fix Coverity ID 2232, REVERSE_INULL
      s3: Fix Coverity ID 2231, REVERSE_INULL
      s3: Expose num_opens via api_RNetSessionEnum
      s3: Cope with 192.168.1.1/24 in smbcontrol ip-dropped
      idmap-autorid: Not necessary to talloc domainsid
      idmap-autorid: Not necessary to talloc domaincfg
      idmap-autorid: Use talloc_tos() in idmap_autorid_sids_to_unixids
      idmap-autorid: Remove an unused parameter
      idmap-autorid: Remove an unused variable
      idmap-autorid: Remove an else branch
      idmap-autorid: Use talloc_tos() in idmap_autorid_id_to_sid
      idmap-autorid: Remove an unused variable
      idmap-autorid: Slightly simplify idmap_autorid_get_domainrange
      idmap-autorid: Slightly simplify idmap_autorid_get_domainrange
      s3: Add "print notify backchannel" parameter to prevent us doing the reverse print notify connection.
      s3: Fix early tldap_search cancels
      idmap.idl: Fix whitespace
      s3: Fix Coverity ID 770, REVERSE_INULL
      s3: Fix Coverity ID 1048, CHECKED_RETURN
      s3: Fix a (invalid) uninitialized variable warning
      s3: Fix Coverity ID 2203, NULL_RETURNS
      s3: Fix Coverity ID 2202, NULL_RETURNS
      s3: Fix Coverity ID 2201, NULL_RETURNS
      s3: Attempt to fix the build on FreeBSD
      s3: Include prctl where it is actually used
      s3: Fix a shadowed declaration warning
      s3: Fix Coverity ID 2325: RESOURCE_LEAK
      s3: Fix some errno assignments in SMBC_opendir_ctx
      Revert "s3-includes: fixed CONST_DISCARD() to actually discard const"
      s3: Compile IDL files in autogen, some configure tests need this
      s3: Fix Coverity ID 2326, CHECKED_RETURN
      s3: Fix an uninitialized variable read
      s3: Fix Coverity ID 2331: RESOURCE_LEAK
      s3: Fix Coverity ID 2330: RESOURCE_LEAK
      s3: Fix Coverity ID 2329: RESOURCE_LEAK
      s3: Fix Coverity ID 2328: FORWARD_NULL
      s3: Fix Coverity ID 2327: FORWARD_NULL
      s3: Fix Coverity ID 2296: UNUSED_VALUE
      s3: Remove two calls to cli_errstr
      s3: Remove a use of cli_send_smb
      s3: Remove a pointless static
      s3: Replace cli_negprot_sendsync() by cli_negprot_send()
      s3: Replace a use of cli_errstr
      s3: Fix a memleak
      s3: Convert cli_raw_tcon to cli_smb
      s3: Fix Coverity ID 83: RESOURCE_LEAK
      s3: Fix Coverity ID 513: UNINIT
      s3: Fix Coverity ID 585: NEGATIVE_RETURNS
      s3: Fix Coverity ID 590: DEADCODE
      s3: Fix Coverity ID 682: NEGATIVE_RETURNS
      s3: Fix Coverity ID 958: BAD_SIZEOF
      s3: Fix Coverity ID 976: BAD_SIZEOF
      s3: Fix Coverity ID 2226: RESOURCE_LEAK
      s3: Fix Coverity ID 2228: RESOURCE_LEAK
      s3: Fix Coverity ID 2200: NULL_RETURNS (cut&paste error)
      librpc: Fix Coverity ID 2198: NULL_RETURNS
      librpc: Add some error checking to dcerpc_floor_pack_rhs_if_version_data
      s3: Fix Coverity ID 2195: NO_EFFECT
      tdb: Fix Coverity ID 2192: NO_EFFECT
      s3: Fix Coverity ID 2189: MISSING_BREAK
      s3: Fix Coverity ID 2188: MISSING_BREAK
      s3: Fix Coverity ID 2173: FORWARD_NULL
      s3: Fix Coverity ID 2143: DEADCODE
      s3: Fix Coverity ID 2143: DEADCODE
      charconv: Fix the slow-path character conversions
      s3: Fix Coverity ID 2304: FORWARD_NULL
      tdb: Fix Coverity ID 2238: SECURE_CODING
      s3: Fix Coverity ID 2237: REVERSE_INULL
      s3: Fix Coverity ID 2332: MISSING_BREAK
      s3: Fix Coverity ID 2236: REVERSE_INULL
      s3: Fix Coverity ID 2223: RESOURCE_LEAK
      s3: Fix Coverity ID 2222: RESOURCE_LEAK
      s3: Fix Coverity ID 2221: RESOURCE_LEAK
      s3: Fix Coverity ID 2220: RESOURCE_LEAK
      s3: Fix Coverity ID 2217: RESOURCE_LEAK
      s3: Use cli_ntcreate to when listing snapshots
      s3: Fix g_lock_lock after the select/poll conversion
      charconv: Use talloc_tos() in the S3 build
      s3: Fix a typo
      debug: Restore the s3-style check in check_log_size()
      s3: Fix Coverity ID 1136: CONSTANT_EXPRESSION_RESULT
      s3: Fix Coverity ID 1137: CONSTANT_EXPRESSION_RESULT
      s3: Fix bug 8042: File creation on OS/X
      s3: Add a quick test for bug 8042
      s3: Remove some unused code
      s3: Fix print_spool_end
      s3: Make vlp printing work by default
      s3: Add maintainers for s3/auth
      This reverts commit 378c4b221a6be75e1d32cb6fb3a773ce5de6dbda.
      s3: Fix timeout calculation in event_add_to_poll_args
      s3: Fix Coverity ID 2473, UNINIT
      s3: Fix Coverity ID 2472, UNINIT
      s3: Make reg_backend_db.h includable by itself
      s3: Wrap creating the svcctl keys in a transaction
      s3: Retry the join with the short name
      s3: Initialize output in libnet_Join
      s3: For net ads join, create a krb5.conf
      s3: Use talloc_tos() in the S3 build
      s3: Fix Coverity ID 2470: STRAY_SEMICOLON
      s3: Make send_nt_replies() static
      Add dom_sid_parse_endp
      s3: Simplify parse_sidlist
      s3: Make parse_sidlist public
      s3: Add wbint_LookupSids
      s3: Add wb_lookupsids
      s3: Add winbindd_lookupsids
      libwbclient: Add wbcLookupSids
      lib: Move next_token next to next_token_talloc
      nsswitch: wbinfo --lookup-sids
      s3: Add is_domain_online
      s3: Make idmap_find_domain public
      s3: Add wbint_Sids2UnixIDs idl & implementation
      s3: Export WINBINDD_SIDS_TO_XIDS via the winbind pipe
      libwbclient: Add wbcSidsToUnixIds
      nsswitch: Add wbinfo --sids-to-unix-ids
      s3: Use wbcSidsToUnixIds in create_local_token
      s3: Add some debug to winbindd_sids_to_xids
      s3: Add a test for sid2xids
      s3: Fix a typo
      s3: Fix smbd with the async echo responder
      s3: Fix Coverity ID 2471: UNINIT
      s3: Fix bug 8066, wrong output in smbget
      s3: Use tevent_req_nterror properly in a few places
      s3: Remove an unused variable
      s3: guest sesssetup is only 13 words
      s3: Use \0 instead of NULL when 0-terminating a string
      s3: Fix the build of vfs_gpfs.c
      s3: Add a 10-second timeout for the 445 or netbios connection to a DC
      s3: Many pthreadpool fixes
      s3: Tiny doc for pthreadpool
      s3: pthreadpool_sig_fd->pthreadpool_signal_fd
      s3: Add pthreadpooltest to main build
      s3: Run pthreadpooltest in make test
      s3: Check for res_ninit
      s3: "port" is not used in dsgetdcname
      s3: Fix some typos in dsgetdcname
      s3: Some build farm machines do not have /bin/true
      s3: Move setting the name_query timeout
      s3: Remove unused code
      s3: Allow unlimited parallelism in pthreadpool
      s3: Fix a typo
      s3: Add cli_writeall
      s3: Use cli_writeall instead of cli_write
      s3: Remove cli_write
      s3: Make plaintext session setup async
      s3: Make cli_session_setup_nt1 async
      s3: Make cli_session_setup_lanman2 async
      s3: Properly clean up in pthreadpool_init in case of failure
      s3: Fix a strange German translation
      s3: Close the winbind client fds after forking
      s3: In winbind, close parent/child sockets
      s3: Make winbindd_reinit_after_fork return NTSTATUS
      s3: Avoid a potential 100% CPU loop in winbindd
      s3: Remove ip_sevice from get_ipc_connect_master_ip
      s3: Make name_resolve_bcast return sockaddr_storage
      s3: Tune broadcast namequeries for unique names
      s3: Handle EINTR from sys_poll correctly
      s3: Filter out duplicates in name_query()
      s3: Properly deal with exited winbind children
      vfs_gpfs: Store the winattrs in st.vfs_private
      vfs_gpfs: Block sendfile for offline files
      vfs_gpfs: Properly notify the offline->online changes
      RHEL-CTDB: Build vfs_gpfs_hsm_notify
      Always build before commit ... :-)
      s3-torture: Add a test for notify upon read&x
      s3: Fix dup_smb2_vec3
      s3: Fix a typo
      s3: Fix including libsmb/proto.h without prior ads.h
      tevent: Fix a typo
      s3: Fix Coverity ID 1340, NULL_RETURNS
      s3: Fix Coverity ID 986, BUFFER_SIZE_WARNING
      s3: Fix Coverity ID 2307, NULL_RETURNS
      asn1: Fix Coverity ID 2299, CHECKED_RETURN
      s3: Fix Coverity ID 2335, CHECKED_RETURN
      s3: Fix Coverity ID 2336, NULL_RETURNS
      s3: Fix Coverity ID 2325, RESOURCE_LEAK
      s3: Fix Coverity ID 2047, UNUSED_VALUE
      s3: Fix Coverity ID 2478, UNINIT
      s3: Use tevent_req_ntstatus properly in a few places
      s3: Use tevent_req_ntstatus properly in a few places
      s3: Slightly simplify smbd_smb2_request_next_vector
      s3: Paranoia in smbsock_connect_state_destructor
      Use ZERO_STRUCTP in util_net
      s3: Make&use set_socket_addr_v4
      s3: Fix return check in nss_wins
      s3: Document gpfs:syncio
      s3: conn->sconn in smbd_server_connection_read/write_handler
      packaging(RHEL-CTDB): create the rpm directories
      s3: Make read_smb_send/recv public
      s3: Add sync read_smb
      s3: Remove the use of cli->inbuf/outbuf from cli_session_request
      s3: Do central cli_set_error
      fix the WAF build
      s3: Remove a use of cli_send_smb
      s3: Remove unused cli_setup_packet()
      s3: Fix an uninitialized variable
      s3: Fix Coverity ID 2573: UNUSED_VALUE
      s3: Fork the echo handler only after SMB1 negprot is done
      s3: Remove unused cli_setup_bcc
      s3: Remove clistr_align_out
      s3: Convert the OPEN4 test to async oplock handling
      s3: Remove the smbtorture3 OPLOCK3 test
      s3: Remove cli_send/receive_smb
      s3: Directly call common_encrypt_buffer in cli_smb_req_iov_send
      s3: Remove unused cli_[en|de]crypt_message
      s3: Fix a leftover from fstring removal in cli_state
      s3: Remove two false references to cli->inbuf
      s3: Remove a reference to cli->inbuf
      s3: Remove unused cli_reset_error
      s3: Remove unused cli_set_nt_error
      s3: Remove unused cli_get_nt_error
      s3: Document "async smb echo handler"
      s3: Fix a typo
      s3: Fix a typo
      s3: Add cli_connect_nb
      s3: Use cli_connect_nb in cli_start_connection
      s3: Fix some nonempty blank lines
      s3: Use talloc_memdup in copy_unix_token
      s3: Fix a tiny memleak in copy_unix_token
      s3: Fix smbsock_connect
      s3: Use cli_connect_nb in locktest
      s3: Fix some nonemtpy blank lines
      s3: Use cli_connect_nb in masktest
      s3: Fix a type-punned warning
      s3: Add called name_type param to cli_connect_nb
      s3: Use cli_connect_nb in remote_password_change
      s3: Use cli_connect_nb in cli_servertime
      s3: Use cli_connect_nb in smbd_running()
      s3: Use cli_connect_nb in net_rpc_check
      s3: Use cli_connect_nb in smbtorture open_nbt_connection
      s3: Use cli_connect_nb in do_message_op
      s3: Check password server loop earlier
      s3: Fix a type-punned warning
      s3: Use cli_connect_nb in auth_server
      s3: Fix wct check in cli_sesssetup_blob_done
      s3: Extract the guest_login field in sesssetup
      s3: Use the correct guest_login field in auth_server
      s3: Use cli_connect_nb in do_connect
      s3: Remove unused attempt_netbios_session_request
      s3: Use cli_connect_nb in nmbd sync_child
      s3: Add set_socket_options to cli_connect_sock()
      s3: Simplify cli_bad_session_request
      s3: Simplify run_bad_nbt_session
      s3: Fix cli_bad_session_request
      s3: Reply correctly to a bad nbt session request
      s3: Run BAD-NBT-SESSION in make test
      s3: Use cli_connect_nb in SMBC_server_internal
      s3: Remove unused cli_connect
      s3: Remove unused cli_session_request
      s3: Add ioctl code to smbd_smb2_ioctl_send debug
      s3: Safely mark our sconn as smb2 if we have that protocol
      s3: Support shadow copy display over SMB2
      s3: Mark sockets in error state writable
      s3: Remove SHADOW_COPY_DATA typedef
      struct make "struct shadow_copy_data" its own talloc context
      Tiny simplification to dom_sid_string_buf
      Revert "s3: Mark sockets in error state writable"
      s3: Fix the build on FreeBSD 8
      Make samba4.drs.fsmo.python knownfail
      s3:winbind: Convert WINBINDD_WINS_BYIP to the async API
      s3: Fix a valgrind error
      s3: Add name_queries_send/recv
      s3: Make name_resolve_bcast do parallel lookups to all interfaces
      s3: Make use of name_resolve_bcast in nmblookup
      nss_wins: Add a stackframe to lookup_byname_backend()
      s3: Fix two debug messages
      s3: Remove a pointless if-statement
      s3: Remove unused variables
      nsswitch: Remove some refs to the global winbindd_fd
      s3: Remove "struct ip_service" from resolve_wins
      s3: Fix IO_TIMEOUT handling for wins queries
      s3: Add query_wins_list_send/recv
      s3: Add wins_server_tag_ips()
      s3: Add resolve_wins_send/recv
      s3: Use resolve_wins_send/recv in resolve_wins
      s3-docs: Fix a duplicate list entry
      s3-docs: Fix a typo found by Samba-JP oota <ribbon at samba.gr.jp>
      s3: Fix count_current_connections
      s3: Fix connecting to ctdb as non-root
      s3: Fix the return of make_new_server_info_guest
      s3: Add debug level 0 warnings to make_new_server_info_guest
      s3: Allow NULL sd_size in make_sec_desc
      s3: Correctly align even
      s3: Add incomplete cli_nttrans_create
      s3: Test nttrans_create
      s3: Fix a memleak in name_resolve_bcast
      s3: Add name_resolve_bcast_send/recv
      s3: Fix some type-punned warnings
      s3: Remove unused name_queries
      s3: Fix Coverity ID 2583: RESOURCE_LEAK
      s3: Fix Coverity ID 2582: FORWARD_NULL
      s3: Replace shadow_copy2 with a new implementation
      tevent: Add tevent_req_oom
      tevent: change version to 0.9.12
      Use tevent_req_oom
      s3: Fix the build, NAME_MAX not universally available
      s3: Fix a winbind message
      s3: Convert WINBINDD_WINS_BYNAME to the async API
      s3: Remove unused code
      s3: Fix some nonempty blank lines
      s3: Add IO_REPARSE_TAG_SYMLINK define
      Add NT_STATUS_IO_REPARSE_DATA_INVALID
      lib: Allow NULL converted_size in convert_string_talloc
      s3: Add symlink reparse point marshalling routines
      s3: Add SYMLINK_FLAG_RELATIVE define
      s3: Add cli_symlink
      s3: Remove a call to cli_errstr
      s3: Use reparse point style symlinks
      s3: Fix an error message in smbclient symlink
      Add NT_STATUS_IO_REPARSE_TAG_NOT_HANDLED
      s3: Fix winbindd_wins_byname
      s3: explicitly pass domain_sid to wbint_LookupRids() (bug #7841)
      s3: Add STATUS_STOPPED_ON_SYMLINK error code
      s3: Add cli_readlink
      s3: Fix symlink_reparse_buffer_parse
      s3: Read symlink information in smbclient "allinfo"
      S3: Fix some nonempty blank lines
      s3: Allow NULL for arg pwritten in cli_write_andx
      s3: Remove a use of cli_errstr
      s3: Remove some bogus error mappings
      s3: RAP errors are WERROR
      s3: Remove two uses of cli_errstr
      s3: Remove a use of cli_errstr
      s3: Remove a use of cli_errstr
      s3: Remove a use of cli_errstr
      s3: Remove a use of cli_errstr
      s3: Make "do_connect" return NTSTATUS
      s3: Make cli_cm_connect return NTSTATUS
      s3: Make cli_cm_open return NTSTATUS
      s3: Fix an enum/int mixup
      s3: Return "granted" from share_access_check
      s3: Calculate&store the maximum share access mask
      s3: Fix bug 8102
      s3: Remove some unused variables
      s3: make cli_resolve_path return NTSTATUS
      s3: Remove a few uses of cli_errstr
      s3: Fix error logic in posix_open
      s3: Remove cli_errstr from cmd_posix_open
      s3: Fix Coverity ID 2586 -- NO_EFFECT
      s3: Follow the TALLOC_FREE convention in source3
      s3: Remove a use of cli_errstr
      s3-zfsacl: Fix a debug message
      s3: Fix Coverity ID 2587,2588: CHECKED_RETURN
      s3: Avoid leaking http_timestring in print_registry_key
      s3: Fix Coverity ID 2596, REVERSE_INULL
      s3: Fix MIT trusts
      s3: Fix async smb handling
      s3: Fix an error message
      s3: Fix formatting
      s3: Fix a debug message
      s3: cli_close_done->write_andx_done in test_async_echo
      s3: Fix formatting in check_error()
      s3: Avoid calls to cli_dos/nt_error in torture
      s3: In the async echo test, write 65k
      Add wait_for_read_send/recv
      s3: Add smbd_echo_read_send/recv
      s3: Use smbd_echo_read_send in the async echo handler
      s3: Remove unused smbd_echo_reader()
      tevent: Slightly simplify poll_event_loop_poll
      s3: Priorize the async echo responder over the client
      s3: We only need base_name in map_open_params_to_ntcreate
      s3: Make is_executable() available in lib/
      s3: Make map_open_params_to_ntcreate() available in lib/
      s3: Add a fallback for missing open&x support in OS/X Lion
      s3: Fix some nonempty blank lines
      s3: Explicitly pass sconn to remove_deferred_open_message_smb
      s3: Pass sconn explicitly to schedule_deferred_open_message_smb
      s3: Pass sconn explicitly to open_was_deferred
      s3: Pass sconn explicitly to get_deferred_open_message_smb
      s3: Move deferred_open_queue to smbd_server_connection
      s3: Remove unused ERROR_DOS macro
      s3: Remove unused ERROR_FORCE_NT macro
      s3: Fix smb2 handling error returns from aio
      s3: Fix some nonempty blank lines
      s3: Fix some nonempty blank lines
      s3: Fix "ISO C90 forbids mixed declarations and code"
      s3: Fix some nonempty blank lines
      s3: Fix a debug message
      s3: Make srv_enc_ctx static
      s3: Remove an unnecessary include
      s3: Fix some typos -- Simo, please check
      s3: Fix some nonempty blank lines
      s3: Adapt msg_idmap.c to Samba coding conventions
      Fix a c++ warning
      Fix a c++ warning
      Slightly simplify tally_new
      Adapt tally_new to Samba coding conventions
      Adapt bucket_of to Samba coding conventions
      Adapt bucket_min to Samba coding conventions
      Adapt shift_overflows to Samba coding conventions
      Adapt renormalize to Samba coding conventions
      Adapt tally_add to Samba coding conventions
      Adapt tally_num to Samba coding conventions
      Adapt fls64 to Samba coding conventions
      Avoid some // style comments in divlu64
      Adapt divlu64 to Samba coding conventions
      Avoid some // style comments in divls64
      Adapt divls64 to Samba coding conventions
      Adapt tally_mean to Samba coding conventions
      Adapt bucket_range to Samba coding conventions
      Adapt tally_approx_median to Samba coding conventions
      Adapt get_max_bucket to Samba coding conventions
      Adapt tally_histogram to Samba coding conventions
      s3: Fix bug 8360
      s3: Use ZERO_STRUCT where appropriate
      Replace calls to sid_equal with calls to dom_sid_equal
      Remove unused "sid_equal"
      s3: Increase a debug level in ads_find_dc
      s3: Next step to fix MIT trusts
      Fix a typo
      Adapt del_sid_from_array to Samba coding style
      s3: Slightly simplify serverid_exists
      s/event_context/tevent_context/ in smbsock_connect
      s/event_context/tevent_context/ in smbsock_any_connect
      s3: Fix the build on FreeBSD
      s3: Fix an uninitialized variable
      s3: Fix bug 8385
      s3: Fix some nonempty blank lines
      s3: Explicitly pass smb_srv_trans_enc_ctx to srv_enc_ctx
      s3: Pass sconn to valid_smb_header
      s3: Pass smbd_server_connection to is_encrypted_packet
      s3: Pass smbd_server_connection to srv_free_enc_buffer
      s3: Pass smbd_server_connection to srv_decrypt_buffer
      s3: Pass smbd_server_connection to srv_encrypt_buffer
      s3: Pass smbd_server_connection to (unused) server_encryption_shutdown
      s3: Remove a bogus comment
      s3: Use sys_read in fork_domain_child
      s3: Use sys_write in fork_domain_child
      s3: Fix two int/enum mixups
      s3: Fix a winbind race leading to 100% CPU
      s3: Fix getent group if trusted domains are not reachable
      s4: Mark the winsreplication test as knownfail
      smbtorture4: Fix a typo
      s3: Silence some warnings
      s3: Fix bug 8334, do not fork the echo handler for smb2
      Fix bug 8433, segfault in iconv.c
      s3: Reformat msg_idmap.c to match Samba coding
      s3: Fix smbcontrol smbd idmap kill S-1-5-21-...
      s3: Make winbindd_lookup_names static
      talloc: Remove an unused variable
      s3: Fix Coverity ID 2612, UNINIT
      s3: Fix Coverity ID 2611, UNINIT
      s3: Fix a typo
      s3: Fix a debug message
      s3: Fix some nonempty blank lines
      s3: Remove a reference to smbd_server_conn
      s3: Remove a reference to smbd_server_conn
      s3: Remove a reference to smbd_server_conn
      s3: Remove a reference to smbd_server_conn
      s3: Remove a reference to smbd_server_conn
      s3: Disentangle resolve_name() a bit
      s3: Make saf_key() use talloc
      s3: Make saf_join_key() use talloc
      s3: Fix Coverity ID 2614 -- UNINIT
      s3: Fix Coverity ID 2613 -- UNINIT
      s3: Make sharesec optionally use sddl
      s3: Fix some nonempty blank lines
      s3: Trim lines in nfs4_acls.c
      s3: Fix bug 8455 -- Samba PDC is looking up only primary user group
      s3: Fix a cut&paste error
      s3: Trim a debug to 80 chars
      s3: Fix two c++ warnings
      swrap: Fix a c++ warning
      s3: Fix "ISO C90 forbids mixed declarations and code"
      s3: Fix a c++ warning
      s3: Add some const to print_kdc_line
      s3: Add some const to create_local_private_krb5_conf_for_domain
      Fix a typo. This is not an electromagnet pulse daemon I guess :-)
      s3: Fix typos
      Fix some typos
      s3: Further fix for bug 8338
      s3: Fix Coverity ID 2618: UNINIT
      s3: Fix Coverity ID 2619: UNINIT
      s3: Remove the smbd_server_conn ref from parse_dfs_path
      s3: Remove the smbd_server_conn ref from create_conn_struct
      s3: Remove the smbd_server_conn ref from dfs_redirect
      s3: Remove the smbd_server_conn ref from get_referred_path
      s3: Remove the smbd_server_conn ref from setup_dfs_referral
      s3: Remove the smbd_server_conn ref from create_junction
      s3: Slightly simplify print_kdc_line()
      s3: Slightly simplify print_kdc_line()
      s3: Slightly simplify print_kdc_line()
      s3: Fix a C++ warning
      s3: Fix a C++ warning
      s3: Fix an uninitialized variable warning
      s3: Remove an unused variable
      s3: Re-add (), fix a gcc hint
      uid_wrapper: We have talloc_array_length, no need for an explicit length
      s3: Use the uid_wrapper
      Add cldap_multi_netlogon_send/recv
      s3: Before adding KDC's to the krb5.conf, cldap ping them
      s3: Avoid a winbind 100% cpu loop
      s3: Fix some type-punned warnings
      s3: Fix some nonempty blank lines
      s3: Use talloc_tos() in parse_share_modes()
      s3-ctdb: Don't hand out 0 as reqid
      s3-ctdb: Allow ctdb_read_req to read any reqid
      s3-ctdb: Add ctdb_processes_exist
      s3-ctdb: Make ctdbd_process_exists use ctdbd_processes_exist
      s3: Add processes_exist
      s3: Add serverids_exist
      s3: Use serverids_exist in parse_share_modes
      s3-ctdb: Add debug to ctdb_processes_exist
      s3-ctdb: Fix ctdb_read_req
      s3: Remove some leftovers of old ctdb tdb2 code
      s3: Fix a comment
      s3: Fix some nonempty blank lines
      s3: Remove two unused variables
      s3: Avoid a race with the async echo handler
      s3: server_id.pid has turned 64 (bits, that is)
      s3: Fix bug 8371
      s3: Fix wb_next_pwent_fill_done
      s3: Replace delete_token_list by an array
      s3: Move server_info_struct to nmbd
      s3: Fix a valgrind error
      s3:libsmb: Fix a typo
      s3: Add some const
      s3: user_domain is not used in wb_getpwsid
      s3: Fix a crash in group_mapping.ldb->tdb conversion
      Fix Coverity ID 2639: UNUSED_VALUE
      Fix Coverity ID 2638: OVERRUN_STATIC
      s3: Use tevent_req_simple_recv_ntstatus
      s3: Remove some false/superfluous translations
      s3-ctdb: Make use of CTDB_CONTROL_CHECK_SRVIDS
      s3: Attempt to fix the vfs_commit module
      s3: Remove unused dbwrap_record_get_private_data
      s3: Fix some nonblank line endings
      librpc: Add support for struct timespec
      librpc: Add support for struct timeval
      s3: Add open_files.idl
      s3: Move ndr_file_id to LIBNDR_OBJ
      s3: Use autogenerated open_files.idl
      s3: Fix typos
      s3: Fix some blank line endings
      s3: Fix some 64-bit warnings
      s3-dbwrap: Use simpler code for logging keys
      s3-dbwrap: use wrappers where appropriate
      s3-dbwrap: Make dbwrap_fallback_fetch private
      s3-dbwrap: Make dbwrap_fallback_parse_record private
      s3-dbwrap: Avoid an "else" by an early return
      s3-dbwrap: Make dbwrap_fallback_wipe private
      s3-dbwrap: & is not required when taking a function pointer
      s3-dbwrap: Fix a typo
      tevent: tevent_schedule_immediate never fails
      s3: Remove a bunch of calls to procid_self()
      libcli: Remove an unused variable
      s3: Remove a call to procid_self()
      s3: Remove a call to procid_self()
      s3: Remove a call to procid_self()
      s3: Remove a call to procid_self()
      s3: Fix some nonempty blank lines
      s3: Use pid_to_procid
      s3: Convert open_files.idl to tab indents
      s3: Use talloc_tos() in set_sticky_write_time()
      s3: Use talloc_tos() in set_write_time()
      s3-dbwrap: Simplify db_tdb_fetchlock_parse a bit
      s3: Remove an else{} in remove_deferred_open_entry
      s3: Move can_set_delete_on_close to smbd/
      s3: Move can_delete_directory to smbd/, remove shim
      s3: Fix examples/VFS build
      s3: Fix some nonempty blank lines
      s3: Centralize nmbd_messaging_context in nmbd.c
      s3: Make nmbd_messaging_context static
      s3: Pass messaging_context to nmbd/process()
      s3: Remove a call to procid_self()
      s3: Remove a call to procid_self()
      s3: Fix some pointless statics
      s3: Remove nmbd_messaging_context()
      s3: Remove a call to procid_self()
      s3: Remove UNUSED_SHARE_MODE_ENTRY
      s3: Slightly simplify the logic in defer_open
      s3: Fix raw.mux after UNUSED_SHARE_MODE_ENTRY was removed
      s3-dbwrap: Make dbwrap_parse_record return NTSTATUS
      s3-dbwrap: Implement db_ctdb_parse_record in terms of db_ctdb_fetch
      s3-dbwrap: Fix some blank line endings
      s3-dbwrap: For nostalgic reasons, make dbwrap_file.c compile at least
      s3-dbwrap: Rewrite dbwrap_fallback_parse_record based on dbwrap_fetch_locked
      s3-dbwrap: Rewrite dbwrap_fetch in terms of dbwrap_parse_record
      s3-dbwrap: Remove the "fetch" db_context callback
      s3-dbwrap: All relevant backends provide parse_record(). Remove the fallback.
      s3: Fix a typo
      s3: Slightly simplify delay_for_batch_oplocks
      s3: Slightly simplify delay_for_exclusive_oplocks
      Add support for TCP_DEFER_ACCEPT
      s3: Make open_file_ntcreate a bit easier to read
      s3: Make open_file_ntcreate a bit easier to read
      s3: Make open_file_ntcreate a bit easier to read
      s3: Add some const to find_oplock_types
      s3: Fix the clustering build
      tdb: Avoid a malloc/memcpy in _tdb_store
      tdb2: Avoid a malloc/memcpy in _tdb1_store
      s3: Fix some False/NULL hickups
      idl: Avoid c++ style comments
      s3: There's no reason not to at least build winbind on darwin
      lib: Fix NT_STATUS_ALL_SIDS_FILTERED definition
      libreplace: Don't check for standards.h on darwin (Lion)
      tdb: Use tdb_parse_record in tdb_update_hash
      tdb: Use tdb_parse_record in tdb_update_hash
      s3: Fix linking on Lion
      s3: Fix a 64-bit warning
      s3: Fix fn signatures in charset_macosx.c
      lib/charset: Remove an unused variable
      examples: malloc is declared in <stdlib.h>
      Fix the build without kerberos
      talloc: Fix a typo
      talloc: Slightly simplify talloc_unlink
      s3: Factor out smbd_calculate_maximum_allowed_access
      s3: Directly use *p_access_mask in smbd_calculate_maximum_allowed_access
      s3: Remove some else{} branches in smbd_calculate_maximum_allowed_access
      s3: Avoid "file_existed" in smbd_calculate_maximum_allowed_access
      s3: Remove the unused "file_existed" parameter from smbd_calculate_access_mask
      s3: Fix a typo
      s3: Fix a cut&paste error
      s3: Check for the packet size before accessing it
      s3: Fix some nonempty blank lines
      s3: Add a suicide mode to smbd
      s3: Move basic SMB checking to a much earlier point
      libcli/smb: Add smbXcli_conn_samba_suicide
      s3: Add a test excercising the share mode cleanup routine
      s3: Run the CLEANUP1 test
      s3: Remove some redundant code
      s3: Clarify what CLEANUP1 does
      s3: Add a test for proper brlock cleanup
      s3: Run the CLEANUP2 test
      Fix the local-memcache test for 64-bit
      s3: No value change, just use the correct enum value
      s3: Use DELETE_ON_CLOSE instead of unlink
      s3: Avoid a potential alignment requirement issue
      s3: Avoid a potential alignment requirement issue
      s3: Remove an unused label
      s3-aio_pthread: Make "pd_list" static
      s3-aio_pthread: Fix the build
      s3: Split a line with 1 statements
      s3: Replace fill_share_mode_lock()
      s3: Introduce get_share_mode_lock_fresh()
      s3: Put an indirection layer into share_mode_lock
      s3: Move the share_mode_lock handling to its own file
      s3: Fix nested get_share_mode_lock calls
      s3: Fix the talloc hierarchy in fetch_share_mode_unlocked
      s3: ADS support is needed for dns updates
      s3-install: Don't let MANDIR and SRCDIR be overwritten
      RHEL-CTDB: --with-mandir -> --mandir
      RHEL-CTDB: CP*so are no more
      RHEL-CTDB: *.dat files moved
      RHEL-CTDB: *.msg files moved
      s3: Fix bug 8695
      s3: Add a "lock_order" argument to db_open
      s3: Enforce a lock order in dbwrap
      s3: Change locking order between brlock and locking
      Revert "Fix bug #8175 - smbd deadlock."
      s3: Pass down lock_order to db_open_ctdb
      s3: Use lock_order for setting the db priority
      s3-aio-pthread: num threads should be int
      s3: Fix a typo
      s3: Fix the build on FreeBSD8
      s3: Add debug when a message is registered
      s3: Remove a typedef
      s3: Remove a typedef
      Introduce dump_data_file
      s3: Fix a panic in aio_pthread
      s3: Fix unused variable warnings
      s3: Fix "smbcontrol smbd close-share"
      s3: Re-indent an && sequence for better understanding
      s3: Unify stream testing in open_directory
      s3: Simplify an if-statement
      s3: Delete streams on directories
      s3: Add rmdir operation to streams_depot
      s3-vfstest: Fix some nonblank line endings
      s3-vfstest: Fix a typo
      s3-vfstest: Fix some pointless statics
      s3-vfstest: Fix some uninitialized vars
      s3-vfstest: Correctly initialize the connection path
      s3: Test for bug 8733
      s3-vfstest: Fix a double-free on closing a file
      s3-vfstest: Fix an uninitialized read in close
      s3: Simplify streams_depot a bit
      s3: Use ARRAY_SIZE in bsd_attr_list
      s3: Move stream_depot test to script/tests
      s3-vfstest: Add getxattr
      s3-vfstest: Add listxattr
      s3-vfstest: Add setxattr
      s3-vfstest: Add removexattr
      s3-xattr_tdb: Fix listxattr
      s3: Test for faulty xattr_tdb listxattr
      lib/util: Add hex_encode_buf
      s3: FreeBSD does not define sin6_addr.s_addr32
      s3: Increase debug level of basic ctdb packet handling
      tevent: Fix deleting signal events from within themselves
      gensec: Fix a memory corruption in gensec_use_kerberos_mechs
      s3-smb2: Make sure we have a subreq set
      s3-smb2: Use the correct indicator if a request was deferred
      libndr: Add ndr_map_error2errno
      s3: files_struct->mode is only written, remove it
      tevent_signal: Fix a valgrind error
      s3: Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY, bug 8760
      s3: get_share_mode_lock->get_existing_share_mode_lock
      s3: get_share_mode_lock_fresh->get_share_mode_lock
      s3-vfstest: Initialize some more
      s3: Fix some blank line endings
      s3: Remove a pointless else branch
      s3-vfstest: Remove an unused variable
      s3: Fix bug 8567 -- segfault in dom_sid_compare
      s3: Fix typos
      s3: Fix smbd -i
      s3: Add an error msg when a share mode entry is discarded
      s3-vfstest: Initialize some more
      s3-vfstest: Fake smb_requests
      s3-vfstest: Return an error code if cmd failed
      s3: smb_request->vwv can be const
      s3: Fix a DEBUG msg
      s3: Turn some SMB_ASSERTS into proper return
      s3: Simplify smb_splice_chain
      s3: Simplify smb_splice_chain
      s3: Simplify smb_splice_chain
      s3: Simplify smb_splice_chain
      s3: Simplify smb_splice_chain
      s3: Fix a typo
      libcli: Remove a pointless check
      nsswitch: Remove a pointless if-clause
      s3: Use the correct enum values
      s3-configure: Add CFLAGS_APPEND variable
      s3: Remove pointless parentheses
      s3: More fix for smbd -i
      s3: Add a test that makes a chained open break an oplock
      s3: Fix a const warning
      s3: Introduce "req" helper var in reply_lockingX_success
      heimdal: Fix the build on FreeBSD
      s3: Fix "make bin/smbtorture4" in the autoconf build
      s3: Enable statvfs usage on NetBSD
      s3: Test for statfs before statfs64
      examples: Make examples/VFS/Makefile.in FreeBSD-friendly
      s3: Fix some blank line endings
      s3: Fix a bogus if (client_len < 0)
      s3: Fix some && vs & warnings
      s3: Remove "size" param from smb_dump
      s3: Remove "size" param from switch_message
      s3: Use "goto out;" in reply_write_and_X
      s3: Move the drain_socket on error to reply_write_and_X
      s3: Fix a "Invalid (state->nread >= 0)" warning
      s3: Fix some format string warnings
      s3: Move a talloc_strdup out of the main code path
      s3: Remove some superfluous ()
      s3: Replace a SMB_ASSERT with an error return
      s3: asprintf->talloc_asprintf
      s3: Fix a 64-bit warning
      s3: Make sure the andX chains are ended correctly
      s3: Add a new set of andx chain handling routines
      s3: Replace chain_reply
      s3: Remove chain_reply
      s3: Fix the read&x offset within a chain
      s3: Remove "req_wct_ofs()"
      s3: Remove unused smb_request->chain_outbuf
      s3: Remove unused smb_request->done
      s3: Add smb_request_done
      waf: Do not use standards.h on darwin
      s3: Fix blank line endings
      s3: Remove the separate server_id arg to notify_init
      s3: Replace some callers of cluster_id_equal
      s3: properly free the notify_onelevel record
      s3: Fix lock ordering in notify_add
      s3: Use talloc_tos() in notify_send()
      s3-dbwrap: Move "lock_order" initialization to db_open_xx
      s3-notify: Simplify if-expressions
      s3-notify: Lift "/." handling up one level
      s3: Pass "path" through vfs_notify_watch
      s3: Pass "conn" to notify_add()
      s3: Pass "conn" to sys_notify_watch()
      s3: Remove "conn" from sys_notify_context
      s3: Remove "conn" param from sys_notify_context_create
      s3: Remove "conn" param from notify_init()
      s3: Move the notify_ctx to the smbd_server_connection
      s3: rename "len"->"next", according to wireshark
      s3-libsmb: Fix parsing a notify response
      s3: Add FILE_NOTIFY_CHANGE_ALL #define
      s3: Add sync cli_notify
      s3: Add "notify" cmd to smbclient
      s3: Remove an unused structure field
      s3: Fix smbd -i
      s3: Remove the sys_notify dependency from notify_internal
      lib/async_req: Retry read_packet with read(2)
      s3: Pass "filter" instead of "notify_entry" to inotify_map
      s3: Rename a variable in inotify_watch for clarity
      s3: Fix a typo
      s3: Pass filters explicitly through vfs notify watch
      s3: Fix a valgrind error
      s3: Avoid a crash with debug level 10
      s3-aio-fork: Fix an alignment warning on OS/X
      s3-aio-fork: Fix aio_suspend event hierarchy
      s3-aio-fork: Fix a segfault in vfs_aio_fork
      s3: Notifies should never time out
      s3: Enhance the dbwrap needed x attempts msg
      s3: Compile fix for dbwrap_file.c
      s3: Move the aio signal init to the vfs module
      s3: Initialize aio_pending_size from aio_pthread
      s3: Initialize aio_pending_size from aio_pthread
      s3: Fix the pthreadpool build on OS/X
      tevent: Fix a typo
      libreplace: We have a poll replacement based on select
      s3: Use talloc_get_size instead of strlen
      s3: Fix a segfault with debug level 3 on Solaris
      s3: Fix a typo
      s3: Fix smbclient notify against Windows
      tdb-compat: Add tdb_chainlock_nonblock
      s3: Return CTDB_PATH from lp_ctdbd_socket()
      s3: Add infrastructure for background jobs
      s3: Increase debuglevel for unknown child msgs
      s3: Open up 3 levels of dbwrap_lock_order
      s3: Add dbwrap_cache
      s3: Add dbwrap_try_fetch_locked
      s3: Add a second ctdb connect library
      s3: Add messaging_tdb_event()
      s3: Add msg_channel
      s3: Introduce ctdb_messaging_send_blob
      s3: Start a list of ctdb srvid assigments
      s3: Implement tevent_barrier
      s3: Make messaging_ctdbd_connection available in non-clustered mode
      s3: Make ctdbd_messaging_send_blob available in non-clustered mode
      s3: Make torture_nprocs globally available
      s3: Add two notify benchmark tests
      s3: New notify implementation
      s3: Add "notify-cleanup" to smbcontrol
      s3: Add smbstatus -N to output the notify db
      Talloc doc: Fix a cut&paste error
      libsmb: Actually use an introduced variable
      s4-torture: Make notify a suite
      s4-torture: Separate out the notify tcon subtest
      s4-torture: Separate out the notify dir subtest
      s4-torture: Separate out the notify mask subtest
      s4-torture: Separate out the notify recursive subtest
      s4-torture: Separate out the notify mask_change subtest
      s4-torture: Separate out the notify file subtest
      s4-torture: Separate out the notify tdis subtest
      s4-torture: Separate out the notify exit subtest
      s4-torture: Separate out the notify ulogoff subtest
      s4-torture: Separate out the notify tcp_dis subtest
      s4-torture: Separate out the notify double subtest
      s4-torture: Separate out the notify tree subtest
      s4-torture: Separate out the notify overflow subtest
      s4-torture: Separate out the notify basedir subtest
      s4-torture: Separate out the notify alignment subtest
      s4-torture: notify all is empty now
      s3-dbwrap: Fix an unused var warning
      s4-torture: Use 2 client connections for raw.notify.recursive
      s4-torture: Use 2 client connections for raw.notify.tree
      s4-torture: Use 2 client connections for raw.notify.mask
      s4-torture: Fix the raw.notify mask test
      s3: Fix a "ISO C90 forbids mixed declarations and code"
      s3: Fix Coverity ID 2749: REVERSE_INULL
      s3: Attempt to fix Coverity ID 2748: INTEGER_OVERFLOW
      s3: Fix Coverity ID 2747: FORWARD_NULL
      s3: Fix Coverity ID 2745 and 2746: FORWARD_NULL
      s3: Fix Coverity ID 2744: CHECKED_RETURN
      s3: Fix Coverity ID 2743: CHECKED_RETURN
      librpc: Make finding newest pidl file more portable
      s3: Fix Coverity ID 2682: NULL_RETURNS
      s3: Fix the build on FreeBSD
      s3: Fix Coverity ID 2686 -- RESOURCE_LEAK
      s3: Fix Coverity ID 2727 to 2740 -- UNINIT
      s3: Fix Coverity ID 2682 -- NULL_RETURNS
      s3: Remove an unused variable
      s3: Fix msg_channel in the cluster case
      s3-dbwrap: Add dbwrap_db_id
      s3-dbwrap: Add "db_context" to "db_record"
      s3-dbwrap: Add dbwrap_set_stored_callback
      s3-dbwrap: Add dbwrap_record_watch_send/recv
      s3-dbwrap: Add "listwatchers" to dbwrap_tool
      s3-g_lock: Use dbwrap_record_watch_send/recv
      s3: Remove two unused variables
      s3: Initialize "stored_callback" in dbwrap_cache
      s3: Implement db_id for dbwrap_cache
      talloc: Fix copy&paste errors
      s3: Fix Coverity ID 2751: REVERSE_INULL
      s3: Attempt to fix the build without kerberos
      s3: Introduce variable "indyniov" for easier reading
      s3: Fix a typo
      s3: Simplify check_reduced_name a bit
      libcli: Use data_blob_null
      s3: Remove an unused variable
      s3: Remove code TALLOC_FREE already does
      s3: oplock_timeout is a talloc child of fsp
      s3: Fix bug 8904 -- wbinfo --lookup-sids "" crashes winbind
      s3: Remove a SMB_ASSERT
      s3: Fix a typo
      s3: remove some unused code
      s4:torture: add a check for talloc success in test_session_reauth
      s3: In mkdir_internal, don't retrieve parent_dir from check_parent_access
      s3: Remove an unused parameter from check_parent_access()
      s3: Remove an unused extern declaration
      s3: Use hex_encode_buf
      s3: Use hex_encode_buf
      s3: Fix Coverity ID 242706 Dereference before null check
      s3: Fix Coverity ID 242705 Dereference before null check
      s3: Fix Coverity ID 242704 Dereference before null check
      s3: Fix Coverity ID 242703 Dereference before null check
      s3: Fix Coverity ID 242702 Dereference before null check
      s3: Fix Coverity ID 242701 Dereference before null check
      s3: Fix Coverity ID 242700 Dereference before null check
      s3: Fix Coverity ID 242699 Dereference before null check
      s3: Fix Coverity ID 242698 Dereference before null check
      s3: Fix Coverity ID 242697 Dereference before null check
      s3: Fix Coverity ID 242696 Dereference before null check
      s3: Fix Coverity ID 242695 Dereference before null check
      s3: Fix Coverity ID 242694 Dereference before null check
      s3: Fix Coverity ID 242693 Dereference before null check
      s3: Fix Coverity ID 242692 Dereference before null check
      s3: Fix Coverity ID 242691 Dereference before null check
      s3: Fix Coverity ID 242184 Dereference after null check
      s3: Fix Coverity ID 242754 Dereference null return value
      s3: Fix Coverity ID 242726 Uninitialized scalar variable
      s3: Fix Coverity ID 242725 Uninitialized scalar variable
      s3: Fix Coverity ID 242724 Uninitialized scalar variable
      s3: Fix Coverity ID 241961 Uninitialized scalar variable
      s3: Fix Coverity ID 242723 Uninitialized scalar variable
      s3: Fix Coverity ID 242722 Uninitialized scalar variable
      s3: Fix Coverity ID 242721 Uninitialized scalar variable
      s3: Fix Coverity ID 242720 Uninitialized scalar variable
      s3: Fix Coverity ID 242719 Uninitialized scalar variable
      s3: Fix Coverity ID 242718 Uninitialized scalar variable
      s3: Fix Coverity ID 242717 Uninitialized scalar variable
      s3: Fix Coverity ID 242716 Uninitialized scalar variable
      s3: Fix Coverity ID 242715 Uninitialized scalar variable
      s3: Fix Coverity ID 242714 Uninitialized scalar variable
      s3: Make SMB_QUERY_FILE_UNIX_BASIC's devno work for files
      s3: Fix Coverity ID 241320 Array compared against 0
      s3: talloc_zero is not needed for structs we ndr_pull into
      s3: Fix a likely cut&paste error
      s3: Remove some unused code
      dbwrap: Fix Coverity ID 242750 Incorrect sizeof expression
      s3: Fix Coverity ID 242710 Untrusted pointer read
      wbinfo: Fix Coverity ID 242685 Resource leak
      wbinfo: Fix Coverity ID 242684 Resource leak
      libwbclient: Fix an invalid free()
      s3: Add "share_mode_stale_server"
      s3: Check for serverid_exists in notify_deferred_opens
      s3: Check for serverid_exists in open_mode_check
      s3: Check for serverid_exists in smb_posix_unlink
      s3: Do not check the PIDs is parse_share_modes
      s3: Check for serverid_exists in rename_share_filename
      s3: Test whether get_share_mode_lock cleans up stale processes
      s3: Check for serverid_exists in find_oplock_types
      s3: Be less picky on stale share mode entries
      s3: Check for serverid_exists in close_remove_share_mode
      s3: Check for serverid_exists in close_directory
      s3: Revert the serverid changes, they need more work
      s4:torture: Add raw.session.reauth2 test
      s3: Fix vfs_xattr_tdb.c
      s3: Add "share_mode_stale_pid"
      s3: Check for serverid_exists in notify_deferred_opens
      s3: Check for serverid_exists in open_mode_check
      s3: Check for serverid_exists in smb_posix_unlink
      s3: Check for serverid_exists in rename_share_filename
      s3: Check for serverid_exists in find_oplock_types
      s3: Be less picky on stale share mode entries
      s3: Check for serverid_exists in close_remove_share_mode
      s3: Check for serverid_exists in close_directory
      s3: Do not check the PIDs is parse_share_modes
      s3: Test whether get_share_mode_lock cleans up stale processes
      s4-dns: Add some NULL checks to create_response_rr
      s4-dns: Use talloc_asprintf_append_buffer in create_response_rr
      s4-dns: Fix an unlikely potential memleak
      s4-dns: Remove some break; statements
      librpc: Fix some typos
      s4-dns: Fix some typos
      s4-dns: Add debug output for unmappable WERROR to DNS errcode
      s4-dns: Create a proper talloc hierarchy in create_response_rr
      lib: add tevent_req_poll_werror
      s4-dns: Make ask_forwarder async
      s4-dns: Make dns_server_process_query async
      s4-dns: Remove unused sync ask_forwarder wrapper
      s4-dns: Make dns_process_send asyn
      s4-dns: Remove sync dns_server_process_query
      s4-dns: Make the UDP dns server async
      s4-dns: Make the TCP dns server async
      s4-dns: Remove sync dns_process
      librpc: Fix an incompatible pointer type warning
      s3: Fix some 64-bit warnings
      s3: Avoid a lot of calls to serverid_exists()
      s3: Same fix as 8576256, this time for fgetxattr
      s3: Slightly simplify close_remove_share_mode
      s3: Simplify get_delete_on_close_token slightly
      s3: Simplify get_delete_on_close_token more
      s3: Make close_remove_share_mode a bit more readable
      s3: Do an early return in close_remove_share_mode
      s3: Remove unnecessary ()
      s3: Assigning ?True:False to a bool is a bit pointless
      s3: Replace an if with a boolean short circuit
      s3: Remove unnecessary ()
      s3: Assigning ?True:False to a bool is a bit pointless
      s3: Replace an if with a boolean short circuit
      s3: Fix Coverity ID 709049 Dereference before null check
      s3: Fix Coverity ID 703869 Logically dead code
      s3: Fix Coverity ID 703871 Unused pointer value
      s3: Save errno around a TALLOC_FREE
      s3: Fix Coverity ID 703870 Uninitialized scalar variable
      s3: Make vfswrap_audit_file static
      s3-libsmbclient: Make SMBC_call_auth_fn static
      S3: Add ntlmssp_set_password_hash
      s3: Add CLI_FULL_CONNECTION_USE_NT_HASH
      s3-libsmbclient: Add OptionUseNTHash
      s3: Add user_auth_info->use_pw_nt_hash
      s3: Add cli_state->pw_nt_hash
      s3: Add --pw-nt-hash to popt_common_credentials
      s3: Make --pw-nt-hash useable in smbclient
      s3: Use talloc_tos() in more places in dbwrap_util
      s3: Fix a comment
      s3: Simplify tdb_data_is_cstr a bit
      dbwrap: dbwrap_fetch_int32->dbwrap_fetch_int32_bystring
      dbwrap: dbwrap_store_int32->dbwrap_store_int32_bystring
      dbwrap: dbwrap_fetch_uint32->dbwrap_fetch_uint32_bystring
      dbwrap: dbwrap_store_uint32->dbwrap_store_uint32_bystring
      dbwrap: dbwrap_change_uint32_atomic->dbwrap_change_uint32_atomic_bystring
      dbwrap: dbwrap_trans_change_uint32_atomic->dbwrap_trans_change_uint32_atomic_bystring
      dbwrap: dbwrap_change_int32_atomic->dbwrap_change_int32_atomic_bystring
      dbwrap: dbwrap_trans_change_int32_atomic->dbwrap_trans_change_int32_atomic_bystring
      dbwrap: dbwrap_trans_store_int32->dbwrap_trans_store_int32_bystring
      dbwrap: dbwrap_trans_store_uint32->dbwrap_trans_store_uint32_bystring
      dbwrap: Remove an unnecessary ZERO_STRUCT
      s3: Slightly simplify grant_fsp_oplock_type
      waf: Fix make etags
      s3: Add a dummy implementation for the pthreadpool API
      s3: We can depend on pthreadpool now
      idmap-hash: Fix Coverity ID 709119 Unused pointer value
      idmap-hash: Adapt mapfile_read_line to README.Coding
      idmap-hash: Fix Coverity 709118 Dereference before null check
      idmap-hash: Fix Coverity ID 709117 Dereference before null check
      idmap-hash: Attempt to fix Coverity ID 709116 Overflowed array index write
      s3: Remove a user of procid_is_me
      s3: Remove a user of procid_is_me
      s3: Fix const warnings
      s3: Use string_term_tdb_data where appropriate
      s3: Remove an unnecessary ()
      dbwrap: Add dbwrap_change_int32_atomic
      dbwrap: Add dbwrap_fetch_int32
      s3: Use dbwrap_util for windows_lock_ref_count
      s3: Make reduce_windows_lock_ref_count static
      s3: Remove reduce_windows_lock_ref_count, used only once
      dbwrap: Convert fetch_int32 to dbwrap_parse_record
      s3: Give machine password changes 10 minutes of time
      s3-vfs_gpfs: Fix bug #9003, posix acl on gpfs
      s3: Avoid a call to server_event_context()
      s3: Fix a typo
      s3: Restore async i/o with the "native" AIO interface
      s3: Fix compilation of pthreadpool_sync.c on platforms without pthread.h
      s3: Fix Coverity ID 709218 Uninitialized pointer read
      s3: Fix Coverity ID 709217 Dereference after null check
      s3: Fix Coverity ID 709470 Uninitialized scalar variable
      s3: Factor out "mark_file_modified"
      s3: Make us survive base-delaywrite with aio enabled
      s3: Make us survive smb2.lock.rw-shared with aio enabled
      s3-linux-aio: Fix error handling
      libasys
      s3-vfs: async pwrite
      s3-vfs: async pread
      s3: Use SMB_VFS_PREAD_SEND in schedule_aio_read_and_X
      s3: Use SMB_VFS_PWRITE_SEND in schedule_aio_write_and_X
      s3: Use SMB_VFS_PREAD_SEND in schedule_smb2_aio_read
      s3: Use SMB_VFS_PWRITE_SEND in schedule_smb2_aio_write
      s3: Properly handle shutdown with the _send/_recv based aio
      s3: Remove the unused completion handling from aio.c
      s3:vfs_aio_pthread: Convert to libasys
      s3: Make smbd/aio.c not depend on aio.h anymore
      s3: Add vfs_aio_posix
      s3-aio_fork: Convert create_aio_child from NTSTATUS to errno
      s3-aio_fork: Convert get_idle_child from NTSTATUS to errno
      s3: Convert aio_fork to pread/pwrite_send/recv
      s3: Convert aio_linux to pread/pwrite_send/recv
      s3-vfs: Add pread_send/recv to vfs modules
      s3-vfs: Add pwrite_send/recv to vfs modules
      s3-aio: Remove unused VFS functions and more
      s3: Move the aio_pthread read/write functionality to vfs_default
      s3: Make us survive base-delaywrite with aio enabled
      s3-libasys: Add asys_fsync() implementation
      s3: Fix the build
      s3-vfs: async fsync
      s3: Add a _nosync version of smb2_write_complete
      s3-aio: Make the strict sync after write async
      s3: Add aio_fsync to the aio_posix module
      s3-aio-fork: make "read_cmd" an enum
      s3: Add aio_fsync to the aio_fork module
      s3: Add aio_fsync to the aio_linux module
      config: The AIO engine is indepent of HAVE_AIO now
      s3: Compile with pthreadpool by default
      s3: Slightly simplify reply_close()
      s3: Add tevent_wait_send/recv
      s3-smb1: Postpone close_file until all aio is handled
      s3-smb2: Postpone close_file until all aio is handled
      s3-aio: Panic if we try to close a fsp with outstanding aio requests
      s3: Make request_timed_out() static
      tevent: Refer to the correct header in testsuite.c
      s3: Fix Coverity ID 710827 Resource leak
      s3: Fix Coverity ID 710818 Resource leak
      s3: Fix Coverity ID 710803 Resource leak
      s3: Fix Coverity ID 710791 Resource leak
      s3-ctdb: Add debugs to ctdb_serverids_exist
      s3-ctdb: Fix ctdb_serverids_exist for target nodes that died
      vfs-mediaharmony: Remove some unnecessary return; statements
      s3: Fix a crash in reply_lockingX_error
      torture: Reproducer for 64c0367
      s3-g_lock: Properly free "rec" on retry to avoid deadlock
      s3-autoconf: Fix deps for dbwrap_torture
      s3-msg: Rename msg_channel_init_destructor
      s3-msg: For msg_channel, correct the talloc hierarchy
      s3-g_lock: Make g_lock_lock more robust
      tevent_poll: Decouple poll_ev->fds handling from adding/removing fds
      lib/tevent: Add a thread-safe tevent backend
      tevent: Add threaded poll_mt testcase
      s3-libsmb: Add a python wrapper
      s3-libsmb: Add a simple test for python bindings
      s4: Fix returns in py_check_dcerpc_type
      s3: Merge vfs_gpfs_hsm_notify into vfs_gpfs.c
      s3: Remove the gpfs_hsm_notify module
      s3-vfs: Fix calls of lp_parm_talloc_string
      s3: Adapt the tsmsm module to the new aio routines
      s4-torture: Test for #9058
      s3: Fix a few "warning: ISO C90 forbids mixed declarations and code"
      s3: Remove a shadowing variable declaration
      s3: Fix warnings in aio_fork.c
      s3: Make an if statement a bit easier to read
      s3: Fix memleaks in pylibsmb.c
      s3: Fix some nonempty blank lines
      s3: Make "open_match_attributes" static
      s3: Fix a comment
      s3: Slightly simplify open_file_ntcreate
      s3: Factor out calculation of clear_ads
      s3: Factor out disposition_to_open_flags
      s3: Fix a typo
      s3: Put a comment into the right place
      s3: Slightly simplify fd_open_atomic
      s3: Fix 64-bit warnings in vfs_media_harmony
      s3: Fix a panic when shutting down
      s3: delete requests are not special
      smbtorture: Test that delete requests are not special
      s3: Run raw.oplock
      s3: Fix some nonempty line endings
      s3: Use SBVAL in put_long_date_timespec
      s3: Fix idmap_hash
      auth: Fix some nonempty blank lines
      s3-pylibsmb: Factor out py_tevent_cond_wait
      s3: Fix some nonempty line endings
      s3: Add "readdir" to pylibsmb
      s3: Convert cli_oplock_break_waiter to smbXcli
      s3-pylibsmb: Reduce the number of warnings
      s3-pylibsmb: Factor out py_tevent_cond_signal
      s3-pylibsmb: Add get_oplock_break
      s3-pylibsmb: Use Py_RETURN_NONE
      s3: Fix indentation of if-expressions
      s4-torture: Fix some nonemtpy blank lines
      lib: Make async_sock includable on its own
      s3: Make is_stat_open() a bit more readable
      s3: Slightly simplify is_stat_open
      pysmbd: Fix cut&paste errors
      s3: Fix a typo
      s3: Fix some blank line endings
      s3: Slightly simplify smbd_smb2_request_process_negprot
      s3: Factor out calculate_open_access_flags
      s3: Slightly simplify calculate_open_access_flags
      s3: Slightly simplify calculate_open_access_flags
      Coding: Add comment disproving control-flow changing macros
      s3: Slightly simplify open_file()
      s4: Fix a -Wunused-value warning
      s3: Fix rejecting mkdir on read-only shares
      s3: For read-only shares, filter out write bits from conn->access_mask
      s3: Fix some blank line endings
      s3: Copy share mode handling from before to after open_file
      s3: Fix fcb_or_dos_open after logic change
      s3: Remove share mode handling before we open the file
      s3: No code change, just re-indent
      s3: Close the now opened file descriptor in error paths
      s3: Remove a SMB_ASSERT
      s3: Fix opening a file under kernel oplocks
      tdb: Fix a typo
      tdb: Make tdb robust against improper CLEAR_IF_FIRST restart
      s3: Add two tests a CLEAR_IF_FIRST crash
      s3: Pass down smb_filename to smbacl4_fill_ace4
      s3: Remove some calls to procid_self
      s3: Fix a typo
      s3: Make winbindd_register_handlers static
      s3: Add "msg_ctx" param to winbindd_register_handlers()
      s3: Remove a call to procid_self()
      s3: Use talloc_stackframe in token_contains_name_in_list
      s3: Fix some blank line endings
      s3: Fix some nonempty line endings
      s3: Use file_id_string in file_id_string_tos
      dsdb: Simplify DsCrackNameOneFilter a bit
      lib/util: Make "struct bitmap" abstract
      lib/util: Simplify bitmap.c a bit
      Remove two unused variables
      s3: Fix some blank line endings
      s3: Fix Coverity ID 741407 -- resource leak
      s3: Do not free a string where we should not
      s3: Do not free a string where we should not
      s3: Fix bug 9428 -- inotify detection broken
      s3: Avoid some transaction_commit on gencache.tdb
      s3: Open gencache_notrans with TDB_NOSYNC
      s3: Use dbwrap_parse_record in fetch_share_mode_unlocked
      dbwrap: Use dbwrap_parse_record in dbwrap_fetch_uint32_bystring
      s3: test dbwrap_ctdb
      s3: Remove header==NULL code from db_ctdb_marshall_record
      s3: Slightly simplify db_ctdb_transaction_commit
      s3: Add db_ctdb_ltdb_parse
      s3: Use db_ctdb_ltdb_parse in db_ctdb_ltdb_fetch
      s3: Use db_ctdb_ltdb_parse in db_ctdb_fetch_db_seqnum_from_db
      s3: Slightly simplify db_ctdb_marshall_loop_next
      s3: Factor out db_ctdb_marshall_loop_next_key from db_ctdb_marshall_loop_next
      s3: reduce db_ctdb_marshall_loop_next to specialized db_ctdb_marshall_buf_parse
      s3: Factor out parse_newest_in_marshall_buffer from pull_newest_from_marshall_buffer
      s3: Avoid db_ctdb_fetch for persistent databases
      s3: Remove unused code for fetching persistent ctdb records
      s3: Factor out db_ctdb_can_use_local_hdr from db_ctdb_can_use_local_copy
      s3: Directly parse local existing records in db_ctdb_parse_record
      s3: Remove db_ctdb_fetch
      dbwrap: Use talloc_zero in db_open_cache
      dbwrap: Use talloc_zero in db_open_rbt
      dbwrap: No need to NULL out a talloc_zero'ed structure element
      dbwrap: Remove an unnecessary if-statement
      dbwrap: Do not rely on dbwrap_record_get_value to return a talloc object
      Fix Bug 9422 - large read requests cause server to issue malformed reply
      s3: Fix clear_if_first for the async echo handler
      s3: Fix a typo in a debug message
      tdb: Fix a missing CONVERT
      tdb: Fix a typo
      tdb: Fix a comment
      tdb: Fix blank line endings
      tdb: Slightly simplify tdb_lock_list
      tdb: Simplify logic in tdb_lock_list slightly
      tdb: Factor out tdb_lock_covered_by_allrecord_lock from tdb_lock_list
      tdb: Use tdb_lock_covered_by_allrecord_lock in tdb_unlock
      tdb: Fix a typo
      tdb: Fix a typo
      tdb: Make tdb_new_database() follow a more conventional style
      tdb: Add a comment explaining the "check"
      tdb: Fix \n in error messages
      tdb: Fix undefined prototype warnings
      smbd: Fix bug 9549 -- Memleak in the async echo handler
      smbd: Fix a typo
      smbd: Simplify an if-expression
      smbd: Remove some ()
      dbwrap: Use INCOMPATIBLE_HASH for dbwrap_watchers.tdb
      winbind: Fix error check in unpack_tdc_domains
      winbind: Fix some missing NULL checks
      samr: Split up an assignment from an if condition
      samr: Make use of posix_openpt
      Fix bug 9548: Correctly detect O_DIRECT
      configure: Fix bug 9546, aio_suspend detection on FreeBSD
      smbd: Always compile vfs_commit
      smbd: Fix bug 9544, part 1
      smbd: Fix bug 9544, part 2
      test: dbwrap_tool requires --persistent for the registry now
      tevent: Fix a comment
      winbind: Use standard tevent_context_init
      winbind: Introduce "struct child_handler_state"
      winbind: Handle child requests in a tevent_fd
      smbtorture: Satisfy a linker dependency
      smbd: Fix a NULL vs false return error
      Avoid a very small memleak on talloc_tos()
      smbcontrol: Fix the build with libunwind
      smbcontrol: Fix undefined serverid_traverse_read warning
      smbd: Fix a typo
      smbd: Fix a typo
      tevent: Fix a comment typo
      tevent_poll: Fix a crash in the poll backend
      tevent_poll: Re-order routines
      tevent_poll: Use the poll_event_context_destructor always
      tevent_poll: NULL out fde->event_ctx for "fresh" poll fdes
      tevent_poll: Avoid a crash in poll_fresh_fde_destructor
      tevent_poll: Avoid a crash in poll_event_set_fd_flags
      Fix typo in warning message
      tdb: Pass argument "header" to tdb_new_database
      tdb: Pass argument "header" to check_header_hash
      tdb: Remove "header" from tdb_context
      torture: We use transactions for CLEAR_IF_FIRST db
      dbwrap: Prevent transactions on non-persistent dbs
      winbind: Fix an incompatible pointer type warning
      tdb: Fix a typo
      tdb: Enhance lock tracking a bit
      tdb: Use tdb_null in freelistcheck
      tdb: Simplify fcntl_lock() a bit
      tdb: Factor out the retry loop from tdb_allrecord_upgrade
      tdb: Don't segfault if tdb_open_ex for check failed
      tdb: Make tdb_release_transaction_locks use tdb_allrecord_unlock
      tdb: Slightly simplify transaction_write
      tdb: Slightly simplify tdb_expand_file
      smbd: Fix a typo
      wkssvc: Fix bug 9727, NULL pointer dereference
      smbd: Tune "dir" a bit.
      dbwrap: Use tdb_null in db_ctdb_delete
      smbd: Avoid sending 0-sized keys to dbwrap
      tdb: Little format change
      tdb: Fix blank line endings
      ctdb-conn: Add ctdbd_parse
      dbwrap-ctdb: Use ctdbd_parse in db_ctdb_parse_record
      ctdb-conn: remove ctdbd_fetch
      dbwrap-ctdb: Avoid a talloc_stackframe()
      smbd: Avoid some talloc_realloc in notify_internal
      smbd: Slightly simplify notify_trigger
      smbd: Slightly simplify notify_trigger
      smbd: We don't collect our own vnn anymore
      smbd: Remove an optimization that became unnecessary
      dbwrap: Add a comment explaining a restriction
      libsmbclient: Fix cli_session_setup_guest_send
      tevent: Only set poll_ev->delete=false if it was true
      doc: Document performance impact of "hide unxx" parameters
      pylibsmb: Avoid a segfault if no credentials are passed to libsmb.Conn()
      winbindd: Avoid a fd leak when we can not fork
      vfs_fake_perms: Slightly streamline code
      vfs_fake_perms: Slightly streamline code
      vfs_fake_perms: Fix bug 9775, segfault for "artificial" conn_structs
      libsmbclient: Fix a leak on talloc_tos()
      libsmbclient: Avoid a data copy
      libsmbclient: Factor out cli_session_setup_get_principal
      libsmbclient: Slightly simplify cli_session_setup_spnego
      libsmbclient: Factor out cli_session_setup_get_account
      libsmbclient: Add async cli_session_setup_ntlmssp
      libsmbclient: Remove unused cli_session_setup_ntlmssp()
      libsmbclient: Add async cli_session_setup
      libsmbclient: Remove unused sync wrappers
      libsmbclient: Make cli_connect_sock async
      libsmbclient: Avoid a talloc_strdup in cli_connect_nb
      libsmbclient: Add async cli_connect_nb
      libsmbclient: Remove unused cli_connect_sock
      libsmbclient: Make cli_start_connection async
      libsmbclient: Use tevent_req_poll_ntstatus in cli_tcon_andx
      libsmbclient: Streamline cli_tcon_andx a bit
      libsmbclient: Use tevent_req_poll_ntstatus in cli_openx
      libsmbclient: Streamline cli_openx a bit
      libsmbclient: Make cli_raw_tcon async
      libsmbclient: Make cli_tree_connect async
      libsmbclient: Make cli_full_connection async
      libsmbclient: Use async cli_full_connection in python connection setup
      smbd: Fix an error return in change_dir_owner_to_parent
      lib: Add cp_smb_filename
      lib: Convert copy_smb_filename to use cp_smb_filename
      vfs: Convert unlink_acl_tdb to cp_smb_filename
      vfs: Convert posix_eadb_unlink to cp_smb_filename
      vfs: Convert shadow_copy2_unlink to cp_smb_filename
      vfs: Convert shadow_copy2_ntimes to cp_smb_filename
      vfs: Convert xattr_tdb_unlink to cp_smb_filename
      vfs: Convert streams_xattr_unlink to cp_smb_filename
      vfs: Convert recycle_file_exists to cp_smb_filename
      vfs: Convert recycle_get_file_size to cp_smb_filename
      vfs: Convert recycle_do_touch to cp_smb_filename
      vfs: Convert catia_rename to cp_smb_filename
      vfs: Convert catia_unlink to cp_smb_filename
      vfs: Convert catia_ntimes to cp_smb_filename
      vfs: Convert alloc_get_client_smb_fname to cp_smb_filename
      vfs: Convert cap_rename to cp_smb_filename
      vfs: Convert cap_unlink to cp_smb_filename
      vfs: Convert cap_ntimes to cp_smb_filename
      smbd: Convert smbd_smb2_close to cp_smb_filename
      smbd: Convert smbd_dirptr_get_entry to cp_smb_filename
      smbd: Convert rename_internals_fsp to cp_smb_filename
      smbd: Convert copy_file to cp_smb_filename
      smbd: Convert fsp_set_smb_fname to cp_smb_filename
      smbd: Convert call_trans2qfilepathinfo to cp_smb_filename
      smbd: Convert smb_set_file_size to cp_smb_filename
      smbd: Convert smb_set_file_unix_basic to cp_smb_filename
      smbd: Convert call_trans2setfilepathinfo to cp_smb_filename
      smbd: Make copy_smb_filename static
      lib: Add synthetic_smb_fname
      vfs: Convert afsacl_get_nt_acl to synthetic_smb_fname
      vfs: Convert hpuxacl_sys_acl_set_file to synthetic_smb_fname
      lib: Make create_synthetic_smb_fname use synthetic_smb_fname
      lib: Remove unused copy_smb_filename
      lib: Add synthetic_smb_fname_split
      lib: Make create_synthetic_smb_fname_split use synthetic_smb_fname_split
      vfs: Convert xattr_tdb_get_file_id to synthetic_smb_fname
      vfs: Convert streams_xattr_fstat to synthetic_smb_fname
      vfs: Convert streams_xattr_open to synthetic_smb_fname
      vfs: Convert streams_xattr_streaminfo to synthetic_smb_fname
      vfs: Convert recycle_unlink to synthetic_smb_fname
      vfs: Convert gpfsacl_emu_chmod to synthetic_smb_fname
      vfs: Convert vfs_gpfs_chmod to synthetic_smb_fname
      vfs: Convert fake_acls_sys_acl_delete_def_file to synthetic_smb_fname
      vfs: Convert stream_dir to synthetic_smb_fname
      vfs: Convert stream_smb_fname to synthetic_smb_fname
      vfs: Convert streams_depot_open to synthetic_smb_fname
      vfs: Convert streams_depot_unlink to synthetic_smb_fname
      vfs: Convert streams_depot_rmdir to synthetic_smb_fname
      vfs: Convert collect_one_stream to synthetic_smb_fname
      vfs: Convert streams_depot_streaminfo to synthetic_smb_fname
      vfs: Convert vfswrap_fs_capabilities to synthetic_smb_fname
      vfs: Convert non_posix_sys_acl_blob_get_file_helper to synthetic_smb_fname
      smbd: Convert vfs_default_durable_reconnect to synthetic_smb_fname
      smbd: Convert vfs_GetWd to synthetic_smb_fname
      smbd: Convert check_reduced_name_with_privilege to synthetic_smb_fname
      smbd: Convert vfs_stat_smb_fname to synthetic_smb_fname
      smbd: Convert vfs_lstat_smb_fname to synthetic_smb_fname
      smbd: Convert filename_convert_internal to synthetic_smb_fname
      pysmbd: Convert set_nt_acl_conn to synthetic_smb_fname
      pysmbd: Convert py_smbd_unlink to synthetic_smb_fname
      smbd: Convert posix_sys_acl_blob_get_file to synthetic_smb_fname
      smbd: Convert call_trans2qfilepathinfo to synthetic_smb_fname
      smbd: Convert smb_set_file_dosmode to synthetic_smb_fname
      smbd: Convert smb2_file_rename_information to synthetic_smb_fname
      smbd: Convert smb_file_rename_information to synthetic_smb_fname
      smbd: Convert smb_file_rename_information to synthetic_smb_fname
      smbd: Convert open_np_file to synthetic_smb_fname
      smbd: Convert open_dir_with_privilege to synthetic_smb_fname
      smbd: Convert file_new to synthetic_smb_fname
      smbd: Convert can_delete_file_in_directory to synthetic_smb_fname
      smbd: Convert create_msdfs_link to synthetic_smb_fname
      smbd: Convert remove_msdfs_link to synthetic_smb_fname
      smbd: Convert rename_internals_fsp to synthetic_smb_fname
      smbd: Convert make_connection_snum to synthetic_smb_fname
      smbd: Convert change_file_owner_to_parent to synthetic_smb_fname
      smbd: Convert change_dir_owner_to_parent to synthetic_smb_fname
      smbd: Convert change_dir_owner_to_parent to synthetic_smb_fname
      smbd: Convert msg_file_was_renamed to synthetic_smb_fname
      smbd: Convert open_streams_for_delete to synthetic_smb_fname
      smbd: Convert delete_all_streams to synthetic_smb_fname
      smbd: Convert recursive_rmdir to synthetic_smb_fname
      smbd: Convert rmdir_internals to synthetic_smb_fname
      smbd: Convert unix_mode to synthetic_smb_fname
      smbd: Convert set_create_timespec_ea to synthetic_smb_fname
      vfs: Convert vfs_scannedonly to synthetic_smb_fname
      vfs: Convert dirsort_opendir to synthetic_smb_fname
      vfstest: Convert cmd_open to synthetic_smb_fname
      vfstest: Convert cmd_pathfunc to synthetic_smb_fname
      vfstest: Convert cmd_rename to synthetic_smb_fname
      vfstest: Convert cmd_stat to synthetic_smb_fname
      vfstest: Convert cmd_lstat to synthetic_smb_fname
      vfstest: Convert cmd_utime to synthetic_smb_fname
      vfstest: Convert cmd_set_nt_acl to synthetic_smb_fname
      smbd: Convert driver_unlink_internals to synthetic_smb_fname
      smbd: Convert print_spool_open to synthetic_smb_fname
      smbd: Convert dptr_create to synthetic_smb_fname
      smbd: Convert is_visible_file to synthetic_smb_fname
      smbd: Convert create_file_unixpath to synthetic_smb_fname
      smbd: Remove NTSTATUS based create_synthetic_smb_fname
      selftest: S3 does not do leases yet
      talloc: Fix nonblank line endings
      talloc: Avoid some "else" by doing early returns
      talloc: Do an early return
      talloc: Simplify _talloc_free_poolmem a bit
      smbd: Fix signing when the async echo handler kicks in
      docs: Fix bug 9809 -- missing entry in specfile
      smbd: Use dbwrap_record_watch_send for defer_open
      smbd: Ignore OPEN_RETRY and BREAK_RESPONSE
      smbd: Obsolete MSG_SMB_BREAK_RESPONSE
      smbd: Remove unused reply_to_oplock_break_requests
      smbd: Remove the unused fsp->pending_break_messages array
      smbd: Obsolete MSG_SMB_OPEN_RETRY
      smbd: Remove unused smb2_deferred_open_timer
      smbd: We don't use DEFERRED_OPEN_ENTRY anymore
      dbwrap: Allow dbwrap_record_watch_recv to not lock the record
      smbd: Do not fetch the record in defer_open_done
      torture: Use ZERO_STRUCTPN instead of explicit deref
      torture: Only test leases if supported
      winbind4: Fix bug 9832 -- talloc use after free
      libsmb: Move "struct smb2_lease" to common
      libcli: Add smb2_lease marshalling
      libsmb: Use smb2_lease_push in smb2_create_send
      libsmb: Use sizeof instead of explicit numbers
      idmap: Print error from idmap_backends_unixid_to_sid
      idmap: Store negative cache entries if the backend fails
      winbind: Fix bug 9854 -- NULL pointer dereference
      Makefile: Fix bug 9868 - Don't know how to make LIBNDR_PREG_OBJ.
      dbwrap: Fix CID 1002092 Uninitialized scalar variable
      pthreadpool: Fix CID 710828 Sizeof not portable
      lib: Fix CID 241650 Sizeof not portable
      smbd: Remove a pointless variable
      torture: Remove some unused code
      vfs_gpfs: slightly simplify connect()
      gensec: Make gensec_interface_version public
      gensec: Make gensec_security_by_sasl_list static
      gensec: Make gensec_security_oids_from_ops static
      winbind4: Fix bug 9832 -- talloc use after free
      lib: Add before/after hooks to async_connect
      smbd: Fix a ISO C90 forbids mixed declarations and code warning
      talloc: Fix a typo
      tdb: Add overflow-checking tdb_add_off_t
      tdb: Make tdb_recovery_size overflow-safe
      tdb: Make tdb_recovery_allocate overflow-safe
      tdb: Add another overflow check to tdb_expand_adjust
      docs: Fix a typo
      Revert "dbwrap: dbwrap_fetch_locked_timeout()."
      winreg3: Fix a const warning
      lib: Remove an unused variable
      smbd: Remove unused code
      smbd: Fix a const warning
      smbd: Fix a const warning
      librpc: Fix some "ignored asprint result" warnings
      smbd: Remove an unused variable
      tevent: Fix Coverity ID 989236 Operands don't affect result
      genrand: Slightly simplify do_reseed
      gencache: Simplify gencache_init a bit
      tsocket: Add some const
      libsmbclient: Fix typos
      librpc: Use tevent_req_poll_ntstatus
      librpc: Shorten dcerpc_binding_handle_call a bit
      dns: Fix CID 1034969 Uninitialized scalar variable
      Fix some blank line endings
      lsa4: Remove an unused variable
      lsa4: Remove an unused variable
      lsa4: Remove an unused variable
      lsa4: Fix a set but unused variable warning
      sharesec: Implement --view-all
      sharesec: Document -v/--view
      sharesec: Document --view-all
      tevent: Fix a typo
      smbd: Fix a 100% loop at shutdown time
      smbd: Fix async echo handler forking (Bug 10086)
      smbd: Fix a profile problem
      smbd: Simplify dropbox special case in unix_convert
      libsmb: Fix a bunch of Coverity IDs
      smbd: Use #defines in smb2_getinfo_send
      smbd: qfilepathinfo has fixed/variable buffers
      smbd: qfsinfo has fixed/variable buffers
      smbd: Correctly return INFO_LENGTH_MISMATCH in smb2_getinfo
      smbd: Correctly return BUFFER_OVERFLOW in smb2_getinfo
      smbd: Revert a93f9c3
      smbd: Fix error return for STREAM_INFO
      smbd: Correctly return INFO_LENGTH_MISMATCH for smb1
      dbwrap_ctdb: Treat empty records as non-existing
      smbd: Simplify find_oplock_types
      smbd: Don't store in-memory only flags in locking.tdb
      smbd: Rename parameter "i" to "idx"
      smbd: Fix flawed share_mode_stale_pid API
      torture3: Trigger a nasty cleanup bug in smbd
      ccan: Fix calling memset with zero length parameter
      nsswitch: Fix short writes in winbind_write_sock

Volodymyr Khomenko (3):
      s3: Fix bug 7759
      Fix bug 8021 - Incorrect string termination in volume/volume_name for TRANS2-QUERY_FS_INFO/Info Volume.
      Fix bug #8515 - Empty CIFS share can be blocked for other clients by deleting it via empty path (DELETE_PENDING until the last client)

Wesley Young (1):
      s4-classicupgrade: Tests if sam policies exist before trying to import them.

Wilco Baan Hofman (79):
      Attempt to fix the patchfile_preg backend for big endian machines.
      Add support for security descriptors. Also patched the regf backend to support this.
      Remove debug stuff.
      Fixed the patchfile tests and tidy up the patchfile backends.
      Fix PReg write support.
      More patchfile fixes. Write support should work now.
      Add ads convenience functions to samba 4. Move gpo_ldap.c to root libgpo.
      Make gpo_ldap.c compatible with samba 4. Add ads_get_ldap_server_name() function to samba 3. Move prototypes to root libgpo where appropriate.
      Add ../libgpo to samba4 srcdir list in rules.mk.
      Add nt_token_check_sid convenience function. Map NT_USER_TOKEN to struct security_token. Fix build errors.
      Mark the places where work needs to be done.
      Make the gpo files build for samba 4.
      Adjust samba 3 to the new gpo API. Still untested code.
      Move some headers around to avoid confusion.
      Move some headers around to avoid confusion.
      Fix Samba 4 Makefile to also clean ../libgpo
      Move gpo_ini stuff to the main libgpo. Make gpo_ini use a common parser.
      Fix ini parsing in the s3 gpext modules. Fix ini parser API. Make the build work
      regshell: Add support for 'cd ..' and cd relative to the root.
      Fix trailing garbage in the hbin block.
      Fix writing corrupt REG_SZ to the registry.
      Fix NULL pointer dereference in libgpo when listing Local Policy which has no security descriptor.
      Fix writing corrupt registries because of hardcoded version string in IDL.
      Fix unintentional free of the last value when adding a new value to a key.
      Revert "s4:registry - "util" - remove "const" from "reg_abs_path""
      Remove incorrect const, something that was correct in commit 9c3e6249fd984b823a77cab0514601d2a487920a
      Revert of commit 5b6ad54f43741c0c25b35e44cafe5fed352ff133 in registry.h
      Revert "s4:registry - "util" - make "reg_key_add_abs" consistent with "reg_key_del_abs""
      Revert "s4:registry - adaptions for "add memory contexts for delete value/key functions""
      Revert "s4:registry - util.c - treat unsupported and binary values as the same in the conversion functions"
      Revert "s4:registry - util.c - move the "REG_NONE" case in the conversion functions on top of the switch"
      Revert "s4:registry - util.c - add harder checks for inputs on "reg_val_data_string""
      Revert reordering from commit 51bedf939568717424edd7732e1e315faa333849
      Created net gpo and new libgpo for samba 4. This adds the init function which finds a DC and connects to its LDAP. It also can return information on all group policy objects on a DC.
      Add gPLink and getgpo functionality to net gpo.
      Add gpo list function for listing applicable GPO's for users/machines.
      Add old functionality back which was removed in commit 589a42e2.
      Rename libgpo to lib/policy to avoid confusion with samba3 and add waf build
      Rename files to reflect the libpolicy naming convention. Also fix the GNU make build.
      Add add gPLink function and corresponding net gpo linkadd call.
      Changed add_gplink to set_gplink, so we can change gPLink options as well.
      Implemented delete group policy link function and corresponding feature in net gpo.
      Add getinheritance and setinheritance to net gpo util and library.
      Add fetch function for GPO which fetches all relevant files from the sysvol share.
      Fix error in logic, making recursion work past the first level.
      Optimize the backslash logic in the path traversal.
      Finish net gpo fetch function. Reorder arguments to make them more understandable. Rename getgpo to show.
      Fix mode_t in mkdir.
      Add gpo create functionality. Also fix gPLink handling bugs
      Add preliminary NT ACL support for GPT (GPO on filesystem).
      Fix crash when get_gpo_info returns incorrect data.
      Fix set GPT security descriptor to match windows' behaviour.
      Add net gpo setacl support. Create gp_set_acl function. Show ACL in net gpo show.
      Add ini parser for GPO's.
      Revert "Add old functionality back which was removed in commit 589a42e2."
      Fix net gpo list to use the dsdb with extended DN's. Fixes memberOf group memberships.
      Remove iconv convenience in used functions, which were deleted in commit f9ca9e46ad24036bf00cb361a6cef4b2e7e98d7d
      Add GP ini functions.
      Change talloc_steal to strdup because function might not expect it.
      Fix 'magic' numbers to be strlen(something)
      Set inherit flag type to bool.
      Code cleanups: GUID generation, lp_dnsdomain instead of lp_realm, missing spaces.
      Add talloc_frees in error cases in net_gpo.c
      Fix memory allocation with error handling.
      Refactor policy filesystem code.
      Add preliminary support for storing changed Group Policies.
      Fix registry parsing of strings to also support the windows method.
      Fix .reg file format parsing.
      Make sure that regf only writes to disk every five seconds or when flushed or destroyed
      Make sure we write the value stored in value, not line (doublequoted).
      Fix hex():00,00,00 bugs and strtol dword bugs, these values are explicitly hex.
      Do not include the closing doublequote in .reg files.
      The root key should be created as a root key, not subkey.
      5 uint32_t's should be set, not 5 bytes.
      Fix registry editor to be compatible with Windows 7.
      Fix patchfile_dotreg to write proper .reg files: 'hex(1..B):', 'dword:', etc
      Fix issues addressed by Jelmer:
      Make sure REG_SZ is properly written to a .reg file (not as hex(1)), fix trailing comma REG_BINARY.
      Fix uninitialized memory problem in group_sids_to_info3 (fixes bug #8455).

William Brown (1):
      Added SSL global catalog

William Jojo (3):
      Add undefined symbol flag for AIX.
      Add undefined symbol flag for AIX.
      s3: Fix bug 7052: "DFS broken on AIX (maybe others)"

Yannick Bergeron (5):
      Solve an IBM XL C/C++ compiler error encountered in get_exit_code() auth_errors array initialization in client/smbspool.c
      using NGROUPS_MAX instead of 32 for the max group value in rep_initgroups() subroutine in lib/replace/replace.c
      Solve an IBM XL C/C++ compiler error encountered in get_exit_code() auth_errors array initialization in client/smbspool.c
      using NGROUPS_MAX instead of 32 for the max group value in rep_initgroups() subroutine in lib/replace/replace.c
      Increase the max_grp value to 128 (AIX NGROUPS_MAX value) instead of 32 to allow AIX to call sys_getgrouplist only once

Yasuma Takeda (3):
      Fix bug #5909 - MS-DFS does not work on Vista, if link name includes multibyte character.
      Fix bug #5944 - nmbd does not boot if socket adress = "" is defined in smb.conf
      Fix bug 5920

Zach Loafman (21):
      Minor style correction
      Fix realpath() check so that it doesn't generate a core() when it fails.
      Add --enable-picky-developer
      Fix various build warnings
      Fix warnings on FreeBSD-based platforms
      Make DSO_EXPORTS_CMD regexp more POSIX compliant
      Check for f_frsize when using statvfs
      s3 auth: Add parameter that forces every user through an NSS lookup
      s4 libcli: Add SMB2.1 dialect to libcli
      s4 torture: Add a string version for NT_STATUS_WIN7_INVALID_RANGE
      s4 torture: Win7 has a slightly different allowed access mask
      s4 libcli: Add back Longhorn beta dialect as a constant
      Reorganize old persistent_handles test into durable_open.c, turn it into a suite instead of a solo test (in anticipation of more tests).
      Add durable open / oplock interaction test. Rather than give it a chance to disconnect, Win7 will break a batch oplock immediately on contention.
      s4:smb2: Add rudimentary SMB2.1 lease support to libcli
      s4:torture/smb2: Add torture tests for leases.
      s4:smb2: Add lease break support for SMB2.1
      s4:torture/smb2: Add torture tests for lease breaks, durable opens.
      s/NT_STATUS_WIN7_INVALID_RANGE/NT_STATUS_INVALID_LOCK_RANGE/g
      Allow for name array strings that don't end in a slash
      s4 torture: Convert RAW-OPEN to suite form

Zachary Loafman (9):
      s4-torture: Allow the legacy DENY_FCB/DENY_DOS share modes to be ignored
      s4 torture: Allow READ to be parameterized, add more readx tests
      s4 torture: Add lockread_supported based off of CAP_LOCK_AND_READ
      s4 torture: Parameterize WRITE_AND_CLOSE support
      s4 torture: Make RAW-SEARCH pass against win7
      s4 torture: Fix call to smbcli_open
      s4 torture: Convert create_complex_file to use BASIC_INFO instead of deprecated command
      s4 torture: Add test to show archive bit behavior with directories
      s4 torture: RAW-WRITE should check lockread_supported

Zack Kirsch (18):
      s4 torture: Two minor fixes to smbtorture BRL tests.
      s4 torture: Smbtorture additions for Windows BRL
      Remove typedef struct blocking_lock_record and move references to struct blocking_lock_record.
      Add VFS ops for Windows BRL: Lock, Unlock and Cancel:
      OneFS implementation of BRL VFS ops:
      s3: Fix uninitialized variable warning (and bug).
      s3: OneFS: Pass in the client's fnum to the ifs_cbrl syscall.
      s3 OneFS: Fixes "inherit permissions" and "nt acl support" for Onefs.
      s3 OneFS: Add debugging for createfile_flags
      s3 BRL: Add more clarifying comments and add implied logic to make conditional more clear
      s4 torture: Add comment to clarify test
      s3 onefs: Async failures are resulting in SMB_ASSERT->smb_panic while running many of the LOCK torture tests.
      s4 torture: Addition to RAW-BENCH-LOCK to take a configurable number of locks before starting the test
      s3 onefs: Self-contend level2 oplocks on BRL
      s3 onefs: Add some debugging/asserts to give more info when there is bad deferred open state.
      s4 torture: RAW-ACL Improvements
      s4 torure: Add SMB2 utility functions
      s4 torture: Port RAW-ACLS tests to SMB2

Zahari Zahariev (15):
      Basic tests for nTSceurityDescriptor both SDDL and BASE64 format
      Tests for descriptor inheritance
      Python tests for the acl module.
      Added tests for descriptor inheritance on ldap modify.
      Comparison tool for LDAP servers (using Ldb)
      v2 Latest enhancements in ldapcmp tool
      DNS objects should not be ignored
      Remove place-holders when it is single domain
      s4:provision Improved error handling in provisionbackend
      LDAPCmp feature to compare nTSecurityDescriptors
      Speed test with user objects
      Cannot create OU using custom Schema class
      Typos in wintest
      s4/ldapcmp: Two new options are added to the tool
      s4/wintest New ESXi configuration file

boyang (1):
      refresh sequence number as soon as possible when domain->sequence_number == -1 or domain->last_status is not ok.

brendan powers (1):
      s4-ntvfs: check if pvfs is NULL in pvfs_logoff

coffeedude (3):
      net ads: Upper case he realm name when calling kinit() using machine creds.
      libwbclient: Add wbcLogoffUser() and wbcLookupDomainController().
      libwbclient: Abstract the DS_XXX flags for DsGetDcName().

cvs2svn Import User (48):
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 1c221b3e72b24b6b8bd0d14b6ce32cf701684a81)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit b8d39651fb90ef170055735412417239a63afc5d)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 6938b5b98abd9ba055a46583a05c4fc07e32f529)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 9a5541595f78f2cbba16030552c6e780f6fddcf6)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit eb5ce70e2f0e3ebf6bab168108b410174e42818b)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 7950dfc795568798e8ede784b4e8b927be0add49)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit d39b53ba5486fc09e5332d77aad9a6047b0e91a6)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit f1acef4a1cc3ce99a765a2534a50fbd41f6e2e62)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit aafa32d6809e1bc60a8186140f2f3cf2bf6bff16)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 37ca4bbf0c7895e3a17544e3ac6d316034424f3d)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 2662e351f2f8802a3bf13df3e7e3f0c1497fdb1c)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 12c1579b18b95326eb0b837ff71a8a8b25cbda04)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit b3e68c1283aac417956ba8c21b7dd80fc55ab580)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 96535956090c2f6d4d91631b1980ae916dd35316)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit bdb5206b45a3e1360cc1a7e9f87299eeaa3c8d9c)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 953ae9d182788308fe4ee97cf98e30ed4fa3c4c0)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 73d32b336aae33f8ca27879a5d4b5222847509e5)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 619877ce031f3193065b51b8684ffbbe893b132f)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit b741abd496621586040081c04674ae53cb5db47c)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit ed336acc6eef4736bd924e8402cc463944e9327c)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 0dfbda00484bc3ca458fd5f637b69742bb75dbdb)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit c31455779d7948e866fe1916425c3746134dea01)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit f0d009c3e91979b0dc3443e16f3f545bcc64cfda)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 6f94672d3da070aae0b17f4dcdc6cd119b68d84c)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 6cd4d3f39a1258d51c022c99c73a7341b0ff94a5)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit c779af7a06d2f2b400f9bca32b51e91d1757e2e6)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit fd163bd94497534f9c80c205d44b30b72b81cbcd)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit cbc42567bed0959cb38d71543becd1ff124cac24)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 500f2d0e5e71057fbad510c5fe2807c506b21565)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 43f21c87e12fe88dab6ccba13c2e54161cf87093)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 381649916ecbaddefbb6ee0e6137b7cc73eb54b1)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 35510176fd4feab6c1e3da2ee0ae791f9a064a2e)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit a50dc3f836a898d1aef08afbd12e7221db24440a)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit f7019d22aa580f77e2f779f4a5ede59088a25d53)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 4e4cc806ed9f55ded8087594806adfcd77b9a1cc)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 8fa5862a443f3126e410e0e2f2f12770a113792f)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 73473310533133d1d88ac86a84e10d85583a6855)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit a1ffe2a29c0e6be54af09d6647b7f54369d75a1e)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit f1e59906577a59269f1821d9e438fc56278b9dbe)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 8bee59ffcea1495f03b35d38da0eb76955b93f3d)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit b47b930e0bcce54cc6eeced7e74b7cc38dc85735)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 275d17cdc61195fb59c98648e409063fe695ef45)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 7a85a963251c3b26187adbf9ff1b241bc9fbafa2)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 096b997588880991af8e07034cc4f041daa87b97)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 479b02fbfd5a41d08f687b009960bc29a213f40a)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit e569418861a867437cd5e2cce87ad82e752da3fb)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 9ccf8c530def31ccf6aca4f56b53676512131e66)
      This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 73ffc394b58fa951bca444506cd9d75a159e7f11)

jelmer (12):
      Add configure test for -Wl,--export-dynamic.
      Add macro for picflag.
      Move system-specific ldflags checks to libreplace so they can be used by ldb.
      Move SHLIBEXT determination into a test as well.
      Check for HPUX dl functions.
      Wrap native HPUX functions in dl implementation.
      Remove flag that causes problems on some hosts.
      Fix export dynamic for HPUX.
      Try to fix the build on some HPUX machines.
      Add libreplace macro for soname flags.
      Try to get some more flags right.
      Try to fix building dso's on hpux with gcc

jmcd (1):
      Volker's fix for bug #668. Change the \n after the password prompt to go to tty instead of stdout.

metze (36):
      don't imply "system/network.h" within replace.h,
      [libreplace] include socket_wrapper.h after we have typedef'ed socklen_t
      [libreplace] move define of a constant to near to the others
      [libreplace] move definition of struct addrinfo so that it can use socklen_t
      [libreplace] if we replace types define the HAVE_<type> macro
      - include getaddrinfo.h after we have defined struct addrinfo
      [libreplace] move and fix getaddrinfo configure checks
      [libreplace] define AI_NUMERICSERV as it's used in getaddrinfo.c
      add NDR_ERR_INVALID_POINTER
      libreplace: include nss_wrapper.h if NSS_WRAPPER is defined
      libreplace: we need include <unistd.h> before nss_wrapper.h
      libreplace: we should only have one location where we check for required functions
      create ndr_pull_union_blob_all() and match the logic of the struct fns
      add NDR_ERR_UNREAD_BYTES and don't use NTSTATUS directly
      use NT_STATUS_HAVE_NO_MEMORY() and NDR_CHECK() macros
      the return value of ndr_pull_set_switch_value() should be checked
      use NT_STATUS_HAVE_NO_MEMORY() and NDR_CHECK()
      check the return value of ndr_push_set_switch_value()
      use NDR_CHECK()
      use NT_STATUS_HAVE_NO_MEMORY()
      use error and out logic
      - check return value of ndr_push_set_switch_value()
      nss_wrapper: add lib/nss_wrapper skeleton
      nss_wrapper: add support for passwd accounts
      nss_wrapper: add support for groups and return EPERM in initgroups()
      nss_wrapper: add nss_wrapper.pl
      libreplace: check for nss passwd|group get*_r functions
      nss_wrapper: not all systems have get*_r calls
      libreplace: solaris has different prototypes for getpwent_r and getgrent_r
      nss_wrapper: add solaris versions of getpwent_r and getgrent_r
      libreplace: AC_VERIFY_C_PROTOTYPE() needs AC_LANG_SOURCE() to bring in confdefs.h
      nss_wrapper: set the destination pointer in the get*_r functions
      nss_wrapper: revert solaris get*ent_r() functions
      nss_wrapper: hopefully a better fix for the solaris get*ent_r functions
      ndr: change NTSTAUS into enum ndr_err_code (basic stuff)
      ndr: change NTSTAUS into enum ndr_err_code (ndrdump)

nadezhda ivanova (1):
      Fix of a bug in the security.descriptor.as_sddl() method

olivier (3):
      AIX doesn't have MSG_DONTWAIT
      make scannedonly notify the scanner if no .scanned: file was found during rename
      switch from mtime to ctime which is more reliable if files can be accessed outside samba as well

ronnie sahlberg (1):
      PIDL fix for using external types with wireshark backend

root (7):
      Port 3c1f1f0797e from 3-0-ctdb
      Fix some comments to match get_kdc_ip_string()'s behaviour
      net: Fix crash when specifying invalid options on the command line
      Use a getatr instead to make things cleaner.
      s3 sesssetup.c: Add missing line break to debug message.
      s3:loadparm/docs: Set default for "ldap ssl" to "start tls".
      torture: adapt to idl evolution

scudette at gmail.com (3):
      Fixes uninitialised access as reported by valgrind.
      Memory leak fixed due to accumulation of open reg keys.
      Changed code to use proper talloc context instead of NULL to control memory leak.

todd stecher (19):
      Memory leaks and other fixes found by Coverity
      This change allows for the autoconfigre detection of sub-second time resolution in the FreeBSD stat structure
      Extend NTIMES to allow setting create_time
      Modify OneFS module to support new NTIMES interfaces
      s3 OneFS: Fake Timestamps
      S3: New module interface for SMB message statistics gathering
      S3 OneFS: Add in Isilon specific performance counter module
      S3: Various fixes for log2pcaphex utility
      S3: Fixes for coverity issues.
      S3: Add in missing full audit entries.
      s3 OneFS: Expand the usage of the ignore sacl parameter
      s3: Test module for perfcount system
      S3: Allow SMBD processes to survive in low memory condidtions
      S3: Stop creating SMBD cores when failing to create a pipe.
      S3: Log warning in smbstatus about lack of pid in anonymous mode.
      S3: Make changes to perfcount API set for when a single request leads to multiple replies
      S3: Dumb down debug spew in perfcount module code
      S3: Detect max_open_files from system
      S3: Add in profile counters for new vfs and syscall entries.

tprouty (5):
      s3: Fix trans2 path to use case-insensitive stat optimization
      s3 onefs: Turn up the debug level for non-error cases
      s3 audit: Change create_file in full_audit to print whether a directory or file was requested
      s3: Allow full_audit to play nice with smbd if it's using syslog
      s3 onefs: Canonicalize the ACL in the correct order

wilco at baanhofman.nl (4):
      Add python bindings for open_hive function to be able to load REGF files.
      Fix crash when no subkeys exist. Fix writing outside of buffer error by regf backend.
      Fix file corruption (non-updated header) on new allocation.
      Fix regf.idl, subkey and rootkey types were switched.

zahari (1):
      Setting nTSecurityDescriptor via LDAP fails

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-samba/samba.git




More information about the Pkg-samba-maint mailing list