[Pkg-samba-maint] [samba] annotated tag upstream/4.1.12+dfsg created (now e164b2d)

Jelmer Vernooij jelmer at moszumanska.debian.org
Mon Oct 6 02:54:03 UTC 2014


This is an automated email from the git hooks/post-receive script.

jelmer pushed a change to annotated tag upstream/4.1.12+dfsg
in repository samba.

        at  e164b2d   (tag)
   tagging  7936819d311c536673d456adee975d57824455ba (commit)
  replaces  upstream/4.1.1+dfsg
 tagged by  Jelmer Vernooij
        on  Sun Oct 5 04:02:57 2014 +0200

- Log -----------------------------------------------------------------
Upstream version 4.1.12+dfsg

Abhidnya Joshi (2):
      idmap_autorid: fix failure in reverse lookup if ID is from domain range index #0
      s3: fix missing braces in nfs4_acls.c

Alexander Bokovoy (6):
      lsa.idl: define lsa.ForestTrustCollisionInfo and ForestTrustCollisionRecord as public structs
      add systemd integration
      smbd: use exit_daemon() to support reporting to systemd from smbd
      nmbd: use exit_daemon() to report status to systemd
      winbindd: use exit_daemon() to pass startup status to systemd
      ad-dc: use exit_daemon() to communicate status of startup to systemd

Alistair Leslie-Hughes (1):
      Stop use after free

Amitay Isaacs (5):
      s4-rpc: dnsserver: Allow . to be specified for @ record
      tests: dnsserver: Add a update test with name set to '.'
      s4-rpc: dnsserver: Correctly set rank for glue NS records
      s4-rpc: dnsserver: Do not return NS_GLUE records with VIEW_GLUE_DATA filter
      s4-rpc: dnsserver: Do not search for deleted DNS entries

Anand Avati (1):
      vfs_glusterfs: Implement proper mashalling/unmarshalling of ACLs

Andreas Schneider (38):
      idl: Add a new message for winbind domain states.
      s3-winbind: Add functions for domain online/offline handling.
      s3-winbind: Register handlers for domain online/offline messages.
      s3-winbind: Send online/offline message of the domain to the parent.
      vfs: Fix building the glusterfs module.
      vfs: Fix some build warnings in glusterfs.
      util: Remove 32bit macros breaking strict aliasing.
      s3-lib: Add grpname to talloc_sub_specified().
      s3-winbind: Pass the group name to fillup_pw_field().
      s3-libsmb: Use the right macro to set uint16_t attr.
      testsuit: Fix fprintf format.
      s3-utils: Fix scanf format in smbacls.
      s3-utils: Fix scanf format in sharesec.
      s3-libsmb: Fix scanf format in parse_ace().
      examples: Fix scanf format in perf_writer_disk.
      s3-vfs: Remove unused variable in vfs_glusterfs.
      s3-vfs: Make glfs_set_preopened() static.
      s3-libnet: Use a const char for realm.
      s3-lib: Fix %G substitution for domain users in smbd
      lib: Fix strict-aliasing warning in md5 code.
      s3-libads: Fix memory leaks in ads_build_path().
      wbinfo: Fix a memory leak in wbinfo_ping_dc().
      s3-passdb: Fix string duplication to pointers.
      s3-vfs: Fix stream_depot vfs module on btrfs.
      s3-spoolssd: Don't register spoolssd if epmd is not running.
      buildtools: Rename perl vendorarch configure option.
      buildtools: Add perl vendorlib configure option.
      autobuild: Set perl vendorlib direcotry.
      pidl-waf: Remove unused variable pidl_src.
      pidl-waf: Install pidl modules to the perl vendorlib directory.
      pidl-waf: Do not glob to install pidl modules.
      pidl-waf: Add a function to check for a system perl module.
      pidl-waf: Check for system perl(Parse::Yapp::Driver).
      pidl-waf: Only install Yapp::Driver if it is not available.
      s3-rpc_server: Fix handling of fragmented rpc requests.
      wafsamba: If perl can't provide defaults, define them.
      s4-dsdb: Fix a use after free segfault.
      ldb: Add a env variable to disable RTLD_DEEPBIND.

Andrew Bartlett (46):
      dfs_server: Use dsdb_search_one to catch 0 results as well as NO_SUCH_OBJECT errors
      kdc: Add belts-and-braces check that we fail if the hdb version changes
      CVE-2013-4496:s3-samr: Block attempts to crack passwords via repeated password changes
      CVE-2013-4496:samr: Remove ChangePasswordUser
      CVE-2013-4496:Revert remainder of ce895609b04380bfc41e4f8fddc84bd2f9324340
      CVE-2013-4496:s3-samr: Block attempts to crack passwords via repeated password changes
      CVE-2013-4496:samr: Remove ChangePasswordUser
      CVE-2013-4496:Revert remainder of ce895609b04380bfc41e4f8fddc84bd2f9324340
      dsdb: Do checks for invalid renames in samldb, before repl_meta_data
      winbindd: Ensure we do not look at rid_array before checking if it was returned
      pam_smbpass: Wrap calls in talloc_stackframe() to avoid warnings about leaking memory
      libsmbclient: Wrap more function calls in talloc_stackframe() to protect against talloc_tos() calls
      libsmb: Provide a talloc_stackframe() to external users of libsmb_setget.c
      dsdb: Provide a clearer error when we fail to store the sequence number in metadata.tdb
      dsdb: Do not give an error is metadata.tdb does not yet exist
      dsdb: Return LDB_ERR_INSUFFICIENT_ACCESS_RIGHTS rather than OPERATIONS_ERROR on EACCES and EPERM
      s4-rpc_server/drsuapi: Print ldb error showing why we failed to perform the access check
      passdb: Do not routinely clear the global memory returned by get_global_sam_sid()
      ldb: Show the type of failing operation in default error message
      ldb: Return LDB_ERR_INSUFFICIENT_ACCESS_RIGHTS rather than OPERATIONS_ERROR on EACCES and EPERM
      ldb: pass module init errors back to the caller
      ldb: make the successful ldb_transaction_start() message clearer
      dsdb: Use dsdb_next_callback() rather than a no-op per-module callback
      dsdb: Ensure to sort replPropertyMetaData as UNSIGNED, not SIGNED quantities
      dsdb: Further assert that we always have an objectClass and an rDN
      dsdb: Do not update notify_uSN until the transaction is genuinely committed to the DB
      dsdb: Clarify how the DSDB_REPL_FLAG_PRIORITISE_INCOMING flag works
      dsdb: Improve errors and checks for missing objectClass values
      dsdb: Improve missing objectClass handling
      dsdb: Do not store a struct ldb_dn in struct schema_data
      dsdb: Do not refresh the schema using the wrong event context
      dbcheck: Directly call dn.get_rdn_{val,name}() for clarity and consistency
      build: Exclude source4/selftest/provisions/release-4-1-0rc3 from the tarball
      dsdb: Make it harder to corrupt the database by requiring DBCHECK or RELAX for final object deletion
      selftest: Add tests for dbcheck detection and removal of partial objects
      dsdb: Add more tests for DN+String and DN+Binary comparisons
      dsdb: Rename private_data to rootdse_private_data in rootdse
      dsdb: Do not permit nested event loops when in a transaction, use a nested event context
      dsdb: Add DSDB_SEARCH_ONE_ONLY support to dsdb_module_search*()
      dsdb: Specify no event context to smb_krb5_init_context() in dsdb
      kerberos: Remove un-used event context argument from smb_krb5_init_context()
      dbcheck: Ensure dbcheck can operate with --attrs set
      dsdb: Set syntax of userParameters to binary string, not unicode string
      dsdb: Always store and return the userParameters as a array of LE 16-bit values
      dbcheck: Add check and test for various invalid userParameters values
      torture-dns: Add test for dlz_bind9 lookups

Arvid Requate (3):
      spoolss: accept XPS_PASS datatype used by Windows 8
      s4:samdb: respect SEARCH_FLAG_PRESERVEONDELETE
      passdb: fix NT_STATUS_NO_SUCH_GROUP

Benjamin Franzke (10):
      s4:torture/cldap: Fix a typo
      s4:cldap_server: Move netlogon parsing into utility function
      provision: Fix string replacement ordering
      s4:dsdb/rootdse: Pass rootdse context to rootdse_add_dynamic
      s4:dsdb/rootdse: Support netlogon request
      s4:cldap_server: Do not handle netlogon ourself anymore
      s4:dsdb: Move cldap netlogon functions into samdb/ldb_modules
      libcli/cldap: Add utility to create netlogon filter
      s4:torture/ldap: Add test for netlogon over tcp
      s4:torture/netlogon: Test netlogon with additional attrs

Björn Baumbach (6):
      s3-nmbd: reset debug settings after reading config file (bug #10239)
      s3-lib/util: fix read across end of namelist string
      lib-util: rename memdup to smb_memdup and fix all callers (bug #10556)
      provision/sambadns: remove redundant site parameter
      samba-tool: add --site parameter to provision command (bug #10674)
      s3: enforce a positive allocation_file_size for non-empty files (bug #10543)

Björn Jacke (2):
      xattr: fix listing EAs on *BSD for non-root users
      net/doc: make clear that net vampire is for NT4 domains only

Christian Ambach (15):
      lib/util: use proper include for struct stat
      s3:winbindd fix use of uninitialized variables
      waf:lib/replace correct detection of libiconv
      waf:lib/replace fix up libintl related checks
      waf:lib/replace change detection of gettext
      waf:lib/replace fix gettext detection
      waf:lib/replace gettext configure checks
      waf:lib/replace fix iconv checks on HP/UX
      heimdal_build: only enable libintl functions if everything was found
      waf: improve iconv checks
      s4:dsdb fix compiler warnings
      s4:dsdb fix compiler warnings
      s4:dsdb fix compiler warnings
      lib/ldb fix compiler warnings
      lib/ldb fix compiler warnings

Christof Schmitt (7):
      s3-aio: Use correct locking context for SMB2
      s3: Return correct error code from SMB2 AIO read failure
      selftest: Introduce share for testing AIO
      selftest: Run smb2.lock tests also against AIO share
      selftest: Remove samba3.smb2.lock.*.rw-exclusive from flapping file
      FSCTL_GET_SHADOW_COPY_DATA: Initialize output array to zero
      FSCTL_GET_SHADOW_COPY_DATA: Don't return 4 extra bytes at end

Christopher R. Hertel (1):
      vfs_glusterfs: Fix excessive debug output from vfs_gluster_open().

Daniel Kobras (1):
      sys_poll_intr: fix timeout arithmetic

Daniel Liberman (1):
      s3: ldap client can return NT_STATUS_OK when an error occurs in a paged search.

David Disseldorp (21):
      spoolss: return the spoolss job ID in notifications
      printing: always store sytem job-ID in queue state
      torture: add zero length FSCTL_SRV_COPYCHUNK test
      smbd/smb2_ioctl: fail zero length copy chunk requests
      vfs_btrfs: pass-through copy-chunk(len=0) requests
      rpc_client: retry open on STATUS_PIPE_NOT_AVAILABLE
      doc: add "spoolss: architecture" parameter usage
      rpcclient: append a trailing slash to FSRVP request UNCs
      rpcclient: abort shadow-copy set on commit failure
      byteorder: do not assume PowerPC is big-endian
      printing: fix purge of all print jobs
      printing: traverse_read the printer list for share updates
      printing: only reload printer shares on client enum
      printing: reload printer_list.tdb from in memory list
      printing: remove pcap_cache_add()
      printing: return last change time with pcap_cache_loaded()
      smbd: only reprocess printer_list.tdb if it changed
      server: remove duplicate snum_is_shared_printer()
      smbd: split printer reload processing
      printing: reload printer shares on OpenPrinter
      dosmode: fix FSCTL_SET_SPARSE request validation

Felix Botner (1):
      samba-tool dbcheck: handle missing objectClass

Garming Sam (5):
      dfs: always call create_conn_struct with root privileges
      provision: Fix failures on re-provision incorrectly blamed on posix acl support.
      provision: improve error message when connecting to samdb without the correct permissions
      pysmbd: improve the return of error codes in the python smbd bindings
      provision: capture slightly less generic exceptions during the test for acls

Gregor Beck (13):
      s3:winbindd: fix _wbint_LookupSids() on error
      s3:winbindd: avoid directly asking a trusted domain in wb_lookupsids*()
      s3:rpc_server: minor refactoring of process_request_pdu()
      s3:libsmb: pass creation or birth time in cli_qpathinfo_basic()
      s3:libsmb: add function cli_qpathinfo_standard()
      s3:libsmb: add function cli_qpathinfo3()
      s3:libsmb: SMBC_getatr try pathinfo2 only once
      s3:libsmb: SMBC_getatr do not let ino undefined on success
      s3:libsmb: SMBC_getatr use pathinfo3 for second try
      client: remove a write only variable
      s3:libsmb: cli_qpathinfo3 use cli_qpathinfo2 for smb2
      client: use cli_qpathinfo3 for allinfo
      s3:libsmb: SMBC_getatr() if no method worked, try all methods again on next attempt

Gustavo Zacarias (1):
      smbreadline: switch to new-style readline typedef

Günther Deschner (87):
      s3-winbindd: Fix #10264, cache_traverse_validate_fn failure for NDR cache entries.
      s3-libnetjoin: Fix Bug #10262: use upper-case realm when composing default upn.
      docs: remove duplicate word "the" in idmap_ad manpage.
      docs: remove duplicate word "name" in nmblookup manpage.
      docs: remove duplicate word "name" in nmblookup4 manpage.
      docs: remove duplicate arguments listing in regdiff manpage.
      docs: remove duplicate word "the" in winbindd manpage.
      docs: remove duplicate mention of "smbtorture" in smbtorture manpage.
      docs: remove duplicate mention of "ntdbtool" in ntdbtool manpage.
      docs: remove duplicate mention of "smbta-util" in smbta-util manpage.
      docs: remove duplicate word "trust" from net manpage.
      docs: remove duplicate word "the" from net manpage.
      docs: mention more options in winbindd manpage.
      docs: mention --no-process-group in winbindd manpage.
      docs: mention --dc-info in wbinfo manpage.
      docs: mention --krb5ccname option in wbinfo manpage.
      docs: mention logoff options in wbinfo manpage.
      docs: mention --lookup-sids in wbinfo manpage.
      docs: mention --pam-logon in wbinfo manpage.
      docs: mention --remove-gid-mapping/--remove-uid-mapping in wbinfo manpage.
      docs: mention --set-gid-mapping/--set-uid-mapping in wbinfo manpage.
      docs: mention --sequence in wbinfo manpage.
      docs: mention --sids-to-unix-ids in wbinfo manpage.
      docs: remove unsupported options from nmbd manpage.
      docs: mention --daemon in nmbd manpage.
      docs: mention --foreground in nmbd manpage.
      docs: mention --hosts in nmbd manpage.
      docs: mention --interactive in nmbd manpage.
      docs: mention --log-stdout in nmbd manpage.
      docs: mention --no-process-group in nmbd manpage.
      docs: mention --port in nmbd manpage.
      docs: remove unsupported options from smbd manpage.
      docs: mention many more options in smbd options.
      docs: mention --numeric in smbstatus manpage.
      docs: mention -R|--profile-rates in smbstatus manpage.
      docs: mention -S|--setsddl in sharesec manpage.
      docs: mention -V|--viewsddl in sharesec manpage.
      docs: mention -p in dbwrap-tool manpage.
      docs: bring samba entity popt.common.credentials in line with popt_common_credentials.
      docs: remove now duplicate mention for 4 credential options in samba-regedit manpage.
      docs: add missing &popt.common.samba entity to smbcontrol manpage.
      docs: add missing &popt.common.connection entity to smbcacls manpage.
      docs: remove more duplicate options from samba-regedit manpage.
      docs: add new popt.autohelp entity.
      docs: mention --change-sid|--new-sid in profiles manpage.
      docs: use popt.samba.common entity in profiles manpage.
      docs: use popt.autohelp in smbtree manpage.
      docs: mention --update and --encrypt in smbget manpage.
      docs: mention more long option names in smbcquotas manpage.
      docs: mention -B|--browse to smbclient manpage.
      docs: better document -e|--encrypt option globally.
      docs: use popt.autohelp and remove duplicate -e option from smbclient manpage.
      docs: remove unsupported -h option from smbcacls manpage.
      docs: use popt.autohelp entity in smbcacls manpage.
      docs: remove duplicate -e option from smbcacls manpage.
      docs: mention --query-security-info|--set-security-info in smbcacls manpage.
      docs: mention --sddl and --domain-sid in smbcacls manpage.
      docs: remove unsupported -h option and use popt.autohelp entity in rpcclient manpage.
      docs: document all long option names in nmblookup manpage.
      docs: use popt.autohelp entity in dbwrap-tools manpage.
      docs: fix testparm manpage.
      docs: use &popt.autohelp entity in pdbedit manpage.
      docs: fix smbcontrol manpage.
      docs: fix ntlm_auth manpage.
      docs: use popt.autohelp entity in nmbd manpage.
      docs: use popt.autohelp entity in winbindd manpage.
      docs: use popt.autohelp entity in smbd manpage.
      docs: use popt.autohelp entity in samba.8 manpage.
      docs: mention more options in net manpage.
      docs: add net rpc vampire specific options in net manpage.
      docs: add net idmap specific options in net manpage.
      docs: add net rpc share migrate specific options in net manpage.
      docs: add net groupmap set specific options in net manpage.
      docs: add net rpc registry check specific options in net manpage.
      docs: add net registry import specific options in net manpage.
      docs: document remaining undocumented options in net manpage.
      docs: remove duplicate "a" from vfs_cacheprime manpage.
      docs: remove duplicate "the" from smb.conf manpage.
      docs: remove duplicate "to" from smb.conf manpage.
      docs: remove duplicate "not" from smb.conf manpage.
      docs: remove duplicate "or" from smb.conf manpage.
      docs: remove duplicate "on" from smb.conf manpage.
      docs: remove duplicate "must" from smb.conf manpage.
      docs: remove duplicate "line" from smb.conf manpage.
      docs: remove duplicate "used" from smb.conf manpage.
      librpc/nbt: increase MAX_COMPONENTS limit for nbt_names.
      libcli/auth: also set secure channel type in netlogon_creds_client_init().

Har Gagan Sahai (1):
      Fixed a memory leak in cli_set_mntpoint().

Howard Chu (3):
      Cleanup map return codes
      Fix SEGV from improperly formed SUBSTRING/PRESENCE filter
      Add LDB_MAP_RENDROP option

Jan Brummer (1):
      s3-winbindd: Fix DEBUG statement in winbind_msg_offline().

Jeffrey Clark (1):
      Support for Heimdal's unified krb5 and hdb plugin system.

Jelmer Vernooij (5):
      Imported Upstream version 4.1.2+dfsg
      Cope with first element in hdb_method having a different name in different heimdal versions.
      Imported Upstream version 4.1.11
      Imported Upstream version 4.1.11
      Imported Upstream version 4.1.12+dfsg

Jeremy Allison (81):
      Fix bug #10187 - Missing talloc_free can leak stackframe in error path.
      Fix bug 10196 - RW Deny for a specific user is not overriding RW Allow for a group.
      Fix bug 10196 - RW Deny for a specific user is not overriding RW Allow for a group.
      s3-smbd: smbclient shows no error if deleting a directory with del failed
      s3-lib: smbclient shows no error if deleting a directory with del failed
      s3-client: smbclient shows no error if deleting a directory with del failed
      CVE-2013-4408:s3:Ensure we always check call_id when validating an RPC reply.
      CVE-2013-4408:s3:Ensure LookupSids replies arrays are range checked.
      CVE-2013-4408:s3:Ensure LookupNames replies arrays are range checked.
      CVE-2013-4408:s3:Ensure LookupRids() replies arrays are range checked.
      smbd: change flag name from UCF_CREATING_FILE to UCF_PREP_CREATEFILE
      smbd: Always use UCF_PREP_CREATEFILE for filename_convert calls to resolve a path for open.
      smbd - allow updates on directory write times on open handles.
      smbtorture: New torture test for bug #9870.
      ldb: bad if test in ldb_comparison_fold()
      s3: winbindd: Move the logic of whether to set 'domain->primary' into add_trusted_domain().
      s3: winbindd: Move calling setup_domain_child() into add_trusted_domain().
      s3:dir - In the old SMB1 search code, rename offset to wire_offset to distinguish between wire and native offsets.
      s3:dir - Introduce a function to map a directory cookie to a 32-bit wire cookie.
      s3: dir - Introduce 32-bit wire versions of the 'special' values.
      s3:dir - Cope with fixed mapping of 'special' values.
      s3:dir - Map wire offsets to native directory cookies.
      s3:dir - Add a new memcache type (non-talloc) - SMB1_SEARCH_OFFSET_MAP.
      s3:dir - Introduce a 64-bit directory offset <-> 32 bit wire offset map using memcache.
      s3:dir - We now pass the previously spinning directory tests on ext4.
      s3: smbpasswd - fix crashes on invalid input.
      s3: vfs_dirsort module.
      s3: vfs_dirsort module.
      s3: modules: streaminfo: As we have no VFS function SMB_VFS_LLISTXATTR we can't cope with a symlink when lp_posix_pathnames() is true.
      s3: printing: Fix problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message.
      s3-printing: Fix obvious memory leak in printer_list_get_printer().
      s3: smbd: Ensure brl_get_locks_internal() always returns a valid struct byte_range_lock even if there are no locks.
      CVE-2013-6442: s3:smbcacls - ensure we don't lose an existing ACL when setting owner or group owner.
      CVE-2013-6442: s3:smbcacls - ensure we don't lose an existing ACL when setting owner or group owner.
      s3: lib: Back-port tevent_queue_wait_send/recv -> smbd_tevent_queue_wait_send/recv
      s3:smb2_sesssetup: split smbd_smb2_logoff into an async *_send/recv pair.
      s3:smb2_tcon: split smbd_smb2_tdis into an async *_send/recv pair.
      s4: smbtorture: Update the torture_smb2_notify_ulogoff test to demonstrate the problem.
      s4: smbtorture: Add a proper change_notify going async followed by tdis test.
      s3: smbd: Fileserving share access checks.
      s3: smbd: Ensure we always go via getgroups_unix_user() when creating an NT token.
      s3: messages: Implement cleanup of dead records.
      s3-lib/util: fix logic inside set_namearray loops.
      s3 : smbd : Protect all possible code paths from fsp->op == NULL.
      s3: smbd : Ensure file_new doesn't call into smbXsrv_open_create() for INTERNAL_OPEN_ONLY.
      s3: smbd: change file_set_dosmode() to use get_file_handle_for_metadata() instead of open_file_fchmod().
      s3: smbd: Remove open_file_fchmod().
      s3: smbd : Fix wildcard unlink to fail if we get an error rather than trying to continue.
      s3: smb2: Move from using SBVAL to put NTTIMEs on the wire to put_long_date_timespec.
      s3: smb2: Move from using SBVAL to put NTTIMEs on the wire to put_long_date_timespec.
      s3: client - rename 'struct smb2_create_returns' to 'struct smb_create_returns' so we can use this in SMB1 create returns as well.
      s3: client : Add extra return parameter to all client open calls.
      s3: client : correctly fill in the struct smb_create_returns from cli_ntcreate(), cli_ntcreate_recv(), cli_nttrans_create() and cli_nttrans_create_recv().
      s3: libsmbclient: Work around bugs in SLES cifsd and Apple smbx SMB1 servers.
      s3: nmbd: Fix bug 10633 - nmbd denial of service
      s3: smbd - fix processing of packets with invalid DOS charset conversions.
      s3/s4: smbd, rpc, ldap, cldap, kdc services.
      s3:winbindd - fix bad bugfix for bug #10280 - winbind panic if AD server is down.
      s3: smbd: Locking, fix off-by one calculation in brl_pending_overlap().
      s3: smbd: Locking - convert to using utility macro used elsewhere.
      s3: smbd: Locking - add and use utility function lock_timed_out().
      s3: smbd: Locking - treat lock timeout the same as any other error.
      s3: smbd: Locking - re-add pending lock records if we fail to acquire a lock (and the lock hasn't timed out).
      s4: smbtorture: Add multi-lock test. Regression test for bug #10684.
      s3: libwbclient: Don't break out of loop too soon - find all parameters.
      s3: smbd - Prevent file truncation on an open that fails with share mode violation.
      s3: smb2: Remove unused code from remove_pending_lock().
      s3: smb2: Simplify logic in reprocess_blocked_smb2_lock().
      s3: SMB2 : Fix leak of blocking lock records in the database.
      lib: tevent: make TEVENT_SIG_INCREMENT atomic.
      s3: xml-docs. Ensure users of 'net time' know the remote server must be specified with -S.
      s3: net time - fix usage and core dump.
      s3: smbd: POSIX ACLs. Remove incorrect check for SECINFO_PROTECTED_DACL in incoming security_information flags in posix_get_nt_acl_common().
      s3: smbd - SMB[2|3]. Ensure a \ or / can't be found anywhere in a search path, not just at the start.
      s3: smbd : SMB2 - fix SMB2_SEARCH when searching non wildcard string with a case-canonicalized share.
      lib: strings: Fix the behavior of strcasecmp_m_handle() in the face of bad conversions.
      lib: strings: Fix the behavior of strncasecmp_m_handle() in the face of bad conversions.
      s4: tests: Added local.charset test for Bug 10716 - smbd constantly crashes when filename contains non-ascii character
      s3: winbindd: Add new parameter "winbind request timeout" set to 60 seconds with man page.
      s3: winbindd: On new client connect, prune idle or hung connections older than "winbind request timeout"
      s3: smbd: vfs_dirsort module.

Jeroen Dekkers (1):
      ldb: Do not build libldb-cmdline when using system ldb.

Jose A. Rivera (2):
      Minor typo fix in source3/wscript.
      Fix an empty if statement.

Kai Blin (4):
      bug #10471: Don't respond with NXDOMAIN to records that exist with another type
      dns: Extend tests for records with another type
      bug #10609: CVE-2014-0239 Don't reply to replies
      provision: Correctly provision the SOA record minimum TTL

Karolin Seeger (47):
      Merge tag 'samba-4.1.1' into v4-1-test
      VERSION: Bump version number up to 4.1.2...
      WHATSNEW: Add release notes for Samba 4.1.2.
      VERSION: Disable git snapshots for the 4.1.2 release.
      VERSION: Bump version number up to 4.1.3...
      VERSION: Bump version number up to 4.1.3...
      WHATSNEW: Add release notes for Samba 4.1.3.
      VERSION: Disable git snapshots for the 4.1.3 release.
      Merge tag 'samba-4.1.3' into v4-1-test
      VERSION: Bump version up to 4.1.4.
      WHATSNEW: Add release notes for Samba 4.1.4.
      VERSION: Disable git snapshots for the 4.1.4 release.
      VERSION: Bump version number up to 4.1.5...
      docs: Fix typos in vfs_shadow_copy2.8.xml.
      WHATSNEW: Add release notes for Samba 4.1.5.
      VERSION: Disable git snapshots for the 4.1.5 release.
      VERSION: Bump version number up to 4.1.6...
      VERSION: Bump version number up to 4.1.6...
      WHATSNEW: Add release notes for Samba 4.1.6.
      VERSION: Disable git snapshots for the 4.1.6 release.
      WHATSNEW: Add release notes for Samba 4.1.6.
      VERSION: Disable git snapshots for the 4.1.6 release.
      VERSION: Bump version number up to 4.1.7.
      WHATSNEW: Add release notes for Samba 4.1.7.
      VERSION: Bump version number up to 4.1.8...
      WHATSNEW: Add release notes for Samba 4.1.8.
      VERSION: Disable git snapshots for the 4.1.8 release.
      VERSION: Bump version number up to 4.1.9...
      VERSION: Bump version number up to 4.1.9...
      WHATSNEW: Add release notes for Samba 4.1.9.
      VERSION: Disable git snapshot for the 4.1.8 release.
      VERSION: Disable git snapshot for the 4.1.9 release.
      Merge tag 'samba-4.1.9' into v4-1-test
      VERSION: Bump version up to 4.1.10.
      WHATSNEW: Add release notes for Samba 4.1.10.
      VERSION: Disable git snapshots for the 4.1.10 release.
      VERSION: Bump version number up to 4.1.11...
      Merge tag 'samba-4.1.9' into v4-1-stable
      Merge commit 'origin/v4-1-test^' into v4-1-stable
      VERSION: Bump version number up to 4.1.11...
      WHATSNEW: Add release notes for Samba 4.1.11.
      VERSION: Disable git snapshots for the 4.1.11 release.
      WHATSNEW: Add release notes for Samba 4.1.11.
      VERSION: Disable git snapshots for the 4.1.11 release.
      VERSION: Bump version up to 4.1.12.
      WHATSNEW: Add release notes for Samba 4.1.12.
      Merge tag 'samba-4.1.11' into v4-1-test

Luk Claes (3):
      s3/libsmb: Use smbXcli_conn_use_unicode instead of smb1 specific test
      libcli/smb: Introduce smbXcli_conn_dfs_supported
      s3/libsmb: Use smbXcli_conn_dfs_supported instead of test on CAP_DFS

Marc Muehlfeld (1):
      docs: Fix typos in smb.conf (inherit acls)

Matthieu Patou (5):
      drs-crackname: Fix cracknames for the format UNKNOWN when the data is actually a GUID
      drs-cracknames: When cracking NT4 names we should just look at netbios for the match
      drs-crackname: Fix error code so that we have the same as windows
      drs-cracksname: fix problems that prevented to pass our torture tests
      pyldb: decrement ref counters on py_results and quiet warnings

Michael Adam (45):
      shadow_copy2: break overly long lines in shadow_copy2_snapshot_to_gmt()
      shadow_copy2: add comment header describing shadow_copy2_strip_snapshot()
      shadow_copy2: add header comment explaining have_snapdir()
      shadow_copy2: add comment block explaining shadow_copy2_find_snapdir()
      shadow_copy2: add comment block explaining shadow_copy2_insert_string()
      shadow_copy2: add comment block explaining shadow_copy2_convert()
      shadow_copy2: add comment explaining the SMB level GMT format pattern
      shadow_copy2: introduce config struct and function shadow_copy2_connect()
      shadow_copy2: introduce the bool "snapdir_absolute" in the config.
      shadow_copy2: disable "snapdir:crossmountpoints" if the snapdir is absolute.
      shadow_copy2: re-add the basedir option.
      shadow_copy2: introduce "shadow:mountpoint" option
      shadow_copy2: add rel_connectpath to config.
      shadow_copy2: add snapshot_basepath to the config.
      shadow_copy2: log resulting config at the end of shadow_copy2_connect()
      shadow_copy2: implement disk_free
      shadow_copy2: in the classical case, use configured path in shadow_copy2_find_snapdir()
      shadow_copy2: make shadow_copy2_find_snapdir() return const char *
      shadow_copy2: shadow_copy2_insert_string(): do not prepend a "/" in absolute mode
      shadow_copy2: factor shadow_copy2_posix_gmt_string() out of shadow_copy2_insert_string()
      shadow_copy2: introduce shadow_copy2_snapshot_path()
      shadow_copy2: add comments explaining decisions in shadow_copy2_strip_snapshot()
      shadow_copy2: add some debug to shadow_copy2_strip_snapshot()
      shadow_copy2: fix shadow_copy2_strip_snapshot() in the classical case
      shadow_copy2: initialize "converted" string to null in shadow_copy2_convert()
      shadow_copy2: add some blank lines for visual separation to shadow_copy2_convert()
      shadow_copy2: fix shadow_copy2_convert() in the classical case.
      shadow_copy2: improve debug in shadow_copy2_convert() in snapdirseverywhere mode
      shadow_copy2: use stored mount_point instead of recalculating.
      s3:module:shadow_copy2: add my (C)
      s3:modules:shadow_copy2: improve headline comment
      s3:modules:shadow_copy2: remove redundant documentation comment block
      docs: update the manpage of vfs_shadow_copy2
      shadow_copy2: revert expensive and unnecessary zero-initialization
      shadow_copy2: add a comment explaining why we don't talloc_zero_array().
      build: fix ordering problems with lib-provided and internal RPATHs
      ldb:build: improve detection of srcdir
      s3:idmap: don't log missing range config if range checking not requested
      s3:vfs:gpfs: store the winAttrs in the struct_ex when we got them in vfs_gpfs_fstat()
      s3:vfs:gpfs: fix flapping offline: always get winAttrs from gpfs for is_offline
      s3:vfs:gpfs: Remove all reading uses of stat_ex.vfs_private from vfs_gfs.
      s3:vfs:gpfs: remove all writing uses of stat_ex.vfs_private from vfs_gpfs.
      s3:vfs:gpfs: remove a block and reduce indentation in gpfs_is_offline()
      s3: remove stat_ex.vfs_private completely
      build: fix configure to honour --without-dmapi

Michele Baldessari (1):
      Fix typos in man-pages

Nadezhda Ivanova (4):
      s4-dsacl: Fixed incorrect handling of privileges in sec_access_check_ds
      s4-openldap: Remove use of talloc_reference in ldb_map_outbound.c
      s4-dsdb: instanceType NC_HEAD is only allowed combined with WRITE for an originating add operation
      s4-samldb: Do not allow deletion of objects with RID < 1000

Niels de Vos (1):
      vfs/glusterfs: in case atime is not passed, set it to the current atime

Noel Power (2):
      CVE-2012-6150: Fail authentication for single group name which cannot be converted to sid
      s3: smbd - smb1 - fix read of deleted memory in reply_writeclose().

Pavel Reichl (1):
      ldb: use of NULL pointer bugfix

Poornima Gurusiddaiah (1):
      vfs_glusterfs: Enable per client log file

Roel van Meer (1):
      Don't discard result of checking grouptype

Ross Lagerwall (1):
      s3:libsmb: Set a max charge for SMB2 connections

Samuel Cabrero (1):
      s4-dns: dlz_bind9: Create dns-HOSTNAME account disabled

Shirish Pargaonkar (1):
      samba: Retain case sensitivity of cifs client

Stefan Metzmacher (144):
      dsdb/tests/ldap: fix test_ldapServiceName against w2k8r2
      s4:dsdb/rootdse: report 'dnsHostName' instead of 'dNSHostName'
      libcli/smb: fix smb2cli_ioctl*() against Windows 2008.
      CVE-2013-4408:librpc: check for invalid frag_len within dcerpc_read_ncacn_packet_done()
      CVE-2013-4408:librpc: check for invalid frag_len within dcerpc_read_ncacn_packet_next_vector()
      CVE-2013-4408:s3:rpc_client: check for invalid frag_len in dcerpc_pull_ncacn_packet()
      CVE-2013-4408:s3:rpc_client: verify frag_len at least contains the header size
      CVE-2013-4408:s4:dcerpc: check for invalid frag_len in ncacn_pull()
      CVE-2013-4408:s4:dcerpc_smb: check for invalid frag_len in send_read_request_continue()
      CVE-2013-4408:s4:dcerpc_smb2: check for invalid frag_len in send_read_request_continue()
      CVE-2013-4408:s4:dcerpc_sock: check for invalid frag_len within sock_complete_packet()
      CVE-2013-4408:async_sock: add some overflow detection to read_packet_handler()
      CVE-2013-4408:s3:util_tsock: add some overflow detection to tstream_read_packet_done()
      CVE-2013-4408:libcli/util: add some size verification to tstream_read_pdu_blob_done()
      CVE-2013-4408:s3:ctdb_conn: add some length verification to ctdb_packet_more()
      s3:smb2_server: fix drain_socket error handling
      s3:smb2_server: for performance reasons we use tevent_fd and readv/writev directly
      s3:smb2_server: use tevent_req_notify_callback() in smbd_smb2_request_pending_queue()
      s3:smb2_server: allocate smbd_smb2_request on talloc_tos()
      s3:smb2_server: generate a header blob for the sendfile path
      s3:smb2_server: avoid calling set_current_user_info() for each request
      s3:smb2_notify: fix use after free on long living notify requests
      s3:libsmb: make use of smb1cli_tcon_set_values()
      libcli/smb: add smbXcli_tcon_is_dfs_share()
      libcli/smb: add smbXcli_tcon_{set,get}_fs_attributes()
      libcli/smb: add FLAGS2_DFS_PATHNAMES for SMB1 operations against dfs shares
      libcli/smb: move Filesystem Attributes defines to smb_constants.h
      libcli/smb: add FLAG_CASELESS_PATHNAMES based on FILE_CASE_SENSITIVE_SEARCH to smb1 requests
      libcli/smb: add SMB2_HDR_FLAG_DFS for SMB2 Create operations on dfs shares
      s3:libsmb: call smbXcli_tcon_{get,set}_fs_attributes() from cli_set_case_sensitive()
      s3:libsmb: don't pass down FLAG_CASELESS_PATHNAMES and FLAGS2_DFS_PATHNAMES anymore
      s3/libsmb: make use of smbXcli_tcon_is_dfs_share()
      s3:libsmb: add SMB2/3 support to cli_dfs_get_referral()
      s3:libsmb: remove unused cli_state->dfsroot
      s3:libsmb: remove unused cli_state->case_sensitive
      s3:libsmb: call smbXcli_tcon_set_fs_attributes() directly
      s3:smbd: simplify exit_server_common()
      s3:smbd: maintain smbd_server_connection->status
      s3:lib/ctdbd_conn: let release_ip_handler return bool
      s3:smbd: avoid invalid lock_order panic triggered by "CTDB_SRVID_RELEASE_IP"
      pidl:NDR/Client: fix dcerpc_function() with [out,ref] pointers
      CVE-2013-4496:s3:auth: fix memory leak in the ACCOUNT_LOCKED_OUT case.
      CVE-2013-4496:s3:auth: fix memory leak in the ACCOUNT_LOCKED_OUT case.
      Merge tag 'samba-4.1.6' into v4-1-test
      tevent: fix crash bug in tevent_queue_immediate_trigger()
      s4:torture/smb2: accept NT_STATUS_RANGE_NOT_LOCKED after smb2_logoff/tdis
      s3:smb2_lock: fix whitespaces/tabs in smbd_smb2_lock_cancel()
      s3:smb2_lock: return RANGE_NOT_LOCKED instead of CANCELLED for logoff and tdis
      s3:smb2_sesssetup: cancel and wait for pending requests on logoff
      s3:smb2_tcon: cancel and wait for pending requests on tdis
      s3:utils/smbfilter: use a local variable for the packet buffer
      s3:torture: use CLI_BUFFER_SIZE instead of BUFFER_SIZE
      s3:client: only limit the buffer by the given length 'n'
      s3:param: avoid using BUFFER_SIZE to limit the lp_min_receive_file_size()
      libcli/smb: add SMB_BUFFER_SIZE_MIN/MAX defines
      s3:include: let CLI_BUFFER_SIZE be an alias of SMB_BUFFER_SIZE_MAX
      s3:smbd: use SMB_BUFFER_SIZE_MIN/MAX to limit lp_max_xmit()
      s3:smbd: use sconn->smb1.sessions.max_send = SMB_BUFFER_SIZE_MAX
      s3:smbd: reject a MaxBufferSize < SMB_BUFFER_SIZE_MIN (500) in a session setup request
      s3:smbd: take less than SMB_BUFFER_SIZE_MIN ('500') as header overhead in ipc.c
      s3:smbd: fix lockread numtoread calculation to match reply_outbuf() arguments.
      s3:smbd: pass the final numtoread reply_outbuf() for the lockread reply.
      s3:smbd: fix the lockread numtoread calculation depending on the max_send.
      s3:smbd: fix the read numtoread calculation depending on the max_send.
      s3:smbd: simplify maxentries calculation in reply_search()
      s3:smbd: fix the maxentries calculation depending on the max_send.
      s3:smbd: s/BUFFER_SIZE/LARGE_WRITEX_BUFFER_SIZE
      s4:lib/socket: use the same logic in iface_list_wildcard() as in smbd
      s4:lib/socket: simplify iface_list_wildcard() and its callers
      wafsamba: Fail with error message if perl doesn't provide valid dirs.
      script/autobuild: make use of --with-perl-{arch,lib}-install-dir
      pidl/lib/wscript_build: make use of PERL_LIB_INSTALL_DIR
      s4:repl_meta_data: fix array assignment in replmd_process_linked_attribute()
      script/autobuild: use --force-rebase option
      selftest/subunithelper.py: correctly handle unexpected success in FilterOps
      selftest/subunithelper.py: correctly handle fail_immediately in end_testsuite of FilterOps
      selftest/subunithelper.py: correctly pass testsuite-uxsuccess to end_testsuite()
      s4:dsdb/ldb_modules: avoid declaration after code warnings
      s4:dsdb/ldb_modules: avoid invalid pointer type warnings
      dsdb/tests/ldap: fix test_distinguished_name against w2k8r2
      ldb:rdn_name: reject 'distinguishedName' depending of the MOD flags
      ldb:pyldb: add some const to PyObject_FromLdbValue()
      ldb:pyldb: fix doc string for set_extended_component()
      ldb:pyldb: add some more helper functions for LdbDn
      ldb: change version to 1.1.17
      s3:smb2_read: let smb2_sendfile_send_data() behave like send_file_readX()
      s4:dsdb/repl: make use of dcerpc_binding_handle_is_connected()
      dbchecker: make the deleted objects container detection more generic
      dbchecker: verify and fix broken dn values
      s4:dsdb/schema_load: make error message more verbose
      s4:dsdb/kcc: use SHOW_RECYCLED instead of SHOW_DELETED in when deleting tombstone/deleted objects
      s4:dsdb/extended_dn_in: don't force DSDB_SEARCH_SHOW_RECYCLED
      s4:dsdb/samldb: don't allow 'userParameters' to be modified over LDAP for now
      libwbclient: allow only one initial_blob/challenge_blob in wbcCredentialCache()
      selftest: teardown the environments also on getting SIGPIPE
      s4:dsdb/repl_meta_data: make sure objectGUID can't be deleted
      selftest/knownfail: ignore samba3.smb2.oplock.exclusive5 failures in v4-1-*
      ldb-samba: fix a memory leak in ldif_canonicalise_objectCategory()
      Merge tag 'samba-4.1.10' into v4-1-test
      selftest/knownfail: add ^samba4.rpc.netlogon.*.invalidAuthenticate2 for v4-1-*
      s4:torture/rpc: add invalidAuthenticate2
      s3:lib/memcache: use uint8_t instead of uint8
      s3:lib/memcache: make use of talloc for memcache_elements
      s3:lib/memcache: only include the required header files
      lib/util: move memcache.[ch] to the toplevel 'samba-util' library
      s4:rpc_server/netlogon: keep a global challenge table
      s4:torture/rpc: add rpc.netlogon.ServerReqChallengeGlobal
      security.idl: add SMB_SUPPORTED_SECINFO_FLAGS
      s3:smbd: mask security_information input values with SMB_SUPPORTED_SECINFO_FLAGS
      libcli/security: add better detection of SECINFO_[UN]PROTECTED_[D|S]ACL in get_sec_info()
      libcli/dns: add AAAA support to dns_hosts_file.c
      libcli/dns: ignore NS entries in dns_hosts_file.c at a higher log level for now
      selftest: export _IPV6 environment variables
      selftest/Samba4: also bind to ipv6
      selftest/Samba3: also bind to ipv6
      python/join: use lowercase for the dnshostname.
      s4:samba_dnsupdate: don't lower case the registered names
      s4:samba_dnsupdate: fix dnsobj.__str__()
      s4:samba_dnsupdate: cache the already registered records
      s4:samba_dnsupdate: don't try to be smart when verifying NS records
      s4:samba_dnsupdate: provide more substitution variables e.g. IF_RODC
      s4:setup/dns_update_list: make use of the new substitution variables
      s4-rpc: dnsserver: return DNS_RANK_NS_GLUE recors when explicitly asked for
      s4:dns_server: handle WERR_DNS_ERROR_NAME_DOES_NOT_EXIST in werr_to_dns_err()
      s4:dns_server: map LDB_ERR_NO_SUCH_OBJECT to WERR_DNS_ERROR_NAME_DOES_NOT_EXIST
      s4:dns_server: split out a private 'dnsserver_common' library
      s4:dns_server: split out dns_common_extract() and dns_common_lookup()
      s4:dns_server: remove const from dns_replace_records()
      s4:dns_server: split out dns_common_replace()
      s4:dns_server: use .wType = DNS_TYPE_TOMBSTONE instead of ZERO_STRUCT()
      s4:dns_server: make sure dns_common_lookup() doesn't return tombstones
      s4:dns_server: add DNS_TYPE_TOMBSTONE support to dns_common_replace()
      s4:dns_server: handle tombstones in handle_one_update()
      s4:dlz_bind9: avoid some compiler warnings
      s4:dlz_bind9: do an early talloc_free(el_ctx) in dlz_allnodes()
      s4:torture:dlz_bind9: fix spnego tests
      torture-dns: Add test for dlz_bind9 zonedumps
      torture-dns: Add test for dlz_bind9 updates
      s4:dlz_bind9: let dlz_bind9 use dns_common_lookup() for name lookup
      s4:dlz_bind9: let dlz_bind9 use dns_common_extract()
      s4:dlz_bind9: let dlz_bind9 use dns_common_replace()
      s4:dlz_bind9: let dlz_bind9 use dns_common_lookup() before removing records
      s4:dlz_bind9: let dlz_bind9 use dns_common_lookup() before add/modify
      s4-rpc: dnsserver: handle updates of tombstoned dnsNode objects

Susant Kumar Palai (1):
      VFS plugin was sending the actual size of the volume instead of the total number of block units because of which windows was getting the wrong volume capacity.

Volker Lendecke (32):
      ccan: Fix calling memset with zero length parameter
      nsswitch: Fix short writes in winbind_write_sock
      smbd: Fix a talloc hierarchy problem in msg_channel
      smbd: Fix bug 10284
      smbd: Fix regression for the dropbox case.
      smbd: Fix a panic when a smb2 brlock times out
      s3-winbind: Improve performance of wb_fill_pwent_sid2uid_done().
      smbd: Fix memory overwrites
      smbd: Fix an ancient oplock bug
      smbd: Fix bug 10593
      msg_channel: Fix a 100% CPU loop
      smbstatus: Fix an uninitialized variable
      smbd: Avoid double-free in get_print_db_byname
      torture3: Fix bug 10687
      samdb: Fix CID 1034910 Dereference before null check
      samdb: Fix CID 1034910 Dereference before null check
      samdb: Fix CID 1034910 Dereference before null check
      ldb: Fix a const warning
      ldb: Fix CID 1034793 Dereference null return value
      pyldb: Fix CID 1034792 Dereference null return value
      ldb_map: Fix CID 1034791 Dereference null return value
      ldb: Fix CID 240798 Uninitialized pointer read
      ldb: Fix CID 241329 Array compared against 0
      ldb: Fix 1138330 Dereference null return value
      torture4: Adapt comment to code
      torture4: Make raw.lock.multilock fail after 20 seconds
      smbd: Remove 2 indentation levels
      fix unstrcpy
      fix unstrcpy
      lib: Remove unused nstrcpy
      lib: strings: Simplify strcasecmp
      smbd: Properly initialize mangle_hash

-----------------------------------------------------------------------

This annotated tag includes the following new commits:

       new  b474dc7   VERSION: Bump version number up to 4.1.11...
       new  7e7790f   Merge tag 'samba-4.1.10' into v4-1-test
       new  cf24c8b   fix unstrcpy
       new  4c6ab5d   WHATSNEW: Add release notes for Samba 4.1.11.
       new  59ebc4c   VERSION: Disable git snapshots for the 4.1.11 release.
       new  c8eea31   VERSION: Bump version up to 4.1.12.
       new  2578423   Imported Upstream version 4.1.11
       new  d480a9a   Imported Upstream version 4.1.11
       new  f1cd122   lib: tevent: make TEVENT_SIG_INCREMENT atomic.
       new  4a5a042   libcli/auth: also set secure channel type in netlogon_creds_client_init().
       new  cddc250   selftest/knownfail: add ^samba4.rpc.netlogon.*.invalidAuthenticate2 for v4-1-*
       new  39aeb27   s4:torture/rpc: add invalidAuthenticate2
       new  857d7b0   s3:lib/memcache: use uint8_t instead of uint8
       new  cf6b312   s3:lib/memcache: make use of talloc for memcache_elements
       new  9e4042b   s3:lib/memcache: only include the required header files
       new  8907f5e   lib/util: move memcache.[ch] to the toplevel 'samba-util' library
       new  a78ec00   s4:rpc_server/netlogon: keep a global challenge table
       new  a2a4d0b   s4:torture/rpc: add rpc.netlogon.ServerReqChallengeGlobal
       new  9449ff4   sys_poll_intr: fix timeout arithmetic
       new  189afb4   s3:idmap: don't log missing range config if range checking not requested
       new  bddae75   s3:vfs:gpfs: store the winAttrs in the struct_ex when we got them in vfs_gpfs_fstat()
       new  1c82326   s3:vfs:gpfs: fix flapping offline: always get winAttrs from gpfs for is_offline
       new  9093f2d   s3:vfs:gpfs: Remove all reading uses of stat_ex.vfs_private from vfs_gfs.
       new  7c49479   s3:vfs:gpfs: remove all writing uses of stat_ex.vfs_private from vfs_gpfs.
       new  4791d5c   s3:vfs:gpfs: remove a block and reduce indentation in gpfs_is_offline()
       new  cef3156   s3: remove stat_ex.vfs_private completely
       new  8f63de4   s3: xml-docs. Ensure users of 'net time' know the remote server must be specified with -S.
       new  bcc0f97   s3: net time - fix usage and core dump.
       new  6f46d80   s4-rpc: dnsserver: Allow . to be specified for @ record
       new  93c30e2   tests: dnsserver: Add a update test with name set to '.'
       new  c78ff84   build: fix configure to honour --without-dmapi
       new  99f8ca1   lib: Remove unused nstrcpy
       new  1c92a1a   Fixed a memory leak in cli_set_mntpoint().
       new  f5d7b2d   security.idl: add SMB_SUPPORTED_SECINFO_FLAGS
       new  83c039c   s3:smbd: mask security_information input values with SMB_SUPPORTED_SECINFO_FLAGS
       new  42149a9   libcli/security: add better detection of SECINFO_[UN]PROTECTED_[D|S]ACL in get_sec_info()
       new  3a0ee0a   s3: smbd: POSIX ACLs. Remove incorrect check for SECINFO_PROTECTED_DACL in incoming security_information flags in posix_get_nt_acl_common().
       new  9bac84f   s3:libsmb: Set a max charge for SMB2 connections
       new  834d1f6   passdb: fix NT_STATUS_NO_SUCH_GROUP
       new  3e6e260   s3: enforce a positive allocation_file_size for non-empty files (bug #10543)
       new  925a98d   s3: smbd - SMB[2|3]. Ensure a \ or / can't be found anywhere in a search path, not just at the start.
       new  b95dbbe   s3: smbd : SMB2 - fix SMB2_SEARCH when searching non wildcard string with a case-canonicalized share.
       new  83f448d   printing: traverse_read the printer list for share updates
       new  0fae4d3   printing: only reload printer shares on client enum
       new  62df2fd   printing: reload printer_list.tdb from in memory list
       new  b8042f8   printing: remove pcap_cache_add()
       new  5a647c5   printing: return last change time with pcap_cache_loaded()
       new  728e951   smbd: only reprocess printer_list.tdb if it changed
       new  44a3d3f   server: remove duplicate snum_is_shared_printer()
       new  00a0c2d   smbd: split printer reload processing
       new  5df60b2   printing: reload printer shares on OpenPrinter
       new  a8cbd5a   lib: strings: Fix the behavior of strcasecmp_m_handle() in the face of bad conversions.
       new  2765daa   lib: strings: Fix the behavior of strncasecmp_m_handle() in the face of bad conversions.
       new  7c54339   s4: tests: Added local.charset test for Bug 10716 - smbd constantly crashes when filename contains non-ascii character
       new  c556d3e   lib: strings: Simplify strcasecmp
       new  df9396a   samba: Retain case sensitivity of cifs client
       new  7a58844   docs: Fix typos in smb.conf (inherit acls)
       new  708986f   Don't discard result of checking grouptype
       new  a5f0ec0   smbd: Properly initialize mangle_hash
       new  121cad3   dosmode: fix FSCTL_SET_SPARSE request validation
       new  fa781e2   s3: winbindd: Add new parameter "winbind request timeout" set to 60 seconds with man page.
       new  391b29a   s3: winbindd: On new client connect, prune idle or hung connections older than "winbind request timeout"
       new  1ef078e   libcli/dns: add AAAA support to dns_hosts_file.c
       new  534f6aa   libcli/dns: ignore NS entries in dns_hosts_file.c at a higher log level for now
       new  b62a179   selftest: export _IPV6 environment variables
       new  2759e97   selftest/Samba4: also bind to ipv6
       new  0eaca4c   selftest/Samba3: also bind to ipv6
       new  a444402   python/join: use lowercase for the dnshostname.
       new  40bac8e   s4:samba_dnsupdate: don't lower case the registered names
       new  f8b7027   s4:samba_dnsupdate: fix dnsobj.__str__()
       new  0301b53   s4:samba_dnsupdate: cache the already registered records
       new  78cad21   s4:samba_dnsupdate: don't try to be smart when verifying NS records
       new  d3947ea   s4:samba_dnsupdate: provide more substitution variables e.g. IF_RODC
       new  5fdc841   s4:setup/dns_update_list: make use of the new substitution variables
       new  019c587   s4-rpc: dnsserver: Correctly set rank for glue NS records
       new  c371cad   s4-rpc: dnsserver: Do not return NS_GLUE records with VIEW_GLUE_DATA filter
       new  748e78e   s4-rpc: dnsserver: return DNS_RANK_NS_GLUE recors when explicitly asked for
       new  eb0e0b1   provision: Correctly provision the SOA record minimum TTL
       new  e6adf09   s4:dns_server: handle WERR_DNS_ERROR_NAME_DOES_NOT_EXIST in werr_to_dns_err()
       new  d3abd55   s4:dns_server: map LDB_ERR_NO_SUCH_OBJECT to WERR_DNS_ERROR_NAME_DOES_NOT_EXIST
       new  f3e6b38   s4:dns_server: split out a private 'dnsserver_common' library
       new  f3df058   s4:dns_server: split out dns_common_extract() and dns_common_lookup()
       new  256349dd  s4:dns_server: remove const from dns_replace_records()
       new  ec0df9f   s4:dns_server: split out dns_common_replace()
       new  31b5192   s4:dns_server: use .wType = DNS_TYPE_TOMBSTONE instead of ZERO_STRUCT()
       new  2fbb9b9   s4:dns_server: make sure dns_common_lookup() doesn't return tombstones
       new  0329ef4   s4:dns_server: add DNS_TYPE_TOMBSTONE support to dns_common_replace()
       new  f23aa6f   s4:dns_server: handle tombstones in handle_one_update()
       new  889e958   s4:dlz_bind9: avoid some compiler warnings
       new  ce13047   s4:dlz_bind9: do an early talloc_free(el_ctx) in dlz_allnodes()
       new  f5d39b6   s4:torture:dlz_bind9: fix spnego tests
       new  0542349   torture-dns: Add test for dlz_bind9 lookups
       new  0b9c775   torture-dns: Add test for dlz_bind9 zonedumps
       new  4f7d4fd   torture-dns: Add test for dlz_bind9 updates
       new  07f72fc   s4:dlz_bind9: let dlz_bind9 use dns_common_lookup() for name lookup
       new  5a3b783   s4:dlz_bind9: let dlz_bind9 use dns_common_extract()
       new  f20179b   s4:dlz_bind9: let dlz_bind9 use dns_common_replace()
       new  8de4f48   s4:dlz_bind9: let dlz_bind9 use dns_common_lookup() before removing records
       new  132b848   s4:dlz_bind9: let dlz_bind9 use dns_common_lookup() before add/modify
       new  98fb614   s4-rpc: dnsserver: Do not search for deleted DNS entries
       new  f165bb9   s4-rpc: dnsserver: handle updates of tombstoned dnsNode objects
       new  5475d5e   s3: smbd: vfs_dirsort module.
       new  85c575d   WHATSNEW: Add release notes for Samba 4.1.12.
       new  6cc1d30   Merge tag 'samba-4.1.11' into v4-1-test
       new  7936819   Imported Upstream version 4.1.12+dfsg

The 105 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-samba/samba.git




More information about the Pkg-samba-maint mailing list