s3-swat: Fix typo.

Thanks to Simo for reporting!

Karolin
(cherry picked from commit 9f73c1990a19daa899fa5345530a867e69a5be94)
(cherry picked from commit bcb052c29212954a3ed10c9f095c51e4e0a96af5)

s3 swat: Fix possible XSS attack (bug #8289)

Nobuhiro Tsuji of NTT DATA SECURITY CORPORATION reported a possible XSS attack
against SWAT, the Samba Web Administration Tool. The attack uses reflection to
insert arbitrary content into the "change password" page.

This patch fixes the reflection issue by not printing user-specified content on
the website anymore.

Signed-off-by: Kai Blin <kai@samba.org>

talloc: Support PYTHON environment variable.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Tue Jul 26 22:21:30 CEST 2011 on sn-devel-104

s3-build: Only define ldb3 when not in standalone build.

This prevents errors about it by 'make SYMBOLCHECK=1' if there is a
system ldb present.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Tue Jul 26 18:21:48 CEST 2011 on sn-devel-104

shares: Remove dependencies on share modules.

The build system will already pull these in - if necessary.

s4:samba-tool: ldapcmp needs CredentialsOptionsDouble

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Tue Jul 26 17:09:32 CEST 2011 on sn-devel-104

s3:lib change default share security access mask

when there is no share SD set, the default share SD that
is used e.g. for the output of sharesec -v defaults to a
value that is not equivalent to the desired FULL access.

This is a more or less a cosmetical follow-up for the patches
in Bug #8201 that makes them more consumeable by printing
FULL (that is what the user expects) instead of a bitmask
in hexadecimal form.

previous output:
REVISION:1
OWNER:(NULL SID)
GROUP:(NULL SID)
ACL:S-1-1-0:ALLOWED/0/0x101f01ff

with patch:
REVISION:1
OWNER:(NULL SID)
GROUP:(NULL SID)
ACL:S-1-1-0:ALLOWED/0/FULL

Autobuild-User: Christian Ambach <ambi@samba.org>
Autobuild-Date: Tue Jul 26 15:57:55 CEST 2011 on sn-devel-104

libsamba-util: Build in libbitmap.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Tue Jul 26 14:45:27 CEST 2011 on sn-devel-104

policy: Rename to samba-policy to avoid name space clashes.

cli_composite: Lowercase name.

cli_smb_common: Lowercase name.

cli_cldap: Lowercase name.

cli_spools: Lowercase name.

s3: Fix MIT trusts

Winbind can't really cope with trusts that don't have a SID associated. This
happens with external MIT trusts for example. This filters them out when
sending the trust list from child to parent.

Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Tue Jul 26 11:39:53 CEST 2011 on sn-devel-104

s4:kdc: canonicalize the principal if HDB_F_FOR_TGS_REQ is given

Windows seems to always canonicalize the principal in TGS replies.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Tue Jul 26 03:25:06 CEST 2011 on sn-devel-104

s4:heimdal_build: hdb.asn1 needs --sequence=HDB-Ext-KeySet --sequence=Keys

metze

s4:heimdal: import lorikeet-heimdal-201107241840 (commit 0fdf11fa3cdb47df9f5393ebf36d9f5742243036)

Fix typo Loggs -> Logs.

Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Mon Jul 25 23:49:04 CEST 2011 on sn-devel-104

s3:docs: document the smbclient "tid" command

Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Mon Jul 25 13:14:57 CEST 2011 on sn-devel-104

s3:docs: document the smbclient "tdis" command

s3:docs: document the smbclient "tcon" command

s3:docs: document the smbclient "logoff" command

lib/ccan: update to init-1192-gdd04041

This imports licensing clarifications and updates as discussed on
samba-technical ("Subject: Re: ccan code breaks older build farm
systems").

In particular, the recent version have per-file license markers, and
some modules are relicenced more liberally: in particular Simo pointed
out that htable was GPL, and indirectly included by libtdb2, which
would have made that GPL as well.

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
Autobuild-User: Rusty Russell <rusty@rustcorp.com.au>
Autobuild-Date: Mon Jul 25 12:03:40 CEST 2011 on sn-devel-104

lib/ccan: add README

README points out that these code snippets have their own licenses,
and that their home is elsewhere.

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>

s4:auth/kerberos: activate windows related krb5 flags

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Mon Jul 25 09:45:01 CEST 2011 on sn-devel-104

s4:heimdal: build samba4kgetcred

metze

s3-utils/net_rpc_printer.c: fix error message

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Sun Jul 24 19:01:47 CEST 2011 on sn-devel-104

s3: Fix Coverity ID 2596, REVERSE_INULL

Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Sun Jul 24 16:37:19 CEST 2011 on sn-devel-104

cli_raw: Make name lowercase.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sat Jul 23 23:20:51 CEST 2011 on sn-devel-104

charset: Make name lowercase everywhere.

wafsamba: Properly lock object store when retrieving version through Bazaar.

remove the fedora package, and point at the repository instead

README.Coding: Mention that PEP8 is the standard for Python code.

Almost all of our existing code is PEP8, and virtually every other free software
project in Python uses PEP8.

update TODO: net has been renamed to samba-tool.

scripting/bin: Some formatting fixes.

s3:libsmb: cli_set_secdesc() only needs a const struct security_descriptor

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Sat Jul 23 11:08:19 CEST 2011 on sn-devel-104

libcli/security: add some const to marshall_sec_desc[_buf]()

metze

s3:libsmb: remove unused cli_query_secdesc_old()

metze

s3:libsmb_xattr: make use of the new cli_query_secdesc()

metze

s3-utils/net_rpc.c: replace cli_query_secdesc_old()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-utils/net_rpc_printer.c: replace cli_query_secdesc_old()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-utils/smbcacls.c: replace cli_query_secdesc_old()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-client/client.c: replace cli_query_secdesc_old()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-torture: run_nttrans_create(): replace cli_query_secdesc_old()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-libsmb: introduce new cli_query_secdesc() which returns NTSTATUS

Replacement for cli_query_secdesc_old()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-libsmb: rename cli_query_secdesc() to cli_query_secdesc_old()

Will introduce new cli_query_secdesc() function

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-libsmb: finally remove cli_read_old()

Replaced by new cli_read() which returns NTSTATUS instead of ssize_t.

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-libsmb/libsmb_file.c: replace cli_read_old() with cli_read()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-torture/nbio.c: replace cli_read_old() with cli_read()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-torture/utable.c: replace cli_read_old() with cli_read()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-utils/net_rpc_printer.c: print more info on write error

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-utils/net_rpc_printer.c: return on read error in net_copy_file()

replace cli_read_old() with cli_read()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-torture/denytest.c: replace cli_read_old() with cli_read()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-libgpo/gpo_filesync.c: return on read error

replace cli_read_old() with cli_read()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-client/clitar.c: replace cli_read_old() with cli_read()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-torture: run_oplock2(): replace cli_read_old() with cli_read()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-torture: run_fdsesstest(): replace cli_read_old() with cli_read()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-torture: run_fdpasstest(): replace cli_read_old() with cli_read()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-torture: run_locktest7(): replace cli_read_old() with cli_read()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-torture: run_locktest7(): goto fail on read error

Signed-off-by: Stefan Metzmacher <metze@samba.org>

Fix bug 8314] - smbd crash with unknown user.

All other auth modules code with being called with
auth_method->private_data being NULL, make the auth_server
module cope with this too.

Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Sat Jul 23 02:55:01 CEST 2011 on sn-devel-104

s3:libsmb: move cli_state->desthost to cli_state->conn.remote_name

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Fri Jul 22 18:17:41 CEST 2011 on sn-devel-104

s3:winbindd_cm: use controller instead of cli->desthost

The should have the same value.

metze

s3:net_util: use server_name instead of cli->desthost

They should be the same.

metze

s3:net_rpc_registry: use pipe_hnd->desthost instead of cli->desthost

metze

s3:net_rpc_printer: make use of cli_state_remote_name()

metze

s3:net_rpc_join: make use of cli_state_remote_name()

metze

s3:net_rpc_join: use pipe_hnd->desthost instead of cli->desthost

metze

s3:net_rpc: make use of cli_state_remote_name()

metze

s3:net_rpc: use netr->desthost instead of cli->desthost

metze

s3:net_rap: make use of cli_state_remote_name()

metze

s3:rpcclient: make use of cli_state_remote_name()

metze

s3:rpcclient: use rpc_pipe->desthost instead of cli->desthost

metze

s3:cli_pipe_schannel: make use of cli_state_remote_name()

metze

s3:cli_pipe: make use of cli_state_remote_name()

metze

s3:cli_pipe: use result->desthost instead of cli->desthost

metze

s3:libsmb_server: make use of cli_state_remote_name()

metze

s3:libsmb/libsmb_dir: make use of cli_state_remote_name()

metze

s3:libsmb/clirap2: make use of cli_state_remote_name()

metze

s3:libsmb/clifsinfo: make use of cli_state_remote_name()

metze

s3:libsmb/clidfs: make use of cli_state_remote_name()

metze

s3:libsmb/cliconnect: make use of cli_state_remote_name()

metze

s3:libnet_join: make use of cli_state_remote_name()

s3:lib/netapi: make use of cli_state_remote_name()

metze

s3:client: make use of cli_state_remote_name()

metze

s3:auth_server: make use of cli_state_remote_name()

metze

s3:auth_domain: we already have the dc_name, it's the same as cli->desthost

metze

s3:libsmb: add cli_state_remote_name()

metze

s3:libsmb: remove const from cli_cm_display()

metze

s3-torture: run_locktest4(): replace cli_read_old() with cli_read()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3-torture: introduce test_cli_read()

test_cli_read calls cli_read and returns success or failure

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s3:libsmb: move cli_state->{src_ss,dest_ss} to cli_state->conn.{local_ss,remote_ss}

metze

s3:net_rpc_printer: make use of cli_state_remote_sockaddr()

metze

s3:net_rpc: make use of cli_state_remote_sockaddr()

metze

s3:net_rpc_join: make use of cli_state_remote_sockaddr()

metze

s3:net_rpc_join: pass const sockaddr_storage to net_rpc_join_ok()

metze

s3:net_util: pass const sockaddr_storage to net_make_ipc_connection_ex()

metze

s3:net_util: add some const to sockaddr_storage

metze

s3:auth_domain: add some const to sockaddr_storage

metze

s3:libsmb: only pass const sockaddr_storage to cli_full_connection()

No direct or indirect caller needs this to be set.

metze