diff --git a/.gitignore b/.gitignore
index 3f7e875..90e2be2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -171,3 +171,5 @@ samba-3.6.0pre1.tar.gz
 /samba-4.10.6.tar.asc
 /samba-4.11.0rc1.tar.xz
 /samba-4.11.0rc1.tar.asc
+/samba-4.11.0rc2.tar.xz
+/samba-4.11.0rc2.tar.asc
diff --git a/samba-bz14091-v4.10-backport.patch b/samba-bz14091-v4.10-backport.patch
deleted file mode 100644
index 104e78e..0000000
--- a/samba-bz14091-v4.10-backport.patch
+++ /dev/null
@@ -1,650 +0,0 @@
-From 536df2c1070d516ab95ad96b606fcc1f92c3668d Mon Sep 17 00:00:00 2001
-From: Alexander Bokovoy <ab@samba.org>
-Date: Thu, 1 Aug 2019 21:08:52 +0300
-Subject: [PATCH 1/3] torture/rpc/lsa: allow testing different lookup levels
-
-Convert torture/rpc/lsa LookupNames/LookupSids code to allow testing
-different LSA_LOOKUP_NAMES_* levels. Keep existing level 1
-(LSA_LOOKUP_NAMES_ALL) for the current set of tests.
-
-BUG: https://bugzilla.samba.org/show_bug.cgi?id=14091
-
-Signed-off-by: Alexander Bokovoy <ab@samba.org>
-Reviewed-by: Andreas Schneider <asn@samba.org>
-
-(cherry picked from commit 317bc6a7342edfa2c503f5932142bf5883485cc9)
----
- source4/torture/rpc/lsa.c      | 118 ++++++++++++++++++---------------
- source4/torture/rpc/schannel.c |   2 +-
- 2 files changed, 67 insertions(+), 53 deletions(-)
-
-diff --git a/source4/torture/rpc/lsa.c b/source4/torture/rpc/lsa.c
-index bc1e9553039..b7dd0dc8c91 100644
---- a/source4/torture/rpc/lsa.c
-+++ b/source4/torture/rpc/lsa.c
-@@ -270,6 +270,7 @@ static bool test_OpenPolicy2_fail(struct dcerpc_binding_handle *b,
- static bool test_LookupNames(struct dcerpc_binding_handle *b,
- 			     struct torture_context *tctx,
- 			     struct policy_handle *handle,
-+			     enum lsa_LookupNamesLevel level,
- 			     struct lsa_TransNameArray *tnames)
- {
- 	struct lsa_LookupNames r;
-@@ -302,7 +303,7 @@ static bool test_LookupNames(struct dcerpc_binding_handle *b,
- 	r.in.handle = handle;
- 	r.in.names = names;
- 	r.in.sids = &sids;
--	r.in.level = 1;
-+	r.in.level = level;
- 	r.in.count = &count;
- 	r.out.count = &count;
- 	r.out.sids = &sids;
-@@ -358,7 +359,8 @@ static bool test_LookupNames(struct dcerpc_binding_handle *b,
- 
- static bool test_LookupNames_bogus(struct dcerpc_binding_handle *b,
- 				   struct torture_context *tctx,
--				   struct policy_handle *handle)
-+				   struct policy_handle *handle,
-+				   enum lsa_LookupNamesLevel level)
- {
- 	struct lsa_LookupNames r;
- 	struct lsa_TransSidArray sids;
-@@ -377,7 +379,7 @@ static bool test_LookupNames_bogus(struct dcerpc_binding_handle *b,
- 	r.in.num_names = 1;
- 	r.in.names = names;
- 	r.in.sids = &sids;
--	r.in.level = 1;
-+	r.in.level = level;
- 	r.in.count = &count;
- 	r.out.count = &count;
- 	r.out.sids = &sids;
-@@ -398,7 +400,8 @@ static bool test_LookupNames_bogus(struct dcerpc_binding_handle *b,
- 
- static bool test_LookupNames_NULL(struct dcerpc_binding_handle *b,
- 				  struct torture_context *tctx,
--				  struct policy_handle *handle)
-+				  struct policy_handle *handle,
-+				  enum lsa_LookupNamesLevel level)
- {
- 	struct lsa_LookupNames r;
- 	struct lsa_TransSidArray sids;
-@@ -417,7 +420,7 @@ static bool test_LookupNames_NULL(struct dcerpc_binding_handle *b,
- 	r.in.num_names = 1;
- 	r.in.names = names;
- 	r.in.sids = &sids;
--	r.in.level = 1;
-+	r.in.level = level;
- 	r.in.count = &count;
- 	r.out.count = &count;
- 	r.out.sids = &sids;
-@@ -442,7 +445,8 @@ static bool test_LookupNames_NULL(struct dcerpc_binding_handle *b,
- 
- static bool test_LookupNames_wellknown(struct dcerpc_binding_handle *b,
- 				       struct torture_context *tctx,
--				       struct policy_handle *handle)
-+				       struct policy_handle *handle,
-+				       enum lsa_LookupNamesLevel level)
- {
- 	struct lsa_TranslatedName name;
- 	struct lsa_TransNameArray tnames;
-@@ -454,45 +458,46 @@ static bool test_LookupNames_wellknown(struct dcerpc_binding_handle *b,
- 	tnames.count = 1;
- 	name.name.string = "NT AUTHORITY\\SYSTEM";
- 	name.sid_type = SID_NAME_WKN_GRP;
--	ret &= test_LookupNames(b, tctx, handle, &tnames);
-+	ret &= test_LookupNames(b, tctx, handle, level, &tnames);
- 
- 	name.name.string = "NT AUTHORITY\\ANONYMOUS LOGON";
- 	name.sid_type = SID_NAME_WKN_GRP;
--	ret &= test_LookupNames(b, tctx, handle, &tnames);
-+	ret &= test_LookupNames(b, tctx, handle, level, &tnames);
- 
- 	name.name.string = "NT AUTHORITY\\Authenticated Users";
- 	name.sid_type = SID_NAME_WKN_GRP;
--	ret &= test_LookupNames(b, tctx, handle, &tnames);
-+	ret &= test_LookupNames(b, tctx, handle, level, &tnames);
- 
- #if 0
- 	name.name.string = "NT AUTHORITY";
--	ret &= test_LookupNames(b, tctx, handle, &tnames);
-+	ret &= test_LookupNames(b, tctx, handle, level, &tnames);
- 
- 	name.name.string = "NT AUTHORITY\\";
--	ret &= test_LookupNames(b, tctx, handle, &tnames);
-+	ret &= test_LookupNames(b, tctx, handle, level, &tnames);
- #endif
- 
- 	name.name.string = "BUILTIN\\";
- 	name.sid_type = SID_NAME_DOMAIN;
--	ret &= test_LookupNames(b, tctx, handle, &tnames);
-+	ret &= test_LookupNames(b, tctx, handle, level, &tnames);
- 
- 	name.name.string = "BUILTIN\\Administrators";
- 	name.sid_type = SID_NAME_ALIAS;
--	ret &= test_LookupNames(b, tctx, handle, &tnames);
-+	ret &= test_LookupNames(b, tctx, handle, level, &tnames);
- 
- 	name.name.string = "SYSTEM";
- 	name.sid_type = SID_NAME_WKN_GRP;
--	ret &= test_LookupNames(b, tctx, handle, &tnames);
-+	ret &= test_LookupNames(b, tctx, handle, level, &tnames);
- 
- 	name.name.string = "Everyone";
- 	name.sid_type = SID_NAME_WKN_GRP;
--	ret &= test_LookupNames(b, tctx, handle, &tnames);
-+	ret &= test_LookupNames(b, tctx, handle, level, &tnames);
- 	return ret;
- }
- 
- static bool test_LookupNames2(struct dcerpc_binding_handle *b,
- 			      struct torture_context *tctx,
- 			      struct policy_handle *handle,
-+			      enum lsa_LookupNamesLevel level,
- 			      struct lsa_TransNameArray2 *tnames,
- 			      bool check_result)
- {
-@@ -525,7 +530,7 @@ static bool test_LookupNames2(struct dcerpc_binding_handle *b,
- 	r.in.handle = handle;
- 	r.in.names = names;
- 	r.in.sids = &sids;
--	r.in.level = 1;
-+	r.in.level = level;
- 	r.in.count = &count;
- 	r.in.lookup_options = 0;
- 	r.in.client_revision = 0;
-@@ -554,6 +559,7 @@ static bool test_LookupNames2(struct dcerpc_binding_handle *b,
- static bool test_LookupNames3(struct dcerpc_binding_handle *b,
- 			      struct torture_context *tctx,
- 			      struct policy_handle *handle,
-+			      enum lsa_LookupNamesLevel level,
- 			      struct lsa_TransNameArray2 *tnames,
- 			      bool check_result)
- {
-@@ -585,7 +591,7 @@ static bool test_LookupNames3(struct dcerpc_binding_handle *b,
- 	r.in.handle = handle;
- 	r.in.names = names;
- 	r.in.sids = &sids;
--	r.in.level = 1;
-+	r.in.level = level;
- 	r.in.count = &count;
- 	r.in.lookup_options = 0;
- 	r.in.client_revision = 0;
-@@ -613,6 +619,7 @@ static bool test_LookupNames3(struct dcerpc_binding_handle *b,
- 
- static bool test_LookupNames4(struct dcerpc_binding_handle *b,
- 			      struct torture_context *tctx,
-+			      enum lsa_LookupNamesLevel level,
- 			      struct lsa_TransNameArray2 *tnames,
- 			      bool check_result)
- {
-@@ -644,7 +651,7 @@ static bool test_LookupNames4(struct dcerpc_binding_handle *b,
- 	r.in.num_names = tnames->count;
- 	r.in.names = names;
- 	r.in.sids = &sids;
--	r.in.level = 1;
-+	r.in.level = level;
- 	r.in.count = &count;
- 	r.in.lookup_options = 0;
- 	r.in.client_revision = 0;
-@@ -682,7 +689,8 @@ static bool test_LookupNames4(struct dcerpc_binding_handle *b,
- }
- 
- static bool test_LookupNames4_fail(struct dcerpc_binding_handle *b,
--				   struct torture_context *tctx)
-+				   struct torture_context *tctx,
-+				   enum lsa_LookupNamesLevel level)
- {
- 	struct lsa_LookupNames4 r;
- 	struct lsa_TransSidArray3 sids;
-@@ -701,7 +709,7 @@ static bool test_LookupNames4_fail(struct dcerpc_binding_handle *b,
- 	r.in.num_names = count;
- 	r.in.names = names;
- 	r.in.sids = &sids;
--	r.in.level = 1;
-+	r.in.level = level;
- 	r.in.count = &count;
- 	r.in.lookup_options = 0;
- 	r.in.client_revision = 0;
-@@ -749,6 +757,7 @@ static bool test_LookupNames4_fail(struct dcerpc_binding_handle *b,
- static bool test_LookupSids(struct dcerpc_binding_handle *b,
- 			    struct torture_context *tctx,
- 			    struct policy_handle *handle,
-+			    enum lsa_LookupNamesLevel level,
- 			    struct lsa_SidArray *sids)
- {
- 	struct lsa_LookupSids r;
-@@ -764,7 +773,7 @@ static bool test_LookupSids(struct dcerpc_binding_handle *b,
- 	r.in.handle = handle;
- 	r.in.sids = sids;
- 	r.in.names = &names;
--	r.in.level = 1;
-+	r.in.level = level;
- 	r.in.count = &count;
- 	r.out.count = &count;
- 	r.out.names = &names;
-@@ -779,7 +788,7 @@ static bool test_LookupSids(struct dcerpc_binding_handle *b,
- 
- 	torture_comment(tctx, "\n");
- 
--	if (!test_LookupNames(b, tctx, handle, &names)) {
-+	if (!test_LookupNames(b, tctx, handle, level, &names)) {
- 		return false;
- 	}
- 
-@@ -790,6 +799,7 @@ static bool test_LookupSids(struct dcerpc_binding_handle *b,
- static bool test_LookupSids2(struct dcerpc_binding_handle *b,
- 			    struct torture_context *tctx,
- 			    struct policy_handle *handle,
-+			    enum lsa_LookupNamesLevel level,
- 			    struct lsa_SidArray *sids)
- {
- 	struct lsa_LookupSids2 r;
-@@ -805,7 +815,7 @@ static bool test_LookupSids2(struct dcerpc_binding_handle *b,
- 	r.in.handle = handle;
- 	r.in.sids = sids;
- 	r.in.names = &names;
--	r.in.level = 1;
-+	r.in.level = level;
- 	r.in.count = &count;
- 	r.in.lookup_options = 0;
- 	r.in.client_revision = 0;
-@@ -824,11 +834,11 @@ static bool test_LookupSids2(struct dcerpc_binding_handle *b,
- 
- 	torture_comment(tctx, "\n");
- 
--	if (!test_LookupNames2(b, tctx, handle, &names, false)) {
-+	if (!test_LookupNames2(b, tctx, handle, level, &names, false)) {
- 		return false;
- 	}
- 
--	if (!test_LookupNames3(b, tctx, handle, &names, false)) {
-+	if (!test_LookupNames3(b, tctx, handle, level, &names, false)) {
- 		return false;
- 	}
- 
-@@ -837,6 +847,7 @@ static bool test_LookupSids2(struct dcerpc_binding_handle *b,
- 
- static bool test_LookupSids3(struct dcerpc_binding_handle *b,
- 			    struct torture_context *tctx,
-+			    enum lsa_LookupNamesLevel level,
- 			    struct lsa_SidArray *sids)
- {
- 	struct lsa_LookupSids3 r;
-@@ -851,7 +862,7 @@ static bool test_LookupSids3(struct dcerpc_binding_handle *b,
- 
- 	r.in.sids = sids;
- 	r.in.names = &names;
--	r.in.level = 1;
-+	r.in.level = level;
- 	r.in.count = &count;
- 	r.in.lookup_options = 0;
- 	r.in.client_revision = 0;
-@@ -880,7 +891,7 @@ static bool test_LookupSids3(struct dcerpc_binding_handle *b,
- 
- 	torture_comment(tctx, "\n");
- 
--	if (!test_LookupNames4(b, tctx, &names, true)) {
-+	if (!test_LookupNames4(b, tctx, level, &names, true)) {
- 		return false;
- 	}
- 
-@@ -889,6 +900,7 @@ static bool test_LookupSids3(struct dcerpc_binding_handle *b,
- 
- static bool test_LookupSids3_fail(struct dcerpc_binding_handle *b,
- 				  struct torture_context *tctx,
-+				  enum lsa_LookupNamesLevel level,
- 				  struct lsa_SidArray *sids)
- {
- 	struct lsa_LookupSids3 r;
-@@ -904,7 +916,7 @@ static bool test_LookupSids3_fail(struct dcerpc_binding_handle *b,
- 
- 	r.in.sids = sids;
- 	r.in.names = &names;
--	r.in.level = 1;
-+	r.in.level = level;
- 	r.in.count = &count;
- 	r.in.lookup_options = 0;
- 	r.in.client_revision = 0;
-@@ -948,7 +960,8 @@ static bool test_LookupSids3_fail(struct dcerpc_binding_handle *b,
- 
- bool test_many_LookupSids(struct dcerpc_pipe *p,
- 			  struct torture_context *tctx,
--			  struct policy_handle *handle)
-+			  struct policy_handle *handle,
-+			  enum lsa_LookupNamesLevel level)
- {
- 	uint32_t count;
- 	struct lsa_SidArray sids;
-@@ -979,7 +992,7 @@ bool test_many_LookupSids(struct dcerpc_pipe *p,
- 		r.in.handle = handle;
- 		r.in.sids = &sids;
- 		r.in.names = &names;
--		r.in.level = 1;
-+		r.in.level = level;
- 		r.in.count = &names.count;
- 		r.out.count = &count;
- 		r.out.names = &names;
-@@ -995,16 +1008,16 @@ bool test_many_LookupSids(struct dcerpc_pipe *p,
- 
- 		torture_comment(tctx, "\n");
- 
--		if (!test_LookupNames(b, tctx, handle, &names)) {
-+		if (!test_LookupNames(b, tctx, handle, level, &names)) {
- 			return false;
- 		}
- 	}
- 
- 	if (transport == NCACN_NP) {
--		if (!test_LookupSids3_fail(b, tctx, &sids)) {
-+		if (!test_LookupSids3_fail(b, tctx, level, &sids)) {
- 			return false;
- 		}
--		if (!test_LookupNames4_fail(b, tctx)) {
-+		if (!test_LookupNames4_fail(b, tctx, level)) {
- 			return false;
- 		}
- 	} else if (transport == NCACN_IP_TCP) {
-@@ -1020,10 +1033,10 @@ bool test_many_LookupSids(struct dcerpc_pipe *p,
- 
- 		if (auth_type == DCERPC_AUTH_TYPE_SCHANNEL &&
- 		    auth_level >= DCERPC_AUTH_LEVEL_INTEGRITY) {
--			if (!test_LookupSids3(b, tctx, &sids)) {
-+			if (!test_LookupSids3(b, tctx, level, &sids)) {
- 				return false;
- 			}
--			if (!test_LookupNames4(b, tctx, &names, true)) {
-+			if (!test_LookupNames4(b, tctx, level, &names, true)) {
- 				return false;
- 			}
- 		} else {
-@@ -1031,10 +1044,10 @@ bool test_many_LookupSids(struct dcerpc_pipe *p,
- 			 * If we don't have a secure channel these tests must
- 			 * fail with ACCESS_DENIED.
- 			 */
--			if (!test_LookupSids3_fail(b, tctx, &sids)) {
-+			if (!test_LookupSids3_fail(b, tctx, level, &sids)) {
- 				return false;
- 			}
--			if (!test_LookupNames4_fail(b, tctx)) {
-+			if (!test_LookupNames4_fail(b, tctx, level)) {
- 				return false;
- 			}
- 		}
-@@ -1066,7 +1079,8 @@ static void lookupsids_cb(struct tevent_req *subreq)
- 
- static bool test_LookupSids_async(struct dcerpc_binding_handle *b,
- 				  struct torture_context *tctx,
--				  struct policy_handle *handle)
-+				  struct policy_handle *handle,
-+				  enum lsa_LookupNamesLevel level)
- {
- 	struct lsa_SidArray sids;
- 	struct lsa_SidPtr sidptr;
-@@ -1101,7 +1115,7 @@ static bool test_LookupSids_async(struct dcerpc_binding_handle *b,
- 		r[i].in.handle = handle;
- 		r[i].in.sids = &sids;
- 		r[i].in.names = &names[i];
--		r[i].in.level = 1;
-+		r[i].in.level = level;
- 		r[i].in.count = &names[i].count;
- 		r[i].out.count = &count[i];
- 		r[i].out.names = &names[i];
-@@ -1912,11 +1926,11 @@ static bool test_EnumAccounts(struct dcerpc_binding_handle *b,
- 		torture_assert_ntstatus_ok(tctx, r.out.result,
- 			"EnumAccounts failed");
- 
--		if (!test_LookupSids(b, tctx, handle, &sids1)) {
-+		if (!test_LookupSids(b, tctx, handle, LSA_LOOKUP_NAMES_ALL, &sids1)) {
- 			return false;
- 		}
- 
--		if (!test_LookupSids2(b, tctx, handle, &sids1)) {
-+		if (!test_LookupSids2(b, tctx, handle, LSA_LOOKUP_NAMES_ALL, &sids1)) {
- 			return false;
- 		}
- 
-@@ -4811,7 +4825,7 @@ static bool test_QueryInfoPolicyCalls(	bool version2,
- 			tnames.names[12].sid_type = SID_NAME_USER;
- 			tnames.names[13].name.string = talloc_asprintf(tctx, TEST_MACHINENAME "$@%s", info->dns.dns_domain.string);
- 			tnames.names[13].sid_type = SID_NAME_USER;
--			ret &= test_LookupNames(b, tctx, handle, &tnames);
-+			ret &= test_LookupNames(b, tctx, handle, LSA_LOOKUP_NAMES_ALL, &tnames);
- 
- 		}
- 	}
-@@ -4977,7 +4991,7 @@ bool torture_rpc_lsa(struct torture_context *tctx)
- 			ret = false;
- 		}
- 
--		if (!test_many_LookupSids(p, tctx, handle)) {
-+		if (!test_many_LookupSids(p, tctx, handle, LSA_LOOKUP_NAMES_ALL)) {
- 			ret = false;
- 		}
- 
-@@ -4998,7 +5012,7 @@ bool torture_rpc_lsa(struct torture_context *tctx)
- 			ret = false;
- 		}
- 
--		if (!test_LookupSids_async(b, tctx, handle)) {
-+		if (!test_LookupSids_async(b, tctx, handle, LSA_LOOKUP_NAMES_ALL)) {
- 			ret = false;
- 		}
- 
-@@ -5022,7 +5036,7 @@ bool torture_rpc_lsa(struct torture_context *tctx)
- 			ret = false;
- 		}
- 
--		if (!test_many_LookupSids(p, tctx, handle)) {
-+		if (!test_many_LookupSids(p, tctx, handle, LSA_LOOKUP_NAMES_ALL)) {
- 			ret = false;
- 		}
- 
-@@ -5033,7 +5047,7 @@ bool torture_rpc_lsa(struct torture_context *tctx)
- 		torture_leave_domain(tctx, join);
- 
- 	} else {
--		if (!test_many_LookupSids(p, tctx, handle)) {
-+		if (!test_many_LookupSids(p, tctx, handle, LSA_LOOKUP_NAMES_ALL)) {
- 			ret = false;
- 		}
- 	}
-@@ -5108,7 +5122,7 @@ static bool testcase_LookupNames(struct torture_context *tctx,
- 	tnames.names[0].name.string = "BUILTIN";
- 	tnames.names[0].sid_type = SID_NAME_DOMAIN;
- 
--	if (!test_LookupNames(b, tctx, handle, &tnames)) {
-+	if (!test_LookupNames(b, tctx, handle, LSA_LOOKUP_NAMES_ALL, &tnames)) {
- 		ret = false;
- 	}
- 
-@@ -5118,23 +5132,23 @@ static bool testcase_LookupNames(struct torture_context *tctx,
- 	tnames2.names[0].name.string = "BUILTIN";
- 	tnames2.names[0].sid_type = SID_NAME_DOMAIN;
- 
--	if (!test_LookupNames2(b, tctx, handle, &tnames2, true)) {
-+	if (!test_LookupNames2(b, tctx, handle, LSA_LOOKUP_NAMES_ALL, &tnames2, true)) {
- 		ret = false;
- 	}
- 
--	if (!test_LookupNames3(b, tctx, handle, &tnames2, true)) {
-+	if (!test_LookupNames3(b, tctx, handle, LSA_LOOKUP_NAMES_ALL, &tnames2, true)) {
- 		ret = false;
- 	}
- 
--	if (!test_LookupNames_wellknown(b, tctx, handle)) {
-+	if (!test_LookupNames_wellknown(b, tctx, handle, LSA_LOOKUP_NAMES_ALL)) {
- 		ret = false;
- 	}
- 
--	if (!test_LookupNames_NULL(b, tctx, handle)) {
-+	if (!test_LookupNames_NULL(b, tctx, handle, LSA_LOOKUP_NAMES_ALL)) {
- 		ret = false;
- 	}
- 
--	if (!test_LookupNames_bogus(b, tctx, handle)) {
-+	if (!test_LookupNames_bogus(b, tctx, handle, LSA_LOOKUP_NAMES_ALL)) {
- 		ret = false;
- 	}
- 
-diff --git a/source4/torture/rpc/schannel.c b/source4/torture/rpc/schannel.c
-index de3a36eaa4f..c237c82bbe7 100644
---- a/source4/torture/rpc/schannel.c
-+++ b/source4/torture/rpc/schannel.c
-@@ -471,7 +471,7 @@ static bool test_schannel(struct torture_context *tctx,
- 		"failed to connect lsarpc with schannel");
- 
- 	torture_assert(tctx,
--		test_many_LookupSids(p_lsa, tctx, NULL),
-+		test_many_LookupSids(p_lsa, tctx, NULL, LSA_LOOKUP_NAMES_ALL),
- 		"LsaLookupSids3 failed!\n");
- 
- 	status = dcerpc_binding_set_transport(b, transport);
--- 
-2.21.0
-
-
-From e76b56290c2be142c43a3fd68584d51b9dc0efb7 Mon Sep 17 00:00:00 2001
-From: Alexander Bokovoy <ab@samba.org>
-Date: Thu, 1 Aug 2019 15:48:58 +0300
-Subject: [PATCH 2/3] lookup_name:  allow own domain lookup when flags == 0
-
-In 2007, we've added support for multiple lookup levels for LSA
-LookupNames family of calls. However, forest-wide lookups, as described
-in MS-LSAT 2.2.16, never worked because flags passed to lookup_name()
-were always set to zero, expecting at least default lookup on a DC to
-apply. lookup_name() was instead treating zero flags as 'skip all
-checks'.
-
-Allow at least own domain lookup in case domain name is the same.
-This should allow FreeIPA DC to respond to LSA LookupNames3 calls from a
-trusted AD DC side.
-
-For the reference, below is a request Windows Server 2016 domain
-controller sends to FreeIPA domain controller when attempting to look up
-a user from a trusted forest root domain that attemps to login to the
-domain controller. Notice the level in the lsa_LookupNames3 call and
-resulting flags in lookup_name().
-
-[2019/08/03 07:14:24.156065,  1, pid=23639, effective(967001000, 967001000), real(967001000, 0), class=rpc_parse] ../../librpc/ndr/ndr.c:471(ndr_print_function_debug)
-       lsa_LookupNames3: struct lsa_LookupNames3
-          in: struct lsa_LookupNames3
-              handle                   : *
-                  handle: struct policy_handle
-                      handle_type              : 0x00000000 (0)
-                      uuid                     : 0000004c-0000-0000-455d-3018575c0000
-              num_names                : 0x00000001 (1)
-              names: ARRAY(1)
-                  names: struct lsa_String
-                      length                   : 0x000a (10)
-                      size                     : 0x000c (12)
-                      string                   : *
-                          string                   : 'XS\ab'
-              sids                     : *
-                  sids: struct lsa_TransSidArray3
-                      count                    : 0x00000000 (0)
-                      sids                     : NULL
-              level                    : LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY2 (6)
-              count                    : *
-                  count                    : 0x00000000 (0)
-              lookup_options           : LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES (0)
-              client_revision          : LSA_CLIENT_REVISION_2 (2)
-[2019/08/03 07:14:24.156189,  6, pid=23639, effective(967001000, 967001000), real(967001000, 0), class=rpc_srv] ../../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal)
-  Found policy hnd[0] [0000] 00 00 00 00 4C 00 00 00   00 00 00 00 45 5D 30 18   ....L... ....E]0.
-  [0010] 57 5C 00 00                                        W\..
-[2019/08/03 07:14:24.156228,  4, pid=23639, effective(967001000, 967001000), real(967001000, 0)] ../../source3/smbd/sec_ctx.c:215(push_sec_ctx)
-  push_sec_ctx(967001000, 967001000) : sec_ctx_stack_ndx = 2
-[2019/08/03 07:14:24.156246,  4, pid=23639, effective(967001000, 967001000), real(967001000, 0)] ../../source3/smbd/uid.c:552(push_conn_ctx)
-  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
-[2019/08/03 07:14:24.156259,  4, pid=23639, effective(967001000, 967001000), real(967001000, 0)] ../../source3/smbd/sec_ctx.c:319(set_sec_ctx_internal)
-  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
-[2019/08/03 07:14:24.156273,  5, pid=23639, effective(967001000, 967001000), real(967001000, 0)] ../../libcli/security/security_token.c:53(security_token_debug)
-  Security token: (NULL)
-[2019/08/03 07:14:24.156285,  5, pid=23639, effective(967001000, 967001000), real(967001000, 0)] ../../source3/auth/token_util.c:865(debug_unix_user_token)
-  UNIX token of user 0
-  Primary group is 0 and contains 0 supplementary groups
-[2019/08/03 07:14:24.156311,  5, pid=23639, effective(0, 0), real(0, 0), class=rpc_srv] ../../source3/rpc_server/lsa/srv_lsa_nt.c:244(lookup_lsa_sids)
-  lookup_lsa_sids: looking up name XS\ab
-[2019/08/03 07:14:24.156327, 10, pid=23639, effective(0, 0), real(0, 0)] ../../source3/passdb/lookup_sid.c:112(lookup_name)
-  lookup_name: XS\ab => domain=[XS], name=[ab]
-[2019/08/03 07:14:24.156340, 10, pid=23639, effective(0, 0), real(0, 0)] ../../source3/passdb/lookup_sid.c:114(lookup_name)
-  lookup_name: flags = 0x00
-
-BUG: https://bugzilla.samba.org/show_bug.cgi?id=14091
-
-Signed-off-by: Alexander Bokovoy <ab@samba.org>
-Reviewed-by: Andreas Schneider <asn@samba.org>
-
-(cherry picked from commit 685bb03de6ab733590831d1df4f5fd60d2ac427d)
----
- source3/passdb/lookup_sid.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/source3/passdb/lookup_sid.c b/source3/passdb/lookup_sid.c
-index 2281bd0b64d..1bb15ccb8b4 100644
---- a/source3/passdb/lookup_sid.c
-+++ b/source3/passdb/lookup_sid.c
-@@ -113,7 +113,7 @@ bool lookup_name(TALLOC_CTX *mem_ctx,
- 		full_name, domain, name));
- 	DEBUG(10, ("lookup_name: flags = 0x0%x\n", flags));
- 
--	if ((flags & LOOKUP_NAME_DOMAIN) &&
-+	if (((flags & LOOKUP_NAME_DOMAIN) || (flags == 0)) &&
- 	    strequal(domain, get_global_sam_name()))
- 	{
- 
--- 
-2.21.0
-
-
-From 03d1a9f4f07f6e06c125875fe454925f4c1f6c2b Mon Sep 17 00:00:00 2001
-From: Alexander Bokovoy <ab@samba.org>
-Date: Sat, 10 Aug 2019 11:53:12 +0300
-Subject: [PATCH 3/3] smbtorture: extend rpc.lsa to lookup machine over
- forest-wide LookupNames
-
-Add a simple test to resolve DOMAIN\MACHINE$ via LSA LookupNames3
-using LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY2 level. This level would pass
-zero lookup flags to lookup_name().
-
-BUG: https://bugzilla.samba.org/show_bug.cgi?id=14091
-
-Signed-off-by: Alexander Bokovoy <ab@samba.org>
-Reviewed-by: Andreas Schneider <asn@samba.org>
-
-Autobuild-User(master): Alexander Bokovoy <ab@samba.org>
-Autobuild-Date(master): Wed Aug 14 13:07:42 UTC 2019 on sn-devel-184
-
-(cherry picked from commit 4d276a93fc624dc04d880f5b4157f272d3555be6)
----
- source4/torture/rpc/lsa.c | 8 +++++++-
- 1 file changed, 7 insertions(+), 1 deletion(-)
-
-diff --git a/source4/torture/rpc/lsa.c b/source4/torture/rpc/lsa.c
-index b7dd0dc8c91..21cc16afbaf 100644
---- a/source4/torture/rpc/lsa.c
-+++ b/source4/torture/rpc/lsa.c
-@@ -4794,7 +4794,7 @@ static bool test_QueryInfoPolicyCalls(	bool version2,
- 			|| i == LSA_POLICY_INFO_DNS_INT)) {
- 			/* Let's look up some of these names */
- 
--			struct lsa_TransNameArray tnames;
-+			struct lsa_TransNameArray tnames, dnames;
- 			tnames.count = 14;
- 			tnames.names = talloc_zero_array(tctx, struct lsa_TranslatedName, tnames.count);
- 			tnames.names[0].name.string = info->dns.name.string;
-@@ -4827,6 +4827,12 @@ static bool test_QueryInfoPolicyCalls(	bool version2,
- 			tnames.names[13].sid_type = SID_NAME_USER;
- 			ret &= test_LookupNames(b, tctx, handle, LSA_LOOKUP_NAMES_ALL, &tnames);
- 
-+			/* Try to use in-forest search for the test machine */
-+			dnames.count = 1;
-+			dnames.names = talloc_zero_array(tctx, struct lsa_TranslatedName, dnames.count);
-+			dnames.names[0].name.string = talloc_asprintf(tctx, "%s\\"TEST_MACHINENAME "$", info->dns.name.string);
-+			dnames.names[0].sid_type = SID_NAME_USER;
-+			ret &= test_LookupNames(b, tctx, handle, LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY2, &dnames);
- 		}
- 	}
- 
--- 
-2.21.0
-
diff --git a/samba.spec b/samba.spec
index f90b358..f19d39d 100644
--- a/samba.spec
+++ b/samba.spec
@@ -10,11 +10,11 @@
 
 %define samba_version 4.11.0
 %define talloc_version 2.2.0
-%define tdb_version 1.4.1
+%define tdb_version 1.4.2
 %define tevent_version 0.10.0
 %define ldb_version 2.0.5
 # This should be rc1 or nil
-%define pre_release rc1
+%define pre_release rc2
 
 %if "x%{?pre_release}" != "x"
 %define samba_release 0.%{main_release}.%{pre_release}%{?dist}
@@ -118,8 +118,6 @@ Source14:       samba.pamd
 
 Source201:      README.downgrade
 
-Patch0:         samba-bz14091-v4.10-backport.patch
-
 Requires(pre): /usr/sbin/groupadd
 Requires(post): systemd
 Requires(preun): systemd
@@ -574,21 +572,6 @@ The python3-%{name}-dc package contains the Python libraries needed by programs
 to manage Samba AD.
 %endif
 
-### PIDL
-%package pidl
-Summary: Perl IDL compiler
-Requires: perl-interpreter
-Requires: perl(Parse::Yapp)
-Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))
-BuildArch: noarch
-
-Provides: samba4-pidl = %{samba_depver}
-Obsoletes: samba4-pidl < %{samba_depver}
-
-%description pidl
-The %{name}-pidl package contains the Perl IDL compiler used by Samba
-and Wireshark to parse IDL and similar protocols
-
 ### TEST
 %package test
 Summary: Testing tools for Samba servers and clients
@@ -1232,6 +1215,7 @@ fi
 %{_libdir}/samba/vfs/fileid.so
 %{_libdir}/samba/vfs/fruit.so
 %{_libdir}/samba/vfs/full_audit.so
+%{_libdir}/samba/vfs/gpfs.so
 %{_libdir}/samba/vfs/glusterfs_fuse.so
 %{_libdir}/samba/vfs/linux_xfs_sgid.so
 %{_libdir}/samba/vfs/media_harmony.so
@@ -1281,6 +1265,7 @@ fi
 %{_mandir}/man8/vfs_fileid.8*
 %{_mandir}/man8/vfs_fruit.8*
 %{_mandir}/man8/vfs_full_audit.8*
+%{_mandir}/man8/vfs_gpfs.8*
 %{_mandir}/man8/vfs_glusterfs_fuse.8*
 %{_mandir}/man8/vfs_linux_xfs_sgid.8*
 %{_mandir}/man8/vfs_media_harmony.8*
@@ -1309,6 +1294,7 @@ fi
 
 %if ! %{with_vfs_cephfs}
 %exclude %{_mandir}/man8/vfs_ceph.8*
+%exclude %{_mandir}/man8/vfs_ceph_snapshots.8*
 %endif
 
 %attr(775,root,printadmin) %dir /var/lib/samba/drivers
@@ -1411,6 +1397,7 @@ fi
 %{_libdir}/samba/libgenrand-samba4.so
 %{_libdir}/samba/libgensec-samba4.so
 %{_libdir}/samba/libgpext-samba4.so
+%{_libdir}/samba/libgpo-samba4.so
 %{_libdir}/samba/libgse-samba4.so
 %{_libdir}/samba/libhttp-samba4.so
 %{_libdir}/samba/libinterfaces-samba4.so
@@ -1431,6 +1418,7 @@ fi
 %{_libdir}/samba/libnetif-samba4.so
 %{_libdir}/samba/libnpa-tstream-samba4.so
 %{_libdir}/samba/libposix-eadb-samba4.so
+%{_libdir}/samba/libprinter-driver-samba4.so
 %{_libdir}/samba/libprinting-migrate-samba4.so
 %{_libdir}/samba/libreplace-samba4.so
 %{_libdir}/samba/libregistry-samba4.so
@@ -1546,6 +1534,7 @@ fi
 %{_libdir}/samba/ldb/aclread.so
 %{_libdir}/samba/ldb/anr.so
 %{_libdir}/samba/ldb/audit_log.so
+%{_libdir}/samba/ldb/count_attrs.so
 %{_libdir}/samba/ldb/descriptor.so
 %{_libdir}/samba/ldb/dirsync.so
 %{_libdir}/samba/ldb/dns_notify.so
@@ -1618,7 +1607,6 @@ fi
 %{_libdir}/samba/service/nbtd.so
 %{_libdir}/samba/service/ntp_signd.so
 %{_libdir}/samba/service/s3fs.so
-%{_libdir}/samba/service/web.so
 %{_libdir}/samba/service/winbindd.so
 %{_libdir}/samba/service/wrepl.so
 %{_libdir}/libdcerpc-server.so.*
@@ -1769,7 +1757,9 @@ fi
 %if %{with_vfs_cephfs}
 %files vfs-cephfs
 %{_libdir}/samba/vfs/ceph.so
+%{_libdir}/samba/vfs/ceph_snapshots.so
 %{_mandir}/man8/vfs_ceph.8*
+%{_mandir}/man8/vfs_ceph_snapshots.8*
 %endif
 
 ### VFS-GLUSTERFS
@@ -1793,7 +1783,6 @@ fi
 %{_libdir}/samba/libauth4-samba4.so
 %{_libdir}/samba/libauth-unix-token-samba4.so
 %{_libdir}/samba/libdcerpc-samba4.so
-%{_libdir}/samba/libnon-posix-acls-samba4.so
 %{_libdir}/samba/libshares-samba4.so
 %{_libdir}/samba/libsmbpasswdparser-samba4.so
 %{_libdir}/samba/libxattr-tdb-samba4.so
@@ -1824,44 +1813,6 @@ fi
 %{_libdir}/pkgconfig/wbclient.pc
 %endif # with_libwbclient
 
-### PIDL
-%files pidl
-%attr(755,root,root) %{_bindir}/pidl
-%dir %{perl_vendorlib}/Parse
-%{perl_vendorlib}/Parse/Pidl.pm
-%dir %{perl_vendorlib}/Parse/Pidl
-%{perl_vendorlib}/Parse/Pidl/CUtil.pm
-%{perl_vendorlib}/Parse/Pidl/Samba4.pm
-%{perl_vendorlib}/Parse/Pidl/Expr.pm
-%{perl_vendorlib}/Parse/Pidl/ODL.pm
-%{perl_vendorlib}/Parse/Pidl/Typelist.pm
-%{perl_vendorlib}/Parse/Pidl/IDL.pm
-%{perl_vendorlib}/Parse/Pidl/Compat.pm
-%dir %{perl_vendorlib}/Parse/Pidl/Wireshark
-%{perl_vendorlib}/Parse/Pidl/Wireshark/Conformance.pm
-%{perl_vendorlib}/Parse/Pidl/Wireshark/NDR.pm
-%{perl_vendorlib}/Parse/Pidl/Dump.pm
-%dir %{perl_vendorlib}/Parse/Pidl/Samba3
-%{perl_vendorlib}/Parse/Pidl/Samba3/ServerNDR.pm
-%{perl_vendorlib}/Parse/Pidl/Samba3/ClientNDR.pm
-%dir %{perl_vendorlib}/Parse/Pidl/Samba4
-%{perl_vendorlib}/Parse/Pidl/Samba4/Header.pm
-%dir %{perl_vendorlib}/Parse/Pidl/Samba4/COM
-%{perl_vendorlib}/Parse/Pidl/Samba4/COM/Header.pm
-%{perl_vendorlib}/Parse/Pidl/Samba4/COM/Proxy.pm
-%{perl_vendorlib}/Parse/Pidl/Samba4/COM/Stub.pm
-%{perl_vendorlib}/Parse/Pidl/Samba4/Python.pm
-%{perl_vendorlib}/Parse/Pidl/Samba4/Template.pm
-%dir %{perl_vendorlib}/Parse/Pidl/Samba4/NDR
-%{perl_vendorlib}/Parse/Pidl/Samba4/NDR/Server.pm
-%{perl_vendorlib}/Parse/Pidl/Samba4/NDR/Client.pm
-%{perl_vendorlib}/Parse/Pidl/Samba4/NDR/Parser.pm
-%{perl_vendorlib}/Parse/Pidl/Samba4/TDR.pm
-%{perl_vendorlib}/Parse/Pidl/NDR.pm
-%{perl_vendorlib}/Parse/Pidl/Util.pm
-%{_mandir}/man1/pidl*
-%{_mandir}/man3/Parse::Pidl*
-
 ### PYTHON3
 %files -n python3-%{name}
 %dir %{python3_sitearch}/samba/
@@ -1996,6 +1947,7 @@ fi
 %{python3_sitearch}/samba/netcmd/__pycache__/__init__.*.pyc
 %{python3_sitearch}/samba/netcmd/__pycache__/common.*.pyc
 %{python3_sitearch}/samba/netcmd/__pycache__/computer.*.pyc
+%{python3_sitearch}/samba/netcmd/__pycache__/contact.*.pyc
 %{python3_sitearch}/samba/netcmd/__pycache__/dbcheck.*.pyc
 %{python3_sitearch}/samba/netcmd/__pycache__/delegation.*.pyc
 %{python3_sitearch}/samba/netcmd/__pycache__/dns.*.pyc
@@ -2023,6 +1975,7 @@ fi
 %{python3_sitearch}/samba/netcmd/__pycache__/visualize.*.pyc
 %{python3_sitearch}/samba/netcmd/common.py
 %{python3_sitearch}/samba/netcmd/computer.py
+%{python3_sitearch}/samba/netcmd/contact.py
 %{python3_sitearch}/samba/netcmd/dbcheck.py
 %{python3_sitearch}/samba/netcmd/delegation.py
 %{python3_sitearch}/samba/netcmd/dns.py
@@ -2063,7 +2016,6 @@ fi
 %{python3_sitearch}/samba/samba3/smbd.*.so
 %{python3_sitearch}/samba/sd_utils.py
 %{python3_sitearch}/samba/sites.py
-%{python3_sitearch}/samba/smb.*.so
 %{python3_sitearch}/samba/subnets.py
 %dir %{python3_sitearch}/samba/subunit
 %{python3_sitearch}/samba/subunit/__init__.py
@@ -2078,10 +2030,6 @@ fi
 %{python3_sitearch}/samba/third_party/__pycache__/__init__.*.pyc
 %{python3_sitearch}/samba/upgrade.py
 %{python3_sitearch}/samba/upgradehelpers.py
-%dir %{python3_sitearch}/samba/web_server
-%{python3_sitearch}/samba/web_server/__init__.py
-%dir %{python3_sitearch}/samba/web_server/__pycache__
-%{python3_sitearch}/samba/web_server/__pycache__/__init__.*.pyc
 %{python3_sitearch}/samba/werror.*.so
 %{python3_sitearch}/samba/xattr.py
 %{python3_sitearch}/samba/xattr_native.*.so
@@ -2177,6 +2125,7 @@ fi
 %{python3_sitearch}/samba/tests/__pycache__/auth_log_netlogon.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/auth_log_netlogon_bad_creds.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/auth_log_samlogon.*.pyc
+%{python3_sitearch}/samba/tests/__pycache__/auth_log_winbind.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/common.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/complex_expressions.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/core.*.pyc
@@ -2249,6 +2198,7 @@ fi
 %{python3_sitearch}/samba/tests/__pycache__/samdb.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/samdb_api.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/security.*.pyc
+%{python3_sitearch}/samba/tests/__pycache__/segfault.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/smb.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/smbd_base.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/source.*.pyc
@@ -2258,6 +2208,7 @@ fi
 %{python3_sitearch}/samba/tests/__pycache__/upgrade.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/upgradeprovision.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/upgradeprovisionneeddc.*.pyc
+%{python3_sitearch}/samba/tests/__pycache__/usage.*.pyc
 %{python3_sitearch}/samba/tests/__pycache__/xattr.*.pyc
 %{python3_sitearch}/samba/tests/audit_log_base.py
 %{python3_sitearch}/samba/tests/audit_log_dsdb.py
@@ -2270,12 +2221,14 @@ fi
 %{python3_sitearch}/samba/tests/auth_log_netlogon.py
 %{python3_sitearch}/samba/tests/auth_log_pass_change.py
 %{python3_sitearch}/samba/tests/auth_log_samlogon.py
+%{python3_sitearch}/samba/tests/auth_log_winbind.py
 %dir %{python3_sitearch}/samba/tests/blackbox
 %{python3_sitearch}/samba/tests/blackbox/__init__.py
 %dir %{python3_sitearch}/samba/tests/blackbox/__pycache__
 %{python3_sitearch}/samba/tests/blackbox/__pycache__/__init__.*.pyc
 %{python3_sitearch}/samba/tests/blackbox/__pycache__/bug13653.*.pyc
 %{python3_sitearch}/samba/tests/blackbox/__pycache__/check_output.*.pyc
+%{python3_sitearch}/samba/tests/blackbox/__pycache__/downgradedatabase.*.pyc
 %{python3_sitearch}/samba/tests/blackbox/__pycache__/ndrdump.*.pyc
 %{python3_sitearch}/samba/tests/blackbox/__pycache__/netads_json.*.pyc
 %{python3_sitearch}/samba/tests/blackbox/__pycache__/samba_dnsupdate.*.pyc
@@ -2286,6 +2239,7 @@ fi
 %{python3_sitearch}/samba/tests/blackbox/__pycache__/traffic_summary.*.pyc
 %{python3_sitearch}/samba/tests/blackbox/bug13653.py
 %{python3_sitearch}/samba/tests/blackbox/check_output.py
+%{python3_sitearch}/samba/tests/blackbox/downgradedatabase.py
 %{python3_sitearch}/samba/tests/blackbox/ndrdump.py
 %{python3_sitearch}/samba/tests/blackbox/netads_json.py
 %{python3_sitearch}/samba/tests/blackbox/samba_dnsupdate.py
@@ -2337,9 +2291,7 @@ fi
 %{python3_sitearch}/samba/tests/dns_base.py
 %{python3_sitearch}/samba/tests/dns_forwarder.py
 %dir %{python3_sitearch}/samba/tests/dns_forwarder_helpers
-%{python3_sitearch}/samba/tests/dns_forwarder_helpers/__pycache__/dns_hub.*.pyc
 %{python3_sitearch}/samba/tests/dns_forwarder_helpers/__pycache__/server.*.pyc
-%{python3_sitearch}/samba/tests/dns_forwarder_helpers/dns_hub.py
 %{python3_sitearch}/samba/tests/dns_forwarder_helpers/server.py
 %{python3_sitearch}/samba/tests/dns_invalid.py
 %{python3_sitearch}/samba/tests/dns_tkey.py
@@ -2428,18 +2380,24 @@ fi
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/__init__.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/base.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/computer.*.pyc
+%{python3_sitearch}/samba/tests/samba_tool/__pycache__/contact.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/demote.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/dnscmd.*.pyc
+%{python3_sitearch}/samba/tests/samba_tool/__pycache__/drs_clone_dc_data_lmdb_size.*.pyc
+%{python3_sitearch}/samba/tests/samba_tool/__pycache__/dsacl.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/forest.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/fsmo.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/gpo.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/group.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/help.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/join.*.pyc
+%{python3_sitearch}/samba/tests/samba_tool/__pycache__/join_lmdb_size.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/ntacl.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/ou.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/passwordsettings.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/processes.*.pyc
+%{python3_sitearch}/samba/tests/samba_tool/__pycache__/promote_dc_lmdb_size.*.pyc
+%{python3_sitearch}/samba/tests/samba_tool/__pycache__/provision_lmdb_size.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/provision_password_check.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/rodc.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/schema.*.pyc
@@ -2453,18 +2411,24 @@ fi
 %{python3_sitearch}/samba/tests/samba_tool/__pycache__/visualize_drs.*.pyc
 %{python3_sitearch}/samba/tests/samba_tool/base.py
 %{python3_sitearch}/samba/tests/samba_tool/computer.py
+%{python3_sitearch}/samba/tests/samba_tool/contact.py
 %{python3_sitearch}/samba/tests/samba_tool/demote.py
 %{python3_sitearch}/samba/tests/samba_tool/dnscmd.py
+%{python3_sitearch}/samba/tests/samba_tool/drs_clone_dc_data_lmdb_size.py
+%{python3_sitearch}/samba/tests/samba_tool/dsacl.py
 %{python3_sitearch}/samba/tests/samba_tool/forest.py
 %{python3_sitearch}/samba/tests/samba_tool/fsmo.py
 %{python3_sitearch}/samba/tests/samba_tool/gpo.py
 %{python3_sitearch}/samba/tests/samba_tool/group.py
 %{python3_sitearch}/samba/tests/samba_tool/help.py
 %{python3_sitearch}/samba/tests/samba_tool/join.py
+%{python3_sitearch}/samba/tests/samba_tool/join_lmdb_size.py
 %{python3_sitearch}/samba/tests/samba_tool/ntacl.py
 %{python3_sitearch}/samba/tests/samba_tool/ou.py
 %{python3_sitearch}/samba/tests/samba_tool/passwordsettings.py
 %{python3_sitearch}/samba/tests/samba_tool/processes.py
+%{python3_sitearch}/samba/tests/samba_tool/promote_dc_lmdb_size.py
+%{python3_sitearch}/samba/tests/samba_tool/provision_lmdb_size.py
 %{python3_sitearch}/samba/tests/samba_tool/provision_password_check.py
 %{python3_sitearch}/samba/tests/samba_tool/rodc.py
 %{python3_sitearch}/samba/tests/samba_tool/schema.py
@@ -2479,6 +2443,7 @@ fi
 %{python3_sitearch}/samba/tests/samdb.py
 %{python3_sitearch}/samba/tests/samdb_api.py
 %{python3_sitearch}/samba/tests/security.py
+%{python3_sitearch}/samba/tests/segfault.py
 %{python3_sitearch}/samba/tests/smb.py
 %{python3_sitearch}/samba/tests/smbd_base.py
 %{python3_sitearch}/samba/tests/source.py
@@ -2488,6 +2453,7 @@ fi
 %{python3_sitearch}/samba/tests/upgrade.py
 %{python3_sitearch}/samba/tests/upgradeprovision.py
 %{python3_sitearch}/samba/tests/upgradeprovisionneeddc.py
+%{python3_sitearch}/samba/tests/usage.py
 %{python3_sitearch}/samba/tests/xattr.py
 
 ### TEST
@@ -2872,10 +2838,8 @@ fi
 %{_datadir}/ctdb/tests/eventscripts/05.system.monitor.007.sh
 %{_datadir}/ctdb/tests/eventscripts/05.system.monitor.011.sh
 %{_datadir}/ctdb/tests/eventscripts/05.system.monitor.012.sh
-%{_datadir}/ctdb/tests/eventscripts/05.system.monitor.013.sh
 %{_datadir}/ctdb/tests/eventscripts/05.system.monitor.014.sh
 %{_datadir}/ctdb/tests/eventscripts/05.system.monitor.015.sh
-%{_datadir}/ctdb/tests/eventscripts/05.system.monitor.016.sh
 %{_datadir}/ctdb/tests/eventscripts/05.system.monitor.017.sh
 %{_datadir}/ctdb/tests/eventscripts/05.system.monitor.018.sh
 %{_datadir}/ctdb/tests/eventscripts/06.nfs.releaseip.001.sh
@@ -3211,6 +3175,7 @@ fi
 %{_datadir}/ctdb/tests/simple/80_ctdb_traverse.sh
 %{_datadir}/ctdb/tests/simple/81_tunnel_ring.sh
 %{_datadir}/ctdb/tests/simple/90_debug_hung_script.sh
+%{_datadir}/ctdb/tests/simple/91_version_check.sh
 
 
 %dir %{_datadir}/ctdb/tests/simple/scripts
@@ -3439,6 +3404,9 @@ fi
 %endif # with_clustering_support
 
 %changelog
+* Wed Aug 21 2019 Guenther Deschner <gdeschner@redhat.com> - 4.11.0rc2-0
+- Update to Samba 4.11.0rc2
+
 * Tue Aug 20 2019 Guenther Deschner <gdeschner@redhat.com> - 4.11.0rc1-0
 - Update to Samba 4.11.0rc1
 
diff --git a/sources b/sources
index 1b19fc6..423a539 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (samba-4.11.0rc1.tar.xz) = 618e96d39eeada94675bde0c7ab287fdb59674bb5fe3ae75f62723f87554d3302c1afc00894fe8dea0e227c1e5db07f222307e0062dc0db4ffb885441facbc94
-SHA512 (samba-4.11.0rc1.tar.asc) = eb18a854b7145711ae0a3da32a6006e4bee36d13a74800748521432728f1ba6eca7bdcf94ce1ec3b17d6849527fcf37300a0b5f7ce2e0aa50009de66352cc72a
+SHA512 (samba-4.11.0rc2.tar.xz) = bc91fa6d6de0af44a3f8e8438281c7d9e74e7fed981e65f7cd4e9f1ebbc11d25b1cab3dd22fd375f81d620d0f128b0c879028448bdb6a918cd89682a3f828ed8
+SHA512 (samba-4.11.0rc2.tar.asc) = 0472840871106f89e3695098a064004bbcab5e0950252ac41c613f4610a0239471dfa34bae452abf417496eaa3025afc35a28f449f28ba97f4c731e2b4e3390b