| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: ldapsmb | Distribution: openSUSE 12.1 |
| Version: 1.34b | Vendor: openSUSE |
| Release: 34.3.1 | Build date: Wed Nov 2 12:40:42 2011 |
| Group: Productivity/Networking/Samba | Build host: build32 |
| Size: 76726 | Source RPM: samba-3.6.1-34.3.1.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: http://www.samba.org/ | |
| Summary: Tool to administer Samba's LDAP backend | |
This tool aims to simplify the administration of a Samba Domain
Controller that uses the ldapsam passdb backend.
Authors:
--------
Guenther Deschner <guenther at deschner dot de>
Source Timestamp: 2691
Branch : trunk
GPLv2+
* Thu Oct 27 2011 lmuelle@suse.de
- Ignore a potentially missing AppArmor snippet helper script; (bnc#725256).
* Thu Oct 20 2011 lmuelle@suse.de
- Update to 3.6.1.
+ Fix smbd crashes triggered by Windows XP clients; (bso#8384).
+ Fix a Winbind race leading to 100% CPU load; (bso#8409).
+ Several SMB2 fixes.
+ The VFS ACL modules are no longer experimental but production-ready.
+ Fix 'net ads join -k' when KRB5CCNAME is not set; (bso#7465).
+ smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).
+ Return error of cli_push when 'put - /some/file' is used; (bso#7551).
+ Fix usage of cli_errstr(); (bso#7864).
+ Fix 'widelinks' regression; (bso#8229).
+ Empty notify servername; (bso#8236).
+ Add man vfs_aio_fork; (bso#8256).
+ smb2: smbd logs "Invalid SMB packet: first request: 0x0008" and crashes;
(bso#8334).
+ Add a fallback for missing open&x support in MAC OS/X Lion; (bso#8338).
+ While migrating forms, don't fail if the form already exists; (bso#8351).
+ OS/2 sends an unexpected write&x/read&x chain; (bso#8360).
+ Fix build of vfs_prealloc on SLES8; (bso#8363).
+ Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4; (bso#8364).
+ Fix the fallback to the deprecated spelling idmap:script; (bso#8368).
+ Fix vfs_chown_fsp; (bso#8370).
+ Fix smbd crashes triggered by Windows XP clients; (bso#8384).
+ Fix smbclient access to NT4 shares; (bso#8385).
+ Optimize serverid_exists() for Solaris; (bso#8395).
+ registry/reg_format.c must include includes.h; (bso#8401).
+ SMB2 server can return requests out-of-order when processing a compound
request; (bso#8407).
+ Fix a Winbind race leading to 100% CPU load; (bso#8409).
+ Fix "saving as" of MS Office 2007 (Word) documents on Samba shares with
SMB2; (bso#8412).
+ Fix 'getent group' if trusted domains are not reachable; (bso#8420).
+ Fix infinite loop in ACL module code; (bso#8422).
+ Fix wrong reply to DHnC (durable handle reconnect); (bso#8428).
+ Compound SMB2 requests on an IPC connection can corrupt the reply stream;
(bso#8429).
+ Fix segfault in iconv.c; (bso#8433).
+ NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames;
(bso#8442).
+ Be smarter about setting default permissions when a ACL_USER_OBJ isn't
given; (bso#8443).
+ Check the wct of the incoming SMBnegprot responses; (bso#8452).
+ Fix smbclient segfaults when dialect option -m is used for legacy
dialects; (bso#8453).
+ Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).
+ Samba PDC is looking up only primary user group; (bso#8455).
+ IE9 on Windows 7 cannot download files to samba 3.5.11 share; (bso#8458).
+ smb2_find uses a hard coded max reply size of 0x10000 instead of
smb2_max_trans; (bso#8473).
+ SMB2 create doesn't cope with an Apple client using NULL blob in create;
(bso#8474).
+ Don't call smbd_terminate_connection in smb2_validate_message_id();
(bso#8476).
+ Samba asserts when SMB2 client breaks the crediting rules; (bso#8476).
+ Map to guest can return uninitialized blob of data; (bso#8477).
+ acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).
+ DFS breaks zip file extracting unless "follow symlinks = no" set;
(bso#8493).
+ Remove "experimental" label on VFS ACL modules; (bso#8494).
+ SMB2_OP_CANCEL requests don't have to be signed; (bso#8503).
+ smbd doesn't correctly honor the "force create mode" bits from a cifsfs
create; (bso#8507).
+ Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER;
(bso#8509).
+ Disallow "." in can_set_delete_on_close(); (bso#8515).
+ SMB2 create call returns incorrect file allocation size; (bso#8518).
+ Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements;
(bso#8520).
+ Winbind cache timeout expiry test was reversed; (bso#8521).
* Tue Oct 18 2011 lmuelle@suse.de
- s3/doc: add man page for aio_fork vfs module.
* Tue Oct 18 2011 lmuelle@suse.de
- Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).
* Tue Oct 18 2011 lmuelle@suse.de
- s3: Samba PDC is looking up only primary user group; (bso#8455).
* Tue Oct 18 2011 lmuelle@suse.de
- Add script to create or update an AppArmor sniplet with permissions for all
Samba shares; (bnc#688040).
* Fri Oct 14 2011 ddiss@suse.de
- Retain the smbd startproc return value for correct startup status reporting.
unset was incorrectly being called prior to rc_status; (bnc#723724).
* Fri Oct 14 2011 ddiss@suse.de
- Prevent deadlock in systemd triggered by if-down.d handler on shutdown;
(bnc#721598).
* Thu Oct 13 2011 lmuelle@suse.de
- smb2_find uses a hard coded max reply size of 0x10000 instead of
smb2_max_trans; changed defaults and documentation (bso8473).
* Thu Oct 13 2011 lmuelle@suse.de
- Empty CIFS share can be blocked for other clients by deleting it via empty
path (DELETE_PENDING until the last client); (bso#8515).
* Wed Oct 12 2011 lmuelle@suse.de
- winbindd cache timeout expiry test was reversed; (bso#8521).
* Wed Oct 12 2011 lmuelle@suse.de
- Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520).
* Wed Oct 12 2011 lmuelle@suse.de
- s3:smb2_create: fix allocation size return value when opening existing
files; (bso#8518).
* Wed Oct 12 2011 lmuelle@suse.de
- SMB2 create doesn't cope with an Apple client using NULL blob in create;
(bso#8474).
* Wed Oct 12 2011 lmuelle@suse.de
- NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames;
(bso#8442).
* Wed Oct 12 2011 lmuelle@suse.de
- s3-docs: Fix bug (bso#7908) and typo.
* Mon Oct 10 2011 lmuelle@suse.de
- Return error of cli_push when 'put - /some/file' is used; (bso#7551).
* Mon Oct 10 2011 lmuelle@suse.de
- Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509).
* Mon Oct 10 2011 lmuelle@suse.de
- smbd doesn't correctly honor the "force create mode" bits from a cifsfs
create; (bso#8507).
* Mon Oct 10 2011 lmuelle@suse.de
- Default user entry is set to minimal permissions on incoming ACL change with
no user specified; (bso#8443).
* Mon Oct 10 2011 lmuelle@suse.de
- smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).
* Mon Oct 10 2011 lmuelle@suse.de
- Handle the SECINFO_LABEL flag in the same was as Win2k3; enable Microsoft
Internet Explorer 9 on Windows 7 to download files; (bso#8458).
* Mon Oct 10 2011 lmuelle@suse.de
- DFS breaks zip file extracting unless "follow symlinks = no" set;
(bso#8493).
* Mon Oct 10 2011 lmuelle@suse.de
- s3-docs: Fix typos.
* Mon Oct 10 2011 lmuelle@suse.de
- s3:smb2_server: SMB2_OP_CANCEL requests don't have to be signed; (bso#8503).
* Mon Oct 10 2011 lmuelle@suse.de
- Remove "experimental" label on VFS ACL modules; (bso#8494).
* Mon Oct 10 2011 lmuelle@suse.de
- acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).
* Mon Oct 10 2011 lmuelle@suse.de
- s3-smbd: asserts when SMB2 client breaks the crediting rules; (bso#8476).
* Mon Oct 10 2011 lmuelle@suse.de
- s3-libnet: allow to use default krb5 ccache in libnet_Join/libnet_Unjoin;
(bso#7465).
* Mon Oct 10 2011 lmuelle@suse.de
- smb2_find uses a hard coded max reply size of 0x10000 instead of
smb2_max_trans; (bso#8473).
* Mon Oct 10 2011 lmuelle@suse.de
- s3-netapi: allow to use default krb5 credential cache for libnetapi users.
* Mon Oct 10 2011 lmuelle@suse.de
- s3-docs: document -k switch in net manpage.
* Mon Oct 10 2011 lmuelle@suse.de
- Map to guest can return uninitialized blob of data; (bso#8477).
* Mon Oct 10 2011 lmuelle@suse.de
- s3-registry: registry/reg_format.c must include includes.h; (bso#8401).
* Mon Oct 10 2011 lmuelle@suse.de
- smbclient segfaults when option -m is used for legacy dialects; (bso#8453).
* Mon Oct 10 2011 lmuelle@suse.de
- Fix 'widelinks' regression intro'd in 3.2; (bso#8229).
* Mon Oct 10 2011 lmuelle@suse.de
- Compound SMB2 requests on an IPC connection can corrupt the reply stream;
(bso#8429).
* Mon Oct 10 2011 lmuelle@suse.de
- s3-spoolss: Fix bug forms migration; (bso#8351).
* Mon Oct 10 2011 lmuelle@suse.de
- s3:libsmb: check the wct of the incoming SMBnegprot responses; (bso#8452).
* Mon Oct 10 2011 lmuelle@suse.de
- s3: Do not fork the echo handler for smb2; (bso#8334).
* Mon Oct 10 2011 lmuelle@suse.de
- s3-spoolss: Fix bug empty notify servername; (bso#8236).
* Mon Oct 10 2011 lmuelle@suse.de
- SMB2 server can return requests out-of-order when processing a compound
request; (bso#8407).
* Fri Oct 07 2011 lmuelle@suse.de
- Remove smb child crash fix. The issue had been fixed upstream differently.
* Sun Oct 02 2011 lmuelle@suse.de
- BuildRequire ctdb-devel version greater than 1.0.105 for post-10.0 systems.
* Fri Sep 09 2011 lmuelle@suse.de
- Spec file cleanup as suggested by the spec-cleaner tool.
+ Make all BuildRequires, PreReq, and Provides a separate line.
+ Use %{buildroot} instead of ${RPM_BUILD_ROOT}.
+ Use straight commands instead of macros (make, install).
+ Use -p in post and postun if we only call one command.
+ Use %{_localstatedir} instead of %{_var} in the filelist.
+ Remove superfluous AutoReqProv on lines.
* Thu Sep 08 2011 lmuelle@suse.de
- Remove %release from all Provides.
* Thu Sep 01 2011 lmuelle@suse.de
- Fix segfault in iconv.c which caused a null pointer dereference; (bso#8433).
* Wed Aug 31 2011 lmuelle@suse.de
- Use /var/run for the cifs state file in the init script too; (bnc#710304).
* Tue Aug 30 2011 lmuelle@suse.de
- Microsoft Word from Microsoft Office 2007 fails to save as on a share with
SMB2; (bso#8412).
* Tue Aug 30 2011 lmuelle@suse.de
- Use sys_write and sys_read in fork_domain_child to fix a winbind race
leading to 100% CPU usage; (bso#8409).
* Tue Aug 30 2011 lmuelle@suse.de
- Fix wrong reply to smb2 durable handle reconnect (DHnC) request; (bso#8428).
* Tue Aug 30 2011 lmuelle@suse.de
- Fix infinite loop in ACL module code; (bso#8422).
* Mon Aug 29 2011 lmuelle@suse.de
- Fix getent group if trusted domains are not reachable; (bso#8420).
* Mon Aug 29 2011 lmuelle@suse.de
- smbclient can't access a NT4 share since 3.6.0; (bso#8385).
* Sat Aug 27 2011 lmuelle@suse.de
- Optimize serverid_exists() for Solaris; (bso#8395).
* Sat Aug 27 2011 lmuelle@suse.de
- talloc:
+ check block count after references test.
+ added test suite for talloc_free_children().
+ license info erratum in the manpage.
+ fix typos and better differentiation between versions 1 and 2.
+ preserve context name on talloc_free_children().
+ ensure the sibling linked list remains valid during a free.
* Sat Aug 27 2011 lmuelle@suse.de
- vfs_chown_fsp returned in the wrong directory; (bso#8370).
* Sat Aug 27 2011 lmuelle@suse.de
- Remove irritating "." targets when recent system libs exist; (bso#8369).
* Sat Aug 27 2011 lmuelle@suse.de
- Correctly initialize "idmap config * : script" with NULL; (bso#8368).
* Sat Aug 27 2011 lmuelle@suse.de
- Add missing include to suppress compiler warnings; (bso#8365).
* Sat Aug 27 2011 lmuelle@suse.de
- Point the chain offset beyond the current request; (bso#8360).
* Sat Aug 27 2011 lmuelle@suse.de
- Fix gpfs vfs module build; (bso#8364).
* Sat Aug 27 2011 lmuelle@suse.de
- Make vfs_prealloc even build on older systems; (bso#8363).
* Sat Aug 27 2011 lmuelle@suse.de
- Do central cli_set_error and return the actual NTSTATUS; (bso#7864).
* Sat Aug 27 2011 lmuelle@suse.de
- Add a fallback for missing open&x support in OS/X Lion; (bso#8338).
* Tue Aug 09 2011 lmuelle@suse.de
- Update to 3.6.0.
+ BUG 7462: Make SA_RESETHAND conditional on its existance.
+ BUG 8303: db_ctdb_send_schedule_for_deletion() is not defined.
+ BUG 8324: smbclient cannot list directories from a big-endian machine.
+ BUG 8326: WinXP cannot join a Samba3 domain with a 'even' hostname.
+ BUG 8327: Fix the reload of the configuration, also reload activated
registry shares.
+ BUG 8328: Cleanup of idmap_tdb2 code.
+ BUG 8330: Fix NFSv4 ACL merging logic.
+ BUG 8335: File copy aborts with smb2_validate_message_id: bad message_id.
+ BUG 8341: Fix segfault in libsmbclient.
+ BUG 8343: Fix SMB2 crash reading with aio_fork beyond the end of file.
+ BUG 8347: Fix regression for HP-UX, AIX and OSF.
+ BUG 8357: Make sure we grant credits on async read/write operations.
+ BUG 8358: Fix a bug in run_poll_events().
+ BUG 8362: Fix build issue on old glibc systems.
* Mon Aug 08 2011 lmuelle@suse.de
- Remove references to disabled vscan build.
* Thu Aug 04 2011 lmuelle@suse.de
- Add missing define, includes, and initialization to get_printing_ticket.
* Thu Aug 04 2011 lmuelle@suse.de
- Use /var/run for the cifs state file; (bnc#710304).
* Mon Aug 01 2011 lmuelle@suse.de
- Fix #ifdef CTDB_CONTROL_SCHEDULE_FOR_DELETION issue; (bso#8303).
* Mon Aug 01 2011 lmuelle@suse.de
- File copy aborts with smb2_validate_message_id: bad message_id; (bso#8335).
* Sun Jul 31 2011 lmuelle@suse.de
- Fix reload of the configuration and also reload activated registry shares;
(bso#8327).
* Sun Jul 31 2011 lmuelle@suse.de
- WinXP cannot join a Samba3 domain with a 'even' hostname; (bso#8326).
* Thu Jul 28 2011 lmuelle@suse.de
- smbclient cannot list directories from a big-endian machine; (bso#8324).
* Wed Jul 27 2011 lmuelle@suse.de
- Update to 3.6.0rc3.
+ BUG 7841: Explicitly pass domain_sid to wbint_LookupRids().
+ BUG 7888: Deal with buggy 3.0 based PDCs.
+ BUG 8083: Fix "inherit owner = yes" with vfs_acl_xattr or vfs_acl_tdb
module.
+ BUG 8102: Do not allow to change file ACLs from normal domusers.
+ BUG 8102: Do not allow to change file ACLs from normal domusers.
+ BUG 8193: Add new command 'enumerate_recursive'.
+ BUG 8195: Make rpc client code working against NT4 servers.
+ BUG 8211: Fix "inherit owner = yes" when "inherit permissions = yes" is
set.
+ BUG 8213: Fixes in idmap_autorid.
+ BUG 8214: Fix smbd crash on printer driver upgrade.
+ BUG 8215: Fix Winbind unix username lookup.
+ BUG 8216: Make Winbind returning correct results with 'sids2xids'.
+ BUG 8217: Do not stat-check the share path in 'net conf addshare'.
+ BUG 8219: Fix SMB Panic from Windows 7 client.
+ BUG 8224: Fix the build on FreeBSD.
+ BUG 8226: Use c99 initializers which are supported by old gcc 2.95
compilers.
+ BUG 8230: Move .nmbd socket directory to non-hidden name PREFIX/var/nmbd.
+ BUG 8231: Fix crash bug in 'net cache get'.
+ BUG 8235: Fix smbd crash on startup caused by migrate_printer().
+ BUG 8240: Fix Valgrind warnings in winreg/spoolss code.
+ BUG 8244: Fix copying files larger than 2 GB to a Samba share.
+ BUG 8247: Fix Coverity ID 2582: FORWARD_NULL.
+ BUG 8253: Fix Winbind panic if verify_idpool() fails.
+ BUG 8254: Fix "acl check permissions = no".
+ BUG 8260: Fix DCERPC responses with fragments larger than 1024 bytes.
+ BUG 8262: Fix build of vfs_commit.
+ BUG 8263: Fix build with --with-fake-kaserver or --with-vfs-afsacl.
+ BUG 8264: Fix Valgrind bugs in svcctl.
+ BUG 8276: Close all sockets attached to a subnet in close_subnet().
+ BUG 8278: Fix smbd panic when CTDB is unhealthy.
+ BUG 8281: Fix build of examples/VFS/*.
+ BUG 8286: Fix smbd crash on premature end of smb2 conn.
+ BUG 8292: Fix a major architectural flaw in the SMB2 server code.
+ BUG 8293: Fix log file rotating in SMB2.
+ BUG 8304: Fix uninitialized variable in error path.
+ BUG 8305: Fix segfault in nmbd when using 'smbtree ...'..
+ BUG 8307: brl_close_fnum does not call SMB_VFS_BRL_UNLOCK_WINDOWS on all
locks.
+ BUG 8310: toupper_ascii() is broken on big-endian systems.
+ BUG 8314: Fix smbd crash with unknown user.
+ Mark 'time offset' parameter as deprecated.
* Tue Jul 26 2011 lmuelle@suse.de
- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are
affected by a cross-site scripting vulnerability; CVE-2011-2694; (bso#8289);
(bnc#708503).
* Tue Jul 26 2011 lmuelle@suse.de
- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are
affected by a cross-site request forgery; CVE-2011-2522; (bso#8290);
(bnc#705241).
* Mon Jul 25 2011 shargagan@novell.com
- Fixed the DFS referral response for msdfs root; (bnc#703655).
* Wed Jul 20 2011 ddiss@suse.de
- Fix CUPS print job IDs; (bso#7288); (bnc#701257).
* Thu Jul 14 2011 lmuelle@suse.de
- Make use of the actual library version as part of the package name on
post-11.3 systems only.
* Mon Jul 11 2011 jmcdonough@suse.de
- Fix winbind internal error; (bso#7636); (bnc#659424).
* Mon Jul 11 2011 ddiss@suse.de
- Improve ctdb vacuuming performance with use of SCHEDULE_FOR_DELETION;
(bnc#705170).
* Mon Jun 20 2011 ddiss@suse.de
- Specify nmbdsocketdir at configure time; (bnc#700953).
* Thu Jun 09 2011 lmuelle@suse.de
- Build the tdb, talloc, and tevent libraries ahead of anything else.
* Tue Jun 07 2011 jmcdonough@suse.de
- Update to 3.6.0rc2.
+ BUG 6911: Fix Kerberos authentication from Vista to Samba.
+ BUG 8166: Don't lockout users when offline.
+ BUG 8200: Add support for multiple writeable ldap idmap domains.
+ BUG 8148: Default to protocol version 2 for SMB Traffic Analyzer.
+ BUG 7054: Fix X account flag when "pwdlastset" is "0".
+ BUG 8144: Fix setting timestamp when touching files with CIFS clients.
+ BUG 8153: Fix setting up getaddrinfo on IPv6-only machines.
+ BUG 8156: Fix 'net ads join' using the user's Kerberos ticket.
+ BUG 8157: Fix parsing a cups printcap file.
+ BUG 8175: Fix smbd deadlock.
+ BUG 8189: Support shadow copy display over SMB2.
+ BUG 8197: Winbind does not properly detect when a DC connection is dead.
+ BUG 8203: Winbind needs to reset the DC connection if an RPC times out.
* Mon Jun 06 2011 mrsb@novell.com
- Make cupsaddsmb fill printers location; (bso#8132); (bnc#698209).
* Fri Jun 03 2011 lpechacek@suse.cz
- Add "winbind max clients" parameter to remove 200-client
limit; (bnc#697461).
* Fri Jun 03 2011 jmcdonough@suse.de
- Disable logon cache for password lockout consistency when
running in a cluster; (bnc#694836).
* Fri May 27 2011 jmcdonough@suse.de
- Fix logon of AD users with many group memberships; (bso#6911);
(bnc#657026).
* Wed May 25 2011 jmcdonough@suse.de
- Don't lockout users while offline; (bso#8166); (bnc#692607).
* Mon May 23 2011 lmuelle@suse.de
- Update to 3.6.0rc1.
+ BUG 8111: CIFS VFS: Fix unexpected error on SMB posix open.
+ BUG 8112: POSIX extension opens of a directory are denied with EISDIR.
+ BUG 8132: Fix filling printers location field when using cups.
+ Remove fstrings from client struct.
+ BUGFIX when converting from safe_strcpy to strlcpy.
+ Fix off-by-one calculations with strlcpy.
+ Ensure we always write the correct incoming mid into the share mode table
entries.
+ Fix the SMB2 oplock showstopper.
+ Convert user-specified domain to uppercase in libsmb.
+ Fix Coverity CID #2302: FORWARD_NULL.
+ Fix cups_pull_comment_location().
+ Fix double free of cups request.
+ Make cups_pull_comment_location() work again.
+ Fix potential crash bug in display_print_driver3().
+ Properly clean up in pthreadpool_init in case of failure.
+ Make plaintext session setup async.
+ Reduce fd load in Winbind children.
+ Avoid a potential 100% CPU loop in Winbind.
+ Tune broadcast namequeries for unique names.
+ Properly deal with exited winbind children.
+ Fix dup_smb2_vec3.
+ Fix return check in nss_wins.
* Tue May 17 2011 shargagan@novell.com
- Fix to renew the kerberos ticket in samba after expiry; (bnc#669949).
* Mon May 16 2011 ddiss@suse.de
- Fix a 100% CPU loop when ctdbd dies during a traverse; (bnc#693945).
* Thu May 05 2011 lmuelle@suse.de
- Make dhcpcd hook BOOTPROTO check cover dhcp6 too; (bnc#691969).
* Thu May 05 2011 shargagan@novell.com
- Handling of large (> 256 bytes) ntlmv2 blobs in winbind; (bnc#529946).
* Sat Apr 30 2011 lmuelle@suse.de
- Package static libraries with 0644 permissions.
* Sat Apr 30 2011 lmuelle@suse.de
- Add Requires libtalloc-devel to libldb-devel and libtevent-devel.
* Sat Apr 30 2011 lmuelle@suse.de
- Rename libldb0 to libldb1 as 1 is the current major version of the library.
- Add libldb1 and libtevent0 to baselibs.conf.
* Fri Apr 29 2011 lmuelle@suse.de
- Don't call the suse_update_config macro before building lib ldb and tevent.
* Fri Apr 29 2011 lmuelle@suse.de
- Update to 3.6.0pre3.
+ Listen on IPv6 addresses with IPV6_ONLY; (bso#7383).
+ Fix wrong output in 'smbget'; (bso#8066).
+ "inherit owner = yes" doesn't interact correctly with vfs_acl_xattr or
vfs_acl_tdb module; (bso#8083).
+ rpccli_samr_chng_pswd_auth_crap segfaults if any input blobs are null;
(bso#8088).
+ setpwent() actually does endpwent() and vice versa on FreeBSD; (bso#8099).
+ Fix the build of 'smbget' on HP NonStop; (bso#8106).
+ Fix build of tdb2.
+ Correctly detect and deny symlinks anywhere in a path (not just the last
component) if "follow symlinks = no".
+ Fix timeout in rpc_pipe_open_tcp_port().
+ Fix the build of "--with-profiling-data".
+ Fix Coverity IDs 986, 1340, 2047, 2299, 2307, 2325, 2335, 2336, 2470,
2471, 2478.
+ nsswitch: Add 'wbinfo --lookup-sids'.
+ nsswitch: Add 'wbinfo --sids-to-unix-ids'.
+ Fix smbd with the async echo responder.
+ Fix the build of vfs_gpfs.c.
+ Add a 10-second timeout for the 445 or netbios connection to a DC.
+ Many pthreadpool fixes.
+ Fix transaction recovery area for converted tdbs.
* Thu Apr 28 2011 lmuelle@suse.de
- Add PreReq permissions to the krb-printing package.
* Thu Apr 28 2011 lmuelle@suse.de
- Remove _libdir ldb and tevent from file list.
- Explicitly state not to bundle talloc or tdb while ldb and tevent build.
* Thu Apr 21 2011 lmuelle@suse.de
- Always use the actual library version as part of the package name.
- Exclude shared python modules.
* Thu Apr 14 2011 lmuelle@suse.de
- Update to 3.6.0pre2.
+ ID Mapping changes.
+ Implement SMB2 support.
+ Add an Endpoint Mapper daemon.
+ Make "rlimit_max below minimum Windows limit" notification less scary;
(bso#6837).
+ Quota only shown when logged as root; (bso#7080).
+ Fix printing from Windows 7; (bso#7567).
+ Retry DNS updates when connection to one nameserver has failed; (bso#7690).
+ Unlink may unlink wrong file when hardlinks are involved; (bso#7863).
+ Fix 'nmbd --port'; (bso#7875).
+ cmd_spoolss_deletedriver() returned without checking all architectures;
(bso#7880).
+ Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899).
+ Fix cups pcap reload with no printers; (bso#7915).
+ Fix bug in chain_reply; (bso#7917).
+ Fix problems with "kernel oplocks" option set to "no"; (bso#7928).
+ Fall back for utimes calls; (bso#7940).
+ Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944).
+ Let winbind try to use samlogon validation level 6; (bso#7945).
+ Sgid bit lost on folder rename; (bso#7996).
+ Fix getting username in 'net rap session'; (bso#8009).
+ Fix inode generation so nautilus can count total dir size correctly;
(bso#8010).
+ Use jenkins hash for str_checksum; (bso#8010).
+ Add explicit configure option whether or not to enable dmapi support;
(bso#8033).
+ Fix smbclient segfault with Cyrillic netbios names; (bso#8040).
+ Fix file creation on OS/X; (bso#8042).
+ Add "--option" to 'testparm'.
+ Fix crash bug on smbd shutdown when using FOPENDIR().
+ Ensure we don't return an incorrect access mask.
+ Fix bug against the new Mac client.
+ Fix leak in error path.
+ Fix error where Windows client spoolss returns WERR_INVALID_DATA.
+ Fix a segfault in the krb5 locator plugin.
+ Enable sharesec for registry shares.
+ Fix memory leak in "security=share" and "force user".
+ Add "net idmap check", a check and repair tool for the
id mapping database.
+ Add new 'net idmap delete' command.
+ Fix segfault on missing input file in 'net idmap restore'.
+ Fix 'net usersidlist' not to skip every other user.
+ Fix potential crash bug in spoolss_PrinterEnumValues push path.
+ Internal restructuring.
+ Don't wipe out all printer drivers when only one should be deleted.
+ Fix winbindd_dual_pam_auth_samlogon() for NT4 domains.
+ Fix memory leak in print_cups.c.
+ Remove duplicate cups response processing code.
+ Follow force user/group for driver IO.
+ Initiate pcap reload from parent smbd.
+ Reload shares after pcap cache fill.
+ Fix numerous Coverity IDs (2041 and others).
+ Fix a memory leak in check_sam_security_info3.
+ Fix a segfault in the nss wrapper when libnss_winbind.so is not loadable.
+ Make "net sam list [users|workstations]" list only the right things.
+ Fix a potential memleak in secrets_fetch_trusted_domain_password.
+ Use the right credentials in check_netlogond_security.
+ Add support for AF_NETLINK addr notifications.
+ Fork multiple Winbind children per domain.
+ Fix a deadlock between smbd and ctdbd.
+ Add 'wbinfo --dc-info'.
+ Make "nmbd socket dir" configurable.
+ Fixed valgrind errors.
+ Fix a memleak in receive_getdc_response.
+ Don't grant SEC_STD_DELETE always to the owner of a file.
+ Fix segfaults on addrchange errors in Winbind.
+ Allow machine accounts as members in groupdb.
+ Add IPv6 support for the endpoint mapper.
+ Free unused memory in the rpc server.
+ Fix possible segfaults in svcctl server.
+ Fix possible segfault with client_id in rpc server.
+ Add a 'svcctl shutdown' function to rpc server.
+ Fix a resource leak in net_afs.
+ Fix a resource leak in smbta-util.
+ Fix possible resource leak in net_usershare.
+ Fix possible resource leak in 'smbget'.
+ Fix possible resource leak in 'smbfilter'.
+ Fix a possible null pointer dereference in smbd.
+ Ensure we send the direct levelII oplock break to the correct fid.
+ Fix private libdir and codepages paths.
- Add RFC 3454 to the vendor files.
* Thu Apr 07 2011 jmcdonough@suse.de
- Fix idmap_tdb for big-endian systems such as ppc and s390;
(bso#6901); (bnc#675978).
* Thu Mar 24 2011 ddiss@suse.de
- Fix smbclient -M NT_STATUS_PIPE_BROKEN failure; (bso#7635); (bnc#681913).
* Fri Mar 18 2011 lmuelle@suse.de
- Replace jobs by _smp_mflags macro while calling make on post-11.4 systems.
* Thu Mar 17 2011 ddiss@suse.de
- Don't crash when publishing a single printer; (bnc#643119).
* Wed Mar 09 2011 ddiss@suse.de
- Carry error status in printer list IPC message, do not refresh printers if
cups is unavailable; (bso#7994); (bnc#675478).
* Wed Mar 09 2011 lmuelle@suse.de
- Define the libwbclient packages ahead of packages with a different version.
* Wed Mar 09 2011 jengelh@medozas.de
- Use %_smp_mflags for parallel building.
* Mon Mar 07 2011 lmuelle@suse.de
- Update to 3.5.8.
+ Fix Winbind crash bug when no DC is available; (bso#7730).
+ Fix finding users on domain members; (bso#7743).
+ Fix memory leaks in Winbind; (bso#7879).
+ Fix printing with Windows 7 clients; (bso#7567).
+ Fix 'testparm' return code when EOF in encountered in param name;
(bso#3185).
+ Make "rlimit_max below minimum Windows limit" notification less scary;
(bso#6837).
+ Fix "Your Password expires today" message for users of trusted domains;
(bso#7066).
+ Fix maintaining of users' groups via UsrMgr; (bso#7262).
+ Fix 'net ads dns register' in Windows 2008 R2 domains; (bso#7356).
+ Raise debug level for "reduce_name: couldn't get realpath" messages;
(bso#7409).
+ Fix updating the time on close in vfs_gpfs; (bso#7498).
+ Fix "log=>ndr_pull_error" in 'wbinfo -u' and 'wbinfo -g'; (bso#7594).
+ Handle Windows 9x adddriver calls without config file; (bso#7641).
+ Fix scalability problem with hundreds of printers; (bso#7656).
+ Fix memory leak in the netapi routines; (bso#7665).
+ Store unmodified copies of security descriptors in acl_xattr and acl_tdb
modules; (bso#7716).
+ Fix incorrect unix mode_t caused by invalid client DOS attributes on
create; (bso#7733).
+ Apply appropriate create masks when creating files with "inherit ACLs" set
to true; (bso#7734).
+ Fix "dfree cache time" parameter; (bso#7744).
+ Fix a getgrent crash with many groups; (bso#7774).
+ Fix requesting lookups for BUILTIN sids; (bso#7777).
+ Fix smbd crash caused by expand_msdfs; (bso#7779).
+ Fix atime limit; (bso#7785).
+ vfs_scannedonly: Switch from mtime to ctime which is more reliable;
(bso#7789).
+ Fix copying files from a SMB share using Gnome vfs and SMB signing;
(bso#7791).
+ Make Winbind recover from a signing error; (bso#7800).
+ ACL inheritance cannot be disabled in vfs_acl_xattr/vfs_acl_tdb;
(bso#7812).
+ Fix "force group" with ntlmssp guest session setup; (bso#7817).
+ vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on;
(bso#7835).
+ Make WINBINDD_LOOKUPRIDS asking the right domain; (bso#7841).
+ Make WINBINDD_LOOKUPRIDS returning the domain name; (bso#7842).
+ Expand the local SAMs aliases; (bso#7843).
+ ntlm_auth: Support clients which offer a spnego mechs we don't support;
(bso#7855).
+ Fix 'net ads dns register' in cluster setups; (bso#7871).
+ Fix 'nmbd --port'; (bso#7875).
+ Make 'rpcclient deldriver' delete drivers for all architectures;
(bso#7880).
+ Fix flaky Winbind against Windows 2008; (bso#7881).
+ Fix SMB session setups with Kerberos against some closed source SMB
servers; (bso#7883).
+ Fix stale lock in open_file_fchmod(); (bso#7892).
+ Fix sporadic Winbind panic in rpc query_user_list; (bso#7894).
+ Don't set SAMR_FIELD_FULL_NAME if we just want to set the account name;
(bso#7896).
+ Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899).
+ Fix connections from WinCE; (bso#7917).
+ Fix opening MS Powerpoint files; (bso#7940).
+ Fix endless loops caused by inotify; (bso#7942).
+ Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944).
+ Let Winbind try to use samlogon validation level 6; (bso#7945).
+ Revalidate the pathname once re-constructed from a root fsp; (bso#7950).
* Fri Mar 04 2011 lmuelle@suse.de
- Require a particular library version even if the major version is part of
the package name. Using the same major version does not guarantee forward
compatibility.
* Fri Mar 04 2011 ddiss@suse.de
- Fix a fd-leak in libwbclient at dlclose-time; (bso#7684); (bnc#668773).
* Mon Feb 28 2011 lmuelle@suse.de
- Update to 3.5.7
+ Protect against possible denial of service caused by memory corruption;
CVE-2011-0719; (bso#7949); (bnc#670431).
* Wed Feb 23 2011 lmuelle@suse.de
- Disable separate build of samba-doc for post-11.1 systems.
* Tue Feb 22 2011 lmuelle@suse.de
- Protect against possible denial of service caused by memory corruption;
CVE-2011-0719; (bso#7949); (bnc#670431).
* Thu Feb 17 2011 ddiss@suse.de
- Increase the log level for missing PIDs on SIGCHLD, printcap child processes
are not added to the children PID list; (bnc#666460).
* Thu Feb 10 2011 lmuelle@suse.de
- Do not require a particular library version if the major version is part of
the package name.
* Wed Feb 09 2011 lmuelle@suse.de
- Use the actual version numbers of the ldb, talloc, tdb, and tevent libraries
on post-11.3 systems.
* Tue Jan 18 2011 ddiss@suse.de
- Remove pcap_cache_loaded asserts from (re)load_printers. pcap_cache_loaded()
returns false if the pcap cache contains no printer entries. correct call
ordering is already enforced. (bso#7836); (bnc#625936).
* Fri Jan 14 2011 lmuelle@suse.de
- No longer force activation of the cifs service on post-11.3 systems.
- Add X-UnitedLinux-Default-Enabled to the cifs init script on pre-11.4
systems.
- Move the cifs init script nfs dependencies from Required to Should.
* Tue Jan 04 2011 lmuelle@suse.de
- Recommend to install samba-krb-printing from samba-winbind on post-10.3
systems; (bnc#661845).
* Thu Dec 30 2010 ddiss@suse.de
- Fix error paths in cups_async_callback(), an empty cups printer list should
not be treated as an error; (bnc#661842).
* Tue Dec 21 2010 ddiss@suse.de
- Abide by printcap cache time, reload parent smbd pcap cache on expiry;
(bso#7836); (bnc#625936).
* Fri Dec 17 2010 ddiss@suse.de
- Fix race in cups async printer services reload; (bso#7836); (bnc#625936).
* Sun Dec 12 2010 ro@suse.de
- Don't tweak with baselibs.conf during %post if not present; (bnc#652620).
* Thu Dec 09 2010 lmuelle@suse.de
- Don't make use of baselibs.conf on SUSE Linux Enterprise 10; (bnc#652620).
* Tue Dec 07 2010 lmuelle@suse.de
- Don't use --tmpdir as this option isn't known by mktemp of SUSE Linux
Enterprise 10; (bnc#652620).
* Sun Dec 05 2010 lars@samba.org
- vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on;
(bso#7835).
* Fri Dec 03 2010 lmuelle@suse.de
- Replace Requires samba-client by samba-gplv3-client in the gplv3 packages;
(bnc#652620).
* Tue Nov 30 2010 ddiss@suse.de
- Fix Dolphin SMB share IO with SMB signing enabled; (bso#7791); (bnc#656112).
* Tue Nov 30 2010 lmuelle@suse.de
- Add Conflicts to the samba-gplv3 main, client, doc, krb-printing, winbind,
client-gplv2, and doc-gplv2 packages; (bnc#652620).
* Fri Nov 26 2010 lmuelle@suse.de
- Add Provides samba-client-gplv2 and samba-doc-gplv2 to pre-3.2 versions;
(bnc#652620).
* Fri Nov 26 2010 lmuelle@suse.de
- Obsolete samba-client-gplv2 and samba-doc-gplv2; (bnc#652620).
* Thu Nov 25 2010 lmuelle@suse.de
- Remove Provides samba-client:/usr/sbin/winbindd from the samba-gplv3-winbind
package to avoide an accidental install trigger; (bnc#652620).
* Thu Nov 25 2010 lmuelle@suse.de
- Add Provides samba-client to the samba-gplv3-client package; (bnc#652620).
* Wed Nov 24 2010 lmuelle@suse.de
- Remove all Obsoletes from the samba-gplv3 packages and only keep the
Provides samba; (bnc#652620).
* Sat Nov 20 2010 lmuelle@suse.de
- Add fitting Conflicts to all samba-gplv3 packages; (bnc#652620).
* Fri Nov 19 2010 jmcdonough@suse.de
- Reduce unnecessary ldap round trips and eliminate invalid DN
messages; (bnc#654719).
* Fri Nov 12 2010 lmuelle@suse.de
- Exclude cifs-mount and ldapsmb from the samba-gplv3 build of SUSE Linux
Enterprise 10 SP 3 and 4.
* Thu Nov 11 2010 lmuelle@suse.de
- Add the _build_arch at the end of the vendor version suffix.
* Thu Oct 28 2010 lmuelle@suse.de
- Provide and Obsolete samba-gplv3 to replace potentially installed packages.
* Fri Oct 15 2010 lmuelle@suse.de
- Change package base name to samba-gplv3 for SUSE Linux Enterprise 10 SP 4.
- Do not package libsmbclient and libsmbsharemodes.
* Sun Oct 10 2010 jmcdonough@suse.de
- Update to 3.5.6
+ Fix auto printers with registry config; (bso#7280); (bnc#617153).
+ Fix SPNEGO auth when contacting Win7 system using Microsoft Live
Sign-in Assistant; (bso#7577).
+ Fix 'net idmap restore' setting HWM to avoid duplicates; (bso#7578).
+ Fix "admin users" when using vfs_acl_xattr; (bso#7581).
+ Fix using cached credentials in ntlm_auth; (bso#7589).
+ Fix Winbind offline login; (bso#7590).
+ Fix Winbind internal error; (bso#7636).
+ Fix mknod/mkfifo failing with "No such file or directory"; (bso#7651).
+ Fix smbd changing mode of files on rename; (bso#7693).
+ Fix crash bug with invalid SPNEGO token; (bso#7694).
+ Fix smbd panic on invalid NetBIOS session request; (bso#7698).
+ Fix smbd crash caused by "%D" in "printer admin"; (bso#7541).
+ Fix 'smbclient -M'; (bso#7635).
+ Fix scalability problem with hundreds of printers; (bso#7656).
+ Fix crash bug in rpcclient; (bso#7688).
+ Fix file corruption when setting Samba "write wache wize"; (bso#7715).
* Thu Oct 07 2010 lmuelle@suse.de
- Let startproc wait for nmb, smb and winbind pid files getting created on
post-11.1 systems; (bnc#520036).
* Thu Sep 23 2010 ddiss@suse.de
- Fix smbd crash with CUPS printers and no [printers] share defined;
(bso#7297); (bnc#637755).
* Mon Sep 20 2010 jmcdonough@suse.de
- Fix printing from 64-bit windows clients; (bso#6888); (bnc#640870).
* Sun Sep 12 2010 coolo@novell.com
- Fix baselibs.conf for libtalloc.
* Wed Sep 08 2010 lmuelle@suse.de
- Fix buffer overflow in sid_parse() to correctly check the input lengths when
reading a binary representation of a Windows Security ID (SID);
CVE-2010-3069; (bso#7669); (bnc#637218).
* Mon Aug 30 2010 jmcdonough@suse.de
- Use cached ntlm password in libsmbclient. Prevent lockouts
when kerberos tickets are lost; (bnc#602418); (bnc#606304).
* Thu Aug 26 2010 gber@opensuse.org
- Add a dependency on nfs to the smbfs/ cifs init scripts as they require the
en_US locale and /usr might be on NFS.
* Mon Aug 23 2010 jmcdonough@suse.de
- Complete fix for trusts with Windows 2008R2 DCs.
* Fri Aug 20 2010 jmcdonough@suse.de
- Fix authentication dialogs when connecting to older systems;
(bnc#632055).
* Thu Aug 19 2010 lmuelle@suse.de
- Adjust position of conditional ldapsmb %package and %files definition.
* Thu Aug 19 2010 lmuelle@suse.de
- Create the /var/run/samba directory on the fly and package it as %ghost.
* Thu Aug 19 2010 jmcdonough@suse.de
- Fix preexec scripts; (bso#7104); (bnc#632852).
* Thu Aug 19 2010 lmuelle@suse.de
- Add missing netapi, smbclient, smbsharemodes, talloc, tevent, and wbclient
pkgconfig files and BuildRequire pkgconfig; (bnc#632770).
* Tue Aug 17 2010 lmuelle@suse.de
- BuildRequire python-devel for post-9.3 systems.
* Tue Aug 17 2010 lmuelle@suse.de
- Only create precompiled headers for post-10.2 systems.
- Remove mkinitrd scriptlets.
* Tue Aug 17 2010 lmuelle@suse.de
- Add vfs_crossrename man page.
- Call make basic and remove conditional proto target.
- Increase libtevent version to 0.9.9.
- Remove wbc_async header from the file list.
- Remove remaining cifs-mount pieces from the spec file.
* Mon Aug 16 2010 jmcdonough@suse.de
- Fix printers not auto loading with registry config; (bso#7280);
(bnc#617153).
* Sun Aug 15 2010 lmuelle@suse.de
- Update to 3.6.0pre1.
+ SMB2 support is fully functional despite managing quota using the
Microsoft management tools.
+ Internal Winbind passdb changes to use samr and lsa rpc pipe to get local
user and group information.
+ The spoolss and the old RAP printing code have been completely overhauled
and refactored.
+ The SMB Traffic Analyzer (SMBTA) VFS module got added.
* Sun Aug 15 2010 lmuelle@suse.de
- Intilize workgroup of nmblookup as empty string.
* Thu Aug 12 2010 jmcdonough@suse.de
- Fix net ads join when using parent domain users; (bso#6364);
(bnc#630812).
* Wed Jul 28 2010 sjayaraman@suse.de
- cifs: do not restart during dhcp lease renewal when IPaddress remains
the same; (bnc#573246).
* Mon Jul 05 2010 lmuelle@suse.de
- Fix "Too many open files" when trying to access large number of files;
(bso#6837); (bnc#619787).
* Wed Jun 23 2010 lmuelle@suse.de
- Update to 3.5.4.
+ Fix smbd crash when sambaLMPassword and sambaNTPassword entries missing
from ldap (bug #7448).
+ Fix init_sam_from_ldap storing group in sid2uid cache (bug #7507).
+ Allow previous password to be stored and use it to check tickets;
(bso#7099).
+ Make ea data checks identical for trans2open and trans2mkdir; (bso#7188).
+ Fix editing users' groups via UsrMgr; (bso#7262).
+ Fix Winbind over IPv6; (bso#7341).
+ Samba sends "raw" inode number as uniqueid with unix extensions;
(bso#7410).
+ Fix printing large formats; (bso#7423).
+ Fix spnego returning incorrect mechListMIC string; (bso#7449).
+ Fix some crash bugs and missing error codes in AddDriver paths;
(bso#7459).
+ Fix crash bug in _samr_QueryUserInfo{2} level 18; (bso#7479).
+ Fix 'not a string literal' warning in netdomjoin-gui; (bso#7500).
+ Fix calculation of st_blocks in vfs_streams_xattr; (bso#7503).
+ Fix numerous build issues; (bso#7504).
+ Fix session setup from linux kernel cifs clients with "sec=ntlmv2";
(bso#7517).
* Mon Jun 21 2010 lmuelle@suse.de
- Remove all provides and obsoletes samba3 from the spec file. Packages with
this base name have not been offered as part of a product.
* Fri Jun 11 2010 lmuelle@suse.de
- Fix a NULL pointer dereference in smbd of the 3.4 code base;
CVE-2010-1635; (bso#7229); (bnc#605935).
* Tue Jun 08 2010 lmuelle@suse.de
- Address possible buffer overrun in chain_reply code of pre-3.4 versions;
CVE-2010-2063; (bso#7494); (bnc#611927).
* Mon Jun 07 2010 hhetter@suse.de
- Update of the SMB Traffic Analyzer v2 VFS module
* Fri May 28 2010 jmcdonough@suse.de
- Fix trusts with Windows 2008R2 DCs; (bnc#613459); (bnc#599873);
(bnc#592198); (bso#6697).
* Wed May 19 2010 lmuelle@suse.de
- Update to 3.5.3.
+ Fix MS-DFS functionality; (bso#7339).
+ Fix a Winbind crash when scanning trusts; (bso#7389).
+ Fix problems with SIGCHLD handling in Winbind; (bso#7317).
+ Add replacement for IPV6_V6ONLY on linux systems with broken headers;
(bso#7196).
+ Fix cups encryption setting; (bso#7263).
+ Fix exporting printers via 'cupsaddsmb' command; (bso#7277).
+ Fix SMB job IDs in CUPS job names; (bso#7288).
+ Fix segfault in mount.cifs; (bso#7315).
+ Make TIME_T_MAX defines consistent; (bso#7352).
+ Re-fix a bug with smbd serving a windows terminal server; (bso#7357).
+ Display an error on 'net conf import' failures; (bso#7378).
+ Fix bitmap leak in dptr_Close; (bso#7384).
+ Fix rename problems with full_audit VFS module; (bso#7398).
+ Fix setting of passwords via 'net rpc user password' command; (bso#7417).
+ Fix 'net rpc printer list' command; (bso#7418).
+ Rename mod_name to module_name; (bso#7421).
- Fix unnecessary traversing winbindd_cache.tdb in SIGHUP handler.
- Added EN ISO 216, A0 and A1 to builtin forms; (bso#7423).
- Winbind not working over IPv6; (bso#7341).
* Tue May 18 2010 jmcdonough@suse.de
- Honor "interfaces" list in net ad dns register; (bnc#606947).
* Tue May 18 2010 lmuelle@suse.de
- Exclude the RPM release from the vendor tag for openSUSE Factory;
(bnc#604049).
* Thu Apr 29 2010 lmuelle@suse.de
- Enable the build of the idmap tdb2 module; (bnc#600822).
* Sun Apr 25 2010 lars@samba.org
- BuildRequire keyutils-libs-devel for Fedora and post-RHEL4.
* Sun Apr 25 2010 lars@samba.org
- BuildRequire pkg-config for post-10.2 systems and else pkgconfig.
* Wed Apr 21 2010 jmcdonough@suse.de
- Add "net conf import" error messages; (bso#7378, bnc#598189).
* Wed Apr 21 2010 jsmeix@suse.de
- Define cups_lib_dir %{_prefix}/lib/cups for post-11.2 systems; (bnc#575544).
* Wed Apr 07 2010 lmuelle@suse.de
- Update to 3.5.2.
+ Fix smbd segfaults in _netr_SamLogon for clients sending null domain;
(bso#7237).
+ Fix smbd segfaults in "waiting for connections" message; (bso#7251).
+ Fix an uninitialized variable read in smbd; (bso#7254); (bnc#605935);
CVE-2010-1642.
+ Fix a memleak in Winbind; (bso#7278).
+ Fix Winbind reconnection to it's own domain; (bso#7295).
+ Fix segfault if hide files or veto files has no ".AppleDouble";
(bso#1206).
+ Fix parsing of the gecos field; (bso#5198).
+ Fix several printing issues; (bso#6727).
+ Fix valgrind warning; (bso#6814).
+ Fix race condition in mount.cifs that allows user to replace mountpoint
with a symlink; (bso#6853).
+ Fix bug in vfs_scannedonly rmdir implementation; (bso#7075).
+ Fix handling of bad server data returns in client rpc_transport;
(bso#7159).
+ Never mark external domains as internal in Winbind; (bso#7170).
+ Fix access by multi-threaded applications; (bso#7202).
+ Fix 'net share' command; (bso#7203).
+ Fix DN parsing name was always null; (bso#7204).
+ Signals are processed twice in child; (bso#7206).
+ Fix returning of group members with 'getent group'; (bso#7212).
+ Fix the build of net_afs.c with --fake-kaserver=yes; (bso#7216).
+ Make Winbind logs more verbose for troubleshooting; (bso#7225).
+ Fix a NULL pointer dereference in smbd; CVE-2010-1635; (bso#7229);
(bnc#605935).
+ Fix automatic building of vfs_tsmsm if gpfs and dmapi are present;
(bso#7231).
+ Fix race conditions in CTDB persistent transactions; (bso#7232).
+ Symlink delete fails but incorrectly reports success to client;
(bso#7234).
+ Fix "printer admin" functionality; (bso#7255).
+ Fix value-needed calculation in_spoolss_EnumPrinterData(); (bso#7256).
+ Fix _winreg_QueryValue crash bugs and implement Windows behavior;
(bso#7258).
+ Fix job management commands for CUPS queues; (bso#7269).
+ Fix smbd segfault if using vfs_acl_tdb; (bso#7283).
+ Fix core dump in 'ntlm_auth' with "gss-spnego" helper; (bso#7290).
+ Fix smbd crashes with CUPS printers and no [printers] share defined;
(bso#7297).
+ Fix DOS attribute inconsistency with MS Office; (bso#7310).
+ Many disconnecting clients render clustered Samba unusuable for some time;
(bso#7312).
+ Make 'net conf addshare' atomic; (bso#7313).
+ Eliminate race condition in creating/scanning sorted subkeys in the
registry backend; (bso#7314).
+ Winbind possibly segfaults when trying a trusted domain without inbound
trust; (bso#7316).
* Tue Apr 06 2010 hhetter@suse.de
- Add SMB Traffic Analyzer v2 VFS module.
* Tue Mar 30 2010 lmuelle@suse.de
- Document "wide links" defaults to "no" in the smb.conf man page for versions
pre-3.4.6; (bnc#577868).
* Fri Mar 26 2010 jmcdonough@suse.de
- Fix workgroup enumeration, for client printer and file share
selection; (bso#6880); (bnc#586215).
* Tue Mar 23 2010 jmcdonough@suse.de
- Fix tdb validation for offline auth; (bnc#587014).
* Mon Mar 22 2010 lmuelle@suse.de
- Fix "printer admin" functionality; (bso#7255).
* Mon Mar 22 2010 lmuelle@suse.de
- An uninitialized variable read could cause an smbd crash; (bso#7254);
(bnc#605935); CVE-2010-1642.
* Mon Mar 22 2010 lmuelle@suse.de
- Ensure to have a valid talloc stackframe; (bso#7251).
* Mon Mar 22 2010 lmuelle@suse.de
- _netr_SamLogon segfaults for clients sending NULL domain; (bso#7237).
* Thu Mar 18 2010 lmuelle@suse.de
- Merge missing pam_winbind message translations; (bnc#499233).
* Sun Mar 14 2010 lmuelle@suse.de
- Remove cifs-mount subpackage for post-11.2 systems as the tools are now part
of the independent cifs-utils package.
* Thu Mar 11 2010 jmcdonough@suse.de
- Fix join of Windows 2008 domains; (bnc#567013).
* Mon Mar 08 2010 lmuelle@suse.de
- Update to 3.5.1 and 3.4.7.
+ Fix security flaw on Linux platforms if built with libcap support allowing
file system access even when permissions should have denied it;
CVE-2010-0728; (bso#7222); (bnc#586683).
* Mon Mar 08 2010 rhafer@novell.com
- Fixed libldb.so link in libldb-devel.
* Fri Mar 05 2010 hhetter@novell.com
- Fix argc handling in net_share, making the command "net share"
work again; (bso#7203); (bnc#584253).
* Mon Mar 01 2010 lmuelle@suse.de
- Update to 3.5.0.
+ Fix duplicate sam and unix accounts; (bso#7145).
+ Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160).
+ Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166).
+ Fix 'net ads dns' usage calls; (bso#7181).
+ Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182).
* Wed Feb 24 2010 lmuelle@suse.de
- Update to 3.4.6.
+ Change parameter "wide links" to default to "no"; it's also incompatible
with "unix extensions"; (bso#7104); (bnc#577868).
+ Fix printing with 64 bit clients (bso#6888).
+ Fix core dump on 64 bit Linux (bso#7063).
+ Fix failing of smbd to respond to a read or a write caused by Linux
asynchronous IO (aio) (bso#7067).
+ Fix string buffer overflow causing heap corruption in smbd (bso#7096).
+ Fix bogus ip address in SWAT; (bso#5885).
+ Fix vfs_full_audit; (bso#6557).
+ Use the first "uid" value; (bso#6157).
+ Fix large paged search with DirX LDAP servers; (bso#6981).
+ Fix crash bug in 'cifs.upcall'; (bso#6868).
+ Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047).
+ Fix DFS on AIX (maybe others); (bso#7052).
+ Fix pdb_search crash as non-root user; (bso#7068).
+ Fix unlocking of accounts from ldap; (bso#7072).
+ Fix vfs_expand_msdfs; (bso#7081).
+ Fix results of 'smbclient -L' with a large browse list; (bso#7098).
+ Normalize "Changing password for" msg IDs and STRs; (bso#7102).
+ Fix malformed require_membership_of_sid; (bso#7106).
+ Fix reading of large browselist; (bso#7122).
+ "mangling method = hash" can crash storing a name containing a '.';
(bso#7154).
+ Valgrind Conditional jump or move depends on uninitialised value(s) error
when "mangling method = hash"; (bso#7155).
+ Fix listing of printjobs in Windows 7; (bso#7130).
+ Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136).
+ Make idmap cache persistent for "ldapsam:trusted".
+ Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not
only the persistent idmap cache.
+ Shortcut uid_to_sid when "ldapsam:trusted = yes".
+ Make pdb_copy_sam_account also copy the group sid.
+ Shortcut gid_to_sid when "ldapsam:trusted = yes".
+ Speed up pdb_get_group_sid().
+ Try to build the full unix_pw structure with ldapsam:trusted support.
+ Optimize ldapsam_alias_memberships() and cache ldap searches.
* Fri Feb 19 2010 lmuelle@suse.de
- Update to 3.5.0rc3.
+ Change parameter "wide links" to default to "no"; it's also incompatible
with "unix extensions"; (bso#7104); (bnc#577868).
+ Fix vfs_full_audit; (bso#6557).
+ Fix crash bug in 'cifs.upcall'; (bso#6868).
+ Fix duplicate initializer in the rmdir module; (bso#6876).
+ Fix printing with 64 bit clients; (bso#6888).
+ Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047).
+ Fix core dump on Ubuntu 8.04 64 bit; (bso#7063).
+ Fix failing of smbd to respond to a read or a write caused by Linux
asynchronous IO (aio); (bso#7067).
+ Fix 'smbget' error status; (bso#7069).
+ Fix build of 'smbfilter'; (bso#7071).
+ Fix unlocking of accounts from ldap; (bso#7072).
+ Cliconnect gets realm wrong with trusted domains; (bso#7079).
+ Fix vfs_expand_msdfs; (bso#7081).
+ Fix storing of create time on directories in an EA in new create time
code; (bso#7084).
+ Fix an early release of the global lock that can cause data corruption in
libtdb; (bso#7085).
+ Fix string buffer overflow causing heap corruption in smbd; (bso#7096).
+ Fix results of 'smbclient -L' with a large browse list; (bso#7098).
+ Normalize "Changing password for" msg IDs and STRs; (bso#7102).
+ Fix malformed require_membership_of_sid; (bso#7106).
+ Add pdb_ldap performance fixes; (bso#7116).
+ Change ldap filter to what really was intended; (bso#7116).
+ Add new "nmbd bind explicit broadcast" parameter; (bso#7118).
+ Fix nmbd problems with socket address; (bso#7118).
+ Support large browselist; (bso#7119).
+ Fix reading of large browselist; (bso#7122).
+ Fix listing of printjobs in Windows 7; (bso#7130).
+ Owner of file not available with Kerberos; (bso#7139).
+ Fix IPv4/IPv6 problems; (bso#7140).
+ Fix get_acl_blob in the acl_tdb VFS module; (bso#7148).
+ "mangling method = hash" can crash storing a name containing a '.';
(bso#7154).
+ Valgrind Conditional jump or move depends on uninitialised value(s) error
when "mangling method = hash"; (bso#7155).
+ Fix some wrong newlines in de translation strings.
* Tue Feb 09 2010 lmuelle@suse.de
- Take extra care that a mount point of mount.cifs isn't changed during mount
and don't allow it to be run as setuid root program; CVE-2010-0787;
(bso#6853); (bnc#550002).
* Tue Feb 09 2010 lmuelle@suse.de
- Check in mount.cifs for invalid characters in device name and mountpoint;
CVE-2010-0547; (brc#562156); (bnc#577925).
* Tue Feb 09 2010 boyang@suse.de
- Don't invalidate cache for uninitialized domains; (bnc#538923).
* Tue Feb 09 2010 boyang@suse.de
- Signals are processed twice in child; (bnc#538923).
* Mon Feb 08 2010 jmcdonough@suse.de
- Allow forced pw change even with min pw age; (bnc#561894).
* Mon Feb 08 2010 lmuelle@suse.de
- Change parameter "wide links" to default to "no"; it's also incompatible
with "unix extensions"; CVE-2010-0926; (bso#7104); (bnc#577868).
* Sun Feb 07 2010 boyang@suse.de
- Fix enumerate domain local groups for primary domain; (bnc#573813).
* Sun Feb 07 2010 boyang@suse.de
- Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106).
* Fri Feb 05 2010 lmuelle@suse.de
- Normalize "Changing password for" msg IDs and STRs; (bnc#499233).
* Thu Feb 04 2010 rhafer@novell.com
- Build libtevent and libldb and put them into separate subpackages.
* Tue Jan 26 2010 lmuelle@suse.de
- Update to 3.5.0rc2.
+ The Using Samba HTML book has been removed.
+ 'net', 'smbclient' and libsmbclient can use logon credentials cached by
Winbind; (bso#7062).
+ New vfs_scannedonly module has been added; (bso#7028).
+ Check password history before increasing "badPasswordCount"; (bso#4347).
+ Fix changing of ACLs on writable file with "dos filemode=yes"; (bso#5202).
+ Restore Samba 3.0.x behavior and use the first "uid" value in pdb_ldap;
(bso#6157).
+ Fix deletion of an object whose parent folder does not have delete rights
fails even if the delete right is set on the object in vfs_acl_xattr and
vfs_acl_tdb; (bso#6876).
+ Fix large paged search with DirX LDAP servers; (bso#6981).
+ Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027).
+ Disable sanity check in NetShareEnum for better compatibility with
Windows; (bso#7029).
+ Fix SMBrmdir error message when deleting a directory fails; (bso#7033).
+ Fix segfault in vfs_cap; (bso#7034).
+ Fix 'net rpc getsid' in hardened Windows environments; (bso#7036).
+ Fix a Winbind segfault in "trusted_domains"; (bso#7037).
+ Complete and improve some German translation of 'net'; (bso#7039).
+ Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039).
+ Fix crash bug in libsmbclient; (bso#7043).
+ Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045).
+ Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046).
+ Lock down some srvsvc calls according to what w2k3 seems to do.
* Tue Jan 19 2010 lmuelle@suse.de
- Update to 3.4.5.
+ Fix memory leak in smbd (bug #7020).
+ Fix changing of ACLs on writable files with "dos filemode=yes"
(bug #5202).
+ BUG 6642: Fix opening the quota magic file.
+ BUG 6919: Fix remote quota management.
+ BUG 7034: Fix internal error caused by vfs_cap.
+ BUG 7036: Fix 'net rpc getsid' in hardened Windows environments.
+ BUG 7043: Fix crash bug in "SMBC_parse_path".
+ BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls.
+ BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS
server.
* Tue Jan 12 2010 lmuelle@suse.de
- Free unused memory after a packet got processed; (bso#7020).
* Fri Jan 08 2010 boyang@suse.de
- Add timeout to rpc call to prevent infinite loop when network is
down; (bnc#538923).
* Thu Jan 07 2010 lmuelle@suse.de
- Update to 3.5.0rc1.
+ BUG 6837: Fix "Too many open files" when trying to access large number of
files with Windows 7; (bnc#619787).
+ BUG 6939: Fix long filenames when "mangling method" is set to "hash".
+ BUG 6991: Create symbol links to shared libraries.
+ BUG 6992: make test for getgrouplist cacheable.
+ BUG 7014: Fix Winbind crash when retrieving empty group members.
+ BUG 7020: Fix smbd using 2G memory.
+ Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned
attributes by protocol level.
+ Vector correctly through reply_openerror() (which uses the same logic).
+ Fix bugs with the full Windows ACL support.
+ Add a few missing gettext calls to the 'net' command.
+ Fix up a share type translation and translate some more strings in 'net'.
+ Allow to call "pdbedit -N description -u user" without specifiyng "-r".
+ Add spoolss_DriverInfo7.
+ Fix rpcclient after setprinter IDL fixes.
+ Use generated krb5.conf in 'net ads testjoin'.
+ Add some German translations for the 'net' command.
+ Update mount.cifs man page with nounix option.
+ Fix _samr_GetAliasMembership for results with 0 rids.
+ Fix an error case in cli_negprot.
+ Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc.
+ Restore correct timeouts for SMB requests.
+ Fix a 64-bit error in libsmb.
+ Replace IS_DOMAIN_OFFLINE by a function in Winbind.
+ Simplify/cleanup Winbind code.
+ Fix write behind memory block in libtalloc.
+ Fix result check for getaddrinfo().
+ Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr()
to tsocket.
+ Always set tdb->tracefd to -1 to be safe on goto fail in libtdb.
+ Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior.
+ Fix standalone 'make installdocs'.
+ Output %p as unsigned in snprintf replacement.
+ New attempt at TDB transaction nesting allow/disallow.
+ Remove swig stuff from libtdb.
+ Reset tdb->fd to -1 in tdb_close() in libtdb.
+ Change the way mksysms work in libtalloc.
+ Also build and install tdb manpages from standalone tdb.
+ Fix infinite loop in NCACN_IP_TCP as there is no timeout.
+ Make winbindd_cache.c aware of domain offline to avoid unnecessary backend
query.
+ List trusted domains from wcache when domain is offline.
* Thu Jan 07 2010 lmuelle@suse.de
- Update to 3.4.4.
+ Fix interdomain trust relationships with Win2008R2 (bug #6697).
+ Fix Winbind crashes when queried from nss (bug #6889).
+ Fix Winbind crash when retrieving empty group members (bug #7014).
+ Fix "UID range full" error in Winbind (bug #6901).
+ Fix multiple LDAP servers in "idmap backend" and "idmap alloc
backend" (bug #6910).
+ BUG 4832: Fix iconv checks.
+ BUG 6338: Do not always display "none" in 'net rpc trustdom list'.
+ BUG 6851: Add pdbedit --kickoff-time/-K to set the user's kickoff time.
+ BUG 6828: Fix infinite timeout when byte lock held outside of samba.
+ BUG 6837: Fix "Too many open files" message when trying to access a large
number of files with Windows 7; (bnc#619787).
+ BUG 6841: Fix "map acl inherit = yes".
+ BUG 6850: Fix shadow copy display on Windows 7.
+ BUG 6867: Fix listing of directories with a lot of files.
+ BUG 6868: Support building with Heimdal we well as with MIT.
+ BUG 6875: Fix DOS attributes on OS/2 clients.
+ BUG 6880: Fix listing of workgroup servers in libsmbclient.
+ BUG 6898: Samba duplicates file content on appending.
+ BUG 6918: Fix krb5 build problem on Ubuntu karmic.
+ BUG 6929: Fix build with recent heimdal.
+ BUG 6939: Fix long filenames with "mangling method = hash".
+ BUG 6967: Fix 'net ads join' with OU.
+ BUG 6981: Fix paged search with DirX LDAP server.
+ BUG 6982: Remove erroneous out of memory error path in lookup_sid.
+ BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids.
+ BUG 7005: Fix "mangle method = hash" truncates files with dot "."
character.
+ Fix the build of the winbind krb5 locator plugin.
+ Fix enumprinter key client and server.
* Wed Jan 06 2010 lmuelle@suse.de
- Readjust the _libdir/cups/backend/smb sym link only on uninstall of the
samba-krb-printing package; (bnc#568603).
* Fri Jan 01 2010 lars@samba.org
- Add BuildRequires to fam-devel; (bnc#564260).
* Wed Dec 30 2009 jmcdonough@suse.de
- Prevent winbind crash; (bso#7014); (bnc#566119).
* Mon Dec 21 2009 sjayaraman@suse.de
- Fix processing of open modes in POSIX open; (bnc#530683).
* Thu Dec 17 2009 jengelh@medozas.de
- Add baselibs.conf as a source.
* Tue Dec 15 2009 lmuelle@suse.de
- Update to 3.5.0pre2.
+ BUG 2350: Add LDAP Alias Dereferencing support.
+ BUG 6288: SWAT adds a second share when changing parameters of an existing
share.
+ BUG 6435: Fix minor memory corruption.
+ BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was
set while configure.
+ BUG 6802: A created folder does not properly inherit permissions from
parent in vfs_acl_xattr.
+ BUG 6837: "Too many open files" when trying to access large number of
files from Windows 7; (bnc#619787).
+ BUG 6860: Fix shared library build on QNX.
+ BUG 6879: Fix crash in Winbind.
+ BUG 6929: Fix build with recent heimdal.
+ BUG 6938 : No hook exists to check creation rights when using acl_xattr
module.
+ BUG 6967: Prevent glibc error on 'net ads join'.
+ Fix vfs_acl_xattr which was failing to call the NEXT connect function.
+ Restructure the ACL code.
+ Refactor reply_rmdir to use handle based code.
+ Fix the build when no external talloc and tdb are installed.
+ Fix detection of CTDB headers on systems without system-libtalloc.
+ Fix several printing issues.
+ Fix the build on Mac OS X 10.6.2.
+ Fix net and rpcclient after setprinterdataex changes.
+ Add full support for level 8 printer drivers.
+ Add more spoolss architectures to IDL.
+ Fix enumprinter key client and server.
+ Fix crash in EnumPrinterDataEx.
+ Prefer posix_fallocate for doing "strict allocate".
+ Restore "fake directory create times" as a share parameter.
+ Fix explicit stat64 support.
+ Add support for NetWkstaGetInfo 101 and 102.
+ Add rpcclient wkssvc_enumerateusers.
+ De-deprecate "write cache size" to prevent its removal without a proper
alternative.
+ Allow more than 1000 users in BUILTIN\Users.
+ Complete support for NetWkstaGetInfo/NetWkstaEnumUsers.
+ Fix the build of the example VFS modules.
+ Fix crash in free_file_list().
+ Give the user a chance to change password when password will expire soon.
* Wed Dec 09 2009 lmuelle@suse.de
- Store the smbfs service state if enabled and restore it for cifs while
upgrade on post-11.2 systems.
* Wed Dec 09 2009 lmuelle@suse.de
- Prevent cifstab from being overwritten while upgrade on post-11.2 systems.
* Wed Dec 09 2009 boyang@suse.de
- Give the user a chance to change password when password will expire soon;
(FATE#302414).
* Tue Dec 08 2009 lmuelle@suse.de
- Rename smbfs init script to cifs for post-11.2 systems.
* Tue Dec 08 2009 jmcdonough@suse.de
- Allow Windows 7 to connection to samba domain controllers and
member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680).
* Fri Dec 04 2009 jmcdonough@suse.de
- Error on joining windows domain (invalid pointer); (bso#6967);
(bnc#553622).
* Thu Dec 03 2009 lmuelle@suse.de
- Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165).
- Simplify the winbind package %pre script and suppress stdout only.
* Thu Nov 26 2009 lmuelle@suse.de
- Update to 3.5.0pre1
+ Add support for full Windows timestamp resolution.
+ Experimental implementation of SMB2.
+ Add encryption support for connections to a CUPS server.
+ Major windbind asynchronous refactoring.
- Remove using_samba from the doc package.
- Increase major version of libtalloc to 2.
* Thu Nov 19 2009 boyang@suse.de
- Fix kerberos refresh chain; (bnc#546162); (bso#6872).
* Fri Nov 06 2009 lmuelle@suse.de
- Hardlink duplicate files on post-11.1 systems.
* Fri Nov 06 2009 lmuelle@suse.de
- Add BuildArch noarch to samba-doc on post-11.1 systems.
* Tue Nov 03 2009 boyang@suse.de
- Use full 16byte session key in make_user_info_netlogon_interactive();
(bnc#551811).
* Thu Oct 29 2009 lmuelle@suse.de
- Update to 3.4.3.
+ Fix trust relationships to windows 2008 (2008 r2) (bug #6711).
+ Fix file corruption using smbclient with NT4 server (bug #6606).
+ Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680).
+ BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a
symbolic link.
+ BUG 6529: Offline files conflict with Vista and Office 2003.
+ BUG 6532: Fix domain enumeration if master browser has space in name.
+ BUG 6606: Fix file corruption using smbclient with NT4 server.
+ BUG 6690: Fix wrong error check in profile.
+ BUG 6703: Allow smbstatus as non-root.
+ BUG 6704: Fix syntax error in avahi configure test.
+ BUG 6707: Fix an occasional segfault in config file parsing.
+ BUG 6710: Adjust regex to match variable names including underscores.
+ BUG 6711: Fix trust relationships to windows 2008 (2008 r2).
+ BUG 6726: SIVAL should have been an SVAL.
+ BUG 6728: BSD needs sys/sysctl.h included to build properly.
+ BUG 6731: Fix reading beyond the end of a named stream in xattr_streams.
+ BUG 6735: Don't overwrite password in pam_winbind, subsequent pam modules
might use the old password and new password.
+ BUG 6764: Fix timeval calculation.
+ BUG 6765: Add a "hidden" parameter "share:fake_fscaps".
+ BUG 6769: Fix symlink unlink.
+ BUG 6772: Allow outstanding_aio_calls to be decremented.
+ BUG 6774: smbd crashes if "aio write behind" is set.
+ BUG 6776: Fix core dump caused by running overlapping Byte Lock test.
+ BUG 6781: Fix renaming subfolders in Explorer view.
+ BUG 6791: Fix linking order in cifs.upcall.
+ BUG 6793: Fix Winbind crash with "INTERNAL ERROR: Signal 6".
+ BUG 6793: Fix segfault in winbindd_pam_auth.
+ BUG 6796: Deleting an event context on shutdown can cause smbd to crash.
+ BUG 6797: Fix a memleak in libwbclient.
+ BUG 6804: Fix hpux compiler issue.
+ BUG 6805: Correctly handle aio_error() and errno.
+ BUG 6807: Fix a segfault in "net rpc trustdom list" for long domain names.
+ BUG 6810: Add support for finding alternate credcaches to cifs.upcall.
+ BUG 6811: Fix reference to freed memory in pam_winbind.
+ BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure.
+ BUG 6824: Fix avahi activation.
+ BUG 6826: Don't fail authentication when one or some group of
require-membership-of is invalid.
+ BUG 6828: Fix infinite timeout when byte lock held outside of Samba.
+ BUG 6829: Fix displaying of multibyte characters in smbclient.
+ BUG 6840: Fix crash in pam_winbind.
+ Fix an uninitialized variable.
+ Only ever handle one event after a select call.
+ Conditional install of the cifs.upcall man page.
+ Fix warning occuring when building the manpages.
* Fri Oct 23 2009 lmuelle@suse.de
- Let smbclient show special characters properly; (bso#6829); (bnc#544204).
* Fri Oct 23 2009 boyang@suse.de
- Don't fail authentication when one or some group of require-membership-of
is invalid; (bnc#525123); (bso#6826).
* Fri Oct 16 2009 jmcdonough@suse.de
- Allow winbind to ignore certain domains; (bnc#539506).
* Thu Oct 08 2009 lmuelle@suse.de
- Update to 3.4.2.
+ Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517).
+ Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115).
+ Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).
* Wed Sep 30 2009 jmcdonough@suse.de
- Fix potential denial of service; CVE-2009-2906; (bnc#543115).
* Fri Sep 25 2009 jmcdonough@suse.de
- Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).
* Wed Sep 23 2009 jmcdonough@suse.de
- Fix unresolved home path; CVE-2009-2813; (bnc#539517).
* Mon Sep 21 2009 boyang@suse.de
- Don't overwrite password in pam_winbind; (bnc#515444).
* Mon Sep 14 2009 chris@computersalat.de
- mods for winbind (when used with squid - ntlm_auth)
o winbind adds group 'winbind'
o permission 0750,root,winbind LOCKDIR/winbindd_privileged
* Thu Sep 10 2009 lmuelle@suse.de
- Merge two fixes from 3.2.8 and 3.3.1.
+ Adjust regex to match variable names including underscores.
+ Conditional install of the cifs.upcall man page.
* Wed Sep 09 2009 lmuelle@suse.de
- Remove supplements from baselibs.conf while %clean for pre-11.1 systems;
(bnc#520579).
* Wed Sep 09 2009 lmuelle@suse.de
- Update to 3.4.1.
+ Fix authentication on member servers without Winbind (bug #6650).
+ Nautilus fails to copy files from an SMB share (bug #6649).
+ Fix connections of Win98 clients (bug #6551).
+ Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697).
+ Fix Winbind authentication issue (bug #6646).
+ BUG 5879: Update LDAP schema for Netscape DS 5.
+ BUG 5886: Fix password change propagation with ldapsam.
+ BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe.
+ BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab.
+ BUG 6437: Make open_udp_socket() IPv6 clean.
+ BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient.
+ BUG 6506: Smbd server doesn't set EAs when a file is overwritten in
NT_TRANSACT_CREATE.
+ BUG 6532: Fix the build with external talloc.
+ BUG 6538: Cancel all locks that are made before the first failure.
+ BUG 6560: Fix lookupname.
+ BUG 6564: SetPrinter fails (panics) as non root.
+ BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation.
+ BUG 6585: Fix unqualified "net join".
+ BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo.
+ BUG 6601: Avoid global fd limits.
+ BUG 6607: Fix crash bug in spoolss_addprinterex_level_2.
+ BUG 6611: Fix a valgrind error in chain_reply.
+ BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient.
+ BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds.
+ BUG 6650: Fix authentication on member servers without Winbind.
+ BUG 6651: Fix smbd SIGSEGV when breaking oplocks.
+ BUG 6655: Fix 'smbcontrol smbd ping'.
+ BUG 6620: Fix a bug in renames of directories.
+ BUG 6664: Fix truncation of the session key.
+ BUG 6673: Fix 'smbpasswd' with "unix password sync = yes".
+ BUG 6680: Fix authentication failure from Windows 7 when domain joined.
+ BUG 6688: Fix crash in 'net usershare list'.
+ BUG 6693: Check we read off the complete event from inotify.
+ BUG 6700: Use dns domain name when needing to guess server principal.
* Thu Aug 13 2009 boyang@suse.de
- Update to 3.2.14.
+ Fix SAMR access checks (e.g. bugs #6089 and #6112).
+ Fix 'force user' (bug #6291).
+ Improve Win7 support (bug #6099).
+ Fix posix ACLs when setting an ACL without explicit ACE for the
owner (bug #2346).
+ BUG 6387: Fix Winbind crash when multiple IDmappings exist in the
LDAP directory.
+ BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache().
+ BUG 6089: Fix SAMR access checks.
+ BUG 6112: Fix SAMR access checks.
+ BUG 6279: Fix Winbind crash.
+ BUG 6291: Fix 'force user'.
+ BUG 6099: Try to fix domain join of Win7 Beta.
+ BUG 6386: Groupdb mapping fix.
+ BUG 6421: Fix POSIX read-only open on read-only shares.
+ BUG 6476: Fix more smbd-zombies in memory.
+ BUG 6488: acl_group_override() call in posix acls references an
uninitialized variable.
+ BUG 6504: Fix SAMR server for Winbind access.
+ BUG 6520: Fix time stamps.
+ BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit.
+ BUG 6340: Don't segfault when cleartext trustdom pwd could not be
retrieved.
+ BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
+ BUG 6465: Fix enum_aliasmem in ldb branch.
+ BUG 6484: Fix searching for users while adding them to groups via
Windows usermanager.
+ BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the
owner.
+ BUG 6526: Let parent_dirname() correctly return toplevel filenames.
+ BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds.
+ BUG 5798: Preserve CFLAGS info in configure.
+ BUG 6382: Case insensitive access to DFS links broken.
+ BUG 6481: Don't require "Modify property" perms to unjoin.
+ BUG 6628: 'smbpasswd -a' uses algorithmic rid base with
'passdb backend = tdbsam'.
+ BUG 6560: Lookupname failed, cannot find domain when attempt to change
password.
+ Prevent creation of keys containing the '/' character.
+ Fix join of Windows 7 RC to a Samba3 DC.
+ Fix bug in processing of open modes in POSIX open.
+ Fix the negotiate flags.
+ Protect netlogon_creds_server_step() against NULL creds.
+ Also handle DirX return codes.
+ Fix a crash bug if we timeout in net rpc trustdom list.
+ Add '--request-timeout' option to 'net'.
+ Fix a race condition in Winbind leading to a panic.
+ Add workaround for MS KB932762.
+ 5945: Fix out of memory error with Winbind idmap.
+ Avoid duplicate ACEs.
+ Fix profile ACLs in some corner cases.
+ Zero an uninitialized array.
* Wed Aug 12 2009 boyang@suse.de
- Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271);
(bso#6615).
* Mon Aug 10 2009 boyang@suse.de
- check in .po files for pam_winbind; (bnc#499233); (bso#6602).
* Thu Aug 06 2009 hhetter@suse.de
- Add ntp and network-remotefs as Should-Start dependency to the winbind init
script; (bnc#515629).
* Thu Aug 06 2009 lmuelle@suse.de
- Update to 3.0.36.
+ Fix Winbind crash on 'getent group' (bug #5906).
+ Excel save operation corrupts file ACLs (bug #4308).
+ Prevent segmentation fault on joining a very long domain name.
+ BUG 4308: Excel save operation corrupts file ACLs.
+ BUG 4370: Clean-up entries in /etc/mtab after unmount.
+ BUG 4640: Fix guest mounts in mount-cifs.
+ BUG 5906: Fix Winbind crash on 'getent group'.
+ BUG 6066: netinet/ip.h present but cannot be compiled on Solaris.
+ BUG 6099: In order to allow Win7 to connect to a Samba NT style.
+ BUG 6279: Fix Winbind crash.
PDC we set the flags before we know if it's an error or not.
+ BUG 6085: Fix build of vfs_default.
+ BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work
correctly.
+ Fix logic error in try_chown.
+ Correctly use chroot().
+ Fix bug in processing of open modes in POSIX open.
+ Don't install the cifs.upcall binary twice.
+ Fix mount.cifs handling of -V option.
+ Prevent segmentation fault on joining a very long domain name.
+ Don't try and delete a default ACL from a file.
+ Add workaround for MS KB932762.
+ Add fakemount (-f) and nomtab (-n) flags to mount.cifs.
+ Fix a crash during name resolution when log level >= 10
and libc segfaults if printf is passed NULL for a "%s" arg.
* Sat Aug 01 2009 lmuelle@suse.de
- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.
* Mon Jul 27 2009 boyang@suse.de
- lookupname failed, cannot find domain when attempt to change password;
(bnc#520645); (bso#6560).
* Thu Jul 16 2009 lmuelle@suse.de
- Don't link with --as-needed flag on post-11.1 systems.
* Tue Jul 14 2009 lmuelle@suse.de
- Stop the smbfs service if an interface goes down; (bnc#517768).
* Wed Jul 08 2009 lmuelle@suse.de
- Disable build of static libraries on post-11.1 systems; (bnc#509945).
* Wed Jul 08 2009 jmcdonough@suse.de
- Fix missing zlibs for cifs.upcall and test_shlibs.
* Fri Jul 03 2009 lmuelle@suse.de
- Update to 3.4.0.
+ BUG 6431: Local groups from 3.0 setups no longer found.
+ BUG 6459: Fix build of pam_smbpass on some distributions.
+ BUG 6481: 'net ads leave' needs to try account deletion, NetUnjoinDomain
not.
+ BUG 6497: Fix calling of 'test' in configure.
+ BUG 6498: Add workaround for MS KB932762.
+ BUG 6499: Fix building of pam_smbpass.
+ BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache().
+ BUG 6512: Fix support for enumerating user forms.
+ BUG 6514: Improve error message in 'net' when smb.conf is not available.
+ BUG 6520: Fix time stamps when "unix extensions = yes".
+ BUG 6521: Fix building tevent_ntstatus without config.h.
+ BUG 6526: Fix notifies in the share root directory.
+ BUG 6531: Fix pid file name.
* Thu Jul 02 2009 lmuelle@suse.de
- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.
* Tue Jun 30 2009 jmcdonough@suse.de
- Fix net ads leave; (bnc#511695).
* Thu Jun 25 2009 sbrabec@suse.cz
- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).
- Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).
* Wed Jun 24 2009 lmuelle@suse.de
- Update to 3.2.13, 3.3.6.
+ In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with
file names treat user input as a format string to asprintf. With a
maliciously crafted file name smbclient can be made to execute code
triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).
* Wed Jun 24 2009 lmuelle@suse.de
- Update to 3.0.35.
+ In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a
data value can potentially affect access control when "dos filemode"
is set to "yes"; CVE-2009-1888; (bnc#515479).
* Tue Jun 23 2009 jmcdonough@suse.de
- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).
* Fri Jun 19 2009 lmuelle@suse.de
- Update to 3.4.0rc1.
+ BUG 4699: Remove pidfile on clean shutdown.
+ BUG 5456: Fix "net ads testjoin".
+ BUG 6081: Make it possible to change machine account sids.
+ BUG 6253: Use correct value for password expiry calculation in
pam_winbind.
+ BUG 6297: Owner of sticky directory cannot delete files created by others.
+ BUG 6305: Correctly prompt for a password when a username was given.
+ BUG 6328: Add support for multiple rights to
"net sam rights grant/revoke".
+ BUG 6333: Consolidate create/delete account paths in pdbedit.
+ BUG 6449: 'net rap user add' crashes without -C option.
+ BUG 6451: net/libnetapi user rename using wrong access bits.
+ BUG 6458: Fix uninitialized variable in local_password_change().
+ BUG 6465: Fix enumeration of empty aliases.
+ BUG 6476: Fix smbd-zombies in memory when using [x]inetd.
+ BUG 6487: Add missing DFS call in trans2 mkdir call.
+ BUG 6488: acl_group_override() call in posix acls references an
uninitialized variable.
+ Improve pam_winbind documentation.
- Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.
* Thu Jun 18 2009 boyang@suse.de
- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user
input as a format string to asprintf; CVE-2009-1886; (bnc#513360).
* Wed Jun 17 2009 boyang@suse.de
- Fix a bad memleak in vfs_full_audit; (bnc#510035).
* Tue Jun 16 2009 lmuelle@suse.de
- Update to 3.3.5.
+ Fix SAMR and LSA checks (bug #6089, #6289)
+ Fix posix acls when setting an ACL without explicit ACE for the
owner (bug #2346).
+ Fix joining of Win7 into Samba domain (bug #6099).
+ Fix joining of Win2000 SP4 clients (bug #6301).
+ BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the
owner.
+ BUG 5832: Fix build on RHEL when ccache is not available.
+ BUG 5853: Add keyutils-devel to build requires to fix build on RHEL.
+ BUG 5897: Fix shutdown script example in the smb.conf manpage.
+ BUG 6089: Revert the extra SAMR and LSA checks.
+ BUG 6099: Fix joining of Win7 into Samba domain.
+ BUG 6157: Fix handling of multi-value attribute "uid".
+ BUG 6289: Revert the extra SAMR and LSA checks.
+ BUG 6297: Owner of sticky directory cannot delete files created by others.
+ BUG 6301: Fix joining of Win2000 SP4 clients.
+ BUG 6309: Support remote unjoining of Windows 2003 or greater.
+ BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event.
+ BUG 6320: Handle registry config source in file_list.
+ BUG 6330: Fix DFS on AIX.
+ BUG 6336: Fix 'net groupmap set' segfault.
+ BUG 6361: Make --rcfile work in smbget.
+ BUG 6365: Re-Add the "dropbox" functionality with -wx rights on a
directory.
+ BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
+ BUG 6382: Fix case insensitive access to DFS links.
+ BUG 6415: Filter out of range mappings in default idmap config in
idmap_tdb.
+ BUG 6416: Filter out of range mappings in default idmap config in
idmap_tdb2.
+ BUG 6417: Filter out of range mappings in default idmap config in
idmap_ldap.
+ BUG 6441: Fix the compile with --enable-dnssd.
+ BUG 6449: 'net rap user add' crashes without -C option.
+ BUG 6465: Fix enumeration of empty aliases (ldb backend).
+ Prevent infinite include nesting.
+ Mark registry shares without path unavailable.
+ Also handle DirX return codes.
+ Fix Coverity ID 897.
+ Do not crash in ctdbd_traverse if ctdbd is not around.
+ Fix a race condition in winbind leading to a panic.
+ Some man pam_winbind improvements.
+ Zero an uninitialized array.
* Tue Jun 16 2009 lmuelle@suse.de
- Update to 3.2.12.
+ Fix SAMR and LSA checks (bug #6089, #6289)
+ Fix posix acls when setting an ACL without explicit ACE for the
owner (bug #2346).
+ Fix "force user" (bug #6291).
+ Fix Winbind crash (bug #6279).
+ Fix joining of Win7 into Samba domain (bug #6099).
+ BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the
owner.
+ BUG 5798: CFLAGS info lost in configure.
+ BUG 5832: Fix build on RHEL when ccache is not available.
+ BUG 5835: Add keyutils-devel to build requires.
+ BUG 5945: Fix out of memory error with Winbind idmap.
+ BUG 6089: Revert the extra SAMR and LSA checks.
+ BUG 6099: Fix joining of Win7 into Samba domain.
+ BUG 6279: Fix Winbind crash.
+ BUG 6289: Revert the extra SAMR and LSA checks.
+ BUG 6291: Fix "force user".
+ BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit.
+ BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
+ BUG 6386: Groupdb mapping fix.
+ BUG 6382: Fix case insensitive access to DFS links.
+ BUG 6465: Fix enumeration of empty aliases (ldb backend).
+ Prevent creation of keys containing the '/' character.
+ Fix bug in processing of open modes in POSIX open.
+ Protect netlogon_creds_server_step() against NULL creds.
+ Also handle DirX return codes.
+ Fix a race condition in winbind leading to a panic.
+ Fix a crash bug if we timeout in net rpc trustdom list.
+ Fix profile acls in some corner cases.
* Fri Jun 12 2009 lmuelle@suse.de
- Default with passdb backend to smbpasswd for SUSE products older than 11.2.
* Fri Jun 12 2009 lmuelle@suse.de
- Explicitly use 'tdbsam' as passdb backend in the default smb.conf file.
* Mon Jun 08 2009 lmuelle@suse.de
- Update to 3.4.0pre2.
+ The default passdb backend has been changed to 'tdbsam'!
+ Samba4 and Samba3 sources are included in the tarball.
+ Changed the way smbd handles untrusted domain names given during user
authentication.
+ Various fixes including printer change notificiation for Samba spoolss
print servers.
+ The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog
and spoolss) were replaced by autogenerated code based on PIDL.
+ Samba3 and Samba4 do now share a common tevent library.
+ The code has been cleaned up and the major basic interfaces are shared
with Samba4 now.
+ An asynchronous API has been added.
+ Made parameter syntax of the net command more consistent.
+ BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the
owner.
+ BUG 4271: testparm should not print includes.
+ BUG 4831: Don't call openlog() or closelog() from pam_smbpass.
+ BUG 5681: Do not limit the number of network interfaces.
+ BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo
access checks.
+ BUG 6099: Fix NETLOGON credential chain.
+ BUG 6136: New AFS syscall conventions.
+ BUG 6157: Fix handling of multi-value attribute "uid".
+ BUG 6253: Use correct value for password expiry calculation.
+ BUG 6291: Fix 'force user'.
+ BUG 6292: Update config.guess from gnu.org.
+ BUG 6302: Give the VFS a chance to read from 0-byte files.
+ BUG 6309: Support remote unjoining of Windows 2003 or greater.
+ BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on
malloced memory.
+ BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event.
+ BUG 6320: Handle registry config source in file_list.
+ BUG 6330: Fix DFS on AIX.
+ BUG 6336: Fix segfault in 'net groupmap set'.
+ BUG 6340: Don't segfault when cleartext trustdom pwd could not be
retrieved.
+ BUG 6357: Use Samba default command line arguments in 'net'.
+ BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4
and IPv6 addresses
+ BUG 6361: Make --rcfile work in smbget.
+ BUG 6371: Unsuccessful 'net conf setparm' leaves empty share.
+ BUG 6372: usermanager only displaying 1024 groups and aliases.
+ BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids.
+ BUG 6415: Filter out of range mappings in default idmap config
(idmap_tdb).
+ BUG 6416: Filter out of range mappings in default idmap config
(idmap_tdb2).
+ BUG 6417: Filter out of range mappings in default idmap config
(idmap_ldap).
+ Change the way smbd handles untrusted domain names given during user
authentication.
+ Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and
spoolss by autogenerated code based on PIDL.
+ Fix several printing issues and improve support for printer change
notificiations.
+ Add 'net eventlog'.
+ Add asynchronous API.
+ Make Samba3 and Samba4 share a tevent library.
+ Add two new parameters to control how we verify kerberos tickets.
+ Add 'net rpc service' subcommands 'create' and 'delete'.
+ Fix the core of the SAMR access functions.
+ Fix SAMR server for winbindd access.
+ Add dbwrap_tool - a tdb tool that is CTDB-aware.
+ Hide "config backend" from swat.
+ Fix linking with --disable-shared-libs.
+ Fix issue with missing entries when enumerating directories.
+ Map NULL domains to our global sam name.
+ Fix driver upload for Xerox 4110 PS printer driver.
+ Add "net dom renamecomputer" to rename machines in a domain.
+ Inspect the correct computername string before enabling/disabling the
change button in netdomjoin-gui.
+ Fix join prompt dialog test in netdomjoin-gui.
+ Only gray out labels when not root and not connecting to remote
machines (netdomjoin-gui).
+ Allow to switch between workgroups/domains with the same name
(netdomjoin-gui).
+ Add NetShutdownInit and NetShutdownAbort.
+ Fix samr access checks.
+ Add a security model to LSA.
+ Also handle DirX return codes.
+ Do not crash in ctdbd_traverse if ctdbd is not around.
+ Fix Coverity ID 897.
+ Fix a race condition in vfs_aio_fork with gpfs share modes.
+ Fix bug disclosed by lock8 torture test.
+ Fix a race condition in winbind leading to a panic.
+ Detect tight loop in tdb_find().
+ Fix chained sesssetupAndX/tconn messages.
+ Fix strict locking with chained reads.
+ Fix two bugs in sendfile.
+ Fix memory leak.
+ Fix file descriptor leak.
+ Fallback to the legacy sid_to_(uid|gid) instead of returning NULL.
+ Always allocate memory in dptr_ReadDirName.
+ Fix 'net' crash during domain join.
+ Zero an uninitialized array.
+ Allow child processes to exit gracefully if we are out of fds.
* Thu Jun 04 2009 sjayaraman@suse.de
- Enable cifs.upcall on versions newer than SUSE 10.0.
* Thu Jun 04 2009 sjayaraman@suse.de
- Add BuildRequires to keyutils-devel.
* Thu Jun 04 2009 sjayaraman@suse.de
- Remove redundant Requires to keyutils-libs for cifs-mount.
* Wed May 27 2009 jmcdonough@suse.de
- Detect tight loop in tdb_find(); (bnc#450974).
* Mon May 18 2009 jmcdonough@suse.de
- Fix lp printing with kerberos; (bnc#476913).
* Sat May 09 2009 lmuelle@suse.de
- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all
other build targets.
* Thu Apr 30 2009 lmuelle@suse.de
- Update to 3.4.0pre1.
+ Samba4 and Samba3 sources are included in the tarball
+ Changed the way smbd handles untrusted domain names given during user
authentication.
+ Various fixes including printer change notificiation for Samba spoolss
print servers.
+ The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog
and spoolss) were replaced by autogenerated code based on PIDL.
+ Samba3 and Samba4 do now share a common tevent library.
+ The code has been cleaned up and the major basic interfaces are shared
with Samba4 now.
+ An asynchronous API has been added.
+ Change the way smbd handles untrusted domain names given during user
authentication.
+ Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and
spoolss by autogenerated code based on PIDL.
+ Fix several printing issues and improve support for printer change
notificiations.
+ Add 'net eventlog'.
+ Add asynchronous API.
+ Make Samba3 and Samba4 share a tevent library.
+ Add two new parameters to control how we verify kerberos tickets.
+ Add 'net rpc service' subcommands 'create' and 'delete'.
+ Make merged build possible.
+ Move common libraries to the shared lib/ directory.
* Thu Apr 30 2009 lmuelle@suse.de
- Update to 3.3.4.
+ Fix domain logins for WinXP clients pre SP3 (bug #6263).
+ Fix samr_OpenDomain access checks (bug #6089).
+ Fix usrmgr.exe creating a user (bug #6243).
+ BUG 6089: Fix samr_OpenDomain access checks.
+ BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with
"msdfs root" set to "yes".
+ BUG 6279: Fix Winbind crash.
+ BUG 5329: Add "net rpc service delete/create".
+ BUG 6238: Make sure wbcLogoffUserParams are properly initialized before
freed.
+ BUG 6263: Fix domain logins for WinXP clients pre SP3.
+ BUG 6286: Call init function for builtin idmap modules before probing for
them as shared modules.
+ BUG 6243: Fix usrmgr.exe creating a user.
+ net conf: Save share name as given, not as lower case only.
+ Prevent creation of registry keys containing the '/' character.
+ Allow pdbedit to change a user rid/sid.
+ When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid.
+ Don't access a freed structure when logging off and re-using a vuid.
+ Try to to fix password_expired flag handling.
+ Make sure to grey out change fields in the netdomjoin-gui when not
running as root.
+ Don't look up local user for remote changes, even when root.
+ Use procid_str in debug messages for better cluster-debuggability.
+ Use cluster-aware procid_is_me instead of comparing pids.
+ Fix smbd crash for close_on_completion.
+ Fix a memleak in an unlikely error path in change_notify_create().
+ Do not use the file system GET_REAL_FILENAME for mangled names.
+ Fix a crash bug if we timeout in net rpc trustdom list.
+ Add '--request-timeout' option to net.
+ In net_conf_import, start a transaction when importing a single share.
+ Fix writing of roaming profiles with "profile acls" set to "yes".
* Fri Apr 17 2009 lmuelle@suse.de
- Update to 3.2.11.
+ Fix domain logins for WinXP clients pre SP3 (bug #6263).
+ Fix samr_OpenDomain access checks (bug #6089).
+ Fix smbd crash for close_on_completion.
+ BUG 6089: Fix samr_OpenDomain access checks.
+ BUG 6205: Correct sample smb.conf share configuration.
+ BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with
"msdfs root" set to "yes".
+ BUG 6263: Fix domain logins for WinXP clients pre SP3.
+ Allow pdbedit to change a user rid/sid.
+ When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid.
+ Fix resume command typo for "printing = vlp".
+ Fix smbd crash for close_on_completion.
+ Fix a memleak in an unlikely error path in change_notify_create().
+ Don't look up local user for remote changes, even when root.
* Fri Apr 17 2009 jmcdonough@suse.de
- Don't lookup local user for remote password changes; (bnc#493507).
* Thu Apr 02 2009 lmuelle@suse.de
- Update to 3.3.3.
+ Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb
correctly (bug #6195).
+ Fix serving of files with colons to CIFS/VFS client (bug #6196).
+ Fix "map readonly" (bug #6186).
+ BUG 6195: Don't let smbd child processes panic.
+ Add backend_requires_messaging() method to libsmbconf.
+ Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf.
+ Fall back to file backend when no valid backend was found.
+ Fix a memleak in dbwrap_rbt.
+ Provide transaction_start|commit|cancel fns for the registry tdb.
+ Speed up "net conf drop".
+ Speed up "net conf import".
+ Add transactions to the libsmbconf API.
+ Reduce memory usage of "net conf import".
+ Registry cleanup.
+ Fix handling of SAMBA_VERSION_VENDOR_PATCH.
+ Fix build of pam_winbind.so with static linking.
+ Tidy up some convert_string_internal error cases.
+ BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to
run elections.
+ Allow DFS client paths to work when POSIX pathnames have been selected.
+ Try and fix the build farm RAW-STREAMS errors.
+ Ensure files starting with multiple dots are hidden.
+ BUG 6102: NetQueryDisplayInformation could return wrong information.
+ BUG 6193: Avoid messing with sync_context in libnet_samsync_delta().
+ Fix notify_printer_status_byname.
+ Fix Coverity IDs 722, 762, 774, 775, 776.
+ Fix build on old Heimdal based systems.
+ Fix compile warning.
+ Use parentheses in if condition to make negation clear.
+ Add dirsort module.
+ BUG 6147: Fix detection of the GNU ld version.
+ BUG 6097: Fix smbd segfault.
+ BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped
members.
+ BUG 6139: Add missing whitespace in mount.cifs error message.
+ Fix a malloc/talloc mismatch when cli_initialise() fails.
+ Fix a valgrind error.
+ Speed up "net conf list".
+ Add sorted subkey cache.
+ Use StrCaseCmp in the dirsort module.
+ Document the dirsort module.
+ Disable dns_sd by default.
+ Add avahi detection to configure.
+ Add event avahi binding.
+ Use avahi to register _smb._tcp in smbd.
+ Fix two memleaks in the encryption code.
+ Fix a scary "fill_share_mode_lock failed" message.
+ BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set
errno.
+ Don't use reserved words in smbconftort.
+ Fix smb signing for fragmented trans/trans2/nttrans requests.
+ Parse_packet can return NULL which is then dereferenced in
match_mailslot_name.
+ Format the header check for netinet/ip.h more nicely.
+ Missing break in conversion function prevents tdb password database
update.
* Wed Apr 01 2009 jmcdonough@suse.de
- Update to 3.2.10.
+ BUG #6195: Don't let smbd child processes panic.
* Wed Apr 01 2009 jmcdonough@suse.de
- BUG 6195: Fix crash on passdb conversion.
* Tue Mar 31 2009 jmcdonough@suse.de
- Update to 3.2.9.
+ BUG 5920: The length of the memcpy was calculated wrong.
+ BUG 6097: Fix smbd segfault.
+ BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS
server is invalid.
+ BUG 6099: Samba returns incurrate capabilities list.
+ BUG 6100: Implement _netr_LogonGetCapabilities() with
NT_STATUS_NOT_IMPLEMENTED.
+ BUG 6102: NetQueryDisplayInformation could return wrong information.
+ BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped
members.
+ BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem.
+ BUG 6161: smbclient corrupts source path in tar mode.
+ BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif().
+ BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client.
+ BUG 6224: nmbd waits 5 minutes before checking to run elections.
+ BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno.
+ Numerous Coverity fixes
+ Fix double free caused by incorrect talloc_steal usage.
+ Backport delete semantics of alternate data streams on a file truncate.
+ Allow set attributes on a stream fnum to redirect to the base filename.
+ Fix use of streams modules with CIFSFS client.
+ Fix more POSIX path lstat calls.
+ Allow DFS client paths to work with POSIX pathnames.
+ Ensure files starting with multiple dots are hidden.
+ Fix guest auth when Winbind is running.
+ Fix memleak in get_remote_printer_publishing_data().
+ cifs mount fix for handling -V parameter.
+ Fix guest mounts.
+ Clean-up entries in /etc/mtab after unmount.
+ Add fakemount (-f) and nomtab (-n) flags to mount.cifs.
+ Enable total anonymization in vfs_smb_traffic_analyzer.
+ Don't try and delete a default ACL from a file.
+ Fix remotely adding a share via MMC.
+ Fix resume handle for _samr_EnumDomainGroups.
+ Fix a buffer handling bug when adding lots of registry keys.
+ Fix a O(n^2) algorithm in regdb_fetch_keys().
+ Fix a valgrind error / segfault in dns_register_smbd().
+ Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog.
+ Fix a malloc/talloc mismatch when cli_initialise() fails.
+ Fix two memleaks in the encryption code.
+ Fix "fill_share_mode_lock failed" message.
+ Add S-1-22-X-Y sids to the local token.
+ Fix smb signing for fragmented trans/trans2/nttrans requests.
+ Don't miss an absolute pathname as a kerberos keytab path.
+ Have nmbd check all available interfaces for WINS before failing.
+ Initialize the id_map status in idmap_ldap to avoid surprise.
* Sun Mar 15 2009 lmuelle@suse.de
- Obsolete change from 2008-03-05 by removing the needless examples cleanup.
* Sat Mar 14 2009 lmuelle@suse.de
- Update to 3.3.2.
+ Fix "force group" (bug #6155).
+ Fix saving of files on Samba share using MS Office 2007 (bug #6160).
+ Fix guest authentication in setups with "security = share" and "guest ok =
yes" when Winbind is running.
+ Fix corruptions of source path in tar mode of smbclient (bug #6161).
+ BUG 6082: Fix renaming and deleting of directories using Windows clients.
+ BUG 6154: Make ZFS honor admin users.
+ BUG 6155: Fix "force group".
+ BUG 6160: Fix saving of files on Samba share using MS Office 2007.
+ BUG 6161: Fix corruptions of source path in tar mode of smbclient.
+ Fix some NetBSD warnings.
+ Fix bug in processing of open modes in POSIX open.
+ Fix use of streams modules with CIFSFS client.
+ Ensure ACL modules work with POSIX paths.
+ Use fsp->posix_open in preference if we have it.
+ Fix more POSIX path lstat calls.
+ Fix a bug in message handling for the change notify code.
+ Fix guest authentication in setups with "security = share" and "guest ok =
yes" when Winbind is running.
+ BUG 4640: Fix guest mounts in mount.cifs.
+ Fix displaying the version string properly when no other parameters passed
in in mount.cifs.
+ Prefer gssapi header files from subdirectory.
+ BUG 6176: winbindd -n should disable the winbind idmap cache.
+ Add a vfs_preopen module to hide fs latencies.
+ Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog.
+ Fix a valgrind error / segfault in dns_register_smbd().
+ Fix build on SLES8.
+ Decremented by 1 for ntcancel requests.
+ Fix creation of core files.
+ Fix first mapping of uids/gids in Winbind.
+ Initialize the id_map status in idmap_ldap to avoid surprise.
+ Fix initialization of idmap status.
* Tue Mar 10 2009 lmuelle@suse.de
- Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc.
* Thu Mar 05 2009 ro@suse.de
- Ignore return value from subshell to fix build.
/usr/sbin/ldapsmb /usr/share/man/man5/ldapsmb.5.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Mon May 20 12:16:00 2013