autobuild[sn-devel-104]: intermittent test failure detected
The autobuild test system (on sn-devel-104) has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-08-0732/flakey.log The samba build logs are available here: http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-08-0732/samba.stderr http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-08-0732/samba.stdout The top commit at the time of the failure was: commit d1c30aba04dd25fd9abc04005c9aff300ca79c4a Author: Volker Lendecke Date: Tue Sep 6 11:46:39 2016 +0200 lib: call_backtrace() is no more Signed-off-by: Volker Lendecke Reviewed-by: Martin Schwenke Autobuild-User(master): Jeremy Allison Autobuild-Date(master): Thu Sep 8 03:51:34 CEST 2016 on sn-devel-144
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via d1c30ab lib: call_backtrace() is no more via d978e05 librpc: add clusapi_ResourceControlCode to IDL. via f9788a8 s4-torture: also test CLUSCTL_CLUSTER_CHECK_VOTER_DOWN. via 4075d1c s4-torture: add test for CreateGroupEnum. via 8142b38 librpc: add ClusterResTypeEnumType to IDL. via 8ce0aae s4-torture: add test for CreateResTypeEnum(). via 31d0ef9 s4-torture: test CLUSCTL_GROUP_GET_FLAGS GroupControl. via de11f1b librpc: add CLUS_RESOURCE_CLASS_INFO to IDL via 058032c s4-torture: add test for clusapi_CreateGroupResourceEnum via 6fe2a2b librpc: add ClusterGroupEnumType enum to IDL. via 6ee7617 s4-torture: add new tests for clusapi resourcetypes. via 71d3abb s4-torture: Fix logic errors in node and group control clusapi tests. via 04d5a22 librpc: add clusapi_ResourceTypeControlCode enum. via be9a44a s4-torture: test multiple different cluster control codes. from 82778a6 pidl: fix field2name wireshark dissector test. https://git.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit d1c30aba04dd25fd9abc04005c9aff300ca79c4a Author: Volker Lendecke Date: Tue Sep 6 11:46:39 2016 +0200 lib: call_backtrace() is no more Signed-off-by: Volker Lendecke Reviewed-by: Martin Schwenke Autobuild-User(master): Jeremy Allison Autobuild-Date(master): Thu Sep 8 03:51:34 CEST 2016 on sn-devel-144 commit d978e058a5131c98a32dda2992b406042990eaa0 Author: Günther Deschner Date: Wed May 11 14:18:02 2016 +0200 librpc: add clusapi_ResourceControlCode to IDL. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Jeremy Allison commit f9788a84247f5709a1df65cc2cd7ab83d658a693 Author: Günther Deschner Date: Sat May 7 01:24:28 2016 +0200 s4-torture: also test CLUSCTL_CLUSTER_CHECK_VOTER_DOWN. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Jeremy Allison commit 4075d1c2640c7d20aa7b862a637ba05eaaf07701 Author: Günther Deschner Date: Wed May 4 01:34:20 2016 +0200 s4-torture: add test for CreateGroupEnum. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Jeremy Allison commit 8142b38c02a73e2f873d5172394dbe93c0783a52 Author: Günther Deschner Date: Wed May 4 00:40:10 2016 +0200 librpc: add ClusterResTypeEnumType to IDL. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Jeremy Allison commit 8ce0aaef505ddfc3df87ce159c38773becfa42e1 Author: Günther Deschner Date: Wed May 4 00:39:48 2016 +0200 s4-torture: add test for CreateResTypeEnum(). Guenther Signed-off-by: Guenther Deschner Reviewed-by: Jeremy Allison commit 31d0ef96f8e91d74015eed09d4ae9b8d3312a01c Author: Günther Deschner Date: Tue May 3 17:38:29 2016 +0200 s4-torture: test CLUSCTL_GROUP_GET_FLAGS GroupControl. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Jeremy Allison commit de11f1b32b0ed75a3227ef3a10d744224dec06dd Author: Günther Deschner Date: Tue May 3 17:18:40 2016 +0200 librpc: add CLUS_RESOURCE_CLASS_INFO to IDL Guenther Signed-off-by: Guenther Deschner Reviewed-by: Jeremy Allison commit 058032c58b5c0d76bb2d491c862f123d76afd5c9 Author: Günther Deschner Date: Tue May 3 12:59:24 2016 +0200 s4-torture: add test for clusapi_CreateGroupResourceEnum Guenther Signed-off-by: Guenther Deschner Reviewed-by: Jeremy Allison commit 6fe2a2bb9d6786e4977aad2b0ae75c48f05f3ea5 Author: Günther Deschner Date: Tue May 3 12:58:07 2016 +0200 librpc: add ClusterGroupEnumType enum to IDL. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Jeremy Allison commit 6ee7617207a1fef04245be86ba14ebcb65982181 Author: Günther Deschner Date: Tue May 3 11:19:38 2016 +0200 s4-torture: add new tests for clusapi resourcetypes. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Jeremy Allison commit 71d3abbdc45ba5b5a1bcafa98949a89968dbb0fc Author: Günther Deschner Date: Mon May 2 17:53:38 2016 +0200 s4-torture: Fix logic errors in node and group control clusapi tests. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Jeremy Allison commit 04d5a228c0fa6433909763b0c6cd70607f056d17 Author: Günther Deschner Date: Mon May 2 17:07:04 2016 +0200 librpc: add clusapi_ResourceTypeControlCode enum. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Jeremy Allison commit be9a44a0f0e7f7195e9cb8805cbff207e9ec405c Author: Günther Deschner Date: Mon May 2 14:53:13 2016 +0200 s4-torture: test multiple different cluster control codes. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Jeremy Allison -
autobuild[sn-devel-104]: intermittent test failure detected
The autobuild test system (on sn-devel-104) has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-08-0336/flakey.log The samba build logs are available here: http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-08-0336/samba.stderr http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-08-0336/samba.stdout The top commit at the time of the failure was: commit 82778a6d04580fc05f3f83d44f57f221ad4e8ac4 Author: Günther Deschner Date: Tue Sep 6 22:37:12 2016 +0200 pidl: fix field2name wireshark dissector test. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Stefan Metzmacher Autobuild-User(master): Günther Deschner Autobuild-Date(master): Wed Sep 7 16:05:26 CEST 2016 on sn-devel-144
autobuild[sn-devel-104]: intermittent test failure detected
The autobuild test system (on sn-devel-104) has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-07-2334/flakey.log The samba build logs are available here: http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-07-2334/samba.stderr http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-07-2334/samba.stdout The top commit at the time of the failure was: commit 82778a6d04580fc05f3f83d44f57f221ad4e8ac4 Author: Günther Deschner Date: Tue Sep 6 22:37:12 2016 +0200 pidl: fix field2name wireshark dissector test. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Stefan Metzmacher Autobuild-User(master): Günther Deschner Autobuild-Date(master): Wed Sep 7 16:05:26 CEST 2016 on sn-devel-144
autobuild[sn-devel-104]: intermittent test failure detected
The autobuild test system (on sn-devel-104) has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-07-1934/flakey.log The samba build logs are available here: http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-07-1934/samba.stderr http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-07-1934/samba.stdout The top commit at the time of the failure was: commit 839cd98f48cbfc84d70a73828a6bf14b1c2999c8 Author: Günther Deschner Date: Mon Jul 25 16:37:19 2016 +0200 s4-torture: cleanup torture_suite_add_ndr_pull_validate_test API. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Uri Simchoni Autobuild-User(master): Uri Simchoni Autobuild-Date(master): Wed Sep 7 09:28:13 CEST 2016 on sn-devel-144
[SCM] Samba Shared Repository - branch v4-5-stable updated
The branch, v4-5-stable has been updated via 916fab0 VERSION: Set version to 4.5.0... via dc2c876 WHATSNEW: Add release notes for Samba 4.5.0. via d58fb55 s3-spoolss: fix _spoolss_GetPrinterDataEx by moving the keyname lengthcheck. via 3989032 s4-torture: test GetPrinterData with server handle and 0 keylength. via 2419d59 idmap_script: add missing "IDTOSID" argument to the script command line. via 3987f0e vfs_acl_xattr|tdb: enforced settings when ignore system acls=yes via 1f1d54c docs: document vfs_acl_xattr|tdb enforced settings via 0069137 vfs_acl_common: use DBG_LEVEL and remove function prefixes in DEBUG statements via 2aa1aea s4/torture: tests for vfs_acl_xattr default ACL styles via 54e6a40 vfs_acl_common: Windows style default ACL via 497e828 vfs_acl_xattr|tdb: add option to control default ACL style via 7c657fc vfs_acl_common: check for ignore_system_acls before fetching filesystem ACL via 694c5d0 vfs_acl_common: move stat stuff to a helper function via eabd4f8 vfs_acl_tdb|xattr: use a config handle via a48d106 vfs_acl_common: move the ACL blob validation to a helper function via 8a8c2ce vfs_acl_common: simplify ACL logic, cleanup and talloc hierarchy via a2fb0fb vfs_acl_common: remove redundant NULL assignment via abbc4be vfs_acl_common: rename pdesc_next to psd_fs via 32f3f7b vfs_acl_common: rename psd to psd_blob in get_nt_acl_internal() via 8a02f97 Revert "vfs_acl_xattr: objects without NT ACL xattr" via 64e1f55 s3/rpc_server: shared rpc modules directory may not exist via 1349c67 gensec/spnego: work around missing server mechListMIC in SMB servers via 73e24ec Merge tag 'samba-4.5.0rc3' into v4-5-test via 51a6036 ctdb-tests: Add a test to ensure that CTDB works with no eventscripts via af2386b ctdb-tests: Conditionally use temporary config file for local daemons via 7e0846a ctdb-tests: Factor out function config_from_environment() via 8b2e01a ctdb-daemon: Don't steal control structure before synchronous reply via d9f5a6a ctdb-daemon: Handle failure immediately, do housekeeping later via 41ca635 ctdb-daemon: Schedule running of callback if there are no event scripts via 0ccfa21 dbcheck: Abandon dbcheck if we get an error during a transaction via b005b5b dsdb: Allow missing a mandatory attribute from a dbcheck fix via 181d050 script/release.sh: use 8 byte gpg key ids via 91901e0 WHATSNEW: Start release notes for Samba 4.5.0rc4. via ff8d3d6 VERSION: Bump version up to 4.5.0rc4... via 6c94b10 VERSION: Disable git snapshots for the 4.5.0rc3 release. via 81dff4e WHATSNEW: Release notes for Samba 4.5.0rc3. via 46139bb tests/getnc_exop: Ensure that attribute list sorting is correct via ef21629 getncchanges: Compute the partial attribute set from the remote schema via 91f9633 tests/getnc_exop: PartialAttrSetEx test (passes Windows, fails us) via 589b76f tests/getnc_exop: Ensure the remote prefixmap is always used (name attr) via a6c6050 tests/getnc_exop: Ensure the remote prefixmap is always used (secret attrs) via af88b47 tests/getnc_exop: Ensure that all attids are valid in a given PAS via fc27d74 tests/getnc_exop: Ensure we do the fallback if not given a PAS via ec38c59 drepl_out: Send the prefix map alongside the global catalog partial attribute set via 752a32a drepl_out: Send the prefix map alongside the RODC partial attribute set via c664c03 replicated_objects: Add missing newline for debug via c146881 getncchanges: Fix some whitespace via 257d1d6 tests/schemainfo: run dsdb schema info tests with proper URI via e7c0cb3 Removed upgrading-samba4.txt via 8869cf8 Added Wiki link to replPropertyMetaData Changes section from d7258cb VERSION: Disable git snapshots for the 4.5.0rc3 release. https://git.samba.org/?p=samba.git;a=shortlog;h=v4-5-stable - Log - --- Summary of changes: VERSION| 2 +- WHATSNEW.txt | 46 +- auth/gensec/spnego.c | 69 +- ctdb/server/ctdb_takeover.c| 11 +- ctdb/server/eventscript.c | 87 ++- ctdb/tests/simple/28_zero_eventscripts.sh | 45 ++ ctdb/tests/simple/scripts/local_daemons.bash | 33 +- docs-xml/manpages/vfs_acl_tdb.8.xml| 49 ++ docs-xml/manpages/vfs_acl_xattr.8.xml | 49 ++ python/samba/dbchecker.py | 7 + script/release.sh | 12 +- selftes
[SCM] Samba Website Repository - branch master updated
The branch, master has been updated via 3d12b42 NEWS[4.5.0]: Samba 4.5.0 Available for Download from b6efe01 Add "Release Planning" to the releases box https://git.samba.org/?p=samba-web.git;a=shortlog;h=master - Log - commit 3d12b42878ea6dbc8c615fc11bdaf0b273410437 Author: Stefan Metzmacher Date: Wed Sep 7 16:58:49 2016 +0200 NEWS[4.5.0]: Samba 4.5.0 Available for Download Signed-off-by: Stefan Metzmacher --- Summary of changes: history/samba-4.5.0.html| 504 posted_news/20160907-150254.4.5.0.body.html | 12 + posted_news/20160907-150254.4.5.0.headline.html | 3 + 3 files changed, 519 insertions(+) create mode 100644 history/samba-4.5.0.html create mode 100644 posted_news/20160907-150254.4.5.0.body.html create mode 100644 posted_news/20160907-150254.4.5.0.headline.html Changeset truncated at 500 lines: diff --git a/history/samba-4.5.0.html b/history/samba-4.5.0.html new file mode 100644 index 000..78920a1 --- /dev/null +++ b/history/samba-4.5.0.html @@ -0,0 +1,504 @@ +http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> +http://www.w3.org/1999/xhtml";> + +Samba 4.5.0 - Release Notes + + +Samba 4.5.0 Available for Download + +https://download.samba.org/pub/samba/stable/samba-4.5.0.tar.gz";>Samba 4.5.0 (gzipped) +https://download.samba.org/pub/samba/stable/samba-4.5.0.tar.asc";>Signature + + + + = + Release Notes for Samba 4.5.0 + September 7, 2016 + = + + +This is the first stable release of the Samba 4.5 release series. + + +UPGRADING += + +NTLMv1 authentication disabled by default +- + +In order to improve security we have changed +the default value for the "ntlm auth" option from +"yes" to "no". This may have impact on very old +clients which doesn't support NTLMv2 yet. + +The primary user of NTLMv1 is MSCHAPv2 for VPNs and 802.1x. + +By default, Samba will only allow NTLMv2 via NTLMSSP now, +as we have the following default "lanman auth = no", +"ntlm auth = no" and "raw NTLMv2 auth = no". + + +NEW FEATURES/CHANGES + + +Support for LDAP_SERVER_NOTIFICATION_OID + + +The ldap server has support for the LDAP_SERVER_NOTIFICATION_OID +control. This can be used to monitor the Active Directory database +for changes. + +KCC improvements for sparse network replication +--- + +The Samba KCC will now be the default knowledge consistency checker in +Samba AD. Instead of using full mesh replication between every DC, the +KCC will set up connections to optimize replication latency and cost +(using site links to calculate the routes). This change should allow +larger domains to function significantly better in terms of replication +traffic and the time spent performing DRS replication. + +VLV - Virtual List View +--- + +The VLV Control allows applications to page the LDAP directory in the +way you might expect a live phone book application to operate, without +first downloading the entire directory. + +DRS Replication for the AD DC +- + +DRS Replication in Samba 4.5 is now much more efficient in handling +linked attributes, particularly in large domains with over 1000 group +memberships or other links. + +Replication is also much more reliable in the handling of tree +renames, such as the rename of an organizational unit containing many +users. Extensive tests have been added to ensure this code remains +reliable, particularly in the case of conflicts between objects added +with the same name on different servers. + +Schema updates are also handled much more reliably. + +samba-tool drs replicate with new options +- + +'samba-tool drs replicate' got two new options: + +The option '--local-online' will do the DsReplicaSync() via IRPC +to the local dreplsrv service. + +The option '--async-op' will add DRSUAPI_DRS_ASYNC_OP to the +DsReplicaSync(), which won't wait for the replication result. + +replPropertyMetaData Changes + + +During the development of the DRS replication, tests showed that Samba +stores the replPropertyMetaData object incorrectly. To address this, +be aware that 'dbcheck' will now detect and offer to fix all objects in +the domain for this error. + +For further information and instructions how to fix the problem, see +https://wiki.samba.org/index.php/Updating_Samba#Fixing_replPropertyMetaData_Attributes + +Linked a
[SCM] Samba Shared Repository - annotated tag samba-4.5.0 created
The annotated tag, samba-4.5.0 has been created at eccdbb9dbdc595f4b239f29a4c750f894b1df470 (tag) tagging 916fab083a8cb5c10365da7f3a85d0bbfde4a30e (commit) replaces samba-4.5.0rc3 tagged by Stefan Metzmacher on Wed Sep 7 16:56:51 2016 +0200 - Log - samba: tag release samba-4.5.0 -BEGIN PGP SIGNATURE- Version: GnuPG v1 iD8DBQBX0CqzbzORW2Vot+oRAjldAJwLj8FHuHgoQr/DazeQvlFBIqfyKQCfZmZS xt6e2OLqlSywSPFNb7R1xos= =7OS7 -END PGP SIGNATURE- Andrew Bartlett (2): dsdb: Allow missing a mandatory attribute from a dbcheck fix dbcheck: Abandon dbcheck if we get an error during a transaction Björn Baumbach (1): idmap_script: add missing "IDTOSID" argument to the script command line. Bob Campbell (3): getncchanges: Fix some whitespace tests/getnc_exop: Ensure we do the fallback if not given a PAS tests/getnc_exop: Ensure that attribute list sorting is correct Garming Sam (9): tests/schemainfo: run dsdb schema info tests with proper URI replicated_objects: Add missing newline for debug drepl_out: Send the prefix map alongside the RODC partial attribute set drepl_out: Send the prefix map alongside the global catalog partial attribute set tests/getnc_exop: Ensure that all attids are valid in a given PAS tests/getnc_exop: Ensure the remote prefixmap is always used (secret attrs) tests/getnc_exop: Ensure the remote prefixmap is always used (name attr) tests/getnc_exop: PartialAttrSetEx test (passes Windows, fails us) getncchanges: Compute the partial attribute set from the remote schema Günther Deschner (2): s4-torture: test GetPrinterData with server handle and 0 keylength. s3-spoolss: fix _spoolss_GetPrinterDataEx by moving the keyname lengthcheck. Marc Muehlfeld (2): Added Wiki link to replPropertyMetaData Changes section Removed upgrading-samba4.txt Martin Schwenke (6): ctdb-daemon: Schedule running of callback if there are no event scripts ctdb-daemon: Handle failure immediately, do housekeeping later ctdb-daemon: Don't steal control structure before synchronous reply ctdb-tests: Factor out function config_from_environment() ctdb-tests: Conditionally use temporary config file for local daemons ctdb-tests: Add a test to ensure that CTDB works with no eventscripts Ralph Boehme (16): s3/rpc_server: shared rpc modules directory may not exist Revert "vfs_acl_xattr: objects without NT ACL xattr" vfs_acl_common: rename psd to psd_blob in get_nt_acl_internal() vfs_acl_common: rename pdesc_next to psd_fs vfs_acl_common: remove redundant NULL assignment vfs_acl_common: simplify ACL logic, cleanup and talloc hierarchy vfs_acl_common: move the ACL blob validation to a helper function vfs_acl_tdb|xattr: use a config handle vfs_acl_common: move stat stuff to a helper function vfs_acl_common: check for ignore_system_acls before fetching filesystem ACL vfs_acl_xattr|tdb: add option to control default ACL style vfs_acl_common: Windows style default ACL s4/torture: tests for vfs_acl_xattr default ACL styles vfs_acl_common: use DBG_LEVEL and remove function prefixes in DEBUG statements docs: document vfs_acl_xattr|tdb enforced settings vfs_acl_xattr|tdb: enforced settings when ignore system acls=yes Stefan Metzmacher (9): WHATSNEW: Release notes for Samba 4.5.0rc3. VERSION: Disable git snapshots for the 4.5.0rc3 release. VERSION: Bump version up to 4.5.0rc4... WHATSNEW: Start release notes for Samba 4.5.0rc4. script/release.sh: use 8 byte gpg key ids Merge tag 'samba-4.5.0rc3' into v4-5-test gensec/spnego: work around missing server mechListMIC in SMB servers WHATSNEW: Add release notes for Samba 4.5.0. VERSION: Set version to 4.5.0... --- -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v4-5-test updated
The branch, v4-5-test has been updated via d899b1b VERSION: Bump version up to 4.5.1... via 916fab0 VERSION: Set version to 4.5.0... via dc2c876 WHATSNEW: Add release notes for Samba 4.5.0. from d58fb55 s3-spoolss: fix _spoolss_GetPrinterDataEx by moving the keyname lengthcheck. https://git.samba.org/?p=samba.git;a=shortlog;h=v4-5-test - Log - commit d899b1bc8058d3ae51c06bb8977218629d78fdbb Author: Stefan Metzmacher Date: Wed Sep 7 10:55:18 2016 +0200 VERSION: Bump version up to 4.5.1... and re-enable git snapshots. Signed-off-by: Stefan Metzmacher Reviewed-by: Ralph Boehme commit 916fab083a8cb5c10365da7f3a85d0bbfde4a30e Author: Stefan Metzmacher Date: Wed Sep 7 10:54:15 2016 +0200 VERSION: Set version to 4.5.0... and disable git snapshots. Signed-off-by: Stefan Metzmacher Reviewed-by: Ralph Boehme commit dc2c876182eb66128238549d53c53827da8569b2 Author: Stefan Metzmacher Date: Wed Sep 7 10:53:11 2016 +0200 WHATSNEW: Add release notes for Samba 4.5.0. Signed-off-by: Stefan Metzmacher Reviewed-by: Ralph Boehme --- Summary of changes: VERSION | 4 ++-- WHATSNEW.txt | 41 ++--- 2 files changed, 36 insertions(+), 9 deletions(-) Changeset truncated at 500 lines: diff --git a/VERSION b/VERSION index 465e407..a50ea02 100644 --- a/VERSION +++ b/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=4 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=0 +SAMBA_VERSION_RELEASE=1 # If a official release has a serious bug # @@ -87,7 +87,7 @@ SAMBA_VERSION_PRE_RELEASE= # e.g. SAMBA_VERSION_RC_RELEASE=1 # # -> "3.0.0rc1" # -SAMBA_VERSION_RC_RELEASE=4 +SAMBA_VERSION_RC_RELEASE= # To mark SVN snapshots this should be set to 'yes'# diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 87d066b..b198a56 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,12 +1,10 @@ -Release Announcements -= + = + Release Notes for Samba 4.5.0 + September 7, 2016 + = -This is the third release candidate of Samba 4.5. This is *not* -intended for production environments and is designed for testing -purposes only. Please report any defects via the Samba bug reporting -system at https://bugzilla.samba.org/. -Samba 4.5 will be the next version of the Samba suite. +This is the first stable release of the Samba 4.5 release series. UPGRADING @@ -343,12 +341,41 @@ smb.conf changes KNOWN ISSUES +While a lot of schema replication bugs were fixed in this release +Bug 12204 - Samba fails to replicate schema 69 +(https://bugzilla.samba.org/show_bug.cgi?id=12204) is still open. +The replication fails if more than 133 schema objects are added +at the same time. + +More open bugs are listed at: https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.5#All_bugs CHANGES SINCE 4.5.0rc3 == +o Björn Baumbach +* BUG 12194: idmap_script: fix missing "IDTOSID" argument in scripts + command line. + +o Andrew Bartlett +* BUG 12178: samba-tool dbcheck fails to fix replPropertyMetaData. + +o Ralph Boehme +* BUG 12177: Unexpected synthesized default ACL from vfs_acl_xattr. +* BUG 12181: vfs_acl_common not setting filesystem permissions anymore. +* BUG 12184: Loading shared RPC modules failed. + +o Günther Deschner +* BUG 12245: fix _spoolss_GetPrinterDataEx by moving the keyname + length check. + +o Stefan Metzmacher +* BUG 11994: smbclient fails to connect to Azure or Apple share spnego + fails with no mechListMIC. + +o Martin Schwenke +* BUG 12180: CTDB crashes running eventscripts. CHANGES SINCE 4.5.0rc2 -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v4-5-test updated
The branch, v4-5-test has been updated via d58fb55 s3-spoolss: fix _spoolss_GetPrinterDataEx by moving the keyname lengthcheck. via 3989032 s4-torture: test GetPrinterData with server handle and 0 keylength. via 2419d59 idmap_script: add missing "IDTOSID" argument to the script command line. via 3987f0e vfs_acl_xattr|tdb: enforced settings when ignore system acls=yes via 1f1d54c docs: document vfs_acl_xattr|tdb enforced settings via 0069137 vfs_acl_common: use DBG_LEVEL and remove function prefixes in DEBUG statements via 2aa1aea s4/torture: tests for vfs_acl_xattr default ACL styles via 54e6a40 vfs_acl_common: Windows style default ACL via 497e828 vfs_acl_xattr|tdb: add option to control default ACL style via 7c657fc vfs_acl_common: check for ignore_system_acls before fetching filesystem ACL via 694c5d0 vfs_acl_common: move stat stuff to a helper function via eabd4f8 vfs_acl_tdb|xattr: use a config handle via a48d106 vfs_acl_common: move the ACL blob validation to a helper function via 8a8c2ce vfs_acl_common: simplify ACL logic, cleanup and talloc hierarchy via a2fb0fb vfs_acl_common: remove redundant NULL assignment via abbc4be vfs_acl_common: rename pdesc_next to psd_fs via 32f3f7b vfs_acl_common: rename psd to psd_blob in get_nt_acl_internal() via 8a02f97 Revert "vfs_acl_xattr: objects without NT ACL xattr" via 64e1f55 s3/rpc_server: shared rpc modules directory may not exist via 1349c67 gensec/spnego: work around missing server mechListMIC in SMB servers from 73e24ec Merge tag 'samba-4.5.0rc3' into v4-5-test https://git.samba.org/?p=samba.git;a=shortlog;h=v4-5-test - Log - commit d58fb556d9ac778dfe45e109d1d843f6f0254bdb Author: Günther Deschner Date: Thu Sep 1 19:55:40 2016 +0200 s3-spoolss: fix _spoolss_GetPrinterDataEx by moving the keyname lengthcheck. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Andreas Schneider Autobuild-User(master): Günther Deschner Autobuild-Date(master): Wed Sep 7 03:00:14 CEST 2016 on sn-devel-144 BUG: https://bugzilla.samba.org/show_bug.cgi?id=12245 (cherry picked from commit d8b57e3828eac084ad302a90b33c35ff4e918e5a) Autobuild-User(v4-5-test): Karolin Seeger Autobuild-Date(v4-5-test): Wed Sep 7 16:26:48 CEST 2016 on sn-devel-144 commit 398903202574284f810e954341a05e9bd4916c72 Author: Günther Deschner Date: Thu Sep 1 19:54:46 2016 +0200 s4-torture: test GetPrinterData with server handle and 0 keylength. This is what e.g. Windows 10 does a lot. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Andreas Schneider BUG: https://bugzilla.samba.org/show_bug.cgi?id=12245 (cherry picked from commit 518b2a3f5f3a4814e96546505487b775b5dbca40) commit 2419d59be9d76aa96375c5dd0eb55d7b59bbdb31 Author: Björn Baumbach Date: Fri Aug 26 17:16:51 2016 +0200 idmap_script: add missing "IDTOSID" argument to the script command line. According to the documentation the commands should look like "IDTOSID UID " instead of "UID ". This fixes changes of commit b4239ca096738f553b0f9d7fa6aaa4219b72ef7f: idmap_script: Parallelize script calls Bug: https://bugzilla.samba.org/show_bug.cgi?id=12194 Signed-off-by: Björn Baumbach Reviewed-by: Stefan Metzmacher Reviewed-by: Michael Adam Autobuild-User(master): Stefan Metzmacher Autobuild-Date(master): Tue Sep 6 19:32:57 CEST 2016 on sn-devel-144 (cherry picked from commit 4f654acad01dbb1b17e933a855bb53ea6a7bb34d) commit 3987f0e35905d89e7e690566054328b0d3f16bb3 Author: Ralph Boehme Date: Fri Aug 26 10:04:53 2016 +0200 vfs_acl_xattr|tdb: enforced settings when ignore system acls=yes When "ignore system acls" is set to "yes, we need to ensure filesystem permission always grant access so that when doing our own access checks we don't run into situations where we grant access but the filesystem doesn't. Bug: https://bugzilla.samba.org/show_bug.cgi?id=12181 Signed-off-by: Ralph Boehme Reviewed-by: Jeremy Allison Autobuild-User(master): Ralph Böhme Autobuild-Date(master): Wed Aug 31 18:41:20 CEST 2016 on sn-devel-144 (cherry picked from commit b72287514cc78c9019db7385af4c9b9d94f60894) commit 1f1d54c49fc459eba9f49b6b1e588914ff08d815 Author: Ralph Boehme Date: Fri Aug 26 10:22:37 2016 +0200 docs: document vfs_acl_xattr|tdb enforced settings Bug: https://bugzilla.samba.org/show_bug.cgi?id=12181 Signed-off-by: Ralph Boehme Reviewed-by: Jeremy Allison (cherry picked from commit cbe8f0d63b90e4380da35e9f9f5a05d8ccc2058b) commit 006913794f1ca7185574b031fc6f67e026de27b6 Author: Ralph Bo
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 82778a6 pidl: fix field2name wireshark dissector test. via 0ee5c99 pidl: Keep case from fieldnames. via 5bbaf81 s4:torture:smb2 prefer torture_comment() to printf(). via 1659225 s4:torture:smb2:acls: prefer torture_comment() to printf(). via dcfe4df s4:torture:smb2:scan: prefer torture_comment() to printf(). via e9e1099 s4:torture:smb2:getinfo: prefer torture_comment() to printf(). via d06d6bd s4:torture:smb2:maxwrite: compile maxwrite test at least. via 240ca83 s4-torture: reformat TORTURE_SMB2 wscript_build list. via 1488f7e s4:torture:smb2:maxwrite: prefer torture_comment() to printf(). via d3e4106 source4/torture/rpc/testjoin.c: prefer torture_comment() over printf(). via 351a5f3 s4:torture:smb2:connect: prefer torture_comment() to printf(). from 839cd98 s4-torture: cleanup torture_suite_add_ndr_pull_validate_test API. https://git.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 82778a6d04580fc05f3f83d44f57f221ad4e8ac4 Author: Günther Deschner Date: Tue Sep 6 22:37:12 2016 +0200 pidl: fix field2name wireshark dissector test. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Stefan Metzmacher Autobuild-User(master): Günther Deschner Autobuild-Date(master): Wed Sep 7 16:05:26 CEST 2016 on sn-devel-144 commit 0ee5c9997e6c91f5fdffa36b9abf72883f67545d Author: Günther Deschner Date: Wed May 11 15:41:02 2016 +0200 pidl: Keep case from fieldnames. Change-Id: I5626cfa0487cc88eb65cc349c05ae1762bc953f4 Signed-off-by: Guenther Deschner Reviewed-on: https://code.wireshark.org/review/16720 Petri-Dish: Michael Mann Tested-by: Petri Dish Buildbot Reviewed-by: Michael Mann Reviewed-by: Stefan Metzmacher commit 5bbaf816122429004101da4e6401ddd12ea52988 Author: Günther Deschner Date: Mon Feb 22 15:40:50 2016 +0100 s4:torture:smb2 prefer torture_comment() to printf(). Guenther Signed-off-by: Guenther Deschner Reviewed-by: Uri Simchoni commit 16592252cfa7e037edf58736c1f298243d62ea9e Author: Günther Deschner Date: Mon Feb 22 16:27:44 2016 +0100 s4:torture:smb2:acls: prefer torture_comment() to printf(). Guenther Signed-off-by: Guenther Deschner Reviewed-by: Uri Simchoni commit dcfe4df2eef2e6d247da37bc0cf5551e743438e0 Author: Günther Deschner Date: Mon Feb 22 16:06:51 2016 +0100 s4:torture:smb2:scan: prefer torture_comment() to printf(). Guenther Signed-off-by: Guenther Deschner Reviewed-by: Uri Simchoni commit e9e109979c557965ed5071abc6b71c66573ca603 Author: Günther Deschner Date: Mon Feb 22 15:51:06 2016 +0100 s4:torture:smb2:getinfo: prefer torture_comment() to printf(). Guenther Signed-off-by: Guenther Deschner Reviewed-by: Uri Simchoni commit d06d6bdc8ca6fb4ab8dbb7fcc05d357a2228d106 Author: Günther Deschner Date: Fri Feb 26 17:25:58 2016 +0100 s4:torture:smb2:maxwrite: compile maxwrite test at least. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Uri Simchoni commit 240ca83cc9779e212fb17d11ba9a5628ab0a6505 Author: Günther Deschner Date: Fri Feb 26 17:15:32 2016 +0100 s4-torture: reformat TORTURE_SMB2 wscript_build list. Guenther Signed-off-by: Günther Deschner Reviewed-by: Uri Simchoni commit 1488f7e9445d708b1af2c3375ae410cdd85a55c9 Author: Günther Deschner Date: Mon Feb 22 15:46:24 2016 +0100 s4:torture:smb2:maxwrite: prefer torture_comment() to printf(). Guenther Signed-off-by: Guenther Deschner Reviewed-by: Uri Simchoni commit d3e4106420c2108d8f834fda4728a788f28017e9 Author: Günther Deschner Date: Mon Feb 22 17:39:19 2016 +0100 source4/torture/rpc/testjoin.c: prefer torture_comment() over printf(). Guenther Signed-off-by: Guenther Deschner Reviewed-by: Uri Simchoni commit 351a5f38754ccdcf5dab408813c1bd60e0f7c0c4 Author: Günther Deschner Date: Mon Feb 22 15:30:26 2016 +0100 s4:torture:smb2:connect: prefer torture_comment() to printf(). Guenther Signed-off-by: Günther Deschner Reviewed-by: Uri Simchoni --- Summary of changes: pidl/lib/Parse/Pidl/Wireshark/NDR.pm | 2 +- pidl/tests/wireshark-ndr.pl | 2 +- source4/torture/rpc/testjoin.c | 90 +++-- source4/torture/smb2/acls.c | 4 +- source4/torture/smb2/connect.c | 109 ++- source4/torture/smb2/create.c| 2 +- source4/torture/smb2/dir.c | 4 +- source4/torture/smb2/getinfo.c | 38 ++-- source4/torture/smb2/maxwrite.c | 43 -- source4/torture/smb2/
autobuild[sn-devel-104]: intermittent test failure detected
The autobuild test system (on sn-devel-104) has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-07-1534/flakey.log The samba build logs are available here: http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-07-1534/samba.stderr http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-07-1534/samba.stdout The top commit at the time of the failure was: commit 839cd98f48cbfc84d70a73828a6bf14b1c2999c8 Author: Günther Deschner Date: Mon Jul 25 16:37:19 2016 +0200 s4-torture: cleanup torture_suite_add_ndr_pull_validate_test API. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Uri Simchoni Autobuild-User(master): Uri Simchoni Autobuild-Date(master): Wed Sep 7 09:28:13 CEST 2016 on sn-devel-144
autobuild[sn-devel-104]: intermittent test failure detected
The autobuild test system (on sn-devel-104) has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-07-1129/flakey.log The samba build logs are available here: http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-07-1129/samba.stderr http://git.samba.org/autobuild.flakey.sn-devel-104/2016-09-07-1129/samba.stdout The top commit at the time of the failure was: commit d8b57e3828eac084ad302a90b33c35ff4e918e5a Author: Günther Deschner Date: Thu Sep 1 19:55:40 2016 +0200 s3-spoolss: fix _spoolss_GetPrinterDataEx by moving the keyname lengthcheck. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Andreas Schneider Autobuild-User(master): Günther Deschner Autobuild-Date(master): Wed Sep 7 03:00:14 CEST 2016 on sn-devel-144
[SCM] Samba Shared Repository - branch v4-5-test updated
The branch, v4-5-test has been updated via 73e24ec Merge tag 'samba-4.5.0rc3' into v4-5-test via d7258cb VERSION: Disable git snapshots for the 4.5.0rc3 release. via 4422790 WHATSNEW: Release notes for Samba 4.5.0rc3. via 6f9876a tests/getnc_exop: Ensure that attribute list sorting is correct via 6600a47 getncchanges: Compute the partial attribute set from the remote schema via b1858ad tests/getnc_exop: PartialAttrSetEx test (passes Windows, fails us) via 2dde964 tests/getnc_exop: Ensure the remote prefixmap is always used (name attr) via 90581ae tests/getnc_exop: Ensure the remote prefixmap is always used (secret attrs) via eff99ba tests/getnc_exop: Ensure that all attids are valid in a given PAS via 4c25f82 tests/getnc_exop: Ensure we do the fallback if not given a PAS via a57ec81 drepl_out: Send the prefix map alongside the global catalog partial attribute set via 06cd31c drepl_out: Send the prefix map alongside the RODC partial attribute set via d107915 replicated_objects: Add missing newline for debug via 7d24cd2 getncchanges: Fix some whitespace via 92ada9f tests/schemainfo: run dsdb schema info tests with proper URI via 205d5f0 Removed upgrading-samba4.txt via 0f63ac0 Added Wiki link to replPropertyMetaData Changes section from 51a6036 ctdb-tests: Add a test to ensure that CTDB works with no eventscripts https://git.samba.org/?p=samba.git;a=shortlog;h=v4-5-test - Log - commit 73e24ec1e67a53a85866c628b866ec7ad016850f Merge: 51a6036 d7258cb Author: Stefan Metzmacher Date: Wed Sep 7 09:52:04 2016 +0200 Merge tag 'samba-4.5.0rc3' into v4-5-test samba: tag release samba-4.5.0rc3 --- Summary of changes: Changeset truncated at 500 lines: -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 839cd98 s4-torture: cleanup torture_suite_add_ndr_pull_validate_test API. from d8b57e3 s3-spoolss: fix _spoolss_GetPrinterDataEx by moving the keyname lengthcheck. https://git.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 839cd98f48cbfc84d70a73828a6bf14b1c2999c8 Author: Günther Deschner Date: Mon Jul 25 16:37:19 2016 +0200 s4-torture: cleanup torture_suite_add_ndr_pull_validate_test API. Guenther Signed-off-by: Guenther Deschner Reviewed-by: Uri Simchoni Autobuild-User(master): Uri Simchoni Autobuild-Date(master): Wed Sep 7 09:28:13 CEST 2016 on sn-devel-144 --- Summary of changes: source4/torture/ndr/backupkey.c | 3 +-- source4/torture/ndr/clusapi.c | 4 ++-- source4/torture/ndr/drsblobs.c | 18 -- source4/torture/ndr/krb5pac.c | 30 ++ source4/torture/ndr/nbt.c | 8 source4/torture/ndr/ndr.h | 11 ++- source4/torture/ndr/negoex.c| 2 +- source4/torture/ndr/ntlmssp.c | 4 ++-- 8 files changed, 38 insertions(+), 42 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/torture/ndr/backupkey.c b/source4/torture/ndr/backupkey.c index abf34ac..1be9229 100644 --- a/source4/torture/ndr/backupkey.c +++ b/source4/torture/ndr/backupkey.c @@ -156,8 +156,7 @@ struct torture_suite *ndr_backupkey_suite(TALLOC_CTX *ctx) torture_suite_add_ndr_pull_validate_test(suite, bkrp_exported_RSA_key_pair, - data_blob_const(exported_rsa_ndr, - sizeof(exported_rsa_ndr)), + exported_rsa_ndr, NULL); return suite; diff --git a/source4/torture/ndr/clusapi.c b/source4/torture/ndr/clusapi.c index 3fe84db..cf2ac67 100644 --- a/source4/torture/ndr/clusapi.c +++ b/source4/torture/ndr/clusapi.c @@ -371,12 +371,12 @@ struct torture_suite *ndr_clusapi_suite(TALLOC_CTX *ctx) torture_suite_add_ndr_pull_validate_test(suite, clusapi_PROPERTY_LIST, - data_blob_const(clusapi_PROPERTY_LIST_data,sizeof(clusapi_PROPERTY_LIST_data)), + clusapi_PROPERTY_LIST_data, clusapi_PROPERTY_LIST_check); torture_suite_add_ndr_pull_validate_test(suite, clusapi_PROPERTY_LIST, - data_blob_const(clusapi_PROPERTY_LIST_data2,sizeof(clusapi_PROPERTY_LIST_data2)), + clusapi_PROPERTY_LIST_data2, clusapi_PROPERTY_LIST_check2); return suite; diff --git a/source4/torture/ndr/drsblobs.c b/source4/torture/ndr/drsblobs.c index b1a4711..0ef2d95 100644 --- a/source4/torture/ndr/drsblobs.c +++ b/source4/torture/ndr/drsblobs.c @@ -513,37 +513,35 @@ struct torture_suite *ndr_drsblobs_suite(TALLOC_CTX *ctx) torture_suite_add_ndr_pull_test(suite, ForestTrustInfo, forest_trust_info_data_out, forest_trust_info_check_out); torture_suite_add_ndr_pull_test(suite, trustDomainPasswords, trust_domain_passwords_in, trust_domain_passwords_check_in); - torture_suite_add_ndr_pull_validate_test(suite, + torture_suite_add_ndr_pull_validate_test_blob(suite, trustAuthInOutBlob, base64_decode_data_blob_talloc(suite, trustAuthIncoming), NULL); - torture_suite_add_ndr_pull_validate_test(suite, + torture_suite_add_ndr_pull_validate_test_blob(suite, trustAuthInOutBlob, base64_decode_data_blob_talloc(suite, trustAuthOutgoing), NULL); torture_suite_add_ndr_pull_validate_test(empty1_suite, supplementalCredentialsBlob, - data_blob_const(supplementalCredentials_empty1, - sizeof(supplementalCredentials_empty1)), + supplementalCredentials_empty1, supplementalCredentials_empty1_check); torture_suite_add_ndr_pull_validate_test(empty2_suite, supplementalCredentialsBlob, - data_blob_const(supplementalCredentials_empty2, - sizeof(supplementalCredentials_empty2)), +