[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 66289ab678e s4:kdc: Set Kerberos debug class for all KDC files via 534b88dea21 docs-xml: some fixes and updates for ea and acl docs in smb.conf from 3ce1d2fde5d Fix spelling mistakes. https://git.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 66289ab678ebe998673e7cec510702ef40bbcd79 Author: Andreas Schneider Date: Fri Sep 9 12:32:57 2022 +0200 s4:kdc: Set Kerberos debug class for all KDC files Signed-off-by: Andreas Schneider Reviewed-by: Andrew Bartlett Autobuild-User(master): Andrew Bartlett Autobuild-Date(master): Mon Sep 12 03:27:55 UTC 2022 on sn-devel-184 commit 534b88dea210f5a35c16031d1c3a97bf182dd5a8 Author: Björn Jacke Date: Sun Sep 11 21:35:07 2022 +0200 docs-xml: some fixes and updates for ea and acl docs in smb.conf Signed-off-by: Bjoern Jacke Reviewed-by: Andrew Bartlett --- Summary of changes: docs-xml/smbdotconf/protocol/easupport.xml | 9 +++-- docs-xml/smbdotconf/protocol/mapaclinherit.xml | 18 +++--- docs-xml/smbdotconf/security/inheritacls.xml | 7 +-- source4/kdc/db-glue.c | 3 +++ source4/kdc/hdb-samba4.c | 3 +++ source4/kdc/kdc-glue.c | 3 +++ source4/kdc/kdc-heimdal.c | 3 +++ source4/kdc/kdc-proxy.c| 2 ++ source4/kdc/kdc-server.c | 3 +++ source4/kdc/kpasswd-helper.c | 3 +++ source4/kdc/kpasswd-service-heimdal.c | 3 +++ source4/kdc/kpasswd-service-mit.c | 3 +++ source4/kdc/kpasswd-service.c | 3 +++ source4/kdc/kpasswd_glue.c | 3 +++ source4/kdc/mit_kdc_irpc.c | 3 +++ source4/kdc/sdb.c | 3 +++ source4/kdc/sdb_to_hdb.c | 3 +++ source4/kdc/sdb_to_kdb.c | 3 +++ source4/kdc/wdc-samba4.c | 3 +++ 19 files changed, 66 insertions(+), 15 deletions(-) Changeset truncated at 500 lines: diff --git a/docs-xml/smbdotconf/protocol/easupport.xml b/docs-xml/smbdotconf/protocol/easupport.xml index 403e48f5a89..fd425e8b514 100644 --- a/docs-xml/smbdotconf/protocol/easupport.xml +++ b/docs-xml/smbdotconf/protocol/easupport.xml @@ -18,12 +18,9 @@ Note that the SMB protocol allows setting attributes whose value is 64K bytes long, and that on NTFS, the maximum storage space for extended attributes per file is 64K. -On most UNIX systems (Solaris and ZFS file system being the exception), the limits -are much lower - typically 4K. Worse, the same 4K space is often used to store -system metadata such as POSIX ACLs, or Samba's NT ACLs. Giving clients -access to this tight space via extended attribute support could consume all -of it by unsuspecting client applications, which would prevent changing -system metadata due to lack of space. +On some filesystem the limits may be lower. Filesystems with too limited EA +space may experience unexpected weird effects. + The default has changed to yes in Samba release 4.9.0 and above to allow better Windows fileserver compatibility in a default install. diff --git a/docs-xml/smbdotconf/protocol/mapaclinherit.xml b/docs-xml/smbdotconf/protocol/mapaclinherit.xml index 28271f9d66b..c248a333b5c 100644 --- a/docs-xml/smbdotconf/protocol/mapaclinherit.xml +++ b/docs-xml/smbdotconf/protocol/mapaclinherit.xml @@ -3,13 +3,17 @@ type="boolean" xmlns:samba="http://www.samba.org/samba/DTD/samba-doc";> -This boolean parameter controls whether smbd -8 will attempt to map the 'inherit' and 'protected' -access control entry flags stored in Windows ACLs into an extended attribute -called user.SAMBA_PAI (POSIX ACL Inheritance). This parameter requires -supports for extended attributes on the filesystem and -allows the Windows ACL editor to store inheritance information while -NT ACLs are mapped best-effort to the POSIX ACLs. +This boolean parameter is only relevant for systems that do not support +standardized NFS4 ACLs but only a POSIX draft implementation of ACLs. Linux +is the only common UNIX system which does still not offer standardized NFS4 +ACLs actually. On such systems this parameter controls whether +smbd +8 will attempt to map the 'protected' +(don't inherit) flags of the Windows ACLs into an extended attribute called +user.SAMBA_PAI (POSIX draft ACL Inheritance). This parameter requires +support for extended attributes on the filesystem and allows the Windows +ACL editor to store (non-)inheritance information whi
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 3ce1d2fde5d Fix spelling mistakes. from dadd3223882 tests/krb5: Add claims tests https://git.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 3ce1d2fde5dac8a9da2ff0a91ec104cb52d0c6bd Author: Michael Tokarev Date: Fri Sep 9 13:45:38 2022 -0700 Fix spelling mistakes. Signed-off-by: Michael Tokarev Reviewed-by: Jeremy Allison Reviewed-by: Martin Schwenke Autobuild-User(master): Jeremy Allison Autobuild-Date(master): Mon Sep 12 02:29:32 UTC 2022 on sn-devel-184 --- Summary of changes: ctdb/common/system.c | 2 +- docs-xml/manpages/vfs_fruit.8.xml | 2 +- source3/smbd/msdfs.c | 2 +- source3/smbd/smbXsrv_client.c | 4 ++-- source3/winbindd/wb_sids2xids.c | 2 +- source4/torture/smb2/ea.c | 2 +- source4/torture/smb2/session.c| 26 +- 7 files changed, 20 insertions(+), 20 deletions(-) Changeset truncated at 500 lines: diff --git a/ctdb/common/system.c b/ctdb/common/system.c index 08dc68284fd..05a95647233 100644 --- a/ctdb/common/system.c +++ b/ctdb/common/system.c @@ -157,7 +157,7 @@ bool ctdb_sys_check_iface_exists(const char *iface) ifnis = if_nameindex(); if (ifnis == NULL) { - DBG_ERR("Failed to retrieve inteface list\n"); + DBG_ERR("Failed to retrieve interface list\n"); return false; } diff --git a/docs-xml/manpages/vfs_fruit.8.xml b/docs-xml/manpages/vfs_fruit.8.xml index 4caf308a612..6950898a7d1 100644 --- a/docs-xml/manpages/vfs_fruit.8.xml +++ b/docs-xml/manpages/vfs_fruit.8.xml @@ -399,7 +399,7 @@ on-disk file identifier to have the semantics of HFS+ Catalog Node Identifier (CNID). Samba provides File-IDs based on a file's inode number which gets recycled across file creation and deletion and - can therefor not be used for Mac client. Returning a file identifier of + can therefore not be used for Mac client. Returning a file identifier of zero causes the Mac client to stop using and trusting the file id returned from the server. The default is yes. diff --git a/source3/smbd/msdfs.c b/source3/smbd/msdfs.c index ce7d0f7dd56..b5fd7608e07 100644 --- a/source3/smbd/msdfs.c +++ b/source3/smbd/msdfs.c @@ -1090,7 +1090,7 @@ static NTSTATUS dfs_path_lookup(TALLOC_CTX *ctx, } removed_components--; if (p == NULL && removed_components != 0) { - DBG_ERR("Component missmatch. path = %s, " + DBG_ERR("Component mismatch. path = %s, " "%zu components left\n", canon_dfspath, removed_components); diff --git a/source3/smbd/smbXsrv_client.c b/source3/smbd/smbXsrv_client.c index d7a6fa35bf0..14d00f4aca1 100644 --- a/source3/smbd/smbXsrv_client.c +++ b/source3/smbd/smbXsrv_client.c @@ -1242,7 +1242,7 @@ static void smbXsrv_client_connection_drop_loop(struct tevent_req *subreq) { struct GUID_txt_buf buf1, buf2; - DBG_WARNING("client's client_guid [%s] != droped guid [%s]\n", + DBG_WARNING("client's client_guid [%s] != dropped guid [%s]\n", GUID_buf_string(&client->global->client_guid, &buf1), GUID_buf_string(&drop_info0->client_guid, @@ -1257,7 +1257,7 @@ static void smbXsrv_client_connection_drop_loop(struct tevent_req *subreq) drop_info0->client_connect_time) { DBG_WARNING("client's initial connect time [%s] (%llu) != " - "droped initial connect time [%s] (%llu)\n", + "dropped initial connect time [%s] (%llu)\n", nt_time_string(talloc_tos(), client->global->initial_connect_time), (unsigned long long)client->global->initial_connect_time, diff --git a/source3/winbindd/wb_sids2xids.c b/source3/winbindd/wb_sids2xids.c index 179a51f81e4..9a3507ba702 100644 --- a/source3/winbindd/wb_sids2xids.c +++ b/source3/winbindd/wb_sids2xids.c @@ -233,7 +233,7 @@ static void wb_sids2xids_idmap_setup_done(struct tevent_req *subreq) sid_copy(&domain_sid, &state->sids[i]); sid_split_rid(&domain_sid, &rid); - D_DEBUG("%"PRIu32": Splitted SID %s into domain SID %s and RID %"PRIu32"\n", + D_DEBUG("%"PRIu32": Split SID %s into domain SID %s and RID %"PRIu32"\n", i, dom_sid_str_buf(&state->sids[i], &buf0), dom_sid_str