[SCM] CTDB repository - branch 1.2.40 updated - ctdb-1.2.65-2-g9321cc2

2013-07-23 Thread Amitay Isaacs
The branch, 1.2.40 has been updated
   via  9321cc2b24c351bca92bf728046cafa3073ef89a (commit)
   via  d973a575eb619c0cad139ae9c22d7d1770dc3666 (commit)
  from  dc84c8ed12ed1bf136827b55128c2e74b38bdf55 (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=1.2.40


- Log -
commit 9321cc2b24c351bca92bf728046cafa3073ef89a
Author: Martin Schwenke mar...@meltin.net
Date:   Thu Jul 18 13:33:04 2013 +1000

New version 1.2.66

Signed-off-by: Martin Schwenke mar...@meltin.net

commit d973a575eb619c0cad139ae9c22d7d1770dc3666
Author: Martin Schwenke mar...@meltin.net
Date:   Tue Jul 16 19:31:05 2013 +1000

eventscripts: A missing interface should cause monitoring to fail

A missing interface is at least as bad as an interface with a link
that is down so should have a similar effect.

This couldn't be done previously because orphaned interfaces used to
be listed for monitoring.  This was worked around in 10.interface in
commit a5b8e2c1ec1b4fd7ef25e70a919ef4c70f3e1c75.

If $CTDB_PARTIALLY_ONLINE_INTERFACES=yes then monitoring won't
actually fail but the interface is still marked as down.

This effectively reverts d40330453854d81d182112b49f5f6f2e0814b231 and
89547a1910fd74f98ae9d5737914328eb5cc3eaf.  However, it heeds the
warning in the commit message for latter by avoiding an early exit.
it just flags a failure and marks the interfaces as down in ctdbd.

Signed-off-by: Martin Schwenke mar...@meltin.net

---

Summary of changes:
 config/events.d/10.interface |3 +++
 packaging/RPM/ctdb.spec.in   |4 +++-
 2 files changed, 6 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/config/events.d/10.interface b/config/events.d/10.interface
index d407154..ce648a1 100755
--- a/config/events.d/10.interface
+++ b/config/events.d/10.interface
@@ -38,6 +38,9 @@ monitor_interfaces()
for IFACE in $INTERFACES ; do
 
ip addr show $IFACE 2/dev/null /dev/null || {
+   echo ERROR: Interface $IFACE does not exist but is used by 
public addresses
+   fail=1
+   ctdb setifacelink $IFACE down /dev/null 2/dev/null
continue
}
 
diff --git a/packaging/RPM/ctdb.spec.in b/packaging/RPM/ctdb.spec.in
index 5084d2a..8f74e3e 100644
--- a/packaging/RPM/ctdb.spec.in
+++ b/packaging/RPM/ctdb.spec.in
@@ -3,7 +3,7 @@ Name: ctdb
 Summary: Clustered TDB
 Vendor: Samba Team
 Packager: Samba Team sa...@samba.org
-Version: 1.2.65
+Version: 1.2.66
 Release: 1GITHASH
 Epoch: 0
 License: GNU GPL version 3
@@ -155,6 +155,8 @@ development libraries for ctdb
 
 %changelog
 
+* Thu Jul 18 2013 : Version 1.2.66
+  - A missing interface should cause monitoring to fail
 * Tue Jul 02 2013 : Version 1.2.65
   - Fix the flags passed in modify flags control from recovery daemon
   - Do early return from recoverd main loop if node is inactive


-- 
CTDB repository


[SCM] Samba Shared Repository - branch master updated

2013-07-23 Thread Jeremy Allison
The branch, master has been updated
   via  9adfe82 pam_winbind: update documentation for DIR krb5ccname 
pragma.
   via  7ad3a36 s3-winbindd: support the DIR pragma for raw kerberos user 
pam authentication.
   via  73e6fef wbinfo: allow to define a custom krb5ccname for kerberized 
pam auth.
   via  e9ae36e s4-lib/socket: Allocate a the larger sockaddr_un and not 
just a sockaddr_in in unixdom_get_peer_addr()
  from  fe06e1b smbd: Fix CID 1035536 Uninitialized pointer read

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 9adfe82a1785aa6a7baefb435072a0a81dfb13cb
Author: Günther Deschner g...@samba.org
Date:   Thu Jul 18 19:09:14 2013 +0200

pam_winbind: update documentation for DIR krb5ccname pragma.

Guenther

Signed-off-by: Günther Deschner g...@samba.org
Reviewed-by: Jeremy Allison j...@samba.org

Autobuild-User(master): Jeremy Allison j...@samba.org
Autobuild-Date(master): Wed Jul 24 02:43:10 CEST 2013 on sn-devel-104

commit 7ad3a367d52b1f123c318946d654e95639202130
Author: Günther Deschner g...@samba.org
Date:   Thu Jul 18 19:05:51 2013 +0200

s3-winbindd: support the DIR pragma for raw kerberos user pam 
authentication.

It is currently only available in MIT. In addition, allow to define custom
filepaths for FILE, WRFILE and DIR pragmas and substitute one occurence of 
the
%u pattern.

Guenther

Signed-off-by: Günther Deschner g...@samba.org
Pair-Programmed-With: Andreas Schneider a...@samba.org
Reviewed-by: Jeremy Allison j...@samba.org

commit 73e6feff9b3f30e70d84fe256aff239fafdfdb95
Author: Günther Deschner g...@samba.org
Date:   Thu Jul 18 19:04:29 2013 +0200

wbinfo: allow to define a custom krb5ccname for kerberized pam auth.

Guenther

Signed-off-by: Günther Deschner g...@samba.org
Reviewed-by: Jeremy Allison j...@samba.org

commit e9ae36e9683372b86f1efbd29904722a33fea083
Author: Andrew Bartlett abart...@samba.org
Date:   Wed Jul 24 10:19:26 2013 +1200

s4-lib/socket: Allocate a the larger sockaddr_un and not just a sockaddr_in 
in unixdom_get_peer_addr()

This caused crashes in _tsocket_address_bsd_from_sockaddr() when we
read past the end of the allocation.

Andrew Bartlett

Signed-off-by: Andrew Bartlett abart...@samba.org
Reviewed-by: Jeremy Allison j...@samba.org

---

Summary of changes:
 docs-xml/manpages/pam_winbind.conf.5.xml |   39 ++---
 examples/pam_winbind/pam_winbind.conf|3 +-
 nsswitch/wbinfo.c|6 +++-
 source3/winbindd/winbindd_pam.c  |   23 +
 source4/lib/socket/socket_unix.c |4 +-
 5 files changed, 60 insertions(+), 15 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/manpages/pam_winbind.conf.5.xml 
b/docs-xml/manpages/pam_winbind.conf.5.xml
index 8c36719..020cb67 100644
--- a/docs-xml/manpages/pam_winbind.conf.5.xml
+++ b/docs-xml/manpages/pam_winbind.conf.5.xml
@@ -106,16 +106,35 @@
termkrb5_ccache_type = [type]/term
listitempara
 
-   When pam_winbind is configured to try kerberos authentication
-   by enabling the parameterkrb5_auth/parameter option, it can
-   store the retrieved Ticket Granting Ticket (TGT) in a
-   credential cache. The type of credential cache can be set with
-   this option. Currently the only supported value is:
-   parameterFILE/parameter. In that case a credential cache in
-   the form of /tmp/krb5cc_UID will be created, where UID is
-   replaced with the numeric user id.  Leave empty to just do
-   kerberos authentication without having a ticket cache after the
-   logon has succeeded. This setting is empty by default.
+   When pam_winbind is configured to try kerberos authentication by
+   enabling the parameterkrb5_auth/parameter option, it can
+   store the retrieved Ticket Granting Ticket (TGT) in a credential
+   cache. The type of credential cache can be controlled with this
+   option.  The supported values are: parameterFILE/parameter
+   and parameterDIR/parameter (when the DIR type is supported
+   by the system's Kerberos library). In case of FILE a credential
+   cache in the form of /tmp/krb5cc_UID will be created -  in case
+   of DIR it will be located under the /run/user/UID/krb5cc
+   directory.  UID is replaced with the numeric user id./para
+
+   paraIt is also possible to define custom filepaths and use 
the %u
+   pattern in order to substitue the numeric user id.
+   Examples:/para
+
+