[SCM] CTDB repository - branch 1.2.40 updated - ctdb-1.2.65-2-g9321cc2
The branch, 1.2.40 has been updated via 9321cc2b24c351bca92bf728046cafa3073ef89a (commit) via d973a575eb619c0cad139ae9c22d7d1770dc3666 (commit) from dc84c8ed12ed1bf136827b55128c2e74b38bdf55 (commit) http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=1.2.40 - Log - commit 9321cc2b24c351bca92bf728046cafa3073ef89a Author: Martin Schwenke mar...@meltin.net Date: Thu Jul 18 13:33:04 2013 +1000 New version 1.2.66 Signed-off-by: Martin Schwenke mar...@meltin.net commit d973a575eb619c0cad139ae9c22d7d1770dc3666 Author: Martin Schwenke mar...@meltin.net Date: Tue Jul 16 19:31:05 2013 +1000 eventscripts: A missing interface should cause monitoring to fail A missing interface is at least as bad as an interface with a link that is down so should have a similar effect. This couldn't be done previously because orphaned interfaces used to be listed for monitoring. This was worked around in 10.interface in commit a5b8e2c1ec1b4fd7ef25e70a919ef4c70f3e1c75. If $CTDB_PARTIALLY_ONLINE_INTERFACES=yes then monitoring won't actually fail but the interface is still marked as down. This effectively reverts d40330453854d81d182112b49f5f6f2e0814b231 and 89547a1910fd74f98ae9d5737914328eb5cc3eaf. However, it heeds the warning in the commit message for latter by avoiding an early exit. it just flags a failure and marks the interfaces as down in ctdbd. Signed-off-by: Martin Schwenke mar...@meltin.net --- Summary of changes: config/events.d/10.interface |3 +++ packaging/RPM/ctdb.spec.in |4 +++- 2 files changed, 6 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/config/events.d/10.interface b/config/events.d/10.interface index d407154..ce648a1 100755 --- a/config/events.d/10.interface +++ b/config/events.d/10.interface @@ -38,6 +38,9 @@ monitor_interfaces() for IFACE in $INTERFACES ; do ip addr show $IFACE 2/dev/null /dev/null || { + echo ERROR: Interface $IFACE does not exist but is used by public addresses + fail=1 + ctdb setifacelink $IFACE down /dev/null 2/dev/null continue } diff --git a/packaging/RPM/ctdb.spec.in b/packaging/RPM/ctdb.spec.in index 5084d2a..8f74e3e 100644 --- a/packaging/RPM/ctdb.spec.in +++ b/packaging/RPM/ctdb.spec.in @@ -3,7 +3,7 @@ Name: ctdb Summary: Clustered TDB Vendor: Samba Team Packager: Samba Team sa...@samba.org -Version: 1.2.65 +Version: 1.2.66 Release: 1GITHASH Epoch: 0 License: GNU GPL version 3 @@ -155,6 +155,8 @@ development libraries for ctdb %changelog +* Thu Jul 18 2013 : Version 1.2.66 + - A missing interface should cause monitoring to fail * Tue Jul 02 2013 : Version 1.2.65 - Fix the flags passed in modify flags control from recovery daemon - Do early return from recoverd main loop if node is inactive -- CTDB repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 9adfe82 pam_winbind: update documentation for DIR krb5ccname pragma. via 7ad3a36 s3-winbindd: support the DIR pragma for raw kerberos user pam authentication. via 73e6fef wbinfo: allow to define a custom krb5ccname for kerberized pam auth. via e9ae36e s4-lib/socket: Allocate a the larger sockaddr_un and not just a sockaddr_in in unixdom_get_peer_addr() from fe06e1b smbd: Fix CID 1035536 Uninitialized pointer read http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 9adfe82a1785aa6a7baefb435072a0a81dfb13cb Author: Günther Deschner g...@samba.org Date: Thu Jul 18 19:09:14 2013 +0200 pam_winbind: update documentation for DIR krb5ccname pragma. Guenther Signed-off-by: Günther Deschner g...@samba.org Reviewed-by: Jeremy Allison j...@samba.org Autobuild-User(master): Jeremy Allison j...@samba.org Autobuild-Date(master): Wed Jul 24 02:43:10 CEST 2013 on sn-devel-104 commit 7ad3a367d52b1f123c318946d654e95639202130 Author: Günther Deschner g...@samba.org Date: Thu Jul 18 19:05:51 2013 +0200 s3-winbindd: support the DIR pragma for raw kerberos user pam authentication. It is currently only available in MIT. In addition, allow to define custom filepaths for FILE, WRFILE and DIR pragmas and substitute one occurence of the %u pattern. Guenther Signed-off-by: Günther Deschner g...@samba.org Pair-Programmed-With: Andreas Schneider a...@samba.org Reviewed-by: Jeremy Allison j...@samba.org commit 73e6feff9b3f30e70d84fe256aff239fafdfdb95 Author: Günther Deschner g...@samba.org Date: Thu Jul 18 19:04:29 2013 +0200 wbinfo: allow to define a custom krb5ccname for kerberized pam auth. Guenther Signed-off-by: Günther Deschner g...@samba.org Reviewed-by: Jeremy Allison j...@samba.org commit e9ae36e9683372b86f1efbd29904722a33fea083 Author: Andrew Bartlett abart...@samba.org Date: Wed Jul 24 10:19:26 2013 +1200 s4-lib/socket: Allocate a the larger sockaddr_un and not just a sockaddr_in in unixdom_get_peer_addr() This caused crashes in _tsocket_address_bsd_from_sockaddr() when we read past the end of the allocation. Andrew Bartlett Signed-off-by: Andrew Bartlett abart...@samba.org Reviewed-by: Jeremy Allison j...@samba.org --- Summary of changes: docs-xml/manpages/pam_winbind.conf.5.xml | 39 ++--- examples/pam_winbind/pam_winbind.conf|3 +- nsswitch/wbinfo.c|6 +++- source3/winbindd/winbindd_pam.c | 23 + source4/lib/socket/socket_unix.c |4 +- 5 files changed, 60 insertions(+), 15 deletions(-) Changeset truncated at 500 lines: diff --git a/docs-xml/manpages/pam_winbind.conf.5.xml b/docs-xml/manpages/pam_winbind.conf.5.xml index 8c36719..020cb67 100644 --- a/docs-xml/manpages/pam_winbind.conf.5.xml +++ b/docs-xml/manpages/pam_winbind.conf.5.xml @@ -106,16 +106,35 @@ termkrb5_ccache_type = [type]/term listitempara - When pam_winbind is configured to try kerberos authentication - by enabling the parameterkrb5_auth/parameter option, it can - store the retrieved Ticket Granting Ticket (TGT) in a - credential cache. The type of credential cache can be set with - this option. Currently the only supported value is: - parameterFILE/parameter. In that case a credential cache in - the form of /tmp/krb5cc_UID will be created, where UID is - replaced with the numeric user id. Leave empty to just do - kerberos authentication without having a ticket cache after the - logon has succeeded. This setting is empty by default. + When pam_winbind is configured to try kerberos authentication by + enabling the parameterkrb5_auth/parameter option, it can + store the retrieved Ticket Granting Ticket (TGT) in a credential + cache. The type of credential cache can be controlled with this + option. The supported values are: parameterFILE/parameter + and parameterDIR/parameter (when the DIR type is supported + by the system's Kerberos library). In case of FILE a credential + cache in the form of /tmp/krb5cc_UID will be created - in case + of DIR it will be located under the /run/user/UID/krb5cc + directory. UID is replaced with the numeric user id./para + + paraIt is also possible to define custom filepaths and use the %u + pattern in order to substitue the numeric user id. + Examples:/para + +