[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 66289ab678e s4:kdc: Set Kerberos debug class for all KDC files via 534b88dea21 docs-xml: some fixes and updates for ea and acl docs in smb.conf from 3ce1d2fde5d Fix spelling mistakes. https://git.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 66289ab678ebe998673e7cec510702ef40bbcd79 Author: Andreas Schneider Date: Fri Sep 9 12:32:57 2022 +0200 s4:kdc: Set Kerberos debug class for all KDC files Signed-off-by: Andreas Schneider Reviewed-by: Andrew Bartlett Autobuild-User(master): Andrew Bartlett Autobuild-Date(master): Mon Sep 12 03:27:55 UTC 2022 on sn-devel-184 commit 534b88dea210f5a35c16031d1c3a97bf182dd5a8 Author: Björn Jacke Date: Sun Sep 11 21:35:07 2022 +0200 docs-xml: some fixes and updates for ea and acl docs in smb.conf Signed-off-by: Bjoern Jacke Reviewed-by: Andrew Bartlett --- Summary of changes: docs-xml/smbdotconf/protocol/easupport.xml | 9 +++-- docs-xml/smbdotconf/protocol/mapaclinherit.xml | 18 +++--- docs-xml/smbdotconf/security/inheritacls.xml | 7 +-- source4/kdc/db-glue.c | 3 +++ source4/kdc/hdb-samba4.c | 3 +++ source4/kdc/kdc-glue.c | 3 +++ source4/kdc/kdc-heimdal.c | 3 +++ source4/kdc/kdc-proxy.c| 2 ++ source4/kdc/kdc-server.c | 3 +++ source4/kdc/kpasswd-helper.c | 3 +++ source4/kdc/kpasswd-service-heimdal.c | 3 +++ source4/kdc/kpasswd-service-mit.c | 3 +++ source4/kdc/kpasswd-service.c | 3 +++ source4/kdc/kpasswd_glue.c | 3 +++ source4/kdc/mit_kdc_irpc.c | 3 +++ source4/kdc/sdb.c | 3 +++ source4/kdc/sdb_to_hdb.c | 3 +++ source4/kdc/sdb_to_kdb.c | 3 +++ source4/kdc/wdc-samba4.c | 3 +++ 19 files changed, 66 insertions(+), 15 deletions(-) Changeset truncated at 500 lines: diff --git a/docs-xml/smbdotconf/protocol/easupport.xml b/docs-xml/smbdotconf/protocol/easupport.xml index 403e48f5a89..fd425e8b514 100644 --- a/docs-xml/smbdotconf/protocol/easupport.xml +++ b/docs-xml/smbdotconf/protocol/easupport.xml @@ -18,12 +18,9 @@ Note that the SMB protocol allows setting attributes whose value is 64K bytes long, and that on NTFS, the maximum storage space for extended attributes per file is 64K. -On most UNIX systems (Solaris and ZFS file system being the exception), the limits -are much lower - typically 4K. Worse, the same 4K space is often used to store -system metadata such as POSIX ACLs, or Samba's NT ACLs. Giving clients -access to this tight space via extended attribute support could consume all -of it by unsuspecting client applications, which would prevent changing -system metadata due to lack of space. +On some filesystem the limits may be lower. Filesystems with too limited EA +space may experience unexpected weird effects. + The default has changed to yes in Samba release 4.9.0 and above to allow better Windows fileserver compatibility in a default install. diff --git a/docs-xml/smbdotconf/protocol/mapaclinherit.xml b/docs-xml/smbdotconf/protocol/mapaclinherit.xml index 28271f9d66b..c248a333b5c 100644 --- a/docs-xml/smbdotconf/protocol/mapaclinherit.xml +++ b/docs-xml/smbdotconf/protocol/mapaclinherit.xml @@ -3,13 +3,17 @@ type="boolean" xmlns:samba="http://www.samba.org/samba/DTD/samba-doc;> -This boolean parameter controls whether smbd -8 will attempt to map the 'inherit' and 'protected' -access control entry flags stored in Windows ACLs into an extended attribute -called user.SAMBA_PAI (POSIX ACL Inheritance). This parameter requires -supports for extended attributes on the filesystem and -allows the Windows ACL editor to store inheritance information while -NT ACLs are mapped best-effort to the POSIX ACLs. +This boolean parameter is only relevant for systems that do not support +standardized NFS4 ACLs but only a POSIX draft implementation of ACLs. Linux +is the only common UNIX system which does still not offer standardized NFS4 +ACLs actually. On such systems this parameter controls whether +smbd +8 will attempt to map the 'protected' +(don't inherit) flags of the Windows ACLs into an extended attribute called +user.SAMBA_PAI (POSIX draft ACL Inheritance). This parameter requires +support for extended attributes on the filesystem and allows the Windows +ACL editor to store (non-)inheritance information
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 3ce1d2fde5d Fix spelling mistakes.
from dadd3223882 tests/krb5: Add claims tests
https://git.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 3ce1d2fde5dac8a9da2ff0a91ec104cb52d0c6bd
Author: Michael Tokarev
Date: Fri Sep 9 13:45:38 2022 -0700
Fix spelling mistakes.
Signed-off-by: Michael Tokarev
Reviewed-by: Jeremy Allison
Reviewed-by: Martin Schwenke
Autobuild-User(master): Jeremy Allison
Autobuild-Date(master): Mon Sep 12 02:29:32 UTC 2022 on sn-devel-184
---
Summary of changes:
ctdb/common/system.c | 2 +-
docs-xml/manpages/vfs_fruit.8.xml | 2 +-
source3/smbd/msdfs.c | 2 +-
source3/smbd/smbXsrv_client.c | 4 ++--
source3/winbindd/wb_sids2xids.c | 2 +-
source4/torture/smb2/ea.c | 2 +-
source4/torture/smb2/session.c| 26 +-
7 files changed, 20 insertions(+), 20 deletions(-)
Changeset truncated at 500 lines:
diff --git a/ctdb/common/system.c b/ctdb/common/system.c
index 08dc68284fd..05a95647233 100644
--- a/ctdb/common/system.c
+++ b/ctdb/common/system.c
@@ -157,7 +157,7 @@ bool ctdb_sys_check_iface_exists(const char *iface)
ifnis = if_nameindex();
if (ifnis == NULL) {
- DBG_ERR("Failed to retrieve inteface list\n");
+ DBG_ERR("Failed to retrieve interface list\n");
return false;
}
diff --git a/docs-xml/manpages/vfs_fruit.8.xml
b/docs-xml/manpages/vfs_fruit.8.xml
index 4caf308a612..6950898a7d1 100644
--- a/docs-xml/manpages/vfs_fruit.8.xml
+++ b/docs-xml/manpages/vfs_fruit.8.xml
@@ -399,7 +399,7 @@
on-disk file identifier to have the semantics of HFS+ Catalog Node
Identifier (CNID). Samba provides File-IDs based on a file's inode
number which gets recycled across file creation and deletion and
- can therefor not be used for Mac client. Returning a file
identifier of
+ can therefore not be used for Mac client. Returning a file
identifier of
zero causes the Mac client to stop using and trusting the file id
returned from the server.
The default is yes.
diff --git a/source3/smbd/msdfs.c b/source3/smbd/msdfs.c
index ce7d0f7dd56..b5fd7608e07 100644
--- a/source3/smbd/msdfs.c
+++ b/source3/smbd/msdfs.c
@@ -1090,7 +1090,7 @@ static NTSTATUS dfs_path_lookup(TALLOC_CTX *ctx,
}
removed_components--;
if (p == NULL && removed_components != 0) {
- DBG_ERR("Component missmatch. path = %s, "
+ DBG_ERR("Component mismatch. path = %s, "
"%zu components left\n",
canon_dfspath,
removed_components);
diff --git a/source3/smbd/smbXsrv_client.c b/source3/smbd/smbXsrv_client.c
index d7a6fa35bf0..14d00f4aca1 100644
--- a/source3/smbd/smbXsrv_client.c
+++ b/source3/smbd/smbXsrv_client.c
@@ -1242,7 +1242,7 @@ static void smbXsrv_client_connection_drop_loop(struct
tevent_req *subreq)
{
struct GUID_txt_buf buf1, buf2;
- DBG_WARNING("client's client_guid [%s] != droped guid [%s]\n",
+ DBG_WARNING("client's client_guid [%s] != dropped guid [%s]\n",
GUID_buf_string(>global->client_guid,
),
GUID_buf_string(_info0->client_guid,
@@ -1257,7 +1257,7 @@ static void smbXsrv_client_connection_drop_loop(struct
tevent_req *subreq)
drop_info0->client_connect_time)
{
DBG_WARNING("client's initial connect time [%s] (%llu) != "
- "droped initial connect time [%s] (%llu)\n",
+ "dropped initial connect time [%s] (%llu)\n",
nt_time_string(talloc_tos(),
client->global->initial_connect_time),
(unsigned long
long)client->global->initial_connect_time,
diff --git a/source3/winbindd/wb_sids2xids.c b/source3/winbindd/wb_sids2xids.c
index 179a51f81e4..9a3507ba702 100644
--- a/source3/winbindd/wb_sids2xids.c
+++ b/source3/winbindd/wb_sids2xids.c
@@ -233,7 +233,7 @@ static void wb_sids2xids_idmap_setup_done(struct tevent_req
*subreq)
sid_copy(_sid, >sids[i]);
sid_split_rid(_sid, );
- D_DEBUG("%"PRIu32": Splitted SID %s into domain SID %s and RID
%"PRIu32"\n",
+ D_DEBUG("%"PRIu32": Split SID %s into domain SID %s and RID
%"PRIu32"\n",
i,
dom_sid_str_buf(>sids[i], ),
dom_sid_str_buf(_sid, ),
diff --git a/source4/torture/smb2/ea.c
