svn commit: samba-web r1276 - in trunk: .
Author: jerry Date: 2009-03-15 00:06:25 + (Sun, 15 Mar 2009) New Revision: 1276 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1276 Log: Remove maintenance notice (servers are back up now) Modified: trunk/index.html Changeset: Modified: trunk/index.html === --- trunk/index.html2009-03-14 17:56:28 UTC (rev 1275) +++ trunk/index.html2009-03-15 00:06:25 UTC (rev 1276) @@ -14,14 +14,6 @@ http://conservancy.softwarefreedom.org/";>Software Freedom Conservancy. -14 March 2009 -Scheduled Maintenance for some services - -Our git repository, the wiki and bugzilla server will be down for -maintenance today between 12:30-22:00 GMT - -www.samba.org and other services will not be affected - Latest News
svn commit: samba-web r1263 - in trunk/vendors: .
Author: jerry Date: 2009-01-20 18:55:26 + (Tue, 20 Jan 2009) New Revision: 1263 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1263 Log: Update vendor entry for Likewise Added: trunk/vendors/likewise.html trunk/vendors/likewiselogo.jpg Removed: trunk/vendors/centeris.html trunk/vendors/centerislogo.jpg Modified: trunk/vendors/index.html Changeset: Deleted: trunk/vendors/centeris.html === --- trunk/vendors/centeris.html 2009-01-20 09:55:06 UTC (rev 1262) +++ trunk/vendors/centeris.html 2009-01-20 18:55:26 UTC (rev 1263) @@ -1,28 +0,0 @@ -Centeris - - - -Centeris® Likewise™ Management Suite is a server management -solution that makes Windows® and Linux® work well together, -reducing the challenges of running a mixed network. - -Now midsized and enterprise customers can easily manage -Linux servers in a Microsoft Windows network. Likewise makes -it simple to configure server roles and join Linux servers -to Active Directory, provides familiar Windows-based tools -for day-to-day management of Linux servers and improves -Windows/Linux interoperability. - - - -Whether you run a small business or a large enterprise, -Centeris Likewise 2.0 is a cost-effective, easy way to manage -your Linux and Microsoft Network so you can focus on managing -your business, not your network. - -Centeris is an active contributor to the Samba community and -our employees include Jerry Carter, one of the lead Samba developers. -You can learn more about our product offerings at -http://www.centeris.com";>http://www.centeris.com -or by e-mailing mailto:market...@centeris.com";>market...@centeris.com. - Deleted: trunk/vendors/centerislogo.jpg === (Binary files differ) Modified: trunk/vendors/index.html === --- trunk/vendors/index.html2009-01-20 09:55:06 UTC (rev 1262) +++ trunk/vendors/index.html2009-01-20 18:55:26 UTC (rev 1263) @@ -32,10 +32,6 @@ BrainStorm Technologies - - - - @@ -58,11 +54,14 @@ Hewlett-Packard - -iPrism - Internet Access Management + +iPrism - Internet Access Management + - - + + + + Meinberg LANTIME Copied: trunk/vendors/likewise.html (from rev 1262, trunk/vendors/centeris.html) === --- trunk/vendors/centeris.html 2009-01-20 09:55:06 UTC (rev 1262) +++ trunk/vendors/likewise.html 2009-01-20 18:55:26 UTC (rev 1263) @@ -0,0 +1,17 @@ +Likewise Open + + + +Likewise® Likewise™ Open is Identity Management Solution +for joining non-Microsoft hosts into Active Directory (and equivalent) +domains. The open source code is hosted at +http://git.likewise.com/?p=likewise-open.git;a=summary";>http://git.likewise.com/. + +Likewise also provides an Enterprise product that includes additional +midsize and large scale management features such as support for AD's Group +Policy for Unix, Linux, and OS X hosts. Likewise is an active contributor to the Samba community and +our employees include Samba developers Jerry Carter and Rafal Szczesniak. +You can learn more about our product offerings at +http://www.likewise.com";>http://www.likewise.com +or by e-mailing mailto:market...@likewise.com";>market...@likewise.com. + Property changes on: trunk/vendors/likewise.html ___ Name: svn:mergeinfo + Copied: trunk/vendors/likewiselogo.jpg (from rev 1262, trunk/vendors/centerislogo.jpg) === (Binary files differ) Property changes on: trunk/vendors/likewiselogo.jpg ___ Name: svn:mime-type + application/octet-stream Name: svn:mergeinfo +
Re: [SCM] Samba Shared Repository - branch master updated - 6a4957d35d50e6508917aca62b282ae4904187c8
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Adam wrote: > The branch, master has been updated >via 6a4957d35d50e6508917aca62b282ae4904187c8 (commit) >via afbfbd7f4c656fa4ed036314837024be8cd634c9 (commit) >via bf04324592695fd6e711ba25a89d47e1b61fa33e (commit) > from 9d2c2a7a0e9e69c8fa2ce81af79007da0e32605b (commit) > > http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master > > > - Log - > commit 6a4957d35d50e6508917aca62b282ae4904187c8 > Author: Michael Adam <[EMAIL PROTECTED]> > Date: Sun Nov 23 22:59:40 2008 +0100 > > UNFINISHED - s3:idmap_ad: multi-domain Michael, Why not just add the SFU schema support to the idmap_Adex plugin? It already has global catalog and cross forest support? cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJLAlpIR7qMdg1EfYRAk/FAJ9JO1yNGCKbdiSuz+bXcYOloxCj+ACgtzci m+zd6UVg+P5d/b0RrvW9JNE= =Vnu0 -END PGP SIGNATURE-
svn commit: samba-web r1223 - in trunk: .
Author: jerry Date: 2008-08-25 22:37:59 + (Mon, 25 Aug 2008) New Revision: 1223 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1223 Log: Clarifying that this is a maintenace release only. Modified: trunk/index.html Changeset: Modified: trunk/index.html === --- trunk/index.html2008-08-25 22:33:29 UTC (rev 1222) +++ trunk/index.html2008-08-25 22:37:59 UTC (rev 1223) @@ -20,7 +20,7 @@ Current Release 25 Aug 2008 -Samba 3.0.31 Available for Download +Samba 3.0.32 Maintenance Release Available This is the latest bug fix release for Samba 3.0 and is the version recommended for all production Samba servers running
svn commit: samba-web r1222 - in trunk: . history
Author: jerry Date: 2008-08-25 22:33:29 + (Mon, 25 Aug 2008) New Revision: 1222 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1222 Log: Announcing 3.0.32 Added: trunk/history/samba-3.0.32.html Modified: trunk/header_columns.html trunk/history/header_history.html trunk/index.html Changeset: Modified: trunk/header_columns.html === --- trunk/header_columns.html 2008-08-22 18:04:20 UTC (rev 1221) +++ trunk/header_columns.html 2008-08-25 22:33:29 UTC (rev 1222) @@ -137,9 +137,9 @@ Historical -Samba 3.0.31 (gzipped) -Release Notes -Signature +Samba 3.0.32 (gzipped) +Release Notes +Signature Maintenance Modified: trunk/history/header_history.html === --- trunk/history/header_history.html 2008-08-22 18:04:20 UTC (rev 1221) +++ trunk/history/header_history.html 2008-08-25 22:33:29 UTC (rev 1222) @@ -80,6 +80,7 @@ samba-3.2.2 samba-3.2.1 samba-3.2.0 +samba-3.0.32/a> samba-3.0.31 samba-3.0.30 samba-3.0.29 Added: trunk/history/samba-3.0.32.html === --- trunk/history/samba-3.0.32.html 2008-08-22 18:04:20 UTC (rev 1221) +++ trunk/history/samba-3.0.32.html 2008-08-25 22:33:29 UTC (rev 1222) @@ -0,0 +1,83 @@ +http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> +http://www.w3.org/1999/xhtml";> + + +Samba - Release Notes Archive + + + + + Samba 3.0.32 Available for Download + + + + === + Release Notes for Samba 3.0.32 + Aug 25, 2008 + === + +This is a bug fix release of the Samba 3.0 production series +and is the version that servers should be run for all current +Samba 3.0 bug fixes. + +User visible bug fixes in this release include: + +o Prevent crash bug in Winbind caused by a race condition + when a child process becomes unresponsive. +o Fix interactive password prompting in the "net" command. +o Documentation clarifications and typographical fixes. + + +## +Changes +### + +Changes since 3.0.31 + + +o Michael Adam <[EMAIL PROTECTED]> +* Docs fix for "password server" parameter. +* Fix IPC connections with interactive password prompt. + + +o Jeremy Allison <[EMAIL PROTECTED]> +* BUG 5697: nmbd spins in reload_interfaces when only loopback + exists. +* Don't re-initialize a token when we already have one. + + +o Gerald (Jerry) Carter <[EMAIL PROTECTED]> +* When returning NSS_UNAVAIL from libnss_winbind, squash errno + to ENOENT. + + +o Volker Lendecke <[EMAIL PROTECTED]> +* Fix a race condition in winbind leading to a crash. + + +o Jim McDonough <[EMAIL PROTECTED]> +* Correct interaction between Winbind log files and the + "log file" smb.conf parameter upon a reload. + + +o Karolin Seeger <[EMAIL PROTECTED]> +* Fix scope description of the "printcap name" parameter in + smb.conf(5). +* Fix typos in smbclient man page. + + +o Bo Yang <[EMAIL PROTECTED]> +* Allow %u parameters for print job username. + + +o Christoph Zauner <[EMAIL PROTECTED]> +* Corrections to various man pages. + + +Please refer to the original Samba +3.0.31 Release Notes for more details regarding changes in +previous releases. + + + Property changes on: trunk/history/samba-3.0.32.html ___ Name: svn:executable + * Modified: trunk/index.html === --- trunk/index.html2008-08-22 18:04:20 UTC (rev 1221) +++ trunk/index.html2008-08-25 22:33:29 UTC (rev 1222) @@ -19,6 +19,19 @@ Current Release +25 Aug 2008 +Samba 3.0.31 Available for Download + +This is the latest bug fix release for Samba 3.0 and is the +version recommended for all production Samba servers running +this release series. The uncompressed tarballs and patch files have been signed +using GnuPG (ID 6568B7EA). The source code can be +downloaded +now. A patch against Samba 3.0.31 +is also available. See the +release notes for more info. + + 19 August 2008 Samba 3.2.2 Available for Download @@ -44,19 +57,6 @@ is also available. See the release notes for more info. -10 July 2008 -Samba 3.0.31 Available for Download - -This is the latest bug fix release for Samba 3.0 and is the -version recommended for all production Samba servers running -this release seri
svn commit: samba-web r1215 - in trunk/patches: . patches-3.2.1
Author: jerry Date: 2008-08-13 18:46:59 + (Wed, 13 Aug 2008) New Revision: 1215 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1215 Log: Prepping for patches for 3.2.1 Added: trunk/patches/patches-3.2.1/ trunk/patches/patches-3.2.1/series trunk/patches/series-3.2.1 Modified: trunk/patches/patches trunk/patches/series Changeset: Modified: trunk/patches/patches === --- trunk/patches/patches 2008-08-13 13:05:12 UTC (rev 1214) +++ trunk/patches/patches 2008-08-13 18:46:59 UTC (rev 1215) @@ -1 +1 @@ -link patches-3.0.24 \ No newline at end of file +link patches-3.2.1 \ No newline at end of file Added: trunk/patches/patches-3.2.1/series === Modified: trunk/patches/series === --- trunk/patches/series2008-08-13 13:05:12 UTC (rev 1214) +++ trunk/patches/series2008-08-13 18:46:59 UTC (rev 1215) @@ -1 +1 @@ -link patches-3.0.24/series \ No newline at end of file +link patches-3.2.1/series \ No newline at end of file Added: trunk/patches/series-3.2.1 === --- trunk/patches/series-3.2.1 2008-08-13 13:05:12 UTC (rev 1214) +++ trunk/patches/series-3.2.1 2008-08-13 18:46:59 UTC (rev 1215) @@ -0,0 +1 @@ +link patches-3.2.1/series \ No newline at end of file Property changes on: trunk/patches/series-3.2.1 ___ Name: svn:special + *
svn commit: samba-web r1207 - in trunk: . history
Author: jerry Date: 2008-07-10 21:06:43 + (Thu, 10 Jul 2008) New Revision: 1207 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1207 Log: Announce 3.0.31. Added: trunk/history/samba-3.0.31.html Modified: trunk/header_columns.html trunk/index.html Changeset: Modified: trunk/header_columns.html === --- trunk/header_columns.html 2008-07-04 15:04:57 UTC (rev 1206) +++ trunk/header_columns.html 2008-07-10 21:06:43 UTC (rev 1207) @@ -137,9 +137,9 @@ Historical -Samba 2.2.12 (gzipped) -Release Notes -Signature +Samba 3.0.31 (gzipped) +Release Notes +Signature Maintenance Added: trunk/history/samba-3.0.31.html === --- trunk/history/samba-3.0.31.html 2008-07-04 15:04:57 UTC (rev 1206) +++ trunk/history/samba-3.0.31.html 2008-07-10 21:06:43 UTC (rev 1207) @@ -0,0 +1,142 @@ +http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> +http://www.w3.org/1999/xhtml";> + + +Samba - Release Notes Archive + + + + + Samba 3.0.31 Available for Download + + + + === + Release Notes for Samba 3.0.31 + July 10, 2008 + === + +This is a bug fix release of the Samba 3.0 production series +and is the version that servers should be run for all current +Samba 3.0 bug fixes. + +User visible bug fixes in this release include: + +o Correct issues with running Winbind runing on a Samba PDC. +o Problems with trusted Windows 2008 domains. +o Difficulty joining an NT4 or Windows 2000 AD domain. + + +## +Changes +### + +Changes since 3.0.30 + + +o Jeremy Allison <[EMAIL PROTECTED]> +* BUG 5504: Fix SIGTERM handling in Winbind children so that they + do not remove the unix domain socket used to field client requests. +* Split the winbindd_passdb backend into a 'builtin' and a 'sam' + backend. +* When allocating client buffers for large read/write - make sure we + take account of the large read/write SMB headers as well as the buffer + space. +* Memory leak fixes in DC location code. +* BUG 5533: Winbindd fails to cope correctly with a workgroup name + containing a '.' +* BUG : Don't return NT_STATUS_PASSWORD_MUST_CHANGE error on machine + account logon. +* BUG 5551: smbd recursing back into winbindd from a winbindd call. +* Fix usage message for "net rpc trustdom add". +* Ensure consistent use of pdb_get_nt_passwd instead of pdb_get_lanman_passwd. +* BUG 5578: Bad (non-Samba) use of strlcat gives error. +* Canonicalize servername in the printer functions to remove leading '\\' + characters. + + +o Alexander Bokovoy <[EMAIL PROTECTED]> +* Documentation build fixes. +* [DOCS] Fix use of smbconfoption in samba.entities. + + +o Gerald (Jerry) Carter <[EMAIL PROTECTED]> +* Return NULL in sitename_fetch() if gencache_init() fails. + + +o Steven Danneman <[EMAIL PROTECTED]> +* Use machine account and machine password from our domain when + contacting trusted domains. +* SPNEGO SPN fix when contacting trusted domains. + + +o Guenther Deschner <[EMAIL PROTECTED]> +* BUG 5285: Fix libcap header mismatch. +* Fix joining NT4 domains. +* Don't let winbind getgroups crash when we have no gids in the + token. +* Fallback to level 24 pwd set while joining. +* Fix joining w2k domains in "security = ads". +* Fix pam_sm_chauthtok for storing modified cached creds. + + +o SATOH Fumiyasu <[EMAIL PROTECTED]> +* BUG 5202: Re-activate "acl group control" parameter and make it + only apply to owning group. + + +o <[EMAIL PROTECTED]> +* BUG 5531: Fix conversion of ns units when converting from + nttime to timespec. + + +o Volker Lendecke <[EMAIL PROTECTED]> +* BUG 4974: Map NT_STATUS_OBJECT_PATH_NOT_FOUND to ENOENT in libsmbclient. +* Fix a segfault in base64_encode_data_blob. + + +o William Jojo <[EMAIL PROTECTED]> +* AIX build fixes. + + +o Herb Lewis <[EMAIL PROTECTED]> +* ENODATA is not defined in freeBSD 4.6.2. + + +o Jim McDonough <[EMAIL PROTECTED]> +* Don't reset password last set time just because the expired flag + is set to 0. + + +o Karolin Seeger <[EMAIL PROTECTED]> +* Fix usage message for 'net idmap dump'. +* Miscellaneous man page fixes. +* BUG 4203: Samba3-HOWTO: Add improvements/fixes submitted by Pete Boyd. + + +o John H Terpstra <[EMAIL PROTECTED]&g
svn commit: samba-web r1193 - in trunk: . history security
Author: jerry Date: 2008-05-28 14:51:43 + (Wed, 28 May 2008) New Revision: 1193 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1193 Log: Annmouncing 3.0.30 Added: trunk/history/samba-3.0.30.html trunk/security/CVE-2008-1105.html Modified: trunk/header_columns.html trunk/history/security.html trunk/index.html Changeset: Modified: trunk/header_columns.html === --- trunk/header_columns.html 2008-05-27 14:33:50 UTC (rev 1192) +++ trunk/header_columns.html 2008-05-28 14:51:43 UTC (rev 1193) @@ -130,9 +130,9 @@ Current Stable Release -Samba 3.0.29 (gzipped) -Release Notes -Signature +Samba 3.0.30 (gzipped) +Release Notes +Signature Historical Added: trunk/history/samba-3.0.30.html === --- trunk/history/samba-3.0.30.html 2008-05-27 14:33:50 UTC (rev 1192) +++ trunk/history/samba-3.0.30.html 2008-05-28 14:51:43 UTC (rev 1193) @@ -0,0 +1,54 @@ +http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> +http://www.w3.org/1999/xhtml";> + + +Samba - Release Notes Archive + + + + + Samba 3.0.30 Available for Download + + + + === + Release Notes for Samba 3.0.30 +May 28, 2008 + === + +This is a security release in order to address CVE-2008-1105 ("Boundary +failure when parsing SMB responses can result in a buffer overrun"). + + o CVE-2008-1105 +Specifically crafted SMB responses can result in a heap overflow +in the Samba client code. Because the server process, smbd, can +itself act as a client during operations such as printer notification +and domain authentication, this issue affects both Samba client +and server installations. + +The original security announcement for this and past advisories can +be found http://www.samba.org/samba/security/ + + +## +Changes +### + +Changes since 3.0.29 + + +o Jeremy Allison <[EMAIL PROTECTED]> +* Fix for CVE-2008-1105. + + +o Karolin Seeger <[EMAIL PROTECTED]> +* Remove man pages for ldb tools not included in Samba 3.0. + + +Please refer to the original Samba +3.0.29 Release Notes for more details regarding changes i +previous releases. + + + Property changes on: trunk/history/samba-3.0.30.html ___ Name: svn:executable + * Modified: trunk/history/security.html === --- trunk/history/security.html 2008-05-27 14:33:50 UTC (rev 1192) +++ trunk/history/security.html 2008-05-28 14:51:43 UTC (rev 1193) @@ -21,7 +21,17 @@ Details + +29 May 2008 +patch for Samba 3.0.29 +Boundary failure when parsing SMB responses +Samba 3.0.0 - 3.0.29 +http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1105";>CVE-2008-1105 +Announcement + + + 10 Dec 2007 patch for Samba 3.0.27a Remote Code Execution in Samba's nmbd (send_mailslot()) Modified: trunk/index.html === --- trunk/index.html2008-05-27 14:33:50 UTC (rev 1192) +++ trunk/index.html2008-05-28 14:51:43 UTC (rev 1193) @@ -19,6 +19,23 @@ Current Release +28 May 2008 +Samba 3.0.30 Available for Download + +This is a security release to address CVE-2008-1105. The + original advisory + is available online. A patch + for Samba 3.0.29 is available. This security advisory is applicable to all Samba 3.0.x + releases to date. Past security advisories are available on our + security page. + +The uncompressed tarballs and patch files have been signed +using GnuPG (ID 6568B7EA). The source code can be +downloaded +now. See the +release notes for more info. + + 23 May 2008 Samba 3.2.0rc1 Available for Download @@ -40,21 +57,6 @@ Binary_Packages download area. -21 May 2008 -Samba 3.0.29 Available for Download - -This is the latest bug fix release for Samba 3.0 and is the -version recommended for all production Samba servers. Among other -fixes and enhancements, this release address some interoperability -problems with Windows 2008, interdomain trusts, and SMB/CIFS -protocol correctness issues. - -The uncompressed tarballs and patch files have been signed -using GnuPG (ID 6568B7EA). The source code can be -downloaded -now. See the -release notes for more info. - 15 April 2008 Samba 4.0.0alpha3 Available for D
svn commit: samba-web r1189 - in trunk: .
Author: jerry Date: 2008-05-22 02:10:13 + (Thu, 22 May 2008) New Revision: 1189 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1189 Log: Announce 3.0.29 release Modified: trunk/header_columns.html trunk/index.html Changeset: Modified: trunk/header_columns.html === --- trunk/header_columns.html 2008-05-22 02:05:13 UTC (rev 1188) +++ trunk/header_columns.html 2008-05-22 02:10:13 UTC (rev 1189) @@ -130,9 +130,9 @@ Current Stable Release -Samba 3.0.28a (gzipped) -Release Notes -Signature +Samba 3.0.29 (gzipped) +Release Notes +Signature Historical Modified: trunk/index.html === --- trunk/index.html2008-05-22 02:05:13 UTC (rev 1188) +++ trunk/index.html2008-05-22 02:10:13 UTC (rev 1189) @@ -19,6 +19,22 @@ Current Release +21 May 2008 +Samba 3.0.29 Available for Download + +This is the latest bug fix release for Samba 3.0 and is the +version recommended for all production Samba servers. Among other +fixes and enhancements, this release address some interoperability +problems with Windows 2008, interdomain trusts, and SMB/CIFS +protocol correctness issues. + +The uncompressed tarballs and patch files have been signed +using GnuPG (ID 6568B7EA). The source code can be +downloaded +now. See the +release notes for more info. + + 25 April 2008 Samba 3.2.0pre3 Available for Download @@ -61,20 +77,6 @@ release notes for more information. -8 March 2008 -Samba 3.0.28a Available for Download - -This is the latest bug fix release for Samba 3.0 and is the -version recommended for all production Samba servers. Among other -fixes and enhancements, this release address some interoperability -problems with Windows Vista (including Service Pack 1 Release Candidates). - -The uncompressed tarballs and patch files have been signed -using GnuPG (ID 6568B7EA). The source code can be -downloaded -now. See the -release notes for more info. - http://samba.org/ is automatically redirected to one of our US mirrors. To change to a mirror closer to your location, choose a
svn commit: samba-web r1188 - in trunk/history: .
Author: jerry Date: 2008-05-22 02:05:13 + (Thu, 22 May 2008) New Revision: 1188 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1188 Log: Commit the 3.0.29 release announcement to the web site Added: trunk/history/samba-3.0.29.html Changeset: Added: trunk/history/samba-3.0.29.html === --- trunk/history/samba-3.0.29.html 2008-05-19 18:46:26 UTC (rev 1187) +++ trunk/history/samba-3.0.29.html 2008-05-22 02:05:13 UTC (rev 1188) @@ -0,0 +1,149 @@ +http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> +http://www.w3.org/1999/xhtml";> + + +Samba - Release Notes Archive + + + + + Samba 3.0.29 Available for Download + + + + === + Release Notes for Samba 3.0.29 +May 20, 2008 + === + +This is a bug fix release of the Samba 3.0 production series and is the +version that servers should be run for all current Samba 3.0 bug fixes. + +Major bug fixes included in Samba 3.0.29 are: + + o Problems following domain trusts on a Samba DC. + o SMB Signing errors. + o Interoperability issues with Windows 2008 domains. + + +## +Changes +### + +Changes since 3.0.28a +- + +o Michael Adam <[EMAIL PROTECTED]> +* Fix build for pam_smbpass. +* Fix a crash in tdb_wrap_log(). + + +o Jeremy Allison <[EMAIL PROTECTED]> +* BUG 5267: Fix for nmbd termination problems when no interfaces + found. +* BUG 5326: OS/2 servers give strange "high word" replies for + print jobs. +* Remove MS-DFS check that required the target host be ourself. +* BUG 5372: Fix high CPU usage of cupsd on large print servers + by using more efficient CUPS queries in smbd. +* Rewrite integer wrap checks to deal with gcc 4.x optimizations. +* BUG 5095: Fix the enforcement of the "Manage Documents" access right. +* Don't free memory from getpass() in mount.cifs. +* BUG 5460: Fix MS-DFS referral problem in server code. +* Fix bug in Winbind that caused the parent to ignore dead children. +* Fix compile warnings. + + +o Alexander Bokovoy <[EMAIL PROTECTED]> +* Fix build for pam_smbpass. +* Document build fixes. + + +o Kai Blin <[EMAIL PROTECTED]> +* BUG 4235: Improve compliance to the Squid helper protocol. + Original patch from Pawel Worach <[EMAIL PROTECTED]>. + + +o Gerald (Jerry) Carter <[EMAIL PROTECTED]> +* BUG 5107: Fix handling of large DNS replies on AIX and Solaris. + + +o Glenn Curtis <[EMAIL PROTECTED]> +* Prevent cycle in Wibind's list of children when reaping dead processes. + + +o Steven Danneman <[EMAIL PROTECTED]> +* BUG 5419: Fix memory leak in ads_do_search_all_args() (merge from v3-2). + + +o Guenther Deschner <[EMAIL PROTECTED]> +* Fix winbind NETLOGON credential chain on a samba dc for w2k8 trusts. +* Fix client connections and negotiation with Windows 2008 DCs + in member server code. +* Add NT_STATUS_DOWNGRADE_DETECTED error code (merge from v3-2). +* BUG 5430: Fix pam_winbind.so on Solaris (requires -lsocket). +* Re-add samr getdispinfoindex parsing which got lost in the glue commit. +* BUG 5461: Implement a very basic _samr_GetDisplayEnumerationIndex(). + Corrects interop problem between Citrix PM and a Samba DC. + + +o Bryan Kolodziej <[EMAIL PROTECTED]> +* BUG 3840: Fix smbclient connecting to NetApp filers when using + whitespace in the user's password. + + +o Volker Lendecke <[EMAIL PROTECTED]> +* BUG 4901: Fix behavior of "ldap passwd sync = only". +* BUG 5317: Fix debug output from domain_client_validate(). +* BUG 5338: Fix format string bug in rpcclient. +* Ensure that "wbinfo -a trusted\\user%password" works correctly + on a Samba DC with trusts. +* BUG 5336: Fix SetUsetrInfo(level 25) to update the pwdLastSet + attribute. +* BUG 5350: Fallback to anonymous sessions if not trust password + could be obtained on Samba DCs and member servers. +* BUG 5366: Fix password chat on Sun OpenSolaris (Nevada). +* Fix signing problem in the client with trans requests. + + +o Björn Jacke <[EMAIL PROTECTED]> +* Fix alignment bug hitting Solaris with "reset in zero vc" activated. + + +o Jim McDonough <[EMAIL PROTECTED]> +* Fix build with glibc 2.8. +* Enable winbind child processes to do something with signals, in + particular closing and reopening logs on SIGHUP. + + +o Karolin Seeger <[EMAIL PROTECTED]> +* Documentation cleanup after r emerging docs from svn to git and + back-porting from the v3-2
svn commit: samba-web r1186 - in trunk/mashup: .
Author: jerry Date: 2008-05-14 14:14:21 + (Wed, 14 May 2008) New Revision: 1186 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1186 Log: Adding SMR for May 14 Added: trunk/mashup/SMR-05-14-2008.html Changeset: Added: trunk/mashup/SMR-05-14-2008.html === --- trunk/mashup/SMR-05-14-2008.html2008-04-28 16:09:11 UTC (rev 1185) +++ trunk/mashup/SMR-05-14-2008.html2008-05-14 14:14:21 UTC (rev 1186) @@ -0,0 +1,130 @@ +http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> +http://www.w3.org/1999/xhtml";> + + +Samba Mashup Report (#2) - May 14, 2008 + + + + + Samba Mashup Report (#2) - May 14, 2008 + + + +Table of Contents: + + 1. Samba 3.2.0 Moves closer to Release + 2. Bug fix release for Samba 3.0 in the works + 3. Developer Interests - Volker Lendecke + 4. Samba at Connectathon + 5. Samba4 - Fact or Fantasy? + 6. Call for submissions and summaries + + +== +1. Samba 3.2.0 Moves closer to Release +== + +Samba 3.2.0 moves close to a final release as the first release +candidate snapshot is scheduled for May 23rd. Karolin Seeger +lists a few critical bugs yet to be fixed in her recent mail to +samba-technical. [1] + +[1] http://lists.samba.org/archive/samba-technical/2008-May/059085.html";>http://lists.samba.org/archive/samba-technical/2008-May/059085.html + + += +2. Bug fix release for Samba 3.0 in the works += + +A bug fix release for the Samba 3.0 series has been scheduled for +release on Monday, May 19. This will be a culmination of fixes +in the v3-0-test branch. The original announcement to the +samba-technical mailing list can be found in the list archives. [1] + +[1] http://lists.samba.org/archive/samba-technical/2008-May/059105.html";>http://lists.samba.org/archive/samba-technical/2008-May/059105.html + + + +3. Developer Interests - Volker Lendecke += + +SMR: Tell us about one of you pet side projects at the moment. + +VL: One particularly confusing part of Samba 3.x is the way we +represent the "current user" information. We have multiple +places where we represent the current credentials. For +example there is the "current_user" global variable. In +"connection_struct" we have sets of user-ids, there is +the "struct user_struct" and so on. I want to replace all +those places where we store and use the current user +information by passing around the central structure that +falls out of authentication: The "auth_serversupplied_info". + +SMR: Is there some reason you are focusing on this cleanup? + +VL: While trying to implement an ncacn_ip_tcp listener on port 135 +I realized that this needs to be consolidated. In an end-point +mapper, there is no such thing as a connection_struct or a vuid +which are very SMB/CIFS specific things. These things are +normally what smbd needs to tie back into the user tokens. It +seems to be a necessary refactoring to avoid the extra lookup +to find the current_user information, especially since the +traditionally used lookup key is not available in all +circumstances. + + + +4. Samba at Connectathon + + +It's that time of year when storage developers huddle together in +the many interop labs at Connectathon located in San Jose, CA. [1] + +Several Samba team members relocated to the labs this week in order +weed out defects in Samba and the Linux CIFS client. On hand for +testing are many flavors of SMB/CIFS clients and servers from various +companies. Already the first few days of testing have proven fruitful +with multiple issues tracked down and fixed for both the upcoming +Samba and Linux kernel releases. + +As part of the effort to broaden the use of the newer Unix Extensions +to the CIFS protocol, work has begun in the Linux CIFS client to take +advantage of the encrypted share support which Samba server now +provides. The Linux kernel version 2.6.26 cifs client will include +support for Microsoft's Distributed File System (MS-DFS) which is +also being tested this week. + +[1] http://www.connectathon.org/";>http://www.connectathon.org/ + + + +5. Samba4 - Fact or Fantasy? + + +In case you are wondering, the Samba v4-0-test branch is a combination +of fact and fantasy. Currently the code base is undergoing alpha +releases (i.e. development preview snapshots) and stands at +v4.0.0alpha3. Developers Andrew Bartlett and Jelmer Vernooij are +maintain their "Fantasy Page" which outlines their current w
svn commit: samba-web r1185 - in trunk: . mashup
Author: jerry Date: 2008-04-28 16:09:11 + (Mon, 28 Apr 2008) New Revision: 1185 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1185 Log: Adding the first edition of SMR Added: trunk/mashup/ trunk/mashup/SMR-04-28-2008.html Changeset: Added: trunk/mashup/SMR-04-28-2008.html === --- trunk/mashup/SMR-04-28-2008.html2008-04-25 16:26:38 UTC (rev 1184) +++ trunk/mashup/SMR-04-28-2008.html2008-04-28 16:09:11 UTC (rev 1185) @@ -0,0 +1,204 @@ +http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> +http://www.w3.org/1999/xhtml";> + + +Samba Mashup Report - April 28, 2008 + + + + + Samba Mashup Report - April 28, 2008 + + + +Table of Contents: + + 0. Greetings to the Inaugural SMR (samba Mashup Report) + 1. Plans in Motion for 6 Month Samba 3.x Release Cycles + 2. Samba 3.2.0pre3 Released + 3. Samba XP 2008 Concludes as YASC (yet another successful + conference) + 4. Samba Documentation repository moved from SVN to Git + 5. Bugzilla Day for Samba 3.2 scheduled for Friday, May 9. + 6. Call for developer reports + + +=== +0. Greetings to the Inaugural SMR (samba Mashup Report) +=== + +Several of Samba team members agreed during discussions +held at Samba XP (see article #3) that periodic thread +summaries from the recent development activities would +be helpful for keeping the community and Samba OEM vendors +up to date. So using editorial privilege, I've decided to +term these as mashup reports. + +According to the pop culture definition from Wikipedia, +mashup usually means: + +* A web application that combines data and/or + functionality from more than one source +* A musical genre of songs that consist entirely of + parts of other songs +* A video that is edited from more than one source + to appear as one +* In parts of the UK means a mash or pot of tea + (colloq. Yorkshire), other areas brew or stand tea + +The second and third definitions are probably the most +appropriate here. So without further ado, here's the +inaugural bi-weekly (give or take a few days) report. + +cheers, jerry + + + +1. Plans in Motion for 6 Month Release Cycle + + +Based on feedback from the community, Samba Team members have +agreed to put into place a six month release cycle on new +Samba 3.x releases. The initial 3.2 release will start the +clock on the next major development effort. + +In the thread beginning at [1], Jerry Carter (Samba Team +member) proposed: + +Once a new release cycle is done, that version goes +straight to bug fix mode and the next release cycle gets +a new minor release number. + +So for example, assume 3.2.0 is released in the next +30 days. The 3.2 releases are immediately in maintenance +mode meaning we can fix all the regressions and bugs we +like. But no new features. The next 6 month cycle clock +starts ticking and that becomes v3.3. + +Karolin (Seeger) will have the job of setting dates and +we have to stick to them. + +Christian Perrier (a Debian samba package maintainer) pointed +out this would be a lot of work and maybe not achievable. +Jim McDonough (Samba Team member) highlighted Jerry's main +point which is: + +...it will definitely require a mind shift from the "Wait, +we have to have _my_ major piece" mode that currently +dominates scheduling of releases. The developer who writes +the code has to decide if the code will be ready for the +schedule, rather than delaying the schedule (and everyone's +code) until the code is ready. + + +=== +2. Samba 3.2.0pre3 Released +=== + +The third Preview release of Samba 3.2.0 was released on +Friday, April 25 [2]. This is the last scheduled preview +release with an estimated date for RC1 set by Karolin Seeger +(Samba 3.2 release manager) of May 23 [3]. The number and +frequency of release candidates will be decided by the +quality and feedback from the community testers of the pre3 +release. + +And in preparation for committing to a 6 month release cycle, +the Samba 3.3 development branch has been created to stem +the rate of change in the 3.2 code [4][5]. Samba 3.3 is +tentatively scheduled for delivery sometime in December, 2008. + + + +=== +3. Samba XP 2008 Concludes as YASC (yet another + successful conference) +=== + +The seventh annual Samba eXPerience Conference concluded in +Goettingen, DE, on April 18th [6]. + +Talks were presented about topics such as: + +* Samba's relationship wi
Re: [SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-975-g7c2e735
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stefan (metze) Metzmacher wrote: >> commit 5c454e77cf664fee65fcb03e5811764c92e73696 >> Author: Gerald W. Carter <[EMAIL PROTECTED]> >> Date: Thu Apr 17 18:06:10 2008 +0200 >> >> Add wbcListTrusts() API call to libwbclient.so >> > > Hi Jerry, > > as this changes the wbcDomainInfo structure, > it might be useful to add some additional infos > about the online/offline status of the domain, > so that we can drop the seqnum stuff. I'm going to add another bitflag for the wbcDomainInfo->domain_flags field. Seems to be the most o0bvious place rather than a new field entirely. cheers, jerry - -- = Samba--- http://www.samba.org Likewise Software - http://www.likewisesoftware.com "What man is a man who does not make the world better?" --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIDiBXIR7qMdg1EfYRAqoRAJ0X6TN1krN/mRdUiRXlxi4LlQtUAQCeOATE 499H9w7oPKx72QupxyEA4uI= =hdMS -END PGP SIGNATURE-
svn commit: samba-docs r1255 - in trunk/manpages-3: .
Author: jerry Date: 2008-03-31 20:40:24 + (Mon, 31 Mar 2008) New Revision: 1255 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-docs&rev=1255 Log: Document --verbose option to wbinfo Modified: trunk/manpages-3/wbinfo.1.xml Changeset: Modified: trunk/manpages-3/wbinfo.1.xml === --- trunk/manpages-3/wbinfo.1.xml 2008-03-31 20:38:37 UTC (rev 1254) +++ trunk/manpages-3/wbinfo.1.xml 2008-03-31 20:40:24 UTC (rev 1255) @@ -49,6 +49,7 @@ -U uid -V -Y sid + --verbose @@ -309,6 +310,14 @@ + --verbose + + Print additional information about the query + results. + + + + -Y|--sid-to-gid sid Convert a SID to a UNIX group id. If the SID does not correspond to a UNIX group mapped by
svn commit: samba-docs r1254 - in trunk/manpages-3: .
Author: jerry Date: 2008-03-31 20:38:37 + (Mon, 31 Mar 2008) New Revision: 1254 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-docs&rev=1254 Log: Adding WinXP64 and Vista as documented values for %a in smb.conf(5) Modified: trunk/manpages-3/smb.conf.5.xml Changeset: Modified: trunk/manpages-3/smb.conf.5.xml === --- trunk/manpages-3/smb.conf.5.xml 2008-03-31 20:13:01 UTC (rev 1253) +++ trunk/manpages-3/smb.conf.5.xml 2008-03-31 20:38:37 UTC (rev 1254) @@ -481,14 +481,19 @@ %a - the architecture of the remote - machine. It currently recognizes Samba (Samba), - the Linux CIFS file system (CIFSFS), OS/2, (OS2), - Windows for Workgroups (WfWg), Windows 9x/ME - (Win95), Windows NT (WinNT), - Windows 2000 (Win2K), Windows XP (WinXP), - and Windows 2003 (Win2K3). Anything else will be known as - UNKNOWN. + + The architecture of the remote + machine. It currently recognizes Samba (Samba), + the Linux CIFS file system (CIFSFS), OS/2, (OS2), + Windows for Workgroups (WfWg), Windows 9x/ME + (Win95), Windows NT (WinNT), + Windows 2000 (Win2K), + Windows XP (WinXP), + Windows XP 64-bit(WinXP64), + Windows 2003 including + 2003R2 (Win2K3), and Windows + Vista (Vista). Anything else will be known as + UNKNOWN.
svn commit: samba-docs r1252 - in trunk/smbdotconf/winbind: .
Author: jerry Date: 2008-03-27 17:54:31 + (Thu, 27 Mar 2008) New Revision: 1252 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-docs&rev=1252 Log: Add rfc2307 as a valid value for winbind nss info parameter. Modified: trunk/smbdotconf/winbind/winbindnssinfo.xml Changeset: Modified: trunk/smbdotconf/winbind/winbindnssinfo.xml === --- trunk/smbdotconf/winbind/winbindnssinfo.xml 2008-03-07 00:40:07 UTC (rev 1251) +++ trunk/smbdotconf/winbind/winbindnssinfo.xml 2008-03-27 17:54:31 UTC (rev 1252) @@ -18,7 +18,7 @@ - sfu + <sfu | rfc2307 > - When Samba is running in security = ads and your Active Directory Domain Controller does support the Microsoft "Services for Unix" (SFU) LDAP schema, winbind can retrieve the login shell and the home
svn commit: samba-web r1175 - in trunk: . history
Author: jerry Date: 2008-03-08 16:58:05 + (Sat, 08 Mar 2008) New Revision: 1175 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1175 Log: Announcing 3.0.28a Added: trunk/history/samba-3.0.28a.html Modified: trunk/header_columns.html trunk/history/header_history.html trunk/index.html Changeset: Modified: trunk/header_columns.html === --- trunk/header_columns.html 2008-03-05 15:33:56 UTC (rev 1174) +++ trunk/header_columns.html 2008-03-08 16:58:05 UTC (rev 1175) @@ -130,9 +130,9 @@ Current Stable Release -Samba 3.0.28 (gzipped) -Release Notes -Signature +Samba 3.0.28a (gzipped) +Release Notes +Signature Historical Modified: trunk/history/header_history.html === --- trunk/history/header_history.html 2008-03-05 15:33:56 UTC (rev 1174) +++ trunk/history/header_history.html 2008-03-08 16:58:05 UTC (rev 1175) @@ -77,11 +77,11 @@ Release Notes +samba-3.0.28 samba-3.0.28 samba-3.0.27a samba-3.0.27 samba-3.0.26a -samba-3.0.26 samba-3.0.25c samba-3.0.25b samba-3.0.25a Added: trunk/history/samba-3.0.28a.html === --- trunk/history/samba-3.0.28a.html2008-03-05 15:33:56 UTC (rev 1174) +++ trunk/history/samba-3.0.28a.html2008-03-08 16:58:05 UTC (rev 1175) @@ -0,0 +1,217 @@ +http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> +http://www.w3.org/1999/xhtml";> + + +Samba - Release Notes Archive + + + + + Samba 3.0.28a Available for Download + + + + === + Release Notes for Samba 3.0.28a +Mar 8, 2008 + === + +This is the second production release of the Samba 3.0.28 code +base and is the version that servers should be run for for all +current bug fixes. + +Major bug fixes included in Samba 3.0.28a are: + + o Failure to join Windows 2008 domains + o Windows Vista (including SP1 RC) interop issues + + + +## +Changes +### + +smb.conf changes + + +Parameter Name Description Default +-- --- --- +administrative shareNew No +ldap debug levelNew 0 +ldap debug thresholdNew 10 + + +Changes since 3.0.28 + + +o Michael Adam <[EMAIL PROTECTED]> +* Fix bug in version string's vendor tag. +* Prevent net getdomainsid from crashing when called as non-root. +* BUG 4801: Correctly implement LSA lookup levels for LookupNames. +* Fixes for internal LookupNames() calls for unqualified users and + groups. +* Remove unnecessary functions when managing domain trust + passwords. +* Fix winbindd on a Samba DC talking to a trusted domain DC + (again). +* Consolidate the detection of the machine_account_name when + obtaining trust credentials from the local database. +* Refactor trust account database routines and session key + management. +* Fix retrieval of trusted domain password policies when + authenticating a user (only when WBFLAG_PAM_GET_PWD is config + flags is set). +* Refactor Winbind's cm_connect_sam(). +* Enable building the notify_fam module. +* Add "ldap debug level" and "ldap debug threshold" smb.conf options. + + +o Jeremy Allison <[EMAIL PROTECTED]> +* Fix cut-n-paste bug when filling in form values for Printer + info. +* Fix SMB signing bug found by Volker. +* Create locking.tdb when running smbstatus before smbd to avoid + confusing error messages. +* Add a portable version of strlcpy and strlcat. +* BUG 4780: Cause user mounts to inherit uid= and gid= from the + calling user when called as non-root, except when overridden on + the command line. Original patch by Steve Langasek. +* BUG 5802: Recent versions of Linux-PAM support localization of + user prompts, so Samba must use the C locale when invoking PAM +* Merge Vista principal detection changes by Andreas Schneider + from 3.2 branch. +* BUG 5121: Fix problems running unix passwd sync on streams based + systems. +* BUG 4612: Fix smbd crash when connecting from an OS/2 client. +* Back port Volker's ACL fixes on newly create files form 3.2. +* Ensure that send_getdc_request() matches the 3.2 code base. +* BUG 3617: Fix crash in nmbd caused by referencing freed memory. +* Fixes for issues reported by IBM checker. +* Fixes for iss
[SCM] Samba Shared Repository - branch v3-2-stable updated - initial-v3-2-test-1389-gef2e825
The branch, v3-2-stable has been updated via ef2e825e1fe5493115d2b271c2f4198e9e5b1f47 (commit) via 5a527476a07ea43178dc5afeaf8ad78da8a4080c (commit) via 642424b3779dd33cd2b5049789aa16e678438bb9 (commit) via 151b42a150a17f566e7b4055bbdbc0564a3c106d (commit) via 08c1720509dffa2886ed057e2d14907699122f3c (commit) via 7a3fe68bef7acde9d9f8a7a44ce7e9432f3c5a95 (commit) via 561e529a711338b2a3191f1b04f384f5ab3413ac (commit) via 58c806dbf85fd634c8f3559a035751a4cd0b5c4b (commit) via 15d0e574386e39a4d2fa61cd268b48dfa5c84dcb (commit) via 586d6cef521cebfd6fe2d433fdef498d4a59cb1b (commit) via d94bd3a03b574b3f62add25b0c04673500a3 (commit) via 0a914a55bab30d765872d72cfdd59889d2afe42a (commit) via f44f76415a7ce3ea73b5c52494f3b36feab4c870 (commit) via 7a48779ee5ec8bdd5e2b5eef94fd465f733b74b4 (commit) via 9a4b6fd3e21f54a0ff83f1fd0d0d5331a2cfdd0a (commit) via beaa83f32bd367f1b6ec72ef80a8a258d662f523 (commit) via 1941c365b50d48fc90f0f98059b8cccf6c7a1a06 (commit) from 04e0460c7e4adfe29a8c788e1912129c4c0c7e62 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log - commit ef2e825e1fe5493115d2b271c2f4198e9e5b1f47 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Jan 15 10:48:49 2008 -0600 Update release notes for vfs_ea_rename to complete the recent merge. commit 5a527476a07ea43178dc5afeaf8ad78da8a4080c Merge: 04e0460c7e4adfe29a8c788e1912129c4c0c7e62 642424b3779dd33cd2b5049789aa16e678438bb9 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Jan 15 10:47:07 2008 -0600 Merge commit 'samba/v3-2-test' into v3-2-stable --- Summary of changes: WHATSNEW.txt|2 +- source/Makefile.in | 13 +- source/configure.in |4 +- source/include/smb.h|2 + source/libnet/libnet.h |2 +- source/libnet/libnet_join.c | 16 +- source/libnet/libnet_join.h | 75 source/librpc/gen_ndr/libnet_join.h | 73 +++ source/librpc/gen_ndr/ndr_libnet_join.c | 103 + source/librpc/gen_ndr/ndr_libnet_join.h | 20 + source/librpc/idl/libnet_join.idl | 60 +++ source/librpc/ndr/ndr_basic.c | 11 + source/librpc/ndr/ndr_misc.c| 81 source/modules/vfs_ea_tdb.c | 736 -- source/modules/vfs_xattr_tdb.c | 737 +++ source/registry/reg_api.c | 25 +- source/rpc_client/cli_lsarpc.c |8 +- source/rpcclient/rpcclient.c|2 +- source/script/tests/selftest.sh |2 +- source/utils/net.h |2 +- source/utils/net_ads.c |7 +- source/utils/net_domain.c |2 +- source/utils/net_rpc.c | 11 +- source/utils/net_rpc_join.c |4 +- source/winbindd/winbindd_cm.c |6 +- 25 files changed, 1149 insertions(+), 855 deletions(-) delete mode 100644 source/libnet/libnet_join.h create mode 100644 source/librpc/gen_ndr/libnet_join.h create mode 100644 source/librpc/gen_ndr/ndr_libnet_join.c create mode 100644 source/librpc/gen_ndr/ndr_libnet_join.h create mode 100644 source/librpc/idl/libnet_join.idl delete mode 100644 source/modules/vfs_ea_tdb.c create mode 100644 source/modules/vfs_xattr_tdb.c Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 86f8ad9..253fe26 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -175,7 +175,7 @@ o Volker Lendecke <[EMAIL PROTECTED]> * Add generic a in-memory cache. * Import the Linux red-black tree implementation. * Remove large amount of global variables. -* Add vfs_ea_tdb module for file systems that do not implement xattrs. +* Add vfs_xattr_tdb module for file systems that do not implement xattrs. o Stefan Metzmacher <[EMAIL PROTECTED]> diff --git a/source/Makefile.in b/source/Makefile.in index 4260145..46f733c 100644 --- a/source/Makefile.in +++ b/source/Makefile.in @@ -268,7 +268,8 @@ LIBNDR_GEN_OBJ = librpc/gen_ndr/ndr_wkssvc.o \ librpc/gen_ndr/ndr_srvsvc.o \ librpc/gen_ndr/ndr_svcctl.o \ librpc/gen_ndr/ndr_eventlog.o \ -librpc/gen_ndr/ndr_notify.o +librpc/gen_ndr/ndr_notify.o \ +librpc/gen_ndr/ndr_libnet_join.o RPC_PARSE_OBJ0 = rpc_parse/parse_prs.o rpc_parse/parse_misc.o @@ -503,7 +504,7 @@ VFS_CAP_OBJ = modules/vfs_cap.o VFS_EXPAND_MSDFS_OBJ = modules/vfs_expand_msdfs.o VFS_SHADOW_COPY_OBJ = modules/vfs_shadow_copy.o VFS_AFSACL_OBJ = modules/vfs_afsacl.o -VFS_EA_TDB_OBJ = m
[SCM] Samba Shared Repository - branch v3-2-stable updated - initial-v3-2-test-1372-g04e0460
The branch, v3-2-stable has been updated via 04e0460c7e4adfe29a8c788e1912129c4c0c7e62 (commit) from 061c90fefef0e6093dfc3912d381cc306549ed4b (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log - commit 04e0460c7e4adfe29a8c788e1912129c4c0c7e62 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Jan 15 10:45:53 2008 -0600 Add notes from Michael Adam for the commit log in release notes --- Summary of changes: WHATSNEW.txt | 11 ++- 1 files changed, 10 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 53a1c84..86f8ad9 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -109,6 +109,7 @@ smb.conf changes client plaintext auth Changed Default No clustering New No cluster addresses New "" +debug class New No ctdb socketNew "" lanman authChanged Default No mangle map Removed @@ -124,10 +125,18 @@ Changes since 3.2.0pre1: --- o Michael Adam <[EMAIL PROTECTED]> -* Add vfs_zfsacl plugin. +* Add library for access to the registry configuration data. +* BUG 5023: Separate NFS4 and POSIX ACL code in file access checks. +* BUG 4308: Fix Excel save operation ACL bug. * Refactor and consolidate logic for retrieving the machine trust password information. +* VFS API cleanup. * BUG 4801: Correctly implement LSA lookup levels for LookupNames. +* Add new option "debug class" to control printing of the debug class. + in debug headers. +* Enable building of the zfsacl and notify_fam vfs modules. +* BUG 5083: Fix memleak in solarisacl module. +* BUG 5063: Fix build on RHEL5. o Jeremy Allison <[EMAIL PROTECTED]> -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-stable updated - initial-v3-2-test-1371-g061c90f
The branch, v3-2-stable has been updated via 061c90fefef0e6093dfc3912d381cc306549ed4b (commit) via 5adf38606b4c6918412a3da76e6fb3298ac585af (commit) via a5fb8b443a7c4ebf68ed005990683718c1092747 (commit) via ed559b4a59e826851cb9894f0e519eaedb523f9d (commit) via e37859164c35e8d908f3dfcc99226ee6773ba0a8 (commit) via 4f05b50d4c626f2c404bb4bfefb65998125b612f (commit) via 40aeb431604bd26fc543410de24593726ca0a01f (commit) via f21871c6d60e02ed53f060abbbfb2ef656cdc311 (commit) via 1a5b72daa36073cc0604211248d869bf0d7546c6 (commit) via 99e3e4b0dd0b0755189c1c740f2975bc75a0e28d (commit) via b66ac8567c16f2c35fceceba2f858d5503620309 (commit) via 2036b4c5ad677b8a477b34b0f076febab0abff5e (commit) via e6bd1395f2c1da7bcf1a31cdb297919ed6a15469 (commit) via 7cb81bfc6bcdd56a8886e18aa9a7e05ec963d33d (commit) via 7dd65599a15bf1d164fcfa554c8057d43c51eb6d (commit) via 9f05d2eae7c55d39ad61da54c4a38d6b6f8d4d3a (commit) via ef9b278b6289a9ecdd6b103927058f64fbb7eb97 (commit) via bb36b74a4e8fa63672031145b6d39d79468241d9 (commit) via a861ff20917eeca303e2d36de71cd8614e937d5f (commit) via 3f081ebeadf30a7943723703ecae479e0412c60c (commit) via 558ce4ec3eaa93c827316d92c346f35c140fadf0 (commit) via 44d67e84625a2a1a93baecef0e418b48e982443b (commit) via 94693755a291993217b5cb74794504a8593eae30 (commit) via 8b63a1665795d2739b54144212926113d9be7f09 (commit) via be8071779fa14d964e86810f5fb16bc52aea4e36 (commit) via 33f6eff92b6bdf804d54c84375cece8a867933f2 (commit) via b37b2b77edec72fc3f53b3461aa1c210e4366c1b (commit) via add28753b2e740804c48db5f6235cb2f8908d82b (commit) via dceb9a4c80fb241e12fafc6229aa8e81f5d2df1a (commit) from 6811ea1ce2d46f7303b4edf661e27d2edf54724f (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log - commit 061c90fefef0e6093dfc3912d381cc306549ed4b Merge: 5adf38606b4c6918412a3da76e6fb3298ac585af a5fb8b443a7c4ebf68ed005990683718c1092747 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Jan 15 07:59:23 2008 -0600 Merge commit 'samba/v3-2-test' into v3-2-stable commit 5adf38606b4c6918412a3da76e6fb3298ac585af Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Jan 15 07:59:18 2008 -0600 Add First draf of release notes. commit bb36b74a4e8fa63672031145b6d39d79468241d9 Merge: 6811ea1ce2d46f7303b4edf661e27d2edf54724f a861ff20917eeca303e2d36de71cd8614e937d5f Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Mon Jan 14 15:10:14 2008 -0600 Merge commit 'samba/v3-2-test' into v3-2-stable --- Summary of changes: WHATSNEW.txt | 136 +- source/Makefile.in | 26 +- source/configure.in|8 +- source/include/reg_objects.h |4 + source/include/rpc_lsa.h | 16 - source/lib/winbind_util.c |2 +- source/libads/kerberos.c |3 +- source/libnet/libnet_join.c| 134 +-- source/librpc/gen_ndr/cli_lsa.c| 20 +- source/librpc/gen_ndr/cli_lsa.h| 14 +- source/librpc/gen_ndr/lsa.h| 20 +- source/librpc/gen_ndr/ndr_lsa.c| 123 +- source/librpc/gen_ndr/ndr_lsa.h|1 + source/librpc/gen_ndr/ndr_xattr.c | 102 + source/librpc/gen_ndr/ndr_xattr.h | 16 + source/librpc/gen_ndr/xattr.h | 18 + source/librpc/idl/lsa.idl | 18 +- source/librpc/idl/xattr.idl| 23 + source/libsmb/clireadwrite.c |9 +- source/modules/vfs_ea_tdb.c| 736 source/nsswitch/libwbclient/wbc_err.h | 51 --- source/nsswitch/libwbclient/wbclient.h | 27 ++- source/nsswitch/winbind_nss_config.h |8 + source/pkgconfig/wbclient.pc.in| 13 + source/registry/reg_api.c |8 +- source/registry/reg_db.c | 29 ++- source/registry/reg_frontend_hilvl.c | 29 ++ source/registry/reg_printing.c |2 +- source/registry/reg_shares.c |2 +- source/registry/reg_smbconf.c |4 +- source/rpc_client/cli_lsarpc.c | 35 -- source/rpc_parse/parse_lsa.c | 58 --- source/script/fix_bool.pl | 19 + source/script/tests/selftest.sh|1 + source/script/tests/test_posix_s3.sh |2 +- source/utils/net_ads.c | 11 +- source/utils/net_dns.c |3 +- source/utils/net_rpc_audit.c | 182 38 files changed, 1560 insertions(+), 353 deletions(-) create mode 100644 source/librpc/gen_ndr/ndr_xattr.c create mode 100644 source/librpc/g
[SCM] Samba Shared Repository - annotated tag initial-v3-0-test created - initial-v3-0-test
The annotated tag, initial-v3-0-test has been created at 8dc54ea6d0e5bf00e069e52ef608baafc5f05ce2 (tag) tagging 65229e966119f0b1537d258854a54105f32ae399 (commit) replaces initial-v3-0-unstable tagged by Gerald (Jerry) Carter on Mon Jan 14 17:11:06 2008 -0600 - Log - Tagging initial v3-0-test branch after swapping from SVN. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQBHi+wgIR7qMdg1EfYRAt3nAKDvXxz7vKf7tndaCXugB1/Bux/1lACgwBGY YEA+XBcB5Lm4qnp7DcHXJIQ= =hEXV -END PGP SIGNATURE- Gerald (Jerry) Carter (1): [GLUE] Rsync SAMBA_3_0 SVN r25598 in order to create the v3-0-test branch. --- -- Samba Shared Repository
[SCM] Samba Shared Repository - annotated tag initial-v3-2-test created - initial-v3-2-test
The annotated tag, initial-v3-2-test has been created at 4cdd886813bd17c3df53f59d5531443e1bf8230b (tag) tagging 5c6c8e1fe93f340005110a7833946191659d88ab (commit) replaces initial-v3-2-unstable tagged by Gerald (Jerry) Carter on Mon Jan 14 15:12:38 2008 -0600 - Log - Tagging initial revision of v3-2-test branch for reference -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQBHi9BVIR7qMdg1EfYRAgTIAJ9h7csf2Aq6bieKWmHM7LKIIqrCFQCdHrCm Noo3Qq/YxjSKC3rrzXHK4WU= =r7EE -END PGP SIGNATURE- Gerald (Jerry) Carter (1): [GLUE] Rsync SAMBA_3_2_0 SVN r25598 in order to create the v3-2-test branch. --- -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-1352-ga861ff2
The branch, v3-2-test has been updated via a861ff20917eeca303e2d36de71cd8614e937d5f (commit) from 3f081ebeadf30a7943723703ecae479e0412c60c (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit a861ff20917eeca303e2d36de71cd8614e937d5f Author: Alexander Bokovoy <[EMAIL PROTECTED]> Date: Mon Jan 14 21:32:59 2008 +0300 Fix crash in winbind clients: instead of talloc-based pointer we passed address of a local variable. --- Summary of changes: source/lib/winbind_util.c |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source/lib/winbind_util.c b/source/lib/winbind_util.c index 3cf068a..14356b0 100644 --- a/source/lib/winbind_util.c +++ b/source/lib/winbind_util.c @@ -201,7 +201,7 @@ bool winbind_lookup_rids(TALLOC_CTX *mem_ctx, *types = TALLOC_ARRAY(mem_ctx, enum lsa_SidType, num_rids); for(i=0; i
[SCM] Samba Shared Repository - branch v3-2-stable updated - initial-v3-2-unstable-1343-g6811ea1
(commit) via 88102b5b7c4eaad5445e9cb96e547dd918abc0c2 (commit) via 7a88cd61e09f6db9db38916704ae65e03b33139c (commit) via c82c1d462be6ddccd6e395b4a9630df91dacbda2 (commit) via c8ae7d095a2a6a7eac920a68ca7244e3a423e1b1 (commit) via a8fc2ddad8d5f7c6c00cb36c74a32a02d69d1d04 (commit) via 87456d8eefe630ab6ac685524c4560a71764ea96 (commit) via dec77b387cd9024eb33bb0617c7543814e9c9212 (commit) from 22d2ff0bc4d1012cc3ffc7ab0fdbab5a8188a0cb (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log - commit 6811ea1ce2d46f7303b4edf661e27d2edf54724f Merge: 22d2ff0bc4d1012cc3ffc7ab0fdbab5a8188a0cb 99dd28da84c270f46535bd2ffa6bfef96d2e2eed Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Mon Jan 14 09:49:47 2008 -0600 Merge commit 'samba/v3-2-test' into v3-2-stable --- Summary of changes: examples/VFS/skel_opaque.c | 16 +- examples/VFS/skel_transparent.c| 16 +- examples/logon/genlogon/genlogon.pl|2 +- source/Makefile.in | 58 ++-- source/configure.in| 13 +- source/include/rpc_lsa.h | 153 --- source/include/vfs.h | 12 +- source/include/vfs_macros.h| 24 +- source/lib/dbwrap_rbt.c| 186 ++--- source/lib/dbwrap_tdb.c|3 +- source/lib/module.c|2 + source/lib/netapi/examples/getdc/getdc.c |2 +- .../examples/netdomjoin-gui/netdomjoin-gui.c |8 +- source/lib/netapi/examples/netdomjoin/netdomjoin.c |4 +- source/lib/netapi/joindomain.c |4 +- source/lib/netapi/netapi.c | 21 +- source/lib/netapi/netapi.h | 15 +- source/lib/netapi/serverinfo.c | 18 +- source/lib/tdb/common/freelist.c | 101 -- source/lib/tdb/common/io.c | 20 +- source/lib/tdb/common/lock.c |7 + source/lib/tdb/common/open.c | 11 +- source/lib/tdb/common/tdb.c| 77 - source/lib/tdb/common/tdb_private.h|8 +- source/lib/tdb/common/transaction.c| 408 +++ source/lib/tdb/common/traverse.c |3 + source/lib/tdb/configure.ac|2 +- source/lib/tdb/include/tdb.h |4 + source/libads/authdata.c |4 +- source/libads/kerberos_verify.c|3 +- source/libnet/libnet.h |1 + source/libnet/libnet_conf.c| 279 ++ source/libnet/{libnet.h => libnet_conf.h} | 13 +- source/libnet/libnet_join.c| 269 - source/libnet/libnet_join.h|2 + source/librpc/gen_ndr/dfs.h| 15 +- source/librpc/gen_ndr/echo.h | 10 +- source/librpc/gen_ndr/epmapper.h |5 +- source/librpc/gen_ndr/lsa.h| 22 +- source/librpc/gen_ndr/ndr_svcctl.c | 12 +- source/librpc/gen_ndr/ndr_wkssvc.c |2 + source/librpc/gen_ndr/netlogon.h | 21 +- source/librpc/gen_ndr/srvsvc.h | 14 +- source/librpc/gen_ndr/svcctl.h |5 +- source/librpc/gen_ndr/winreg.h | 12 +- source/librpc/gen_ndr/wkssvc.h | 17 +- source/librpc/idl/lsa.idl |2 +- source/librpc/idl/netlogon.idl |6 +- source/librpc/idl/samr.idl |4 +- source/librpc/idl/srvsvc.idl |4 +- source/librpc/idl/winreg.idl |2 +- source/librpc/idl/wkssvc.idl |2 +- source/libsmb/dsgetdcname.c| 76 ++-- source/libsmb/namequery.c | 13 +- source/locking/locking.c |8 +- source/modules/vfs_cacheprime.c| 21 +- source/modules/vfs_commit.c|3 +- source/modules/vfs_default.c | 31 +- source/modules/vfs_full_audit.c| 30 +- source/modules/vfs_readahead.c | 14 +- source/nmbd/nmbd_incomingdgrams.c |4 +- source/passdb/pdb_tdb.c|3 +- source/printing/nt_printing.c |7 +-
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-1068-ge7164a2
The branch, v3-2-test has been updated via e7164a252bf213a74d6eeac5aa04645eed5be241 (commit) via f89e356bdaa203ef0a3ce6b8bd52170afa68a2c9 (commit) via 2030a8de19a2c7c735a8aa367dd953e4a5c447b8 (commit) via ed30516bb0f55f9ba466debf91b6e33d1c28a484 (commit) from df5839b5376e903486982ddc7c4f4fbd4550c60a (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit e7164a252bf213a74d6eeac5aa04645eed5be241 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Jan 4 13:35:41 2008 -0600 Fix the inherited trust flags when spidering the trust heirarchy. Also *do not* clear the trust list when rescanning or else it is possible to suffer from a race condition where no trusted domains can be found. commit f89e356bdaa203ef0a3ce6b8bd52170afa68a2c9 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Jan 4 13:34:10 2008 -0600 Add a missing check for dealing with a one-way trust in query_user(). commit 2030a8de19a2c7c735a8aa367dd953e4a5c447b8 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Jan 4 13:32:58 2008 -0600 Ensure that winbindd_getgroups() can deal with a UPN name. A user logging in via GDM was not getting a complete list of supplementary groups in his/her token. This is because getgroup() was not able to find the winbindd_domain* using the DNS name. Fallback to matching the DNS name is the short name match failes. commit ed30516bb0f55f9ba466debf91b6e33d1c28a484 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Jan 4 13:31:07 2008 -0600 When connecting to an AD DC, use the DsGetDCName variant. This allows us to deal with child domains in transitive forest trusts. It also allows us to fill in the forest name to the target domain to the struct winbindd_domain *. --- Summary of changes: source/winbindd/winbindd_ads.c | 12 source/winbindd/winbindd_cm.c| 38 -- source/winbindd/winbindd_group.c | 11 ++- source/winbindd/winbindd_rpc.c |6 ++ source/winbindd/winbindd_util.c | 10 +++--- 5 files changed, 71 insertions(+), 6 deletions(-) Changeset truncated at 500 lines: diff --git a/source/winbindd/winbindd_ads.c b/source/winbindd/winbindd_ads.c index c9b2a52..3aba824 100644 --- a/source/winbindd/winbindd_ads.c +++ b/source/winbindd/winbindd_ads.c @@ -1270,12 +1270,24 @@ static NTSTATUS trusted_domains(struct winbindd_domain *domain, d.domain_type = domains[i].trust_type; d.domain_trust_attribs = domains[i].trust_attributes; } else { + /* Look up the record in the cache */ + struct winbindd_tdc_domain *parent; + DEBUG(10,("trusted_domains(ads): Inheriting trust " "flags for domain %s\n", d.alt_name)); + + parent = wcache_tdc_fetch_domain(NULL, domain->name); + if (parent) { + d.domain_flags = parent->trust_flags; + d.domain_type = parent->trust_type; + d.domain_trust_attribs = parent->trust_attribs; + } else { d.domain_flags = domain->domain_flags; d.domain_type = domain->domain_type; d.domain_trust_attribs = domain->domain_trust_attribs; } + TALLOC_FREE(parent); + } wcache_tdc_add_domain( &d ); diff --git a/source/winbindd/winbindd_cm.c b/source/winbindd/winbindd_cm.c index 33674d2..99e401d 100644 --- a/source/winbindd/winbindd_cm.c +++ b/source/winbindd/winbindd_cm.c @@ -601,8 +601,34 @@ static bool get_dc_name_via_netlogon(const struct winbindd_domain *domain, orig_timeout = cli_set_timeout(netlogon_pipe->cli, 35000); - werr = rpccli_netlogon_getanydcname(netlogon_pipe, mem_ctx, our_domain->dcname, + if (our_domain->active_directory) { + struct DS_DOMAIN_CONTROLLER_INFO *domain_info = NULL; + + werr = rpccli_netlogon_dsr_getdcname(netlogon_pipe, +mem_ctx, +our_domain->dcname, +domain->name, +
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-997-g5181684
The branch, v3-2-test has been updated via 518168410c49ac25085714c73e76dcf358fc4b68 (commit) from 761858312b3470ff2acc2980882bad534275c552 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 518168410c49ac25085714c73e76dcf358fc4b68 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Wed Jan 2 17:34:41 2008 -0600 Fix some C++ warnings (patch was Volker's) - implicit case from void* to char* --- Summary of changes: source/nsswitch/libwbclient/wbc_pwd.c |6 -- 1 files changed, 4 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source/nsswitch/libwbclient/wbc_pwd.c b/source/nsswitch/libwbclient/wbc_pwd.c index 4e3b0d3..5f7437b 100644 --- a/source/nsswitch/libwbclient/wbc_pwd.c +++ b/source/nsswitch/libwbclient/wbc_pwd.c @@ -228,7 +228,8 @@ wbcErr wbcGetgrnam(const char *name, struct group **grp) &response); BAIL_ON_WBC_ERROR(wbc_status); - *grp = copy_group_entry(&response.data.gr, response.extra_data.data); + *grp = copy_group_entry(&response.data.gr, + (char*)response.extra_data.data); BAIL_ON_PTR_ERROR(*grp, wbc_status); done: @@ -270,7 +271,8 @@ wbcErr wbcGetgrgid(gid_t gid, struct group **grp) &response); BAIL_ON_WBC_ERROR(wbc_status); - *grp = copy_group_entry(&response.data.gr, response.extra_data.data); + *grp = copy_group_entry(&response.data.gr, + (char*)response.extra_data.data); BAIL_ON_PTR_ERROR(*grp, wbc_status); done: -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-996-g7618583
The branch, v3-2-test has been updated via 761858312b3470ff2acc2980882bad534275c552 (commit) via f22c9d6296c754d472e8eab51caa058f55ef370e (commit) via 39c2059f66ee9eb471a503b9c776807b91c2a8f8 (commit) from 1b06ee69f6b737c1d6e7b29f8ae9621e6eb07d27 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 761858312b3470ff2acc2980882bad534275c552 Merge: 1b06ee69f6b737c1d6e7b29f8ae9621e6eb07d27 f22c9d6296c754d472e8eab51caa058f55ef370e Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Wed Jan 2 17:15:10 2008 -0600 Merge branch 'work/v3-2-test' into v3-2-test commit f22c9d6296c754d472e8eab51caa058f55ef370e Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Wed Jan 2 14:54:25 2008 -0600 use C99 bool return types (true & false). commit 39c2059f66ee9eb471a503b9c776807b91c2a8f8 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Wed Jan 2 14:50:59 2008 -0600 Make sure that wbcLookupSid() and wbcLookupRids() use talloc()'d memory. Follows existing convention that all returned memory should be freed with wbcFreeMemory() and not directly with free(). Noticed by Volker. Txs. --- Summary of changes: source/lib/winbind_util.c | 49 --- source/nsswitch/libwbclient/wbc_sid.c | 37 --- source/nsswitch/libwbclient/wbc_util.c |4 -- 3 files changed, 44 insertions(+), 46 deletions(-) Changeset truncated at 500 lines: diff --git a/source/lib/winbind_util.c b/source/lib/winbind_util.c index f51a017..3cf068a 100644 --- a/source/lib/winbind_util.c +++ b/source/lib/winbind_util.c @@ -35,12 +35,12 @@ bool winbind_lookup_name(const char *dom_name, const char *name, DOM_SID *sid, result = wbcLookupName(dom_name, name, &dom_sid, &type); if (result != WBC_ERR_SUCCESS) - return False; + return false; memcpy(sid, &dom_sid, sizeof(DOM_SID)); *name_type = (enum lsa_SidType)type; - return True; + return true; } /* Call winbindd to convert sid to name */ @@ -59,7 +59,7 @@ bool winbind_lookup_sid(TALLOC_CTX *mem_ctx, const DOM_SID *sid, result = wbcLookupSid(&dom_sid, &domain_name, &account_name, &type); if (result != WBC_ERR_SUCCESS) - return False; + return false; /* Copy out result */ @@ -74,16 +74,16 @@ bool winbind_lookup_sid(TALLOC_CTX *mem_ctx, const DOM_SID *sid, DEBUG(10, ("winbind_lookup_sid: SUCCESS: SID %s -> %s %s\n", sid_string_dbg(sid), domain_name, account_name)); - SAFE_FREE(domain_name); - SAFE_FREE(account_name); + wbcFreeMemory(domain_name); + wbcFreeMemory(account_name); if ((domain && !*domain) || (name && !*name)) { DEBUG(0,("winbind_lookup_sid: talloc() failed!\n")); - return False; + return false; } - return True; + return true; } /* Ping winbindd to see it is alive */ @@ -192,8 +192,9 @@ bool winbind_lookup_rids(TALLOC_CTX *mem_ctx, ret = wbcLookupRids(&dom_sid, num_rids, rids, &dom_name, &namelist, &name_types); - if (ret != WBC_ERR_SUCCESS) - return False; + if (ret != WBC_ERR_SUCCESS) { + return false; + } *domain_name = talloc_strdup(mem_ctx, dom_name); *names = TALLOC_ARRAY(mem_ctx, const char*, num_rids); @@ -202,13 +203,13 @@ bool winbind_lookup_rids(TALLOC_CTX *mem_ctx, for(i=0; i0; i++) { char ridstr[12]; @@ -356,15 +354,15 @@ wbcErr wbcLookupRids(struct wbcDomainSid *dom_sid, wbc_status = wbcRequestResponse(WINBINDD_LOOKUPRIDS, &request, &response); - free(ridlist); + talloc_free(ridlist); - domain_name = strdup(response.data.domain_name); + domain_name = talloc_strdup(NULL, response.data.domain_name); BAIL_ON_PTR_ERROR(domain_name, wbc_status); - *names = (const char**)malloc(sizeof(char*) * num_rids); + *names = talloc_array(NULL, const char*, num_rids); BAIL_ON_PTR_ERROR((*names), wbc_status); - *types = (enum wbcSidType*)malloc(sizeof(enum wbcSidType) * num_rids); + *types = talloc_array(NULL, enum wbcSidType, num_rids); BAIL_ON_PTR_ERROR((*types), wbc_status); p = (char *)response.extra_data.data; @@ -393,7 +391,8 @@ wbcErr wbcLookupRids(struct wbcDomainSid *dom_sid, *q = '\0'; -
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-701-g194c464
The branch, v3-2-test has been updated via 194c4640b158457a6d0d5ea91e28d41d619c77de (commit) from 7f6593cddef048dd05140b05d306c708d8134f0e (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 194c4640b158457a6d0d5ea91e28d41d619c77de Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Mon Dec 17 17:33:48 2007 -0600 Fix a segv in winbindd caused by trying to free an fstring. Make a copy of the machine_password and machine_account strings in all conditional paths so that SAFE_FREE() will always be valid. --- Summary of changes: source/winbindd/winbindd_cm.c |8 ++-- 1 files changed, 6 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source/winbindd/winbindd_cm.c b/source/winbindd/winbindd_cm.c index cb366a2..6c5633c 100644 --- a/source/winbindd/winbindd_cm.c +++ b/source/winbindd/winbindd_cm.c @@ -2005,11 +2005,15 @@ NTSTATUS cm_connect_sam(struct winbindd_domain *domain, TALLOC_CTX *mem_ctx, domain_name = domain->name; goto schannel; } else { - machine_password = conn_pwd; - machine_account = conn->cli->user_name; + machine_password = SMB_STRDUP(conn_pwd); + machine_account = SMB_STRDUP(conn->cli->user_name); domain_name = conn->cli->domain; } + if (!machine_password || !machine_account) { + result = NT_STATUS_NO_MEMORY; + goto done; + } /* We have an authenticated connection. Use a NTLMSSP SPNEGO authenticated SAMR pipe with sign & seal. */ -- Samba Shared Repository
[SCM] Samba Shared Repository - annotated tag release-3-0-28 updated - release-3-0-28
The annotated tag, release-3-0-28 has been updated to 2823e00caae9aa7498e6f697cc7ec23db0974633 (tag) from 4e73bbd9dd682db9d49b5a074d8dd8c78d81a2e2 (which is now obsolete) tagging 06160682fba61e97c9837d1c074bb73d449f6e72 (commit) replaces release-3-0-27a tagged by Gerald (Jerry) Carter on Mon Dec 10 10:00:49 2007 -0600 - Log - Tagging Samba 3.0.28 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQBHXWK7IR7qMdg1EfYRAnCcAKCtacIxn/R2zgo69b0X8kQsAHvlHgCfaVWW jz1sPzvnQTbjmQw2BHVmFSg= =XcBh -END PGP SIGNATURE- Gerald (Jerry) Carter (11): Copy the full release notes from the 3.0.27 tag. Update release notes for the 3.0.27a release. Set version to 3.0.27a-GIT--stable Merge commit 'release-3-0-27a' into v3-0-stable Fix from Volker for CVE-2007-6015 (send_mailslot() buffer overrun). Fix from Jeremy for CVE-2007-6015 (send_mailslot() buffer overrun). Set release version to 3.0.28. Update release notes for 3.0.28 Remove "-stable" vendor suffix from release Additional fixes for SAMBA_VERSION_VENDOR_PATCH in lib/version.c Correct typos in the name of the CVE-2007-6015 references Michael Adam (1): Adapt VERSION to use SAMBA_VERSION_VENDOR_PATCH instead of Volker Lendecke (1): Correctly unbecome_root() on error --- -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-0-stable updated - release-3-0-28-1-g0616068
The branch, v3-0-stable has been updated via 06160682fba61e97c9837d1c074bb73d449f6e72 (commit) from 5cc2baea238b49b99d69099a12c3c02ac4860a52 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-stable - Log - --- Summary of changes: WHATSNEW.txt | 12 ++-- 1 files changed, 6 insertions(+), 6 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index bd4fe02..9e023d1 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -6,7 +6,7 @@ Samba 3.0.28 is a security release in order to address the following defect: - o CVS-2007-6015 + o CVE-2007-6015 Boundary failure in GETDC mailslot processing can result in a buffer overrun @@ -21,10 +21,10 @@ Changes since 3.0.27a - o Jeremy Allison <[EMAIL PROTECTED]> -* Fix for CVS-2007-0615. +* Fix for CVE-2007-6015. o Volker Lendecke <[EMAIL PROTECTED]> -* Fix for CVS-2007-0615. +* Fix for CVE-2007-6015. * Add missing unbecome_root() calls in error path processing when failing to add local groups in create_local_nt_token(). @@ -131,7 +131,7 @@ o Martin Zielinski <[EMAIL PROTECTED]> Samba 3.0.27 is a security release in order to address the following defects: - o CVS-2007-4572 + o CVE-2007-4572 Stack buffer overflow in nmbd's logon request processing. o CVE-2007-5398 @@ -149,12 +149,12 @@ Changes since 3.0.26a - o Jeremy Allison <[EMAIL PROTECTED]> -* Fix for CVS-2007-4572. +* Fix for CVE-2007-4572. * Fix for CVE-2007-5398. o Simo Sorce <[EMAIL PROTECTED]> -* Additional fixes for CVS-2007-4572. +* Additional fixes for CVE-2007-4572. -- -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-0-test updated - release-3-0-28-17-g46a7806
The branch, v3-0-test has been updated via 46a780679b87132dbf76af3e684c2124b33a1edc (commit) via 06160682fba61e97c9837d1c074bb73d449f6e72 (commit) from 452e964995afe5a43040c8bdcadc9c45a1e1d007 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-test - Log - commit 46a780679b87132dbf76af3e684c2124b33a1edc Merge: 452e964995afe5a43040c8bdcadc9c45a1e1d007 06160682fba61e97c9837d1c074bb73d449f6e72 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Mon Dec 10 09:59:46 2007 -0600 Merge branch 'v3-0-stable' into v3-0-test --- Summary of changes: WHATSNEW.txt | 12 ++-- 1 files changed, 6 insertions(+), 6 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index bd4fe02..9e023d1 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -6,7 +6,7 @@ Samba 3.0.28 is a security release in order to address the following defect: - o CVS-2007-6015 + o CVE-2007-6015 Boundary failure in GETDC mailslot processing can result in a buffer overrun @@ -21,10 +21,10 @@ Changes since 3.0.27a - o Jeremy Allison <[EMAIL PROTECTED]> -* Fix for CVS-2007-0615. +* Fix for CVE-2007-6015. o Volker Lendecke <[EMAIL PROTECTED]> -* Fix for CVS-2007-0615. +* Fix for CVE-2007-6015. * Add missing unbecome_root() calls in error path processing when failing to add local groups in create_local_nt_token(). @@ -131,7 +131,7 @@ o Martin Zielinski <[EMAIL PROTECTED]> Samba 3.0.27 is a security release in order to address the following defects: - o CVS-2007-4572 + o CVE-2007-4572 Stack buffer overflow in nmbd's logon request processing. o CVE-2007-5398 @@ -149,12 +149,12 @@ Changes since 3.0.26a - o Jeremy Allison <[EMAIL PROTECTED]> -* Fix for CVS-2007-4572. +* Fix for CVE-2007-4572. * Fix for CVE-2007-5398. o Simo Sorce <[EMAIL PROTECTED]> -* Additional fixes for CVS-2007-4572. +* Additional fixes for CVE-2007-4572. -- -- Samba Shared Repository
svn commit: samba-web r1161 - in trunk/history: .
Author: jerry Date: 2007-12-10 15:57:19 + (Mon, 10 Dec 2007) New Revision: 1161 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1161 Log: Fix typo in release notes for 3.0.28 Modified: trunk/history/samba-3.0.28.html Changeset: Modified: trunk/history/samba-3.0.28.html === --- trunk/history/samba-3.0.28.html 2007-12-10 15:45:46 UTC (rev 1160) +++ trunk/history/samba-3.0.28.html 2007-12-10 15:57:19 UTC (rev 1161) @@ -20,7 +20,7 @@ Samba 3.0.28 is a security release in order to address the following defect: - o CVS-2007-6015 + o CVE-2007-6015 Boundary failure in GETDC mailslot processing can result in a buffer overrun @@ -35,10 +35,10 @@ - o Jeremy Allison <[EMAIL PROTECTED]> -* Fix for CVS-2007-0615. +* Fix for CVE-2007-6015. o Volker Lendecke <[EMAIL PROTECTED]> -* Fix for CVS-2007-0615. +* Fix for CVE-2007-6015. * Add missing unbecome_root() calls in error path processing when failing to add local groups in create_local_nt_token().
svn commit: samba-web r1160 - in trunk/history: .
Author: jerry Date: 2007-12-10 15:45:46 + (Mon, 10 Dec 2007) New Revision: 1160 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1160 Log: Fix bad link in mitre.org link for CVE-2007-6015 Modified: trunk/history/security.html Changeset: Modified: trunk/history/security.html === --- trunk/history/security.html 2007-12-10 15:37:34 UTC (rev 1159) +++ trunk/history/security.html 2007-12-10 15:45:46 UTC (rev 1160) @@ -26,7 +26,7 @@ patch for Samba 3.0.27a Remote Code Execution in Samba's nmbd (send_mailslot()) Samba 3.0.0 - 3.0.27a -http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0615";>CVE-2007-6015 +http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6015";>CVE-2007-6015 Announcement
svn commit: samba-web r1159 - in trunk/security: .
Author: jerry Date: 2007-12-10 15:37:34 + (Mon, 10 Dec 2007) New Revision: 1159 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1159 Log: Adding original security advisory for CVE-2007-6015 Added: trunk/security/CVE-2007-6015.html Changeset: Added: trunk/security/CVE-2007-6015.html === --- trunk/security/CVE-2007-6015.html 2007-12-10 15:33:46 UTC (rev 1158) +++ trunk/security/CVE-2007-6015.html 2007-12-10 15:37:34 UTC (rev 1159) @@ -0,0 +1,85 @@ +http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> +http://www.w3.org/1999/xhtml";> + + +Samba - Security Announcement Archive + + + + + CVE-2007-6015 - Remote Code Execution in Samba's nmbd (send_mailslot()) + + + +== +== +== Subject: Boundary failure in GETDC mailslot +== processing can result in a buffer overrun +== +== CVE ID#: CVE-2007-6015 +== +== Versions:Samba 3.0.0 - 3.0.27a (inclusive) +== +== Summary: Specifically crafted GETDC mailslot requests +== can trigger a boundary error in the domain +== controller GETDC mail slot support which +== can be remotely exploited to execute arbitrary +== code. +== +== + +=== +Description +=== + +Secunia Research reported a vulnerability that allows for +the execution of arbitrary code in nmbd. This defect is +only be exploited when the "domain logons" parameter has +been enabled in smb.conf. + + +== +Patch Availability +== + +A patch addressing this defect has been posted to + + http://www.samba.org/samba/security/ + +Additionally, Samba 3.0.28 has been issued as a security +release to correct the defect. + + +== +Workaround +== + +Samba administrators may avoid this security issue by disabling +both the "domain logons" options in the server's smb.conf file. +Note that this will disable all domain controller features as +well. + + +=== +Credits +=== + +This vulnerability was reported to Samba developers by +Alin Rad Pop, Secunia Research. + +The time line is as follows: + +* Nov 22, 2007: Initial report to [EMAIL PROTECTED] +* Nov 22, 2007: First response from Samba developers confirming + the bug along with a proposed patch. +* Dec 10, 2007: Public security advisory made available. + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +
svn commit: samba-web r1158 - in trunk: . history
Author: jerry Date: 2007-12-10 15:33:46 + (Mon, 10 Dec 2007) New Revision: 1158 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1158 Log: Announce Samba 3.0.28 Added: trunk/history/samba-3.0.28.html Modified: trunk/header_columns.html trunk/history/header_history.html trunk/history/security.html trunk/index.html Changeset: Modified: trunk/header_columns.html === --- trunk/header_columns.html 2007-11-23 13:26:41 UTC (rev 1157) +++ trunk/header_columns.html 2007-12-10 15:33:46 UTC (rev 1158) @@ -129,9 +129,9 @@ Current Stable Release -Samba 3.0.27a (gzipped) -Release Notes -Signature +Samba 3.0.28 (gzipped) +Release Notes +Signature Historical Modified: trunk/history/header_history.html === --- trunk/history/header_history.html 2007-11-23 13:26:41 UTC (rev 1157) +++ trunk/history/header_history.html 2007-12-10 15:33:46 UTC (rev 1158) @@ -77,6 +77,7 @@ Release Notes +samba-3.0.28 samba-3.0.27a samba-3.0.27 samba-3.0.26a Added: trunk/history/samba-3.0.28.html === --- trunk/history/samba-3.0.28.html 2007-11-23 13:26:41 UTC (rev 1157) +++ trunk/history/samba-3.0.28.html 2007-12-10 15:33:46 UTC (rev 1158) @@ -0,0 +1,51 @@ +http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> +http://www.w3.org/1999/xhtml";> + + +Samba - Release Notes Archive + + + + + Samba 3.0.28 Available for Download + + + + == + Release Notes for Samba 3.0.28 +Dec 10, 2007 + == + +Samba 3.0.28 is a security release in order to address the following +defect: + + o CVS-2007-6015 +Boundary failure in GETDC mailslot processing can result in +a buffer overrun + +The original security announcement for this and past advisories can +be found http://www.samba.org/samba/security/ + +## +Changes +### + +Changes since 3.0.27a +- + +o Jeremy Allison <[EMAIL PROTECTED]> +* Fix for CVS-2007-0615. + +o Volker Lendecke <[EMAIL PROTECTED]> +* Fix for CVS-2007-0615. +* Add missing unbecome_root() calls in error path processing + when failing to add local groups in create_local_nt_token(). + + +Please refer to the original Samba +3.0.27a Release Notes for more details regarding changes in +previous releases. + + + Property changes on: trunk/history/samba-3.0.28.html ___ Name: svn:executable + * Modified: trunk/history/security.html === --- trunk/history/security.html 2007-11-23 13:26:41 UTC (rev 1157) +++ trunk/history/security.html 2007-12-10 15:33:46 UTC (rev 1158) @@ -22,6 +22,15 @@ +10 Dec 2007 +patch for Samba 3.0.27a +Remote Code Execution in Samba's nmbd (send_mailslot()) +Samba 3.0.0 - 3.0.27a +http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0615";>CVE-2007-6015 +Announcement + + + 15 Nov 2007 patch for Samba 3.0.26a Remote Code Execution in Samba's nmbd Modified: trunk/index.html === --- trunk/index.html2007-11-23 13:26:41 UTC (rev 1157) +++ trunk/index.html2007-12-10 15:33:46 UTC (rev 1158) @@ -19,18 +19,17 @@ Current Release -20 Nov 2007 -Samba 3.0.27a Available for Download +10 Dec 2007 +Samba 3.0.28 Available for Download -Samba 3.0.27a is a bug fix release and is the current release - for production servers running the Samba 3.0 series. +Samba 3.0.28 is a security release to address CVE-2007-6015. -The Samba 3.0.27a source code - (GPG +The Samba 3.0.28 source code + (GPG signature) can be downloaded now. If you prefer, the - patch + patch file against previous releases - (GPG + (GPG signature) is also available for download. Please read these instructions on how to verify the gpg signature. Precompiled packages will
[SCM] Samba Shared Repository - annotated tag release-3-0-28 created - release-3-0-28
The annotated tag, release-3-0-28 has been created at 4e73bbd9dd682db9d49b5a074d8dd8c78d81a2e2 (tag) tagging 5cc2baea238b49b99d69099a12c3c02ac4860a52 (commit) replaces release-3-0-27a tagged by Gerald (Jerry) Carter on Mon Dec 10 09:31:46 2007 -0600 - Log - Tagging Samba 3.0.28 release -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQBHXVvsIR7qMdg1EfYRAqLTAKDLXQzyGYXCSPMeyitMGPWT2zimhgCgpEBz VovsQ1GTD5h3Z/2CEJXYzxk= =ujU0 -END PGP SIGNATURE- Gerald (Jerry) Carter (10): Copy the full release notes from the 3.0.27 tag. Update release notes for the 3.0.27a release. Set version to 3.0.27a-GIT--stable Merge commit 'release-3-0-27a' into v3-0-stable Fix from Volker for CVE-2007-6015 (send_mailslot() buffer overrun). Fix from Jeremy for CVE-2007-6015 (send_mailslot() buffer overrun). Set release version to 3.0.28. Update release notes for 3.0.28 Remove "-stable" vendor suffix from release Additional fixes for SAMBA_VERSION_VENDOR_PATCH in lib/version.c Michael Adam (1): Adapt VERSION to use SAMBA_VERSION_VENDOR_PATCH instead of Volker Lendecke (1): Correctly unbecome_root() on error --- -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-0-stable updated - release-3-0-27a-12-g5cc2bae
The branch, v3-0-stable has been updated via 5cc2baea238b49b99d69099a12c3c02ac4860a52 (commit) via 82bd5484ad502f2afdb771a27a12a39459cb2ec0 (commit) via e1abd8c2265dd63d5de388e7d8047c80204bb36e (commit) via 1f7b4c72d953d2fc9d18eb96a4c7739ae36b5a3d (commit) via 62197dd367e7c04759560f395f554b2bfda90d78 (commit) via 64547bd884668d801c3ac48ff3374bf02a2d0959 (commit) via b14aa30006033d9dbaa8120bc419406535d620b8 (commit) via 6a9610ba27f802136f1ca8a94816d552df17a166 (commit) from 2b4189175a4e54c922136dbfb35c276730a4039a (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-stable - Log - --- Summary of changes: WHATSNEW.txt | 39 +++ source/VERSION | 10 +- source/auth/auth_util.c|2 ++ source/lib/version.c |6 +++--- source/libsmb/clidgram.c |6 ++ source/nmbd/nmbd_packets.c |6 ++ 6 files changed, 57 insertions(+), 12 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 9b5494c..bd4fe02 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,3 +1,38 @@ + == + Release Notes for Samba 3.0.28 +Dec 10, 2007 + == + +Samba 3.0.28 is a security release in order to address the following +defect: + + o CVS-2007-6015 +Boundary failure in GETDC mailslot processing can result in +a buffer overrun + +The original security announcement for this and past advisories can +be found http://www.samba.org/samba/security/ + +## +Changes +### + +Changes since 3.0.27a +- + +o Jeremy Allison <[EMAIL PROTECTED]> +* Fix for CVS-2007-0615. + +o Volker Lendecke <[EMAIL PROTECTED]> +* Fix for CVS-2007-0615. +* Add missing unbecome_root() calls in error path processing + when failing to add local groups in create_local_nt_token(). + + +Release notes for older releases follow: + + -- + === Release Notes for Samba 3.0.27a Nov 20, 2007 @@ -86,8 +121,6 @@ o Martin Zielinski <[EMAIL PROTECTED]> -Release notes for older releases follow: - -- == @@ -124,8 +157,6 @@ o Simo Sorce <[EMAIL PROTECTED]> * Additional fixes for CVS-2007-4572. -Release notes for older releases follow: - -- === Release Notes for Samba 3.0.26a diff --git a/source/VERSION b/source/VERSION index 4a0e3bd..d80ff13 100644 --- a/source/VERSION +++ b/source/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=0 -SAMBA_VERSION_RELEASE=27 +SAMBA_VERSION_RELEASE=28 # Bug fix releases use a letter for the patch revision # @@ -36,7 +36,7 @@ SAMBA_VERSION_RELEASE=27 # e.g. SAMBA_VERSION_REVISION=a# # -> "2.2.8a"# -SAMBA_VERSION_REVISION=a +SAMBA_VERSION_REVISION= # For 'pre' releases the version will be # @@ -68,7 +68,7 @@ SAMBA_VERSION_RC_RELEASE= # e.g. SAMBA_VERSION_IS_SVN_SNAPSHOT=yes # # -> "3.0.0-SVN-build-199" # -SAMBA_VERSION_IS_GIT_SNAPSHOT=yes +SAMBA_VERSION_IS_GIT_SNAPSHOT= # This can be set by vendors if they want... # @@ -95,5 +95,5 @@ SAMBA_VERSION_IS_GIT_SNAPSHOT=yes # e.g. SAMBA_VERSION_VENDOR_SUFFIX=vendor_version()# # -> "CVS 3.0.0rc2-VendorVersion"# -SAMBA_VERSION_VENDOR_SUFFIX="stable" -SAMBA_VENDOR_PATCH= +SAMBA_VERSION_VENDOR_SUFFIX= +SAMBA_VERSION_VENDOR_PATCH= diff --git a/source/auth/auth_util.c b/source/auth/auth_util.c index 6fbec48..32224fa 100644 --- a/source/auth/auth_util.c +++ b/source/auth/auth_util.c @@ -956,6 +956,7 @@ static struct nt_user_token *create_local_nt_token(TALLOC_CTX *mem_ctx, status = add_aliases(get_global_sam_sid(), result); if (!NT_STATUS_IS_OK(status)) { + unbecome_root();
[SCM] Samba Shared Repository - branch v3-0-test updated - release-3-0-27a-27-g452e964
The branch, v3-0-test has been updated via 452e964995afe5a43040c8bdcadc9c45a1e1d007 (commit) via 5cc2baea238b49b99d69099a12c3c02ac4860a52 (commit) via 82bd5484ad502f2afdb771a27a12a39459cb2ec0 (commit) via f5afd08483dec2bd1c53c10550e512e12ebe4ab1 (commit) via e1abd8c2265dd63d5de388e7d8047c80204bb36e (commit) via 1f7b4c72d953d2fc9d18eb96a4c7739ae36b5a3d (commit) via 62197dd367e7c04759560f395f554b2bfda90d78 (commit) via 64547bd884668d801c3ac48ff3374bf02a2d0959 (commit) via b14aa30006033d9dbaa8120bc419406535d620b8 (commit) via 6a9610ba27f802136f1ca8a94816d552df17a166 (commit) from 9c0590cbca8128a76300d0e5b3f5b8e479d8080f (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-test - Log - commit 452e964995afe5a43040c8bdcadc9c45a1e1d007 Merge: f5afd08483dec2bd1c53c10550e512e12ebe4ab1 5cc2baea238b49b99d69099a12c3c02ac4860a52 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Mon Dec 10 09:30:23 2007 -0600 Merge branch 'v3-0-stable' into v3-0-test commit f5afd08483dec2bd1c53c10550e512e12ebe4ab1 Merge: 9c0590cbca8128a76300d0e5b3f5b8e479d8080f e1abd8c2265dd63d5de388e7d8047c80204bb36e Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Mon Dec 10 08:34:15 2007 -0600 Merge branch 'v3-0-stable' into v3-0-test Resolved conflicts in source/VERSION. --- Summary of changes: WHATSNEW.txt | 39 +++ source/VERSION |4 ++-- source/lib/version.c |6 +++--- source/libsmb/clidgram.c |6 ++ source/nmbd/nmbd_packets.c |6 ++ 5 files changed, 52 insertions(+), 9 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 9b5494c..bd4fe02 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,3 +1,38 @@ + == + Release Notes for Samba 3.0.28 +Dec 10, 2007 + == + +Samba 3.0.28 is a security release in order to address the following +defect: + + o CVS-2007-6015 +Boundary failure in GETDC mailslot processing can result in +a buffer overrun + +The original security announcement for this and past advisories can +be found http://www.samba.org/samba/security/ + +## +Changes +### + +Changes since 3.0.27a +- + +o Jeremy Allison <[EMAIL PROTECTED]> +* Fix for CVS-2007-0615. + +o Volker Lendecke <[EMAIL PROTECTED]> +* Fix for CVS-2007-0615. +* Add missing unbecome_root() calls in error path processing + when failing to add local groups in create_local_nt_token(). + + +Release notes for older releases follow: + + -- + === Release Notes for Samba 3.0.27a Nov 20, 2007 @@ -86,8 +121,6 @@ o Martin Zielinski <[EMAIL PROTECTED]> -Release notes for older releases follow: - -- == @@ -124,8 +157,6 @@ o Simo Sorce <[EMAIL PROTECTED]> * Additional fixes for CVS-2007-4572. -Release notes for older releases follow: - -- === Release Notes for Samba 3.0.26a diff --git a/source/VERSION b/source/VERSION index 1f38b98..4095e11 100644 --- a/source/VERSION +++ b/source/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=0 -SAMBA_VERSION_RELEASE=27 +SAMBA_VERSION_RELEASE=28 # Bug fix releases use a letter for the patch revision # @@ -36,7 +36,7 @@ SAMBA_VERSION_RELEASE=27 # e.g. SAMBA_VERSION_REVISION=a# # -> "2.2.8a"# -SAMBA_VERSION_REVISION=b +SAMBA_VERSION_REVISION=a # For 'pre' releases the version will be # diff --git a/source/lib/version.c b/source/lib/version.c index ee8c3eb..93fd108 100644 --- a/source/lib/version.c +++ b/source/lib/version.c @@ -28,7 +28,7 @@ const char *samba_version_string(void) #else static fstring samba_version; static BOOL init_samba_version; -#ifdef SAMBA_VENDOR_PATCH +#ifdef SAMBA_VERSION_VENDOR_PATCH fstring tmp_version; si
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-497-g487ab6e
The branch, v3-2-test has been updated via 487ab6e75e8b8d15f2a37e4ba4129eb2475d4c86 (commit) from 2a1755327f6cef6c969308e9ebcb238048535533 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 487ab6e75e8b8d15f2a37e4ba4129eb2475d4c86 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Wed Dec 5 11:52:35 2007 -0600 Compile fix to the automount support. Patch from GlaDiaC. --- Summary of changes: source/lib/util.c |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source/lib/util.c b/source/lib/util.c index f51761a..f0ea6c8 100644 --- a/source/lib/util.c +++ b/source/lib/util.c @@ -1384,7 +1384,7 @@ char *automount_lookup(TALLOC_CTX *ctx, const char *user_name) if ((nis_error = yp_get_default_domain(&nis_domain)) != 0) { DEBUG(3, ("YP Error: %s\n", yperr_string(nis_error))); - return last_value; + return NULL; } DEBUG(5, ("NIS Domain: %s\n", nis_domain)); -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-351-g30c9e35
The branch, v3-2-test has been updated via 30c9e3557bf4ca0b85e15bd7cc883391aec42f1f (commit) via 6b62b7dbab559ffc0047790c7ec68c1b30f0eff0 (commit) from 6f9c2910bdda605f90967e0aa6a84b8094f3a197 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 30c9e3557bf4ca0b85e15bd7cc883391aec42f1f Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Wed Nov 21 10:27:22 2007 -0600 Allocate a talloc_stackframe() in main() for wbinfo. commit 6b62b7dbab559ffc0047790c7ec68c1b30f0eff0 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Wed Nov 21 10:27:01 2007 -0600 Fix unresolved symbols in smbumount from addition of talloc_stackframe(). --- Summary of changes: source/Makefile.in |5 +++-- source/nsswitch/wbinfo.c |4 +++- 2 files changed, 6 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/source/Makefile.in b/source/Makefile.in index 0ed7b4e..db6f123 100644 --- a/source/Makefile.in +++ b/source/Makefile.in @@ -735,7 +735,8 @@ MOUNT_OBJ = client/smbmount.o \ MNT_OBJ = client/smbmnt.o $(VERSION_OBJ) $(LIBREPLACE_OBJ) $(SOCKET_WRAPPER_OBJ) -UMOUNT_OBJ = client/smbumount.o $(SOCKET_WRAPPER_OBJ) +UMOUNT_OBJ = client/smbumount.o $(SOCKET_WRAPPER_OBJ) $(PARAM_OBJ) $(LIBSMB_OBJ) \ +$(KRBCLIENT_OBJ) $(LIB_NONSMBD_OBJ) $(SECRETS_OBJ) CIFS_MOUNT_OBJ = client/mount.cifs.o @@ -1188,7 +1189,7 @@ bin/[EMAIL PROTECTED]@: $(BINARY_PREREQS) $(MNT_OBJ) bin/[EMAIL PROTECTED]@: $(BINARY_PREREQS) $(UMOUNT_OBJ) @echo Linking $@ - @$(CC) $(FLAGS) -o $@ $(UMOUNT_OBJ) $(DYNEXP) $(LDFLAGS) + @$(CC) $(FLAGS) -o $@ $(UMOUNT_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) $(KRB5LIBS) $(LDAP_LIBS) bin/[EMAIL PROTECTED]@: $(BINARY_PREREQS) $(CIFS_MOUNT_OBJ) @echo Linking $@ diff --git a/source/nsswitch/wbinfo.c b/source/nsswitch/wbinfo.c index 2a1fe61..488a080 100644 --- a/source/nsswitch/wbinfo.c +++ b/source/nsswitch/wbinfo.c @@ -1273,7 +1273,7 @@ enum { int main(int argc, char **argv, char **envp) { int opt; - + TALLOC_CTX *frame = talloc_stackframe(); poptContext pc; static char *string_arg; static char *opt_domain_name; @@ -1613,6 +1613,8 @@ int main(int argc, char **argv, char **envp) /* Exit code */ done: + talloc_destroy(frame); + poptFreeContext(pc); return result; } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-0-stable updated - release-3-0-27a-4-g2b41891
The branch, v3-0-stable has been updated via 2b4189175a4e54c922136dbfb35c276730a4039a (commit) via 7fe4b24fcebe231843149fd8f7dbe5676812367d (commit) via d6c3df20e8f6656da40b1baba4618d0220c1a4c1 (commit) via cd416a1df851d6098795ada33c2ca84cc4889dcb (commit) from 6abe6a6c4034ded26c33417bed6824f3aac6f334 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-stable - Log - commit 2b4189175a4e54c922136dbfb35c276730a4039a Merge: 6abe6a6c4034ded26c33417bed6824f3aac6f334 7fe4b24fcebe231843149fd8f7dbe5676812367d Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Wed Nov 21 07:38:19 2007 -0600 Merge commit 'release-3-0-27a' into v3-0-stable Resolved Conflicts: source/VERSION commit 7fe4b24fcebe231843149fd8f7dbe5676812367d Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Nov 20 21:55:27 2007 -0600 Update release notes for the 3.0.27a release. commit d6c3df20e8f6656da40b1baba4618d0220c1a4c1 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Nov 20 18:19:32 2007 -0600 Copy the full release notes from the 3.0.27 tag. Some parts were somehow different. commit cd416a1df851d6098795ada33c2ca84cc4889dcb Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Nov 20 17:44:25 2007 -0600 Setting release version to 3.0.27a --- Summary of changes: source/VERSION |4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source/VERSION b/source/VERSION index 280bd9b..4a0e3bd 100644 --- a/source/VERSION +++ b/source/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=0 -SAMBA_VERSION_RELEASE=27a +SAMBA_VERSION_RELEASE=27 # Bug fix releases use a letter for the patch revision # @@ -36,7 +36,7 @@ SAMBA_VERSION_RELEASE=27a # e.g. SAMBA_VERSION_REVISION=a# # -> "2.2.8a"# -SAMBA_VERSION_REVISION= +SAMBA_VERSION_REVISION=a # For 'pre' releases the version will be # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-0-test updated - initial-v3-0-unstable-33-g761876c
The branch, v3-0-test has been updated via 761876cdfd3805575de422a51fa1514edefea160 (commit) from 487186624bbe67a5cbbe7f48be031edf4e52bd4f (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-test - Log - commit 761876cdfd3805575de422a51fa1514edefea160 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Wed Nov 21 07:13:14 2007 -0600 Set version to 3.0.27b-GIT--test --- Summary of changes: source/VERSION |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source/VERSION b/source/VERSION index 002f246..9f6a524 100644 --- a/source/VERSION +++ b/source/VERSION @@ -36,7 +36,7 @@ SAMBA_VERSION_RELEASE=27 # e.g. SAMBA_VERSION_REVISION=a# # -> "2.2.8a"# -SAMBA_VERSION_REVISION= +SAMBA_VERSION_REVISION=b # For 'pre' releases the version will be # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-0-stable updated - initial-v3-0-unstable-33-g6abe6a6
The branch, v3-0-stable has been updated via 6abe6a6c4034ded26c33417bed6824f3aac6f334 (commit) from 487186624bbe67a5cbbe7f48be031edf4e52bd4f (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-stable - Log - commit 6abe6a6c4034ded26c33417bed6824f3aac6f334 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Wed Nov 21 07:12:08 2007 -0600 Set version to 3.0.27a-GIT--stable --- Summary of changes: source/VERSION |4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source/VERSION b/source/VERSION index 002f246..280bd9b 100644 --- a/source/VERSION +++ b/source/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=0 -SAMBA_VERSION_RELEASE=27 +SAMBA_VERSION_RELEASE=27a # Bug fix releases use a letter for the patch revision # @@ -95,5 +95,5 @@ SAMBA_VERSION_IS_GIT_SNAPSHOT=yes # e.g. SAMBA_VERSION_VENDOR_SUFFIX=vendor_version()# # -> "CVS 3.0.0rc2-VendorVersion"# -SAMBA_VERSION_VENDOR_SUFFIX="test" +SAMBA_VERSION_VENDOR_SUFFIX="stable" SAMBA_VENDOR_PATCH= -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-0-stable updated - initial-v3-0-unstable-32-g4871866
The branch, v3-0-stable has been updated via 487186624bbe67a5cbbe7f48be031edf4e52bd4f (commit) via 30eb456bc2e261f561f02a867309d62fff9a20a6 (commit) via 9acd56a247abdc1334fa011063940db6e0d65370 (commit) via 21e6405e0ca811fc5c74441c38f059ff41dc0c42 (commit) via 8ad2826c48a0d4d26abc3bb209860c776f55822f (commit) via 56b012b1c4dc48434bf5ae9cb8459bd7ad33d2a1 (commit) via 62a1c825b2cd702cc439c5f07fa36386b2260052 (commit) via e56ee680c34f77497a436b8021b51fe296bcc322 (commit) via 6d3734aa74ce68ca340640aa478ec920af578e1b (commit) via 72be9cc495d796d700281c047b152ba909f6fd2b (commit) via ea97a10df5732dfcc931197a01d6446ed92b7658 (commit) via 183eea4909d6678ac382eac16a5873a1fa3fd065 (commit) via 14ecfecbdf3e631f87d83337e06060724deb7756 (commit) via 63918ac0f0a3767237210182f0f35840db87242c (commit) via 96e61fb89caa9e9d500c3006b83299a7938d0af7 (commit) via 99eea67a5a1114e499ece00f8b68ccbf2ec4ae75 (commit) via a7c6fe1e3cb4d66a48f43a49fe31778adace2332 (commit) via 1cdf89a02af6e7a2deed3f59519af97c10dbdaa3 (commit) via 3480b42be1adc7c2876a77e8260049447338c3ff (commit) via c3fbfc37b578b8107be1f585cf6e3e2d001f7ab1 (commit) via 8cb09fe2d923fabbb6a7b909cc245c08128c0b67 (commit) via 26d8a1ad20c10da495970c584983fbd261b4946e (commit) via f37f19f817874e885e70456328e0d3693fc24c9c (commit) via d2a42b4b53362bd3873467ad8849a5e884c818d2 (commit) via 918dd7dfd4d6611079d430f9df45fcc53d675682 (commit) via efe56c9de5b4e451917388c126ae9f6c6bd58970 (commit) via 5ec7b9f8b9941c1a0adcd10d52fdffc893c1b1a1 (commit) via 02cf5380e2deec1eaf10e8c1f393a1ddeee181d9 (commit) via 0fa0c924bbea430de9ea2f38ed9d6f4d6dff2fef (commit) via 0f633851537b689b0ac57b041d97115b6158546f (commit) via b16e4e16340eaa8d93651ba816937e8040b85e95 (commit) from 65229e966119f0b1537d258854a54105f32ae399 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-stable - Log - commit 487186624bbe67a5cbbe7f48be031edf4e52bd4f Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Nov 20 21:55:27 2007 -0600 Update release notes for the 3.0.27a release. (cherry picked from commit 7fe4b24fcebe231843149fd8f7dbe5676812367d) commit 30eb456bc2e261f561f02a867309d62fff9a20a6 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Nov 20 18:19:32 2007 -0600 Copy the full release notes from the 3.0.27 tag. Some parts were somehow different. (cherry picked from commit d6c3df20e8f6656da40b1baba4618d0220c1a4c1) commit 9acd56a247abdc1334fa011063940db6e0d65370 Author: Simo Sorce <[EMAIL PROTECTED]> Date: Tue Nov 20 18:19:54 2007 -0500 32/64 bit compatibility fix this patch fixes platform where 32 and 64 bit apps can run at the same time fixed in and tested in Fedora: https://bugzilla.redhat.com/show_bug.cgi?id=253036 commit 21e6405e0ca811fc5c74441c38f059ff41dc0c42 Author: Jeremy Allison <[EMAIL PROTECTED]> Date: Tue Nov 20 14:06:50 2007 -0800 Don't overrun directory listings by incorrectly calculating end-of-data. Syncs up with 3.2.0. Jerry - this should fix the profile bug. Jeremy. commit 8ad2826c48a0d4d26abc3bb209860c776f55822f Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Nov 20 13:24:03 2007 -0600 Prevent segv in winbindd running on a DC using the "idmap backend" syntax. The number of domains should be counted as they are added and not assumed to match the loop counter. commit 56b012b1c4dc48434bf5ae9cb8459bd7ad33d2a1 Author: Jeremy Allison <[EMAIL PROTECTED]> Date: Mon Nov 19 15:27:11 2007 -0800 Ensure every use of push_ascii checks for error -1 condition. Ensure that is zero termination is requested that it is applied if there's space. Jeremy. commit 62a1c825b2cd702cc439c5f07fa36386b2260052 Author: Jeremy Allison <[EMAIL PROTECTED]> Date: Mon Nov 19 12:02:11 2007 -0800 Back-port fix for bug found by kukks - Samba adding non-initialized name to IP mapping. Jeremy. commit e56ee680c34f77497a436b8021b51fe296bcc322 Author: Jeremy Allison <[EMAIL PROTECTED]> Date: Sun Nov 18 15:06:53 2007 -0800 Fix remaining calls to srvstr_push -1 - noticed by Simo (thanks !) Jeremy. commit 6d3734aa74ce68ca340640aa478ec920af578e1b Author: Michael Adam <[EMAIL PROTECTED]> Date: Sat Oct 20 02:17:07 2007 +0200 Fix for Bug #5023 (separate access check from posix_acls code) The three can_* access check functions in smbd/posix_acls.c that are used in smbd/open.c and smbd/nttrans.c explicitly called check_posix_acl_group_access() This lead to errors with nfsv4 acls (e.g. ZFS and GPFS). This changes the can_* functions to
svn commit: samba-web r1156 - in trunk/history: .
Author: jerry Date: 2007-11-21 04:38:20 + (Wed, 21 Nov 2007) New Revision: 1156 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1156 Log: Fix the link to the 3.0.27 release notes Modified: trunk/history/samba-3.0.27a.html Changeset: Modified: trunk/history/samba-3.0.27a.html === --- trunk/history/samba-3.0.27a.html2007-11-21 04:16:07 UTC (rev 1155) +++ trunk/history/samba-3.0.27a.html2007-11-21 04:38:20 UTC (rev 1156) @@ -99,7 +99,7 @@ -Please refer to the original Samba +Please refer to the original Samba 3.0.27 Release Notes for more details regarding changes in previous releases.
[SCM] Samba Shared Repository - branch v3-0-test updated - initial-v3-0-unstable-32-g4871866
The branch, v3-0-test has been updated via 487186624bbe67a5cbbe7f48be031edf4e52bd4f (commit) via 30eb456bc2e261f561f02a867309d62fff9a20a6 (commit) from 9acd56a247abdc1334fa011063940db6e0d65370 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-test - Log - commit 487186624bbe67a5cbbe7f48be031edf4e52bd4f Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Nov 20 21:55:27 2007 -0600 Update release notes for the 3.0.27a release. (cherry picked from commit 7fe4b24fcebe231843149fd8f7dbe5676812367d) commit 30eb456bc2e261f561f02a867309d62fff9a20a6 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Nov 20 18:19:32 2007 -0600 Copy the full release notes from the 3.0.27 tag. Some parts were somehow different. (cherry picked from commit d6c3df20e8f6656da40b1baba4618d0220c1a4c1) --- Summary of changes: WHATSNEW.txt | 129 +++--- 1 files changed, 123 insertions(+), 6 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index d208c07..9b5494c 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,3 +1,95 @@ + === + Release Notes for Samba 3.0.27a + Nov 20, 2007 + === + +Samba 3.0.27a is a bug fix release and is the current release +for production servers running the Samba 3.0 series. + +Important fixes in 3.0.27a include: + + o A crash bug regression experienced by smbfs clients caused +by the fix for CVE-2007-4572. + + + +## +Changes +### + +Changes since 3.0.27 + + +o Michael Adam <[EMAIL PROTECTED]> +* BUG 4308: Add missing become_root/unbecome_root around calls of + add_aliases. Add same changes in create_token_from_username() + surrounding the call to getsampwsid(). +* BUG 5083: Make solarisacl_sys_acl_get_fd() return a result when + there is one (thereby fixing a memleak). +* BUG 5023: Fix smbd's interaction with NFSv4 ACL compatible VFS + plugins such as GPFS and ZFS. + + +o Jeremy Allison <[EMAIL PROTECTED]> +* BUG 4978: Ensure that DOS attributes are copied with folders. +* Fix bug where tdb lock call interrupted with an alarm sig would + not terminate and could lead to runaway smbd processes. +* Fix smbd crash bug which resulted from a regression in the patch + for CVE-2007-4572 patch. +* Prevent nmbd from adding non-initialized name to IP address + mappings to it's WINS database. + + +o Dmitry Butskoy <[EMAIL PROTECTED]> +* Properly catch errors in the query_user() callback to avoid + generated struct passwd replies with zero length usernames. + + +o Gerald (Jerry) Carter <[EMAIL PROTECTED]> +* Prevent segv in winbindd running on a DC using the "idmap + backend" syntax. + + +o Steve Langasek <[EMAIL PROTECTED]> +* BUG 4781: Allow cleaning of /etc/mtab by canonicalizing mountpoint. + + +o Volker Lendecke <[EMAIL PROTECTED]> +* BUG 4028: Fix message popup sent via "smbclient -M". +* BUG 4984: Filename unix_convert() fixes for WinNT 4.0 clients. + + +o Stefan Metzmacher <[EMAIL PROTECTED]> +* Fix crash bug in pidl generated client code caused by + [in,out,unique] pointers. +* Fix crash bug in the group mapping code. + + +o Heinrich Mislik <[EMAIL PROTECTED]> +* Fixes for AIX quota support. + + +o Tomasz Ostrowski <[EMAIL PROTECTED]> +* BUG 4393: Prevent smbclient from dropping 0 bytes files from tar + archives. + + +o Simo Sorce <[EMAIL PROTECTED]> +* Fixes for internal idmap domain list when "winbind trusted + domains only" is enabled. +* Fix 32/64-bit compatibility issues in the winbind request/response + structures. + + +o Martin Zielinski <[EMAIL PROTECTED]> +* Error code path fix for get_mydnsdomname(). + + + +Release notes for older releases follow: + + -- + == Release Notes for Samba 3.0.27 Nov 15, 2007 @@ -265,13 +357,9 @@ o Atsushi Nakabayashi <[EMAIL PROTECTED]> -- === Release Notes for Samba 3.0.25b - June 20, 2007 + June 26, 2007 === -This is the third production release of the Samba 3.0.25 code -base a
svn commit: samba-docs r1209 - in tags: .
Author: jerry Date: 2007-11-21 04:19:33 + (Wed, 21 Nov 2007) New Revision: 1209 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-docs&rev=1209 Log: Tagging 3.0.27a docs Added: tags/release-3-0-27a/ Changeset: Copied: tags/release-3-0-27a (from rev 1208, tags/release-3-0-26a)
svn commit: samba-docs r1208 - in tags: .
Author: jerry Date: 2007-11-21 04:19:26 + (Wed, 21 Nov 2007) New Revision: 1208 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-docs&rev=1208 Log: Tagging 3.0.27 docs Added: tags/release-3-0-27/ Changeset: Copied: tags/release-3-0-27 (from rev 1207, tags/release-3-0-26a)
[SCM] Samba Shared Repository - annotated tag release-3-0-27a created - release-3-0-27a
The annotated tag, release-3-0-27a has been created at 7f8f8d3ef26eae34ed0491cf53d4628e121d5533 (tag) tagging 7fe4b24fcebe231843149fd8f7dbe5676812367d (commit) replaces initial-v3-0-unstable tagged by Gerald (Jerry) Carter on Tue Nov 20 22:18:03 2007 -0600 - Log - Tagging 3.0.27a -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQBHQ7GEIR7qMdg1EfYRAndqAKCD3gnPJy3XJD8few7R5ke7yawFkACfXwiq rKb5XzF8rSKcxQeo/7d2RZw= =MkEg -END PGP SIGNATURE- Gerald (Jerry) Carter (12): [GLUE] Rsync SAMBA_3_0 SVN r25598 in order to create the v3-0-test branch. Ensure we catch an error in the query_user() reply in the receive function. Merge branch 'v3-0-test' of git://git.samba.org/samba into v3-0-test Fix for CVE-2007-5398. Fix for CVE-2007-4572 Set version to 3.0.27a Pull in release notes from 3.0.27 to the v3-0 development branch Set release to 3.0.27a in development branch Prevent segv in winbindd running on a DC using the "idmap backend" syntax. Setting release version to 3.0.27a Copy the full release notes from the 3.0.27 tag. Update release notes for the 3.0.27a release. Jeremy Allison (8): Fix warning messages for unused variables. Fix bug where tdb lock call interrupted with Fix smbfs to not trigger our paranoid checker. Fix for bug 4393 smbclient does not store files with zero filesize in tar-archives Fix remaining calls to srvstr_push -1 - noticed Back-port fix for bug found by kukks - Samba adding Ensure every use of push_ascii checks for error -1 condition. Don't overrun directory listings by incorrectly calculating Michael Adam (5): Add become_root/unbecome_root around one call of getsampwsid() Add .gitignore file from v3-2-test. Fix bug #5083 (and duplicate bug #5084). Fix for bug #4781: allow cleaning of /etc/mtab by canonicalizing mountpoint. Fix for Bug #5023 (separate access check from posix_acls code) Simo Sorce (3): Fix default domains support using compat syntax. Fix dimap for trusted domains only case 32/64 bit compatibility fix Stefan Metzmacher (5): cleanup and extent .gitignore prepare the mkversion.sh infrastructure for git branches in the build-farm SAMBA_VERSION_VENDOR_SUFFIX="test" fix crash bug in pidl generated client code, this [crash fix] don't use already free'ed memory --- -- Samba Shared Repository
svn commit: samba-web r1155 - in trunk: . download history
Author: jerry Date: 2007-11-21 04:16:07 + (Wed, 21 Nov 2007) New Revision: 1155 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1155 Log: Announce 3.0.27a. Added: trunk/history/samba-3.0.27a.html Modified: trunk/download/index.html trunk/header_columns.html trunk/history/header_history.html trunk/index.html Changeset: Modified: trunk/download/index.html === --- trunk/download/index.html 2007-11-16 14:21:54 UTC (rev 1154) +++ trunk/download/index.html 2007-11-21 04:16:07 UTC (rev 1155) @@ -19,7 +19,7 @@ $ gpg --import samba-pubkey.asc $ gunzip samba-version.tar.gz $ gpg --verify samba-release.tar.asc -gpg: Signature made Tue 26 Nov 2002 07:12:04 PM CST using DSA key ID 2F87AF6F +gpg: Signature made Tue 20 Nov 2007 07:12:04 PM CST using DSA key ID 6568B7EA gpg: Good signature from "Samba Distribution Verification Key‹samba-bugs@samba.org› Modified: trunk/header_columns.html === --- trunk/header_columns.html 2007-11-16 14:21:54 UTC (rev 1154) +++ trunk/header_columns.html 2007-11-21 04:16:07 UTC (rev 1155) @@ -129,9 +129,9 @@ Current Stable Release -Samba 3.0.27 (gzipped) -Release Notes -Signature +Samba 3.0.27a (gzipped) +Release Notes +Signature Historical Modified: trunk/history/header_history.html === --- trunk/history/header_history.html 2007-11-16 14:21:54 UTC (rev 1154) +++ trunk/history/header_history.html 2007-11-21 04:16:07 UTC (rev 1155) @@ -77,6 +77,7 @@ Release Notes +samba-3.0.27a samba-3.0.27 samba-3.0.26a samba-3.0.26 Added: trunk/history/samba-3.0.27a.html === --- trunk/history/samba-3.0.27a.html2007-11-16 14:21:54 UTC (rev 1154) +++ trunk/history/samba-3.0.27a.html2007-11-21 04:16:07 UTC (rev 1155) @@ -0,0 +1,107 @@ +http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> +http://www.w3.org/1999/xhtml";> + + +Samba - Release Notes Archive + + + + + Samba 3.0.27a Available for Download + + + + === + Release Notes for Samba 3.0.27a + Nov 20, 2007 + === + +Samba 3.0.27a is a bug fix release and is the current release +for production servers running the Samba 3.0 series. + +Important fixes in 3.0.27a include: + + o A crash bug regression experienced by smbfs clients caused +by the fix for CVE-2007-4572. + + +## +Changes +### + +Changes since 3.0.27 + + +o Michael Adam <[EMAIL PROTECTED]> +* BUG 4308: Add missing become_root/unbecome_root around calls of + add_aliases. Add same changes in create_token_from_username() + surrounding the call to getsampwsid(). +* BUG 5083: Make solarisacl_sys_acl_get_fd() return a result when + there is one (thereby fixing a memleak). +* BUG 5023: Fix smbd's interaction with NFSv4 ACL compatible VFS + plugins such as GPFS and ZFS. + + +o Jeremy Allison <[EMAIL PROTECTED]> +* BUG 4978: Ensure that DOS attributes are copied with folders. +* Fix bug where tdb lock call interrupted with an alarm sig would + not terminate and could lead to runaway smbd processes. +* Fix smbd crash bug which resulted from a regression in the patch + for CVE-2007-4572 patch. +* Prevent nmbd from adding non-initialized name to IP address + mappings to it's WINS database. + + +o Dmitry Butskoy <[EMAIL PROTECTED]> +* Properly catch errors in the query_user() callback to avoid + generated struct passwd replies with zero length usernames. + + +o Gerald (Jerry) Carter <[EMAIL PROTECTED]> +* Prevent segv in winbindd running on a DC using the "idmap + backend" syntax. + + +o Steve Langasek <[EMAIL PROTECTED]> +* BUG 4781: Allow cleaning of /etc/mtab by canonicalizing mountpoint. + + +o Volker Lendecke <[EMAIL PROTECTED]> +* BUG 4028: Fix message popup sent via "smbclient -M". +* BUG 4984: Filename unix_convert() fixes for WinNT 4.0 clients. + + +o Stefan Metzmacher <[EMAIL PROTECTED]> +* Fix crash bug in pidl generated client code caused by + [in,out,unique] pointers. +* Fix crash bug in the group mapping code. + + +o Heinrich Mislik <[EMAIL PROTECTED]> +* Fixes for AIX quota support. + + +o Tomasz Ostrowski <[EMAIL PROTECTED]> +* BUG 4393: Prevent smbclient from dropping 0 bytes files from tar + archives. + + +o Simo Sorce <[EMAIL PROTECTED]> +* Fixes for internal id
[SCM] Samba Shared Repository - branch v3-0-test updated - initial-v3-0-unstable-28-g8ad2826
The branch, v3-0-test has been updated via 8ad2826c48a0d4d26abc3bb209860c776f55822f (commit) from 56b012b1c4dc48434bf5ae9cb8459bd7ad33d2a1 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-test - Log - commit 8ad2826c48a0d4d26abc3bb209860c776f55822f Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Nov 20 13:24:03 2007 -0600 Prevent segv in winbindd running on a DC using the "idmap backend" syntax. The number of domains should be counted as they are added and not assumed to match the loop counter. --- Summary of changes: source/nsswitch/idmap.c | 15 --- 1 files changed, 8 insertions(+), 7 deletions(-) Changeset truncated at 500 lines: diff --git a/source/nsswitch/idmap.c b/source/nsswitch/idmap.c index db1c6f3..9c38f6b 100644 --- a/source/nsswitch/idmap.c +++ b/source/nsswitch/idmap.c @@ -376,7 +376,7 @@ NTSTATUS idmap_init(void) */ DEBUG(1, ("Initializing idmap domains\n")); - for (i = 0; dom_list[i]; i++) { + for (i=0, num_domains=0; dom_list[i]; i++) { const char *parm_backend; char *config_option; @@ -384,7 +384,7 @@ NTSTATUS idmap_init(void) if (strequal(dom_list[i], "BUILTIN") || strequal(dom_list[i], get_global_sam_name())) { - DEBUG(0,("idmap_init: Ignoring invalid domain %s\n", + DEBUG(0,("idmap_init: Ignoring domain %s\n", dom_list[i])); continue; } @@ -492,13 +492,17 @@ NTSTATUS idmap_init(void) ret = NT_STATUS_NO_MEMORY; goto done; } - idmap_domains[i] = dom; + idmap_domains[num_domains] = dom; /* save default domain position for future uses */ if (dom->default_domain) { - def_dom_num = i; + def_dom_num = num_domains; } + /* Bump counter to next available slot */ + + num_domains++; + DEBUG(10, ("Domain %s - Backend %s - %sdefault - %sreadonly\n", dom->name, parm_backend, dom->default_domain?"":"not ", @@ -507,9 +511,6 @@ NTSTATUS idmap_init(void) talloc_free(config_option); } - /* save the number of domains we have */ - num_domains = i; - /* automatically add idmap_nss backend if needed */ if ((lp_server_role() == ROLE_DOMAIN_MEMBER) && ( ! pri_dom_is_in_list) && -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-341-g99b75ca
The branch, v3-2-test has been updated via 99b75cada2c4caaec5d30c8351080f0a41e44bd1 (commit) from ae7885711f504f1442335f09088cbe149a7e00f9 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 99b75cada2c4caaec5d30c8351080f0a41e44bd1 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Nov 20 13:24:03 2007 -0600 Prevent segv in winbindd running on a DC using the "idmap backend" syntax. The number of domains should be counted as they are added and not assumed to match the loop counter. manually cherry-picked 8ad2826c48a0d4d26abc3bb209860c776f55822f --- Summary of changes: source/winbindd/idmap.c | 15 --- 1 files changed, 8 insertions(+), 7 deletions(-) Changeset truncated at 500 lines: diff --git a/source/winbindd/idmap.c b/source/winbindd/idmap.c index e89ad73..6756c2a 100644 --- a/source/winbindd/idmap.c +++ b/source/winbindd/idmap.c @@ -387,7 +387,7 @@ NTSTATUS idmap_init(void) */ DEBUG(1, ("Initializing idmap domains\n")); - for (i = 0; dom_list[i]; i++) { + for (i=0, num_domains=0; dom_list[i]; i++) { const char *parm_backend; char *config_option; @@ -395,7 +395,7 @@ NTSTATUS idmap_init(void) if (strequal(dom_list[i], "BUILTIN") || strequal(dom_list[i], get_global_sam_name())) { - DEBUG(0,("idmap_init: Ignoring invalid domain %s\n", + DEBUG(0,("idmap_init: Ignoring domain %s\n", dom_list[i])); continue; } @@ -503,13 +503,17 @@ NTSTATUS idmap_init(void) ret = NT_STATUS_NO_MEMORY; goto done; } - idmap_domains[i] = dom; + idmap_domains[num_domains] = dom; /* save default domain position for future uses */ if (dom->default_domain) { - def_dom_num = i; + def_dom_num = num_domains; } + /* Bump counter to next available slot */ + + num_domains++; + DEBUG(10, ("Domain %s - Backend %s - %sdefault - %sreadonly\n", dom->name, parm_backend, dom->default_domain?"":"not ", @@ -518,9 +522,6 @@ NTSTATUS idmap_init(void) talloc_free(config_option); } - /* save the number of domains we have */ - num_domains = i; - /* automatically add idmap_nss backend if needed */ if ((lp_server_role() == ROLE_DOMAIN_MEMBER) && ( ! pri_dom_is_in_list) && -- Samba Shared Repository
svn commit: samba-web r1154 - in trunk/security: .
Author: jerry Date: 2007-11-16 14:21:54 + (Fri, 16 Nov 2007) New Revision: 1154 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1154 Log: Swap CVE-2007-{4572,5398} Modified: trunk/security/CVE-2007-4572.html trunk/security/CVE-2007-5398.html Changeset: Modified: trunk/security/CVE-2007-4572.html === --- trunk/security/CVE-2007-4572.html 2007-11-15 23:33:50 UTC (rev 1153) +++ trunk/security/CVE-2007-4572.html 2007-11-16 14:21:54 UTC (rev 1154) @@ -8,25 +8,25 @@ - CVE-2007-5398 - Remote Code Execution in Samba's nmbd + CVE-2007-4572 - GETDC mailslot processing buffer overrun in nmbd + == == -== Subject: Remote code execution in Samba's WINS -== server daemon (nmbd) when processing name -== registration followed name query requests. +== Subject: Stack buffer overflow in nmbd's logon +== request processing. == -== CVE ID#: CVE-2007-5398 +== CVE ID#: CVE-2007-4572 == == Versions:Samba 3.0.0 - 3.0.26a (inclusive) == -== Summary: When nmbd has been configured as a WINS -== server, a client can send a series of name -== registration request followed by a specific -== name query request packet and execute -== arbitrary code. +== Summary: Processing of specially crafted GETDC +== mailslot requests can result in a buffer +== overrun in nmbd. It is not believed that +== that this issues can be exploited to +== result in remote code execution. == == @@ -34,10 +34,11 @@ Description === -Secunia Research reported a vulnerability that allows for -the execution of arbitrary code in nmbd. This defect may -only be exploited when the "wins support" parameter has -been enabled in smb.conf. +Samba developers have discovered what is believed to be +a non-exploitable buffer over in nmbd during the processing +of GETDC logon server requests. This code is only used +when the Samba server is configured as a Primary or Backup +Domain Controller. == @@ -56,24 +57,26 @@ Workaround == -Samba administrators may avoid this security issue by -disabling the "wins support" feature in the hosts smb.conf -file. +Samba administrators may avoid this security issue by disabling +both the "domain logons" and the "domain master" options in in +the server's smb.conf file. Note that this will disable all +domain controller features as well. === Credits === -This vulnerability was reported to Samba developers by -Alin Rad Pop, Secunia Research. +This vulnerability was discovered by Samba developers during +an internal code audit. The time line is as follows: -* Oct 30, 2007: Initial report to [EMAIL PROTECTED] -* Oct 30, 2007: First response from Samba developers confirming - the bug along with a proposed patch. -* Nov 15, 2007: Public security advisory to be made available. +* Sep 13, 2007: Initial report to [EMAIL PROTECTED] including + proposed patch. +* Sep 14, 2007: Patch review by members of the Josh Bressers + (RedHat Security Team) and Simo Sorce (Samba/RedHat developer) +* Nov 15, 2007: Public security advisory made available. == Modified: trunk/security/CVE-2007-5398.html === --- trunk/security/CVE-2007-5398.html 2007-11-15 23:33:50 UTC (rev 1153) +++ trunk/security/CVE-2007-5398.html 2007-11-16 14:21:54 UTC (rev 1154) @@ -8,25 +8,25 @@ - CVE-2007-4572 - GETDC mailslot processing buffer overrun in nmbd + CVE-2007-5398 - Remote Code Execution in Samba's nmbd - == == -== Subject: Stack buffer overflow in nmbd's logon -== request processing. +== Subject: Remote code execution in Samba's WINS +== server daemon (nmbd) when processing name +== registration followed name query requests. == -== CVE ID#: CVE-2007-4572 +== CVE ID#: CVE-2007-5398 == == Versions:Samba 3.0.0 - 3.0.26a (inclusive) == -== Summary: Processing of specially crafted GETDC -== mailslot requests can result in a buffer -== overrun in nmbd. It is not believed that -== that this issues can be exploited to -== result in remote code execution. +== Summary: When nmbd has been configured as a WINS +== server, a client can send a series of name +== registration request followed by a specific +==
svn commit: samba-web r1153 - in trunk/history: .
Author: jerry Date: 2007-11-15 23:33:50 + (Thu, 15 Nov 2007) New Revision: 1153 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1153 Log: Fix typos in links to cvs.mitre.org for latest CVEs Modified: trunk/history/security.html Changeset: Modified: trunk/history/security.html === --- trunk/history/security.html 2007-11-15 16:53:51 UTC (rev 1152) +++ trunk/history/security.html 2007-11-15 23:33:50 UTC (rev 1153) @@ -26,7 +26,7 @@ patch for Samba 3.0.26a Remote Code Execution in Samba's nmbd Samba 3.0.0 - 3.0.26a -http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4398";>CVE-2007-5398 +http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5398";>CVE-2007-5398 Announcement @@ -35,7 +35,7 @@ patch for Samba 3.0.26a GETDC mailslot processing buffer overrun in nmbd Samba 3.0.0 - 3.0.26a -http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4138";>CVE-2007-4572 +http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4572";>CVE-2007-4572 Announcement
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-318-ge40c372
The branch, v3-2-test has been updated via e40c372e0ddf631dd9162c1fdfaaa49c29915f23 (commit) from 242fc0099cc81877d8e9630b46dfb8d4a3265d94 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit e40c372e0ddf631dd9162c1fdfaaa49c29915f23 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Wed Nov 14 20:51:14 2007 -0600 Fix for CVE-2007-5398. == Subject: Remote code execution in Samba's WINS == server daemon (nmbd) when processing name == registration followed name query requests. == == CVE ID#: CVE-2007-5398 == == Versions:Samba 3.0.0 - 3.0.26a (inclusive) ... Secunia Research reported a vulnerability that allows for the execution of arbitrary code in nmbd. This defect may only be exploited when the "wins support" parameter has been enabled in smb.conf. --- Summary of changes: source/nmbd/nmbd_packets.c |6 ++ 1 files changed, 6 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/source/nmbd/nmbd_packets.c b/source/nmbd/nmbd_packets.c index d49c8ba..b78ab5b 100644 --- a/source/nmbd/nmbd_packets.c +++ b/source/nmbd/nmbd_packets.c @@ -970,6 +970,12 @@ for id %hu\n", packet_type, nmb_namestr(&orig_nmb->question.question_name), nmb->answers->ttl = ttl; if (data && len) { + if (len < 0 || len > sizeof(nmb->answers->rdata)) { + DEBUG(5,("reply_netbios_packet: " + "invalid packet len (%d)\n", + len )); + return; + } nmb->answers->rdlength = len; memcpy(nmb->answers->rdata, data, len); } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-0-test updated - initial-v3-0-unstable-20-g14ecfec
The branch, v3-0-test has been updated via 14ecfecbdf3e631f87d83337e06060724deb7756 (commit) via 63918ac0f0a3767237210182f0f35840db87242c (commit) via 96e61fb89caa9e9d500c3006b83299a7938d0af7 (commit) via 99eea67a5a1114e499ece00f8b68ccbf2ec4ae75 (commit) via a7c6fe1e3cb4d66a48f43a49fe31778adace2332 (commit) from 1cdf89a02af6e7a2deed3f59519af97c10dbdaa3 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-test - Log - commit 14ecfecbdf3e631f87d83337e06060724deb7756 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Thu Nov 15 10:51:37 2007 -0600 Set release to 3.0.27a in development branch commit 63918ac0f0a3767237210182f0f35840db87242c Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Thu Nov 15 10:51:23 2007 -0600 Pull in release notes from 3.0.27 to the v3-0 development branch commit 96e61fb89caa9e9d500c3006b83299a7938d0af7 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Thu Nov 15 10:48:13 2007 -0600 Set version to 3.0.27a commit 99eea67a5a1114e499ece00f8b68ccbf2ec4ae75 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Wed Nov 14 20:54:44 2007 -0600 Fix for CVE-2007-4572 == Subject: Stack buffer overflow in nmbd's logon == request processing. == == CVE ID#: CVE-2007-4572 == == Versions:Samba 3.0.0 - 3.0.26a (inclusive) ... Samba developers have discovered what is believed to be a non-exploitable buffer over in nmbd during the processing of GETDC logon server requests. This code is only used when the Samba server is configured as a Primary or Backup Domain Controller. commit a7c6fe1e3cb4d66a48f43a49fe31778adace2332 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Wed Nov 14 20:51:14 2007 -0600 Fix for CVE-2007-5398. == Subject: Remote code execution in Samba's WINS == server daemon (nmbd) when processing name == registration followed name query requests. == == CVE ID#: CVE-2007-5398 == == Versions:Samba 3.0.0 - 3.0.26a (inclusive) ... Secunia Research reported a vulnerability that allows for the execution of arbitrary code in nmbd. This defect may only be exploited when the "wins support" parameter has been enabled in smb.conf. --- Summary of changes: WHATSNEW.txt| 265 +++ source/VERSION |4 +- source/lib/charcnv.c|4 +- source/libsmb/ntlmssp_parse.c |3 +- source/nmbd/nmbd_packets.c |6 + source/nmbd/nmbd_processlogon.c | 89 +++-- source/smbd/lanman.c|2 +- 7 files changed, 354 insertions(+), 19 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 5868036..d208c07 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,3 +1,268 @@ + == + Release Notes for Samba 3.0.27 +Nov 15, 2007 + == + +Samba 3.0.27 is a security release in order to address the following +defects: + + o CVS-2007-4572 +Stack buffer overflow in nmbd's logon request processing. + + o CVE-2007-5398 +Remote code execution in Samba's WINS server daemon (nmbd) +when processing name registration followed name query requests. + +The original security announcement for this and past advisories can +be found http://www.samba.org/samba/security/ + +## +Changes +### + +Changes since 3.0.26a +- + +o Jeremy Allison <[EMAIL PROTECTED]> +* Fix for CVS-2007-4572. +* Fix for CVE-2007-5398. + + +o Simo Sorce <[EMAIL PROTECTED]> +* Additional fixes for CVS-2007-4572. + + +Release notes for older releases follow: + + -- + === + Release Notes for Samba 3.0.26a + Sep 11, 2007 + === + +Major bug fixes included in Samba 3.0.26a are: + + o Memory leaks in Winbind's IDMap manager. + + +## +Changes +### + +Changes since 3.0.26 + + +o Michael Adam <[EMAIL PROTECTED]> +* Fix read_sock() semantics in wb_common.c to address "invalid + request size" errors in winbindd logs. +* Fix use of pwrite() in tdb IO code paths. + + +o Jeremy Allison <[EMAIL PROTECTED]> +* Fix logic error in timeout of blocking
[SCM] Samba Shared Repository - annotated tag release-3-0-27 created - release-3-0-27
The annotated tag, release-3-0-27 has been created at 14bc8cc3b779c5ed54798b5dae4157dfaa8e6a89 (tag) tagging 6d9de2b0b3fb102762d8e17b4398e9d2d4e6bd65 (commit) replaces release-3-0-26a tagged by Gerald (Jerry) Carter on Wed Nov 14 21:39:26 2007 -0600 - Log - Tagging 3.0.27 release. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQBHO798IR7qMdg1EfYRAutKAJ9iHsfozHGiCB5cPYbkXFQUNNl2FwCgoQLu 8G7JgY5okbVnRfH6RUhyYEU= =ariO -END PGP SIGNATURE- Gerald (Jerry) Carter (3): Fix for CVE-2007-5398. Fix for CVE-2007-4572 Update release notes for 3.0.27 --- -- Samba Shared Repository
svn commit: samba-web r1150 - in trunk: . history security
Author: jerry Date: 2007-11-15 14:05:56 + (Thu, 15 Nov 2007) New Revision: 1150 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1150 Log: Samba 3.0.27 release announcement details Added: trunk/history/samba-3.0.27.html trunk/security/CVE-2007-4572.html trunk/security/CVE-2007-5398.html Modified: trunk/header_columns.html trunk/history/header_history.html trunk/history/security.html trunk/index.html Changeset: Modified: trunk/header_columns.html === --- trunk/header_columns.html 2007-09-29 04:26:39 UTC (rev 1149) +++ trunk/header_columns.html 2007-11-15 14:05:56 UTC (rev 1150) @@ -130,9 +130,9 @@ Current Stable Release -Samba 3.0.26a (gzipped) -Release Notes -Signature +Samba 3.0.27 (gzipped) +Release Notes +Signature Historical Modified: trunk/history/header_history.html === --- trunk/history/header_history.html 2007-09-29 04:26:39 UTC (rev 1149) +++ trunk/history/header_history.html 2007-11-15 14:05:56 UTC (rev 1150) @@ -77,6 +77,10 @@ Release Notes +samba-3.0.27 +samba-3.0.26a +samba-3.0.26 +samba-3.0.25c samba-3.0.25b samba-3.0.25a samba-3.0.25 Added: trunk/history/samba-3.0.27.html === --- trunk/history/samba-3.0.27.html 2007-09-29 04:26:39 UTC (rev 1149) +++ trunk/history/samba-3.0.27.html 2007-11-15 14:05:56 UTC (rev 1150) @@ -0,0 +1,54 @@ +http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> +http://www.w3.org/1999/xhtml";> + + +Samba - Release Notes Archive + + + + + Samba 3.0.27 Available for Download + + + + == + Release Notes for Samba 3.0.27 +Nov 15, 2007 + == + +Samba 3.0.27 is a security release in order to address the following +defects: + + o CVS-2007-4572 +Stack buffer overflow in nmbd's logon request processing. + + o CVE-2007-5398 +Remote code execution in Samba's WINS server daemon (nmbd) +when processing name registration followed name query requests. + +The original security announcement for this and past advisories can +be found http://www.samba.org/samba/security/ + +## +Changes +### + +Changes since 3.0.26a +- + +o Jeremy Allison <[EMAIL PROTECTED]> +* Fix for CVS-2007-4572. +* Fix for CVE-2007-5398. + + +o Simo Sorce <[EMAIL PROTECTED]> +* Additional fixes for CVS-2007-4572. + + +Please refer to the original Samba +3.0.26a Release Notes for more details regarding changes in +previous releases. + + + Property changes on: trunk/history/samba-3.0.27.html ___ Name: svn:executable + * Modified: trunk/history/security.html === --- trunk/history/security.html 2007-09-29 04:26:39 UTC (rev 1149) +++ trunk/history/security.html 2007-11-15 14:05:56 UTC (rev 1150) @@ -22,6 +22,24 @@ +15 Nov 2007 +patch for Samba 3.0.26a +Remote Code Execution in Samba's nmbd +Samba 3.0.0 - 3.0.26a +http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4398";>CVE-2007-5398 +Announcement + + + +15 Nov 2007 +patch for Samba 3.0.26a +GETDC mailslot processing buffer overrun in nmbd +Samba 3.0.0 - 3.0.26a +http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4138";>CVE-2007-4572 +Announcement + + + 11 Sep 2007 patch for Samba 3.0.25 Incorrect primary group assignment for users using the rfc2307 or sfu nss info plugin. Modified: trunk/index.html === --- trunk/index.html2007-09-29 04:26:39 UTC (rev 1149) +++ trunk/index.html2007-11-15 14:05:56 UTC (rev 1150) @@ -19,51 +19,26 @@ Current Release -28 Sep 2007 -Samba 3.2.0pre1 Available for Download +15 Nov 2007 +Samba 3.0.27 Available for Download -The first preview release of Samba 3.2.0 is now available for - testing. This release is not intended for production - servers. An overview of the included changes are described in - the Release - Notes. Please report any defects via the Samba bug reporting - system at the https://bugzilla.samba.org/";>Samba - Bugzilla System. +Samba 3.0.27 is a security release to + address CVE-2007-4572 + and CVE-2007-5398. -Be aware that Samba is now distribut
svn commit: lorikeet r785 - in trunk/mod_auth_ntlm_winbind: .
Author: jerry Date: 2007-11-08 15:47:58 + (Thu, 08 Nov 2007) New Revision: 785 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=785 Log: Fix a typo in strcmp usage in process_msg(). Patch from Dmitry Butskoy <[EMAIL PROTECTED]>. Modified: trunk/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c Changeset: Modified: trunk/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c === --- trunk/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c 2007-11-08 15:27:36 UTC (rev 784) +++ trunk/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c 2007-11-08 15:47:58 UTC (rev 785) @@ -839,7 +839,7 @@ r->connection->ap_auth_type = ctxt->connected_user_authenticated->auth_type; #endif -if (!strcmp("*", childarg)) { +if (strcmp("*", childarg) != 0) { /* Send last leg (possible mutual authentication token) */ apr_table_setn(r->headers_out, (PROXYREQ_PROXY == r->proxyreq) ? "Proxy-Authenticate" : "WWW-Authenticate",
svn commit: lorikeet r784 - in trunk/mod_auth_ntlm_winbind: . contrib
Author: jerry Date: 2007-11-08 15:27:36 + (Thu, 08 Nov 2007) New Revision: 784 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=784 Log: Add a workaround for proxy authorization in IE. Patch from Dmitry Butskoy <[EMAIL PROTECTED]>. This is a temporary workaround if people need it until the actual issues is fixed by the upstream Apache maintainers. Added: trunk/mod_auth_ntlm_winbind/contrib/ trunk/mod_auth_ntlm_winbind/contrib/mod_auth_ntlm_winbind-20060510-connect_http10.patch Changeset: Added: trunk/mod_auth_ntlm_winbind/contrib/mod_auth_ntlm_winbind-20060510-connect_http10.patch === --- trunk/mod_auth_ntlm_winbind/contrib/mod_auth_ntlm_winbind-20060510-connect_http10.patch 2007-11-08 15:25:26 UTC (rev 783) +++ trunk/mod_auth_ntlm_winbind/contrib/mod_auth_ntlm_winbind-20060510-connect_http10.patch 2007-11-08 15:27:36 UTC (rev 784) @@ -0,0 +1,33 @@ +diff -bu mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c mod_auth_ntlm_winbind-OK/mod_auth_ntlm_winbind.c +--- mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c 2006-05-11 17:52:54.0 +0400 mod_auth_ntlm_winbind-OK/mod_auth_ntlm_winbind.c 2006-07-07 19:44:12.0 +0400 +@@ -997,6 +997,29 @@ + : "Authorization"); + const char *auth_line2; + ++#ifdef APACHE2 ++/* ap_set_keepalive() does not check for ++ "Proxy-Connection: keep-alive", and therefore breaks NTLM auth ++ for the CONNECT proxying ("https" etc.) when a browser uses HTTP/1.0 ++ for CONNECT (like IE6+ does). ++ ++ An ugly work-around to fix it here: ++ When "CONNECT HTTP/1.0" without any "Connection: ..." ++ but with "Proxy-Connection: keep-alive", set "Connection: keep-alive" ++ manually (which will be successfully eaten by ap_set_keepalive() later) ++*/ ++ ++if (r->method_number == M_CONNECT && ++ r->proto_num == HTTP_VERSION(1,0) && ++ !apr_table_get(r->headers_in, "Connection") && ++ ap_find_token(r->pool, ++ apr_table_get(r->headers_in, "Proxy-Connection"), ++ "keep-alive") != 0 ++) { ++ apr_table_mergen(r->headers_in, "Connection", "keep-alive"); ++} ++#endif ++ + /* Trust the authentication on an existing connection */ + if (ctxt->connected_user_authenticated && ctxt->connected_user_authenticated->user) { + /* internal redirects cause this to get called more than once
svn commit: lorikeet r783 - in trunk/mod_auth_ntlm_winbind: .
Author: jerry Date: 2007-11-08 15:25:26 + (Thu, 08 Nov 2007) New Revision: 783 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=783 Log: Ensure that the authenticated user context is set to NULL when freed. Avoids a segfault. Patch from Dmitry Butskoy <[EMAIL PROTECTED]>. Modified: trunk/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c Changeset: Modified: trunk/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c === --- trunk/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c 2007-11-08 15:22:10 UTC (rev 782) +++ trunk/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c 2007-11-08 15:25:26 UTC (rev 783) @@ -347,6 +347,7 @@ if ( ctxt->connected_user_authenticated && ctxt->connected_user_authenticated->pool ) { apr_pool_destroy( ctxt->connected_user_authenticated->pool ); + ctxt->connected_user_authenticated = NULL; } return HTTP_UNAUTHORIZED; @@ -1022,6 +1023,7 @@ if (ctxt->connected_user_authenticated && ctxt->connected_user_authenticated->pool ) { apr_pool_destroy(ctxt->connected_user_authenticated->pool); + ctxt->connected_user_authenticated = NULL; } RDEBUG( "declined" );
svn commit: lorikeet r782 - in trunk/mod_auth_ntlm_winbind: .
Author: jerry Date: 2007-11-08 15:22:10 + (Thu, 08 Nov 2007) New Revision: 782 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=782 Log: Clean up compile warnings on 64-bit architectures. Patch from Dmitry Butskoy <[EMAIL PROTECTED]>. Modified: trunk/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c Changeset: Modified: trunk/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c === --- trunk/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c 2007-08-10 07:00:21 UTC (rev 781) +++ trunk/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c 2007-11-08 15:22:10 UTC (rev 782) @@ -495,7 +495,7 @@ char *newline; char args_to_helper[HUGE_STRING_LEN]; char args_from_helper[HUGE_STRING_LEN]; -unsigned int bytes_written; +size_t bytes_written; int bytes_read; if (( global_ntlm_context.ntlm_plaintext_helper = get_auth_helper( r, global_ntlm_context.ntlm_plaintext_helper, crec->ntlm_plaintext_helper, CLEANUP(cleanup_ntlm_plaintext_helper))) == NULL ) { @@ -539,7 +539,7 @@ #endif if ( bytes_written < strlen( args_to_helper )) { -RDEBUG( "failed to write user/pass to helper - wrote %d bytes", bytes_written ); +RDEBUG( "failed to write user/pass to helper - wrote %d bytes", (int) bytes_written ); apr_pool_destroy( global_ntlm_context.ntlm_plaintext_helper->pool ); apr_pool_destroy( ctxt->connected_user_authenticated->pool ); return HTTP_INTERNAL_SERVER_ERROR; @@ -624,7 +624,7 @@ char args_to_helper[HUGE_STRING_LEN]; char args_from_helper[HUGE_STRING_LEN]; ntlm_connection_context_t *ctxt = get_connection_context( r->connection ); -unsigned int bytes_written; +size_t bytes_written; int bytes_read; struct _ntlm_auth_helper *auth_helper; @@ -690,7 +690,7 @@ bytes_written = ap_bwrite(auth_helper->out_to_helper, args_to_helper, strlen(args_to_helper)); #endif if (bytes_written < strlen(args_to_helper)) { -RDEBUG("failed to write NTLMSSP string to helper - wrote %d bytes", bytes_written); +RDEBUG("failed to write NTLMSSP string to helper - wrote %d bytes", (int) bytes_written); apr_pool_destroy(auth_helper->pool); apr_pool_destroy(ctxt->connected_user_authenticated->pool);
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-164-g95de802
The branch, v3-2-test has been updated via 95de80218c10a72c7b28541c3c2e475e083b68f1 (commit) via 10af752391be51c7381a4eaca27f29e1f2a677b3 (commit) from c3de44b6b063e126095b30536fdcb643c70e395e (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 95de80218c10a72c7b28541c3c2e475e083b68f1 Merge: 10af752391be51c7381a4eaca27f29e1f2a677b3 c3de44b6b063e126095b30536fdcb643c70e395e Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Nov 2 14:16:40 2007 -0400 Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-test commit 10af752391be51c7381a4eaca27f29e1f2a677b3 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Nov 2 14:16:06 2007 -0400 Fix build breakage when not specifying --with-fhs. Ensure that CODEPAGEDIR, STATEDIR, and CACHEDIR have values. --- Summary of changes: source/configure.in |3 +++ 1 files changed, 3 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/source/configure.in b/source/configure.in index 227ab40..1b282ae 100644 --- a/source/configure.in +++ b/source/configure.in @@ -52,6 +52,9 @@ test "${libdir}" || libdir="\${prefix}/lib" pammodulesdir="\${LIBDIR}/security" configdir="\${LIBDIR}" swatdir="\${prefix}/swat" +codepagedir="\${LIBDIR}" +statedir="\${LOCKDIR}" +cachedir="\${LOCKDIR}" AC_ARG_WITH(fhs, [ --with-fhs Use FHS-compliant paths (default=no)], -- Samba Shared Repository
Re: [SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-156-g779353b
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stefan (metze) Metzmacher wrote: > Gerald (Jerry) Carter schrieb: >> The branch, v3-2-test has been updated >>via 779353b86d1699324149896f1ffa237c6ebe46ec (commit) >>via d6cdbfd875bb2653e831d314726c3240beb0a96b (commit) >>via b7d2fadbef044a89920da613b1aafc74a3d94e24 (commit) >> from 47dbddcb5361caa30ee60cf4e15bb50d557d1191 (commit) > >> http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test > > >> - Log - >> commit 779353b86d1699324149896f1ffa237c6ebe46ec >> Merge: d6cdbfd875bb2653e831d314726c3240beb0a96b >> 47dbddcb5361caa30ee60cf4e15bb50d557d1191 >> Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> >> Date: Thu Nov 1 21:30:43 2007 -0400 > >> Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-test > >> commit d6cdbfd875bb2653e831d314726c3240beb0a96b >> Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> >> Date: Thu Nov 1 15:53:44 2007 -0400 > >> Patch 2 of 3 from Debian Samba packagers: > > Hi Jerry, > > one of this patches, broke make install in the build-farm... Gahok. I'll fix it. Sorry. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKx/4IR7qMdg1EfYRAmAvAJ9bBHT1wbs8yAtIntwZ/a0Jqpe8kgCeJ3Km LN/WKYb16hTfbgSxIZ3mD7A= =r5jU -END PGP SIGNATURE-
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-156-g779353b
The branch, v3-2-test has been updated via 779353b86d1699324149896f1ffa237c6ebe46ec (commit) via d6cdbfd875bb2653e831d314726c3240beb0a96b (commit) via b7d2fadbef044a89920da613b1aafc74a3d94e24 (commit) from 47dbddcb5361caa30ee60cf4e15bb50d557d1191 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 779353b86d1699324149896f1ffa237c6ebe46ec Merge: d6cdbfd875bb2653e831d314726c3240beb0a96b 47dbddcb5361caa30ee60cf4e15bb50d557d1191 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Thu Nov 1 21:30:43 2007 -0400 Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-test commit d6cdbfd875bb2653e831d314726c3240beb0a96b Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Thu Nov 1 15:53:44 2007 -0400 Patch 2 of 3 from Debian Samba packagers: The point is doing the following associations: - non discardable state data (all TDB files that may need to be backed up) go to statedir - shared data (codepage stuff) go to codepagedir The patch *does not change* the default location for these directories. So, there is no behaviour change when applying it. The main change is for samba developers who have to think when dealing with files that previously pertained to libdir whether they: - go in statedir - go in codepagedir - stay in libdir commit b7d2fadbef044a89920da613b1aafc74a3d94e24 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Thu Nov 1 13:00:10 2007 -0400 Patch from Debian Samba package maintainers: Patch 1 of 3: - Patch 1 adds the new variables - Patch 2 makes uses of them for files belonging to the "state" path and the "code pages" path This patch seemed more easily acceptable, which explains why we separated it from patch 3 - Patch 3 reassigns files to the "cache" path. Indeed all "debatable" changes have been moved to that one The point is adding: - a path for non discardable state data: basically all TDB files that may need to be backed up - a path for shared data: mostly codepage stuff - a path for cache data to host files such as browse.dat, printers.tbd, .tdb All these are currently mixed in "libdir" (${prefix}/lib/samba by default). The patch keeps these new paths to point to ${prefix}/lib/samba by default and does therefore not change the software behaviour. Used alone, it just adds unused variables...so it can safely be used in sources without any behaviour change and no impact on Samba developers work. --- Summary of changes: source/Makefile.in | 16 +--- source/configure.in |7 +++ source/dynconfig.c | 31 +++ source/groupdb/mapping_ldb.c |8 source/groupdb/mapping_tdb.c |2 +- source/include/dynconfig.h |4 source/intl/lang_tdb.c |2 +- source/lib/account_pol.c |4 ++-- source/lib/sharesec.c|4 ++-- source/lib/util.c| 33 + source/lib/util_unistr.c |6 +++--- source/nmbd/nmbd_winsserver.c|4 ++-- source/param/loadparm.c |8 source/passdb/pdb_tdb.c |4 ++-- source/printing/nt_printing.c| 12 ++-- source/registry/reg_db.c | 10 +- source/registry/reg_perfcount.c |4 ++-- source/rpc_server/srv_eventlog_lib.c |4 ++-- source/winbindd/idmap_tdb.c |2 +- 19 files changed, 125 insertions(+), 40 deletions(-) Changeset truncated at 500 lines: diff --git a/source/Makefile.in b/source/Makefile.in index a1da65a..baa1828 100644 --- a/source/Makefile.in +++ b/source/Makefile.in @@ -127,6 +127,13 @@ SWATDIR = @swatdir@ # the directory where lock files go LOCKDIR = @lockdir@ +# FHS directories; equal to LOCKDIR if not using --with-fhs +CACHEDIR = @cachedir@ +STATEDIR = @statedir@ + +# Where to look for (and install) codepage databases. +CODEPAGEDIR = @codepagedir@ + # the directory where pid files go PIDDIR = @piddir@ @@ -154,7 +161,10 @@ PATH_FLAGS = -DSMB_PASSWD_FILE=\"$(SMB_PASSWD_FILE)\" \ -DLOGFILEBASE=\"$(LOGFILEBASE)\" \ -DSHLIBEXT=\"@[EMAIL PROTECTED]" \ -DCTDBDIR=\"$(CTDBDIR)\" \ - -DCONFIGDIR=\"$(CONFIGDIR)\" + -DCONFIGDIR=\"$(CONFIGDIR)\" \ + -DCODEPAGEDIR=\"$(CODEPAGEDIR)\" \ + -DCACHEDIR=\"$(CACHEDIR)\" \ + -DSTATEDIR=\"$(STATEDIR)\" # Note that all execut
[SCM] Samba Shared Repository - branch v3-0-test updated - initial-v3-0-unstable-13-gc3fbfc3
The branch, v3-0-test has been updated via c3fbfc37b578b8107be1f585cf6e3e2d001f7ab1 (commit) via 8cb09fe2d923fabbb6a7b909cc245c08128c0b67 (commit) from 26d8a1ad20c10da495970c584983fbd261b4946e (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-test - Log - commit c3fbfc37b578b8107be1f585cf6e3e2d001f7ab1 Merge: 8cb09fe2d923fabbb6a7b909cc245c08128c0b67 26d8a1ad20c10da495970c584983fbd261b4946e Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Oct 30 22:22:43 2007 -0400 Merge branch 'v3-0-test' of git://git.samba.org/samba into v3-0-test commit 8cb09fe2d923fabbb6a7b909cc245c08128c0b67 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Oct 30 22:21:49 2007 -0400 Ensure we catch an error in the query_user() reply in the receive function. backport of v3-2-test patch from Dmitry Butskoy <[EMAIL PROTECTED]>. --- Summary of changes: source/nsswitch/winbindd_async.c |6 ++ 1 files changed, 6 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/source/nsswitch/winbindd_async.c b/source/nsswitch/winbindd_async.c index eb8631a..32d4e66 100644 --- a/source/nsswitch/winbindd_async.c +++ b/source/nsswitch/winbindd_async.c @@ -1413,6 +1413,12 @@ static void query_user_recv(TALLOC_CTX *mem_ctx, BOOL success, return; } + if (response->result != WINBINDD_OK) { + DEBUG(5, ("query_user returned an error\n")); + cont(private_data, False, NULL, NULL, NULL, NULL, -1, -1); + return; + } + cont(private_data, True, response->data.user_info.acct_name, response->data.user_info.full_name, response->data.user_info.homedir, -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-89-gdfef16a
The branch, v3-2-test has been updated via dfef16ac4318b460a5bd29475eb395c1905a5cd8 (commit) from 33f690b3de03dc300590c3f69718f608b104a529 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit dfef16ac4318b460a5bd29475eb395c1905a5cd8 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Sun Oct 21 13:44:29 2007 -0500 Fix compile error caused by unknown variable. --- Summary of changes: source/lib/interfaces.c |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source/lib/interfaces.c b/source/lib/interfaces.c index 3b15e3e..ae6c972 100644 --- a/source/lib/interfaces.c +++ b/source/lib/interfaces.c @@ -210,7 +210,7 @@ static int _get_interfaces(struct iface_struct *ifaces, int max_interfaces) ifaces[total].flags = ifr[i].ifr_flags; - if (!(flags & IFF_UP)) { + if (!(ifaces[total].flags & IFF_UP)) { continue; } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-88-g33f690b
The branch, v3-2-test has been updated via 33f690b3de03dc300590c3f69718f608b104a529 (commit) via a62c7f9350322ab435244eafe6053fd5ee618973 (commit) from 67328bd27b1e881a4bcdd5160133afa9a267eaac (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 33f690b3de03dc300590c3f69718f608b104a529 Merge: a62c7f9350322ab435244eafe6053fd5ee618973 67328bd27b1e881a4bcdd5160133afa9a267eaac Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Sun Oct 21 12:39:15 2007 -0500 Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-test commit a62c7f9350322ab435244eafe6053fd5ee618973 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Sun Oct 21 12:32:06 2007 -0500 Correct VERSION and version.c to use SAMBA_VERSION_VENDOR_PATCH which is used by mkversion.sh. --- Summary of changes: source/VERSION |2 +- source/lib/version.c |6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) Changeset truncated at 500 lines: diff --git a/source/VERSION b/source/VERSION index 858b627..c97db4b 100644 --- a/source/VERSION +++ b/source/VERSION @@ -96,4 +96,4 @@ SAMBA_VERSION_IS_GIT_SNAPSHOT=yes # -> "CVS 3.0.0rc2-VendorVersion"# SAMBA_VERSION_VENDOR_SUFFIX="test" -SAMBA_VENDOR_PATCH= +SAMBA_VERSION_VENDOR_PATCH= diff --git a/source/lib/version.c b/source/lib/version.c index cee06fc..ca334a2 100644 --- a/source/lib/version.c +++ b/source/lib/version.c @@ -27,7 +27,7 @@ const char *samba_version_string(void) #else static fstring samba_version; static bool init_samba_version; -#ifdef SAMBA_VENDOR_PATCH +#ifdef SAMBA_VERSION_VENDOR_PATCH fstring tmp_version; size_t remaining; #endif @@ -39,9 +39,9 @@ const char *samba_version_string(void) SAMBA_VERSION_OFFICIAL_STRING, SAMBA_VERSION_VENDOR_SUFFIX); -#ifdef SAMBA_VENDOR_PATCH +#ifdef SAMBA_VERSION_VENDOR_PATCH remaining = sizeof(samba_version)-strlen(samba_version); - snprintf( tmp_version, sizeof(tmp_version), "-%d", SAMBA_VENDOR_PATCH ); + snprintf( tmp_version, sizeof(tmp_version), "-%d", SAMBA_VERSION_VENDOR_PATCH ); strlcat( samba_version, tmp_version, remaining-1 ); #endif -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-83-g3c50caa
The branch, v3-2-test has been updated via 3c50caa9620899f982cd4a833356d965f47ec843 (commit) from 23d3db0c229fe5e1d69f890d87c2be39b356ffb5 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 3c50caa9620899f982cd4a833356d965f47ec843 Author: Volker Lendecke <[EMAIL PROTECTED]> Date: Fri Oct 19 23:21:01 2007 +0200 Fix an incompatible pointer type warning --- Summary of changes: source/winbindd/idmap.c |4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source/winbindd/idmap.c b/source/winbindd/idmap.c index 9800e32..e89ad73 100644 --- a/source/winbindd/idmap.c +++ b/source/winbindd/idmap.c @@ -362,9 +362,9 @@ NTSTATUS idmap_init(void) if ( ! dom_list) { /* generate a list with our main domain */ - char ** dl; + const char ** dl; - dl = talloc_array(idmap_ctx, char *, 2); + dl = talloc_array(idmap_ctx, const char *, 2); if (dl == NULL) { ret = NT_STATUS_NO_MEMORY; goto done; -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-82-g23d3db0
The branch, v3-2-test has been updated via 23d3db0c229fe5e1d69f890d87c2be39b356ffb5 (commit) via aae3d04e30a0e6f21f661da3dc6a2835d31ce964 (commit) via fd28d09a95b31bdbc6babd13c5a4ed9fc9ef4bfd (commit) from 620785df4e57b72471ff0315e22e0d2f28a2b1a5 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 23d3db0c229fe5e1d69f890d87c2be39b356ffb5 Merge: aae3d04e30a0e6f21f661da3dc6a2835d31ce964 620785df4e57b72471ff0315e22e0d2f28a2b1a5 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Oct 19 15:54:32 2007 -0500 Merge branch 'v3-2-test' of ssh://git.samba.org/data/git/samba into v3-2-test commit aae3d04e30a0e6f21f661da3dc6a2835d31ce964 Author: Michael Adam <[EMAIL PROTECTED]> Date: Fri Oct 19 22:42:28 2007 +0200 Streamline logic, reducing the amount of indentation. Michael commit fd28d09a95b31bdbc6babd13c5a4ed9fc9ef4bfd Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Oct 19 14:36:34 2007 -0500 Fix a crash in resolve_hosts() caused by an out-of-bounds array reference. --- Summary of changes: source/rpc_server/srv_srvsvc_nt.c | 31 +++ 1 files changed, 15 insertions(+), 16 deletions(-) Changeset truncated at 500 lines: diff --git a/source/rpc_server/srv_srvsvc_nt.c b/source/rpc_server/srv_srvsvc_nt.c index 27bc807..55c30c5 100644 --- a/source/rpc_server/srv_srvsvc_nt.c +++ b/source/rpc_server/srv_srvsvc_nt.c @@ -2033,22 +2033,21 @@ WERROR _srv_net_file_query_secdesc(pipes_struct *p, SRV_Q_NET_FILE_QUERY_SECDESC } nt_status = open_file_stat(conn, NULL, filename, &st, &fsp); - if ( !NT_STATUS_IS_OK(nt_status)) { - /* Perhaps it is a directory */ - if (NT_STATUS_EQUAL(nt_status, NT_STATUS_FILE_IS_A_DIRECTORY)) - nt_status = open_directory(conn, NULL, filename, &st, - READ_CONTROL_ACCESS, - FILE_SHARE_READ|FILE_SHARE_WRITE, - FILE_OPEN, - 0, - FILE_ATTRIBUTE_DIRECTORY, - NULL, &fsp); - - if (!NT_STATUS_IS_OK(nt_status)) { - DEBUG(3,("_srv_net_file_query_secdesc: Unable to open file %s\n", filename)); - r_u->status = ntstatus_to_werror(nt_status); - goto error_exit; - } + /* Perhaps it is a directory */ + if (NT_STATUS_EQUAL(nt_status, NT_STATUS_FILE_IS_A_DIRECTORY)) { + nt_status = open_directory(conn, NULL, filename, &st, + READ_CONTROL_ACCESS, + FILE_SHARE_READ|FILE_SHARE_WRITE, + FILE_OPEN, + 0, + FILE_ATTRIBUTE_DIRECTORY, + NULL, &fsp); + } + + if (!NT_STATUS_IS_OK(nt_status)) { + DEBUG(3,("_srv_net_file_query_secdesc: Unable to open file %s\n", filename)); + r_u->status = ntstatus_to_werror(nt_status); + goto error_exit; } sd_size = SMB_VFS_GET_NT_ACL(fsp, fsp->fsp_name, (OWNER_SECURITY_INFORMATION|GROUP_SECURITY_INFORMATION|DACL_SECURITY_INFORMATION), &psd); -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - initial-v3-2-unstable-53-g97f9a90
The branch, v3-2-test has been updated via 97f9a90b823887e808cca96eca7a041f121e6111 (commit) from 357f00384994946485a5190b6a9c493aeee53cd2 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 97f9a90b823887e808cca96eca7a041f121e6111 Author: Alexander Bokovoy <[EMAIL PROTECTED]> Date: Mon Oct 15 07:24:44 2007 +0400 Correctly free memory in regfio paths --- Summary of changes: source/registry/regfio.c |4 source/utils/profiles.c |5 - 2 files changed, 8 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source/registry/regfio.c b/source/registry/regfio.c index 6dca0ba..93a2770 100644 --- a/source/registry/regfio.c +++ b/source/registry/regfio.c @@ -1171,6 +1171,7 @@ out: if ( !(rb->mem_ctx = talloc_init( "read_regf_block" )) ) { regfio_close( rb ); + SAFE_FREE(rb); return NULL; } @@ -1181,6 +1182,7 @@ out: if ( (rb->fd = open(filename, flags, mode)) == -1 ) { DEBUG(0,("regfio_open: failure to open %s (%s)\n", filename, strerror(errno))); regfio_close( rb ); + SAFE_FREE(rb); return NULL; } @@ -1190,6 +1192,7 @@ out: if ( !init_regf_block( rb ) ) { DEBUG(0,("regfio_open: Failed to read initial REGF block\n")); regfio_close( rb ); + SAFE_FREE(rb); return NULL; } @@ -1202,6 +1205,7 @@ out: if ( !read_regf_block( rb ) ) { DEBUG(0,("regfio_open: Failed to read initial REGF block\n")); regfio_close( rb ); + SAFE_FREE(rb); return NULL; } diff --git a/source/utils/profiles.c b/source/utils/profiles.c index 7c7b91a..921af56 100644 --- a/source/utils/profiles.c +++ b/source/utils/profiles.c @@ -138,6 +138,7 @@ static BOOL copy_registry_tree( REGF_FILE *infile, REGF_NK_REC *nk, } if ( !(values = TALLOC_ZERO_P( subkeys, REGVAL_CTR )) ) { + TALLOC_FREE( subkeys ); DEBUG(0,("copy_registry_tree: talloc() failure!\n")); return False; } @@ -163,8 +164,10 @@ static BOOL copy_registry_tree( REGF_FILE *infile, REGF_NK_REC *nk, nk->subkey_index = 0; while ( (subkey = regfio_fetch_subkey( infile, nk )) ) { - if ( !copy_registry_tree( infile, subkey, key, outfile, path ) ) + if ( !copy_registry_tree( infile, subkey, key, outfile, path ) ) { + TALLOC_FREE( subkeys ); return False; + } } /* values is a talloc()'d child of subkeys here so just throw it all away */ -- Samba Shared Repository
Re: [SCM] Samba Shared Repository - branch v3-2-test updated
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Guenther Deschner wrote: > Can we also have more uniqueness in the subject line? It > looks funny to have all commits as part of one huge thread. We did but didn't you ask to have the initial-v3-2-test-#-$HASH part removed? I'll add it back in for now. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHD2oUIR7qMdg1EfYRAm5vAKDvubKsDeqOd4T7R9gy1SpmEOHjFwCgn32C a+bthnBaEj945qd69R2LSLs= =Ng5M -END PGP SIGNATURE-
[SCM] Samba Shared Repository branch, v3-2-test, updated. initial-v3-2-unstable-4-gbe91677
The branch, v3-2-test has been updated via be916777da8c681c393b817105e3dfe8a9c4ef12 (commit) from 631464e2651e33812e43fe59c1e49c5d71f9621a (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log - commit be916777da8c681c393b817105e3dfe8a9c4ef12 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Wed Oct 10 19:21:52 2007 -0500 Adding a draft section for 3.2.0pre2 Add the header and "commits since 3.2.0pre1" sections in preparation for another preview release althought we might decide to go stright to RC from here. --- Summary of changes: WHATSNEW.txt | 13 - 1 files changed, 8 insertions(+), 5 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index d11e669..de8df4b 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,9 +1,9 @@ = - Release Notes for Samba 3.2.0pre1 - Sep 28, 2007 + Release Notes for Samba 3.2.0pre2 + Oct XX, 2007 = -This is the first preview release of Samba 3.2.0. This is *not* +This is the second preview release of Samba 3.2.0. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. @@ -117,9 +117,12 @@ smb.conf changes winbind rpc onlyNew No -Commit Highlights: --- +Changes since 3.2.0pre1: +--- + +Original 3.2.0pre1 commits: +--- o Michael Adam <[EMAIL PROTECTED]> * Unified POSIX ACL detection including support for FreeBSD and HP-UX. -- Samba Shared Repository
[SCM] Samba - Draft II. branch, v3-2-test, updated. ad9a1eb599c125964ac3e198d3003841edb4c54e
The branch, v3-2-test has been updated via ad9a1eb599c125964ac3e198d3003841edb4c54e (commit) from f2252e041e075e19bf27e53ab3ed62f39bc8b3e2 (commit) http://gitweb.samba.org/?p=jerry/draft2/samba.git;a=shortlog;h=v3-2-test Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log - commit ad9a1eb599c125964ac3e198d3003841edb4c54e Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Tue Oct 9 12:03:47 2007 -0500 Example file for HOWTO --- Summary of changes: git-test/README |1 + 1 files changed, 1 insertions(+), 0 deletions(-) create mode 100644 git-test/README Changeset truncated at 500 lines: diff --git a/git-test/README b/git-test/README new file mode 100644 index 000..ce01362 --- /dev/null +++ b/git-test/README @@ -0,0 +1 @@ +hello -- Samba - Draft II.
svn commit: samba r25591 - in tags: .
Author: jerry Date: 2007-10-09 13:49:49 + (Tue, 09 Oct 2007) New Revision: 25591 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25591 Log: Copying correct tag for 3.0.3pre2 release. Added: tags/release-3-0-3pre2/ Changeset: Copied: tags/release-3-0-3pre2 (from rev 29, branches/SAMBA_3_0_RELEASE)
svn commit: samba r25590 - in tags: .
Author: jerry Date: 2007-10-09 13:49:02 + (Tue, 09 Oct 2007) New Revision: 25590 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25590 Log: Removing really old bad tag Removed: tags/release-3-0-3pre2/ Changeset:
svn commit: samba r25589 - in tags: .
Author: jerry Date: 2007-10-09 13:28:16 + (Tue, 09 Oct 2007) New Revision: 25589 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25589 Log: Fixing tag for 3.2.0pre1 Added: tags/release-3-2-0pre1/ Changeset: Copied: tags/release-3-2-0pre1 (from rev 25588, branches/SAMBA_3_2_RELEASE)
svn commit: samba r25588 - in tags: .
Author: jerry Date: 2007-10-09 13:27:46 + (Tue, 09 Oct 2007) New Revision: 25588 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25588 Log: Tagged wrong branch Removed: tags/release-3-2-0pre1/ Changeset:
[SCM] UNNAMED PROJECT branch, v3-0-stable, updated. abb1b37035a3f25f31048902c38dfe029cc6c615
The branch, v3-0-stable has been updated via abb1b37035a3f25f31048902c38dfe029cc6c615 (commit) from 963b4b5e0adecbe799005200e69ac3f6b413420f (commit) http://gitweb.samba.org/?p=jerry/draft2/samba.git;a=shortlog;h=v3-0-stable Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log - commit abb1b37035a3f25f31048902c38dfe029cc6c615 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Mon Oct 8 15:29:13 2007 -0500 Adding -stable to vendor tag for version --- Summary of changes: source/VERSION |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source/VERSION b/source/VERSION index 44ef543..cc46fa1 100644 --- a/source/VERSION +++ b/source/VERSION @@ -95,5 +95,5 @@ SAMBA_VERSION_IS_SVN_SNAPSHOT= # e.g. SAMBA_VERSION_VENDOR_SUFFIX=vendor_version()# # -> "CVS 3.0.0rc2-VendorVersion"# -SAMBA_VERSION_VENDOR_SUFFIX= +SAMBA_VERSION_VENDOR_SUFFIX="-stable" SAMBA_VENDOR_PATCH= -- UNNAMED PROJECT
[SCM] Draft Samba Repository branch, v3-2-unstable, updated. ef25dc0a2e84194b46c4b11a0352e9ddd53fca7a
The branch, v3-2-unstable has been updated via ef25dc0a2e84194b46c4b11a0352e9ddd53fca7a (commit) via f33f3af877338563c5b1637aa54e7ab16540861e (commit) from eccfb928f16964e07278747d2d2f13671d939f5c (commit) http://gitweb.samba.org/?p=jerry/samba-draft.git;a=shortlog;h=v3-2-unstable Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log - commit ef25dc0a2e84194b46c4b11a0352e9ddd53fca7a Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Oct 5 17:00:16 2007 -0500 Two commit push to update README commit f33f3af877338563c5b1637aa54e7ab16540861e Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Oct 5 16:58:55 2007 -0500 More commit msg tests --- Summary of changes: README|6 -- Read-Manifest-Now |2 +- 2 files changed, 1 insertions(+), 7 deletions(-) Changeset truncated at 500 lines: diff --git a/README b/README index 1ce6046..e311f3c 100644 --- a/README +++ b/README @@ -2,12 +2,6 @@ This is the release version of Samba, the free SMB and CIFS client and server for UNIX and other operating systems. Samba is maintained by the Samba Team, who support the original author, Andrew Tridgell. ->>>> Please read THE WHOLE of this file as it gives important information ->>>> about the configuration and use of Samba. - -NOTE: Installation instructions may be found in - docs/htmldocs/Samba3-HOWTO/install.html - This software is freely distributable under the GNU public license, a copy of which you should have received with this software (in a file called COPYING). diff --git a/Read-Manifest-Now b/Read-Manifest-Now index 0737e63..bd371ad 100644 --- a/Read-Manifest-Now +++ b/Read-Manifest-Now @@ -1 +1 @@ -Please +iHello World -- Draft Samba Repository
[SCM] Draft Samba Repository branch, v3-2-unstable, updated. eccfb928f16964e07278747d2d2f13671d939f5c
The branch, v3-2-unstable has been updated via eccfb928f16964e07278747d2d2f13671d939f5c (commit) via 34ddbed5875898ba7fa774b89c6845ba5812497e (commit) from baa31a432629ed8aa0df928d5bd963a61c7e1597 (commit) http://gitweb.samba.org/?p=jerry/samba-draft.git;a=commitdiff;h=eccfb928f16964e07278747d2d2f13671d939f5c Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log - commit eccfb928f16964e07278747d2d2f13671d939f5c Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Oct 5 16:38:08 2007 -0500 Testing multiple commits in push commit 34ddbed5875898ba7fa774b89c6845ba5812497e Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Oct 5 16:37:47 2007 -0500 More commit email tests --- Summary of changes: README|2 +- Read-Manifest-Now |2 +- 2 files changed, 2 insertions(+), 2 deletions(-) \nDiff (first 500 lines): diff --git a/README b/README index 1d55a10..1ce6046 100644 --- a/README +++ b/README @@ -16,7 +16,7 @@ called COPYING). WHAT IS SMB/CIFS? = -This is a big question. +This is a big question. (Too hard to answer on a Friday evening) The very short answer is that it is the protocol by which a lot of PC-related machines share files and printers and other information diff --git a/Read-Manifest-Now b/Read-Manifest-Now index 01dc791..0737e63 100644 --- a/Read-Manifest-Now +++ b/Read-Manifest-Now @@ -1 +1 @@ -Please read me! +Please http://gitweb.samba.org/?p=jerry/samba-draft.git;a=commitdiff;h=eccfb928f16964e07278747d2d2f13671d939f5c -- Draft Samba Repository
[SCM] Draft Samba Repository branch, v3-2-unstable, updated. baa31a432629ed8aa0df928d5bd963a61c7e1597
This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "Draft Samba Repository". The branch, v3-2-unstable has been updated via baa31a432629ed8aa0df928d5bd963a61c7e1597 (commit) from fcc549204d1f216603eb095b440096dc8c87c734 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log - commit baa31a432629ed8aa0df928d5bd963a61c7e1597 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Oct 5 16:18:11 2007 -0500 Another test for the post-receive hook --- Summary of changes: Read-Manifest-Now |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) hooks/post-receive -- Draft Samba Repository
Re: [SCM] Draft Samba Repository branch, v3-2-unstable, updated. 4da9ac14bb49c8a977b57c97402244d98aa6fb92
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stefan (metze) Metzmacher wrote: > Yes, I also think we should improve the commit mail content > e.g. add the gitweb url, add the diff and remove some unsed stuff. > > But I think we can do that later Right. So we can tweak that post migration to our heart's content. I won't worry about it right now. - -- jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHBoSVIR7qMdg1EfYRAuBdAJ9XBxAoKlo7q7YJcVIm+dJg3unKpgCgsviP aFCK/K/kwezGXwx41fPFE4k= =mOu+ -END PGP SIGNATURE-
[SCM] Draft Samba Repository branch, v3-2-unstable, updated. eb18d40b2e1411ba48bb15bf2a71e57c32f996dc
This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "Draft Samba Repository". The branch, v3-2-unstable has been updated via eb18d40b2e1411ba48bb15bf2a71e57c32f996dc (commit) via e0eb05ebefa4fc5952398a57302e76d97b81eaf1 (commit) from 4da9ac14bb49c8a977b57c97402244d98aa6fb92 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log - commit eb18d40b2e1411ba48bb15bf2a71e57c32f996dc Merge: 4da9ac14bb49c8a977b57c97402244d98aa6fb92 e0eb05ebefa4fc5952398a57302e76d97b81eaf1 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Oct 5 11:51:45 2007 -0500 Merge branch '3-2-test' of http://apache.plainjoe.org/~coffeedude/git/samba-draft into v3-2-unstable commit e0eb05ebefa4fc5952398a57302e76d97b81eaf1 Author: Gerald Carter <[EMAIL PROTECTED]> Date: Fri Oct 5 11:41:06 2007 -0500 Add emphasis --- Summary of changes: Read-Manifest-Now |1 + 1 files changed, 1 insertions(+), 0 deletions(-) hooks/post-receive -- Draft Samba Repository
Re: [SCM] Draft Samba Repository branch, v3-2-unstable, updated. 4da9ac14bb49c8a977b57c97402244d98aa6fb92
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Fyi... The From: on the commit mail will always be from the person pushing to the repo. But the history in the log commits will be ok. Metze, this is the standard post-receive-email script in the contrib/ directory of the git source code. jerry Gerald (Jerry) Carter wrote: > This is an automated email from the git hooks/post-receive script. It was > generated because a ref change was pushed to the repository containing > the project "Draft Samba Repository". > > The branch, v3-2-unstable has been updated >via 4da9ac14bb49c8a977b57c97402244d98aa6fb92 (commit) >via 50830f057cbea2c9b9a2d02e9aeb207cdb01f626 (commit) > from 8d4599f5f19b16efe3414f0c8fede78b964460c4 (commit) > > Those revisions listed above that are new to this repository have > not appeared on any other notification email; so we list those > revisions in full, below. > > - Log - > commit 4da9ac14bb49c8a977b57c97402244d98aa6fb92 > Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> > Date: Fri Oct 5 11:33:10 2007 -0500 > > Removing old script > > commit 50830f057cbea2c9b9a2d02e9aeb207cdb01f626 > Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> > Date: Fri Oct 5 11:33:04 2007 -0500 > > Updating release notes > > --- > > Summary of changes: > WHATSNEW.txt|2 +- > make-tarball.sh | 67 > --- > 2 files changed, 1 insertions(+), 68 deletions(-) > delete mode 100644 make-tarball.sh > > > hooks/post-receive - -- = Samba--- http://www.samba.org Centeris --- http://www.centeris.com "What man is a man who does not make the world better?" --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHBmiPIR7qMdg1EfYRAie4AKCAI7PuAIzedVt6ramNMb+ZjWmwJgCfQi7e L3iqmtRwnzGelyP1Dp8anz4= =mtDr -END PGP SIGNATURE-
[SCM] Draft Samba Repository branch, v3-2-unstable, updated. 4da9ac14bb49c8a977b57c97402244d98aa6fb92
This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "Draft Samba Repository". The branch, v3-2-unstable has been updated via 4da9ac14bb49c8a977b57c97402244d98aa6fb92 (commit) via 50830f057cbea2c9b9a2d02e9aeb207cdb01f626 (commit) from 8d4599f5f19b16efe3414f0c8fede78b964460c4 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log - commit 4da9ac14bb49c8a977b57c97402244d98aa6fb92 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Oct 5 11:33:10 2007 -0500 Removing old script commit 50830f057cbea2c9b9a2d02e9aeb207cdb01f626 Author: Gerald (Jerry) Carter <[EMAIL PROTECTED]> Date: Fri Oct 5 11:33:04 2007 -0500 Updating release notes --- Summary of changes: WHATSNEW.txt|2 +- make-tarball.sh | 67 --- 2 files changed, 1 insertions(+), 68 deletions(-) delete mode 100644 make-tarball.sh hooks/post-receive -- Draft Samba Repository
svn commit: samba-web r1149 - in trunk: .
Author: jerry Date: 2007-09-29 04:26:39 + (Sat, 29 Sep 2007) New Revision: 1149 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1149 Log: Fix formatting typo Modified: trunk/index.html Changeset: Modified: trunk/index.html === --- trunk/index.html2007-09-29 04:25:02 UTC (rev 1148) +++ trunk/index.html2007-09-29 04:26:39 UTC (rev 1149) @@ -28,7 +28,7 @@ the Release Notes. Please report any defects via the Samba bug reporting system at the https://bugzilla.samba.org/";>Samba - Bugzilla System. + Bugzilla System. Be aware that Samba is now distributed under the version 3 of the new GNU General Public License. The
svn commit: samba-web r1148 - in trunk: .
Author: jerry Date: 2007-09-29 04:25:02 + (Sat, 29 Sep 2007) New Revision: 1148 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-web&rev=1148 Log: Announce 3.2.0pre1 Modified: trunk/index.html Changeset: Modified: trunk/index.html === --- trunk/index.html2007-09-20 20:30:11 UTC (rev 1147) +++ trunk/index.html2007-09-29 04:25:02 UTC (rev 1148) @@ -19,6 +19,30 @@ Current Release +28 Sep 2007 +Samba 3.2.0pre1 Available for Download + +The first preview release of Samba 3.2.0 is now available for + testing. This release is not intended for production + servers. An overview of the included changes are described in + the Release + Notes. Please report any defects via the Samba bug reporting + system at the https://bugzilla.samba.org/";>Samba + Bugzilla System. + +Be aware that Samba is now distributed under the version + 3 of the new GNU General Public License. The + http://news.samba.org/announcements/samba_gplv3/";>original +announcement can be read online. + +The Samba 3.2.0pre1 source code + can be downloaded now. If you prefer, the patch + files against previous releases are also available for download. + Please read these instructions on + how to verify the gpg signature. Precompiled packages will + be made available on a volunteer basis and can be found in the + Binary_Packages download area. + 11 Sep 2007 Samba 3.0.26 and Samba 3.0.26a Available for Download
svn commit: samba-docs r1188 - in tags: .
Author: jerry Date: 2007-09-28 20:24:21 + (Fri, 28 Sep 2007) New Revision: 1188 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-docs&rev=1188 Log: tagging 3.2.0pre1 Added: tags/release-3-2-0pre1/ Changeset: Copied: tags/release-3-2-0pre1 (from rev 1187, trunk)
svn commit: samba r25414 - in tags: .
Author: jerry Date: 2007-09-28 20:24:12 + (Fri, 28 Sep 2007) New Revision: 25414 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25414 Log: tagging 3.2.0pre1 Added: tags/release-3-2-0pre1/ Changeset: Copied: tags/release-3-2-0pre1 (from rev 25413, branches/SAMBA_3_0_RELEASE)
svn commit: samba r25413 - in branches/SAMBA_3_2_RELEASE: .
Author: jerry Date: 2007-09-28 20:15:30 + (Fri, 28 Sep 2007) New Revision: 25413 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25413 Log: Formatting an typo fixes for release notes. Modified: branches/SAMBA_3_2_RELEASE/WHATSNEW.txt Changeset: Modified: branches/SAMBA_3_2_RELEASE/WHATSNEW.txt === --- branches/SAMBA_3_2_RELEASE/WHATSNEW.txt 2007-09-28 20:12:00 UTC (rev 25412) +++ branches/SAMBA_3_2_RELEASE/WHATSNEW.txt 2007-09-28 20:15:30 UTC (rev 25413) @@ -6,7 +6,7 @@ This is the first preview release of Samba 3.2.0. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting -system and https://bugzilla.samba.org/. +system at https://bugzilla.samba.org/. Please be aware that Samba is now distributed under the version 3 of the new GNU General Public License. You may refer to the COPYING @@ -17,11 +17,9 @@ File Serving: o Use of IDL generated parsing layer for several DCE/RPC interfaces. - o Removal of the 1024 byte limit on pathnames and 256 byte limit -on filename components to honor the MAX_PATH setting from the host -OS. - o Introduction of a registry based configuration system for file -shares. + o Removal of the 1024 byte limit on pathnames and 256 byte limit on +filename components to honor the MAX_PATH setting from the host OS. + o Introduction of a registry based configuration system. o Improved CIFS Unix Extensions support. o Experimental support for file serving clusters. @@ -40,6 +38,7 @@ o New ldb backend for local group mapping tables o Raised level of security defaults for authentication operations. + Documentation: o Inclusion of an HTLM version of the 3rd edition of "Using Samba" from O'Reilly Publishing.
svn commit: samba r25412 - in branches/SAMBA_3_2_RELEASE: .
Author: jerry Date: 2007-09-28 20:12:00 + (Fri, 28 Sep 2007) New Revision: 25412 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25412 Log: Add note about including HTML of Using Samba Modified: branches/SAMBA_3_2_RELEASE/WHATSNEW.txt Changeset: Modified: branches/SAMBA_3_2_RELEASE/WHATSNEW.txt === --- branches/SAMBA_3_2_RELEASE/WHATSNEW.txt 2007-09-28 18:54:55 UTC (rev 25411) +++ branches/SAMBA_3_2_RELEASE/WHATSNEW.txt 2007-09-28 20:12:00 UTC (rev 25412) @@ -40,7 +40,11 @@ o New ldb backend for local group mapping tables o Raised level of security defaults for authentication operations. + Documentation: + o Inclusion of an HTLM version of the 3rd edition of "Using Samba" +from O'Reilly Publishing. + Now Licensed under the GNU GPLv3
svn commit: samba r25408 - in branches/SAMBA_3_2_RELEASE: .
Author: jerry Date: 2007-09-28 18:26:51 + (Fri, 28 Sep 2007) New Revision: 25408 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25408 Log: Remove Longhorn join fixes from release notes Modified: branches/SAMBA_3_2_RELEASE/WHATSNEW.txt Changeset: Modified: branches/SAMBA_3_2_RELEASE/WHATSNEW.txt === --- branches/SAMBA_3_2_RELEASE/WHATSNEW.txt 2007-09-28 18:15:34 UTC (rev 25407) +++ branches/SAMBA_3_2_RELEASE/WHATSNEW.txt 2007-09-28 18:26:51 UTC (rev 25408) @@ -33,7 +33,6 @@ lookups. o Support in pam_winbind for logging on using the userPrincipalName. o Expansion of nested domain groups via NSS calls. - o Support for joining Windows Longhorn Active Directory domains. o Support for Active Directory LDAP Signing policy. @@ -226,11 +225,6 @@ * Fixes for IDmap and Passdb backends. -o Todd Stecher <[EMAIL PROTECTED]> -* Windows 2008 interop fixes for domain member servers and client - tools. - - o Andrew Tridgell <[EMAIL PROTECTED]> * Port ldb from the Samba 4 tree and add ldb group mapping plugin. * Move several file serving related tdb files to use the dbwrap
svn commit: samba r25405 - in branches: SAMBA_3_2/source/groupdb SAMBA_3_2_0/source/groupdb
Author: jerry Date: 2007-09-28 18:09:50 + (Fri, 28 Sep 2007) New Revision: 25405 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25405 Log: Fix formatting as per metze's comments Modified: branches/SAMBA_3_2/source/groupdb/mapping.c branches/SAMBA_3_2_0/source/groupdb/mapping.c Changeset: Modified: branches/SAMBA_3_2/source/groupdb/mapping.c === --- branches/SAMBA_3_2/source/groupdb/mapping.c 2007-09-28 05:19:37 UTC (rev 25404) +++ branches/SAMBA_3_2/source/groupdb/mapping.c 2007-09-28 18:09:50 UTC (rev 25405) @@ -35,7 +35,7 @@ return True; } - backend = groupdb_ldb_init(); + backend = groupdb_ldb_init(); return backend != NULL; } Modified: branches/SAMBA_3_2_0/source/groupdb/mapping.c === --- branches/SAMBA_3_2_0/source/groupdb/mapping.c 2007-09-28 05:19:37 UTC (rev 25404) +++ branches/SAMBA_3_2_0/source/groupdb/mapping.c 2007-09-28 18:09:50 UTC (rev 25405) @@ -35,7 +35,7 @@ return True; } - backend = groupdb_ldb_init(); + backend = groupdb_ldb_init(); return backend != NULL; }
svn commit: samba r25403 - in branches/SAMBA_3_2_RELEASE/source: auth groupdb include lib libads libsmb modules passdb printing rpc_client rpc_parse rpc_server rpcclient smbd utils winbindd
Author: jerry Date: 2007-09-28 04:21:54 + (Fri, 28 Sep 2007) New Revision: 25403 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25403 Log: grab latest changes form 3.2 tree in preparation for release of 3.2.0pre1 Modified: branches/SAMBA_3_2_RELEASE/source/auth/auth_domain.c branches/SAMBA_3_2_RELEASE/source/auth/auth_sam.c branches/SAMBA_3_2_RELEASE/source/groupdb/mapping.c branches/SAMBA_3_2_RELEASE/source/include/rpc_dce.h branches/SAMBA_3_2_RELEASE/source/include/vfs.h branches/SAMBA_3_2_RELEASE/source/lib/util.c branches/SAMBA_3_2_RELEASE/source/libads/sasl.c branches/SAMBA_3_2_RELEASE/source/libads/util.c branches/SAMBA_3_2_RELEASE/source/libsmb/cliconnect.c branches/SAMBA_3_2_RELEASE/source/libsmb/clispnego.c branches/SAMBA_3_2_RELEASE/source/libsmb/namequery.c branches/SAMBA_3_2_RELEASE/source/libsmb/trusts_util.c branches/SAMBA_3_2_RELEASE/source/modules/vfs_aixacl.c branches/SAMBA_3_2_RELEASE/source/modules/vfs_aixacl_util.c branches/SAMBA_3_2_RELEASE/source/modules/vfs_full_audit.c branches/SAMBA_3_2_RELEASE/source/passdb/pdb_interface.c branches/SAMBA_3_2_RELEASE/source/printing/printing.c branches/SAMBA_3_2_RELEASE/source/rpc_client/cli_pipe.c branches/SAMBA_3_2_RELEASE/source/rpc_parse/parse_spoolss.c branches/SAMBA_3_2_RELEASE/source/rpc_server/srv_dfs_nt.c branches/SAMBA_3_2_RELEASE/source/rpcclient/cmd_samr.c branches/SAMBA_3_2_RELEASE/source/rpcclient/rpcclient.c branches/SAMBA_3_2_RELEASE/source/smbd/open.c branches/SAMBA_3_2_RELEASE/source/utils/net_rpc_join.c branches/SAMBA_3_2_RELEASE/source/utils/net_rpc_samsync.c branches/SAMBA_3_2_RELEASE/source/winbindd/winbindd_cm.c Changeset: Sorry, the patch is too large (722 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25403
svn commit: samba r25402 - in branches/SAMBA_3_2/source/utils: .
Author: jerry Date: 2007-09-28 04:08:58 + (Fri, 28 Sep 2007) New Revision: 25402 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25402 Log: BUG 4997 (3.2 only): Fix enumration level for smbtree Modified: branches/SAMBA_3_2/source/utils/smbtree.c Changeset: Modified: branches/SAMBA_3_2/source/utils/smbtree.c === --- branches/SAMBA_3_2/source/utils/smbtree.c 2007-09-28 03:56:12 UTC (rev 25401) +++ branches/SAMBA_3_2/source/utils/smbtree.c 2007-09-28 04:08:58 UTC (rev 25402) @@ -157,7 +157,6 @@ } ZERO_STRUCT(ctr1); - level = 1; ctr.ctr1 = &ctr1; status = rpccli_srvsvc_NetShareEnum(pipe_hnd, mem_ctx, NULL,
svn commit: samba r25401 - in branches: SAMBA_3_2/source/auth SAMBA_3_2/source/passdb SAMBA_3_2_0/source/auth SAMBA_3_2_0/source/passdb
Author: jerry Date: 2007-09-28 03:56:12 + (Fri, 28 Sep 2007) New Revision: 25401 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25401 Log: BUG 4982: Don't delete lanman hashes on invalid logins when using the "lanman auth = no". Tested by Guenter Kukkukk. Modified: branches/SAMBA_3_2/source/auth/auth_sam.c branches/SAMBA_3_2/source/passdb/pdb_interface.c branches/SAMBA_3_2_0/source/auth/auth_sam.c branches/SAMBA_3_2_0/source/passdb/pdb_interface.c Changeset: Modified: branches/SAMBA_3_2/source/auth/auth_sam.c === --- branches/SAMBA_3_2/source/auth/auth_sam.c 2007-09-28 03:54:42 UTC (rev 25400) +++ branches/SAMBA_3_2/source/auth/auth_sam.c 2007-09-28 03:56:12 UTC (rev 25401) @@ -294,14 +294,16 @@ nt_status = sam_password_ok(auth_context, mem_ctx, sampass, user_info, &user_sess_key, &lm_sess_key); - /* Notify passdb backend of login success/failure. If not NT_STATUS_OK the backend doesn't like the login */ + /* Notify passdb backend of login success/failure. If not + NT_STATUS_OK the backend doesn't like the login */ + update_login_attempts_status = pdb_update_login_attempts(sampass, NT_STATUS_IS_OK(nt_status)); - if (!NT_STATUS_IS_OK(update_login_attempts_status)) - nt_status = update_login_attempts_status; if (!NT_STATUS_IS_OK(nt_status)) { if (NT_STATUS_EQUAL(nt_status,NT_STATUS_WRONG_PASSWORD) && - pdb_get_acct_ctrl(sampass) &ACB_NORMAL) { + pdb_get_acct_ctrl(sampass) &ACB_NORMAL && + NT_STATUS_IS_OK(update_login_attempts_status)) + { pdb_increment_bad_password_count(sampass); updated_badpw = True; } else { Modified: branches/SAMBA_3_2/source/passdb/pdb_interface.c === --- branches/SAMBA_3_2/source/passdb/pdb_interface.c2007-09-28 03:54:42 UTC (rev 25400) +++ branches/SAMBA_3_2/source/passdb/pdb_interface.c2007-09-28 03:56:12 UTC (rev 25401) @@ -1168,7 +1168,7 @@ static NTSTATUS pdb_default_update_login_attempts (struct pdb_methods *methods, struct samu *newpwd, BOOL success) { - return NT_STATUS_OK; + return NT_STATUS_NOT_IMPLEMENTED; } static NTSTATUS pdb_default_setsampwent(struct pdb_methods *methods, BOOL update, uint32 acb_mask) Modified: branches/SAMBA_3_2_0/source/auth/auth_sam.c === --- branches/SAMBA_3_2_0/source/auth/auth_sam.c 2007-09-28 03:54:42 UTC (rev 25400) +++ branches/SAMBA_3_2_0/source/auth/auth_sam.c 2007-09-28 03:56:12 UTC (rev 25401) @@ -294,14 +294,16 @@ nt_status = sam_password_ok(auth_context, mem_ctx, sampass, user_info, &user_sess_key, &lm_sess_key); - /* Notify passdb backend of login success/failure. If not NT_STATUS_OK the backend doesn't like the login */ + /* Notify passdb backend of login success/failure. If not + NT_STATUS_OK the backend doesn't like the login */ + update_login_attempts_status = pdb_update_login_attempts(sampass, NT_STATUS_IS_OK(nt_status)); - if (!NT_STATUS_IS_OK(update_login_attempts_status)) - nt_status = update_login_attempts_status; if (!NT_STATUS_IS_OK(nt_status)) { if (NT_STATUS_EQUAL(nt_status,NT_STATUS_WRONG_PASSWORD) && - pdb_get_acct_ctrl(sampass) &ACB_NORMAL) { + pdb_get_acct_ctrl(sampass) &ACB_NORMAL && + NT_STATUS_IS_OK(update_login_attempts_status)) + { pdb_increment_bad_password_count(sampass); updated_badpw = True; } else { Modified: branches/SAMBA_3_2_0/source/passdb/pdb_interface.c === --- branches/SAMBA_3_2_0/source/passdb/pdb_interface.c 2007-09-28 03:54:42 UTC (rev 25400) +++ branches/SAMBA_3_2_0/source/passdb/pdb_interface.c 2007-09-28 03:56:12 UTC (rev 25401) @@ -1168,7 +1168,7 @@ static NTSTATUS pdb_default_update_login_attempts (struct pdb_methods *methods, struct samu *newpwd, BOOL success) { - return NT_STATUS_OK; + return NT_STATUS_NOT_IMPLEMENTED; } static NTSTATUS pdb_default_setsampwent(struct pdb_methods *methods, BOOL update, uint32 acb_mask)
svn commit: samba r25393 - in branches: SAMBA_3_2/source/groupdb SAMBA_3_2_0/source/groupdb
Author: jerry Date: 2007-09-27 23:33:35 + (Thu, 27 Sep 2007) New Revision: 25393 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25393 Log: Removed unused variable Modified: branches/SAMBA_3_2/source/groupdb/mapping.c branches/SAMBA_3_2_0/source/groupdb/mapping.c Changeset: Modified: branches/SAMBA_3_2/source/groupdb/mapping.c === --- branches/SAMBA_3_2/source/groupdb/mapping.c 2007-09-27 23:31:28 UTC (rev 25392) +++ branches/SAMBA_3_2/source/groupdb/mapping.c 2007-09-27 23:33:35 UTC (rev 25393) @@ -30,8 +30,6 @@ */ static BOOL init_group_mapping(void) { - const char *backend_string; - if (backend != NULL) { /* already initialised */ return True; Modified: branches/SAMBA_3_2_0/source/groupdb/mapping.c === --- branches/SAMBA_3_2_0/source/groupdb/mapping.c 2007-09-27 23:31:28 UTC (rev 25392) +++ branches/SAMBA_3_2_0/source/groupdb/mapping.c 2007-09-27 23:33:35 UTC (rev 25393) @@ -30,8 +30,6 @@ */ static BOOL init_group_mapping(void) { - const char *backend_string; - if (backend != NULL) { /* already initialised */ return True;
svn commit: samba r25382 - in branches/SAMBA_3_2_RELEASE: .
Author: jerry Date: 2007-09-27 20:14:02 + (Thu, 27 Sep 2007) New Revision: 25382 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25382 Log: Commit release notes for 3.2.0pre1: Modified: branches/SAMBA_3_2_RELEASE/WHATSNEW.txt Changeset: Modified: branches/SAMBA_3_2_RELEASE/WHATSNEW.txt === --- branches/SAMBA_3_2_RELEASE/WHATSNEW.txt 2007-09-27 20:12:58 UTC (rev 25381) +++ branches/SAMBA_3_2_RELEASE/WHATSNEW.txt 2007-09-27 20:14:02 UTC (rev 25382) @@ -1,5 +1,266 @@ - == - Release Notes for Samba 3.2.x - XX ##, 200Y - == + = + Release Notes for Samba 3.2.0pre1 + Sep 28, 2007 + = +This is the first preview release of Samba 3.2.0. This is *not* +intended for production environments and is designed for testing +purposes only. Please report any defects via the Samba bug reporting +system and https://bugzilla.samba.org/. + +Please be aware that Samba is now distributed under the version 3 +of the new GNU General Public License. You may refer to the COPYING +file that accompanies these release notes for further licensing details. + +Major enhancements in Samba 3.2.0 include: + + File Serving: + o Use of IDL generated parsing layer for several DCE/RPC +interfaces. + o Removal of the 1024 byte limit on pathnames and 256 byte limit +on filename components to honor the MAX_PATH setting from the host +OS. + o Introduction of a registry based configuration system for file +shares. + o Improved CIFS Unix Extensions support. + o Experimental support for file serving clusters. + + + Winbind and Active Directory Integration: + o Full support for Windows 2003 cross-forest, transitive trusts +and one-way domain trusts + o Support for userPrincipalName logons via pam_winbind and NSS +lookups. + o Support in pam_winbind for logging on using the userPrincipalName. + o Expansion of nested domain groups via NSS calls. + o Support for joining Windows Longhorn Active Directory domains. + o Support for Active Directory LDAP Signing policy. + + + Users & Groups: + o New ldb backend for local group mapping tables + o Raised level of security defaults for authentication operations. + + +Now Licensed under the GNU GPLv3 + + +The Samba Team has adopted the Version 3 of the GNU General Public +License for the 3.2 and later releases. The GPLv3 is the updated +version of the GPLv2 license under which Samba is currently +distributed. It has been updated to improvecompatibility with other +licenses and to make it easier to adopt internationally, and is an +improved version of the license to better suit the needs of Free +Software in the 21st Century. + +The original announcement is available on-line at + +http://news.samba.org/announcements/samba_gplv3/ + + +New Security Defaults for Authentication + + +Support for LanMan passwords is now disabled in both client and server +applications. Additionally, clear text authentication requests are +disabled by default in client utilities such as smbclient and all +libsmbclient based applications. This will affect connection both +to and from hosts running DOS, Windows 9x/ME, and OS/2. Please refer +to the "Changes" section for details on the exact parameters that were +updated. + + + +Registry Configuration Backend +== + +Samba is now able to use a registry based configuration backed to +supplement smb.conf setting. This feature may be enabled by setting +"include = registry" and "registry shares = yes" in the [global] +section of smb.conf and may be managed using the "net conf" command. + +More information may be obtained from the smb.conf(5) and net(8) man +pages. + + +Removed Features + + +Both the Python bindings and the libmsrpc shared library have been +removed from the tree due to lack of an official maintainer. + + + +## +Changes +### + +smb.conf changes + + +Parameter Name Description Default +-- --- --- +client lanman auth Changed Default No +client ldap sasl wrapping New plain +client plaintext auth Changed Default No +clustering New No +cluster addresses New "" +ctdb socketNew "" +lanma
svn commit: samba r25381 - in branches/SAMBA_3_2_0: .
Author: jerry Date: 2007-09-27 20:12:58 + (Thu, 27 Sep 2007) New Revision: 25381 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25381 Log: sync coding style guide from 3.2 branch Modified: branches/SAMBA_3_2_0/README.Coding Changeset: Modified: branches/SAMBA_3_2_0/README.Coding === --- branches/SAMBA_3_2_0/README.Coding 2007-09-27 20:12:40 UTC (rev 25380) +++ branches/SAMBA_3_2_0/README.Coding 2007-09-27 20:12:58 UTC (rev 25381) @@ -79,6 +79,11 @@ " Show tabs, trailing whitespace, and continued lines visually set list listchars=tab:»·,trail:·,extends:… + " highlight overly long lines same as TODOs. + set textwidth=80 + autocmd BufNewFile,BufRead *.c,*.h exec 'match Todo /\%>' . &textwidth . 'v.\+/' + + = FAQ & Statement Reference =