The branch, v3-2-stable has been updated via 98c9a24a01c72d25b3b7eeb2697a2964f08b3d76 (commit) via e892c4faa28193a6529464159e759d8d2b0d92d4 (commit) via 4afb8f741152282c7426592336b2e1e22abc61dd (commit) via efc993a2aa6d0745c5868080640ebea3409b6818 (commit) via 51f6f4343568b19e4c6ba2a3f919931b26228531 (commit) via d0690a1f34658f0c08307d5287eba5ca2d2da9d5 (commit) from 8ba1a1f61986132bb6f5b2f36b59a73e952b381d (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log ----------------------------------------------------------------- commit 98c9a24a01c72d25b3b7eeb2697a2964f08b3d76 Author: Karolin Seeger <ksee...@samba.org> Date: Mon Jun 15 10:25:48 2009 +0200 WHATSNEW: Update changes since 3.2.11. Karolin (cherry picked from commit f2ae8244603a4232331b7c3128661aec08ecd977) commit e892c4faa28193a6529464159e759d8d2b0d92d4 Author: Karolin Seeger <ksee...@samba.org> Date: Fri Jun 12 15:06:32 2009 +0200 WHATSNEW: Attach old release notes. Karolin (cherry picked from commit fb5b65081ea2199e2c3b3a36acfe578b5c2f15d1) commit 4afb8f741152282c7426592336b2e1e22abc61dd Author: Sébastien Prud'homme <sebastien.prudho...@gmail.com> Date: Fri Jun 12 09:11:57 2009 +0200 s3/idmap: Fix out of memory error with Winbind idmap. This fixes bug #5945. (cherry picked from commit a7735416792f8156e53a04af98e7e2dff0b6707d) commit efc993a2aa6d0745c5868080640ebea3409b6818 Author: Jeremy Allison <j...@samba.org> Date: Fri Jun 12 10:27:07 2009 +0200 Revert the extra SAMR and LSA checks. These were added between 3.2.4 and 3.2.5 that have caused users problems. This fixes among others bug #6089 and #6112. (cherry picked from commit f2a29585123e6072a75eb9abdd202f99f5a01e1e) commit 51f6f4343568b19e4c6ba2a3f919931b26228531 Author: Günther Deschner <g...@samba.org> Date: Sun Jun 7 11:23:09 2009 +0200 s3-groupdb: fix enum_aliasmem in ldb branch. It is totally valid to have an alias with no members. This fixes bug #6465. Tridge, please check. Found by RPC-SAMR torture test. Guenther (cherry picked from commit d27c4346397b828e3d7d01473f174577440d950a) commit d0690a1f34658f0c08307d5287eba5ca2d2da9d5 Author: Günther Deschner <g...@samba.org> Date: Fri Jun 12 00:46:38 2009 +0200 s3-docs: Fix Bug #4280. Shutdown scripts are called as root for privileged users. GUenther (cherry picked from commit 3938d1e5fa1996f64e92d33d6893bab620d16b23) (cherry picked from commit 0491f038403036814acf6eacc7bb742345bbe27b) (cherry picked from commit d4b57dab0beada704fcbeae86ae5b5dd257030a0) (cherry picked from commit 191f34654b653ed1f376c842d2d023c43eb866e0) ----------------------------------------------------------------------- Summary of changes: WHATSNEW.txt | 1648 +++++++++++++++++++++ docs-xml/smbdotconf/logon/abortshutdownscript.xml | 2 +- docs-xml/smbdotconf/logon/shutdownscript.xml | 2 +- source/groupdb/mapping_ldb.c | 2 +- source/rpc_server/srv_lsa_nt.c | 12 - source/rpc_server/srv_samr_nt.c | 58 - source/winbindd/idmap.c | 8 +- 7 files changed, 1657 insertions(+), 75 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 684e88c..5e1defb 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -8,6 +8,7 @@ This is a maintenance release of the Samba 3.2 series. Major enhancements in 3.2.12 include: + o Fix SAMR and LSA checks (bug #6089, #6289) o Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). o Fix "force user" (bug #6291). @@ -28,8 +29,10 @@ o Michael Adam <ob...@samba.org> o Jeremy Allison <j...@samba.org> + * BUG 6089: Revert the extra SAMR and LSA checks. * BUG 6099: Fix joining of Win7 into Samba domain. * BUG 6279: Fix Winbind crash. + * BUG 6289: Revert the extra SAMR and LSA checks. * BUG 6291: Fix "force user". * BUG 6386: Groupdb mapping fix. * Fix bug in processing of open modes in POSIX open. @@ -39,6 +42,7 @@ o Guenther Deschner <g...@samba.org> * BUG 6099: Fix joining of Win7 into Samba domain. * BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. * BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + * BUG 6465: Fix enumeration of empty aliases (ldb backend). * Protect netlogon_creds_server_step() against NULL creds. @@ -62,6 +66,10 @@ o D.L. Meyer <dlme...@uiuc.edu> * BUG 5832: Fix build on RHEL when ccache is not available. +o Sébastien Prud'homme <sebastien.prudho...@gmail.com> + * BUG 5945: Fix out of memory error with Winbind idmap. + + o Karolin Seeger <ksee...@samba.org> * BUG 5853: Add keyutils-devel to build requires. @@ -90,3 +98,1643 @@ database (https://bugzilla.samba.org/). == The Samba Team ====================================================================== + +Release notes for older releases follow: +---------------------------------------- + + + ============================== + Release Notes for Samba 3.2.11 + April 17, 2009 + ============================== + + +This is a maintenance release of the Samba 3.2 series. + +Major enhancements in 3.2.11 include: + + o Fix domain logins for WinXP clients pre SP3 (bug #6263). + o Fix samr_OpenDomain access checks (bug #6089). + o Fix smbd crash for close_on_completion. + + +###################################################################### +Changes +####### + +Changes since 3.2.10 +-------------------- + + +o Jeremy Allison <j...@samba.org> + * BUG 6089: Fix samr_OpenDomain access checks. + * BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with + "msdfs root" set to "yes". + * Allow pdbedit to change a user rid/sid. + * When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + + +o Günther Deschner <g...@samba.org> + * BUG 6205: Correct sample smb.conf share configuration. + * BUG 6263: Fix domain logins for WinXP clients pre SP3. + * Fix resume command typo for "printing = vlp". + + +o Volker Lendecke <v...@samba.org> + * Fix smbd crash for close_on_completion. + * Fix a memleak in an unlikely error path in change_notify_create(). + + +o Jim McDonough <j...@samba.org> + * Don't look up local user for remote changes, even when root. + + +###################################################################### +Reporting bugs & Development Discussion +####################################### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.2 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +====================================================================== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +====================================================================== + + +---------------------------------------------------------------------- + + + ============================== + Release Notes for Samba 3.2.10 + April 1, 2009 + ============================== + + +This is a maintenance release of the Samba 3.2 series. + +In Samba 3.2.9, there is an issue while migrating passdb.tdb files from older +Samba versions (e.g. 3.2.8). That causes panics of smbd child processes until +the parent smbd is restarted once after converting the passdb.tdb file. This +issue is fixed in Samba 3.2.10. + +Sorry for the inconveniences! + +###################################################################### +Changes +####### + +Changes since 3.2.9 +------------------- + + +o Michael Adam <ob...@samba.org> + * BUG #6195: Don't let smbd child processes panic. + + +###################################################################### +Reporting bugs & Development Discussion +####################################### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.2 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +====================================================================== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +====================================================================== + + +---------------------------------------------------------------------- + + + ============================= + Release Notes for Samba 3.2.9 + March 31, 2009 + ============================= + + +This is a maintenance release of the Samba 3.2 series. + +Major enhancements included in Samba 3.2.9 are: + + o Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb + correctly (bug #6195). + o Fix guest authentication in setups with "security = share" and + "guest ok = yes" when Winbind is running. + o Fix corruptions of source path in tar mode of smbclient (bug #6161). + + +The original security announcement for this and past advisories can +be found http://www.samba.org/samba/security/ + + +###################################################################### +Changes +####### + +Changes since 3.2.8 +------------------- + + +o Michael Adam <ob...@samba.org> + * Add script fill-templates. + * Make update-pkginfo callable from any directory. + + +o Jeremy Allison <j...@samba.org> + * BUG 6099: Samba returns incurrate capabilities list. + * BUG 6133: Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL + filesystem. + * BUG 6161: smbclient corrupts source path in tar mode. + * BUG 6195: Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb + correctly. + * BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + * BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to + run elections. + * Correctly use chroot(). + * Parameterize in local.h the MAX_RPC_DATA_SIZE, and ensure + that "offered" read from the rpc packet in spoolss is under + that size. + * Fix Coverity ID 602. + * Backport the semantics of when to delete alternate data streams on a file + truncate. + * Allow set attributes on a stream fnum to be redirected to the base + filename. + * Fix use of streams modules with CIFSFS client. + * Fix more POSIX path lstat calls. + * Allow DFS client paths to work when POSIX pathnames have been + selected. + * Try and fix the build farm RAW-STREAMS errors. + * Ensure files starting with multiple dots are hidden. + + +o Steven Danneman <steven.danne...@isilon.com> + * Fix guest auth when Winbind is running. + + +o Günther Deschner <g...@samba.org> + * BUG 6102: NetQueryDisplayInformation could return wrong information. + * BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + * Fix memleak in get_remote_printer_publishing_data(). + * Add pidl in order to be able to regenerate librpc functions. + * Fix Coverity IDs 722, 762. + + +o Steve French <smfre...@gmail.com> + * cifs mount fix for handling -V parameter. + * Fix guest mounts. + + +o Holger Hetterich <hhet...@novell.com> + * Enable total anonymization in vfs_smb_traffic_analyzer. + + +o Björn Jacke <b...@sernet.de> + * Enable IPv6 support for NetBSD and FreeBSD. + * Prefer gssapi header files from subdirectory. + * Fix build on old Heimdal based systems. + * Use parentheses in if condition to make negation clear. + + +o Günter Kukkukk <li...@kukkukk.com> + * Don't try and delete a default ACL from a file. + + +o Jeff Layton <jlay...@redhat.com> + * Initialize rc to 0 in main. + + +o Volker Lendecke <v...@sernet.de> + * BUG 6100: Complete fix. + * BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped + members. + * BUG 6097: Fix smbd segfault. + * Fix remotely adding a share via MMC. + * Fix resume handle for _samr_EnumDomainGroups. + * Fix Coverity IDs 742, 744, 745, 879, 880. + * Fix a buffer handling bug when adding lots of registry keys. + * Fix a O(n^2) algorithm in regdb_fetch_keys(). + * Fix an uninitialized variable warning. + * Fix a valgrind error / segfault in dns_register_smbd(). + * Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + * Fix a malloc/talloc mismatch when cli_initialise() fails. + * Fix a valgrind error. + * Fix two memleaks in the encryption code. + * Fix gcc 4.4 compile warning. + * Fix a scary "fill_share_mode_lock failed" message. + + +o Derrell Lipman <derr...@dworkin.(none)> + * BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't + set errno. + + +o Stefan Metzmacher <me...@samba.org + * BUG 6100: Implement _netr_LogonGetCapabilities() with + NT_STATUS_NOT_IMPLEMENTED. + * Add S-1-22-X-Y sids to the local token. + * Add idl for netr_LogonGetCapabilities(). + * Fix the build on SLES8. + * Fix smb signing for fragmented trans/trans2/nttrans requests. + + +o Glenn Machin <gmac...@sandia.gov> + * Don't miss an absolute pathname as a kerberos keytab path. + + +o Shirish Pargaonkar <shirishpargaon...@gmail.com> + * Clean-up entries in /etc/mtab after unmount. + * Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + + +o Ted Percival <ted.perci...@quest.com> + * Fix a crash during name resolution when log level >= 10 and libc + segfaults if printf is passed NULL for a "%s" arg (e.g. Solaris). + + +o Tim Prouty <tpro...@samba.org> + * Fix SMB_VFS_RECVFILE/SENDFILE macros. + * Parse_packet can return NULL which is then dereferenced in + match_mailslot_name. + + +o Dan Sledz <dsl...@isilon.com> + * Fix double free caused by incorrect talloc_steal usage. + + +o Aravind Srinivasan <aravind.sriniva...@isilon.com> + * Have nmbd check all available interfaces for WINS before failing. + + +o Miguel Suarez <miguel.sua...@stratus.com> + * BUG 6085: Fix build of vfs_default on systems without utime support. + + +o Yasuma Takeda <yas...@osstech.co.jp> + * BUG 5920: The length of the memcpy was calculated wrong. + * BUG 6098: Fix the ads_find_dc() with "security = domain" when the DNS + server is invalid. + + +o Andrew Tridgell <tri...@samba.org> + * Fix a bug in message handling for code the change notify code. + + +o Jelmer Vernooij <jel...@samba.org> + * Properly cast array length in print functions. + + +o Bo Yang <boy...@novell.com> + * Initialize the id_map status in idmap_ldap to avoid surprise. + + +###################################################################### +Reporting bugs & Development Discussion +####################################### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.2 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +====================================================================== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +====================================================================== + + +---------------------------------------------------------------------- + + + ============================= + Release Notes for Samba 3.2.8 + March 03, 2009 + ============================= + + +This is a bug fix release of the Samba 3.2 series. + +Major enhancements included in Samba 3.2.8 are: + + o Correctly detect if the current DC is the closest one. + o Add saf_join_store() function to memorize the DC used at join time. + This avoids problems caused by replication delays shortly after domain + joins. + + +The original security announcement for this and past advisories can +be found http://www.samba.org/samba/security/ + + +###################################################################### +Changes +####### + +Changes since 3.2.7 +------------------- + + +o Michael Adam <ob...@samba.org> + * BUG 6066: netinet/ip.h present but cannot be compiled under Solaris. + * Fix join by creating keytab after changing the config in libnet. + * Streamline logic of libnet_join_post_processing() in libnet_join. + * Fix build of [u]mount.cifs in the RHEL packaging. + * Fix distclean target and add realdistclean target in the docs build. + * Clean generated .png images and build/catalog.xml in "make clean". + * Fix detection of netinet/ip.h on Solaris 8. + + +o Jeremy Allison <j...@samba.org> + * BUG 4308: Excel save operation corrupts file ACLs. + * BUG 5979: Fix level 2 oplocks. + * BUG 5980: Fix race condition when granting level2 oplocks can cause break + notify to be missed. + * BUG 5986: Fix renaming of streams. + * BUG 5990: Strict allocate should be checked before ftruncate. + * BUG 6009: Setting "min receivefile size = 1" breaks writes. + * BUG 6016: Alternate Data Streams / Extended Attributes seem to conflict. + * BUG 6017: Fix magic scripts. + * BUG 6019: Fix file corruption in Clustered SMB/NFS environments managed via + CTDB. + * BUG 6021: smbclient du command does not recuse properly. + * BUG 6030: Add missing <th> header in Status page. + * BUG 6035: Fix possible race between fcntl F_SETLKW and alarm delivery. + * BUG 6040: Calling Samba print server with an aliased DNS-name fails. + * Fix race condition in alarm lock processing. + * Fix logic bug introduce in backport of ccache_regain_all_now. + * Fix crash bug in SWAT. + * Fix logic error in try_chown. + * Fix detection of dns_sd libraries. + + +o Kai Blin <k...@samba.org> + * BUG 5953: Fix smbclient crashes. + + +o Gerald (Jerry) Carter <je...@samba.org> + * Fix "allow trusted domain" so it disables trusted domains. + + +o Guenther Deschner <g...@samba.org> + * Fix buffer allocation in eventlog read call. + * Fix various invalid memcpy in read_package_entry(). + + +o SATOH Fumiyasu <fumi...@osstech.co.jp> + * Variables for signals must be volatile sig_atomic_t in Winbind. + * Fix gmem->numgids and gmem->maxgids breakage on Solaris 64-bit. + * Fix a compile-time warning. + * Fix SIGBUS on non-x86 CPUs in libsmbclient. + + +o Björn Jacke <b...@sernet.de> + * Correct the description of the "ldap timeout" parameter. + * Fix build with external dns_sd libraries. + + +o Jeff Layton <jlay...@redhat.com> + * Allow mounts to ipv6 capable servers in mount.cifs. + + +o Volker Lendecke <v...@sernet.de> + * BUG 5933: Fix incrementing/decrementing num_validated_vuids. + * BUG 5953: Make cli_send_smb_direct_writeX use writev. + * BUG 5965: Fix creation of the first share using SWAT. + * BUG 5969: Optimize smbclient put command. + * BUG 6014: mget shouldn't segfault without arguments. + * Fix error code when smbclient puts a file over an existing directory. + * Fix a valgrind error. + * Fix a "ignoring function call result" warning. + * Add sys_writev. + * Add write_data_iov. + * Make write_data use write_data_iov. + * Fix a memory leak in cups_pull_comment_location. + * Fix an ancient uninitialized variable read. + * Fix a bad memleak in vfs_full_audit. + * Fix several valgrind errors. + * Fix 'net rpc join' for users with the SeMachineAccountPrivilege. + + +o Herb Lewis <hle...@chomps.localdomain> + * Don't return 0 on error in smbcacls - bad for scripts. + + +o Derrell Lipman <derrell.lip...@unwireduniverse.com> + * Determine case sensitivity based on file system attributes in + libsmbclient. + + +o Stefan Metzmacher <me...@samba.org> + * Correctly detect if the current dc is the closest one. + * Use get_dc_name() instead of get_sorted_dc_list() in the LDAP case. + * Fallback to returning all DCs, when none is available in the requested + site. + * Add saf_join_store() function. + * Use DS_FORCE_REDISCOVERY in libnet_join. + * Use dbwrap to open sessionid.tdb in net status. -- Samba Shared Repository