6603 lines
265 KiB
Plaintext
6603 lines
265 KiB
Plaintext
-------------------------------------------------------------------
|
|
Wed Jan 4 10:32:54 UTC 2023 - Ludwig Nussel <lnussel@suse.com>
|
|
|
|
- Replace transitional %usrmerged macro with regular version check (boo#1206798)
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Oct 17 13:29:37 UTC 2022 - palcantara@suse.de
|
|
|
|
- Update cifs-utils to 7.0
|
|
* cifs-utils: don't return uninitialized value in cifs_gss_get_req
|
|
* cifs-utils: make GSSAPI usage compatible with Heimdal
|
|
* cifs-utils: work around missing krb5_free_string in Heimdal
|
|
* fix warnings for -Waddress-of-packed-member
|
|
* setcifsacl: fix memory allocation for struct cifs_ace
|
|
* setcifsacl: fix comparison of actions reported by covscan
|
|
* cifs.upcall: remove unused variable and fix syslog message
|
|
* cifs.upcall: Switch to RFC principal type naming
|
|
* man-pages: Update cifs.upcall to mention GSS_USE_PROXY
|
|
* cifs.upcall: fix compiler warning
|
|
* cifs.upcall: add gssproxy support
|
|
* remove cifs-utils-6.15.tar.bz2
|
|
* remove cifs-utils-6.15.tar.bz2.asc
|
|
* add cifs-utils-7.0.tar.bz2
|
|
* add cifs-utils-7.0.tar.bz2.asc
|
|
|
|
-------------------------------------------------------------------
|
|
Tue May 17 09:11:59 UTC 2022 - Ferdinand Thiessen <rpm@fthiessen.de>
|
|
|
|
- Update to version 6.15
|
|
* CVE-2022-27239: mount.cifs: fix length check for ip option parsing
|
|
Previous check was true whatever the length of the input string was,
|
|
leading to a buffer overflow in the subsequent strcpy call.
|
|
* mount.cifs: fix verbose messages on option parsing
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jan 17 09:22:17 UTC 2022 - Enzo Matsumiya <ematsumiya@suse.de>
|
|
|
|
- Update cifs-utils.spec:
|
|
* Remove unused
|
|
!BuildIgnore: samba-client
|
|
BuildRequires: libwbclient-devel
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jan 17 06:22:41 UTC 2022 - Enzo Matsumiya <ematsumiya@suse.de>
|
|
|
|
- Update to cifs-utils 6.14
|
|
* smbinfo is enhanced with capability to display alternate data streams
|
|
* setcifsacl is improved to optionally reorder ACEs in preferred order
|
|
* cifs.upcall regression in kerberos mount is fixed
|
|
* remove cifs-utils-6.13.tar.bz2
|
|
* remove cifs-utils-6.13.tar.bz2.asc
|
|
* add cifs-utils-6.14.tar.bz2
|
|
* add cifs-utils-6.14.tar.bz2.asc
|
|
- Drop upstream fixed patches:
|
|
* 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Fri May 14 11:13:47 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>
|
|
|
|
- Update to cifs-utils 6.13
|
|
* Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
|
|
* remove cifs-utils-6.12.tar.bz2
|
|
* remove cifs-utils-6.12.tar.bz2.asc
|
|
* add cifs-utils-6.13.tar.bz2
|
|
* add cifs-utils-6.13.tar.bz2.asc
|
|
- Drop upstream fixed patches:
|
|
* 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Apr 23 10:41:59 UTC 2021 - Aurelien Aptel <aaptel@suse.com>
|
|
|
|
- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
|
|
* add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 9 17:17:59 UTC 2021 - palcantara@suse.de
|
|
|
|
- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
|
|
container; (bsc#1183239); CVE-2021-20208.
|
|
* add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 23 12:15:39 UTC 2021 - Aurelien Aptel <aaptel@suse.com>
|
|
|
|
- Update to cifs-utils 6.12
|
|
* remove cifs-utils-6.11.tar.bz2
|
|
* remove cifs-utils-6.11.tar.bz2.asc
|
|
* add cifs-utils-6.12.tar.bz2
|
|
* add cifs-utils-6.12.tar.bz2.asc
|
|
- Remove backports already in 6.12
|
|
* remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
|
|
* remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
|
|
- Refresh Makefile.am install fix
|
|
* modify fix-sbin-install-error.patch
|
|
- Hardcode python3 interpreter in shebang of smbinfo instead of
|
|
/usr/bin/env to let rpm runtime dependency detect it.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jan 14 15:34:45 UTC 2021 - Ludwig Nussel <lnussel@suse.de>
|
|
|
|
- use new %_pamdir macro to avoid hardcoding pam module path
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Dec 11 18:00:50 UTC 2020 - Aurelien Aptel <aaptel@suse.com>
|
|
|
|
- Update to cifs-utils 6.11
|
|
* remove cifs-utils-6.9.tar.bz2
|
|
* remove cifs-utils-6.9.tar.bz2.asc
|
|
* add cifs-utils-6.11.tar.bz2
|
|
* add cifs-utils-6.11.tar.bz2.asc
|
|
- Remove backports already in 6.11
|
|
* remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
|
|
* remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
|
|
* remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
|
|
* remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
|
|
* remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
|
|
* remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
|
|
* remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
|
|
* remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
|
|
* remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
|
|
* remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
|
|
* remove 0011-fix-doublefree.patch
|
|
* remove 0012-mount.cifs-Fix-invalid-free.patch
|
|
* remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
|
|
- Add fixes for autoconf and make install issues
|
|
* add fix-sbin-install-error.patch
|
|
* add 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
|
|
* add 0002-cifs-utils-fix-probabilistic-compiling-error.patch
|
|
- Hardcode python3 interpreter in shebang of smb2-quota instead of
|
|
/usr/bin/env to let rpm runtime dependency detect it.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Nov 17 13:42:23 UTC 2020 - Ludwig Nussel <lnussel@suse.de>
|
|
|
|
- prepare usrmerge (boo#1029961)
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Aug 11 12:45:15 UTC 2020 - Aurelien Aptel <aaptel@suse.com>
|
|
|
|
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
|
|
mechanism to be able to switch between cifs-utils and sssd;
|
|
(bsc#1182682).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Aug 10 06:56:11 UTC 2020 - Aurelien Aptel <aaptel@suse.com>
|
|
|
|
- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
|
|
(bsc#1174477); (bso#14442); CVE-2020-14342.
|
|
* add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Apr 8 10:36:15 UTC 2020 - Aurelien Aptel <aaptel@suse.com>
|
|
|
|
- rst2man has been moved to python3-docutils in SLE12+, update
|
|
BuildRequires check to reflect that
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Oct 2 20:06:53 UTC 2019 - palcantara@suse.de
|
|
|
|
- Fix invalid free in mount.cifs; (bsc#1152930).
|
|
* add 0012-mount.cifs-Fix-invalid-free.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 9 12:56:24 UTC 2019 - Aurelien Aptel <aaptel@suse.com>
|
|
|
|
- Fix double-free in mount.cifs; (bsc#1149164).
|
|
* add 0011-fix-doublefree.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Aug 15 16:50:29 UTC 2019 - Aurelien Aptel <aaptel@suse.com>
|
|
|
|
- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
|
|
* adds fixes for Azure
|
|
* new smbinfo utility
|
|
* remove cifs-utils-6.8.tar.bz2
|
|
* remove cifs-utils-6.8.tar.bz2.asc
|
|
* add cifs-utils-6.9.tar.bz2
|
|
* add cifs-utils-6.9.tar.bz2.asc
|
|
* add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
|
|
* add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
|
|
* add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
|
|
* add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
|
|
* add 0005-smbinfo-add-GETCOMPRESSION-support.patch
|
|
* add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
|
|
* add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
|
|
* add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
|
|
* add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
|
|
* add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
|
|
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
|
|
* remove 0001-docs-cleanup-rst-formating.patch
|
|
* remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
|
|
* remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
|
|
* remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
|
|
* remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
|
|
* remove 0006-cifs-utils-support-rst2man-3.patch
|
|
* remove 0007-checkopts-report-duplicated-options-in-man-page.patch
|
|
* remove 0008-mount.cifs.rst-more-cleanups.patch
|
|
* remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
|
|
* remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
|
|
* remove allow-dns-resolver-key-to-expire.patch
|
|
* remove suse-document-new-vers-default-SMB2.1.patch
|
|
- Remove dependency workaround regarding python2/python3
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 12 13:39:46 UTC 2019 - palcantara@suse.de
|
|
|
|
- Fix dependency failure on SLE15 regarding python2/python3.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Feb 14 11:27:09 UTC 2019 - aaptel@suse.com
|
|
|
|
- Allow cached DNS entry to expire; (fate#325270).
|
|
* add allow-dns-resolver-key-to-expire.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 12 17:34:00 UTC 2019 - aaptel@suse.com
|
|
|
|
- Document new SMB2.1+ defaults; (bsc#1130528).
|
|
* be more verbose on mount errors, especially with EHOSTDOWN which
|
|
is often returned on SMB version issues.
|
|
* add suse-document-new-vers-default-SMB2.1.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 11 08:33:10 UTC 2019 - dmulder@suse.com
|
|
|
|
- Fix python dependency stalemate by requiring python3 version of
|
|
samba-libs.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 10 12:29:37 UTC 2018 - aaptel@suse.com
|
|
|
|
- Update to cifs-utils 6.8.
|
|
+ document more mount options
|
|
+ man pages now generated from RST files
|
|
+ add python-docutils build dependency
|
|
+ update keyring to check tarball signature
|
|
+ remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
|
|
+ remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
|
|
- Add typo corrections, better doc and configure fixes from upstream
|
|
+ add 0001-docs-cleanup-rst-formating.patch
|
|
+ add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
|
|
+ add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
|
|
+ add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
|
|
+ add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
|
|
+ add 0006-cifs-utils-support-rst2man-3.patch
|
|
+ add 0007-checkopts-report-duplicated-options-in-man-page.patch
|
|
+ add 0008-mount.cifs.rst-more-cleanups.patch
|
|
+ add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
|
|
+ add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
|
|
- Cleanup spec file
|
|
* assume SUSE vendor and SLE >= 11
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 6 14:26:58 UTC 2018 - schwab@suse.de
|
|
|
|
- Update BuildIgnore to break build cycle samba-client <-> cifs-utils
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Feb 18 08:21:58 UTC 2018 - avindra@opensuse.org
|
|
|
|
- update to 6.7:
|
|
* mount.cifs cleanups
|
|
- includes 6.6:
|
|
* cleanup/overhaul of cifs.upcall krb5 credcache handling
|
|
- partial cleanup with spec-cleaner
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 27 10:41:50 UTC 2017 - aaptel@suse.com
|
|
|
|
- Document SMB3+ and new seal option; (fate#322075).
|
|
+ add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
|
|
+ add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 7 16:54:59 UTC 2017 - aaptel@suse.com
|
|
|
|
- Get rid of init script on everything based off SLE12+ (bsc#1025471).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Feb 2 15:31:14 UTC 2017 - aaptel@suse.com
|
|
|
|
- Use https urls.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 22 18:20:05 UTC 2016 - lmuelle@suse.com
|
|
|
|
- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
|
|
time; (bsc#966174).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 22 18:05:33 UTC 2016 - lmuelle@suse.com
|
|
|
|
- Update to cifs-utils 6.5.
|
|
+ mount.cifs: ignore x- mount options
|
|
+ minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
|
|
+ minor manpage fix
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Sep 10 17:19:31 UTC 2015 - lmuelle@suse.com
|
|
|
|
- Ignore samba-client-libs at build-time on post-22 Fedora systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jul 6 14:23:59 UTC 2015 - lmuelle@suse.com
|
|
|
|
- Add include_paths.h_for__PATH_MOUNTED.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 3 13:37:48 UTC 2014 - bwiedemann@suse.com
|
|
|
|
- Use rccifs -> service symlink for proper status (bnc#908023).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Oct 28 19:04:30 UTC 2014 - lmuelle@suse.com
|
|
|
|
- Remove dependency on gpg-offline as signature checking is implemented in the
|
|
source validator.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Oct 28 10:47:47 UTC 2014 - lmuelle@suse.com
|
|
|
|
- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Oct 13 22:01:06 UTC 2014 - lmuelle@suse.com
|
|
|
|
- Fix broken rccifs symbolic link.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Oct 13 13:42:09 UTC 2014 - lmuelle@suse.com
|
|
|
|
- Remove dead code associated with cifstab file which is no longer used.
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Aug 31 19:15:08 UTC 2014 - ddiss@suse.com
|
|
|
|
- Remove mkinitrd files and spec file logic. Dracut offers cifs support via
|
|
the corresponding module; (bnc#893575).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Aug 19 15:24:31 UTC 2014 - lmuelle@suse.com
|
|
|
|
- Remove cifstab file; obsoleted by the more generic cifs credentials feature.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jul 28 11:27:12 UTC 2014 - lmuelle@suse.com
|
|
|
|
- Update to cifs-utils 6.4.
|
|
+ allow PAM directory to be configurable
|
|
- Make_the_PAM_security_directory_configurable_at_compile_time.patch
|
|
+ better determination of default keytab file
|
|
+ better cifscreds error handling
|
|
+ uppercase devicename when retrying mount
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jun 18 19:49:50 UTC 2014 - lmuelle@suse.com
|
|
|
|
- BuildIgnore libldb, libtevent, and samba4-libs to prevent a package conflict
|
|
on CentOS, Fedora, and RHEL systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu May 8 11:45:19 CEST 2014 - ro@suse.de
|
|
|
|
- use _rundir macro
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 20 19:40:40 UTC 2014 - lmuelle@suse.com
|
|
|
|
- Update to cifs-utils 6.3.
|
|
+ fixes for various bugs turned up by Coverity
|
|
+ clean unused cruft out of upcall binary
|
|
+ add new pam_cifscreds PAM module for establishing NTLM creds on login
|
|
which BuildRequires the pam-devel package
|
|
- Make the PAM security directory configurable at compile time; (bso#10513).
|
|
+ Make_the_PAM_security_directory_configurable_at_compile_time.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Oct 9 12:16:57 UTC 2013 - lmuelle@suse.com
|
|
|
|
- Verify source tar ball gpg signature.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Oct 8 15:02:44 UTC 2013 - lmuelle@suse.com
|
|
|
|
- Update to cifs-utils 6.2.
|
|
+ setcifsacl can now work without a plugin
|
|
+ systemd-ask-password is found using $PATH now
|
|
+ cifs.upcall now works with KEYRING: credcaches
|
|
- Update to cifs-utils 6.1.
|
|
+ minor bugfixes
|
|
+ allow cifs.upcall to use dedicated keytab
|
|
- Update to cifs-utils 6.0.
|
|
+ minor bugfixes and documentation updates
|
|
+ support for NFS-style device names removed
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 21 10:46:51 UTC 2013 - mmeister@suse.com
|
|
|
|
- Added url as source.
|
|
Please see http://en.opensuse.org/SourceUrls
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 26 12:07:11 UTC 2013 - lmuelle@suse.com
|
|
|
|
- Add cifstab named configuration file to post-12.2 systems; (bnc#804822);
|
|
(bnc#821889).
|
|
- Really use of the existing cifs init script; (bnc#697218).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Feb 21 10:34:55 UTC 2013 - lmuelle@suse.com
|
|
|
|
- Remove superfluous restart or stop of the cifs service; (bnc#804822).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 23 11:06:31 UTC 2013 - lmuelle@suse.com
|
|
|
|
- Set parsed_info->got_user when a cred file supplies a username;
|
|
(bnc#800018).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 16 14:51:39 UTC 2013 - lmuelle@suse.com
|
|
|
|
- Update to cifs-utils 5.9.
|
|
+ new plugin architecture for the ID mapping tools
|
|
+ DOMAIN\username@password format for username= arguments is removed
|
|
+ full RELRO (vs. partial) is now enabled on all binaries
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Nov 21 04:03:45 UTC 2012 - crrodriguez@opensuse.org
|
|
|
|
- Version 5.8
|
|
* NFS-style device names are being deprecated in 6.0.
|
|
* Many bugs in cifs.idmap, getcifsacl and setcifsacl have been fixed.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 8 17:09:22 UTC 2012 - lmuelle@suse.com
|
|
|
|
- Update to cifs-utils 5.6.
|
|
+ -Werror has been removed by default from CFLAGS
|
|
+ PIE and RELRO are enabled by default at build time
|
|
+ better integration with systemd by allowing the use of
|
|
/bin/systemd-ask-password if available
|
|
+ better checks and warnings from cifscreds when used in environments that
|
|
do not have a session keyring
|
|
- No longer initialize oldfsgid inside acquire_mountpoint() of mount.cifs.c as
|
|
-Werror got removed.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jun 12 20:05:38 UTC 2012 - lmuelle@suse.com
|
|
|
|
- mount.cifs: initialize oldfsgid to surpress a warning while building for
|
|
RHEL 4 or CentOS 5.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jun 12 11:54:14 UTC 2012 - lmuelle@suse.com
|
|
|
|
- mount.cifs: set rc to 0 in libcap toggle_dac_capability
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jun 1 18:30:07 UTC 2012 - lmuelle@suse.com
|
|
|
|
- BuildRequire libwbclient-devel for CentOS, Fedora, and RHEL builds too.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jun 1 11:26:13 UTC 2012 - lmuelle@suse.com
|
|
|
|
- Do not call autoreconf while build.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jun 1 09:06:29 UTC 2012 - lmuelle@suse.com
|
|
|
|
- BuildIgnore libtalloc to prevent a package conflict on Fedora systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu May 31 11:49:37 UTC 2012 - lmuelle@suse.com
|
|
|
|
- BuildRequire libtalloc-devel unconditionally.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed May 30 11:09:43 UTC 2012 - lmuelle@suse.com
|
|
|
|
- Update to cifs-utils 5.5.
|
|
+ mount.cifs: don't pass credentials= option to the kernel
|
|
+ doc: update mailing list
|
|
+ mount.cifs: don't send a mandatory ver= option to the kernel
|
|
+ mount.cifs: remove smb2 multicall binary code
|
|
+ doc: remove old XML sources for mount.cifs.8 and cifs.upcall.8
|
|
+ mount.cifs: unused variables
|
|
|
|
-------------------------------------------------------------------
|
|
Wed May 16 16:29:18 UTC 2012 - lmuelle@suse.com
|
|
|
|
- BuildRequire libtalloc2-devel instead of libtalloc-devel for post 12.1
|
|
systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 19 22:23:56 UTC 2012 - lmuelle@suse.com
|
|
|
|
- Don't package get-, setcifsacl, and cifs.idmap for Mandriva pre-201100.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 19 19:36:19 UTC 2012 - lmuelle@suse.com
|
|
|
|
- Don't care at all what the real uid is when we call toggle_dac_capability().
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 19 19:03:21 UTC 2012 - lmuelle@suse.com
|
|
|
|
- Make use of the stored return code in toggle_dac_capability() of mount.cifs.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 19 17:29:11 UTC 2012 - lmuelle@suse.com
|
|
|
|
- Declare krb5_auth_con_set_req_cksumtype if the prototype does not exist.
|
|
- Initialize bkupuid and bkupgid.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 19 16:07:00 UTC 2012 - lmuelle@suse.com
|
|
|
|
- BuildRequire pkg-config for post-10.2 systems and else pkgconfig.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 19 13:57:12 UTC 2012 - lmuelle@suse.com
|
|
|
|
- mount.cifs: fix up some -D_FORTIFY_SOURCE=2 warnings
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 19 10:30:44 UTC 2012 - lmuelle@suse.com
|
|
|
|
- Update to cifs-utils 5.4.
|
|
+ the "rootsbindir" can now be specified at configure time
|
|
+ mount.cifs now supports the -s option by passing "sloppy" to the
|
|
kernel in the options string
|
|
+ cifs.upcall now properly respects the domain_realm section in krb5.conf
|
|
+ unprivileged users can no longer mount onto dirs into which they
|
|
can't chdir (fixes CVE-2012-1586)
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 6 09:17:17 UTC 2012 - dlovasko@suse.com
|
|
|
|
- Added position independent flags to compilation and linking (-fpie/-pie);
|
|
(bnc#743133).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Feb 2 11:56:04 UTC 2012 - lmuelle@suse.de
|
|
|
|
- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.
|
|
- BuildRequire keyutils-devel for post-10.2 systems.
|
|
- BuildRequire libcap-ng-devel for post-11.2 systems.
|
|
- BuildRequire libwbclient-devel for post-10.2 systems.
|
|
- BuildRequire samba-winbind-devel for CentOS, Fedora, and RHEL systems.
|
|
- Add getcifsacl, setcifsacl, cifs.idmap, and cifs.upcall binaries and man
|
|
pages to the filelist.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Feb 1 20:38:17 UTC 2012 - lmuelle@suse.de
|
|
|
|
- Update to cifs-utils 5.3.
|
|
+ admins can now tell cifs.upcall to use an alternate krb5.conf file
|
|
+ on remount, mount.cifs no longer adds a duplicate mtab entry
|
|
+ the cifscreds utility has seen a major overhaul to allow for multiuser
|
|
mounts without krb5 auth
|
|
|
|
- Update to cifs-utils 5.2.
|
|
+ cifs.idmap can now map uid/gid to SID in addition to the other way around
|
|
+ getcifsacl/setcifsacl are now installed by default in /usr/bin instead of
|
|
/usr/sbin. The manpages are now in section 1.
|
|
+ cifs.upcall has a new scheme for picking the SPN on krb5 mounts. The
|
|
hostname is now always lowercased. If we fail to get a ticket using an
|
|
unqualified name, it now attempts to guess the domain name.
|
|
+ A lot of manpage updates, additions and corrections
|
|
|
|
- Update to cifs-utils 5.1.
|
|
+ fix for a minor security issue that can corrupt the mtab
|
|
+ new getcifsacl/setcifsacl tools that allow you to fetch and set raw
|
|
Windows ACLs via an xattr.
|
|
+ a lot of manpage patches
|
|
|
|
- Update to cifs-utils 5.0.
|
|
+ mount.cifs always uses the original device string to ensure that umounts
|
|
by unprivileged users are not problematic
|
|
+ there is a new cifs.idmap program for handling idmapping upcalls
|
|
+ a lot of manpage patches
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 21 10:31:38 UTC 2011 - coolo@suse.com
|
|
|
|
- remove call to suse_update_config (very old work around)
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Dec 1 16:04:20 UTC 2011 - coolo@suse.com
|
|
|
|
- add automake as buildrequire to avoid implicit dependency
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Sep 17 22:58:13 UTC 2011 - jengelh@medozas.de
|
|
|
|
- Remove redundant tags/sections from specfile
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jun 22 10:42:54 UTC 2011 - sjayaraman@suse.de
|
|
|
|
- modify cifs init script to use /var/run instead of /var/lock/subsys for
|
|
state file; (bnc#697218).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 8 08:51:37 UTC 2011 - sjayaraman@suse.de
|
|
|
|
- Update to cifs-utils 4.9.
|
|
+ mount.cifs: don't try to alter mtab if it's a symlink.
|
|
+ mount.cifs: fix possible use of uninitialized variable.
|
|
+ mount.cifs: reacquire CAP_DAC_READ_SEARCH before calling mount(2).
|
|
+ mount.cifs: fix handling of scopeid in resolve_host.
|
|
|
|
- Update to cifs-utils 4.8.1.
|
|
+ fix mis-generated autoconf files.
|
|
|
|
- Update to cifs-utils 4.8.
|
|
+ mount.cifs: manpage: add entry for "actimeo" option.
|
|
+ cifs-utils: rewrite hardcoded paths in manpages.
|
|
+ cifs-utils: fixes for manpage pathname replacement scheme.
|
|
+ cifs.upcall: fix memory and call krb5_auth_con_free().
|
|
+ cifs.upcall: use krb5_auth_con_set_req_cksumtype() and pass a GSSAPI
|
|
checksum; (bso#7890).
|
|
+ manpage: change port option description.
|
|
+ cifs.upcall: add 'l' to getopt_long string.
|
|
+ cifs.upcall: fix crash when trying to free uninitialized var.
|
|
+ cifs.upcall: consolidate find_krb5_cc calls.
|
|
+ cifs.upcall: clean up key description decoding routine.
|
|
+ cifs.upcall: add keytab support for unattended mounts.
|
|
+ mount.cifs: add cruid= mount option.
|
|
|
|
- Update to cifs-utils 4.7.
|
|
+ manpage: add mount.cifs manpage entry for "multiuser" option.
|
|
+ mount.cifs: reinstate ip= as an override for address resolution.
|
|
+ mount.cifs: use monotonic time for timeouts.
|
|
+ cifs-utils: infrastructure for stashing passwords in keyring.
|
|
+ cifs-utils: moving resolve_host into separate file.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jan 14 15:22:51 CET 2011 - lmuelle@suse.de
|
|
|
|
- Move the cifs init script nfs dependencies from Required to Should.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Dec 7 13:31:05 UTC 2010 - toganm@opensuse.org
|
|
|
|
- corrected #bnc 641513 by adding /sbin/mkinitrd_setup in %postun.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Aug 2 08:33:32 UTC 2010 - sjayaraman@suse.de
|
|
|
|
- Update to cifs-utils 4.6.
|
|
+ adds documentation for the fsc option.
|
|
+ mount.cifs deals with the _netdev, mand, and nomand options correctly now.
|
|
+ changes how mount.cifs handles the MS_MANDLOCK flag.
|
|
+ makes cifs.upcall prefer the creduid= upcall option to uid=
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jul 7 08:02:22 UTC 2010 - sjayaraman@suse.de
|
|
|
|
- mount.cifs: fix parsing of "cred=" option; (bnc#618877); (bnc#620856);
|
|
(bnc#621525); (bnc#623763); (bnc#627243).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon May 24 04:19:38 UTC 2010 - sjayaraman@suse.de
|
|
|
|
- Update to cifs-utils 4.5.
|
|
+ strip leading delimiter off of prefixpath option in mount.cifs.
|
|
+ remove magic number for max_username in parse_options.
|
|
+ turn into a multicall binary for smb2.
|
|
+ fix uninitialized variable in cred parsing error path.
|
|
+ cleanup mount.cifs option parsing.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed May 5 13:22:57 UTC 2010 - lmuelle@suse.de
|
|
|
|
- BuildRequire libkeyutils-devel on Mandriva systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue May 4 10:36:02 UTC 2010 - sjayaraman@suse.de
|
|
|
|
- Update to cifs-utils 4.4.
|
|
+ fix a segfault that could occur when parsing the address list.
|
|
+ fix autoconf/automake problem that could cause compilation to fail.
|
|
+ acquire required capabilities before a couple of operations.
|
|
+ ensure passwords are not left in memory.
|
|
+ cleanup of credential file parsing.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Apr 13 14:59:16 UTC 2010 - lmuelle@suse.de
|
|
|
|
- automake: don't use @foo@ constructs in Makefile.am.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Apr 13 14:09:46 UTC 2010 - lmuelle@suse.de
|
|
|
|
- autoconf: define CAPNG_LDADD even when it's not set.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Apr 9 13:35:41 UTC 2010 - lmuelle@suse.de
|
|
|
|
- Update to cifs-utils 4.3.
|
|
+ credential files accept parameter names consistent with mount options.
|
|
+ some problems with linking are fixed.
|
|
+ libcap-ng is used if it's available.
|
|
+ the capability bounding set is zeroed out for greater security.
|
|
+ CAP_DAC_OVERRIDE is only enabled when updating the mtab.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Apr 5 10:41:53 UTC 2010 - sjayaraman@suse.de
|
|
|
|
- Update to cifs-utils 4.2.
|
|
+ significant overhaul of mount.cifs to make it setuid root safe.
|
|
+ mount.cifs now does privilege separation.
|
|
+ re-enable mount.cifs setuid usage.
|
|
+ make mount.cifs use libcap if available to prune its capability set.
|
|
+ guard mount.cifs against signals by unprivileged users.
|
|
+ mount.cifs is more careful about signal handling during mtab updates.
|
|
+ cifs.upcall fixes to make it work with the heimdal kerberos
|
|
implementation.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 25 14:22:38 UTC 2010 - lmuelle@suse.de
|
|
|
|
- Update to cif-utils 4.1.
|
|
+ fix ver= option passed to the kernel
|
|
+ fix error handling when duplicating options string
|
|
+ make check_mountpoint a noop for non-legacy builds
|
|
+ remove uuid option
|
|
+ remove bogus rsize/wsize options
|
|
+ check for NULL addr pointer before handling scopeid
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 22 12:09:17 UTC 2010 - lmuelle@suse.de
|
|
|
|
- Add %version dependency to Provides and Obsoletes.
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Mar 14 15:32:49 UTC 2010 - lmuelle@suse.de
|
|
|
|
- Update to cif-utils 4.0.
|
|
- Create cifs-utils package which is independent from Samba.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 8 21:03:25 UTC 2010 - lmuelle@suse.de
|
|
|
|
- Update to 3.5.1.
|
|
+ Fix security flaw on Linux platforms if built with libcap support allowing
|
|
file system access even when permissions should have denied it;
|
|
CVE-2010-0728; (bso#7222).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 8 09:12:07 UTC 2010 - rhafer@novell.com
|
|
|
|
- Fixed libldb.so link in libldb-devel.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Mar 5 15:47:25 UTC 2010 - hhetter@novell.com
|
|
|
|
- Fix argc handling in net_share, making the command "net share"
|
|
work again; (bso#7203); (bnc#584253).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 1 16:22:52 CET 2010 - lmuelle@suse.de
|
|
|
|
- Update to 3.5.0.
|
|
+ Fix duplicate sam and unix accounts; (bso#7145).
|
|
+ Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160).
|
|
+ Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166).
|
|
+ Fix 'net ads dns' usage calls; (bso#7181).
|
|
+ Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Feb 24 14:55:27 CET 2010 - lmuelle@suse.de
|
|
|
|
- Update to 3.4.6.
|
|
+ Change parameter "wide links" to default to "no"; it's also incompatible
|
|
with "unix extensions"; (bso#7104); (bnc#577868).
|
|
+ Fix printing with 64 bit clients (bso#6888).
|
|
+ Fix core dump on 64 bit Linux (bso#7063).
|
|
+ Fix failing of smbd to respond to a read or a write caused by Linux
|
|
asynchronous IO (aio) (bso#7067).
|
|
+ Fix string buffer overflow causing heap corruption in smbd (bso#7096).
|
|
|
|
+ Fix bogus ip address in SWAT; (bso#5885).
|
|
+ Fix vfs_full_audit; (bso#6557).
|
|
+ Use the first "uid" value; (bso#6157).
|
|
+ Fix large paged search with DirX LDAP servers; (bso#6981).
|
|
+ Fix crash bug in 'cifs.upcall'; (bso#6868).
|
|
+ Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047).
|
|
+ Fix DFS on AIX (maybe others); (bso#7052).
|
|
+ Fix pdb_search crash as non-root user; (bso#7068).
|
|
+ Fix unlocking of accounts from ldap; (bso#7072).
|
|
+ Fix vfs_expand_msdfs; (bso#7081).
|
|
+ Fix results of 'smbclient -L' with a large browse list; (bso#7098).
|
|
+ Normalize "Changing password for" msg IDs and STRs; (bso#7102).
|
|
+ Fix malformed require_membership_of_sid; (bso#7106).
|
|
+ Fix reading of large browselist; (bso#7122).
|
|
+ "mangling method = hash" can crash storing a name containing a '.';
|
|
(bso#7154).
|
|
+ Valgrind Conditional jump or move depends on uninitialised value(s) error
|
|
when "mangling method = hash"; (bso#7155).
|
|
+ Fix listing of printjobs in Windows 7; (bso#7130).
|
|
+ Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136).
|
|
|
|
+ Make idmap cache persistent for "ldapsam:trusted".
|
|
+ Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not
|
|
only the persistent idmap cache.
|
|
+ Shortcut uid_to_sid when "ldapsam:trusted = yes".
|
|
+ Make pdb_copy_sam_account also copy the group sid.
|
|
+ Shortcut gid_to_sid when "ldapsam:trusted = yes".
|
|
+ Speed up pdb_get_group_sid().
|
|
+ Try to build the full unix_pw structure with ldapsam:trusted support.
|
|
+ Optimize ldapsam_alias_memberships() and cache ldap searches.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Feb 19 16:27:03 CET 2010 - lmuelle@suse.de
|
|
|
|
- Update to 3.5.0rc3.
|
|
+ Change parameter "wide links" to default to "no"; it's also incompatible
|
|
with "unix extensions"; (bso#7104); (bnc#577868).
|
|
|
|
+ Fix vfs_full_audit; (bso#6557).
|
|
+ Fix crash bug in 'cifs.upcall'; (bso#6868).
|
|
+ Fix duplicate initializer in the rmdir module; (bso#6876).
|
|
+ Fix printing with 64 bit clients; (bso#6888).
|
|
+ Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047).
|
|
+ Fix core dump on Ubuntu 8.04 64 bit; (bso#7063).
|
|
+ Fix failing of smbd to respond to a read or a write caused by Linux
|
|
asynchronous IO (aio); (bso#7067).
|
|
+ Fix 'smbget' error status; (bso#7069).
|
|
+ Fix build of 'smbfilter'; (bso#7071).
|
|
+ Fix unlocking of accounts from ldap; (bso#7072).
|
|
+ Cliconnect gets realm wrong with trusted domains; (bso#7079).
|
|
+ Fix vfs_expand_msdfs; (bso#7081).
|
|
+ Fix storing of create time on directories in an EA in new create time
|
|
code; (bso#7084).
|
|
+ Fix an early release of the global lock that can cause data corruption in
|
|
libtdb; (bso#7085).
|
|
+ Fix string buffer overflow causing heap corruption in smbd; (bso#7096).
|
|
+ Fix results of 'smbclient -L' with a large browse list; (bso#7098).
|
|
+ Normalize "Changing password for" msg IDs and STRs; (bso#7102).
|
|
+ Fix malformed require_membership_of_sid; (bso#7106).
|
|
+ Add pdb_ldap performance fixes; (bso#7116).
|
|
+ Change ldap filter to what really was intended; (bso#7116).
|
|
+ Add new "nmbd bind explicit broadcast" parameter; (bso#7118).
|
|
+ Fix nmbd problems with socket address; (bso#7118).
|
|
+ Support large browselist; (bso#7119).
|
|
+ Fix reading of large browselist; (bso#7122).
|
|
+ Fix listing of printjobs in Windows 7; (bso#7130).
|
|
+ Owner of file not available with Kerberos; (bso#7139).
|
|
+ Fix IPv4/IPv6 problems; (bso#7140).
|
|
+ Fix get_acl_blob in the acl_tdb VFS module; (bso#7148).
|
|
+ "mangling method = hash" can crash storing a name containing a '.';
|
|
(bso#7154).
|
|
+ Valgrind Conditional jump or move depends on uninitialised value(s) error
|
|
when "mangling method = hash"; (bso#7155).
|
|
|
|
+ Fix some wrong newlines in de translation strings.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 9 22:10:44 UTC 2010 - lmuelle@suse.de
|
|
|
|
- Take extra care that a mount point of mount.cifs isn't changed during mount
|
|
and don't allow it to be run as setuid root program; CVE-2010-0787;
|
|
(bso#6853); (bnc#550002).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 9 17:10:55 UTC 2010 - lmuelle@suse.de
|
|
|
|
- Check in mount.cifs for invalid characters in device name and mountpoint;
|
|
CVE-2010-0547; (brc#562156); (bnc#577925).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 9 05:00:08 CET 2010 - boyang@suse.de
|
|
|
|
- Don't invalidate cache for uninitialized domains; (bnc#538923).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 9 04:59:09 CET 2010 - boyang@suse.de
|
|
|
|
- Signals are processed twice in child; (bnc#538923).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 8 18:51:27 CET 2010 - jmcdonough@suse.de
|
|
|
|
- Allow forced pw change even with min pw age; (bnc#561894).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 8 11:44:54 UTC 2010 - lmuelle@suse.de
|
|
|
|
- Change parameter "wide links" to default to "no"; it's also incompatible
|
|
with "unix extensions"; (bso#7104); (bnc#577868).
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Feb 7 08:35:14 CET 2010 - boyang@suse.de
|
|
|
|
- Fix enumerate domain local groups for primary domain; (bnc#573813).
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Feb 7 07:48:06 CET 2010 - boyang@suse.de
|
|
|
|
- Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106).
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Feb 5 17:12:24 UTC 2010 - lmuelle@suse.de
|
|
|
|
- Normalize "Changing password for" msg IDs and STRs; (bnc#499233).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Feb 4 16:58:53 UTC 2010 - rhafer@novell.com
|
|
|
|
- Build libtevent and libldb and put them into separate subpackages.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jan 26 17:12:50 CET 2010 - lmuelle@suse.de
|
|
|
|
- Update to 3.5.0rc2.
|
|
+ The Using Samba HTML book has been removed.
|
|
+ 'net', 'smbclient' and libsmbclient can use logon credentials cached by
|
|
Winbind; (bso#7062).
|
|
+ New vfs_scannedonly module has been added; (bso#7028).
|
|
|
|
+ Check password history before increasing "badPasswordCount"; (bso#4347).
|
|
+ Fix changing of ACLs on writable file with "dos filemode=yes"; (bso#5202).
|
|
+ Restore Samba 3.0.x behavior and use the first "uid" value in pdb_ldap;
|
|
(bso#6157).
|
|
+ Fix deletion of an object whose parent folder does not have delete rights
|
|
fails even if the delete right is set on the object in vfs_acl_xattr and
|
|
vfs_acl_tdb; (bso#6876).
|
|
+ Fix large paged search with DirX LDAP servers; (bso#6981).
|
|
+ Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027).
|
|
+ Disable sanity check in NetShareEnum for better compatibility with
|
|
Windows; (bso#7029).
|
|
+ Fix SMBrmdir error message when deleting a directory fails; (bso#7033).
|
|
+ Fix segfault in vfs_cap; (bso#7034).
|
|
+ Fix 'net rpc getsid' in hardened Windows environments; (bso#7036).
|
|
+ Fix a Winbind segfault in "trusted_domains"; (bso#7037).
|
|
+ Complete and improve some German translation of 'net'; (bso#7039).
|
|
+ Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039).
|
|
+ Fix crash bug in libsmbclient; (bso#7043).
|
|
+ Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045).
|
|
+ Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046).
|
|
|
|
+ Lock down some srvsvc calls according to what w2k3 seems to do.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jan 19 12:05:43 CET 2010 - lmuelle@suse.de
|
|
|
|
- Update to 3.4.5.
|
|
+ Fix memory leak in smbd (bug #7020).
|
|
+ Fix changing of ACLs on writable files with "dos filemode=yes"
|
|
(bug #5202).
|
|
|
|
+ BUG 6642: Fix opening the quota magic file.
|
|
+ BUG 6919: Fix remote quota management.
|
|
+ BUG 7034: Fix internal error caused by vfs_cap.
|
|
+ BUG 7036: Fix 'net rpc getsid' in hardened Windows environments.
|
|
+ BUG 7043: Fix crash bug in "SMBC_parse_path".
|
|
+ BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls.
|
|
+ BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS
|
|
server.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jan 12 22:55:44 UTC 2010 - lmuelle@suse.de
|
|
|
|
- Free unused memory after a packet got processed; (bso#7020).
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jan 8 04:56:21 CET 2010 - boyang@suse.de
|
|
|
|
- Add timeout to rpc call to prevent infinite loop when network is
|
|
down; (bnc#538923).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jan 7 12:14:19 UTC 2010 - lmuelle@suse.de
|
|
|
|
- Update to 3.5.0rc1.
|
|
+ BUG 6837: Fix "Too many open files" when trying to access large number of
|
|
files with Windows 7.
|
|
+ BUG 6939: Fix long filenames when "mangling method" is set to "hash".
|
|
+ BUG 6991: Create symbol links to shared libraries.
|
|
+ BUG 6992: make test for getgrouplist cacheable.
|
|
+ BUG 7014: Fix Winbind crash when retrieving empty group members.
|
|
+ BUG 7020: Fix smbd using 2G memory.
|
|
|
|
+ Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned
|
|
attributes by protocol level.
|
|
+ Vector correctly through reply_openerror() (which uses the same logic).
|
|
+ Fix bugs with the full Windows ACL support.
|
|
+ Add a few missing gettext calls to the 'net' command.
|
|
+ Fix up a share type translation and translate some more strings in 'net'.
|
|
+ Allow to call "pdbedit -N description -u user" without specifiyng "-r".
|
|
+ Add spoolss_DriverInfo7.
|
|
+ Fix rpcclient after setprinter IDL fixes.
|
|
+ Use generated krb5.conf in 'net ads testjoin'.
|
|
+ Add some German translations for the 'net' command.
|
|
+ Update mount.cifs man page with nounix option.
|
|
+ Fix _samr_GetAliasMembership for results with 0 rids.
|
|
+ Fix an error case in cli_negprot.
|
|
+ Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc.
|
|
+ Restore correct timeouts for SMB requests.
|
|
+ Fix a 64-bit error in libsmb.
|
|
+ Replace IS_DOMAIN_OFFLINE by a function in Winbind.
|
|
+ Simplify/cleanup Winbind code.
|
|
+ Fix write behind memory block in libtalloc.
|
|
+ Fix result check for getaddrinfo().
|
|
+ Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr()
|
|
to tsocket.
|
|
+ Always set tdb->tracefd to -1 to be safe on goto fail in libtdb.
|
|
+ Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior.
|
|
+ Fix standalone 'make installdocs'.
|
|
+ Output %p as unsigned in snprintf replacement.
|
|
+ New attempt at TDB transaction nesting allow/disallow.
|
|
+ Remove swig stuff from libtdb.
|
|
+ Reset tdb->fd to -1 in tdb_close() in libtdb.
|
|
+ Change the way mksysms work in libtalloc.
|
|
+ Also build and install tdb manpages from standalone tdb.
|
|
+ Fix infinite loop in NCACN_IP_TCP as there is no timeout.
|
|
+ Make winbindd_cache.c aware of domain offline to avoid unnecessary backend
|
|
query.
|
|
+ List trusted domains from wcache when domain is offline.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jan 7 11:21:35 UTC 2010 - lmuelle@suse.de
|
|
|
|
- Update to 3.4.4.
|
|
+ Fix interdomain trust relationships with Win2008R2 (bug #6697).
|
|
+ Fix Winbind crashes when queried from nss (bug #6889).
|
|
+ Fix Winbind crash when retrieving empty group members (bug #7014).
|
|
+ Fix "UID range full" error in Winbind (bug #6901).
|
|
+ Fix multiple LDAP servers in "idmap backend" and "idmap alloc
|
|
backend" (bug #6910).
|
|
|
|
+ BUG 4832: Fix iconv checks.
|
|
+ BUG 6338: Do not always display "none" in 'net rpc trustdom list'.
|
|
+ BUG 6851: Add pdbedit --kickoff-time/-K to set the user's kickoff time.
|
|
+ BUG 6828: Fix infinite timeout when byte lock held outside of samba.
|
|
+ BUG 6837: Fix "Too many open files" message when trying to access a large
|
|
number of files with Windows 7.
|
|
+ BUG 6841: Fix "map acl inherit = yes".
|
|
+ BUG 6850: Fix shadow copy display on Windows 7.
|
|
+ BUG 6867: Fix listing of directories with a lot of files.
|
|
+ BUG 6868: Support building with Heimdal we well as with MIT.
|
|
+ BUG 6875: Fix DOS attributes on OS/2 clients.
|
|
+ BUG 6880: Fix listing of workgroup servers in libsmbclient.
|
|
+ BUG 6898: Samba duplicates file content on appending.
|
|
+ BUG 6918: Fix krb5 build problem on Ubuntu karmic.
|
|
+ BUG 6929: Fix build with recent heimdal.
|
|
+ BUG 6939: Fix long filenames with "mangling method = hash".
|
|
+ BUG 6967: Fix 'net ads join' with OU.
|
|
+ BUG 6981: Fix paged search with DirX LDAP server.
|
|
+ BUG 6982: Remove erroneous out of memory error path in lookup_sid.
|
|
+ BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids.
|
|
+ BUG 7005: Fix "mangle method = hash" truncates files with dot "."
|
|
character.
|
|
|
|
+ Fix the build of the winbind krb5 locator plugin.
|
|
+ Fix enumprinter key client and server.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 6 17:17:58 UTC 2010 - lmuelle@suse.de
|
|
|
|
- Readjust the _libdir/cups/backend/smb sym link only on uninstall of the
|
|
samba-krb-printing package; (bnc#568603).
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jan 1 20:04:09 UTC 2010 - lars@samba.org
|
|
|
|
- Add BuildRequires to fam-devel; (bnc#564260).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 30 22:04:19 CET 2009 - jmcdonough@suse.de
|
|
|
|
- Prevent winbind crash; (bso#7014); (bnc#566119).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Dec 21 20:16:21 CET 2009 - sjayaraman@suse.de
|
|
|
|
- Fix processing of open modes in POSIX open; (bnc#530683).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Dec 17 22:26:17 CET 2009 - jengelh@medozas.de
|
|
|
|
- Add baselibs.conf as a source.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Dec 15 16:47:48 UTC 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.5.0pre2.
|
|
+ BUG 2350: Add LDAP Alias Dereferencing support.
|
|
+ BUG 6288: SWAT adds a second share when changing parameters of an existing
|
|
share.
|
|
+ BUG 6435: Fix minor memory corruption.
|
|
+ BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was
|
|
set while configure.
|
|
+ BUG 6802: A created folder does not properly inherit permissions from
|
|
parent in vfs_acl_xattr.
|
|
+ BUG 6837: "Too many open files" when trying to access large number of
|
|
files from Windows 7.
|
|
+ BUG 6860: Fix shared library build on QNX.
|
|
+ BUG 6879: Fix crash in Winbind.
|
|
+ BUG 6929: Fix build with recent heimdal.
|
|
+ BUG 6938 : No hook exists to check creation rights when using acl_xattr
|
|
module.
|
|
+ BUG 6967: Prevent glibc error on 'net ads join'.
|
|
|
|
+ Fix vfs_acl_xattr which was failing to call the NEXT connect function.
|
|
+ Restructure the ACL code.
|
|
+ Refactor reply_rmdir to use handle based code.
|
|
+ Fix the build when no external talloc and tdb are installed.
|
|
+ Fix detection of CTDB headers on systems without system-libtalloc.
|
|
+ Fix several printing issues.
|
|
+ Fix the build on Mac OS X 10.6.2.
|
|
+ Fix net and rpcclient after setprinterdataex changes.
|
|
+ Add full support for level 8 printer drivers.
|
|
+ Add more spoolss architectures to IDL.
|
|
+ Fix enumprinter key client and server.
|
|
+ Fix crash in EnumPrinterDataEx.
|
|
+ Prefer posix_fallocate for doing "strict allocate".
|
|
+ Restore "fake directory create times" as a share parameter.
|
|
+ Fix explicit stat64 support.
|
|
+ Add support for NetWkstaGetInfo 101 and 102.
|
|
+ Add rpcclient wkssvc_enumerateusers.
|
|
+ De-deprecate "write cache size" to prevent its removal without a proper
|
|
alternative.
|
|
+ Allow more than 1000 users in BUILTIN\Users.
|
|
+ Complete support for NetWkstaGetInfo/NetWkstaEnumUsers.
|
|
+ Fix the build of the example VFS modules.
|
|
+ Fix crash in free_file_list().
|
|
+ Give the user a chance to change password when password will expire soon.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 9 20:44:21 UTC 2009 - lmuelle@suse.de
|
|
|
|
- Store the smbfs service state if enabled and restore it for cifs while
|
|
upgrade on post-11.2 systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 9 16:43:45 UTC 2009 - lmuelle@suse.de
|
|
|
|
- Prevent cifstab from being overwritten while upgrade on post-11.2 systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 9 07:44:59 CET 2009 - boyang@suse.de
|
|
|
|
- Give the user a chance to change password when password will expire soon;
|
|
(FATE#302414).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Dec 8 18:19:33 UTC 2009 - lmuelle@suse.de
|
|
|
|
- Rename smbfs init script to cifs for post-11.2 systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Dec 8 19:53:12 CEST 2009 - jmcdonough@suse.de
|
|
|
|
- Allow Windows 7 to connection to samba domain controllers and
|
|
member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680).
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Dec 4 18:59:22 CET 2009 - jmcdonough@suse.de
|
|
|
|
- Error on joining windows domain (invalid pointer); (bso#6967);
|
|
(bnc#553622).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Dec 3 11:47:02 CET 2009 - lmuelle@suse.de
|
|
|
|
- Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165).
|
|
- Simplify the winbind package %pre script and suppress stdout only.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 26 19:53:13 CET 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.5.0pre1
|
|
+ Add support for full Windows timestamp resolution.
|
|
+ Experimental implementation of SMB2.
|
|
+ Add encryption support for connections to a CUPS server.
|
|
+ Major windbind asynchronous refactoring.
|
|
- Remove using_samba from the doc package.
|
|
- Increase major version of libtalloc to 2.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 19 03:57:41 CET 2009 - boyang@suse.de
|
|
|
|
- Fix kerberos refresh chain; (bnc#546162); (bso#6872).
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Nov 6 19:55:27 CET 2009 - lmuelle@suse.de
|
|
|
|
- Hardlink duplicate files on post-11.1 systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Nov 6 18:08:17 CET 2009 - lmuelle@suse.de
|
|
|
|
- Add BuildArch noarch to samba-doc on post-11.1 systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Nov 3 03:10:47 CET 2009 - boyang@suse.de
|
|
|
|
- Use full 16byte session key in make_user_info_netlogon_interactive();
|
|
(bnc#551811).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 29 14:22:08 CET 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.4.3.
|
|
+ Fix trust relationships to windows 2008 (2008 r2) (bug #6711).
|
|
+ Fix file corruption using smbclient with NT4 server (bug #6606).
|
|
+ Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680).
|
|
|
|
+ BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a
|
|
symbolic link.
|
|
+ BUG 6529: Offline files conflict with Vista and Office 2003.
|
|
+ BUG 6532: Fix domain enumeration if master browser has space in name.
|
|
+ BUG 6606: Fix file corruption using smbclient with NT4 server.
|
|
+ BUG 6690: Fix wrong error check in profile.
|
|
+ BUG 6703: Allow smbstatus as non-root.
|
|
+ BUG 6704: Fix syntax error in avahi configure test.
|
|
+ BUG 6707: Fix an occasional segfault in config file parsing.
|
|
+ BUG 6710: Adjust regex to match variable names including underscores.
|
|
+ BUG 6711: Fix trust relationships to windows 2008 (2008 r2).
|
|
+ BUG 6726: SIVAL should have been an SVAL.
|
|
+ BUG 6728: BSD needs sys/sysctl.h included to build properly.
|
|
+ BUG 6731: Fix reading beyond the end of a named stream in xattr_streams.
|
|
+ BUG 6735: Don't overwrite password in pam_winbind, subsequent pam modules
|
|
might use the old password and new password.
|
|
+ BUG 6764: Fix timeval calculation.
|
|
+ BUG 6765: Add a "hidden" parameter "share:fake_fscaps".
|
|
+ BUG 6769: Fix symlink unlink.
|
|
+ BUG 6772: Allow outstanding_aio_calls to be decremented.
|
|
+ BUG 6774: smbd crashes if "aio write behind" is set.
|
|
+ BUG 6776: Fix core dump caused by running overlapping Byte Lock test.
|
|
+ BUG 6781: Fix renaming subfolders in Explorer view.
|
|
+ BUG 6791: Fix linking order in cifs.upcall.
|
|
+ BUG 6793: Fix Winbind crash with "INTERNAL ERROR: Signal 6".
|
|
+ BUG 6793: Fix segfault in winbindd_pam_auth.
|
|
+ BUG 6796: Deleting an event context on shutdown can cause smbd to crash.
|
|
+ BUG 6797: Fix a memleak in libwbclient.
|
|
+ BUG 6804: Fix hpux compiler issue.
|
|
+ BUG 6805: Correctly handle aio_error() and errno.
|
|
+ BUG 6807: Fix a segfault in "net rpc trustdom list" for long domain names.
|
|
+ BUG 6810: Add support for finding alternate credcaches to cifs.upcall.
|
|
+ BUG 6811: Fix reference to freed memory in pam_winbind.
|
|
+ BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure.
|
|
+ BUG 6824: Fix avahi activation.
|
|
+ BUG 6826: Don't fail authentication when one or some group of
|
|
require-membership-of is invalid.
|
|
+ BUG 6828: Fix infinite timeout when byte lock held outside of Samba.
|
|
+ BUG 6829: Fix displaying of multibyte characters in smbclient.
|
|
+ BUG 6840: Fix crash in pam_winbind.
|
|
|
|
+ Fix an uninitialized variable.
|
|
+ Only ever handle one event after a select call.
|
|
+ Conditional install of the cifs.upcall man page.
|
|
+ Fix warning occuring when building the manpages.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Oct 23 10:50:50 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Let smbclient show special characters properly; (bso#6829); (bnc#544204).
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Oct 23 05:07:37 CEST 2009 - boyang@suse.de
|
|
|
|
- Don't fail authentication when one or some group of require-membership-of
|
|
is invalid; (bnc#525123); (bso#6826).
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Oct 16 10:31:53 CEST 2009 - jmcdonough@suse.de
|
|
|
|
- Allow winbind to ignore certain domains; (bnc#539506).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 8 21:54:16 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.4.2.
|
|
+ Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517).
|
|
+ Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115).
|
|
+ Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Sep 30 12:56:02 CEST 2009 - jmcdonough@suse.de
|
|
|
|
- Fix potential denial of service; CVE-2009-2906; (bnc#543115).
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Sep 25 18:57:30 CEST 2009 - jmcdonough@suse.de
|
|
|
|
- Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Sep 23 21:56:35 CEST 2009 - jmcdonough@suse.de
|
|
|
|
- Fix unresolved home path; CVE-2009-2813; (bnc#539517).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 21 11:56:54 CEST 2009 - boyang@suse.de
|
|
|
|
- Don't overwrite password in pam_winbind; (bnc#515444).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 14 12:56:58 UTC 2009 - chris@computersalat.de
|
|
|
|
- mods for winbind (when used with squid - ntlm_auth)
|
|
o winbind adds group 'winbind'
|
|
o permission 0750,root,winbind LOCKDIR/winbindd_privileged
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Sep 10 22:19:57 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Merge two fixes from 3.2.8 and 3.3.1.
|
|
+ Adjust regex to match variable names including underscores.
|
|
+ Conditional install of the cifs.upcall man page.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Sep 10 00:36:36 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Remove supplements from baselibs.conf while %clean for pre-11.1 systems;
|
|
(bnc#520579).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Sep 9 17:26:58 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.4.1.
|
|
+ Fix authentication on member servers without Winbind (bug #6650).
|
|
+ Nautilus fails to copy files from an SMB share (bug #6649).
|
|
+ Fix connections of Win98 clients (bug #6551).
|
|
+ Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697).
|
|
+ Fix Winbind authentication issue (bug #6646).
|
|
|
|
+ BUG 5879: Update LDAP schema for Netscape DS 5.
|
|
+ BUG 5886: Fix password change propagation with ldapsam.
|
|
+ BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe.
|
|
+ BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab.
|
|
+ BUG 6437: Make open_udp_socket() IPv6 clean.
|
|
+ BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient.
|
|
+ BUG 6506: Smbd server doesn't set EAs when a file is overwritten in
|
|
NT_TRANSACT_CREATE.
|
|
+ BUG 6532: Fix the build with external talloc.
|
|
+ BUG 6538: Cancel all locks that are made before the first failure.
|
|
+ BUG 6560: Fix lookupname.
|
|
+ BUG 6564: SetPrinter fails (panics) as non root.
|
|
+ BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation.
|
|
+ BUG 6585: Fix unqualified "net join".
|
|
+ BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo.
|
|
+ BUG 6601: Avoid global fd limits.
|
|
+ BUG 6607: Fix crash bug in spoolss_addprinterex_level_2.
|
|
+ BUG 6611: Fix a valgrind error in chain_reply.
|
|
+ BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient.
|
|
+ BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds.
|
|
+ BUG 6650: Fix authentication on member servers without Winbind.
|
|
+ BUG 6651: Fix smbd SIGSEGV when breaking oplocks.
|
|
+ BUG 6655: Fix 'smbcontrol smbd ping'.
|
|
+ BUG 6620: Fix a bug in renames of directories.
|
|
+ BUG 6664: Fix truncation of the session key.
|
|
+ BUG 6673: Fix 'smbpasswd' with "unix password sync = yes".
|
|
+ BUG 6680: Fix authentication failure from Windows 7 when domain joined.
|
|
+ BUG 6688: Fix crash in 'net usershare list'.
|
|
+ BUG 6693: Check we read off the complete event from inotify.
|
|
+ BUG 6700: Use dns domain name when needing to guess server principal.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Aug 13 03:52:07 CEST 2009 - boyang@suse.de
|
|
|
|
- Update to 3.2.14.
|
|
+ Fix SAMR access checks (e.g. bugs #6089 and #6112).
|
|
+ Fix 'force user' (bug #6291).
|
|
+ Improve Win7 support (bug #6099).
|
|
+ Fix posix ACLs when setting an ACL without explicit ACE for the
|
|
owner (bug #2346).
|
|
|
|
+ BUG 6387: Fix Winbind crash when multiple IDmappings exist in the
|
|
LDAP directory.
|
|
+ BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache().
|
|
+ BUG 6628: 'smbpasswd -a' uses algorithmic rid base with
|
|
'passdb backend = tdbsam'.
|
|
+ BUG 6089: Fix SAMR access checks.
|
|
+ BUG 6112: Fix SAMR access checks.
|
|
+ BUG 6279: Fix Winbind crash.
|
|
+ BUG 6291: Fix 'force user'.
|
|
+ BUG 6099: Try to fix domain join of Win7 Beta.
|
|
+ BUG 6386: Groupdb mapping fix.
|
|
+ BUG 6421: Fix POSIX read-only open on read-only shares.
|
|
+ BUG 6476: Fix more smbd-zombies in memory.
|
|
+ BUG 6488: acl_group_override() call in posix acls references an
|
|
uninitialized variable.
|
|
+ BUG 6504: Fix SAMR server for Winbind access.
|
|
+ BUG 6520: Fix time stamps.
|
|
+ BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit.
|
|
+ BUG 6340: Don't segfault when cleartext trustdom pwd could not be
|
|
retrieved.
|
|
+ BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
|
|
+ BUG 6465: Fix enum_aliasmem in ldb branch.
|
|
+ BUG 6484: Fix searching for users while adding them to groups via
|
|
Windows usermanager.
|
|
+ BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the
|
|
owner.
|
|
+ BUG 6526: Let parent_dirname() correctly return toplevel filenames.
|
|
+ BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds.
|
|
+ BUG 5798: Preserve CFLAGS info in configure.
|
|
+ BUG 6382: Case insensitive access to DFS links broken.
|
|
+ BUG 6481: Don't require "Modify property" perms to unjoin.
|
|
+ BUG 6628: 'smbpasswd -a' uses algorithmic rid base with
|
|
'passdb backend = tdbsam'.
|
|
+ BUG 6560: Lookupname failed, cannot find domain when attempt to change
|
|
password.
|
|
|
|
+ Prevent creation of keys containing the '/' character.
|
|
+ Fix join of Windows 7 RC to a Samba3 DC.
|
|
+ Fix bug in processing of open modes in POSIX open.
|
|
+ Fix the negotiate flags.
|
|
+ Protect netlogon_creds_server_step() against NULL creds.
|
|
+ Also handle DirX return codes.
|
|
+ Fix a crash bug if we timeout in net rpc trustdom list.
|
|
+ Add '--request-timeout' option to 'net'.
|
|
+ Fix a race condition in Winbind leading to a panic.
|
|
+ Add workaround for MS KB932762.
|
|
+ 5945: Fix out of memory error with Winbind idmap.
|
|
+ Avoid duplicate ACEs.
|
|
+ Fix profile ACLs in some corner cases.
|
|
+ Zero an uninitialized array.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 12 05:07:06 CEST 2009 - boyang@suse.de
|
|
|
|
- Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271);
|
|
(bso#6615).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Aug 10 03:53:53 CEST 2009 - boyang@suse.de
|
|
|
|
- check in .po files for pam_winbind; (bnc#499233); (bso#6602).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Aug 6 16:24:23 CEST 2009 - hhetter@suse.de
|
|
|
|
- Add ntp and network-remotefs as Should-Start dependency to the winbind init
|
|
script; (bnc#515629).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Aug 6 14:40:21 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.0.36.
|
|
+ Fix Winbind crash on 'getent group' (bug #5906).
|
|
+ Excel save operation corrupts file ACLs (bug #4308).
|
|
+ Prevent segmentation fault on joining a very long domain name.
|
|
|
|
+ BUG 4308: Excel save operation corrupts file ACLs.
|
|
+ BUG 4370: Clean-up entries in /etc/mtab after unmount.
|
|
+ BUG 4640: Fix guest mounts in mount-cifs.
|
|
+ BUG 5906: Fix Winbind crash on 'getent group'.
|
|
+ BUG 6066: netinet/ip.h present but cannot be compiled on Solaris.
|
|
+ BUG 6099: In order to allow Win7 to connect to a Samba NT style.
|
|
+ BUG 6279: Fix Winbind crash.
|
|
PDC we set the flags before we know if it's an error or not.
|
|
+ BUG 6085: Fix build of vfs_default.
|
|
+ BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work
|
|
correctly.
|
|
|
|
+ Fix logic error in try_chown.
|
|
+ Correctly use chroot().
|
|
+ Fix bug in processing of open modes in POSIX open.
|
|
+ Don't install the cifs.upcall binary twice.
|
|
+ Fix mount.cifs handling of -V option.
|
|
+ Prevent segmentation fault on joining a very long domain name.
|
|
+ Don't try and delete a default ACL from a file.
|
|
+ Add workaround for MS KB932762.
|
|
+ Add fakemount (-f) and nomtab (-n) flags to mount.cifs.
|
|
+ Fix a crash during name resolution when log level >= 10
|
|
and libc segfaults if printf is passed NULL for a "%s" arg.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Aug 1 18:39:53 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jul 27 13:45:04 CEST 2009 - boyang@suse.de
|
|
|
|
- lookupname failed, cannot find domain when attempt to change password;
|
|
(bnc#520645); (bso#6560).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jul 16 16:09:48 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Don't link with --as-needed flag on post-11.1 systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 14 23:50:08 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Stop the smbfs service if an interface goes down; (bnc#517768).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jul 8 19:45:21 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Disable build of static libraries on post-11.1 systems; (bnc#509945).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jul 8 15:35:20 CEST 2009 - jmcdonough@suse.de
|
|
|
|
- Fix missing zlibs for cifs.upcall and test_shlibs.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jul 3 17:21:17 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.4.0.
|
|
+ BUG 6431: Local groups from 3.0 setups no longer found.
|
|
+ BUG 6459: Fix build of pam_smbpass on some distributions.
|
|
+ BUG 6481: 'net ads leave' needs to try account deletion, NetUnjoinDomain
|
|
not.
|
|
+ BUG 6497: Fix calling of 'test' in configure.
|
|
+ BUG 6498: Add workaround for MS KB932762.
|
|
+ BUG 6499: Fix building of pam_smbpass.
|
|
+ BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache().
|
|
+ BUG 6512: Fix support for enumerating user forms.
|
|
+ BUG 6514: Improve error message in 'net' when smb.conf is not available.
|
|
+ BUG 6520: Fix time stamps when "unix extensions = yes".
|
|
+ BUG 6521: Fix building tevent_ntstatus without config.h.
|
|
+ BUG 6526: Fix notifies in the share root directory.
|
|
+ BUG 6531: Fix pid file name.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jul 2 13:04:53 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jun 30 13:26:32 CEST 2009 - jmcdonough@suse.de
|
|
|
|
- Fix net ads leave; (bnc#511695).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jun 25 12:25:33 CEST 2009 - sbrabec@suse.cz
|
|
|
|
- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).
|
|
- Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jun 24 17:11:15 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.2.13, 3.3.6.
|
|
+ In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with
|
|
file names treat user input as a format string to asprintf. With a
|
|
maliciously crafted file name smbclient can be made to execute code
|
|
triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jun 24 16:01:42 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.0.35.
|
|
+ In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a
|
|
data value can potentially affect access control when "dos filemode"
|
|
is set to "yes"; CVE-2009-1888; (bnc#515479).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jun 23 12:32:18 CEST 2009 - jmcdonough@suse.de
|
|
|
|
- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jun 19 12:01:52 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.4.0rc1.
|
|
+ BUG 4699: Remove pidfile on clean shutdown.
|
|
+ BUG 5456: Fix "net ads testjoin".
|
|
+ BUG 6081: Make it possible to change machine account sids.
|
|
+ BUG 6253: Use correct value for password expiry calculation in
|
|
pam_winbind.
|
|
+ BUG 6297: Owner of sticky directory cannot delete files created by others.
|
|
+ BUG 6305: Correctly prompt for a password when a username was given.
|
|
+ BUG 6328: Add support for multiple rights to
|
|
"net sam rights grant/revoke".
|
|
+ BUG 6333: Consolidate create/delete account paths in pdbedit.
|
|
+ BUG 6449: 'net rap user add' crashes without -C option.
|
|
+ BUG 6451: net/libnetapi user rename using wrong access bits.
|
|
+ BUG 6458: Fix uninitialized variable in local_password_change().
|
|
+ BUG 6465: Fix enumeration of empty aliases.
|
|
+ BUG 6476: Fix smbd-zombies in memory when using [x]inetd.
|
|
+ BUG 6487: Add missing DFS call in trans2 mkdir call.
|
|
+ BUG 6488: acl_group_override() call in posix acls references an
|
|
uninitialized variable.
|
|
|
|
+ Improve pam_winbind documentation.
|
|
- Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jun 18 16:29:34 CEST 2009 - boyang@suse.de
|
|
|
|
- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user
|
|
input as a format string to asprintf; CVE-2009-1886; (bnc#513360).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jun 17 18:11:46 CEST 2009 - boyang@suse.de
|
|
|
|
- Fix a bad memleak in vfs_full_audit; (bnc#510035).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jun 16 16:51:38 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.3.5.
|
|
+ Fix SAMR and LSA checks (bug #6089, #6289)
|
|
+ Fix posix acls when setting an ACL without explicit ACE for the
|
|
owner (bug #2346).
|
|
+ Fix joining of Win7 into Samba domain (bug #6099).
|
|
+ Fix joining of Win2000 SP4 clients (bug #6301).
|
|
|
|
+ BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the
|
|
owner.
|
|
+ BUG 5832: Fix build on RHEL when ccache is not available.
|
|
+ BUG 5853: Add keyutils-devel to build requires to fix build on RHEL.
|
|
+ BUG 5897: Fix shutdown script example in the smb.conf manpage.
|
|
+ BUG 6089: Revert the extra SAMR and LSA checks.
|
|
+ BUG 6099: Fix joining of Win7 into Samba domain.
|
|
+ BUG 6157: Fix handling of multi-value attribute "uid".
|
|
+ BUG 6289: Revert the extra SAMR and LSA checks.
|
|
+ BUG 6297: Owner of sticky directory cannot delete files created by others.
|
|
+ BUG 6301: Fix joining of Win2000 SP4 clients.
|
|
+ BUG 6309: Support remote unjoining of Windows 2003 or greater.
|
|
+ BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event.
|
|
+ BUG 6320: Handle registry config source in file_list.
|
|
+ BUG 6330: Fix DFS on AIX.
|
|
+ BUG 6336: Fix 'net groupmap set' segfault.
|
|
+ BUG 6361: Make --rcfile work in smbget.
|
|
+ BUG 6365: Re-Add the "dropbox" functionality with -wx rights on a
|
|
directory.
|
|
+ BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
|
|
+ BUG 6382: Fix case insensitive access to DFS links.
|
|
+ BUG 6415: Filter out of range mappings in default idmap config in
|
|
idmap_tdb.
|
|
+ BUG 6416: Filter out of range mappings in default idmap config in
|
|
idmap_tdb2.
|
|
+ BUG 6417: Filter out of range mappings in default idmap config in
|
|
idmap_ldap.
|
|
+ BUG 6441: Fix the compile with --enable-dnssd.
|
|
+ BUG 6449: 'net rap user add' crashes without -C option.
|
|
+ BUG 6465: Fix enumeration of empty aliases (ldb backend).
|
|
|
|
+ Prevent infinite include nesting.
|
|
+ Mark registry shares without path unavailable.
|
|
+ Also handle DirX return codes.
|
|
+ Fix Coverity ID 897.
|
|
+ Do not crash in ctdbd_traverse if ctdbd is not around.
|
|
+ Fix a race condition in winbind leading to a panic.
|
|
+ Some man pam_winbind improvements.
|
|
+ Zero an uninitialized array.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jun 16 14:42:33 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.2.12.
|
|
+ Fix SAMR and LSA checks (bug #6089, #6289)
|
|
+ Fix posix acls when setting an ACL without explicit ACE for the
|
|
owner (bug #2346).
|
|
+ Fix "force user" (bug #6291).
|
|
+ Fix Winbind crash (bug #6279).
|
|
+ Fix joining of Win7 into Samba domain (bug #6099).
|
|
|
|
+ BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the
|
|
owner.
|
|
+ BUG 5798: CFLAGS info lost in configure.
|
|
+ BUG 5832: Fix build on RHEL when ccache is not available.
|
|
+ BUG 5835: Add keyutils-devel to build requires.
|
|
+ BUG 5945: Fix out of memory error with Winbind idmap.
|
|
+ BUG 6089: Revert the extra SAMR and LSA checks.
|
|
+ BUG 6099: Fix joining of Win7 into Samba domain.
|
|
+ BUG 6279: Fix Winbind crash.
|
|
+ BUG 6289: Revert the extra SAMR and LSA checks.
|
|
+ BUG 6291: Fix "force user".
|
|
+ BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit.
|
|
+ BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
|
|
+ BUG 6386: Groupdb mapping fix.
|
|
+ BUG 6382: Fix case insensitive access to DFS links.
|
|
+ BUG 6465: Fix enumeration of empty aliases (ldb backend).
|
|
|
|
+ Prevent creation of keys containing the '/' character.
|
|
+ Fix bug in processing of open modes in POSIX open.
|
|
+ Protect netlogon_creds_server_step() against NULL creds.
|
|
+ Also handle DirX return codes.
|
|
+ Fix a race condition in winbind leading to a panic.
|
|
+ Fix a crash bug if we timeout in net rpc trustdom list.
|
|
+ Fix profile acls in some corner cases.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jun 12 23:03:54 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Default with passdb backend to smbpasswd for SUSE products older than 11.2.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jun 12 15:47:51 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Explicitly use 'tdbsam' as passdb backend in the default smb.conf file.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jun 8 23:18:02 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.4.0pre2.
|
|
+ The default passdb backend has been changed to 'tdbsam'!
|
|
+ Samba4 and Samba3 sources are included in the tarball.
|
|
+ Changed the way smbd handles untrusted domain names given during user
|
|
authentication.
|
|
+ Various fixes including printer change notificiation for Samba spoolss
|
|
print servers.
|
|
+ The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog
|
|
and spoolss) were replaced by autogenerated code based on PIDL.
|
|
+ Samba3 and Samba4 do now share a common tevent library.
|
|
+ The code has been cleaned up and the major basic interfaces are shared
|
|
with Samba4 now.
|
|
+ An asynchronous API has been added.
|
|
+ Made parameter syntax of the net command more consistent.
|
|
|
|
+ BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the
|
|
owner.
|
|
+ BUG 4271: testparm should not print includes.
|
|
+ BUG 4831: Don't call openlog() or closelog() from pam_smbpass.
|
|
+ BUG 5681: Do not limit the number of network interfaces.
|
|
+ BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo
|
|
access checks.
|
|
+ BUG 6099: Fix NETLOGON credential chain.
|
|
+ BUG 6136: New AFS syscall conventions.
|
|
+ BUG 6157: Fix handling of multi-value attribute "uid".
|
|
+ BUG 6253: Use correct value for password expiry calculation.
|
|
+ BUG 6291: Fix 'force user'.
|
|
+ BUG 6292: Update config.guess from gnu.org.
|
|
+ BUG 6302: Give the VFS a chance to read from 0-byte files.
|
|
+ BUG 6309: Support remote unjoining of Windows 2003 or greater.
|
|
+ BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on
|
|
malloced memory.
|
|
+ BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event.
|
|
+ BUG 6320: Handle registry config source in file_list.
|
|
+ BUG 6330: Fix DFS on AIX.
|
|
+ BUG 6336: Fix segfault in 'net groupmap set'.
|
|
+ BUG 6340: Don't segfault when cleartext trustdom pwd could not be
|
|
retrieved.
|
|
+ BUG 6357: Use Samba default command line arguments in 'net'.
|
|
+ BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4
|
|
and IPv6 addresses
|
|
+ BUG 6361: Make --rcfile work in smbget.
|
|
+ BUG 6371: Unsuccessful 'net conf setparm' leaves empty share.
|
|
+ BUG 6372: usermanager only displaying 1024 groups and aliases.
|
|
+ BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids.
|
|
+ BUG 6415: Filter out of range mappings in default idmap config
|
|
(idmap_tdb).
|
|
+ BUG 6416: Filter out of range mappings in default idmap config
|
|
(idmap_tdb2).
|
|
+ BUG 6417: Filter out of range mappings in default idmap config
|
|
(idmap_ldap).
|
|
|
|
+ Change the way smbd handles untrusted domain names given during user
|
|
authentication.
|
|
+ Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and
|
|
spoolss by autogenerated code based on PIDL.
|
|
+ Fix several printing issues and improve support for printer change
|
|
notificiations.
|
|
+ Add 'net eventlog'.
|
|
+ Add asynchronous API.
|
|
+ Make Samba3 and Samba4 share a tevent library.
|
|
+ Add two new parameters to control how we verify kerberos tickets.
|
|
+ Add 'net rpc service' subcommands 'create' and 'delete'.
|
|
+ Fix the core of the SAMR access functions.
|
|
+ Fix SAMR server for winbindd access.
|
|
+ Add dbwrap_tool - a tdb tool that is CTDB-aware.
|
|
+ Hide "config backend" from swat.
|
|
+ Fix linking with --disable-shared-libs.
|
|
+ Fix issue with missing entries when enumerating directories.
|
|
+ Map NULL domains to our global sam name.
|
|
+ Fix driver upload for Xerox 4110 PS printer driver.
|
|
+ Add "net dom renamecomputer" to rename machines in a domain.
|
|
+ Inspect the correct computername string before enabling/disabling the
|
|
change button in netdomjoin-gui.
|
|
+ Fix join prompt dialog test in netdomjoin-gui.
|
|
+ Only gray out labels when not root and not connecting to remote
|
|
machines (netdomjoin-gui).
|
|
+ Allow to switch between workgroups/domains with the same name
|
|
(netdomjoin-gui).
|
|
+ Add NetShutdownInit and NetShutdownAbort.
|
|
+ Fix samr access checks.
|
|
+ Add a security model to LSA.
|
|
+ Also handle DirX return codes.
|
|
+ Do not crash in ctdbd_traverse if ctdbd is not around.
|
|
+ Fix Coverity ID 897.
|
|
+ Fix a race condition in vfs_aio_fork with gpfs share modes.
|
|
+ Fix bug disclosed by lock8 torture test.
|
|
+ Fix a race condition in winbind leading to a panic.
|
|
+ Detect tight loop in tdb_find().
|
|
+ Fix chained sesssetupAndX/tconn messages.
|
|
+ Fix strict locking with chained reads.
|
|
+ Fix two bugs in sendfile.
|
|
+ Fix memory leak.
|
|
+ Fix file descriptor leak.
|
|
+ Fallback to the legacy sid_to_(uid|gid) instead of returning NULL.
|
|
+ Always allocate memory in dptr_ReadDirName.
|
|
+ Fix 'net' crash during domain join.
|
|
+ Zero an uninitialized array.
|
|
+ Allow child processes to exit gracefully if we are out of fds.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jun 4 18:54:34 CEST 2009 - sjayaraman@suse.de
|
|
|
|
- Enable cifs.upcall on versions newer than SUSE 10.0.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jun 4 18:43:13 CEST 2009 - sjayaraman@suse.de
|
|
|
|
- Add BuildRequires to keyutils-devel.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jun 4 18:14:40 CEST 2009 - sjayaraman@suse.de
|
|
|
|
- Remove redundant Requires to keyutils-libs for cifs-mount.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed May 27 22:26:15 CEST 2009 - jmcdonough@suse.de
|
|
|
|
- Detect tight loop in tdb_find(); (bnc#450974).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon May 18 18:03:00 CEST 2009 - jmcdonough@suse.de
|
|
|
|
- Fix lp printing with kerberos; (bnc#476913).
|
|
|
|
-------------------------------------------------------------------
|
|
Sat May 9 20:19:51 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all
|
|
other build targets.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 30 15:47:13 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.4.0pre1.
|
|
+ Samba4 and Samba3 sources are included in the tarball
|
|
+ Changed the way smbd handles untrusted domain names given during user
|
|
authentication.
|
|
+ Various fixes including printer change notificiation for Samba spoolss
|
|
print servers.
|
|
+ The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog
|
|
and spoolss) were replaced by autogenerated code based on PIDL.
|
|
+ Samba3 and Samba4 do now share a common tevent library.
|
|
+ The code has been cleaned up and the major basic interfaces are shared
|
|
with Samba4 now.
|
|
+ An asynchronous API has been added.
|
|
|
|
+ Change the way smbd handles untrusted domain names given during user
|
|
authentication.
|
|
+ Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and
|
|
spoolss by autogenerated code based on PIDL.
|
|
+ Fix several printing issues and improve support for printer change
|
|
notificiations.
|
|
+ Add 'net eventlog'.
|
|
+ Add asynchronous API.
|
|
+ Make Samba3 and Samba4 share a tevent library.
|
|
+ Add two new parameters to control how we verify kerberos tickets.
|
|
+ Add 'net rpc service' subcommands 'create' and 'delete'.
|
|
+ Make merged build possible.
|
|
+ Move common libraries to the shared lib/ directory.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 30 15:15:41 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.3.4.
|
|
+ Fix domain logins for WinXP clients pre SP3 (bug #6263).
|
|
+ Fix samr_OpenDomain access checks (bug #6089).
|
|
+ Fix usrmgr.exe creating a user (bug #6243).
|
|
|
|
+ BUG 6089: Fix samr_OpenDomain access checks.
|
|
+ BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with
|
|
"msdfs root" set to "yes".
|
|
+ BUG 6279: Fix Winbind crash.
|
|
+ BUG 5329: Add "net rpc service delete/create".
|
|
+ BUG 6238: Make sure wbcLogoffUserParams are properly initialized before
|
|
freed.
|
|
+ BUG 6263: Fix domain logins for WinXP clients pre SP3.
|
|
+ BUG 6286: Call init function for builtin idmap modules before probing for
|
|
them as shared modules.
|
|
+ BUG 6243: Fix usrmgr.exe creating a user.
|
|
|
|
+ net conf: Save share name as given, not as lower case only.
|
|
+ Prevent creation of registry keys containing the '/' character.
|
|
+ Allow pdbedit to change a user rid/sid.
|
|
+ When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid.
|
|
+ Don't access a freed structure when logging off and re-using a vuid.
|
|
+ Try to to fix password_expired flag handling.
|
|
+ Make sure to grey out change fields in the netdomjoin-gui when not
|
|
running as root.
|
|
+ Don't look up local user for remote changes, even when root.
|
|
+ Use procid_str in debug messages for better cluster-debuggability.
|
|
+ Use cluster-aware procid_is_me instead of comparing pids.
|
|
+ Fix smbd crash for close_on_completion.
|
|
+ Fix a memleak in an unlikely error path in change_notify_create().
|
|
+ Do not use the file system GET_REAL_FILENAME for mangled names.
|
|
+ Fix a crash bug if we timeout in net rpc trustdom list.
|
|
+ Add '--request-timeout' option to net.
|
|
+ In net_conf_import, start a transaction when importing a single share.
|
|
+ Fix writing of roaming profiles with "profile acls" set to "yes".
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Apr 17 21:36:47 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.2.11.
|
|
+ Fix domain logins for WinXP clients pre SP3 (bug #6263).
|
|
+ Fix samr_OpenDomain access checks (bug #6089).
|
|
+ Fix smbd crash for close_on_completion.
|
|
|
|
+ BUG 6089: Fix samr_OpenDomain access checks.
|
|
+ BUG 6205: Correct sample smb.conf share configuration.
|
|
+ BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with
|
|
"msdfs root" set to "yes".
|
|
+ BUG 6263: Fix domain logins for WinXP clients pre SP3.
|
|
|
|
+ Allow pdbedit to change a user rid/sid.
|
|
+ When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid.
|
|
+ Fix resume command typo for "printing = vlp".
|
|
+ Fix smbd crash for close_on_completion.
|
|
+ Fix a memleak in an unlikely error path in change_notify_create().
|
|
+ Don't look up local user for remote changes, even when root.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Apr 17 10:34:29 CEST 2009 - jmcdonough@suse.de
|
|
|
|
- Don't lookup local user for remote password changes; (bnc#493507).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 2 22:14:03 CEST 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.3.3.
|
|
+ Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb
|
|
correctly (bug #6195).
|
|
+ Fix serving of files with colons to CIFS/VFS client (bug #6196).
|
|
+ Fix "map readonly" (bug #6186).
|
|
+ BUG 6195: Don't let smbd child processes panic.
|
|
+ Add backend_requires_messaging() method to libsmbconf.
|
|
+ Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf.
|
|
+ Fall back to file backend when no valid backend was found.
|
|
+ Fix a memleak in dbwrap_rbt.
|
|
+ Provide transaction_start|commit|cancel fns for the registry tdb.
|
|
+ Speed up "net conf drop".
|
|
+ Speed up "net conf import".
|
|
+ Add transactions to the libsmbconf API.
|
|
+ Reduce memory usage of "net conf import".
|
|
+ Registry cleanup.
|
|
+ Fix handling of SAMBA_VERSION_VENDOR_PATCH.
|
|
+ Fix build of pam_winbind.so with static linking.
|
|
+ Tidy up some convert_string_internal error cases.
|
|
+ BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to
|
|
run elections.
|
|
+ Allow DFS client paths to work when POSIX pathnames have been selected.
|
|
+ Try and fix the build farm RAW-STREAMS errors.
|
|
+ Ensure files starting with multiple dots are hidden.
|
|
+ BUG 6102: NetQueryDisplayInformation could return wrong information.
|
|
+ BUG 6193: Avoid messing with sync_context in libnet_samsync_delta().
|
|
+ Fix notify_printer_status_byname.
|
|
+ Fix Coverity IDs 722, 762, 774, 775, 776.
|
|
+ Fix build on old Heimdal based systems.
|
|
+ Fix compile warning.
|
|
+ Use parentheses in if condition to make negation clear.
|
|
+ Add dirsort module.
|
|
+ BUG 6147: Fix detection of the GNU ld version.
|
|
+ BUG 6097: Fix smbd segfault.
|
|
+ BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped
|
|
members.
|
|
+ BUG 6139: Add missing whitespace in mount.cifs error message.
|
|
+ Fix a malloc/talloc mismatch when cli_initialise() fails.
|
|
+ Fix a valgrind error.
|
|
+ Speed up "net conf list".
|
|
+ Add sorted subkey cache.
|
|
+ Use StrCaseCmp in the dirsort module.
|
|
+ Document the dirsort module.
|
|
+ Disable dns_sd by default.
|
|
+ Add avahi detection to configure.
|
|
+ Add event avahi binding.
|
|
+ Use avahi to register _smb._tcp in smbd.
|
|
+ Fix two memleaks in the encryption code.
|
|
+ Fix a scary "fill_share_mode_lock failed" message.
|
|
+ BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set
|
|
errno.
|
|
+ Don't use reserved words in smbconftort.
|
|
+ Fix smb signing for fragmented trans/trans2/nttrans requests.
|
|
+ Parse_packet can return NULL which is then dereferenced in
|
|
match_mailslot_name.
|
|
+ Format the header check for netinet/ip.h more nicely.
|
|
+ Missing break in conversion function prevents tdb password database
|
|
update.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Apr 1 16:04:11 CEST 2009 - jmcdonough@suse.de
|
|
|
|
- Update to 3.2.10.
|
|
+ BUG #6195: Don't let smbd child processes panic.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Apr 1 13:03:44 CEST 2009 - jmcdonough@suse.de
|
|
|
|
- BUG 6195: Fix crash on passdb conversion.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 31 15:06:03 CET 2009 - jmcdonough@suse.de
|
|
|
|
- Update to 3.2.9.
|
|
+ BUG 5920: The length of the memcpy was calculated wrong.
|
|
+ BUG 6097: Fix smbd segfault.
|
|
+ BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS
|
|
server is invalid.
|
|
+ BUG 6099: Samba returns incurrate capabilities list.
|
|
+ BUG 6100: Implement _netr_LogonGetCapabilities() with
|
|
NT_STATUS_NOT_IMPLEMENTED.
|
|
+ BUG 6102: NetQueryDisplayInformation could return wrong information.
|
|
+ BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped
|
|
members.
|
|
+ BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem.
|
|
+ BUG 6161: smbclient corrupts source path in tar mode.
|
|
+ BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif().
|
|
+ BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client.
|
|
+ BUG 6224: nmbd waits 5 minutes before checking to run elections.
|
|
+ BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno.
|
|
+ Numerous Coverity fixes
|
|
+ Fix double free caused by incorrect talloc_steal usage.
|
|
+ Backport delete semantics of alternate data streams on a file truncate.
|
|
+ Allow set attributes on a stream fnum to redirect to the base filename.
|
|
+ Fix use of streams modules with CIFSFS client.
|
|
+ Fix more POSIX path lstat calls.
|
|
+ Allow DFS client paths to work with POSIX pathnames.
|
|
+ Ensure files starting with multiple dots are hidden.
|
|
+ Fix guest auth when Winbind is running.
|
|
+ Fix memleak in get_remote_printer_publishing_data().
|
|
+ cifs mount fix for handling -V parameter.
|
|
+ Fix guest mounts.
|
|
+ Clean-up entries in /etc/mtab after unmount.
|
|
+ Add fakemount (-f) and nomtab (-n) flags to mount.cifs.
|
|
+ Enable total anonymization in vfs_smb_traffic_analyzer.
|
|
+ Don't try and delete a default ACL from a file.
|
|
+ Fix remotely adding a share via MMC.
|
|
+ Fix resume handle for _samr_EnumDomainGroups.
|
|
+ Fix a buffer handling bug when adding lots of registry keys.
|
|
+ Fix a O(n^2) algorithm in regdb_fetch_keys().
|
|
+ Fix a valgrind error / segfault in dns_register_smbd().
|
|
+ Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog.
|
|
+ Fix a malloc/talloc mismatch when cli_initialise() fails.
|
|
+ Fix two memleaks in the encryption code.
|
|
+ Fix "fill_share_mode_lock failed" message.
|
|
+ Add S-1-22-X-Y sids to the local token.
|
|
+ Fix smb signing for fragmented trans/trans2/nttrans requests.
|
|
+ Don't miss an absolute pathname as a kerberos keytab path.
|
|
+ Have nmbd check all available interfaces for WINS before failing.
|
|
+ Initialize the id_map status in idmap_ldap to avoid surprise.
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Mar 15 12:48:28 CET 2009 - lmuelle@suse.de
|
|
|
|
- Obsolete change from 2008-03-05 by removing the needless examples cleanup.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Mar 14 12:17:03 CET 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.3.2.
|
|
+ Fix "force group" (bug #6155).
|
|
+ Fix saving of files on Samba share using MS Office 2007 (bug #6160).
|
|
+ Fix guest authentication in setups with "security = share" and "guest ok =
|
|
yes" when Winbind is running.
|
|
+ Fix corruptions of source path in tar mode of smbclient (bug #6161).
|
|
+ BUG 6082: Fix renaming and deleting of directories using Windows clients.
|
|
+ BUG 6154: Make ZFS honor admin users.
|
|
+ BUG 6155: Fix "force group".
|
|
+ BUG 6160: Fix saving of files on Samba share using MS Office 2007.
|
|
+ BUG 6161: Fix corruptions of source path in tar mode of smbclient.
|
|
+ Fix some NetBSD warnings.
|
|
+ Fix bug in processing of open modes in POSIX open.
|
|
+ Fix use of streams modules with CIFSFS client.
|
|
+ Ensure ACL modules work with POSIX paths.
|
|
+ Use fsp->posix_open in preference if we have it.
|
|
+ Fix more POSIX path lstat calls.
|
|
+ Fix a bug in message handling for the change notify code.
|
|
+ Fix guest authentication in setups with "security = share" and "guest ok =
|
|
yes" when Winbind is running.
|
|
+ BUG 4640: Fix guest mounts in mount.cifs.
|
|
+ Fix displaying the version string properly when no other parameters passed
|
|
in in mount.cifs.
|
|
+ Prefer gssapi header files from subdirectory.
|
|
+ BUG 6176: winbindd -n should disable the winbind idmap cache.
|
|
+ Add a vfs_preopen module to hide fs latencies.
|
|
+ Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog.
|
|
+ Fix a valgrind error / segfault in dns_register_smbd().
|
|
+ Fix build on SLES8.
|
|
+ Decremented by 1 for ntcancel requests.
|
|
+ Fix creation of core files.
|
|
+ Fix first mapping of uids/gids in Winbind.
|
|
+ Initialize the id_map status in idmap_ldap to avoid surprise.
|
|
+ Fix initialization of idmap status.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 10 15:07:29 CET 2009 - lmuelle@suse.de
|
|
|
|
- Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 5 16:07:10 CET 2009 - ro@suse.de
|
|
|
|
- Ignore return value from subshell to fix build.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Feb 25 09:24:25 CET 2009 - boyang@suse.de
|
|
|
|
- Make libsmbclient work with DFS, backported from 3.3; (bnc#475995).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 24 16:43:02 CET 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.3.1.
|
|
+ Fix net ads join when "ldap ssl = start tls" (bug #6073).
|
|
+ Fix renaming/deleting of files using Windows clients (bug #6082).
|
|
+ Fix renaming/deleting a "not matching/resolving" symlink (bug #6090).
|
|
+ Fix remotely adding a share via the Windows MMC.
|
|
+ BUG 6082: Fix renaming/deleting of files using Windows clients.
|
|
+ BUG 6069: Fix build with too many arguments.
|
|
+ BUG 6090: Fix renaming/deleting a "not matching/resolving" symlink.
|
|
+ BUG 6099: Try to fix domain join of Win7 Beta.
|
|
+ BUG 6117: Fix core dump of pdbedit -a.
|
|
+ BUG 6133: Fix deletion of non-ACL files on Solaris/ZFS/NFSv4 ACL
|
|
filesystem.
|
|
+ Fix Coverity IDs 115, 116, 117, 602.
|
|
+ Fix warning (bad handler prototype).
|
|
+ Unify the detection of the timespec code in configure.in, and the
|
|
application of it in time.c.
|
|
+ Correctly use chroot().
|
|
+ Parameterize in local.h the MAX_RPC_DATA_SIZE, and ensure that "offered"
|
|
read from the rpc packet in spoolss is under that size.
|
|
+ Backport the semantics of when to delete alternate data streams on a file
|
|
truncate.
|
|
+ Fix printf warnings.
|
|
+ BUG 6073: Prevent ads_connect() from using SSL unless explicitly
|
|
requested.
|
|
+ Fix 'getent passwd' to allocate new uids.
|
|
+ Fix 'getent group' to allocate new gids.
|
|
+ Remove check for sharename being a username in 'net conf addshare'.
|
|
+ Fix Coverity ID 848.
|
|
+ Remove unused ENUM_HND from 'net'.
|
|
+ Fix getform command asprintf return code in rpcclient.
|
|
+ Fix memleak in get_remote_printer_publishing_data().
|
|
+ Remove duplicate prototypes for generated rpc server functions.
|
|
+ Enable total anonymization in vfs_smb_traffic_analyzer.
|
|
+ Fix build with external dns_sd libraries.
|
|
+ Fix configure check "sub-second timestamps without struct timespec".
|
|
+ Use correct BSD evironment variable.
|
|
+ Don't try and delete a default ACL from a file.
|
|
+ BUG 5798: CFLAGS info lost in configure.
|
|
+ Fix Coverity IDs 740, 742, 744, 745, 876, 879, 880.
|
|
+ Fix remotely adding a share via the Windows MMC.
|
|
+ Avoid valgrind errors.
|
|
+ Fix 'net rpc join' for users with the SeMachineAccountPrivilege.
|
|
+ Fix resume handle for _samr_EnumDomainGroups.
|
|
+ Fix a buffer handling bug when adding lots of registry keys.
|
|
+ Fix a O(n^2) algorithm in regdb_fetch_keys().
|
|
+ Initialize rc to 0 in main in mount.cifs.
|
|
+ BUG 6069: Add a fstatvfs function for libsmbclient.
|
|
+ Eliminate compiler warnings.
|
|
+ Don't miss an absolute pathname as a kerberos keytab path.
|
|
+ BUG 6100: Implement _netr_LogonGetCapabilities() with
|
|
NT_STATUS_NOT_IMPLEMENTED.
|
|
+ Make Samba work with older ctdb versions.
|
|
+ Add S-1-22-X-Y sids to the local token.
|
|
+ Conditional install of the cifs.upcall man page.
|
|
+ Adjust regex to match variable names including underscores.
|
|
+ BUG 4370: Clean-up entries in /etc/mtab after unmount.
|
|
+ Add fakemount (-f) and nomtab (-n) flags to mount.cifs.
|
|
+ Fix a crash during name resolution.
|
|
+ Fix "assignment discards qualifiers from pointer target type" warnings.
|
|
+ Fix SMB_VFS_RECVFILE/SENDFILE macros.
|
|
+ Change "ldap ssl:ads" parameter to "ldap ssl ads".
|
|
+ Add manpages for vfs_acl_xattr and vfs_acl_tdb.
|
|
+ Fix double free caused by incorrect talloc_steal usage.
|
|
+ Build ldbrename.
|
|
+ Make nmbd check all available interfaces for WINS before failing.
|
|
+ Fix compilation of vfs_default on systems that do not support utimes().
|
|
+ BUG 5920: Fix the calculation of the memcpy length.
|
|
+ BUG 6098: Fix ads_find_dc() in setups with "security = domain".
|
|
+ Make libsmbclient work with DFS.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 23 17:29:02 CET 2009 - hhetter@suse.de
|
|
|
|
- Define init_samba_module in all samba-vscan modules; (bnc#469218).
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Feb 21 15:30:41 CET 2009 - lmuelle@suse.de
|
|
|
|
- Add GPLv3 header to all init scripts; (bnc#459766).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 10 07:17:07 CET 2009 - boyang@suse.de
|
|
|
|
- Backport of the clean event context after fork and krb5 refresh chain
|
|
fixes; (bnc#415026).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 9 15:53:40 CET 2009 - jmcdonough@suse.de
|
|
|
|
- Revert accidental partial strict allocate upstream commit
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Feb 8 12:59:50 CET 2009 - jmcdonough@suse.de
|
|
|
|
- Update to 3.2.8.
|
|
+ Fix and streamline join and DC detection
|
|
+ BUG 4308: Excel save operation corrupts file ACLs.
|
|
+ BUG 5933: Fix incrementing/decrementing num_validated_vuids.
|
|
+ BUG 5953: Fix smbclient crashes.
|
|
+ BUG 5953: Make cli_send_smb_direct_writeX use writev.
|
|
+ BUG 5965: Fix creation of the first share using SWAT.
|
|
+ BUG 5969: Optimize smbclient put command.
|
|
+ BUG 5979: Fix level 2 oplocks.
|
|
+ BUG 5980: Fix race condition when granting level2 oplocks
|
|
+ BUG 5986: Fix renaming of streams.
|
|
+ BUG 5990: Strict allocate should be checked before ftruncate.
|
|
+ BUG 6000: Avoid bashism in perfcount.init.
|
|
+ BUG 6009: Setting "min receivefile size = 1" breaks writes.
|
|
+ BUG 6014: mget shouldn't segfault without arguments.
|
|
+ BUG 6016: Alternate Data Streams / Extended Attributes seem to conflict.
|
|
+ BUG 6017: Fix magic scripts.
|
|
+ BUG 6021: smbclient du command does not recuse properly.
|
|
+ BUG 6030: Add missing <th> header in Status page.
|
|
+ BUG 6035: Fix possible race between fcntl F_SETLKW and alarm delivery.
|
|
+ BUG 6040: Calling Samba print server with an aliased DNS-name fails.
|
|
+ BUG 6058: Use 'make distclean' instead of 'make clean' in build_docs.
|
|
+ Fix "allow trusted domain" so it disables trusted domains.
|
|
+ Fix error code when smbclient puts a file over an existing directory.
|
|
+ Don't return 0 on error in smbcacls - bad for scripts.
|
|
+ Determine case sensitivity based on file system attributes.
|
|
+ Add vfs_fileid manpage.
|
|
+ Adjust regex to match variable names including underscores.
|
|
+ Fix stream marshalling to return the correct streaminfo status.
|
|
+ Fix a delete on close divergence from Windows.
|
|
+ Allow renames of streams via NTRENAME and fix stream error codes.
|
|
+ Fix a segfault if ? is there but the options are NULL.
|
|
+ Avoid flooding of syslog with failing pam_putenv messages.
|
|
+ Document default of the printing config variable.
|
|
+ Change default value for "ldap ssl" to "start tls".
|
|
+ Check if Unix account exists before asking for the password in smbpasswd.
|
|
+ Add manpage for vfs_shadow_copy2.
|
|
+ Clean event context after child is forked.
|
|
+ Refresh sequence number as soon as possible.
|
|
+ Don't set child->requests to NULL in parent after fork.
|
|
+ Clean event context after fork and fix krb5 refresh chain.
|
|
+ Fix null pointer refrence in event context.
|
|
+ Don't send message to any other child in child process.
|
|
+ Fix bug in get_dc_name_via_netlogon(), null pointer refrence.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Feb 3 22:08:03 CET 2009 - jmcdonough@suse.de
|
|
|
|
- Backport 3.2.8 fixes.
|
|
+ cups leaks and crashes
|
|
+ various winbind child handling fixes
|
|
+ join fixes
|
|
+ ACL fixes for Excel
|
|
+ allow usrmgr with non-root
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 2 22:31:32 CET 2009 - lmuelle@suse.de
|
|
|
|
- Replace cifs.upcall Makefile patches by the upstream version.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 28 22:17:33 CET 2009 - lmuelle@suse.de
|
|
|
|
- Only add ccache to BuildRequires if it is used.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jan 27 22:41:19 CET 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.3.0.
|
|
+ The passdb tdbsam version has been raised.
|
|
+ Splitting of library directory into library directory and separate modules
|
|
directory.
|
|
+ The default value of "ldap ssl" has been changed to "start tls".
|
|
+ Extended Cluster support.
|
|
+ New experimental VFS modules "vfs_acl_xattr" and "vfs_acl_tdb" to store
|
|
NTFS ACLs on Samba file servers.
|
|
+ Simplified idmap configuration.
|
|
+ New idmap backends "adex" and "hash".
|
|
+ Added new parameter "winbind reconnect delay".
|
|
+ Added support for user and group aliasing.
|
|
+ Added support for multiple domains to idmap_ad.
|
|
+ The destination "all" of smbcontrol does now affect all running daemons
|
|
including nmbd and winbindd.
|
|
+ New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands.
|
|
+ The 'net' utility can now use kerberos for joining and authentication.
|
|
+ The 'wbinfo' utility can now add, modify and remove identity mapping
|
|
entries.
|
|
+ NetApi library implements various new calls for User- and Group Account
|
|
Management.
|
|
+ libsmbclient does now determine case sensitivity based on file system
|
|
attributes.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jan 23 16:32:16 CET 2009 - anschneider@suse.de
|
|
|
|
- Replace all chkconfig calls with rc_active calls to improve performance
|
|
during boot.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jan 23 14:01:29 CET 2009 - anschneider@suse.de
|
|
|
|
- Add SuSEfirewall2 service config file to allow samba browsing on
|
|
post-10.2 systems; (bnc#460902).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jan 20 20:57:38 CET 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.0.34.
|
|
+ Fix update of machine account passwords.
|
|
+ Fix SMB signing issue on Windows Vista with MS Hotfix KB955302.
|
|
+ Fix Winbind crashes.
|
|
+ Correctly detect if the current dc is the closest one.
|
|
+ Add saf_join_store() function to memorize the dc used at join time. This
|
|
avoids problems caused by replication delays shortly after domain joins.
|
|
+ Fix write list in setups using "security = share".
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 7 12:34:56 CET 2009 - olh@suse.de
|
|
|
|
- Obsolete old -XXbit packages; (bnc#437293).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jan 5 13:27:03 CET 2009 - lmuelle@suse.de
|
|
|
|
- Update to 3.2.7.
|
|
+ Samba 3.2.0 to 3.2.6 can potentially give root filesystem access
|
|
to older versions of smbclient; CVE-2009-0022; (bnc#460764).
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Dec 27 13:27:24 CET 2008 - jmcdonough@suse.de
|
|
|
|
- Samba 3.2.0 to 3.2.6 can potentially give root filesystem access
|
|
to older versions of smbclient; CVE-2009-0022; (bnc#460764).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Dec 25 07:59:49 CET 2008 - boyang@suse.de
|
|
|
|
- Fix nmbstatus dipslay when workgroup parameter is given; (bnc#459785).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Dec 25 07:36:24 CET 2008 - boyang@suse.de
|
|
|
|
- Fix Mounting failure when there is white spaces in service; (bnc#460793).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Dec 15 16:56:26 CET 2008 - anschneider@suse.de
|
|
|
|
- Update to 3.3.0rc2.
|
|
+ Splitting of library directory into library directory and separate
|
|
modules directory.
|
|
+ Extended Cluster support.
|
|
+ Simplified idmap configuration.
|
|
+ New idmap backends "adex" and "hash".
|
|
+ Added new parameter "winbind reconnect delay".
|
|
+ Added support for user and group aliasing.
|
|
+ Added support for multiple domains to idmap_ad.
|
|
+ The destination "all" of smbcontrol does now affect all running
|
|
daemons including nmbd and winbindd.
|
|
+ New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands.
|
|
+ The 'net' utility can now use kerberos for joining and authentication.
|
|
+ The 'wbinfo' utility can now add, modify and remove identity mapping entries.
|
|
+ NetApi library implements various new calls for User- and Group
|
|
Account Management.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Dec 12 17:49:48 CET 2008 - lmuelle@suse.de
|
|
|
|
- Fix all remaining conditional macro calls; (bnc#456469).
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Dec 12 15:50:33 CET 2008 - anschneider@suse.de
|
|
|
|
- Add IPv6 support for mount.cifs.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 10 23:14:12 CET 2008 - lmuelle@suse.de
|
|
|
|
- Update to 3.2.6.
|
|
+ Fix potential segfault in vfs_tsmsm.
|
|
+ Don't list the domain twice when expanding internal aliases.
|
|
+ Fix the output of "getent group" when "winbind use default domain = yes"
|
|
with "security = ads".
|
|
+ Add domain prefix to username in lookup_groupmem().
|
|
+ Prevent negative GM/ cache entries due to broken connections.
|
|
+ Fix crash in sync_eventlog_params().
|
|
+ Fix timeouts when calling 'getgrent'.
|
|
+ BUG 1254: Fix "write list" in setups using "security = share".
|
|
+ BUG 5080: Fix access to cups-printers with cups 1.3.4.
|
|
+ BUG 5737: Fix Winbind crash in an unusual failure mode.
|
|
+ BUG 5783: Fix FindFirst where search pattern equals the mangled filename.
|
|
+ BUG 5790: Fix returning of STATUS_OBJECT_NAME_NOT_FOUND on set file
|
|
disposition.
|
|
+ BUG 5797: Fix moving of readonly files.
|
|
+ BUG 5814: Fix Winbind crash bug while doing "rescan_trusted_domain".
|
|
+ BUG 5818: Sort ACEs in smbcacl output properly and honor inheritance.
|
|
+ BUG 5825: Fix account locking with LDAP backend.
|
|
+ BUG 5826: Fix truncated filenames when accessing old servers.
|
|
+ BUG 5889: Fix "delete veto files = no".
|
|
+ BUG 5891: Fix smbd crash when viewing the eventlog exported by "eventlog
|
|
list".
|
|
+ BUG 5900: Fix vfs_readonly.
|
|
+ BUG 5903: Fix vfs_streams_xattr breaking contents of files.
|
|
+ BUG 5904: Fix libnss_wins causing SIGABRT while servicing getaddrinfo()
|
|
request.
|
|
+ BUG 5914: Fix build failure: redefinition of struct name_list.
|
|
+ BUG 5937: Fix filenames with "*" char hiding other files.
|
|
+ BUG 5953: Fix smbclient crashes.
|
|
+ Fix rename_open_files.
|
|
+ Restructure VFS SMB traffic analyzer VFS module.
|
|
+ Correctly fix smbclient to terminate on eof from server.
|
|
+ Unify access checks for lsa server functions.
|
|
+ Remove the requirement for ldap call made as root.
|
|
+ Cope with MAXIMUM_ALLOWED_ACCESS requests when opening handles.
|
|
+ Fix net rpc vampire, based on an *amazing* piece of debugging work by
|
|
"Cooper S. Blake" <the_analogkid@yahoo.com>.
|
|
+ Fix Coverity IDs 456, 574, 592, 606 and 607.
|
|
+ Fix net rpc vampire.
|
|
+ Use the same prerequisite for DDNS update as Windows XP.
|
|
+ Make "lwinet ads dns register" honor the "interfaces" parameter.
|
|
+ Fix extended DN parse error when AD object does not have a SID.
|
|
+ BUG 5888: Fix PNP_GetHwProfInfo().
|
|
+ BUG 5957: Do not abort rename process on valid rename script.
|
|
+ BUG 5898: Fix 'net rpc shutdown'.
|
|
+ Fix duplicate installation of cifs.upcall.
|
|
+ Fix _srvsvc_NetShareAdd segfault.
|
|
+ Ensure consistency when reporting password complexity.
|
|
+ Fix _lsa_GetUserName.
|
|
+ Fix access check in _samr_QuerySecurity().
|
|
+ _samr_DeleteUser needs to wipe out the user_handle on success.
|
|
+ NetGroupEnum_r needs to handle servers with no groups.
|
|
+ Search for gpfs functions in both libgpfs_gpl.so an libgpfs.so.
|
|
+ BUG 5908: Fix internal change notify on shared directory.
|
|
+ BUG 5135 and 5446: Prevent calling POSIX ACL vfs methods on zfs share.
|
|
+ BUG 5929: Fix building of vfs_prealloc with option --with-cluster-support
|
|
and GPFS.
|
|
+ Add new VFS module to analyze SMB traffic
|
|
+ BUG 5928: Fix 'testparm --version'.
|
|
+ Have uppercase_string return success on NULL pointer in mount.cifs.
|
|
+ Make mount.cifs return codes match the return codes for /bin/mount.
|
|
+ Use lock/unlock_mtab scheme from util-linux-ng mount prog in mount.cifs.
|
|
+ BUG 5778: Check if strlcpy and strlcat are already defined.
|
|
+ BUG 5840: Fix segfault in "rpcclient lsaaddacctrights".
|
|
+ BUG 5860: Fix nasty error message for overlong strings in safe_strcpy.
|
|
+ Fix a potential NULL deref in found by the IBM Checker.
|
|
+ Fix an uninitialized variable found by the IBM Checker.
|
|
+ Fix an unlikely memleak found by the IBM Checker.
|
|
+ Fix some missing error handlings.
|
|
+ Add workaround for domain joins using a netbios name which is different
|
|
from the hostname.
|
|
+ Fix crash bug when freeing a non-malloc'ed buffer if the client sends a
|
|
non-encrypted packet with the crypto state set.
|
|
+ Fix trans2findfirst for the large directory optimization.
|
|
+ Fix checking for presence of cups-devel and correct cups-devel test for
|
|
HAVE_IPRINT.
|
|
+ BUG 5805: Don't close stdout when calling setup_logging multiple times.
|
|
+ Fix setting of trust password using 'net rpc trustdom add'.
|
|
+ Fix several issues in vfs_streams_xattr and vfs_stream_depot.
|
|
+ Return an error instead of crashing when no realm is given (trigerred by
|
|
"net ads info -S 127.8.7.6" (where 127.8.7.6 doesn't exist) and
|
|
"disable netbios = yes").
|
|
+ Fix the new vfs_smb_traffic_analyzer build for static links.
|
|
+ BUG 5901: Fix default for streams_depot location.
|
|
+ Fix several build warnings.
|
|
+ Delete the krb5 ccname variable from the PAM environment if set.
|
|
+ Fix circular dependency error with autoconf 2.6.3.
|
|
+ Add @CIFSUPCALL_PROGS@ to "all" target so cifs.upcall gets built at
|
|
compile time rather than install time.
|
|
+ BUG 5906: Fix Winbind crash when calling 'getent group'.
|
|
+ Fix logging to syslog.
|
|
+ Allow SYSLOG_FACILITY to be modified with a new configure option called
|
|
--with-syslog-facility.
|
|
+ BUG 5909: Fix MS-DFS on Vista clients.
|
|
+ BUG 5944: Fix starting of nmbd with "socket address" set to "".
|
|
+ Fix segfault on startup with trusted domains.
|
|
+ Re-add "winbind:ignore domains" parameter.
|
|
+ Avoid freeing fsp twice when opening new_file fails (Debian #431696).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 10 19:24:29 CET 2008 - anschneider@suse.de
|
|
|
|
- Fix the conditional macro to start smbfs by default; (bnc#456469).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 3 16:07:17 CET 2008 - anschneider@suse.de
|
|
|
|
- Readd libsmbclient to baselibs.conf for pre 11.0 distributions.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 3 12:17:40 CET 2008 - anschneider@suse.de
|
|
|
|
- Use %__install macro to install files with the right permissions
|
|
instead of cp.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Dec 1 10:37:03 CET 2008 - anschneider@suse.de
|
|
|
|
- Update to 3.3.0rc1.
|
|
+ Splitting of library directory into library directory and separate
|
|
modules directory.
|
|
+ Extended Cluster support.
|
|
+ Simplified idmap configuration.
|
|
+ New idmap backends "adex" and "hash".
|
|
+ Added new parameter "winbind reconnect delay".
|
|
+ Added support for user and group aliasing.
|
|
+ The destination "all" of smbcontrol does now affect all running
|
|
daemons including nmbd and winbindd.
|
|
+ New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands.
|
|
+ The 'net' utility can now use kerberos for joining and authentication.
|
|
+ The 'wbinfo' utility can now add, modify and remove identity mapping
|
|
entries.
|
|
+ NetApi library implements various new calls for User- and Group
|
|
Account Management.
|
|
|
|
- Added German translation for pam_winbind.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Dec 1 09:12:45 CET 2008 - boyang@suse.de
|
|
|
|
- Remove patch for bnc#336854, which doesn't exist in 3.2.x or higher.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Dec 1 00:32:20 CET 2008 - lmuelle@suse.de
|
|
|
|
- Use %{NET_CFGDIR} define instead of a fixed path to the network conf.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Nov 29 13:51:57 CET 2008 - lmuelle@suse.de
|
|
|
|
- Update to 3.2.5.
|
|
+ Samba 3.0.29 to 3.2.4 can potentially leak arbitrary memory contents to
|
|
malicious clients; CVE-2008-4314; (bnc#446971).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 27 14:15:19 CET 2008 - ro@suse.de
|
|
|
|
- Update baselibs.conf.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 27 12:06:30 CET 2008 - anschneider@suse.de
|
|
|
|
- Fix circular dependency error with autoconf 2.6.3.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 27 11:48:28 CET 2008 - anschneider@suse.de
|
|
|
|
- Fix the dhcp hook script and support CODE11; (bnc#442335).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 27 11:39:36 CET 2008 - anschneider@suse.de
|
|
|
|
- Fix perl v5.10 warnings in nmbstatus; (bnc#448225).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Nov 26 11:19:52 CET 2008 - sjayaraman@suse.de
|
|
|
|
- Include the missing spec file change mentioned the previous commit.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Nov 25 12:31:24 CET 2008 - sjayaraman@suse.de
|
|
|
|
- Make cifs-mount depend on keyutils, keyutils-libs packages as they
|
|
are required to support dfs and kerberos; (bnc#432494).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 20 15:45:11 CET 2008 - lmuelle@suse.de
|
|
|
|
- Fix the offset checks in the trans routines; CVE-2008-4314; (bnc#446971).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 20 11:54:58 CET 2008 - hhetter@suse.de
|
|
|
|
- Change the runlevel description for winbindd to use
|
|
"Microsoft Windows" instead of "NT"; (bnc#446154).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Nov 11 05:50:49 CET 2008 - boyang@suse.de
|
|
|
|
- Directory/Filenames get truncated when 3.2.0 client acesses old server;
|
|
(bnc#432471).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 6 11:23:59 CET 2008 - anschneider@suse.de
|
|
|
|
- Add SuSEfirewall2 services config file to open Netbios and Samba ports on
|
|
post-10.2 systems; (bnc#247344).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Oct 29 11:19:08 CET 2008 - anschneider@suse.de
|
|
|
|
- Remove unrecognized configure options.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Oct 24 13:18:53 CEST 2008 - anschneider@suse.de
|
|
|
|
- Fix the pam_winbind build.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Oct 21 16:32:56 CEST 2008 - anschneider@suse.de
|
|
|
|
- Delete the krb5 ccname variable from the PAM environment if set.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 16 14:49:16 CEST 2008 - anschneider@suse.de
|
|
|
|
- Move the nss_info modules to the samba-winbind package.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 16 13:40:25 CEST 2008 - anschneider@suse.de
|
|
|
|
- Activate the idmap backends "adex" and "hash".
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 16 11:40:17 CEST 2008 - anschneider@suse.de
|
|
|
|
- Add version branding for CODE 11.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Oct 15 17:24:25 CEST 2008 - anschneider@suse.de
|
|
|
|
- Restart smbfs even with the traditional network setup; (bnc#425058).
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Oct 3 16:48:31 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Only call the stop_on_removal, restart_on_update, or insserv_cleanup macro
|
|
if available.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Oct 3 15:12:23 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Only call the fillup_and_insserv or fillup_only macro if available.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Oct 3 12:42:13 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Use package names instead of macros for cp, mkdir, mv, rm, and grep or
|
|
instead of the full path to the binary for ln, find and xargs.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Oct 3 01:28:07 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Introduce NET_CFGDIR to fit the needs for a differing location of the
|
|
network configuration per vendor.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Oct 3 00:59:49 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Use path macros for cp, mkdir, mv, rm, and grep.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 2 21:30:06 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Only use SUSE rpm macros and SuSEconfig.permissions if available.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 2 18:03:21 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Update to 3.3.0pre2.
|
|
+ BUG 5729: Explicitly allow "-valid".
|
|
+ BUG 5737: Fix winbindd crash in an unusual failure mode.
|
|
+ BUG 5751: Fix showing of ACLs on DFS in (lib)smbclient.
|
|
+ BUG 5762: Fix opening of mangled directory name (resulted 'is a stream
|
|
name').
|
|
+ BUG 5783: Fix FindFirst where search pattern == mangled filename.
|
|
+ BUG 5790: Fix returning of STATUS_OBJECT_NAME_NOT_FOUND on set file
|
|
disposition.
|
|
+ BUG 5797: Fix moving of readonly files.
|
|
+ Fix crashes when looking up a non-existant uid.
|
|
+ Fix getting/setting of NT ACLs on a file.
|
|
+ Fix the wcache_invalidate_samlogon calls.
|
|
+ Clarify usage of "force create mode".
|
|
+ Get smbd to look (read-only) into the winbindd cache for uid/gid <--> sid
|
|
mappings.
|
|
+ Write times code update.
|
|
+ Add experimental version of VFS module acl_xattr.
|
|
+ Fix rename_open_files.
|
|
+ Make SMB traffic analyzer VFS module more efficient.
|
|
+ Fix segfault when calling nss_get_info() with a NULL ads structure.
|
|
+ Add support for name aliasing in Winbind.
|
|
+ Add the idmap/nss-info provider from Likewise Open.
|
|
+ Allow an admin to define the "uid" attribute for a RFC2307 user object in
|
|
AD to be the username alias.
|
|
+ Add new idmap backend "adex" to support RFC2307 enabled AD forests.
|
|
+ Add new idmap backend "hash".
|
|
+ Fix build warnings.
|
|
+ Cleanup of DC enumeration in get_dcs().
|
|
+ BUG 5710: Fix changing of machine account passwords.
|
|
+ BUG 5784: Fix pam_winbind build issue on Solaris.
|
|
+ Fix invalid sid copy (hit when enumerating sibling domains) in Winbind.
|
|
+ Fix double installation of cifs.upcall.
|
|
+ Add change-user-password command to wbinfo.
|
|
+ Fix segfault in _srvsvc_NetShareAdd.
|
|
+ BUG 5736: Fix Winbind crash bug with trusted domains.
|
|
+ Correct the netsamlogon_clear_cached_user function.
|
|
+ Add new VFS module to analyze SMB traffic to record write and read
|
|
operations on the Samba server.
|
|
+ Fix build warnings in cifs.upcall.
|
|
+ BUG 5707: Do proper error handling if the socket is closed.
|
|
+ BUG 5778: Don't define 'strlcat' and 'strlcpy' if it's already defined.
|
|
+ Fix Coverity IDs 587 and 589.
|
|
+ Increase the default positive idmap cache time to a week.
|
|
+ Fix calculation of useable_space for trans2 and nttrans replies.
|
|
+ Add mapping of generic bits when setting an NFSv4 ACL.
|
|
+ Some write time fixes.
|
|
+ Add new parameter "cups connection timeout".
|
|
+ Fix enumeration of nested group memberships in Winbind. This affected
|
|
only setups using "security = ads".
|
|
+ Fix cut and paste error in quota code.
|
|
+ Fix display of POSIX ACLs.
|
|
+ Fix permissions of group_mapping.ldb (CVE-2008-3789).
|
|
+ Avoid a race condition in glibc between AIO and setresuid().
|
|
+ Add missing become root for AIO operations.
|
|
+ Fix an errno handling bug that could lead to an infinite loop.
|
|
+ Fix logic of tsmsm_sendfile().
|
|
+ Fix handling of arbitrary new PAC types.
|
|
+ Fix segfault on startup with trusted domains.
|
|
+ Fix segfault on the CTDB destructor code.
|
|
+ Re-add "winbind:ignore domains".
|
|
+ BUG 5609: Remove configure option "--with-libdir" and add
|
|
"--with-modulesdir".
|
|
+ Extend "net rpc vampire keytab" to support differential replication and
|
|
storing of kerberos keys.
|
|
+ Rework internal logic of registry tdb code.
|
|
+ Freeze autogenerated prototype headers (good bye "make proto").
|
|
+ Add new "winbind reconnect delay" parameter.
|
|
+ Make the change to smbcontrol for "all" to mean broadcast, and "smbd" to
|
|
mean the main smb daemon.
|
|
+ Allow an admin to define the "uid" attribute for a RFC2307 user object in
|
|
AD to be the username alias.
|
|
+ Add "net rpc vampire keytab" and "net rpc vampire ldif".
|
|
+ Rework of the Winbind idmap backend.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Oct 1 22:30:49 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Define PAM_AUTHTOK_RECOVERY_ERR when not available on older Linux products.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 29 16:09:11 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Adopt samba-vscan to build after the change to the bool type define.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 22 15:13:40 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Build cifs.upcall for CentOS 5, Fedora 8 and RHEL 5 and newer too.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Sep 20 14:53:45 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Call mkinitrd_setup during %post and %postun for post-9.2 systems only.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Sep 18 14:17:24 CEST 2008 - anschneider@suse.de
|
|
|
|
- Create a link to the html manpages so that they can be accesses in swat;
|
|
(bnc#426182).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Sep 9 17:46:28 CEST 2008 - jmcdonough@suse.de
|
|
|
|
- "Password last set" timestamp update from admin pw change; (bnc#420407).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Sep 3 11:09:34 CEST 2008 - hare@suse.de
|
|
|
|
- Call mkinitrd_setup during %post and %postun for package cifs-mount;
|
|
(bnc#413709).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 27 23:29:09 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Update to 3.3.0pre1.
|
|
+ Splitting of library directory into library directory and separate modules
|
|
directory.
|
|
+ Extended Cluster support.
|
|
+ Simplyfied idmap configuration.
|
|
+ Added new parameter "winbind reconnect delay".
|
|
+ The destination "all" of smbcontrol does now affect all running daemons
|
|
including nmbd and winbindd.
|
|
+ New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Aug 19 14:55:16 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Update to 3.2.2.
|
|
+ BUG 5592: Fix creation and installation of shared libraries.
|
|
+ Fix replacement of random seed generator.
|
|
+ Fix a race condition in idmap_tdb2_allocate_id().
|
|
+ Fix unix_convert() for "*" after changing map_nt_error_from_unix().
|
|
+ Make sure to always set errno on error path in OpenDir.
|
|
+ BUG 5675: Fix smbspool program assuming Kerberos authentication by
|
|
mistake.
|
|
+ BUG 5686: Fix segfaults in libsmbclient.
|
|
+ BUG 5692: Fix coredump in full_audit.so.
|
|
+ BUG 5696: Fix "force group" in setups using Winbind.
|
|
+ Rename cifs.spnego to cifs.upcall.
|
|
+ Fix segfault in cifs.upcall when it is called without any arguments.
|
|
+ Fix coverity ID 594 (resource leak on error path).
|
|
+ Fix assigning of primary group memberships when authenticating via
|
|
Winbind.
|
|
+ BUG #5617: Fix freezing Windows Explorer on WinXP while browsing Samba
|
|
shares.
|
|
+ Include stdlib.h to get a prototype for free().
|
|
+ Solve an IBM XL C/C++ compiler error encountered in get_exit_code()
|
|
auth_errors array initialization in client/smbspool.c.
|
|
+ Use NGROUPS_MAX instead of 32 for the max group value in
|
|
rep_initgroups().
|
|
+ Add add c++ guard to netapi.
|
|
+ Fix compile warning in cifs.upcall.
|
|
+ Add "dns_resolver" key type to cifs.upcall.
|
|
+ BUG 5688: Fix orphaned LPQ processes if socket address is invalid.
|
|
+ BUG 5684: Fix removal of dead records in tdb files.
|
|
+ Fix coverity IDs 595, 596.
|
|
+ Fix smb_len calculation for chained requests.
|
|
+ Fix output of test status.
|
|
+ Fix smbclient connections to older servers.
|
|
+ Fix a fd leak when trying to regain contact to a domain controller in
|
|
Winbind.
|
|
+ Fix permissions on ctdb databases.
|
|
+ Fix passing back success when a function had in fact failed in two
|
|
places.
|
|
- Add --enable-static to the configure options to get the statical libraries
|
|
installed by the install Makefile target.
|
|
- Add --with-cifsupcall to build the cifs.upcall binary for post 10.2 systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Aug 14 14:53:28 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Set Required- and Should-Stop in the init info part of all init scripts.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Aug 14 03:15:25 CEST 2008 - jmcdonough@suse.de
|
|
|
|
- Fix libsmbclient to older servers; (bnc#402776).
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Aug 5 22:03:11 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Update to 3.2.1.
|
|
+ BUG 5594: Fix "make test" by adding and using a new testparm switch
|
|
"--skip-logic-checks".
|
|
+ Fix creation of libaddns.a, libsmbclient.a and libsharemodes.a.
|
|
+ Update the section about net conf in the net(8) manpage.
|
|
+ Improve processing of registry shares.
|
|
+ Fix listing of registry shares with testparm.
|
|
+ Fix several build issues.
|
|
+ BUG 5578: Fix error from strlcat.
|
|
+ BUG 5613: Fix flushing of smb.conf when creating a new share using SWAT.
|
|
+ Ensure consistent use of pdb_get_nt_passwd instead of
|
|
pdb_get_lanman_passwd.
|
|
+ Remove worrying warning message when safe_strcpy tries to copy a pseaudo
|
|
interface name that's too long.
|
|
+ Canonicalize servername in the printer functions to remove leading '\\'
|
|
characters.
|
|
+ Fix option processing in smbcacls - add POPT_COMMON_CONNECTION.
|
|
+ Fix bug creating files using DOS clients with mixed case files.
|
|
+ Fix uninitialized variable.
|
|
+ BUG 5616: Fix session keys also in rpccli_netr_LogonSamLogonEx wrapper.
|
|
+ BUG 5570: Fix bogus error message during AD domain join.
|
|
+ Fix trusted domain handling in Winbindd.
|
|
+ Fix build warning.
|
|
+ BUG 5202: Fix setting of ACEs for users/groups with write access in setups
|
|
with 'dos filemode = yes'.
|
|
+ Re-activate 'acl group control' parameter and make it only apply to owning
|
|
group.
|
|
+ Make ntimes function more like POSIX and allow NULL arg.
|
|
+ BUG 5512: Fix alignment problems on sparc.
|
|
+ BUG 5616: Fix share connections in setups with
|
|
"server signing = mandatory" or SMB signing set on the client side.
|
|
+ Fix a race condition in Winbind leading to a crash.
|
|
+ Fix a segfault in base64_encode_data_blob.
|
|
+ Fix some uninitialized variable references via ndr_print.
|
|
+ Fix error message if trying to join with a non-privileged user.
|
|
+ Fix setups using "include = registry" without [global] settings in the
|
|
registry.
|
|
+ Fix "net sam rights" on domain member servers.
|
|
+ Add documentation for the vfs streams modules.
|
|
+ Cleanup some duplicate code by passing the password to the wbinfo_auth*
|
|
functions.
|
|
+ Allow SID with 0 in subauthority to be converted properly.
|
|
+ Set sin[6]_family instead of ss_family in in[6]_addr_to_sockaddr_storage.
|
|
+ Fix realpath() check so that it doesn't generate a core() when it fails.
|
|
+ Fix overwriting of winbind logfiles.
|
|
+ Fix "vfs_full_audit.c: name table not in sync with vfs.h" panic.
|
|
+ Add broadcasting of the debug message to all winbindd children.
|
|
+ BUG 5635: Fix updating of printer queues.
|
|
+ Release still reachable memory if the smbclient context is freed.
|
|
+ Remove trailing withespace from wbinfo -m which breaks gdm auth.
|
|
+ BUG 5540: Fix "set primary group script" user option substitution.
|
|
+ Fix regression in Winbindd offline mode.
|
|
+ Allow authentication and memory credential refresh after password
|
|
change from gdm/xdm.
|
|
+ Allow %u parameters for print job username.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 29 09:59:36 CEST 2008 - anschneider@suse.de
|
|
|
|
- Fix a race condition in winbind leading to a crash; (bnc#406623).
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jul 28 17:00:42 CEST 2008 - anschneider@suse.de
|
|
|
|
- Use the configure option to enable debugging. This fixes the creation
|
|
of the debuginfo and debugsource package.
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Jul 27 08:53:56 CEST 2008 - anschneider@suse.de
|
|
|
|
- Fix emptying the printing queue; (bnc#411493).
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jul 25 09:22:13 CEST 2008 - anschneider@suse.de
|
|
|
|
- Remove trailing withespace from wbinfo -m which breaks gdm auth.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jul 24 15:13:15 CEST 2008 - anschneider@suse.de
|
|
|
|
- Add a recommendation to the samba and samba-winbind package to install
|
|
logrotate for openSUSE 11.0 and later.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jul 23 16:27:57 CEST 2008 - hare@suse.de
|
|
|
|
- Include mkinitrd scriptlets.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jul 21 08:37:01 CEST 2008 - boyang@suse.de
|
|
|
|
- Allow %u parameters for print job username - use advanced sub; (bnc#374389).
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jul 17 18:10:03 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Update to 3.0.31.
|
|
+ BUG 5504: Fix SIGTERM handling in Winbind children so that they do not
|
|
remove the unix domain socket used to field client requests.
|
|
+ Split the winbindd_passdb backend into a 'builtin' and a 'sam' backend.
|
|
+ When allocating client buffers for large read/write - make sure we take
|
|
account of the large read/write SMB headers as well as the buffer space.
|
|
+ Memory leak fixes in DC location code.
|
|
+ BUG 5533: Winbindd fails to cope correctly with a workgroup name
|
|
containing a '.'
|
|
+ BUG 5555: Don't return NT_STATUS_PASSWORD_MUST_CHANGE error on machine
|
|
account logon.
|
|
+ BUG 5551: smbd recursing back into winbindd from a winbindd call.
|
|
+ Fix usage message for "net rpc trustdom add".
|
|
+ Ensure consistent use of pdb_get_nt_passwd instead of pdb_get_lanman_passwd.
|
|
+ BUG 5578: Bad (non-Samba) use of strlcat gives error.
|
|
+ Canonicalize servername in the printer functions to remove leading '\\'
|
|
characters.
|
|
+ Documentation build fixes.
|
|
+ [DOCS] Fix use of smbconfoption in samba.entities.
|
|
+ Return NULL in sitename_fetch() if gencache_init() fails.
|
|
+ Use machine account and machine password from our domain when contacting
|
|
trusted domains.
|
|
+ SPNEGO SPN fix when contacting trusted domains.
|
|
+ BUG 5285: Fix libcap header mismatch.
|
|
+ Fix joining NT4 domains.
|
|
+ Don't let winbind getgroups crash when we have no gids in the token.
|
|
+ Fallback to level 24 pwd set while joining.
|
|
+ Fix joining w2k domains in "security = ads".
|
|
+ Fix pam_sm_chauthtok for storing modified cached creds.
|
|
+ BUG 5202: Re-activate "acl group control" parameter and make it only apply
|
|
to owning group.
|
|
+ BUG 5531: Fix conversion of ns units when converting from nttime to
|
|
timespec.
|
|
+ BUG 4974: Map NT_STATUS_OBJECT_PATH_NOT_FOUND to ENOENT in libsmbclient.
|
|
+ Fix a segfault in base64_encode_data_blob.
|
|
+ AIX build fixes.
|
|
+ ENODATA is not defined in freeBSD 4.6.2.
|
|
+ Don't reset password last set time just because the expired flag is set to
|
|
0.
|
|
+ Fix usage message for 'net idmap dump'.
|
|
+ Miscellaneous man page fixes.
|
|
+ BUG 4203: Samba3-HOWTO: Add improvements/fixes submitted by Pete Boyd.
|
|
+ Fixes to man pages.
|
|
+ Add tdb file documentation.
|
|
+ Ensure that winbindd trusted domain children keep primary domain online
|
|
status up to date.
|
|
+ Update cached creds during password change.
|
|
+ Ensure that Winbind always uses set_domain_offline() to mark a domain
|
|
offline.
|
|
+ Allow authentication and memory credential refresh after password change
|
|
from gdm/xdm.
|
|
+ Memory leak fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 8 08:14:38 CEST 2008 - boyang@suse.de
|
|
|
|
- Allow authentication and memory credential refresh after password change
|
|
from gdm/xdm; [bnc#395578].
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jul 4 16:22:17 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Add SMB_VFS_OP_RECVFILE to vfs_op_names to get it in sync with vfs.h.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jul 2 21:31:38 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Call the libsmbclient testsuite from the %check instead of the %build
|
|
script.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jul 2 10:44:21 CEST 2008 - boyang@suse.de
|
|
|
|
- Use machine account and machine password from our domain when
|
|
contacting trusted domains; [bnc#404667].
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 1 22:02:31 CEST 2008 - anschneider@suse.de
|
|
|
|
- Add a %check section move the test of the PAM modules to this section
|
|
and add more tests.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 1 14:51:04 CEST 2008 - anschneider@suse.de
|
|
|
|
- Add a recommendation to the samba and samba-winbind package to install
|
|
cron for openSUSE 11.0 and later.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 1 14:06:17 CEST 2008 - anschneider@suse.de
|
|
|
|
- Use a variable for syslog and add missing $remote_fs dependency for
|
|
Require-Start in the init information of the init scripts.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 1 11:34:57 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Update to 3.2.0.
|
|
+ Support for establishing interdomain trust relationships with Windows
|
|
2008.
|
|
+ All changes from the pre and rc releases as noted in here earlier.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 1 11:28:40 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Move header files from the devel sub package to lib*-devel.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jun 30 16:53:35 CEST 2008 - schwab@suse.de
|
|
|
|
- Work around bad use of autoconf interna.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jun 30 14:41:41 CEST 2008 - anschneider@suse.de
|
|
|
|
- Build Samba with debug symbols to get working debuginfo packages.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jun 26 21:08:35 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Add /etc/openldap to the file list and not only the schema directory.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jun 25 10:34:09 CEST 2008 - anschneider@suse.de
|
|
|
|
- Improve samba-winbindd and dhcpcd-hook-samba interface scripts for faster
|
|
booting; [fate#304967], [fate#304965].
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jun 18 15:21:38 CEST 2008 - anschneider@suse.de
|
|
|
|
- Move sysconfig variable DHCLIENT_MODIFY_SMB_CONF from Other to
|
|
'Network/DHCP/DHCP client'; [bnc#400467].
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jun 11 11:39:46 CEST 2008 - boyang@suse.de
|
|
|
|
- pam_winbind: Update cached creds during password change; [bnc#395578].
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jun 10 12:14:47 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Update to 3.2.0rc2.
|
|
+ BUG 5504: Fix behaviour of winbindd children receiving a SIGTERM.
|
|
+ BUG 5489: Split the winbindd_passdb backend into a 'builtin' and a 'sam'.
|
|
+ Make sure we take account of the large read/write SMB headers as well as
|
|
the buffer space when allocating cli buffers for large read/write.
|
|
+ Fix tag as a goto target we were not reinitializing the array counts.
|
|
+ BUG 5451: Fix for using the correct machine domain when looking up trust
|
|
credentials in our tdb.
|
|
+ Fix spnego SPN when contacting trusted domains.
|
|
+ BUG 5285: Fix libcap header mismatch.
|
|
+ Fix pam_sm_chauthtok for storing modified cached creds.
|
|
+ Fix joining issue in setups with "config backend = registry".
|
|
+ BUG 4544: Add new parameter 'ldap connection timeout' to prevent waiting
|
|
for TCP connection timeouts if no LDAP server is available.
|
|
+ BUG 5502: Fix security=server.
|
|
+ Fix coverity IDs 552, 553, 570, 571, 572.
|
|
+ Shrink ldbtools.
|
|
+ Fix reset of password last set time just because the expired flag is set
|
|
to 0.
|
|
+ Remove support for symbol versioning in shared libraries.
|
|
+ Fix autogen for autoconf 2.62.
|
|
+ BUG 5515: Fix empty input fields in SWAT.
|
|
+ BUG 5516: Fix saving of the config file in SWAT.
|
|
+ Fix winbindd trusted domain child not keeping primary domain online status
|
|
up to date.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jun 10 10:21:57 CEST 2008 - boyang@suse.de
|
|
|
|
- pam_winbind: fix pam_sm_chauthtok for storing modified cached creds;
|
|
[bnc#395578].
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jun 9 21:08:17 CEST 2008 - jmcdonough@suse.de
|
|
|
|
- Don't reset "password last set time" when unlocking an autolocked
|
|
account; [bnc#382111].
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jun 6 22:40:38 CEST 2008 - jmcdonough@suse.de
|
|
|
|
- Fix winbind sigterm handling and make init script send sighup to
|
|
all child winbind processes; [bnc#382027].
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jun 5 12:01:51 CEST 2008 - boyang@suse.de
|
|
|
|
- Fix bug with winbindd trusted domain child not keeping primary domain
|
|
online status up to date, merge to trunk from reversion 1801; [bnc#373560].
|
|
|
|
-------------------------------------------------------------------
|
|
Fri May 30 22:38:05 CEST 2008 - jmcdonough@suse.de
|
|
|
|
- Make winbind children reopen logs on SIGHUP; [bnc#382027].
|
|
|
|
-------------------------------------------------------------------
|
|
Fri May 30 19:18:17 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Set only CONFIGDIR and LIBDIR while make everything and install. No longer
|
|
set CONFIGFILE, DRIVERFILE, LMHOSTSFILE, and SMB_PASSWD_FILE; [bnc#395877].
|
|
|
|
-------------------------------------------------------------------
|
|
Wed May 28 17:49:51 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Update to 3.0.30.
|
|
+ Fix for CVE-2008-1105.
|
|
+ Remove man pages for ldb tools not included in Samba 3.0.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed May 28 16:15:43 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Fix vulnerability that allows for the execution of arbitrary code in smbd;
|
|
CVE-2008-1105; SA30228; [#391168].
|
|
|
|
-------------------------------------------------------------------
|
|
Tue May 27 11:07:45 CEST 2008 - coolo@suse.de
|
|
|
|
- Follow the rename of libtdb0 in baselibs.conf.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri May 23 17:34:31 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Rename sub package libtdb0 to libtdb1.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri May 23 16:58:44 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Update to 3.2.0rc1.
|
|
+ Move the posix pending close functionality down into the VFS layer.
|
|
+ Fix activation of registry globals in loadparm.
|
|
+ BUG 5452: Fix smbclient put.
|
|
+ BUG 5434: Ensure the loaded password doesn't contain the '\n' at the end.
|
|
+ BUG 5456: Fix missing echo if we ^C at the prompt.
|
|
+ BUG 5464: Fix timeout in winbindd.
|
|
+ Fix returning a directory value for a QPATHINFO on a msdfs link with a
|
|
non-dfs path.
|
|
+ Use more error-prone form of testing dm_destroy_session() return code.
|
|
+ BUG 5453: Fix winbindd and smbd crash when dsgetdcname is used.
|
|
+ BUG 5465: Fix joining with createcomputer=ou1/ou2/ou3.
|
|
+ BUG 5461: Fix issue with Citrix on Samba DCs with more than 900 groups.
|
|
+ Fix wins null pointer crash in nss_wins module.
|
|
+ Fix lm session key length in _netr_LogonSamLogon.
|
|
+ Add -f switch for DsGetDCName() example and be more verbose on output.
|
|
+ BUG 5429: Clarify log msgs re: failure to create
|
|
BUILTIN\{Administrators,Users}
|
|
+ Fix the DNS Update option of "net ads join".
|
|
+ BUG 5184: Add Missing HAVE_UPDWTMPX check before using updwtmpx().
|
|
+ Recognize and allow longer UA keys in winbindd_cache.
|
|
+ BUG 5436: Fix signing problem in the client with transs requests.
|
|
+ Fix a valgrind bug in the new [ug]id2sid cache.
|
|
+ Fix Coverity IDs 565 and 222.
|
|
+ Fix dfs_Enum: In form_junctions, correctly check for malloc failure.
|
|
+ Add support for symbol versioning in shared libraries (can be disabled with
|
|
--disable-sysmbol-versioning).
|
|
+ Add new function wbcLibraryDetails() to libwbclient.
|
|
+ Cleanup size_t return values in convert_string_allocate.
|
|
+ Fix Kerberos support for CUPS 1.3 in smbspool.
|
|
+ Fix printing with Vista.
|
|
+ Fix deletion of files when they're in use by other drivers.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri May 23 11:34:27 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Update to 3.0.29.
|
|
+ Fix a crash in tdb_wrap_log().
|
|
+ BUG 5267: Fix for nmbd termination problems when no interfaces found.
|
|
+ BUG 5326: OS/2 servers give strange "high word" replies for print jobs.
|
|
+ Remove MS-DFS check that required the target host be ourself.
|
|
+ BUG 5372: Fix high CPU usage of cupsd on large print servers by using more
|
|
efficient CUPS queries in smbd.
|
|
+ BUG 5095: Fix the enforcement of the "Manage Documents" access right.
|
|
+ BUG 5460: Fix MS-DFS referral problem in server code.
|
|
+ Fix bug in Winbind that caused the parent to ignore dead children.
|
|
+ BUG 4235: Improve compliance to the Squid helper protocol. Original patch
|
|
from Pawel Worach <pawel.worach@gmail.com>.
|
|
+ Prevent cycle in Wibind's list of children when reaping dead processes.
|
|
+ BUG 5419: Fix memory leak in ads_do_search_all_args() (merge from v3-2).
|
|
+ Fix winbind NETLOGON credential chain on a samba dc for w2k8 trusts.
|
|
+ Fix client connections and negotiation with Windows 2008 DCs in member
|
|
server code.
|
|
+ Add NT_STATUS_DOWNGRADE_DETECTED error code (merge from v3-2).
|
|
+ BUG 5430: Fix pam_winbind.so on Solaris (requires -lsocket).
|
|
+ Re-add samr getdispinfoindex parsing which got lost in the glue commit.
|
|
+ BUG 5461: Implement a very basic _samr_GetDisplayEnumerationIndex().
|
|
Corrects interop problem between Citrix PM and a Samba DC.
|
|
+ BUG 3840: Fix smbclient connecting to NetApp filers when using whitespace
|
|
in the user's password.
|
|
+ BUG 4901: Fix behavior of "ldap passwd sync = only".
|
|
+ BUG 5317: Fix debug output from domain_client_validate().
|
|
+ BUG 5338: Fix format string bug in rpcclient.
|
|
+ Ensure that "wbinfo -a trusted\\user%password" works correctly on a Samba
|
|
DC with trusts.
|
|
+ BUG 5336: Fix SetUsetrInfo(level 25) to update the pwdLastSet attribute.
|
|
+ BUG 5350: Fallback to anonymous sessions if not trust password could be
|
|
obtained on Samba DCs and member servers.
|
|
+ Fix signing problem in the client with trans requests.
|
|
+ Enable winbind child processes to do something with signals, in particular
|
|
closing and reopening logs on SIGHUP.
|
|
+ Add implementation of machine-authenticated connection to netlogon pipe
|
|
used when connecting to win2k and newer domain controllers.
|
|
+ Fix trusted users on a DC that uses the old idmap syntax.
|
|
+ Only have Winbind cache domain password policies that were successfully
|
|
retrieved.
|
|
+ Fix alignment bug when marshalling printer data replies.
|
|
+ Fix DeleteDriverDriverEx() checks to prevent removing in use files.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat May 17 23:58:01 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Expand baselibs.conf to match pre SUSE 11.0 products.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri May 16 16:10:14 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Remove obsoletes and provides <package>3 for all packages and systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri May 16 14:55:02 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Cleanup the use of the suse_version macro to achieve consistent defaults.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri May 16 13:28:53 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Set CODEPAGEDIR while make to fit the install location.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri May 16 13:20:11 CEST 2008 - hhetter@suse.de
|
|
|
|
- Prevent errors during the cache validation when ua keys reach a size larger
|
|
than 1024; [bnc#372558].
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
Thu May 15 00:16:13 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Package man page files independent of the used compression method (gz,lzma).
|
|
|
|
-------------------------------------------------------------------
|
|
Wed May 14 18:08:26 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Rewrite spec file to build packages for Fedora, Redhat, CentOS, and Mandriva
|
|
in the OBS too.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed May 14 17:27:52 CEST 2008 - anschneider@suse.de
|
|
|
|
- Add a script to restart smbfs if NetworkMangaer gets an IP address;
|
|
[bnc#373075].
|
|
|
|
-------------------------------------------------------------------
|
|
Tue May 13 17:30:00 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Remove all references to the obsoleted samba-pdb package.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri May 9 18:19:17 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Compose the BuildRequires in a more flexible way to fit the openSUSE build
|
|
service (OBS) requirements to support different operating system targets.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Apr 28 16:55:00 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Use _libdir macro instead of a local define of LIBDIR.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Apr 28 15:10:24 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Remove PreReq /sbin/ldconfig from the libtdb-devel package.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Apr 26 18:03:06 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Install the shared libraries with the same name as used as soname.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Apr 25 21:46:25 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Update to 3.2.0pre3.
|
|
+ Use of IDL generated parsing layer for several DCE/RPC interfaces.
|
|
+ Removal of the 1024 byte limit on pathnames and 256 byte limit on filename
|
|
components to honor the MAX_PATH setting from the host OS.
|
|
+ Introduction of a registry based configuration system.
|
|
+ Improved CIFS Unix Extensions support.
|
|
+ Experimental support for file serving clusters.
|
|
+ Support for IPv6 in the server, and client tools and libraries.
|
|
+ Support for storing alternate data streams in xattrs.
|
|
+ Encrypted SMB transport in client tools and libraries, and server.
|
|
+ Support for Vista clients authenticating via Kerberos.
|
|
+ Full support for Windows 2003 cross-forest, transitive trusts and one-way
|
|
domain trusts.
|
|
+ Support for userPrincipalName logons via pam_winbind and NSS lookups.
|
|
+ Expansion of nested domain groups via NSS calls.
|
|
+ Support for Active Directory LDAP Signing policy.
|
|
+ New LGPL Winbind client library (libwbclient.so).
|
|
+ New NetApi library for domain join related queries (libnetapi.so) and
|
|
example GTK+ Domain join gui.
|
|
+ New client and server support for remotely joining and unjoining Domains.
|
|
+ Support for joining into Windows 2008 domains.
|
|
+ New ldb backend for local group mapping tables
|
|
+ Raised level of security defaults for authentication operations.
|
|
+ Inclusion of an HTML version of the 3rd edition of "Using Samba" from
|
|
O'Reilly Publishing.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Apr 25 16:28:44 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Add libtalloc1, libtdb0, and libwbclient0 to baselibs.conf.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Apr 25 14:35:11 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Remove obsoletes and provides samba3 for post 10.3 systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Apr 25 14:09:56 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Let libsmbsharemodes-devel require libsmbsharemodes0 for post 10.3 systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Apr 23 13:30:26 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Rename the libsmbsharemodes package to libsmbsharemodes0 to follow the
|
|
shared library packaging policy for post 10.3 systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Apr 22 15:47:56 CEST 2008 - jmcdonough@suse.de
|
|
|
|
- Update kdc dns-only lookup patch to IPv6.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 17 12:18:03 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Move mount.cifs and umount.cifs from /sbin/ to /usr/sbin/ and create sym
|
|
links in /sbin/; [bnc#380693].
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 17 11:30:17 CEST 2008 - anschneider@suse.de
|
|
|
|
- Enable the build of vfs_cacheprime and vfs_readahead modules.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Apr 14 23:14:07 CEST 2008 - lmuelle@suse.de
|
|
|
|
- Update to 3.2.0pre2.
|
|
+ Add library for access to the registry configuration data.
|
|
+ BUG 5023: Separate NFS4 and POSIX ACL code in file access checks.
|
|
+ BUG 4308: Fix Excel save operation ACL bug.
|
|
+ BUG 4801: Correctly implement LSA lookup levels for LookupNames.
|
|
+ Add new option "debug class" to control printing of the debug class.
|
|
+ Enable building of the zfsacl and notify_fam vfs modules.
|
|
+ BUG 5083: Fix memleak in solarisacl module.
|
|
+ BUG 5063: Fix build on RHEL5.
|
|
+ New smb.conf parameter "config backend = registry" to enable registry only
|
|
configuration.
|
|
+ Added support for IPv6 client and server connections.
|
|
+ Remove unused utilities: smbctool and rpctorture.
|
|
+ Fix service principal detection to match Windows Vista
|
|
(based on work from Andreas Schneider).
|
|
+ Encrypted SMB transport in client tools and libraries, and server.
|
|
+ Added support for an SMB_CONF_PATH environment variable containing the
|
|
path to smb.conf.
|
|
+ Various fixes to ntlm_auth.
|
|
+ Correctly handle mixed-case hostnames in NTLMv2 authentication.
|
|
+ Add Winbind client library.
|
|
+ Enhance client and server remote registry access.
|
|
+ Add client calls for remotely joining a computer to a domain (including
|
|
calls from "net dom" command).
|
|
+ Add libnetapi.so library for joining domains including sample GTK+ app.
|
|
+ Fixes for Vista SP1 Kerberos authdata handling to only pickup the PAC.
|
|
+ Various fixes for DsGetDcName and conversion to IDL based structures.
|
|
+ Add ads_get_joinable_ous() to libads to get list of joinable ous.
|
|
+ Add get_logon_hours_from_pdb() to comply with new IDL based structures.
|
|
+ Migration of the entire client and server DCE/RPC code to IDL based
|
|
structures and autogenerated code for DSSETUP, LSA, SAMR and NETLOGON.
|
|
+ Started migration of client and server DCE/RPC code to IDL based
|
|
structures and autogenerated code for NTSSVC, SVCCTL and EVENTLOG.
|
|
+ Use IDL and autogenerated code for samlogoncache and Kerberos PAC
|
|
handling.
|
|
+ Add remote join/unjoin server-side implementation.
|
|
+ Import the Linux red-black tree implementation.
|
|
+ Support for storing xattrs in tdb files.
|
|
+ Support for storing alternate data streams in xattrs.
|
|
+ Implement a generic in-memory cache based on rb-trees.
|
|
+ Speed up the smbclient "get" command.
|
|
+ Add the aio_fork module.
|
|
+ Modified libsmbclient API for more easily maintaining ABI compatibility
|
|
while adding new features to libsmbclient.
|
|
+ Refactor Winbind internal parent-child interface tables to achieve better
|
|
unit testing support.
|
|
+ Networking fixes to the libreplace library.
|
|
+ Add support for DNS Service Discovery. Based on work from Rishi
|
|
Srivatsavai <rishisv@gmail.com>.
|
|
+ Don't restart winbind if a corrupted tdb is found during initialization.
|
|
+ Add share parameter "administrative share".
|
|
+ Improve error messages of net subcommands.
|
|
+ Add 'net rap file user'.
|
|
+ Change LDAP search filter to find machine accounts which are not located
|
|
in the user suffix.
|
|
+ Remove smbmount.
|
|
+ BUG 5073: Allow "delete readonly = yes" to correctly override deletion of
|
|
a file.
|
|
+ Register the smb service with mDNS if mDNS is supported.
|
|
+ Add smbclient support for basic mDNS browsing.
|
|
+ Fix padding between Winbind 32bit/64bit client library in the request/
|
|
response structures.
|
|
+ Added a syncops VFS module for file systems which do not guarantee
|
|
meta-data operations are immediately committed to disk in stable form.
|
|
+ Additional portability support for building shared libraries.
|
|
+ Get Samba version or capability information from Windows user space.
|
|
- Add new sub packages libnetapi0, libnetapi-devel, libtalloc1,
|
|
libtalloc-devel, libtdb0, libtdb-devel, libwbclient0, libwbclient-devel.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Apr 14 15:29:54 CEST 2008 - anschneider@suse.de
|
|
|
|
- Fix build with glibc 2.8.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de
|
|
|
|
- Added baselibs.conf file to build xxbit packages for multilib support for
|
|
post 10.3 systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Apr 10 09:40:52 CEST 2008 - boyang@suse.de
|
|
|
|
- Only cache password policy results that worked, otherwise we cannot login
|
|
until the cache expires even if a connection to a DC has been restored;
|
|
[bnc#373552].
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Apr 1 16:21:16 CEST 2008 - mkoenig@suse.de
|
|
|
|
- Remove dir /usr/share/omc/svcinfo.d as it is provided now by filesystem.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 11 14:45:11 CET 2008 - lmuelle@suse.de
|
|
|
|
- Prevent tdb lock call getting interrupted by sig alarm; [bnc#364200].
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 10 10:49:16 CET 2008 - lmuelle@suse.de
|
|
|
|
- Update to 3.0.28a.
|
|
+ Failure to join Windows 2008 domains.
|
|
+ Windows Vista (including SP1 RC) interop issues.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 4 13:46:45 CET 2008 - lmuelle@suse.de
|
|
|
|
- Rename the libsmbclient package to libsmbclient0 to follow the shared
|
|
library packaging policy and remove provides libsmbclient3 for post 10.3
|
|
systems.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Feb 22 17:14:27 CET 2008 - anschneider@suse.de
|
|
|
|
- Add variable to define if a share should be an administrative share;
|
|
[bnc#358841].
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 18 11:56:47 MST 2008 - jjaimon@novell.com
|
|
|
|
- Fix patch errors with dcerpc and idmap_global; [bnc#280452].
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Feb 7 16:05:10 CET 2008 - jmcd@suse.de
|
|
|
|
- Fix safe_strcpy error caused by duplicate domain name fix;
|
|
[bnc#356025].
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Feb 7 10:57:27 CET 2008 - anschneider@suse.de
|
|
|
|
- Fix two memleaks if num_validated_vuids exceeds its maximum;
|
|
[bnc#349581].
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jan 25 21:42:11 CET 2008 - jmcdonough@suse.de
|
|
|
|
- Fix ACL inheritance; [bnc#351570].
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 23 15:53:03 CET 2008 - anschneider@suse.de
|
|
|
|
- Fix a gcc 4.3 buffer overflow warning.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 9 04:30:56 CET 2008 - boyang@novell.com
|
|
|
|
- Remove duplicate domain name prepend when user SID is in winbindd cache;
|
|
[#336854].
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jan 8 10:26:31 CET 2008 - anschneider@suse.de
|
|
|
|
- Prevent winbindd from segfaulting due to corrupted cache tdb on flushing
|
|
caches; [#340332].
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Dec 20 16:32:32 CET 2007 - anschneider@suse.de
|
|
|
|
- Fix kerberos authentication with Vista; [#350032].
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Dec 12 13:59:11 CET 2007 - jmcdonough@suse.de
|
|
|
|
- Update to 3.0.28.
|
|
+ Fix send_mailslot overflow: CVE-2007-6015; [#343702].
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Nov 28 22:00:57 CET 2007 - jmcdonough@suse.de
|
|
|
|
- Additional cases and problems caused by fix for CVE-2007-4572;
|
|
[#337823].
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Nov 26 16:56:13 CET 2007 - jmcdonough@suse.de
|
|
|
|
- Fix send_mailslot overflow: CVE-2007-6015; [#343702].
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Nov 23 10:42:22 CET 2007 - hhetter@suse.de
|
|
|
|
- Added default printing system information to README.vendor;
|
|
[#113759].
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Nov 16 19:33:23 CET 2007 - lmuelle@suse.de
|
|
|
|
- Add missing define of AI_ADDRCONFIG for systems with older glibc versions.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 15 19:49:53 CET 2007 - lmuelle@suse.de
|
|
|
|
- Update to 3.0.27.
|
|
+ Stack buffer overflow in nmbd's logon request processing; CVE-2007-4572;
|
|
[#326261].
|
|
+ Remote code execution in Samba's WINS server daemon (nmbd) whe
|
|
processing name registration followed name query requests; CVE-2007-5398;
|
|
[#337823].
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 15 14:36:34 CET 2007 - anschneider@suse.de
|
|
|
|
- Change the spec file to get debug packages again.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Nov 14 15:24:48 CET 2007 - jmcdonough@suse.de
|
|
|
|
- Additional case for overflow: CVE-2007-4572; [#326261].
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Nov 8 18:07:07 CET 2007 - jmcdonough@suse.de
|
|
|
|
- Fix process_logon_packet overflow; CVE-2007-4572; [#326261].
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Nov 7 16:53:08 CET 2007 - jmcdonough@suse.de
|
|
|
|
- Fix reply_netbios_packet vulnerability; CVE-2007-5398; [#337823].
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Oct 30 14:34:56 CET 2007 - jmcdonough@suse.de
|
|
|
|
- Fix missing getpwent mutex unlock; [#329796], [#331754], [#336854].
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Oct 30 01:10:15 CET 2007 - jmcdonough@suse.de
|
|
|
|
- Fix the alignment of 32 and 64-bit winbind requests; [#331754].
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Oct 12 11:23:47 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Add dmapi-devel and xfsprogs-devel to the BuildRequires for post 10.0
|
|
systems; [#289599], fate [#302668].
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Oct 9 14:41:10 CEST 2007 - anschneider@suse.de
|
|
|
|
- Fix possible segfault in winbind which could be caused by uninitialized
|
|
variables; [#253862c223].
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Oct 5 17:36:28 CEST 2007 - jmcdonough@suse.de
|
|
|
|
- Use FQDN in KDC DNS lookup; [#295284].
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Oct 4 00:59:14 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Update to 3.2.0pre1.
|
|
+ Use of IDL generated parsing layer for several DCE/RPC interfaces.
|
|
+ Removal of the 1024 byte limit on pathnames and 256 byte limit on filename
|
|
components to honor the MAX_PATH setting from the host OS.
|
|
+ Introduction of a registry based configuration system.
|
|
+ Improved CIFS Unix Extensions support.
|
|
+ Experimental support for file serving clusters.
|
|
+ Full support for Windows 2003 cross-forest, transitive trusts and one-way
|
|
domain trusts
|
|
+ Support for userPrincipalName logons via pam_winbind and NSS lookups.
|
|
+ Support in pam_winbind for logging on using the userPrincipalName.
|
|
+ Expansion of nested domain groups via NSS calls.
|
|
+ Support for Active Directory LDAP Signing policy.
|
|
+ New ldb backend for local group mapping tables
|
|
+ Raised level of security defaults for authentication operations.
|
|
+ Inclusion of an HTLM version of the 3rd edition of "Using Samba" from
|
|
O'Reilly Publishing.
|
|
- Update samba-vscan to 0.3.6c-beta5.
|
|
- Disable dcerpc-funnel and idmap_ad-Global_Catalog as both currently don't
|
|
apply to Samba 3.2.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Oct 3 23:42:42 CEST 2007 - jmcdonough@suse.de
|
|
|
|
- Make nss_winbind thread-safe; [#293907, #329796].
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Oct 3 17:09:11 CEST 2007 - jmcdonough@suse.de
|
|
|
|
- Perform KDC lookup using DNS only; [#295284].
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Sep 27 00:35:42 CEST 2007 - anschneider@suse.de
|
|
|
|
- Handle smb child crash; [#294895].
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Sep 26 01:59:41 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Add a global lock inside nss_winbind as workaround; [#293907].
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Sep 20 22:46:09 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Merge ranged retrieval optimization to winbindd.
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Sep 19 20:55:15 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Update to 3.0.26a.
|
|
+ Memory leaks in Winbind's IDMap manager.
|
|
- Update to 3.0.26.
|
|
+ Incorrect primary group assignment for domain users using the rfc2307 or
|
|
sfu winbind nss info plugin; CVE-2007-4138; [#307623].
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Sep 7 15:32:13 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Fix two memleaks in idmap_cache.c; bso [#4917].
|
|
- Correct failure of libsmbclient against a version of Windows.
|
|
- Make read_sock return the total number of bytes read instead.
|
|
- Fix error in enum_dom_groups.
|
|
- Fix logic error in timeout of blocking lock processing.
|
|
- Add parameter "directory name cache size".
|
|
- Fix use of pwrite in tdb code.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Aug 30 15:08:06 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Also ensure to initialize ip_srv_site and count_site even if we are not on
|
|
site; [#230963#c124].
|
|
- Use an off site DC if we're not online and talking to the KDC of our domain;
|
|
[#230963#c106].
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Aug 22 17:40:45 CEST 2007 - anschneider@suse.de
|
|
|
|
- Fix a bug where samba writes the wrong default value of max_passwd_expire to
|
|
an LDAP server; [#298469].
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Aug 21 16:50:03 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Fix if statements where we still expected cli_connect() to return BOOL.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Aug 21 12:36:12 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Update to 3.0.25c.
|
|
+ File sharing with Widows 9x clients.
|
|
+ Winbind running out of file descriptors due to stalled child processes.
|
|
+ MS-DFS inter-operability issues.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 24 10:47:35 CEST 2007 - anschneider@suse.de
|
|
|
|
- Update the cache tdb validation patch which improves the backup handling
|
|
trying to end up with a useable cache tdb. This applies mostly to the
|
|
situation that disk space is short; [#256166c82].
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jul 19 10:15:23 CEST 2007 - anschneider@suse.de
|
|
|
|
- Update the cache tdb validation patch to support backup and corrupted
|
|
file handling; [#256166c77].
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jul 11 09:48:36 CEST 2007 - anschneider@suse.de
|
|
|
|
- Fix a bug that causes smbd to 'hang' intermittently; [#289599].
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 10 19:03:25 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Fix event based krb5 ticket refreshing in winbindd.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jul 6 19:31:25 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Limit the LDAP expression in lookup_usergroups_member() to security groups;
|
|
[253862c209].
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jul 6 10:20:29 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Don't reset the num_names counter in lookup_groupmem(); [253862c198].
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jul 4 16:37:34 CEST 2007 - anschneider@suse.de
|
|
|
|
- Make the days before the password expiry warning appears configurable in
|
|
pam_winbind.conf; [#287871].
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jul 3 13:32:31 CEST 2007 - schwab@suse.de
|
|
|
|
- Don't link shared libraries of vscan with -pie.
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jun 29 14:01:47 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Increase LOOKUP_SIDS_HUNK_SIZE for rpccli_lsa_lookup_sids_all() from 1000 to
|
|
20480; [#253862c175].
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jun 27 16:21:43 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Update to 3.0.25b.
|
|
+ Offline caching of files with Windows XP/Vista clients.
|
|
+ Improper cleanup of expired or invalid byte range locks on files.
|
|
+ Crashes is idmap_ldap and idmap_rid.
|
|
|
|
-------------------------------------------------------------------
|
|
Sat Jun 23 19:43:15 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Fix reply when no dfs share is configured.
|
|
- Fix the DFS code to work with Vista clients; [#286937].
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jun 22 16:57:31 CEST 2007 - lmuelle@suse.de
|
|
|
|
- Migrate old if-up/down scripts to new names on update; [#283706, #285187].
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jun 19 16:03:55 CEST 2007 - anschneider@suse.de
|
|
|
|
- Introduced prefix numbering of if-up/down scripts that they get executed in
|
|
the right order; [#283706, #285187].
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jun 19 13:40:39 CEST 2007 - anschneider@suse.de
|
|
|
|
|