diff --git a/build-source-timestamp b/build-source-timestamp index 50b13a8..30e771d 100644 --- a/build-source-timestamp +++ b/build-source-timestamp @@ -1,2 +1,2 @@ -2082 -Branch : 3.2.8 +2112 +Branch : trunk diff --git a/patches.tar.bz2 b/patches.tar.bz2 index 9de0cd3..bcff3ad 100644 --- a/patches.tar.bz2 +++ b/patches.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:a208da7cc84a5382d88af9ba6e12e31e36f24c904155005f2a7b073cdad98527 -size 60728 +oid sha256:3e5e977205e4202bef23156a74713d6f633ef5b1a12695c952d0cea5629c3af6 +size 58683 diff --git a/samba-3.2.8.tar.bz2 b/samba-3.2.8.tar.bz2 deleted file mode 100644 index 6b91973..0000000 --- a/samba-3.2.8.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:3a8e5c6bb029a693f043952bece5c71dfb1e80c7854cbd8414a541ba89da0ba9 -size 22050516 diff --git a/samba-3.3.4.tar.bz2 b/samba-3.3.4.tar.bz2 new file mode 100644 index 0000000..3d243ec --- /dev/null +++ b/samba-3.3.4.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:05e4962502ef4bcb68e3ecb655ff63a9b6ca00450ce40f38cd142a89bb9f3ba5 +size 23638398 diff --git a/samba-doc.changes b/samba-doc.changes index 3465fbf..0cb8e60 100644 --- a/samba-doc.changes +++ b/samba-doc.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Tue Mar 10 15:07:29 CET 2009 - lmuelle@suse.de + +- Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc. + ------------------------------------------------------------------- Thu Jan 24 11:50:09 CET 2008 - lmuelle@suse.de diff --git a/samba-doc.spec b/samba-doc.spec index 4594b1c..92fb2b0 100644 --- a/samba-doc.spec +++ b/samba-doc.spec @@ -1,5 +1,5 @@ # -# spec file for package samba-doc (Version 3.2.8) +# spec file for package samba-doc (Version 3.3.4) # # Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany. # @@ -20,13 +20,13 @@ Name: samba-doc BuildRequires: ccache cracklib-devel cups-devel e2fsprogs-devel gdbm-devel krb5-devel libacl-devel libiniparser-devel libnscd-devel openldap2-devel pam-devel popt-devel pwdutils python-devel readline-devel -%define samba_ver 3.2.8 +%define samba_ver 3.3.4 %define samba_ver_suffix %nil %define samba_ver_full %{samba_ver}%{samba_ver_suffix} License: GPL v3 or later Url: http://www.samba.org/ -Version: 3.2.8 -Release: 3 +Version: 3.3.4 +Release: 1 Summary: Samba Documentation Group: Documentation/Other AutoReqProv: on @@ -70,7 +70,7 @@ BuildRequires: ccache %else %define NET_CFGDIR network-scripts %endif -%define idmap_modules idmap_ad,idmap_ldap,idmap_rid +%define idmap_modules idmap_ad,idmap_adex,idmap_hash,idmap_ldap,idmap_rid %define vfs_modules vfs_cacheprime,vfs_readahead %if 0%{?ul_version} >= 1 %define VENDOR UL @@ -158,10 +158,11 @@ CONFIGURE_OPTIONS="\ --localstatedir=%{LOCKDIR} \ --sysconfdir=%{CONFIGDIR} \ --with-configdir=%{CONFIGDIR} \ - --with-libdir=%{_libdir} \ + --libdir=%{_libdir} \ --with-lockdir=%{LOCKDIR} \ --with-logfilebase=%{LOGDIR} \ --with-mandir=%{_mandir} \ + --with-modulesdir=%{_libdir}/samba \ --with-rootsbindir=/sbin \ --enable-cups \ --enable-debug \ @@ -322,10 +323,12 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %changelog +* Tue Mar 10 2009 lmuelle@suse.de +- Only call '%%find_lang pam_winbind' in the samba spec file, not samba-doc. * Thu Jan 24 2008 lmuelle@suse.de - Remove NoSource tags from samba-doc spec file; [#351370]. * Fri Jun 16 2006 schwab@suse.de diff --git a/samba.changes b/samba.changes index 3193c9a..e8b184b 100644 --- a/samba.changes +++ b/samba.changes @@ -1,3 +1,240 @@ +------------------------------------------------------------------- +Thu Apr 30 15:15:41 CEST 2009 - lmuelle@suse.de + +- Update to 3.3.4. + + Fix domain logins for WinXP clients pre SP3 (bug #6263). + + Fix samr_OpenDomain access checks (bug #6089). + + Fix usrmgr.exe creating a user (bug #6243). + + + BUG 6089: Fix samr_OpenDomain access checks. + + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with + "msdfs root" set to "yes". + + BUG 6279: Fix Winbind crash. + + BUG 5329: Add "net rpc service delete/create". + + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before + freed. + + BUG 6263: Fix domain logins for WinXP clients pre SP3. + + BUG 6286: Call init function for builtin idmap modules before probing for + them as shared modules. + + BUG 6243: Fix usrmgr.exe creating a user. + + + net conf: Save share name as given, not as lower case only. + + Prevent creation of registry keys containing the '/' character. + + Allow pdbedit to change a user rid/sid. + + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + + Don't access a freed structure when logging off and re-using a vuid. + + Try to to fix password_expired flag handling. + + Make sure to grey out change fields in the netdomjoin-gui when not + running as root. + + Don't look up local user for remote changes, even when root. + + Use procid_str in debug messages for better cluster-debuggability. + + Use cluster-aware procid_is_me instead of comparing pids. + + Fix smbd crash for close_on_completion. + + Fix a memleak in an unlikely error path in change_notify_create(). + + Do not use the file system GET_REAL_FILENAME for mangled names. + + Fix a crash bug if we timeout in net rpc trustdom list. + + Add '--request-timeout' option to net. + + In net_conf_import, start a transaction when importing a single share. + + Fix writing of roaming profiles with "profile acls" set to "yes". + +------------------------------------------------------------------- +Fri Apr 17 21:36:47 CEST 2009 - lmuelle@suse.de + +- Update to 3.2.11. + + Fix domain logins for WinXP clients pre SP3 (bug #6263). + + Fix samr_OpenDomain access checks (bug #6089). + + Fix smbd crash for close_on_completion. + + + BUG 6089: Fix samr_OpenDomain access checks. + + BUG 6205: Correct sample smb.conf share configuration. + + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with + "msdfs root" set to "yes". + + BUG 6263: Fix domain logins for WinXP clients pre SP3. + + + Allow pdbedit to change a user rid/sid. + + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + + Fix resume command typo for "printing = vlp". + + Fix smbd crash for close_on_completion. + + Fix a memleak in an unlikely error path in change_notify_create(). + + Don't look up local user for remote changes, even when root. + +------------------------------------------------------------------- +Fri Apr 17 10:34:29 CEST 2009 - jmcdonough@suse.de + +- Don't lookup local user for remote password changes; (bnc#493507). + +------------------------------------------------------------------- +Thu Apr 2 22:14:03 CEST 2009 - lmuelle@suse.de + +- Update to 3.3.3. + + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb + correctly (bug #6195). + + Fix serving of files with colons to CIFS/VFS client (bug #6196). + + Fix "map readonly" (bug #6186). + + BUG 6195: Don't let smbd child processes panic. + + Add backend_requires_messaging() method to libsmbconf. + + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf. + + Fall back to file backend when no valid backend was found. + + Fix a memleak in dbwrap_rbt. + + Provide transaction_start|commit|cancel fns for the registry tdb. + + Speed up "net conf drop". + + Speed up "net conf import". + + Add transactions to the libsmbconf API. + + Reduce memory usage of "net conf import". + + Registry cleanup. + + Fix handling of SAMBA_VERSION_VENDOR_PATCH. + + Fix build of pam_winbind.so with static linking. + + Tidy up some convert_string_internal error cases. + + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to + run elections. + + Allow DFS client paths to work when POSIX pathnames have been selected. + + Try and fix the build farm RAW-STREAMS errors. + + Ensure files starting with multiple dots are hidden. + + BUG 6102: NetQueryDisplayInformation could return wrong information. + + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta(). + + Fix notify_printer_status_byname. + + Fix Coverity IDs 722, 762, 774, 775, 776. + + Fix build on old Heimdal based systems. + + Fix compile warning. + + Use parentheses in if condition to make negation clear. + + Add dirsort module. + + BUG 6147: Fix detection of the GNU ld version. + + BUG 6097: Fix smbd segfault. + + BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped + members. + + BUG 6139: Add missing whitespace in mount.cifs error message. + + Fix a malloc/talloc mismatch when cli_initialise() fails. + + Fix a valgrind error. + + Speed up "net conf list". + + Add sorted subkey cache. + + Use StrCaseCmp in the dirsort module. + + Document the dirsort module. + + Disable dns_sd by default. + + Add avahi detection to configure. + + Add event avahi binding. + + Use avahi to register _smb._tcp in smbd. + + Fix two memleaks in the encryption code. + + Fix a scary "fill_share_mode_lock failed" message. + + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set + errno. + + Don't use reserved words in smbconftort. + + Fix smb signing for fragmented trans/trans2/nttrans requests. + + Parse_packet can return NULL which is then dereferenced in + match_mailslot_name. + + Format the header check for netinet/ip.h more nicely. + + Missing break in conversion function prevents tdb password database + update. + +------------------------------------------------------------------- +Wed Apr 1 16:04:11 CEST 2009 - jmcdonough@suse.de + +- Update to 3.2.10. + + BUG #6195: Don't let smbd child processes panic. + +------------------------------------------------------------------- +Wed Apr 1 13:03:44 CEST 2009 - jmcdonough@suse.de + +- BUG 6195: Fix crash on passdb conversion. + +------------------------------------------------------------------- +Tue Mar 31 15:06:03 CET 2009 - jmcdonough@suse.de + +- Update to 3.2.9. + + BUG 5920: The length of the memcpy was calculated wrong. + + BUG 6097: Fix smbd segfault. + + BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS + server is invalid. + + BUG 6099: Samba returns incurrate capabilities list. + + BUG 6100: Implement _netr_LogonGetCapabilities() with + NT_STATUS_NOT_IMPLEMENTED. + + BUG 6102: NetQueryDisplayInformation could return wrong information. + + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped + members. + + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem. + + BUG 6161: smbclient corrupts source path in tar mode. + + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + + BUG 6224: nmbd waits 5 minutes before checking to run elections. + + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno. + + Numerous Coverity fixes + + Fix double free caused by incorrect talloc_steal usage. + + Backport delete semantics of alternate data streams on a file truncate. + + Allow set attributes on a stream fnum to redirect to the base filename. + + Fix use of streams modules with CIFSFS client. + + Fix more POSIX path lstat calls. + + Allow DFS client paths to work with POSIX pathnames. + + Ensure files starting with multiple dots are hidden. + + Fix guest auth when Winbind is running. + + Fix memleak in get_remote_printer_publishing_data(). + + cifs mount fix for handling -V parameter. + + Fix guest mounts. + + Clean-up entries in /etc/mtab after unmount. + + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + + Enable total anonymization in vfs_smb_traffic_analyzer. + + Don't try and delete a default ACL from a file. + + Fix remotely adding a share via MMC. + + Fix resume handle for _samr_EnumDomainGroups. + + Fix a buffer handling bug when adding lots of registry keys. + + Fix a O(n^2) algorithm in regdb_fetch_keys(). + + Fix a valgrind error / segfault in dns_register_smbd(). + + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + + Fix a malloc/talloc mismatch when cli_initialise() fails. + + Fix two memleaks in the encryption code. + + Fix "fill_share_mode_lock failed" message. + + Add S-1-22-X-Y sids to the local token. + + Fix smb signing for fragmented trans/trans2/nttrans requests. + + Don't miss an absolute pathname as a kerberos keytab path. + + Have nmbd check all available interfaces for WINS before failing. + + Initialize the id_map status in idmap_ldap to avoid surprise. + +------------------------------------------------------------------- +Sun Mar 15 12:48:28 CET 2009 - lmuelle@suse.de + +- Obsolete change from 2008-03-05 by removing the needless examples cleanup. + +------------------------------------------------------------------- +Sat Mar 14 12:17:03 CET 2009 - lmuelle@suse.de + +- Update to 3.3.2. + + Fix "force group" (bug #6155). + + Fix saving of files on Samba share using MS Office 2007 (bug #6160). + + Fix guest authentication in setups with "security = share" and "guest ok = + yes" when Winbind is running. + + Fix corruptions of source path in tar mode of smbclient (bug #6161). + + BUG 6082: Fix renaming and deleting of directories using Windows clients. + + BUG 6154: Make ZFS honor admin users. + + BUG 6155: Fix "force group". + + BUG 6160: Fix saving of files on Samba share using MS Office 2007. + + BUG 6161: Fix corruptions of source path in tar mode of smbclient. + + Fix some NetBSD warnings. + + Fix bug in processing of open modes in POSIX open. + + Fix use of streams modules with CIFSFS client. + + Ensure ACL modules work with POSIX paths. + + Use fsp->posix_open in preference if we have it. + + Fix more POSIX path lstat calls. + + Fix a bug in message handling for the change notify code. + + Fix guest authentication in setups with "security = share" and "guest ok = + yes" when Winbind is running. + + BUG 4640: Fix guest mounts in mount.cifs. + + Fix displaying the version string properly when no other parameters passed + in in mount.cifs. + + Prefer gssapi header files from subdirectory. + + BUG 6176: winbindd -n should disable the winbind idmap cache. + + Add a vfs_preopen module to hide fs latencies. + + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + + Fix a valgrind error / segfault in dns_register_smbd(). + + Fix build on SLES8. + + Decremented by 1 for ntcancel requests. + + Fix creation of core files. + + Fix first mapping of uids/gids in Winbind. + + Initialize the id_map status in idmap_ldap to avoid surprise. + + Fix initialization of idmap status. + +------------------------------------------------------------------- +Tue Mar 10 15:07:29 CET 2009 - lmuelle@suse.de + +- Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc. + ------------------------------------------------------------------- Thu Mar 5 16:07:10 CET 2009 - ro@suse.de @@ -9,10 +246,88 @@ Wed Feb 25 09:24:25 CET 2009 - boyang@suse.de - Make libsmbclient work with DFS, backported from 3.3; (bnc#475995). ------------------------------------------------------------------- -Mon Feb 23 17:35:25 CET 2009 - hhetter@suse.de +Tue Feb 24 16:43:02 CET 2009 - lmuelle@suse.de + +- Update to 3.3.1. + + Fix net ads join when "ldap ssl = start tls" (bug #6073). + + Fix renaming/deleting of files using Windows clients (bug #6082). + + Fix renaming/deleting a "not matching/resolving" symlink (bug #6090). + + Fix remotely adding a share via the Windows MMC. + + BUG 6082: Fix renaming/deleting of files using Windows clients. + + BUG 6069: Fix build with too many arguments. + + BUG 6090: Fix renaming/deleting a "not matching/resolving" symlink. + + BUG 6099: Try to fix domain join of Win7 Beta. + + BUG 6117: Fix core dump of pdbedit -a. + + BUG 6133: Fix deletion of non-ACL files on Solaris/ZFS/NFSv4 ACL + filesystem. + + Fix Coverity IDs 115, 116, 117, 602. + + Fix warning (bad handler prototype). + + Unify the detection of the timespec code in configure.in, and the + application of it in time.c. + + Correctly use chroot(). + + Parameterize in local.h the MAX_RPC_DATA_SIZE, and ensure that "offered" + read from the rpc packet in spoolss is under that size. + + Backport the semantics of when to delete alternate data streams on a file + truncate. + + Fix printf warnings. + + BUG 6073: Prevent ads_connect() from using SSL unless explicitly + requested. + + Fix 'getent passwd' to allocate new uids. + + Fix 'getent group' to allocate new gids. + + Remove check for sharename being a username in 'net conf addshare'. + + Fix Coverity ID 848. + + Remove unused ENUM_HND from 'net'. + + Fix getform command asprintf return code in rpcclient. + + Fix memleak in get_remote_printer_publishing_data(). + + Remove duplicate prototypes for generated rpc server functions. + + Enable total anonymization in vfs_smb_traffic_analyzer. + + Fix build with external dns_sd libraries. + + Fix configure check "sub-second timestamps without struct timespec". + + Use correct BSD evironment variable. + + Don't try and delete a default ACL from a file. + + BUG 5798: CFLAGS info lost in configure. + + Fix Coverity IDs 740, 742, 744, 745, 876, 879, 880. + + Fix remotely adding a share via the Windows MMC. + + Avoid valgrind errors. + + Fix 'net rpc join' for users with the SeMachineAccountPrivilege. + + Fix resume handle for _samr_EnumDomainGroups. + + Fix a buffer handling bug when adding lots of registry keys. + + Fix a O(n^2) algorithm in regdb_fetch_keys(). + + Initialize rc to 0 in main in mount.cifs. + + BUG 6069: Add a fstatvfs function for libsmbclient. + + Eliminate compiler warnings. + + Don't miss an absolute pathname as a kerberos keytab path. + + BUG 6100: Implement _netr_LogonGetCapabilities() with + NT_STATUS_NOT_IMPLEMENTED. + + Make Samba work with older ctdb versions. + + Add S-1-22-X-Y sids to the local token. + + Conditional install of the cifs.upcall man page. + + Adjust regex to match variable names including underscores. + + BUG 4370: Clean-up entries in /etc/mtab after unmount. + + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + + Fix a crash during name resolution. + + Fix "assignment discards qualifiers from pointer target type" warnings. + + Fix SMB_VFS_RECVFILE/SENDFILE macros. + + Change "ldap ssl:ads" parameter to "ldap ssl ads". + + Add manpages for vfs_acl_xattr and vfs_acl_tdb. + + Fix double free caused by incorrect talloc_steal usage. + + Build ldbrename. + + Make nmbd check all available interfaces for WINS before failing. + + Fix compilation of vfs_default on systems that do not support utimes(). + + BUG 5920: Fix the calculation of the memcpy length. + + BUG 6098: Fix ads_find_dc() in setups with "security = domain". + + Make libsmbclient work with DFS. + +------------------------------------------------------------------- +Mon Feb 23 17:29:02 CET 2009 - hhetter@suse.de - Define init_samba_module in all samba-vscan modules; (bnc#469218). +------------------------------------------------------------------- +Sat Feb 21 15:30:41 CET 2009 - lmuelle@suse.de + +- Add GPLv3 header to all init scripts; (bnc#459766). + ------------------------------------------------------------------- Mon Feb 9 15:53:40 CET 2009 - jmcdonough@suse.de @@ -86,6 +401,33 @@ Wed Jan 28 22:17:33 CET 2009 - lmuelle@suse.de - Only add ccache to BuildRequires if it is used. +------------------------------------------------------------------- +Tue Jan 27 22:41:19 CET 2009 - lmuelle@suse.de + +- Update to 3.3.0. + + The passdb tdbsam version has been raised. + + Splitting of library directory into library directory and separate modules + directory. + + The default value of "ldap ssl" has been changed to "start tls". + + Extended Cluster support. + + New experimental VFS modules "vfs_acl_xattr" and "vfs_acl_tdb" to store + NTFS ACLs on Samba file servers. + + Simplified idmap configuration. + + New idmap backends "adex" and "hash". + + Added new parameter "winbind reconnect delay". + + Added support for user and group aliasing. + + Added support for multiple domains to idmap_ad. + + The destination "all" of smbcontrol does now affect all running daemons + including nmbd and winbindd. + + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands. + + The 'net' utility can now use kerberos for joining and authentication. + + The 'wbinfo' utility can now add, modify and remove identity mapping + entries. + + NetApi library implements various new calls for User- and Group Account + Management. + + libsmbclient does now determine case sensitivity based on file system + attributes. + ------------------------------------------------------------------- Fri Jan 23 16:32:16 CET 2009 - anschneider@suse.de @@ -98,6 +440,18 @@ Fri Jan 23 14:01:29 CET 2009 - anschneider@suse.de - Add SuSEfirewall2 service config file to allow samba browsing on post-10.2 systems; (bnc#460902). +------------------------------------------------------------------- +Tue Jan 20 20:57:38 CET 2009 - lmuelle@suse.de + +- Update to 3.0.34. + + Fix update of machine account passwords. + + Fix SMB signing issue on Windows Vista with MS Hotfix KB955302. + + Fix Winbind crashes. + + Correctly detect if the current dc is the closest one. + + Add saf_join_store() function to memorize the dc used at join time. This + avoids problems caused by replication delays shortly after domain joins. + + Fix write list in setups using "security = share". + ------------------------------------------------------------------- Wed Jan 7 12:34:56 CET 2009 - olh@suse.de @@ -126,6 +480,26 @@ Thu Dec 25 07:36:24 CET 2008 - boyang@suse.de - Fix Mounting failure when there is white spaces in service; (bnc#460793). +------------------------------------------------------------------- +Mon Dec 15 16:56:26 CET 2008 - anschneider@suse.de + +- Update to 3.3.0rc2. + + Splitting of library directory into library directory and separate + modules directory. + + Extended Cluster support. + + Simplified idmap configuration. + + New idmap backends "adex" and "hash". + + Added new parameter "winbind reconnect delay". + + Added support for user and group aliasing. + + Added support for multiple domains to idmap_ad. + + The destination "all" of smbcontrol does now affect all running + daemons including nmbd and winbindd. + + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands. + + The 'net' utility can now use kerberos for joining and authentication. + + The 'wbinfo' utility can now add, modify and remove identity mapping entries. + + NetApi library implements various new calls for User- and Group + Account Management. + ------------------------------------------------------------------- Fri Dec 12 17:49:48 CET 2008 - lmuelle@suse.de @@ -255,6 +629,28 @@ Wed Dec 3 12:17:40 CET 2008 - anschneider@suse.de - Use %__install macro to install files with the right permissions instead of cp. +------------------------------------------------------------------- +Mon Dec 1 10:37:03 CET 2008 - anschneider@suse.de + +- Update to 3.3.0rc1. + + Splitting of library directory into library directory and separate + modules directory. + + Extended Cluster support. + + Simplified idmap configuration. + + New idmap backends "adex" and "hash". + + Added new parameter "winbind reconnect delay". + + Added support for user and group aliasing. + + The destination "all" of smbcontrol does now affect all running + daemons including nmbd and winbindd. + + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands. + + The 'net' utility can now use kerberos for joining and authentication. + + The 'wbinfo' utility can now add, modify and remove identity mapping + entries. + + NetApi library implements various new calls for User- and Group + Account Management. + +- Added German translation for pam_winbind. + ------------------------------------------------------------------- Mon Dec 1 09:12:45 CET 2008 - boyang@suse.de @@ -293,7 +689,7 @@ Thu Nov 27 11:39:36 CET 2008 - anschneider@suse.de - Fix perl v5.10 warnings in nmbstatus; (bnc#448225). ------------------------------------------------------------------- -Tue Nov 25 13:41:12 CET 2008 - sjayaraman@suse.de +Tue Nov 25 12:31:24 CET 2008 - sjayaraman@suse.de - Make cifs-mount depend on keyutils, keyutils-libs packages as they are required to support dfs and kerberos; (bnc#432494). @@ -341,6 +737,11 @@ Thu Oct 16 14:49:16 CEST 2008 - anschneider@suse.de - Move the nss_info modules to the samba-winbind package. +------------------------------------------------------------------- +Thu Oct 16 13:40:25 CEST 2008 - anschneider@suse.de + +- Activate the idmap backends "adex" and "hash". + ------------------------------------------------------------------- Thu Oct 16 11:40:17 CEST 2008 - anschneider@suse.de @@ -384,16 +785,94 @@ Thu Oct 2 21:30:06 CEST 2008 - lmuelle@suse.de - Only use SUSE rpm macros and SuSEconfig.permissions if available. +------------------------------------------------------------------- +Thu Oct 2 18:03:21 CEST 2008 - lmuelle@suse.de + +- Update to 3.3.0pre2. + + BUG 5729: Explicitly allow "-valid". + + BUG 5737: Fix winbindd crash in an unusual failure mode. + + BUG 5751: Fix showing of ACLs on DFS in (lib)smbclient. + + BUG 5762: Fix opening of mangled directory name (resulted 'is a stream + name'). + + BUG 5783: Fix FindFirst where search pattern == mangled filename. + + BUG 5790: Fix returning of STATUS_OBJECT_NAME_NOT_FOUND on set file + disposition. + + BUG 5797: Fix moving of readonly files. + + Fix crashes when looking up a non-existant uid. + + Fix getting/setting of NT ACLs on a file. + + Fix the wcache_invalidate_samlogon calls. + + Clarify usage of "force create mode". + + Get smbd to look (read-only) into the winbindd cache for uid/gid <--> sid + mappings. + + Write times code update. + + Add experimental version of VFS module acl_xattr. + + Fix rename_open_files. + + Make SMB traffic analyzer VFS module more efficient. + + Fix segfault when calling nss_get_info() with a NULL ads structure. + + Add support for name aliasing in Winbind. + + Add the idmap/nss-info provider from Likewise Open. + + Allow an admin to define the "uid" attribute for a RFC2307 user object in + AD to be the username alias. + + Add new idmap backend "adex" to support RFC2307 enabled AD forests. + + Add new idmap backend "hash". + + Fix build warnings. + + Cleanup of DC enumeration in get_dcs(). + + BUG 5710: Fix changing of machine account passwords. + + BUG 5784: Fix pam_winbind build issue on Solaris. + + Fix invalid sid copy (hit when enumerating sibling domains) in Winbind. + + Fix double installation of cifs.upcall. + + Add change-user-password command to wbinfo. + + Fix segfault in _srvsvc_NetShareAdd. + + BUG 5736: Fix Winbind crash bug with trusted domains. + + Correct the netsamlogon_clear_cached_user function. + + Add new VFS module to analyze SMB traffic to record write and read + operations on the Samba server. + + Fix build warnings in cifs.upcall. + + BUG 5707: Do proper error handling if the socket is closed. + + BUG 5778: Don't define 'strlcat' and 'strlcpy' if it's already defined. + + Fix Coverity IDs 587 and 589. + + Increase the default positive idmap cache time to a week. + + Fix calculation of useable_space for trans2 and nttrans replies. + + Add mapping of generic bits when setting an NFSv4 ACL. + + Some write time fixes. + + Add new parameter "cups connection timeout". + + Fix enumeration of nested group memberships in Winbind. This affected + only setups using "security = ads". + + Fix cut and paste error in quota code. + + Fix display of POSIX ACLs. + + Fix permissions of group_mapping.ldb (CVE-2008-3789). + + Avoid a race condition in glibc between AIO and setresuid(). + + Add missing become root for AIO operations. + + Fix an errno handling bug that could lead to an infinite loop. + + Fix logic of tsmsm_sendfile(). + + Fix handling of arbitrary new PAC types. + + Fix segfault on startup with trusted domains. + + Fix segfault on the CTDB destructor code. + + Re-add "winbind:ignore domains". + + BUG 5609: Remove configure option "--with-libdir" and add + "--with-modulesdir". + + Extend "net rpc vampire keytab" to support differential replication and + storing of kerberos keys. + + Rework internal logic of registry tdb code. + + Freeze autogenerated prototype headers (good bye "make proto"). + + Add new "winbind reconnect delay" parameter. + + Make the change to smbcontrol for "all" to mean broadcast, and "smbd" to + mean the main smb daemon. + + Allow an admin to define the "uid" attribute for a RFC2307 user object in + AD to be the username alias. + + Add "net rpc vampire keytab" and "net rpc vampire ldif". + + Rework of the Winbind idmap backend. + +------------------------------------------------------------------- +Wed Oct 1 22:30:49 CEST 2008 - lmuelle@suse.de + +- Define PAM_AUTHTOK_RECOVERY_ERR when not available on older Linux products. + ------------------------------------------------------------------- Mon Sep 29 16:09:11 CEST 2008 - lmuelle@suse.de - Adopt samba-vscan to build after the change to the bool type define. -------------------------------------------------------------------- -Wed Sep 24 19:40:30 MDT 2008 - tlaxmeshwar@novell.com - -- Fix winbindd crash in an unusual failure mode; (bnc#416598). - ------------------------------------------------------------------- Mon Sep 22 15:13:40 CEST 2008 - lmuelle@suse.de @@ -404,54 +883,6 @@ Sat Sep 20 14:53:45 CEST 2008 - lmuelle@suse.de - Call mkinitrd_setup during %post and %postun for post-9.2 systems only. -------------------------------------------------------------------- -Sat Sep 20 12:59:43 CEST 2008 - lmuelle@suse.de - -- Update to 3.2.4. - + BUG 5590: Fix binary stripping on older OS. - + Fix linking of cifs.upcall when nscd_flush_cache() is found. - + BUG 5052: Allow inheritable permissions. - + BUG 5697: Fix spinning of nmbd in reload_interfaces when only loopback has - an IPv4 address. - + BUG 5698: Fix non guest connections to shares when "security = share" is - used. - + BUG 5729: Explicitly allow "-valid". - + BUG 5745: Fix Kerberos authentication with (lib)smbclient. - + BUG 5751: Fix showing of ACLs on DFS in (lib)smbclient. - + BUG 5761: Fix opening of mangled directory name (resulted 'is a stream - name'). - + Fix the wcache_invalidate_samlogon calls. - + Clarify usage of "force create mode". - + Write times code update. - + Fix Winbind crash. - + idmap_ad: Fix a segfault when calling nss_get_info() with a NULL ads - structure. - + Fix build warnings. - + Cleanup of DC enumeration in get_dcs(). - + BUG 5710: Fix changing of machine account passwords. - + Fix several build warnings. - + Fix invalid sid copy (hit when enumerating sibling domains) in Winbind. - + BUG 5736: Fix Winbind crash bug with trusted domains. - + Correct the netsamlogon_clear_cached_user function. - + Fix handling of MSKRB5 OID in cifs.upcall. - + Fix build warnings in cifs.upcall. - + Change default install location of cifs.upcall to EPREFIX/sbin. - + Enable building of cifs.upcall by default on Linux. - + BUG 5707: Do proper error handling if the socket is closed. - + Fix calculation of useable_space for trans2 and nttrans replies. - + Fix Coverity ID 587. - + Add mapping of generic bits when setting an NFSv4 ACL. - + Some write time fixes. - + BUG 4516: No IPv6 on Solaris 2.6. - + BUG 5571: Fix group memeberships in Winbind. - + Fix cut and paste error in quota code. - + Fix display of POSIX ACLs. - + Avoid a race condition in glibc between AIO and setresuid(). - + Add missing become root for AIO operations. - + Fix logic of tsmsm_sendfile(). - + Fix an errno handling bug that could lead to an infinite loop. - + Fix handling of arbitrary new PAC types. - ------------------------------------------------------------------- Thu Sep 18 14:17:24 CEST 2008 - anschneider@suse.de @@ -470,11 +901,17 @@ Wed Sep 3 11:09:34 CEST 2008 - hare@suse.de (bnc#413709). ------------------------------------------------------------------- -Wed Aug 27 18:33:40 CEST 2008 - lmuelle@suse.de +Wed Aug 27 23:29:09 CEST 2008 - lmuelle@suse.de -- Update to 3.2.3. - + Force the permissions on group_mapping.ldb to 0600; CVE-2008-3789; - (bnc#420634). +- Update to 3.3.0pre1. + + Splitting of library directory into library directory and separate modules + directory. + + Extended Cluster support. + + Simplyfied idmap configuration. + + Added new parameter "winbind reconnect delay". + + The destination "all" of smbcontrol does now affect all running daemons + including nmbd and winbindd. + + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands. ------------------------------------------------------------------- Tue Aug 19 14:55:16 CEST 2008 - lmuelle@suse.de @@ -937,12 +1374,6 @@ Fri May 23 11:34:27 CEST 2008 - lmuelle@suse.de + Fix alignment bug when marshalling printer data replies. + Fix DeleteDriverDriverEx() checks to prevent removing in use files. -------------------------------------------------------------------- -Tue May 20 16:14:01 CEST 2008 - hhetter@suse.de - -- Prevent errors during the cache validation when ua keys reach a size larger - than 1024; [bnc#372558]. - ------------------------------------------------------------------- Sat May 17 23:58:01 CEST 2008 - lmuelle@suse.de @@ -970,6 +1401,7 @@ Fri May 16 13:20:11 CEST 2008 - hhetter@suse.de than 1024; [bnc#372558]. ------------------------------------------------------------------- + Thu May 15 00:16:13 CEST 2008 - lmuelle@suse.de - Package man page files independent of the used compression method (gz,lzma). diff --git a/samba.spec b/samba.spec index 8e0c4ce..03ad9c2 100644 --- a/samba.spec +++ b/samba.spec @@ -1,5 +1,5 @@ # -# spec file for package samba (Version 3.2.8) +# spec file for package samba (Version 3.3.4) # # Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany. # @@ -41,7 +41,7 @@ BuildRequires: cracklib-devel %if 0%{?centos_version} || 0%{?fedora_version} || 0%{?rhel_version} || 0%{?mandriva_version} BuildRequires: krb5-devel openldap-devel %endif -%define samba_ver 3.2.8 +%define samba_ver 3.3.4 %define samba_ver_suffix %nil %define samba_ver_full %{samba_ver}%{samba_ver_suffix} %define vscan_ver 0.3.6b @@ -50,8 +50,8 @@ License: GPL v3 or later Group: Productivity/Networking/Samba Url: http://www.samba.org/ AutoReqProv: on -Version: 3.2.8 -Release: 3 +Version: 3.3.4 +Release: 1 %ifarch ppc64 Obsoletes: samba-64bit %endif @@ -99,7 +99,7 @@ BuildRequires: ccache %else %define NET_CFGDIR network-scripts %endif -%define idmap_modules idmap_ad,idmap_ldap,idmap_rid +%define idmap_modules idmap_ad,idmap_adex,idmap_hash,idmap_ldap,idmap_rid %define vfs_modules vfs_cacheprime,vfs_readahead %if 0%{?ul_version} >= 1 %define VENDOR UL @@ -134,8 +134,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %package client License: GPL v3 or later @@ -174,8 +174,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %if 0%{?suse_version} == 0 || 0%{?suse_version} > 1020 @@ -198,8 +198,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %endif %if 0%{?suse_version} && 0%{?suse_version} < 1001 @@ -228,8 +228,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %endif @@ -255,8 +255,8 @@ Authors: -------- Jeremy Allison -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %if %{make_utils} @@ -304,8 +304,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %if 0%{?suse_version} && 0%{?suse_version} < 1031 @@ -342,8 +342,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %else @@ -356,8 +356,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %endif This package includes the smbclient library. @@ -390,8 +390,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %package -n libnetapi0 License: GPL v3 or later @@ -409,8 +409,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %package -n libnetapi-devel License: GPL v3 or later @@ -429,8 +429,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %if 0%{?suse_version} && 0%{?suse_version} < 1031 @@ -456,8 +456,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %else @@ -470,8 +470,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %endif This package includes the smbsharemodes library. @@ -501,8 +501,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %if %{make_ldapsmb} @@ -522,8 +522,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %package -n libtalloc-devel License: LGPL v3 or later @@ -542,8 +542,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %package -n libtdb1 License: LGPL v3 or later @@ -561,8 +561,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %package -n libtdb-devel License: LGPL v3 or later @@ -581,8 +581,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %package -n libwbclient0 License: GPL v3 or later @@ -600,8 +600,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %package -n libwbclient-devel License: GPL v3 or later @@ -620,8 +620,8 @@ Authors: -------- The Samba Team -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %package -n ldapsmb License: GPL v2 or later @@ -629,7 +629,7 @@ Summary: Tool to administer Samba's LDAP backend Group: Productivity/Networking/Samba AutoReqProv: on Version: 1.34b -Release: 259 +Release: 260 Requires: perl-ldap %description -n ldapsmb @@ -642,8 +642,8 @@ Authors: -------- Guenther Deschner -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %endif %if 0%{?suse_version} == 0 || 0%{?suse_version} > 920 @@ -666,8 +666,8 @@ Authors: -------- Steve French -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %endif %if %{make_vscan} @@ -678,7 +678,7 @@ Summary: On-Access Virus Scanning with Samba Group: Productivity/Networking/Samba AutoReqProv: on Version: 0.3.6b -Release: 263 +Release: 264 Provides: samba3-vscan = 0.3.6b Obsoletes: samba3-vscan Requires: samba = %{samba_ver} @@ -696,8 +696,8 @@ Authors: -------- Rainer Link -Source Timestamp: 2082 -Branch : 3.2.8 +Source Timestamp: 2112 +Branch : trunk %endif @@ -792,10 +792,11 @@ CONFIGURE_OPTIONS="\ --localstatedir=%{LOCKDIR} \ --sysconfdir=%{CONFIGDIR} \ --with-configdir=%{CONFIGDIR} \ - --with-libdir=%{_libdir} \ + --libdir=%{_libdir} \ --with-lockdir=%{LOCKDIR} \ --with-logfilebase=%{LOGDIR} \ --with-mandir=%{_mandir} \ + --with-modulesdir=%{_libdir}/samba \ --with-rootsbindir=/sbin \ --enable-cups \ --enable-debug \ @@ -841,8 +842,6 @@ CONFIGURE_OPTIONS_DEVEL="--enable-debug --enable-developer" %{__make} proto %endif %{__make} %{?jobs:-j%jobs} \ - CONFIGDIR=%{CONFIGDIR} \ - LIBDIR=%{_libdir}/samba \ everything #%{__make} %{?jobs:-j%jobs} -C tdb tdbtest tdbtorture %if %{make_vscan} @@ -908,7 +907,6 @@ popd %{__make} -C source/ install \ DESTDIR=${RPM_BUILD_ROOT} \ CONFIGDIR=%{CONFIGDIR} \ - LIBDIR=%{_libdir}/samba # utility scripts scripts="creategroup mksmbpasswd.sh" %__install -d -m 0755 examples/scripts @@ -979,14 +977,14 @@ for script in 21-dhcpcd-hook-samba 21-smbfs 55-samba-winbindd; do done # Install SuSEfirewall2 config files %if 0%{?suse_version} && 0%{?suse_version} > 1020 -%__install -m 0644 -p config/sysconfig.firewall.netbios-server \ - %{buildroot}/%{_sysconfdir}/sysconfig/SuSEfirewall2.d/services/netbios-server -%__install -m 0644 -p config/sysconfig.firewall.samba-server \ - %{buildroot}/%{_sysconfdir}/sysconfig/SuSEfirewall2.d/services/samba-server +%__install -m 0644 config/sysconfig.firewall.netbios-server \ + %{buildroot}%{_sysconfdir}/sysconfig/SuSEfirewall2.d/services/netbios-server +%__install -m 0644 config/sysconfig.firewall.samba-server \ + %{buildroot}%{_sysconfdir}/sysconfig/SuSEfirewall2.d/services/samba-server %endif %if 0%{?suse_version} && 0%{?suse_version} > 1100 -%__install -m 0644 -p config/sysconfig.firewall.samba-client \ - %{buildroot}/%{_sysconfdir}/sysconfig/SuSEfirewall2.d/services/samba-client +%__install -m 0644 config/sysconfig.firewall.samba-client \ + %{buildroot}%{_sysconfdir}/sysconfig/SuSEfirewall2.d/services/samba-client %endif # Add logrotate settings for nmbd and smbd only on systems newer than 8.1. %if 0%{?suse_version} && 0%{?suse_version} < 811 @@ -1023,11 +1021,6 @@ popd %__install -m 0755 source/bin/smbfilter ${RPM_BUILD_ROOT}/%{_bindir}/smbfilter # smbget %__install -m 0755 source/bin/smbget ${RPM_BUILD_ROOT}/%{_bindir}/smbget -# workaround for the common libs and modules destdir; fixed already upstream -for file in libnetapi libsmbclient libsmbsharemodes libtalloc libtdb libwbclient; do - mv ${RPM_BUILD_ROOT}/%{_libdir}/samba/${file}* \ - ${RPM_BUILD_ROOT}/%{_libdir}/ -done # install nsswitch-headers (for squid, etc. #FIXME) %__install -d -m 0755 \ ${RPM_BUILD_ROOT}/%{_includedir}/samba/nsswitch \ @@ -1057,20 +1050,15 @@ done # install VSCAN-vfs-modules %{__make} -C examples/VFS/samba-vscan-%{vscan_ver} install \ DESTDIR="${RPM_BUILD_ROOT}" \ - LIBDIR=%{_libdir}/samba + MODULESDIR=%{_libdir}/samba %endif %if %{make_ldapsmb} -%__install -m 0700 ldapsmb-%{ldapsmb_ver}/ldapsmb ${RPM_BUILD_ROOT}/%{_sbindir}/ +install -m 0700 ldapsmb-%{ldapsmb_ver}/ldapsmb ${RPM_BUILD_ROOT}/%{_sbindir}/ cp -a ldapsmb-%{ldapsmb_ver}/ldapsmb.5 ${RPM_BUILD_ROOT}/%{_mandir}/man5 %endif # cups SMB support mkdir -p ${RPM_BUILD_ROOT}/%{_libdir}/cups/backend/ touch ${RPM_BUILD_ROOT}/%{_libdir}/cups/backend/smb -# make examples clean -VFS="${RPM_BUILD_DIR}/samba-%{samba_ver_full}/examples/VFS" -VSCAN="$VFS/samba-vscan-%{vscan_ver}" -dirs="$SAM $VFS" -(for i in $dirs; do make -C "${i}" clean; done) || true # add docs %if %{make_vscan} mv examples/VFS/samba-vscan-%{vscan_ver} . @@ -1126,6 +1114,9 @@ rm -f \ ${RPM_BUILD_ROOT}/%{_mandir}/man1/log2pcap.1* \ ${RPM_BUILD_ROOT}/%{_mandir}/man1/vfstest.1* %endif +# find pam_winbind language files +%find_lang pam_winbind +cat pam_winbind.lang >> ${RPM_BUILD_DIR}/samba-%{samba_ver_full}/filelist-samba-winbind # sort out vscan-modules from the main filelist for file in $( find ${RPM_BUILD_ROOT}%{_libdir}/samba/vfs/ -mindepth 1 ! -iname '*vscan*' ); do echo "${file#${RPM_BUILD_ROOT}}" >>${RPM_BUILD_DIR}/samba-%{samba_ver_full}/filelist-samba @@ -1366,12 +1357,15 @@ exit 0 %doc %{_mandir}/man8/nmbd.8.* %doc %{_mandir}/man8/smbd.8.* %doc %{_mandir}/man8/swat.8.* +%doc %{_mandir}/man8/vfs_acl_tdb.8.* +%doc %{_mandir}/man8/vfs_acl_xattr.8.* %doc %{_mandir}/man8/vfs_audit.8.* %doc %{_mandir}/man8/vfs_cacheprime.8.* %doc %{_mandir}/man8/vfs_cap.8.* %doc %{_mandir}/man8/vfs_catia.8.* %doc %{_mandir}/man8/vfs_commit.8.* %doc %{_mandir}/man8/vfs_default_quota.8.* +%doc %{_mandir}/man8/vfs_dirsort.8.* %doc %{_mandir}/man8/vfs_streams_depot.8.* %doc %{_mandir}/man8/vfs_extd_audit.8.* %doc %{_mandir}/man8/vfs_fake_perms.8.* @@ -1381,12 +1375,13 @@ exit 0 %doc %{_mandir}/man8/vfs_netatalk.8.* %doc %{_mandir}/man8/vfs_notify_fam.8.* %doc %{_mandir}/man8/vfs_prealloc.8.* +%doc %{_mandir}/man8/vfs_preopen.8.* %doc %{_mandir}/man8/vfs_readahead.8.* %doc %{_mandir}/man8/vfs_readonly.8.* %doc %{_mandir}/man8/vfs_recycle.8.* -%doc %{_mandir}/man8/vfs_smb_traffic_analyzer.8.* %doc %{_mandir}/man8/vfs_shadow_copy.8.* %doc %{_mandir}/man8/vfs_shadow_copy2.8.* +%doc %{_mandir}/man8/vfs_smb_traffic_analyzer.8.* %doc %{_mandir}/man8/vfs_streams_xattr.8.* %doc %{_mandir}/man8/vfs_xattr_tdb.8.* %if 0%{?suse_version} && 0%{?suse_version} < 1021 @@ -1425,6 +1420,7 @@ exit 0 %{_bindir}/ldbdel %{_bindir}/ldbedit %{_bindir}/ldbmodify +%{_bindir}/ldbrename %{_bindir}/ldbsearch %{_bindir}/net %{_bindir}/nmblookup @@ -1432,6 +1428,7 @@ exit 0 %{_bindir}/pdbedit %{_bindir}/profiles %{_bindir}/rpcclient +%{_bindir}/sharesec %{_bindir}/smbcacls %{_bindir}/smbclient %{_bindir}/smbcontrol @@ -1462,11 +1459,13 @@ exit 0 %doc %{_mandir}/man1/ldbdel.1.* %doc %{_mandir}/man1/ldbedit.1.* %doc %{_mandir}/man1/ldbmodify.1.* +%doc %{_mandir}/man1/ldbrename.1.* %doc %{_mandir}/man1/ldbsearch.1.* %doc %{_mandir}/man1/nmblookup.1.* %doc %{_mandir}/man1/nmbstatus.1.* %doc %{_mandir}/man1/profiles.1.* %doc %{_mandir}/man1/rpcclient.1.* +%doc %{_mandir}/man1/sharesec.1.* %doc %{_mandir}/man1/smbcacls.1.* %doc %{_mandir}/man1/smbcontrol.1.* %doc %{_mandir}/man1/smbclient.1.* @@ -1532,11 +1531,15 @@ exit 0 %{_libdir}/samba/idmap %{_libdir}/samba/nss_info %doc %{_mandir}/man7/pam_winbind.7.* +%doc %{_mandir}/man7/winbind_krb5_locator.7.* %doc %{_mandir}/man8/idmap_ad.8.* +%doc %{_mandir}/man8/idmap_adex.8.* +%doc %{_mandir}/man8/idmap_hash.8.* %doc %{_mandir}/man8/idmap_ldap.8.* %doc %{_mandir}/man8/idmap_nss.8.* %doc %{_mandir}/man8/idmap_rid.8.* %doc %{_mandir}/man8/idmap_tdb.8.* +%doc %{_mandir}/man8/idmap_tdb2.8.* %if 0%{?suse_version} && 0%{?suse_version} < 1100 %dir %{_datadir}/omc %dir %{_datadir}/omc/svcinfo.d @@ -1695,12 +1698,287 @@ exit 0 %endif %changelog +* Thu Apr 30 2009 lmuelle@suse.de +- Update to 3.3.4. + + Fix domain logins for WinXP clients pre SP3 (bug #6263). + + Fix samr_OpenDomain access checks (bug #6089). + + Fix usrmgr.exe creating a user (bug #6243). + + BUG 6089: Fix samr_OpenDomain access checks. + + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with + "msdfs root" set to "yes". + + BUG 6279: Fix Winbind crash. + + BUG 5329: Add "net rpc service delete/create". + + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before + freed. + + BUG 6263: Fix domain logins for WinXP clients pre SP3. + + BUG 6286: Call init function for builtin idmap modules before probing for + them as shared modules. + + BUG 6243: Fix usrmgr.exe creating a user. + + net conf: Save share name as given, not as lower case only. + + Prevent creation of registry keys containing the '/' character. + + Allow pdbedit to change a user rid/sid. + + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + + Don't access a freed structure when logging off and re-using a vuid. + + Try to to fix password_expired flag handling. + + Make sure to grey out change fields in the netdomjoin-gui when not + running as root. + + Don't look up local user for remote changes, even when root. + + Use procid_str in debug messages for better cluster-debuggability. + + Use cluster-aware procid_is_me instead of comparing pids. + + Fix smbd crash for close_on_completion. + + Fix a memleak in an unlikely error path in change_notify_create(). + + Do not use the file system GET_REAL_FILENAME for mangled names. + + Fix a crash bug if we timeout in net rpc trustdom list. + + Add '--request-timeout' option to net. + + In net_conf_import, start a transaction when importing a single share. + + Fix writing of roaming profiles with "profile acls" set to "yes". +* Fri Apr 17 2009 lmuelle@suse.de +- Update to 3.2.11. + + Fix domain logins for WinXP clients pre SP3 (bug #6263). + + Fix samr_OpenDomain access checks (bug #6089). + + Fix smbd crash for close_on_completion. + + BUG 6089: Fix samr_OpenDomain access checks. + + BUG 6205: Correct sample smb.conf share configuration. + + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with + "msdfs root" set to "yes". + + BUG 6263: Fix domain logins for WinXP clients pre SP3. + + Allow pdbedit to change a user rid/sid. + + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + + Fix resume command typo for "printing = vlp". + + Fix smbd crash for close_on_completion. + + Fix a memleak in an unlikely error path in change_notify_create(). + + Don't look up local user for remote changes, even when root. +* Fri Apr 17 2009 jmcdonough@suse.de +- Don't lookup local user for remote password changes; (bnc#493507). +* Thu Apr 02 2009 lmuelle@suse.de +- Update to 3.3.3. + + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb + correctly (bug #6195). + + Fix serving of files with colons to CIFS/VFS client (bug #6196). + + Fix "map readonly" (bug #6186). + + BUG 6195: Don't let smbd child processes panic. + + Add backend_requires_messaging() method to libsmbconf. + + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf. + + Fall back to file backend when no valid backend was found. + + Fix a memleak in dbwrap_rbt. + + Provide transaction_start|commit|cancel fns for the registry tdb. + + Speed up "net conf drop". + + Speed up "net conf import". + + Add transactions to the libsmbconf API. + + Reduce memory usage of "net conf import". + + Registry cleanup. + + Fix handling of SAMBA_VERSION_VENDOR_PATCH. + + Fix build of pam_winbind.so with static linking. + + Tidy up some convert_string_internal error cases. + + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to + run elections. + + Allow DFS client paths to work when POSIX pathnames have been selected. + + Try and fix the build farm RAW-STREAMS errors. + + Ensure files starting with multiple dots are hidden. + + BUG 6102: NetQueryDisplayInformation could return wrong information. + + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta(). + + Fix notify_printer_status_byname. + + Fix Coverity IDs 722, 762, 774, 775, 776. + + Fix build on old Heimdal based systems. + + Fix compile warning. + + Use parentheses in if condition to make negation clear. + + Add dirsort module. + + BUG 6147: Fix detection of the GNU ld version. + + BUG 6097: Fix smbd segfault. + + BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped + members. + + BUG 6139: Add missing whitespace in mount.cifs error message. + + Fix a malloc/talloc mismatch when cli_initialise() fails. + + Fix a valgrind error. + + Speed up "net conf list". + + Add sorted subkey cache. + + Use StrCaseCmp in the dirsort module. + + Document the dirsort module. + + Disable dns_sd by default. + + Add avahi detection to configure. + + Add event avahi binding. + + Use avahi to register _smb._tcp in smbd. + + Fix two memleaks in the encryption code. + + Fix a scary "fill_share_mode_lock failed" message. + + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set + errno. + + Don't use reserved words in smbconftort. + + Fix smb signing for fragmented trans/trans2/nttrans requests. + + Parse_packet can return NULL which is then dereferenced in + match_mailslot_name. + + Format the header check for netinet/ip.h more nicely. + + Missing break in conversion function prevents tdb password database + update. +* Wed Apr 01 2009 jmcdonough@suse.de +- Update to 3.2.10. + + BUG #6195: Don't let smbd child processes panic. +* Wed Apr 01 2009 jmcdonough@suse.de +- BUG 6195: Fix crash on passdb conversion. +* Tue Mar 31 2009 jmcdonough@suse.de +- Update to 3.2.9. + + BUG 5920: The length of the memcpy was calculated wrong. + + BUG 6097: Fix smbd segfault. + + BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS + server is invalid. + + BUG 6099: Samba returns incurrate capabilities list. + + BUG 6100: Implement _netr_LogonGetCapabilities() with + NT_STATUS_NOT_IMPLEMENTED. + + BUG 6102: NetQueryDisplayInformation could return wrong information. + + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped + members. + + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem. + + BUG 6161: smbclient corrupts source path in tar mode. + + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + + BUG 6224: nmbd waits 5 minutes before checking to run elections. + + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno. + + Numerous Coverity fixes + + Fix double free caused by incorrect talloc_steal usage. + + Backport delete semantics of alternate data streams on a file truncate. + + Allow set attributes on a stream fnum to redirect to the base filename. + + Fix use of streams modules with CIFSFS client. + + Fix more POSIX path lstat calls. + + Allow DFS client paths to work with POSIX pathnames. + + Ensure files starting with multiple dots are hidden. + + Fix guest auth when Winbind is running. + + Fix memleak in get_remote_printer_publishing_data(). + + cifs mount fix for handling -V parameter. + + Fix guest mounts. + + Clean-up entries in /etc/mtab after unmount. + + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + + Enable total anonymization in vfs_smb_traffic_analyzer. + + Don't try and delete a default ACL from a file. + + Fix remotely adding a share via MMC. + + Fix resume handle for _samr_EnumDomainGroups. + + Fix a buffer handling bug when adding lots of registry keys. + + Fix a O(n^2) algorithm in regdb_fetch_keys(). + + Fix a valgrind error / segfault in dns_register_smbd(). + + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + + Fix a malloc/talloc mismatch when cli_initialise() fails. + + Fix two memleaks in the encryption code. + + Fix "fill_share_mode_lock failed" message. + + Add S-1-22-X-Y sids to the local token. + + Fix smb signing for fragmented trans/trans2/nttrans requests. + + Don't miss an absolute pathname as a kerberos keytab path. + + Have nmbd check all available interfaces for WINS before failing. + + Initialize the id_map status in idmap_ldap to avoid surprise. +* Sun Mar 15 2009 lmuelle@suse.de +- Obsolete change from 2008-03-05 by removing the needless examples cleanup. +* Sat Mar 14 2009 lmuelle@suse.de +- Update to 3.3.2. + + Fix "force group" (bug #6155). + + Fix saving of files on Samba share using MS Office 2007 (bug #6160). + + Fix guest authentication in setups with "security = share" and "guest ok = + yes" when Winbind is running. + + Fix corruptions of source path in tar mode of smbclient (bug #6161). + + BUG 6082: Fix renaming and deleting of directories using Windows clients. + + BUG 6154: Make ZFS honor admin users. + + BUG 6155: Fix "force group". + + BUG 6160: Fix saving of files on Samba share using MS Office 2007. + + BUG 6161: Fix corruptions of source path in tar mode of smbclient. + + Fix some NetBSD warnings. + + Fix bug in processing of open modes in POSIX open. + + Fix use of streams modules with CIFSFS client. + + Ensure ACL modules work with POSIX paths. + + Use fsp->posix_open in preference if we have it. + + Fix more POSIX path lstat calls. + + Fix a bug in message handling for the change notify code. + + Fix guest authentication in setups with "security = share" and "guest ok = + yes" when Winbind is running. + + BUG 4640: Fix guest mounts in mount.cifs. + + Fix displaying the version string properly when no other parameters passed + in in mount.cifs. + + Prefer gssapi header files from subdirectory. + + BUG 6176: winbindd -n should disable the winbind idmap cache. + + Add a vfs_preopen module to hide fs latencies. + + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + + Fix a valgrind error / segfault in dns_register_smbd(). + + Fix build on SLES8. + + Decremented by 1 for ntcancel requests. + + Fix creation of core files. + + Fix first mapping of uids/gids in Winbind. + + Initialize the id_map status in idmap_ldap to avoid surprise. + + Fix initialization of idmap status. +* Tue Mar 10 2009 lmuelle@suse.de +- Only call '%%find_lang pam_winbind' in the samba spec file, not samba-doc. * Thu Mar 05 2009 ro@suse.de - Ignore return value from subshell to fix build. * Wed Feb 25 2009 boyang@suse.de - Make libsmbclient work with DFS, backported from 3.3; (bnc#475995). +* Tue Feb 24 2009 lmuelle@suse.de +- Update to 3.3.1. + + Fix net ads join when "ldap ssl = start tls" (bug #6073). + + Fix renaming/deleting of files using Windows clients (bug #6082). + + Fix renaming/deleting a "not matching/resolving" symlink (bug #6090). + + Fix remotely adding a share via the Windows MMC. + + BUG 6082: Fix renaming/deleting of files using Windows clients. + + BUG 6069: Fix build with too many arguments. + + BUG 6090: Fix renaming/deleting a "not matching/resolving" symlink. + + BUG 6099: Try to fix domain join of Win7 Beta. + + BUG 6117: Fix core dump of pdbedit -a. + + BUG 6133: Fix deletion of non-ACL files on Solaris/ZFS/NFSv4 ACL + filesystem. + + Fix Coverity IDs 115, 116, 117, 602. + + Fix warning (bad handler prototype). + + Unify the detection of the timespec code in configure.in, and the + application of it in time.c. + + Correctly use chroot(). + + Parameterize in local.h the MAX_RPC_DATA_SIZE, and ensure that "offered" + read from the rpc packet in spoolss is under that size. + + Backport the semantics of when to delete alternate data streams on a file + truncate. + + Fix printf warnings. + + BUG 6073: Prevent ads_connect() from using SSL unless explicitly + requested. + + Fix 'getent passwd' to allocate new uids. + + Fix 'getent group' to allocate new gids. + + Remove check for sharename being a username in 'net conf addshare'. + + Fix Coverity ID 848. + + Remove unused ENUM_HND from 'net'. + + Fix getform command asprintf return code in rpcclient. + + Fix memleak in get_remote_printer_publishing_data(). + + Remove duplicate prototypes for generated rpc server functions. + + Enable total anonymization in vfs_smb_traffic_analyzer. + + Fix build with external dns_sd libraries. + + Fix configure check "sub-second timestamps without struct timespec". + + Use correct BSD evironment variable. + + Don't try and delete a default ACL from a file. + + BUG 5798: CFLAGS info lost in configure. + + Fix Coverity IDs 740, 742, 744, 745, 876, 879, 880. + + Fix remotely adding a share via the Windows MMC. + + Avoid valgrind errors. + + Fix 'net rpc join' for users with the SeMachineAccountPrivilege. + + Fix resume handle for _samr_EnumDomainGroups. + + Fix a buffer handling bug when adding lots of registry keys. + + Fix a O(n^2) algorithm in regdb_fetch_keys(). + + Initialize rc to 0 in main in mount.cifs. + + BUG 6069: Add a fstatvfs function for libsmbclient. + + Eliminate compiler warnings. + + Don't miss an absolute pathname as a kerberos keytab path. + + BUG 6100: Implement _netr_LogonGetCapabilities() with + NT_STATUS_NOT_IMPLEMENTED. + + Make Samba work with older ctdb versions. + + Add S-1-22-X-Y sids to the local token. + + Conditional install of the cifs.upcall man page. + + Adjust regex to match variable names including underscores. + + BUG 4370: Clean-up entries in /etc/mtab after unmount. + + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + + Fix a crash during name resolution. + + Fix "assignment discards qualifiers from pointer target type" warnings. + + Fix SMB_VFS_RECVFILE/SENDFILE macros. + + Change "ldap ssl:ads" parameter to "ldap ssl ads". + + Add manpages for vfs_acl_xattr and vfs_acl_tdb. + + Fix double free caused by incorrect talloc_steal usage. + + Build ldbrename. + + Make nmbd check all available interfaces for WINS before failing. + + Fix compilation of vfs_default on systems that do not support utimes(). + + BUG 5920: Fix the calculation of the memcpy length. + + BUG 6098: Fix ads_find_dc() in setups with "security = domain". + + Make libsmbclient work with DFS. * Mon Feb 23 2009 hhetter@suse.de - Define init_samba_module in all samba-vscan modules; (bnc#469218). +* Sat Feb 21 2009 lmuelle@suse.de +- Add GPLv3 header to all init scripts; (bnc#459766). * Mon Feb 09 2009 jmcdonough@suse.de - Revert accidental partial strict allocate upstream commit * Sun Feb 08 2009 jmcdonough@suse.de @@ -1759,12 +2037,45 @@ exit 0 - Replace cifs.upcall Makefile patches by the upstream version. * Wed Jan 28 2009 lmuelle@suse.de - Only add ccache to BuildRequires if it is used. +* Tue Jan 27 2009 lmuelle@suse.de +- Update to 3.3.0. + + The passdb tdbsam version has been raised. + + Splitting of library directory into library directory and separate modules + directory. + + The default value of "ldap ssl" has been changed to "start tls". + + Extended Cluster support. + + New experimental VFS modules "vfs_acl_xattr" and "vfs_acl_tdb" to store + NTFS ACLs on Samba file servers. + + Simplified idmap configuration. + + New idmap backends "adex" and "hash". + + Added new parameter "winbind reconnect delay". + + Added support for user and group aliasing. + + Added support for multiple domains to idmap_ad. + + The destination "all" of smbcontrol does now affect all running daemons + including nmbd and winbindd. + + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands. + + The 'net' utility can now use kerberos for joining and authentication. + + The 'wbinfo' utility can now add, modify and remove identity mapping + entries. + + NetApi library implements various new calls for User- and Group Account + Management. + + libsmbclient does now determine case sensitivity based on file system + attributes. * Fri Jan 23 2009 anschneider@suse.de - Replace all chkconfig calls with rc_active calls to improve performance during boot. * Fri Jan 23 2009 anschneider@suse.de - Add SuSEfirewall2 service config file to allow samba browsing on post-10.2 systems; (bnc#460902). +* Tue Jan 20 2009 lmuelle@suse.de +- Update to 3.0.34. + + Fix update of machine account passwords. + + Fix SMB signing issue on Windows Vista with MS Hotfix KB955302. + + Fix Winbind crashes. + + Correctly detect if the current dc is the closest one. + + Add saf_join_store() function to memorize the dc used at join time. This + avoids problems caused by replication delays shortly after domain joins. + + Fix write list in setups using "security = share". * Wed Jan 07 2009 olh@suse.de - Obsolete old -XXbit packages; (bnc#437293). * Mon Jan 05 2009 lmuelle@suse.de @@ -1778,11 +2089,28 @@ exit 0 - Fix nmbstatus dipslay when workgroup parameter is given; (bnc#459785). * Thu Dec 25 2008 boyang@suse.de - Fix Mounting failure when there is white spaces in service; (bnc#460793). +* Mon Dec 15 2008 anschneider@suse.de +- Update to 3.3.0rc2. + + Splitting of library directory into library directory and separate + modules directory. + + Extended Cluster support. + + Simplified idmap configuration. + + New idmap backends "adex" and "hash". + + Added new parameter "winbind reconnect delay". + + Added support for user and group aliasing. + + Added support for multiple domains to idmap_ad. + + The destination "all" of smbcontrol does now affect all running + daemons including nmbd and winbindd. + + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands. + + The 'net' utility can now use kerberos for joining and authentication. + + The 'wbinfo' utility can now add, modify and remove identity mapping entries. + + NetApi library implements various new calls for User- and Group + Account Management. * Fri Dec 12 2008 lmuelle@suse.de - Fix all remaining conditional macro calls; (bnc#456469). * Fri Dec 12 2008 anschneider@suse.de - Add IPv6 support for mount.cifs. -* Wed Dec 10 2008 lmuelle@suse.de +* Thu Dec 11 2008 lmuelle@suse.de - Update to 3.2.6. + Fix potential segfault in vfs_tsmsm. + Don't list the domain twice when expanding internal aliases. @@ -1889,6 +2217,24 @@ exit 0 * Wed Dec 03 2008 anschneider@suse.de - Use %%__install macro to install files with the right permissions instead of cp. +* Mon Dec 01 2008 anschneider@suse.de +- Update to 3.3.0rc1. + + Splitting of library directory into library directory and separate + modules directory. + + Extended Cluster support. + + Simplified idmap configuration. + + New idmap backends "adex" and "hash". + + Added new parameter "winbind reconnect delay". + + Added support for user and group aliasing. + + The destination "all" of smbcontrol does now affect all running + daemons including nmbd and winbindd. + + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands. + + The 'net' utility can now use kerberos for joining and authentication. + + The 'wbinfo' utility can now add, modify and remove identity mapping + entries. + + NetApi library implements various new calls for User- and Group + Account Management. +- Added German translation for pam_winbind. * Mon Dec 01 2008 boyang@suse.de - Remove patch for bnc#336854, which doesn't exist in 3.2.x or higher. * Mon Dec 01 2008 lmuelle@suse.de @@ -1928,6 +2274,8 @@ exit 0 * Thu Oct 16 2008 anschneider@suse.de - Move the nss_info modules to the samba-winbind package. * Thu Oct 16 2008 anschneider@suse.de +- Activate the idmap backends "adex" and "hash". +* Thu Oct 16 2008 anschneider@suse.de - Add version branding for CODE 11. * Wed Oct 15 2008 anschneider@suse.de - Restart smbfs even with the traditional network setup; (bnc#425058). @@ -1942,63 +2290,93 @@ exit 0 * Fri Oct 03 2008 lmuelle@suse.de - Introduce NET_CFGDIR to fit the needs for a differing location of the network configuration per vendor. -* Thu Oct 02 2008 lmuelle@suse.de +* Fri Oct 03 2008 lmuelle@suse.de - Use path macros for cp, mkdir, mv, rm, and grep. * Thu Oct 02 2008 lmuelle@suse.de - Only use SUSE rpm macros and SuSEconfig.permissions if available. +* Thu Oct 02 2008 lmuelle@suse.de +- Update to 3.3.0pre2. + + BUG 5729: Explicitly allow "-valid". + + BUG 5737: Fix winbindd crash in an unusual failure mode. + + BUG 5751: Fix showing of ACLs on DFS in (lib)smbclient. + + BUG 5762: Fix opening of mangled directory name (resulted 'is a stream + name'). + + BUG 5783: Fix FindFirst where search pattern == mangled filename. + + BUG 5790: Fix returning of STATUS_OBJECT_NAME_NOT_FOUND on set file + disposition. + + BUG 5797: Fix moving of readonly files. + + Fix crashes when looking up a non-existant uid. + + Fix getting/setting of NT ACLs on a file. + + Fix the wcache_invalidate_samlogon calls. + + Clarify usage of "force create mode". + + Get smbd to look (read-only) into the winbindd cache for uid/gid <--> sid + mappings. + + Write times code update. + + Add experimental version of VFS module acl_xattr. + + Fix rename_open_files. + + Make SMB traffic analyzer VFS module more efficient. + + Fix segfault when calling nss_get_info() with a NULL ads structure. + + Add support for name aliasing in Winbind. + + Add the idmap/nss-info provider from Likewise Open. + + Allow an admin to define the "uid" attribute for a RFC2307 user object in + AD to be the username alias. + + Add new idmap backend "adex" to support RFC2307 enabled AD forests. + + Add new idmap backend "hash". + + Fix build warnings. + + Cleanup of DC enumeration in get_dcs(). + + BUG 5710: Fix changing of machine account passwords. + + BUG 5784: Fix pam_winbind build issue on Solaris. + + Fix invalid sid copy (hit when enumerating sibling domains) in Winbind. + + Fix double installation of cifs.upcall. + + Add change-user-password command to wbinfo. + + Fix segfault in _srvsvc_NetShareAdd. + + BUG 5736: Fix Winbind crash bug with trusted domains. + + Correct the netsamlogon_clear_cached_user function. + + Add new VFS module to analyze SMB traffic to record write and read + operations on the Samba server. + + Fix build warnings in cifs.upcall. + + BUG 5707: Do proper error handling if the socket is closed. + + BUG 5778: Don't define 'strlcat' and 'strlcpy' if it's already defined. + + Fix Coverity IDs 587 and 589. + + Increase the default positive idmap cache time to a week. + + Fix calculation of useable_space for trans2 and nttrans replies. + + Add mapping of generic bits when setting an NFSv4 ACL. + + Some write time fixes. + + Add new parameter "cups connection timeout". + + Fix enumeration of nested group memberships in Winbind. This affected + only setups using "security = ads". + + Fix cut and paste error in quota code. + + Fix display of POSIX ACLs. + + Fix permissions of group_mapping.ldb (CVE-2008-3789). + + Avoid a race condition in glibc between AIO and setresuid(). + + Add missing become root for AIO operations. + + Fix an errno handling bug that could lead to an infinite loop. + + Fix logic of tsmsm_sendfile(). + + Fix handling of arbitrary new PAC types. + + Fix segfault on startup with trusted domains. + + Fix segfault on the CTDB destructor code. + + Re-add "winbind:ignore domains". + + BUG 5609: Remove configure option "--with-libdir" and add + "--with-modulesdir". + + Extend "net rpc vampire keytab" to support differential replication and + storing of kerberos keys. + + Rework internal logic of registry tdb code. + + Freeze autogenerated prototype headers (good bye "make proto"). + + Add new "winbind reconnect delay" parameter. + + Make the change to smbcontrol for "all" to mean broadcast, and "smbd" to + mean the main smb daemon. + + Allow an admin to define the "uid" attribute for a RFC2307 user object in + AD to be the username alias. + + Add "net rpc vampire keytab" and "net rpc vampire ldif". + + Rework of the Winbind idmap backend. +* Wed Oct 01 2008 lmuelle@suse.de +- Define PAM_AUTHTOK_RECOVERY_ERR when not available on older Linux products. * Mon Sep 29 2008 lmuelle@suse.de - Adopt samba-vscan to build after the change to the bool type define. -* Thu Sep 25 2008 tlaxmeshwar@novell.com -- Fix winbindd crash in an unusual failure mode; (bnc#416598). * Mon Sep 22 2008 lmuelle@suse.de - Build cifs.upcall for CentOS 5, Fedora 8 and RHEL 5 and newer too. * Sat Sep 20 2008 lmuelle@suse.de - Call mkinitrd_setup during %%post and %%postun for post-9.2 systems only. -* Sat Sep 20 2008 lmuelle@suse.de -- Update to 3.2.4. - + BUG 5590: Fix binary stripping on older OS. - + Fix linking of cifs.upcall when nscd_flush_cache() is found. - + BUG 5052: Allow inheritable permissions. - + BUG 5697: Fix spinning of nmbd in reload_interfaces when only loopback has - an IPv4 address. - + BUG 5698: Fix non guest connections to shares when "security = share" is - used. - + BUG 5729: Explicitly allow "-valid". - + BUG 5745: Fix Kerberos authentication with (lib)smbclient. - + BUG 5751: Fix showing of ACLs on DFS in (lib)smbclient. - + BUG 5761: Fix opening of mangled directory name (resulted 'is a stream - name'). - + Fix the wcache_invalidate_samlogon calls. - + Clarify usage of "force create mode". - + Write times code update. - + Fix Winbind crash. - + idmap_ad: Fix a segfault when calling nss_get_info() with a NULL ads - structure. - + Fix build warnings. - + Cleanup of DC enumeration in get_dcs(). - + BUG 5710: Fix changing of machine account passwords. - + Fix several build warnings. - + Fix invalid sid copy (hit when enumerating sibling domains) in Winbind. - + BUG 5736: Fix Winbind crash bug with trusted domains. - + Correct the netsamlogon_clear_cached_user function. - + Fix handling of MSKRB5 OID in cifs.upcall. - + Fix build warnings in cifs.upcall. - + Change default install location of cifs.upcall to EPREFIX/sbin. - + Enable building of cifs.upcall by default on Linux. - + BUG 5707: Do proper error handling if the socket is closed. - + Fix calculation of useable_space for trans2 and nttrans replies. - + Fix Coverity ID 587. - + Add mapping of generic bits when setting an NFSv4 ACL. - + Some write time fixes. - + BUG 4516: No IPv6 on Solaris 2.6. - + BUG 5571: Fix group memeberships in Winbind. - + Fix cut and paste error in quota code. - + Fix display of POSIX ACLs. - + Avoid a race condition in glibc between AIO and setresuid(). - + Add missing become root for AIO operations. - + Fix logic of tsmsm_sendfile(). - + Fix an errno handling bug that could lead to an infinite loop. - + Fix handling of arbitrary new PAC types. * Thu Sep 18 2008 anschneider@suse.de - Create a link to the html manpages so that they can be accesses in swat; (bnc#426182). @@ -2008,9 +2386,15 @@ exit 0 - Call mkinitrd_setup during %%post and %%postun for package cifs-mount; (bnc#413709). * Wed Aug 27 2008 lmuelle@suse.de -- Update to 3.2.3. - + Force the permissions on group_mapping.ldb to 0600; CVE-2008-3789; - (bnc#420634). +- Update to 3.3.0pre1. + + Splitting of library directory into library directory and separate modules + directory. + + Extended Cluster support. + + Simplyfied idmap configuration. + + Added new parameter "winbind reconnect delay". + + The destination "all" of smbcontrol does now affect all running daemons + including nmbd and winbindd. + + New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands. * Tue Aug 19 2008 lmuelle@suse.de - Update to 3.2.2. + BUG 5592: Fix creation and installation of shared libraries. @@ -2352,9 +2736,6 @@ exit 0 retrieved. + Fix alignment bug when marshalling printer data replies. + Fix DeleteDriverDriverEx() checks to prevent removing in use files. -* Tue May 20 2008 hhetter@suse.de -- Prevent errors during the cache validation when ua keys reach a size larger - than 1024; [bnc#372558]. * Sat May 17 2008 lmuelle@suse.de - Expand baselibs.conf to match pre SUSE 11.0 products. * Fri May 16 2008 lmuelle@suse.de @@ -2366,7 +2747,7 @@ exit 0 * Fri May 16 2008 hhetter@suse.de - Prevent errors during the cache validation when ua keys reach a size larger than 1024; [bnc#372558]. -* Wed May 14 2008 lmuelle@suse.de +* Thu May 15 2008 lmuelle@suse.de - Package man page files independent of the used compression method (gz,lzma). * Wed May 14 2008 lmuelle@suse.de - Rewrite spec file to build packages for Fedora, Redhat, CentOS, and Mandriva @@ -2580,7 +2961,7 @@ exit 0 variables; [#253862c223]. * Fri Oct 05 2007 jmcdonough@suse.de - Use FQDN in KDC DNS lookup; [#295284]. -* Wed Oct 03 2007 lmuelle@suse.de +* Thu Oct 04 2007 lmuelle@suse.de - Update to 3.2.0pre1. + Use of IDL generated parsing layer for several DCE/RPC interfaces. + Removal of the 1024 byte limit on pathnames and 256 byte limit on filename @@ -2605,7 +2986,7 @@ exit 0 - Make nss_winbind thread-safe; [#293907, #329796]. * Wed Oct 03 2007 jmcdonough@suse.de - Perform KDC lookup using DNS only; [#295284]. -* Wed Sep 26 2007 anschneider@suse.de +* Thu Sep 27 2007 anschneider@suse.de - Handle smb child crash; [#294895]. * Wed Sep 26 2007 lmuelle@suse.de - Add a global lock inside nss_winbind as workaround; [#293907]. @@ -2797,7 +3178,7 @@ exit 0 - Add gdbm-devel BuildRequires for post 10.2 systems. * Mon Mar 26 2007 lmuelle@suse.de - Remove setlocale(LC_ALL, "C") calls; bso [#2926], [#247728]. -* Sat Mar 17 2007 lmuelle@suse.de +* Sun Mar 18 2007 lmuelle@suse.de - Fix segfault and memleak in wb_lookup_rids(); bso [#4434]. * Mon Mar 05 2007 lmuelle@suse.de - Fixes a known bottleneck under very high load situations; [#247984]. @@ -3002,7 +3383,7 @@ exit 0 - Add 'usershare allow guests = Yes' to the default config; [#144787]. * Fri Jun 16 2006 schwab@suse.de - Fix syntax error in configure script. -* Thu Jun 15 2006 gd@suse.de +* Fri Jun 16 2006 gd@suse.de - Add CHANGEPW kpasswd fallback to TCP; [#184945]. * Tue Jun 13 2006 lmuelle@suse.de - Update to 3.0.23rc2. @@ -3129,7 +3510,7 @@ exit 0 heimdal specific patches are not applied. - Start nmbd in /etc/sysconfig/network/scripts/samba-winbindd if the service is enabled before we switch winbindd online. -* Fri Feb 24 2006 lmuelle@suse.de +* Sat Feb 25 2006 lmuelle@suse.de - Only use absolute paths for the targets of sym links. - Add a comment to the smbusers file that we are not using it in our default configuration; [#153370]. @@ -3148,7 +3529,7 @@ exit 0 also replace any %%run_ldconfig by /sbin/ldconfig; add PreReq /sbin/ldconfig. * Mon Feb 20 2006 lmuelle@suse.de - Update to 3.0.21c from svn.Samba.org SAMBA_3_0_RELEASE tree. -* Thu Feb 16 2006 lmuelle@suse.de +* Fri Feb 17 2006 lmuelle@suse.de - Replace swat-welcome.diff by the upstream version; [#63160], bso [#2278]. - Replace pdbedit-pw-stdin.diff by the upstream version; bso [#1386]. - Add winbind offline config template; fate [#300457]. @@ -3174,7 +3555,7 @@ exit 0 - Remove /var/spool/samba from the filelist. - No longer ignore NetworkManager controlled interfaces in dhcpcd-hook-samba. - No longer call netbios_setup() if we source dhcpcd-hook-samba-functions. -* Thu Feb 02 2006 lmuelle@suse.de +* Fri Feb 03 2006 lmuelle@suse.de - Add missing \ to the dhcpcd-hook-samba-functions. - Change password character to '*' in NSS replies. - Fix online/offline message handling for winbindd. @@ -3219,7 +3600,7 @@ exit 0 Else winbindd might seg fault. - Fix crash bug in the idmap winbindd child. - Add PAM conversation for disallowed password change. -* Sat Jan 14 2006 lmuelle@suse.de +* Sun Jan 15 2006 lmuelle@suse.de - Remove idmap_ prefix from any idmap backend config setting; bso [#3264]. - Add net usershare command to manipulate user shares from trunk of samba.org. - Align suse/samba3-pam_winbind patch with trunk of samba.org. @@ -3250,7 +3631,7 @@ exit 0 * Tue Nov 29 2005 lmuelle@suse.de - Ensure to be root while calling pdb_search_destroy(); else we don't have enough permissions to do the last paged LDAP search. -* Wed Nov 23 2005 lmuelle@suse.de +* Thu Nov 24 2005 lmuelle@suse.de - Store "sambaLogonHours" in GMT and display them in localtime; bso [#3187] - Update to ldapsmb 1.34. - Cache the results more agressivly to stop multiple LDAP searches; bnc @@ -3320,7 +3701,7 @@ exit 0 * Thu Aug 18 2005 lmuelle@suse.de - Fix assembling of the filepath in vscan-icap; [#105582]. - Fix typo in vscan-mcdaemon; [#102372]. -* Tue Aug 09 2005 lmuelle@suse.de +* Wed Aug 10 2005 lmuelle@suse.de - Update to 3.0.20rc2. * Tue Aug 09 2005 lmuelle@suse.de - Enable vscan filetype support for post 9.0 systems as SLES 9 SP 2 provides @@ -3337,7 +3718,7 @@ exit 0 - Update to ldapsmb 1.32. * Wed Jul 13 2005 lmuelle@suse.de - Update to 3.0.20pre2. -* Tue Jun 28 2005 lmuelle@suse.de +* Wed Jun 29 2005 lmuelle@suse.de - Update to 3.0.20pre1. * Mon Jun 20 2005 lmuelle@suse.de - Add more post 3.0.14a fixes; bugzilla.Samba.org [#2729, #2698]. @@ -3377,7 +3758,7 @@ exit 0 bugzilla.Samba.org [#2501]. * Fri Mar 18 2005 lmuelle@suse.de - Update to version 3.0.12. -* Sun Mar 13 2005 lmuelle@suse.de +* Mon Mar 14 2005 lmuelle@suse.de - Ensure to package smbfstab with limited access permissions. - Add additional Provides and Obsoletes and add %%version-%%release to the Provides tags. @@ -3452,7 +3833,7 @@ exit 0 functionality. - Move doc subpackage %%preun to %%postun and change sym link only if first arg is less than 1 as only this situation is a deinstallation case. -* Thu Nov 11 2004 lmuelle@suse.de +* Fri Nov 12 2004 lmuelle@suse.de - Fix seg fault in lanman printing code. - Fix testparm reporting for the passwd program string. - Add welcome.html also as %%ghost to the samba-doc package and remove rm from @@ -3699,7 +4080,7 @@ exit 0 - add big patch collected from the CVS; [#36602] - add sambaxp and sambaxp-client to the provides and obsoletes tag - spec file cleanup -* Tue Feb 24 2004 gd@suse.de +* Wed Feb 25 2004 gd@suse.de - readd nmbstatus, mkntpwd, ldap-schema and cups-smb-backend * Sun Feb 22 2004 gd@suse.de - disable build of utils-package @@ -3908,7 +4289,7 @@ exit 0 - check existence of brlock and locking tdb, #18978 - include tdbdump, tdbtest, tdbtool, tdbtorture - change smb and winbind init script, #18784 -* Mon Sep 02 2002 lmuelle@suse.de +* Tue Sep 03 2002 lmuelle@suse.de - let SuSEconfig.samba use correct lib subdirectory, #18730 - include printing patch for 2.2.5 from Samba team - let smb and winbind init script also recognize daemons started before @@ -3932,7 +4313,7 @@ exit 0 * Tue Aug 20 2002 lmuelle@suse.de - add missing PreReq to samba and samba-client, #17979, #17980 - fix status of smbfs init script, #9092 -* Mon Aug 19 2002 lmuelle@suse.de +* Tue Aug 20 2002 lmuelle@suse.de - fix path to temp file in %%post of samba - fix %%post of samba-client, rename sysconfig.samba to sysconfig.samba-samba-client diff --git a/vendor-files.tar.bz2 b/vendor-files.tar.bz2 index 3d78045..66e720f 100644 --- a/vendor-files.tar.bz2 +++ b/vendor-files.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:ef04d402ca3ecab7578305c32e05383ce66bce7968b759c75a15e27fac8ab261 -size 23209 +oid sha256:b594672aa69fe879710ad15157e3b7fd0a9b49b4a51d49651caa223f50f5d349 +size 23504