Accepting request 728062 from network:samba:STABLE

OBS-URL: https://build.opensuse.org/request/show/728062
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=250

samba-4.10.5+git.105.2bd98587873.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:381473531074f9c49f0f5726aa01ae29aa94c09ca36e574694ee800ea498147e
-size 24835880

samba-4.10.8+git.124.a2010fbd0de.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b716f6eef051606f58c53464b74653c227cecf6db4defd88cdf1c46cc7178c51
+size 24871448

samba.changes

@@ -1,3 +1,109 @@
+-------------------------------------------------------------------
+Tue Sep  3 09:18:38 UTC 2019 - Samuel Cabrero <scabrero@suse.de>
+
+- Update to samba 4.10.8
+  + CVE-2019-10197: user escape from share path definition;
+    (bso#14035); (bsc#1141267);
+
+-------------------------------------------------------------------
+Fri Aug 30 13:10:01 UTC 2019 - Noel Power <nopower@suse.com>
+
+- Fix build on newer systems by modifying samba.spec to use
+  consistent non-relative paths for pammodules in configure line
+  and specification of pam_winbind.so library to package.
+
+-------------------------------------------------------------------
+Tue Aug 27 14:47:44 UTC 2019 - Noel Power <nopower@suse.com>
+
+- Update to samba 4.10.7
+  + Unable to create or rename file/directory inside shares
+    configured with vfs_glusterfs_fuse module; (bso#14010).
+  + build: Allow build when '--disable-gnutls' is set; (bso#13844)
+  + samba-tool: Add 'import samba.drs_utils' to fsmo.py;
+    (bso#13973).
+  + Fix 'Error 32 determining PSOs in system' message on old DB
+    with FL upgrade; (bso#14008).
+  + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021)
+  + join: Use a specific attribute order for the DsAddEntry
+    nTDSDSA object; (bso#14046).
+  + vfs_catia: Pass stat info to synthetic_smb_fname();
+    (bso#14015).
+  + lookup_name: Allow own domain lookup when flags == 0;
+    (bso#14091).
+  + s4 librpc rpc pyrpc: Ensure tevent_context deleted last;
+    (bso#13932).
+  + DEBUGC and DEBUGADDC doesn't print into a class specific log
+    file; (bso#13915).
+  + Request to keep deprecated option "server schannel",
+    VMWare Quickprep requires "auto"; (bso#13949).
+  + dbcheck: Fallback to the default tombstoneLifetime of 180 days;
+    (bso#13967).
+  + dnsProperty fails to decode values from older Windows versions;
+    (bso#13969).
+  + samba-tool: Use only one LDAP modify for dns partition fsmo
+    role transfer; (bso#13973).
+  + third_party: Update waf to version 2.0.17; (bso#13960).
+  + netcmd: Allow 'drs replicate --local' to create partitions;
+    (bso#14051).
+  + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).
+
+-------------------------------------------------------------------
+Wed Aug  7 13:03:55 UTC 2019 - npower <nopower@suse.com>
+
+- Prepare for use future use of kernel keyrings, modify
+  /etc/pam.d/samba to include  pam_keyinit.so; (bsc#1144059).
+
+-------------------------------------------------------------------
+Thu Aug  1 10:00:00 UTC 2019 - Samuel Cabrero <scabrero@suse.de>
+
+- Update samba-winbind script to work with systemd; (bsc#1132739);
+- Drop samba dhcpcd hook scripts
+- Update to samba 4.10.6
+  + s3: winbind: Fix crash when invoking winbind idmap scripts;
+    (bso#13956).
+  + smbd does not correctly parse arguments passed to dfree and quota
+    scripts; (bso#13964).
+  + samba-tool dns: use bytes for inet_ntop; (bso#13965).
+  + samba-tool domain provision: Fix --interactive module in python3;
+    (bso#13828).
+  + ldb_kv: Skip @ records early in a search full scan; (bso#13893).
+  + docs: Improve documentation of "lanman auth" and "ntlm auth"
+    connection; (bso#13981).
+  + python/ntacls: Use correct "state directory" smb.conf option instead
+    of "state dir"; (bso#14002).
+  + registry: Add a missing include; (bso#13840).
+  + Fix SMB guest authentication; (bso#13944).
+  + AppleDouble conversion breaks Resourceforks; (bso#13958).
+  + vfs_fruit makes direct use of syscalls like mmap() and pread();
+    (bso#13968).
+  + s3:mdssvc: Fix flex compilation error; (bso#13987).
+  + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872).
+  + dsdb:samdb: schemainfo update with relax control; (bso#13799).
+  + s3:util: Move static file_pload() function to lib/util; (bso#13964).
+  + smbd: Fix a panic; (bso#13957).
+  + ldap server: Generate correct referral schemes; (bso#12478).
+  + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value;
+    (bso#13941).
+  + s4 dsdb: Fix use after free in samldb_rename_search_base_callback;
+    (bso#13942).
+  + dsdb/repl: we need to replicate the whole schema before we can apply it;
+    (bso#12204).
+  + ldb: Release ldb 1.5.5; (bso#12478).
+  + Schema replication fails if link crosses chunk boundary backwards;
+    (bso#13713).
+  + 'samba-tool domain schemaupgrade' uses relax control and skips the
+    schemaInfo update provision; (bso#13799).
+  + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)]
+    ..."; (bso#13916).
+  + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to
+    get the ACL; (bso#13917).
+  + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary;
+    (bso#13947).
+  + Using Kerberos credentials to print using spoolss doesn't work;
+    (bso#13939).
+  + wafsamba: Use native waf timer; (bso#13998).
+  + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).
+
 -------------------------------------------------------------------
 Wed Jun 19 09:20:12 UTC 2019 - Noel Power <nopower@suse.com>
 

samba.spec

@@ -60,7 +60,7 @@
 %define talloc_version 2.1.16
 %define tevent_version 0.9.39
 %define tdb_version    1.3.18
-%define ldb_version    1.5.4
+%define ldb_version    1.5.5
 
 %global with_mitkrb5 1
 %global with_dc 0
@@ -170,7 +170,7 @@ BuildRequires:  libtasn1-devel >= 3.8
 %else
 %define	build_make_smp_mflags %{?jobs:-j%jobs}
 %endif
-Version:        4.10.5+git.105.2bd98587873
+Version:        4.10.8+git.124.a2010fbd0de
 Release:        0
 Url:            https://www.samba.org/
 Obsoletes:      samba-32bit < %{version}
@@ -1030,7 +1030,7 @@ CONFIGURE_OPTIONS="\
 	--enable-ceph-reclock \
 %endif
 	--with-pam \
-	--with-pammodulesdir=%{_lib}/security \
+	--with-pammodulesdir=/%{_lib}/security \
 	--with-piddir=%{PIDDIR} \
 	--with-relro \
 %if 0%{?suse_version} > 1220
@@ -1216,7 +1216,7 @@ install -m 0644 config/samba.reg %{buildroot}/%{_sysconfdir}/slp.reg.d/samba.reg
 install -m 0644 config/samba.pamd-common %{buildroot}/%{_sysconfdir}/pam.d/samba
 install -m 0644 config/dhcp.conf %{buildroot}/%{_fillupdir}/samba-client-dhcp.conf
 install -m 0644 config/sysconfig.dhcp-samba-client %{buildroot}/%{_fillupdir}/sysconfig.dhcp-samba-client
-for script in dhcpcd-hook-samba dhcpcd-hook-samba-functions samba-winbindd; do
+for script in samba-winbindd; do
 	install -m 0755 "tools/${script}" "%{buildroot}/%{_sysconfdir}/sysconfig/%{NET_CFGDIR}/scripts/${script}"
 done
 %if 0%{?suse_version} < 1221
@@ -1229,7 +1229,7 @@ done
 %endif
 %endif
 # Create ghosts for the symlinks
-for script in 21-dhcpcd-hook-samba 55-samba-winbindd; do
+for script in 55-samba-winbindd; do
 	touch %{buildroot}/%{_sysconfdir}/sysconfig/%{NET_CFGDIR}/if-{down,up}.d/${script}
 done
 %if 0%{?suse_version} < 1221
@@ -1422,31 +1422,23 @@ fi
 
 %post client
 /sbin/ldconfig
+%if 0%{?suse_version} < 1221
 if [ ${1:-0} -eq 1 ]; then
-# Only insserv cifs if we're not in update mode.
 %if 0%{?suse_version} < 1131
+# Only insserv cifs if we're not in update mode.
 %{?insserv_force_if_yast:%{insserv_force_if_yast %{cifs_init_script}}}
 %endif
-	ln -fs %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/scripts/dhcpcd-hook-samba %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/if-down.d/21-dhcpcd-hook-samba
-	ln -fs %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/scripts/dhcpcd-hook-samba %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/if-up.d/21-dhcpcd-hook-samba
-%if 0%{?suse_version} < 1221
 	ln -fs %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/scripts/%{cifs_init_script} %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/if-down.d/21-%{cifs_init_script}
 	ln -fs %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/scripts/%{cifs_init_script} %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/if-up.d/21-%{cifs_init_script}
-%endif
 else
 	for if_case in if-down.d if-up.d; do
-		test -h %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/${if_case}/dhcpcd-hook-samba || \
-			continue
-		rm -f %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/${if_case}/dhcpcd-hook-samba
-		ln -fs %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/scripts/dhcpcd-hook-samba %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/${if_case}/21-dhcpcd-hook-samba
-%if 0%{?suse_version} < 1221
 		test -h %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/${if_case}/%{cifs_init_script} || \
 			continue
 		rm -f %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/${if_case}/%{cifs_init_script}
 		ln -fs %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/scripts/%{cifs_init_script} %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/${if_case}/21-%{cifs_init_script}
-%endif
 	done
 fi
+%endif
 for fn in MACHINE.SID idmap2.tdb idmap_test.tdb netlogon_creds_cli.tdb passdb.tdb secrets.tdb smbpasswd; do
 	test ! -e %{LOCKDIR}/private/$fn && test -e %{CONFIGDIR}/$fn && \
 		mv %{CONFIGDIR}/$fn %{LOCKDIR}/private/
@@ -1713,10 +1705,6 @@ exit 0
 %dir %{_sysconfdir}/openldap
 %dir %{_sysconfdir}/openldap/schema
 %attr(0444,root,root) %config %{_sysconfdir}/openldap/schema/samba3.schema
-%ghost %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/if-down.d/21-dhcpcd-hook-samba
-%ghost %{_sysconfdir}/sysconfig/%{NET_CFGDIR}/if-up.d/21-dhcpcd-hook-samba
-%{_sysconfdir}/sysconfig/%{NET_CFGDIR}/scripts/dhcpcd-hook-samba
-%{_sysconfdir}/sysconfig/%{NET_CFGDIR}/scripts/dhcpcd-hook-samba-functions
 %if 0%{?suse_version} > 1100
 %{_sysconfdir}/sysconfig/SuSEfirewall2.d/services/samba-client
 %endif