Commit Graph

591 Commits

Author SHA256 Message Date
Stephan Kulow
944390dcdb Accepting request 225717 from network:samba:STABLE
- Depend only on %version with all manual Provides and Requires; (bnc#844307).

- Update to 4.1.6.
  + Password lockout not enforced for SAMR password changes; CVE-2013-4496;
    (bnc#849224).
  + smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442;
    (bnc#855866).

- Password lockout not enforced for SAMR password changes;
  CVE-2013-4496; (bnc#849224).

- Call update-apparmor-samba-profile via ExecStartPre too; (bnc#867665).

- samba4 smbcalcs --chown | --chgrp dacl regression; CVE-2013-6442;
  (bnc#855866).

- Retry named pipe open requests on STATUS_PIPE_NOT_AVAILABLE; (bso#10484);
  (bnc#865095).

OBS-URL: https://build.opensuse.org/request/show/225717
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=155
2014-03-18 12:38:15 +00:00
Lars Müller
507561ca29 Depend only on %version with all manual Provides and Requires; (bnc#844307).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=392
2014-03-12 14:06:12 +00:00
Lars Müller
9ec2a5755d - Update to 4.1.6.
+ Password lockout not enforced for SAMR password changes; CVE-2013-4496;
    (bnc#849224).
  + smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442;
    (bnc#855866).

- Password lockout not enforced for SAMR password changes;
  CVE-2013-4496; (bnc#849224).

- Call update-apparmor-samba-profile via ExecStartPre too; (bnc#867665).

- samba4 smbcalcs --chown | --chgrp dacl regression; CVE-2013-6442;
  (bnc#855866).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=391
2014-03-11 18:36:52 +00:00
David Disseldorp
3699ac9aab - Retry named pipe open requests on STATUS_PIPE_NOT_AVAILABLE; (bso#10484);
(bnc#865095).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=390
2014-03-04 18:38:01 +00:00
Stephan Kulow
f5c8c27b48 Accepting request 224138 from network:samba:STABLE
- Propagate snapshot enumeration permissions errors to SMB clients;
  (bnc#865641).

- Properly handle empty 'requires_membership_of' entries in
  /etc/security/pam_winbind.conf; (bnc#865771).

- Fix problem with server taking too long to respond to a
  MSG_PRINTER_DRVUPGRADE message; (bso#9942); (bnc#863748).
- Fix memory leak in printer_list_get_printer(); (bso#9993); (bnc#865561).

- Fix stream_depot VFS module on Btrfs; (bso#10467); (bnc#865397).

OBS-URL: https://build.opensuse.org/request/show/224138
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=154
2014-03-01 13:38:40 +00:00
Lars Müller
9ec817340d - Propagate snapshot enumeration permissions errors to SMB clients;
(bnc#865641).

- Properly handle empty 'requires_membership_of' entries in
  /etc/security/pam_winbind.conf; (bnc#865771).

- Fix problem with server taking too long to respond to a
  MSG_PRINTER_DRVUPGRADE message; (bso#9942); (bnc#863748).
- Fix memory leak in printer_list_get_printer(); (bso#9993); (bnc#865561).

- Fix stream_depot VFS module on Btrfs; (bso#10467); (bnc#865397).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=389
2014-02-27 16:02:29 +00:00
Stephan Kulow
ec384aca7c Accepting request 223503 from network:samba:STABLE
- Use libarchive to provide improved smbclient tarmode functionality;
  (bso#9667); (bnc#861135).

- Depend on %version-%release with all manual Provides and Requires;
  (bnc#844307).

- Update to 4.1.5.
  + Fix 100% CPU utilization in winbindd when trying to free memory in
    winbindd_reinit_after_fork; (bso#10358); (bnc#786677).
  + smbd: Fix memory overwrites; (bso#10415).
  + s3-winbind: Improve performance of wb_fill_pwent_sid2uid_done();
    (bso#2191).
  + ntlm_auth sometimes returns the wrong username to mod_ntlm_auth_winbind;
    (bso#10087).
  + s3: smbpasswd: Fix crashes on invalid input; (bso#10320).
  + s3: vfs_dirsort module: Allow dirsort to work when multiple simultaneous
    directories are open; (bso#10406).
  + Add support for Heimdal's unified krb5 and hdb plugin system, cope with
    first element in hdb_method having a different name in different heimdal
    versions and fix INTERNAL ERROR: Signal 11 in the kdc pid; (bso#10418).
  + vfs_btrfs: Fix incorrect zero length server-side copy request handling;
    (bso#10424).
  + s3: modules: streaminfo: As we have no VFS function SMB_VFS_LLISTXATTR we
    can't cope with a symlink when lp_posix_pathnames() is true; (bso#10429).
  + smbd: Fix an ancient oplock bug; (bso#10436).
  + Fix crash bug in smb2_notify code; (bso#10442).

- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).

- Migrate @GMT token parsing functionality into vfs_snapper; (bnc#863079).
  + Improve vfs_snapper documentation.

- Fix Winbind 100% CPU utilization caused by domain list corruption;
  (bso#10358); (bnc#786677).

- Fix memory overwrite in FSCTL_VALIDATE_NEGOTIATE_INFO handler; (bso#10415);
  (bnc#862370).

- Streamline the vendor suffix handling and add support for SLE 12.

- Fix zero length server-side copy request handling; (bso#10424);
  (bnc#862558).

- Set the PID directory to /run/samba on post-12.2 systems.

- Make use of the tmpfilesdir macro while calling systemd-tmpfiles.

- Make winbindd print the interface version when it gets an INTERFACE_VERSION
  request; (bnc#726937).

- Fix vfs_btrfs build on older platforms with duplicate WRITE_FLUSH
  definitions; (bnc#860832).

- Check for NULL gensec_security in gensec_security_by_auth_type();
  (bnc#860809).

- Ensure ndr table initialization; (bnc#860648).

- Add File Server Remote VSS Protocol (FSRVP) server for SMB share
  shadow-copies; (fate#313346).

- s3-dir: Fix the DOS clients against 64-bit smbd's; (bso#2662).
- shadow_copy2: module "Previous Version" not working in Windows 7;
  (bso#10259).
- s3-passdb: Fix string duplication to pointers; (bso#10367).
- vfs/glusterfs: in case atime is not passed, set it to the current atime;
  (bso#10384)

- s3: winbindd: Move calling setup_domain_child() into add_trusted_domain();
  (bso#10358); (bnc#786677).

- Default sysconfig daemon options to -D; (bso#10388); (bnc#857454).

- Allow smbcacls to take a '--propagate-inheritance' flag to indicate that
  the add, delete, modify and set operations now support automatic
  propagation of inheritable ACE(s); (FATE#316474).

OBS-URL: https://build.opensuse.org/request/show/223503
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=153
2014-02-23 06:28:27 +00:00
Lars Müller
ca813d4800 Use libarchive to provide improved smbclient tarmode functionality;
(bso#9667); (bnc#861135).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=388
2014-02-22 14:33:35 +00:00
Lars Müller
7684b4f238 Depend on %version-%release with all manual Provides and Requires;
(bnc#844307).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=387
2014-02-21 16:47:16 +00:00
Lars Müller
3814a3b1b1 - Update to 4.1.5.
+ Fix 100% CPU utilization in winbindd when trying to free memory in
    winbindd_reinit_after_fork; (bso#10358); (bnc#786677).
  + smbd: Fix memory overwrites; (bso#10415).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=386
2014-02-21 14:30:23 +00:00
Lars Müller
864f8e3eaf Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=385
2014-02-18 13:34:08 +00:00
David Disseldorp
302d41fe88 - Migrate @GMT token parsing functionality into vfs_snapper; (bnc#863079).
+ Improve vfs_snapper documentation.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=384
2014-02-14 00:42:14 +00:00
David Disseldorp
b7a23241d1 - Fix memory overwrite in FSCTL_VALIDATE_NEGOTIATE_INFO handler; (bso#10415);
(bnc#862370).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=383
2014-02-08 10:50:51 +00:00
Lars Müller
eed44281af - Streamline the vendor suffix handling and add support for SLE 12.
- Fix zero length server-side copy request handling; (bso#10424);
  (bnc#862558).
  + Refresh context in remaining patch stack.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=382
2014-02-07 17:18:53 +00:00
Lars Müller
83453d57a5 - Set the PID directory to /run/samba on post-12.2 systems.
- Make use of the tmpfilesdir macro while calling systemd-tmpfiles.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=381
2014-02-04 17:45:37 +00:00
David Disseldorp
68568bc354 - Fix vfs_btrfs build on older platforms with duplicate WRITE_FLUSH
definitions; (bnc#860832).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=380
2014-01-28 15:24:56 +00:00
David Disseldorp
782d94ce56 - Check for NULL gensec_security in gensec_security_by_auth_type();
(bnc#860809).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=379
2014-01-28 14:42:43 +00:00
David Disseldorp
d72154b4b6 - Ensure ndr table initialization; (bnc#860648).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=378
2014-01-28 02:08:23 +00:00
David Disseldorp
abb9e149a4 - Add File Server Remote VSS Protocol (FSRVP) server for SMB share
shadow-copies; (fate#313346).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=377
2014-01-24 20:52:15 +00:00
Lars Müller
02a72d49c7 - s3-dir: Fix the DOS clients against 64-bit smbd's; (bso#2662).
- shadow_copy2: module "Previous Version" not working in Windows 7;
  (bso#10259).
- s3-passdb: Fix string duplication to pointers; (bso#10367).
- vfs/glusterfs: in case atime is not passed, set it to the current atime;
  (bso#10384)

- s3: winbindd: Move calling setup_domain_child() into add_trusted_domain();
  (bso#10358); (bnc#786677).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=376
2014-01-24 15:41:11 +00:00
Lars Müller
e914f958b1 Make winbindd print the interface version when it gets an INTERFACE_VERSION
request; (bnc#726937).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=375
2014-01-22 21:51:51 +00:00
Lars Müller
7d91470d10 Remove trailing whitespace.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=374
2014-01-22 13:40:50 +00:00
Lars Müller
57b22ce7e9 - Allow smbcacls to take a '--propagate-inheritance' flag to indicate that
the add, delete, modify and set operations now support automatic
  propagation of inheritable ACE(s); (FATE#316474).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=373
2014-01-22 13:38:32 +00:00
Lars Müller
1b850caca9 Add reference to upstream bug ID of bnc#857454, bso#10388 too.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=372
2014-01-20 14:16:06 +00:00
Lars Müller
786059c188 Default sysconfig daemon options to -D; (bnc#857454).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=371
2014-01-20 11:14:25 +00:00
Stephan Kulow
ade2c75680 Accepting request 214148 from network:samba:STABLE
Add /var/cache/samba to the client file list; (bnc#846586).

OBS-URL: https://build.opensuse.org/request/show/214148
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=152
2014-01-17 10:16:34 +00:00
Lars Müller
f7c09598cc Add /var/cache/samba to the client file list; (bnc#846586).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=370
2014-01-16 19:56:19 +00:00
Stephan Kulow
6409f3c747 Accepting request 213925 from network:samba:STABLE
- Really add the WINBINDDOPTIONS sysconfig variable on install; (bnc#857454).

- Correct sysconfig variable names by adding the missing D char; (bnc#857454).

- Update to 4.1.4.
  + Fix segfault in smbd; (bso#10284).
  + Fix SMB2 server panic when a smb2 brlock times out; (bso#10311).

OBS-URL: https://build.opensuse.org/request/show/213925
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=151
2014-01-15 18:36:17 +00:00
Lars Müller
930725ece3 Really add the WINBINDDOPTIONS sysconfig variable on install; (bnc#857454).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=369
2014-01-14 22:13:47 +00:00
Lars Müller
9ee43dc393 Fix typo in the previous commit.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=368
2014-01-13 13:45:33 +00:00
Lars Müller
9f7b22931c Correct sysconfig varibale names by adding the missing D char; (bnc#857454).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=367
2014-01-13 13:12:27 +00:00
Lars Müller
3115950c12 - Update to 4.1.4.
+ Fix segfault in smbd; (bso#10284).
  + Fix SMB2 server panic when a smb2 brlock times out; (bso#10311).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=366
2014-01-10 17:37:33 +00:00
Stephan Kulow
925cd2c8f8 Accepting request 213213 from network:samba:STABLE
- Call stop_on_removal from preun and restart_on_update and insserv_cleanup
  from postun on pre-12.3 systems only; (bnc#857454).

- BuildRequire gamin-devel instead of unmaintained fam-devel package on
  post-12.1 systems.

- smbd: allow updates on directory write times on open handles; (bso#9870).
- lib/util: use proper include for struct stat; (bso#10276).
- s3:winbindd fix use of uninitialized variables; (bso#10280).
- s3-winbindd: Fix DEBUG statement in winbind_msg_offline(); (bso#10285).
- s3-lib: Fix %G substitution for domain users in smbd; (bso#10286).
- smbd: Always use UCF_PREP_CREATEFILE for filename_convert calls to resolve a
  path for open; (bso#10297).
- smb2_server processing overhead; (bso#10298).
- ldb: bad if test in ldb_comparison_fold(); (bso#10305).
- Fix AIO with SMB2 and locks; (bso#10310).
- smbd: Fix a panic when a smb2 brlock times out; (bso#10311).
- vfs_glusterfs: Enable per client log file; (bso#10337).

- Add /etc/sysconfig/samba to the main and winbind package; (bnc#857454).

- Create /var/run/samba with systemd-tmpfiles on post-12.2 systems;
  (bnc#856759).

- Fix broken rc{nmb,smb,winbind} sym links which should point to the service
  binary on post-12.2 systems; (bnc#856759).

- Add Snapper VFS module for snapshot manipulation; (fate#313347).
  + dbus-1-devel required at build time.

- Add File Server Remote VSS Protocol (FSRVP) client for SMB share
  shadow-copies; (fate#313345).

OBS-URL: https://build.opensuse.org/request/show/213213
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=150
2014-01-09 16:25:54 +00:00
Lars Müller
7979dc5ba1 Use the correct bnc ID in the package change log.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=365
2014-01-08 16:59:14 +00:00
Lars Müller
7c0d8db6ec BuildRequire gamin-devel instead of unmaintained fam-devel package on
post-12.1 systems.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=364
2014-01-08 16:22:32 +00:00
Lars Müller
90ad8c4216 Call stop_on_removal from preun and restart_on_update and insserv_cleanup
from postun on pre-12.3 systems only; (bnc#856759).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=363
2014-01-08 15:57:34 +00:00
Lars Müller
0b95018e19 - smbd: allow updates on directory write times on open handles; (bso#9870).
- lib/util: use proper include for struct stat; (bso#10276).
- s3:winbindd fix use of uninitialized variables; (bso#10280).
- s3-winbindd: Fix DEBUG statement in winbind_msg_offline(); (bso#10285).
- s3-lib: Fix %G substitution for domain users in smbd; (bso#10286).
- smbd: Always use UCF_PREP_CREATEFILE for filename_convert calls to resolve a
  path for open; (bso#10297).
- smb2_server processing overhead; (bso#10298).
- ldb: bad if test in ldb_comparison_fold(); (bso#10305).
- Fix AIO with SMB2 and locks; (bso#10310).
- smbd: Fix a panic when a smb2 brlock times out; (bso#10311).
- vfs_glusterfs: Enable per client log file; (bso#10337).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=362
2014-01-06 22:04:42 +00:00
Lars Müller
680d08abe3 PreReq fillup_prereq on post-12.2 systems.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=361
2014-01-06 18:04:45 +00:00
Lars Müller
fdb5c2c2f1 Add /etc/sysconfig/samba to the main and winbind package; (bnc#857454).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=360
2014-01-06 17:19:21 +00:00
Lars Müller
3e4c02b2ab Create /var/run/samba with systemd-tmpfiles on post-12.2 systems;
(bnc#856759).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=359
2014-01-06 14:26:34 +00:00
Lars Müller
86d14d5f08 Add the vfs_snapper to the %files of the main package.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=358
2014-01-06 11:19:11 +00:00
Lars Müller
d3bdfbc7aa - Fix broken rc{nmb,smb,winbind} sym links which should point to the service
binary on post-12.2 systems.

- Add Snapper VFS module for snapshot manipulation; (fate#313347).
  + dbus-1-devel required at build time.

- Add File Server Remote VSS Protocol (FSRVP) client for SMB share
  shadow-copies; (fate#313345).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=357
2014-01-06 10:47:04 +00:00
Stephan Kulow
ca35700542 Accepting request 211377 from network:samba:STABLE
Do not BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp as they're part
of the minimum build environment.

OBS-URL: https://build.opensuse.org/request/show/211377
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=149
2013-12-19 11:51:20 +00:00
Lars Müller
6641135147 Do not BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp as they're part
of the minimum build environment.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=356
2013-12-11 12:35:20 +00:00
Stephan Kulow
410e3453af Accepting request 210027 from network:samba:STABLE
- Update to 4.1.3.
  + DCE-RPC fragment length field is incorrectly checked; CVE-2013-4408;
    (bnc#844720).
  + pam_winbind login without require_membership_of restrictions;
    CVE-2012-6150; (bnc#853347).

- Make use of the full gpg pub key file name including the key ID.

- Add transparent file compression support; (fate#316266).
  + Implement FSCTL_GET_COMPRESSION and FSCTL_SET_COMPRESSION handlers.
  + Add FILE_ATTRIBUTE_COMPRESSED and FILE_NO_COMPRESSION support.
  + Extend vfs_btrfs VFS module to utilize get/set compression hooks.

- Add support for FSCTL_SRV_COPYCHUNK_WRITE; (fate#314770).

OBS-URL: https://build.opensuse.org/request/show/210027
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=148
2013-12-09 18:18:15 +00:00
Lars Müller
041bcb9fef Update source timestamp.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=355
2013-12-09 13:30:20 +00:00
Lars Müller
e8e4f9aa26 - Update to 4.1.3.
+ DCE-RPC fragment length field is incorrectly checked; CVE-2013-4408;
    (bnc#844720).
  + pam_winbind login without require_membership_of restrictions;
    CVE-2012-6150; (bnc#853347).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=354
2013-12-09 13:14:51 +00:00
Lars Müller
b94dd03db3 Make use of the full gpg pub key file name including the key ID.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=353
2013-12-06 16:41:22 +00:00
David Disseldorp
15cae8dc50 - Add transparent file compression support; (fate#316266).
+ Implement FSCTL_GET_COMPRESSION and FSCTL_SET_COMPRESSION handlers.
  + Add FILE_ATTRIBUTE_COMPRESSED and FILE_NO_COMPRESSION support.
  + Extend vfs_btrfs VFS module to utilize get/set compression hooks.
- Add support for FSCTL_SRV_COPYCHUNK_WRITE; (fate#314770).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=352
2013-12-06 14:10:17 +00:00
Stephan Kulow
66ec6c4d52 Accepting request 209189 from network:samba:STABLE
Remove bogus libsmbclient0 package description and cleanup the libsmbclient
line from baselibs.conf; (bnc#853021).

OBS-URL: https://build.opensuse.org/request/show/209189
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=147
2013-12-03 13:27:42 +00:00