Commit Graph

626 Commits

Author SHA256 Message Date
Lars Müller
50bc1040b4 Add bso#10517 along with bnc#865627 too.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=419
2014-07-07 14:27:59 +00:00
Lars Müller
9a6fad02f0 BuildRequire systemd-devel and configure --with-systemd on post-12.2
systems; (bnc#865627).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=418
2014-07-07 14:15:20 +00:00
Stephan Kulow
fbc8d9605f Accepting request 238632 from network:samba:STABLE
- Prevent file truncation on an open that fails with share mode violation;
  (bso#10671); (bnc#884056).

- Update to 4.1.9.
  + Fix nmbd denial of service; CVE-2014-0244; (bnc#880962).
  + Fix segmentation fault in smbd_marshall_dir_entry()'s SMB_FIND_FILE_UNIX
    handler; CVE-2014-3493; (bnc#883758).

See WHATSNEW.txt from the main tar ball or the samba.changes file for
more details.

OBS-URL: https://build.opensuse.org/request/show/238632
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=163
2014-06-26 08:42:32 +00:00
David Disseldorp
6181b885c1 - Prevent file truncation on an open that fails with share mode violation;
(bso#10671); (bnc#884056).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=417
2014-06-25 12:07:17 +00:00
Lars Müller
a5cd1e3ae6 - Update to 4.1.9.
+ Fix nmbd denial of service; CVE-2014-0244; (bnc#880962).
  + Fix segmentation fault in smbd_marshall_dir_entry()'s SMB_FIND_FILE_UNIX
    handler; CVE-2014-3493; (bnc#883758).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=416
2014-06-23 12:48:18 +00:00
Lars Müller
d6bffe8b4a BuildRequire krb5-devel, libiniparser-devel, and python-devel in any case.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=415
2014-06-12 18:44:19 +00:00
Lars Müller
6e3c53ae7f BuildRequire libxslt and perl-ExtUtils-MakeMaker and BuildIgnore libtevent
on CentOS, Fedora, and RHEL systems.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=414
2014-06-12 17:37:49 +00:00
Lars Müller
5a5eca3088 Update to 4.1.8.
See WHATSNEW.txt from the main tar ball or the samba.changes file for
more details.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=413
2014-06-03 19:43:23 +00:00
Stephan Kulow
749b082de6 Accepting request 235828 from network:samba:STABLE
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/235828
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=162
2014-06-02 05:00:25 +00:00
Lars Müller
b4f19102aa examples/libsmbclient: avoid some compiler warnings; (bso#10624).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=412
2014-05-23 11:53:37 +00:00
David Disseldorp
ea4075d300 - Fix printer job purging; (bso#10612); (bnc#879390).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=411
2014-05-22 16:00:31 +00:00
Stephan Kulow
ce3ba6297b Accepting request 234542 from network:samba:STABLE
Update samba-pubkey_6568B7EA.asc which will expire 2016-01-17.

OBS-URL: https://build.opensuse.org/request/show/234542
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=161
2014-05-22 07:04:13 +00:00
Lars Müller
7a25bb7227 Update samba-pubkey_6568B7EA.asc which will expire 2016-01-17.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=410
2014-05-18 12:15:25 +00:00
Stephan Kulow
6744b91fc9 Accepting request 233763 from network:samba:STABLE
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/233763
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=160
2014-05-16 15:56:25 +00:00
Lars Müller
8ac8def4e7 Remove unneeded ccan/endian/endian.h, matching upstream fix.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=409
2014-05-06 16:10:38 +00:00
David Disseldorp
902b5f46e2 - Fix byte-order macros on little endian Power8; (bso#10590); (bnc#871701).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=408
2014-05-05 15:02:52 +00:00
Stephan Kulow
a1a386e5b0 Accepting request 232404 from network:samba:STABLE
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/232404
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=159
2014-05-02 17:21:36 +00:00
David Disseldorp
9d16e67d7c - Pass through vfs_btrfs snapshot manipulation requests when
"btrfs: manipulate snapshots = no" is configured; (bnc#874180).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=407
2014-05-02 16:34:55 +00:00
David Disseldorp
1c9e737101 - Clone the base share security descriptor when exposing a snapshot share;
(bnc#874656).
- Use appropriate HRESULT return codes; (bnc#875046).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=406
2014-04-25 09:54:19 +00:00
Stephan Kulow
3e82f6cccd Accepting request 230698 from network:samba:STABLE
- Update to 4.1.7.

See WHATSNEW.txt from the main tar ball or the samba.changes file for
more details.

- Create a new DBus connection for every vfs_snapper request, to ensure
  correct snapper UID detection; (bnc#866354).

- Fix "Invalid read" in method reply_writeclose; (bnc#873658).

- Fix minor compiler warnings in snapshot code-path; (bnc#873177).

- Remove references to the obsolete samba-krb-printing package and
  get_printing_ticket binary.

- Fix malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response; (bnc#872396).

- User error strings instead of hex codes where possible for FSRVP
  errors; (bnc#866927).

- Fix remote share shadow copy request UNCs; (bso#10521); (bnc#870957).

OBS-URL: https://build.opensuse.org/request/show/230698
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=158
2014-04-23 18:35:41 +00:00
Lars Müller
3fe0cad748 patch tar ball: Restore series file line formating to be in line with
the 4.1.6 branch.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=405
2014-04-17 16:27:35 +00:00
Lars Müller
62f6ec65de Update to 4.1.7.
See WHATSNEW.txt from the main tar ball or the samba.changes file for
more details.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=404
2014-04-17 15:56:07 +00:00
David Disseldorp
48ea985eff - Create a new DBus connection for every vfs_snapper request, to ensure
correct snapper UID detection; (bnc#866354).
- Fix "Invalid read" in method reply_writeclose; (bnc#873658).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=403
2014-04-16 15:05:36 +00:00
Lars Müller
4402ca45e3 No longer recommend the no longer existing samba-krb-printing
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=402
2014-04-11 19:18:09 +00:00
Lars Müller
96b15eb168 Remove superfluous or dead code.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=401
2014-04-11 18:44:42 +00:00
Lars Müller
a51d63175d Remove references to the obsolete samba-krb-printing package and
get_printing_ticket binary.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=400
2014-04-11 13:53:11 +00:00
David Disseldorp
04b7a2fef7 - Fix minor compiler warnings in snapshot code-path; (bnc#873177).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=399
2014-04-11 13:03:14 +00:00
Lars Müller
15ca46bd71 - Fix malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response; (bnc#872396).
- User error strings instead of hex codes where possible for FSRVP
  errors; (bnc#866927).

- Fix remote share shadow copy request UNCs; (bso#10521); (bnc#870957).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=398
2014-04-11 12:21:33 +00:00
Stephan Kulow
a07332d520 Accepting request 228515 from network:samba:STABLE
- Add krb5rcache directory to the winbind package; (bnc#870607).
- Cleanup and consolidate the sysconfig and systemd service files.

OBS-URL: https://build.opensuse.org/request/show/228515
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=157
2014-04-05 14:50:00 +00:00
Lars Müller
7452f18ed9 %{_var}/cache/krb5rcache might also be required on pre-12.3 systems.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=397
2014-04-01 16:40:50 +00:00
Lars Müller
48cbe4ed6f - Add krb5rcache directory to the winbind package; (bnc#870607).
- Cleanup and consolidate the sysconfig and systemd service files.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=396
2014-04-01 16:31:01 +00:00
Stephan Kulow
5d67083536 Accepting request 228155 from network:samba:STABLE
- Extend vfs_snapper man page to cover permissions; (bnc#870570).

- Fix RPC server handling of fragmented requests; (bso#10481); (bnc#869707).

- Default with the cache and lock directory to the same path to have both
  non-persistent and persistent data at one location; (bnc#846586).

OBS-URL: https://build.opensuse.org/request/show/228155
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=156
2014-04-01 09:34:18 +00:00
David Disseldorp
a9de609af9 - Extend vfs_snapper man page to cover permissions; (bnc#870570).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=395
2014-03-28 12:23:08 +00:00
David Disseldorp
c2912973ff - Fix RPC server handling of fragmented requests; (bso#10481); (bnc#869707).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=394
2014-03-27 12:45:10 +00:00
Lars Müller
8f9b21cdf0 Default with the cache and lock directory to the same path to have both
non-persistent and persistent data at one location; (bnc#846586).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=393
2014-03-21 19:48:32 +00:00
Stephan Kulow
944390dcdb Accepting request 225717 from network:samba:STABLE
- Depend only on %version with all manual Provides and Requires; (bnc#844307).

- Update to 4.1.6.
  + Password lockout not enforced for SAMR password changes; CVE-2013-4496;
    (bnc#849224).
  + smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442;
    (bnc#855866).

- Password lockout not enforced for SAMR password changes;
  CVE-2013-4496; (bnc#849224).

- Call update-apparmor-samba-profile via ExecStartPre too; (bnc#867665).

- samba4 smbcalcs --chown | --chgrp dacl regression; CVE-2013-6442;
  (bnc#855866).

- Retry named pipe open requests on STATUS_PIPE_NOT_AVAILABLE; (bso#10484);
  (bnc#865095).

OBS-URL: https://build.opensuse.org/request/show/225717
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=155
2014-03-18 12:38:15 +00:00
Lars Müller
507561ca29 Depend only on %version with all manual Provides and Requires; (bnc#844307).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=392
2014-03-12 14:06:12 +00:00
Lars Müller
9ec2a5755d - Update to 4.1.6.
+ Password lockout not enforced for SAMR password changes; CVE-2013-4496;
    (bnc#849224).
  + smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442;
    (bnc#855866).

- Password lockout not enforced for SAMR password changes;
  CVE-2013-4496; (bnc#849224).

- Call update-apparmor-samba-profile via ExecStartPre too; (bnc#867665).

- samba4 smbcalcs --chown | --chgrp dacl regression; CVE-2013-6442;
  (bnc#855866).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=391
2014-03-11 18:36:52 +00:00
David Disseldorp
3699ac9aab - Retry named pipe open requests on STATUS_PIPE_NOT_AVAILABLE; (bso#10484);
(bnc#865095).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=390
2014-03-04 18:38:01 +00:00
Stephan Kulow
f5c8c27b48 Accepting request 224138 from network:samba:STABLE
- Propagate snapshot enumeration permissions errors to SMB clients;
  (bnc#865641).

- Properly handle empty 'requires_membership_of' entries in
  /etc/security/pam_winbind.conf; (bnc#865771).

- Fix problem with server taking too long to respond to a
  MSG_PRINTER_DRVUPGRADE message; (bso#9942); (bnc#863748).
- Fix memory leak in printer_list_get_printer(); (bso#9993); (bnc#865561).

- Fix stream_depot VFS module on Btrfs; (bso#10467); (bnc#865397).

OBS-URL: https://build.opensuse.org/request/show/224138
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=154
2014-03-01 13:38:40 +00:00
Lars Müller
9ec817340d - Propagate snapshot enumeration permissions errors to SMB clients;
(bnc#865641).

- Properly handle empty 'requires_membership_of' entries in
  /etc/security/pam_winbind.conf; (bnc#865771).

- Fix problem with server taking too long to respond to a
  MSG_PRINTER_DRVUPGRADE message; (bso#9942); (bnc#863748).
- Fix memory leak in printer_list_get_printer(); (bso#9993); (bnc#865561).

- Fix stream_depot VFS module on Btrfs; (bso#10467); (bnc#865397).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=389
2014-02-27 16:02:29 +00:00
Stephan Kulow
ec384aca7c Accepting request 223503 from network:samba:STABLE
- Use libarchive to provide improved smbclient tarmode functionality;
  (bso#9667); (bnc#861135).

- Depend on %version-%release with all manual Provides and Requires;
  (bnc#844307).

- Update to 4.1.5.
  + Fix 100% CPU utilization in winbindd when trying to free memory in
    winbindd_reinit_after_fork; (bso#10358); (bnc#786677).
  + smbd: Fix memory overwrites; (bso#10415).
  + s3-winbind: Improve performance of wb_fill_pwent_sid2uid_done();
    (bso#2191).
  + ntlm_auth sometimes returns the wrong username to mod_ntlm_auth_winbind;
    (bso#10087).
  + s3: smbpasswd: Fix crashes on invalid input; (bso#10320).
  + s3: vfs_dirsort module: Allow dirsort to work when multiple simultaneous
    directories are open; (bso#10406).
  + Add support for Heimdal's unified krb5 and hdb plugin system, cope with
    first element in hdb_method having a different name in different heimdal
    versions and fix INTERNAL ERROR: Signal 11 in the kdc pid; (bso#10418).
  + vfs_btrfs: Fix incorrect zero length server-side copy request handling;
    (bso#10424).
  + s3: modules: streaminfo: As we have no VFS function SMB_VFS_LLISTXATTR we
    can't cope with a symlink when lp_posix_pathnames() is true; (bso#10429).
  + smbd: Fix an ancient oplock bug; (bso#10436).
  + Fix crash bug in smb2_notify code; (bso#10442).

- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).

- Migrate @GMT token parsing functionality into vfs_snapper; (bnc#863079).
  + Improve vfs_snapper documentation.

- Fix Winbind 100% CPU utilization caused by domain list corruption;
  (bso#10358); (bnc#786677).

- Fix memory overwrite in FSCTL_VALIDATE_NEGOTIATE_INFO handler; (bso#10415);
  (bnc#862370).

- Streamline the vendor suffix handling and add support for SLE 12.

- Fix zero length server-side copy request handling; (bso#10424);
  (bnc#862558).

- Set the PID directory to /run/samba on post-12.2 systems.

- Make use of the tmpfilesdir macro while calling systemd-tmpfiles.

- Make winbindd print the interface version when it gets an INTERFACE_VERSION
  request; (bnc#726937).

- Fix vfs_btrfs build on older platforms with duplicate WRITE_FLUSH
  definitions; (bnc#860832).

- Check for NULL gensec_security in gensec_security_by_auth_type();
  (bnc#860809).

- Ensure ndr table initialization; (bnc#860648).

- Add File Server Remote VSS Protocol (FSRVP) server for SMB share
  shadow-copies; (fate#313346).

- s3-dir: Fix the DOS clients against 64-bit smbd's; (bso#2662).
- shadow_copy2: module "Previous Version" not working in Windows 7;
  (bso#10259).
- s3-passdb: Fix string duplication to pointers; (bso#10367).
- vfs/glusterfs: in case atime is not passed, set it to the current atime;
  (bso#10384)

- s3: winbindd: Move calling setup_domain_child() into add_trusted_domain();
  (bso#10358); (bnc#786677).

- Default sysconfig daemon options to -D; (bso#10388); (bnc#857454).

- Allow smbcacls to take a '--propagate-inheritance' flag to indicate that
  the add, delete, modify and set operations now support automatic
  propagation of inheritable ACE(s); (FATE#316474).

OBS-URL: https://build.opensuse.org/request/show/223503
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=153
2014-02-23 06:28:27 +00:00
Lars Müller
ca813d4800 Use libarchive to provide improved smbclient tarmode functionality;
(bso#9667); (bnc#861135).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=388
2014-02-22 14:33:35 +00:00
Lars Müller
7684b4f238 Depend on %version-%release with all manual Provides and Requires;
(bnc#844307).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=387
2014-02-21 16:47:16 +00:00
Lars Müller
3814a3b1b1 - Update to 4.1.5.
+ Fix 100% CPU utilization in winbindd when trying to free memory in
    winbindd_reinit_after_fork; (bso#10358); (bnc#786677).
  + smbd: Fix memory overwrites; (bso#10415).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=386
2014-02-21 14:30:23 +00:00
Lars Müller
864f8e3eaf Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=385
2014-02-18 13:34:08 +00:00
David Disseldorp
302d41fe88 - Migrate @GMT token parsing functionality into vfs_snapper; (bnc#863079).
+ Improve vfs_snapper documentation.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=384
2014-02-14 00:42:14 +00:00
David Disseldorp
b7a23241d1 - Fix memory overwrite in FSCTL_VALIDATE_NEGOTIATE_INFO handler; (bso#10415);
(bnc#862370).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=383
2014-02-08 10:50:51 +00:00
Lars Müller
eed44281af - Streamline the vendor suffix handling and add support for SLE 12.
- Fix zero length server-side copy request handling; (bso#10424);
  (bnc#862558).
  + Refresh context in remaining patch stack.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=382
2014-02-07 17:18:53 +00:00
Lars Müller
83453d57a5 - Set the PID directory to /run/samba on post-12.2 systems.
- Make use of the tmpfilesdir macro while calling systemd-tmpfiles.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=381
2014-02-04 17:45:37 +00:00