- Fix smbd srv_spoolss_replycloseprinter() segfault; (bso#8384); (bnc#731571).
- Fix pam_winbind.so segfault in pam_sm_authenticate(); (bso#8564).
- Add "ldapsam:login cache" parameter to allow explicit disabling
of the login cache; (bnc#723261).
- Fix samba duplicates file content on appending. Move posix case semantics
out from under the VFS; (bso#6898); (bnc#681208).
- Make winbind child reconnect when remote end has closed, fix
failing sudo; (bso#7295); (bnc#569721).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=204
This is a cleanup update replacing all patches we formerly had in the Samba
package.
- Update to 3.6.1.
+ Fix smbd crashes triggered by Windows XP clients; (bso#8384).
+ Fix a Winbind race leading to 100% CPU load; (bso#8409).
+ Several SMB2 fixes.
+ The VFS ACL modules are no longer experimental but production-ready.
+ Fix 'net ads join -k' when KRB5CCNAME is not set; (bso#7465).
+ smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).
+ Return error of cli_push when 'put - /some/file' is used; (bso#7551).
+ Fix usage of cli_errstr(); (bso#7864).
+ Fix 'widelinks' regression; (bso#8229).
+ Empty notify servername; (bso#8236).
+ Add man vfs_aio_fork; (bso#8256).
+ smb2: smbd logs "Invalid SMB packet: first request: 0x0008" and crashes;
(bso#8334).
+ Add a fallback for missing open&x support in MAC OS/X Lion; (bso#8338).
+ While migrating forms, don't fail if the form already exists; (bso#8351).
+ OS/2 sends an unexpected write&x/read&x chain; (bso#8360).
+ Fix build of vfs_prealloc on SLES8; (bso#8363).
+ Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4; (bso#8364).
+ Fix the fallback to the deprecated spelling idmap:script; (bso#8368).
+ Fix vfs_chown_fsp; (bso#8370).
+ Fix smbd crashes triggered by Windows XP clients; (bso#8384).
+ Fix smbclient access to NT4 shares; (bso#8385).
+ Optimize serverid_exists() for Solaris; (bso#8395).
+ registry/reg_format.c must include includes.h; (bso#8401).
+ SMB2 server can return requests out-of-order when processing a compound
request; (bso#8407).
+ Fix a Winbind race leading to 100% CPU load; (bso#8409).
+ Fix "saving as" of MS Office 2007 (Word) documents on Samba shares with
SMB2; (bso#8412).
+ Fix 'getent group' if trusted domains are not reachable; (bso#8420).
+ Fix infinite loop in ACL module code; (bso#8422).
+ Fix wrong reply to DHnC (durable handle reconnect); (bso#8428).
+ Compound SMB2 requests on an IPC connection can corrupt the reply stream;
(bso#8429).
+ Fix segfault in iconv.c; (bso#8433).
+ NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames;
(bso#8442).
+ Be smarter about setting default permissions when a ACL_USER_OBJ isn't
given; (bso#8443).
+ Check the wct of the incoming SMBnegprot responses; (bso#8452).
+ Fix smbclient segfaults when dialect option -m is used for legacy
dialects; (bso#8453).
+ Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).
+ Samba PDC is looking up only primary user group; (bso#8455).
+ IE9 on Windows 7 cannot download files to samba 3.5.11 share; (bso#8458).
+ smb2_find uses a hard coded max reply size of 0x10000 instead of
smb2_max_trans; (bso#8473).
+ SMB2 create doesn't cope with an Apple client using NULL blob in create;
(bso#8474).
+ Don't call smbd_terminate_connection in smb2_validate_message_id();
(bso#8476).
+ Samba asserts when SMB2 client breaks the crediting rules; (bso#8476).
+ Map to guest can return uninitialized blob of data; (bso#8477).
+ acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).
+ DFS breaks zip file extracting unless "follow symlinks = no" set;
(bso#8493).
+ Remove "experimental" label on VFS ACL modules; (bso#8494).
+ SMB2_OP_CANCEL requests don't have to be signed; (bso#8503).
+ smbd doesn't correctly honor the "force create mode" bits from a cifsfs
create; (bso#8507).
+ Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER;
(bso#8509).
+ Disallow "." in can_set_delete_on_close(); (bso#8515).
+ SMB2 create call returns incorrect file allocation size; (bso#8518).
+ Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements;
(bso#8520).
+ Winbind cache timeout expiry test was reversed; (bso#8521).
OBS-URL: https://build.opensuse.org/request/show/88972
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=107
+ Fix smbd crashes triggered by Windows XP clients; (bso#8384).
+ Fix a Winbind race leading to 100% CPU load; (bso#8409).
+ Several SMB2 fixes.
+ The VFS ACL modules are no longer experimental but production-ready.
+ Fix 'net ads join -k' when KRB5CCNAME is not set; (bso#7465).
+ smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).
+ Return error of cli_push when 'put - /some/file' is used; (bso#7551).
+ Fix usage of cli_errstr(); (bso#7864).
+ Fix 'widelinks' regression; (bso#8229).
+ Empty notify servername; (bso#8236).
+ Add man vfs_aio_fork; (bso#8256).
+ smb2: smbd logs "Invalid SMB packet: first request: 0x0008" and crashes;
(bso#8334).
+ Add a fallback for missing open&x support in MAC OS/X Lion; (bso#8338).
+ While migrating forms, don't fail if the form already exists; (bso#8351).
+ OS/2 sends an unexpected write&x/read&x chain; (bso#8360).
+ Fix build of vfs_prealloc on SLES8; (bso#8363).
+ Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4; (bso#8364).
+ Fix the fallback to the deprecated spelling idmap:script; (bso#8368).
+ Fix vfs_chown_fsp; (bso#8370).
+ Fix smbd crashes triggered by Windows XP clients; (bso#8384).
+ Fix smbclient access to NT4 shares; (bso#8385).
+ Optimize serverid_exists() for Solaris; (bso#8395).
+ registry/reg_format.c must include includes.h; (bso#8401).
+ SMB2 server can return requests out-of-order when processing a compound
request; (bso#8407).
+ Fix a Winbind race leading to 100% CPU load; (bso#8409).
+ Fix "saving as" of MS Office 2007 (Word) documents on Samba shares with
SMB2; (bso#8412).
+ Fix 'getent group' if trusted domains are not reachable; (bso#8420).
+ Fix infinite loop in ACL module code; (bso#8422).
+ Fix wrong reply to DHnC (durable handle reconnect); (bso#8428).
+ Compound SMB2 requests on an IPC connection can corrupt the reply stream;
(bso#8429).
+ Fix segfault in iconv.c; (bso#8433).
+ NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames;
(bso#8442).
+ Be smarter about setting default permissions when a ACL_USER_OBJ isn't
given; (bso#8443).
+ Check the wct of the incoming SMBnegprot responses; (bso#8452).
+ Fix smbclient segfaults when dialect option -m is used for legacy
dialects; (bso#8453).
+ Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).
+ Samba PDC is looking up only primary user group; (bso#8455).
+ IE9 on Windows 7 cannot download files to samba 3.5.11 share; (bso#8458).
+ smb2_find uses a hard coded max reply size of 0x10000 instead of
smb2_max_trans; (bso#8473).
+ SMB2 create doesn't cope with an Apple client using NULL blob in create;
(bso#8474).
+ Don't call smbd_terminate_connection in smb2_validate_message_id();
(bso#8476).
+ Samba asserts when SMB2 client breaks the crediting rules; (bso#8476).
+ Map to guest can return uninitialized blob of data; (bso#8477).
+ acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).
+ DFS breaks zip file extracting unless "follow symlinks = no" set;
(bso#8493).
+ Remove "experimental" label on VFS ACL modules; (bso#8494).
+ SMB2_OP_CANCEL requests don't have to be signed; (bso#8503).
+ smbd doesn't correctly honor the "force create mode" bits from a cifsfs
create; (bso#8507).
+ Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER;
(bso#8509).
+ Disallow "." in can_set_delete_on_close(); (bso#8515).
+ SMB2 create call returns incorrect file allocation size; (bso#8518).
+ Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements;
(bso#8520).
+ Winbind cache timeout expiry test was reversed; (bso#8521).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=199
- s3/doc: add man page for aio_fork vfs module.
- Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).
- s3: Samba PDC is looking up only primary user group; (bso#8455).
- Add script to create or update an AppArmor sniplet with permissions for all
Samba shares; (bnc#688040).
- Retain the smbd startproc return value for correct startup status reporting.
unset was incorrectly being called prior to rc_status; (bnc#723724).
- Prevent deadlock in systemd triggered by if-down.d handler on shutdown;
(bnc#721598).
- smb2_find uses a hard coded max reply size of 0x10000 instead of
smb2_max_trans; changed defaults and documentation (bso8473).
- Empty CIFS share can be blocked for other clients by deleting it via empty
path (DELETE_PENDING until the last client); (bso#8515).
- winbindd cache timeout expiry test was reversed; (bso#8521).
- Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520).
- s3:smb2_create: fix allocation size return value when opening existing
files; (bso#8518).
- SMB2 create doesn't cope with an Apple client using NULL blob in create;
(bso#8474).
- NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames;
(bso#8442).
- s3-docs: Fix bug (bso#7908) and typo.
- s3-docs: document -k switch in net manpage.
- Fix winbind internal error; (bso#7636); (bnc#659424).
OBS-URL: https://build.opensuse.org/request/show/88635
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=105
- Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).
- s3: Samba PDC is looking up only primary user group; (bso#8455).
- Add script to create or update an AppArmor sniplet with permissions for all
Samba shares; (bnc#688040).
- Fix winbind internal error; (bso#7636); (bnc#659424).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=198
- Return error of cli_push when 'put - /some/file' is used; (bso#7551).
- Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509).
- smbd doesn't correctly honor the "force create mode" bits from a cifsfs
create; (bso#8507).
- Default user entry is set to minimal permissions on incoming ACL change with
no user specified; (bso#8443).
- smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).
- Handle the SECINFO_LABEL flag in the same was as Win2k3; enable Microsoft
Internet Explorer 9 on Windows 7 to download files; (bso#8458).
- DFS breaks zip file extracting unless "follow symlinks = no" set;
(bso#8493).
- s3-docs: Fix typos.
- s3:smb2_server: SMB2_OP_CANCEL requests don't have to be signed; (bso#8503).
- Remove "experimental" label on VFS ACL modules; (bso#8494).
- acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).
- s3-smbd: asserts when SMB2 client breaks the crediting rules; (bso#8476).
- s3-libnet: allow to use default krb5 ccache in libnet_Join/libnet_Unjoin;
(bso#7465).
- smb2_find uses a hard coded max reply size of 0x10000 instead of
smb2_max_trans; (bso#8473).
- s3-netapi: allow to use default krb5 credential cache for libnetapi users.
- s3-docs: document -k switch in net manpage.
- Map to guest can return uninitialized blob of data; (bso#8477).
- s3-registry: registry/reg_format.c must include includes.h; (bso#8401).
- smbclient segfaults when option -m is used for legacy dialects; (bso#8453).
- Fix 'widelinks' regression intro'd in 3.2; (bso#8229).
- Compound SMB2 requests on an IPC connection can corrupt the reply stream;
(bso#8429).
- s3-spoolss: Fix bug forms migration; (bso#8351).
- s3:libsmb: check the wct of the incoming SMBnegprot responses; (bso#8452).
- s3: Do not fork the echo handler for smb2; (bso#8334).
- s3-spoolss: Fix bug empty notify servername; (bso#8236).
- SMB2 server can return requests out-of-order when processing a compound
request; (bso#8407).
- Remove smb child crash fix. The issue had been fixed upstream differently.
- BuildRequire ctdb-devel version greater than 1.0.105 for post-10.0 systems.
OBS-URL: https://build.opensuse.org/request/show/87294
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=104
- Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509).
- smbd doesn't correctly honor the "force create mode" bits from a cifsfs
create; (bso#8507).
- Default user entry is set to minimal permissions on incoming ACL change with
no user specified; (bso#8443).
- smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).
- Handle the SECINFO_LABEL flag in the same was as Win2k3; enable Microsoft
Internet Explorer 9 on Windows 7 to download files; (bso#8458).
- DFS breaks zip file extracting unless "follow symlinks = no" set;
(bso#8493).
- s3-docs: Fix typos.
- s3:smb2_server: SMB2_OP_CANCEL requests don't have to be signed; (bso#8503).
- Remove "experimental" label on VFS ACL modules; (bso#8494).
- acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).
- s3-smbd: asserts when SMB2 client breaks the crediting rules; (bso#8476).
- s3-libnet: allow to use default krb5 ccache in libnet_Join/libnet_Unjoin;
(bso#7465).
- smb2_find uses a hard coded max reply size of 0x10000 instead of
smb2_max_trans; (bso#8473).
- s3-netapi: allow to use default krb5 credential cache for libnetapi users.
- s3-docs: document -k switch in net manpage.
- Map to guest can return uninitialized blob of data; (bso#8477).
- s3-registry: registry/reg_format.c must include includes.h; (bso#8401).
- smbclient segfaults when option -m is used for legacy dialects; (bso#8453).
- Fix 'widelinks' regression intro'd in 3.2; (bso#8229).
- Compound SMB2 requests on an IPC connection can corrupt the reply stream;
(bso#8429).
- s3-spoolss: Fix bug forms migration; (bso#8351).
- s3:libsmb: check the wct of the incoming SMBnegprot responses; (bso#8452).
- s3: Do not fork the echo handler for smb2; (bso#8334).
- s3-spoolss: Fix bug empty notify servername; (bso#8236).
- SMB2 server can return requests out-of-order when processing a compound
request; (bso#8407).
- Remove smb child crash fix. The issue had been fixed upstream differently.
- BuildRequire ctdb-devel version greater than 1.0.105 for post-10.0 systems.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=190
- Spec file cleanup as suggested by the spec-cleaner tool.
+ Make all BuildRequires, PreReq, and Provides a separate line.
+ Use %{buildroot} instead of ${RPM_BUILD_ROOT}.
+ Use straight commands instead of macros (make, install).
+ Use -p in post and postun if we only call one command.
+ Use %{_localstatedir} instead of %{_var} in the filelist.
+ Remove superfluous AutoReqProv on lines.
- Remove %release from all Provides.
- Fix segfault in iconv.c which caused a null pointer dereference; (bso#8433).
- Use /var/run for the cifs state file in the init script too; (bnc#710304).
- Fix CUPS print job IDs; (bso#7288); (bnc#701257).
OBS-URL: https://build.opensuse.org/request/show/81727
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=102
+ Make all BuildRequires, PreReq, and Provides a separate line.
+ Use %{buildroot} instead of ${RPM_BUILD_ROOT}.
+ Use straight commands instead of macros (make, install).
+ Use -p in post and postun if we only call one command.
+ Use %{_localstatedir} instead of %{_var} in the filelist.
+ Remove superfluous AutoReqProv on lines.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=188
- Microsoft Word from Microsoft Office 2007 fails to save as on a share with
SMB2; (bso#8412).
- Use sys_write and sys_read in fork_domain_child to fix a winbind race
leading to 100% CPU usage; (bso#8409).
- Fix wrong reply to smb2 durable handle reconnect (DHnC) request; (bso#8428).
- Fix infinite loop in ACL module code; (bso#8422).
- Fix getent group if trusted domains are not reachable; (bso#8420).
- smbclient can't access a NT4 share since 3.6.0; (bso#8385).
- Optimize serverid_exists() for Solaris; (bso#8395).
- talloc:
+ check block count after references test.
+ added test suite for talloc_free_children().
+ license info erratum in the manpage.
+ fix typos and better differentiation between versions 1 and 2.
+ preserve context name on talloc_free_children().
+ ensure the sibling linked list remains valid during a free.
OBS-URL: https://build.opensuse.org/request/show/80338
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=100
- talloc:
- check block count after references test.
- added test suite for talloc_free_children().
- license info erratum in the manpage.
- fix typos and better differentiation between versions 1 and 2.
- preserve context name on talloc_free_children().
- ensure the sibling linked list remains valid during a free.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=181
- Optimize serverid_exists() for Solaris; (bso#8395).
- talloc: check block count after references test.
- talloc: added test suite for talloc_free_children().
- talloc: license info erratum in the manpage.
- talloc: fix typos and better differentiation between versions 1 and 2.
- talloc: preserve context name on talloc_free_children().
- talloc: ensure the sibling linked list remains valid during a free.
- vfs_chown_fsp returned in the wrong directory; (bso#8370).
- Remove irritating "." targets when recent system libs exist; (bso#8369).
- Correctly initialize "idmap config * : script" with NULL; (bso#8368).
- Add missing include to suppress compiler warnings; (bso#8365).
- Point the chain offset beyond the current request; (bso#8360).
- Fix gpfs vfs module build; (bso#8364).
- Make vfs_prealloc even build on older systems; (bso#8363).
- Do central cli_set_error and return the actual NTSTATUS; (bso#7864).
OBS-URL: https://build.opensuse.org/request/show/79967
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=98
- talloc: check block count after references test.
- talloc: added test suite for talloc_free_children().
- talloc: license info erratum in the manpage.
- talloc: fix typos and better differentiation between versions 1 and 2.
- talloc: preserve context name on talloc_free_children().
- talloc: ensure the sibling linked list remains valid during a free.
- vfs_chown_fsp returned in the wrong directory; (bso#8370).
- Remove irritating "." targets when recent system libs exist; (bso#8369).
- Correctly initialize "idmap config * : script" with NULL; (bso#8368).
- Add missing include to suppress compiler warnings; (bso#8365).
- Point the chain offset beyond the current request; (bso#8360).
- Fix gpfs vfs module build; (bso#8364).
- Make vfs_prealloc even build on older systems; (bso#8363).
- Do central cli_set_error and return the actual NTSTATUS; (bso#7864).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=178
- Update to 3.6.0.
- Remove references to disabled vscan build.
- Add missing define, includes, and initialization to get_printing_ticket.
- Use /var/run for the cifs state file; (bnc#710304).
- Fix #ifdef CTDB_CONTROL_SCHEDULE_FOR_DELETION issue; (bso#8303).
- File copy aborts with smb2_validate_message_id: bad message_id; (bso#8335).
- Fix reload of the configuration and also reload activated registry shares;
(bso#8327).
- WinXP cannot join a Samba3 domain with a 'even' hostname; (bso#8326).
- smbclient cannot list directories from a big-endian machine; (bso#8324).
- Update to 3.6.0rc3.
- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are
affected by a cross-site scripting vulnerability; CVE-2011-2694; (bso#8289);
(bnc#708503).
- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are
affected by a cross-site request forgery; CVE-2011-2522; (bso#8290);
(bnc#705241).
- Make use of the actual library version as part of the package name on
post-11.3 systems only.
- Improve ctdb vacuuming performance with use of SCHEDULE_FOR_DELETION;
(bnc#705170).
- Specify nmbdsocketdir at configure time; (bnc#700953).
- Build the tdb, talloc, and tevent libraries ahead of anything else.
- Update to 3.6.0rc2.
- Make cupsaddsmb fill printers location; (bso#8132); (bnc#698209).
- Add "winbind max clients" parameter to remove 200-client
limit; (bnc#697461).
- Disable logon cache for password lockout consistency when
running in a cluster; (bnc#694836).
- Fix logon of AD users with many group memberships; (bso#6911);
(bnc#657026).
- Don't lockout users while offline; (bso#8166); (bnc#692607).
- Update to 3.6.0rc1.
OBS-URL: https://build.opensuse.org/request/show/78381
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=96
+ BUG 7462: Make SA_RESETHAND conditional on its existance.
+ BUG 8303: db_ctdb_send_schedule_for_deletion() is not defined.
+ BUG 8324: smbclient cannot list directories from a big-endian machine.
+ BUG 8326: WinXP cannot join a Samba3 domain with a 'even' hostname.
+ BUG 8327: Fix the reload of the configuration, also reload activated
registry shares.
+ BUG 8328: Cleanup of idmap_tdb2 code.
+ BUG 8330: Fix NFSv4 ACL merging logic.
+ BUG 8335: File copy aborts with smb2_validate_message_id: bad message_id.
+ BUG 8341: Fix segfault in libsmbclient.
+ BUG 8343: Fix SMB2 crash reading with aio_fork beyond the end of file.
+ BUG 8347: Fix regression for HP-UX, AIX and OSF.
+ BUG 8357: Make sure we grant credits on async read/write operations.
+ BUG 8358: Fix a bug in run_poll_events().
+ BUG 8362: Fix build issue on old glibc systems.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=177
