Commit Graph

553 Commits

Author SHA256 Message Date
c11fa40403 Accepting request 542093 from home:dmulder:branches:network:samba:STABLE
- samba-tool requires samba-python; (bnc#1067771).

OBS-URL: https://build.opensuse.org/request/show/542093
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=577
2017-11-23 17:50:43 +00:00
947f939688 Accepting request 539834 from home:scabrero:branches:network:samba:STABLE
- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);

OBS-URL: https://build.opensuse.org/request/show/539834
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=576
2017-11-08 19:20:20 +00:00
0a39f1cd81 Accepting request 536033 from home:dimstar:Factory
This is at least one of the issue of samba in :L - might be more stuff missing

OBS-URL: https://build.opensuse.org/request/show/536033
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=575
2017-10-24 16:59:03 +00:00
8d43e9e2c1 Fix libsmbldap version number in package name
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=574
2017-10-16 11:46:57 +00:00
Aurelien Aptel
3514726402 Accepting request 532129 from home:scabrero:branches:network:samba:STABLE
- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.

OBS-URL: https://build.opensuse.org/request/show/532129
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=573
2017-10-11 16:43:10 +00:00
aa792ab3bb Accepting request 527518 from home:npower:sept-update-factory
- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).

- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).

- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).

OBS-URL: https://build.opensuse.org/request/show/527518
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=572
2017-09-20 12:13:02 +00:00
Aurelien Aptel
ae1ea30911 Accepting request 519876 from home:aaptel:samba-speclean
- Clean specfile assuming SUSE-only system and product >=SLE11
  + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version}
    are always undefined
  + %{_vendor} is "suse" and %{suse_version} is at least 1100

OBS-URL: https://build.opensuse.org/request/show/519876
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=571
2017-09-01 14:59:11 +00:00
David Disseldorp
8fb1f6bb14 - Update to 4.6.7; (bsc#1054017)
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=570
2017-08-16 11:38:57 +00:00
af6fd2963a - Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
(bsc#1048339).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=569
2017-08-08 13:01:02 +00:00
David Disseldorp
02fe0939f2 Accepting request 515066 from home:dmulder:branches:network:samba:STABLE
Fix duplicate CTDB_LOGGING params when downgraded and upgraded again (bsc#1048339)

OBS-URL: https://build.opensuse.org/request/show/515066
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=568
2017-08-08 12:42:26 +00:00
David Disseldorp
9bb5fae037 - fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=567
2017-07-24 13:52:30 +00:00
David Disseldorp
f5aff418ad Accepting request 510312 from home:dmulder:branches:network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/510312
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=566
2017-07-14 13:54:02 +00:00
Aurelien Aptel
88ef9fdf19 Accepting request 510060 from home:dmdiss:ceph-sambagw
- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).

OBS-URL: https://build.opensuse.org/request/show/510060
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=565
2017-07-13 13:42:20 +00:00
7466787b91 Accepting request 503634 from home:npower:1042419
- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).

OBS-URL: https://build.opensuse.org/request/show/503634
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=564
2017-06-14 10:01:54 +00:00
David Disseldorp
88564acfda - Update to 4.6.5; (bsc#1040157)
+ Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=563
2017-06-07 14:37:38 +00:00
David Disseldorp
cbef29480c - Revert explicit winbind %{version}-%{release} dependency.
+ The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=562
2017-05-29 16:08:25 +00:00
David Disseldorp
6d266c100d - Fix CVE-2017-7494 remote code execution from a writable share;
(bso#12780); (bsc#1038231).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=561
2017-05-24 08:02:17 +00:00
Noel Power
3bd36433a1 Accepting request 491060 from home:dmdiss:samba_stable_git_migration_v2
- Update to 4.6.3; (bsc#1036011)

- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).

OBS-URL: https://build.opensuse.org/request/show/491060
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=560
2017-04-26 09:40:57 +00:00
Aurelien Aptel
3c207d7687 Accepting request 489392 from home:dmdiss:samba_stable_git_migration_v2
- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
    - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"

OBS-URL: https://build.opensuse.org/request/show/489392
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=559
2017-04-20 12:26:04 +00:00
David Disseldorp
9bcb70be0d Sync changelog entries from SLE Samba 4.4.
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=558
2017-04-12 14:47:32 +00:00
David Disseldorp
6539ffb439 - Update to 4.6.2
+ remove bso#12721 patches now upstream

- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64

- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=557
2017-04-10 13:56:46 +00:00
David Disseldorp
1382a46a1c - Enable librados CTDB lock helper for samba-ceph package; (fate#321622).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=556
2017-04-03 14:59:54 +00:00
6a14d0bdd9 Accepting request 483890 from home:dmulder:branches:network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/483890
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=555
2017-03-31 11:23:32 +00:00
8c1ef5b501 Accepting request 482503 from home:jmcdough:updateto46
Update to 4.6.1 for CVE-2017-2619 + fix build for platforms without cmocka

OBS-URL: https://build.opensuse.org/request/show/482503
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=554
2017-03-24 13:30:38 +00:00
Aurelien Aptel
b71b411b66 Accepting request 482455 from home:jmcdough:updateto46
Update to 4.6.1 for CVE-2017-2619

OBS-URL: https://build.opensuse.org/request/show/482455
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=553
2017-03-24 11:11:14 +00:00
Noel Power
68f2e352c5 Accepting request 478019 from home:dmulder:branches:network:samba:STABLE
- add missing patch for libnss_wins segfault; (bsc#995730).

OBS-URL: https://build.opensuse.org/request/show/478019
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=552
2017-03-09 19:06:50 +00:00
David Disseldorp
4102b25c8b Accepting request 460727 from home:dimstar:Factory
Fix build with util-linux change as prepared in Staging:C

OBS-URL: https://build.opensuse.org/request/show/460727
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=551
2017-02-27 16:33:47 +00:00
Aurelien Aptel
a71b3f3d30 Accepting request 452480 from home:dmdiss:bsc1021933_samba_vfs_ceph_statx
- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).
- Add base Samba dependency to samba-ceph package.

OBS-URL: https://build.opensuse.org/request/show/452480
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=550
2017-01-26 13:37:29 +00:00
ee3db2b8d2 Accepting request 447039 from home:jmcdough:next
Update to 4.5.3 for CVE-2016-2123 (bsc#1014437) CVE-2016-2125 (bsc#1014441) CVE-2016-2126 (bsc#1014442)

OBS-URL: https://build.opensuse.org/request/show/447039
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=549
2016-12-19 15:42:31 +00:00
a0add68146 Accepting request 433664 from home:jmcdough:rhbuildfix
Fix RH builds by replacing Prereq with Requires

OBS-URL: https://build.opensuse.org/request/show/433664
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=548
2016-10-06 23:42:10 +00:00
f243773fee Accepting request 429185 from home:jmcdough:STABLE-next
Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).

OBS-URL: https://build.opensuse.org/request/show/429185
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=547
2016-09-20 19:41:13 +00:00
41a9a61feb Accepting request 427927 from home:jmcdough:samba450
Update to 4.5.0

OBS-URL: https://build.opensuse.org/request/show/427927
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=546
2016-09-15 12:21:11 +00:00
David Disseldorp
851005e5e2 Accepting request 419509 from home:dmdiss:samba_vfs_ceph
- Don't package man pages for VFS modules that aren't built;
  (boo#993707).
- Fix population of ctdb sysconfig after source merge; (bsc#981566).
- Enable vfs_ceph builds for Factory (x86-64)
  + Package as samba-ceph to avoid Ceph dependency in base package.

OBS-URL: https://build.opensuse.org/request/show/419509
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=545
2016-08-15 19:38:49 +00:00
5144ab054e Update to 4.4.5: Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=544
2016-07-07 16:01:50 +00:00
e4ff39e71f - Remove obsolete syslog.target; (bsc#983938).
- Honor smb.conf socket options in winbind; (bsc#975131).

- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=543
2016-06-22 15:39:58 +00:00
6ad4651bcd Fix timestamp
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=542
2016-06-09 12:21:53 +00:00
2e857dbcf9 Update to 4.4.4
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=541
2016-06-09 12:10:19 +00:00
ec4955f623 Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=540
2016-05-03 13:24:33 +00:00
1191fc82a3 Fix changelog wording
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=539
2016-04-13 14:15:20 +00:00
65c24e1689 Accepting request 389457 from home:dimstar:Factory
- Revert the SLPP massacre from Feb 17 2016: comply to the shared
  library packaging policy for as long as there are public headers
  and pkgconfig files being installed. An upstream claim of
  'something' being private does not make it private as long as
  public headers are installed.

You can evaluate the entire diff created between the openSUSE:Factory (current) package
towards this branch with the revert, using:

osc rdiff openSUSE:Factory samba home:dimstar:Factory samba

Which should make this long diff less scary.

OBS-URL: https://build.opensuse.org/request/show/389457
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=538
2016-04-13 14:11:30 +00:00
cf6a5aeb20 remove older release for 4.4.2 upgrade
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=537
2016-04-13 12:11:01 +00:00
8e67baa938 Accepting request 389361 from home:jmcdough:branches:network:samba:STABLE
Update to 4.4.2 for badlock

OBS-URL: https://build.opensuse.org/request/show/389361
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=536
2016-04-13 11:59:31 +00:00
Lars Müller
47844ba399 Obsolete libsmbclient from libsmbclient0 while not providing it;
(bsc#972197).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=535
2016-03-22 19:19:46 +00:00
Lars Müller
9eab0c6b6f Update to 4.4.0.
See also WHATSNEW.txt from the samba-doc package.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=534
2016-03-22 14:14:33 +00:00
Lars Müller
943665cb92 update expired samba.keyring
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=533
2016-03-08 13:50:30 +00:00
Lars Müller
10fc14d966 - Update to 4.3.6.
+ Getting and setting Windows ACLs on symlinks can change permissions on link
    target; CVE-2015-7560; (bso#11648); (bsc#968222).
  + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771;
    (bso#11128); (bso#11686); (bsc#968223).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=532
2016-03-08 13:16:59 +00:00
Lars Müller
ff89e0fef7 Add MACHINE.SID idmap2.tdb, and idmap_test.tdb
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=531
2016-03-02 18:25:28 +00:00
Lars Müller
5a0be9a0e1 Add connections.tdb and g_lock.tdb
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=530
2016-03-02 17:55:24 +00:00
Lars Müller
91761c3145 Relocate lock directory to the client package
Else the directory is missing at install time and the relocating mv
command stacked one dir into the next with the same name. The last
remaining lock file then later got replaced by the dir created by the
samba (main) package.

Adding a ending / to the destination also of lock and private ensures
this will not bit us again.

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=529
2016-03-02 15:19:44 +00:00
Lars Müller
e8d66ad90c Only obsolete but do not provide gplv2/3 package names; (bsc#968973).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=528
2016-03-01 18:18:14 +00:00