Revisions of samba

Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 140584 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 126)
Automatic submission by obs-autosubmit
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 137385 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 125)
Automatic submission by obs-autosubmit
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 134806 from Lars Müller's avatar Lars Müller (lmuelle) (revision 124)
- Update to 3.6.8.
  + Fix crash bug in smbd caused by a blocking lock followed by close;
    (bso#9084).
  + Fix Winbind panic if we couldn't find the domain; (bso#9135).
- Backport FSCTL codes and fix segfault in smbstatus from master; (bso#9058).
- Fix bad call to memcpy source3/registry/regfio.c; (bso#9065).
- "Domain Users" incorrectly added as additional group on domain members;
  (bso#9066).
- Use correct RID for "Domain Guests" primary group; (bso#9067).
- Fix crash bug in smbd caused by a blocking lock followed by close;
  (bso#9084).
- Fix smbclient/tarmode panic when connecting to Windows 2000 clients;
  (bso#9088).
- Fix refreshing of Kerberos tickets in Winbind; (bso#9098).
- Fix identification of idle clients in Winbind to avoid crashes and NDR
  parsing errors; (bso#9104).
- Fix compilation with newer MIT Kerberos which hides internal symbols;
  (bso#9111).
- Fix flooding the logs with records we don't find in pcap; (bso#9112).
- Initialize the print backend after we setup winreg; (bso#9122).
- Fix lprng job tracking errors; (bso#9123).
- Fix setting of "inherited" bit on inherited ACE's; (bso#9124).
- Fix Winbind panic if we couldn't find the domain; (bso#9135).
- Make 'smbclient allinfo' show the snapshot list; (bso#9137).
- Fix nfs quota support with Linux nfs4 mounts; (bso#9144).
- Valid open requests can cause smbd assert due to incorrect oplock handling
  on delete requests; (bso#9150).
- NMB registration for a duplicate workstation fails with registration
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 134095 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 123)
Automatic submission by obs-autosubmit
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 130363 from Lars Müller's avatar Lars Müller (lmuelle) (revision 122)
- Update to 3.6.7.
  + Fix resolving our own "Domain Local" groups; (bso#9052).
  + Fix migrating printers while upgrading from 3.5.x; (bso#9026).

- Correct documentation of "case sensitive"; (bso#8552).
- Printing fails in function cups_job_submit; (bso#8719).
- Fix kernel oplocks when uid(file) != uid(process); (bso#8974).
- Send correct responses to NT Transact Secondary when no data and no params
  for the Trans2 calls are set; (bso#8989).
- Fix build without ads support; (bso#8996).
- Don't turn negative cache entries into valid idmappings; (bso#9002).
- Fix posix acl on gpfs; (bso#9003).
- Make vfs_gpfs less verbose in get/set_xattr functions; (bso#9022).
- Fix migrating printers while upgrading from 3.5.x; (bso#9026).
- Fix typo in set_re_uid() call when USE_SETRESUID selected in configure;
  (bso#9034).
- Using asynchronous IO with SMB2 can return NT_STATUS_FILE_CLOSED in error
  instead ofNT_STATUS_FILE_LOCK_CONFLICT; (bso#9040).
- Fix resolving our own "Domain Local" groups; (bso#9052).
- Fix build against CUPS 1.6; (bso#9055).
- Fix bugs in SMB2 credit handling code; (bso#9057).
- rpcclient: Fix bad call to data_blob_const; (bso#9062).

- BuildRequire gcc, make, and patch; (bnc#771516).
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 127780 from Lars Müller's avatar Lars Müller (lmuelle) (revision 121)
- ndr: fix push/pull DATA_BLOB with NDR_NOALIGN; (bso#9026); (bnc#770262).
- Fix shell syntax in dhcpcd hook script; (bnc#769957).
- Update to 3.6.6.
  + Fix possible memory leaks in the Samba master process; (bso#8970).
  + Fix uninitialized memory read in talloc_free(); (bnc#764577).
  + Fix joining of XP Pro workstations to 3.6 DCs; (bso#8373).
- resolve_ads() code can return zero addresses and miss valid DC IP addresses;
  (bso#8910).
- Can't join XP Pro workstations to 3.6.1 DC; (bso#8373).
- winbind can hang as nbt_getdc() has no timeout; (bso#8953).
- Fix crash bug in dns_create_probe when dns_create_update fails; (bso#8627)
- s3-pid: Catch with pid filename's change when config file is not smb.conf;
  (bso#8714).
- Possible memory leaks in the main Samba process; (bso#8970).
- s3: Fix uninitialized memory read in talloc_free(); (bnc#764577).
- Treat exit_server_cleanly() as a "clean" shutdown; (bso#8971).
- Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute(); (bso#8988).
- Winzip occasionally can not read files out of an open winzip dialog;
  (bso#8311).
- s3-winbindd: call dump_core_setup after command line option has been parsed;
  (bso#8975).
- Directory group write permission bit is set if unix extensions are enabled;
  (bso#8972).
- s3: remove dependency on automake for "make everything"; (bso#8978).
- sd_has_inheritable_components segfaults on an SD that se_access_check
  accepts; (bso#8811).
- smbclient's tarmode insists on listing excluded directories; (bso#8922).
- Notify code can miss a ChDir; (bso#8998).
- s3:smbd: add a fsp_persistent_id() function; (bso#8995).
- Call autogen.sh even on post-12.1 SUSE systems.
- Include the reviewed french translation for pam_winbind; (bnc#499233).
Adrian Schröter's avatar Adrian Schröter (adrianSuSE) committed (revision 120)
revert
Adrian Schröter's avatar Adrian Schröter (adrianSuSE) committed (revision 119)
branched from openSUSE:Factory
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 123259 from Lars Müller's avatar Lars Müller (lmuelle) (revision 118)
- Don't call autogen.sh on post-12.1 SUSE and post-14 Fedora systems.
- Recompile all IDL in any case.
- BuildIgnore libtalloc and libtdb to prevent a package conflict on Fedora
  systems.
- Install talloc.pc only on pre-12.2 and non SUSE systems.
- BuildRequire libldb-devel, libtalloc-devel, libtdb-devel, and
  libtevent-devel on post-12.1 systems.
- s3: Fix a segfault with debug level 3 on Solaris; (bso#8861).
- s3: wbinfo --lookup-sids "" crashes winbind; (bso#8904).
- smbd crashes when deleting directory and veto files are enabled; (bso#8837).
- winbind_krb5_locator only returns one IP address; (bso#8897).
- Wrong assertion/comparison: Compare value not pointer; (bso#8859).
- Inconsistent (with manpage) command-line switch for "help" in smbtree;
  (bso#8831).
- Fix incorrect debug statement.
- Setting traverse rights fails to enable directory traversal when acl_xattr
  in use; (bso#8857).
- Syslog broken owing to mistyping of debug_settings.syslog; (bso#8877).
- s3/ldap: remove outdated netscape ds 5 schema file; (bso#8869).
- s3-docs: fixes several typos; (bso#7938).
- s3-VFS: Fix building out-of-tree modules; (bso#8822).
- s3-docs: Add hint that setting "profile acls = yes" on normal shares can
  cause trouble; (bso#7930).
- s3-pam_winbind: Fix the build with a newer iniparser library; (bso#8915).
- Avoid null dereference in initialize_password_db(); (bso#8920).
- s3:registry: implement values_need_update and subkeys_need_update in the
  smbconf backend.
- s3:registry:reg_api: fix reg_queryvalue to not fail when values are
  modified while it runs.
- s4:torture:rpc:spoolss: also initialize driverName before checking it in
  test_PrinterData_DsSpooler().
- s3:registry: multiple cleanups, fixes, and optimisations.
- s3:auth/server_info: the primary rid should be in the groups rid array;
  (bso#8798).
- s3-printing: Add new printers to registry; (bso#8554); (baso#8612);
  (bso#8748).
- Fix the overwriting of errno before use in a DEBUG statement and use the
  return value from store_acl_blob_fsp rather than ignoring it; (bso#8945).
- s3-auth: Don't lookup the system user in pdb; (bso#8944).
- s3-passdb: Fix negative SID->uid/gid cache handling; (bso#8952).
- Fix typo in pam_winbindd code; (bso#8957).
- Fix remove_duplicate_addrs2 previously it could leave zero addresses in the
  list; (bso#8910).
- Slow but responsive DC can lock up winbindd; (bso#8943).
- Broken processing of %U with vfs_full_audit when force user is set;
  (bso#8882).
- Disable included build of ldb, talloc, tdb, and tevent on post-12.1 systems.
- BuildRequire libldb1-devel, libtalloc2-devel, libtdb1-devel, and
  libtevent0-devel on post-12.1 systems.
- Add PreReq /etc/init.d/nscd to the winbind package; (bnc#759731).
- s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845);
  (bnc#730769).
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 116103 from Lars Müller's avatar Lars Müller (lmuelle) (revision 117)
- docs-xml: fix default name resolve order; (bso#7564).
- s3-aio-fork: Fix a segfault in vfs_aio_fork; (bso#8836).
- docs: remove whitespace in example samba.ldif; (bso#8789).
- s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845).
- s3-docs: Prepend '/' to filename argument; (bso#8826).
- Update to 3.6.5.
- Restrict self granting privileges where security=ads for Samba post-3.3.16;
  CVE-2012-2111; (bnc#757576).
- Remove all precompiled idl output to ensure any pidl changes take effect;
  (bnc#757080).
- Do not map POSIX execute permission to Windows FILE_READ_ATTRIBUTES;
  (bso#8631); (bnc#732572).
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 113255 from Lars Müller's avatar Lars Müller (lmuelle) (revision 116)
- Update to 3.6.4.
- Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe-
  cution as the "root" user; PIDL based autogenerated code allows overwriting
  beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797).
- s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys;
  (bso#8599).
- Correctly handle DENY ACEs when privileges apply; (bso#8797).
- s3:smb2_server: fix a logic error, we should sign non guest sessions;
  (bso8749).
- Allow vfs_aio_pthread to build as a static module; (bso#8723).
- s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for
  persistent dbs; (#bso8527).
- s3: segfault in dom_sid_compare(bso#8567).
- Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER;
  (bso#8768).
- s3-winbindd: Close netlogon connection if the status returned by the
  NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771).
- s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599).
- Fix problem when calculating the share security mask, take priviliges into
  account for the connecting user; (bso#8784).
- Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups;
  (bso#8807); (bnc#751454).
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 109356 from Lars Müller's avatar Lars Müller (lmuelle) (revision 115)
- Add the ldapsmb sources as else patches against them have no chance to apply.
- Remove obsoleted Authors lines from spec file for post-11.2 systems.
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 108324 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 114)
Automatic submission by obs-autosubmit
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 106910 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 113)
Automatic submission by obs-autosubmit
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 103616 from Lars Müller's avatar Lars Müller (lmuelle) (revision 112)
- s3:winbindd fix a return code check; (bso#8406).
- s3: Add rmdir operation to streams_depot; (bso#8733).
- s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used();
  (bso#8738).
- s3:auth: fill the sids array of the info3 in
  wbcAuthUserInfo_to_netr_SamInfo3(); (bso#8739).
- s3:client: ignore SMBecho errors (the server may not support it);
  (bso#8139).
- Be more strict when using PAM_AUTH API from winbind if Kerberos auth is
  enabled and don't unintentionally use a bogus domain name; (bso#8734).
- smbclient fails with posix large reads; (bso#8727).
- Use the smbfs init script on versions pre-11.3, or cifs in later versions;
  (bnc#744614).
- s3: Compile IDL files in autogen, some configure tests need this.
- Fixes various deadlocks in if-up.d / if-down.d when running under
  systemd; (bnc#732395).
- Fix incorrect types in the full_audit VFS module. Add null terminators to
  audit log enums; (bnc#742885).
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 101972 from Lars Müller's avatar Lars Müller (lmuelle) (revision 111)
- Fix memory leak in parent smbd on connection; CVE-2012-0817; (bso#8724);
  (bnc#743986).
- Use spdx.org compliant license names for all packages.
- Update to 3.6.2.

See WHATSNEW.txt from the main tar ball or the samba.changes file for more
details.

- s3-spoolss: Pass the right pointer type; (bso#4942); (bnc#742504).
- Use correct license, LGPLv3+ for libwbclient packages.
- When returning an ACL without SECINFO_DACL requested, we still set
  SEC_DESC_DACL_PRESENT in the type field; (bso#8636).
- Prefix print$ path on driver file deletion; (bso#8697); (bnc#740810).
- Fix printer_driver_files_in_use() call ordering; (bso#4942); (bnc#742504).
- Buffer overflow issue with AES encryption in samba traffic analyzer;
  (bso#8674).
- NT ACL issue; (bso#8673).
- Deleting a symlink fails if the symlink target is outside of the share;
  (bso#8663).
- connections.tdb - major leak with SMB2; (bso#8710).
- Renaming a symlink fails if the symlink target is outside of the share;
  (bso#8664).
- Intermittent print job failures caused by character conversion errors;
  (bso#8606).
- ads_keytab_verify_ticket mixes talloc allocation with malloc free;
  (bso#8692).
- libcli/cldap: fix a crash bug in cldap_socket_recv_dgram(); (bso#8593).
- s3:lib/ctdbd_conn: try ctdbd_init_connection() as root; (bso#8684).
- s3-printing: fix migrate printer code; (bso#8618).
- Packet validation checks can be done before length validation causing
  uninitialized memory read; (bso#8686).
- net memberships usage info was wrong; (bso#8687).
- s3-libsmb: Don't duplicate kerberos service tickets; (bso#8628).
- Recvfile code path using splice() on Linux leaves data in the pipe on short
  write; (bso#8679).
- s3-winbind: Fix segfault if we can't map the last user; (bso#8678).
- vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on
  a directory with no stored ACL; (bso#8644).
- s3/doc: document the ignore system acls option of vfs_acl_xattr and
  vfs_acl_tdb; (bso#8652).
- Winbind can't receive any user/group information; (bso#8371).
- s3-winbind: Add an update function for winbind cache; (bso#8643).
- s3: Attempt to fix the vfs_commit module.
- POSIX ACE x permission becomes rx following mapping to and from a DACL;
  (#bso#8631).
- s3:libsmb: only align unicode pipe_name; (bso#8586).
- s3-winbind: Don't fail on users without a uid; (bso#8608).
- Crash when trying to browse samba printers; (bso#8623).
- talloc: double free error; (bso#8562).
- cldap doesn't work over ipv6; (bso#8600).
- s3:libsmb: fix cli_write_and_x() against OS/2 print shares; (bso#5326).
- SMB2: not granting credits for all requests in a compound request;
  (bso#8614).
- smb2_flush sends uninitialized memory; (bso#8579).
- Password change settings not fully observed; (bso#8561).
- s3:smb2_server: grant credits in async interim responses; (bso#8357).
- s3:smbd: don't limit the number of open dptrs for smb2; (bso#8592).
- samr_ChangePasswordUser3 IDL incorrect; (bso#8591).
- idmap_autorid does not have allocation pool; (bso#8444).
- Add systemd service files.
- s3:libsmb: the workgroup in the non-extended-security negprot is not
  aligned; (bso#8573).
- s3-build: Fix inotify detection; (bso#8580).
- SMB2 doesn't handle compound request headers in the same way as Windows;
  (#bso8560).
- Disconnecting clients swamp the logs; (bso#8585).
- s3-netlogon: Fix setting the machinge account password; (bso#8550).
- winbind_samlogon_retry_loop ignores logon_parameters flags; (#bso8548). 
- smbclient posix_open command fails to return correct info on open file;
  (bso#8542).
- readlink() on Linux clients fails if the symlink target is outside of the
  share; (bso#8541).
- s3-netapi: remove pointless use_memory_krb5_ccache; (bso#7465).
- s3:Makefile: make DSO_EXPORTS_CMD more portable; (bso#8531).
- s3:registry: fix the test for a REG_SZ blob possibly being a zero terminated
  ucs2 string; (bso#8528).
- Make VFS op "streaminfo" stackable; (bso#8419).
- Fix incorrect perfcount array length calculations; (bnc#739258).
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 98539 from Lars Müller's avatar Lars Müller (lmuelle) (revision 110)
- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.
- Remove call to suse_update_config macro for post-11.4 systems.
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 97212 from Lars Müller's avatar Lars Müller (lmuelle) (revision 109)
- Use samba.org for the ldapsmb source location.
- Fixing libsmbsharemode dependency on ldap and krb5 libs in Makefile;
  (bnc #729516).
- Add ldap to Should-Start and Stop of the smb init script; (bnc#730046).
- Fix smbd srv_spoolss_replycloseprinter() segfault; (bso#8384); (bnc#731571).
- Fix pam_winbind.so segfault in pam_sm_authenticate(); (bso#8564).
- Fix smbclient >8GB tars on big endian machines; (bso#563); (bnc#726145).
- Fix typo in net ads join output; (bnc#713135).
- Add "ldapsam:login cache" parameter to allow explicit disabling
  of the login cache; (bnc#723261).
- Fix samba duplicates file content on appending. Move posix case semantics
  out from under the VFS; (bso#6898); (bnc#681208).
- Make winbind child reconnect when remote end has closed, fix
  failing sudo; (bso#7295); (bnc#569721).
- Fix printing from Windows 7 clients; (bso#7567); (bnc#687535).
- Update pidl and always compile IDL at build time; (bnc#688810).
- Abide by print$ share 'force user' & 'force group' settings when handling
  AddprinterDriver and DeletePrinterDriver requests; (bso#7921); (bnc#653353).
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 89777 from Lars Müller's avatar Lars Müller (lmuelle) (revision 108)
- Ignore a potentially missing AppArmor snippet helper script; (bnc#725256).
- Fixed the DFS referral response for msdfs root; (bnc#703655).
Stephan Kulow's avatar Stephan Kulow (coolo) accepted request 88972 from Lars Müller's avatar Lars Müller (lmuelle) (revision 107)
This is a cleanup update replacing all patches we formerly had in the Samba
package.

- Update to 3.6.1.
  + Fix smbd crashes triggered by Windows XP clients; (bso#8384).
  + Fix a Winbind race leading to 100% CPU load; (bso#8409).
  + Several SMB2 fixes.
  + The VFS ACL modules are no longer experimental but production-ready.
  + Fix 'net ads join -k' when KRB5CCNAME is not set; (bso#7465).
  + smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).
  + Return error of cli_push when 'put - /some/file' is used; (bso#7551).
  + Fix usage of cli_errstr(); (bso#7864).
  + Fix 'widelinks' regression; (bso#8229).
  + Empty notify servername; (bso#8236).
  + Add man vfs_aio_fork; (bso#8256).
  + smb2: smbd logs "Invalid SMB packet: first request: 0x0008" and crashes;
    (bso#8334).
  + Add a fallback for missing open&x support in MAC OS/X Lion; (bso#8338).
  + While migrating forms, don't fail if the form already exists; (bso#8351).
  + OS/2 sends an unexpected write&x/read&x chain; (bso#8360).
  + Fix build of vfs_prealloc on SLES8; (bso#8363).
  + Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4; (bso#8364).
  + Fix the fallback to the deprecated spelling idmap:script; (bso#8368).
  + Fix vfs_chown_fsp; (bso#8370).
  + Fix smbd crashes triggered by Windows XP clients; (bso#8384).
  + Fix smbclient access to NT4 shares; (bso#8385).
  + Optimize serverid_exists() for Solaris; (bso#8395).
  + registry/reg_format.c must include includes.h; (bso#8401).
  + SMB2 server can return requests out-of-order when processing a compound
    request; (bso#8407).
  + Fix a Winbind race leading to 100% CPU load; (bso#8409).
  + Fix "saving as" of MS Office 2007 (Word) documents on Samba shares with
    SMB2; (bso#8412).
  + Fix 'getent group' if trusted domains are not reachable; (bso#8420).
  + Fix infinite loop in ACL module code; (bso#8422).
  + Fix wrong reply to DHnC (durable handle reconnect); (bso#8428).
  + Compound SMB2 requests on an IPC connection can corrupt the reply stream;
    (bso#8429).
  + Fix segfault in iconv.c; (bso#8433).
  + NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames;
    (bso#8442).
  + Be smarter about setting default permissions when a ACL_USER_OBJ isn't
    given; (bso#8443).
  + Check the wct of the incoming SMBnegprot responses; (bso#8452).
  + Fix smbclient segfaults when dialect option -m is used for legacy
    dialects; (bso#8453).
  + Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).
  + Samba PDC is looking up only primary user group; (bso#8455).
  + IE9 on Windows 7 cannot download files to samba 3.5.11 share; (bso#8458).
  + smb2_find uses a hard coded max reply size of 0x10000 instead of
    smb2_max_trans; (bso#8473).
  + SMB2 create doesn't cope with an Apple client using NULL blob in create;
    (bso#8474).
  + Don't call smbd_terminate_connection in smb2_validate_message_id();
    (bso#8476).
  + Samba asserts when SMB2 client breaks the crediting rules; (bso#8476).
  + Map to guest can return uninitialized blob of data; (bso#8477).
  + acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).
  + DFS breaks zip file extracting unless "follow symlinks = no" set;
   (bso#8493).
  + Remove "experimental" label on VFS ACL modules; (bso#8494).
  + SMB2_OP_CANCEL requests don't have to be signed; (bso#8503).
  + smbd doesn't correctly honor the "force create mode" bits from a cifsfs
    create; (bso#8507).
  + Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER;
    (bso#8509).
  + Disallow "." in can_set_delete_on_close(); (bso#8515).
  + SMB2 create call returns incorrect file allocation size; (bso#8518).
  + Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements;
    (bso#8520).
  + Winbind cache timeout expiry test was reversed; (bso#8521).
Displaying revisions 181 - 200 of 306
openSUSE Build Service is sponsored by