Release Announcements
-
This is the latest stable release of the Samba 4.19 release series.
Changes since 4.19.6
o Douglas Bagnall
* BUG 15569: ldb qsort might r/w out of bounds with an intransitive
compare
function (ldb 2.8.1 is already
The branch, v4-19-stable has been updated
via bce5c475d12 VERSION: Disable GIT_SNAPSHOT for the 4.19.7 release.
via e71f7441c9e WHATSNEW: Add release notes for Samba 4.19.7.
via 6ca4df63741 BUG 15569 ldb: Release LDB 2.8.1
via d4f9272b7e9 s3:smbcacls: fix
The branch, master has been updated
via 19e1100 NEWS[4.19.7]: Samba 4.19.7 Available for Download
from 2ec8209 NEWS[4.20.1]: Samba 4.20.1 Available for Download
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master
- Log
The annotated tag, samba-4.19.7 has been created
at 92be2654d0c65af6c71d2da5b32c443812092b0d (tag)
tagging bce5c475d12fb75619bc85d176bfd40420b4fce8 (commit)
replaces ldb-2.8.1
tagged by Jule Anger
on Mon Jun 10 17:29:04 2024 +0200
- Log
The branch, v4-19-test has been updated
via 6875787d129 VERSION: Bump version up to Samba 4.19.8...
via bce5c475d12 VERSION: Disable GIT_SNAPSHOT for the 4.19.7 release.
via e71f7441c9e WHATSNEW: Add release notes for Samba 4.19.7.
via 6ca4df63741 BUG 15569 ldb
The annotated tag, ldb-2.8.1 has been created
at 994b7debdcd5fdb4d9617f84c6fa4456cfdcf51c (tag)
tagging 6ca4df6374136d1d205de689618dc8fce5177d14 (commit)
replaces samba-4.19.6
tagged by Jule Anger
on Mon Jun 10 17:20:50 2024 +0200
- Log
-samba:ldif_handlers: dn_link_comparison semi-sorts
invalid DNs
via 956bff1dc63 ldb-samba:ldif_handlers: dn_link_comparison semi-sorts
deleted objects
via da5c625e641 ldb-samba: ldif-handlers: make
ldif_comparison_objectSid() accurate
via dcf393af595 s4:rpcsrv:samr: improve a comment
-samba:ldif_handlers: dn_link_comparison semi-sorts
invalid DNs
via fae4e0b16aa ldb-samba:ldif_handlers: dn_link_comparison semi-sorts
deleted objects
via 108f687cf22 ldb-samba: ldif-handlers: make
ldif_comparison_objectSid() accurate
via 5bf176b5692 s4:rpcsrv:samr: improve a comment
The branch, master has been updated
via 225e6aeafc7 s4/torture: Remove already existing test_dir
via 3b230769b02 s4/torture: Create test_dir with SEC_RIGHTS_DIR_ALL
from 469b22b849a python/samba/tests/krb5: Allow
PkInitTests.test_pkinit_ntlm_from_pac_must_change_now to pass
The branch, master has been updated
via 469b22b849a python/samba/tests/krb5: Allow
PkInitTests.test_pkinit_ntlm_from_pac_must_change_now to pass on Samba/Heimdal
via 15686fec981 python/samba/tests/krb5: Expand test without
UF_SMARTCARD_REQUIRED to show rotation is not done
,
_sd);
--
Samba Shared Repository
off-by: Stefan Metzmacher
Reviewed-by: Andrew Bartlett
---
Summary of changes:
python/samba/netcmd/domain/backup.py | 27 ++-
python/samba/tests/domain_backup.py | 29 ++--
source3/libsmb/namequery.c |
d-off-by: Stefan Metzmacher
Reviewed-by: Andrew Bartlett
---
Summary of changes:
lib/addns/dns.h | 2 -
python/samba/tests/dns_base.py| 213 +++---
python/samba/tests/dns_tkey
The branch, master has been updated
via 096d3807b05 build: Make "samba4" public libraries provided (mostly)
for OpenChange private
via d11b281aefa build: Remove incorrect pyembed=True from samba-policy
via 829b52f99d5 s4-libnet: Split up samba-net into samba-net
Reviewed-by: David Mulder
(cherry picked from commit 7a5e7b821259890dd2978e6f113f4a3dad110ea4)
---
Summary of changes:
python/samba/gp/gpclass.py | 4 +---
source3/libads/kerberos.c | 32
(ad_dc:local)
UNEXPECTED(failure):
samba.tests.krb5.gmsa_tests.samba.tests.krb5.gmsa_tests.GmsaTests.test_retrieving_managed_password_triggers_keys_update(ad_dc:local)
REASON: Exception: Exception: Traceback (most recent call last):
File
"/builds/samba-testbase/samba-def-buil
infrastructure to me
seems like a lot of effort for moderate gain.
Signed-off-by: Volker Lendecke
Reviewed-by: Jeremy Allison
---
Summary of changes:
python/samba/tests/reparsepoints.py | 20
W_ERROR_EQUAL(r.out.result, WERR_NOT_SUPPORTED) ||
+ W_ERROR_EQUAL(r.out.result, WERR_INVALID_PARAMETER),
+ "LogonControl2Ex");
break;
default:
torture_assert_werr_equal(tctx, r.out.result,
WERR_ACCESS_DENIED, "LogonControl2Ex");
--
Samba Shared Repository
for (i=0; ops && ops[i]; i++) {
- if (gensec_security != NULL &&
- !gensec_security_ops_enabled(ops[i], gensec_security)) {
- continue;
- }
if (!ops[i]->oid) {
continue;
}
diff --git a/auth/gensec/spnego.c b/auth/gensec/spnego.c
index 717f643957a..d63d292f168 100644
--- a/auth/gensec/spnego.c
+++ b/auth/gensec/spnego.c
@@ -242,12 +242,6 @@ static NTSTATUS gensec_spnego_server_try_fallback(struct
gensec_security *gensec
--
Samba Shared Repository
rap_get_real_filename_at,
.connectpath_fn = cephwrap_connectpath,
.fget_dos_attributes_fn = cephwrap_fget_dos_attributes,
+ .fset_dos_attributes_fn = cephwrap_fset_dos_attributes,
/* EA operations. */
.getxattrat_send_fn = vfs_not_implemented_getxattrat_
The branch, master has been updated
via 98b443d9033 fuzzing: fix fuzz_stable_sort_r_unstable comparison
via 267f307689b s3/torture: local_rbtree: avoid birthday collisions
from 3a7dbf8b77b examples:winexe: embed Samba version as exe timestamp
https://git.samba.org/?p
The branch, master has been updated
via 3a7dbf8b77b examples:winexe: embed Samba version as exe timestamp
via e604f757516 examples:winexe: reproducible builds with zero timestamp
via 3c72f733f45 examples:winexe: more efficient C array generation, no
py2
via
###
@@ -257,6 +265,10 @@ nfs_callout_init "$script_state_dir"
case "$1" in
startup)
+ if [ -x "${CTDB_BASE}/statd-callout" ] ; then
+ "${CTDB_BASE}/statd-callout" startup
+ fi
+
nfs_callout "$@" || exit $?
962 .gitlab-ci: Remove tags no longer provided by gitlab.com
from 9b6bc91254c VERSION: Bump version up to Samba 4.20.2...
https://git.samba.org/?p=samba.git;a=shortlog;h=v4-20-test
- Log -
com
re commit da7dcc443f45d07d9963df9daae458fbdd991a47
was released with samba-4.15.0rc1.
Testing against Windows Server 2022 revealed that anonymous signing is
always
allowed (with the session key derived from 16 zero bytes) and
anonymous encryption is allowed after one authenticated session setup on
tries smb3 encryption on an anonymous
session,
we used to allow that before commit da7dcc443f45d07d9963df9daae458fbdd991a47
was released with samba-4.15.0rc1.
Testing against Windows Server 2022 revealed that anonymous signing is
always
allowed (with the session key derived from
()
via 960724a06e4 ldb: ldb_comparison_fold always uses the casecmp
function
via edabb9f4cb9 ldb-samba: use ldb_comparison_fold_utf8()
via 0becc8a90cb ldb-samba: add ldb_comparison_fold_utf8, wrapping
strncasecmp_ldb
via f9797950fd6 util:charset: strncasecmp_ldb avoids
| 19 +---
dfs_server/dfs_server_ad.c | 8 +-
docs-xml/smbdotconf/misc/dnsclientname.xml | 17
lib/param/loadparm.c | 37
.../tests/blackbox/rpcd_witness_samba_only.py | 3 +-
python/samba/tests/dckeytab.py
(smbXcli_conn_has_async_calls(cli->conn)) {
- /*
- * Can't use sync call while an async call is in flight
-*/
- status = NT_STATUS_INVALID_PARAMETER;
- goto fail;
- }
- ev = samba_tevent_context_init(frame);
- if (ev == NULL) {
- goto fail;
- }
- req = cli_list_trans_send(frame, ev, cli, mask, attribute, info_level);
- if (req == NULL) {
- goto fail;
- }
- if (!tevent_req_poll_ntstatus(req, ev, )) {
--
Samba Shared Repository
The branch, master has been updated
via bdfbf25255e test_kinit_export_keytab: reset pw of the test account
and test --only-current-keys
via b4be5718d3d samba-tool: let 'samba-tool domain exportkeytab' take
an --only-current-keys option
via 2793ef3e163 samba.tests.dckeytab
() parameters in correct order
‘account_name’ and ‘server_name’ are passed in the wrong order. While
Samba ignores the account name parameter and doesn’t have a problem with
it missing its trailing dollar, Windows checks it and requires the
trailing dollar to be present.
Signed-off
locked(frame, fsp->file_id);
- if (lck == NULL) {
- status = NT_STATUS_OK;
- goto out;
- }
-
- delete_on_close_set = is_delete_on_close_set(lck, name_hash);
+ get_file_infos(fsp->file_id, name_hash, _on_close_set, NULL);
if (delete_on_close_set) {
status = NT_STATUS_DELETE_PENDING;
goto out;
--
Samba Shared Repository
endecke
Reviewed-by: Jeremy Allison
---
Summary of changes:
libcli/auth/tests/test_schannel.c | 4 +-
python/samba/tests/reparsepoints.py | 24
python/samba/tests/smb3unix.py | 41 ++
source3/libsmb/cli_smb2_fnum.c | 1 +
s
ne:
SAFE_FREE( data.dptr );
@@ -4922,7 +4924,7 @@ void wcache_store_ndr(struct winbindd_domain *domain,
uint32_t opnum,
SBVAL(data.dptr, 4, timeout);
memcpy(data.dptr + 12, resp->data, resp->length);
- tdb_store(wcache->tdb, key, data, 0);
+ tdb_store(w
/ustring.h', lib='icui18n'):
conf.fatal('Found icui18n, but unicode/ustring.h is missing')
conf.DEFINE('HAVE_UTF8_NORMALISATION', 1)
+else:
+conf.env['icu-libs'] = ''
--
Samba Shared Repository
Lendecke
Autobuild-User(master): Pavel Filipensky
Autobuild-Date(master): Tue May 14 13:37:53 UTC 2024 on atb-devel-224
---
Summary of changes:
python/samba/tests/smb3unix.py | 18 ++
1 file changed
| 45 +++-
lib/krb5_wrap/krb5_samba.h | 11 +
lib/replace/system/kerberos.h | 3 +
libgpo/pygpo.c | 75 +-
python/samba/tests/ntlm_auth.py | 2 +-
python/s
237d9d0228c tests/ntacls: unblock failing gitlab pipelines because
test_setntacl_forcenative
via 380d9c5a739 .gitlab-ci-main.yml: debug kernel details of the
current runner
from 9844ac289be ldb-samba: ldif_read_objectSid avoids VLA
https://git.samba.org/?p=samba.git;a=shortlog;h
Release Announcements
-
This is the latest stable release of the Samba 4.20 release series.
Changes since 4.20.0
o Douglas Bagnall
* BUG 15630: dns update debug message is too noisy.
o Alexander Bokovoy
* BUG 15635: Do not fail PAC
The branch, master has been updated
via 2ec8209 NEWS[4.20.1]: Samba 4.20.1 Available for Download
from 4728e21 NEWS[4.19.6]: Samba 4.19.6 Available for Download
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master
- Log
The branch, v4-20-stable has been updated
via 0ba948cba0b VERSION: Disable GIT_SNAPSHOT for the 4.20.1 release.
via d01b50ec4f3 WHATSNEW: Add release notes for Samba 4.20.1.
via db658c40f5d s3:utils: Fix Inherit-Only flag being automatically
propagated to children
The annotated tag, samba-4.20.1 has been created
at dc3912d4f21e57549c2062e03c9bf94afb9d8307 (tag)
tagging 0ba948cba0b8b0dd4fddbc94999a61b883a3326d (commit)
replaces samba-4.20.0
tagged by Jule Anger
on Wed May 8 10:05:04 2024 +0200
- Log
The branch, v4-20-test has been updated
via 9b6bc91254c VERSION: Bump version up to Samba 4.20.2...
via 0ba948cba0b VERSION: Disable GIT_SNAPSHOT for the 4.20.1 release.
via d01b50ec4f3 WHATSNEW: Add release notes for Samba 4.20.1.
from db658c40f5d s3:utils: Fix
The branch, master has been updated
via 9844ac289be ldb-samba: ldif_read_objectSid avoids VLA
via bf4af1a28a3 ldb-samba: ldif_read_objectSid() short-circuits without
'S'
via 6c0bdf37187 lib/fuzzing: add fuzz_stable_sort_r_unstable
via 59cbaa91348 ldb: note
runners and this meant our CI was being redirected to
our private runners at a larger cost to the Samba Team.
The new infrastructure is much larger than when we last
selected runners so we can just use the default, even for
the code coverage build.
BUG: https
TUS gensec_kerberos_possible(struct gensec_security *gensec_security)
+{
+ struct cli_credentials *creds = gensec_get_credentials(gensec_security);
+ bool auth_requested = cli_credentials_authentication_requested(creds);
+ enum credentials_use_kerberos krb5_state =
+ cli_credentials_get_kerberos_state(creds);
+ char *user_principal = NULL;
+ const char *client_realm = cli_credentials_get_realm(creds);
+ const char *target_principal =
gensec_get_target_principal(gensec_security);
+ const char *hostname = gensec_get_target_hostname(gensec_security);
+
+ if (!auth_requested) {
+ return NT_STATUS_INVALID_PARAMETER;
+ }
+
+ if (krb5_state == CRED_USE_KERBEROS_DISABLED) {
--
Samba Shared Repository
The branch, v4-19-test has been updated
via b00c09bee3b s3:utils: Fix Inherit-Only flag being automatically
propagated to children
via e703c0c3914 python/samba/tests/blackbox: Add tests for Inherit-only
flag propagation
from 2930a1955bf libcli/http: Detect unsupported
The branch, v4-20-test has been updated
via db658c40f5d s3:utils: Fix Inherit-Only flag being automatically
propagated to children
via d28a889aed2 python/samba/tests/blackbox: Add tests for Inherit-only
flag propagation
from 83da49f3489 tests: Add a test for "all_g
Signed-off-by: Volker Lendecke
Reviewed-by: Jeremy Allison
---
Summary of changes:
libcli/smb/reparse.c | 12 +-
libcli/smb/reparse.h| 5 +
python/samba/tests/reparsepoints.py | 104 +--
selftest/knownfail.d/reparse
LOB root_key_data_blob = {
.data = root_key_data, .length = sizeof root_key_data};
--
Samba Shared Repository
== NULL) {
+ return false;
+ }
- if (!lines || numlines < 1) {
- TALLOC_FREE(lines);
- return False;
+ len = getline(, , f);
+ if (len >= 0) {
+ ret = string_to_sid(sid, line);
+ SAFE_FREE(line);
}
- ret = string_to_sid(sid, lines[0]);
- TALLOC_FREE(lines);
+ fclose(f);
return ret;
}
diff --git a/source3/rpc_server/srvsvc/srv_srvsvc_nt.c
b/source3/rpc_server/srvsvc/srv_srvsvc_nt.c
index 29d224c427d..1129576f751 100644
--- a/source3/rpc_server/srvsvc/srv_srvsvc_nt.c
+++ b/source3/rpc_server/srvsvc/srv_srvsvc_nt.c
@@ -30,6 +30,7 @@
#include "librpc/rpc/dcesrv_core.h"
#include "librpc/gen_ndr/ndr_srvsvc.h"
#include "librpc/gen_ndr/ndr_srvsvc_scompat.h"
+#include "librpc/gen_ndr/ndr_open_files.h"
#include "../libcli/security/security.h"
#include "../librpc/gen_ndr/ndr_security.h"
--
Samba Shared Repository
String(PyExc_TypeError, "Expected string as
value");
return -1;
@@ -729,7 +733,7 @@ static int obj_setitem(PyTdbObject *self, PyObject *key,
PyObject *value)
if (ret != 0) {
PyErr_SetTDBError(self->ctx);
return -1;
- }
+ }
return ret;
}
--
Samba Shared Repository
The branch, master has been updated
via 80159018e41 s3:utils: Fix Inherit-Only flag being automatically
propagated to children
via eba2bfde347 python/samba/tests/blackbox: Add tests for Inherit-only
flag propagation
from 96b5cfe4e6c s3:libsmb: Pass a memory context
t_ss, int port,
@@ -103,8 +110,10 @@ struct tevent_req *cli_full_connection_creds_send(
int flags,
struct smb2_negotiate_contexts *negotiate_contexts);
NTSTATUS cli_full_connection_creds_recv(struct tevent_req *req,
+ TALLOC_CTX *mem_ctx,
--
Samba Shared Repository
| 14 +++---
lib/crypto/gkdi.c | 2 +-
lib/ldb/pyldb.c | 1 -
python/samba/gkdi.py | 6 ++
python/samba/samdb.py | 7 +++
python/samba/tests
lib/crypto/gnutls_helpers.h| 6 +
lib/crypto/gnutls_server_end_point_cb.c| 130
lib/crypto/wscript | 6 +-
lib/ldb-samba/ldb_ildap.c | 9 +-
lib/param/loadparm.c | 1 -
lib/param/
ce4/dsdb/common/rodc_helper.c
+++ b/source4/dsdb/common/rodc_helper.c
@@ -243,7 +243,7 @@ WERROR samdb_confirm_rodc_allowed_to_repl_to(struct
ldb_context *sam_ctx,
{
TALLOC_CTX *frame = talloc_stackframe();
WERROR werr;
- uint32_t num_token_sids;
+ uint32_t num_token_sids = 0;
struct dom_sid *token_sids;
const struct dom_sid *object_sid = NULL;
--
Samba Shared Repository
dcerpc_binding_handle *binding_handle;
+ /*
+* This is per association_group, but
+* for now we only have one connection
+* per association_group.
+*/
+ uint16_t bind_time_features;
+
struct ndr_syntax_id abstract_syntax;
struct ndr_syntax_id transfer_syntax;
bool verified_pcontext;
--
Samba Shared Repository
The branch, master has been updated
via 2674df4cc0e s3:libsmb: let cli_tree_connect_creds() only call
cli_credentials_get_password() if needed
via aff2932c420 python/samba/getopt: don't prompt for a password for
--use-krb5-ccache=...
via 0ba9e5dacbb lib/cmdline: only call
(): free
on failure
via 42f2d96f82a ldb-samba:ldif_handlers: ldif_read_objectSid(): free a
thing on failure
via 6722e80d1b3 ldb-samba: ldif-handlers: make
ldif_comparison_objectSid() accurate
via 4af670384a1 s4:dsdb: fix spelling in comment
via a9eaf8a3abe ldb: comment
| 1 -
python/samba/nt_time.py | 18 +-
python/samba/tests/krb5/gmsa_tests.py | 202 +++-
python/samba/tests/krb5/kdc_base_test.py | 52 +--
python/samba/tests/krb5/lockout_tests.py | 5 +-
selftest
The branch, master has been updated
via 0159c48e897 ctdb-scripts: Do not de-duplicate the interfaces list
from 7a5e7b82125 python: Fix NtVer check for site_dn_for_machine()
https://git.samba.org/?p=samba.git;a=shortlog;h=master
- Log
Mulder
Autobuild-User(master): Andreas Schneider
Autobuild-Date(master): Wed Apr 17 19:32:11 UTC 2024 on atb-devel-224
---
Summary of changes:
python/samba/gp/gpclass.py | 4 +---
1 file changed, 1 insertion(+), 3
*domain,
DEBUG(10, ("ads lookup_groupmem: got %d sids via extended dn call\n",
(int)num_members));
- status = add_primary_group_members(ads, mem_ctx, rid,
+ status = add_primary_group_members(ads, mem_ctx, rid, domain->name,
, _members);
if (!NT_STATUS_IS_OK(status)) {
DEBUG(10, ("%s: add_primary_group_members failed: %s\n",
--
Samba Shared Repository
if (fsp == NULL) {
@@ -5202,7 +5203,7 @@ NTSTATUS smbd_do_setfilepathinfo(connection_struct *conn,
case SMB_FILE_LINK_INFORMATION:
{
- if (conn->sconn->using_smb2) {
+ if (conn_using_smb2(conn->sconn)) {
status = smb2_file_link_information(conn,
req,
pdata,
--
Samba Shared Repository
public_ifaces="$public_ifaces \"$iface;options=dynamic\""
+ done
+
+ if [ -n "$CTDB_SAMBA_INTERFACES_EXTRA" ]; then
+ public_ifaces="$public_ifaces $CTDB_SAMBA_INTERFACES_EXTRA"
+ fi
+ public_ifaces=$(echo "$publ
ncy, hex_output);
}
diff --git a/lib/tdb/wscript b/lib/tdb/wscript
index 2c587fbee44..04121498723 100644
--- a/lib/tdb/wscript
+++ b/lib/tdb/wscript
@@ -216,7 +216,8 @@ def testonly(ctx):
if not os.path.exists(link):
os.symlink(ctx.path.make_node('test').abspath(), link)
-sh_tests = ["test/test_tdbbackup.sh test/jenkins-be-hash.tdb"]
+sh_tests = ["test/test_tdbbackup.sh test/jenkins-be-hash.tdb",
+"test/test_tdbdump.sh test/sample_tdb.tdb
test/sample_tdb.txt test/sample_tdb_x.txt"]
for sh_test in sh_tests:
cmd = "BINDIR=%s %s" % (blddir, sh_test)
--
Samba Shared Repository
The branch, v4-20-test has been updated
via 215bb9bd48e Do not fail checksums for RFC8009 types
via db60a1947b8 s4:dns_server: less noisy, more informative debug
messages
via 9155d89a2ae packaging: Provide a systemd service file for samba-bgqd
from 077f39baf7c
5_KT_END) {
+ DEBUG(1, ("Failed to get next entry: %s\n",
+ error_message(k5ret)));
+ (void)smb_krb5_kt_free_entry(krbctx, );
+ }
k5ret = krb5_kt_end_seq_get(krbctx, keytab, );
if (k5ret) {
--
Samba Shared Repository
files not as an automatically constructed environment.
This makes:
BACKUP_FILE=samba-backup-2024-04-11T14-10-20.437096.tar.bz2
SELFTEST_TESTENV=customdc make testenv
work again.
Signed-off-by: Andrew Bartlett
Reviewed-by: Jo Sutton
commit aa6795b32ff6335c2136f9c97482da6a0
aram/loadparm.c
@@ -952,6 +952,8 @@ void loadparm_s3_init_globals(struct loadparm_context
*lp_ctx,
Globals.kdc_enable_fast = true;
+ Globals.winbind_debug_traceid = true;
+
Globals.aio_max_threads = 100;
lpcfg_string_set(Globals.ctx,
--
Samba Shared Repository
b_send(
}
} else {
/* No host or dest_ss given. Error out. */
- tevent_req_error(req, EINVAL);
+ tevent_req_nterror(req, NT_STATUS_INVALID_PARAMETER_MIX);
return tevent_req_post(req, ev);
}
--
Samba Shared Repository
i, rec_count - 1);
+ NDR_PRINT_DEBUG(dnsp_DnssrvRpcRecord,
[i]);
}
was_tombstoned = true;
}
--
Samba Shared Repository
via 19250e13ab6 Add simple http_client for use in black box tests (in
following commits)
from eaefe50327d VERSION: Bump version up to Samba 4.20.1...
https://git.samba.org/?p=samba.git;a=shortlog;h=v4-20-test
- Log -
commit
via 6636ec3bb2a Add simple http_client for use in black box tests (in
following commits)
from 4b7785226ad VERSION: Bump version up to Samba 4.19.7...
https://git.samba.org/?p=samba.git;a=shortlog;h=v4-19-test
- Log -
commit
ruct
dom_sid *sid2)
return 1;
/* Compare most likely different rids, first: i.e start at end */
- if (sid1->num_auths != sid2->num_auths)
- return sid1->num_auths - sid2->num_auths;
-
+ if (sid1->num_auths != sid2->num_auths) {
+
: PyErr_LDB_DN_OR_RAISE makes more rigourous
checks
via 8bb6287c3ba pytest:segfault: some more ldb crashes
via 0bf80c10ca5 samba-tool domain backup: Use new ldb.disconnect()
method to force-close files during backup
via 8612b3e38b3 ldb:pytests: test ldb.connect() works after
ssion: Use struct initialization
via 005ce15aab3 python/samba/tests: Fix gMSA blackbox test to expect
failure to get password after membership change
via 50f424e8d35 s3:rpc_server: Implement _lsa_CreateTrustedDomainEx3()
via 8df1728e124 s3:rpc_server:
Release Announcements
-
This is the latest stable release of the Samba 4.19 release series.
Changes since 4.19.5
o Ralph Boehme
* BUG 15527: fd_handle_destructor() panics within an
smbd_smb2_close() if
vfs_stat_fsp() fails in fd_close().
o
The branch, v4-19-stable has been updated
via b400092dd0a VERSION: Disable GIT_SNAPSHOT for the 4.19.6 release.
via 8333c396015 WHATSNEW: Add release notes for Samba 4.19.6.
via 0ac741b5705 s3/smbd: If we fail to close file_handle ensure we
should reset the fd
via
The branch, master has been updated
via 4728e21 NEWS[4.19.6]: Samba 4.19.6 Available for Download
from f8e7137 NEWS[4.20.0]: Samba 4.20.0 Available for Download
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master
- Log
The annotated tag, samba-4.19.6 has been created
at 4826796513729aad06646b9ab838910737d52d09 (tag)
tagging b400092dd0a5248544f6e05fc4f85bcc0efb6a3c (commit)
replaces samba-4.19.5
tagged by Jule Anger
on Mon Apr 8 09:30:50 2024 +0200
- Log
The branch, v4-19-test has been updated
via 4b7785226ad VERSION: Bump version up to Samba 4.19.7...
via b400092dd0a VERSION: Disable GIT_SNAPSHOT for the 4.19.6 release.
via 8333c396015 WHATSNEW: Add release notes for Samba 4.19.6.
from 0ac741b5705 s3/smbd: If we
le to verify these checksums when running
with both MIT Kerberos and Heimdal Kerberos. This matters for FreeIPA
domain controller which uses them by default.
[2023/06/16 21:51:04.923873, 10, pid=51149, effective(0, 0), real(0, 0)]
../../lib/krb5_wrap/krb5_samba.c:1496(s
= $interfaces
diff --git a/lib/util/unix_match.h b/source3/include/fstring.h
similarity index 76%
copy from lib/util/unix_match.h
copy to source3/include/fstring.h
index a7b693500b2..dfc8f17a8f3 100644
--- a/lib/util/unix_match.h
+++ b/source3/include/fstring.h
@@ -1,7 +1,6 @@
/*
Unix SMB/CIFS i
quot;,
(int)num_members));
- status = add_primary_group_members(ads, mem_ctx, rid,
+ status = add_primary_group_members(ads, mem_ctx, rid, domain->name,
, _members);
if (!NT_STATUS_IS_OK(status)) {
DEBUG(10, ("%s: add_primary_group_members failed: %s\n",
--
Samba Shared Repository
EACCES)) {
@@ -1214,6 +1215,11 @@ int file_ntimes(connection_struct *conn,
unbecome_root();
}
+done:
+ if (ret == 0) {
+ copy_stat_ex_timestamps(fsp, ft);
+ }
+
return ret;
}
--
Samba Shared Repository
uct open_symlink_err
via 331a49ca394 smbd: Fix returning symlink stat info in the NO_OPATH
case
via a2a77842a13 smbd: Make read_symlink_reparse() return a
reparse_data_buffer
via 57e548841f9 smbd: Simplify users of fsp_fullbasepath()
from 06c589aaa1a python/samba/tests
The branch, master has been updated
via 06c589aaa1a python/samba/tests/krb5: Extend PKINIT tests to cover
UF_SMARTCARD_REQUIRED
via f29693d1311 python/tests/krb5: Prepare to allow tests that use the
PAC returned NT hash
via 2fd5166a8c1 python/tests/krb5: Allow getting
Release Announcements
-
This is the first stable release of the Samba 4.20 release series.
Please read the release notes carefully before upgrading.
NEW FEATURES/CHANGES
New Minimum MIT Krb5 version for Samba AD Domain Controller
The branch, v4-20-stable has been updated
via 8fdd82c8b9c VERSION: Disable GIT_SNAPSHOT for the 4.20.0 release.
via 797464b7624 WHATSNEW: Add release notes for Samba 4.20.0.
via 5cedf3b5eb0 Revert "token_util.c: prefer capabilities over
become_root"
via f
The branch, master has been updated
via f8e7137 NEWS[4.20.0]: Samba 4.20.0 Available for Download
from 1fac108 NEWS[4.18.11]: Samba 4.18.11 Available for Download
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master
- Log
The annotated tag, samba-4.20.0 has been created
at 5e0b7110dac9b3e9d4c304c407095541e212315d (tag)
tagging 8fdd82c8b9ccc39f0b5f5d6cc22fa69f67c913a4 (commit)
replaces samba-4.20.0rc4
tagged by Jule Anger
on Wed Mar 27 18:10:07 2024 +0100
- Log
The branch, v4-20-test has been updated
via eaefe50327d VERSION: Bump version up to Samba 4.20.1...
via 8fdd82c8b9c VERSION: Disable GIT_SNAPSHOT for the 4.20.0 release.
via 797464b7624 WHATSNEW: Add release notes for Samba 4.20.0.
from 5cedf3b5eb0 Revert
rity_info_sent, const struct
"Override chmod\n",
fsp_str_dbg(fsp)));
-
set_effective_capability(DAC_OVERRIDE_CAPABILITY);
+ become_root();
sret = SMB_VFS_FCHMOD(fsp, posix_perms);
-
drop_effective_capability(DAC_OVERRIDE_CAPABILITY);
+ unbecome_root();
}
if (sret == -1) {
--
Samba Shared Repository
== AT_FDCWD) in
smbd (smbd[192.168.10) (client [192.168.100.15]) pid 9744
(4.21.0pre1-DEVELOPERBUILD)
[2024/02/20 09:23:48.454844, 0, pid=9744]
../../lib/util/fault.c:190(smb_panic_log)
If you are running a recent Samba version, and if you think this problem
is not yet fixed in the lat
smbd (smbd[192.168.10) (client [192.168.100.15]) pid 9744
(4.21.0pre1-DEVELOPERBUILD)
[2024/02/20 09:23:48.454844, 0, pid=9744]
../../lib/util/fault.c:190(smb_panic_log)
If you are running a recent Samba version, and if you think this problem
is not yet fixed in the latest vers
gi.basic_info.out.write_time,
+ nttime,
ret, done,
"Wrong write time\n");
torture_assert_u64_equal_goto(tctx,
- nttime,
rity_info_sent, const struct
"Override chmod\n",
fsp_str_dbg(fsp)));
-
set_effective_capability(DAC_OVERRIDE_CAPABILITY);
+ become_root();
sret = SMB_VFS_FCHMOD(fsp, posix_perms);
-
drop_effective_capability(DAC_OVERRIDE_CAPABILITY);
+ unbecome_root();
}
if (sret == -1) {
--
Samba Shared Repository
| 265 +-
libcli/http/http_internal.h | 4 +
python/samba/tests/blackbox/http_chunk.py | 116
python/samba/tests/blackbox/http_content.py | 95 +++
selftest/tests.py | 2 +
source3/auth/auth_winbind.c
1 - 100 of 192303 matches
Mail list logo
