[SCM] Samba Shared Repository - branch v4-8-test updated
The branch, v4-8-test has been updated via d3e306433f7 lib:util: Move debug message for mkdir failing to log level 1 via e655fa0a437 WHATSNEW: mention new vfs_glusterfs_fuse module via 57158ba47e7 lib/winbind_util: Add winbind_xid_to_sid for --without-winbind via 38d723896da lib/winbind_util: Move include out of ifdef via e2588af9cc4 passdb: Update ABI to 0.27.2 via d7ba89435d4 s3:passdb: add create_builtin_guests() via 79191a7193a passdb: Make [ug]id_to_sid use xid_to_sid via 4fd495159d1 passdb: Introduce xid_to_sid via e8bb1f65cd1 lib: Add dom_sid_str_buf via b9ac92992ce lib: Introduce winbind_xid_to_sid via 8d0a8864b17 winbind: Use idmap_cache_find_xid2sid via 0a2db567327 torture: Add tests for idmap cache via 894567e19ec idmap_cache: Introduce idmap_cache_find_xid2sid via dd9ca43d6a7 winbind: Now we explicitly track if we got ids from cache via c031b9e23ac winbind: Initialize "expired" parameter to idmap_cache_xid2sid via b0a1d90050c idmap_cache: Only touch "sid" on success in find_xid_to_sid via 14234542aa5 lib: Make idmap_cache return negative mappings from 29984beafc9 libcli/security: fix handling of deny type ACEs in access_check_max_allowed() https://git.samba.org/?p=samba.git;a=shortlog;h=v4-8-test - Log - commit d3e306433f7be4f0d190884ba078cd39d02ab318 Author: Andreas Schneider Date: Thu Mar 7 12:31:42 2019 +0100 lib:util: Move debug message for mkdir failing to log level 1 If you connnect to a host with smbclient this gets always printed. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13823 Signed-off-by: Andreas Schneider Reviewed-by: Andrew Bartlett (cherry picked from commit c71334ec0c92e791022a9b7c900aa0dd649226c2) Autobuild-User(v4-8-test): Karolin Seeger Autobuild-Date(v4-8-test): Tue Mar 12 17:01:14 UTC 2019 on sn-devel-144 commit e655fa0a437faa7b9335a6f09b571d734df4b810 Author: Günther Deschner Date: Mon Mar 11 14:13:18 2019 +0100 WHATSNEW: mention new vfs_glusterfs_fuse module Guenther Signed-off-by: Guenther Deschner commit 57158ba47e72c748f9096c9597cdb490e03403aa Author: Christof Schmitt Date: Tue Mar 5 11:56:49 2019 -0700 lib/winbind_util: Add winbind_xid_to_sid for --without-winbind BUG: https://bugzilla.samba.org/show_bug.cgi?id=13813 Signed-off-by: Christof Schmitt Reviewed-by: Jeremy Allison Autobuild-User(master): Jeremy Allison Autobuild-Date(master): Wed Mar 6 01:53:16 UTC 2019 on sn-devel-144 (cherry picked from commit 4125ff89e44a3e98882cfc38c06e559a6e1e56a5) commit 38d723896da46e5e799f2cb6ee6a25711a40e450 Author: Christof Schmitt Date: Tue Mar 5 11:50:48 2019 -0700 lib/winbind_util: Move include out of ifdef This fixes compile errors about missing prototypes with --picky-developer and --without-winbind Signed-off-by: Christof Schmitt Reviewed-by: Jeremy Allison (cherry picked from commit 4b1e4c22128bdefe549a58b181e9b755854f4c3e) commit e2588af9cc4e712eb5afc6333e1d98fc7943af18 Author: Christof Schmitt Date: Mon Mar 4 13:38:48 2019 -0700 passdb: Update ABI to 0.27.2 This change is for the backport only. The change in master increased the ABI version to 0.28.0 and removed some functions; this should not happen in a backport. Signed-off-by: Christof Schmitt commit d7ba89435d4c14529f6d91ccb9c24cc8814d0fe5 Author: Stefan Metzmacher Date: Tue Mar 6 22:47:42 2018 +0100 s3:passdb: add create_builtin_guests() Signed-off-by: Stefan Metzmacher Reviewed-by: Andreas Schneider (cherry picked from commit c5874b9b68e0795e9dc23b04efa5959ac03ec8dc) commit 79191a7193afe430cd81ff48a59965ed3b6c81d3 Author: Volker Lendecke Date: Tue Feb 26 15:17:36 2019 +0100 passdb: Make [ug]id_to_sid use xid_to_sid Signed-off-by: Volker Lendecke Reviewed-by: Christof Schmitt Bug: https://bugzilla.samba.org/show_bug.cgi?id=13813 (cherry picked from commit 40de67f1fcc46b7a64a7364c91dcedb474826d51) commit 4fd495159d183fa9fd2e74bb74893a842e8cbcad Author: Volker Lendecke Date: Tue Feb 26 15:10:21 2019 +0100 passdb: Introduce xid_to_sid This explicitly avoids the legacy_[ug]id_to_sid calls, which create long-term cache entries to S-1-22-x-y if anthing fails. We can't do this, because this will turn temporary winbind communication failures into long-term problems: A short hickup in winbind_uid_to_sid will create a mapping to S-1-22-1-uid for a week. It should be up to the lower layers to do the caching. Signed-off-by: Volker Lendecke Reviewed-by: Christof Schmitt Bug: https://bugzilla.samba.org/show_bug.cgi?id=13813 (cherry picked from commit
[SCM] Samba Shared Repository - branch v4-9-test updated
The branch, v4-9-test has been updated via fc40f87ebbc lib:util: Move debug message for mkdir failing to log level 1 via aaefa8ea0bf WHATSNEW: mention new vfs_glusterfs_fuse module via f232cd76d3d CI: don't use swap via 65c85aee4cb lib/winbind_util: Add winbind_xid_to_sid for --without-winbind via 7f74413a9b9 lib/winbind_util: Move include out of ifdef via f506180c0b8 passdb: Update ABI to 0.27.2 via 1f915119d5d passdb: Make [ug]id_to_sid use xid_to_sid via f175abcc68d passdb: Introduce xid_to_sid via 522b85013ee lib: Add dom_sid_str_buf via 713c48eb9bd lib: Introduce winbind_xid_to_sid via 5bf41f42bb3 winbind: Use idmap_cache_find_xid2sid via d74b8a1cba2 torture: Add tests for idmap cache via 71f7738ca4c idmap_cache: Introduce idmap_cache_find_xid2sid via 527ecdbe9c2 winbind: Now we explicitly track if we got ids from cache via bdeacbabd20 winbind: Initialize "expired" parameter to idmap_cache_xid2sid via d9b762a3d2d idmap_cache: Only touch "sid" on success in find_xid_to_sid via 00baebb8dc9 lib: Make idmap_cache return negative mappings from 3e6b84f8b43 VERSION: Bump version up to 4.9.6... https://git.samba.org/?p=samba.git;a=shortlog;h=v4-9-test - Log - commit fc40f87ebbc7c24190b3044f045e3e0d20e80889 Author: Andreas Schneider Date: Thu Mar 7 12:31:42 2019 +0100 lib:util: Move debug message for mkdir failing to log level 1 If you connnect to a host with smbclient this gets always printed. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13823 Signed-off-by: Andreas Schneider Reviewed-by: Andrew Bartlett (cherry picked from commit c71334ec0c92e791022a9b7c900aa0dd649226c2) Autobuild-User(v4-9-test): Karolin Seeger Autobuild-Date(v4-9-test): Tue Mar 12 16:13:29 UTC 2019 on sn-devel-144 commit aaefa8ea0bf6d69e2ade5ab47af64e373ac3f179 Author: Günther Deschner Date: Mon Mar 11 14:11:23 2019 +0100 WHATSNEW: mention new vfs_glusterfs_fuse module Guenther Signed-off-by: Guenther Deschner commit f232cd76d3d2d7fe72670993b22eb0c6f607ff05 Author: Ralph Boehme Date: Sun Mar 3 22:09:26 2019 +0100 CI: don't use swap Signed-off-by: Ralph Boehme Reviewed-by: Andreas Schneider Autobuild-User(master): Ralph Böhme Autobuild-Date(master): Mon Mar 4 13:59:42 UTC 2019 on sn-devel-144 (adapted from from commit 7798bc14fbdae3461eb30421923d53978b3f781d by Andrew Bartlett) commit 65c85aee4cbb102d482221ce4be2cf079f9fe294 Author: Christof Schmitt Date: Tue Mar 5 11:56:49 2019 -0700 lib/winbind_util: Add winbind_xid_to_sid for --without-winbind BUG: https://bugzilla.samba.org/show_bug.cgi?id=13813 Signed-off-by: Christof Schmitt Reviewed-by: Jeremy Allison Autobuild-User(master): Jeremy Allison Autobuild-Date(master): Wed Mar 6 01:53:16 UTC 2019 on sn-devel-144 (cherry picked from commit 4125ff89e44a3e98882cfc38c06e559a6e1e56a5) commit 7f74413a9b98477bc8476672002555e1a18377b4 Author: Christof Schmitt Date: Tue Mar 5 11:50:48 2019 -0700 lib/winbind_util: Move include out of ifdef This fixes compile errors about missing prototypes with --picky-developer and --without-winbind Signed-off-by: Christof Schmitt Reviewed-by: Jeremy Allison (cherry picked from commit 4b1e4c22128bdefe549a58b181e9b755854f4c3e) commit f506180c0b8bedb0c284413056ea2a71430ad36e Author: Christof Schmitt Date: Mon Mar 4 13:38:48 2019 -0700 passdb: Update ABI to 0.27.2 This change is for the backport only. The change in master increased the ABI version to 0.28.0 and removed some functions; this should not happen in a backport. Signed-off-by: Christof Schmitt commit 1f915119d5df275cd0389f31abb5c9181fe6c2ce Author: Volker Lendecke Date: Tue Feb 26 15:17:36 2019 +0100 passdb: Make [ug]id_to_sid use xid_to_sid Signed-off-by: Volker Lendecke Reviewed-by: Christof Schmitt Bug: https://bugzilla.samba.org/show_bug.cgi?id=13813 (cherry picked from commit 40de67f1fcc46b7a64a7364c91dcedb474826d51) commit f175abcc68d26fe1852d7470c26dada164ee90bb Author: Volker Lendecke Date: Tue Feb 26 15:10:21 2019 +0100 passdb: Introduce xid_to_sid This explicitly avoids the legacy_[ug]id_to_sid calls, which create long-term cache entries to S-1-22-x-y if anthing fails. We can't do this, because this will turn temporary winbind communication failures into long-term problems: A short hickup in winbind_uid_to_sid will create a mapping to S-1-22-1-uid for a week. It should be up to the lower layers to do the caching. Signed-off-by: Volker Lendecke Reviewed-by: Christof Schmitt Bug:
autobuild[sn-devel-144]: intermittent test failure detected
The autobuild test system (on sn-devel-144) has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: https://git.samba.org/autobuild.flakey.sn-devel-144/2019-03-12-1319/flakey.log The failure seems to be in the "samba-ad-dc-6" suite, whose build logs are available here: https://git.samba.org/autobuild.flakey.sn-devel-144/2019-03-12-1319/samba-ad-dc-6.stderr https://git.samba.org/autobuild.flakey.sn-devel-144/2019-03-12-1319/samba-ad-dc-6.stdout The top commit at the time of the failure was: commit a68e8af2d1b92ba9a94fc7cc1eb98cdca687d5fd Author: Tim Beale Date: Mon Mar 11 16:03:34 2019 +1300 testsuite: Remove build_farm testsuites This test code is not run (and has not been run for about a decade). Let's remove it - it's there in the git history if we ever want to try to repurpose it again. Signed-off-by: Tim Beale Reviewed-by: Andrew Bartlett Autobuild-User(master): Andrew Bartlett Autobuild-Date(master): Tue Mar 12 02:56:05 UTC 2019 on sn-devel-144 and the last 50 lines of the stdout log were: badPwdCount = '3' lockoutTime = '131968667401489700' badPasswordTime = '131968667401489700' logonCount = '4' lastLogon = '131968667363672610' lastLogonTimestamp = '131968667262485050' userAccountControl = '512' msDS-User-Account-Control-Computed = '16' Failed to get kerberos credentials (kerberos required): kinit for lockout1k...@samba.example.com failed (Clients credentials have been revoked) Account locked out: kinit for lockout1k...@samba.example.com failed (Clients credentials have been revoked) gensec_spnego_create_negTokenInit_step: gssapi_krb5: creating NEG_TOKEN_INIT for ldap/localdc failed (next[(null)]): NT_STATUS_ACCOUNT_LOCKED_OUT Failed to bind - LDAP client internal error: NT_STATUS_ACCOUNT_LOCKED_OUT Failed to connect to 'ldap://localdc' with backend 'ldap': LDAP client internal error: NT_STATUS_ACCOUNT_LOCKED_OUT -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= badPwdCount = '3' lockoutTime = '131968667401489700' badPasswordTime = '131968667401489700' logonCount = '4' lastLogon = '131968667363672610' lastLogonTimestamp = '131968667262485050' userAccountControl = '512' msDS-User-Account-Control-Computed = '16' UNEXPECTED(failure): samba4.ldap.password_lockout.python(ad_dc_slowtests).__main__.PasswordTestsWithSleep.test_pso_login_lockout_krb5(ad_dc_slowtests) REASON: Exception: Exception: Traceback (most recent call last): File "/memdisk/autobuild/fl/b3649357/samba-ad-dc-6/source4/dsdb/tests/python/password_lockout.py", line 1172, in test_pso_login_lockout_krb5 self._test_login_lockout(self.lockout1krb5_creds) File "/memdisk/autobuild/fl/b3649357/samba-ad-dc-6/source4/dsdb/tests/python/password_lockout_base.py", line 562, in _test_login_lockout msDSUserAccountControlComputed=dsdb.UF_LOCKOUT) File "/memdisk/autobuild/fl/b3649357/samba-ad-dc-6/source4/dsdb/tests/python/password_lockout_base.py", line 180, in _check_account self.assertEquals(uinfo5.bad_password_count, effective_bad_password_count) AssertionError: 0 != 3 FAILED (1 failures, 0 errors and 0 unexpected successes in 0 testsuites) A summary with detailed information can be found in: ./bin/ab/summary TOP 10 slowest tests samba4.ldap.vlv.python(ad_dc_slowtests)(ad_dc_slowtests) -> 893 samba4.ldap.confidential_attr.python(ad_dc_slowtests)(ad_dc_slowtests) -> 700 samba4.rpc.samr.passwords.lockout on ncacn_np with (ad_dc_slowtests) -> 254 samba4.rpc.samr.passwords.pwdlastset on ncacn_np with (ad_dc_slowtests) -> 222 samba.tests.emulate.traffic_packet(ad_dc_slowtests) -> 198 samba4.rpc.samlogon on ncacn_np with (ad_dc_slowtests) -> 112 samba.tests.blackbox.traffic_replay(ad_dc_slowtests) -> 55 samba4.rpc.samr.passwords on ncacn_np with (ad_dc_slowtests) -> 44 samba4.rpc.samr.passwords.badpwdcount on ncacn_np with (ad_dc_slowtests) -> 41 samba4.rpc.samr.large-dc on ncacn_np with (ad_dc_slowtests) -> 22 ERROR: test failed with exit code 1
autobuild[sn-devel-184]: intermittent test failure detected
The autobuild test system (on sn-devel-184) has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: https://git.samba.org/autobuild.flakey.sn-devel-184/2019-03-12-0956/flakey.log The failure seems to be in the "samba-nt4" suite, whose build logs are available here: https://git.samba.org/autobuild.flakey.sn-devel-184/2019-03-12-0956/samba-nt4.stderr https://git.samba.org/autobuild.flakey.sn-devel-184/2019-03-12-0956/samba-nt4.stdout The top commit at the time of the failure was: commit a68e8af2d1b92ba9a94fc7cc1eb98cdca687d5fd Author: Tim Beale Date: Mon Mar 11 16:03:34 2019 +1300 testsuite: Remove build_farm testsuites This test code is not run (and has not been run for about a decade). Let's remove it - it's there in the git history if we ever want to try to repurpose it again. Signed-off-by: Tim Beale Reviewed-by: Andrew Bartlett Autobuild-User(master): Andrew Bartlett Autobuild-Date(master): Tue Mar 12 02:56:05 UTC 2019 on sn-devel-144 and the last 50 lines of the stdout log were: (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:40 2019 UTC(1319945014) => Mon Jun 10 09:55:40 2019 UTC(1320463414) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:40 2019 UTC(1319945014) => Mon Jun 10 09:55:40 2019 UTC(1320463414) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:40 2019 UTC(1319945014) => Mon Jun 10 09:55:40 2019 UTC(1320463414) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:40 2019 UTC(1319945014) => Mon Jun 10 09:55:40 2019 UTC(1320463414) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:42 2019 UTC(13199450142000) => Mon Jun 10 09:55:42 2019 UTC(13204634142000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:42 2019 UTC(13199450142000) => Mon Jun 10 09:55:42 2019 UTC(13204634142000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:42 2019 UTC(13199450142000) => Mon Jun 10 09:55:42 2019 UTC(13204634142000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:42 2019 UTC(13199450142000) => Mon Jun 10 09:55:42 2019 UTC(13204634142000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:42 2019 UTC(13199450142000) => Mon Jun 10 09:55:42 2019 UTC(13204634142000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:42 2019 UTC(13199450142000) => Mon Jun 10 09:55:42 2019 UTC(13204634142000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:42 2019 UTC(13199450142000) => Mon Jun 10 09:55:42 2019 UTC(13204634142000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:42 2019 UTC(13199450142000) => Mon Jun 10 09:55:42 2019 UTC(13204634142000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:44 2019 UTC(13199450144000) => Mon Jun 10 09:55:44 2019 UTC(13204634144000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:44 2019 UTC(13199450144000) => Mon Jun 10 09:55:44 2019 UTC(13204634144000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:44 2019 UTC(13199450144000) => Mon Jun 10 09:55:44 2019 UTC(13204634144000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:44 2019 UTC(13199450144000) => Mon Jun 10 09:55:44 2019 UTC(13204634144000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:44 2019 UTC(13199450144000) => Mon Jun 10 09:55:44 2019 UTC(13204634144000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:44 2019 UTC(13199450144000) => Mon Jun 10 09:55:44 2019 UTC(13204634144000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:44 2019 UTC(13199450144000) => Mon Jun 10 09:55:44 2019 UTC(13204634144000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:44 2019 UTC(13199450144000) => Mon Jun 10 09:55:44 2019 UTC(13204634144000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:44 2019 UTC(13199450144000) => Mon Jun 10 09:55:44 2019 UTC(13204634144000) (../../source4/torture/smb2/util.c:158) change_time not setup correctly: Thu Apr 11 09:55:46 2019 UTC(13199450146000) => Mon Jun 10 09:55:46 2019
[SCM] Samba Website Repository - branch master updated
The branch, master has been updated via f2b1d83 Add Samba 4.9.5. via 0f7afe3 NEWS[4.9.5]: Samba 4.9.5 Available for Download from 9843326 NEWS[4.10.0rc4]: Samba 4.10.0rc4 Available for Download https://git.samba.org/?p=samba-web.git;a=shortlog;h=master - Log - commit f2b1d836575b2465ca50073a6ea5982105f391ff Author: Karolin Seeger Date: Tue Mar 12 09:24:15 2019 +0100 Add Samba 4.9.5. Signed-off-by: Karolin Seeger commit 0f7afe35d8a04b0ca9c5b4e118a2a6bd51229917 Author: Karolin Seeger Date: Tue Mar 12 09:22:46 2019 +0100 NEWS[4.9.5]: Samba 4.9.5 Available for Download Signed-off-by: Karolin Seeger --- Summary of changes: history/header_history.html | 1 + history/samba-4.9.5.html| 140 posted_news/20190312-082348.4.9.5.body.html | 13 +++ posted_news/20190312-082348.4.9.5.headline.html | 3 + 4 files changed, 157 insertions(+) create mode 100644 history/samba-4.9.5.html create mode 100644 posted_news/20190312-082348.4.9.5.body.html create mode 100644 posted_news/20190312-082348.4.9.5.headline.html Changeset truncated at 500 lines: diff --git a/history/header_history.html b/history/header_history.html index 29bde65..1eb2399 100755 --- a/history/header_history.html +++ b/history/header_history.html @@ -9,6 +9,7 @@ Release Notes + samba-4.9.5 samba-4.9.4 samba-4.9.3 samba-4.9.2 diff --git a/history/samba-4.9.5.html b/history/samba-4.9.5.html new file mode 100644 index 000..f23a05a --- /dev/null +++ b/history/samba-4.9.5.html @@ -0,0 +1,140 @@ +http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd;> +http://www.w3.org/1999/xhtml;> + +Samba 4.9.5 - Release Notes + + +Samba 4.9.5 Available for Download + +https://download.samba.org/pub/samba/stable/samba-4.9.5.tar.gz;>Samba 4.9.5 (gzipped) +https://download.samba.org/pub/samba/stable/samba-4.9.5.tar.asc;>Signature + + +https://download.samba.org/pub/samba/patches/samba-4.9.4-4.9.5.diffs.gz;>Patch (gzipped) against Samba 4.9.4 +https://download.samba.org/pub/samba/patches/samba-4.9.4-4.9.5.diffs.asc;>Signature + + + + = + Release Notes for Samba 4.9.5 + March 12, 2019 + = + + +Changes since 4.9.4: + + +o Andrew Bartlett abart...@samba.org + * BUG 13714: audit_logging: Remove debug log header and JSON Authentication: + prefix. + * BUG 13760: Fix upgrade from 4.7 (or earlier) to 4.9. + +o Jeremy Allison j...@samba.org + * BUG 11495: s3: lib: nmbname: Ensure we limit the NetBIOS name correctly. + CID: 1433607. + * BUG 13690: smbd: uid: Dont crash if force group is added to an existing + share connection. + * BUG 13770: s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility + code. + * BUG 13803: s3: SMB1 POSIX mkdir does case insensitive name lookup. + +o Christian Ambach a...@samba.org + * BUG 13199: s3:utils/smbget fix recursive download with empty source + directories. + +o Douglas Bagnall douglas.bagn...@catalyst.net.nz + * BUG 13716: samba-tool drs showrepl: Do not crash if no dnsHostName found. + +o Tim Beale timbe...@catalyst.net.nz + * BUG 13736: s3:libsmb: cli_smb2_list() can sometimes fail initially on a + connection. + * BUG 13747: join: Throw CommandError instead of Exception for simple errors. + * BUG 13762: ldb: Avoid inefficient one-level searches. + +o Ralph Boehme s...@samba.org + * BUG 13736: s3: libsmb: use smb2cli_conn_max_trans_size() in + cli_smb2_list(). + * BUG 13776: tldap: Avoid use after free errors. + * BUG 13802: Fix idmap xid2sid cache churn. + * BUG 13812: access_check_max_allowed() doesnt process Owner Rights ACEs. + +o Gnther Deschner g...@samba.org + * BUG 13720: s3-smbd: Avoid assuming fsp is always intact after close_file + call. + * BUG 13725: s3-vfs-fruit: Add close call. + * BUG 13746: s3-smbd: Use fruit:model string for mDNS registration. + * BUG 13774: s3-vfs: add glusterfs_fuse vfs module. + +o David Disseldorp dd...@samba.org + * BUG 13766: printing: Check lp_load_printers() prior to pcap cache update. + * BUG 13807: vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) + ftruncate and fallocate. + +o Philipp Gesang philipp.ges...@intra2net.com + * BUG 13737: lib/audit_logging: Actually create talloc. + +o Joe Guo j...@catalyst.net.nz + * BUG 13728: netcmd/user: python[3]-gpgme unsupported and replaced by + python[3]-gpg. + +o Aaron Haslett aaronhasl...@catalyst.net.nz + * BUG 13738: dns: Changing onelevel s
[SCM] Samba Shared Repository - branch v4-9-stable updated
The branch, v4-9-stable has been updated via 214ec9cf8f4 VERSION: Disable GIT_SNAPSHOT for the 4.9.5 release. via 2bbbc1aae27 WHATSNEW: Add release notes for Samba 4.9.5. via 43957ab96e7 libcli/security: fix handling of deny type ACEs in access_check_max_allowed() via 4fe9eff4dd6 s4:torture: Add test_deny1(). via 824a058aa92 s4:torture: Add test_owner_rights_deny1(). via b4289aa34ae libcli/security: correct access check and maximum access calculation for Owner Rights ACEs via f801b824815 s4:torture: Add test_owner_rights_deny(). via b1ce4d436a1 s4:torture: Fix the test_owner_rights() test to show permissions are additive. via 8f9858671fd libcli/security: add "Owner Rights" calculation to access_check_max_allowed() via 2a7e1bb9c03 s4:torture: add a Maximum Access check with an Owner Rights ACE via 953039c7a78 s4:libcli: remember return code from maximum access via 9dc374fee03 sambaundoguididx: use the right escaped oder unescaped sam ldb files via f8748b8bfc2 s4-server: Open and close a transaction on sam.ldb at startup via 47fb4ba84f3 vfs_ceph: remove ceph_fallocate/ceph_ftruncate fallback via ba75d5f4839 vfs_ceph: fix strict_allocate_ftruncate() via 15ef70cb53a vfs_ceph: add missing fallocate hook via 13bf811858f s3: smbd: filenames - ensure we replace the missing '/' if we error in an intermediate POSIX path. via ffb706ddbce s3: torture: Add additional POSIX mkdir tests. via 4b58042f3fa smbd: unix_convert: Ensure we don't call get_real_filename on POSIX paths. via fe4254ef4e1 smbd: SMB1-POSIX: Add missing info-level SMB_POSIX_PATH_OPEN for UCF_UNIX_NAME_LOOKUP flag. via f59064f8a96 s3: smbtorture3: Add POSIX-MKDIR test for posix_mkdir case sensitive bug. via 53dfd92b82e winbindd: set idmap cache entries as the last step in async wb_xids2sids via 9c36a6dd16a winbindd: track whether a result from xid2sid was coming from the cache via b6587172d0c winbindd: switch send-next/done order via 06862c77d5c winbindd: update xid in wb_xids2sids_state->xids with what we got via 4cf7bddc645 winbindd: convert id to a pointer in wb_xids2sids_dom_done() via 577ac999fbd winbindd: make xids a const argument to wb_xids2sids_send() via 915aff6fe7c winbindd: make a copy of xid's in wb_xids2sids_send() via eb16d3b7bc1 ctdb-cluster-mutex: Separate out command and file handling via 65c3c5801ff ctdb-recoverd: Time out attempt to take recovery lock after 120s via 4c059e03ef7 ctdb-recoverd: Ban node on unknown error when taking recovery lock via fd9a02c0bb2 ctdb-recoverd: Make recoverd context available in recovery lock handle via f63f2a0ee39 ctdb-recoverd: Clean up logging on failure to take recovery lock via fb8c3bd8995 ctdb-recoverd: Free cluster mutex handler on failure to take lock via 592f02112bb ctdb-config: Change example recovery lock setting to one that fails via ad3751b5a51 messages_dgm: Properly handle receiver re-initialization via 9dd1b416654 torture3: Extend read3 for the "messaging target re-inits" failure via 6bea9304998 messages_dgm: Use saved errno value via 6a38b9917b2 man pages: document prefork process model via ab66f70056c notifyd: Fix SIGBUS on sparc via 2bbd2dcf282 CVE-2019-3824 ldb: Release ldb 1.4.6 via 47b2344bdb1 CVE-2019-3824 ldb: Add tests for ldb_wildcard_match via 2a88a47b9f8 CVE-2019-3824 ldb: wildcard_match end of data check via 73187de7138 CVE-2019-3824 ldb: wildcard_match check tree operation via 754bc1a76e9 CVE-2019-3824 ldb: ldb_parse_tree use talloc_zero via 33fa01b4be0 CVE-2019-3824 ldb: Improve code style and layout in wildcard processing via cedc4e89625 CVE-2019-3824 ldb: Extra comments to clarify no pointer wrap in wildcard processing via fd8e90b9a51 CVE-2019-3824 ldb: Out of bound read in ldb_wildcard_compare via 2f5823c5015 waf: Check for libnscd via d85f9fdc8ac tldap: avoid more use after free errors via 5995d5b91bf tldap: avoid a use after free crash via c0858bc990c s3:vfs: Correctly check if OFD locks should be enabled or not via 53d2623b2fd s3:vfs: Initialize pid to 0 in test_netatalk_lock() via eb425d50447 s4: torture: vfs_fruit. Change test_fruit_locking_conflict() to match the vfs_fruit working server code. via b650db4d06a s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code. via 6f697b9c68a netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg via 7644bb26be0 smbd: uid: Don't crash if 'force group' is added to an existing share connection. via eac00de2a09 s3: tests: Add regression test for smbd crash on share force group change with existing connection.
[SCM] Samba Shared Repository - annotated tag samba-4.9.5 created
The annotated tag, samba-4.9.5 has been created at e4bd06ab0291b4e0d7ac924c33b23f49ca1b736e (tag) tagging 214ec9cf8f4e9d3e5bbab6e163f768e7dae6df6b (commit) replaces ldb-1.4.6 tagged by Karolin Seeger on Tue Mar 12 09:22:33 2019 +0100 - Log - samba: tag release samba-4.9.5 -BEGIN PGP SIGNATURE- iF0EABECAB0WIQRS+8C4bZVLCEMyTNxvM5FbZWi36gUCXIdsSQAKCRBvM5FbZWi3 6ipYAJ4mdsUqwJraKcYW/hxC4xN1JmQtbACgmKixkWly52GY9Fz5pJHNF1ptKXQ= =jGrw -END PGP SIGNATURE- Andrew Bartlett (1): s4-server: Open and close a transaction on sam.ldb at startup Björn Jacke (1): sambaundoguididx: use the right escaped oder unescaped sam ldb files David Disseldorp (3): vfs_ceph: add missing fallocate hook vfs_ceph: fix strict_allocate_ftruncate() vfs_ceph: remove ceph_fallocate/ceph_ftruncate fallback Gary Lockyer (1): man pages: document prefork process model Jeremy Allison (8): s3: smbtorture3: Add POSIX-MKDIR test for posix_mkdir case sensitive bug. smbd: SMB1-POSIX: Add missing info-level SMB_POSIX_PATH_OPEN for UCF_UNIX_NAME_LOOKUP flag. smbd: unix_convert: Ensure we don't call get_real_filename on POSIX paths. s3: torture: Add additional POSIX mkdir tests. s3: smbd: filenames - ensure we replace the missing '/' if we error in an intermediate POSIX path. s4:torture: Fix the test_owner_rights() test to show permissions are additive. s4:torture: Add test_owner_rights_deny(). s4:torture: Add test_owner_rights_deny1(). Jiří Šašek (1): notifyd: Fix SIGBUS on sparc Karolin Seeger (2): WHATSNEW: Add release notes for Samba 4.9.5. VERSION: Disable GIT_SNAPSHOT for the 4.9.5 release. Martin Schwenke (7): ctdb-config: Change example recovery lock setting to one that fails ctdb-recoverd: Free cluster mutex handler on failure to take lock ctdb-recoverd: Clean up logging on failure to take recovery lock ctdb-recoverd: Make recoverd context available in recovery lock handle ctdb-recoverd: Ban node on unknown error when taking recovery lock ctdb-recoverd: Time out attempt to take recovery lock after 120s ctdb-cluster-mutex: Separate out command and file handling Ralph Boehme (13): winbindd: make a copy of xid's in wb_xids2sids_send() winbindd: make xids a const argument to wb_xids2sids_send() winbindd: convert id to a pointer in wb_xids2sids_dom_done() winbindd: update xid in wb_xids2sids_state->xids with what we got winbindd: switch send-next/done order winbindd: track whether a result from xid2sid was coming from the cache winbindd: set idmap cache entries as the last step in async wb_xids2sids s4:libcli: remember return code from maximum access s4:torture: add a Maximum Access check with an Owner Rights ACE libcli/security: add "Owner Rights" calculation to access_check_max_allowed() libcli/security: correct access check and maximum access calculation for Owner Rights ACEs s4:torture: Add test_deny1(). libcli/security: fix handling of deny type ACEs in access_check_max_allowed() Volker Lendecke (3): messages_dgm: Use saved errno value torture3: Extend read3 for the "messaging target re-inits" failure messages_dgm: Properly handle receiver re-initialization --- -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v4-9-test updated
The branch, v4-9-test has been updated via 3e6b84f8b43 VERSION: Bump version up to 4.9.6... via 214ec9cf8f4 VERSION: Disable GIT_SNAPSHOT for the 4.9.5 release. via 2bbbc1aae27 WHATSNEW: Add release notes for Samba 4.9.5. from 43957ab96e7 libcli/security: fix handling of deny type ACEs in access_check_max_allowed() https://git.samba.org/?p=samba.git;a=shortlog;h=v4-9-test - Log - commit 3e6b84f8b43f769b823c13852237f47ebfad6d77 Author: Karolin Seeger Date: Fri Feb 22 11:36:16 2019 +0100 VERSION: Bump version up to 4.9.6... and re-enable GIT_SNAPSHOT. Signed-off-by: Karolin Seeger commit 214ec9cf8f4e9d3e5bbab6e163f768e7dae6df6b Author: Karolin Seeger Date: Fri Feb 22 11:35:39 2019 +0100 VERSION: Disable GIT_SNAPSHOT for the 4.9.5 release. Signed-off-by: Karolin Seeger commit 2bbbc1aae27cd6d643b43f2c1eedd9e6fce0d59a Author: Karolin Seeger Date: Fri Feb 22 11:35:04 2019 +0100 WHATSNEW: Add release notes for Samba 4.9.5. Signed-off-by: Karolin Seeger --- Summary of changes: VERSION | 2 +- WHATSNEW.txt | 145 ++- 2 files changed, 144 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/VERSION b/VERSION index 18174c3ff41..94639913d30 100644 --- a/VERSION +++ b/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=4 SAMBA_VERSION_MINOR=9 -SAMBA_VERSION_RELEASE=5 +SAMBA_VERSION_RELEASE=6 # If a official release has a serious bug # diff --git a/WHATSNEW.txt b/WHATSNEW.txt index b3a39d3291a..22eeec2ddcc 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,3 +1,144 @@ + = + Release Notes for Samba 4.9.5 + March 12, 2019 + = + + +Changes since 4.9.4: + + +o Andrew Bartlett + * BUG 13714: audit_logging: Remove debug log header and JSON Authentication: + prefix. + * BUG 13760: Fix upgrade from 4.7 (or earlier) to 4.9. + +o Jeremy Allison + * BUG 11495: s3: lib: nmbname: Ensure we limit the NetBIOS name correctly. + CID: 1433607. + * BUG 13690: smbd: uid: Don't crash if 'force group' is added to an existing + share connection. + * BUG 13770: s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility + code. + * BUG 13803: s3: SMB1 POSIX mkdir does case insensitive name lookup. + +o Christian Ambach + * BUG 13199: s3:utils/smbget fix recursive download with empty source + directories. + +o Douglas Bagnall + * BUG 13716: samba-tool drs showrepl: Do not crash if no dnsHostName found. + +o Tim Beale + * BUG 13736: s3:libsmb: cli_smb2_list() can sometimes fail initially on a + connection. + * BUG 13747: join: Throw CommandError instead of Exception for simple errors. + * BUG 13762: ldb: Avoid inefficient one-level searches. + +o Ralph Boehme + * BUG 13736: s3: libsmb: use smb2cli_conn_max_trans_size() in + cli_smb2_list(). + * BUG 13776: tldap: Avoid use after free errors. + * BUG 13802: Fix idmap xid2sid cache churn. + * BUG 13812: access_check_max_allowed() doesn't process "Owner Rights" ACEs. + +o Günther Deschner + * BUG 13720: s3-smbd: Avoid assuming fsp is always intact after close_file + call. + * BUG 13725: s3-vfs-fruit: Add close call. + * BUG 13746: s3-smbd: Use fruit:model string for mDNS registration. + * BUG 13774: s3-vfs: add glusterfs_fuse vfs module. + +o David Disseldorp + * BUG 13766: printing: Check lp_load_printers() prior to pcap cache update. + * BUG 13807: vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) + ftruncate and fallocate. + +o Philipp Gesang + * BUG 13737: lib/audit_logging: Actually create talloc. + +o Joe Guo + * BUG 13728: netcmd/user: python[3]-gpgme unsupported and replaced by + python[3]-gpg. + +o Aaron Haslett + * BUG 13738: dns: Changing onelevel search for wildcard to subtree. + +o Björn Jacke + * BUG 13721: samba-tool: Don't print backtrace on simple DNS errors. + * BUG 13759: sambaundoguididx: Use the right escaped oder unescaped sam ldb + files. + +o Volker Lendecke + * BUG 13742: ctdb: Print locks latency in machinereadable stats. + * BUG 13786: messages_dgm: Messaging gets stuck when pids are recycled. + +o Gary Lockyer + * BUG 13715: audit_logging: auth_json_audit required auth_json. + * BUG 13765: man pages: Document prefork process model. + * BUG 13773: CVE-2019-3824 ldb: Release ldb 1.4.6. + +o Stefan Metzmacher + * BUG 13697: s3:auth: ignore create_builtin_guests() failing without a valid + idmap configuration. + * BUG
