[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 369c1d53983 vfs_glusterfs: print exact cmdline for disabling
write-behind translator
from 5c27740aeff docs-xml: Add a section about weak crypto in testparm
manpage
https://git.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 369c1d539837b70e94fe9d533d44860c8a9380a1
Author: Günther Deschner
Date: Tue Nov 24 15:38:41 2020 +0100
vfs_glusterfs: print exact cmdline for disabling write-behind translator
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14486
Guenther
Signed-off-by: Guenther Deschner
Reviewed-by: Anoop C S
Autobuild-User(master): Günther Deschner
Autobuild-Date(master): Fri Nov 27 17:15:07 UTC 2020 on sn-devel-184
---
Summary of changes:
docs-xml/manpages/vfs_glusterfs.8.xml | 6 +-
source3/modules/vfs_glusterfs.c | 7 +--
2 files changed, 10 insertions(+), 3 deletions(-)
Changeset truncated at 500 lines:
diff --git a/docs-xml/manpages/vfs_glusterfs.8.xml
b/docs-xml/manpages/vfs_glusterfs.8.xml
index ca6085a0595..d25135e14ac 100644
--- a/docs-xml/manpages/vfs_glusterfs.8.xml
+++ b/docs-xml/manpages/vfs_glusterfs.8.xml
@@ -179,10 +179,14 @@
translator and refuse to connect if detected.
Please disable the write-behind translator for the GlusterFS
volume to allow the plugin to connect to the volume.
+The write-behind translator can easily be disabled via calling
+
+gluster volume set volumename
performance.write-behind off
+ on the commandline.
With GlusterFS versions >= 9, we silently bypass write-behind
-translator during intial connect and failure is avoided.
+translator during initial connect and failure is avoided.
diff --git a/source3/modules/vfs_glusterfs.c b/source3/modules/vfs_glusterfs.c
index c438a64d9be..ebbde9353a9 100644
--- a/source3/modules/vfs_glusterfs.c
+++ b/source3/modules/vfs_glusterfs.c
@@ -345,9 +345,12 @@ static int check_for_write_behind_translator(TALLOC_CTX
*mem_ctx,
if (write_behind_present) {
DBG_ERR("Write behind translator is enabled for "
"volume (%s), refusing to connect! "
- "Please check the vfs_glusterfs(8) manpage for "
+ "Please turn off the write behind translator by calling
"
+ "'gluster volume set %s performance.write-behind off' "
+ "on the commandline. "
+ "Check the vfs_glusterfs(8) manpage for "
"further details.\n",
- volume);
+ volume, volume);
return -1;
}
--
Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 5c27740aeff docs-xml: Add a section about weak crypto in testparm manpage from 4142bde7e52 s4: rename source4/smbd/ to source4/samba/ https://git.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 5c27740aeff273bcd5f027d36874e56170234146 Author: Andreas Schneider Date: Fri Nov 27 11:22:15 2020 +0100 docs-xml: Add a section about weak crypto in testparm manpage BUG: https://bugzilla.samba.org/show_bug.cgi?id=14583 Signed-off-by: Andreas Schneider Reviewed-by: Alexander Bokovoy Autobuild-User(master): Andreas Schneider Autobuild-Date(master): Fri Nov 27 13:48:20 UTC 2020 on sn-devel-184 --- Summary of changes: docs-xml/manpages/testparm.1.xml | 9 + 1 file changed, 9 insertions(+) Changeset truncated at 500 lines: diff --git a/docs-xml/manpages/testparm.1.xml b/docs-xml/manpages/testparm.1.xml index 9099cda010f..7c7abf50e8b 100644 --- a/docs-xml/manpages/testparm.1.xml +++ b/docs-xml/manpages/testparm.1.xml @@ -171,6 +171,15 @@ errors and warnings if the file did not load. If the file was loaded OK, the program then dumps all known service details to stdout. + + For certain use cases, SMB protocol requires use of + cryptographic algorithms which are known to be weak and already + broken. DES and ARCFOUR (RC4) ciphers and the SHA1 and MD5 hash + algorithms are considered weak but they are required for backward + compatibility. The testparm utility shows whether the Samba tools + will fall back to these weak crypto algorithms if it is not possible + to use strong cryptography by default. + In FIPS mode weak crypto cannot be enabled. -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 4142bde7e52 s4: rename source4/smbd/ to source4/samba/
from 8ad82ae6615 samba-tool: Give better error information when the
'domain backup restore' fails with a duplicate SID
https://git.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 4142bde7e524e9d5a491b2ff1afa4990e2c89a10
Author: Ralph Boehme
Date: Fri Nov 20 15:27:17 2020 +0100
s4: rename source4/smbd/ to source4/samba/
Signed-off-by: Ralph Boehme
Reviewed-by: Andrew Bartlett
Autobuild-User(master): Ralph Böhme
Autobuild-Date(master): Fri Nov 27 10:07:18 UTC 2020 on sn-devel-184
---
Summary of changes:
file_server/file_server.c| 4 ++--
source4/cldap_server/cldap_server.c | 4 ++--
source4/cldap_server/rootdse.c | 2 +-
source4/dns_server/dns_query.c | 2 +-
source4/dns_server/dns_server.c | 8
source4/dns_server/dns_update.c | 2 +-
source4/dsdb/dns/dns_update.c| 2 +-
source4/dsdb/kcc/kcc_connection.c| 2 +-
source4/dsdb/kcc/kcc_drs_replica_info.c | 2 +-
source4/dsdb/kcc/kcc_periodic.c | 2 +-
source4/dsdb/kcc/kcc_service.c | 2 +-
source4/dsdb/repl/drepl_extended.c | 2 +-
source4/dsdb/repl/drepl_fsmo.c | 2 +-
source4/dsdb/repl/drepl_notify.c | 2 +-
source4/dsdb/repl/drepl_out_helpers.c| 2 +-
source4/dsdb/repl/drepl_out_pull.c | 2 +-
source4/dsdb/repl/drepl_partitions.c | 2 +-
source4/dsdb/repl/drepl_periodic.c | 2 +-
source4/dsdb/repl/drepl_replica.c| 2 +-
source4/dsdb/repl/drepl_ridalloc.c | 2 +-
source4/dsdb/repl/drepl_secret.c | 2 +-
source4/dsdb/repl/drepl_service.c| 2 +-
source4/dsdb/samdb/ldb_modules/netlogon.c| 2 +-
source4/echo_server/echo_server.c| 2 +-
source4/kdc/kdc-heimdal.c| 2 +-
source4/kdc/kdc-proxy.c | 2 +-
source4/kdc/kdc-server.c | 2 +-
source4/kdc/kdc-service-mit.c| 4 ++--
source4/kdc/kpasswd-service-heimdal.c| 2 +-
source4/kdc/kpasswd-service-mit.c| 2 +-
source4/kdc/kpasswd-service.c| 2 +-
source4/kdc/mit_kdc_irpc.c | 2 +-
source4/ldap_server/ldap_backend.c | 2 +-
source4/ldap_server/ldap_bind.c | 2 +-
source4/ldap_server/ldap_extended.c | 2 +-
source4/ldap_server/ldap_server.c| 8
source4/nbt_server/dgram/netlogon.c | 2 +-
source4/nbt_server/dgram/ntlogon.c | 2 +-
source4/nbt_server/dgram/request.c | 2 +-
source4/nbt_server/interfaces.c | 2 +-
source4/nbt_server/irpc.c| 4 ++--
source4/nbt_server/nbt_server.c | 4 ++--
source4/nbt_server/packet.c | 2 +-
source4/nbt_server/query.c | 2 +-
source4/nbt_server/register.c| 2 +-
source4/nbt_server/wins/wins_dns_proxy.c | 2 +-
source4/nbt_server/wins/winsclient.c | 2 +-
source4/nbt_server/wins/winsserver.c | 2 +-
source4/nbt_server/wins/winswack.c | 2 +-
source4/ntp_signd/ntp_signd.c| 8
source4/ntvfs/posix/pvfs_search.c| 2 +-
source4/ntvfs/posix/pvfs_wait.c | 2 +-
source4/rpc_server/dcerpc_server.c | 4 ++--
source4/rpc_server/service_rpc.c | 2 +-
source4/{smbd => samba}/process_model.c | 2 +-
source4/{smbd => samba}/process_model.h | 4 ++--
source4/{smbd => samba}/process_prefork.c| 2 +-
source4/{smbd => samba}/process_single.c | 2 +-
source4/{smbd => samba}/process_standard.c | 2 +-
source4/{smbd => samba}/server.c | 2 +-
source4/{smbd => samba}/service.c| 2 +-
source4/{smbd => samba}/service.h| 6 +++---
source4/{smbd => samba}/service_named_pipe.c | 2 +-
source4/{smbd => samba}/service_stream.c | 0
source4/{smbd => samba}/service_stream.h | 0
source4/{smbd => samba}/service_task.c | 0
source4/{smbd => samba}/service_task.h | 0
source4/{smbd => samba}/wscript_build| 0
source4/smb_server/management.c | 2 +-
source4/smb_server/service_smb.c | 6 +++---
source4/smb_server/smb/negprot.c | 2 +-
source4/smb_server/smb/receive.c | 2 +-
source4/smb_server/smb/request.c | 2 +-
source4/smb_server/smb/service.c | 2 +-
source4/smb_server/smb/sesssetup.c | 2 +-
source4/smb_server/smb/trans2.c | 2 +-
source4/smb_server/smb2/negprot.c| 2 +-
source4/smb_server/smb2/receive.c| 2 +-
source4/smb_server/smb2/sesssetup.c
