[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated
via eb18d5d WHATSNEW: Add release notes for Samba 3.5.22.
via 6ef0e33 Fix bug #10010 - Missing integer wrap protection in EA list
reading can cause server to loop with DOS.
from 81aa6c38 VERSION: Bump Version number up to 3.5.22.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable
- Log -
commit eb18d5d2492632fcccd71a5c3fc0364465def609
Author: Karolin Seeger ksee...@samba.org
Date: Wed Jul 24 20:53:49 2013 +0200
WHATSNEW: Add release notes for Samba 3.5.22.
Signed-off-by: Karolin Seeger ksee...@samba.org
commit 6ef0e33fe8afa0ebb81652b9d42b42d20efadf04
Author: Jeremy Allison j...@samba.org
Date: Wed Jul 10 17:10:17 2013 -0700
Fix bug #10010 - Missing integer wrap protection in EA list reading can
cause server to loop with DOS.
Ensure we never wrap whilst adding client provided input.
CVE-2013-4124
Signed-off-by: Jeremy Allison j...@samba.org
---
Summary of changes:
WHATSNEW.txt | 60 ++-
source3/smbd/nttrans.c | 12 +
2 files changed, 70 insertions(+), 2 deletions(-)
Changeset truncated at 500 lines:
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index a7766a9..7a36ab6 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,4 +1,60 @@
==
+ Release Notes for Samba 3.5.22
+ August 05, 2013
+ ==
+
+
+This is a security release in order to address
+CVE-2013-4124 (Missing integer wrap protection in EA list reading can cause
+server to loop with DOS).
+
+o CVE-2013-4124:
+ All current released versions of Samba are vulnerable to a denial of
+ service on an authenticated or guest connection. A malformed packet
+ can cause the smbd server to loop the CPU performing memory
+ allocations and preventing any further service.
+
+ A connection to a file share, or a local account is needed to exploit
+ this problem, either authenticated or unauthenticated if guest
+ connections are allowed.
+
+ This flaw is not exploitable beyond causing the code to loop
+ allocating memory, which may cause the machine to exceed memory
+ limits.
+
+
+Changes since 3.5.21:
+-
+
+o Jeremy Allison j...@samba.org
+* BUG 10010: CVE-2013-4124: Missing integer wrap protection in EA list
+ reading can cause server to loop with DOS.
+
+
+##
+Reporting bugs Development Discussion
+###
+
+Please discuss this release on the samba-technical mailing list or by
+joining the #samba-technical IRC channel on irc.freenode.net.
+
+If you do report problems then please try to send high quality
+feedback. If you don't provide vital information to help us track down
+the problem then you will probably be ignored. All bug reports should
+be filed under the Samba 3.5 product in the project's Bugzilla
+database (https://bugzilla.samba.org/).
+
+
+==
+== Our Code, Our Bugs, Our Responsibility.
+== The Samba Team
+==
+
+
+Release notes for older releases follow:
+
+
+ ==
Release Notes for Samba 3.5.21
January 30, 2013
==
@@ -61,8 +117,8 @@ database (https://bugzilla.samba.org/).
==
-Release notes for older releases follow:
-
+--
+
==
Release Notes for Samba 3.5.20
diff --git a/source3/smbd/nttrans.c b/source3/smbd/nttrans.c
index 2ca14f4..2559769 100644
--- a/source3/smbd/nttrans.c
+++ b/source3/smbd/nttrans.c
@@ -934,7 +934,19 @@ struct ea_list *read_nttrans_ea_list(TALLOC_CTX *ctx,
const char *pdata, size_t
if (next_offset == 0) {
break;
}
+
+ /* Integer wrap protection for the increment. */
+ if (offset + next_offset offset) {
+ break;
+ }
+
offset += next_offset;
+
+ /* Integer wrap protection for while loop. */
+ if (offset + 4 offset) {
+ break;
+ }
+
}
return ea_list_head;
--
Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via f6b6d3b swat: Use additional nonce on XSRF protection via e9cd100 swat: Use X-Frame-Options header to avoid clickjacking via 4f0de0f WHATSNEW: Prepare release notes for Samba 3.5.21. from 71dbced WHATSNEW: Start release notes for Samba 3.5.21. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit f6b6d3bf9d43d45560d352b76c12fe0c87a16fa3 Author: Kai Blin k...@samba.org Date: Mon Jan 28 23:13:43 2013 +0100 swat: Use additional nonce on XSRF protection If the user had a weak password on the root account of a machine running SWAT, there still was a chance of being targetted by an XSRF on a malicious web site targetting the SWAT setup. Use a random nonce stored in secrets.tdb to close this possible attack window. Thanks to Jann Horn for reporting this issue. Signed-off-by: Kai Blin k...@samba.org Fix bug #9577: CVE-2013-0214: Potential XSRF in SWAT. commit e9cd10049e0b5c1e24e454cc3277eb4bea033dfb Author: Kai Blin k...@samba.org Date: Fri Jan 18 23:11:07 2013 +0100 swat: Use X-Frame-Options header to avoid clickjacking Jann Horn reported a potential clickjacking vulnerability in SWAT where the SWAT page could be embedded into an attacker's page using a frame or iframe and then used to trick the user to change Samba settings. Avoid this by telling the browser to refuse the frame embedding via the X-Frame-Options: DENY header. Signed-off-by: Kai Blin k...@samba.org Fix bug #9576 - CVE-2013-0213: Clickjacking issue in SWAT. commit 4f0de0faf15e2c157ad88800a11648c181d82b65 Author: Karolin Seeger ksee...@samba.org Date: Tue Jan 29 10:49:29 2013 +0100 WHATSNEW: Prepare release notes for Samba 3.5.21. This is a Security Release in order to address CVE-2013-0213 (Clickjacking issue in SWAT) and CVE-2013-0214 (Potential XSRF in SWAT). Karolin --- Summary of changes: WHATSNEW.txt | 37 +++-- source3/web/cgi.c| 39 ++- source3/web/swat.c |5 - source3/web/swat_proto.h |1 + 4 files changed, 62 insertions(+), 20 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index c96f46f..a7766a9 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,19 +1,44 @@ == Release Notes for Samba 3.5.21 -, 2013 +January 30, 2013 == -This is the latest stable release of Samba 3.5. - -Major enhancements in Samba 3.5.21 include: - -o - -Changes since 3.5.19: +This is a security release in order to address +CVE-2013-0213 (Clickjacking issue in SWAT) and +CVE-2013-0214 (Potential XSRF in SWAT). + +o CVE-2013-0213: + All current released versions of Samba are vulnerable to clickjacking in the + Samba Web Administration Tool (SWAT). When the SWAT pages are integrated into + a malicious web page via a frame or iframe and then overlaid by other content, + an attacker could trick an administrator to potentially change Samba settings. + + In order to be vulnerable, SWAT must have been installed and enabled + either as a standalone server launched from inetd or xinetd, or as a + CGI plugin to Apache. If SWAT has not been installed or enabled (which + is the default install state for Samba) this advisory can be ignored. + +o CVE-2013-0214: + All current released versions of Samba are vulnerable to a cross-site + request forgery in the Samba Web Administration Tool (SWAT). By guessing a + user's password and then tricking a user who is authenticated with SWAT into + clicking a manipulated URL on a different web page, it is possible to manipulate + SWAT. + + In order to be vulnerable, the attacker needs to know the victim's password. + Additionally SWAT must have been installed and enabled either as a standalone + server launched from inetd or xinetd, or as a CGI plugin to Apache. If SWAT has + not been installed or enabled (which is the default install state for Samba) + this advisory can be ignored. + + +Changes since 3.5.20: - -o Jeremy Allison j...@samba.org +o Kai Blin k...@samba.org +* BUG 9576: CVE-2013-0213: Fix clickjacking issue in SWAT. +* BUG 9577: CVE-2013-0214: Fix potential XSRF in SWAT. ## diff --git a/source3/web/cgi.c b/source3/web/cgi.c index 0c8e9cb..afa2e63 100644 --- a/source3/web/cgi.c +++ b/source3/web/cgi.c @@ -45,6 +45,7 @@ static const char *baseurl; static char *pathinfo; static char *C_user;
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 81aa6c38 VERSION: Bump Version number up to 3.5.22. from f6b6d3b swat: Use additional nonce on XSRF protection http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 81aa6c38f50ee67e47987b0acfb3f9b8e728cc58 Author: Karolin Seeger ksee...@samba.org Date: Wed Jan 30 11:48:43 2013 +0100 VERSION: Bump Version number up to 3.5.22. Karolin --- Summary of changes: source3/VERSION |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/VERSION b/source3/VERSION index bdf294e..8f0d025 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=21 +SAMBA_VERSION_RELEASE=22 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 71dbced WHATSNEW: Start release notes for Samba 3.5.21. via 9466c43 VERSION: Bump version number up to 3.5.21. from 0c72376 WHATSNEW: Prepare release notes for Samba 3.5.20. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 71dbced7ea45a4e20209fd4208d63b99fb50705b Author: Karolin Seeger ksee...@samba.org Date: Tue Dec 18 10:51:35 2012 +0100 WHATSNEW: Start release notes for Samba 3.5.21. Karolin (cherry picked from commit 26a043a0997e199701a1bd72f91edc607471e700) commit 9466c434a47814f29cd8bd076f46175610578dbb Author: Karolin Seeger ksee...@samba.org Date: Tue Dec 18 10:50:59 2012 +0100 VERSION: Bump version number up to 3.5.21. Karolin (cherry picked from commit f80704321ffe22ed3a5dfab02e0ebaa1cc104c22) --- Summary of changes: WHATSNEW.txt| 45 +++-- source3/VERSION |2 +- 2 files changed, 44 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index e2249fc..c96f46f 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,45 @@ == + Release Notes for Samba 3.5.21 +, 2013 + == + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.21 include: + +o + +Changes since 3.5.19: +- + +o Jeremy Allison j...@samba.org + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + == Release Notes for Samba 3.5.20 December 17, 2012 == @@ -51,8 +92,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + == Release Notes for Samba 3.5.19 diff --git a/source3/VERSION b/source3/VERSION index 8f64c98..bdf294e 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=20 +SAMBA_VERSION_RELEASE=21 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 0c72376 WHATSNEW: Prepare release notes for Samba 3.5.20. via 403ddeb Fix bug #9455 munmap called for an address location not mapped by samba. via 0a99e5d source3/libaddns: don't depend on the order in resp-answers[] via 4fabb76 source3/libaddns: remove pointless check for resp-num_additionals != 1 via 6848625 lib/replace: replace all *printf function if we replace snprintf (bug #9390) via dcd11b2 libreplace: Fix symbol names for snprintf/asprintf/vasprintf. via ce6e959 libreplace: fixed declaration of dprintf() on FreeBSD (cherry picked from commit a599319d0a389ff0c31dae8068cd7a78352aa9e7) (cherry picked from commit fa16d0e4c2329fad8edde5a5e8d626a90caba6d9) via 043eb5e libreplace: added replacements for dprintf() and vdprintf() via 3f0c021 libreplace: some systems don't have memmem() via 42cfbb8 Another fix needed for bug #9236 - ACL masks incorrectly applied when setting ACLs. via ea35034 docs-xml: fix use of smbconfoption tag (fix bug #9345) via 18d9c35 Second part of fix for bug #7781 - Samba transforms ShareName to lowercase (sharename) when adding new share via MMC via 429133f Fix bug #7781 (Samba transforms ShareName to lowercase when adding new share via MMC) from a6c3bff WHATSNEW: Start release notes for Samba 3.5.20. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 0c723760b4a8975bcd11e645ff76f6834559ae71 Author: Karolin Seeger ksee...@samba.org Date: Fri Dec 14 10:12:34 2012 +0100 WHATSNEW: Prepare release notes for Samba 3.5.20. Karolin (cherry picked from commit 31292e6fbedef78126435c92d6e687a4844847d9) commit 403ddeb5d8832ab14cbcf3e77d108cefb8386149 Author: Jeremy Allison j...@samba.org Date: Mon Dec 10 10:40:12 2012 -0800 Fix bug #9455 munmap called for an address location not mapped by samba. Signed-off-by: Jeremy Allison j...@samba.org (cherry picked from commit 06e3c65af559baaee7fa61ed3df1287b786d1858) commit 0a99e5d09a38e51607248290e9d9cb7f5c1b5808 Author: Stefan Metzmacher me...@samba.org Date: Fri Nov 9 08:59:36 2012 +0100 source3/libaddns: don't depend on the order in resp-answers[] Signed-off-by: Stefan Metzmacher me...@samba.org Reviewed-by: Andrew Bartlett abart...@samba.org (cherry picked from commit eecc1d294256210ee8c2f6ab79d21b835258a6d4) The last 2 patches address bug #9402 - lib/addns doesn't work samba4 with a bind9 server. (cherry picked from commit cf4773f929b2ac01bfe22e8113ccd3843c92bf56) commit 4fabb76106fc5224d48d380c9b1a6cb399dc3621 Author: Stefan Metzmacher me...@samba.org Date: Fri Nov 9 08:55:40 2012 +0100 source3/libaddns: remove pointless check for resp-num_additionals != 1 We never use resp-additionals, so there's no reason to check. This fixes dns updates against BIND9 (used in a Samba4 domain). Signed-off-by: Stefan Metzmacher me...@samba.org Reviewed-by: Andrew Bartlett abart...@samba.org (cherry picked from commit b59c5db5f74f56c0536635a41ae51c389109ceb5) (cherry picked from commit 4bb99f454cea8a0c37422f1e64cabe96543ca6e8) commit 6848625add89ca7fd97a4bf1705cad89c0ea2092 Author: Stefan Metzmacher me...@samba.org Date: Tue Nov 13 14:07:11 2012 +0100 lib/replace: replace all *printf function if we replace snprintf (bug #9390) This fixes segfaults in log level = 10 on Solaris. Signed-off-by: Stefan Metzmacher me...@samba.org Signed-off-by: Björn Jacke b...@sernet.de Autobuild-User(master): Björn Jacke b...@sernet.de Autobuild-Date(master): Wed Nov 14 19:41:14 CET 2012 on sn-devel-104 (cherry picked from commit a15da3625850d97b3da1b02308c870f820007c52) The last 5 patches address bug #9390 - Solaris printf doesn't allow %s, NULL. (cherry picked from commit 05f151c041e407514c1b35619b2f2454aa4d614b) commit dcd11b2f2c523a2f80295ad993dfd1f2b6403fba Author: Jelmer Vernooij jel...@samba.org Date: Sun May 13 03:21:34 2012 +0200 libreplace: Fix symbol names for snprintf/asprintf/vasprintf. Autobuild-User: Jelmer Vernooij jel...@samba.org Autobuild-Date: Sun May 13 05:16:28 CEST 2012 on sn-devel-104 (cherry picked from commit cf67da70c9a63c4dc63f287059321d6c36d1e19e) (cherry picked from commit 27405fb8cfaa56f3a39cdcd2fd635fd37af629f9) commit ce6e9599721fcf83d8418019849b8e59ed8bffef Author: Andrew Tridgell tri...@freebsd.home.tridgell.net Date: Wed Mar 24 05:06:25 2010 +1100 libreplace: fixed declaration of dprintf() on FreeBSD (cherry picked from commit a599319d0a389ff0c31dae8068cd7a78352aa9e7) (cherry picked from commit fa16d0e4c2329fad8edde5a5e8d626a90caba6d9) commit 043eb5e62ee89eae4f6dec5854aea3ed9925e3fb Author: Andrew Tridgell tri...@samba.org Date: Thu Feb 11 20:18:50
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 8d88de0 WHATSNEW: Prepare release notes for Samba 3.5.19. via 3985669 Revert Fix bug #7781 (Samba transforms ShareName to lowercase when adding new share via MMC) via c1a451c s3: fix compile of krb5 locator on Solaris via 2c24bca lib-addns: ensure that allocated buffer are pre set to 0 (bug #9259) via d99ed10 Fix bug #9117 - smbclient can't connect to a Windows 7 server using NTLMv2 (crypto code changes domain case). via 41d3ec2 s3-libsmb: Initialise ticket to ensure we do not invalid memory via a812254 autoconf: fix --with(out)-sendfile-support option handling via 84cee26 When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries. via 1219874 Only apply masks on non-default ACL entries when setting the ACL. (cherry picked from commit 580f61622c449aee8420e3519e764706d11c20fc) via c9b8583 Use is_default_acl variable in canonicalise_acl(). (cherry picked from commit 9647be9699b464ee5060e8ccc8328adef6d6641d) via 917f214 Reformat spacing to be even. (cherry picked from commit 4ed5deae7b9e155d4bd085d4a36ae05abe0aa0ef) via d8584b6 html docs: Remove link to Using Samba. via d68a305 Fix bug #7781 (Samba transforms ShareName to lowercase when adding new share via MMC) via 228cdfb s3-smbd: Don't segfault if user specified ports out for range. via f3e9504 Fix bug #9213 - Bad ASN.1 NegTokenInit packet can cause invalid free. via bf27038 Fix bug #9016 - Connection to outbound trusted domain goes offline. via 3243e66 quota: add supprt for gfs2 from 5deaf47 WHATSNEW: Start release notes for Samba 3.5.19. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 8d88de0c5fa4836c163e4588b5a58d8ff607e05f Author: Karolin Seeger ksee...@samba.org Date: Thu Nov 1 09:30:00 2012 +0100 WHATSNEW: Prepare release notes for Samba 3.5.19. Karolin (cherry picked from commit 4067d192f62d6fc20e1cdf8820656b03aa9f5931) commit 3985669176ad4989133f9a7a8995ce6c69504bf2 Author: Karolin Seeger ksee...@samba.org Date: Wed Oct 31 11:40:26 2012 +0100 Revert Fix bug #7781 (Samba transforms ShareName to lowercase when adding new share via MMC) This reverts commit 157b88da4db727eafa682c7fc7eab11d5955f57b. This one seems to break make test on my system. Karolin (cherry picked from commit 92bd768ed56585c2a45d0ca41eec9e6a1e3701ae) commit c1a451cacc441b47a92699805697cc123f449e06 Author: Björn Jacke b...@sernet.de Date: Tue May 29 08:01:40 2012 +0200 s3: fix compile of krb5 locator on Solaris the krb5 locator plugin on Solaris needs LIBREPLACE_LIBS (bug #8732) Autobuild-User: Björn Jacke b...@sernet.de Autobuild-Date: Tue May 29 09:58:42 CEST 2012 on sn-devel-104 (cherry picked from commit 3085225e72c75abf84d7740334459cd971ee4c56) (cherry picked from commit 7ca265423a36c114ac9216a780e005956967eae7) (cherry picked from commit 31518a6acd3399a29499b5f758e36115cf3db78b) commit 2c24bca3212207fa594bd85a054cba5bcee40bb0 Author: Matthieu Patou m...@matws.net Date: Thu Sep 27 01:22:57 2012 -0700 lib-addns: ensure that allocated buffer are pre set to 0 (bug #9259) It avoid bugs when one of the buffer is supposed to contain a string that is not null terminated (ie. label-label) and that we don't force the last byte to 0. (similar to commit 03c4dceaab82ca2c60c9ce0e09fddd071f98087b) (cherry picked from commit ee5a100eaa7cef525a8bc9d1390d7bbdbbfc84fa) commit d99ed100df916a95ffaf7872247ae731b4f42d64 Author: Jeremy Allison j...@samba.org Date: Fri Aug 24 15:54:07 2012 -0700 Fix bug #9117 - smbclient can't connect to a Windows 7 server using NTLMv2 (crypto code changes domain case). Simple fix for 3.5.x, tested and confirmed as working by original reporter Blohm, Guntram (I/FP-37, extern) extern.guntram.bl...@audi.de. (cherry picked from commit c13c6eb11f49b1fd3b3be95c7265cf9c0738b4e8) commit 41d3ec2ed53d45128d13483ef6920c21839d8250 Author: Andrew Bartlett abart...@samba.org Date: Thu Mar 1 16:55:04 2012 +1100 s3-libsmb: Initialise ticket to ensure we do not invalid memory The free is however a talloc_free(), which has additional protection against freeing the wrong thing. Andrew Bartlett Signed-off-by: Jeremy Allison j...@samba.org Autobuild-User: Jeremy Allison j...@samba.org Autobuild-Date: Fri Mar 2 01:45:19 CET 2012 on sn-devel-104 (cherry picked from commit f1452a296429b79755235f4a480f0d5ea38ce178) Fix bug #8788 - spnego_parse_krb5_wrap() frees invalid memory. (cherry picked from commit e96f50c9bb145a6af2c023e8ff4c3ec5a4a6) (cherry picked from commit 8013e2e96fd54446584cb91c0120acf41d9e8d46) commit
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via a6c3bff WHATSNEW: Start release notes for Samba 3.5.20. via c648d63 VERSION: Bump version number up to 3.5.20. from 8d88de0 WHATSNEW: Prepare release notes for Samba 3.5.19. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit a6c3bfff6d2d475a7cc6b1a4d823ee4776a8feee Author: Karolin Seeger ksee...@samba.org Date: Mon Nov 5 09:50:55 2012 +0100 WHATSNEW: Start release notes for Samba 3.5.20. And fix a typo. Karolin (cherry picked from commit 6b03743f3f342a874971b9fc8be1eb1f520b74da) commit c648d63c499038d100ca13a21efe99c23278e5a8 Author: Karolin Seeger ksee...@samba.org Date: Mon Nov 5 09:44:10 2012 +0100 VERSION: Bump version number up to 3.5.20. Karolin (cherry picked from commit 6048e80e1f3ca0d603d5e7458c91f9e5c43f8b67) --- Summary of changes: WHATSNEW.txt| 47 --- source3/VERSION |2 +- 2 files changed, 45 insertions(+), 4 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 5bf1c53..f0114d6 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,45 @@ == + Release Notes for Samba 3.5.20 +December 17, 2012 + == + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.20 include: + +o + +Changes since 3.5.19: +- + +o Jeremy Allison j...@samba.org + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + == Release Notes for Samba 3.5.19 November 5, 2012 == @@ -13,7 +54,7 @@ o ACL masks incorrectly applied when setting ACLs (bug #9236). o Samba panics if a user specifies an invalid port number (bug #9218). -Changes since 3.5.17: +Changes since 3.5.18: - o Jeremy Allison j...@samba.org @@ -61,8 +102,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + == Release Notes for Samba 3.5.18 diff --git a/source3/VERSION b/source3/VERSION index ed9c874..8f64c98 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=19 +SAMBA_VERSION_RELEASE=20 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 052b65e WHWATSNEW: Prepare release notes for Samba 3.5.18. via fa8b1fa docs: clarify the idmap_rid manpage (bug #7788) via 1d5b8aa s3:winbindd: make sure we only call static_init_idmap once via 536be09 quota: fix build of sysquote_xfs on via 5463fcf nsswitch: fix crash on null pam change pw response via f919d07 Fix bug #9147 - winbind can't fetch user or group info from AD via LDAP via 3709ac8 s3: delete requests are not special via f482604 s3: Fix bug #9085. via 9c48ee2 Fix bug #9100 - winbind doesn't return Domain Local groups from own domain. via 805992f Fix bug #9098 - winbind does not refresh kerberos tickets. via aca082e Fix bug #9104 - winbindd can mis-identify idle clients - can cause crashes and NDR parsing errors. via 83148e2 Ensure we keep last_access up to date when processing a request. (cherry picked from commit e01df21a5dbe8f3d401d58de6cffa4d4ba340a24) via 988118c s3: Fix a crash in reply_lockingX_error from 6c50a54 WHATSNEW: Start release notes for Samba 3.5.18. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 052b65e15293b62520f3a35d4681ffeaf7499cae Author: Karolin Seeger ksee...@samba.org Date: Fri Sep 21 10:19:07 2012 +0200 WHWATSNEW: Prepare release notes for Samba 3.5.18. Karolin (cherry picked from commit e9e21faae567370f05432462cf25a3df6cf8e07f) commit fa8b1fa084a0695e949bf5d473faf6ef523900ee Author: Michael Adam ob...@samba.org Date: Tue Dec 7 17:30:27 2010 +0100 docs: clarify the idmap_rid manpage (bug #7788) The idmap_rid module should not be used as a default backend. Also mention that the old snytax idmap backend = rid:domain=range ... is not supported any more. Autobuild-User: Michael Adam ob...@samba.org Autobuild-Date: Tue Dec 7 19:07:57 CET 2010 on sn-devel-104 (cherry picked from commit a4f48b3da0081845336c55ff230179caeab5195c) commit 1d5b8aa6a8c242e6b40e8a984a04bcd76bfdd884 Author: Björn Jacke b...@sernet.de Date: Wed Aug 24 10:57:49 2011 +0200 s3:winbindd: make sure we only call static_init_idmap once this is a backport of 3f14d03adbda03b821210115af4fae044a9b4a3e Fix bug #8402 - winbind log spammed with idmap messages. (cherry picked from commit 04e4325642d029e604c31b371811fafdf2b61cf8) commit 536be09e802db2f93ed02690d219ed6ccec908c3 Author: Björn Jacke b...@sernet.de Date: Thu Sep 13 01:23:12 2012 +0200 quota: fix build of sysquote_xfs on linux header files renamed some XFS_* defines to FS_* around kernel v2.6.36 This fixes bug #7814 (cherry picked from commit a3eb8d765e48bcbe86458791ec61325a517bd7dd) commit 5463fcf7dca60c902946f36437c034137d9078b0 Author: Luca Lorenzetto lorenzetto-l...@ubuntu-it.org Date: Tue Sep 11 18:35:42 2012 +0200 nsswitch: fix crash on null pam change pw response The function _pam_winbind_change_pwd crashes due to a null value passed to the function strcasecmp and denies to login via graphical login manager. Check for a null value before doing a strcasecmp. Bug-Ubuntu: https://bugs.launchpad.net/bugs/1003296 Bug: https://bugzilla.samba.org/show_bug.cgi?id=9013 (Desktop Managers (xdm, gdm, lightdm...) crashes with SIGSEGV in _pam_winbind_change_pwd() when password is expiring) (cherry picked from commit 47f2211f137688a7c46c4a38571a9f94e59dbf6a) (cherry picked from commit 25bf057288d5e77c07a5ed3d3c3fb7f5f33f62b6) commit f919d070b1dc9c210e9b402806372fd2f041b35a Author: Jeremy Allison j...@samba.org Date: Mon Sep 10 16:07:37 2012 -0700 Fix bug #9147 - winbind can't fetch user or group info from AD via LDAP Don't use isprint in ldb_binary_encode(). This is locale specific. Restrict to ASCII only, hex encode everything else. (cherry picked from commit 9258a7b9cfd5fb85e5361d1b49c3bb8655e97159) commit 3709ac83a0671fc8ac546031f4992165a886de0d Author: Volker Lendecke v...@samba.org Date: Mon Sep 10 11:25:03 2012 +0200 s3: delete requests are not special The only difference between batch and exclusive oplocks is the time of the check: Batch is checked before the share mode check, exclusive after. Signed-off-by: Jeremy Allison j...@samba.org Fix bug #9150 - Valid open requests can cause smbd assert due to incorrect oplock handling on delete requests. (cherry picked from commit b20ca77e2a9d111eb2e77d0b804fe7505b07e418) commit f4826046d01bf702044a1664400989a631acf65f Author: hargagan sharga...@novell.com Date: Tue Aug 28 09:29:52 2012 +0200 s3: Fix bug #9085. NMB registration for a duplicate workstation fails with registration refuse. (cherry picked from commit 71c4227fd0a741984fb273ad1973ad1724ecb04b) (cherry picked from commit
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 5deaf47 WHATSNEW: Start release notes for Samba 3.5.19. via 8872a02 VERSION: Bump version up to 3.5.19. from 052b65e WHWATSNEW: Prepare release notes for Samba 3.5.18. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 5deaf47c35b0971642244640bbf855cc1628eb15 Author: Karolin Seeger ksee...@samba.org Date: Mon Sep 24 19:59:55 2012 +0200 WHATSNEW: Start release notes for Samba 3.5.19. Karolin (cherry picked from commit 48d90a8eae8873081dcce28c17f483ae07ddb8f6) commit 8872a02e005cc4c5e7b7e2953e475c07393f5dcf Author: Karolin Seeger ksee...@samba.org Date: Mon Sep 24 19:57:40 2012 +0200 VERSION: Bump version up to 3.5.19. Karolin (cherry picked from commit 3262322e686dadf6cb25b93177b0d16076ca7e06) --- Summary of changes: WHATSNEW.txt| 45 +++-- source3/VERSION |2 +- 2 files changed, 44 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 37bbe4b..1551865 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,45 @@ == + Release Notes for Samba 3.5.19 + November 5, 2012 + == + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.19 include: + +o + +Changes since 3.5.17: +- + +o Jeremy Allison j...@samba.org + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + == Release Notes for Samba 3.5.18 September 24, 2012 == @@ -75,8 +116,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + == Release Notes for Samba 3.5.17 diff --git a/source3/VERSION b/source3/VERSION index 6a708dc..ed9c874 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=18 +SAMBA_VERSION_RELEASE=19 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated
via 5d48aa5 WHATSNEW: Remove Major enhancements section.
via 584d4d7 WHATSNEW: Add changes since 3.5.16.
via 20c8597 Fix bug #9034 - Typo in set_re_uid() call when
USE_SETRESUID selected in configure.
via 5692054 s3:vfs_gpfs: be less verbose in get/set_xattr functions
via 1bedfea s3: fix build without ads support
via aa6cbf4 s3: readd h_errno struct member but rename it
from 374e761 WHATSNEW: Start release notes for Samba 3.5.17.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable
- Log -
commit 5d48aa5a72141c739883dd72d43b22b690c8eb74
Author: Karolin Seeger ksee...@samba.org
Date: Thu Aug 2 19:26:06 2012 +0200
WHATSNEW: Remove Major enhancements section.
Karolin
(cherry picked from commit 6f5cfa259dfb5501db21163982ad4397c254a9c9)
commit 584d4d774aa63643747a3bcbe69d41f955f10cab
Author: Karolin Seeger ksee...@samba.org
Date: Thu Jul 26 20:03:39 2012 +0200
WHATSNEW: Add changes since 3.5.16.
Karolin
(cherry picked from commit a7e0d4a78eaacc56463d3a9160db5862c2ea8f7b)
commit 20c85976db84a49ab13e057f51b10597c133a649
Author: Jeremy Allison j...@samba.org
Date: Tue Jul 10 21:13:03 2012 -0700
Fix bug #9034 - Typo in set_re_uid() call when USE_SETRESUID selected in
configure.
Previous code only set the real euid, not the effective one. This is not a
security issue
as this is *only* used in the quota code, and only between code that
brackets
it with save_re_uid()/restore_re_uid(), Also this is not used on most
platforms
(we use USE_SETREUID by preference) but it's better to have this right.
(cherry picked from commit ceed322622b46be3745b32a5f6a02e634bfe1789)
(cherry picked from commit a224e4cc1dbb2578813ccffb80e88d9ec92516ce)
commit 56920545d803cd7d51133f2860c7249e597c6277
Author: Stefan Metzmacher me...@samba.org
Date: Thu Dec 22 14:20:32 2011 +0100
s3:vfs_gpfs: be less verbose in get/set_xattr functions
metze
Signed-off-by: Christian Ambach a...@samba.org
(cherry picked from commit 2e95d8048b9e9c7025ddada7ede15494e6016ba9)
Fix bug #9022 - vfs_gpfs is very verbose in get/set_xattr functions.
(cherry picked from commit 3abaa9dd8a2af9497dfc6afd6f93a638956c1c3a)
(cherry picked from commit 4c8fdb5ce7ad0d966b3de23a1052191645b6635b)
commit 1bedfeadc04aa0fcd4740f647ea784d1bcdbd36b
Author: Björn Jacke b...@sernet.de
Date: Mon Jul 2 00:46:06 2012 +0200
s3: fix build without ads support
when we have no ads support we don't have the ads_get_sid_token symbol used
in
this unused code :-)
this is the backport of 43c56dc4255a7a6cbd176e6ae66a7652c6d72d2c
Fix bug #8996 - build without ads support (e.g. plain solaris 8) broken.
(cherry picked from commit f8ed8815adc6acc42bab2f1b69085dcda8bb9894)
commit aa6cbf452052cef108e2fe0b35dbd26b4d2f1fc3
Author: Björn Jacke b...@sernet.de
Date: Thu Jun 10 23:15:19 2010 +0200
s3: readd h_errno struct member but rename it
as pointed out by metze this is a structure of fixed size, which should not
be
changed.
(cherry picked from commit a8c051b2f91852b5228d6a903d6a7fd50d22de28)
Second part of a fix for bug #9011 (Build on HP-UX broken).
(cherry picked from commit 7a56042642409556c492cadd49772bb70fbd974d)
---
Summary of changes:
WHATSNEW.txt| 16 +++-
libgpo/gpo_util.c |7 ---
nsswitch/winbind_nss_hpux.h |4 ++--
source3/lib/util_sec.c |2 +-
source3/modules/vfs_gpfs.c |4 ++--
5 files changed, 20 insertions(+), 13 deletions(-)
Changeset truncated at 500 lines:
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index a7333f8..e95acf1 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -6,16 +6,22 @@
This is the latest stable release of Samba 3.5.
-Major enhancements in Samba 3.5.17 include:
-
-o
-
Changes since 3.5.16:
-
o Jeremy Allison j...@samba.org
-* BUG
+* BUG 9034: Fix typo in set_re_uid() call when USE_SETRESUID selected in
+ configure.
+
+
+o Björn Jacke b...@sernet.de
+* BUG 8996: Fix build without ads support.
+* BUG 9011: Second part of a fix for bug #9011 (Build on HP-UX broken).
+
+
+o Stefan Metzmacher me...@samba.org
+* BUG 9022: Make vfs_gpfs less verbose in get/set_xattr functions.
##
diff --git a/libgpo/gpo_util.c b/libgpo/gpo_util.c
index 7a23b5c..4e0c8ab 100644
--- a/libgpo/gpo_util.c
+++ b/libgpo/gpo_util.c
@@ -840,6 +840,7 @@ ADS_STATUS gp_get_machine_token(ADS_STRUCT *ads,
const char *dn,
NT_USER_TOKEN **token)
{
+#ifdef HAVE_ADS
NT_USER_TOKEN *ad_token = NULL;
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 6c50a54 WHATSNEW: Start release notes for Samba 3.5.18. via 1b28bf9 VERSION: Bump version up to 3.5.18. from 5d48aa5 WHATSNEW: Remove Major enhancements section. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 6c50a545452b49ac956694bf10f0dcd8cbc48c73 Author: Karolin Seeger ksee...@samba.org Date: Mon Aug 13 07:04:37 2012 +0200 WHATSNEW: Start release notes for Samba 3.5.18. Karolin (cherry picked from commit 81cf4fc831a782dc315362852b09eba67c26e685) commit 1b28bf952b8a3e72abd97b42b126e75a530ce6ad Author: Karolin Seeger ksee...@samba.org Date: Mon Aug 13 07:02:56 2012 +0200 VERSION: Bump version up to 3.5.18. Karolin (cherry picked from commit d505a39b117bc450c8ffc43e1836e97531a182e1) --- Summary of changes: WHATSNEW.txt| 44 ++-- source3/VERSION |2 +- 2 files changed, 43 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index e95acf1..da49f98 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,44 @@ == + Release Notes for Samba 3.5.18 + , 2012 + == + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.16 include: + + +Changes since 3.5.17: +- + +o Jeremy Allison j...@samba.org + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + == Release Notes for Samba 3.5.17 August 13, 2012 == @@ -44,8 +84,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + == Release Notes for Samba 3.5.16 diff --git a/source3/VERSION b/source3/VERSION index 4e4448b..6a708dc 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=17 +SAMBA_VERSION_RELEASE=18 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 374e761 WHATSNEW: Start release notes for Samba 3.5.17. via 78fbf76 VERSION: Bump version up to 3.5.17. from 5e47111 WHATSNEW: Prepare release notes for Samba 3.5.16. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 374e7617b627a6d54cb2fef4184be02de2e3623a Author: Karolin Seeger ksee...@samba.org Date: Fri Jul 6 20:48:58 2012 +0200 WHATSNEW: Start release notes for Samba 3.5.17. Karolin (cherry picked from commit 1bbaba8dffa238692a7efc838d8549e7ee40993c) commit 78fbf761245cb367cac18d7b84b1c60c7b28c668 Author: Karolin Seeger ksee...@samba.org Date: Fri Jul 6 20:46:01 2012 +0200 VERSION: Bump version up to 3.5.17. Karolin (cherry picked from commit 8f4111a664b63f68af2b62e7b5d3738907d0bc87) --- Summary of changes: WHATSNEW.txt| 47 +-- source3/VERSION |2 +- 2 files changed, 46 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 1e2ff06..a7333f8 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,47 @@ == + Release Notes for Samba 3.5.17 + August 13, 2012 + == + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.17 include: + +o + + +Changes since 3.5.16: +- + +o Jeremy Allison j...@samba.org +* BUG + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + == Release Notes for Samba 3.5.16 July 2, 2012 == @@ -103,8 +146,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + == Release Notes for Samba 3.5.15 diff --git a/source3/VERSION b/source3/VERSION index a6f4f5a..4e4448b 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=16 +SAMBA_VERSION_RELEASE=17 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 5e47111 WHATSNEW: Prepare release notes for Samba 3.5.16. via 6e3863b s3-winbindd Only use SamLogonEx when we can get unencrypted session keys via 2f22366 v3-6-test: Further fix for bug 8338 via bbaf9ec Fix bug 8314] - smbd crash with unknown user. via 5c0531e docs-xml: fix default name resolve order (fix bug #7564) via 96bf61a s3: fix build on HP-UX via 58ab75f s3-vfs_gpfs: Fix bug #9003, posix acl on gpfs via a50fae4 Fix bug #8974 - Kernel oplocks are broken when uid(file) != uid(process). via 7613be7 s3: Correct documentation of case sensitive via efa2050 Same fix as bug 8989 - Samba 3.5.x (and probably all other versions of Samba) does not send correct responses to NT Transact Secondary when no data and no params via e296914 Fix Bug 8989 - Samba 3.5.x (and probably all other versions of Samba) does not send correct responses to NT Transact Secondary when no data and no params via 7172d1f s3: Fix a winbind race leading to 100% CPU via 45ce22b Fix for bug #8998 - Notify code can miss a ChDir. (cherry picked from commit dfa5366a6ee418d6292c1832520c0c1bd974af49) via 4432e8b Fix bug #8994 - winbind normalize names. via a72ea5e Fix bug #8972 - Directory group write permission bit is set if unix extensions are enabled via 8a4df6f s3-winbindd: call dump_core_setup after command line option has been parsed via 7046a1e s3: Fix uninitialized memory read in talloc_free() via 427c973 Fix bug #8970 - Possible memory leaks in the samba master process. via eac9d9b Fix bug #8882 - Broken processing of %U with vfs_full_audit when force user is set. via 3239ce4 s3-utils: Use ads_do_search_retry in net ads search via 179a71f s3-libads: Use a reducing page size to try and cope with a slow LDAP server via d63a8bd s3-winbindd: Always map the LDAP error code to an NTSTATUS via 7f0abf6 s3-libads: Map LDAP_TIMELIMIT_EXCEEDED as NT_STATUS_IO_TIMEOUT via e4d9909 Fix the loop unrolling inside resolve_ads(). via f7cbb02 Protect all of the name resolution methods from returning null addrs. Ensure all returns go through remove_duplicate_addrs2(). (cherry picked from commit 6d5aae1d9680657c7021af2974db9b0dc2336f13) via 1896cf4 Fix convert_ss2service() to filter out zero addresses. (cherry picked from commit 3226be5b5ab771c8cdf98588c40713d36eae4702) via 6d200f4 Fix remove_duplicate_addrs2 to do exactly what it says. Previously it could leave zero addresses in the list. (cherry picked from commit 8e9db61b447d22bad84a8c9ae450a71d9c3e6d58) via fd3ad53 Fix bug #8957 - Typo in pam_winbindd code MUST fix. (cherry picked from commit ee4ef9a535a2d9db11bd94987fb96ae8f8771e79) (cherry picked from commit 991f83fed8f49fe4c6b4f47bd63b8064d57d811f) via b6623ac s3-pam_winbind: Fix the build. via 7e7418c Fix pam_winbind build against newer iniparser library. via 309bdf4 s3-docs: Fix bug #7930. via 13f7e96 s3-VFS: Fix building out-of-tree modules. via 6df440d s3-docs: overrided - overridden via b05 s3/ldap: remove outdated netscape ds 5 schema file via c49c62c Fix bug #8831 - Inconsistent (with manpage) command-line switch for help in smbtree via da87aaf Fix bug #8897 - winbind_krb5_locator only returns one IP address. from f28fea9 WHATSNEW: Start release notes for 3.5.16. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 5e47111901a3fcaf18cb03e4bc6e77a395807343 Author: Karolin Seeger ksee...@samba.org Date: Sat Jun 30 21:45:53 2012 +0200 WHATSNEW: Prepare release notes for Samba 3.5.16. Karolin (cherry picked from commit b1a6698ec7a6fc661e8ff9876dfbdf740f33ae2d) commit 6e3863bcf179a72f1217d85af55a52b60cf1ba4f Author: Andrew Bartlett abart...@samba.org Date: Thu Dec 15 09:57:56 2011 +1100 s3-winbindd Only use SamLogonEx when we can get unencrypted session keys This ensures that we have some check on the session keys being returned as the RC4 cipher is not checksumed. The check comes from the fact that the credentials chain is tied to the netlgon session key, and so if the credentials check passes then the netlogon session key will be correct, and so the user session key will be correctly decrypted. Andrew Bartlett Signed-off-by: Matthieu Patou m...@matws.net s3: If we can't do validation 6 or sam_logon_ex use sam_logon only (cherry picked from commit c119cd8868fc7e2eb08b09f7092519007fd83bf6) commit 2f2236661c0353f6dc1aedf70eb99c9c2be202b5 Author: Volker Lendecke v...@samba.org Date: Tue Sep 20 22:45:52 2011 +0200 v3-6-test: Further fix for bug 8338 OS/X can not deal with a 10-vwv read on
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated
via b1061ab Fix self granting privileges in security=ads.
via 0b27880 WHASNEW: Release notes for 3.5.15.
from 1cc0306 WHATSNEW: Start release notes for Samba 3.5.15.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable
- Log -
commit b1061ab00f59fdf4ebab622ab7a9c29a3aa51eee
Author: Jeremy Allison j...@samba.org
Date: Tue Apr 17 11:49:55 2012 -0700
Fix self granting privileges in security=ads.
CVE-2012-2111
commit 0b278804b1aa020e03c89e9276408dd7097bb4d2
Author: Karolin Seeger ksee...@samba.org
Date: Fri Apr 27 21:09:56 2012 +0200
WHASNEW: Release notes for 3.5.15.
Karolin
---
Summary of changes:
WHATSNEW.txt| 16 +++-
source3/rpc_server/srv_lsa_nt.c | 20 ++--
2 files changed, 25 insertions(+), 11 deletions(-)
Changeset truncated at 500 lines:
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 712748f..b588bfd 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,20 +1,26 @@
==
Release Notes for Samba 3.5.15
- , 2012
+ April 30, 2012
==
-This is the latest stable release of Samba 3.5.
+This is a security release in order to address
+CVE-2012-2111 (Incorrect permission checks when granting/removing
+privileges can compromise file server security).
-Major enhancements in Samba 3.5.15 include:
+o CVE-2012-2111:
+ Samba 3.4.x to 3.6.4 are affected by a
+ vulnerability that allows arbitrary users
+ to modify privileges on a file server.
-o
Changes since 3.5.14:
-
-o Stefan Metzmacher me...@samba.org
+o Jeremy Allison j...@samba.org
+* Fix incorrect permission checks when granting/removing
+ privileges (CVE-2012-2111).
##
diff --git a/source3/rpc_server/srv_lsa_nt.c b/source3/rpc_server/srv_lsa_nt.c
index e903f0e..b9ea2d2 100644
--- a/source3/rpc_server/srv_lsa_nt.c
+++ b/source3/rpc_server/srv_lsa_nt.c
@@ -1691,6 +1691,10 @@ NTSTATUS _lsa_CreateAccount(pipes_struct *p,
struct lsa_info *handle;
struct lsa_info *info;
uint32_t acc_granted;
+ uint32_t owner_access = (LSA_ACCOUNT_ALL_ACCESS
+ ~(LSA_ACCOUNT_ADJUST_PRIVILEGES|
+ LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS|
+ STD_RIGHT_DELETE_ACCESS));
struct security_descriptor *psd;
size_t sd_size;
@@ -1718,7 +1722,7 @@ NTSTATUS _lsa_CreateAccount(pipes_struct *p,
status = make_lsa_object_sd(p-mem_ctx, psd, sd_size,
lsa_account_mapping,
- r-in.sid, LSA_POLICY_ALL_ACCESS);
+ r-in.sid, owner_access);
if (!NT_STATUS_IS_OK(status)) {
return status;
}
@@ -1764,6 +1768,10 @@ NTSTATUS _lsa_OpenAccount(pipes_struct *p,
size_t sd_size;
uint32_t des_access = r-in.access_mask;
uint32_t acc_granted;
+ uint32_t owner_access = (LSA_ACCOUNT_ALL_ACCESS
+ ~(LSA_ACCOUNT_ADJUST_PRIVILEGES|
+ LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS|
+ STD_RIGHT_DELETE_ACCESS));
NTSTATUS status;
/* find the connection policy handle. */
@@ -1788,7 +1796,7 @@ NTSTATUS _lsa_OpenAccount(pipes_struct *p,
/* get the generic lsa account SD until we store it */
status = make_lsa_object_sd(p-mem_ctx, psd, sd_size,
lsa_account_mapping,
- r-in.sid, LSA_ACCOUNT_ALL_ACCESS);
+ r-in.sid, owner_access);
if (!NT_STATUS_IS_OK(status)) {
return status;
}
@@ -2174,10 +2182,10 @@ NTSTATUS _lsa_AddAccountRights(pipes_struct *p,
return NT_STATUS_INVALID_HANDLE;
}
-/* get the generic lsa account SD for this SID until we store it */
+/* get the generic lsa account SD until we store it */
status = make_lsa_object_sd(p-mem_ctx, psd, sd_size,
lsa_account_mapping,
-r-in.sid, LSA_ACCOUNT_ALL_ACCESS);
+NULL, 0);
if (!NT_STATUS_IS_OK(status)) {
return status;
}
@@ -2245,10 +2253,10 @@ NTSTATUS _lsa_RemoveAccountRights(pipes_struct *p,
return NT_STATUS_INVALID_HANDLE;
}
-/* get the generic lsa account SD for this SID until we store it */
+/* get the generic lsa account SD until we store it */
status = make_lsa_object_sd(p-mem_ctx, psd,
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via f28fea9 WHATSNEW: Start release notes for 3.5.16. via 452e5d1 VERSION: Bump version number up to 3.5.16. from b1061ab Fix self granting privileges in security=ads. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit f28fea98458e0b3c3510f02b98177e8c46c12d3c Author: Karolin Seeger ksee...@samba.org Date: Mon Apr 30 20:48:52 2012 +0200 WHATSNEW: Start release notes for 3.5.16. Karolin commit 452e5d110fa64f0e10cbce19bac0efbd5f0931e0 Author: Karolin Seeger ksee...@samba.org Date: Mon Apr 30 20:46:52 2012 +0200 VERSION: Bump version number up to 3.5.16. Karolin --- Summary of changes: WHATSNEW.txt| 46 -- source3/VERSION |2 +- 2 files changed, 45 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index b588bfd..3e8711d 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,46 @@ == + Release Notes for Samba 3.5.16 + , 2012 + == + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.16 include: + +o + +Changes since 3.5.15: +- + + +o Jeremy Allison j...@samba.org + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + == Release Notes for Samba 3.5.15 April 30, 2012 == @@ -43,8 +85,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + == Release Notes for Samba 3.5.14 diff --git a/source3/VERSION b/source3/VERSION index 9fcfd85..a6f4f5a 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=15 +SAMBA_VERSION_RELEASE=16 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 566295f rerun 'make samba3-idl' via 50be426 pidl/NDR/Parser: also do range checks on the array size via 3b837d9 pidl/NDR/Parser: do array range validation in ParseArrayPullGetLength() via a87211b pidl/NDR/Parser: use helper variables for array size and length via 748615f pidl/NDR/Parser: remember if we already know the array length via 459c5b2 pidl/NDR/Parser: use ParseArrayPullGetLength() to get the number of array elements (bug #8815 / CVE-2012-1182) via a67afd3 pidl/NDR/Parser: split off ParseArrayPullGetSize() and ParseArrayPullGetLength() via a74a8ed pidl/NDR/Parser: simplify logic in DeclareArrayVariables*() via 31d6686 pidl/NDR/Parser: declare all union helper variables in ParseUnionPull() via 6c2860d pidl:NDR/Parser: fix range() for arrays via 6c417bf WHATSNEW: Prepare release notes for 3.5.14. from 8f46865 WHATSNEW: Start release notes for 3.5.14. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 566295fa13ff4a848fea517d41bc08aee87966ac Author: Stefan Metzmacher me...@samba.org Date: Thu Mar 15 18:46:44 2012 +0100 rerun 'make samba3-idl' metze The last 10 patches address bug #8815 (PIDL based autogenerated code allows overwriting beyond of allocated array; CVE-2012-1182). commit 50be4262f6001f91ade4580c2d67b38c12730d77 Author: Stefan Metzmacher me...@samba.org Date: Thu Mar 15 17:03:05 2012 +0100 pidl/NDR/Parser: also do range checks on the array size metze commit 3b837d94e649e8cbc24ee3ea24a9bced60f9dda8 Author: Stefan Metzmacher me...@samba.org Date: Thu Mar 15 13:14:48 2012 +0100 pidl/NDR/Parser: do array range validation in ParseArrayPullGetLength() metze commit a87211b32bfea3595627882a52c2e90bdcd3e9e8 Author: Stefan Metzmacher me...@samba.org Date: Thu Mar 15 13:13:20 2012 +0100 pidl/NDR/Parser: use helper variables for array size and length metze commit 748615f74486076a023b498c723c0ebeff8a23bb Author: Stefan Metzmacher me...@samba.org Date: Thu Mar 15 15:07:08 2012 +0100 pidl/NDR/Parser: remember if we already know the array length metze commit 459c5b271a18a25873c1965b11642aa65ea2d220 Author: Stefan Metzmacher me...@samba.org Date: Thu Mar 15 13:07:47 2012 +0100 pidl/NDR/Parser: use ParseArrayPullGetLength() to get the number of array elements (bug #8815 / CVE-2012-1182) An anonymous researcher and Brian Gorenc (HP DVLabs) working with HP's Zero Day Initiative program have found this and notified us. metze commit a67afd3489669afc711cf77a22740f8e1e91779e Author: Stefan Metzmacher me...@samba.org Date: Thu Mar 15 13:05:39 2012 +0100 pidl/NDR/Parser: split off ParseArrayPullGetSize() and ParseArrayPullGetLength() metze commit a74a8ed48f3a89d8f33ad1b1fca6533cc69aabf4 Author: Stefan Metzmacher me...@samba.org Date: Thu Mar 15 13:12:04 2012 +0100 pidl/NDR/Parser: simplify logic in DeclareArrayVariables*() metze commit 31d668651edc6fca45d024283e211533a49c2c4e Author: Stefan Metzmacher me...@samba.org Date: Thu Mar 15 13:09:51 2012 +0100 pidl/NDR/Parser: declare all union helper variables in ParseUnionPull() metze commit 6c2860d4cfcbf5778e410f598bd2c19b6f0afa83 Author: Stefan Metzmacher me...@samba.org Date: Tue Sep 21 05:41:37 2010 +0200 pidl:NDR/Parser: fix range() for arrays metze (cherry picked from commit bea4948acb4bbee2fbf886adeb53edbc84de96da) commit 6c417bf472b8069f2b9cdf639dc8baeb246b13e2 Author: Karolin Seeger ksee...@samba.org Date: Sat Apr 7 15:57:14 2012 +0200 WHATSNEW: Prepare release notes for 3.5.14. Karolin --- Summary of changes: WHATSNEW.txt | 15 +- librpc/gen_ndr/ndr_dcerpc.c | 42 +- librpc/gen_ndr/ndr_dfs.c | 840 +++ librpc/gen_ndr/ndr_drsblobs.c| 160 ++- librpc/gen_ndr/ndr_drsuapi.c | 1031 +- librpc/gen_ndr/ndr_dssetup.c | 36 +- librpc/gen_ndr/ndr_echo.c| 54 +- librpc/gen_ndr/ndr_epmapper.c| 54 +- librpc/gen_ndr/ndr_eventlog.c| 79 +- librpc/gen_ndr/ndr_krb5pac.c | 22 +- librpc/gen_ndr/ndr_lsa.c | 276 +++-- librpc/gen_ndr/ndr_misc.c|8 +- librpc/gen_ndr/ndr_named_pipe_auth.c | 122 ++- librpc/gen_ndr/ndr_nbt.c | 78 +- librpc/gen_ndr/ndr_netlogon.c| 1789 +++ librpc/gen_ndr/ndr_ntlmssp.c | 60 +- librpc/gen_ndr/ndr_ntsvcs.c | 112 +- librpc/gen_ndr/ndr_samr.c| 182 ++- librpc/gen_ndr/ndr_schannel.c| 52 +-
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 1cc0306 WHATSNEW: Start release notes for Samba 3.5.15. via f6f954a VERSION: Bump version up to 3.5.15. from 566295f rerun 'make samba3-idl' http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 1cc0306c14624784a4efb3d224415279b0e49d3e Author: Karolin Seeger ksee...@samba.org Date: Tue Apr 10 20:26:01 2012 +0200 WHATSNEW: Start release notes for Samba 3.5.15. Karolin commit f6f954a821ff57b186895b057b3def9aa40c6e39 Author: Karolin Seeger ksee...@samba.org Date: Tue Apr 10 20:24:15 2012 +0200 VERSION: Bump version up to 3.5.15. Karolin --- Summary of changes: WHATSNEW.txt| 46 -- source3/VERSION |2 +- 2 files changed, 45 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 6d5326d..712748f 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,46 @@ == + Release Notes for Samba 3.5.15 + , 2012 + == + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.15 include: + +o + +Changes since 3.5.14: +- + + +o Stefan Metzmacher me...@samba.org + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + == Release Notes for Samba 3.5.14 April 10, 2012 == @@ -42,8 +84,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + == Release Notes for Samba 3.5.13 diff --git a/source3/VERSION b/source3/VERSION index d6e661b..9fcfd85 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=14 +SAMBA_VERSION_RELEASE=15 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 8f46865 WHATSNEW: Start release notes for 3.5.14. via 1359c0d VERSION: Bump version up to 3.5.14. from e2250ba WHATSNEW: Update 3.5.13 release notes. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 8f468654753c7d99bbb14132eb619285fa99e7fc Author: Karolin Seeger ksee...@samba.org Date: Tue Mar 20 21:27:17 2012 +0100 WHATSNEW: Start release notes for 3.5.14. Karolin (cherry picked from commit 4898de8a5e2f715c4672c75fa44408e756724627) commit 1359c0df1923200e21a861621cc7b422432fc7c0 Author: Karolin Seeger ksee...@samba.org Date: Tue Mar 20 21:24:51 2012 +0100 VERSION: Bump version up to 3.5.14. Karolin (cherry picked from commit 33d332960fa266a08ff0ee72945101051fa4d71e) --- Summary of changes: WHATSNEW.txt| 48 +--- source3/VERSION |2 +- 2 files changed, 46 insertions(+), 4 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index d90d69c..391af0b 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,46 @@ == + Release Notes for Samba 3.5.14 + , 2012 + == + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.14 include: + +o + +Changes since 3.5.13: +- + + +o Jeremy Allison j...@samba.org + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + == Release Notes for Samba 3.5.13 March 12, 2012 == @@ -69,7 +111,7 @@ o Volker Lendecke v...@samba.org causing uninitialized memory read. -o Stefan Metzmacher me...@samba.org +o Stefan Metzmacher me...@samba.org * BUG 5326: Fix cli_write_and_x() against OS/2 print shares. * BUG 8562: Fix double free error (talloc). * BUG 8593: Fix a crash bug in cldap_socket_recv_dgram(). @@ -121,8 +163,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + == Release Notes for Samba 3.5.12 diff --git a/source3/VERSION b/source3/VERSION index c2e6e94..d6e661b 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=13 +SAMBA_VERSION_RELEASE=14 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via e2250ba WHATSNEW: Update 3.5.13 release notes. via 5a20ab5 WHATSNEW: Start to add changes since 3.5.12. via e3051e7 s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path via ca113c3 s3-winbindd: set the can_do_validation6 also for trusted domain via fc1fae9 s3:loadparm: fix the reload of the configuration: also reload activated registry shares via b77d5dc s3:loadparm: add reload_registry_shares() - reload only those shares already loaded (cherry picked from commit ec113a58a4dc4e4f3ea03f7818eb312325f69482) (cherry picked from commit bc5a7f23e1e909a2196a1038da20c3391c922614) via 713e927 s3:client: ignore SMBecho errors (the server may not support it) (bug #8139) Signed-off-by: Jeremy Allison j...@samba.org (cherry picked from commit bb28a9387d3c76f6f8c7f79ec61d37a499d6c8f6) (cherry picked from commit 461adc665aaadc730d7705b3785d45f787f98425) via 366c9a7 s3-libsmb Do not limit read replies to NBT packet sizes via 8a5975a Fix bug 8636 - When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field. (cherry picked from commit f0c4e96cb4419015a9082e05ffc65bb370aede48) via 1d7ebc6 Second part of fix for bug #8673 - NT ACL issue. via 6c0b221 First part of fix for bug #8673 - NT ACL issue. via 6c15644 Third part of fix for bug #8663 - deleting a symlink fails if the symlink target is outside of the share. via 7b61a2d Second part of fix for bug #8663 - deleting a symlink fails if the symlink target is outside of the share. via f0f9d4b First part of fix for bug #8663 - deleting a symlink fails if the symlink target is outside of the share. via 4d3c098 Fix bug #8664 - Renaming a symlink fails if the symlink target is outside of the share. (cherry picked from commit 33fd99946178e3c2649b289580b1ae1285c46d23) via 3fca061 s3-libads: fix malloc/talloc mismatch in ads_keytab_verify_ticket(). via 7f055e5 libcli/cldap: fix a crash bug in cldap_socket_recv_dgram() (bug #8593) via 0f6999f s3:lib/ctdbd_conn: try ctdbd_init_connection() as root (bug #8684) via 0c6c5a4 Fix bug #8686 - Packet validation checks can be done before length validation causing uninitialized memory read. (cherry picked from commit 24ac26ddfd9ee8841d1984e710a4dfe535b9abcf) (cherry picked from commit 93c76f96b82ec27be97c390cd1ef5d965766e273) via 2376414 Fix bug #8687 - net memberships usage info is wrong via 01e994a s3-libsmb: Don't duplicate kerberos service tickets. via 1e4d95e Final part of fix for bug #8679 - recvfile code path using splice() on Linux leaves data in the pipe on short write. via b523851 Third part of fix for bug #8679 - recvfile code path using splice() on Linux leaves data in the pipe on short write. via 87dd891 Second part of fix for bug #8679 - recvfile code path using splice() on Linux leaves data in the pipe on short write. via 7413c4b Fix bug #8679 - recvfile code path using splice() on Linux leaves data in the pipe on short write via 2d173f3 s3-cli: fix bug 563, 8GB tar on BE machines via f13f4d1 s3-winbind: Move finding the domain to it's own function. via b6931cd s3-winbind: Fix segfault if we can't map the last user. via 24bf25c Fix bug #8644 - vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL. via 53c3f46 s3-winbind: Add an update function for winbind cache. via d5753e2 Fix bug #8521 - winbindd cache timeout expiry test was reversed via b865a51 s3:winbind add timeouts to winbind cache via 4509eed s3/doc: document the ignore system acls option of vfs_acl_xattr and vfs_acl_tdb via 365d8b2 manpage: add more undocumented options to mount.cifs manpage via 80c64ea docs: Add missing prefixpath options for mount.cifs. via fc036bf s3: Attempt to fix the vfs_commit module via d300b44 Fix bug 8631 - POSIX ACE x permission becomes rx following mapping to and from a DACL Reported by David Disseldorp. Fix based on a patch by David. via c24646f Improve configure.in so it can be used outside the Samba source tree. via 906d384 s3-winbind: Don't fail on users without a uid. via 048ad02 s3/packaging: Fix rpm build issues on RHEL4. via 7e5acdc0 s3/packaging: Fix rpm build issues on RHEL. via 605d202 s3:libsmb: consistently use state-size in cli_write_andx_create() (bug #5326) via 53ff088 s3:libsmb: fix cli_write_and_x() against OS/2 print shares (bug #5326) via c40c0d1 Fix bug #8561 - Password change settings not fully observed. (cherry picked from commit 467a586b3b25f632a5b9ca58abf428a546d97740) via bf430e5 examples: Fix perl path.
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 6b26bd0 WHATSNEW: Start release notes for 3.5.13. via 373b769 VERSION: Bump version up to 3.5.13. from 8a9c863 WHATSNEW: Update changes since 3.5.11. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 6b26bd0d004f4dece63618143ba20df1f5543185 Author: Karolin Seeger ksee...@samba.org Date: Thu Nov 3 20:40:38 2011 +0100 WHATSNEW: Start release notes for 3.5.13. Karolin (cherry picked from commit 9a92f8400cddac554257127a92030f4b1cbb0cbc) commit 373b769160dee2eef6d01bcf17b34eee48e1ad72 Author: Karolin Seeger ksee...@samba.org Date: Thu Nov 3 20:37:28 2011 +0100 VERSION: Bump version up to 3.5.13. Karolin (cherry picked from commit 7f1badf7bd86593e6ca3490eaf9afd4f790b12cc) --- Summary of changes: WHATSNEW.txt| 45 +++-- source3/VERSION |2 +- 2 files changed, 44 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 4805d17..224f13d 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,45 @@ == + Release Notes for Samba 3.5.13 + , 2011 + == + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.13 include: + +o + +Changes since 3.5.12: + + + + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + == Release Notes for Samba 3.5.12 November 2, 2011 == @@ -93,8 +134,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + == Release Notes for Samba 3.5.11 diff --git a/source3/VERSION b/source3/VERSION index faec6d4..c2e6e94 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=12 +SAMBA_VERSION_RELEASE=13 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 8a9c863 WHATSNEW: Update changes since 3.5.11. via 3ae4f66 Fix bug #8542 - smbclient posix_open command fails to return correct info on open file. (cherry picked from commit d27f5a277ef47c5ff94e402930680b37e8f4d592) (cherry picked from commit a7224ca5e77aa3e7d3a460515b07aa5b6cb099ae) via 8ece6f4 Third part of fix for bug #8541 - readlink() on Linux clients fails if the symlink target is outside of the share. via e095988 Second part of fix for bug #8541 - readlink() on Linux clients fails if the symlink target is outside of the share. via 1041387 Fix bug #8541 - readlink() on Linux clients fails if the symlink target is outside of the share. via df08d03 Use existing ISDOT and ISDOTDOT macros. via 5ba5025 s3-netapi: remove pointless use_memory_krb5_ccache. via 09d2c99 WHATSNEW: Add changes since 3.5.11. via fcc73f8 s3:Makefile: make DSO_EXPORTS_CMD more portable (#8531) via 3a3d354 Add new contributing FAQ announcing acceptance of corporate (C). via 32979e8 s3-docs: Adapt version... via a29d30b s3/doc: add man page for aio_fork vfs module via 1ee3254 Fix bug #8515 - Empty CIFS share can be blocked for other clients by deleting it via empty path (DELETE_PENDING until the last client) via cf083f6 Bug 7551: Return error of cli_push when 'put - /some/file' is used via d5e92b8 Bug 7551: Return error of cli_push when 'put - /some/file' is used. (cherry picked from commit ff5b58d3038bed5a20511bc76405d8ebdae75a87) via a9fc6bd Fix bug #8507 - smbd doesn't correctly honor the force create mode bits from a cifsfs create. via 8ffc3f4 Second part of fix for bug #8443 - Default user entry is set to minimal permissions on incoming ACL change with no user specified. via 9fcee67 First part of fix for bug #8443 - Default user entry is set to minimal permissions on incoming ACL change with no user specified. via 353f107 Part 3 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set (Invalid argument) via 7af614e Part 2 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set (Invalid argument) via 77ecca5 Part 1 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set (Invalid argument) via 29a438c Fix bug #8458 - IE9 on Windows 7 cannot download files to samba 3.5.11 share via 5679f81 Fix bug #8493 - DFS breaks zip file extracting unless follow symlinks = no set via 7cba110 s3-docs: Remove experimental label on VFS ACL modules via d14dc20 Patch for bug #8156 - net ads join fails to use the user's kerberos ticket. via c32c791 Allows changing the maximum number of simultaneous clients in winbindd through an smb.conf option. via 6d85cc6 s3-winbind: Fix bug 7888 -- deal with buggy 3.0 based PDCs. via 8dbbb54 s3-nmbd: fix memleak in create_listen_fdset(). via 8ea73ce libcli/auth: let spnego_write_mech_types() check the asn1_load() return via d01176c Fix bug 8480 - acl_xattr can free an invalid pointer if no blob is loaded. (cherry picked from commit 62b9ad45e27bb6a2af22aa9ee133ed6075abc62b) via 504b817 s3-netapi: allow to use default krb5 credential cache for libnetapi users. via a911587 s3-libnet: allow to use default krb5 ccache in libnet_Join/libnet_Unjoin. via 3ff0dc4 s3: Fix bug 7844: Race in winbind via a1ea933 s3:libsmb: check the wct of the incoming SMBnegprot responses via 3479f1f v3-5-test: Fix getent group if trusted domains are not reachable via b5c3fa1 Fix bug Bug 8422 - Infinite loop in ACL module code. via d43d24d s3-vfs: Fix vfs_chown_fsp. via 1cf18bd s3: Fix bug 8360 via c484e1a s3: Add a fallback for missing openx support in OS/X Lion via 5e876f6 s3: Make map_open_params_to_ntcreate() available in lib/ (cherry picked from commit aa0c6eb76a6e16652a2ef46560eaffb881792cf6) via cefea3b s3: Make is_executable() available in lib/ (cherry picked from commit 612361bdcaf4256eb54913423e127d0628b35356) via f9af343 s3: We only need base_name in map_open_params_to_ntcreate (cherry picked from commit 1fa4b369d2fabbf34cda576d91d8aa9baa4e8b68) via a7cac5f s3/swat: use strlcat instead of strncat to fix build on old Linux distros via f226e03 s3:web/swat: use strtoll() instead of atoi/atol/atoll via a994e19 WHATSNEW: Fix typo. from 3683bdf WHATSNEW: Remove wrong entry. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 8a9c863ba0acb9ece202e68eca269b5f6ad4570e Author: Karolin Seeger ksee...@samba.org Date: Tue Nov 1 19:51:08 2011 +0100 WHATSNEW: Update changes since 3.5.11. Karolin (cherry picked from commit bcf1198b1c03b3f0dd8032df93ff1b30074d37f2)
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 3683bdf WHATSNEW: Remove wrong entry. via 6f2f4c3 WHATSNEW: Start release notes for 3.5.12. via f5b4554 VERSION: Bump version up to 3.5.12. from 439b006 WHATSNEW: Add changes since 3.5.10. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 3683bdfe062468bb201cef4d37e1f18acc886216 Author: Karolin Seeger ksee...@samba.org Date: Thu Aug 4 21:40:47 2011 +0200 WHATSNEW: Remove wrong entry. This one was added by accident, sorry! Karolin (cherry picked from commit f5233d9179d1c8817f2f227f7fc7fad54d78bc73) commit 6f2f4c36284ef61230d491fa627bc4c55478ec4f Author: Karolin Seeger ksee...@samba.org Date: Thu Aug 4 21:38:26 2011 +0200 WHATSNEW: Start release notes for 3.5.12. Karolin (cherry picked from commit b9c7ca1abbbd5017a2b143e2ae91fa82ff598475) commit f5b4554e01c1caed1c3c49da456d710c205d98e3 Author: Karolin Seeger ksee...@samba.org Date: Thu Aug 4 21:35:51 2011 +0200 VERSION: Bump version up to 3.5.12. Karolin (cherry picked from commit be1ba3365ad5369b4a72c4343e9237d7d69b1992) --- Summary of changes: WHATSNEW.txt| 48 source3/VERSION |2 +- 2 files changed, 45 insertions(+), 5 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 36dfb70..367f0a3 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,46 @@ == + Release Notes for Samba 3.5.12 + , 2011 + == + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.12 include: + +o + +Changes since 3.5.11: + + + +o + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + == Release Notes for Samba 3.5.11 August 4, 2011 == @@ -10,7 +52,6 @@ Major enhancements in Samba 3.5.11 include: o Fix access to Samba shares when Windows security patch KB2536276 is installed (bug #7460). -o Fix DoS in Winbind and smbd with many file descriptors open (bug #7949). o Fix Winbind panics if verify_idpool() fails (bug #8253). @@ -45,7 +86,6 @@ o Volker Lendecke v...@samba.org o Stefan Metzmacher me...@samba.org * BUG 7841: Make WINBINDD_LOOKUPRIDS ask the right domain. -* BUG 7949: Fix DoS in Winbind and smbd with many file descriptors open. * BUG 8276: Close all sockets attached to a subnet in close_subnet(). @@ -69,8 +109,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + == Release Notes for Samba 3.5.10 diff --git a/source3/VERSION b/source3/VERSION index 3558afc..faec6d4 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=11 +SAMBA_VERSION_RELEASE=12 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 439b006 WHATSNEW: Add changes since 3.5.10. via b1cbf46 Fix bug 7462 - Non-standard SA_RESETHAND is used in ...lib/tevent/tevent_sig via a918549 s3: Test for __attribute__((destructor)) (cherry picked from commit 36e736871e28665ffcbbc4d0c87e1a2b60fcf0e0) via 7740410 s3:librpc/gen_ndr: regen after wbint.idl changes via 735c596 s3:nmbd_subnetdb: close all sockets attached to a subnet in close_subnet() (bug #8276) via 5d21630 s3:nmbd_packets: make sure create_listen_fdset() returns initialized data (bug #8276) via 74b0fa9 s3:smbldap: make smbldap_connect_system self contained via 900f2dc s3:smbldap: add a destructor to smbldap_state, just in case (cherry picked from commit 6a3869da05b0d0e4d47db2502489de359d5e7e45) via 34fe1d2 s3:smbldap: let smbldap_free_struct do what it claims to (cherry picked from commit df03f6c2c98f65bf9656d27e1cc9dc72cd587e31) via d23006c s3:smbldap: free the idle event scheduled in smbldap_open in smbldap_close (cherry picked from commit 70856a728a0be1c97e9e13382cd2d880450e07c4) via e76eea3 s3:smbldap: use smbldap_state as memory context for idle event via 1560897 s3: explicitly pass domain_sid to wbint_LookupRids() (bug #7841) (cherry picked from commit 1a8155d347e2a8de3432ce0fe99d598c25c2bafb) via f575f3d Fix bug #8254 - acl check permissions = no does not work in all cases via d89e172 s3: increase the log level for missing PIDs on SIGCHLD via 393e6e3 WHATSNEW: Formatting. via 426fd35 s3-WHATSNEW 3.5.9 Add information on kerberos change (cherry picked from commit eb7c10ea16ff7db34d8ab71306c7d5d298df8d40) via 8a98c3f s3: Fix bug 8238 -- KB2536276 prevents access to shares via c3e04c3 docs: fix the missing parameter description section in the smb.conf manpage via fc89d0a libreplace: include sys/file.h only when available via cb731c5 s3-docs Add documentation for 'client use spnego principal' (cherry picked from commit 4829da5bd4989b7e4b7e858af1770f13d9d2e647) from 6ab1dc2 WHATSNEW: Start release notes for 3.5.11. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 439b006e73b330dd84e4b65e25142063a9be25f9 Author: Karolin Seeger ksee...@samba.org Date: Wed Aug 3 20:20:58 2011 +0200 WHATSNEW: Add changes since 3.5.10. Karolin (cherry picked from commit 529bfe1d43fc8f6c7a1ef93d437f40cd89b1ab63) commit b1cbf46f992ab6dc48996cf7e7e7740198d04452 Author: Jeremy Allison j...@samba.org Date: Tue Aug 2 20:49:46 2011 +0200 Fix bug 7462 - Non-standard SA_RESETHAND is used in ...lib/tevent/tevent_sig Make SA_RESETHAND conditional on its existance. Autobuild-User: Jeremy Allison j...@samba.org Autobuild-Date: Mon Aug 1 22:03:45 CEST 2011 on sn-devel-104 (cherry picked from commit 0c67efdd68b9808542c090b9fd9920e4e37d85d0) (cherry picked from commit 490986add9d5e80b24e90dbfe3e3ef23ce5584a0) commit a91854902ed3114f472521d7a5af315ec3397bd5 Author: Volker Lendecke v...@samba.org Date: Mon May 10 11:53:03 2010 +0200 s3: Test for __attribute__((destructor)) (cherry picked from commit 36e736871e28665ffcbbc4d0c87e1a2b60fcf0e0) Fix bug #8322 (HAVE_FUNCTION_ATTRIBUTE_DESTRUCTOR is missing from 3.5.x). (cherry picked from commit c69ab4252d9aea274f44f96b1e3f41ca57185987) commit 774041088d1d26f624430222fa71a412265ee108 Author: Stefan Metzmacher me...@samba.org Date: Mon Jul 4 11:47:24 2011 +0200 s3:librpc/gen_ndr: regen after wbint.idl changes metze Part of a fix for bug #7841 (WINBINDD_LOOKUPRIDS asks the wrong domain). (cherry picked from commit 12a4b5633d5c3488f48f3e7a5084402f6eeeb9c5) commit 735c596320a952631dc1accc8ead0e57dd96060a Author: Stefan Metzmacher me...@samba.org Date: Thu Jun 30 10:09:56 2011 +0200 s3:nmbd_subnetdb: close all sockets attached to a subnet in close_subnet() (bug #8276) metze (cherry picked from commit 75e9f2110876137a57632d223248ac51dbfc4569) (cherry picked from commit 48355dae98885ca0d44dbf4206a0bdf16c64fced) commit 5d216307cab2a4760fb7567ff03c6c09b5fcf231 Author: Stefan Metzmacher me...@samba.org Date: Thu Jun 30 09:56:06 2011 +0200 s3:nmbd_packets: make sure create_listen_fdset() returns initialized data (bug #8276) Fix bug #7949 (DoS in Winbind and smbd with many file descriptors open) (commit feb3fcd0fa4bda0967b881315595d7702f4d1752) changed the bahavior, so that we skipped some sockets. This should work for v3-5-test. metze (cherry picked from commit 9d5738f779b803fb257537d6308a5f34625cb1b0) commit 74b0fa966ef86d17e90fda69a9beed537c1d2807 Author: Gregor Beck gb...@sernet.de Date: Tue Jun 21 08:16:56 2011 +0200 s3:smbldap: make smbldap_connect_system self contained
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 9f73c19 s3-swat: Fix typo. via 0e17d8e s3 swat: Create random nonce in CGI mode via 2279218 s3 swat: Add time component to XSRF token via c287fe3 s3 swat: Add XSRF protection to printer page via 01dec34 s3 swat: Add XSRF protection to password page via ecf5f0e s3 swat: Add XSRF protection to shares page via 9482f46 s3 swat: Add XSRF protection to globals page via 02a58bf s3 swat: Add XSRF protection to wizard page via 19a697f s3 swat: Add XSRF protection to wizard_params page via eae32a3 s3 swat: Add XSRF protection to viewconfig page via 587002c s3 swat: Add XSRF protection to status page via abaccc2 s3 swat: Add support for anti-XSRF token via 988f59f s3 swat: Allow getting the user's HTTP auth password via 4cd5237 s3 swat: Fix possible XSS attack (bug #8289) via 983d930 WHATSNEW: Update release notes. from 4aa69fe WHATSNEW: Start release notes for 3.5.10. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 9f73c1990a19daa899fa5345530a867e69a5be94 Author: Karolin Seeger ksee...@samba.org Date: Sun Jul 24 21:09:38 2011 +0200 s3-swat: Fix typo. Thanks to Simo for reporting! Karolin commit 0e17d8ef7e4004a0d35011c322b93b6da5811951 Author: Kai Blin k...@samba.org Date: Tue Jul 12 08:08:24 2011 +0200 s3 swat: Create random nonce in CGI mode In CGI mode, we don't get access to the user's password, which would reduce the hash used so far to parameters an attacker can easily guess. To work around this, read the nonce from secrets.tdb or generate one if it's not there. Also populate the C_user field so we can use that for token creation. Signed-off-by: Kai Blin k...@samba.org The last 12 patches address bug #8290 (CSRF vulnerability in SWAT). This addresses CVE-2011-2522 (Cross-Site Request Forgery in SWAT). commit 227921871146563c1d57f9a8faa3b8354058740c Author: Kai Blin k...@samba.org Date: Sat Jul 9 09:52:07 2011 +0200 s3 swat: Add time component to XSRF token Signed-off-by: Kai Blin k...@samba.org commit c287fe37acc8d8cd64ffc5227498f5950df64c2b Author: Kai Blin k...@samba.org Date: Fri Jul 8 15:06:13 2011 +0200 s3 swat: Add XSRF protection to printer page Signed-off-by: Kai Blin k...@samba.org commit 01dec3486857243151a63c8f877a4258d5864869 Author: Kai Blin k...@samba.org Date: Fri Jul 8 15:05:38 2011 +0200 s3 swat: Add XSRF protection to password page Signed-off-by: Kai Blin k...@samba.org commit ecf5f0e613ca7f908cc961e406033bcc842b097a Author: Kai Blin k...@samba.org Date: Fri Jul 8 15:04:48 2011 +0200 s3 swat: Add XSRF protection to shares page Signed-off-by: Kai Blin k...@samba.org commit 9482f46dd0e961145345bd2cdbb01fa35ec9f048 Author: Kai Blin k...@samba.org Date: Fri Jul 8 15:04:12 2011 +0200 s3 swat: Add XSRF protection to globals page Signed-off-by: Kai Blin k...@samba.org commit 02a58bf633f7cd0cb04747d09a8b0a720b5b39b5 Author: Kai Blin k...@samba.org Date: Fri Jul 8 15:03:44 2011 +0200 s3 swat: Add XSRF protection to wizard page Signed-off-by: Kai Blin k...@samba.org commit 19a697f189156fed86d9d78e8bb6667e764075af Author: Kai Blin k...@samba.org Date: Fri Jul 8 15:03:15 2011 +0200 s3 swat: Add XSRF protection to wizard_params page Signed-off-by: Kai Blin k...@samba.org commit eae32a3f33c7c555663f917d5fba71033c968511 Author: Kai Blin k...@samba.org Date: Fri Jul 8 15:02:53 2011 +0200 s3 swat: Add XSRF protection to viewconfig page Signed-off-by: Kai Blin k...@samba.org commit 587002c21aa4e944bf6422d77ec3bc6240bf04d5 Author: Kai Blin k...@samba.org Date: Fri Jul 8 12:58:53 2011 +0200 s3 swat: Add XSRF protection to status page Signed-off-by: Kai Blin k...@samba.org commit abaccc2a7b45f9c778c00597b2d927222a118f27 Author: Kai Blin k...@samba.org Date: Fri Jul 8 12:57:43 2011 +0200 s3 swat: Add support for anti-XSRF token Signed-off-by: Kai Blin k...@samba.org commit 988f59f7eb512fbae5a6cab6ed1dbf32a5737fe7 Author: Kai Blin k...@samba.org Date: Fri Jul 8 12:56:21 2011 +0200 s3 swat: Allow getting the user's HTTP auth password Signed-off-by: Kai Blin k...@samba.org commit 4cd5237ed156bb5a288e865b5afc88a966e1f386 Author: Kai Blin k...@samba.org Date: Thu Jul 7 10:03:33 2011 +0200 s3 swat: Fix possible XSS attack (bug #8289) Nobuhiro Tsuji of NTT DATA SECURITY CORPORATION reported a possible XSS attack against SWAT, the Samba Web Administration Tool. The attack uses reflection to insert arbitrary content into the change password page. This patch fixes the reflection issue by not printing user-specified content on the website anymore.
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 6ab1dc2 WHATSNEW: Start release notes for 3.5.11. via b6678d3 VERSION: Bump version up to 3.5.11. from 9f73c19 s3-swat: Fix typo. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 6ab1dc24d77a58d4c37cb816ce04762c1df7521c Author: Karolin Seeger ksee...@samba.org Date: Tue Jul 26 20:39:28 2011 +0200 WHATSNEW: Start release notes for 3.5.11. Karolin commit b6678d3dbcba6a2ee4961d2565477d362035e1b3 Author: Karolin Seeger ksee...@samba.org Date: Tue Jul 26 20:36:37 2011 +0200 VERSION: Bump version up to 3.5.11. Karolin --- Summary of changes: WHATSNEW.txt| 47 +-- source3/VERSION |2 +- 2 files changed, 46 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 2f75a9a..6a5db3b 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,47 @@ == + Release Notes for Samba 3.5.11 + , 2011 + == + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.11 include: + +o + + +Changes since 3.5.10: + + + +o + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + == Release Notes for Samba 3.5.10 July 26, 2011 == @@ -53,8 +96,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + = Release Notes for Samba 3.5.9 diff --git a/source3/VERSION b/source3/VERSION index b6c1cd1..3558afc 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=10 +SAMBA_VERSION_RELEASE=11 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 4aa69fe WHATSNEW: Start release notes for 3.5.10. via 28411d0 VERSION: Bump version up to 3.5.10. from 2fbc538 WHATSNEW: Update changes since 3.5.8. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 4aa69fe76514ddfb26ee22e9744819c3e193aadb Author: Karolin Seeger ksee...@samba.org Date: Tue Jun 14 19:11:21 2011 +0200 WHATSNEW: Start release notes for 3.5.10. Karolin (cherry picked from commit a32956ad21b70d10a5b2a8516e39cbd35aa09045) commit 28411d0eac2f96234420bfca515a175b05e3e979 Author: Karolin Seeger ksee...@samba.org Date: Tue Jun 14 19:08:58 2011 +0200 VERSION: Bump version up to 3.5.10. Karolin (cherry picked from commit 767cf9e13421c00a658dac93ef77353587539344) --- Summary of changes: WHATSNEW.txt| 45 +++-- source3/VERSION |2 +- 2 files changed, 44 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index f9b4a46..7132a02 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,3 +1,44 @@ + == + Release Notes for Samba 3.5.10 + , 2011 + == + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.10 include: + +o + +Changes since 3.5.9: + + +o + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + = Release Notes for Samba 3.5.9 June 14, 2011 @@ -142,8 +183,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + = Release Notes for Samba 3.5.8 diff --git a/source3/VERSION b/source3/VERSION index e79324d..b6c1cd1 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=9 +SAMBA_VERSION_RELEASE=10 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 47e37ad WHATSNEW: Start release notes for 3.5.9. via 8f3b4db VERSION: Bump version number up to 3.5.9. from 0abd2c0 WHATSNEW: Update release notes for 3.5.8. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 47e37adcbf45e4596b7e1d9e3e43bdfb4154f5f9 Author: Karolin Seeger ksee...@samba.org Date: Mon May 30 21:17:19 2011 +0200 WHATSNEW: Start release notes for 3.5.9. Karolin (cherry picked from commit e75afeb933931839b855da7700f5089551ae3551) commit 8f3b4db587f14e4f8e51293290cda0228b3e6d7f Author: Karolin Seeger ksee...@samba.org Date: Mon May 30 21:13:58 2011 +0200 VERSION: Bump version number up to 3.5.9. Karolin (cherry picked from commit 0e2d341c28878fa6c0b369c494f75ddbc8a0a9e5) --- Summary of changes: WHATSNEW.txt| 45 +++-- source3/VERSION |2 +- 2 files changed, 44 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index a629289..a59df9e 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,45 @@ = + Release Notes for Samba 3.5.9 + , 2011 + = + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.9 include: + +o + +Changes since 3.5.8: + + +o + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + = Release Notes for Samba 3.5.8 March 7, 2011 = @@ -138,8 +179,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + = Release Notes for Samba 3.5.7 diff --git a/source3/VERSION b/source3/VERSION index 7cafcc4..e79324d 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=8 +SAMBA_VERSION_RELEASE=9 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 6964fc5 WHATSNEW: Start release notes for 3.5.8. via 1faa7a8 VERSION: Bump version number up to 3.5.8. from ba3837e WHATSNEW: Prepare 3.5.7 release notes. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 6964fc50a01d53dd4ad05895213fbb66f66898f4 Author: Karolin Seeger ksee...@samba.org Date: Mon Feb 28 14:46:28 2011 +0100 WHATSNEW: Start release notes for 3.5.8. Karolin commit 1faa7a838e91d894026e009f463cb9e629a86a60 Author: Karolin Seeger ksee...@samba.org Date: Mon Feb 28 14:44:31 2011 +0100 VERSION: Bump version number up to 3.5.8. Karolin --- Summary of changes: WHATSNEW.txt| 46 -- source3/VERSION |2 +- 2 files changed, 45 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 6d6a61c..70b1c24 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,46 @@ = + Release Notes for Samba 3.5.8 + March 7, 2011 + = + + +This is the latest stable release of Samba 3.5. + + +o + + +Changes since 3.5.7: + + + +o Jeremy Allison j...@samba.org + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + = Release Notes for Samba 3.5.7 February 28, 2011 = @@ -44,8 +86,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + = Release Notes for Samba 3.5.6 diff --git a/source3/VERSION b/source3/VERSION index 7cf6b9b..7cafcc4 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=7 +SAMBA_VERSION_RELEASE=8 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 01a15b1 WHATASNEW: Start 3.5.7 release notes. via c9622dd VERSION: Bump version number up to 3.5.7. via 7d36ff6 WHATSNEW: Update release notes. via 77ca7e2 s3: Stop using the write cache after an oplock break via 7d1db0a Fix bug 7694 - Crash bug with invalid SPNEGO token. via 6348973 WHATSNEW: Update release notes. via b1f6379 Fix bug #7698 - Assert causes smbd to panic on invalid NetBIOS session request. via afc0d4a s3: Fix bug 7470 via 9fe3146 WHATSNEW: Update changes since 3.5.5. via fef3e8b s3: Fix bug 7688, rpcclient command line completion crashing via 5764e04 s3: Remove a global variable in bugfix for bug 7665 (cherry picked from commit cf364274cbae996fbe186b2c2792b212f189e26a) via 72b1f4f s3-libnetapi: Fix Bug #7665, memory leak in netapi connection manager. via 31c319f s3: Fix the charset_pull routine via df774be s3: fix build on platforms without st_blocks and st_blksize stat struct members via 44c7f7d Fix bug #7693 - smbd changing mode of files on rename via 2a284c4 s3:smbd: Align change notify replies on 4-byte boundary via 01ac9d5 libwbclient: Fix a fd-leak at dlclose-time via 48cbe7a s3-spoolss: add and use spoolss_printerinfo2_to_setprinterinfo2(). via f7718e0 s3-rpcclient: fix two more invalid typecasts in spoolss commands. via 6653e9c s3-net: fix a dereferencing type-punned pointer will break strict-aliasing rules warning. via 0212976 s3: Cache results of finding printer names via c72fe31 Fix bug #7651 - mknod and mkfifo fails with No such file or directory via 99cb69f s3-dcerpc: avoid talloc_move on schannel creds in cli_rpc_pipe_open_schannel_with_key(). via 1c1eb9a Final part of fix for bug #7636 - winbind internal error, backtrace. via 3bb92eb s3: fall back to cups-config for underlinked libs via c97aa70 s3: Fix bug 7635 via b8f9c3c Fix bug #7589 - ntlm_auth fails to use cached credentials. via deb10a5 Fix bug 7581 - Users in admin users in smb.conf file are unable to read/write all files when the acl_xattr vfs module is used. via 8f93503 s3-printing: fix BUG 7280 - auto printers not loading with registry config (cherry picked from commit bb92b0e1571e4766ab20bb3eea53f9e7f9567a5f) via 0a66309 Fix bug 7590 - offline login fails because winbind deletes cache on every startup. via 63a8bb8 rerun: make samba3-idl via 7e1964f pidl: Samba3/ClientNDR - Correctly copy arrays, if r.out.size r.in.size. via 514fa59 Fix bug #7617 - smbd coredump due to uninitialized variables in the performance counter code. via aefad86 s3-winbind: Fix Bug #7568: Make sure cm_connect_lsa_tcp does not reset the secure channel. via 0f90a35 s3: Fix bug 7578 via f5dbdef s3-libsmb: Fix bug #7577. via 872c43a s3-libsmb: Fix bug #7583. via b369a7e librpc: split out a separate GUID_from_ndr_blob() function via f72dbd0 s3: Fix bug 7336: Enable idmap_passdb module build as shared (cherry picked from commit 8c0fbc410798512b7a4b7db73bcb24cde6fa7849) (cherry picked from commit b4803af11525823ea508d0ca4e58402d55901194) via 2913db0 s3-printing: Fix Bug #7541, %D in printer admin causing smbd crash. via 41374f1 s3-librpc: Fixed GUID_from_data_blob() with length of 32. from 2ee3b08 VERSION: Bump version number up to 3.5.6. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 01a15b10d185fcb3be6ceaf29fd0b70a5b0c98fd Author: Karolin Seeger ksee...@samba.org Date: Fri Oct 8 14:36:50 2010 +0200 WHATASNEW: Start 3.5.7 release notes. Karolin (cherry picked from commit 34aa6f4b920fee5adf4376d7626efb4782ae039a) commit c9622dd25fea4a5f11b33799d3897af6eff47183 Author: Karolin Seeger ksee...@samba.org Date: Fri Oct 8 14:35:23 2010 +0200 VERSION: Bump version number up to 3.5.7. Karolin (cherry picked from commit 7e0ae1b5538da956d2d301cf0fe01f82f98fe024) commit 7d36ff6e592292d3feaf532a2cbb5480b9faa94c Author: Karolin Seeger ksee...@samba.org Date: Thu Oct 7 18:21:32 2010 +0200 WHATSNEW: Update release notes. Karolin (cherry picked from commit 2c88eee4a311a9d62d121063051c0e3adf145000) commit 77ca7e289e916ed627bb7b343b94a0ee5e078e87 Author: Volker Lendecke v...@samba.org Date: Sat Oct 2 17:07:00 2010 +0200 s3: Stop using the write cache after an oplock break Fix bug #7715 (Setting Samba Write Cache Size Can Cause File Corruption). (cherry picked from commit 9f8292e5f765dff586bfbb261b54da4d4b27a837) commit 7d1db0a35bd8e835147c5dce3bcb0444ccc12dd6 Author: Jeremy Allison j...@samba.org Date: Sun Sep 26 04:59:31 2010 -0700 Fix bug 7694 - Crash bug with invalid SPNEGO token.
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 2ee3b08 VERSION: Bump version number up to 3.5.6. via b82fab5 WHATSNEW: Prepare release notes for Samba 3.5.6. from fbfd370 WHATSNEW: Update release date. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 2ee3b0822a8978725757548aafc7d7d2b7c115a1 Author: Karolin Seeger ksee...@samba.org Date: Sat Sep 25 15:21:17 2010 +0200 VERSION: Bump version number up to 3.5.6. Karolin (cherry picked from commit dcb31fa3e3ebf2d5ca7517dc664ebc94df5d04d1) commit b82fab56639ce26015a9b8803c93b35c9ee676e1 Author: Karolin Seeger ksee...@samba.org Date: Sat Sep 25 15:20:26 2010 +0200 WHATSNEW: Prepare release notes for Samba 3.5.6. Karolin (cherry picked from commit eb895e3b281ca3ece57e7c97f24a73a061daccda) --- Summary of changes: WHATSNEW.txt| 45 +++-- source3/VERSION |2 +- 2 files changed, 44 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 0f52691..4fea69b 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,45 @@ = + Release Notes for Samba 3.5.6 + October 8, 2010 + = + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.6 include: + + +Changes since 3.5.5 +--- + + +o Jeremy Allison j...@samba.org + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + = Release Notes for Samba 3.5.5 September 14, 2010 = @@ -50,8 +91,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + = Release Notes for Samba 3.5.4 diff --git a/source3/VERSION b/source3/VERSION index 795463c..5490542 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=5 +SAMBA_VERSION_RELEASE=6 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated
via fbfd370 WHATSNEW: Update release date.
via 60afcf8 WHATSNEW: Prepare 3.5.5 release notes.
via a34c3e9 Fix bug #7669.
from 160cbf1 WHATSNEW: Start release notes for 3.5.5.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable
- Log -
commit fbfd370cedcc3f29accc6c6999a682ed27e29ce3
Author: Karolin Seeger ksee...@samba.org
Date: Thu Sep 9 16:22:50 2010 +0200
WHATSNEW: Update release date.
Karolin
commit 60afcf886311b96ea4aa532275a57c7388f0c0fd
Author: Karolin Seeger ksee...@samba.org
Date: Thu Sep 9 15:57:36 2010 +0200
WHATSNEW: Prepare 3.5.5 release notes.
Karolin
commit a34c3e999bb1ea61da31c5b3e845b19663039358
Author: Jeremy Allison j...@samba.org
Date: Thu Sep 9 15:54:23 2010 +0200
Fix bug #7669.
Fix bug #7669 (buffer overflow in sid_parse() in Samba3 and dom_sid_parse in
Samba4).
CVE-2010-3069:
===
Description
===
All current released versions of Samba are vulnerable to
a buffer overrun vulnerability. The sid_parse() function
(and related dom_sid_parse() function in the source4 code)
do not correctly check their input lengths when reading a
binary representation of a Windows SID (Security ID). This
allows a malicious client to send a sid that can overflow
the stack variable that is being used to store the SID in the
Samba smbd server.
A connection to a file share is needed to exploit this
vulnerability, either authenticated or unauthenticated
(guest connection).
---
Summary of changes:
WHATSNEW.txt | 23 ++-
libcli/security/dom_sid.c |4
libcli/security/dom_sid.h |4
source3/lib/util_sid.c|3 +++
source3/libads/ldap.c |4 +++-
source3/libsmb/cliquota.c |4 +++-
source3/smbd/nttrans.c| 17 ++---
7 files changed, 49 insertions(+), 10 deletions(-)
Changeset truncated at 500 lines:
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 19f8875..0f52691 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,20 +1,33 @@
=
Release Notes for Samba 3.5.5
- , 2010
+September 14, 2010
=
-This is the latest stable release of Samba 3.5.
+This is a security release in order to address CVE-2010-3069.
-Major enhancements in Samba 3.5.5 include:
- o
+o CVE-2010-3069:
+ All current released versions of Samba are vulnerable to
+ a buffer overrun vulnerability. The sid_parse() function
+ (and related dom_sid_parse() function in the source4 code)
+ do not correctly check their input lengths when reading a
+ binary representation of a Windows SID (Security ID). This
+ allows a malicious client to send a sid that can overflow
+ the stack variable that is being used to store the SID in the
+ Samba smbd server.
Changes since 3.5.4
+
+
+
+o Jeremy Allison j...@samba.org
+* BUG 7669: Fix for CVE-2010-3069.
+o Andrew Bartlett abart...@samba.org
+* BUG 7669: Fix for CVE-2010-3069.
##
diff --git a/libcli/security/dom_sid.c b/libcli/security/dom_sid.c
index 0c88900..350a14f 100644
--- a/libcli/security/dom_sid.c
+++ b/libcli/security/dom_sid.c
@@ -117,6 +117,10 @@ bool dom_sid_parse(const char *sidstr, struct dom_sid *ret)
if (sidstr[i] == '-') num_sub_auths++;
}
+ if (num_sub_auths MAXSUBAUTHS) {
+ return false;
+ }
+
ret-sid_rev_num = rev;
ret-id_auth[0] = 0;
ret-id_auth[1] = 0;
diff --git a/libcli/security/dom_sid.h b/libcli/security/dom_sid.h
index e892535..748e009 100644
--- a/libcli/security/dom_sid.h
+++ b/libcli/security/dom_sid.h
@@ -40,5 +40,9 @@ bool dom_sid_in_domain(const struct dom_sid *domain_sid,
const struct dom_sid *sid);
char *dom_sid_string(TALLOC_CTX *mem_ctx, const struct dom_sid *sid);
+#ifndef MAXSUBAUTHS
+#define MAXSUBAUTHS 15 /* max sub authorities in a SID */
+#endif
+
#endif /*_DOM_SID_H_*/
diff --git a/source3/lib/util_sid.c b/source3/lib/util_sid.c
index 639269c..bea04d8 100644
--- a/source3/lib/util_sid.c
+++ b/source3/lib/util_sid.c
@@ -408,6 +408,9 @@ bool sid_parse(const char *inbuf, size_t len, DOM_SID *sid)
sid-sid_rev_num = CVAL(inbuf, 0);
sid-num_auths = CVAL(inbuf, 1);
+ if (sid-num_auths MAXSUBAUTHS) {
+ return false;
+ }
memcpy(sid-id_auth, inbuf+2, 6);
if (len 8 + sid-num_auths*4)
return False;
diff --git a/source3/libads/ldap.c
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 160cbf1... WHATSNEW: Start release notes for 3.5.5. via 71301df... VERSION: Bump version number up to 3.5.5. from fb5b75d... s3-docs: Add missing whitespace. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 160cbf1d242617409977e87d12f4871625052d4d Author: Karolin Seeger ksee...@samba.org Date: Thu Jun 24 08:15:24 2010 +0200 WHATSNEW: Start release notes for 3.5.5. Karolin (cherry picked from commit 28f6e4144b092bd21f49ca989d36df19ce002231) commit 71301dff2e75033e849f95feb647365c4b9efd7a Author: Karolin Seeger ksee...@samba.org Date: Thu Jun 24 08:13:33 2010 +0200 VERSION: Bump version number up to 3.5.5. Karolin (cherry picked from commit 6e2b68fef3e0851e1564921d1c4285c8d4a9b550) --- Summary of changes: WHATSNEW.txt| 46 -- source3/VERSION |2 +- 2 files changed, 45 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 1be1572..19f8875 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,46 @@ = + Release Notes for Samba 3.5.5 + , 2010 + = + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.5 include: + + o + + +Changes since 3.5.4 +--- + + + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + = Release Notes for Samba 3.5.4 June 23, 2010 = @@ -88,8 +130,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + = Release Notes for Samba 3.5.3 diff --git a/source3/VERSION b/source3/VERSION index 8eb0d1f..795463c 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=4 +SAMBA_VERSION_RELEASE=5 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated
via fb5b75d... s3-docs: Add missing whitespace.
via 41a38ac... WHATSNEW: Update changes since 3.5.3.
via 8b5c251... s3-docs: Fix some of ntlm_auth ntlm-server-1 protocol
documentation.
via fbbefbc... s3:configure: use cc for linking on IRIX and fix shlib
usage
via 0d9db4b... s3:vfs_scannedonly: fix a build issue on IRIX and HP-UX
via 5e6dbbb... check if LD_AS_NEEDED breaks linking with libreadline
fixes #7209
via 864a2bd... s3-auth: in make_user_info_for_reply_enc make sure to
check length and data pointer of nt and lm hash.
via 4ee20c7... s3-spoolss: fix some crash bugs and missing error codes
in AddDriver paths.
via 4d0c756... s3:Makefile: fix a typo in flag variable name
via 4ab4485... s3:build: remove CFLAGS from Solaris LDSHFLAGS, SHLD has
them already
via 3a08fd1... s3: final test for working shlib support requires
PICFLAG (cherry picked from commit 85cbb1a6b371e2282f0115e87e803c6fdc03c07c)
via a3c43c9... s3: use autoconf macro to get some debug output in
config.log (cherry picked from commit 87a0f216eb6929e48b1c3c234426d29fdab38dc8)
via 657a7da... s3: fix check for pie compiler flags
via fa0617b... s3: add m4 macro to check if stderr is empty or not
(cherry picked from commit 6f2bf6cf9d2b5ed3ca2992e26f442035764e0762)
via e35985f... s3:configure: add Werror_FLAGS for IBM's xlc (cherry
picked from commit 8c4cdf30ae254b4c5ff9eff221529abc98855857)
via 1016be1... s3:Makefile: add missing linker flags for smbfilter
via e9cda33... s3:Makefile: position independency is also needed for
shared libs (cherry picked from commit 6a9aa4c2b3bebe06de97524a5c5ca577aaa3d14c)
via e7310c5... s3:build: don't use pieflags twice - ldflags already
have them (cherry picked from commit 60ad93f074d83a65df080b85e43ea61722340a1c)
via 4797134... s3:configure: turn error warnings into errors
via bf543a1... s3: fix calculation of st_blocks in streams_xattr
via 3e2a38d... s3: Fix EnumDomainAliases when no aliases are in LDAP
via 097ccfa... s3:pdb_ldap: fix bug 7507 - init_sam_from_ldap stores
group in sid2uid cache (cherry picked from commit
ba809ecb8ab217e4376bf75d2300e146b62b88eb) (cherry picked from commit
cc740fb5eb56a0875703753d4a116d2fe33ec186)
via 0d41e47... s3: Fix bug 7253
via ddb2cef... s3-netdomjoin-gui: Fix Bug #7500. Fix 'not a string
literal' warning in netdomjoin-gui.
via 3a63572... s3: Allow previous password to be stored and use it to
check tickets
via c31ac2e... s3-samr: Fix crash bug in _samr_QueryUserInfo{2} level
18.
via 920e575... s3-selftest: enable RPC-WINREG against s3.
via ecd91e5... s3-winreg_nt: Fixed QueryValue with data=NULL to get the
length. (cherry picked from commit 4567bf9df53e62c0f30279235d56d13cb38de190)
(cherry picked from commit b541fb1500aad87aee46ef48036f3b4a05b119cd)
via 7ca739f... s3-winreg: change notify call has no meaning when called
remotely.
via 19c4053... s3-winreg: make QueryValue pass RPC-WINREG test again.
via fc48f6e... Fix bug #7448 - smbd crash when sambaLMPassword and
sambaNTPassword entries missing from ldap.
via c7f814f... s3-selftest: deal with changed samba3 test names.
via 5f7fa42... Fix what looks like a cut-and-paste error in our
read_negTokenInit() function.
via a160aed... Fix bug #7410 - samba sends raw inode number as
uniqueid with unix extensions.
via 7bc852f... s3: Fix a typo found by ITPFS oota t-o...@dh.jp.nec.com
via 7cb2740... Fix bug #7188 - Logic error in check of total_data for
call_trans2mkdir()
via be88d6e... s3-kerberos: temporary fix for ipv6 in print_kdc_line().
via ad44d0c... s3-kerberos: pass down kdc_name to
create_local_private_krb5_conf_for_domain().
via c654bc0... s3-winbind: make the getpeername() checks in
cm_prepare_connection IPv6 aware.
via ad8e0a9... s3-spoolss: Added EN ISO 216, A0 and A1 to builtin forms.
from 82ef3f0... WHATSNEW: Prepare Samba 3.5.4 release notes.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable
- Log -
commit fb5b75d26b882c48ac073b6425dfce15873c243e
Author: Karolin Seeger ksee...@samba.org
Date: Mon Jun 21 10:30:25 2010 +0200
s3-docs: Add missing whitespace.
Karolin
(cherry picked from commit 2352538362977e456e8d05783f2732ff650cea41)
(cherry picked from commit 9d9a9a0f79ad6fa894f72a4678f59fb40c9fce94)
commit 41a38acddf2cd6fa8e1437ca05e4df0a27f646ae
Author: Karolin Seeger ksee...@samba.org
Date: Fri Jun 18 13:59:30 2010 +0200
WHATSNEW: Update changes since 3.5.3.
Karolin
(cherry picked from commit 656160ef0643aeba28c7db499ddb1e840c78e4bb)
commit 8b5c25177a7c496bee3e12b23880c2088b21d83d
Author: Günther Deschner
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 82ef3f0... WHATSNEW: Prepare Samba 3.5.4 release notes. via 47aaf1a... VERSION: Bump version number up to 3.5.4. from 4ae81a9... WHATSNEW: Add major enhancements in 3.5.3. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 82ef3f09788f488612a7005b5895100c58b93419 Author: Karolin Seeger ksee...@samba.org Date: Wed May 19 11:52:06 2010 +0200 WHATSNEW: Prepare Samba 3.5.4 release notes. Karolin (cherry picked from commit 61aacde86c09d6757165d4f8bf737ee1626e4631) commit 47aaf1a9afc7768e9842b4a074c0567608afac91 Author: Karolin Seeger ksee...@samba.org Date: Wed May 19 11:49:08 2010 +0200 VERSION: Bump version number up to 3.5.4. Karolin (cherry picked from commit b75441b74920724a359d635d0393841db8535c95) --- Summary of changes: WHATSNEW.txt| 45 +++-- source3/VERSION |2 +- 2 files changed, 44 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index caec0a0..f8fcea6 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,45 @@ = + Release Notes for Samba 3.5.4 + , 2010 + = + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.4 include: + + o + +Changes since 3.5.3 +--- + + + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + = Release Notes for Samba 3.5.3 May 19, 2010 = @@ -90,8 +131,8 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- + = Release Notes for Samba 3.5.2 diff --git a/source3/VERSION b/source3/VERSION index 4c95fd3..8eb0d1f 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=3 +SAMBA_VERSION_RELEASE=4 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 4ae81a9... WHATSNEW: Add major enhancements in 3.5.3. via b0ed654... WHATSNEW: Update changes since 3.5.2. via 8bbeccb... mount.cifs: check for NULL addr pointer before handling scopeid via 5de0ffa... s3-docs: Unify capitalization. via c7b8f3e... s3-docs: Add documentation of the net g_lock subcommand. via feae5d0... s3-docs: Move -D option to the right paragraph in man winbindd. via a8871c6... work around AIX6.1 name space pollution rename mod_name to module_name via 75c12a4... lib/replace: make sure IPV6_V6ONLY is available for IPv6 support via 1f0f830... lib/replace: add replacement for IPV6_V6ONLY on linux systems with broken headers via fa773cd... tsocket_bsd: Always use a real length for the sa_socklen, and keep it around via 82ee4a2... tsocket: only copy the specific part of sockaddr* via 18717ca... tsocket: allow AF_UNIX sockaddrs smaller than sizeof(sockaddr_un) via 2975e65... s3:configure: use correct SONAMEFLAG on Solaris depending on which linker is being used (cherry picked from commit 358a3855c20153d7fe742ca2e6b9bd8a9c92e525) via 03f4400... s3:configure: not simply check for ld but for the linker used by $CC via b2fe935... s3-net: Fix Bug #7417. 'net rpc user password' can set the wrong password. via a9c442e... s3-spoolss: Fix _spoolss_EnumPrinters servername handling. via 1eb5581... s3-spoolss: in spoolss_EnumPrinters r-in.server is a *unique* pointer! via 6b5ab87... Fix bug #7263 - Unable to print using Samba 3.5.1 and cups-1.1.23-40.46 on SLES10. via 23a8770... s3-rpcclient: Fix Bug #7277. rpcclient was sending invalid data, causing cupsaddsmb to fail. via 753be37... tsocket: Improve the tsocket_address_bsd_sockaddr documentation. via 535b96d... Spelling fixes for tsocket API documentation. via c5f192e... tsocket: Fix the description of tstream_writev_queue_send/recv (cherry picked from commit 88099bcc93fabebe3d4548f8a5aa26b585886a1c) via 309fcce... tsocket: Fix description for tstream_readv_pdu_queue_send/recv (cherry picked from commit 9184f524f0e5fe828b723200182969e0e3e8685d) via ec5d9fa... tsocket: Added complete doxygen documentation. via 2ca53f0... tsocket: Added doxygen config file. via 7f40864... s3: Fix bug 7398 -- rename problems with full_audit (cherry picked from commit a9be37010b465346d5008edc5f8311180ff9e4f4) via 66d9db0... s3/packaging: make rpm build work by overriding strict linker flags (cherry picked from commit 8f74d38c3a4a853f608fed0bed1b55915d01555a) (cherry picked from commit 1c39ce13c551b0fb5ca1569d7be82a34284f7f06) via 8e9e6ed... s3: Fix a winbind crash when scanning trusts via f3868de... Fix bug #7384 - dptr_Close has a bitmap leak. via aa14278... s3-net_conf: Display an error on net conf import failures. via 6c52bb5... s3 torture: Prevent smbcli segfault when running smbtorture3 against an smbd with security=share via 758730f... s3-docs: Improve winbind nss info section in man smb.conf. via e245f46... Fix bug #7288 - SMB job IDs in CUPS job names wrong. via e0fccc3... s3-libsmbclient: Fix incomplete description of function return values in libsmbclient.h. via 4d9210e... libwbclient: Re-Fix a bug that was fixed with e5741e27c4c via c6c4606... s3:winbindd: make smbcontrol winbindd validate-cache reliable again via c0ba225... s3:winbindd: remove unused variables via 853e2a8... s3:winbindd: fix problems with SIGCHLD handling (bug #7317) via 2862e0e... s3-docs: Fix typo in man idmap_ad. via 1915731... s3:lib/time: remove TIME_T_MIN/MAX defines via c107d64... lib/util: move TIME_T_MIN/MAX defines into header file (cherry picked from commit 571ee54b791b93ad46e09ed563ef4a5582dcf0c8) (cherry picked from commit 42d89dbd9407fcdef989387208dd8cae8472a6e8) via ba710ca... Fix bug #7339 - MSDFS is non-functional in 3.5.x from 4edb5b0... WHATSNEW: Start release notes for Samba 3.5.3. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 4ae81a924339aa4fb743b163b3edb4ec8f8c5485 Author: Karolin Seeger ksee...@samba.org Date: Mon May 17 13:49:42 2010 +0200 WHATSNEW: Add major enhancements in 3.5.3. Karolin (cherry picked from commit 813cfd7cb1f069ea622724e01d4b75b18bfcf482) commit b0ed6540463582ac458e0c56c8a377d72142a48c Author: Karolin Seeger ksee...@samba.org Date: Mon May 17 10:21:08 2010 +0200 WHATSNEW: Update changes since 3.5.2. Karolin (cherry picked from commit ffd5a0f90fd43d1e3a995e60acade1a07d8ef1c8) commit 8bbeccb9c35661c5a4d219398889b9f66aed7de7 Author: Jeff Layton jlay...@redhat.com Date: Wed May 12 07:05:10 2010 -0400
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 4edb5b0... WHATSNEW: Start release notes for Samba 3.5.3. via d5ee522... VERSION: Raise version number up to 3.5.3. from a5e9217... WHATSNEW: Update changes since 3.5.1. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 4edb5b0bf0158dbe16cf426729e8cd1ed23d205d Author: Karolin Seeger ksee...@samba.org Date: Wed Apr 7 10:41:07 2010 +0200 WHATSNEW: Start release notes for Samba 3.5.3. Karolin (cherry picked from commit 827084bc317c76335f76d76970a51e67222b1fc9) commit d5ee52280a103cfcc0a95ce011d48d278f718a00 Author: Karolin Seeger ksee...@samba.org Date: Wed Apr 7 10:39:08 2010 +0200 VERSION: Raise version number up to 3.5.3. Karolin (cherry picked from commit 21c25005c79fa957ac95514373c7aa8828f3fee1) --- Summary of changes: WHATSNEW.txt| 45 ++--- source3/VERSION |2 +- 2 files changed, 43 insertions(+), 4 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index e3726f2..8d79905 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,45 @@ = + Release Notes for Samba 3.5.3 + May 19, 2010 + = + + +This is the latest stable release of Samba 3.5. + +Major enhancements in Samba 3.5.3 include: + + o + + +Changes since 3.5.2 +--- + + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + = Release Notes for Samba 3.5.2 April 7, 2010 = @@ -126,9 +167,7 @@ database (https://bugzilla.samba.org/). == The Samba Team == - -Release notes for older releases follow: - +-- = Release Notes for Samba 3.5.1 diff --git a/source3/VERSION b/source3/VERSION index 425a2c2..4c95fd3 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=2 +SAMBA_VERSION_RELEASE=3 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 647836f... WHATSNEW: Start release notes for Samba 3.5.2. via 638ac5b... VERSION: Raise version number up to 3.5.2. from 1c9494c... Revert Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to respond to a read or write. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 647836f0bd691aa3ac4e9bd33d06e6e20cc06863 Author: Karolin Seeger ksee...@samba.org Date: Tue Mar 9 10:36:06 2010 +0100 WHATSNEW: Start release notes for Samba 3.5.2. Karolin (cherry picked from commit afd8272605854f2686f2b66541f2158afe2137d4) commit 638ac5b8536cec0113a17f42441840edacaa05da Author: Karolin Seeger ksee...@samba.org Date: Tue Mar 9 10:33:30 2010 +0100 VERSION: Raise version number up to 3.5.2. Karolin (cherry picked from commit 6889e16974301ef36c0a9c6e57b2bcbd984b0d5f) --- Summary of changes: WHATSNEW.txt| 45 +++-- source3/VERSION |2 +- 2 files changed, 44 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 12c12d5..6602941 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,46 @@ = + Release Notes for Samba 3.5.2 + , 2010 + = + + +This is the third stable release of Samba 3.5. + +Major enhancements in Samba 3.5.2 include: + +o + +Changes since 3.5.1 +--- + + +o + + +## +Reporting bugs Development Discussion +### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 3.5 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +== + + +Release notes for older releases follow: + + + = Release Notes for Samba 3.5.1 March 8, 2010 = @@ -45,8 +87,7 @@ database (https://bugzilla.samba.org/). == -Release notes for older releases follow: - +-- = diff --git a/source3/VERSION b/source3/VERSION index 35c8256..425a2c2 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=5 -SAMBA_VERSION_RELEASE=1 +SAMBA_VERSION_RELEASE=2 # Bug fix releases use a letter for the patch revision # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated
via 1c9494c... Revert Fix bug #7067 - Linux asynchronous IO (aio) can
cause smbd to fail to respond to a read or write.
via cd499ea... WHATSNEW: Prepare release notes for Samba 3.5.1.
via ab98964... VERSION: Raise version number up to 3.5.1.
from d82b72a... WHATSNEW: Update changes since 3.5.0rc3.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable
- Log -
commit 1c9494c76cc9686c61e0966f38528d3318f3176f
Author: Karolin Seeger ksee...@samba.org
Date: Mon Mar 8 20:34:39 2010 +0100
Revert Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail
to respond to a read or write.
This reverts commit a6ae7a552f851a31262377cc0e062e40ac20.
This fixes bug #7222 (All users have full rigths on all shares)
(CVE-2010-0728).
commit cd499eaf0418fa0a3034c5ba4709278a302ea980
Author: Karolin Seeger ksee...@samba.org
Date: Mon Mar 8 20:32:49 2010 +0100
WHATSNEW: Prepare release notes for Samba 3.5.1.
Karolin
commit ab98964115b56306b82f38aa2f65757dc2917ffe
Author: Karolin Seeger ksee...@samba.org
Date: Mon Mar 1 15:03:03 2010 +0100
VERSION: Raise version number up to 3.5.1.
Karolin
(cherry picked from commit 0410c8bca22c61318bf71c845fca523614bef73a)
---
Summary of changes:
WHATSNEW.txt | 52 ++-
source3/VERSION |2 +-
source3/include/smb.h |3 +-
source3/lib/system.c | 65 +++--
source3/smbd/server.c |8 --
5 files changed, 57 insertions(+), 73 deletions(-)
Changeset truncated at 500 lines:
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index caad89d..12c12d5 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,4 +1,55 @@
=
+ Release Notes for Samba 3.5.1
+ March 8, 2010
+ =
+
+
+This is a security release in order to address CVE-2010-0728.
+
+
+o CVE-2010-0728:
+ In Samba releases 3.5.0, 3.4.6 and 3.3.11, new code
+ was added to fix a problem with Linux asynchronous IO handling.
+ This code introduced a bad security flaw on Linux platforms if the
+ binaries were built on Linux platforms with libcap support.
+ The flaw caused all smbd processes to inherit CAP_DAC_OVERRIDE
+ capabilities, allowing all file system access to be allowed
+ even when permissions should have denied access.
+
+
+Changes since 3.5.0
+---
+
+
+o Jeremy Allison j...@samba.org
+* BUG 7222: Fix for CVE-2010-0728.
+
+
+##
+Reporting bugs Development Discussion
+###
+
+Please discuss this release on the samba-technical mailing list or by
+joining the #samba-technical IRC channel on irc.freenode.net.
+
+If you do report problems then please try to send high quality
+feedback. If you don't provide vital information to help us track down
+the problem then you will probably be ignored. All bug reports should
+be filed under the Samba 3.5 product in the project's Bugzilla
+database (https://bugzilla.samba.org/).
+
+
+==
+== Our Code, Our Bugs, Our Responsibility.
+== The Samba Team
+==
+
+
+Release notes for older releases follow:
+
+
+
+ =
Release Notes for Samba 3.5.0
March 1, 2010
===
@@ -479,4 +530,3 @@ database (https://bugzilla.samba.org/).
== Our Code, Our Bugs, Our Responsibility.
== The Samba Team
==
-
diff --git a/source3/VERSION b/source3/VERSION
index 13358fe..35c8256 100644
--- a/source3/VERSION
+++ b/source3/VERSION
@@ -25,7 +25,7 @@
SAMBA_VERSION_MAJOR=3
SAMBA_VERSION_MINOR=5
-SAMBA_VERSION_RELEASE=0
+SAMBA_VERSION_RELEASE=1
# Bug fix releases use a letter for the patch revision #
diff --git a/source3/include/smb.h b/source3/include/smb.h
index 041c96b..bc7a90d 100644
--- a/source3/include/smb.h
+++ b/source3/include/smb.h
@@ -1723,8 +1723,7 @@ minimum length == 24.
enum smbd_capability {
KERNEL_OPLOCK_CAPABILITY,
DMAPI_ACCESS_CAPABILITY,
-LEASE_CAPABILITY,
-KILL_CAPABILITY
+LEASE_CAPABILITY
};
/*
diff --git a/source3/lib/system.c b/source3/lib/system.c
index 9c1da3a..a58d903 100644
--- a/source3/lib/system.c
+++ b/source3/lib/system.c
@@
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via d82b72a... WHATSNEW: Update changes since 3.5.0rc3. via 62bccb6... s3-net: fix net ads dns usage calls. via f678dc0... s3-rpcclient: fix uninitialized variable in wkssvc_enumerateusers. via 6f38dc6... s3: Fix but 7145 -- duplicate sam and unix accounts via 4aa41c7... s3:cli_netlogon: keep the the correct negotiate_flags on the cli-dc structure via ecda733... s3: Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send via 71c4a4f... WHATSNEW: Prepare release notes for Samba 3.5.0. via 0af8d27... VERSION: Raise version number up to 3.5.0. from 69d87ed... WHATSNEW: Update changes since 3.5.0rc2. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit d82b72a5a5d7c1585a39f3a9530ff8861bfda45a Author: Karolin Seeger ksee...@samba.org Date: Mon Mar 1 12:09:45 2010 +0100 WHATSNEW: Update changes since 3.5.0rc3. Karolin (cherry picked from commit 5fcab1948e6e3347cbe91fa2f27e547db499776b) commit 62bccb6f70fb770b7b834769a284aee2c4c097db Author: Günther Deschner g...@samba.org Date: Mon Feb 8 11:53:59 2010 +0100 s3-net: fix net ads dns usage calls. Bjoern, please check. Guenther Fix bug #7181 (buildwarnings in net_ads.c). (cherry picked from commit 7d5575fefe29a00c757dab0013c9d45b84f0be47) commit f678dc0df569f46f9b254d263243d60eaaf93ff3 Author: Günther Deschner g...@samba.org Date: Wed Feb 17 15:15:47 2010 +0100 s3-rpcclient: fix uninitialized variable in wkssvc_enumerateusers. Guenther Fix bug #7182. (cherry picked from commit bb4a76538bfae593c4a997b10bdb1f6c1666701c) commit 6f38dc637faeea64ac6e693cfa649899004f01d8 Author: Volker Lendecke v...@samba.org Date: Sun Feb 28 14:38:14 2010 +0100 s3: Fix but 7145 -- duplicate sam and unix accounts For me this survives the TESTS=posix_s3 POSIX_SUBTESTS=RPC-SAMR-LARGE-DC LOCAL-NSS-WRAPPER make test reproducer. Günther, please check! Volker (cherry picked from commit 0e9882a65e91e4ab55dc103c7f6aec4ccd966db0) (cherry picked from commit fd59fa500a30a69ed09265bc3871fa640e232422) commit 4aa41c7d4a39f33fb4868b27e057d0a169fb97e6 Author: Stefan Metzmacher me...@samba.org Date: Fri Feb 19 23:22:40 2010 +0100 s3:cli_netlogon: keep the the correct negotiate_flags on the cli-dc structure This should fix the rpccli_netlogon_set_trust_password() against DC's without netr_ServerPasswordSet2 support. This fixes bug #7160. metze (cherry picked from commit 1e9df26ef970df41de54142a78606a15374acbac) (cherry picked from commit a3e3355b5ccf74a2ffe5da6cbb2747e74586b1e5) commit ecda733ca608950c8d3c08d1caf82f45de622461 Author: Volker Lendecke v...@samba.org Date: Sun Feb 21 20:39:36 2010 +0100 s3: Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send I hate macros (cherry picked from commit 65914ed8194b141a44516d626e71a1851bccff5f) Fix bug #7166. (cherry picked from commit b7d5b469ef134d60e1f795f66f7e5c3ef23d7971) commit 71c4a4fb1d5fa167416a74ee90a3d4632af63cde Author: Karolin Seeger ksee...@samba.org Date: Mon Feb 22 15:44:34 2010 +0100 WHATSNEW: Prepare release notes for Samba 3.5.0. Karolin (cherry picked from commit 262854d8a2a39df2d151268442772ad92b0ddbcd) commit 0af8d273e413cc6fc5fa47c09702e010536e1acc Author: Karolin Seeger ksee...@samba.org Date: Mon Feb 22 15:40:57 2010 +0100 VERSION: Raise version number up to 3.5.0. Karolin (cherry picked from commit e8979e7edd42ec229cc7d53f636c99a09b97fde4) --- Summary of changes: WHATSNEW.txt | 30 +++--- source3/VERSION |2 +- source3/libsmb/async_smb.c|3 ++- source3/rpc_client/cli_netlogon.c |8 ++-- source3/rpcclient/cmd_wkssvc.c|4 ++-- source3/utils/net_ads.c | 11 --- source3/winbindd/wb_next_grent.c | 11 +++ source3/winbindd/wb_next_pwent.c | 11 +++ 8 files changed, 64 insertions(+), 16 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 1d99e4e..caad89d 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,13 +1,11 @@ + = + Release Notes for Samba 3.5.0 + March 1, 2010 === - Release Notes for Samba 3.5.0rc3 - February 19, 2010 - === -This is the third release candidate of Samba 3.5. This is *not* -intended for production environments and is designed for testing -purposes only. Please report
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated
via 8096297... Fix bug #6557 - Do not work VFS full_audit
via f79c8cf... s3: Fix bug 7139 owner of file not available with
kerberos.
via d4d84f4... WHATSNEW: Update changes.
via 7363b08... cifs.upcall: allocate a talloc context for
smb_krb5_unparse_name
from 01c21d7... s3-docs: Document 'smbclient -C'. (cherry picked from
commit f6c39cec27eea2522c62e6f1ff85efdafde351ac) (cherry picked from commit
f6a7e9eadf85b19ec0ccca513a261bcad0bcf048)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable
- Log -
commit 8096297973d911f9736646a31773e38f79deadae
Author: Jeremy Allison j...@samba.org
Date: Wed Feb 17 10:11:57 2010 -0800
Fix bug #6557 - Do not work VFS full_audit
Re-arrange the operations order so SMB_VFS_CONNECT is done
first as root (to allow modules to correctly initialize themselves).
Reviewed modules to check if they needed CONNECT invoked as
a user (which we previously did) and it turns out any of them
that cared needed root permissions anyway.
Jeremy.
(cherry picked from commit 1d71d4b6b5f5fdf5caf9fed861c2032bb307a32f)
commit f79c8cff1494e9c6b5d02773727e735eed528bfb
Author: Volker Lendecke v...@samba.org
Date: Tue Feb 16 23:29:48 2010 +0100
s3: Fix bug 7139 owner of file not available with kerberos.
To provide the user with the same SID when doing Kerberos logins, attempt
to do
a make_server_info_sam instead of a make_server_info_pw.
(cherry picked from commit 45c634eafa2f398827f16345b56603b969964527)
commit d4d84f47fc26b564bcab00bbe1d2e68004fbade1
Author: Karolin Seeger ksee...@samba.org
Date: Wed Feb 17 14:51:03 2010 +0100
WHATSNEW: Update changes.
Karolin
(cherry picked from commit 3bb72e7f3e6be64011cabfd37866b29ffb0e18a4)
commit 7363b088c5bd41f6d3502c154ab45d87197f6943
Author: Jeff Layton jlay...@redhat.com
Date: Tue Feb 16 09:16:42 2010 -0500
cifs.upcall: allocate a talloc context for smb_krb5_unparse_name
cifs.upcall calls smb_krb5_unparse_name with a NULL talloc context.
Older versions of this function though will conditionally use
SMB_REALLOC instead of TALLOC_REALLOC when a NULL context is passed
in. To make it more consistent, just spawn a talloc context that
we can pass into this function.
Resolves:
https://bugzilla.redhat.com/show_bug.cgi?id=565446
https://bugzilla.samba.org/show_bug.cgi?id=6868
Reported-by: Ludek Finstrle l...@seznam.cz
Signed-off-by: Jeff Layton jlay...@redhat.com
Signed-off-by: Günther Deschner g...@samba.org
(cherry picked from commit a8cc2fa09ed43a167f62711bef363a5ac335dc78)
Fix bug #6868 (make bin/cifs.upcall fails).
(cherry picked from commit 01750852c1e9983b9d59a73d412101b4e0eb81a1)
---
Summary of changes:
WHATSNEW.txt |4
client/cifs.upcall.c |5 -
source3/smbd/service.c | 35 ---
source3/smbd/sesssetup.c | 34 --
4 files changed, 56 insertions(+), 22 deletions(-)
Changeset truncated at 500 lines:
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 4c14ea2..8951071 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -163,6 +163,10 @@ o Björn Jacke b...@sernet.de
* Fix some wrong newlines in de translation strings.
+o Jeff Layton jlay...@redhat.com
+* BUG 6868: Fix crash bug in 'cifs.upcall'.
+
+
o Volker Lendecke v...@samba.org
* BUG 7085: Fix an early release of the global lock that can cause data
corruption in libtdb.
diff --git a/client/cifs.upcall.c b/client/cifs.upcall.c
index bfc70d1..42632a0 100644
--- a/client/cifs.upcall.c
+++ b/client/cifs.upcall.c
@@ -56,6 +56,7 @@ get_tgt_time(const char *ccname) {
krb5_principal principal;
time_t credtime = 0;
char *realm = NULL;
+ TALLOC_CTX *mem_ctx;
if (krb5_init_context(context)) {
syslog(LOG_DEBUG, %s: unable to init krb5 context, __func__);
@@ -87,9 +88,10 @@ get_tgt_time(const char *ccname) {
goto err_ccstart;
}
+ mem_ctx = talloc_init(cifs.upcall);
while (!credtime !krb5_cc_next_cred(context, ccache, cur, creds)) {
char *name;
- if (smb_krb5_unparse_name(NULL, context, creds.server, name)) {
+ if (smb_krb5_unparse_name(mem_ctx, context, creds.server,
name)) {
syslog(LOG_DEBUG, %s: unable to unparse name,
__func__);
goto err_endseq;
}
@@ -102,6 +104,7 @@ get_tgt_time(const char *ccname) {
TALLOC_FREE(name);
}
err_endseq:
+ TALLOC_FREE(mem_ctx);
krb5_cc_end_seq_get(context, ccache, cur);
err_ccstart:
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 69d87ed... WHATSNEW: Update changes since 3.5.0rc2. via 61ca739... librpc/ndr: don't overwrite the content in ndr_push_relative_ptr2_end() via 527ce7e... spoolss: use ndr_push_spoolss_PrinterInfo2 hand-marshalled version (moves devmode relative pointer down to sd). via a8120a0... spoolss: add spoolss_security_descriptor. via d1d3171... s3: re-run make samba3-idl. via c73bca1... security: make two bitmaps public. via 865a910... spoolss: make two bitmaps public. via 660b04b... spoolss: make all security descriptors and devicemodes 4 byte aligned and add missing subcontexts. via 5e02758... spoolss: set NDR_RELATIVE_REVERSE flag for various unions that have relative pointers. via 6347c2d... ndr_spoolss_buf: use LIBNDR_FLAG_NO_NDR_SIZE in NDR_SPOOLSS_SIZE_* via 4232f12... spoolss: use subcontext in NDR_SPOOLSS_PUSH_ENUM_OUT macro. via 59aebcc... libndr: fix ndr_size_* calculation with relative reverse buffers via 5bcb63a... libndr: for now align reverse relative pointers to 2 bytes by default. via 8423dc7... libndr: implement LIBNDR_RELATIVE_REVERSE handling via df1d697... libndr: store a subcontext buffer size in ndr_push_subcontext_start. via 82dbb06... libndr: give an error when ndr_push_relative_ptr2_start()/_end() is used with the RELATIVE_REVERSE flag via 365c2f8... libndr: add LIBNDR_FLAG_NO_RELATIVE_REVERSE so that relative reverse processing can be disabled for single structure elements. via a283e35... libndr: add LIBNDR_FLAG_RELATIVE_REVERSE flag. via b677491... libndr: change subcontext buffer allocation to allocate on subcontext_start. via bec6240... librpc/ndr: make ndr_push_relative_ptr2() static via f2e028c... librpc/ndr_krb5pac: use ndr_push_relative_ptr2_start()/_end() via 19cf103... librpc/ndr_drsblobs: use ndr_push_relative_ptr2_start()/_end() via 9dba8fc... spoolss: fix relative pointers in ndr_push_spoolss_DriverInfo101. via 6c253c7... s3: re-run make full_idl. via e410f72... pidl: use ndr_push_relative_ptr2_start and ndr_push_relative_ptr2_end. via cfc8489... libndr: add ndr_push_relative_ptr2_start and ndr_push_relative_ptr2_end. via 13b11ec... Fix bug #7154 - mangling method = hash can crash storing a name not containing a '.' via 3f2d27f... Fix bug #7155 - valgrind Conditional jump or move depends on uninitialised value(s) error when mangling method = hash via 1bf5097... s3-docs: Remove trailing whitespaces and fix a typo. via 91e59bd... s3:docs: add some advice for usage of strict allocate (cherry picked from commit 37115f91aebec9c846e54790c6bcf433ae35888a) (cherry picked from commit cbf728ce617323ca866799370491a402800772c1) via 6982b38... tsocket/bsd: fix comment in tdgram_bsd_recvfrom_handler() via 994e0d0... Fix commit d07cd37b993d3c9beded20323174633b806196b5 via 30028e3... tsocket/bsd: fix bug #7115 FreeBSD includes the UDP header in FIONREAD via e73afc1... tsocket/bsd: set IPV6_V6ONLY on AF_INET6 sockets via 6bb4023... tsocket/bsd: fix bug #7140 autodetect ipv4 and ipv6 based on the remote address if the local address is any via b7e73e6... tsocket/bsd: fix bug #7140 use calculated sa_socklen for bind() in tstream_bsd_connect_send() via 737b530... tsocket/bsd: fix do_bind logic for AF_INET via d5caa87... socket_wrapper: also ignore AF_INET6 in swrap_setsockopt() via b9cc59e... s3-modules: fix get_acl_blob in the acl_tdb VFS module. from 8096297... Fix bug #6557 - Do not work VFS full_audit http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 69d87ed8c1783975fe8d98b74576a7724eddfd61 Author: Karolin Seeger ksee...@samba.org Date: Fri Feb 19 13:45:32 2010 +0100 WHATSNEW: Update changes since 3.5.0rc2. Karolin (cherry picked from commit 8b05660b20058bad9fc9fb2336f7d2d3b513579c) commit 61ca739e1b51af0ab935cfa56b75f88912a55899 Author: Stefan Metzmacher me...@samba.org Date: Fri Feb 19 08:11:24 2010 +0100 librpc/ndr: don't overwrite the content in ndr_push_relative_ptr2_end() metze (cherry picked from commit 76aa37f653fec2d511921768381db7da661750cb) The last 24 patches address bug #6888 (REGRESSION: printing support for 64 bit windows clients broken). (cherry picked from commit b094f4954d0bef08794c5edcf102444908f1971c) commit 527ce7ebaabb5e9f49b590a18e329a18241d6f08 Author: Günther Deschner g...@samba.org Date: Sat Feb 13 03:45:25 2010 +0100 spoolss: use ndr_push_spoolss_PrinterInfo2 hand-marshalled version (moves devmode relative pointer down to sd). Guenther (cherry picked from commit 0a8011aa98ccaa81dc6ba2d30672ef4856fc31d8)
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 5541251... s3/smbd: change locking behavior when lock spin time = 0. via 00d2c87... Fix error in docs. Should be milliseconds, not microseconds. (cherry picked from commit c7f16abc47a2d291d3da95b4c8e654010e36bc0f) (cherry picked from commit 53531cb983739391fc70b1490f29d294785fee68) from c4fbf77... s3: by default don't use pthread pool support (cherry picked from commit 118725c892e445fcc1dc5947cb919cf99c49373f) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 5541251d642da252d8b8129f402921a27276cc5b Author: Steven Danneman steven.danne...@isilon.com Date: Fri Feb 12 15:42:50 2010 -0800 s3/smbd: change locking behavior when lock spin time = 0. The lock spin time parameter mimics the following Windows setting which by default is 250ms in Windows and 200ms in Samba. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters\LockViolationDelay When a client sends repeated, non-blocking, contending BRL requests to a Windows server, after the first Windows starts treating these requests as timed blocking locks with the above timeout. As an efficiency, I've changed the behavior when this setting is 0, to skip this logic and treat all requests as non-blocking locks. This gives the smbd server behavior similar to the 3.0 release with the do_spin_lock() implementation. I've also changed the blocking lock parameter in the call from push_blocking_lock_request() to true as all requests made in this path are blocking by definition. (cherry picked from commit cb0ea273696fc9024e6da18eb3e319024f8643f5) Fix bug #7138 (Backport 'lock spin time enhancement to 3.5.1). (cherry picked from commit 3e72ded677389816dd4f502792139cd8b2945f98) commit 00d2c875b64c31a58694f8331391b9335af0a220 Author: Jeremy Allison j...@samba.org Date: Fri Feb 12 21:29:58 2010 -0800 Fix error in docs. Should be milliseconds, not microseconds. (cherry picked from commit c7f16abc47a2d291d3da95b4c8e654010e36bc0f) (cherry picked from commit 53531cb983739391fc70b1490f29d294785fee68) --- Summary of changes: docs-xml/smbdotconf/locking/lockspintime.xml |2 +- source3/smbd/blocking.c |2 +- source3/smbd/reply.c | 21 +++-- 3 files changed, 17 insertions(+), 8 deletions(-) Changeset truncated at 500 lines: diff --git a/docs-xml/smbdotconf/locking/lockspintime.xml b/docs-xml/smbdotconf/locking/lockspintime.xml index da84d93..8e40877 100644 --- a/docs-xml/smbdotconf/locking/lockspintime.xml +++ b/docs-xml/smbdotconf/locking/lockspintime.xml @@ -3,7 +3,7 @@ context=G xmlns:samba=http://www.samba.org/samba/DTD/samba-doc; description - paraThe time in microseconds that smbd should + paraThe time in milliseconds that smbd should keep waiting to see if a failed lock request can be granted. This parameter has changed in default value from Samba 3.0.23 from 10 to 200. The associated diff --git a/source3/smbd/blocking.c b/source3/smbd/blocking.c index deb7f8f..e33c0b6 100644 --- a/source3/smbd/blocking.c +++ b/source3/smbd/blocking.c @@ -185,7 +185,7 @@ bool push_blocking_lock_request( struct byte_range_lock *br_lck, count, lock_type == READ_LOCK ? PENDING_READ_LOCK : PENDING_WRITE_LOCK, blr-lock_flav, - lock_timeout ? True : False, /* blocking_lock. */ + True, NULL, blr); diff --git a/source3/smbd/reply.c b/source3/smbd/reply.c index b6316aa..b1a4e31 100644 --- a/source3/smbd/reply.c +++ b/source3/smbd/reply.c @@ -7120,13 +7120,22 @@ NTSTATUS smbd_do_locking(struct smb_request *req, defer_lock = true; } - /* This heuristic seems to match W2K3 very well. If a - lock sent with timeout of zero would fail with NT_STATUS_FILE_LOCK_CONFLICT - it pretends we asked for a timeout of between 150 - 300 milliseconds as - far as I can tell. Replacement for do_lock_spin(). JRA. */ + /* If a lock sent with timeout of zero would fail, and +* this lock has been requested multiple times, +* according to brl_lock_failed() we convert this +* request to a blocking lock with a timeout of between +* 150 - 300 milliseconds. +* +* If lp_lock_spin_time() has been set to 0, we skip +
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 01c21d7... s3-docs: Document 'smbclient -C'. (cherry picked from commit f6c39cec27eea2522c62e6f1ff85efdafde351ac) (cherry picked from commit f6a7e9eadf85b19ec0ccca513a261bcad0bcf048) from 5541251... s3/smbd: change locking behavior when lock spin time = 0. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 01c21d78cf93277658e05450a8937bcefc53b3b4 Author: Volker Lendecke v...@samba.org Date: Tue Feb 16 11:00:08 2010 +0100 s3-docs: Document 'smbclient -C'. (cherry picked from commit f6c39cec27eea2522c62e6f1ff85efdafde351ac) (cherry picked from commit f6a7e9eadf85b19ec0ccca513a261bcad0bcf048) --- Summary of changes: docs-xml/build/DTD/samba.entities | 10 ++ docs-xml/manpages-3/smbclient.1.xml |2 ++ 2 files changed, 12 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/docs-xml/build/DTD/samba.entities b/docs-xml/build/DTD/samba.entities index 4ad65ca..d204156 100644 --- a/docs-xml/build/DTD/samba.entities +++ b/docs-xml/build/DTD/samba.entities @@ -428,6 +428,15 @@ an Active Directory environment. /varlistentry ' +!ENTITY stdarg.useccache ' +varlistentry +term-C|--use-ccache/term +listitempara +Try to use the credentials cached by winbind. +/para/listitem +/varlistentry +' + !ENTITY stdarg.help ' varlistentry @@ -439,6 +448,7 @@ an Active Directory environment. !ENTITY popt.common.credentials ' stdarg.nopass; stdarg.kerberos; +stdarg.useccache; stdarg.authfile; stdarg.username; ' diff --git a/docs-xml/manpages-3/smbclient.1.xml b/docs-xml/manpages-3/smbclient.1.xml index 6b5a8c5..cadd2ea 100644 --- a/docs-xml/manpages-3/smbclient.1.xml +++ b/docs-xml/manpages-3/smbclient.1.xml @@ -30,6 +30,7 @@ arg choice=opt-m maxprotocol/arg arg choice=opt-A authfile/arg arg choice=opt-N/arg + arg choice=opt-C/arg arg choice=opt-g/arg arg choice=opt-i scope/arg arg choice=opt-O lt;socket optionsgt;/arg @@ -55,6 +56,7 @@ arg choice=opt-m maxprotocol/arg arg choice=opt-A authfile/arg arg choice=opt-N/arg + arg choice=opt-C/arg arg choice=opt-g/arg arg choice=opt-l log-basename/arg arg choice=opt-I destinationIP/arg -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 76148be... VERSION: We need another release candidate. via edac3a3... WHATSNEW: Update changes since 3.5.0rc2. via e08caca... Fixes issue with preexec scripts creating a share directory, and problems is a smb.conf reload turns wide links back on after a connection is establised. via b8215ae... s3: Fix typo found by jhell jh...@dataix.net (cherry picked from commit 271a4c60dbec0d001dc55df58de8e54274137853) (cherry picked from commit eb390b8f917f52eb28f46f39a19abdc717051f3d) via 291738d... s3-spoolss: implement spoolss_EnumJobs level 3. via 59e187a... WHATSNEW: Mention new nmbd bind explicit broadcast parameter. via 85ec12a... More of the fix for bug #7118 - nmbd problems with socket address. via 8925ef0... Make nmbd bind explicit broadcast on by default. via f87c0e6... s3:docs-xml: document nmbd bind explicit broadcast via 354e229... s3:nmbd: change nmbd:bind explicit broadcast into nmbd bind explicit broadcast via 88645a6... s3:nmbd: also listen explicit on the subnet broadcast addresses via 340f559... s3: change ldap filter to what really was intended (cherry picked from commit 9b75650f1a963e36a6dd697b5ad2725a8c7c9250) from 00e133b... WHATSNEW: Update changes since 3.5.0rc2. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 76148be688f7201bdf7a613618e05fcc3415917d Author: Karolin Seeger ksee...@samba.org Date: Mon Feb 15 10:22:45 2010 +0100 VERSION: We need another release candidate. Karolin (cherry picked from commit 70e4d52d290e1851afe9c1f9e4503534713ec8fb) commit edac3a3036fdf97beeef50fb4d1dac3e1ee5cc4b Author: Karolin Seeger ksee...@samba.org Date: Mon Feb 15 10:37:09 2010 +0100 WHATSNEW: Update changes since 3.5.0rc2. Karolin (cherry picked from commit 4a386fb1850b558cc7355ecd4e0ce0a9849283e0) commit e08caca47e31a0ca2c19f94b70a01f8402937089 Author: Jeremy Allison j...@samba.org Date: Thu Feb 11 16:00:51 2010 -0800 Fixes issue with preexec scripts creating a share directory, and problems is a smb.conf reload turns wide links back on after a connection is establised. Includes git refs : cd18695fc2e4d09ab75e9eab2f0c43dcc15adf0b 94865e4dbd3d721c9855aada8c55e02be8b3881e 5d92d969dda450cc3564dd2265d2b042d832c542 02a5078f1fe6285e4a0b6ad95a3aea1c5bb3e8cf a6f402ad87ff0ae14d57d97278d67d0ceaaa1d82 from master. Jeremy. Fix bug #7104 (wide links and unix extensions are incompatible.) (cherry picked from commit 09fbad07d7fc6577b5617b1ecc912072ad220463) commit b8215ae91e2d2baed6e0763022debe0e41d6aded Author: Volker Lendecke v...@samba.org Date: Sat Feb 13 16:38:25 2010 +0100 s3: Fix typo found by jhell jh...@dataix.net (cherry picked from commit 271a4c60dbec0d001dc55df58de8e54274137853) (cherry picked from commit eb390b8f917f52eb28f46f39a19abdc717051f3d) commit 291738dd0d7f1b4671f8b496e1b50576ac79a101 Author: Günther Deschner g...@samba.org Date: Thu Feb 11 00:44:06 2010 +0100 s3-spoolss: implement spoolss_EnumJobs level 3. Level 3 has been added with NT 4.0 and Windows 7 (at least 64bit version) makes use of it in order to display queued jobs. Windows 7 will *not* fall back to level 2 if we just return WERR_UNKNOWN_LEVEL, instead there will be no printjobs displayed at all. Guenther (cherry picked from commit 25001bbd1b0b32073073dab7cf5b78a2b902163f) Fix bug #7130 (enumjobs level 3 is required by win7). (cherry picked from commit 223d9163651a3a2c0bb2bd72886f1a119b7f1fed) commit 59e187ab8d68edb50fb44206423bfb2e1ee0849e Author: Karolin Seeger ksee...@samba.org Date: Thu Feb 11 13:25:12 2010 +0100 WHATSNEW: Mention new nmbd bind explicit broadcast parameter. Karolin (cherry picked from commit df5db3d3f02d40d08891faa83717d306ebcd1331) commit 85ec12a06d5834fa7b9b8269bbe47387def9928e Author: Jeremy Allison j...@samba.org Date: Wed Feb 10 12:32:05 2010 -0800 More of the fix for bug #7118 - nmbd problems with socket address. Add a simple processed packet queue cache to stop nmbd responding to packets received on the broadcast and non-broadcast socket (which it has opened when nmbd bind explicit broadcast = yes). This is a very simple packet queue - it only keeps the packets processed during a single call to listen_for_packets() (i.e. one select call). This means that if the delivery notification for a packet received on both broadcast and non-broadcast addresses is done in two different select calls, the packet will still be processed twice. This is a very rare occurrance and we can just live with it when it does as the protocol is stateless. If this is ever flagged as a repeatable problem then we can add a longer
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 04b614f... spoolss: disable GetPrinterDriver level 101 (as called by XP). from 76148be... VERSION: We need another release candidate. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 04b614fcc4ee9197ef81a4c45edb7c9edcfbc080 Author: Günther Deschner g...@samba.org Date: Thu Feb 11 12:54:57 2010 +0100 spoolss: disable GetPrinterDriver level 101 (as called by XP). We still dont get the marshalling right, disable and XP will just fall back to level 6. Guenther (cherry picked from commit ddbda92f87aeedb1a1a976a43a1e5ada3897646e) Fix bug #7136 (spoolss getprinterdriver2 level 101 marshalling bad). (cherry picked from commit 4ad86ab5e79c97c5edbd897c54f66bc2b437d90f) --- Summary of changes: source3/rpc_server/srv_spoolss_nt.c |8 ++-- 1 files changed, 6 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/rpc_server/srv_spoolss_nt.c b/source3/rpc_server/srv_spoolss_nt.c index 74f7f93..98de40b 100644 --- a/source3/rpc_server/srv_spoolss_nt.c +++ b/source3/rpc_server/srv_spoolss_nt.c @@ -4836,6 +4836,8 @@ static WERROR fill_printer_driver_info8(TALLOC_CTX *mem_ctx, return WERR_OK; } + +#if 0 /* disabled until marshalling issues are resolved - gd */ / / @@ -4954,7 +4956,7 @@ static WERROR spoolss_DriverFileInfo_from_driver(TALLOC_CTX *mem_ctx, } / - * fill a spoolss_DriverInfo101 sttruct + * fill a spoolss_DriverInfo101 struct / static WERROR fill_printer_driver_info101(TALLOC_CTX *mem_ctx, @@ -5009,7 +5011,7 @@ static WERROR fill_printer_driver_info101(TALLOC_CTX *mem_ctx, return WERR_OK; } - +#endif / / @@ -5084,9 +5086,11 @@ static WERROR construct_printer_driver_info_level(TALLOC_CTX *mem_ctx, case 8: result = fill_printer_driver_info8(mem_ctx, r-info8, driver, servername); break; +#if 0 /* disabled until marshalling issues are resolved - gd */ case 101: result = fill_printer_driver_info101(mem_ctx, r-info101, driver, servername); break; +#endif default: result = WERR_UNKNOWN_LEVEL; break; -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via f8de9eb... s3-docs: fix eventlogadm manpage typo. from 04b614f... spoolss: disable GetPrinterDriver level 101 (as called by XP). http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit f8de9ebb2dcf3c07d843f23a900c3c8706c03e4b Author: Günther Deschner g...@samba.org Date: Thu Jan 7 12:05:18 2010 +0100 s3-docs: fix eventlogadm manpage typo. Guenther (cherry picked from commit c1ca00047d26ace240fa5f34b428392b5d61e6c3) Fix bug #7137 (eventlogadm manpage typo for dump command). (cherry picked from commit 3da0d891bfc0c7afedc5c4acf988f8347676269c) --- Summary of changes: docs-xml/manpages-3/eventlogadm.8.xml |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/docs-xml/manpages-3/eventlogadm.8.xml b/docs-xml/manpages-3/eventlogadm.8.xml index ce8ab23..09a5101 100644 --- a/docs-xml/manpages-3/eventlogadm.8.xml +++ b/docs-xml/manpages-3/eventlogadm.8.xml @@ -111,7 +111,7 @@ varlistentry term option-o/option - literalwrite/literal + literaldump/literal replaceableEVENTLOG/replaceable replaceableRECORD_NUMBER/replaceable /term -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via c4fbf77... s3: by default don't use pthread pool support (cherry picked from commit 118725c892e445fcc1dc5947cb919cf99c49373f) via 39436fe... s3:nsswitch: also use pthread CFLAGS for the nsswitch modules that might require it (cherry picked from commit 55d65ba7213e5b30711b5b5939d53e3d3990d86a) (cherry picked from commit 6be22ad4248c1cfd3fad22818ca9fc3c3894b4c0) via d4cdca2... s3: fix build on Tru64 after it broke with deactivating pthread pool support (cherry picked from commit acedd1c8320afa672ca70c6594bc90ccb7e75a6a) (cherry picked from commit ff2a7386e625a041448ff9f64862d83533a191b8) via 42afa97... s3: link thread objects in libsmbclient only and adjust linker flags (cherry picked from commit a20b43f23f2254edb1fcd6d3916dd57e6a4778ee) (cherry picked from commit 1797fbd5837f430424305b9a00dcbe64c916f8ae) via 3b7e239... s3: syntax fix (cherry picked from commit 1f7e97a8a257b3280ca14168adf2d59ca9e1074c) (cherry picked from commit cbe55a58727775383a53482037aa425608b917a1) via f7a88b7... s3: get pthread detection also on HP-UX right (cherry picked from commit 6bade10a1eb21689613770f9a54e0a080663029c) (cherry picked from commit 22296525a64d21351c21511cf6a0464d7d577314) via 408a282... s3: fix detection and flags for using pthread from f8de9eb... s3-docs: fix eventlogadm manpage typo. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit c4fbf77df5d9042b7dddc73404f9164e9cff24b9 Author: Björn Jacke b...@sernet.de Date: Fri Jan 29 12:42:25 2010 +0100 s3: by default don't use pthread pool support (cherry picked from commit 118725c892e445fcc1dc5947cb919cf99c49373f) The last seven patches address bug #6983 (Build with aio support fails on Debian Sarge). (cherry picked from commit 3e43399fdbeb5a145c9e2d22390a8758f515fe36) commit 39436fe877ce8bac643225db991b1e5930eda13d Author: Björn Jacke b...@sernet.de Date: Thu Feb 4 11:03:55 2010 +0100 s3:nsswitch: also use pthread CFLAGS for the nsswitch modules that might require it (cherry picked from commit 55d65ba7213e5b30711b5b5939d53e3d3990d86a) (cherry picked from commit 6be22ad4248c1cfd3fad22818ca9fc3c3894b4c0) commit d4cdca206607b3a0c9914b491028df18130bbf02 Author: Björn Jacke b...@sernet.de Date: Thu Feb 4 10:35:45 2010 +0100 s3: fix build on Tru64 after it broke with deactivating pthread pool support (cherry picked from commit acedd1c8320afa672ca70c6594bc90ccb7e75a6a) (cherry picked from commit ff2a7386e625a041448ff9f64862d83533a191b8) commit 42afa979e8d83060a06130f3230d42c2923ad31b Author: Björn Jacke b...@sernet.de Date: Fri Jan 29 15:23:29 2010 +0100 s3: link thread objects in libsmbclient only and adjust linker flags (cherry picked from commit a20b43f23f2254edb1fcd6d3916dd57e6a4778ee) (cherry picked from commit 1797fbd5837f430424305b9a00dcbe64c916f8ae) commit 3b7e2394bf90af71870579db2377ffa568fde4e0 Author: Björn Jacke b...@sernet.de Date: Wed Jan 27 23:43:23 2010 +0100 s3: syntax fix (cherry picked from commit 1f7e97a8a257b3280ca14168adf2d59ca9e1074c) (cherry picked from commit cbe55a58727775383a53482037aa425608b917a1) commit f7a88b7799b8f14ed0b0183521fbb71d22de59fa Author: Björn Jacke b...@sernet.de Date: Wed Jan 27 18:54:55 2010 +0100 s3: get pthread detection also on HP-UX right (cherry picked from commit 6bade10a1eb21689613770f9a54e0a080663029c) (cherry picked from commit 22296525a64d21351c21511cf6a0464d7d577314) commit 408a2824edb899d1c0f5e60a48b435ef48ba2bcd Author: Björn Jacke b...@sernet.de Date: Tue Jan 26 00:17:10 2010 +0100 s3: fix detection and flags for using pthread I hope this fixes the build on Tru64, IRIX and maybe bug #6983 (cherry picked from commit 5439e1a03f66ff9722987f908babfd71ebd698f1) (cherry picked from commit 63253834e5008991c2e4011d22fb825262b255e5) --- Summary of changes: source3/Makefile.in | 27 +++- source3/configure.in | 79 -- source3/libsmb/libsmb_thread_posix.c |4 ++ 3 files changed, 86 insertions(+), 24 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/Makefile.in b/source3/Makefile.in index 6474231..f84ed20 100644 --- a/source3/Makefile.in +++ b/source3/Makefile.in @@ -72,7 +72,8 @@ nscd_li...@nscd_libs@ uuid_li...@uuid_libs@ libwbclie...@libwbclient_static@ @LIBWBCLIENT_SHARED@ libwbclient_li...@libwbclient_libs@ -winbind_nss_pthre...@winbind_nss_pthread@ +pthread_ldfla...@pthread_ldflags@ +pthread_cfla...@pthread_cflags@ dnssd_li...@dnssd_libs@ avahi_li...@avahi_libs@ popt_li...@poptlibs@ @@ -921,6 +922,10 @@ RPCCLIENT_OBJ = $(RPCCLIENT_OBJ1) \ PAM_WINBIND_OBJ = ../nsswitch/pam_winbind.o localedir.o
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 00e133b... WHATSNEW: Update changes since 3.5.0rc2. via 66dc2e5... Fix off-by-one error in working out the limit of the NetServerEnum comment. via d99c1b5... Fix bug #7122 - Reading a large browselist fails (server returns invalid values in subsequent SMBtrans replies) via a46c446... tdb: raise version to 1.2.1 via 1991ae2... s3:smbd: use StrCaseCmp() instead of strcasecmp via 511048d... s3:smbd: Fix really ugly bool vs. int bug!!! via fb9a59d... s3:passdb: only use gid_to_sid() result if the result is a group of our local sam via 123ecaf... s3:pdb_ldap: don't search for the users primary group, if we already know it via 3e531cf... s3:pdb_ldap: optimize ldapsam_alias_memberships() and cache ldap searches. via c6f299b... s3:pdb_ldap: try to build the full unix_pw structure with ldapsam:trusted support via e725f0d... s3:passdb: speed up pdb_get_group_sid() via d1e19b3... s3: Make pdb_copy_sam_account also copy the group sid via c0505ad... s3: shortcut gid_to_sid when ldapsam:trusted = yes via 976b7c4... Missed one check on the memcpy for bug #7063. via 5d3a3d7... Second part of fix for bug 7063 - Samba 3.4.5 on ubuntu 8.04 64 bit - Core dumps. via d8e0a24... s3-docs: Add missing para end tag. via 5837e2c... WHATSNEW: Add changes since 3.5.0rc2. via 4caaf04... WHATSNEW: Update changes. via 324f6b0... Fix bug #6876 for acl_tdb module. via 4ae91dd... s3:libsmb: fix NetServerEnum3 rap calls. via abd7f74... s3:smbd: implement api_RNetServerEnum3 via 183bd3a... util: added binsearch.h for binary array searches via a7d7764... s3:smbd: add/improve some DEBUG messages in api_RNetServerEnum2() via ecc9943... s3:smbd: rename api_RNetServerEnum = api_RNetServerEnum2 via 78cc7fe... Fix bug 7104 - wide links and unix extensions are incompatible. via 184d91b... s3: fix some wrong newlines in de translation strings (cherry picked from commit fb0c03209773059caad8d0aad5899828e5f5e64e) (cherry picked from commit a115b05969564b1c9a2cac0986e113f69dd08d2c) via 148c653... Fix bug 7063 - Samba 3.4.5 on ubuntu 8.04 64 bit - Core dumps. via 7df2cdc... s3: Fix malformed require_membership_of_sid. via a81c365... s3: fix build issue on Tru64 via 7625782... s3: normalize Changing password for msg IDs and STRs via 28a1867... Fix bug #7079 - cliconnect gets realm wrong with trusted domains. via 08c9fee... s3:libsmb: don't reuse the callers stype variable in cli_NetServerEnum() via 7c792e9... Add cross option to samba_cv_linux_getgrouplist_ok via 05b5ca0... s3/smbd: Fix string buffer overflow causing heap corruption via b538cbe... tdb: fix an early release of the global lock that can cause data corruption via 728566d... Fix bug #7084 - Create time on directories not stored properly in an EA in new create time code. via c59b9a3... s3: Simplify the code a bit: Catch (len==0) early via 023f423... Fix bug 7081 - vfs_expand_msdfs doesn't work correctly (with fix identified) via 92ae65a... s3/vfs_scannedonly: AIX doesn't have MSG_DONTWAIT (cherry picked from commit e95e3270d1f3fece7292359d276ce45913a699ac) via 8a6058b... Fix bug #7069 - smbget does not return an error status after some errors via 6e04a25... Fix bug #7072 - Accounts can't be unlocked from ldap. via a6ae7a5... Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to respond to a read or write. via b4e0480... s3/winbind_ccache: Fix typo in debug message. via dbafd8d... Add dependency of bin/smbfilter to libwbclient. (cherry picked from commit 2dd301e5cd6ff97943c4bf9c7cd9b820d6193b45) via ba68458... VERSION: Raise version number up to 3.5.0. from 6e42522... WHATSNEW: Update changes. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 00e133ba8dae14a1758d8f324f009a2476155208 Author: Karolin Seeger ksee...@samba.org Date: Wed Feb 10 11:05:13 2010 +0100 WHATSNEW: Update changes since 3.5.0rc2. Karolin (cherry picked from commit 085bd69d49e7605e511060110cc0bab5faf99e62) commit 66dc2e5d5f8a4700af91f70f938e8d47f82b3507 Author: Jeremy Allison j...@samba.org Date: Tue Feb 9 12:17:08 2010 -0800 Fix off-by-one error in working out the limit of the NetServerEnum comment. Jeremy. Part of a fix for bug #7122 (Reading a large browselist fails (server returns invalid values in subsequent SMBtrans replies). (cherry picked from commit 89a7121a3ff3ad110c3635bb493983fafdcee9f6) commit d99c1b51b7af9d499eb070c87958c95c3a294aff Author: Jeremy Allison j...@samba.org Date: Tue Feb 9 15:14:38 2010 -0800 Fix bug #7122
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 6e42522... WHATSNEW: Update changes. via ff7027a... s3-docs: Fix version in man ldbrename. via a4e7412... s3: Enable use of ccache by default for libsmbclient via b244e3e... s3-libsmbclient: Add smbc_setOptionUseCCache() via ce033a7... s3: Add --use-ccache to net (cherry picked from commit af32a49c7d8803f597e184f1361e795f179b809f) via b2c393a... s3: add libnetapi_set_use_ccache() (cherry picked from commit b99ab82ebab598b45eb6729498c9e67b195e698d) via e2e48df... s3: Fix a bug in net's use of popt via a97d76b... s3: Enable -C in rpcclient (cherry picked from commit 2aca69ef0df02e655125d9db31e1f0144d21a144) via a361992... s3: Add CLI_FULL_CONNECTION_USE_CCACHE (cherry picked from commit 36854ea0aa260dfe23f77825e942f5b3905d396d) via f3428ec... s3: Use -C in smbclient via 1fcfa0b... s3: Add -C (--use-ccache) to popt_common_credentials (cherry picked from commit 58ebc50663a299e16684aa24cfae95954d5a14f0) via bef877a... s3: Add ccache use to cli_session_setup_ntlmssp (cherry picked from commit e06abe412f78b58f36998037637d1b3478fdc477) via 7928241... s3: Add NTLMSSP_FEATURE_CCACHE via dc3e7f7... libwbclient: Actually implement wbcCredentialCache() (cherry picked from commit 7ab798d141bf715808fa0941f19422069e65fa0e) via 2643ff4... s3: Add the session key to the ccache_ntlm_auth response (cherry picked from commit 99f6f322ae5aa13596c5b0f1a6e600b6fec48896) via b444541... s3: Add wbinfo --ccache-save from 43c03a6... lib/popt: Fix typo in README. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 6e4252217a6f239a64afc5103d6416c402e5e10f Author: Karolin Seeger ksee...@samba.org Date: Tue Jan 26 14:58:45 2010 +0100 WHATSNEW: Update changes. Karolin (cherry picked from commit 048adb50d83a3928820e6607451d582696cd7cc7) commit ff7027abcba3bfc69f068da2a8c3b0792c72e870 Author: Karolin Seeger ksee...@samba.org Date: Tue Jan 26 14:19:31 2010 +0100 s3-docs: Fix version in man ldbrename. Karolin (cherry picked from commit 77bb3f2a5596c84e99b9006d2a31a752c68ab34a) commit a4e7412578752a03a10d5c6a95221cba8c7bb077 Author: Volker Lendecke v...@samba.org Date: Tue Jan 26 10:51:32 2010 +0100 s3: Enable use of ccache by default for libsmbclient Disable this by setting the environment variable LIBSMBCLIENT_NO_CCACHE, which has the advantage over an smb.conf option to be easily settable per application. (cherry picked from commit 0e8552abc1b48e62aaac3cab7c13c8dea60c9f9b) commit b244e3ec83d508c4515dd0987c2880117ae9119f Author: Volker Lendecke v...@samba.org Date: Sun Jan 24 19:24:10 2010 +0100 s3-libsmbclient: Add smbc_setOptionUseCCache() Can we enable this by default? This would be a change in behaviour, but this feature is just too cool for everyone to catch up in the apps. The patch would be (cherry picked from commit 9698c214624678125551f2d65b95deb29ea72b64) commit ce033a724aff9bf587e8b3ba02e3010b565f3912 Author: Volker Lendecke v...@samba.org Date: Sun Jan 24 18:50:48 2010 +0100 s3: Add --use-ccache to net (cherry picked from commit af32a49c7d8803f597e184f1361e795f179b809f) commit b2c393a4bd4c9d8a8c2f5007fa287ca0a97a0919 Author: Volker Lendecke v...@samba.org Date: Sun Jan 24 18:50:31 2010 +0100 s3: add libnetapi_set_use_ccache() (cherry picked from commit b99ab82ebab598b45eb6729498c9e67b195e698d) commit e2e48df6dc9efb245f4c16d46f487a065d806d99 Author: Volker Lendecke v...@samba.org Date: Sun Jan 24 18:51:58 2010 +0100 s3: Fix a bug in net's use of popt In order to add --use-ccache to net, I added another bool opt_ccache; to struct net_context. popt did not like this, it took a while to figure out why. Popt has the lines /* XXX Check alignment, may fail on funky platforms. */ if (arg == NULL || (((unsigned long)arg) (sizeof(*arg)-1))) return POPT_ERROR_NULLARG; The bool opt_ccache; was not aligned anymore... (cherry picked from commit 340277382518c62e23faae4af69a9c5c32b96af2) commit a97d76b1515be57746b22413ec4bc1533feee71d Author: Volker Lendecke v...@samba.org Date: Sun Jan 24 17:35:04 2010 +0100 s3: Enable -C in rpcclient (cherry picked from commit 2aca69ef0df02e655125d9db31e1f0144d21a144) commit a3619926795f2bb139e9b9a3c9c4ceb40858d38e Author: Volker Lendecke v...@samba.org Date: Sun Jan 24 17:34:13 2010 +0100 s3: Add CLI_FULL_CONNECTION_USE_CCACHE (cherry picked from commit 36854ea0aa260dfe23f77825e942f5b3905d396d) commit f3428ecb6b3c640e703822592cb369c4bbe4d8fa Author: Volker Lendecke v...@samba.org Date: Sun Jan 24 17:08:56 2010 +0100 s3: Use -C in smbclient $ bin/wbinfo --ccache-save=w2k3ad\\vl%Password saving
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 9956693... WHATSNEW: Update changes since 3.5.0rc1. via adcd1a8... s3: Fix bug 7052: DFS broken on AIX (maybe others) (cherry picked from commit c531d00abdb19ff6ba4c60ebdcc8319949c6) (cherry picked from commit f21796955e7aa2e84a1c810612f2fdee2bde611c) via e172365... s3:pdb_ldap: Fix large paged search. via f13a516... s3-docs: Fix typos. via e9a4ae7... s3 net/i18n: Update .po files (cherry picked from commit add4edcd063591839111d474543ceea847413f6f) via e088c3e... s3 net: Fix compile warnings (cherry picked from commit 66de52c4f4527ef43cfaf11c55616ec7602cce85) via 5fd4066... s3 net/i18n: update .po files (cherry picked from commit 6d33bb25e1aab72bb3e12a0824a758bacba32672) via a94daec... s3 net/i18n: Use only one spelling for Usage: (cherry picked from commit 09bc13728fc76cf784914a4066c793c297e50cff) via f1bc012... s3 net: Fix compile error with WITH_DNS_UPDATES via 8aed2be... s3/net: split up some printable stings to ease i18n via bb7070d... Ñ3/i18n/de: fix typo (cherry picked from commit fb7a4621134b9054f33ccb48d7d8c1e4e4960b9a) via 8dd3a22... s3/i18n/de: improve some German translations (cherry picked from commit c3ef7a3d96763719de1df679d50fb8a00d1f7391) via 798a172... net: Add German translation, specially for the command listing via f06c47c... WHATSNEW: Update release notes. via 4e65f5e... s3:pdb_ldap: restore Samba 3.0.x behavior and use the first uid value. via 89c572a... s3:smbldap: add smbldap_talloc_first_attribute() via 6a82616... s3-docs: Adapt version number in man vfs_scannedonly. via dd61c89... s3-docs: Add man page for vfs_scannedonly. via ab0032d... s3: Fix a crash in libsmbclient used against the OpenSolaris CIFS server via 5e83ccd... Fix bug 7045 - Bad (non memory copying) interfaces in smbc_set calls. via 60de807... Modification of fix for bug 6876 - Delete of an object whose parent folder does not have delete rights fails even if the delete right is set on the object via 7fb2c6f... Fix bug #6876 - Delete of an object whose parent folder does not have delete rights fails even if the delete right is set on the object. via 70975e2... WHATSNEW: Start 3.5.0rc2 release notes. via 06cacc7... VERSION: Raise version number up to 3.5.0rc2. via 2be6999... s3-libsmbclient: Fix crash bug in SMBC_parse_path(). via 73710b5... docs: fix xml tag in the pdbedit manpage via a075b47... s3-docs: mention -K option in pdbedit manpage. via b8bda6b... Fix bug #7036 - net rpc getsid fails in hardened windows environments. via 9d33a91... s3-lanman: Allow a level2 descriptor for a level1 NetShareGetInfo via b906f49... Part 4 of bug #7028 - include scannedonly VFS module via f2c873f... Fix two uses of strncat - strlcat. Ensure proper use of strncpy when setting socket name. via 3b9fe52... s3: Lift the version of the scannedonly VFS module (cherry picked from commit 2d4dda0688d5c88fb73ae17db970afe9d0f77f6a) (cherry picked from commit f692d27c9edc187ebdc080ff71fc5df24b607c55) via 2cf7a4f... Bug #7028 part1 via a587879... Fix bug #7033 - SMBrmdir call always returns true, even on failure to delete a directory. via 946a865... s3: Fix a winbind segfault in trusted_domains via e5d8180... Fix bug #7034 - vfs_cap causes signal 11 (SIGSEGV) (cherry picked from commit ca847952054f5bbde1d40ad4260589b6fcc9721d) (cherry picked from commit dbbe7c5949f2e5728577e1a1146c0b72b1b482c0) via 3476f79... s3: Fix a segfault in winbindd_dual_ccache_ntlm_auth() via 6d79f25... Re-fix bug 5202 - cannot change ACLs on writable file with dos filemode=yes via e685d43... s3: Lock down some srvsvc calls according to what w2k3 seems to do (cherry picked from commit ea7d2995f383e183ef4d8a21705a343581e71f4a) from b097212... WHATSNEW: Update changes. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 9956693e89c11f04366453801778e069049ed55f Author: Karolin Seeger ksee...@samba.org Date: Mon Jan 25 11:28:46 2010 +0100 WHATSNEW: Update changes since 3.5.0rc1. Karolin (cherry picked from commit b3f2d34b54bc06e7d1d0c47e89dc8f2dcc782890) commit adcd1a81b1d21e32824edd083bf8e053613992a3 Author: William Jojo w.j...@hvcc.edu Date: Thu Jan 21 14:21:03 2010 +0100 s3: Fix bug 7052: DFS broken on AIX (maybe others) (cherry picked from commit c531d00abdb19ff6ba4c60ebdcc8319949c6) (cherry picked from commit f21796955e7aa2e84a1c810612f2fdee2bde611c) commit e17236586cc836f997666c6c8a9633940152c006 Author: Volker Lendecke v...@samba.org Date: Mon May 18 16:04:04 2009 +0200 s3:pdb_ldap: Fix large paged search. Fix bug #6981 (Paged
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 3389f40... WHATSNEW: Update changes. via f81ef95... s3:auth: fix account unlock regression introduced with fix for bug #4347 via 8725300... s3:auth: don't update the bad pw count if pw is among last 2 history entries via bfc4bcc... s3:auth:check_sam_security: introduce a bool var to control pad_pw_count incrementation via e6397be... s3:passdb: store the plain nt passwords hashes in history, not salted md5 via 2fcfdd1... s3:smbd:password_in_history: treat entry with 0 salt as 0 + plain nt hash via 624285b... s3:auth:check_sam_security: improve calling and logging of pdb_update_sam_account via d23ad60... s3:auth:check_sam_security: fix a leading tab/ws mixup via 5deb3e2... s3:auth:check_sam_security: create (and use) a common exit point via 35f158e... s3:auth:check_sam_security: null out sampass after it has been stolen. via 079a5fe... s3:auth:sam_password_ok: take username, acct_ctrl and nt/lm hashes, not sampass via 47b0b19... s3:auth: use data_blob_null instead of data_blob(NULL, 0) in sam_password_ok() via cd774ba... s3:auth:sam_password_ok: fix allocation of a data blob. via 14b75a1... s3:auth:sam_password_ok: enhance readability (imho) by adding some pointers via e0bf3de... s3:check_sam_security: untangle assignment from statement via 478e00c... s3: Factor password_in_history() out of check_passwd_history() (cherry picked from commit a92102cf3044ad3be49d6f746ed3f95c49d30412) via 7f5220c... Simplify E_md5hash a bit (cherry picked from commit 7e430f3093c5bc06d8ca1186f982fe51af8c5637) via 674550c... s3: Simplify pdb_set_plaintext_passwd: pwhistory==NULL can not happen anymore (cherry picked from commit 2042f4937db80939ca3d70816d864b4d762d46fb) via d3a1cc9... s3: Simplify pdb_set_plaintext_passwd: pwHistLen==0 was checked above (cherry picked from commit bfa814be469e5a7c22e45ff8261de749e51414b2) via 7e26397... s3: Add a paranoia check to pdb_set_plaintext_passwd() (cherry picked from commit 58b2f41c14e590724e2cb45f23ff7e75d5d2e7ab) via 0101bdf... s3: Simplify pdb_set_plaintext_passwd() by removing a redundant condition via d579138... s3: Simplify pdb_set_plaintext_passwd: memcpy deals fine with 0 bytes (cherry picked from commit 8a4463c61292872e9a294a6b026ec6d65d2219b8) via 02d23ee... s3: Simplify pdb_set_plaintext_passwd by using talloc_zero_array (cherry picked from commit 501dd6fe17e72d8e487a622c0e66cb5938e66731) via e267e7c... s3: Make use of talloc_array in pdb_set_plaintext_passwd() (cherry picked from commit a5a477648f301b9c435609b0c6f4d76d4229b9ae) via 0567a76... s3: Simplify pdb_set_plaintext_passwd() a bit via b3ad0c2... s3: Simplify pdb_set_plaintext_passwd() slightly via d1bff7b... s3: Fix a typo (cherry picked from commit 53e9ffb3a66acfa9af2bf4c616b2b83daf723f49) via 4e7b5be... s3: Avoid a memset(, 0, ) call (cherry picked from commit 7758648556aba5242f913d6cc0f46a2d9f1cfaa9) from 9956693... WHATSNEW: Update changes since 3.5.0rc1. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 3389f40817fbde52c8b1da480f5cda0428a1b7ed Author: Karolin Seeger ksee...@samba.org Date: Mon Jan 25 12:51:41 2010 +0100 WHATSNEW: Update changes. Karolin (cherry picked from commit 05850542df7c9c6e15bbc609df59c7177d3ab996) commit f81ef95f5110fea275519bd93b17642789d95dcf Author: Michael Adam ob...@samba.org Date: Thu Jan 14 14:24:35 2010 +0100 s3:auth: fix account unlock regression introduced with fix for bug #4347 By an oversight, the patchset for #4347 made the unlocking of a locked account after the lockout duration ineffective. Thanks to Björn for finding this! Michael (cherry picked from commit 5eb9b66de0fd0adc59339a944f02f5fe25868568) commit 872530076011593c1116c16b02e1fa9f0a85f5a8 Author: Michael Adam ob...@samba.org Date: Wed Jan 6 17:29:04 2010 +0100 s3:auth: don't update the bad pw count if pw is among last 2 history entries This conforms to the behaviour of Windows 2003: http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/bpactlck.mspx This is supposed to fixes Bug #4347 . Michael (cherry picked from commit fcadc524779a50ee379fb4feb02448944dc174dc) commit bfc4bccf00bf3a17bd3cf12337953425f0fcc471 Author: Michael Adam ob...@samba.org Date: Wed Jan 6 16:35:44 2010 +0100 s3:auth:check_sam_security: introduce a bool var to control pad_pw_count incrementation This is a preparatory patch for the last part in fixing bug #4347 . Michael (cherry picked from commit 0d6ad513e27e83b6a460954f3120395f13f65088) commit e6397bef88675acc61c1020ac0d5dc848a99beeb Author:
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 43c03a6... lib/popt: Fix typo in README. via 331ff17... s3/docs: Fix typo. from 3389f40... WHATSNEW: Update changes. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 43c03a668850082c0b21d63eef1d7bd9c0777135 Author: Karolin Seeger ksee...@samba.org Date: Mon Jan 25 19:54:24 2010 +0100 lib/popt: Fix typo in README. Karolin (cherry picked from commit 463aa06442f1d6c7088c5d47f003b82e4293b70d) (cherry picked from commit 007dbc57a954e3eea6db191b34f3be9ab3c4a9b6) commit 331ff1776be27ac1193b70f33ff3058aeea9bfa1 Author: Karolin Seeger ksee...@samba.org Date: Mon Jan 25 19:53:42 2010 +0100 s3/docs: Fix typo. Karolin (cherry picked from commit a3420bf7a52c3d9fa6cba75aa88d1f4087c0e3aa) (cherry picked from commit 7e4dd20a6bb7ae44f2137ca9f914e09a15f00110) --- Summary of changes: docs-xml/Samba3-HOWTO/TOSHARG-Install.xml |2 +- lib/popt/README |2 +- 2 files changed, 2 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml b/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml index d13f6ee..673ba93 100644 --- a/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml +++ b/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml @@ -197,7 +197,7 @@ entrypara Exists only when the tdbsam passwd backend is used. This file stores the SambaSAMAccount information. Note: This file requires that user POSIX account information is - availble from either the /etc/passwd file, or from an alternative system source. + available from either the /etc/passwd file, or from an alternative system source. /para/entry /row row diff --git a/lib/popt/README b/lib/popt/README index 0b5205b..95f8f8d 100644 --- a/lib/popt/README +++ b/lib/popt/README @@ -12,7 +12,7 @@ popt is used by rpm, the Red Hat install program, and many other Red Hat utilities, all of which provide excellent examples of how to use popt. Complete documentation on popt is available in popt.ps (included in this tarball), which is excerpted with permission from the book Linux -Application Development by Michael K. Johnson and Erik Troan (availble +Application Development by Michael K. Johnson and Erik Troan (available from Addison Wesley in May, 1998). Comments on popt should be addressed to e...@redhat.com. -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via b097212... WHATSNEW: Update changes. via a3ae5f4... tdb: fix standalone 'make installdocs' via 357eae5... tdb: create symbol links to shared libraries see https://bugzilla.samba.org/show_bug.cgi?id=6991 for details via a1fb214... talloc: create symbol links to shared libraries see https://bugzilla.samba.org/show_bug.cgi?id=6991 for details via 1c1b3aa... tevent: create symbol links to shared libraries see https://bugzilla.samba.org/show_bug.cgi?id=6991 for details via f8c058d... tdb: Also build and install tdb manpages from standalone tdb. (cherry picked from commit 0110990f01390c80b8db423ba7eed486883219de) via a3ebe54... s4: Fix result check for getaddrinfo() via 25e126d... WHATSNEW: Update changes since 3.5.0pre2. via d335029... s4-smbtorture: add test_ChangeID to RPC-SPOOLSS. via 95a8b65... s4-smbtorture: add test_SetPrinter to RPC-SPOOLSS. via 534ddef... s4-smbtorture: refactor test_GetPrinter in RPC-SPOOLSS. via cf00de2... s3-net: use generated krb5.conf in 'net ads testjoin' via 52eb403... s3-docs: mention -M option and remove nonexisting -G option in pdbedit manpage. via 71f3b8d... Second part of the fix for bug #7020 - smbd using 2G memory. from 4e8c70e... Fix bug #7020 - smbd using 2G memory. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit b0972122102ea7163af5e2798be0127ab0c8b11c Author: Karolin Seeger ksee...@samba.org Date: Thu Jan 7 11:01:17 2010 +0100 WHATSNEW: Update changes. Karolin (cherry picked from commit 22ee5d4921f28a4cba176ca629cf32f35b5956d6) commit a3ae5f4094693ec126e45afa110ce65ef4b94c05 Author: Stefan Metzmacher me...@samba.org Date: Wed Jan 6 14:39:43 2010 +0100 tdb: fix standalone 'make installdocs' metze (cherry picked from commit c01f443ebca5e0b6f65fe8b3ab031da51dce2e89) (cherry picked from commit 6a1786aaf88bbc38eebbd489cfe582602bd034e2) commit 357eae56f1a4745ab605ad58e50bd89d8a351c20 Author: Brian Lu brian...@sun.com Date: Thu Dec 17 14:39:09 2009 +0800 tdb: create symbol links to shared libraries see https://bugzilla.samba.org/show_bug.cgi?id=6991 for details Signed-off-by: Stefan Metzmacher me...@samba.org (cherry picked from commit 0a3a6bb8f910df02cb429fdeacf0ab8d683e0b89) (cherry picked from commit 3c5de3c3f8fb665a0e1e9c1982a6f98d8ae9a1ff) commit a1fb214c503c5235eb838911ea8ba78b55b1ef74 Author: Brian Lu brian...@sun.com Date: Thu Dec 17 14:48:59 2009 +0800 talloc: create symbol links to shared libraries see https://bugzilla.samba.org/show_bug.cgi?id=6991 for details Signed-off-by: Stefan Metzmacher me...@samba.org (cherry picked from commit eff6022d51f578dfc48f1d66dd8ec1e860dfd7b3) (cherry picked from commit d3e8baf29756c7af38841b290ad67eb06a474bb3) commit 1c1b3aa1725d3bf0120ae52f79d311eeb0deef18 Author: Brian Lu brian...@sun.com Date: Thu Dec 17 14:55:57 2009 +0800 tevent: create symbol links to shared libraries see https://bugzilla.samba.org/show_bug.cgi?id=6991 for details Signed-off-by: Stefan Metzmacher me...@samba.org (cherry picked from commit f408d58d95f5ac10849742fdcdf7e6160196e8e0) (cherry picked from commit b4f95b214cf7a328f2656fa81395566e9905ff6e) commit f8c058d26b1533f9080991ef2104278641268c6f Author: Jelmer Vernooij jel...@samba.org Date: Sun Dec 20 18:01:24 2009 +0100 tdb: Also build and install tdb manpages from standalone tdb. (cherry picked from commit 0110990f01390c80b8db423ba7eed486883219de) (Version changed to 3.5) Signed-off-by: Stefan Metzmacher me...@samba.org (cherry picked from commit 2e0df7c8ee5615cb8b1ea3abe727ab59c4bf1f95) commit a3ebe54761d1c0d1c99edaf6e221612c23280bf2 Author: Kamen Mazdrashki kamen.mazdras...@postpath.com Date: Wed Jan 6 13:40:33 2010 +0200 s4: Fix result check for getaddrinfo() I think this completes commit 50feca550eed7828198b7c0fc5f0e5ddc863313d. Now result should be handled correctly both for systems that support EAI_NODATA but returns EAI_NONAME (as my Ubuntu 9.x) and systems that doesn't support EAI_NODATA at all. Signed-off-by: Stefan Metzmacher me...@samba.org (cherry picked from commit a2044b9a61d9c8ca66067b286ad9bc01cf0490b9) (cherry picked from commit dd35252f4dbe3dc36b35c21915bf959524dc4930) commit 25e126d6b462672d1150d2de25355d7e5f328492 Author: Karolin Seeger ksee...@samba.org Date: Thu Jan 7 10:24:28 2010 +0100 WHATSNEW: Update changes since 3.5.0pre2. Karolin (cherry picked from commit c330ae920ac86a6a9cc7fac129be62756b2da7c0) commit d33502936793baa8c660d7399752af322414a5a3 Author: Günther Deschner g...@samba.org Date: Wed Jan 6 19:34:33 2010 +0100 s4-smbtorture: add test_ChangeID to RPC-SPOOLSS. This tests
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 4e8c70e... Fix bug #7020 - smbd using 2G memory. via 02c9d04... s3: List trusted domains from wcache when domain is offline. via a246c49... s3: Make winbindd_cache.c aware of domain offline to avoid unnecessary backend query. via 2764612... s3: Fix infinite loop in NCACN_IP_TCP asa there is no timeout. Assume lsa_pipe_tcp is ok but network is down, then send request is ok, but select() on writeable fds loops forever since there is no response. via f5e81c5... s3 net: Fix up a share type translation and translate some more strings (cherry picked from commit da41f23bdad1ea3a1a49110217cfde3efcde5075) (cherry picked from commit 0272f44061fa9205bb744e286b6203e15e157a6e) via b9d00a6... s3 net: Add a few missing gettext calls. via a63b54a... net: Add some German translation from ea57f91... VERSION: Raise version number up to 3.5.0rc1. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 4e8c70e288f15cdd55f40b0ab6e8beee180b4751 Author: Jeremy Allison j...@samba.org Date: Tue Jan 5 14:34:00 2010 -0800 Fix bug #7020 - smbd using 2G memory. When deferring an async pipe writeX and readX transfer the outstanding request struct onto the conn struct. This needs freeing after the packet is finally processed. Jeremy. (cherry picked from commit f6bd654a6c878111f0f0f4d07adb644fc3bbf224) (cherry picked from commit b63539809d022f7012f4899a5a18a835079d6c6f) commit 02c9d04b9e2c42635f3c82fd2b5f5ebf0a1d2d8e Author: Bo Yang boy...@samba.org Date: Wed Jan 6 19:13:59 2010 +0800 s3: List trusted domains from wcache when domain is offline. Signed-off-by: Bo Yang boy...@samba.org (cherry picked from commit d06fb8e02706559e91c6d185427409bb093bb896) (cherry picked from commit 65003db3685098dd3b8370c5a6fc673c9eba5d7a) commit a246c49e80420f3dcc8893b8b48a90a6db3f8b16 Author: Bo Yang boy...@samba.org Date: Wed Jan 6 15:05:20 2010 +0800 s3: Make winbindd_cache.c aware of domain offline to avoid unnecessary backend query. Signed-off-by: Bo Yang boy...@samba.org (cherry picked from commit 133638c8aea7280d01b5a23150428977e9ff0e11) (cherry picked from commit 063a2ceb9192a5b1820a7e115decc49357f2b3b6) commit 2764612487697e2e35bede3dbf4f41c1fea0e9c7 Author: Bo Yang boy...@samba.org Date: Wed Jan 6 12:13:35 2010 +0800 s3: Fix infinite loop in NCACN_IP_TCP asa there is no timeout. Assume lsa_pipe_tcp is ok but network is down, then send request is ok, but select() on writeable fds loops forever since there is no response. Signed-off-by: Bo Yang boy...@samba.org (cherry picked from commit 36493bf2f6634b84c57107bcb86bcbf3e82e80fc) (cherry picked from commit b58b359881c91ec382cfa1d6ba3007b8354b29cb) commit f5e81c55a768027fc9fb72122a54913b0e5f8a2d Author: Kai Blin k...@samba.org Date: Tue Jan 5 09:54:04 2010 +0100 s3 net: Fix up a share type translation and translate some more strings (cherry picked from commit da41f23bdad1ea3a1a49110217cfde3efcde5075) (cherry picked from commit 0272f44061fa9205bb744e286b6203e15e157a6e) commit b9d00a64d2f71a2b268ffdff4c8c918f44f8a749 Author: Kai Blin k...@samba.org Date: Tue Jan 5 09:43:34 2010 +0100 s3 net: Add a few missing gettext calls. Many many thanks to Adi Roiban from #ubuntu-translators for helping me find and fix my problems with the translations. (cherry picked from commit 9a9d737070bfde62f2d5a35ad25606da578f9f7e) (cherry picked from commit dda309191e8927ffcea8724db1a65c422f90e6b9) commit a63b54a541c97d52c4f715f54415bf8695b6dd9f Author: André Hentschel n...@dawncrow.de Date: Mon Dec 28 02:58:40 2009 +0100 net: Add some German translation Signed-off-by: Kai Blin k...@samba.org (cherry picked from commit b0dd364cdde107577c74a91f3a65989e97a2c073) (cherry picked from commit ba2cc29fe0ebd4282ddd19026759bae2c93c) --- Summary of changes: source3/include/proto.h |5 + source3/locale/net/de.po| 2070 --- source3/rpc_client/cli_pipe.c | 26 +- source3/rpc_client/ndr.c| 15 + source3/rpc_client/rpc_transport_np.c | 12 + source3/rpc_client/rpc_transport_smbd.c | 10 + source3/rpc_client/rpc_transport_sock.c | 53 + source3/smbd/pipes.c| 10 + source3/utils/net_help.c|4 +- source3/utils/net_util.c|8 +- source3/winbindd/winbindd_cache.c | 380 ++- source3/winbindd/winbindd_cm.c |3 +- source3/winbindd/winbindd_rpc.c | 14 +- 13 files changed, 1603 insertions(+), 1007 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/include/proto.h
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated
via 919b1bd... WHATSNEW: Update changes.
via 68c1d26... s3: Happy New Year 2010
via ad67530... Prevent NULL dereference if group has no members (cherry
picked from commit 8c3dd08f6a361a24799f5ec958668e477b8127d0)
from ea7c356... WHATSNEW: Update changes.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable
- Log -
commit 919b1bdacb97cc7e90b251428c63587dcab4cee9
Author: Karolin Seeger ksee...@samba.org
Date: Mon Jan 4 14:42:46 2010 +0100
WHATSNEW: Update changes.
Karolin
(cherry picked from commit 26a85914e38acb4f83ee535618aeb05453dd1bf6)
commit 68c1d26d7998f1779880ccc560cb82e8e54bceb5
Author: Stefan Metzmacher me...@samba.org
Date: Mon Jan 4 08:42:03 2010 +0100
s3: Happy New Year 2010
metze
(cherry picked from commit 2ed51fbc4c3ff576db31c0258a91dc6347aae670)
Signed-off-by: Stefan Metzmacher me...@samba.org
(cherry picked from commit 1ea5e114f3bb5fb22a7dab36b69a08e5a09df50d)
commit ad6753083c47ef23ad80b7ea87b3f197da56c378
Author: Jim McDonough j...@samba.org
Date: Wed Dec 30 15:04:55 2009 -0500
Prevent NULL dereference if group has no members
(cherry picked from commit 8c3dd08f6a361a24799f5ec958668e477b8127d0)
---
Summary of changes:
WHATSNEW.txt|4
source3/include/smb.h |2 +-
source3/winbindd/winbindd_rpc.c |8
3 files changed, 9 insertions(+), 5 deletions(-)
Changeset truncated at 500 lines:
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index a7906c8..eb0c8f3 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -142,6 +142,10 @@ o Simo Sorce i...@samba.org
* Change the way mksysms work in libtalloc.
+o Jim McDonough j...@samba.org
+* BUG 7014: Fix Winbind crash when retrieving empty group members.
+
+
o Stefan Metzmacher me...@samba.org
* Add tsocket_address_bsd_sockaddr() and
tsocket_address_bsd_from_sockaddr()
to tsocket.
diff --git a/source3/include/smb.h b/source3/include/smb.h
index 4affd4a..b23ea64 100644
--- a/source3/include/smb.h
+++ b/source3/include/smb.h
@@ -27,7 +27,7 @@
#define _SMB_H
/* logged when starting the various Samba daemons */
-#define COPYRIGHT_STARTUP_MESSAGE Copyright Andrew Tridgell and the
Samba Team 1992-2009
+#define COPYRIGHT_STARTUP_MESSAGE Copyright Andrew Tridgell and the
Samba Team 1992-2010
#if defined(LARGE_SMB_OFF_T)
diff --git a/source3/winbindd/winbindd_rpc.c b/source3/winbindd/winbindd_rpc.c
index e7a1f86..8797aeb 100644
--- a/source3/winbindd/winbindd_rpc.c
+++ b/source3/winbindd/winbindd_rpc.c
@@ -782,16 +782,16 @@ static NTSTATUS lookup_groupmem(struct winbindd_domain
*domain,
if (!NT_STATUS_IS_OK(result))
return result;
- *num_names = rids-count;
- rid_mem = rids-rids;
-
- if (!*num_names) {
+ if (!rids || !rids-count) {
names = NULL;
name_types = NULL;
sid_mem = NULL;
return NT_STATUS_OK;
}
+ *num_names = rids-count;
+ rid_mem = rids-rids;
+
/* Step #2: Convert list of rids into list of usernames. Do this
in bunches of ~1000 to avoid crashing NT4. It looks like there
is a buffer overflow or something like that lurking around
--
Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via ea57f91... VERSION: Raise version number up to 3.5.0rc1. from 919b1bd... WHATSNEW: Update changes. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit ea57f91c3838b77ac531bdffc05585fe5cdb5739 Author: Karolin Seeger ksee...@samba.org Date: Mon Jan 4 16:36:14 2010 +0100 VERSION: Raise version number up to 3.5.0rc1. Karolin (cherry picked from commit e7431770b6966ea62d08bb8d25df6ceb5efebbc6) --- Summary of changes: source3/VERSION |4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/VERSION b/source3/VERSION index e06aae6..3addc63 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -46,7 +46,7 @@ SAMBA_VERSION_REVISION= # e.g. SAMBA_VERSION_PRE_RELEASE=1 # # - 2.2.9pre1 # -SAMBA_VERSION_PRE_RELEASE=2 +SAMBA_VERSION_PRE_RELEASE= # For 'rc' releases the version will be# @@ -56,7 +56,7 @@ SAMBA_VERSION_PRE_RELEASE=2 # e.g. SAMBA_VERSION_RC_RELEASE=1 # # - 3.0.0rc1 # -SAMBA_VERSION_RC_RELEASE= +SAMBA_VERSION_RC_RELEASE=1 # To mark SVN snapshots this should be set to 'yes'# -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via ea7c356... WHATSNEW: Update changes. via 3b0deeb... s3: Check for lp_winbind_trusted_domains_only in wb_gettoken() via 208a83b... s3: Move a lp_winbind_trusted_domains_only() check to wb_getgrsid() via e0d2d1c... s3: Pass netr_DomainTrustList instead of names and sids through (*trusted_domains) (cherry picked from commit a4def0bfd88fb9c951f87834e07791e07a966727) via c0625dc... s3: Simplify winbindd_ads.c:trusted_domains() via 633a95b... s3: Remove some unused code via 411c265... s3: Simplify winbindd_list_trusted_domains() slightly (cherry picked from commit a85067e00013254caf358e05ccba5fae7e875c49) via 9b37950... s3: Simplify setup_domain_child slightly (cherry picked from commit f85a5f0508999b5c3c586353e0decd95178a5957) via d53ad85... s3:winbind Make the normal client exit message a bit more understandable (cherry picked from commit 00b62c64f33a5fc2cd5170b31324fb0d2e1cdf7b) via f10fe61... s3: Fix a typo found by Matthias Dieter Wallnöfer m...@samba.org -- thanks :-) (cherry picked from commit f8e3fee3fe42e15fbfdbeeadd17f6ee1392687a5) via 1431e82... s3: Fix a bogus uninitialized variable warning (cherry picked from commit 2b0ffa2b9a5b95608102437d9be7ba2c4a18515d) via 7d66137... s3: Replace IS_DOMAIN_OFFLINE by a function (cherry picked from commit 826aaecc6bca06a8d978530859e2e985197811a5) via 6363ce7... s3: Fix some nonempty blank lines (cherry picked from commit b4dd801f457e142f5a412bf8af9edcfb3c0f86d4) via 615b72f... s3: winbindd_cli_state-getgrent_state is no longer used (cherry picked from commit 6b6b47c0baf014e8e97e49fd81668297682e3ac7) via 321f988... s3: getgrent_state has been replaced by grent_state (cherry picked from commit 48945cd1ebfa657ae96217200dd5a06dbe90729b) via f7b5876... s3: Remove unused delete_negative_conn_cache() (cherry picked from commit 413f458984241b28e79e7ad127f6104c76374e71) via 71e19ec... s3: Remove unused flush_negative_conn_cache() (cherry picked from commit d40510055c835d13d6e6b5f6a6e76046d67d7692) via 1274009... s3: Remove some unnecessary variables from libsmb/conn_cache.c (cherry picked from commit e599a467b1bcb1f17e9e14bb04460031973d1d4e) via d3015de... s3: Fix a comment in conn_cache.c (cherry picked from commit 1090d6745678cb21b234aa61ba7c373a786a217e) via b1f00db... s3: Fix a 64-bit error (cherry picked from commit b1effa274513b2b22313e80140601fa59e79) via 4f92f83... s3: Remove some pointless SMB_ASSERTs (cherry picked from commit 1eb6d313d358774d637471481cf4292554ec9453) via 0041781... s3: Remove some pointless casts (cherry picked from commit d3855f78be27b21d1d56bf9ceda3f2b7bbb52d73) via b882490... Attempt to fix one of the last two bugs with the full Windows ACL support. via 88a4a62... The posix acl version of set_nt_acl() could set the stat_ex struct in the fsp-fsp_name pointer incorrectly for a directory. via 806ac45... doc: update mount.cifs man page with nounix option via 81557a4... s3: wbinfo --ping-dc is not cacheable (cherry picked from commit c8733d989981315b422857e7b4be9a2035914606) via ab35ec5... s3: Remove some unused code (cherry picked from commit 1eb03d6090a80316925de996b0af72eb70f7dc44) via a680b87... s3: Remove unused sendto_child() (cherry picked from commit 791b6d37a9e07d6f009a6fa9d575c4471ecb84a3) from 621ad11... WHATSNEW: Update changes. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit ea7c3567aa3963c7c35a7de0fd4b5c08c1d8cfec Author: Karolin Seeger ksee...@samba.org Date: Tue Dec 29 11:19:36 2009 +0100 WHATSNEW: Update changes. Karolin (cherry picked from commit 86def5d9f2618cff4d22122e651988c9a608ba96) commit 3b0deeb861a6025917e6b18badff619fa9361825 Author: Volker Lendecke v...@samba.org Date: Mon Dec 28 23:35:25 2009 +0100 s3: Check for lp_winbind_trusted_domains_only in wb_gettoken() This avoids one walk of the domain list (cherry picked from commit 10ae5a1a20852a3ebd582eb051f92ee08f61c50f) commit 208a83b859f7d08174a20a810e79ed2718d00797 Author: Volker Lendecke v...@samba.org Date: Mon Dec 28 23:14:43 2009 +0100 s3: Move a lp_winbind_trusted_domains_only() check to wb_getgrsid() winbindd_getgrgid was not protected by this. (cherry picked from commit 7929e7854eaf69a5893fd5f63d97ff5dff864f31) commit e0d2d1c58de4e7cde1b1d5725b7a65c675f816de Author: Volker Lendecke v...@samba.org Date: Mon Dec 28 15:51:36 2009 +0100 s3: Pass netr_DomainTrustList instead of names and sids through (*trusted_domains) (cherry picked from commit a4def0bfd88fb9c951f87834e07791e07a966727) commit c0625dcc189957083c5bfc93b7848ec5db942998 Author: Volker Lendecke v...@samba.org Date: Mon Dec 28
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 61ba90a... WHATSNEW: Update changes since 3.5.0pre2. via 7f1f838... WHATSNEW: Fix typo. via acaad79... s3: Fix an error case in cli_negprot (cherry picked from commit 13f8f0c74ea1f34817603beedf8cc4d5e41f958f) via c62c4c5... Fix release script to work with recent git versions (cherry picked from commit 7f956869ff7a8e481afb9db0c52a0d74d809867a) via 178c3ab... talloc: Fix exports and increment talloc version (cherry picked from commit 6618a062a19660a718074f6e6155339451b7a5b6) via 4f48755... talloc: Make abi checks in release script via f3c36ad... talloc: Move release script under /script too (cherry picked from commit 8e6df560b74d7e9b94dd47625de56bc1dc0bc6d7) via de15bab... talloc: Change the way mksysms work via 17ea675... Fix release script with newer versins of git (cherry picked from commit 4334092cbae28181ba0d1cf2ac026961f2192972) via b4a30e6... tdb tools: Mostly cosmetic adaptions via 11d50d2... tdb: change version to 1.2.0 after adding TDB_*ALLOW_NESTING via 61c6d18... tdb: add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior via 0b43209... New attempt at TDB transaction nesting allow/disallow. via 13ad49d... tdb: always set tdb-tracefd to -1 to be safe on goto fail via 01d15e9... tdb: update README a bit via 37aa2b9... tdb: add tests for double .close() in pytdb via bf980ca... tdb: reset tdb-fd to -1 in tdb_close() via a777d88... tdb: fix typo in python's Tdb.get() docstring via 3f95bb1... tdb: kill last bits from swig via 460f3c1... tsocket: Fixed tsocket_guide.txt asciidoc syntax. (cherry picked from commit a5bdab8b32768282270315f880f980d99ebb9a2e) via 89c... tsocket: Fixed documentation for tsocket_address_bsd_sockaddr(). (cherry picked from commit e33ae22b87597f31caefd5466bb8e8f240405972) via 8602c2b... tsocket: Fixed typo in LGPL header. (cherry picked from commit ab04dd3be743806bf3c9cf9db4b5326ce0476bf5) via dec3935... tsocket: add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr() via 54ef6a7... tevent: prefix types and defined with tevent_ and TEVENT_ via 9175a09... Output %p as unsigned in snprintf replacement. (cherry picked from commit 8aba573cd9cd1c1f10b8aa9363e0b6dad2933bef) via 4a90e72... Actually explain the twisty paths of tortured logic behind reply_doserror(), reply_nterror(), and reply_nterror(NT_STATUS_DOS()). via 1f208f1... reply_doserror() doesn't force DOS errors on the wire. via 8b30004... reply_force_nterror() is not used anywhere. Remove it. Jeremy. (cherry picked from commit 69d26d25f7f2a46e87337fa50af4ed0a1b11a2b5) (cherry picked from commit a29eff82703e9f309c9b1aa78581dd94d8f8dafd) via 5f9c86e... s3: re-run make samba3-idl. via 77b4824... s3-docs: mention pam_winbind.conf(5) manpage in pam_winbind(8) manpage. via cb800b3... s3-docs: add new pam_winbind.conf(5) manpage. via 9151116... s4-smbtorture: skip GetAliasMembership against s4. via 21b63da... s4-smbtorture: add a samr_GetAliasMembership test to RPC-SAMR. via e76c8b5... tdbtool: avoid using c++ reserved words. via df0d2bf... s4-smbtorture: fix smbtorture after setprinter IDL fixes. via 1ff1ab8... s3-spoolss: fix rpcclient after setprinter IDL fixes. via 794bae1... spoolss: more mork on SetPrinterInfo() levels. via afd1ef4... spoolss: add spoolss_DriverInfo7. via c8b9660... s3-pdbedit: allow to call pdbedit -N description -u user without specifiyng -r. via e5f37cd... s4-smbtorture: run GetPrinterDriver2 tests against each printer's driver. via cf8907c... Always map EMFILE to ERRDOS, ERRnofids, *NOT* NT_STATUS_TOO_MANY_OPENED_FILES. This is what W2KR3 does for NTCreateX and openX calls. May be the correct fix for bug 6837 - Too many open files when trying to access large number of files. Jeremy. (cherry picked from commit 6585621d367d997b79ffb99e0a8743766e6ff6d2) (cherry picked from commit e315849277ef307018d6dc93a1df04792f36a435) via 082ad52... Vector correctly through reply_openerror() (which uses the same logic). Jeremy. (cherry picked from commit d1a5387580182884d3cc875f3f404ff8377c1e92) (cherry picked from commit 9bef3b2030a9210acc38fd0102fb4274f34ab296) via c3ea51d... Update default with correct value. Add a note about Win7 behavior here. Jeremy. (cherry picked from commit fbf4923cad17b55bd7a647bf2300b28e23b8cdbb) (cherry picked from commit 8f8c7976f07879036e76fdd9de9d5a42cc57324e) via 681f633... Fix bug #6939 - mangling method = hash breaks long filenames. via 5d6a23c... s3: Fix bug 6992, make test for getgrouplist cacheable (cherry picked from commit f0f4e5b9c3b8c640bf1829a9a12bcdfa7d2c153a) via 2771f3c... Final part of the fix
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 2b0f402... WHATSNEW: Update changes since 3.5.0pre1. via 5511fd4... s3: Allow up to 20480 entries in LookupSids, as mandated by the official IDL via ebe81ca... spoolss: fix spoolss_PrinterData size calculation. via c760b75... spoolss: trivial fix for spoolss_FormInfo2 IDL. via 581982d... s4-smbtorture: check whether a returned buffer size is a multiple of 4 in RPC-SPOOLSS. via 78c80fe... s3-selftest: enable RPC-SAMBA3-WINREG. via 3a29aab... s3-rpcclient: allow to set offered size for enumkey command. via 22f30db... s4-smbtorture: add more spoolss_EnumPrinterKey tests for local NDR test. via f33b191... spoolss: remove unused spoolss_StringArray2. via e5d0a0b... s4-smbtorture: fix and extend enum printerkey test. via 60d8b62... s3-spoolss: fix enumprinter key client and server. via aec9d64... s3: re-run make samba3-idl. via 6a5ffe8... spoolss: use spoolss_KeyNames in spoolss_EnumPrinterKey. via b4fc954... spoolss: add spoolss_KeyNames union. via 93fb4f1... s4-smbtorture: enhance spoolss_EnumPrinterKey torture test. via 371c423... s3-spoolss: use SPOOLSS_ARCHITECTURE_ALL in driver enum server code. via 47ac175... spoolss: add more spoolss architectures to IDL. via cacdb92... spoolss: fix spoolss_DriverInfo8 IDL. via 7053b13... s4-smbtorture: make level 8 the reference for PrinterDriverEnum test. via 9982340... s3-spoolss: cleanup _spoolss_EnumPrinterDrivers(). via ee88c71... s3-spoolss: remove unused architecture from fill_printer_driver_info1(). via 5b8753b... s3-spoolss: remove ridiculous amount of duplicate driver code. via b979e0b... s3-spoolss: fully support level 8 drivers. via 82fbd83... s3-spoolss: use driver level info8 everywhere in spoolss server internally. via d5efd83... s4-smbtorture: fill in COMPARE_STRING_ARRAY macro in spoolss driver test. from ec1e4fb... s3:docs: Fix 'make manpages3'. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 2b0f402f113bd51ce8bdae6062af0533d3b44b49 Author: Karolin Seeger ksee...@samba.org Date: Tue Dec 15 08:26:11 2009 +0100 WHATSNEW: Update changes since 3.5.0pre1. Karolin (cherry picked from commit c289e6e3f0a1faf1dcd39d1af7825335af8a89ca) commit 5511fd4193f75d0a911f86fe859af9eb9df2310d Author: Volker Lendecke v...@samba.org Date: Mon Dec 14 16:48:38 2009 +0100 s3: Allow up to 20480 entries in LookupSids, as mandated by the official IDL Seen in the wild by putting 1000 users into BUILTIN\Users (cherry picked from commit 477edb8bdf3def827c398c4fc01dffd2071ea77e) commit ebe81ca6f19ec10173cdd4d867e9ca3440d47fd7 Author: Günther Deschner g...@samba.org Date: Sat Dec 12 02:52:41 2009 +0100 spoolss: fix spoolss_PrinterData size calculation. Currently we were crashing in EnumPrinterDataEx when an e.g. an empty (NULL) string for a separator file was returned. Guenther (cherry picked from commit e316624ddb8d4e178b03b315bfafd793e6c297c8) (cherry picked from commit 4520862918ba2cff025b15d84922fbb08d8abbf6) commit c760b755f637d0b91f8758c963de903133d847f5 Author: Günther Deschner g...@samba.org Date: Sat Dec 12 02:51:44 2009 +0100 spoolss: trivial fix for spoolss_FormInfo2 IDL. Guenther (cherry picked from commit 5ae61cfbc281f346fd3712a975c5796f9cfbc6c2) (cherry picked from commit 43ff4f2628882f9fa51bbe37f6cbe776f62241a3) commit 581982da3bcfb0533f28f0e667df47528250e61e Author: Günther Deschner g...@samba.org Date: Sat Dec 12 01:51:13 2009 +0100 s4-smbtorture: check whether a returned buffer size is a multiple of 4 in RPC-SPOOLSS. This gives a good indication where our IDL (and the s3 spoolss implementation) is still wrong. Guenther (cherry picked from commit 801fbd05691819ce9afadf4817bf1bf8ccc28a02) (cherry picked from commit 73da0de2eaa2dec3ef1ebeee9dccaf81201dc7ba) commit 78c80fe6633f9f8c56c634902dfd05607a0dcfb7 Author: Günther Deschner g...@samba.org Date: Thu Dec 10 20:38:32 2009 +0100 s3-selftest: enable RPC-SAMBA3-WINREG. Very strange we didn't run it before. Guenther (cherry picked from commit 31202a9dab330ed939b4ea71349c816707adff95) (cherry picked from commit 4e218472de4c5a2b79fd6c8115e8877d253c33b5) commit 3a29aab1e0db7f4f352a2204c11890a986c38dce Author: Günther Deschner g...@samba.org Date: Wed Dec 9 15:49:46 2009 +0100 s3-rpcclient: allow to set offered size for enumkey command. Guenther (cherry picked from commit c2618d2c6f8657c30cd0f68777d3f37e64172191) (cherry picked from commit ee7944ed987bd0e4dc1315ffcac09fd2fd37bfe9) commit 22f30db8d006ccb0610ce0a4473d9266bfaf1080 Author: Günther Deschner g...@samba.org
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via ec1e4fb... s3:docs: Fix 'make manpages3'. from ea24a32... WHATSNEW: Update changes since Samba 3.5.0pre1. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit ec1e4fb9527dcd45056d4e161b50b4c0fa2fbab7 Author: Karolin Seeger ksee...@samba.org Date: Mon Dec 14 08:58:50 2009 +0100 s3:docs: Fix 'make manpages3'. Karolin (cherry picked from commit f740bdc47bb53dc6d17e48e1ad9c6f5fdd9ff102) (cherry picked from commit d8b3be2ecff99218e10616b1e3391830da5d55f5) --- Summary of changes: docs-xml/smbdotconf/ldap/ldapderef.xml |4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/docs-xml/smbdotconf/ldap/ldapderef.xml b/docs-xml/smbdotconf/ldap/ldapderef.xml index e4868a6..d102f51 100644 --- a/docs-xml/smbdotconf/ldap/ldapderef.xml +++ b/docs-xml/smbdotconf/ldap/ldapderef.xml @@ -8,8 +8,8 @@ to use a certain alias dereferencing method. The default is emphasisauto/emphasis, which means that the default setting of the ldap client library will be kept. Other possible values are - emphasisnever/emphasis, /emphasisfinding/emphasis, - /emphasissearching/emphasis and emphasisalways/emphasis. Grab + emphasisnever/emphasis, emphasisfinding/emphasis, + emphasissearching/emphasis and emphasisalways/emphasis. Grab your LDAP manual for more information. /para -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via ea24a32... WHATSNEW: Update changes since Samba 3.5.0pre1. via 9b94aec... s3: Fix a very embarrassing build failure (cherry picked from commit d2453d9a944e2d8ecebeecb94014057dd4fc0fd6) via f364a3c... s3:docs: document ldap deref (cherry picked from commit 54d072b83c53f393253052efd5197b48fac61acb) via 66a64e4... s3: add LDAP Alias Dereferencing support via ab21c2c... s3: keep subsecond times on cross-filesystem moves and don't follow links (cherry picked from commit faccec7b97b469b170932f27d8b7e0baf985a909) via 32aa54b... s3:packaging: Fix version detection. via ae6e1fe... s3:packaging: Fix source dir. via 8805cb6... s3:packaging: Fix typo in comment. via 1980094... s3: check for PAM_RADIO_TYPE. via 6552778... s3: Fix build on non-linux platform. via 95d0192... s3: Give the user a chance to change password when password will expire soon. via 19ed997... s3:doc: make dos filetimes description less contradictory (cherry picked from commit 2a6391bc43cf2550731039bf158d561b307c9c58) via 3647eb0... s3: make sys_posix_fallocate more generic via 925e825... s3: allocate only new space, not old sparse space in the posix_fallocate path from 352adf3... WHATSNEW: Add changes since 3.5.0pre1. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit ea24a32d4511a643b26c4abd69e5c40ec924ac5d Author: Karolin Seeger ksee...@samba.org Date: Mon Dec 14 08:39:54 2009 +0100 WHATSNEW: Update changes since Samba 3.5.0pre1. Karolin (cherry picked from commit 8804b13c96dd0d8334762f968a349d1e432a1acc) commit 9b94aec3d9415330a88aeff0261eab1f9c3aaae7 Author: Volker Lendecke v...@samba.org Date: Sat Dec 12 16:58:31 2009 +0100 s3: Fix a very embarrassing build failure (cherry picked from commit d2453d9a944e2d8ecebeecb94014057dd4fc0fd6) commit f364a3cdfaf3f658f5f33d24a9ce55bf5ed0cf15 Author: Björn Jacke b...@sernet.de Date: Fri Dec 11 13:28:31 2009 +0100 s3:docs: document ldap deref (cherry picked from commit 54d072b83c53f393253052efd5197b48fac61acb) commit 66a64e4ebf56fc7eb61de25896a0a8adb7ec3d5d Author: Björn Jacke b...@sernet.de Date: Thu Dec 10 21:00:26 2009 +0100 s3: add LDAP Alias Dereferencing support Thanks to Dan Cox for initial patch for 3.0. This closes #2350. The default for ldap deref is auto which means the LDAP library's default behaviour will be used and samba does not set any dereferencing parameter by itself. (cherry picked from commit 8adbc166b230b37ff18ba70f2280a9a729240ff1) commit ab21c2c274f1a5d1e405da4be36c194a02141311 Author: Björn Jacke b...@sernet.de Date: Wed Dec 9 02:06:17 2009 +0100 s3: keep subsecond times on cross-filesystem moves and don't follow links (cherry picked from commit faccec7b97b469b170932f27d8b7e0baf985a909) commit 32aa54bec778f13f0c69d91f61a322c3739f6b84 Author: Karolin Seeger ksee...@samba.org Date: Thu Dec 10 14:57:08 2009 +0100 s3:packaging: Fix version detection. Adapted from 728b01fc03. Thanks god I was not root! It would have delted /*! Karolin (cherry picked from commit 0604c696a05773a439538d88f1b45aa6637766a7) (cherry picked from commit fd30552aab88572b2d5944b9b87ee8ca76d29b35) commit ae6e1fee100e12b88cc258f4dfebfcbbf33bac06 Author: Karolin Seeger ksee...@samba.org Date: Thu Dec 10 14:26:58 2009 +0100 s3:packaging: Fix source dir. Karolin (cherry picked from commit 85e79a2a03e8c1c6275363c39b0fa71283214562) (cherry picked from commit 1ed3172d10ca96816ec548996953579ec55da660) commit 8805cb66d802e16630440d0abdded526ac8891e6 Author: Karolin Seeger ksee...@samba.org Date: Thu Dec 10 14:08:43 2009 +0100 s3:packaging: Fix typo in comment. Karolin (cherry picked from commit b5011ba2c897fa177f1e22dde075055b9ffd271d) (cherry picked from commit 3b812b134d819097df51bb20bdb4fd856f4ad00d) commit 1980094125fb02ebb81960d4632adace29c32d1f Author: Bo Yang boy...@samba.org Date: Thu Dec 10 19:29:24 2009 +0800 s3: check for PAM_RADIO_TYPE. Signed-off-by: Bo Yang boy...@samba.org (cherry picked from commit c7e3a2dc319cc6504356be7fa7970917404a69b5) (cherry picked from commit fa572721577732c1b5d1cd32de4479a34c895919) commit 6552778ed65a65268b14dc0ef88a0fd9da3e62b3 Author: Bo Yang boy...@samba.org Date: Thu Dec 10 17:20:03 2009 +0800 s3: Fix build on non-linux platform. Signed-off-by: Bo Yang boy...@samba.org (cherry picked from commit b386c3311d8c05ccbd075ab86be2ddace335b73b) (cherry picked from commit 9a522cd96d66f6a6cf5f483fb8928982bbe95ea4) commit 95d0192706b5f8caf2aa091a401aa6990d70986f Author: Bo Yang boy...@samba.org Date: Thu Dec 10 14:30:13 2009 +0800 s3: Give the user a chance to change password when
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 85d12a8... WHATSNEW: Start 3.5.0pre2 release notes. via 2f70d3e... VERSION: Raise version number up to 3.5.0pre2. from 31c1722... VERSION: Set version to 3.5.0pre1. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 85d12a89b607a135e163a3524253301ec4efae77 Author: Karolin Seeger ksee...@samba.org Date: Fri Nov 27 15:03:15 2009 +0100 WHATSNEW: Start 3.5.0pre2 release notes. Karolin (cherry picked from commit dc13391403cfea6a4a4de44a2d047d1be5d06817) commit 2f70d3e921bbcb5dd099378d4779169c0dc32ebd Author: Karolin Seeger ksee...@samba.org Date: Fri Nov 27 15:01:52 2009 +0100 VERSION: Raise version number up to 3.5.0pre2. Karolin (cherry picked from commit d7c84cdc41751b04d951eae31e1ca25f0a2a019f) --- Summary of changes: WHATSNEW.txt|6 +++--- source3/VERSION |2 +- 2 files changed, 4 insertions(+), 4 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 53fdc34..764f545 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,9 +1,9 @@ = - Release Notes for Samba 3.5.0pre1 - November 26, 2009 + Release Notes for Samba 3.5.0pre2 + December 15, 2009 = -This is the first preview release of Samba 3.5. This is *not* +This is the second preview release of Samba 3.5. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. diff --git a/source3/VERSION b/source3/VERSION index b5bd528..e06aae6 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -46,7 +46,7 @@ SAMBA_VERSION_REVISION= # e.g. SAMBA_VERSION_PRE_RELEASE=1 # # - 2.2.9pre1 # -SAMBA_VERSION_PRE_RELEASE=1 +SAMBA_VERSION_PRE_RELEASE=2 # For 'rc' releases the version will be# -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated
via c4e2824... WHATSNEW: Prepare 3.5.0pre1 release notes.
via 4e16962... librpc: rerun make idl
via c474675... pidl:Samba3/ClientNDR: $size can be 'foo / 2' so we need
to add '(' and ')'
via 164a33d... pidl:NDR/Parser: $size can be 'foo / 2' so we need to
add '(' and ')'
from e3bcc3e... create-tarball: Make it more comfortable to use the
--copy-docs option.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable
- Log -
commit c4e282456b3f68baf935374183548b18b1ed3c1b
Author: Karolin Seeger ksee...@samba.org
Date: Thu Nov 26 14:11:09 2009 +0100
WHATSNEW: Prepare 3.5.0pre1 release notes.
Karolin
(cherry picked from commit c5604437a857b7ac0c09d94dc6550180f68121ba)
commit 4e169622d47d7fc560e2e038e4ea5e5c8e16c8ea
Author: Stefan Metzmacher me...@samba.org
Date: Wed Nov 25 14:42:24 2009 +0100
librpc: rerun make idl
metze
(cherry picked from commit 49553d066ba346b28286b72f54e5ee8739cbcef2)
(cherry picked from commit f275c437b170f3d11a183306b77f8755bda6e688)
commit c4746758fe7b3e2e352cfa6f9efd39a40f9f39c5
Author: Stefan Metzmacher me...@samba.org
Date: Wed Nov 25 14:31:34 2009 +0100
pidl:Samba3/ClientNDR: $size can be 'foo / 2' so we need to add '(' and ')'
foo / 5 * sizeof(bar)' isn't the same as
'(foo / 2) * sizeof(bar)'.
metze
(cherry picked from commit a20e095b1fffb6d690609c924d03cafedbbce8f3)
(cherry picked from commit 941aa3f8fc43c1720e1b59d1dbcec290eae1abc6)
commit 164a33d4e9d6b90507d2db96a24c67eb514b5af4
Author: Stefan Metzmacher me...@samba.org
Date: Wed Nov 25 14:21:32 2009 +0100
pidl:NDR/Parser: $size can be 'foo / 2' so we need to add '(' and ')'
foo / 5 * sizeof(bar)' isn't the same as
'(foo / 2) * sizeof(bar)'.
metze
(cherry picked from commit ab1c92950f3cfdc8c52b772ecef23a5477f48f9d)
(cherry picked from commit e58955fd4ca1500e58045417711b469a485419af)
---
Summary of changes:
WHATSNEW.txt | 17 +---
librpc/gen_ndr/cli_echo.c|8 +++---
librpc/gen_ndr/cli_epmapper.c|8 +++---
librpc/gen_ndr/cli_eventlog.c|8 +++---
librpc/gen_ndr/cli_ntsvcs.c |8 +++---
librpc/gen_ndr/cli_spoolss.c | 36 +-
librpc/gen_ndr/cli_srvsvc.c |4 +-
librpc/gen_ndr/cli_svcctl.c | 40 +++---
librpc/gen_ndr/cli_winreg.c | 16 ++--
librpc/gen_ndr/ndr_winreg.c |4 +-
pidl/lib/Parse/Pidl/Samba3/ClientNDR.pm |4 +-
pidl/lib/Parse/Pidl/Samba4/NDR/Parser.pm |2 +-
pidl/tests/samba3-cli.pl |2 +-
source4/selftest/config.mk |2 +-
14 files changed, 73 insertions(+), 86 deletions(-)
Changeset truncated at 500 lines:
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 9823d89..53fdc34 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,6 +1,6 @@
=
Release Notes for Samba 3.5.0pre1
-
+ November 26, 2009
=
This is the first preview release of Samba 3.5. This is *not*
@@ -23,6 +23,7 @@ Winbind changes:
o Major refactoring
o Asynchronous
+
General changes:
@@ -68,11 +69,6 @@ smb.conf changes
ldap follow referral New auto
-New [sub]commands
--
-
-
-
New configure options
-
@@ -86,15 +82,6 @@ New configure options
Commit Highlights
=
-
-o Jeremy Allison j...@samba.org
-*
-
-
-o Günther Deschner g...@samba.org
-*
-
-
o Björn Jacke bja...@sernet.de
* Add support for full Windows timestamp resolution.
* Add encryption support for connections to a CUPS server.
diff --git a/librpc/gen_ndr/cli_echo.c b/librpc/gen_ndr/cli_echo.c
index 52aa8c5..04d4bbc 100644
--- a/librpc/gen_ndr/cli_echo.c
+++ b/librpc/gen_ndr/cli_echo.c
@@ -219,7 +219,7 @@ static void rpccli_echo_EchoData_done(struct tevent_req
*subreq)
}
/* Copy out parameters */
- memcpy(state-orig.out.out_data, state-tmp.out.out_data,
state-tmp.in.len * sizeof(*state-orig.out.out_data));
+ memcpy(state-orig.out.out_data, state-tmp.out.out_data,
(state-tmp.in.len) * sizeof(*state-orig.out.out_data));
/* Reset temporary structure */
ZERO_STRUCT(state-tmp);
@@ -274,7 +274,7 @@ NTSTATUS rpccli_echo_EchoData(struct rpc_pipe_client *cli,
}
/* Return variables */
- memcpy(out_data, r.out.out_data, r.in.len * sizeof(*out_data));
+ memcpy(out_data, r.out.out_data, (r.in.len) * sizeof(*out_data));
[SCM] Samba Shared Repository - branch v3-5-stable updated
The branch, v3-5-stable has been updated via 31c1722... VERSION: Set version to 3.5.0pre1. from c4e2824... WHATSNEW: Prepare 3.5.0pre1 release notes. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable - Log - commit 31c172264473241b7edf20e1dca80adf10ca7882 Author: Karolin Seeger ksee...@samba.org Date: Thu Nov 26 14:16:00 2009 +0100 VERSION: Set version to 3.5.0pre1. Karolin --- Summary of changes: source3/VERSION |6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/VERSION b/source3/VERSION index 5296aff..b5bd528 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -46,7 +46,7 @@ SAMBA_VERSION_REVISION= # e.g. SAMBA_VERSION_PRE_RELEASE=1 # # - 2.2.9pre1 # -SAMBA_VERSION_PRE_RELEASE= +SAMBA_VERSION_PRE_RELEASE=1 # For 'rc' releases the version will be# @@ -68,7 +68,7 @@ SAMBA_VERSION_RC_RELEASE= # e.g. SAMBA_VERSION_IS_SVN_SNAPSHOT=yes # # - 3.0.0-SVN-build-199 # -SAMBA_VERSION_IS_GIT_SNAPSHOT=yes +SAMBA_VERSION_IS_GIT_SNAPSHOT=no # This can be set by vendors if they want... # @@ -84,7 +84,7 @@ SAMBA_VERSION_IS_GIT_SNAPSHOT=yes # SAMBA_VERSION_VENDOR_FUNCTION # # # -SAMBA_VERSION_VENDOR_SUFFIX=devel +SAMBA_VERSION_VENDOR_SUFFIX= SAMBA_VERSION_VENDOR_PATCH= -- Samba Shared Repository
