[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 7938d94d12e s4-selftest: add net offlinejoin tests via a8ad0eb4ae7 docs: document "net offlinejoin" set of commands via 575407dc2fc s3-net: add "net offlinejoin" command via ec6fd45d7b5 s3-libnetapi: add djoin tool via 3e3269d34b2 s3-libnetapi: implement NetRequestOfflineDomainJoin_l via e7a8aeee449 s3-libnetapi: add NetRequestOfflineDomainJoin example code via c1f937bfb1d s3-libnetapi: add NetRequestOfflineDomainJoin to api via 0816a3d9e60 s3-libnetapi: add NetRequestOfflineDomainJoin() boilerplate. via c97dac6d1be s3-libnetapi: add NetRequestOfflineDomainJoin to IDL via 3c8254a2faf s3-libnetapi: implement NetProvisionComputerAccount_l via 962c803947c s3-libnetapi: add NetProvisionComputerAccount example code via 8bf2a3f9c0b s3-libnetapi: add NetProvisionComputerAccount to api. via 3f71d1fa1c0 s3-libnetapi: add NetProvisionComputerAccount() boilerplate via b19a145e8f0 s3-libnetapi: add NetProvisionComputerAccount() to IDL via fc51b38ed8b s3-libnetapi: add netapi_save_file_ucs2() to example code via 3cfe663651f s3-libnetapi: add netapi_read_file helper via 44bd5049e14 s3-libnetapi: add offline domain join related error codes (not WERRORs) via 4d65b263563 s3-libnetapi: add missing NetJoinFlags for netapi via 1c62cac7f27 s3-libnetapi: add libnetapi_set_logfile() via 927390bae58 s3-libnetapi: add libnetapi_get_use_kerberos() via adcdb696cfe re-run make libnetapi via eff9610e7b0 s3-libnet_join: always check config correctness while joining offline via 799384792a8 s3-libnet_join: check for netbios name correctness as well via 33ed555e9bd s3-libnet_join: set netbios name as well when modification is requested via 8f3b9944857 s3-libnet_join: use dsgetonedcname to validate given DC via 7a9972943a4 s3-dsgetdcname: add dsgetonedcname() via de329620391 s3-libnet_join: use joinprov3 struct in libnet_DomainOfflineJoin() via 1581d63bfe0 s3-libnet_join: add support for libnet_DomainOfflineJoin via 997fbcbc902 s3-dsgetdcname: return dcinfo also when delivering from the cache. via 22d500ec541 s3-dsgetdcname: the returned dcinfo unc should always be prefixed via 91dcc7c889a s3-libnet_join: add request_offline_join flag via 0d75503421c s3-libnet_join: fully implement libnet_odj_compose_OP_JOINPROV3_PART via beaab062891 s3-librpc: add ODJ_PROVISION_DATA pointer to libnet_JoinCtx via 36db8faea38 s3-libnet_join: return account rid in libnet_JoinCtx via 793277c0ddd s3-libnet_join: add libnet_odj_find_joinprov3() via 80b8bbe4851 s3-libnet_join: add libnet_odj_find_win7blob to libnet_offline_join via 402d9032cbf s3-libnet_join: add some libnet_JoinCtx-to-ODJ helpers via ada1ed29cfc s3-libnet_join: return the allocated netr_DsRGetDCNameInfo struct via 9a0db8c8ed1 s3-rpc_client: add copy_netr_DsRGetDCNameInfo() helper via f37d5ea243f s3-libnet_join: let libnetjoin return a netr_DsRGetDCNameInfo via 9d9a1132119 s3-libnet_join: add new provision_computer_account_only flag via bd5dce667d8 s4-torture: add odj ndr testsuite via 705f9954582 librpc: make sure the 4 byte _pad in ODJ_WIN7BLOB is never 0 via 9963da126be librpc: more work on ODJ IDL via 91ff058420b librpc: add custom odj_switch_level_from_guid() via 8ff687863dd librpc: compile ODJ idl via dc40f23acd9 librpc: add "Offline Domain Join" (ODJ) IDL via 9cc62b562c9 librpc/ndr: do not print strings when NDR_SECRET is used from e168a95c1bb s3: VFS: Update status of SMB_VFS_READ_DFS_PATHAT. https://git.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 7938d94d12e5ed2790fdf3d5291c8d92e66f1b4a Author: Günther Deschner Date: Sat Jun 5 00:32:17 2021 +0200 s4-selftest: add net offlinejoin tests Guenther Signed-off-by: Guenther Deschner Reviewed-by: Alexander Bokovoy Autobuild-User(master): Günther Deschner Autobuild-Date(master): Wed Jul 14 17:38:21 UTC 2021 on sn-devel-184 commit a8ad0eb4ae76a59e62e65570e8c1a808a8419a7b Author: Günther Deschner Date: Tue Apr 13 18:45:56 2021 +0200 docs: document "net offlinejoin" set of commands Guenther Signed-off-by: Guenther Deschner Reviewed-by: Alexander Bokovoy commit 575407dc2fc9aa27a1301b74c827f3bb3fb5d0eb Author: Günther Deschner Date: Tue Mar 9 13:52:51 2021 +0100 s3-net: add "net offlinejoin" command Guenther Signed-off-by: Guenther Deschner Reviewed-by: Alexander Bokovoy commit ec6fd45d7b527a91ee4e2bc9fa03312e8cb65022 Author: Günther Deschner Date: Tue Feb 9 17:16:04 2021 +0100 s3-libnetapi: add djoin
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via c5cd5c9d57b WHATSNEW: add client/server smb3 signing/encryption
algorithms
via 898caeae630 s3:smbd: improve the error returns for invalid session
binding requests
via 1025e1bfea0 s4:torture: more smb2.session.bind_negative_smb3*
combinations
via 8ace94498fb docs-xml: offer aes-128-gmac by default
via 3f843e56a82 libcli/smb: add support for SMB2_SIGNING_AES128_GMAC
via 220c019933e s4:torture: force AES_CMAC or HMAC_SHA256 for some SMB
3.1.1 tests
via 982bdcf4270 libcli/smb: actually make use of "client/server smb3
signing algorithms"
via be71039be4e docs-xml: add "client/server smb3 signing algorithms"
options
via 4a61410f602 s3:smbd: prepare support for SMB2_SIGNING_CAPABILITIES
via 3706b27a3bc libcli/smb: prepare support for
SMB2_SIGNING_CAPABILITIES negotiation
via 4d33b08c0fb libcli/smb: make sure smb2_signing_calc_signature()
never generates a signature without a valid MID
via 89f0552c5e0 libcli/smb: make sure we always send a valid MID in
cancel PDUs
via e720ce4fadb libcli/smb: skip session setup signing for
REQUEST_OUT_OF_SEQUENCE, NOT_SUPPORTED and ACCESS_DENIED
via eeb09dfa6d7 libcli/smb: add
smb2cli_conn_server_{signing,encryption}_algo()
via c363825557a s3:smbd: make sure we don't try to sign CANCEL response
PDUs
via 90bc67f3221 s3:smbd: make sure STATUS_PENDING responses are never
signed
via b576123dd97 s3:smbstatus: pretty print the use of new
signing/encryption algorithms
via f435de5917f s3:smbd: only allow cancel with the same session
via 6447ae60b03 libcli/smb: add SMB2_SIGNING_CAPABILITIES related
defines to smb2_constants.h
via 6b775f030a8 libcli/smb: add SMB2_RDMA_TRANSFORM_CAPABILITIES
related defines to smb2_constants.h
via 24142c37964 libcli/smb: add SMB2_TRANSPORT_CAPABILITIES related
defines to smb2_constants.h
via 033716d9fdb lib/param: offer aes-256-{gcm,ccm} encryption by default
via d10153c8514 libcli/smb: add aes-256-{gcm,ccm} support to
smb2_signing_[en|de]crypt_pdu()
via 9b123bc97aa s3:smbd: let 'server smb3 encryption algorithms'
disable aes-128-ccm for SMB3_0*
via 9e6d3df68db libcli/smb: add smb311_capabilities_check() helper
via cf1459f458b libcli/smb: let 'client smb3 encryption algorithms'
disable aes-128-ccm for SMB3_0*
via 71b06682b68 s3:smbd: make use of 'server smb3 encryption algorithms'
via e0ba6f40c90 s4:param: make use of 'client smb3 encryption
algorithms'
via 53e37124e8f s3:libsmb: make use of 'client smb3 encryption
algorithms'
via 374f26aafa8 libcli/smb: add helpers to parse client/server smb3
encryption algorithms into struct smb311_capabilities
via 5ca01e48da3 docs-xml: add "client/server smb3 encryption
algorithms" options
via a702d781864 smb2_negprot: make use of struct
smb311_capabilities.encryption
via 4a7bd4c0c56 WHATNEW: document "server multi channel support" change
via 7f03d7c85e6 lib/param: enable "server multi channel support" by
default on Linux and FreeBSD
via f627727898d lib/param: add lpcfg_parm_is_unspecified() helper
via 95a3bf58881 s3:smbd: fallback to smb2srv_session_lookup_global()
for session setups with failed signing
via f8f4a9faf09 s3:smbd: remove dead code from
smbd_smb2_request_dispatch()
via 1781910df6d s3:smbd: make sure smbXsrv_session_update() doesn't
segfault with table == NULL
via aa29d899423 s3:smbd: fix a NULL pointer deference caused by
smb2srv_update_crypto_flags()
via 2b36af83f68 s3:smbd: let smb2srv_session_lookup_global() clear the
signing/encryption_flags
via a262568eaab s4:torture: let smb2.session.bind_negative_* tests also
use a different client guid
via 66673f08f7c s4:torture: let smb2.session.bind_negative_* also test
without session keys
via e25a9e8f4ec WHATSNEW: document the removal of SMB2_22, SMB2_24 and
SMB3_10
via 2a575dfd58b libcli/smb: remove unused PROTOCOL_SMB3_10 definition
via 41cf9f8966e docs-xml: remove support for "SMB3_10"
via cb86d581737 libcli/smb: replace PROTOCOL_SMB3_10 with
PROTOCOL_SMB3_11
via 7f8507332ea s3:smbd: replace PROTOCOL_SMB3_10 with PROTOCOL_SMB3_11
via a12c4a7b528 libcli/smb: remove unused PROTOCOL_SMB2_24 definition
via fde7128b12f docs-xml: remove support for "SMB2_24"
via 8a30ad66b8f libcli/smb: replace PROTOCOL_SMB2_24 with
PROTOCOL_SMB3_00
via 880d2e18e13 s3:smbd: replace PROTOCOL_SMB2_24 with PROTOCOL_SMB3_00
via 8c05c979433 libcli/smb: remove unused PROTOCOL_SMB2_22 definition
via acb724c8b3e docs-xml: remove support for "SMB2_22"
via 3c8067a63fc libcli/smb: replace PROTOCOL_SMB2_22 with
PROTOCOL_SMB3_00
via 1cd3394d709 s3:smbd: replace PROTOCOL_SMB2_22 with
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via fdcae2872b6 selftest: use SAMBA_DEPRECATED_SUPPRESS=1 for all tests via 9d047192a6e s3:tests: use SAMBA_DEPRECATED_SUPPRESS=1 for backbox tests via 12bc55ff7aa ldb: version 2.4 will be used for Samba 4.15 via 1ad5df9f744 tdb: version 1.4.4 via bc1ee7ca064 talloc: version 2.3.3 via 17c86a2c5a5 s3:winbind: Get rid of the winbind dc-connect child via 9f632405032 s3:winbind: Remove trailing whitespaces in winbindd_dual.c via ea5b7309fb1 s3:winbind: Remove trailing whitespaces in winbindd_cm.c via 5ecda3bc3fb s3:winbind: Remove trailing whitespaces in winbindd.c from 7938d94d12e s4-selftest: add net offlinejoin tests https://git.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit fdcae2872b684dbc834274e688e4a0071a028a58 Author: Stefan Metzmacher Date: Fri Jul 9 14:12:39 2021 +0200 selftest: use SAMBA_DEPRECATED_SUPPRESS=1 for all tests The deprecation warnings are filling the logs and make it hard to find/see real problems. Signed-off-by: Stefan Metzmacher Autobuild-User(master): Stefan Metzmacher Autobuild-Date(master): Wed Jul 14 21:57:11 UTC 2021 on sn-devel-184 commit 9d047192a6e9d96a6142bad902f37af6169e854e Author: Stefan Metzmacher Date: Wed Jul 14 06:30:03 2021 +0200 s3:tests: use SAMBA_DEPRECATED_SUPPRESS=1 for backbox tests These tests should not depend on the number of deprecation warnings Signed-off-by: Stefan Metzmacher commit 12bc55ff7aae653bb3894bc55fe4f1ba86902a2d Author: Stefan Metzmacher Date: Wed Jul 14 22:50:19 2021 +0200 ldb: version 2.4 will be used for Samba 4.15 - Improve calculate_popt_array_length() - Use C99 initializers for builtin_popt_options[] - pyldb: Fix Message.items() for a message containing elements - pyldb: Add test for Message.items() - tests: Use ldbsearch '--scope instead of '-s' - pyldb: fix a typo - Change page size of guidindexpackv1.ldb - Use a 1MiB lmdb so the test also passes on aarch64 CentOS stream - attrib_handler casefold: simplify space dropping - fix ldb_comparison_fold off-by-one overrun - CVE-2020-27840: pytests: move Dn.validate test to ldb - CVE-2020-27840 ldb_dn: avoid head corruption in ldb_dn_explode - CVE-2021-20277 ldb/attrib_handlers casefold: stay in bounds - CVE-2021-20277 ldb tests: ldb_match tests with extra spaces - improve comments for ldb_module_connect_backend() - test/ldb_tdb: correct introductory comments - ldb.h: remove undefined async_ctx function signatures - correct comments in attrib_handers val_to_int64 - dn tests use cmocka print functions - ldb_match: remove redundant check - add tests for ldb_wildcard_compare - ldb_match: trailing chunk must match end of string - pyldb: catch potential overflow error in py_timestring - ldb: remove some 'if PY3's in tests - Add missing break in switch statement Signed-off-by: Stefan Metzmacher commit 1ad5df9f74426c78ff128d963a785aad707e7ed1 Author: Stefan Metzmacher Date: Wed Jul 14 22:30:19 2021 +0200 tdb: version 1.4.4 - Fix a memory leak on error - python: remove all 'from __future__ import print_function' - Fix CID 1471761 String not null terminated - Use hex_byte() in parse_hex() - Use hex_byte() in read_data() - fix studio compiler build - Fix some signed/unsigned comparisons - also use __has_attribute macro to check for attribute support - Fix clang 9 missing-field-initializer warnings - pytdb tests: add test for storev() - pytdb: add python binding for storev() - tdbtorture: Use ARRAY_DEL_ELEMENT() - py3: Remove #define PyInt_FromLong PyLong_FromLong - py3: Remove #define PyInt_AsLong PyLong_AsLong - py3: Remove #define PyInt_Check PyLong_Check - tdb: Align integer types Signed-off-by: Stefan Metzmacher commit bc1ee7ca0640f0136e5af7dcc4ca8ed0a5893053 Author: Stefan Metzmacher Date: Wed Jul 14 22:28:19 2021 +0200 talloc: version 2.3.3 - python: Ensure reference counts are properly incremented - Bug 9931: change pytalloc source to LGPL Signed-off-by: Stefan Metzmacher commit 17c86a2c5a5a5e2b194362e5f36f0f99910222c5 Author: Isaac Boukris Date: Thu Sep 17 11:12:53 2020 +0200 s3:winbind: Get rid of the winbind dc-connect child The new code uses PING_DC to tell the child to try to go online. Pair-Programmed-With: Andreas Schneider Pair-Programmed-With: Stefan Metzmacher Signed-off-by: Andreas Schneider Signed-off-by: Isaac Boukris Signed-off-by: Stefan Metzmacher commit 9f632405032b2c6ebbe6ed205fd301a31c2910d5 Author: Andreas Schneider Date: Tue Jul 13 14:39:38 2021 +0200 s3:winbind: Remove trailing whitespaces in winbindd_dual.c
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 447c9380dcb s3: VFS: default. In vfswrap_getxattrat_do_async() always use the pathref fsp. via 2b4062b4a1f s3: VFS: default. In vfswrap_getxattrat_do_sync() always use the pathref fsp. via 24dc3ca67a5 s3: VFS: default: Add 'handle' member to struct vfswrap_getxattrat_state via e0b327f2eb5 s3: VFS: default: Move vfswrap_fgetxattr() before the async versions. via d1ffcc80642 s3: smbd: Allow "smbd async dosmode = yes" to return valid DOS attributes again. via 8f8d0eaad68 s3: tests: Add "SMB2-LIST-DIR-ASYNC" test. via 6e7ffa8da34 s3: tests: Our tests for "smbd async dosmode = yes" haven't been working correctly as the parameter has been set incorrectly. from c5cd5c9d57b WHATSNEW: add client/server smb3 signing/encryption algorithms https://git.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 447c9380dcb2dac20512d20833f611399fc54ef1 Author: Jeremy Allison Date: Wed Jul 14 11:23:54 2021 -0700 s3: VFS: default. In vfswrap_getxattrat_do_async() always use the pathref fsp. This is always called via a path that mandates smb_fname->fsp is valid. https://bugzilla.samba.org/show_bug.cgi?id=14758 Signed-off-by: Jeremy Allison Reviewed-by: Ralph Boehme Autobuild-User(master): Ralph Böhme Autobuild-Date(master): Thu Jul 15 05:48:05 UTC 2021 on sn-devel-184 commit 2b4062b4a1fffd3329c27ea7a840b04cf2069669 Author: Jeremy Allison Date: Wed Jul 14 11:23:03 2021 -0700 s3: VFS: default. In vfswrap_getxattrat_do_sync() always use the pathref fsp. This is always called via a path that mandates smb_fname->fsp is valid. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14758 Signed-off-by: Jeremy Allison Reviewed-by: Ralph Boehme commit 24dc3ca67a5593954fa13fad56ca3aaf8c1a15c8 Author: Jeremy Allison Date: Wed Jul 14 11:35:06 2021 -0700 s3: VFS: default: Add 'handle' member to struct vfswrap_getxattrat_state Not yet used. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14758 Signed-off-by: Jeremy Allison Reviewed-by: Ralph Boehme commit e0b327f2eb5781a119efde1a2450de4e6d2570e8 Author: Jeremy Allison Date: Wed Jul 14 11:17:49 2021 -0700 s3: VFS: default: Move vfswrap_fgetxattr() before the async versions. We want to re-use this and don't want to have to add forward declarations. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14758 Signed-off-by: Jeremy Allison Reviewed-by: Ralph Boehme commit d1ffcc8064294060d05d2b657385f69a75df49cf Author: Jeremy Allison Date: Wed Jul 14 15:00:13 2021 -0700 s3: smbd: Allow "smbd async dosmode = yes" to return valid DOS attributes again. We already have a valid smb_fname->fsp, don't drop it when returning from smbd_dirptr_lanman2_entry() to allow it to be reused inside dos_mode_at_send(). Remove knownfail. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14758 Signed-off-by: Jeremy Allison Reviewed-by: Ralph Boehme commit 8f8d0eaad68620561eb5bdc95fbb855b90f31fc5 Author: Jeremy Allison Date: Wed Jul 14 15:29:01 2021 -0700 s3: tests: Add "SMB2-LIST-DIR-ASYNC" test. Add as knownfail. Shows our "smbd async dosmode" code wasn't working. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14758 Signed-off-by: Jeremy Allison Reviewed-by: Ralph Boehme commit 6e7ffa8da34b85ac27396ee3fe29afb5db534e9e Author: Jeremy Allison Date: Wed Jul 14 15:26:42 2021 -0700 s3: tests: Our tests for "smbd async dosmode = yes" haven't been working correctly as the parameter has been set incorrectly. If must be "smbd async dosmode", not "smbd:async dosmode" BUG: https://bugzilla.samba.org/show_bug.cgi?id=14758 Signed-off-by: Jeremy Allison Reviewed-by: Ralph Boehme --- Summary of changes: selftest/target/Samba3.pm | 20 source3/modules/vfs_catia.c | 2 +- source3/modules/vfs_default.c | 113 +++--- source3/selftest/tests.py | 16 ++ source3/smbd/trans2.c | 28 ++- source3/torture/proto.h | 1 + source3/torture/test_smb2.c | 84 +++ source3/torture/torture.c | 4 ++ 8 files changed, 183 insertions(+), 85 deletions(-) Changeset truncated at 500 lines: diff --git a/selftest/target/Samba3.pm b/selftest/target/Samba3.pm index 054ceb38a09..dc1c14e9628 100755 --- a/selftest/target/Samba3.pm +++ b/selftest/target/Samba3.pm @@ -1470,7 +1470,7 @@ sub setup_simpleserver read only = no vfs objects = aio_pthread aio_pthread:aio open = yes - smbd:async dosmode = no + smbd async dosmode = no
[SCM] Samba Shared Repository - branch v4-13-stable updated
The branch, v4-13-stable has been updated
via 85bb95881bb VERSION: Disable GIT_SNAPSHOT for the 4.13.10 release.
via 22882df5ac4 WHATSNEW: Add release notes for Samba 4.13.10.
via b9b1d98af4c smbXsrv_{open,session,tcon}: protect
smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records
via 7065f203a9f gensec_krb5: restore ipv6 support for kpasswd
via 82e0f3e7997 netcmd: Use next_free_rid() function to calculate a SID
for restoring a backup
via e5c3a675464 python/tests/dsdb: Add tests for RID allocation
functions
via afad2fd9e24 dsdb: Add next_free_rid() function to allocate a RID
without modifying the database
via b3d59842fd9 netcmd: Add tests for performing an offline backup
immediately after joining a domain
via 00444ac64f5 netcmd: Ignore rIDUsedPool attribute in offline domain
backup test
via 445fb770c77 netcmd: Fix error-checking condition
via 303a0ecdd9d netcmd: Avoid database corruption by opting not to
create database files during an offline domain backup
via 54c353e9ad6 netcmd: Determine which files are to be copied for an
offline domain backup
via 4a68b1cb2dc netcmd: Add test for an offline backup of nested
directories
via 6569d0b9967 netcmd: Add test for an offline backup of a directory
containing hardlinks
via d0bde5703b2 samba-tool: Give better error information when the
'domain backup restore' fails with a duplicate SID
via 6e284db7877 samba-tool domain backup: Confirm the sidForRestore we
will put into the backup is free
via b01c4526fef s3: smbd: Fix uninitialized memory read in
process_symlink_open() when used with vfs_shadow_copy2().
via a708c9b48a2 mdssvc: avoid direct filesystem access, use the VFS
via 9f4e3da5eec mdssvc: chdir() to the conn of the RPC request
via 7c924449b87 mdssvc: maintain a connection struct in the mds_ctx
via 48b2dc3c5cc smbd: add create_conn_struct_cwd()
via 60e091a153e smbd: pass tevent context to
create_conn_struct_as_root()
via 63ff1e37d55 mdssvc: pass messaging context to mds_init_ctx()
via dce4c5ed911 mdssvc: don't fail mds_add_result() if result is not
found in CNID set
via 0484804d9f6 mdssvc: use a helper variable in mds_add_result()
via b0746202c20 s3: smbd: Remove erroneous
TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path.
via 0b75c272368 s3: lib: Fix talloc heirarcy error in
parent_smb_fname().
via 5d4bbaff8b6 smbd: correctly initialize close timestamp fields
via 37233cbdf8f torture: add a test that verifies SMB2 close fields
without postqueryattrib
via c67dbd55aad ctdb: Fix a crash in run_proc_signal_handler()
via 037f4b8fb9a ctdb: Introduce output before and after the 10-second
timeout
via 87265cef4b7 ctdb: Wait for SIGCHLD if script timed out
via e70a8cbdb4a ctdb: Introduce a helper variable in run_event_test.c
via 5e55d2c0dcf ctdb: Call run_event_recv() in a callback function
via 83511576a1c ctdb: fix typos
via abcddbae481 s3: smbd: Ensure POSIX default ACL is mapped into
returned Windows ACL for directory handles.
from 46c071544f1 VERSION: Bump version up to 4.13.10...
https://git.samba.org/?p=samba.git;a=shortlog;h=v4-13-stable
- Log -
---
Summary of changes:
VERSION | 2 +-
WHATSNEW.txt| 70 ++-
ctdb/common/run_proc.c | 6 +-
ctdb/tests/UNIT/cunit/run_event_001.sh | 3 +
ctdb/tests/src/run_event_test.c | 52 -
python/samba/netcmd/domain_backup.py| 173 +++-
python/samba/samdb.py | 105 ++
python/samba/tests/domain_backup_offline.py | 162 ---
python/samba/tests/dsdb.py | 305 +++-
source3/lib/filename_util.c | 2 +-
source3/rpc_server/mdssvc/mdssvc.c | 127 ++--
source3/rpc_server/mdssvc/mdssvc.h | 2 +
source3/rpc_server/mdssvc/srv_mdssvc_nt.c | 1 +
source3/smbd/msdfs.c| 54 -
source3/smbd/open.c | 18 +-
source3/smbd/posix_acls.c | 12 +-
source3/smbd/proto.h| 8 +
source3/smbd/smb2_close.c | 8 +-
source3/smbd/smbXsrv_open.c | 9 +
source3/smbd/smbXsrv_session.c | 7 +
source3/smbd/smbXsrv_tcon.c | 7 +
source4/auth/gensec/gensec_krb5.c | 6 +-
source4/selftest/tests.py | 2 +-
source4/torture/smb2/timestamps.c | 65 ++
24 files changed, 1073 insertions(+), 133 deletions(-)
[SCM] Samba Website Repository - branch master updated
The branch, master has been updated
via 2b3c9b5 Add Samba 4.13.10.
via d1feb7c NEWS[4.13.10]: Samba 4.13.10 Available for Download
from af20d51 Add Samba 4.14.6.
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master
- Log -
commit 2b3c9b5b229913cf71439db70bbf55c5d662f1ee
Author: Karolin Seeger
Date: Wed Jul 14 10:16:00 2021 +0200
Add Samba 4.13.10.
Signed-off-by: Karolin Seeger
commit d1feb7caf307b11f9163b43225deeb93d7410eb1
Author: Karolin Seeger
Date: Wed Jul 14 10:14:08 2021 +0200
NEWS[4.13.10]: Samba 4.13.10 Available for Download
Signed-off-by: Karolin Seeger
---
Summary of changes:
history/header_history.html | 1 +
history/samba-4.13.10.html| 65 +++
posted_news/20210714-081532.4.13.10.body.html | 13 +
posted_news/20210714-081532.4.13.10.headline.html | 3 ++
4 files changed, 82 insertions(+)
create mode 100644 history/samba-4.13.10.html
create mode 100644 posted_news/20210714-081532.4.13.10.body.html
create mode 100644 posted_news/20210714-081532.4.13.10.headline.html
Changeset truncated at 500 lines:
diff --git a/history/header_history.html b/history/header_history.html
index d6f2cef..25a507f 100755
--- a/history/header_history.html
+++ b/history/header_history.html
@@ -16,6 +16,7 @@
samba-4.14.2
samba-4.14.1
samba-4.14.0
+ samba-4.13.10
samba-4.13.9
samba-4.13.8
samba-4.13.7
diff --git a/history/samba-4.13.10.html b/history/samba-4.13.10.html
new file mode 100644
index 000..d7162cb
--- /dev/null
+++ b/history/samba-4.13.10.html
@@ -0,0 +1,65 @@
+http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd;>
+http://www.w3.org/1999/xhtml;>
+
+Samba 4.13.10 - Release Notes
+
+
+Samba 4.13.10 Available for Download
+
+https://download.samba.org/pub/samba/stable/samba-4.13.10.tar.gz;>Samba
4.13.10 (gzipped)
+https://download.samba.org/pub/samba/stable/samba-4.13.10.tar.asc;>Signature
+
+
+https://download.samba.org/pub/samba/patches/samba-4.13.9-4.13.10.diffs.gz;>Patch
(gzipped) against Samba 4.13.9
+https://download.samba.org/pub/samba/patches/samba-4.13.9-4.13.10.diffs.asc;>Signature
+
+
+
+ ===
+ Release Notes for Samba 4.13.10
+July 14, 2021
+ ===
+
+
+This is the latest stable release of the Samba 4.13 release series.
+
+
+Changes since 4.13.9
+
+
+o Jeremy Allison j...@samba.org
+ * BUG 14708: s3: smbd: Ensure POSIX default ACL is mapped into returned
+ Windows ACL for directory handles.
+ * BUG 14721: Take a copy to make sure we dont reference freed
memory.
+ * BUG 14722: s3: lib: Fix talloc heirarcy error in parent_smb_fname().
+ * BUG 14736: s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in
+ change_file_owner_to_parent() error path.
+
+o Andrew Bartlett abart...@samba.org
+ * BUG 14575: samba-tool: Give better error information when the
+ domain backup restore fails with a duplicate SID.
+
+o Ralph Boehme s...@samba.org
+ * BUG 14714: smbd: Correctly initialize close timestamp fields.
+ * BUG 14740: Spotlight RPC service doesnt work with vfs_glusterfs.
+
+o Volker Lendecke v...@samba.org
+ * BUG 14475: ctdb: Fix a crash in run_proc_signal_handler().
+
+o Stefan Metzmacher me...@samba.org
+ * BUG 14750: gensec_krb5: Restore ipv6 support for kpasswd.
+ * BUG 14752: smbXsrv_{open,session,tcon}: Protect
+ smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records.
+
+o Joseph Sutton josephsut...@catalyst.net.nz
+ * BUG 14027: samba-tool domain backup offline doesnt work against
bind DLZ
+ backend.
+ * BUG 14669: netcmd: Use next_free_rid() function to calculate a SID for
+ restoring a backup.
+
+
+
+
+
+
diff --git a/posted_news/20210714-081532.4.13.10.body.html
b/posted_news/20210714-081532.4.13.10.body.html
new file mode 100644
index 000..5c74459
--- /dev/null
+++ b/posted_news/20210714-081532.4.13.10.body.html
@@ -0,0 +1,13 @@
+
+14 July 2021
+Samba 4.13.10 Available for Download
+
+This is the latest stable release of the Samba 4.13 release series.
+
+
+The uncompressed tarball has been signed using GnuPG (ID AA99442FB680B620).
+The source code can be https://download.samba.org/pub/samba/stable/samba-4.13.10.tar.gz;>downloaded
now.
+A https://download.samba.org/pub/samba/patches/samba-4.13.9-4.13.10.diffs.gz;>patch
against Samba 4.13.9 is also available.
+See https://www.samba.org/samba/history/samba-4.13.10.html;>the
release notes for more info.
+
+
diff --git a/posted_n
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via e168a95c1bb s3: VFS: Update status of SMB_VFS_READ_DFS_PATHAT. via 1538b44d942 s3: smbd: In dfs_path_lookup(), use relative dirfsp, atname lookups in SMB_VFS_READ_DFS_PATHAT() for the pathname walk fallback. via f35c6a48fc5 s3: smbd: In dfs_path_lookup(), use relative dirfsp, atname lookups in SMB_VFS_READ_DFS_PATHAT() for the whole path optimization. via c62807e3e1a s3: smbd: In is_msdfs_link(), change to dirfsp, atname parameters. via 3b71ead1cc0 s3: smbd: Add dirfsp, atname parameters to check_msdfs_link(). via 88e56a71c65 s3: smbd: Pass dirfsp, atname down to mode_fn() passed to smbd_dirptr_get_entry(). via 523bc61c9d2 s3: smbd: In smbd_dirptr_get_entry(), postpone TALLOC_FREE(atname) as we're going to pass this to mode_fn(). via 165d0998c76 s3: VFS: time_audit. In smb_time_audit_read_dfs_pathat(), cope with relative pathnames. via 84070c3e8df s3: VFS: shadow_copy2. In shadow_copy2_read_dfs_pathat(), cope with relative pathnames. via a3664ca2e07 s3: VFS: glusterfs. In vfs_gluster_read_dfs_pathat(), cope with relative pathnames. via 288eec969ee s3: VFS: full_audit. In smb_full_audit_read_dfs_pathat(), cope with relative pathnames. via 43970634cff s3: VFS: ceph: In cephwrap_read_dfs_pathat(), cope with relative pathnames. via ac0ff0e1fe9 s3: VFS: cap: Fix cap_read_dfs_pathat() to cope with relative paths. via 4da6a9f4e66 s3: VFS: default. In vfswrap_read_dfs_pathat(), cope with relative pathnames. via 9fa5e171b96 s3: VFS: default. In vfswrap_read_dfs_pathat() use sys_fstatat(). via 106beab5bfe s2: VFS: default. Fix vfswrap_read_dfs_pathat() to use fsp_get_pathref_fd() not fsp_get_io_fd(). via cc6e433b1be s3: VFS: default. Fix vfswrap_readdir() to use sys_fstatat(). via 8804d240fac s3: lib: Add sys_fstatat() wrapper. via f66d3621f5e s3: expect fstatat() and dirfd() via c7d6745858f vfs_shadow_copy2: ensure we call convert_sbuf() in shadow_copy2_*stat() on already converted paths with absolute path via 4a7e483c516 selftest: add a test for shadow:fixinodes via 3aabc9825ca selftest: simplify snapshot directory creation in test_shadow_copy_torture.sh via 0a0b438b8ab selftest: enable "shadow:fixinodes" in "shadow_write" share via 745ded9afe1 selftest: pass smbclient arg to samba3.blackbox.shadow_copy_torture test via b32e56d6eb2 smbd: update smb_fname statinfo from fsp via 2c9ae4b78cd smbd: put back dev/ino stat/fstat check in openat_pathref_fsp() via 18a30d939e6 smbd: canonicalize SMB_VFS_FSTAT() stat buffer via 40cf129abb5 s3: VFS: streams_xattr: In streams_xattr_stat() use synthetic_pathref() with basename via 03e36502f45 s3: VFS: fruit. In ad_get_meta_fsp(), we only need a handle on the base file, not the stream. from 0657db26447 s3: smbd: Explicitly code the semantics of "dos filemode" into the chown code. https://git.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit e168a95c1bb1928cf206baf6d2db851c85f65fa9 Author: Jeremy Allison Date: Mon Jul 12 17:58:29 2021 -0700 s3: VFS: Update status of SMB_VFS_READ_DFS_PATHAT. Signed-off-by: Jeremy Allison Reviewed-by: Ralph Boehme Autobuild-User(master): Ralph Böhme Autobuild-Date(master): Wed Jul 14 08:58:30 UTC 2021 on sn-devel-184 commit 1538b44d942091d14f6b8f554d249bf98fd06b5e Author: Jeremy Allison Date: Mon Jul 12 17:56:13 2021 -0700 s3: smbd: In dfs_path_lookup(), use relative dirfsp, atname lookups in SMB_VFS_READ_DFS_PATHAT() for the pathname walk fallback. Note that parent_pathref() must succeed before we call SMB_VFS_READ_DFS_PATHAT(). If parent_pathref() fails, just step back a component without calling SMB_VFS_READ_DFS_PATHAT(). There are no longer any non-relative uses of SMB_VFS_READ_DFS_PATHAT(). Signed-off-by: Jeremy Allison Reviewed-by: Ralph Boehme commit f35c6a48fc5a186d477230e465a9b6f71d56e245 Author: Jeremy Allison Date: Mon Jul 12 17:53:19 2021 -0700 s3: smbd: In dfs_path_lookup(), use relative dirfsp, atname lookups in SMB_VFS_READ_DFS_PATHAT() for the whole path optimization. Note parent_pathref() must succeed before we can call SMB_VFS_READ_DFS_PATHAT(). Otherwise, just skip the whole path optimization and go onto the path walk code. Signed-off-by: Jeremy Allison Reviewed-by: Ralph Boehme commit c62807e3e1ad9635c0740ee12f3588a4ce2e9a6c Author: Jeremy Allison Date: Mon Jul 12 17:44:10 2021 -0700 s3: smbd: In is_msdfs_link(), change to dirfsp, atname parameters. Remember to update the smb_fname->st struct inside check_msdfs_link(), as we now pass the atname to is_msdfs_link(), not the smb_fname. Signed-off-by:
[SCM] Samba Shared Repository - branch v4-13-test updated
The branch, v4-13-test has been updated
via 6fa28f4eb3a VERSION: Bump version up to Samba 4.13.11...
via 85bb95881bb VERSION: Disable GIT_SNAPSHOT for the 4.13.10 release.
via 22882df5ac4 WHATSNEW: Add release notes for Samba 4.13.10.
from b9b1d98af4c smbXsrv_{open,session,tcon}: protect
smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records
https://git.samba.org/?p=samba.git;a=shortlog;h=v4-13-test
- Log -
commit 6fa28f4eb3ad9d6040b6108d4db87103944dd6a4
Author: Karolin Seeger
Date: Wed Jul 14 08:31:55 2021 +0200
VERSION: Bump version up to Samba 4.13.11...
and re-enable GIT_SNAPSHOT.
Signed-off-by: Karolin Seeger
commit 85bb95881bbe6e3953fcbf80ee42208420d72f70
Author: Karolin Seeger
Date: Wed Jul 14 08:31:24 2021 +0200
VERSION: Disable GIT_SNAPSHOT for the 4.13.10 release.
Signed-off-by: Karolin Seeger
commit 22882df5ac49a27a3563e71919a422afa30b7c45
Author: Karolin Seeger
Date: Wed Jul 14 08:30:52 2021 +0200
WHATSNEW: Add release notes for Samba 4.13.10.
Signed-off-by: Karolin Seeger
---
Summary of changes:
VERSION | 2 +-
WHATSNEW.txt | 70 ++--
2 files changed, 69 insertions(+), 3 deletions(-)
Changeset truncated at 500 lines:
diff --git a/VERSION b/VERSION
index addb12d75e0..49a0d6e775a 100644
--- a/VERSION
+++ b/VERSION
@@ -25,7 +25,7 @@
SAMBA_VERSION_MAJOR=4
SAMBA_VERSION_MINOR=13
-SAMBA_VERSION_RELEASE=10
+SAMBA_VERSION_RELEASE=11
# If a official release has a serious bug #
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index da680c071d9..c141d32b62e 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,3 +1,70 @@
+ ===
+ Release Notes for Samba 4.13.10
+July 14, 2021
+ ===
+
+
+This is the latest stable release of the Samba 4.13 release series.
+
+
+Changes since 4.13.9
+
+
+o Jeremy Allison
+ * BUG 14708: s3: smbd: Ensure POSIX default ACL is mapped into returned
+ Windows ACL for directory handles.
+ * BUG 14721: Take a copy to make sure we don't reference free'd memory.
+ * BUG 14722: s3: lib: Fix talloc heirarcy error in parent_smb_fname().
+ * BUG 14736: s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in
+ change_file_owner_to_parent() error path.
+
+o Andrew Bartlett
+ * BUG 14575: samba-tool: Give better error information when the
+ 'domain backup restore' fails with a duplicate SID.
+
+o Ralph Boehme
+ * BUG 14714: smbd: Correctly initialize close timestamp fields.
+ * BUG 14740: Spotlight RPC service doesn't work with vfs_glusterfs.
+
+o Volker Lendecke
+ * BUG 14475: ctdb: Fix a crash in run_proc_signal_handler().
+
+o Stefan Metzmacher
+ * BUG 14750: gensec_krb5: Restore ipv6 support for kpasswd.
+ * BUG 14752: smbXsrv_{open,session,tcon}: Protect
+ smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records.
+
+o Joseph Sutton
+ * BUG 14027: samba-tool domain backup offline doesn't work against bind DLZ
+ backend.
+ * BUG 14669: netcmd: Use next_free_rid() function to calculate a SID for
+ restoring a backup.
+
+
+###
+Reporting bugs & Development Discussion
+###
+
+Please discuss this release on the samba-technical mailing list or by
+joining the #samba-technical IRC channel on irc.freenode.net.
+
+If you do report problems then please try to send high quality
+feedback. If you don't provide vital information to help us track down
+the problem then you will probably be ignored. All bug reports should
+be filed under the Samba 4.1 and newer product in the project's Bugzilla
+database (https://bugzilla.samba.org/).
+
+
+==
+== Our Code, Our Bugs, Our Responsibility.
+== The Samba Team
+==
+
+
+Release notes for older releases follow:
+
+
+
==
Release Notes for Samba 4.13.9
May 11, 2021
@@ -61,8 +128,7 @@ database (https://bugzilla.samba.org/).
==
-Release notes for older releases follow:
-
+--
==
--
Samba Shared Repository
[SCM] Samba Shared Repository - annotated tag samba-4.13.10 created
The annotated tag, samba-4.13.10 has been created
at 85c23ad5757b1e97ecc2cc645e8dd095e4d64e9f (tag)
tagging 85bb95881bbe6e3953fcbf80ee42208420d72f70 (commit)
replaces samba-4.13.9
tagged by Karolin Seeger
on Wed Jul 14 10:13:26 2021 +0200
- Log -
samba: tag release samba-4.13.10
-BEGIN PGP SIGNATURE-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=vrFC
-END PGP SIGNATURE-
Andrew Bartlett (2):
samba-tool domain backup: Confirm the sidForRestore we will put into the
backup is free
samba-tool: Give better error information when the 'domain backup
restore' fails with a duplicate SID
Jeremy Allison (4):
s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL
for directory handles.
s3: lib: Fix talloc heirarcy error in parent_smb_fname().
s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in
change_file_owner_to_parent() error path.
s3: smbd: Fix uninitialized memory read in process_symlink_open() when
used with vfs_shadow_copy2().
Joseph Sutton (10):
netcmd: Add test for an offline backup of a directory containing hardlinks
netcmd: Add test for an offline backup of nested directories
netcmd: Determine which files are to be copied for an offline domain
backup
netcmd: Avoid database corruption by opting not to create database files
during an offline domain backup
netcmd: Fix error-checking condition
netcmd: Ignore rIDUsedPool attribute in offline domain backup test
netcmd: Add tests for performing an offline backup immediately after
joining a domain
dsdb: Add next_free_rid() function to allocate a RID without modifying
the database
python/tests/dsdb: Add tests for RID allocation functions
netcmd: Use next_free_rid() function to calculate a SID for restoring a
backup
Karolin Seeger (3):
VERSION: Bump version up to 4.13.10...
WHATSNEW: Add release notes for Samba 4.13.10.
VERSION: Disable GIT_SNAPSHOT for the 4.13.10 release.
Ralph Boehme (10):
torture: add a test that verifies SMB2 close fields without
postqueryattrib
smbd: correctly initialize close timestamp fields
mdssvc: use a helper variable in mds_add_result()
mdssvc: don't fail mds_add_result() if result is not found in CNID set
mdssvc: pass messaging context to mds_init_ctx()
smbd: pass tevent context to create_conn_struct_as_root()
smbd: add create_conn_struct_cwd()
mdssvc: maintain a connection struct in the mds_ctx
mdssvc: chdir() to the conn of the RPC request
mdssvc: avoid direct filesystem access, use the VFS
Stefan Metzmacher (2):
gensec_krb5: restore ipv6 support for kpasswd
smbXsrv_{open,session,tcon}: protect
smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records
Volker Lendecke (6):
ctdb: fix typos
ctdb: Call run_event_recv() in a callback function
ctdb: Introduce a helper variable in run_event_test.c
ctdb: Wait for SIGCHLD if script timed out
ctdb: Introduce output before and after the 10-second timeout
ctdb: Fix a crash in run_proc_signal_handler()
---
--
Samba Shared Repository
