[SCM] Samba Shared Repository - branch v3-0-stable updated - initial-v3-0-unstable-32-g4871866

Gerald (Jerry) Carter jerry at samba.org
Wed Nov 21 13:09:18 GMT 2007


The branch, v3-0-stable has been updated
       via  487186624bbe67a5cbbe7f48be031edf4e52bd4f (commit)
       via  30eb456bc2e261f561f02a867309d62fff9a20a6 (commit)
       via  9acd56a247abdc1334fa011063940db6e0d65370 (commit)
       via  21e6405e0ca811fc5c74441c38f059ff41dc0c42 (commit)
       via  8ad2826c48a0d4d26abc3bb209860c776f55822f (commit)
       via  56b012b1c4dc48434bf5ae9cb8459bd7ad33d2a1 (commit)
       via  62a1c825b2cd702cc439c5f07fa36386b2260052 (commit)
       via  e56ee680c34f77497a436b8021b51fe296bcc322 (commit)
       via  6d3734aa74ce68ca340640aa478ec920af578e1b (commit)
       via  72be9cc495d796d700281c047b152ba909f6fd2b (commit)
       via  ea97a10df5732dfcc931197a01d6446ed92b7658 (commit)
       via  183eea4909d6678ac382eac16a5873a1fa3fd065 (commit)
       via  14ecfecbdf3e631f87d83337e06060724deb7756 (commit)
       via  63918ac0f0a3767237210182f0f35840db87242c (commit)
       via  96e61fb89caa9e9d500c3006b83299a7938d0af7 (commit)
       via  99eea67a5a1114e499ece00f8b68ccbf2ec4ae75 (commit)
       via  a7c6fe1e3cb4d66a48f43a49fe31778adace2332 (commit)
       via  1cdf89a02af6e7a2deed3f59519af97c10dbdaa3 (commit)
       via  3480b42be1adc7c2876a77e8260049447338c3ff (commit)
       via  c3fbfc37b578b8107be1f585cf6e3e2d001f7ab1 (commit)
       via  8cb09fe2d923fabbb6a7b909cc245c08128c0b67 (commit)
       via  26d8a1ad20c10da495970c584983fbd261b4946e (commit)
       via  f37f19f817874e885e70456328e0d3693fc24c9c (commit)
       via  d2a42b4b53362bd3873467ad8849a5e884c818d2 (commit)
       via  918dd7dfd4d6611079d430f9df45fcc53d675682 (commit)
       via  efe56c9de5b4e451917388c126ae9f6c6bd58970 (commit)
       via  5ec7b9f8b9941c1a0adcd10d52fdffc893c1b1a1 (commit)
       via  02cf5380e2deec1eaf10e8c1f393a1ddeee181d9 (commit)
       via  0fa0c924bbea430de9ea2f38ed9d6f4d6dff2fef (commit)
       via  0f633851537b689b0ac57b041d97115b6158546f (commit)
       via  b16e4e16340eaa8d93651ba816937e8040b85e95 (commit)
      from  65229e966119f0b1537d258854a54105f32ae399 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-stable


- Log -----------------------------------------------------------------
commit 487186624bbe67a5cbbe7f48be031edf4e52bd4f
Author: Gerald (Jerry) Carter <jerry at samba.org>
Date:   Tue Nov 20 21:55:27 2007 -0600

    Update release notes for the 3.0.27a release.
    (cherry picked from commit 7fe4b24fcebe231843149fd8f7dbe5676812367d)

commit 30eb456bc2e261f561f02a867309d62fff9a20a6
Author: Gerald (Jerry) Carter <jerry at samba.org>
Date:   Tue Nov 20 18:19:32 2007 -0600

    Copy the full release notes from the 3.0.27 tag.
    
    Some parts were somehow different.
    (cherry picked from commit d6c3df20e8f6656da40b1baba4618d0220c1a4c1)

commit 9acd56a247abdc1334fa011063940db6e0d65370
Author: Simo Sorce <idra at samba.org>
Date:   Tue Nov 20 18:19:54 2007 -0500

    32/64 bit compatibility fix
    this patch fixes platform where 32 and 64 bit apps can run at the same time
    fixed in and tested in Fedora: https://bugzilla.redhat.com/show_bug.cgi?id=253036

commit 21e6405e0ca811fc5c74441c38f059ff41dc0c42
Author: Jeremy Allison <jra at samba.org>
Date:   Tue Nov 20 14:06:50 2007 -0800

    Don't overrun directory listings by incorrectly calculating
    end-of-data. Syncs up with 3.2.0. Jerry - this should fix the
    profile bug.
    Jeremy.

commit 8ad2826c48a0d4d26abc3bb209860c776f55822f
Author: Gerald (Jerry) Carter <jerry at samba.org>
Date:   Tue Nov 20 13:24:03 2007 -0600

    Prevent segv in winbindd running on a DC using the "idmap backend" syntax.
    
    The number of domains should be counted as they are added and not assumed
    to match the loop counter.

commit 56b012b1c4dc48434bf5ae9cb8459bd7ad33d2a1
Author: Jeremy Allison <jra at samba.org>
Date:   Mon Nov 19 15:27:11 2007 -0800

    Ensure every use of push_ascii checks for error -1 condition.
    Ensure that is zero termination is requested that it is
    applied if there's space.
    Jeremy.

commit 62a1c825b2cd702cc439c5f07fa36386b2260052
Author: Jeremy Allison <jra at samba.org>
Date:   Mon Nov 19 12:02:11 2007 -0800

    Back-port fix for bug found by kukks - Samba adding
    non-initialized name to IP mapping.
    Jeremy.

commit e56ee680c34f77497a436b8021b51fe296bcc322
Author: Jeremy Allison <jra at samba.org>
Date:   Sun Nov 18 15:06:53 2007 -0800

    Fix remaining calls to srvstr_push -1 - noticed
    by Simo (thanks !)
    Jeremy.

commit 6d3734aa74ce68ca340640aa478ec920af578e1b
Author: Michael Adam <obnox at samba.org>
Date:   Sat Oct 20 02:17:07 2007 +0200

    Fix for Bug #5023 (separate access check from posix_acls code)
    
    The three can_* access check functions in smbd/posix_acls.c that are used in
    smbd/open.c and smbd/nttrans.c explicitly called check_posix_acl_group_access()
    
    This lead to errors with nfsv4 acls (e.g. ZFS and GPFS).
    
    This changes the can_* functions to get the nt_acl via VFS layer and call
    se_access_check on that. It also removes check_posix_acl_group_access()
    which has no more callers.
    
    Michael
    
    Note: This merges the original fix 6f961a23de745aba5dcd4585b731e651b8cbeef4
    from branch v3-2-test along with some subsequent improvements:
    
    c61b4222d30288add216fac4da3cfaa537f5cd01 - no double fast pathing
    cd62122916defbfb57468c3b82a60b766fc4652e - cosmetic fix
    f4f700cf0c1657c36e801fab20fe7b1a4efcb714 - prevent orphaned open files

commit 72be9cc495d796d700281c047b152ba909f6fd2b
Author: Jeremy Allison <jra at samba.org>
Date:   Fri Nov 16 14:15:56 2007 -0800

    Fix for bug 4393 smbclient does not store files with zero filesize in tar-archives
    from Tomasz Ostrowski <tometzky at batory.org.pl>
    Jeremy.

commit ea97a10df5732dfcc931197a01d6446ed92b7658
Author: Michael Adam <obnox at samba.org>
Date:   Fri Nov 16 22:26:26 2007 +0100

    Fix for bug #4781: allow cleaning of /etc/mtab by canonicalizing mountpoint.
    
    Canonicalize mountpoint by trimming trailing slashes before unmounting.
    This allows for correct cleanup of /etc/mtab after unmounting.
    
    Thanks to Steve Langasek <vorlon at debian.org>.
    
    Michael

commit 183eea4909d6678ac382eac16a5873a1fa3fd065
Author: Jeremy Allison <jra at samba.org>
Date:   Fri Nov 16 13:12:51 2007 -0800

    Fix smbfs to not trigger our paranoid checker.
    Jeremy.

commit 14ecfecbdf3e631f87d83337e06060724deb7756
Author: Gerald (Jerry) Carter <jerry at samba.org>
Date:   Thu Nov 15 10:51:37 2007 -0600

    Set release to 3.0.27a in development branch

commit 63918ac0f0a3767237210182f0f35840db87242c
Author: Gerald (Jerry) Carter <jerry at samba.org>
Date:   Thu Nov 15 10:51:23 2007 -0600

    Pull in release notes from 3.0.27 to the v3-0 development branch

commit 96e61fb89caa9e9d500c3006b83299a7938d0af7
Author: Gerald (Jerry) Carter <jerry at samba.org>
Date:   Thu Nov 15 10:48:13 2007 -0600

    Set version to 3.0.27a

commit 99eea67a5a1114e499ece00f8b68ccbf2ec4ae75
Author: Gerald (Jerry) Carter <jerry at samba.org>
Date:   Wed Nov 14 20:54:44 2007 -0600

    Fix for CVE-2007-4572
    
    == Subject:     Stack buffer overflow in nmbd's logon
    ==              request processing.
    ==
    == CVE ID#:     CVE-2007-4572
    ==
    == Versions:    Samba 3.0.0 - 3.0.26a (inclusive)
    
    ...
    Samba developers have discovered what is believed to be
    a non-exploitable buffer over in nmbd during the processing
    of GETDC logon server requests.  This code is only used
    when the Samba server is configured as a Primary or Backup
    Domain Controller.

commit a7c6fe1e3cb4d66a48f43a49fe31778adace2332
Author: Gerald (Jerry) Carter <jerry at samba.org>
Date:   Wed Nov 14 20:51:14 2007 -0600

    Fix for CVE-2007-5398.
    
    == Subject:     Remote code execution in Samba's WINS
    ==              server daemon (nmbd) when processing name
    ==              registration followed name query requests.
    ==
    == CVE ID#:     CVE-2007-5398
    ==
    == Versions:    Samba 3.0.0 - 3.0.26a (inclusive)
    ...
    Secunia Research reported a vulnerability that allows for
    the execution of arbitrary code in nmbd.  This defect may
    only be exploited when the "wins support" parameter has
    been enabled in smb.conf.

commit 1cdf89a02af6e7a2deed3f59519af97c10dbdaa3
Author: Michael Adam <obnox at samba.org>
Date:   Thu Nov 15 11:08:53 2007 +0100

    Fix bug #5083 (and duplicate bug #5084).
    
    Make solarisacl_sys_acl_get_fd() return a result
    when there is one (thereby fixing a memleak).
    
    Thanks to Markus Zell for reporting this.
    
    Michael

commit 3480b42be1adc7c2876a77e8260049447338c3ff
Author: Jeremy Allison <jra at samba.org>
Date:   Tue Nov 6 21:48:01 2007 -0800

    Fix bug where tdb lock call interrupted with
    an alarm sig would not terminate and could lead
    to runaway smbd processes.
    Thanks to Dave Daugherty @ Centrify for pointing
    this out to us.
    Jeremy.

commit c3fbfc37b578b8107be1f585cf6e3e2d001f7ab1
Merge: 8cb09fe2d923fabbb6a7b909cc245c08128c0b67 26d8a1ad20c10da495970c584983fbd261b4946e
Author: Gerald (Jerry) Carter <jerry at samba.org>
Date:   Tue Oct 30 22:22:43 2007 -0400

    Merge branch 'v3-0-test' of git://git.samba.org/samba into v3-0-test

commit 8cb09fe2d923fabbb6a7b909cc245c08128c0b67
Author: Gerald (Jerry) Carter <jerry at samba.org>
Date:   Tue Oct 30 22:21:49 2007 -0400

    Ensure we catch an error in the query_user() reply in the receive function.
    backport of v3-2-test patch from Dmitry Butskoy <buc at odusz.so-cdu.ru>.

commit 26d8a1ad20c10da495970c584983fbd261b4946e
Author: Stefan Metzmacher <metze at samba.org>
Date:   Wed Oct 24 14:29:06 2007 +0200

    [crash fix] don't use already free'ed memory
    
    (found by "make valgrindtest" and my "start winbindd on make test" patch)
    
    metze
    (cherry picked from commit fe21e48489852720a05b305b251e4f5cbb200f7a)

commit f37f19f817874e885e70456328e0d3693fc24c9c
Author: Stefan Metzmacher <metze at samba.org>
Date:   Wed Oct 17 10:59:24 2007 +0200

    fix crash bug in pidl generated client code, this
    could have happend with [in,out,unique] pointers
    when the clients sends a valid pointer, but the server
    reponse with a NULL pointer (as samba-3.0.26a do for some calls).
    
    I've tested with midl to see how windows handles this situation
    and also the reverse case where the client sends NULL and
    the server reposnse with non-NULL.
    
    It appears that midl generated code just ignores this
    and only copies the result if both pointers are non-NULL.
    
    Note: this is just cosmetic for the 3.0.x tree, as
    rpccli_wkssvc_NetWkstaEnumUsers and rpccli_wkssvc_NetWkstaTransportEnum
    are not used.
    
    metze

commit d2a42b4b53362bd3873467ad8849a5e884c818d2
Author: Stefan Metzmacher <metze at samba.org>
Date:   Wed Oct 17 10:03:22 2007 +0200

    SAMBA_VERSION_VENDOR_SUFFIX="test"
    
    metze

commit 918dd7dfd4d6611079d430f9df45fcc53d675682
Author: Jeremy Allison <jra at samba.org>
Date:   Mon Oct 15 15:52:30 2007 -0700

    Fix warning messages for unused variables.
    Jeremy.
    (cherry picked from commit 406737cd9a34ac498e5823b380e1768d41e16c1b)

commit efe56c9de5b4e451917388c126ae9f6c6bd58970
Author: Stefan Metzmacher <metze at samba.org>
Date:   Thu Oct 11 12:27:38 2007 +0200

    prepare the mkversion.sh infrastructure for git branches in the build-farm
    
    metze

commit 5ec7b9f8b9941c1a0adcd10d52fdffc893c1b1a1
Author: Simo Sorce <idra at samba.org>
Date:   Tue Oct 16 14:06:33 2007 -0400

    Fix dimap for trusted domains only case

commit 02cf5380e2deec1eaf10e8c1f393a1ddeee181d9
Author: Stefan Metzmacher <metze at samba.org>
Date:   Fri Oct 12 16:46:24 2007 +0200

    cleanup and extent .gitignore
    
    metze
    (cherry picked from commit 9475993dae06fa023f2eb63d04d5f7b07b0b4d93)

commit 0fa0c924bbea430de9ea2f38ed9d6f4d6dff2fef
Author: Michael Adam <obnox at samba.org>
Date:   Fri Oct 12 16:35:46 2007 +0200

    Add .gitignore file from v3-2-test.
    
    Michael

commit 0f633851537b689b0ac57b041d97115b6158546f
Author: Michael Adam <obnox at samba.org>
Date:   Fri Oct 12 13:34:09 2007 +0200

    Add become_root/unbecome_root around one call of getsampwsid()
    in create_token_from_username(). This caused set_nt_acl to
    partially fail in certain circumstances.
    
    This is expected to bring an improvement to bug #4308.
    
    Michael

commit b16e4e16340eaa8d93651ba816937e8040b85e95
Author: Simo Sorce <idra at samba.org>
Date:   Thu Oct 11 14:35:34 2007 -0400

    Fix default domains support using compat syntax.
    Without this fix idmap_rid can't be used with the compatible syntax.

-----------------------------------------------------------------------

Summary of changes:
 .gitignore                         |   31 +++
 WHATSNEW.txt                       |  394 +++++++++++++++++++++++++++++++++++-
 source/VERSION                     |    8 +-
 source/auth/auth_util.c            |    7 +-
 source/client/clitar.c             |    7 +-
 source/client/umount.cifs.c        |    7 +
 source/configure.in                |   17 ++-
 source/groupdb/mapping.c           |    4 +-
 source/lib/charcnv.c               |   13 +-
 source/lib/replace/replace.h       |    4 +
 source/lib/replace/system/wait.h   |    4 +
 source/lib/util_tdb.c              |    2 +
 source/lib/version.c               |    4 +-
 source/librpc/gen_ndr/cli_wkssvc.c |    6 +-
 source/libsmb/clirap.c             |    7 +-
 source/libsmb/ntlmssp_parse.c      |    3 +-
 source/modules/vfs_solarisacl.c    |    2 +-
 source/nmbd/nmbd_namelistdb.c      |    6 +-
 source/nmbd/nmbd_packets.c         |    6 +
 source/nmbd/nmbd_processlogon.c    |  107 +++++++++--
 source/nsswitch/idmap.c            |   60 ++++--
 source/nsswitch/winbindd.c         |    4 +-
 source/nsswitch/winbindd_async.c   |    6 +
 source/nsswitch/winbindd_nss.h     |    2 +-
 source/script/mkversion.sh         |  102 +++++----
 source/smbd/lanman.c               |    8 +-
 source/smbd/negprot.c              |    2 +-
 source/smbd/posix_acls.c           |  372 +++++++---------------------------
 source/smbd/reply.c                |    8 +-
 source/smbd/sesssetup.c            |    6 +-
 source/smbd/srvstr.c               |   13 +-
 source/smbd/trans2.c               |   50 +++--
 source/tdb/common/lock.c           |   12 +
 source/tdb/common/tdb_private.h    |    2 +
 source/tdb/include/tdb.h           |    2 +
 35 files changed, 833 insertions(+), 455 deletions(-)
 create mode 100644 .gitignore


Changeset truncated at 500 lines:

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..d5e5177
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,31 @@
+*.o
+*.po
+source/client/client_proto.h
+source/include/build_env.h
+source/include/config.h
+source/include/config.h.in
+source/include/proto.h
+source/include/stamp-h
+source/include/version.h
+source/Makefile
+source/config.log
+source/config.status
+source/configure
+source/smbadduser
+source/bin/*
+source/script/findsmb
+source/script/gen-8bit-gap.sh
+source/script/installbin.sh
+source/script/uninstallbin.sh
+source/smbd/build_options.c
+source/utils/net_proto.h
+source/utils/ntlm_auth_proto.h
+source/web/swat_proto.h
+source/tags
+source/utils/passwd_proto.h
+source/include/includes.h.gch
+source/config.cache
+source/library-versions
+source/nsswitch/*.so
+source/proto_exists
+source/winbindd/winbindd_proto.h
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 5868036..9b5494c 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,11 +1,364 @@
                    ===============================
-                   Release Notes for Samba 3.0.25b
-                             June 20, 2007
+                   Release Notes for Samba 3.0.27a
+                             Nov 20, 2007
+                   ===============================
+
+Samba 3.0.27a is a bug fix release and is the current release
+for production servers running the Samba 3.0 series.
+
+Important fixes in 3.0.27a include:
+
+  o A crash bug regression experienced by smbfs clients caused
+    by the fix for CVE-2007-4572.
+
+
+
+######################################################################
+Changes
+#######
+
+Changes since 3.0.27
+--------------------
+
+o   Michael Adam <obnox at samba.org>
+    * BUG 4308: Add missing become_root/unbecome_root around calls of 
+      add_aliases.  Add same changes in create_token_from_username()
+      surrounding the call to getsampwsid().
+    * BUG 5083: Make solarisacl_sys_acl_get_fd() return a result when 
+      there is one (thereby fixing a memleak).
+    * BUG 5023: Fix smbd's interaction with NFSv4 ACL compatible VFS 
+      plugins such as GPFS and ZFS.
+
+
+o   Jeremy Allison <jra at samba.org>
+    * BUG 4978: Ensure that DOS attributes are copied with folders.
+    * Fix bug where tdb lock call interrupted with an alarm sig would 
+      not terminate and could lead to runaway smbd processes.
+    * Fix smbd crash bug which resulted from a regression in the patch
+      for CVE-2007-4572 patch.
+    * Prevent nmbd from adding non-initialized name to IP address
+      mappings to it's WINS database.
+
+
+o   Dmitry Butskoy <buc at odusz.so-cdu.ru>
+    * Properly catch errors in the query_user() callback to avoid
+      generated struct passwd replies with zero length usernames.
+
+
+o   Gerald (Jerry) Carter <jerry at samba.org>
+    * Prevent segv in winbindd running on a DC using the "idmap
+      backend" syntax.
+
+
+o   Steve Langasek <vorlon at debian.org>
+    * BUG 4781: Allow cleaning of /etc/mtab by canonicalizing mountpoint.
+
+
+o   Volker Lendecke <vl at samba.org>
+    * BUG 4028: Fix message popup sent via "smbclient -M".
+    * BUG 4984: Filename unix_convert() fixes for WinNT 4.0 clients.
+
+
+o   Stefan Metzmacher <metze at samba.org>
+    * Fix crash bug in pidl generated client code caused by
+      [in,out,unique] pointers.
+    * Fix crash bug in the group mapping code.
+
+
+o   Heinrich Mislik <Heinrich.Mislik at univie.ac.at>
+    * Fixes for AIX quota support.
+
+
+o   Tomasz Ostrowski <tometzky at batory.org.pl>
+    * BUG 4393: Prevent smbclient from dropping 0 bytes files from tar 
+      archives.
+
+
+o   Simo Sorce <idra at samba.org>
+    * Fixes for internal idmap domain list when "winbind trusted
+      domains only" is enabled.
+    * Fix 32/64-bit compatibility issues in the winbind request/response
+      structures.
+
+
+o   Martin Zielinski <mz at seh.de>
+    * Error code path fix for get_mydnsdomname().
+
+
+
+Release notes for older releases follow:
+
+      --------------------------------------------------
+
+                   ==============================
+                   Release Notes for Samba 3.0.27
+                            Nov 15, 2007
+                   ==============================
+
+Samba 3.0.27 is a security release in order to address the following
+defects:
+
+  o CVS-2007-4572
+    Stack buffer overflow in nmbd's logon request processing.
+
+  o CVE-2007-5398
+    Remote code execution in Samba's WINS server daemon (nmbd) 
+    when processing name registration followed name query requests.
+
+The original security announcement for this and past advisories can 
+be found http://www.samba.org/samba/security/
+
+######################################################################
+Changes
+#######
+
+Changes since 3.0.26a
+---------------------
+
+o   Jeremy Allison <jra at samba.org>
+    * Fix for CVS-2007-4572.
+    * Fix for CVE-2007-5398.
+
+
+o   Simo Sorce <idra at samba.org>
+    * Additional fixes for CVS-2007-4572.
+
+
+Release notes for older releases follow:
+
+      --------------------------------------------------
+                   ===============================
+                   Release Notes for Samba 3.0.26a
+                             Sep 11, 2007
                    ===============================
 
-This is the third production release of the Samba 3.0.25 code 
-base and is the version that servers should be run for for all 
-current bug fixes.  
+Major bug fixes included in Samba 3.0.26a are:
+
+  o Memory leaks in Winbind's IDMap manager.
+
+
+######################################################################
+Changes
+#######
+
+Changes since 3.0.26
+--------------------
+
+o   Michael Adam <obnox at samba.org>
+    * Fix read_sock() semantics in wb_common.c to address "invalid
+      request size" errors in winbindd logs.
+    * Fix use of pwrite() in tdb IO code paths.
+
+     
+o   Jeremy Allison <jra at samba.org>
+    * Fix logic error in timeout of blocking lock processing.
+
+
+o   Guenther Deschner <gd at samba.org>
+    * Fix error code in the msrpc EnumerateDomainGroups() Winbind
+      method when a memory allocation fails.
+    * Fix Winbind initialization storms when contacting an older Samba DC.
+
+    
+o   Volker Lendecke <vl at samba.org>
+    * Fix compile failure in NFSv4 VFS module.
+    * Fix compile failures on True64.
+    * Fix compile failure in unmaintained python bindings.
+    * BUG 4917: Fix memory leaks in Winbind's idmap_ldap and
+      idmap_cache backends.
+    * Coverity fixes in the group mapping code.
+
+
+o   Derrell Lipman <derrell at samba.org>
+    * Remove NetBIOS keepalives from libsmbclient and consolidate on
+      the use of getpeername() when checking connection health.
+    * Use formal syntax for invoking function pointers in
+      libsmbclient.
+
+
+o   Lars Mueller <lars at samba.org>
+    * Fixes for Winbind's AD site support when the host is not
+      configured in any site or nor DC's are present within the host's
+      configured site.
+
+
+o   Simo Sorce <idra at samba.org>
+    * Debian packaging updates for 3.0.25c.
+    * Add sanity checks for "smb ports" values.
+    * Fix compile issues related to the VFS "open" method and newer
+      glibc implementations.
+    * Fix a segv in smbldap_set_creds() when using an anonymous
+      connection.
+    * BUG 4772: Fix us of ldap_base_dn for the idmap_ldap plugin.
+
+
+Release notes for older releases follow:
+
+      --------------------------------------------------
+                   ==============================
+                   Release Notes for Samba 3.0.26
+                             Sep 11, 2007
+                   ==============================
+
+This is a security release of Samba 3.0 to address
+
+  o CVE-2007-4138
+	Versions: All Samba 3.0.25 releases
+	Incorrect primary group assignment for
+	domain users using the rfc2307 or sfu
+	winbind nss info plugin.
+
+The original security announcement for this and past advisories
+can be found http://www.samba.org/samba/security/
+
+######################################################################
+Changes
+#######
+
+Changes since 3.0.25c
+---------------------
+
+o   Gerald (Jerry) Carter <jerry at samba.org>
+    * Fix CVE-2007-4138 in the "winbind nss info = {sfu | rfc2307}"
+      plugin (idmap_ad.c)
+
+
+      --------------------------------------------------
+                   ===============================
+                   Release Notes for Samba 3.0.25c
+                             Aug 20, 2007
+                   ===============================
+
+Major bug fixes included in Samba 3.0.25c are:
+
+  o File sharing with Widows 9x clients.
+  o Winbind running out of file descriptors due to stalled 
+    child processes.
+  o MS-DFS inter-operability issues.
+
+
+######################################################################
+Changes
+#######
+
+Changes since 3.0.25b
+---------------------
+
+o   Michael Adam <obnox at samba.org>
+    * Fix incorrect log messages in tdbbackup.
+    * Fix a bug in pwrite error detection in tdb_expand_file().
+
+
+o   Jeremy Allison <jra at samba.org>
+    * BUG 4711: Make cli_connect() return NT_STATUS codes.
+    * Ensure we obey Unicode consortium restrictions.  Based on 
+      patch from MORIYAMA Masayuki.
+    * BUG 3204: Cope with stalled winbindd child processes and 
+      prevent the parent winbindd process from running out of file  
+      descriptors.
+    * Fix realloc leak on failure case from Jim Meyering.
+    * BUG 4759: Fix crash in ber_printf() caused invalid tag.
+    * BUG 4763: Limit notify responses to client max buf size.      
+    * BUG 4777: Doing a DFS traverse through a deep link could fail
+      (not using explorer).
+    * BUG 4779: Setting the allocation size updates the modified 
+      time as a write does.
+    * BUG 4308: Fix interaction with MS Excel and POSIX ACLs.
+    * Fix POSIX unlink bug found by the Linux CIFS fs client.
+    * Stop counting locks if we get a POSIX lock request.
+    * Fix interaction between Linux CIFS fs client and Windows
+      clients when the former tries to remove a file opened by the 
+      latter.
+    * Fix incorrect mapping of invalid resume names in FindNext 
+      commands.
+    * Cope with dead entries in the locking database tied to 
+      non-existent processes (merge from 3.2-ctdb).
+    * Fix MS-DFS related renaming bug in smbclient.
+    * Fix for write cache corruption bug.
+    * Fix invalid vuid from being returned by a failed call to
+      cli_session_setup_spnego.().
+    * Fixes for error mappings from NT_STATUS to the appropriate DOS
+      error codes in reply_opeNXXX() calls.
+
+
+o   Ofir Azoulay <Ofir.Azoulay at expand.com>
+    * Only look at errno set by SMB_VFS_CLOSE() if the call actually 
+      failed.
+
+
+o   Alexander Bokovoy <ab at samba.org>
+    * Fix vfs_readahead: transparent modules should always pass 
+      through.
+
+
+o   David S. Collier-Brown <davecb at spamcop.net>
+    * BUG 4897: Fix Solaris xattr misdeclarations.
+
+
+o   Guenther Deschner <gd at samba.org>
+    * Remove redundant pointer checks when freeing memory in winbindd.
+    * BUG 4408: Remove last traces of Heimdal KCM support.
+    * Fix bug in user Krb5 ticket refresh feature in winbindd.
+    * Fix Heimdal path in the krb5 renew routine.
+    * Unused code cleanup in winbindd.
+
+
+o   SATOH Fumiyasu <fumiyas at osstech.co.jp>
+    * BUG 4750: smbc_telldir_ctx() was not returning a value useful 
+      to smbc_lseekdir_ctx().
+
+
+o   Bjoern Jacke <bj at sernet.de>
+    * Add support for Extended Attributes on Solaris.
+
+
+o   Matthijs Kooijman <matthijs at stdin.nl>
+    * BUG 4836: Fix incorrect log message in the nss_info 
+      plugin init call.
+    * BUG 4849: Fix "net ads dns register" usage text.
+
+
+o   Volker Lendecke <vl at samba.org>
+    * Port cli_connect() NT_STATUS fixes to smbmount.
+    * Add notes about smbfs/cifs to usage() in smb[u]mount.
+    * BUG 4792: Fix pidfile name bug.
+    * Fix missing END_PROFILE() call in the SMBunlink reply.
+    * Coverity fixes.
+    * Correct logic error in change notify code that would result in 
+      an endless loop.
+    * Fix uninitialized reads in the spoolss GetPrinterData() replies.
+    * Fix file overwrites from Windows 9x clients.
+
+
+o   Herb Lewis <herb at samba.org>
+    * Unused code cleanup.
+    * Avoid a crash in "net rpc info" when no username has 
+      been specified.
+    * Remove biconv detection on *BSD.
+
+
+o   Derrell Lipman <derrell at samba.org>
+    * Get/Set ACL fixes in libsmbclient.
+
+
+o   Jan Martin <Jan.Martin at rwedea.com>
+    * BUG 4860: Patches for fixing MS-DFS links with trailing 
+      back slashes.
+
+
+o   Jim McDonough <jmcd at us.ibm.com>
+    * BUG 4719: "Must change password" is not set from usrmgr.exe.
+
+
+o   Atsushi Nakabayashi <nakabayashi at miraclelinux.com>
+    * Ensure proper exit when nmbd is unable to reopen the wins.tdb.
+    * Fix error path memleaks in the messaging subsystem.
+
+      --------------------------------------------------
+                   ===============================
+                   Release Notes for Samba 3.0.25b
+                             June 26, 2007
+                   ===============================
 
 Major bug fixes included in Samba 3.0.25b are:
 
@@ -15,6 +368,20 @@ Major bug fixes included in Samba 3.0.25b are:
   o Crashes is idmap_ldap and idmap_rid.
 
 
+Changes to 'net idmap dump'
+===========================
+
+A change in command line syntax and behavior was introduced in the
+3.0.25 release series where the command 
+
+  $ net idmap dump /.../path/to/idmap.tdb
+
+would overwrite the tdb instead of dumping its contents to standard 
+output as was the case in releases prior to Samba 3.0.25.  The 
+changed has been reverted in 3.0.25b and the semantics from 3.0.24
+and earlier releases have been restored.  
+
+
 ######################################################################
 Changes
 #######
@@ -44,15 +411,28 @@ o   Jeremy Allison <jra at samba.org>
     * Fix sync_file() to return NTSTATUS and return this on failure in
       the write reply path.
     * BUG 4678,4697: Fix token creation for clear text logins.  
+    * BUG 4725: Don't crash when no eventlog names are defined in
+      smb.conf.
+    * Ensure we will always release any timeout handler on fsp close 
+      or removal of oplock.
 
 
 o   Jacob Berkman <jberkman at novell.com>
     * BUG 4566: Pass password data to krb5_prompter.
 
 
+o   Gerald (Jerry) Carter <jerry at samba.org>
+    * BUG 4579: Fix "wbinfo -t" when running winbindd on a Samba DC.
+
+
 o   Guenther Deschner <gd at samba.org>
     * BUG 4657: Fix compilation and linking of pam_smbpass.so.
     * Add more netlogon GetDcName() client calls.
+    * Fix event based krb5 ticket refreshing in winbindd.
+
+o   SATOH Fumiyasu <fumiyas at osstech.co.jp>
+    * BUG 4720: Fix smbclient connections to share names containing 
+      multibyte characters.
 
 
 o   Steve Langasek <vorlon at debian.org>
@@ -63,7 +443,9 @@ o   Steve Langasek <vorlon at debian.org>
 o   Volker Lendecke <vl at samba.org>
     * Fix record state check error when reviewing entries in nmbd's
       WINS database.
-
+    * Revert 'net idmap dump' behavior to 3.0.24 behavior to fix change 
+      in command line syntax that would overwrite winbindd_idmap.tdb.
+      
 
 o   Justin Maggard <jmaggard at infrant.com>
     * Don't expire a password if it's explicitly set as ACB_PWNOTREQ.
diff --git a/source/VERSION b/source/VERSION
index 35d0703..002f246 100644
--- a/source/VERSION
+++ b/source/VERSION
@@ -25,7 +25,7 @@
 ########################################################
 SAMBA_VERSION_MAJOR=3
 SAMBA_VERSION_MINOR=0
-SAMBA_VERSION_RELEASE=26
+SAMBA_VERSION_RELEASE=27
 
 ########################################################
 # Bug fix releases use a letter for the patch revision #
@@ -36,7 +36,7 @@ SAMBA_VERSION_RELEASE=26
 # e.g. SAMBA_VERSION_REVISION=a                        #
 #  ->  "2.2.8a"                                        #
 ########################################################
-SAMBA_VERSION_REVISION=b
+SAMBA_VERSION_REVISION=
 
 ########################################################
 # For 'pre' releases the version will be               #
@@ -68,7 +68,7 @@ SAMBA_VERSION_RC_RELEASE=
 # e.g. SAMBA_VERSION_IS_SVN_SNAPSHOT=yes               #
 #  ->  "3.0.0-SVN-build-199"                           #
 ########################################################
-SAMBA_VERSION_IS_SVN_SNAPSHOT=yes
+SAMBA_VERSION_IS_GIT_SNAPSHOT=yes


-- 
Samba Shared Repository


More information about the samba-cvs mailing list