[SCM] Samba Shared Repository - branch v3-0-stable updated - release-3-0-32-3-g17111c4

Karolin Seeger kseeger at samba.org
Thu Nov 27 13:29:25 GMT 2008


The branch, v3-0-stable has been updated
       via  17111c4885f9c382510c6cbd8650f0bd5406fcb6 (commit)
       via  c863b220878cef141c5215c37a46a4959264b144 (commit)
       via  798cec6696355aff243efbb40988ebd65efa2f2a (commit)
       via  d4f5b5255f9b95050ddd9d67bd3958402be77918 (commit)
       via  32ebe0dcdcbc86c7f8dcf78669b7407773c0906d (commit)
       via  79a7401b9089fa458e1927126b01e2ad2848a7cc (commit)
       via  04767e3b7c9abbc4c39fc2ff2a7fa7d54786f642 (commit)
       via  5410ad4f4eb0162806778833362a68804d69196e (commit)
       via  6acd5c086b0019f54749a67756975b3c0ba35ac0 (commit)
       via  d29db976dcffef772044b1e5246ec6715d6afbbb (commit)
       via  062bd2592e249cce426369b92c2238a4deb33956 (commit)
       via  c93d42969451949566327e7fdbf29bfcee2c8319 (commit)
       via  312e2df86d9ad9d9766569e57680ee149cd985df (commit)
       via  c0cbac2d584833fd1a34127333d9c8a6f2464929 (commit)
       via  4a8ba39d0dc7f487090a112e5a60294e28a3962c (commit)
       via  2734fb1c50d5bb0d87c8793fc676a45315d0efca (commit)
       via  4fac700a40f13210fa0849244e1427527d77f338 (commit)
       via  df7d320092e17829addeded29d660b0ca9e60aa1 (commit)
       via  df2e84cf4c3ebe3712af966384cff29d897f3616 (commit)
       via  a33dcc6ac77a26e6b88cc2ff5cca93e20019df76 (commit)
       via  4e3bbdebfefa447b415c1a2769cadb8375397736 (commit)
       via  84a5f63d50b24dab6013db61243003fd69f7803c (commit)
       via  3992c8e3a38d925d0b9f4989099ef86fbe917305 (commit)
       via  dd781951fb9acc556f1bd6760b72151a7c359a9f (commit)
       via  a56de3ce7051deed5f36b03186bccac6ea0d2ce4 (commit)
       via  fbb1e2e358af892e121bb3e5e8587d4d5ace4132 (commit)
       via  e9737fded98933cddbbff91fd38600f4bcc99bb2 (commit)
       via  8c12b31481d7c1f8acdec006977c556337adb98f (commit)
       via  fdceef83eb5f8bd8546739c6642f78a790dcf207 (commit)
       via  c7e53dfeae88569fec3eeed0b88f545a1b956ccb (commit)
       via  730af199e62de52a928179b3a6d280ddaba54d50 (commit)
       via  23d199fc736a8c053c16830c75d26a6ce5b84b2b (commit)
       via  a159dc8ded51335b570886bd9dfedfd256a6baff (commit)
       via  4d18a8d6b0fd3bbb395fc01e281af14ea595fc4e (commit)
       via  46d374d0fad91562b4566e2bcdc8560547041086 (commit)
       via  4d7aafc521307d4d3701935c70673afa569a75d5 (commit)
       via  30e2e2df600727d64d7ae5daf47e3f04a11975eb (commit)
       via  cfe8c69e08e73df43e1b8d3080b809c33ee00f4e (commit)
       via  91b0fab36e06ce48cb30b481b425475dcaa072a5 (commit)
       via  021193844ce74a36fc4932171533714b402b7282 (commit)
       via  907e394e636896a7c6939f667e122cae574cf7d4 (commit)
       via  f85ebaa5e80ec39e0ced7694881d18e19e1fa543 (commit)
       via  d72d6c6f3cd4c9a0ca55fe14603def2634cb1274 (commit)
       via  2c5ba596aa53fe8a2bd5449d84ce633004908eaf (commit)
       via  3c604b5b538fa4cf7b4c5ae28a27f3140c1779d8 (commit)
       via  993d8d50103a0dc1dddc31c86b82cbfe6083f3b3 (commit)
       via  d183dc676db0d91ae6b0759c8fd094c4a888d29d (commit)
       via  3e0a19a9494dd7ce95e563476d0d2af81aa196e8 (commit)
       via  48ce0e68353c42296ed6a3b59fa3430f80bde236 (commit)
       via  2ecba5312bbbeb28f939bddb04a2bd84771a8ecc (commit)
       via  4e755cb5f56ee15c5151efc0dfed280c91819a39 (commit)
       via  9f4b28b984e9c41012f596675bf2afc29c36b553 (commit)
       via  407d9916a791d8b734b6aa61ec60bf56496b4389 (commit)
       via  1ad5cd93e69d8b82a71690d16df7e5cb2078bb65 (commit)
       via  3fa483a54d68fcebb204f532eaff01e1dff19f76 (commit)
       via  bd24cb0893236fec79e9db6a655216959958c2a2 (commit)
       via  7571bb2760f16eae88b87a7a4465391c210983cb (commit)
       via  5ec31972e05b0479c615bf64f8fa147ab501345b (commit)
       via  0828099dd7cc3145d2b13fd74c4943ed98bf9750 (commit)
       via  80c39eefffe0ad43d3498ae2eae3aaeb9c259c79 (commit)
       via  8d92b5c3c378654dde974aff2561b4a1a34e8f0f (commit)
       via  72cb76f5682370f99f30a3393be19df764ee1e35 (commit)
       via  c2e96cf6c32a646cdcf803144f115680690e15a8 (commit)
       via  c51dc21e651849f373ea8059381c83f41d99ecac (commit)
       via  1061773401a2d9e0c7c73b7818cf16dcf2f018d6 (commit)
       via  7cb46e9e59355bcff032085d7d883441a34d2482 (commit)
       via  1af605bd21383be3c14a60f4c15b77281f4c88a7 (commit)
       via  36729f6f1680310d51f126aa4b7760f11e405a9c (commit)
       via  db528addf9fa8b0a4ce3b1270cd492725e6cd4d2 (commit)
       via  52f916c611dfb53b38b15ee01ffce120e9fd3e43 (commit)
       via  4f876631b65ab915466526e7f5b97cff2ec92dae (commit)
       via  7fdb5eb6d7dd42fa036edf216d66fea582b6a3f4 (commit)
       via  008c7535b4bbd804952ac3d3c51da4223000ce60 (commit)
       via  ad29a26c4226aa4d4a6a586413dcb0749bfea6b3 (commit)
       via  7ffc312b493d95389266be180d38b8a35584d6d9 (commit)
       via  c537b4376db8eb17904d2cf5fa3ec1fa32548742 (commit)
       via  89b771ea2dc90e3017f1aa26f352afce9d0c0b65 (commit)
       via  c31b83d503289a4ec337c128d63adfcb32087fbe (commit)
       via  e4848b36cae506fc6d7f7fa189d226fe551db2f4 (commit)
       via  2cbe492aac2103bacd6554a0759d76153cf27235 (commit)
       via  f45849448e8a61646b16c8c87e501d1e8c819ccc (commit)
       via  92d067497c60c5eab43bae11e6c1236e6cf760bb (commit)
       via  c9ee260cc6774ca814532c7b4e9a52ad97c80435 (commit)
       via  afce2cd242b1cbfb9d7e837a9f6d3879112b72e3 (commit)
       via  d740f5cc0677ae285dcae1729a194d775a6560ff (commit)
       via  94148384a5d6890c0534c3baebee1a1c61a7705b (commit)
       via  6cb775d5b46dd091739ced9fde92e5620a4373dd (commit)
       via  fa943ff02a45fc68a97087878a4167e42a008ae9 (commit)
       via  0e407e77ad5af4bb78b1e6da247398f2677618ee (commit)
       via  8f076ca8538df1fe7bba1e3c5497076141849e8c (commit)
       via  749178f44ea9a065120478ff1df44a932e45ec37 (commit)
       via  fa07a60da640795513c40e6c23589847a01e9372 (commit)
       via  159946915fe35cab1d0fe2deef8547b720ccc011 (commit)
       via  d48bdc8f5de03b88d79685d2e89f0ed2f8207ef5 (commit)
       via  bc07864b77e10f1f231f9177ba168c222d0c555d (commit)
       via  1164bf7a1bbfa12a20920581d5bc835684321673 (commit)
       via  cf9ef3a45b2cdd150ec77a811e3d4927c3bfbc85 (commit)
       via  8dc4e979776aae0ecaa74b51dc1eac78a7631405 (commit)
       via  fd0ae47046d37ec8297396a2733209c4d999ea91 (commit)
       via  ad7ad45eb8cd40baeafacf5fdec13dbd1e0304d3 (commit)
       via  a7ad5189670d6497c958edc1a85e41ecb50df837 (commit)
       via  a14ae0c29d3777bebe98ced4c4871cc4d9afc699 (commit)
       via  b8596aadffde318b0f902f78bf16a8d342d6608d (commit)
       via  b123fb7948ea37ee7b9346b2a21e76af089ff37e (commit)
       via  b770a81ac20768aa7be77ea79e44b10120148334 (commit)
       via  8f5ddd212c6cd094f2941aa590b6d4e915bf904c (commit)
      from  5c83e5f9d5f672817e64c7c8c0865d3a3e2eaf14 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-stable


- Log -----------------------------------------------------------------
commit 17111c4885f9c382510c6cbd8650f0bd5406fcb6
Author: Karolin Seeger <kseeger at samba.org>
Date:   Tue Nov 18 16:33:23 2008 +0100

    WHATSNEW: Update WHATSNEW for 3.0.33.
    
    Karolin

commit c863b220878cef141c5215c37a46a4959264b144
Author: Volker Lendecke <vl at samba.org>
Date:   Sat Nov 8 17:14:06 2008 +0100

    Fix the offset checks in the trans routines
    
    This fixes a potential crash bug, a client can make us read memory we
    should not read. Luckily I got the disp checks right...
    
    Volker

commit 798cec6696355aff243efbb40988ebd65efa2f2a
Author: Karolin Seeger <kseeger at samba.org>
Date:   Tue Nov 18 15:22:47 2008 +0100

    VERSION: Raise version number up to 3.0.33.
    
    Karolin

-----------------------------------------------------------------------

Summary of changes:
 WHATSNEW.txt                                      |  268 +++++++++++-
 docs-xml/Samba3-HOWTO/TOSHARG-CUPS-printing.xml   |   59 ++--
 docs-xml/Samba3-HOWTO/TOSHARG-TDBFiles.xml        |  152 ++++++
 docs-xml/Samba3-HOWTO/index.xml                   |    2 +
 docs-xml/build/DTD/samba.entities                 |   10 +-
 docs-xml/configure.ac                             |    3 +
 docs-xml/htmldocs.html                            |    2 +-
 docs-xml/manpages-3/ldb.3.xml                     |  265 -----------
 docs-xml/manpages-3/ldbadd.1.xml                  |  108 -----
 docs-xml/manpages-3/ldbdel.1.xml                  |  108 -----
 docs-xml/manpages-3/ldbedit.1.xml                 |  203 --------
 docs-xml/manpages-3/ldbmodify.1.xml               |   96 ----
 docs-xml/manpages-3/ldbsearch.1.xml               |  122 -----
 docs-xml/manpages-3/smbclient.1.xml               |    3 +-
 docs-xml/manpages-3/smbsh.1.xml                   |  164 -------
 docs-xml/manpages-3/winbindd.8.xml                |   29 +-
 docs-xml/smbdotconf/browse/oslevel.xml            |    3 +-
 docs-xml/smbdotconf/misc/dosfilemode.xml          |   17 +-
 docs-xml/smbdotconf/printing/printcapname.xml     |    2 +-
 docs-xml/smbdotconf/security/aclgroupcontrol.xml  |    6 +-
 docs-xml/smbdotconf/security/passwordserver.xml   |    3 +-
 docs-xml/smbdotconf/security/unixpasswordsync.xml |    2 +-
 docs-xml/smbdotconf/vfs/getquotacommand.xml       |    5 +-
 docs-xml/smbdotconf/winbind/idmapbackend.xml      |    4 +-
 docs-xml/smbdotconf/winbind/idmapconfig.xml       |    9 +-
 docs-xml/xslt/expand-smbconfdoc.xsl               |    3 +
 examples/LDAP/README                              |    2 +-
 examples/libsmbclient/smbwrapper/smbsh.1          |  203 ++++++++
 examples/libsmbclient/smbwrapper/smbsh.1.html     |  108 +++++
 examples/libsmbclient/smbwrapper/smbsh.1.xml      |  164 +++++++
 release-scripts/build-docs                        |   28 ++
 release-scripts/create-tarball                    |  222 +++++++++
 source/VERSION                                    |    2 +-
 source/auth/auth_sam.c                            |    5 +-
 source/auth/auth_util.c                           |   76 +++-
 source/client/client.c                            |    2 +-
 source/client/mount.cifs.c                        |    3 +
 source/client/smbctool.c                          |    2 +-
 source/client/smbspool.c                          |    2 +-
 source/configure.in                               |    6 +-
 source/include/includes.h                         |    5 +
 source/include/smb.h                              |    3 +-
 source/lib/interface.c                            |   17 +
 source/lib/replace/replace.c                      |    3 +
 source/lib/system.c                               |    5 +
 source/lib/time.c                                 |    8 +-
 source/lib/util_sock.c                            |   34 +-
 source/lib/util_str.c                             |    4 +-
 source/libads/dns.c                               |    2 +-
 source/libads/kerberos.c                          |    4 +
 source/libsmb/asn1.c                              |    1 +
 source/libsmb/cliconnect.c                        |   48 +-
 source/libsmb/clientgen.c                         |    9 +-
 source/libsmb/clierror.c                          |    1 +
 source/libsmb/namequery.c                         |   42 ++-
 source/libsmb/smbencrypt.c                        |    1 +
 source/nmbd/nmbd.c                                |    2 +-
 source/nmbd/nmbd_subnetdb.c                       |    6 +-
 source/nsswitch/idmap_util.c                      |    5 +-
 source/nsswitch/pam_winbind.c                     |   42 ++-
 source/nsswitch/wb_common.c                       |   14 +
 source/nsswitch/winbindd.c                        |   44 ++-
 source/nsswitch/winbindd_cache.c                  |    4 +-
 source/nsswitch/winbindd_cm.c                     |   33 +-
 source/nsswitch/winbindd_dual.c                   |   44 +-
 source/nsswitch/winbindd_group.c                  |    7 +-
 source/nsswitch/winbindd_pam.c                    |   30 ++-
 source/nsswitch/winbindd_passdb.c                 |  511 +++++++++++++++------
 source/nsswitch/winbindd_util.c                   |   25 +-
 source/pam_smbpass/support.c                      |   19 +-
 source/param/loadparm.c                           |    2 +-
 source/passdb/secrets.c                           |    7 +-
 source/printing/printing.c                        |    6 +-
 source/rpc_client/cli_netlogon.c                  |    3 +-
 source/rpc_client/cli_pipe.c                      |    4 +-
 source/rpc_server/srv_samr_util.c                 |   30 ++-
 source/rpc_server/srv_spoolss_nt.c                |  110 +++---
 source/rpcclient/cmd_netlogon.c                   |    2 +-
 source/smbd/ipc.c                                 |    8 +-
 source/smbd/nttrans.c                             |    6 +-
 source/smbd/oplock_linux.c                        |   44 +--
 source/smbd/posix_acls.c                          |   32 +-
 source/smbd/process.c                             |    3 +-
 source/smbd/sesssetup.c                           |   18 +-
 source/smbd/trans2.c                              |    6 +-
 source/utils/net.c                                |   61 ++-
 source/utils/net_domain.c                         |   22 +
 source/utils/net_help.c                           |    9 +-
 source/utils/net_idmap.c                          |    2 +-
 source/utils/net_rpc.c                            |    2 +-
 source/utils/net_rpc_join.c                       |    6 +-
 source/utils/smbfilter.c                          |    4 +-
 92 files changed, 2204 insertions(+), 1629 deletions(-)
 create mode 100644 docs-xml/Samba3-HOWTO/TOSHARG-TDBFiles.xml
 delete mode 100644 docs-xml/manpages-3/ldb.3.xml
 delete mode 100644 docs-xml/manpages-3/ldbadd.1.xml
 delete mode 100644 docs-xml/manpages-3/ldbdel.1.xml
 delete mode 100644 docs-xml/manpages-3/ldbedit.1.xml
 delete mode 100644 docs-xml/manpages-3/ldbmodify.1.xml
 delete mode 100644 docs-xml/manpages-3/ldbsearch.1.xml
 delete mode 100644 docs-xml/manpages-3/smbsh.1.xml
 create mode 100644 examples/libsmbclient/smbwrapper/smbsh.1
 create mode 100644 examples/libsmbclient/smbwrapper/smbsh.1.html
 create mode 100644 examples/libsmbclient/smbwrapper/smbsh.1.xml
 create mode 100755 release-scripts/build-docs
 create mode 100755 release-scripts/create-tarball


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index cdb3703..dc38db8 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,11 +1,264 @@
+                   ==============================
+                   Release Notes for Samba 3.0.33
+                         November, 27 2008
+                   ==============================
+
+
+This is a security release in order to address CVE-2008-4314 ("Potential leak of
+arbitrary memory contents").
+
+   o CVE-2008-4314
+     Samba 3.0.29 to 3.2.4 can potentially leak
+     arbitrary memory contents to malicious
+     clients.
+
+The original security announcement for this and past advisories can
+be found http://www.samba.org/samba/security/
+
+######################################################################
+Changes
+#######
+
+Changes since 3.0.32
+--------------------
+
+
+o   Volker Lendecke <vl at samba.org>
+    * Fix for CVE-2008-4314.
+
+
+
+
+Release notes for older releases follow:
+
+      --------------------------------------------------
+                   ===============================
+                   Release Notes for Samba 3.0.32
+                             Aug 25, 2008
+                   ===============================
+
+This is a bug fix release of the Samba 3.0 production series
+and is the version that servers should be run for all current
+Samba 3.0 bug fixes.
+
+User visible bug fixes in this release include:
+
+    o Prevent crash bug in Winbind caused by a race condition
+      when a child process becomes unresponsive.
+    o Fix interactive password prompting in the "net" command.
+    o Documentation clarifications and typographical fixes.
+
+
+######################################################################
+Changes
+#######
+
+Changes since 3.0.31
+--------------------
+
+o   Michael Adam <obnox at samba.org>
+    * Docs fix for "password server" parameter.
+    * Fix IPC connections with interactive password prompt.
+
+
+o   Jeremy Allison <jra at samba.org>
+    * BUG 5697: nmbd spins in reload_interfaces when only loopback
+      exists.
+    * Don't re-initialize a token when we already have one.
+
+
+o   Gerald (Jerry) Carter <jerry at samba.org>
+    * When returning NSS_UNAVAIL from libnss_winbind, squash errno
+      to ENOENT.
+
+
+o   Volker Lendecke <vl at samba.org>
+    * Fix a race condition in winbind leading to a crash.
+
+
+o   Jim McDonough <jmcd at samba.org>
+    * Correct interaction between Winbind log files and the 
+      "log file" smb.conf parameter upon a reload.
+
+
+o   Karolin Seeger <kseeger at samba.org>
+    * Fix scope description of the "printcap name" parameter in 
+      smb.conf(5).
+    * Fix typos in smbclient man page.
+
+
+o   Bo Yang <boyang at novell.com>
+    * Allow %u parameters for print job username.
+
+
+o   Christoph Zauner <christoph.zauner at sernet.de>
+    * Corrections to various man pages.
+
+
+      --------------------------------------------------
+                   ===============================
+                   Release Notes for Samba 3.0.31
+                             July 10, 2008
+                   ===============================
+
+This is a bug fix release of the Samba 3.0 production series
+and is the version that servers should be run for all current
+Samba 3.0 bug fixes.
+
+User visible bug fixes in this release include:
+
+    o Correct issues with running Winbind running on a Samba PDC.
+    o Problems with trusted Windows 2008 domains.
+    o Difficulty joining an NT4 or Windows 2000 AD domain.
+
+
+######################################################################
+Changes
+#######
+
+Changes since 3.0.30
+--------------------
+
+o   Jeremy Allison <jra at samba.org>
+    * BUG 5504: Fix SIGTERM handling in Winbind children so that they
+      do not remove the unix domain socket used to field client requests.
+    * Split the winbindd_passdb backend into a 'builtin' and a 'sam'
+      backend.
+    * When allocating client buffers for large read/write - make sure we 
+      take account of the large read/write SMB headers as well as the buffer
+      space.
+    * Memory leak fixes in DC location code.
+    * BUG 5533: Winbindd fails to cope correctly with a workgroup name 
+      containing a '.'
+    * BUG 5555: Don't return NT_STATUS_PASSWORD_MUST_CHANGE error on machine
+      account logon.
+    * BUG 5551: smbd recursing back into winbindd from a winbindd call.
+    * Fix usage message for "net rpc trustdom add".
+    * Ensure consistent use of pdb_get_nt_passwd instead of pdb_get_lanman_passwd.
+    * BUG 5578: Bad (non-Samba) use of strlcat gives error.
+    * Canonicalize servername in the printer functions to remove leading '\\' 
+      characters.
+
+
+o   Alexander Bokovoy <ab at samba.org>
+    * Documentation build fixes.
+    * [DOCS] Fix use of smbconfoption in samba.entities.
+
+
+o   Gerald (Jerry) Carter <jerry at samba.org>
+    * Return NULL in sitename_fetch() if gencache_init() fails.
+
+
+o   Steven Danneman <steven.danneman at isilon.com>
+    * Use machine account and machine password from our domain when
+      contacting trusted domains.
+    * SPNEGO SPN fix when contacting trusted domains.
+
+
+o   Guenther Deschner <gd at samba.org>
+    * BUG 5285: Fix libcap header mismatch.
+    * Fix joining NT4 domains.
+    * Don't let winbind getgroups crash when we have no gids in the
+      token.
+    * Fallback to level 24 pwd set while joining.
+    * Fix joining w2k domains in "security = ads".
+    * Fix pam_sm_chauthtok for storing modified cached creds.
+
+
+o   SATOH Fumiyasu <fumiyas at osstech.co.jp> 
+    * BUG 5202: Re-activate "acl group control" parameter and make it
+      only apply to owning group.
+
+
+o   <hkurma at datadomain.com>
+    * BUG 5531: Fix conversion of ns units when converting from
+      nttime to timespec.
+
+
+o   Volker Lendecke <vl at samba.org>
+    * BUG 4974: Map NT_STATUS_OBJECT_PATH_NOT_FOUND to ENOENT in libsmbclient.
+    * Fix a segfault in base64_encode_data_blob.
+
+
+o   William Jojo <jojowil at hvcc.edu>
+    * AIX build fixes.
+
+
+o   Herb Lewis <herb at samba.org>
+    * ENODATA is not defined in freeBSD 4.6.2.
+
+
+o   Jim McDonough <jmcd at samba.org>
+    * Don't reset password last set time just because the expired flag
+      is set to 0.
+
+
+o   Karolin Seeger <kseeger at samba.org>
+    * Fix usage message for 'net idmap dump'.
+    * Miscellaneous man page fixes.
+    * BUG 4203: Samba3-HOWTO: Add improvements/fixes submitted by Pete Boyd.
+
+
+o   John H Terpstra <jht at samba.org>
+    * Fixes to man pages.
+    * Add tdb file documentation.
+
+
+o   Bo Yang <boyang at novell.com>
+    * Ensure that winbindd trusted domain children keep primary domain online
+      status up to date.
+    * Update cached creds during password change.
+    * Ensure that Winbind always uses set_domain_offline() to mark a domain
+      offline.
+    * Allow authentication and memory credential refresh after password change
+      from gdm/xdm.
+
+
+o   Chere Zhou <czhou at isilon.com>
+    * Memory leak fixes.
+
+
+      --------------------------------------------------
+                   ===============================
+                   Release Notes for Samba 3.0.30
+                            May 28, 2008
+                   ===============================
+
+This is a security release in order to address CVE-2008-1105 ("Boundary 
+failure when parsing SMB responses can result in a buffer overrun").
+
+  o CVE-2008-1105
+    Specifically crafted SMB responses can result in a heap overflow 
+    in the Samba client code.  Because the server process, smbd, can 
+    itself act as a client during operations such as printer notification
+    and domain authentication,  this issue affects both Samba client 
+    and server installations.
+    
+The original security announcement for this and past advisories can 
+be found http://www.samba.org/samba/security/
+
+
+######################################################################
+Changes
+#######
+
+Changes since 3.0.29
+--------------------
+
+o   Jeremy Allison <jra at samba.org>
+    * Fix for CVE-2008-1105.
+
+
+o   Karolin Seeger <kseeger at samba.org>
+    * Remove man pages for ldb tools not included in Samba 3.0.
+
+      --------------------------------------------------
+
                    ===============================
                    Release Notes for Samba 3.0.29
                             May 20, 2008
                    ===============================
 
-This is a bug fix release of the Samba 3.0 production series and is the
-version that servers should be run for for all current Samba 3.0 bug fixes.  
-
 Major bug fixes included in Samba 3.0.29 are:
 
   o Problems following domain trusts on a Samba DC.
@@ -56,7 +309,7 @@ o   Gerald (Jerry) Carter <jerry at samba.org>
 
 
 o   Glenn Curtis <gcurtis at likewisesoftware.com>
-    * Prevent cycle in Wibind's list of children when reaping dead processes.
+    * Prevent cycle in Winbind's list of children when reaping dead processes.
 
 
 o   Steven Danneman <steven.danneman at isilon.com>
@@ -104,7 +357,7 @@ o   Jim McDonough <jmcd at samba.org>
 
 
 o   Karolin Seeger <kseeger at samba.org>
-    * Documentation cleanup after r emerging docs from svn to git and 
+    * Documentation cleanup after merging docs from svn to git and 
       back-porting from the v3-2 branch.
 
 
@@ -128,8 +381,6 @@ o   Martin Zielinski <mz at seh.de>
 
 
 
-Release notes for older releases follow:
-
       --------------------------------------------------
 
                    ===============================
@@ -326,9 +577,6 @@ o   Bo Yang <boyang at novell.com>
 
 
 
-Release notes for older releases follow:
-
-      --------------------------------------------------
 
                    ==============================
                    Release Notes for Samba 3.0.28
diff --git a/docs-xml/Samba3-HOWTO/TOSHARG-CUPS-printing.xml b/docs-xml/Samba3-HOWTO/TOSHARG-CUPS-printing.xml
index 9b12e4c..50d2f6b 100644
--- a/docs-xml/Samba3-HOWTO/TOSHARG-CUPS-printing.xml
+++ b/docs-xml/Samba3-HOWTO/TOSHARG-CUPS-printing.xml
@@ -185,11 +185,10 @@ libcups.so.2 =&gt; /usr/lib/libcups.so.2 (0x40123000)
 	<smbconfoption name="comment">All Printers</smbconfoption>
 	<smbconfoption name="path">/var/spool/samba</smbconfoption>
 	<smbconfoption name="browseable">no</smbconfoption>
-	<smbconfoption name="public">yes</smbconfoption>
 	<smbconfoption name="guest ok">yes</smbconfoption>
 	<smbconfoption name="writable">no</smbconfoption>
 	<smbconfoption name="printable">yes</smbconfoption>
-	<smbconfoption name="printer admin">root, @ntadmins</smbconfoption>
+	<smbconfoption name="printer admin">root, @ntadmins, @smbprintadm</smbconfoption>
 	</smbconfblock>
 	</example>
 
@@ -230,11 +229,10 @@ libcups.so.2 =&gt; /usr/lib/libcups.so.2 (0x40123000)
 	<smbconfsection name="[printers]"/>
 	<smbconfoption name="comment">All Printers</smbconfoption>
 	<smbconfoption name="path">/var/spool/samba</smbconfoption>
-	<smbconfoption name="public">yes</smbconfoption>
 	<smbconfoption name="guest ok">yes</smbconfoption>
 	<smbconfoption name="writable">no</smbconfoption>
 	<smbconfoption name="printable">yes</smbconfoption>
-	<smbconfoption name="printer admin">root, @ntadmins</smbconfoption>
+	<smbconfoption name="printer admin">root, @ntadmins, @smbprintadm</smbconfoption>
 
 	<smbconfsection name="[special_printer]"/>
 	<smbconfoption name="comment">A special printer with his own settings</smbconfoption>
@@ -242,7 +240,6 @@ libcups.so.2 =&gt; /usr/lib/libcups.so.2 (0x40123000)
 	<smbconfoption name="printing">sysv</smbconfoption>
 	<smbconfoption name="printcap">lpstat</smbconfoption>
 	<smbconfoption name="print command">echo "NEW: `date`: printfile %f" >> /tmp/smbprn.log ; echo "     `date`: p-%p s-%s f-%f" >> /tmp/smbprn.log ; echo "     `date`: j-%j J-%J z-%z c-%c" >> /tmp/smbprn.log ; rm %f </smbconfoption>
-	<smbconfoption name="public">no</smbconfoption>
 	<smbconfoption name="guest ok">no</smbconfoption>
 	<smbconfoption name="writable">no</smbconfoption>
 	<smbconfoption name="printable">yes</smbconfoption>
@@ -402,7 +399,9 @@ libcups.so.2 =&gt; /usr/lib/libcups.so.2 (0x40123000)
 	</itemizedlist>
 
 	<para>
-	The second method is recommended for use over the first.
+	The second method is recommended for use over the first as it reduces the
+	administrative efforts and prevents that different versions of the drivers
+	are used accidentally.
 	</para>
 	</sect2>
 
@@ -765,7 +764,7 @@ application/octet-stream   application/vnd.cups-raw   0   -
 	deficiencies.  <indexterm><primary>Ghostscript</primary><secondary>ESP</secondary><see>ESP
 	GhostScript</see></indexterm> Therefore, ESP Ghostscript was developed as an enhancement over GNU Ghostscript,
 	with lots of bug-fixes, additional devices, and improvements. It is jointly maintained by developers from
-	CUPS, Gimp-Print, MandrakeSoft, SuSE, Red Hat, and Debian. It includes the <quote>cups</quote> device
+	CUPS, Gutenprint, MandrakeSoft, SuSE, Red Hat, and Debian. It includes the <quote>cups</quote> device
 	(essential to print to non-PS printers from CUPS).
 	</para></tip>
 
@@ -992,7 +991,7 @@ application/postscript  ai eps ps string(0,%!) string(0,&lt;04&gt;%!)
 	<parameter>application/postscript</parameter>, the other is
 	<parameter>application/vnd.cups-postscript</parameter>. While <parameter>application/postscript</parameter> is
 	meant to be device-independent, job options for the file are still outside the PS file content, embedded in
-	command-line or environment variables by CUPS, <parameter>application/vnd.cups-postscript</parameter> may have
+	command line or environment variables by CUPS, <parameter>application/vnd.cups-postscript</parameter> may have
 	the job options inserted into the PostScript data itself (where applicable). The transformation of the generic
 	PostScript (<parameter>application/postscript</parameter>) to the device-specific version
 	(<parameter>application/vnd.cups-postscript</parameter>) is the responsibility of the CUPS
@@ -1136,7 +1135,7 @@ text/plain              application/postscript   33    texttops
 
 		<varlistentry><term>filename</term>
 			<listitem><para>
-			(optionally) The print request file (if missing, filters expected data
+			(optionally) The print request file (if missing, filters expect data
 			fed through <filename>stdin</filename>). In most cases, it is easy to
 			write a simple wrapper script around existing filters to make them work with CUPS.
 			</para></listitem>
@@ -1328,7 +1327,7 @@ text/plain              application/postscript   33    texttops
 <indexterm><primary>rastertohp</primary></indexterm>
 <indexterm><primary>rastertoprinter</primary></indexterm>
 <indexterm><primary>rastertoprinter</primary></indexterm>
-<indexterm><primary>Gimp-Print</primary></indexterm>
+<indexterm><primary>Gutenprint</primary></indexterm>
 	CUPS ships with quite a variety of raster drivers for processing CUPS raster. On my system, I find in
 	/usr/lib/cups/filter/ the following: <parameter>rastertoalps</parameter>, <parameter>rastertobj</parameter>,
 	<parameter>rastertoepson</parameter>, <parameter>rastertoescp</parameter>, <parameter>rastertopcl</parameter>,
@@ -1336,7 +1335,7 @@ text/plain              application/postscript   33    texttops
 	<parameter>rastertodymo</parameter>, <parameter>rastertoescp</parameter>, <parameter>rastertohp</parameter>,
 	and <parameter>rastertoprinter</parameter>. Don't worry if you have fewer drivers than this; some of these are
 	installed by commercial add-ons to CUPS (like <parameter>rastertoturboprint</parameter>), and others (like
-	<parameter>rastertoprinter</parameter>) by third-party driver development projects (such as Gimp-Print)
+	<parameter>rastertoprinter</parameter>) by third-party driver development projects (such as Gutenprint)
 	wanting to cooperate as closely as possible with CUPS. See <link linkend="small9">the Raster to
 	Printer-Specific Formats illustration</link>.
 	</para>
@@ -1512,8 +1511,8 @@ text/plain              application/postscript   33    texttops
 	file. If you have such a PPD installed, the printer shows up in the
 	CUPS Web interface with a <parameter>foomatic</parameter> namepart for
 	the driver description. <parameter>cupsomatic</parameter> is a Perl script that runs
-	Ghostscript with all the complicated command-line options
-	autoconstructed from the selected PPD and command line options give to
+	Ghostscript with all the complicated command line options
+	autoconstructed from the selected PPD and command line options given to
 	the print job.
 	</para>
 
@@ -1533,7 +1532,7 @@ text/plain              application/postscript   33    texttops
 	generation of them, still in heavy use out there) are not meeting the
 	Adobe specifications. You might also suffer difficulties when you try
 	to download them with <quote>Point'n'Print</quote> to Windows clients. A better
-	and more powerful successor is now in a stable beta-version: it is called <parameter>foomatic-rip</parameter>. To use
+	and more powerful successor is now available: it is called <parameter>foomatic-rip</parameter>. To use
 	<parameter>foomatic-rip</parameter> as a filter with CUPS, you need the new type of PPDs, which
 	have a similar but different line:
 <programlisting>
@@ -1735,7 +1734,7 @@ application/octet-stream   application/vnd.cups-raw   0   -
 	file. Therefore, CUPS should autoconstruct a filtering chain, which
 	delivers as its last output the specified MIME type. This is then
 	taken as input to the specified <parameter>rastertoprinter</parameter> filter. After
-	the last filter has done its work (<parameter>rastertoprinter</parameter> is a Gimp-Print
+	the last filter has done its work (<parameter>rastertoprinter</parameter> is a Gutenprint
 	filter), the file should go to the backend, which sends it to the
 	output device.
 	</para>
@@ -1898,7 +1897,7 @@ application/octet-stream   application/vnd.cups-raw   0   -
 	would still show all pages of the original PDF).</para></listitem>
 
 	<listitem><para>The file then passes the <parameter>pstops</parameter>
-	filter that applies the command-line options: it selects pages
+	filter that applies the command line options: it selects pages
 	2-5, 7, and 11-13, creates the imposed layout <quote>two pages on one sheet</quote>, and
 	inserts the correct <quote>duplex</quote> command (as defined in the printer's
 	PPD) into the new PostScript file; the file is now of PostScript MIME
@@ -1951,7 +1950,7 @@ application/octet-stream   application/vnd.cups-raw   0   -
 <indexterm><primary>pstops</primary></indexterm>
 <indexterm><primary>duplex printing</primary></indexterm>
 		The file then passes the <quote>pstops</quote> filter that applies
-		the command-line options: it selects the pages 2-5, 7, and 11-13,
+		the command line options: it selects the pages 2-5, 7, and 11-13,
 		creates the imposed layout <quote>two pages on one sheet,</quote> and inserts the
 		correct <quote>duplex</quote> command (oops &smbmdash; this printer and PPD
 		do not support duplex printing at all, so this option will
@@ -2011,9 +2010,9 @@ application/octet-stream   application/vnd.cups-raw   0   -
 		</para></listitem>
 
 		<listitem><para>
-		The <ulink url="http://gimp-print.sourceforge.net/">Gimp-Print Project</ulink>
+		The <ulink url="http://gimp-print.sourceforge.net/">Gutenprint Project</ulink>
 		(GPL, free software) provides around 140 PPDs (supporting nearly 400 printers, many driven
-		to photo quality output), to be used alongside the Gimp-Print CUPS filters.
+		to photo quality output), to be used alongside the Gutenprint CUPS filters.
 		</para></listitem>
 
 		<listitem><para>
@@ -2037,7 +2036,7 @@ application/octet-stream   application/vnd.cups-raw   0   -
 		<listitem><para>
 		<ulink url="http://www.linuxprinting.org/">Foomatic/cupsomatic </ulink>
 		(LPGL, free) from Linuxprinting.org provide PPDs for practically every Ghostscript
-		filter known to the world (including Omni, Gimp-Print, and HPIJS).
+		filter known to the world (including Omni, Gutenprint, and HPIJS).
 		</para></listitem>
 	</itemizedlist>
 
@@ -2271,7 +2270,7 @@ PostScript, PCL, or PJL commands for the target printer. Printer driver GUI dial
 CUPS can load, without any conversions, the PPD file from any Windows (NT is recommended) PostScript driver
 and handle the options. There is a Web browser interface to the print options (select <ulink noescape="1"
 url="http://localhost:631/printers/">http://localhost:631/printers/</ulink> and click on one
-<guibutton>Configure Printer</guibutton> button to see it) or a command-line interface (see <command>man
+<guibutton>Configure Printer</guibutton> button to see it) or a command line interface (see <command>man
 lpoptions</command> or see if you have <command>lphelp</command> on your system). There are also some
 different GUI front-ends on Linux/UNIX, which can present PPD options to users. PPD options are normally meant
 to be evaluated by the PostScript RIP on the real PostScript printer.
@@ -2481,7 +2480,6 @@ Prior to running <command>cupsaddsmb</command>, you need the settings in
 <smbconfoption name="comment">All Printers</smbconfoption>
 <smbconfoption name="path">/var/spool/samba</smbconfoption>
 <smbconfoption name="browseable">no</smbconfoption>
-<smbconfoption name="public">yes</smbconfoption>
 <smbconfcomment>setting depends on your requirements</smbconfcomment>
 <smbconfoption name="guest ok">yes</smbconfoption>
 <smbconfoption name="writable">no</smbconfoption>
@@ -2493,7 +2491,7 @@ Prior to running <command>cupsaddsmb</command>, you need the settings in
 <smbconfoption name="browseable">yes</smbconfoption>
 <smbconfoption name="guest ok">no</smbconfoption>
 <smbconfoption name="read only">yes</smbconfoption>
-<smbconfoption name="write list">root</smbconfoption>
+<smbconfoption name="write list">root, @smbprintadm</smbconfoption>
 </smbconfblock>
 </example>
 </sect2>
@@ -3061,7 +3059,8 @@ CUPS/Samba server:
 After a few seconds, there should be a new printer in your client's <emphasis>local</emphasis>
 <guilabel>Printers</guilabel> folder. On Windows XP it will follow a naming convention of


-- 
Samba Shared Repository


More information about the samba-cvs mailing list