[SCM] Samba Shared Repository - branch v3-2-stable updated - release-3-2-11-52-g98c9a24

Karolin Seeger kseeger at samba.org
Mon Jun 15 08:27:26 GMT 2009


The branch, v3-2-stable has been updated
       via  98c9a24a01c72d25b3b7eeb2697a2964f08b3d76 (commit)
       via  e892c4faa28193a6529464159e759d8d2b0d92d4 (commit)
       via  4afb8f741152282c7426592336b2e1e22abc61dd (commit)
       via  efc993a2aa6d0745c5868080640ebea3409b6818 (commit)
       via  51f6f4343568b19e4c6ba2a3f919931b26228531 (commit)
       via  d0690a1f34658f0c08307d5287eba5ca2d2da9d5 (commit)
      from  8ba1a1f61986132bb6f5b2f36b59a73e952b381d (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable


- Log -----------------------------------------------------------------
commit 98c9a24a01c72d25b3b7eeb2697a2964f08b3d76
Author: Karolin Seeger <kseeger at samba.org>
Date:   Mon Jun 15 10:25:48 2009 +0200

    WHATSNEW: Update changes since 3.2.11.
    
    Karolin
    (cherry picked from commit f2ae8244603a4232331b7c3128661aec08ecd977)

commit e892c4faa28193a6529464159e759d8d2b0d92d4
Author: Karolin Seeger <kseeger at samba.org>
Date:   Fri Jun 12 15:06:32 2009 +0200

    WHATSNEW: Attach old release notes.
    
    Karolin
    (cherry picked from commit fb5b65081ea2199e2c3b3a36acfe578b5c2f15d1)

commit 4afb8f741152282c7426592336b2e1e22abc61dd
Author: Sébastien Prud'homme <sebastien.prudhomme at gmail.com>
Date:   Fri Jun 12 09:11:57 2009 +0200

    s3/idmap: Fix out of memory error with Winbind idmap.
    
    This fixes bug #5945.
    (cherry picked from commit a7735416792f8156e53a04af98e7e2dff0b6707d)

commit efc993a2aa6d0745c5868080640ebea3409b6818
Author: Jeremy Allison <jra at samba.org>
Date:   Fri Jun 12 10:27:07 2009 +0200

    Revert the extra SAMR and LSA checks.
    
    These were added between 3.2.4 and 3.2.5 that have caused users problems.
    This fixes among others bug #6089 and #6112.
    (cherry picked from commit f2a29585123e6072a75eb9abdd202f99f5a01e1e)

commit 51f6f4343568b19e4c6ba2a3f919931b26228531
Author: Günther Deschner <gd at samba.org>
Date:   Sun Jun 7 11:23:09 2009 +0200

    s3-groupdb: fix enum_aliasmem in ldb branch.
    
    It is totally valid to have an alias with no members.
    This fixes bug #6465.
    
    Tridge, please check.
    
    Found by RPC-SAMR torture test.
    
    Guenther
    (cherry picked from commit d27c4346397b828e3d7d01473f174577440d950a)

commit d0690a1f34658f0c08307d5287eba5ca2d2da9d5
Author: Günther Deschner <gd at samba.org>
Date:   Fri Jun 12 00:46:38 2009 +0200

    s3-docs: Fix Bug #4280. Shutdown scripts are called as root for privileged users.
    
    GUenther
    (cherry picked from commit 3938d1e5fa1996f64e92d33d6893bab620d16b23)
    (cherry picked from commit 0491f038403036814acf6eacc7bb742345bbe27b)
    (cherry picked from commit d4b57dab0beada704fcbeae86ae5b5dd257030a0)
    (cherry picked from commit 191f34654b653ed1f376c842d2d023c43eb866e0)

-----------------------------------------------------------------------

Summary of changes:
 WHATSNEW.txt                                      | 1648 +++++++++++++++++++++
 docs-xml/smbdotconf/logon/abortshutdownscript.xml |    2 +-
 docs-xml/smbdotconf/logon/shutdownscript.xml      |    2 +-
 source/groupdb/mapping_ldb.c                      |    2 +-
 source/rpc_server/srv_lsa_nt.c                    |   12 -
 source/rpc_server/srv_samr_nt.c                   |   58 -
 source/winbindd/idmap.c                           |    8 +-
 7 files changed, 1657 insertions(+), 75 deletions(-)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 684e88c..5e1defb 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -8,6 +8,7 @@ This is a maintenance release of the Samba 3.2 series.
 
 Major enhancements in 3.2.12 include:
 
+    o Fix SAMR and LSA checks (bug #6089, #6289)
     o Fix posix acls when setting an ACL without explicit ACE for the
       owner (bug #2346).
     o Fix "force user" (bug #6291).
@@ -28,8 +29,10 @@ o   Michael Adam <obnox at samba.org>
 
 
 o   Jeremy Allison <jra at samba.org>
+    * BUG 6089: Revert the extra SAMR and LSA checks.
     * BUG 6099: Fix joining of Win7 into Samba domain.
     * BUG 6279: Fix Winbind crash.
+    * BUG 6289: Revert the extra SAMR and LSA checks.
     * BUG 6291: Fix "force user".
     * BUG 6386: Groupdb mapping fix.
     * Fix bug in processing of open modes in POSIX open.
@@ -39,6 +42,7 @@ o   Guenther Deschner <gd at samba.org>
     * BUG 6099: Fix joining of Win7 into Samba domain.
     * BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit.
     * BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
+    * BUG 6465: Fix enumeration of empty aliases (ldb backend).
     * Protect netlogon_creds_server_step() against NULL creds.
 
 
@@ -62,6 +66,10 @@ o   D.L. Meyer <dlmeyer at uiuc.edu>
     * BUG 5832: Fix build on RHEL when ccache is not available.
 
 
+o   Sébastien Prud'homme <sebastien.prudhomme at gmail.com>
+    * BUG 5945: Fix out of memory error with Winbind idmap.
+
+
 o   Karolin Seeger <kseeger at samba.org>
     * BUG 5853: Add keyutils-devel to build requires.
 
@@ -90,3 +98,1643 @@ database (https://bugzilla.samba.org/).
 == The Samba Team
 ======================================================================
 
+
+Release notes for older releases follow:
+----------------------------------------
+
+
+                   ==============================
+                   Release Notes for Samba 3.2.11
+			   April 17, 2009
+                   ==============================
+
+
+This is a maintenance release of the Samba 3.2 series.
+
+Major enhancements in 3.2.11 include:
+
+    o Fix domain logins for WinXP clients pre SP3 (bug #6263).
+    o Fix samr_OpenDomain access checks (bug #6089).
+    o Fix smbd crash for close_on_completion.
+
+
+######################################################################
+Changes
+#######
+
+Changes since 3.2.10
+--------------------
+
+
+o   Jeremy Allison <jra at samba.org>
+    * BUG 6089: Fix samr_OpenDomain access checks.
+    * BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with
+      "msdfs root" set to "yes".
+    * Allow pdbedit to change a user rid/sid.
+    * When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid.
+
+
+o   Günther Deschner <gd at samba.org>
+    * BUG 6205: Correct sample smb.conf share configuration.
+    * BUG 6263: Fix domain logins for WinXP clients pre SP3.
+    * Fix resume command typo for "printing = vlp".
+
+
+o   Volker Lendecke <vl at samba.org>
+    * Fix smbd crash for close_on_completion.
+    * Fix a memleak in an unlikely error path in change_notify_create().
+
+
+o   Jim McDonough <jmcd at samba.org>
+    * Don't look up local user for remote changes, even when root.
+
+
+######################################################################
+Reporting bugs & Development Discussion
+#######################################
+
+Please discuss this release on the samba-technical mailing list or by
+joining the #samba-technical IRC channel on irc.freenode.net.
+
+If you do report problems then please try to send high quality
+feedback. If you don't provide vital information to help us track down
+the problem then you will probably be ignored.  All bug reports should
+be filed under the Samba 3.2 product in the project's Bugzilla
+database (https://bugzilla.samba.org/).
+
+
+======================================================================
+== Our Code, Our Bugs, Our Responsibility.
+== The Samba Team
+======================================================================
+
+
+----------------------------------------------------------------------
+
+
+                   ==============================
+                   Release Notes for Samba 3.2.10
+			    April 1, 2009
+                   ==============================
+
+
+This is a maintenance release of the Samba 3.2 series.
+
+In Samba 3.2.9, there is an issue while migrating passdb.tdb files from older
+Samba versions (e.g. 3.2.8). That causes panics of smbd child processes until
+the parent smbd is restarted once after converting the passdb.tdb file. This
+issue is fixed in Samba 3.2.10.
+
+Sorry for the inconveniences!
+
+######################################################################
+Changes
+#######
+
+Changes since 3.2.9
+-------------------
+
+
+o   Michael Adam <obnox at samba.org>
+    * BUG #6195: Don't let smbd child processes panic.
+
+
+######################################################################
+Reporting bugs & Development Discussion
+#######################################
+
+Please discuss this release on the samba-technical mailing list or by
+joining the #samba-technical IRC channel on irc.freenode.net.
+
+If you do report problems then please try to send high quality
+feedback. If you don't provide vital information to help us track down
+the problem then you will probably be ignored.  All bug reports should
+be filed under the Samba 3.2 product in the project's Bugzilla
+database (https://bugzilla.samba.org/).
+
+
+======================================================================
+== Our Code, Our Bugs, Our Responsibility.
+== The Samba Team
+======================================================================
+
+
+----------------------------------------------------------------------
+
+
+                   =============================
+                   Release Notes for Samba 3.2.9
+			  March 31, 2009
+                   =============================
+
+
+This is a maintenance release of the Samba 3.2 series.
+
+Major enhancements included in Samba 3.2.9 are:
+
+  o Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb
+    correctly (bug #6195).
+  o Fix guest authentication in setups with "security = share" and
+    "guest ok = yes" when Winbind is running.
+  o Fix corruptions of source path in tar mode of smbclient (bug #6161).
+
+
+The original security announcement for this and past advisories can
+be found http://www.samba.org/samba/security/
+
+
+######################################################################
+Changes
+#######
+
+Changes since 3.2.8
+-------------------
+
+
+o   Michael Adam <obnox at samba.org>
+    * Add script fill-templates.
+    * Make update-pkginfo callable from any directory.
+
+
+o   Jeremy Allison <jra at samba.org>
+    * BUG 6099: Samba returns incurrate capabilities list.
+    * BUG 6133: Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL
+      filesystem.
+    * BUG 6161: smbclient corrupts source path in tar mode.
+    * BUG 6195: Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb
+      correctly.
+    * BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client.
+    * BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to
+      run elections.
+    * Correctly use chroot().
+    * Parameterize in local.h the MAX_RPC_DATA_SIZE, and ensure
+      that "offered" read from the rpc packet in spoolss is under
+      that size.
+    * Fix Coverity ID 602.
+    * Backport the semantics of when to delete alternate data streams on a file
+      truncate.
+    * Allow set attributes on a stream fnum to be redirected to the base
+      filename.
+    * Fix use of streams modules with CIFSFS client.
+    * Fix more POSIX path lstat calls.
+    * Allow DFS client paths to work when POSIX pathnames have been
+      selected.
+    * Try and fix the build farm RAW-STREAMS errors.
+    * Ensure files starting with multiple dots are hidden.
+
+
+o   Steven Danneman <steven.danneman at isilon.com>
+    * Fix guest auth when Winbind is running.
+
+
+o   Günther Deschner <gd at samba.org>
+    * BUG 6102: NetQueryDisplayInformation could return wrong information.
+    * BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif().
+    * Fix memleak in get_remote_printer_publishing_data().
+    * Add pidl in order to be able to regenerate librpc functions.
+    * Fix Coverity IDs 722, 762.
+
+
+o   Steve French <smfrench at gmail.com>
+    * cifs mount fix for handling -V parameter.
+    * Fix guest mounts.
+
+
+o   Holger Hetterich <hhetter at novell.com>
+    * Enable total anonymization in vfs_smb_traffic_analyzer.
+
+
+o   Björn Jacke <bj at sernet.de>
+    * Enable IPv6 support for NetBSD and FreeBSD.
+    * Prefer gssapi header files from subdirectory.
+    * Fix build on old Heimdal based systems.
+    * Use parentheses in if condition to make negation clear.
+
+
+o   Günter Kukkukk <linux at kukkukk.com>
+    * Don't try and delete a default ACL from a file.
+
+
+o   Jeff Layton <jlayton at redhat.com>
+    * Initialize rc to 0 in main.
+
+
+o   Volker Lendecke <vl at sernet.de>
+    * BUG 6100: Complete fix.
+    * BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped
+      members.
+    * BUG 6097: Fix smbd segfault.
+    * Fix remotely adding a share via MMC.
+    * Fix resume handle for _samr_EnumDomainGroups.
+    * Fix Coverity IDs 742, 744, 745, 879, 880.
+    * Fix a buffer handling bug when adding lots of registry keys.
+    * Fix a O(n^2) algorithm in regdb_fetch_keys().
+    * Fix an uninitialized variable warning.
+    * Fix a valgrind error / segfault in dns_register_smbd().
+    * Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog.
+    * Fix a malloc/talloc mismatch when cli_initialise() fails.
+    * Fix a valgrind error.
+    * Fix two memleaks in the encryption code.
+    * Fix gcc 4.4 compile warning.
+    * Fix a scary "fill_share_mode_lock failed" message.
+
+
+o   Derrell Lipman <derrell at dworkin.(none)>
+    * BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't
+      set errno.
+
+
+o   Stefan Metzmacher <metze at samba.org
+    * BUG 6100: Implement _netr_LogonGetCapabilities() with
+      NT_STATUS_NOT_IMPLEMENTED.
+    * Add S-1-22-X-Y sids to the local token.
+    * Add idl for netr_LogonGetCapabilities().
+    * Fix the build on SLES8.
+    * Fix smb signing for fragmented trans/trans2/nttrans requests.
+
+
+o   Glenn Machin <gmachin at sandia.gov>
+    * Don't miss an absolute pathname as a kerberos keytab path.
+
+
+o   Shirish Pargaonkar <shirishpargaonkar at gmail.com>
+    * Clean-up entries in /etc/mtab after unmount.
+    * Add fakemount (-f) and nomtab (-n) flags to mount.cifs.
+
+
+o   Ted Percival <ted.percival at quest.com>
+    * Fix a crash during name resolution when log level >= 10 and libc
+      segfaults if printf is passed NULL for a "%s" arg (e.g. Solaris).
+
+
+o   Tim Prouty <tprouty at samba.org>
+    * Fix SMB_VFS_RECVFILE/SENDFILE macros.
+    * Parse_packet can return NULL which is then dereferenced in
+      match_mailslot_name.
+
+
+o   Dan Sledz <dsledz at isilon.com>
+    * Fix double free caused by incorrect talloc_steal usage.
+
+
+o   Aravind Srinivasan <aravind.srinivasan at isilon.com>
+    * Have nmbd check all available interfaces for WINS before failing.
+
+
+o   Miguel Suarez <Miguel.Suarez at stratus.com>
+    * BUG 6085: Fix build of vfs_default on systems without utime support.
+
+
+o   Yasuma Takeda <yasuma at osstech.co.jp>
+    * BUG 5920: The length of the memcpy was calculated wrong.
+    * BUG 6098: Fix the ads_find_dc() with "security = domain" when the DNS
+      server is invalid.
+
+
+o   Andrew Tridgell <tridge at samba.org>
+    * Fix a bug in message handling for code the change notify code.
+
+
+o   Jelmer Vernooij <jelmer at samba.org>
+    * Properly cast array length in print functions.
+
+
+o   Bo Yang <boyang at novell.com>
+    * Initialize the id_map status in idmap_ldap to avoid surprise.
+
+
+######################################################################
+Reporting bugs & Development Discussion
+#######################################
+
+Please discuss this release on the samba-technical mailing list or by
+joining the #samba-technical IRC channel on irc.freenode.net.
+
+If you do report problems then please try to send high quality
+feedback. If you don't provide vital information to help us track down
+the problem then you will probably be ignored.  All bug reports should
+be filed under the Samba 3.2 product in the project's Bugzilla
+database (https://bugzilla.samba.org/).
+
+
+======================================================================
+== Our Code, Our Bugs, Our Responsibility.
+== The Samba Team
+======================================================================
+
+
+----------------------------------------------------------------------
+
+
+                   =============================
+                   Release Notes for Samba 3.2.8
+			  March 03, 2009
+                   =============================
+
+
+This is a bug fix release of the Samba 3.2 series.
+
+Major enhancements included in Samba 3.2.8 are:
+
+  o Correctly detect if the current DC is the closest one.
+  o Add saf_join_store() function to memorize the DC used at join time.
+    This avoids problems caused by replication delays shortly after domain
+    joins.
+
+
+The original security announcement for this and past advisories can
+be found http://www.samba.org/samba/security/
+
+
+######################################################################
+Changes
+#######
+
+Changes since 3.2.7
+-------------------
+
+
+o   Michael Adam <obnox at samba.org>
+    * BUG 6066: netinet/ip.h present but cannot be compiled under Solaris.
+    * Fix join by creating keytab after changing the config in libnet.
+    * Streamline logic of libnet_join_post_processing() in libnet_join.
+    * Fix build of [u]mount.cifs in the RHEL packaging.
+    * Fix distclean target and add realdistclean target in the docs build.
+    * Clean generated .png images and build/catalog.xml in "make clean".
+    * Fix detection of netinet/ip.h on Solaris 8.
+
+
+o   Jeremy Allison <jra at samba.org>
+    * BUG 4308: Excel save operation corrupts file ACLs.
+    * BUG 5979: Fix level 2 oplocks.
+    * BUG 5980: Fix race condition when granting level2 oplocks can cause break
+      notify to be missed.
+    * BUG 5986: Fix renaming of streams.
+    * BUG 5990: Strict allocate should be checked before ftruncate.
+    * BUG 6009: Setting "min receivefile size = 1" breaks writes.
+    * BUG 6016: Alternate Data Streams / Extended Attributes seem to conflict.
+    * BUG 6017: Fix magic scripts.
+    * BUG 6019: Fix file corruption in Clustered SMB/NFS environments managed via
+      CTDB.
+    * BUG 6021: smbclient du command does not recuse properly.
+    * BUG 6030: Add missing <th> header in Status page.
+    * BUG 6035: Fix possible race between fcntl F_SETLKW and alarm delivery.
+    * BUG 6040: Calling Samba print server with an aliased DNS-name fails.
+    * Fix race condition in alarm lock processing.
+    * Fix logic bug introduce in backport of ccache_regain_all_now.
+    * Fix crash bug in SWAT.
+    * Fix logic error in try_chown.
+    * Fix detection of dns_sd libraries.
+
+
+o   Kai Blin <kai at samba.org>
+    * BUG 5953: Fix smbclient crashes.
+
+
+o   Gerald (Jerry) Carter <jerry at samba.org>
+    * Fix "allow trusted domain" so it disables trusted domains.
+
+
+o   Guenther Deschner <gd at samba.org>
+    * Fix buffer allocation in eventlog read call.
+    * Fix various invalid memcpy in read_package_entry().
+
+
+o   SATOH Fumiyasu <fumiyas at osstech.co.jp>
+    * Variables for signals must be volatile sig_atomic_t in Winbind.
+    * Fix gmem->numgids and gmem->maxgids breakage on Solaris 64-bit.
+    * Fix a compile-time warning.
+    * Fix SIGBUS on non-x86 CPUs in libsmbclient.
+
+
+o   Björn Jacke <bj at sernet.de>
+    * Correct the description of the "ldap timeout" parameter.
+    * Fix build with external dns_sd libraries.
+
+
+o   Jeff Layton <jlayton at redhat.com>
+    * Allow mounts to ipv6 capable servers in mount.cifs.
+
+
+o   Volker Lendecke <vl at sernet.de>
+    * BUG 5933: Fix incrementing/decrementing num_validated_vuids.
+    * BUG 5953: Make cli_send_smb_direct_writeX use writev.
+    * BUG 5965: Fix creation of the first share using SWAT.
+    * BUG 5969: Optimize smbclient put command.
+    * BUG 6014: mget shouldn't segfault without arguments.
+    * Fix error code when smbclient puts a file over an existing directory.
+    * Fix a valgrind error.
+    * Fix a "ignoring function call result" warning.
+    * Add sys_writev.
+    * Add write_data_iov.
+    * Make write_data use write_data_iov.
+    * Fix a memory leak in cups_pull_comment_location.
+    * Fix an ancient uninitialized variable read.
+    * Fix a bad memleak in vfs_full_audit.
+    * Fix several valgrind errors.
+    * Fix 'net rpc join' for users with the SeMachineAccountPrivilege.
+
+
+o   Herb Lewis <hlewis at chomps.localdomain>
+    * Don't return 0 on error in smbcacls - bad for scripts.
+
+
+o   Derrell Lipman <derrell.lipman at unwireduniverse.com>
+    * Determine case sensitivity based on file system attributes in
+      libsmbclient.
+
+
+o   Stefan Metzmacher <metze at samba.org>
+    * Correctly detect if the current dc is the closest one.
+    * Use get_dc_name() instead of get_sorted_dc_list() in the LDAP case.
+    * Fallback to returning all DCs, when none is available in the requested
+      site.
+    * Add saf_join_store() function.
+    * Use DS_FORCE_REDISCOVERY in libnet_join.
+    * Use dbwrap to open sessionid.tdb in net status.


-- 
Samba Shared Repository


More information about the samba-cvs mailing list