[SCM] Samba Shared Repository - branch v4-12-stable updated

Karolin Seeger kseeger at samba.org
Fri Feb 28 09:00:47 UTC 2020


The branch, v4-12-stable has been updated
       via  e629b9230ea VERSION: Disable GIT_SNAPSHOT for th Samba 4.12.0rc4 release.
       via  0f1d595cac3 WHATSNEW: Add release notes for Samba 4.12.0rc4.
       via  20195a35bbb ldb: version 2.1.1
       via  f83104fbfc4 ldb: Add tests aimed at the SCOPE_ONELEVEL bug in particular
       via  81bdcf9ee4e ldb: Fix search with scope ONE and small result sets
       via  c521913e426 ldb: Ensure @IDXONE modes is tested in ldb.python (apy.py) tests
       via  71c072c385f ldb: Add tests aimed at the SCOPE_ONELEVEL particular
       via  ea4c35f1d42 ldb: Add tests for one-level indexes in conjunction with other indexes
       via  a21688e7d48 smbd: Separate aio_pthread indicator from normal EINTR
       via  1a47b0fd1d3 lib: Map EINPROGRESS->NT_STATUS_MORE_PROCESSING_REQUIRED
       via  dcdfa4a752e test: Show that smbd does not handle EINTR from open() correctly
       via  670b83a1e6d test: Intercept open in vfs_error_inject
       via  9b6e4da57d7 WHATSNEW: Announce new Spotlight backend for Elasticsearch
       via  828b834706f WHATSNEW: samba-tool improvements
       via  0b964d99aa4 WHATSNEW: Add zlib and fuzzing notes
       via  537acf2a185 build: Do not check if system perl modules should be bundled
       via  da44630885e pidl/wscript: configure should insist on Parse::Yapp::Driver
       via  339566feb72 s3: DFS: Don't allow link deletion on a read-only share.
       via  5a794f3bf8c s3: DFS: Don't allow link creation on a read-only share.
       via  f72bb650ec3 VERSION: Bump version up to 4.12.0rc4...
       via  3a807493547 VERSION: Disable GIT_SNAPSHOT for the 4.12.0rc3 release.
       via  5987adfa00c VERSION: Add release notes for Samba 4.12.0rc3.
       via  19d74ce5f5b WHATSNEW.txt update explaining SMB_VFS_CREATE_DFS_PATHAT() / SMB_VFS_READ_DFS_PATHAT().
       via  6c886973fa0 s3: DFS: Remove is_msdfs_link_internal() - no longer used.
       via  bbbfc6b8acd s3: DFS: Change the last use of is_msdfs_link_internal() -> SMB_VFS_READ_DFS_PATHAT() inside form_junctions().
       via  8690880313a s3: DFS: Replace calls to is_msdfs_link_internal() inside dfs_path_lookup() with SMB_VFS_READ_DFS_PATHAT().
       via  92722a1b63a s3: DFS: Change dfs_path_lookup() to return struct referral list and count directly.
       via  007c96ab6e2 s3: DFS: Parse the returned target path in dfs_path_lookup().
       via  967e0e15fc9 s3: DFS: Change simple is_msdfs_link() call to use SMB_VFS_READ_DFS_PATHAT().
       via  ce94b410867 s3: VFS: vfs_time_audit: Add read_dfs_pathat().
       via  2633e182133 s3: VFS: vfs_full_audit: Add read_dfs_pathat().
       via  dfabe8e731e s3: VFS: catia: Add read_dfs_pathat().
       via  895c06ccec2 s3: VFS: cap: Add cap_read_dfs_pathat().
       via  13c6e747da1 s3: VFS: shadow_copy2: Add shadow_copy2_read_dfs_pathat().
       via  5c8f5a48df7 s3: VFS: gluster: Add vfs_gluster_read_dfs_pathat().
       via  7bbfc1c3a8c s3: VFS: ceph: Add vfswrap_ceph_read_dfs_pathat().
       via  6fae0415d55 s3: VFS: Add SMB_VFS_READ_DFS_PATHAT().
       via  6d5220f23cf s3: smbd: dfs: Clean up exits / talloc heirarchy in parse_msdfs_symlink().
       via  b4285b8d1b1 s3: smbd: dfs: Make parameter names consistent.
       via  c13c6e44918 s3: smbd: dfs: Allow parse_msdfs_symlink() to be called with NULL pointers.
       via  2f2794a7241 s3: smbd: dfs: Apply some README.Coding to parse_msdfs_symlink().
       via  9f87784686d s3: smbd: dfs: Make parse_msdfs_symlink() external.
       via  3ff14a2e5a3 s3: smbd: dfs: Move lp_msdfs_shuffle_referrals() call out of parse_msdfs_symlink().
       via  7f034780869 s3: smbd: dfs: Cleanup, reformat calls to parse_msdfs_symlink()
       via  1ba9c318ae1 s3: VFS: Implement create_dfs_pathat() in cap
       via  ce3bf591e2f s3: VFS: Implement create_dfs_pathat() in catia.
       via  59815861b2e WHATSNEW: announce vfs_io_uring
       via  a1486fb2837 s3:modules: add vfs_io_uring module
       via  ac78557df8e bootstrap: replace libaio-dev/libaio-devel with liburing-dev/liburing-devel
       via  40c84bfcdd2 lib/replace: remove unused check for aio.h
       via  9463a387831 lib: Fix a shutdown crash with "clustering = yes"
       via  fd63e94a282 lib: Introduce messaging_context->per_process_talloc_ctx
       via  1b4db22b160 lib: Add a TALLOC_CTX to base register_msg_pool_usage() on
       via  60deff09d09 lib: Simplify register_msg_pool_usage()
       via  46ff9e1bca8 auth: Fix CID 1458418 Null pointer dereferences (REVERSE_INULL)
       via  1e61aa6d46f auth: Fix CID 1458420 Null pointer dereferences (REVERSE_INULL)
       via  3e222ac6b93 ctdb-tcp: Make error handling for outbound connection consistent
       via  b1fba6c7a06 winbindd: handling missing idmap in getgrgid()
       via  7163ae8a772 bootstrap: Remove un-used dependency python3-crypto
       via  9c1b614e11a s3:auth_sam: map an empty domain or '.' to the local SAM name
       via  2b56b5a05af s3:selftest: test authentication with an empty userdomain and upn names
       via  c579ab09a9b s3:auth_sam: introduce effective_domain helper variables
       via  f9ac1033177 s3:auth_sam: make sure we never handle empty usernames
       via  88b89f0a3d1 s3:auth_sam: unify the debug messages of all auth_sam*_auth() functions
       via  5d852de752b s3:auth_sam: replace confusing FALL_THROUGH; with break;
       via  9a177304331 libcli:smb: Don't use forward declartions for GnuTLS typedefs
       via  d0a0bcf67c8 wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9
       via  044a1fee5f7 WHATSNEW: Add some more changes since 4.11.
       via  8e4c08ded7b libcli:smb: Improve check for gnutls_aead_cipher_(en|de)cryptv2
       via  75977baa43e VERSION: Bump version up to 4.12.0rc3...
       via  b017377c930 VERSION: Disable GIT_SNAPSHOT for the 4.12.0rc2 release.
       via  74b22159448 WHATSNEW: Add release notes for Samba 4.12.0rc2.
       via  f17d3edbb64 script/release.sh: Don't use quotations any longer.
       via  7b1be793de0 s4:torture: Skip the deltest20 as user root
       via  01afd3a9b6d lib:util: Log mkdir error on correct debug levels
       via  601b95285ce s3: lib: nmblib. Clean up and harden nmb packet processing.
       via  814be2888b3 script/release.sh: make it possible to run from a git worktree
       via  1e3b0034af6 VERSION: Bump version up to 4.12.0rc2...
      from  773c5de6750 VERSION: Disable GIT_SNAPSHOT for the 4.12.0rc1 release...

https://git.samba.org/?p=samba.git;a=shortlog;h=v4-12-stable


- Log -----------------------------------------------------------------
-----------------------------------------------------------------------

Summary of changes:
 .gitlab-ci.yml                                     |   2 +-
 VERSION                                            |   2 +-
 WHATSNEW.txt                                       | 223 ++++++++-
 bootstrap/config.py                                |  19 +-
 bootstrap/generated-dists/centos6/bootstrap.sh     |   2 -
 bootstrap/generated-dists/centos6/packages.yml     |   2 -
 bootstrap/generated-dists/centos7/bootstrap.sh     |   2 -
 bootstrap/generated-dists/centos7/packages.yml     |   2 -
 bootstrap/generated-dists/centos8/bootstrap.sh     |   1 -
 bootstrap/generated-dists/centos8/packages.yml     |   1 -
 bootstrap/generated-dists/debian10/bootstrap.sh    |   2 -
 bootstrap/generated-dists/debian10/packages.yml    |   2 -
 bootstrap/generated-dists/debian7/bootstrap.sh     |   2 -
 bootstrap/generated-dists/debian7/packages.yml     |   2 -
 bootstrap/generated-dists/debian8/bootstrap.sh     |   2 -
 bootstrap/generated-dists/debian8/packages.yml     |   2 -
 bootstrap/generated-dists/debian9/bootstrap.sh     |   2 -
 bootstrap/generated-dists/debian9/packages.yml     |   2 -
 bootstrap/generated-dists/fedora29/bootstrap.sh    |   2 -
 bootstrap/generated-dists/fedora29/packages.yml    |   2 -
 bootstrap/generated-dists/fedora30/bootstrap.sh    |   2 -
 bootstrap/generated-dists/fedora30/packages.yml    |   2 -
 bootstrap/generated-dists/fedora31/bootstrap.sh    |   3 +-
 bootstrap/generated-dists/fedora31/packages.yml    |   3 +-
 bootstrap/generated-dists/opensuse150/bootstrap.sh |   2 -
 bootstrap/generated-dists/opensuse150/packages.yml |   2 -
 bootstrap/generated-dists/opensuse151/bootstrap.sh |   2 -
 bootstrap/generated-dists/opensuse151/packages.yml |   2 -
 bootstrap/generated-dists/ubuntu1404/bootstrap.sh  |   2 -
 bootstrap/generated-dists/ubuntu1404/packages.yml  |   2 -
 bootstrap/generated-dists/ubuntu1604/bootstrap.sh  |   2 -
 bootstrap/generated-dists/ubuntu1604/packages.yml  |   2 -
 bootstrap/generated-dists/ubuntu1804/bootstrap.sh  |   2 -
 bootstrap/generated-dists/ubuntu1804/packages.yml  |   2 -
 bootstrap/sha1sum.txt                              |   2 +-
 buildtools/wafsamba/samba_utils.py                 |   2 +-
 ctdb/tcp/tcp_connect.c                             |  36 +-
 .../{vfs_aio_pthread.8.xml => vfs_io_uring.8.xml}  |  54 +-
 docs-xml/wscript_build                             |   1 +
 examples/VFS/skel_opaque.c                         |  11 +
 examples/VFS/skel_transparent.c                    |  16 +
 lib/ldb/ABI/{ldb-2.0.5.sigs => ldb-2.1.1.sigs}     |   0
 ...pyldb-util-2.1.0.sigs => pyldb-util-2.1.1.sigs} |   0
 lib/ldb/ldb_key_value/ldb_kv_index.c               |  21 +-
 lib/ldb/tests/python/api.py                        | 499 ++++++++++++++++++-
 lib/ldb/wscript                                    |   2 +-
 lib/replace/wscript                                |   2 +-
 lib/util/util.c                                    |   7 +-
 libcli/smb/smb2_signing.c                          |  12 +-
 libcli/smb/smb2_signing.h                          |  19 +-
 pidl/wscript                                       |  17 +-
 python/samba/tests/auth_log_winbind.py             |   4 +-
 script/autobuild.py                                |   2 +-
 script/release.sh                                  |  37 +-
 selftest/knownfail.d/empty-domain-name             |   7 +
 source3/auth/auth_sam.c                            |  85 +++-
 source3/include/proto.h                            |   3 +-
 source3/include/vfs.h                              |  19 +
 source3/include/vfs_macros.h                       |  14 +
 source3/lib/errmap_unix.c                          |   1 +
 source3/lib/messages.c                             |  87 ++--
 source3/lib/tallocmsg.c                            |  62 +--
 source3/libsmb/nmblib.c                            |  12 +-
 source3/modules/vfs_aio_pthread.c                  |   2 +-
 source3/modules/vfs_cap.c                          |  71 ++-
 source3/modules/vfs_catia.c                        |  82 ++++
 source3/modules/vfs_ceph.c                         | 100 ++++
 source3/modules/vfs_default.c                      | 103 ++++
 source3/modules/vfs_error_inject.c                 |  17 +
 source3/modules/vfs_full_audit.c                   |  28 ++
 source3/modules/vfs_glusterfs.c                    |  98 ++++
 source3/modules/vfs_io_uring.c                     | 543 +++++++++++++++++++++
 source3/modules/vfs_not_implemented.c              |  11 +
 source3/modules/vfs_shadow_copy2.c                 |  55 +++
 source3/modules/vfs_time_audit.c                   |  29 ++
 source3/modules/wscript_build                      |   8 +
 source3/script/tests/test_open_eintr.sh            |  66 +++
 source3/selftest/tests.py                          |  17 +
 source3/smbd/msdfs.c                               | 259 +++++-----
 source3/smbd/open.c                                |  34 +-
 source3/smbd/proto.h                               |   5 +
 source3/smbd/vfs.c                                 |  16 +
 source3/winbindd/winbindd_getgrgid.c               |   4 +
 source3/wscript                                    |  11 +
 source4/torture/basic/delete.c                     |   4 +
 wscript_configure_system_gnutls                    |  15 +-
 86 files changed, 2484 insertions(+), 434 deletions(-)
 copy docs-xml/manpages/{vfs_aio_pthread.8.xml => vfs_io_uring.8.xml} (55%)
 copy lib/ldb/ABI/{ldb-2.0.5.sigs => ldb-2.1.1.sigs} (100%)
 copy lib/ldb/ABI/{pyldb-util-2.1.0.sigs => pyldb-util-2.1.1.sigs} (100%)
 create mode 100644 selftest/knownfail.d/empty-domain-name
 create mode 100644 source3/modules/vfs_io_uring.c
 create mode 100755 source3/script/tests/test_open_eintr.sh


Changeset truncated at 500 lines:

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 78710f55796..56adf10c7be 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -22,7 +22,7 @@ variables:
   # Set this to the contents of bootstrap/sha1sum.txt
   # which is generated by bootstrap/template.py --render
   #
-  SAMBA_CI_CONTAINER_TAG: 36dd95324f5406f62312648e83fde78a8267b386
+  SAMBA_CI_CONTAINER_TAG: 41319f2580c026f66b2750604a0eb15d6b6f7b50
   #
   # We use the ubuntu1804 image as default as
   # it matches what we have on sn-devel-184.
diff --git a/VERSION b/VERSION
index 17bb6b45790..42b5b48af5e 100644
--- a/VERSION
+++ b/VERSION
@@ -87,7 +87,7 @@ SAMBA_VERSION_PRE_RELEASE=
 # e.g. SAMBA_VERSION_RC_RELEASE=1                      #
 #  ->  "3.0.0rc1"                                      #
 ########################################################
-SAMBA_VERSION_RC_RELEASE=1
+SAMBA_VERSION_RC_RELEASE=4
 
 ########################################################
 # To mark SVN snapshots this should be set to 'yes'    #
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 0854a63e1c7..b58cba6aebf 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,7 +1,7 @@
 Release Announcements
 =====================
 
-This is the first release candidate of Samba 4.12.  This is *not*
+This is the fourth release candidate of Samba 4.12.  This is *not*
 intended for production environments and is designed for testing
 purposes only.  Please report any defects via the Samba bug reporting
 system at https://bugzilla.samba.org/.
@@ -57,14 +57,81 @@ A future Samba version will mitigate this to some extent where good
 cryptography effectively wraps bad cryptography, but for now that above
 applies.
 
+zlib library is now required to build Samba
+-------------------------------------------
 
-"net ads kerberos pac save" and "net eventlog export"
+Samba no longer includes a local copy of zlib in our source tarball.
+By removing this we do not need to ship (even where we did not
+build) the old, broken zip encryption code found there.
+
+New Spotlight backend for Elasticsearch
+---------------------------------------
+
+Support for the macOS specific Spotlight search protocol has been enhanced
+significantly. Starting with 4.12 Samba supports using Elasticsearch as search
+backend. Various new parameters have been added to configure this:
+
+  spotlight backend = noindex | elasticsearch | tracker
+  elasticsearch:address = ADDRESS
+  elasticsearch:port = PORT
+  elasticsearch:use tls = BOOLEAN
+  elasticsearch:index = INDEXNAME
+  elasticsearch:mappings = PATH
+  elasticsearch:max results = NUMBER
+
+Samba also ships a Spotlight client command "mdfind" which can be used to search
+any SMB server that runs the Spotlight RPC service. See the manpage of mdfind
+for details.
+
+Note that when upgrading existing installations that are using the previous
+default Spotlight backend Gnome Tracker must explicitly set "spotlight backend =
+tracker" as the new default is "noindex".
+
+'net ads kerberos pac save' and 'net eventlog export'
 -----------------------------------------------------
 
-The "net ads kerberos pac save" and "net eventlog export" tools will
+The 'net ads kerberos pac save' and 'net eventlog export' tools will
 no longer silently overwrite an existing file during data export.  If
 the filename given exits, an error will be shown.
 
+Fuzzing
+-------
+
+A large number of fuzz targets have been added to Samba, and Samba has
+been registered in Google's oss-fuzz cloud fuzzing service.  In
+particular, we now have good fuzzing coverage of our generated NDR
+parsing code.
+
+A large number of issues have been found and fixed thanks to this
+effort.
+
+'samba-tool' improvements add contacts as member to groups
+----------------------------------------------------------
+
+Previously 'samba-tool group addmemers' can just add users, groups and
+computers as members to groups. But also contacts can be members of
+groups. Samba 4.12 adds the functionality to add contacts to
+groups. Since contacts have no sAMAccountName, it's possible that
+there are more than one contact with the same name in different
+organizational units. Therefore it's necessary to have an option to
+handle group members by their DN.
+
+To get the DN of an object there is now the "--full-dn" option available
+for all necessary commands.
+
+The MS Windows UI allows to search for specific types of group members
+when searching for new members for a group. This feature is included
+here with the new samba-tool group addmembers "--object-type=OBJECTYPE"
+option. The different types are selected accordingly to the Windows
+UI. The default samba-toole behaviour shouldn't be changed.
+
+Allow filtering by OU or subtree in samba-tool
+----------------------------------------------
+
+A new "--base-dn" and "--member-base-dn" option is added to relevant
+samba-tool user, group and ou management commands to allow operation
+on just one part of the AD tree, such as a single OU.
+
 VFS
 ===
 
@@ -77,6 +144,56 @@ to-be-ignored timestamp variables passed to the SMB_VFS_NTIMES() VFS function.
 VFS modules can check whether any of the time values inside a struct
 smb_file_time is to be ignored by calling is_omit_timespec() on the value.
 
+'io_uring' vfs module
+---------------------
+
+The module makes use of the new io_uring infrastructure
+(intruduced in Linux 5.1), see https://lwn.net/Articles/776703/
+
+Currently this implements SMB_VFS_{PREAD,PWRITE,FSYNC}_SEND/RECV
+and avoids the overhead of the userspace threadpool in the default
+vfs backend. See also vfs_io_uring(8).
+
+In order to build the module you need the liburing userspace library
+and its developement headers installed, see
+https://git.kernel.dk/cgit/liburing/
+
+At runtime you'll need a Linux kernel with version 5.1 or higher.
+Note that 5.4.14 and 5.4.15 have a regression that breaks the Samba
+module! The regression was fixed in Linux 5.4.16 again.
+
+MS-DFS changes in the VFS
+-------------------------
+
+This release changes set getting and setting of MS-DFS redirects
+on the filesystem to go through two new VFS functions:
+
+SMB_VFS_CREATE_DFS_PATHAT()
+SMB_VFS_READ_DFS_PATHAT()
+
+instead of smbd explicitly storing MS-DFS redirects inside
+symbolic links on the filesystem. The underlying default
+implementations of this has not changed, the redirects are
+still stored inside symbolic links on the filesystem, but
+moving the creation and reading of these links into the VFS
+as first-class functions now allows alternate methods of
+storing them (maybe in extended attributes) for OEMs who
+don't want to mis-use filesystem symbolic links in this
+way.
+
+
+CTDB changes
+============
+
+* The ctdb_mutex_fcntl_helper periodically re-checks the lock file
+
+  The re-check period is specified using a 2nd argument to this
+  helper.  The default re-check period is 5s.
+
+  If the file no longer exists or the inode number changes then the
+  helper exits.  This triggers an election.
+
+
 REMOVED FEATURES
 ================
 
@@ -97,20 +214,6 @@ critical code path.
 If required for specialist purposes, it can be recreated as a VFS
 module.
 
-BIND9_FLATFILE deprecated
--------------------------
-
-The BIND9_FLATFILE DNS backend is deprecated in this release and will
-be removed in the future.  This was only practically useful on a single
-domain controller or under expert care and supervision.
-
-This release removes the "rndc command" smb.conf parameter, which
-supported this configuration by writing out a list of DCs permitted to
-make changes to the DNS Zone and nudging the 'named' server if a new
-DC was added to the domain.  Administrators using BIND9_FLATFILE will
-need to maintain this manually from now on.
-
-
 Retiring DES encryption types in Kerberos.
 ------------------------------------------
 With this release, support for DES encryption types has been removed from
@@ -129,16 +232,24 @@ Heimdal-DC: removal of weak-crypto.
 Following removal of DES encryption types from Samba, the embedded Heimdal
 build has been updated to not compile weak crypto code (HEIM_WEAK_CRYPTO).
 
-CTDB changes
-------------
+vfs_netatalk: The netatalk VFS module has been removed.
+-------------------------------------------------------
 
-* The ctdb_mutex_fcntl_helper periodically re-checks the lock file
+The netatalk VFS module has been removed. It was unmaintained and is not needed
+any more.
 
-  The re-check period is specified using a 2nd argument to this
-  helper.  The default re-check period is 5s.
+BIND9_FLATFILE deprecated
+-------------------------
 
-  If the file no longer exists or the inode number changes then the
-  helper exits.  This triggers an election.
+The BIND9_FLATFILE DNS backend is deprecated in this release and will
+be removed in the future.  This was only practically useful on a single
+domain controller or under expert care and supervision.
+
+This release removes the 'rndc command' smb.conf parameter, which
+supported this configuration by writing out a list of DCs permitted to
+make changes to the DNS Zone and nudging the 'named' server if a new
+DC was added to the domain.  Administrators using BIND9_FLATFILE will
+need to maintain this manually from now on.
 
 
 smb.conf changes
@@ -147,9 +258,73 @@ smb.conf changes
   Parameter Name                     Description                Default
   --------------                     -----------                -------
 
+  elasticsearch:address              New                        localhost
+  elasticsearch:port                 New                        9200
+  elasticsearch:use tls              New                        No
+  elasticsearch:index                New                        _all
+  elasticsearch:mappings             New                        DATADIR/elasticsearch_mappings.json
+  elasticsearch:max results          New                        100
   nfs4:acedup                        Changed default            merge
   rndc command                       Removed
   write cache size                   Removed
+  spotlight backend		     New			noindex
+
+
+CHANGES SINCE 4.12.0rc3
+=======================
+
+o  Jeremy Allison <jra at samba.org>
+   * BUG 14269: s3: DFS: Don't allow link deletion on a read-only share.
+
+o  Douglas Bagnall <douglas.bagnall at catalyst.net.nz>
+   * BUG 14284: pidl/wscript: configure should insist on Parse::Yapp::Driver.
+
+o  Andrew Bartlett <abartlet at samba.org>
+   * BUG 14270: ldb: Fix search with scope ONE and small result sets. 
+   * BUG 14284: build: Do not check if system perl modules should be bundled.
+
+o  Volker Lendecke <vl at samba.org>
+   * BUG 14285: smbd fails to handle EINTR from open(2) properly.
+
+o  Stefan Metzmacher <metze at samba.org>
+   * BUG 14270: ldb: version 2.1.1.
+
+
+CHANGES SINCE 4.12.0rc2
+=======================
+
+o  Jeremy Allison <jra at samba.org>
+   * BUG 14282: Set getting and setting of MS-DFS redirects on the filesystem
+     to go through two new VFS functions SMB_VFS_CREATE_DFS_PATHAT() and
+     SMB_VFS_READ_DFS_PATHAT().
+
+o  Andrew Bartlett <abartlet at samba.org>
+   * BUG 14255: bootstrap: Remove un-used dependency python3-crypto.
+
+o  Volker Lendecke <vl at samba.org>
+   * BUG 14247: Fix CID 1458418 and 1458420.
+   * BUG 14281: lib: Fix a shutdown crash with "clustering = yes".
+
+o  Stefan Metzmacher <metze at samba.org>
+   * BUG 14247: Winbind member (source3) fails local SAM auth with empty domain
+     name.
+   * BUG 14265: winbindd: Handle missing idmap in getgrgid().
+   * BUG 14271: Don't use forward declaration for GnuTLS typedefs.
+   * BUG 14280: Add io_uring vfs module.
+
+o  Andreas Schneider <asn at samba.org>
+   * BUG 14250: libcli:smb: Improve check for gnutls_aead_cipher_(en|de)cryptv2.
+
+
+CHANGES SINCE 4.12.0rc1
+=======================
+
+o  Jeremy Allison <jra at samba.org>
+   * BUG 14239: s3: lib: nmblib. Clean up and harden nmb packet processing.
+
+o  Andreas Schneider <asn at samba.org>
+   * BUG 14253: lib:util: Log mkdir error on correct debug levels.
+
 
 KNOWN ISSUES
 ============
diff --git a/bootstrap/config.py b/bootstrap/config.py
index b7ad2f68a53..bcada1dc628 100644
--- a/bootstrap/config.py
+++ b/bootstrap/config.py
@@ -69,7 +69,7 @@ PKGS = [
     ('mingw-w64', 'mingw64-gcc'),
     ('zlib1g-dev', 'zlib-devel'),
     ('libbsd-dev', 'libbsd-devel'),
-    ('libaio-dev', 'libaio-devel'),
+    ('liburing-dev', 'liburing-devel'),
     ('libarchive-dev', 'libarchive-devel'),
     ('libblkid-dev', 'libblkid-devel'),
     ('libcap-dev', 'libcap-devel'),
@@ -133,7 +133,6 @@ PKGS = [
     ('python3-dbg', ''),
     ('python3-iso8601', ''),
     ('python3-gpg', 'python3-gpg'),  # defaults to ubuntu/fedora latest
-    ('python3-crypto', 'python3-crypto'),
     ('python3-markdown', 'python3-markdown'),
     ('python3-matplotlib', ''),
     ('python3-dnspython', 'python3-dns'),
@@ -386,6 +385,7 @@ DEB_DISTS = {
             'python-gpg': 'python-gpgme',
             'python3-gpg': '',  # no python3 gpg pkg available, remove
             'language-pack-en': '',   # included in locales
+            'liburing-dev': '',   # not available
         }
     },
     'debian8': {
@@ -395,6 +395,7 @@ DEB_DISTS = {
             'python-gpg': 'python-gpgme',
             'python3-gpg': 'python3-gpgme',
             'language-pack-en': '',   # included in locales
+            'liburing-dev': '',   # not available
         }
     },
     'debian9': {
@@ -402,6 +403,7 @@ DEB_DISTS = {
         'vagrant_box': 'debian/stretch64',
         'replace': {
             'language-pack-en': '',   # included in locales
+            'liburing-dev': '',   # not available
         }
     },
     'debian10': {
@@ -409,6 +411,7 @@ DEB_DISTS = {
         'vagrant_box': 'debian/buster64',
         'replace': {
             'language-pack-en': '',   # included in locales
+            'liburing-dev': '',   # not available
         }
     },
     'ubuntu1404': {
@@ -424,6 +427,7 @@ DEB_DISTS = {
             'libunwind-dev': 'libunwind8-dev',
             'glusterfs-common': '',
             'libcephfs-dev': '',
+            'liburing-dev': '',   # not available
         }
     },
     'ubuntu1604': {
@@ -434,11 +438,15 @@ DEB_DISTS = {
             'python3-gpg': 'python3-gpgme',
             'glusterfs-common': '',
             'libcephfs-dev': '',
+            'liburing-dev': '',   # not available
         }
     },
     'ubuntu1804': {
         'docker_image': 'ubuntu:18.04',
         'vagrant_box': 'ubuntu/bionic64',
+        'replace': {
+            'liburing-dev': '',   # not available
+        }
     },
 }
 
@@ -465,6 +473,7 @@ RPM_DISTS = {
             'glusterfs-api-devel': '',
             'glusterfs-devel': '',
             'libcephfs-devel': '',
+            'liburing-devel': '',   # not available
         }
     },
     'centos7': {
@@ -496,6 +505,7 @@ RPM_DISTS = {
             'glusterfs-devel': '',
             'libcephfs-devel': '',
             'gnutls-devel': 'compat-gnutls34-devel',
+            'liburing-devel': '',   # not available
         }
     },
     'centos8': {
@@ -512,6 +522,7 @@ RPM_DISTS = {
             'policycoreutils-python': 'python3-policycoreutils',
             'python3-crypto': '',
             'quota-devel': '', # FIXME: Add me back, once available!
+            'liburing-devel': '', # not available yet, Add me back, once available!
         }
     },
     'fedora29': {
@@ -520,6 +531,7 @@ RPM_DISTS = {
         'bootstrap': DNF_BOOTSTRAP,
         'replace': {
             'lsb-release': 'redhat-lsb',
+            'liburing-devel': '',   # not available
         }
     },
     'fedora30': {
@@ -528,6 +540,7 @@ RPM_DISTS = {
         'bootstrap': DNF_BOOTSTRAP,
         'replace': {
             'lsb-release': 'redhat-lsb',
+            'liburing-devel': '',   # not available
         }
     },
     'fedora31': {
@@ -570,6 +583,7 @@ RPM_DISTS = {
             'glusterfs-api-devel': '',
             'libtasn1-tools': '', # asn1Parser is part of libtasn1
             'mingw64-gcc': '', # doesn't exist
+            'liburing-devel': '',   # not available
         }
     },
     'opensuse151': {
@@ -602,6 +616,7 @@ RPM_DISTS = {
             'glusterfs-api-devel': '',
             'libtasn1-tools': '', # asn1Parser is part of libtasn1
             'mingw64-gcc': '', # doesn't exist
+            'liburing-devel': '',   # not available, will be added in 15.2
         }
     }
 }
diff --git a/bootstrap/generated-dists/centos6/bootstrap.sh b/bootstrap/generated-dists/centos6/bootstrap.sh
index 551d9e773a3..ee6fcc33799 100755
--- a/bootstrap/generated-dists/centos6/bootstrap.sh
+++ b/bootstrap/generated-dists/centos6/bootstrap.sh
@@ -46,7 +46,6 @@ yum install -y \
     krb5-server \
     lcov \
     libacl-devel \
-    libaio-devel \
     libarchive-devel \
     libattr-devel \
     libblkid-devel \
@@ -83,7 +82,6 @@ yum install -y \
     popt-devel \
     procps \
     psmisc \
-    python3-crypto \
     python3-dns \
     python3-markdown \
     python36 \
diff --git a/bootstrap/generated-dists/centos6/packages.yml b/bootstrap/generated-dists/centos6/packages.yml
index 86eb719d641..1e2b5a98fa6 100644
--- a/bootstrap/generated-dists/centos6/packages.yml
+++ b/bootstrap/generated-dists/centos6/packages.yml
@@ -32,7 +32,6 @@ packages:
   - krb5-server
   - lcov
   - libacl-devel
-  - libaio-devel
   - libarchive-devel
   - libattr-devel
   - libblkid-devel
@@ -69,7 +68,6 @@ packages:
   - popt-devel
   - procps
   - psmisc
-  - python3-crypto
   - python3-dns
   - python3-markdown
   - python36
diff --git a/bootstrap/generated-dists/centos7/bootstrap.sh b/bootstrap/generated-dists/centos7/bootstrap.sh
index 08debda480b..2f0bb1bcc28 100755
--- a/bootstrap/generated-dists/centos7/bootstrap.sh
+++ b/bootstrap/generated-dists/centos7/bootstrap.sh
@@ -46,7 +46,6 @@ yum install -y \
     krb5-server \
     lcov \
     libacl-devel \
-    libaio-devel \
     libarchive-devel \
     libattr-devel \
     libblkid-devel \
@@ -84,7 +83,6 @@ yum install -y \
     procps-ng \
     psmisc \
     python36 \
-    python36-crypto \
     python36-devel \
     python36-dns \
     python36-markdown \


-- 
Samba Shared Repository



More information about the samba-cvs mailing list