Changelog for cifs-utils-debuginfo-5.9-93.5.i686.rpm :

* Fri May 31 2013 varkolyAATTsuse.com- Set the defattr dir mode of the main package as not specified to avoid a conflict with the keyutils package.
* Thu Mar 21 2013 mmeisterAATTsuse.com- Added url as source. Please see http://en.opensuse.org/SourceUrls
* Tue Feb 26 2013 lmuelleAATTsuse.com- Add cifstab named configuration file to post-12.2 systems; (bnc#804822); (bnc#821889).- Really use of the existing cifs init script; (bnc#697218).
* Thu Feb 21 2013 lmuelleAATTsuse.com- Remove superfluous restart or stop of the cifs service; (bnc#804822).
* Wed Jan 23 2013 lmuelleAATTsuse.com- Set parsed_info->got_user when a cred file supplies a username; (bnc#800018).
* Wed Jan 16 2013 lmuelleAATTsuse.com- Update to cifs-utils 5.9. + new plugin architecture for the ID mapping tools + DOMAIN\\usernameAATTpassword format for username= arguments is removed + full RELRO (vs. partial) is now enabled on all binaries
* Wed Nov 21 2012 crrodriguezAATTopensuse.org- Version 5.8
* NFS-style device names are being deprecated in 6.0.
* Many bugs in cifs.idmap, getcifsacl and setcifsacl have been fixed.
* Wed Aug 08 2012 lmuelleAATTsuse.com- Update to cifs-utils 5.6. + -Werror has been removed by default from CFLAGS + PIE and RELRO are enabled by default at build time + better integration with systemd by allowing the use of /bin/systemd-ask-password if available + better checks and warnings from cifscreds when used in environments that do not have a session keyring- No longer initialize oldfsgid inside acquire_mountpoint() of mount.cifs.c as - Werror got removed.
* Tue Jun 12 2012 lmuelleAATTsuse.com- mount.cifs: initialize oldfsgid to surpress a warning while building for RHEL 4 or CentOS 5.
* Tue Jun 12 2012 lmuelleAATTsuse.com- mount.cifs: set rc to 0 in libcap toggle_dac_capability
* Fri Jun 01 2012 lmuelleAATTsuse.com- BuildRequire libwbclient-devel for CentOS, Fedora, and RHEL builds too.
* Fri Jun 01 2012 lmuelleAATTsuse.com- Do not call autoreconf while build.
* Fri Jun 01 2012 lmuelleAATTsuse.com- BuildIgnore libtalloc to prevent a package conflict on Fedora systems.
* Thu May 31 2012 lmuelleAATTsuse.com- BuildRequire libtalloc-devel unconditionally.
* Wed May 30 2012 lmuelleAATTsuse.com- Update to cifs-utils 5.5. + mount.cifs: don\'t pass credentials= option to the kernel + doc: update mailing list + mount.cifs: don\'t send a mandatory ver= option to the kernel + mount.cifs: remove smb2 multicall binary code + doc: remove old XML sources for mount.cifs.8 and cifs.upcall.8 + mount.cifs: unused variables
* Wed May 16 2012 lmuelleAATTsuse.com- BuildRequire libtalloc2-devel instead of libtalloc-devel for post 12.1 systems.
* Thu Apr 19 2012 lmuelleAATTsuse.com- Don\'t package get-, setcifsacl, and cifs.idmap for Mandriva pre-201100.
* Thu Apr 19 2012 lmuelleAATTsuse.com- Don\'t care at all what the real uid is when we call toggle_dac_capability().
* Thu Apr 19 2012 lmuelleAATTsuse.com- Make use of the stored return code in toggle_dac_capability() of mount.cifs.
* Thu Apr 19 2012 lmuelleAATTsuse.com- Declare krb5_auth_con_set_req_cksumtype if the prototype does not exist.- Initialize bkupuid and bkupgid.
* Thu Apr 19 2012 lmuelleAATTsuse.com- BuildRequire pkg-config for post-10.2 systems and else pkgconfig.
* Thu Apr 19 2012 lmuelleAATTsuse.com- mount.cifs: fix up some -D_FORTIFY_SOURCE=2 warnings
* Thu Apr 19 2012 lmuelleAATTsuse.com- Update to cifs-utils 5.4. + the \"rootsbindir\" can now be specified at configure time + mount.cifs now supports the -s option by passing \"sloppy\" to the kernel in the options string + cifs.upcall now properly respects the domain_realm section in krb5.conf + unprivileged users can no longer mount onto dirs into which they can\'t chdir (fixes CVE-2012-1586)
* Mon Feb 06 2012 dlovaskoAATTsuse.com- Added position independent flags to compilation and linking (-fpie/-pie); (bnc#743133).
* Thu Feb 02 2012 lmuelleAATTsuse.de- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.- BuildRequire keyutils-devel for post-10.2 systems.- BuildRequire libcap-ng-devel for post-11.2 systems.- BuildRequire libwbclient-devel for post-10.2 systems.- BuildRequire samba-winbind-devel for CentOS, Fedora, and RHEL systems.- Add getcifsacl, setcifsacl, cifs.idmap, and cifs.upcall binaries and man pages to the filelist.
* Wed Feb 01 2012 lmuelleAATTsuse.de- Update to cifs-utils 5.3. + admins can now tell cifs.upcall to use an alternate krb5.conf file + on remount, mount.cifs no longer adds a duplicate mtab entry + the cifscreds utility has seen a major overhaul to allow for multiuser mounts without krb5 auth- Update to cifs-utils 5.2. + cifs.idmap can now map uid/gid to SID in addition to the other way around + getcifsacl/setcifsacl are now installed by default in /usr/bin instead of /usr/sbin. The manpages are now in section 1. + cifs.upcall has a new scheme for picking the SPN on krb5 mounts. The hostname is now always lowercased. If we fail to get a ticket using an unqualified name, it now attempts to guess the domain name. + A lot of manpage updates, additions and corrections- Update to cifs-utils 5.1. + fix for a minor security issue that can corrupt the mtab + new getcifsacl/setcifsacl tools that allow you to fetch and set raw Windows ACLs via an xattr. + a lot of manpage patches- Update to cifs-utils 5.0. + mount.cifs always uses the original device string to ensure that umounts by unprivileged users are not problematic + there is a new cifs.idmap program for handling idmapping upcalls + a lot of manpage patches
* Wed Dec 21 2011 cooloAATTsuse.com- remove call to suse_update_config (very old work around)
* Thu Dec 01 2011 cooloAATTsuse.com- add automake as buildrequire to avoid implicit dependency
* Sat Sep 17 2011 jengelhAATTmedozas.de- Remove redundant tags/sections from specfile
* Wed Jun 22 2011 sjayaramanAATTsuse.de- modify cifs init script to use /var/run instead of /var/lock/subsys for state file; (bnc#697218).
* Tue Mar 08 2011 sjayaramanAATTsuse.de- Update to cifs-utils 4.9. + mount.cifs: don\'t try to alter mtab if it\'s a symlink. + mount.cifs: fix possible use of uninitialized variable. + mount.cifs: reacquire CAP_DAC_READ_SEARCH before calling mount(2). + mount.cifs: fix handling of scopeid in resolve_host.- Update to cifs-utils 4.8.1. + fix mis-generated autoconf files.- Update to cifs-utils 4.8. + mount.cifs: manpage: add entry for \"actimeo\" option. + cifs-utils: rewrite hardcoded paths in manpages. + cifs-utils: fixes for manpage pathname replacement scheme. + cifs.upcall: fix memory and call krb5_auth_con_free(). + cifs.upcall: use krb5_auth_con_set_req_cksumtype() and pass a GSSAPI checksum; (bso#7890). + manpage: change port option description. + cifs.upcall: add \'l\' to getopt_long string. + cifs.upcall: fix crash when trying to free uninitialized var. + cifs.upcall: consolidate find_krb5_cc calls. + cifs.upcall: clean up key description decoding routine. + cifs.upcall: add keytab support for unattended mounts. + mount.cifs: add cruid= mount option.- Update to cifs-utils 4.7. + manpage: add mount.cifs manpage entry for \"multiuser\" option. + mount.cifs: reinstate ip= as an override for address resolution. + mount.cifs: use monotonic time for timeouts. + cifs-utils: infrastructure for stashing passwords in keyring. + cifs-utils: moving resolve_host into separate file.
* Fri Jan 14 2011 lmuelleAATTsuse.de- Move the cifs init script nfs dependencies from Required to Should.
* Tue Dec 07 2010 toganmAATTopensuse.org- corrected #bnc 641513 by adding /sbin/mkinitrd_setup in %postun.
* Mon Aug 02 2010 sjayaramanAATTsuse.de- Update to cifs-utils 4.6. + adds documentation for the fsc option. + mount.cifs deals with the _netdev, mand, and nomand options correctly now. + changes how mount.cifs handles the MS_MANDLOCK flag. + makes cifs.upcall prefer the creduid= upcall option to uid=
* Wed Jul 07 2010 sjayaramanAATTsuse.de- mount.cifs: fix parsing of \"cred=\" option; (bnc#618877); (bnc#620856); (bnc#621525); (bnc#623763); (bnc#627243).
* Mon May 24 2010 sjayaramanAATTsuse.de- Update to cifs-utils 4.5. + strip leading delimiter off of prefixpath option in mount.cifs. + remove magic number for max_username in parse_options. + turn into a multicall binary for smb2. + fix uninitialized variable in cred parsing error path. + cleanup mount.cifs option parsing.
* Wed May 05 2010 lmuelleAATTsuse.de- BuildRequire libkeyutils-devel on Mandriva systems.
* Tue May 04 2010 sjayaramanAATTsuse.de- Update to cifs-utils 4.4. + fix a segfault that could occur when parsing the address list. + fix autoconf/automake problem that could cause compilation to fail. + acquire required capabilities before a couple of operations. + ensure passwords are not left in memory. + cleanup of credential file parsing.
* Tue Apr 13 2010 lmuelleAATTsuse.de- automake: don\'t use AATTfooAATT constructs in Makefile.am.
* Tue Apr 13 2010 lmuelleAATTsuse.de- autoconf: define CAPNG_LDADD even when it\'s not set.
* Fri Apr 09 2010 lmuelleAATTsuse.de- Update to cifs-utils 4.3. + credential files accept parameter names consistent with mount options. + some problems with linking are fixed. + libcap-ng is used if it\'s available. + the capability bounding set is zeroed out for greater security. + CAP_DAC_OVERRIDE is only enabled when updating the mtab.
* Mon Apr 05 2010 sjayaramanAATTsuse.de- Update to cifs-utils 4.2. + significant overhaul of mount.cifs to make it setuid root safe. + mount.cifs now does privilege separation. + re-enable mount.cifs setuid usage. + make mount.cifs use libcap if available to prune its capability set. + guard mount.cifs against signals by unprivileged users. + mount.cifs is more careful about signal handling during mtab updates. + cifs.upcall fixes to make it work with the heimdal kerberos implementation.
* Thu Mar 25 2010 lmuelleAATTsuse.de- Update to cif-utils 4.1. + fix ver= option passed to the kernel + fix error handling when duplicating options string + make check_mountpoint a noop for non-legacy builds + remove uuid option + remove bogus rsize/wsize options + check for NULL addr pointer before handling scopeid
* Mon Mar 22 2010 lmuelleAATTsuse.de- Add %version dependency to Provides and Obsoletes.
* Sun Mar 14 2010 lmuelleAATTsuse.de- Update to cif-utils 4.0.- Create cifs-utils package which is independent from Samba.
* Mon Mar 08 2010 lmuelleAATTsuse.de- Update to 3.5.1. + Fix security flaw on Linux platforms if built with libcap support allowing file system access even when permissions should have denied it; CVE-2010-0728; (bso#7222).
* Mon Mar 08 2010 rhaferAATTnovell.com- Fixed libldb.so link in libldb-devel.
* Fri Mar 05 2010 hhetterAATTnovell.com- Fix argc handling in net_share, making the command \"net share\" work again; (bso#7203); (bnc#584253).
* Mon Mar 01 2010 lmuelleAATTsuse.de- Update to 3.5.0. + Fix duplicate sam and unix accounts; (bso#7145). + Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160). + Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166). + Fix \'net ads dns\' usage calls; (bso#7181). + Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182).
* Wed Feb 24 2010 lmuelleAATTsuse.de- Update to 3.4.6. + Change parameter \"wide links\" to default to \"no\"; it\'s also incompatible with \"unix extensions\"; (bso#7104); (bnc#577868). + Fix printing with 64 bit clients (bso#6888). + Fix core dump on 64 bit Linux (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio) (bso#7067). + Fix string buffer overflow causing heap corruption in smbd (bso#7096). + Fix bogus ip address in SWAT; (bso#5885). + Fix vfs_full_audit; (bso#6557). + Use the first \"uid\" value; (bso#6157). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix crash bug in \'cifs.upcall\'; (bso#6868). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix DFS on AIX (maybe others); (bso#7052). + Fix pdb_search crash as non-root user; (bso#7068). + Fix unlocking of accounts from ldap; (bso#7072). + Fix vfs_expand_msdfs; (bso#7081). + Fix results of \'smbclient -L\' with a large browse list; (bso#7098). + Normalize \"Changing password for\" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Fix reading of large browselist; (bso#7122). + \"mangling method = hash\" can crash storing a name containing a \'.\'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when \"mangling method = hash\"; (bso#7155). + Fix listing of printjobs in Windows 7; (bso#7130). + Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136). + Make idmap cache persistent for \"ldapsam:trusted\". + Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not only the persistent idmap cache. + Shortcut uid_to_sid when \"ldapsam:trusted = yes\". + Make pdb_copy_sam_account also copy the group sid. + Shortcut gid_to_sid when \"ldapsam:trusted = yes\". + Speed up pdb_get_group_sid(). + Try to build the full unix_pw structure with ldapsam:trusted support. + Optimize ldapsam_alias_memberships() and cache ldap searches.
* Fri Feb 19 2010 lmuelleAATTsuse.de- Update to 3.5.0rc3. + Change parameter \"wide links\" to default to \"no\"; it\'s also incompatible with \"unix extensions\"; (bso#7104); (bnc#577868). + Fix vfs_full_audit; (bso#6557). + Fix crash bug in \'cifs.upcall\'; (bso#6868). + Fix duplicate initializer in the rmdir module; (bso#6876). + Fix printing with 64 bit clients; (bso#6888). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix core dump on Ubuntu 8.04 64 bit; (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio); (bso#7067). + Fix \'smbget\' error status; (bso#7069). + Fix build of \'smbfilter\'; (bso#7071). + Fix unlocking of accounts from ldap; (bso#7072). + Cliconnect gets realm wrong with trusted domains; (bso#7079). + Fix vfs_expand_msdfs; (bso#7081). + Fix storing of create time on directories in an EA in new create time code; (bso#7084). + Fix an early release of the global lock that can cause data corruption in libtdb; (bso#7085). + Fix string buffer overflow causing heap corruption in smbd; (bso#7096). + Fix results of \'smbclient -L\' with a large browse list; (bso#7098). + Normalize \"Changing password for\" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Add pdb_ldap performance fixes; (bso#7116). + Change ldap filter to what really was intended; (bso#7116). + Add new \"nmbd bind explicit broadcast\" parameter; (bso#7118). + Fix nmbd problems with socket address; (bso#7118). + Support large browselist; (bso#7119). + Fix reading of large browselist; (bso#7122). + Fix listing of printjobs in Windows 7; (bso#7130). + Owner of file not available with Kerberos; (bso#7139). + Fix IPv4/IPv6 problems; (bso#7140). + Fix get_acl_blob in the acl_tdb VFS module; (bso#7148). + \"mangling method = hash\" can crash storing a name containing a \'.\'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when \"mangling method = hash\"; (bso#7155). + Fix some wrong newlines in de translation strings.
* Tue Feb 09 2010 lmuelleAATTsuse.de- Take extra care that a mount point of mount.cifs isn\'t changed during mount and don\'t allow it to be run as setuid root program; CVE-2010-0787; (bso#6853); (bnc#550002).
* Tue Feb 09 2010 lmuelleAATTsuse.de- Check in mount.cifs for invalid characters in device name and mountpoint; CVE-2010-0547; (brc#562156); (bnc#577925).
* Tue Feb 09 2010 boyangAATTsuse.de- Don\'t invalidate cache for uninitialized domains; (bnc#538923).
* Tue Feb 09 2010 boyangAATTsuse.de- Signals are processed twice in child; (bnc#538923).
* Mon Feb 08 2010 jmcdonoughAATTsuse.de- Allow forced pw change even with min pw age; (bnc#561894).
* Mon Feb 08 2010 lmuelleAATTsuse.de- Change parameter \"wide links\" to default to \"no\"; it\'s also incompatible with \"unix extensions\"; (bso#7104); (bnc#577868).
* Sun Feb 07 2010 boyangAATTsuse.de- Fix enumerate domain local groups for primary domain; (bnc#573813).
* Sun Feb 07 2010 boyangAATTsuse.de- Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106).
* Fri Feb 05 2010 lmuelleAATTsuse.de- Normalize \"Changing password for\" msg IDs and STRs; (bnc#499233).
* Thu Feb 04 2010 rhaferAATTnovell.com- Build libtevent and libldb and put them into separate subpackages.
* Tue Jan 26 2010 lmuelleAATTsuse.de- Update to 3.5.0rc2. + The Using Samba HTML book has been removed. + \'net\', \'smbclient\' and libsmbclient can use logon credentials cached by Winbind; (bso#7062). + New vfs_scannedonly module has been added; (bso#7028). + Check password history before increasing \"badPasswordCount\"; (bso#4347). + Fix changing of ACLs on writable file with \"dos filemode=yes\"; (bso#5202). + Restore Samba 3.0.x behavior and use the first \"uid\" value in pdb_ldap; (bso#6157). + Fix deletion of an object whose parent folder does not have delete rights fails even if the delete right is set on the object in vfs_acl_xattr and vfs_acl_tdb; (bso#6876). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027). + Disable sanity check in NetShareEnum for better compatibility with Windows; (bso#7029). + Fix SMBrmdir error message when deleting a directory fails; (bso#7033). + Fix segfault in vfs_cap; (bso#7034). + Fix \'net rpc getsid\' in hardened Windows environments; (bso#7036). + Fix a Winbind segfault in \"trusted_domains\"; (bso#7037). + Complete and improve some German translation of \'net\'; (bso#7039). + Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039). + Fix crash bug in libsmbclient; (bso#7043). + Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045). + Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046). + Lock down some srvsvc calls according to what w2k3 seems to do.
* Tue Jan 19 2010 lmuelleAATTsuse.de- Update to 3.4.5. + Fix memory leak in smbd (bug #7020). + Fix changing of ACLs on writable files with \"dos filemode=yes\" (bug #5202). + BUG 6642: Fix opening the quota magic file. + BUG 6919: Fix remote quota management. + BUG 7034: Fix internal error caused by vfs_cap. + BUG 7036: Fix \'net rpc getsid\' in hardened Windows environments. + BUG 7043: Fix crash bug in \"SMBC_parse_path\". + BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls. + BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS server.
* Tue Jan 12 2010 lmuelleAATTsuse.de- Free unused memory after a packet got processed; (bso#7020).
* Fri Jan 08 2010 boyangAATTsuse.de- Add timeout to rpc call to prevent infinite loop when network is down; (bnc#538923).
* Thu Jan 07 2010 lmuelleAATTsuse.de- Update to 3.5.0rc1. + BUG 6837: Fix \"Too many open files\" when trying to access large number of files with Windows 7. + BUG 6939: Fix long filenames when \"mangling method\" is set to \"hash\". + BUG 6991: Create symbol links to shared libraries. + BUG 6992: make test for getgrouplist cacheable. + BUG 7014: Fix Winbind crash when retrieving empty group members. + BUG 7020: Fix smbd using 2G memory. + Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned attributes by protocol level. + Vector correctly through reply_openerror() (which uses the same logic). + Fix bugs with the full Windows ACL support. + Add a few missing gettext calls to the \'net\' command. + Fix up a share type translation and translate some more strings in \'net\'. + Allow to call \"pdbedit -N description -u user\" without specifiyng \"-r\". + Add spoolss_DriverInfo7. + Fix rpcclient after setprinter IDL fixes. + Use generated krb5.conf in \'net ads testjoin\'. + Add some German translations for the \'net\' command. + Update mount.cifs man page with nounix option. + Fix _samr_GetAliasMembership for results with 0 rids. + Fix an error case in cli_negprot. + Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc. + Restore correct timeouts for SMB requests. + Fix a 64-bit error in libsmb. + Replace IS_DOMAIN_OFFLINE by a function in Winbind. + Simplify/cleanup Winbind code. + Fix write behind memory block in libtalloc. + Fix result check for getaddrinfo(). + Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr() to tsocket. + Always set tdb->tracefd to -1 to be safe on goto fail in libtdb. + Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior. + Fix standalone \'make installdocs\'. + Output %p as unsigned in snprintf replacement. + New attempt at TDB transaction nesting allow/disallow. + Remove swig stuff from libtdb. + Reset tdb->fd to -1 in tdb_close() in libtdb. + Change the way mksysms work in libtalloc. + Also build and install tdb manpages from standalone tdb. + Fix infinite loop in NCACN_IP_TCP as there is no timeout. + Make winbindd_cache.c aware of domain offline to avoid unnecessary backend query. + List trusted domains from wcache when domain is offline.
* Thu Jan 07 2010 lmuelleAATTsuse.de- Update to 3.4.4. + Fix interdomain trust relationships with Win2008R2 (bug #6697). + Fix Winbind crashes when queried from nss (bug #6889). + Fix Winbind crash when retrieving empty group members (bug #7014). + Fix \"UID range full\" error in Winbind (bug #6901). + Fix multiple LDAP servers in \"idmap backend\" and \"idmap alloc backend\" (bug #6910). + BUG 4832: Fix iconv checks. + BUG 6338: Do not always display \"none\" in \'net rpc trustdom list\'. + BUG 6851: Add pdbedit --kickoff-time/-K to set the user\'s kickoff time. + BUG 6828: Fix infinite timeout when byte lock held outside of samba. + BUG 6837: Fix \"Too many open files\" message when trying to access a large number of files with Windows 7. + BUG 6841: Fix \"map acl inherit = yes\". + BUG 6850: Fix shadow copy display on Windows 7. + BUG 6867: Fix listing of directories with a lot of files. + BUG 6868: Support building with Heimdal we well as with MIT. + BUG 6875: Fix DOS attributes on OS/2 clients. + BUG 6880: Fix listing of workgroup servers in libsmbclient. + BUG 6898: Samba duplicates file content on appending. + BUG 6918: Fix krb5 build problem on Ubuntu karmic. + BUG 6929: Fix build with recent heimdal. + BUG 6939: Fix long filenames with \"mangling method = hash\". + BUG 6967: Fix \'net ads join\' with OU. + BUG 6981: Fix paged search with DirX LDAP server. + BUG 6982: Remove erroneous out of memory error path in lookup_sid. + BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids. + BUG 7005: Fix \"mangle method = hash\" truncates files with dot \".\" character. + Fix the build of the winbind krb5 locator plugin. + Fix enumprinter key client and server.
* Wed Jan 06 2010 lmuelleAATTsuse.de- Readjust the _libdir/cups/backend/smb sym link only on uninstall of the samba-krb-printing package; (bnc#568603).
* Fri Jan 01 2010 larsAATTsamba.org- Add BuildRequires to fam-devel; (bnc#564260).
* Wed Dec 30 2009 jmcdonoughAATTsuse.de- Prevent winbind crash; (bso#7014); (bnc#566119).
* Mon Dec 21 2009 sjayaramanAATTsuse.de- Fix processing of open modes in POSIX open; (bnc#530683).
* Thu Dec 17 2009 jengelhAATTmedozas.de- Add baselibs.conf as a source.
* Tue Dec 15 2009 lmuelleAATTsuse.de- Update to 3.5.0pre2. + BUG 2350: Add LDAP Alias Dereferencing support. + BUG 6288: SWAT adds a second share when changing parameters of an existing share. + BUG 6435: Fix minor memory corruption. + BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was set while configure. + BUG 6802: A created folder does not properly inherit permissions from parent in vfs_acl_xattr. + BUG 6837: \"Too many open files\" when trying to access large number of files from Windows 7. + BUG 6860: Fix shared library build on QNX. + BUG 6879: Fix crash in Winbind. + BUG 6929: Fix build with recent heimdal. + BUG 6938 : No hook exists to check creation rights when using acl_xattr module. + BUG 6967: Prevent glibc error on \'net ads join\'. + Fix vfs_acl_xattr which was failing to call the NEXT connect function. + Restructure the ACL code. + Refactor reply_rmdir to use handle based code. + Fix the build when no external talloc and tdb are installed. + Fix detection of CTDB headers on systems without system-libtalloc. + Fix several printing issues. + Fix the build on Mac OS X 10.6.2. + Fix net and rpcclient after setprinterdataex changes. + Add full support for level 8 printer drivers. + Add more spoolss architectures to IDL. + Fix enumprinter key client and server. + Fix crash in EnumPrinterDataEx. + Prefer posix_fallocate for doing \"strict allocate\". + Restore \"fake directory create times\" as a share parameter. + Fix explicit stat64 support. + Add support for NetWkstaGetInfo 101 and 102. + Add rpcclient wkssvc_enumerateusers. + De-deprecate \"write cache size\" to prevent its removal without a proper alternative. + Allow more than 1000 users in BUILTIN\\Users. + Complete support for NetWkstaGetInfo/NetWkstaEnumUsers. + Fix the build of the example VFS modules. + Fix crash in free_file_list(). + Give the user a chance to change password when password will expire soon.
* Wed Dec 09 2009 lmuelleAATTsuse.de- Store the smbfs service state if enabled and restore it for cifs while upgrade on post-11.2 systems.
* Wed Dec 09 2009 lmuelleAATTsuse.de- Prevent cifstab from being overwritten while upgrade on post-11.2 systems.
* Wed Dec 09 2009 boyangAATTsuse.de- Give the user a chance to change password when password will expire soon; (FATE#302414).
* Tue Dec 08 2009 lmuelleAATTsuse.de- Rename smbfs init script to cifs for post-11.2 systems.
* Tue Dec 08 2009 jmcdonoughAATTsuse.de- Allow Windows 7 to connection to samba domain controllers and member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680).
* Fri Dec 04 2009 jmcdonoughAATTsuse.de- Error on joining windows domain (invalid pointer); (bso#6967); (bnc#553622).
* Thu Dec 03 2009 lmuelleAATTsuse.de- Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165).- Simplify the winbind package %pre script and suppress stdout only.
* Thu Nov 26 2009 lmuelleAATTsuse.de- Update to 3.5.0pre1 + Add support for full Windows timestamp resolution. + Experimental implementation of SMB2. + Add encryption support for connections to a CUPS server. + Major windbind asynchronous refactoring.- Remove using_samba from the doc package.- Increase major version of libtalloc to 2.
* Thu Nov 19 2009 boyangAATTsuse.de- Fix kerberos refresh chain; (bnc#546162); (bso#6872).
* Fri Nov 06 2009 lmuelleAATTsuse.de- Hardlink duplicate files on post-11.1 systems.
* Fri Nov 06 2009 lmuelleAATTsuse.de- Add BuildArch noarch to samba-doc on post-11.1 systems.
* Tue Nov 03 2009 boyangAATTsuse.de- Use full 16byte session key in make_user_info_netlogon_interactive(); (bnc#551811).
* Thu Oct 29 2009 lmuelleAATTsuse.de- Update to 3.4.3. + Fix trust relationships to windows 2008 (2008 r2) (bug #6711). + Fix file corruption using smbclient with NT4 server (bug #6606). + Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680). + BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a symbolic link. + BUG 6529: Offline files conflict with Vista and Office 2003. + BUG 6532: Fix domain enumeration if master browser has space in name. + BUG 6606: Fix file corruption using smbclient with NT4 server. + BUG 6690: Fix wrong error check in profile. + BUG 6703: Allow smbstatus as non-root. + BUG 6704: Fix syntax error in avahi configure test. + BUG 6707: Fix an occasional segfault in config file parsing. + BUG 6710: Adjust regex to match variable names including underscores. + BUG 6711: Fix trust relationships to windows 2008 (2008 r2). + BUG 6726: SIVAL should have been an SVAL. + BUG 6728: BSD needs sys/sysctl.h included to build properly. + BUG 6731: Fix reading beyond the end of a named stream in xattr_streams. + BUG 6735: Don\'t overwrite password in pam_winbind, subsequent pam modules might use the old password and new password. + BUG 6764: Fix timeval calculation. + BUG 6765: Add a \"hidden\" parameter \"share:fake_fscaps\". + BUG 6769: Fix symlink unlink. + BUG 6772: Allow outstanding_aio_calls to be decremented. + BUG 6774: smbd crashes if \"aio write behind\" is set. + BUG 6776: Fix core dump caused by running overlapping Byte Lock test. + BUG 6781: Fix renaming subfolders in Explorer view. + BUG 6791: Fix linking order in cifs.upcall. + BUG 6793: Fix Winbind crash with \"INTERNAL ERROR: Signal 6\". + BUG 6793: Fix segfault in winbindd_pam_auth. + BUG 6796: Deleting an event context on shutdown can cause smbd to crash. + BUG 6797: Fix a memleak in libwbclient. + BUG 6804: Fix hpux compiler issue. + BUG 6805: Correctly handle aio_error() and errno. + BUG 6807: Fix a segfault in \"net rpc trustdom list\" for long domain names. + BUG 6810: Add support for finding alternate credcaches to cifs.upcall. + BUG 6811: Fix reference to freed memory in pam_winbind. + BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure. + BUG 6824: Fix avahi activation. + BUG 6826: Don\'t fail authentication when one or some group of require-membership-of is invalid. + BUG 6828: Fix infinite timeout when byte lock held outside of Samba. + BUG 6829: Fix displaying of multibyte characters in smbclient. + BUG 6840: Fix crash in pam_winbind. + Fix an uninitialized variable. + Only ever handle one event after a select call. + Conditional install of the cifs.upcall man page. + Fix warning occuring when building the manpages.
* Fri Oct 23 2009 lmuelleAATTsuse.de- Let smbclient show special characters properly; (bso#6829); (bnc#544204).
* Fri Oct 23 2009 boyangAATTsuse.de- Don\'t fail authentication when one or some group of require-membership-of is invalid; (bnc#525123); (bso#6826).
* Fri Oct 16 2009 jmcdonoughAATTsuse.de- Allow winbind to ignore certain domains; (bnc#539506).
* Thu Oct 08 2009 lmuelleAATTsuse.de- Update to 3.4.2. + Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517). + Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115). + Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).
* Wed Sep 30 2009 jmcdonoughAATTsuse.de- Fix potential denial of service; CVE-2009-2906; (bnc#543115).
* Fri Sep 25 2009 jmcdonoughAATTsuse.de- Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).
* Wed Sep 23 2009 jmcdonoughAATTsuse.de- Fix unresolved home path; CVE-2009-2813; (bnc#539517).
* Mon Sep 21 2009 boyangAATTsuse.de- Don\'t overwrite password in pam_winbind; (bnc#515444).
* Mon Sep 14 2009 chrisAATTcomputersalat.de- mods for winbind (when used with squid - ntlm_auth) o winbind adds group \'winbind\' o permission 0750,root,winbind LOCKDIR/winbindd_privileged
* Thu Sep 10 2009 lmuelleAATTsuse.de- Merge two fixes from 3.2.8 and 3.3.1. + Adjust regex to match variable names including underscores. + Conditional install of the cifs.upcall man page.
* Wed Sep 09 2009 lmuelleAATTsuse.de- Remove supplements from baselibs.conf while %clean for pre-11.1 systems; (bnc#520579).
* Wed Sep 09 2009 lmuelleAATTsuse.de- Update to 3.4.1. + Fix authentication on member servers without Winbind (bug #6650). + Nautilus fails to copy files from an SMB share (bug #6649). + Fix connections of Win98 clients (bug #6551). + Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697). + Fix Winbind authentication issue (bug #6646). + BUG 5879: Update LDAP schema for Netscape DS 5. + BUG 5886: Fix password change propagation with ldapsam. + BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe. + BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab. + BUG 6437: Make open_udp_socket() IPv6 clean. + BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient. + BUG 6506: Smbd server doesn\'t set EAs when a file is overwritten in NT_TRANSACT_CREATE. + BUG 6532: Fix the build with external talloc. + BUG 6538: Cancel all locks that are made before the first failure. + BUG 6560: Fix lookupname. + BUG 6564: SetPrinter fails (panics) as non root. + BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation. + BUG 6585: Fix unqualified \"net join\". + BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo. + BUG 6601: Avoid global fd limits. + BUG 6607: Fix crash bug in spoolss_addprinterex_level_2. + BUG 6611: Fix a valgrind error in chain_reply. + BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient. + BUG 6627: Raise the timeout for lsa_Lookup
*() calls from 10 to 35 seconds. + BUG 6650: Fix authentication on member servers without Winbind. + BUG 6651: Fix smbd SIGSEGV when breaking oplocks. + BUG 6655: Fix \'smbcontrol smbd ping\'. + BUG 6620: Fix a bug in renames of directories. + BUG 6664: Fix truncation of the session key. + BUG 6673: Fix \'smbpasswd\' with \"unix password sync = yes\". + BUG 6680: Fix authentication failure from Windows 7 when domain joined. + BUG 6688: Fix crash in \'net usershare list\'. + BUG 6693: Check we read off the complete event from inotify. + BUG 6700: Use dns domain name when needing to guess server principal.
* Thu Aug 13 2009 boyangAATTsuse.de- Update to 3.2.14. + Fix SAMR access checks (e.g. bugs #6089 and #6112). + Fix \'force user\' (bug #6291). + Improve Win7 support (bug #6099). + Fix posix ACLs when setting an ACL without explicit ACE for the owner (bug #2346). + BUG 6387: Fix Winbind crash when multiple IDmappings exist in the LDAP directory. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6628: \'smbpasswd -a\' uses algorithmic rid base with \'passdb backend = tdbsam\'. + BUG 6089: Fix SAMR access checks. + BUG 6112: Fix SAMR access checks. + BUG 6279: Fix Winbind crash. + BUG 6291: Fix \'force user\'. + BUG 6099: Try to fix domain join of Win7 Beta. + BUG 6386: Groupdb mapping fix. + BUG 6421: Fix POSIX read-only open on read-only shares. + BUG 6476: Fix more smbd-zombies in memory. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + BUG 6504: Fix SAMR server for Winbind access. + BUG 6520: Fix time stamps. + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6340: Don\'t segfault when cleartext trustdom pwd could not be retrieved. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6465: Fix enum_aliasmem in ldb branch. + BUG 6484: Fix searching for users while adding them to groups via Windows usermanager. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 6526: Let parent_dirname() correctly return toplevel filenames. + BUG 6627: Raise the timeout for lsa_Lookup
*() calls from 10 to 35 seconds. + BUG 5798: Preserve CFLAGS info in configure. + BUG 6382: Case insensitive access to DFS links broken. + BUG 6481: Don\'t require \"Modify property\" perms to unjoin. + BUG 6628: \'smbpasswd -a\' uses algorithmic rid base with \'passdb backend = tdbsam\'. + BUG 6560: Lookupname failed, cannot find domain when attempt to change password. + Prevent creation of keys containing the \'/\' character. + Fix join of Windows 7 RC to a Samba3 DC. + Fix bug in processing of open modes in POSIX open. + Fix the negotiate flags. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a crash bug if we timeout in net rpc trustdom list. + Add \'--request-timeout\' option to \'net\'. + Fix a race condition in Winbind leading to a panic. + Add workaround for MS KB932762. + 5945: Fix out of memory error with Winbind idmap. + Avoid duplicate ACEs. + Fix profile ACLs in some corner cases. + Zero an uninitialized array.
* Wed Aug 12 2009 boyangAATTsuse.de- Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271); (bso#6615).
* Mon Aug 10 2009 boyangAATTsuse.de- check in .po files for pam_winbind; (bnc#499233); (bso#6602).
* Thu Aug 06 2009 hhetterAATTsuse.de- Add ntp and network-remotefs as Should-Start dependency to the winbind init script; (bnc#515629).
* Thu Aug 06 2009 lmuelleAATTsuse.de- Update to 3.0.36. + Fix Winbind crash on \'getent group\' (bug #5906). + Excel save operation corrupts file ACLs (bug #4308). + Prevent segmentation fault on joining a very long domain name. + BUG 4308: Excel save operation corrupts file ACLs. + BUG 4370: Clean-up entries in /etc/mtab after unmount. + BUG 4640: Fix guest mounts in mount-cifs. + BUG 5906: Fix Winbind crash on \'getent group\'. + BUG 6066: netinet/ip.h present but cannot be compiled on Solaris. + BUG 6099: In order to allow Win7 to connect to a Samba NT style. + BUG 6279: Fix Winbind crash. PDC we set the flags before we know if it\'s an error or not. + BUG 6085: Fix build of vfs_default. + BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work correctly. + Fix logic error in try_chown. + Correctly use chroot(). + Fix bug in processing of open modes in POSIX open. + Don\'t install the cifs.upcall binary twice. + Fix mount.cifs handling of -V option. + Prevent segmentation fault on joining a very long domain name. + Don\'t try and delete a default ACL from a file. + Add workaround for MS KB932762. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Fix a crash during name resolution when log level >= 10 and libc segfaults if printf is passed NULL for a \"%s\" arg.
* Sat Aug 01 2009 lmuelleAATTsuse.de- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.
* Mon Jul 27 2009 boyangAATTsuse.de- lookupname failed, cannot find domain when attempt to change password; (bnc#520645); (bso#6560).
* Thu Jul 16 2009 lmuelleAATTsuse.de- Don\'t link with --as-needed flag on post-11.1 systems.
* Tue Jul 14 2009 lmuelleAATTsuse.de- Stop the smbfs service if an interface goes down; (bnc#517768).
* Wed Jul 08 2009 lmuelleAATTsuse.de- Disable build of static libraries on post-11.1 systems; (bnc#509945).
* Wed Jul 08 2009 jmcdonoughAATTsuse.de- Fix missing zlibs for cifs.upcall and test_shlibs.
* Fri Jul 03 2009 lmuelleAATTsuse.de- Update to 3.4.0. + BUG 6431: Local groups from 3.0 setups no longer found. + BUG 6459: Fix build of pam_smbpass on some distributions. + BUG 6481: \'net ads leave\' needs to try account deletion, NetUnjoinDomain not. + BUG 6497: Fix calling of \'test\' in configure. + BUG 6498: Add workaround for MS KB932762. + BUG 6499: Fix building of pam_smbpass. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6512: Fix support for enumerating user forms. + BUG 6514: Improve error message in \'net\' when smb.conf is not available. + BUG 6520: Fix time stamps when \"unix extensions = yes\". + BUG 6521: Fix building tevent_ntstatus without config.h. + BUG 6526: Fix notifies in the share root directory. + BUG 6531: Fix pid file name.
* Thu Jul 02 2009 lmuelleAATTsuse.de- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.
* Tue Jun 30 2009 jmcdonoughAATTsuse.de- Fix net ads leave; (bnc#511695).
* Thu Jun 25 2009 sbrabecAATTsuse.cz- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).- Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).
* Wed Jun 24 2009 lmuelleAATTsuse.de- Update to 3.2.13, 3.3.6. + In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with file names treat user input as a format string to asprintf. With a maliciously crafted file name smbclient can be made to execute code triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).
* Wed Jun 24 2009 lmuelleAATTsuse.de- Update to 3.0.35. + In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a data value can potentially affect access control when \"dos filemode\" is set to \"yes\"; CVE-2009-1888; (bnc#515479).
* Tue Jun 23 2009 jmcdonoughAATTsuse.de- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).
* Fri Jun 19 2009 lmuelleAATTsuse.de- Update to 3.4.0rc1. + BUG 4699: Remove pidfile on clean shutdown. + BUG 5456: Fix \"net ads testjoin\". + BUG 6081: Make it possible to change machine account sids. + BUG 6253: Use correct value for password expiry calculation in pam_winbind. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6305: Correctly prompt for a password when a username was given. + BUG 6328: Add support for multiple rights to \"net sam rights grant/revoke\". + BUG 6333: Consolidate create/delete account paths in pdbedit. + BUG 6449: \'net rap user add\' crashes without -C option. + BUG 6451: net/libnetapi user rename using wrong access bits. + BUG 6458: Fix uninitialized variable in local_password_change(). + BUG 6465: Fix enumeration of empty aliases. + BUG 6476: Fix smbd-zombies in memory when using [x]inetd. + BUG 6487: Add missing DFS call in trans2 mkdir call. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + Improve pam_winbind documentation.- Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.
* Thu Jun 18 2009 boyangAATTsuse.de- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user input as a format string to asprintf; CVE-2009-1886; (bnc#513360).
* Wed Jun 17 2009 boyangAATTsuse.de- Fix a bad memleak in vfs_full_audit; (bnc#510035).
* Tue Jun 16 2009 lmuelleAATTsuse.de- Update to 3.3.5. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix joining of Win7 into Samba domain (bug #6099). + Fix joining of Win2000 SP4 clients (bug #6301). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5853: Add keyutils-devel to build requires to fix build on RHEL. + BUG 5897: Fix shutdown script example in the smb.conf manpage. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6157: Fix handling of multi-value attribute \"uid\". + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6301: Fix joining of Win2000 SP4 clients. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix \'net groupmap set\' segfault. + BUG 6361: Make --rcfile work in smbget. + BUG 6365: Re-Add the \"dropbox\" functionality with -wx rights on a directory. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6415: Filter out of range mappings in default idmap config in idmap_tdb. + BUG 6416: Filter out of range mappings in default idmap config in idmap_tdb2. + BUG 6417: Filter out of range mappings in default idmap config in idmap_ldap. + BUG 6441: Fix the compile with --enable-dnssd. + BUG 6449: \'net rap user add\' crashes without -C option. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent infinite include nesting. + Mark registry shares without path unavailable. + Also handle DirX return codes. + Fix Coverity ID 897. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix a race condition in winbind leading to a panic. + Some man pam_winbind improvements. + Zero an uninitialized array.
* Tue Jun 16 2009 lmuelleAATTsuse.de- Update to 3.2.12. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix \"force user\" (bug #6291). + Fix Winbind crash (bug #6279). + Fix joining of Win7 into Samba domain (bug #6099). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5798: CFLAGS info lost in configure. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5835: Add keyutils-devel to build requires. + BUG 5945: Fix out of memory error with Winbind idmap. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6279: Fix Winbind crash. + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6291: Fix \"force user\". + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6386: Groupdb mapping fix. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent creation of keys containing the \'/\' character. + Fix bug in processing of open modes in POSIX open. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a race condition in winbind leading to a panic. + Fix a crash bug if we timeout in net rpc trustdom list. + Fix profile acls in some corner cases.
* Fri Jun 12 2009 lmuelleAATTsuse.de- Default with passdb backend to smbpasswd for SUSE products older than 11.2.
* Fri Jun 12 2009 lmuelleAATTsuse.de- Explicitly use \'tdbsam\' as passdb backend in the default smb.conf file.
* Mon Jun 08 2009 lmuelleAATTsuse.de- Update to 3.4.0pre2. + The default passdb backend has been changed to \'tdbsam\'! + Samba4 and Samba3 sources are included in the tarball. + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Made parameter syntax of the net command more consistent. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 4271: testparm should not print includes. + BUG 4831: Don\'t call openlog() or closelog() from pam_smbpass. + BUG 5681: Do not limit the number of network interfaces. + BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo access checks. + BUG 6099: Fix NETLOGON credential chain. + BUG 6136: New AFS syscall conventions. + BUG 6157: Fix handling of multi-value attribute \"uid\". + BUG 6253: Use correct value for password expiry calculation. + BUG 6291: Fix \'force user\'. + BUG 6292: Update config.guess from gnu.org. + BUG 6302: Give the VFS a chance to read from 0-byte files. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on malloced memory. + BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix segfault in \'net groupmap set\'. + BUG 6340: Don\'t segfault when cleartext trustdom pwd could not be retrieved. + BUG 6357: Use Samba default command line arguments in \'net\'. + BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4 and IPv6 addresses + BUG 6361: Make --rcfile work in smbget. + BUG 6371: Unsuccessful \'net conf setparm\' leaves empty share. + BUG 6372: usermanager only displaying 1024 groups and aliases. + BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids. + BUG 6415: Filter out of range mappings in default idmap config (idmap_tdb). + BUG 6416: Filter out of range mappings in default idmap config (idmap_tdb2). + BUG 6417: Filter out of range mappings in default idmap config (idmap_ldap). + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add \'net eventlog\'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add \'net rpc service\' subcommands \'create\' and \'delete\'. + Fix the core of the SAMR access functions. + Fix SAMR server for winbindd access. + Add dbwrap_tool - a tdb tool that is CTDB-aware. + Hide \"config backend\" from swat. + Fix linking with --disable-shared-libs. + Fix issue with missing entries when enumerating directories. + Map NULL domains to our global sam name. + Fix driver upload for Xerox 4110 PS printer driver. + Add \"net dom renamecomputer\" to rename machines in a domain. + Inspect the correct computername string before enabling/disabling the change button in netdomjoin-gui. + Fix join prompt dialog test in netdomjoin-gui. + Only gray out labels when not root and not connecting to remote machines (netdomjoin-gui). + Allow to switch between workgroups/domains with the same name (netdomjoin-gui). + Add NetShutdownInit and NetShutdownAbort. + Fix samr access checks. + Add a security model to LSA. + Also handle DirX return codes. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix Coverity ID 897. + Fix a race condition in vfs_aio_fork with gpfs share modes. + Fix bug disclosed by lock8 torture test. + Fix a race condition in winbind leading to a panic. + Detect tight loop in tdb_find(). + Fix chained sesssetupAndX/tconn messages. + Fix strict locking with chained reads. + Fix two bugs in sendfile. + Fix memory leak. + Fix file descriptor leak. + Fallback to the legacy sid_to_(uid|gid) instead of returning NULL. + Always allocate memory in dptr_ReadDirName. + Fix \'net\' crash during domain join. + Zero an uninitialized array. + Allow child processes to exit gracefully if we are out of fds.
* Thu Jun 04 2009 sjayaramanAATTsuse.de- Enable cifs.upcall on versions newer than SUSE 10.0.
* Thu Jun 04 2009 sjayaramanAATTsuse.de- Add BuildRequires to keyutils-devel.
* Thu Jun 04 2009 sjayaramanAATTsuse.de- Remove redundant Requires to keyutils-libs for cifs-mount.
* Wed May 27 2009 jmcdonoughAATTsuse.de- Detect tight loop in tdb_find(); (bnc#450974).
* Mon May 18 2009 jmcdonoughAATTsuse.de- Fix lp printing with kerberos; (bnc#476913).
* Sat May 09 2009 lmuelleAATTsuse.de- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all other build targets.
* Thu Apr 30 2009 lmuelleAATTsuse.de- Update to 3.4.0pre1. + Samba4 and Samba3 sources are included in the tarball + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add \'net eventlog\'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add \'net rpc service\' subcommands \'create\' and \'delete\'. + Make merged build possible. + Move common libraries to the shared lib/ directory.
* Thu Apr 30 2009 lmuelleAATTsuse.de- Update to 3.3.4. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix usrmgr.exe creating a user (bug #6243). + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with \"msdfs root\" set to \"yes\". + BUG 6279: Fix Winbind crash. + BUG 5329: Add \"net rpc service delete/create\". + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before freed. + BUG 6263: Fix domain logins for WinXP clients pre SP3. + BUG 6286: Call init function for builtin idmap modules before probing for them as shared modules. + BUG 6243: Fix usrmgr.exe creating a user. + net conf: Save share name as given, not as lower case only. + Prevent creation of registry keys containing the \'/\' character. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don\'t invalidate the cnum, invalidate the vuid. + Don\'t access a freed structure when logging off and re-using a vuid. + Try to to fix password_expired flag handling. + Make sure to grey out change fields in the netdomjoin-gui when not running as root. + Don\'t look up local user for remote changes, even when root. + Use procid_str in debug messages for better cluster-debuggability. + Use cluster-aware procid_is_me instead of comparing pids. + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Do not use the file system GET_REAL_FILENAME for mangled names. + Fix a crash bug if we timeout in net rpc trustdom list. + Add \'--request-timeout\' option to net. + In net_conf_import, start a transaction when importing a single share. + Fix writing of roaming profiles with \"profile acls\" set to \"yes\".
* Fri Apr 17 2009 lmuelleAATTsuse.de- Update to 3.2.11. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix smbd crash for close_on_completion. + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6205: Correct sample smb.conf share configuration. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with \"msdfs root\" set to \"yes\". + BUG 6263: Fix domain logins for WinXP clients pre SP3. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don\'t invalidate the cnum, invalidate the vuid. + Fix resume command typo for \"printing = vlp\". + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Don\'t look up local user for remote changes, even when root.
* Fri Apr 17 2009 jmcdonoughAATTsuse.de- Don\'t lookup local user for remote password changes; (bnc#493507).
* Thu Apr 02 2009 lmuelleAATTsuse.de- Update to 3.3.3. + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb correctly (bug #6195). + Fix serving of files with colons to CIFS/VFS client (bug #6196). + Fix \"map readonly\" (bug #6186). + BUG 6195: Don\'t let smbd child processes panic. + Add backend_requires_messaging() method to libsmbconf. + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf. + Fall back to file backend when no valid backend was found. + Fix a memleak in dbwrap_rbt. + Provide transaction_start|commit|cancel fns for the registry tdb. + Speed up \"net conf drop\". + Speed up \"net conf import\". + Add transactions to the libsmbconf API. + Reduce memory usage of \"net conf import\". + Registry cleanup. + Fix handling of SAMBA_VERSION_VENDOR_PATCH. + Fix build of pam_winbind.so with static linking. + Tidy up some convert_string_internal error cases. + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to run elections. + Allow DFS client paths to work when POSIX pathnames have been selected. + Try and fix the build farm RAW-STREAMS errors. + Ensure files starting with multiple dots are hidden. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta(). + Fix notify_printer_status_byname. + Fix Coverity IDs 722, 762, 774, 775, 776. + Fix build on old Heimdal based systems. + Fix compile warning. + Use parentheses in if condition to make negation clear. + Add dirsort module. + BUG 6147: Fix detection of the GNU ld version. + BUG 6097: Fix smbd segfault. + BUG 6130: Don\'t crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6139: Add missing whitespace in mount.cifs error message. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix a valgrind error. + Speed up \"net conf list\". + Add sorted subkey cache. + Use StrCaseCmp in the dirsort module. + Document the dirsort module. + Disable dns_sd by default. + Add avahi detection to configure. + Add event avahi binding. + Use avahi to register _smb._tcp in smbd. + Fix two memleaks in the encryption code. + Fix a scary \"fill_share_mode_lock failed\" message. + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn\'t set errno. + Don\'t use reserved words in smbconftort. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Parse_packet can return NULL which is then dereferenced in match_mailslot_name. + Format the header check for netinet/ip.h more nicely. + Missing break in conversion function prevents tdb password database update.
* Wed Apr 01 2009 jmcdonoughAATTsuse.de- Update to 3.2.10. + BUG #6195: Don\'t let smbd child processes panic.
* Wed Apr 01 2009 jmcdonoughAATTsuse.de- BUG 6195: Fix crash on passdb conversion.
* Tue Mar 31 2009 jmcdonoughAATTsuse.de- Update to 3.2.9. + BUG 5920: The length of the memcpy was calculated wrong. + BUG 6097: Fix smbd segfault. + BUG 6098: Fix ads_find_dc() with \"security = domain\" when the DNS server is invalid. + BUG 6099: Samba returns incurrate capabilities list. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem. + BUG 6161: smbclient corrupts source path in tar mode. + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + BUG 6224: nmbd waits 5 minutes before checking to run elections. + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn\'t set errno. + Numerous Coverity fixes + Fix double free caused by incorrect talloc_steal usage. + Backport delete semantics of alternate data streams on a file truncate. + Allow set attributes on a stream fnum to redirect to the base filename. + Fix use of streams modules with CIFSFS client. + Fix more POSIX path lstat calls. + Allow DFS client paths to work with POSIX pathnames. + Ensure files starting with multiple dots are hidden. + Fix guest auth when Winbind is running. + Fix memleak in get_remote_printer_publishing_data(). + cifs mount fix for handling -V parameter. + Fix guest mounts. + Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Enable total anonymization in vfs_smb_traffic_analyzer. + Don\'t try and delete a default ACL from a file. + Fix remotely adding a share via MMC. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Fix a valgrind error / segfault in dns_register_smbd(). + Don\'t log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix two memleaks in the encryption code. + Fix \"fill_share_mode_lock failed\" message. + Add S-1-22-X-Y sids to the local token. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Don\'t miss an absolute pathname as a kerberos keytab path. + Have nmbd check all available interfaces for WINS before failing. + Initialize the id_map status in idmap_ldap to avoid surprise.
* Sun Mar 15 2009 lmuelleAATTsuse.de- Obsolete change from 2008-03-05 by removing the needless examples cleanup.
* Sat Mar 14 2009 lmuelleAATTsuse.de- Update to 3.3.2. + Fix \"force group\" (bug #6155). + Fix saving of files on Samba share using MS Office 2007 (bug #6160). + Fix guest authentication in setups with \"security = share\" and \"guest ok = yes\" when Winbind is running. + Fix corruptions of source path in tar mode of smbclient (bug #6161). + BUG 6082: Fix renaming and deleting of directories using Windows clients. + BUG 6154: Make ZFS honor admin users. + BUG 6155: Fix \"force group\". + BUG 6160: Fix saving of files on Samba share using MS Office 2007. + BUG 6161: Fix corruptions of source path in tar mode of smbclient. + Fix some NetBSD warnings. + Fix bug in processing of open modes in POSIX open. + Fix use of streams modules with CIFSFS client. + Ensure ACL modules work with POSIX paths. + Use fsp->posix_open in preference if we have it. + Fix more POSIX path lstat calls. + Fix a bug in message handling for the change notify code. + Fix guest authentication in setups with \"security = share\" and \"guest ok = yes\" when Winbind is running. + BUG 4640: Fix guest mounts in mount.cifs. + Fix displaying the version string properly when no other parameters passed in in mount.cifs. + Prefer gssapi header files from subdirectory. + BUG 6176: winbindd -n should disable the winbind idmap cache. + Add a vfs_preopen module to hide fs latencies. + Don\'t log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a valgrind error / segfault in dns_register_smbd(). + Fix build on SLES8. + Decremented by 1 for ntcancel requests. + Fix creation of core files. + Fix first mapping of uids/gids in Winbind. + Initialize the id_map status in idmap_ldap to avoid surprise. + Fix initialization of idmap status.
* Tue Mar 10 2009 lmuelleAATTsuse.de- Only call \'%find_lang pam_winbind\' in the samba spec file, not samba-doc.
* Thu Mar 05 2009 roAATTsuse.de- Ignore return value from subshell to fix build.
* Wed Feb 25 2009 boyangAATTsuse.de- Make libsmbclient work with DFS, backported from 3.3; (bnc#475995).
* Tue Feb 24 2009 lmuelleAATTsuse.de- Update to 3.3.1. + Fix net ads join when \"ldap ssl = start tls\" (bug #6073). + Fix renaming/deleting of files using Windows clients (bug #6082). + Fix renaming/deleting a \"not matching/resolving\" symlink (bug #6090). + Fix remotely adding a share via the Windows MMC. + BUG 6082: Fix renaming/deleting of files using Windows clients. + BUG 6069: Fix build with too many arguments. + BUG 6090: Fix renaming/deleting a \"not matching/resolving\" symlink. + BUG 6099: Try to fix domain join of Win7 Beta. + BUG 6117: Fix core dump of pdbedit -a. + BUG 6133: Fix deletion of non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem. + Fix Coverity IDs 115, 116, 117, 602. + Fix warning (bad handler prototype). + Unify the detection of the timespec code in configure.in, and the application of it in time.c. + Correctly use chroot(). + Parameterize in local.h the MAX_RPC_DATA_SIZE, and ensure that \"offered\" read from the rpc packet in spoolss is under that size. + Backport the semantics of when to delete alternate data streams on a file truncate. + Fix printf warnings. + BUG 6073: Prevent ads_connect() from using SSL unless explicitly requested. + Fix \'getent passwd\' to allocate new uids. + Fix \'getent group\' to allocate new gids. + Remove check for sharename being a username in \'net conf addshare\'. + Fix Coverity ID 848. + Remove unused ENUM_HND from \'net\'. + Fix getform command asprintf return code in rpcclient. + Fix memleak in get_remote_printer_publishing_data(). + Remove duplicate prototypes for generated rpc server functions. + Enable total anonymization in vfs_smb_traffic_analyzer. + Fix build with external dns_sd libraries. + Fix configure check \"sub-second timestamps without struct timespec\". + Use correct BSD evironment variable. + Don\'t try and delete a default ACL from a file. + BUG 5798: CFLAGS info lost in configure. + Fix Coverity IDs 740, 742, 744, 745, 876, 879, 880. + Fix remotely adding a share via the Windows MMC. + Avoid valgrind errors. + Fix \'net rpc join\' for users with the SeMachineAccountPrivilege. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Initialize rc to 0 in main in mount.cifs. + BUG 6069: Add a fstatvfs function for libsmbclient. + Eliminate compiler warnings. + Don\'t miss an absolute pathname as a kerberos keytab path. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + Make Samba work with older ctdb versions. + Add S-1-22-X-Y sids to the local token. + Conditional install of the cifs.upcall man page. + Adjust regex to match variable names including underscores. + BUG 4370: Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Fix a crash during name resolution. + Fix \"assignment discards qualifiers from pointer target type\" warnings. + Fix SMB_VFS_RECVFILE/SENDFILE macros. + Change \"ldap ssl:ads\" parameter to \"ldap ssl ads\". + Add manpages for vfs_acl_xattr and vfs_acl_tdb. + Fix double free caused by incorrect talloc_steal usage. + Build ldbrename. + Make nmbd check all available interfaces for WINS before failing. + Fix compilation of vfs_default on systems that do not support utimes(). + BUG 5920: Fix the calculation of the memcpy length. + BUG 6098: Fix ads_find_dc() in setups with \"security = domain\". + Make libsmbclient work with DFS.
* Mon Feb 23 2009 hhetterAATTsuse.de- Define init_samba_module in all samba-vscan modules; (bnc#469218).
* Sat Feb 21 2009 lmuelleAATTsuse.de- Add GPLv3 header to all init scripts; (bnc#459766).
* Tue Feb 10 2009 boyangAATTsuse.de- Backport of the clean event context after fork and krb5 refresh chain fixes; (bnc#415026).
* Mon Feb 09 2009 jmcdonoughAATTsuse.de- Revert accidental partial strict allocate upstream commit
* Sun Feb 08 2009 jmcdonoughAATTsuse.de- Update to 3.2.8. + Fix and streamline join and DC detection + BUG 4308: Excel save operation corrupts file ACLs. + BUG 5933: Fix incrementing/decrementing num_validated_vuids. + BUG 5953: Fix smbclient crashes. + BUG 5953: Make cli_send_smb_direct_writeX use writev. + BUG 5965: Fix creation of the first share using SWAT. + BUG 5969: Optimize smbclient put command. + BUG 5979: Fix level 2 oplocks. + BUG 5980: Fix race condition when granting level2 oplocks + BUG 5986: Fix renaming of streams. + BUG 5990: Strict allocate should be checked before ftruncate. + BUG 6000: Avoid bashism in perfcount.init. + BUG 6009: Setting \"min receivefile size = 1\" breaks writes. + BUG 6014: mget shouldn\'t segfault without arguments. + BUG 6016: Alternate Data Streams / Extended Attributes seem to conflict. + BUG 6017: Fix magic scripts. + BUG 6021: smbclient du command does not recuse properly. + BUG 6030: Add missing