Changelog for cifs-utils-debuginfo-5.9-94.3.x86_64.rpm :
Fri May 31 14:00:00 2013 varkolyAATTsuse.com
- Set the defattr dir mode of the main package as not specified to avoid a
conflict with the keyutils package.

Thu Mar 21 13:00:00 2013 mmeisterAATTsuse.com
- Added url as source.
Please see http://en.opensuse.org/SourceUrls

Tue Feb 26 13:00:00 2013 lmuelleAATTsuse.com
- Add cifstab named configuration file to post-12.2 systems; (bnc#804822);
(bnc#821889).
- Really use of the existing cifs init script; (bnc#697218).

Thu Feb 21 13:00:00 2013 lmuelleAATTsuse.com
- Remove superfluous restart or stop of the cifs service; (bnc#804822).

Wed Jan 23 13:00:00 2013 lmuelleAATTsuse.com
- Set parsed_info->got_user when a cred file supplies a username;
(bnc#800018).

Wed Jan 16 13:00:00 2013 lmuelleAATTsuse.com
- Update to cifs-utils 5.9.
+ new plugin architecture for the ID mapping tools
+ DOMAIN\\usernameAATTpassword format for username= arguments is removed
+ full RELRO (vs. partial) is now enabled on all binaries

Wed Nov 21 13:00:00 2012 crrodriguezAATTopensuse.org
- Version 5.8

* NFS-style device names are being deprecated in 6.0.

* Many bugs in cifs.idmap, getcifsacl and setcifsacl have been fixed.

Wed Aug 8 14:00:00 2012 lmuelleAATTsuse.com
- Update to cifs-utils 5.6.
+ -Werror has been removed by default from CFLAGS
+ PIE and RELRO are enabled by default at build time
+ better integration with systemd by allowing the use of
/bin/systemd-ask-password if available
+ better checks and warnings from cifscreds when used in environments that
do not have a session keyring
- No longer initialize oldfsgid inside acquire_mountpoint() of mount.cifs.c as
- Werror got removed.

Tue Jun 12 14:00:00 2012 lmuelleAATTsuse.com
- mount.cifs: initialize oldfsgid to surpress a warning while building for
RHEL 4 or CentOS 5.

Tue Jun 12 14:00:00 2012 lmuelleAATTsuse.com
- mount.cifs: set rc to 0 in libcap toggle_dac_capability

Fri Jun 1 14:00:00 2012 lmuelleAATTsuse.com
- BuildRequire libwbclient-devel for CentOS, Fedora, and RHEL builds too.

Fri Jun 1 14:00:00 2012 lmuelleAATTsuse.com
- Do not call autoreconf while build.

Fri Jun 1 14:00:00 2012 lmuelleAATTsuse.com
- BuildIgnore libtalloc to prevent a package conflict on Fedora systems.

Thu May 31 14:00:00 2012 lmuelleAATTsuse.com
- BuildRequire libtalloc-devel unconditionally.

Wed May 30 14:00:00 2012 lmuelleAATTsuse.com
- Update to cifs-utils 5.5.
+ mount.cifs: don\'t pass credentials= option to the kernel
+ doc: update mailing list
+ mount.cifs: don\'t send a mandatory ver= option to the kernel
+ mount.cifs: remove smb2 multicall binary code
+ doc: remove old XML sources for mount.cifs.8 and cifs.upcall.8
+ mount.cifs: unused variables

Wed May 16 14:00:00 2012 lmuelleAATTsuse.com
- BuildRequire libtalloc2-devel instead of libtalloc-devel for post 12.1
systems.

Thu Apr 19 14:00:00 2012 lmuelleAATTsuse.com
- Don\'t package get-, setcifsacl, and cifs.idmap for Mandriva pre-201100.

Thu Apr 19 14:00:00 2012 lmuelleAATTsuse.com
- Don\'t care at all what the real uid is when we call toggle_dac_capability().

Thu Apr 19 14:00:00 2012 lmuelleAATTsuse.com
- Make use of the stored return code in toggle_dac_capability() of mount.cifs.

Thu Apr 19 14:00:00 2012 lmuelleAATTsuse.com
- Declare krb5_auth_con_set_req_cksumtype if the prototype does not exist.
- Initialize bkupuid and bkupgid.

Thu Apr 19 14:00:00 2012 lmuelleAATTsuse.com
- BuildRequire pkg-config for post-10.2 systems and else pkgconfig.

Thu Apr 19 14:00:00 2012 lmuelleAATTsuse.com
- mount.cifs: fix up some -D_FORTIFY_SOURCE=2 warnings

Thu Apr 19 14:00:00 2012 lmuelleAATTsuse.com
- Update to cifs-utils 5.4.
+ the \"rootsbindir\" can now be specified at configure time
+ mount.cifs now supports the -s option by passing \"sloppy\" to the
kernel in the options string
+ cifs.upcall now properly respects the domain_realm section in krb5.conf
+ unprivileged users can no longer mount onto dirs into which they
can\'t chdir (fixes CVE-2012-1586)

Mon Feb 6 13:00:00 2012 dlovaskoAATTsuse.com
- Added position independent flags to compilation and linking (-fpie/-pie);
(bnc#743133).

Thu Feb 2 13:00:00 2012 lmuelleAATTsuse.de
- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.
- BuildRequire keyutils-devel for post-10.2 systems.
- BuildRequire libcap-ng-devel for post-11.2 systems.
- BuildRequire libwbclient-devel for post-10.2 systems.
- BuildRequire samba-winbind-devel for CentOS, Fedora, and RHEL systems.
- Add getcifsacl, setcifsacl, cifs.idmap, and cifs.upcall binaries and man
pages to the filelist.

Wed Feb 1 13:00:00 2012 lmuelleAATTsuse.de
- Update to cifs-utils 5.3.
+ admins can now tell cifs.upcall to use an alternate krb5.conf file
+ on remount, mount.cifs no longer adds a duplicate mtab entry
+ the cifscreds utility has seen a major overhaul to allow for multiuser
mounts without krb5 auth
- Update to cifs-utils 5.2.
+ cifs.idmap can now map uid/gid to SID in addition to the other way around
+ getcifsacl/setcifsacl are now installed by default in /usr/bin instead of
/usr/sbin. The manpages are now in section 1.
+ cifs.upcall has a new scheme for picking the SPN on krb5 mounts. The
hostname is now always lowercased. If we fail to get a ticket using an
unqualified name, it now attempts to guess the domain name.
+ A lot of manpage updates, additions and corrections
- Update to cifs-utils 5.1.
+ fix for a minor security issue that can corrupt the mtab
+ new getcifsacl/setcifsacl tools that allow you to fetch and set raw
Windows ACLs via an xattr.
+ a lot of manpage patches
- Update to cifs-utils 5.0.
+ mount.cifs always uses the original device string to ensure that umounts
by unprivileged users are not problematic
+ there is a new cifs.idmap program for handling idmapping upcalls
+ a lot of manpage patches

Wed Dec 21 13:00:00 2011 cooloAATTsuse.com
- remove call to suse_update_config (very old work around)

Thu Dec 1 13:00:00 2011 cooloAATTsuse.com
- add automake as buildrequire to avoid implicit dependency

Sat Sep 17 14:00:00 2011 jengelhAATTmedozas.de
- Remove redundant tags/sections from specfile

Wed Jun 22 14:00:00 2011 sjayaramanAATTsuse.de
- modify cifs init script to use /var/run instead of /var/lock/subsys for
state file; (bnc#697218).

Tue Mar 8 13:00:00 2011 sjayaramanAATTsuse.de
- Update to cifs-utils 4.9.
+ mount.cifs: don\'t try to alter mtab if it\'s a symlink.
+ mount.cifs: fix possible use of uninitialized variable.
+ mount.cifs: reacquire CAP_DAC_READ_SEARCH before calling mount(2).
+ mount.cifs: fix handling of scopeid in resolve_host.
- Update to cifs-utils 4.8.1.
+ fix mis-generated autoconf files.
- Update to cifs-utils 4.8.
+ mount.cifs: manpage: add entry for \"actimeo\" option.
+ cifs-utils: rewrite hardcoded paths in manpages.
+ cifs-utils: fixes for manpage pathname replacement scheme.
+ cifs.upcall: fix memory and call krb5_auth_con_free().
+ cifs.upcall: use krb5_auth_con_set_req_cksumtype() and pass a GSSAPI
checksum; (bso#7890).
+ manpage: change port option description.
+ cifs.upcall: add \'l\' to getopt_long string.
+ cifs.upcall: fix crash when trying to free uninitialized var.
+ cifs.upcall: consolidate find_krb5_cc calls.
+ cifs.upcall: clean up key description decoding routine.
+ cifs.upcall: add keytab support for unattended mounts.
+ mount.cifs: add cruid= mount option.
- Update to cifs-utils 4.7.
+ manpage: add mount.cifs manpage entry for \"multiuser\" option.
+ mount.cifs: reinstate ip= as an override for address resolution.
+ mount.cifs: use monotonic time for timeouts.
+ cifs-utils: infrastructure for stashing passwords in keyring.
+ cifs-utils: moving resolve_host into separate file.

Fri Jan 14 13:00:00 2011 lmuelleAATTsuse.de
- Move the cifs init script nfs dependencies from Required to Should.

Tue Dec 7 13:00:00 2010 toganmAATTopensuse.org
- corrected #bnc 641513 by adding /sbin/mkinitrd_setup in %postun.

Mon Aug 2 14:00:00 2010 sjayaramanAATTsuse.de
- Update to cifs-utils 4.6.
+ adds documentation for the fsc option.
+ mount.cifs deals with the _netdev, mand, and nomand options correctly now.
+ changes how mount.cifs handles the MS_MANDLOCK flag.
+ makes cifs.upcall prefer the creduid= upcall option to uid=

Wed Jul 7 14:00:00 2010 sjayaramanAATTsuse.de
- mount.cifs: fix parsing of \"cred=\" option; (bnc#618877); (bnc#620856);
(bnc#621525); (bnc#623763); (bnc#627243).

Mon May 24 14:00:00 2010 sjayaramanAATTsuse.de
- Update to cifs-utils 4.5.
+ strip leading delimiter off of prefixpath option in mount.cifs.
+ remove magic number for max_username in parse_options.
+ turn into a multicall binary for smb2.
+ fix uninitialized variable in cred parsing error path.
+ cleanup mount.cifs option parsing.

Wed May 5 14:00:00 2010 lmuelleAATTsuse.de
- BuildRequire libkeyutils-devel on Mandriva systems.

Tue May 4 14:00:00 2010 sjayaramanAATTsuse.de
- Update to cifs-utils 4.4.
+ fix a segfault that could occur when parsing the address list.
+ fix autoconf/automake problem that could cause compilation to fail.
+ acquire required capabilities before a couple of operations.
+ ensure passwords are not left in memory.
+ cleanup of credential file parsing.

Tue Apr 13 14:00:00 2010 lmuelleAATTsuse.de
- automake: don\'t use AATTfooAATT constructs in Makefile.am.

Tue Apr 13 14:00:00 2010 lmuelleAATTsuse.de
- autoconf: define CAPNG_LDADD even when it\'s not set.

Fri Apr 9 14:00:00 2010 lmuelleAATTsuse.de
- Update to cifs-utils 4.3.
+ credential files accept parameter names consistent with mount options.
+ some problems with linking are fixed.
+ libcap-ng is used if it\'s available.
+ the capability bounding set is zeroed out for greater security.
+ CAP_DAC_OVERRIDE is only enabled when updating the mtab.

Mon Apr 5 14:00:00 2010 sjayaramanAATTsuse.de
- Update to cifs-utils 4.2.
+ significant overhaul of mount.cifs to make it setuid root safe.
+ mount.cifs now does privilege separation.
+ re-enable mount.cifs setuid usage.
+ make mount.cifs use libcap if available to prune its capability set.
+ guard mount.cifs against signals by unprivileged users.
+ mount.cifs is more careful about signal handling during mtab updates.
+ cifs.upcall fixes to make it work with the heimdal kerberos
implementation.

Thu Mar 25 13:00:00 2010 lmuelleAATTsuse.de
- Update to cif-utils 4.1.
+ fix ver= option passed to the kernel
+ fix error handling when duplicating options string
+ make check_mountpoint a noop for non-legacy builds
+ remove uuid option
+ remove bogus rsize/wsize options
+ check for NULL addr pointer before handling scopeid

Mon Mar 22 13:00:00 2010 lmuelleAATTsuse.de
- Add %version dependency to Provides and Obsoletes.

Sun Mar 14 13:00:00 2010 lmuelleAATTsuse.de
- Update to cif-utils 4.0.
- Create cifs-utils package which is independent from Samba.

Mon Mar 8 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.5.1.
+ Fix security flaw on Linux platforms if built with libcap support allowing
file system access even when permissions should have denied it;
CVE-2010-0728; (bso#7222).

Mon Mar 8 13:00:00 2010 rhaferAATTnovell.com
- Fixed libldb.so link in libldb-devel.

Fri Mar 5 13:00:00 2010 hhetterAATTnovell.com
- Fix argc handling in net_share, making the command \"net share\"
work again; (bso#7203); (bnc#584253).

Mon Mar 1 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.5.0.
+ Fix duplicate sam and unix accounts; (bso#7145).
+ Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160).
+ Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166).
+ Fix \'net ads dns\' usage calls; (bso#7181).
+ Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182).

Wed Feb 24 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.4.6.
+ Change parameter \"wide links\" to default to \"no\"; it\'s also incompatible
with \"unix extensions\"; (bso#7104); (bnc#577868).
+ Fix printing with 64 bit clients (bso#6888).
+ Fix core dump on 64 bit Linux (bso#7063).
+ Fix failing of smbd to respond to a read or a write caused by Linux
asynchronous IO (aio) (bso#7067).
+ Fix string buffer overflow causing heap corruption in smbd (bso#7096).
+ Fix bogus ip address in SWAT; (bso#5885).
+ Fix vfs_full_audit; (bso#6557).
+ Use the first \"uid\" value; (bso#6157).
+ Fix large paged search with DirX LDAP servers; (bso#6981).
+ Fix crash bug in \'cifs.upcall\'; (bso#6868).
+ Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047).
+ Fix DFS on AIX (maybe others); (bso#7052).
+ Fix pdb_search crash as non-root user; (bso#7068).
+ Fix unlocking of accounts from ldap; (bso#7072).
+ Fix vfs_expand_msdfs; (bso#7081).
+ Fix results of \'smbclient -L\' with a large browse list; (bso#7098).
+ Normalize \"Changing password for\" msg IDs and STRs; (bso#7102).
+ Fix malformed require_membership_of_sid; (bso#7106).
+ Fix reading of large browselist; (bso#7122).
+ \"mangling method = hash\" can crash storing a name containing a \'.\';
(bso#7154).
+ Valgrind Conditional jump or move depends on uninitialised value(s) error
when \"mangling method = hash\"; (bso#7155).
+ Fix listing of printjobs in Windows 7; (bso#7130).
+ Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136).
+ Make idmap cache persistent for \"ldapsam:trusted\".
+ Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not
only the persistent idmap cache.
+ Shortcut uid_to_sid when \"ldapsam:trusted = yes\".
+ Make pdb_copy_sam_account also copy the group sid.
+ Shortcut gid_to_sid when \"ldapsam:trusted = yes\".
+ Speed up pdb_get_group_sid().
+ Try to build the full unix_pw structure with ldapsam:trusted support.
+ Optimize ldapsam_alias_memberships() and cache ldap searches.

Fri Feb 19 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.5.0rc3.
+ Change parameter \"wide links\" to default to \"no\"; it\'s also incompatible
with \"unix extensions\"; (bso#7104); (bnc#577868).
+ Fix vfs_full_audit; (bso#6557).
+ Fix crash bug in \'cifs.upcall\'; (bso#6868).
+ Fix duplicate initializer in the rmdir module; (bso#6876).
+ Fix printing with 64 bit clients; (bso#6888).
+ Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047).
+ Fix core dump on Ubuntu 8.04 64 bit; (bso#7063).
+ Fix failing of smbd to respond to a read or a write caused by Linux
asynchronous IO (aio); (bso#7067).
+ Fix \'smbget\' error status; (bso#7069).
+ Fix build of \'smbfilter\'; (bso#7071).
+ Fix unlocking of accounts from ldap; (bso#7072).
+ Cliconnect gets realm wrong with trusted domains; (bso#7079).
+ Fix vfs_expand_msdfs; (bso#7081).
+ Fix storing of create time on directories in an EA in new create time
code; (bso#7084).
+ Fix an early release of the global lock that can cause data corruption in
libtdb; (bso#7085).
+ Fix string buffer overflow causing heap corruption in smbd; (bso#7096).
+ Fix results of \'smbclient -L\' with a large browse list; (bso#7098).
+ Normalize \"Changing password for\" msg IDs and STRs; (bso#7102).
+ Fix malformed require_membership_of_sid; (bso#7106).
+ Add pdb_ldap performance fixes; (bso#7116).
+ Change ldap filter to what really was intended; (bso#7116).
+ Add new \"nmbd bind explicit broadcast\" parameter; (bso#7118).
+ Fix nmbd problems with socket address; (bso#7118).
+ Support large browselist; (bso#7119).
+ Fix reading of large browselist; (bso#7122).
+ Fix listing of printjobs in Windows 7; (bso#7130).
+ Owner of file not available with Kerberos; (bso#7139).
+ Fix IPv4/IPv6 problems; (bso#7140).
+ Fix get_acl_blob in the acl_tdb VFS module; (bso#7148).
+ \"mangling method = hash\" can crash storing a name containing a \'.\';
(bso#7154).
+ Valgrind Conditional jump or move depends on uninitialised value(s) error
when \"mangling method = hash\"; (bso#7155).
+ Fix some wrong newlines in de translation strings.

Tue Feb 9 13:00:00 2010 lmuelleAATTsuse.de
- Take extra care that a mount point of mount.cifs isn\'t changed during mount
and don\'t allow it to be run as setuid root program; CVE-2010-0787;
(bso#6853); (bnc#550002).

Tue Feb 9 13:00:00 2010 lmuelleAATTsuse.de
- Check in mount.cifs for invalid characters in device name and mountpoint;
CVE-2010-0547; (brc#562156); (bnc#577925).

Tue Feb 9 13:00:00 2010 boyangAATTsuse.de
- Don\'t invalidate cache for uninitialized domains; (bnc#538923).

Tue Feb 9 13:00:00 2010 boyangAATTsuse.de
- Signals are processed twice in child; (bnc#538923).

Mon Feb 8 13:00:00 2010 jmcdonoughAATTsuse.de
- Allow forced pw change even with min pw age; (bnc#561894).

Mon Feb 8 13:00:00 2010 lmuelleAATTsuse.de
- Change parameter \"wide links\" to default to \"no\"; it\'s also incompatible
with \"unix extensions\"; (bso#7104); (bnc#577868).

Sun Feb 7 13:00:00 2010 boyangAATTsuse.de
- Fix enumerate domain local groups for primary domain; (bnc#573813).

Sun Feb 7 13:00:00 2010 boyangAATTsuse.de
- Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106).

Fri Feb 5 13:00:00 2010 lmuelleAATTsuse.de
- Normalize \"Changing password for\" msg IDs and STRs; (bnc#499233).

Thu Feb 4 13:00:00 2010 rhaferAATTnovell.com
- Build libtevent and libldb and put them into separate subpackages.

Tue Jan 26 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.5.0rc2.
+ The Using Samba HTML book has been removed.
+ \'net\', \'smbclient\' and libsmbclient can use logon credentials cached by
Winbind; (bso#7062).
+ New vfs_scannedonly module has been added; (bso#7028).
+ Check password history before increasing \"badPasswordCount\"; (bso#4347).
+ Fix changing of ACLs on writable file with \"dos filemode=yes\"; (bso#5202).
+ Restore Samba 3.0.x behavior and use the first \"uid\" value in pdb_ldap;
(bso#6157).
+ Fix deletion of an object whose parent folder does not have delete rights
fails even if the delete right is set on the object in vfs_acl_xattr and
vfs_acl_tdb; (bso#6876).
+ Fix large paged search with DirX LDAP servers; (bso#6981).
+ Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027).
+ Disable sanity check in NetShareEnum for better compatibility with
Windows; (bso#7029).
+ Fix SMBrmdir error message when deleting a directory fails; (bso#7033).
+ Fix segfault in vfs_cap; (bso#7034).
+ Fix \'net rpc getsid\' in hardened Windows environments; (bso#7036).
+ Fix a Winbind segfault in \"trusted_domains\"; (bso#7037).
+ Complete and improve some German translation of \'net\'; (bso#7039).
+ Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039).
+ Fix crash bug in libsmbclient; (bso#7043).
+ Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045).
+ Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046).
+ Lock down some srvsvc calls according to what w2k3 seems to do.

Tue Jan 19 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.4.5.
+ Fix memory leak in smbd (bug #7020).
+ Fix changing of ACLs on writable files with \"dos filemode=yes\"
(bug #5202).
+ BUG 6642: Fix opening the quota magic file.
+ BUG 6919: Fix remote quota management.
+ BUG 7034: Fix internal error caused by vfs_cap.
+ BUG 7036: Fix \'net rpc getsid\' in hardened Windows environments.
+ BUG 7043: Fix crash bug in \"SMBC_parse_path\".
+ BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls.
+ BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS
server.

Tue Jan 12 13:00:00 2010 lmuelleAATTsuse.de
- Free unused memory after a packet got processed; (bso#7020).

Fri Jan 8 13:00:00 2010 boyangAATTsuse.de
- Add timeout to rpc call to prevent infinite loop when network is
down; (bnc#538923).

Thu Jan 7 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.5.0rc1.
+ BUG 6837: Fix \"Too many open files\" when trying to access large number of
files with Windows 7.
+ BUG 6939: Fix long filenames when \"mangling method\" is set to \"hash\".
+ BUG 6991: Create symbol links to shared libraries.
+ BUG 6992: make test for getgrouplist cacheable.
+ BUG 7014: Fix Winbind crash when retrieving empty group members.
+ BUG 7020: Fix smbd using 2G memory.
+ Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned
attributes by protocol level.
+ Vector correctly through reply_openerror() (which uses the same logic).
+ Fix bugs with the full Windows ACL support.
+ Add a few missing gettext calls to the \'net\' command.
+ Fix up a share type translation and translate some more strings in \'net\'.
+ Allow to call \"pdbedit -N description -u user\" without specifiyng \"-r\".
+ Add spoolss_DriverInfo7.
+ Fix rpcclient after setprinter IDL fixes.
+ Use generated krb5.conf in \'net ads testjoin\'.
+ Add some German translations for the \'net\' command.
+ Update mount.cifs man page with nounix option.
+ Fix _samr_GetAliasMembership for results with 0 rids.
+ Fix an error case in cli_negprot.
+ Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc.
+ Restore correct timeouts for SMB requests.
+ Fix a 64-bit error in libsmb.
+ Replace IS_DOMAIN_OFFLINE by a function in Winbind.
+ Simplify/cleanup Winbind code.
+ Fix write behind memory block in libtalloc.
+ Fix result check for getaddrinfo().
+ Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr()
to tsocket.
+ Always set tdb->tracefd to -1 to be safe on goto fail in libtdb.
+ Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior.
+ Fix standalone \'make installdocs\'.
+ Output %p as unsigned in snprintf replacement.
+ New attempt at TDB transaction nesting allow/disallow.
+ Remove swig stuff from libtdb.
+ Reset tdb->fd to -1 in tdb_close() in libtdb.
+ Change the way mksysms work in libtalloc.
+ Also build and install tdb manpages from standalone tdb.
+ Fix infinite loop in NCACN_IP_TCP as there is no timeout.
+ Make winbindd_cache.c aware of domain offline to avoid unnecessary backend
query.
+ List trusted domains from wcache when domain is offline.

Thu Jan 7 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.4.4.
+ Fix interdomain trust relationships with Win2008R2 (bug #6697).
+ Fix Winbind crashes when queried from nss (bug #6889).
+ Fix Winbind crash when retrieving empty group members (bug #7014).
+ Fix \"UID range full\" error in Winbind (bug #6901).
+ Fix multiple LDAP servers in \"idmap backend\" and \"idmap alloc
backend\" (bug #6910).
+ BUG 4832: Fix iconv checks.
+ BUG 6338: Do not always display \"none\" in \'net rpc trustdom list\'.
+ BUG 6851: Add pdbedit --kickoff-time/-K to set the user\'s kickoff time.
+ BUG 6828: Fix infinite timeout when byte lock held outside of samba.
+ BUG 6837: Fix \"Too many open files\" message when trying to access a large
number of files with Windows 7.
+ BUG 6841: Fix \"map acl inherit = yes\".
+ BUG 6850: Fix shadow copy display on Windows 7.
+ BUG 6867: Fix listing of directories with a lot of files.
+ BUG 6868: Support building with Heimdal we well as with MIT.
+ BUG 6875: Fix DOS attributes on OS/2 clients.
+ BUG 6880: Fix listing of workgroup servers in libsmbclient.
+ BUG 6898: Samba duplicates file content on appending.
+ BUG 6918: Fix krb5 build problem on Ubuntu karmic.
+ BUG 6929: Fix build with recent heimdal.
+ BUG 6939: Fix long filenames with \"mangling method = hash\".
+ BUG 6967: Fix \'net ads join\' with OU.
+ BUG 6981: Fix paged search with DirX LDAP server.
+ BUG 6982: Remove erroneous out of memory error path in lookup_sid.
+ BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids.
+ BUG 7005: Fix \"mangle method = hash\" truncates files with dot \".\"
character.
+ Fix the build of the winbind krb5 locator plugin.
+ Fix enumprinter key client and server.

Wed Jan 6 13:00:00 2010 lmuelleAATTsuse.de
- Readjust the _libdir/cups/backend/smb sym link only on uninstall of the
samba-krb-printing package; (bnc#568603).

Fri Jan 1 13:00:00 2010 larsAATTsamba.org
- Add BuildRequires to fam-devel; (bnc#564260).

Wed Dec 30 13:00:00 2009 jmcdonoughAATTsuse.de
- Prevent winbind crash; (bso#7014); (bnc#566119).

Mon Dec 21 13:00:00 2009 sjayaramanAATTsuse.de
- Fix processing of open modes in POSIX open; (bnc#530683).

Thu Dec 17 13:00:00 2009 jengelhAATTmedozas.de
- Add baselibs.conf as a source.

Tue Dec 15 13:00:00 2009 lmuelleAATTsuse.de
- Update to 3.5.0pre2.
+ BUG 2350: Add LDAP Alias Dereferencing support.
+ BUG 6288: SWAT adds a second share when changing parameters of an existing
share.
+ BUG 6435: Fix minor memory corruption.
+ BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was
set while configure.
+ BUG 6802: A created folder does not properly inherit permissions from
parent in vfs_acl_xattr.
+ BUG 6837: \"Too many open files\" when trying to access large number of
files from Windows 7.
+ BUG 6860: Fix shared library build on QNX.
+ BUG 6879: Fix crash in Winbind.
+ BUG 6929: Fix build with recent heimdal.
+ BUG 6938 : No hook exists to check creation rights when using acl_xattr
module.
+ BUG 6967: Prevent glibc error on \'net ads join\'.
+ Fix vfs_acl_xattr which was failing to call the NEXT connect function.
+ Restructure the ACL code.
+ Refactor reply_rmdir to use handle based code.
+ Fix the build when no external talloc and tdb are installed.
+ Fix detection of CTDB headers on systems without system-libtalloc.
+ Fix several printing issues.
+ Fix the build on Mac OS X 10.6.2.
+ Fix net and rpcclient after setprinterdataex changes.
+ Add full support for level 8 printer drivers.
+ Add more spoolss architectures to IDL.
+ Fix enumprinter key client and server.
+ Fix crash in EnumPrinterDataEx.
+ Prefer posix_fallocate for doing \"strict allocate\".
+ Restore \"fake directory create times\" as a share parameter.
+ Fix explicit stat64 support.
+ Add support for NetWkstaGetInfo 101 and 102.
+ Add rpcclient wkssvc_enumerateusers.
+ De-deprecate \"write cache size\" to prevent its removal without a proper
alternative.
+ Allow more than 1000 users in BUILTIN\\Users.
+ Complete support for NetWkstaGetInfo/NetWkstaEnumUsers.
+ Fix the build of the example VFS modules.
+ Fix crash in free_file_list().
+ Give the user a chance to change password when password will expire soon.

Wed Dec 9 13:00:00 2009 lmuelleAATTsuse.de
- Store the smbfs service state if enabled and restore it for cifs while
upgrade on post-11.2 systems.

Wed Dec 9 13:00:00 2009 lmuelleAATTsuse.de
- Prevent cifstab from being overwritten while upgrade on post-11.2 systems.

Wed Dec 9 13:00:00 2009 boyangAATTsuse.de
- Give the user a chance to change password when password will expire soon;
(FATE#302414).

Tue Dec 8 13:00:00 2009 lmuelleAATTsuse.de
- Rename smbfs init script to cifs for post-11.2 systems.

Tue Dec 8 13:00:00 2009 jmcdonoughAATTsuse.de
- Allow Windows 7 to connection to samba domain controllers and
member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680).

Fri Dec 4 13:00:00 2009 jmcdonoughAATTsuse.de
- Error on joining windows domain (invalid pointer); (bso#6967);
(bnc#553622).

Thu Dec 3 13:00:00 2009 lmuelleAATTsuse.de
- Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165).
- Simplify the winbind package %pre script and suppress stdout only.

Thu Nov 26 13:00:00 2009 lmuelleAATTsuse.de
- Update to 3.5.0pre1
+ Add support for full Windows timestamp resolution.
+ Experimental implementation of SMB2.
+ Add encryption support for connections to a CUPS server.
+ Major windbind asynchronous refactoring.
- Remove using_samba from the doc package.
- Increase major version of libtalloc to 2.

Thu Nov 19 13:00:00 2009 boyangAATTsuse.de
- Fix kerberos refresh chain; (bnc#546162); (bso#6872).

Fri Nov 6 13:00:00 2009 lmuelleAATTsuse.de
- Hardlink duplicate files on post-11.1 systems.

Fri Nov 6 13:00:00 2009 lmuelleAATTsuse.de
- Add BuildArch noarch to samba-doc on post-11.1 systems.

Tue Nov 3 13:00:00 2009 boyangAATTsuse.de
- Use full 16byte session key in make_user_info_netlogon_interactive();
(bnc#551811).

Thu Oct 29 13:00:00 2009 lmuelleAATTsuse.de
- Update to 3.4.3.
+ Fix trust relationships to windows 2008 (2008 r2) (bug #6711).
+ Fix file corruption using smbclient with NT4 server (bug #6606).
+ Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680).
+ BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a
symbolic link.
+ BUG 6529: Offline files conflict with Vista and Office 2003.
+ BUG 6532: Fix domain enumeration if master browser has space in name.
+ BUG 6606: Fix file corruption using smbclient with NT4 server.
+ BUG 6690: Fix wrong error check in profile.
+ BUG 6703: Allow smbstatus as non-root.
+ BUG 6704: Fix syntax error in avahi configure test.
+ BUG 6707: Fix an occasional segfault in config file parsing.
+ BUG 6710: Adjust regex to match variable names including underscores.
+ BUG 6711: Fix trust relationships to windows 2008 (2008 r2).
+ BUG 6726: SIVAL should have been an SVAL.
+ BUG 6728: BSD needs sys/sysctl.h included to build properly.
+ BUG 6731: Fix reading beyond the end of a named stream in xattr_streams.
+ BUG 6735: Don\'t overwrite password in pam_winbind, subsequent pam modules
might use the old password and new password.
+ BUG 6764: Fix timeval calculation.
+ BUG 6765: Add a \"hidden\" parameter \"share:fake_fscaps\".
+ BUG 6769: Fix symlink unlink.
+ BUG 6772: Allow outstanding_aio_calls to be decremented.
+ BUG 6774: smbd crashes if \"aio write behind\" is set.
+ BUG 6776: Fix core dump caused by running overlapping Byte Lock test.
+ BUG 6781: Fix renaming subfolders in Explorer view.
+ BUG 6791: Fix linking order in cifs.upcall.
+ BUG 6793: Fix Winbind crash with \"INTERNAL ERROR: Signal 6\".
+ BUG 6793: Fix segfault in winbindd_pam_auth.
+ BUG 6796: Deleting an event context on shutdown can cause smbd to crash.
+ BUG 6797: Fix a memleak in libwbclient.
+ BUG 6804: Fix hpux compiler issue.
+ BUG 6805: Correctly handle aio_error() and errno.
+ BUG 6807: Fix a segfault in \"net rpc trustdom list\" for long domain names.
+ BUG 6810: Add support for finding alternate credcaches to cifs.upcall.
+ BUG 6811: Fix reference to freed memory in pam_winbind.
+ BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure.
+ BUG 6824: Fix avahi activation.
+ BUG 6826: Don\'t fail authentication when one or some group of
require-membership-of is invalid.
+ BUG 6828: Fix infinite timeout when byte lock held outside of Samba.
+ BUG 6829: Fix displaying of multibyte characters in smbclient.
+ BUG 6840: Fix crash in pam_winbind.
+ Fix an uninitialized variable.
+ Only ever handle one event after a select call.
+ Conditional install of the cifs.upcall man page.
+ Fix warning occuring when building the manpages.

Fri Oct 23 14:00:00 2009 lmuelleAATTsuse.de
- Let smbclient show special characters properly; (bso#6829); (bnc#544204).

Fri Oct 23 14:00:00 2009 boyangAATTsuse.de
- Don\'t fail authentication when one or some group of require-membership-of
is invalid; (bnc#525123); (bso#6826).

Fri Oct 16 14:00:00 2009 jmcdonoughAATTsuse.de
- Allow winbind to ignore certain domains; (bnc#539506).

Thu Oct 8 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.4.2.
+ Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517).
+ Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115).
+ Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).

Wed Sep 30 14:00:00 2009 jmcdonoughAATTsuse.de
- Fix potential denial of service; CVE-2009-2906; (bnc#543115).

Fri Sep 25 14:00:00 2009 jmcdonoughAATTsuse.de
- Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).

Wed Sep 23 14:00:00 2009 jmcdonoughAATTsuse.de
- Fix unresolved home path; CVE-2009-2813; (bnc#539517).

Mon Sep 21 14:00:00 2009 boyangAATTsuse.de
- Don\'t overwrite password in pam_winbind; (bnc#515444).

Mon Sep 14 14:00:00 2009 chrisAATTcomputersalat.de
- mods for winbind (when used with squid - ntlm_auth)
o winbind adds group \'winbind\'
o permission 0750,root,winbind LOCKDIR/winbindd_privileged

Thu Sep 10 14:00:00 2009 lmuelleAATTsuse.de
- Merge two fixes from 3.2.8 and 3.3.1.
+ Adjust regex to match variable names including underscores.
+ Conditional install of the cifs.upcall man page.

Wed Sep 9 14:00:00 2009 lmuelleAATTsuse.de
- Remove supplements from baselibs.conf while %clean for pre-11.1 systems;
(bnc#520579).

Wed Sep 9 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.4.1.
+ Fix authentication on member servers without Winbind (bug #6650).
+ Nautilus fails to copy files from an SMB share (bug #6649).
+ Fix connections of Win98 clients (bug #6551).
+ Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697).
+ Fix Winbind authentication issue (bug #6646).
+ BUG 5879: Update LDAP schema for Netscape DS 5.
+ BUG 5886: Fix password change propagation with ldapsam.
+ BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe.
+ BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab.
+ BUG 6437: Make open_udp_socket() IPv6 clean.
+ BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient.
+ BUG 6506: Smbd server doesn\'t set EAs when a file is overwritten in
NT_TRANSACT_CREATE.
+ BUG 6532: Fix the build with external talloc.
+ BUG 6538: Cancel all locks that are made before the first failure.
+ BUG 6560: Fix lookupname.
+ BUG 6564: SetPrinter fails (panics) as non root.
+ BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation.
+ BUG 6585: Fix unqualified \"net join\".
+ BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo.
+ BUG 6601: Avoid global fd limits.
+ BUG 6607: Fix crash bug in spoolss_addprinterex_level_2.
+ BUG 6611: Fix a valgrind error in chain_reply.
+ BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient.
+ BUG 6627: Raise the timeout for lsa_Lookup
*() calls from 10 to 35 seconds.
+ BUG 6650: Fix authentication on member servers without Winbind.
+ BUG 6651: Fix smbd SIGSEGV when breaking oplocks.
+ BUG 6655: Fix \'smbcontrol smbd ping\'.
+ BUG 6620: Fix a bug in renames of directories.
+ BUG 6664: Fix truncation of the session key.
+ BUG 6673: Fix \'smbpasswd\' with \"unix password sync = yes\".
+ BUG 6680: Fix authentication failure from Windows 7 when domain joined.
+ BUG 6688: Fix crash in \'net usershare list\'.
+ BUG 6693: Check we read off the complete event from inotify.
+ BUG 6700: Use dns domain name when needing to guess server principal.

Thu Aug 13 14:00:00 2009 boyangAATTsuse.de
- Update to 3.2.14.
+ Fix SAMR access checks (e.g. bugs #6089 and #6112).
+ Fix \'force user\' (bug #6291).
+ Improve Win7 support (bug #6099).
+ Fix posix ACLs when setting an ACL without explicit ACE for the
owner (bug #2346).
+ BUG 6387: Fix Winbind crash when multiple IDmappings exist in the
LDAP directory.
+ BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache().
+ BUG 6628: \'smbpasswd -a\' uses algorithmic rid base with
\'passdb backend = tdbsam\'.
+ BUG 6089: Fix SAMR access checks.
+ BUG 6112: Fix SAMR access checks.
+ BUG 6279: Fix Winbind crash.
+ BUG 6291: Fix \'force user\'.
+ BUG 6099: Try to fix domain join of Win7 Beta.
+ BUG 6386: Groupdb mapping fix.
+ BUG 6421: Fix POSIX read-only open on read-only shares.
+ BUG 6476: Fix more smbd-zombies in memory.
+ BUG 6488: acl_group_override() call in posix acls references an
uninitialized variable.
+ BUG 6504: Fix SAMR server for Winbind access.
+ BUG 6520: Fix time stamps.
+ BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit.
+ BUG 6340: Don\'t segfault when cleartext trustdom pwd could not be
retrieved.
+ BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
+ BUG 6465: Fix enum_aliasmem in ldb branch.
+ BUG 6484: Fix searching for users while adding them to groups via
Windows usermanager.
+ BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the
owner.
+ BUG 6526: Let parent_dirname() correctly return toplevel filenames.
+ BUG 6627: Raise the timeout for lsa_Lookup
*() calls from 10 to 35 seconds.
+ BUG 5798: Preserve CFLAGS info in configure.
+ BUG 6382: Case insensitive access to DFS links broken.
+ BUG 6481: Don\'t require \"Modify property\" perms to unjoin.
+ BUG 6628: \'smbpasswd -a\' uses algorithmic rid base with
\'passdb backend = tdbsam\'.
+ BUG 6560: Lookupname failed, cannot find domain when attempt to change
password.
+ Prevent creation of keys containing the \'/\' character.
+ Fix join of Windows 7 RC to a Samba3 DC.
+ Fix bug in processing of open modes in POSIX open.
+ Fix the negotiate flags.
+ Protect netlogon_creds_server_step() against NULL creds.
+ Also handle DirX return codes.
+ Fix a crash bug if we timeout in net rpc trustdom list.
+ Add \'--request-timeout\' option to \'net\'.
+ Fix a race condition in Winbind leading to a panic.
+ Add workaround for MS KB932762.
+ 5945: Fix out of memory error with Winbind idmap.
+ Avoid duplicate ACEs.
+ Fix profile ACLs in some corner cases.
+ Zero an uninitialized array.

Wed Aug 12 14:00:00 2009 boyangAATTsuse.de
- Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271);
(bso#6615).

Mon Aug 10 14:00:00 2009 boyangAATTsuse.de
- check in .po files for pam_winbind; (bnc#499233); (bso#6602).

Thu Aug 6 14:00:00 2009 hhetterAATTsuse.de
- Add ntp and network-remotefs as Should-Start dependency to the winbind init
script; (bnc#515629).

Thu Aug 6 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.0.36.
+ Fix Winbind crash on \'getent group\' (bug #5906).
+ Excel save operation corrupts file ACLs (bug #4308).
+ Prevent segmentation fault on joining a very long domain name.
+ BUG 4308: Excel save operation corrupts file ACLs.
+ BUG 4370: Clean-up entries in /etc/mtab after unmount.
+ BUG 4640: Fix guest mounts in mount-cifs.
+ BUG 5906: Fix Winbind crash on \'getent group\'.
+ BUG 6066: netinet/ip.h present but cannot be compiled on Solaris.
+ BUG 6099: In order to allow Win7 to connect to a Samba NT style.
+ BUG 6279: Fix Winbind crash.
PDC we set the flags before we know if it\'s an error or not.
+ BUG 6085: Fix build of vfs_default.
+ BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work
correctly.
+ Fix logic error in try_chown.
+ Correctly use chroot().
+ Fix bug in processing of open modes in POSIX open.
+ Don\'t install the cifs.upcall binary twice.
+ Fix mount.cifs handling of -V option.
+ Prevent segmentation fault on joining a very long domain name.
+ Don\'t try and delete a default ACL from a file.
+ Add workaround for MS KB932762.
+ Add fakemount (-f) and nomtab (-n) flags to mount.cifs.
+ Fix a crash during name resolution when log level >= 10
and libc segfaults if printf is passed NULL for a \"%s\" arg.

Sat Aug 1 14:00:00 2009 lmuelleAATTsuse.de
- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.

Mon Jul 27 14:00:00 2009 boyangAATTsuse.de
- lookupname failed, cannot find domain when attempt to change password;
(bnc#520645); (bso#6560).

Thu Jul 16 14:00:00 2009 lmuelleAATTsuse.de
- Don\'t link with --as-needed flag on post-11.1 systems.

Tue Jul 14 14:00:00 2009 lmuelleAATTsuse.de
- Stop the smbfs service if an interface goes down; (bnc#517768).

Wed Jul 8 14:00:00 2009 lmuelleAATTsuse.de
- Disable build of static libraries on post-11.1 systems; (bnc#509945).

Wed Jul 8 14:00:00 2009 jmcdonoughAATTsuse.de
- Fix missing zlibs for cifs.upcall and test_shlibs.

Fri Jul 3 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.4.0.
+ BUG 6431: Local groups from 3.0 setups no longer found.
+ BUG 6459: Fix build of pam_smbpass on some distributions.
+ BUG 6481: \'net ads leave\' needs to try account deletion, NetUnjoinDomain
not.
+ BUG 6497: Fix calling of \'test\' in configure.
+ BUG 6498: Add workaround for MS KB932762.
+ BUG 6499: Fix building of pam_smbpass.
+ BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache().
+ BUG 6512: Fix support for enumerating user forms.
+ BUG 6514: Improve error message in \'net\' when smb.conf is not available.
+ BUG 6520: Fix time stamps when \"unix extensions = yes\".
+ BUG 6521: Fix building tevent_ntstatus without config.h.
+ BUG 6526: Fix notifies in the share root directory.
+ BUG 6531: Fix pid file name.

Thu Jul 2 14:00:00 2009 lmuelleAATTsuse.de
- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.

Tue Jun 30 14:00:00 2009 jmcdonoughAATTsuse.de
- Fix net ads leave; (bnc#511695).

Thu Jun 25 14:00:00 2009 sbrabecAATTsuse.cz
- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).
- Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).

Wed Jun 24 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.2.13, 3.3.6.
+ In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with
file names treat user input as a format string to asprintf. With a
maliciously crafted file name smbclient can be made to execute code
triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).

Wed Jun 24 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.0.35.
+ In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a
data value can potentially affect access control when \"dos filemode\"
is set to \"yes\"; CVE-2009-1888; (bnc#515479).

Tue Jun 23 14:00:00 2009 jmcdonoughAATTsuse.de
- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).

Fri Jun 19 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.4.0rc1.
+ BUG 4699: Remove pidfile on clean shutdown.
+ BUG 5456: Fix \"net ads testjoin\".
+ BUG 6081: Make it possible to change machine account sids.
+ BUG 6253: Use correct value for password expiry calculation in
pam_winbind.
+ BUG 6297: Owner of sticky directory cannot delete files created by others.
+ BUG 6305: Correctly prompt for a password when a username was given.
+ BUG 6328: Add support for multiple rights to
\"net sam rights grant/revoke\".
+ BUG 6333: Consolidate create/delete account paths in pdbedit.
+ BUG 6449: \'net rap user add\' crashes without -C option.
+ BUG 6451: net/libnetapi user rename using wrong access bits.
+ BUG 6458: Fix uninitialized variable in local_password_change().
+ BUG 6465: Fix enumeration of empty aliases.
+ BUG 6476: Fix smbd-zombies in memory when using [x]inetd.
+ BUG 6487: Add missing DFS call in trans2 mkdir call.
+ BUG 6488: acl_group_override() call in posix acls references an
uninitialized variable.
+ Improve pam_winbind documentation.
- Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.

Thu Jun 18 14:00:00 2009 boyangAATTsuse.de
- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user
input as a format string to asprintf; CVE-2009-1886; (bnc#513360).

Wed Jun 17 14:00:00 2009 boyangAATTsuse.de
- Fix a bad memleak in vfs_full_audit; (bnc#510035).

Tue Jun 16 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.3.5.
+ Fix SAMR and LSA checks (bug #6089, #6289)
+ Fix posix acls when setting an ACL without explicit ACE for the
owner (bug #2346).
+ Fix joining of Win7 into Samba domain (bug #6099).
+ Fix joining of Win2000 SP4 clients (bug #6301).
+ BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the
owner.
+ BUG 5832: Fix build on RHEL when ccache is not available.
+ BUG 5853: Add keyutils-devel to build requires to fix build on RHEL.
+ BUG 5897: Fix shutdown script example in the smb.conf manpage.
+ BUG 6089: Revert the extra SAMR and LSA checks.
+ BUG 6099: Fix joining of Win7 into Samba domain.
+ BUG 6157: Fix handling of multi-value attribute \"uid\".
+ BUG 6289: Revert the extra SAMR and LSA checks.
+ BUG 6297: Owner of sticky directory cannot delete files created by others.
+ BUG 6301: Fix joining of Win2000 SP4 clients.
+ BUG 6309: Support remote unjoining of Windows 2003 or greater.
+ BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event.
+ BUG 6320: Handle registry config source in file_list.
+ BUG 6330: Fix DFS on AIX.
+ BUG 6336: Fix \'net groupmap set\' segfault.
+ BUG 6361: Make --rcfile work in smbget.
+ BUG 6365: Re-Add the \"dropbox\" functionality with -wx rights on a
directory.
+ BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
+ BUG 6382: Fix case insensitive access to DFS links.
+ BUG 6415: Filter out of range mappings in default idmap config in
idmap_tdb.
+ BUG 6416: Filter out of range mappings in default idmap config in
idmap_tdb2.
+ BUG 6417: Filter out of range mappings in default idmap config in
idmap_ldap.
+ BUG 6441: Fix the compile with --enable-dnssd.
+ BUG 6449: \'net rap user add\' crashes without -C option.
+ BUG 6465: Fix enumeration of empty aliases (ldb backend).
+ Prevent infinite include nesting.
+ Mark registry shares without path unavailable.
+ Also handle DirX return codes.
+ Fix Coverity ID 897.
+ Do not crash in ctdbd_traverse if ctdbd is not around.
+ Fix a race condition in winbind leading to a panic.
+ Some man pam_winbind improvements.
+ Zero an uninitialized array.

Tue Jun 16 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.2.12.
+ Fix SAMR and LSA checks (bug #6089, #6289)
+ Fix posix acls when setting an ACL without explicit ACE for the
owner (bug #2346).
+ Fix \"force user\" (bug #6291).
+ Fix Winbind crash (bug #6279).
+ Fix joining of Win7 into Samba domain (bug #6099).
+ BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the
owner.
+ BUG 5798: CFLAGS info lost in configure.
+ BUG 5832: Fix build on RHEL when ccache is not available.
+ BUG 5835: Add keyutils-devel to build requires.
+ BUG 5945: Fix out of memory error with Winbind idmap.
+ BUG 6089: Revert the extra SAMR and LSA checks.
+ BUG 6099: Fix joining of Win7 into Samba domain.
+ BUG 6279: Fix Winbind crash.
+ BUG 6289: Revert the extra SAMR and LSA checks.
+ BUG 6291: Fix \"force user\".
+ BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit.
+ BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
+ BUG 6386: Groupdb mapping fix.
+ BUG 6382: Fix case insensitive access to DFS links.
+ BUG 6465: Fix enumeration of empty aliases (ldb backend).
+ Prevent creation of keys containing the \'/\' character.
+ Fix bug in processing of open modes in POSIX open.
+ Protect netlogon_creds_server_step() against NULL creds.
+ Also handle DirX return codes.
+ Fix a race condition in winbind leading to a panic.
+ Fix a crash bug if we timeout in net rpc trustdom list.
+ Fix profile acls in some corner cases.

Fri Jun 12 14:00:00 2009 lmuelleAATTsuse.de
- Default with passdb backend to smbpasswd for SUSE products older than 11.2.

Fri Jun 12 14:00:00 2009 lmuelleAATTsuse.de
- Explicitly use \'tdbsam\' as passdb backend in the default smb.conf file.

Mon Jun 8 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.4.0pre2.
+ The default passdb backend has been changed to \'tdbsam\'!
+ Samba4 and Samba3 sources are included in the tarball.
+ Changed the way smbd handles untrusted domain names given during user
authentication.
+ Various fixes including printer change notificiation for Samba spoolss
print servers.
+ The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog
and spoolss) were replaced by autogenerated code based on PIDL.
+ Samba3 and Samba4 do now share a common tevent library.
+ The code has been cleaned up and the major basic interfaces are shared
with Samba4 now.
+ An asynchronous API has been added.
+ Made parameter syntax of the net command more consistent.
+ BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the
owner.
+ BUG 4271: testparm should not print includes.
+ BUG 4831: Don\'t call openlog() or closelog() from pam_smbpass.
+ BUG 5681: Do not limit the number of network interfaces.
+ BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo
access checks.
+ BUG 6099: Fix NETLOGON credential chain.
+ BUG 6136: New AFS syscall conventions.
+ BUG 6157: Fix handling of multi-value attribute \"uid\".
+ BUG 6253: Use correct value for password expiry calculation.
+ BUG 6291: Fix \'force user\'.
+ BUG 6292: Update config.guess from gnu.org.
+ BUG 6302: Give the VFS a chance to read from 0-byte files.
+ BUG 6309: Support remote unjoining of Windows 2003 or greater.
+ BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on
malloced memory.
+ BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event.
+ BUG 6320: Handle registry config source in file_list.
+ BUG 6330: Fix DFS on AIX.
+ BUG 6336: Fix segfault in \'net groupmap set\'.
+ BUG 6340: Don\'t segfault when cleartext trustdom pwd could not be
retrieved.
+ BUG 6357: Use Samba default command line arguments in \'net\'.
+ BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4
and IPv6 addresses
+ BUG 6361: Make --rcfile work in smbget.
+ BUG 6371: Unsuccessful \'net conf setparm\' leaves empty share.
+ BUG 6372: usermanager only displaying 1024 groups and aliases.
+ BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids.
+ BUG 6415: Filter out of range mappings in default idmap config
(idmap_tdb).
+ BUG 6416: Filter out of range mappings in default idmap config
(idmap_tdb2).
+ BUG 6417: Filter out of range mappings in default idmap config
(idmap_ldap).
+ Change the way smbd handles untrusted domain names given during user
authentication.
+ Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and
spoolss by autogenerated code based on PIDL.
+ Fix several printing issues and improve support for printer change
notificiations.
+ Add \'net eventlog\'.
+ Add asynchronous API.
+ Make Samba3 and Samba4 share a tevent library.
+ Add two new parameters to control how we verify kerberos tickets.
+ Add \'net rpc service\' subcommands \'create\' and \'delete\'.
+ Fix the core of the SAMR access functions.
+ Fix SAMR server for winbindd access.
+ Add dbwrap_tool - a tdb tool that is CTDB-aware.
+ Hide \"config backend\" from swat.
+ Fix linking with --disable-shared-libs.
+ Fix issue with missing entries when enumerating directories.
+ Map NULL domains to our global sam name.
+ Fix driver upload for Xerox 4110 PS printer driver.
+ Add \"net dom renamecomputer\" to rename machines in a domain.
+ Inspect the correct computername string before enabling/disabling the
change button in netdomjoin-gui.
+ Fix join prompt dialog test in netdomjoin-gui.
+ Only gray out labels when not root and not connecting to remote
machines (netdomjoin-gui).
+ Allow to switch between workgroups/domains with the same name
(netdomjoin-gui).
+ Add NetShutdownInit and NetShutdownAbort.
+ Fix samr access checks.
+ Add a security model to LSA.
+ Also handle DirX return codes.
+ Do not crash in ctdbd_traverse if ctdbd is not around.
+ Fix Coverity ID 897.
+ Fix a race condition in vfs_aio_fork with gpfs share modes.
+ Fix bug disclosed by lock8 torture test.
+ Fix a race condition in winbind leading to a panic.
+ Detect tight loop in tdb_find().
+ Fix chained sesssetupAndX/tconn messages.
+ Fix strict locking with chained reads.
+ Fix two bugs in sendfile.
+ Fix memory leak.
+ Fix file descriptor leak.
+ Fallback to the legacy sid_to_(uid|gid) instead of returning NULL.
+ Always allocate memory in dptr_ReadDirName.
+ Fix \'net\' crash during domain join.
+ Zero an uninitialized array.
+ Allow child processes to exit gracefully if we are out of fds.

Thu Jun 4 14:00:00 2009 sjayaramanAATTsuse.de
- Enable cifs.upcall on versions newer than SUSE 10.0.

Thu Jun 4 14:00:00 2009 sjayaramanAATTsuse.de
- Add BuildRequires to keyutils-devel.

Thu Jun 4 14:00:00 2009 sjayaramanAATTsuse.de
- Remove redundant Requires to keyutils-libs for cifs-mount.

Wed May 27 14:00:00 2009 jmcdonoughAATTsuse.de
- Detect tight loop in tdb_find(); (bnc#450974).

Mon May 18 14:00:00 2009 jmcdonoughAATTsuse.de
- Fix lp printing with kerberos; (bnc#476913).

Sat May 9 14:00:00 2009 lmuelleAATTsuse.de
- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all
other build targets.

Thu Apr 30 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.4.0pre1.
+ Samba4 and Samba3 sources are included in the tarball
+ Changed the way smbd handles untrusted domain names given during user
authentication.
+ Various fixes including printer change notificiation for Samba spoolss
print servers.
+ The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog
and spoolss) were replaced by autogenerated code based on PIDL.
+ Samba3 and Samba4 do now share a common tevent library.
+ The code has been cleaned up and the major basic interfaces are shared
with Samba4 now.
+ An asynchronous API has been added.
+ Change the way smbd handles untrusted domain names given during user
authentication.
+ Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and
spoolss by autogenerated code based on PIDL.
+ Fix several printing issues and improve support for printer change
notificiations.
+ Add \'net eventlog\'.
+ Add asynchronous API.
+ Make Samba3 and Samba4 share a tevent library.
+ Add two new parameters to control how we verify kerberos tickets.
+ Add \'net rpc service\' subcommands \'create\' and \'delete\'.
+ Make merged build possible.
+ Move common libraries to the shared lib/ directory.

Thu Apr 30 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.3.4.
+ Fix domain logins for WinXP clients pre SP3 (bug #6263).
+ Fix samr_OpenDomain access checks (bug #6089).
+ Fix usrmgr.exe creating a user (bug #6243).
+ BUG 6089: Fix samr_OpenDomain access checks.
+ BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with
\"msdfs root\" set to \"yes\".
+ BUG 6279: Fix Winbind crash.
+ BUG 5329: Add \"net rpc service delete/create\".
+ BUG 6238: Make sure wbcLogoffUserParams are properly initialized before
freed.
+ BUG 6263: Fix domain logins for WinXP clients pre SP3.
+ BUG 6286: Call init function for builtin idmap modules before probing for
them as shared modules.
+ BUG 6243: Fix usrmgr.exe creating a user.
+ net conf: Save share name as given, not as lower case only.
+ Prevent creation of registry keys containing the \'/\' character.
+ Allow pdbedit to change a user rid/sid.
+ When doing a cli_ulogoff don\'t invalidate the cnum, invalidate the vuid.
+ Don\'t access a freed structure when logging off and re-using a vuid.
+ Try to to fix password_expired flag handling.
+ Make sure to grey out change fields in the netdomjoin-gui when not
running as root.
+ Don\'t look up local user for remote changes, even when root.
+ Use procid_str in debug messages for better cluster-debuggability.
+ Use cluster-aware procid_is_me instead of comparing pids.
+ Fix smbd crash for close_on_completion.
+ Fix a memleak in an unlikely error path in change_notify_create().
+ Do not use the file system GET_REAL_FILENAME for mangled names.
+ Fix a crash bug if we timeout in net rpc trustdom list.
+ Add \'--request-timeout\' option to net.
+ In net_conf_import, start a transaction when importing a single share.
+ Fix writing of roaming profiles with \"profile acls\" set to \"yes\".

Fri Apr 17 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.2.11.
+ Fix domain logins for WinXP clients pre SP3 (bug #6263).
+ Fix samr_OpenDomain access checks (bug #6089).
+ Fix smbd crash for close_on_completion.
+ BUG 6089: Fix samr_OpenDomain access checks.
+ BUG 6205: Correct sample smb.conf share configuration.
+ BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with
\"msdfs root\" set to \"yes\".
+ BUG 6263: Fix domain logins for WinXP clients pre SP3.
+ Allow pdbedit to change a user rid/sid.
+ When doing a cli_ulogoff don\'t invalidate the cnum, invalidate the vuid.
+ Fix resume command typo for \"printing = vlp\".
+ Fix smbd crash for close_on_completion.
+ Fix a memleak in an unlikely error path in change_notify_create().
+ Don\'t look up local user for remote changes, even when root.

Fri Apr 17 14:00:00 2009 jmcdonoughAATTsuse.de
- Don\'t lookup local user for remote password changes; (bnc#493507).

Thu Apr 2 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.3.3.
+ Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb
correctly (bug #6195).
+ Fix serving of files with colons to CIFS/VFS client (bug #6196).
+ Fix \"map readonly\" (bug #6186).
+ BUG 6195: Don\'t let smbd child processes panic.
+ Add backend_requires_messaging() method to libsmbconf.
+ Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf.
+ Fall back to file backend when no valid backend was found.
+ Fix a memleak in dbwrap_rbt.
+ Provide transaction_start|commit|cancel fns for the registry tdb.
+ Speed up \"net conf drop\".
+ Speed up \"net conf import\".
+ Add transactions to the libsmbconf API.
+ Reduce memory usage of \"net conf import\".
+ Registry cleanup.
+ Fix handling of SAMBA_VERSION_VENDOR_PATCH.
+ Fix build of pam_winbind.so with static linking.
+ Tidy up some convert_string_internal error cases.
+ BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to
run elections.
+ Allow DFS client paths to work when POSIX pathnames have been selected.
+ Try and fix the build farm RAW-STREAMS errors.
+ Ensure files starting with multiple dots are hidden.
+ BUG 6102: NetQueryDisplayInformation could return wrong information.
+ BUG 6193: Avoid messing with sync_context in libnet_samsync_delta().
+ Fix notify_printer_status_byname.
+ Fix Coverity IDs 722, 762, 774, 775, 776.
+ Fix build on old Heimdal based systems.
+ Fix compile warning.
+ Use parentheses in if condition to make negation clear.
+ Add dirsort module.
+ BUG 6147: Fix detection of the GNU ld version.
+ BUG 6097: Fix smbd segfault.
+ BUG 6130: Don\'t crash in winbindd_rpc lookup_groupmem() on unmapped
members.
+ BUG 6139: Add missing whitespace in mount.cifs error message.
+ Fix a malloc/talloc mismatch when cli_initialise() fails.
+ Fix a valgrind error.
+ Speed up \"net conf list\".
+ Add sorted subkey cache.
+ Use StrCaseCmp in the dirsort module.
+ Document the dirsort module.
+ Disable dns_sd by default.
+ Add avahi detection to configure.
+ Add event avahi binding.
+ Use avahi to register _smb._tcp in smbd.
+ Fix two memleaks in the encryption code.
+ Fix a scary \"fill_share_mode_lock failed\" message.
+ BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn\'t set
errno.
+ Don\'t use reserved words in smbconftort.
+ Fix smb signing for fragmented trans/trans2/nttrans requests.
+ Parse_packet can return NULL which is then dereferenced in
match_mailslot_name.
+ Format the header check for netinet/ip.h more nicely.
+ Missing break in conversion function prevents tdb password database
update.

Wed Apr 1 14:00:00 2009 jmcdonoughAATTsuse.de
- Update to 3.2.10.
+ BUG #6195: Don\'t let smbd child processes panic.

Wed Apr 1 14:00:00 2009 jmcdonoughAATTsuse.de
- BUG 6195: Fix crash on passdb conversion.

Tue Mar 31 14:00:00 2009 jmcdonoughAATTsuse.de
- Update to 3.2.9.
+ BUG 5920: The length of the memcpy was calculated wrong.
+ BUG 6097: Fix smbd segfault.
+ BUG 6098: Fix ads_find_dc() with \"security = domain\" when the DNS
server is invalid.
+ BUG 6099: Samba returns incurrate capabilities list.
+ BUG 6100: Implement _netr_LogonGetCapabilities() with
NT_STATUS_NOT_IMPLEMENTED.
+ BUG 6102: NetQueryDisplayInformation could return wrong information.
+ BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped
members.
+ BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem.
+ BUG 6161: smbclient corrupts source path in tar mode.
+ BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif().
+ BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client.
+ BUG 6224: nmbd waits 5 minutes before checking to run elections.
+ BUG 6228: Fix SMBC_open_ctx failure when path failure doesn\'t set errno.
+ Numerous Coverity fixes
+ Fix double free caused by incorrect talloc_steal usage.
+ Backport delete semantics of alternate data streams on a file truncate.
+ Allow set attributes on a stream fnum to redirect to the base filename.
+ Fix use of streams modules with CIFSFS client.
+ Fix more POSIX path lstat calls.
+ Allow DFS client paths to work with POSIX pathnames.
+ Ensure files starting with multiple dots are hidden.
+ Fix guest auth when Winbind is running.
+ Fix memleak in get_remote_printer_publishing_data().
+ cifs mount fix for handling -V parameter.
+ Fix guest mounts.
+ Clean-up entries in /etc/mtab after unmount.
+ Add fakemount (-f) and nomtab (-n) flags to mount.cifs.
+ Enable total anonymization in vfs_smb_traffic_analyzer.
+ Don\'t try and delete a default ACL from a file.
+ Fix remotely adding a share via MMC.
+ Fix resume handle for _samr_EnumDomainGroups.
+ Fix a buffer handling bug when adding lots of registry keys.
+ Fix a O(n^2) algorithm in regdb_fetch_keys().
+ Fix a valgrind error / segfault in dns_register_smbd().
+ Don\'t log NDR_PRINT_DEBUG at level 0, this always ends up in syslog.
+ Fix a malloc/talloc mismatch when cli_initialise() fails.
+ Fix two memleaks in the encryption code.
+ Fix \"fill_share_mode_lock failed\" message.
+ Add S-1-22-X-Y sids to the local token.
+ Fix smb signing for fragmented trans/trans2/nttrans requests.
+ Don\'t miss an absolute pathname as a kerberos keytab path.
+ Have nmbd check all available interfaces for WINS before failing.
+ Initialize the id_map status in idmap_ldap to avoid surprise.

Sun Mar 15 13:00:00 2009 lmuelleAATTsuse.de
- Obsolete change from 2008-03-05 by removing the needless examples cleanup.

Sat Mar 14 13:00:00 2009 lmuelleAATTsuse.de
- Update to 3.3.2.
+ Fix \"force group\" (bug #6155).
+ Fix saving of files on Samba share using MS Office 2007 (bug #6160).
+ Fix guest authentication in setups with \"security = share\" and \"guest ok =
yes\" when Winbind is running.
+ Fix corruptions of source path in tar mode of smbclient (bug #6161).
+ BUG 6082: Fix renaming and deleting of directories using Windows clients.
+ BUG 6154: Make ZFS honor admin users.
+ BUG 6155: Fix \"force group\".
+ BUG 6160: Fix saving of files on Samba share using MS Office 2007.
+ BUG 6161: Fix corruptions of source path in tar mode of smbclient.
+ Fix some NetBSD warnings.
+ Fix bug in processing of open modes in POSIX open.
+ Fix use of streams modules with CIFSFS client.
+ Ensure ACL modules work with POSIX paths.
+ Use fsp->posix_open in preference if we have it.
+ Fix more POSIX path lstat calls.
+ Fix a bug in message handling for the change notify code.
+ Fix guest authentication in setups with \"security = share\" and \"guest ok =
yes\" when Winbind is running.
+ BUG 4640: Fix guest mounts in mount.cifs.
+ Fix displaying the version string properly when no other parameters passed
in in mount.cifs.
+ Prefer gssapi header files from subdirectory.
+ BUG 6176: winbindd -n should disable the winbind idmap cache.
+ Add a vfs_preopen module to hide fs latencies.
+ Don\'t log NDR_PRINT_DEBUG at level 0, this always ends up in syslog.
+ Fix a valgrind error / segfault in dns_register_smbd().
+ Fix build on SLES8.
+ Decremented by 1 for ntcancel requests.
+ Fix creation of core files.
+ Fix first mapping of uids/gids in Winbind.
+ Initialize the id_map status in idmap_ldap to avoid surprise.
+ Fix initialization of idmap status.

Tue Mar 10 13:00:00 2009 lmuelleAATTsuse.de
- Only call \'%find_lang pam_winbind\' in the samba spec file, not samba-doc.

Thu Mar 5 13:00:00 2009 roAATTsuse.de
- Ignore return value from subshell to fix build.

Wed Feb 25 13:00:00 2009 boyangAATTsuse.de
- Make libsmbclient work with DFS, backported from 3.3; (bnc#475995).

Tue Feb 24 13:00:00 2009 lmuelleAATTsuse.de
- Update to 3.3.1.
+ Fix net ads join when \"ldap ssl = start tls\" (bug #6073).
+ Fix renaming/deleting of files using Windows clients (bug #6082).
+ Fix renaming/deleting a \"not matching/resolving\" symlink (bug #6090).
+ Fix remotely adding a share via the Windows MMC.
+ BUG 6082: Fix renaming/deleting of files using Windows clients.
+ BUG 6069: Fix build with too many arguments.
+ BUG 6090: Fix renaming/deleting a \"not matching/resolving\" symlink.
+ BUG 6099: Try to fix domain join of Win7 Beta.
+ BUG 6117: Fix core dump of pdbedit -a.
+ BUG 6133: Fix deletion of non-ACL files on Solaris/ZFS/NFSv4 ACL
filesystem.
+ Fix Coverity IDs 115, 116, 117, 602.
+ Fix warning (bad handler prototype).
+ Unify the detection of the timespec code in configure.in, and the
application of it in time.c.
+ Correctly use chroot().
+ Parameterize in local.h the MAX_RPC_DATA_SIZE, and ensure that \"offered\"
read from the rpc packet in spoolss is under that size.
+ Backport the semantics of when to delete alternate data streams on a file
truncate.
+ Fix printf warnings.
+ BUG 6073: Prevent ads_connect() from using SSL unless explicitly
requested.
+ Fix \'getent passwd\' to allocate new uids.
+ Fix \'getent group\' to allocate new gids.
+ Remove check for sharename being a username in \'net conf addshare\'.
+ Fix Coverity ID 848.
+ Remove unused ENUM_HND from \'net\'.
+ Fix getform command asprintf return code in rpcclient.
+ Fix memleak in get_remote_printer_publishing_data().
+ Remove duplicate prototypes for generated rpc server functions.
+ Enable total anonymization in vfs_smb_traffic_analyzer.
+ Fix build with external dns_sd libraries.
+ Fix configure check \"sub-second timestamps without struct timespec\".
+ Use correct BSD evironment variable.
+ Don\'t try and delete a default ACL from a file.
+ BUG 5798: CFLAGS info lost in configure.
+ Fix Coverity IDs 740, 742, 744, 745, 876, 879, 880.
+ Fix remotely adding a share via the Windows MMC.
+ Avoid valgrind errors.
+ Fix \'net rpc join\' for users with the SeMachineAccountPrivilege.
+ Fix resume handle for _samr_EnumDomainGroups.
+ Fix a buffer handling bug when adding lots of registry keys.
+ Fix a O(n^2) algorithm in regdb_fetch_keys().
+ Initialize rc to 0 in main in mount.cifs.
+ BUG 6069: Add a fstatvfs function for libsmbclient.
+ Eliminate compiler warnings.
+ Don\'t miss an absolute pathname as a kerberos keytab path.
+ BUG 6100: Implement _netr_LogonGetCapabilities() with
NT_STATUS_NOT_IMPLEMENTED.
+ Make Samba work with older ctdb versions.
+ Add S-1-22-X-Y sids to the local token.
+ Conditional install of the cifs.upcall man page.
+ Adjust regex to match variable names including underscores.
+ BUG 4370: Clean-up entries in /etc/mtab after unmount.
+ Add fakemount (-f) and nomtab (-n) flags to mount.cifs.
+ Fix a crash during name resolution.
+ Fix \"assignment discards qualifiers from pointer target type\" warnings.
+ Fix SMB_VFS_RECVFILE/SENDFILE macros.
+ Change \"ldap ssl:ads\" parameter to \"ldap ssl ads\".
+ Add manpages for vfs_acl_xattr and vfs_acl_tdb.
+ Fix double free caused by incorrect talloc_steal usage.
+ Build ldbrename.
+ Make nmbd check all available interfaces for WINS before failing.
+ Fix compilation of vfs_default on systems that do not support utimes().
+ BUG 5920: Fix the calculation of the memcpy length.
+ BUG 6098: Fix ads_find_dc() in setups with \"security = domain\".
+ Make libsmbclient work with DFS.

Mon Feb 23 13:00:00 2009 hhetterAATTsuse.de
- Define init_samba_module in all samba-vscan modules; (bnc#469218).

Sat Feb 21 13:00:00 2009 lmuelleAATTsuse.de
- Add GPLv3 header to all init scripts; (bnc#459766).

Tue Feb 10 13:00:00 2009 boyangAATTsuse.de
- Backport of the clean event context after fork and krb5 refresh chain
fixes; (bnc#415026).

Mon Feb 9 13:00:00 2009 jmcdonoughAATTsuse.de
- Revert accidental partial strict allocate upstream commit

Sun Feb 8 13:00:00 2009 jmcdonoughAATTsuse.de
- Update to 3.2.8.
+ Fix and streamline join and DC detection
+ BUG 4308: Excel save operation corrupts file ACLs.
+ BUG 5933: Fix incrementing/decrementing num_validated_vuids.
+ BUG 5953: Fix smbclient crashes.
+ BUG 5953: Make cli_send_smb_direct_writeX use writev.
+ BUG 5965: Fix creation of the first share using SWAT.
+ BUG 5969: Optimize smbclient put command.
+ BUG 5979: Fix level 2 oplocks.
+ BUG 5980: Fix race condition when granting level2 oplocks
+ BUG 5986: Fix renaming of streams.
+ BUG 5990: Strict allocate should be checked before ftruncate.
+ BUG 6000: Avoid bashism in perfcount.init.
+ BUG 6009: Setting \"min receivefile size = 1\" breaks writes.
+ BUG 6014: mget shouldn\'t segfault without arguments.
+ BUG 6016: Alternate Data Streams / Extended Attributes seem to conflict.
+ BUG 6017: Fix magic scripts.
+ BUG 6021: smbclient du command does not recuse properly.
+ BUG 6030: Add missing