Changelog for libwbclient0-3.6.3-130.2.i586.rpm :

* Wed Oct 30 2013 lmuelleAATTsuse.com- ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; (bso#10229); (bnc#848101).
* Wed Oct 23 2013 ddissAATTsuse.com- Fix memleak in reload_printers_full(); (bso#9993).
* Wed Oct 16 2013 lmuelleAATTsuse.com- Valid utf8 filenames cause \"invalid conversion error\" messages; (bso#10139).- s3: smb2 breaks \"smb encryption = mandatory\"; (bso#10167).- Missing talloc_free can leak stackframe in error path; (bso#10187).- Offline logon cache not updating for cross child domain group membership; (bso#10194).- The preceding bugs are tracked by (bnc#849226) too.
* Tue Oct 15 2013 lmuelleAATTsuse.com- Make Samba work on site with Read Only Domain Controller; (bso#5917).- Give machine password changes 10 minutes of time; (bso#8955).- NetrServerPasswordSet2 timeout is too short; (bso#8955).- Fix fallback to ncacn_np in cm_connect_lsat(); (bso#9615); (bso#9899).- s3-winbind: Do not delete an existing valid credential cache; (bso#9994).- \'net ads join\': Fix segmentation fault in create_local_private_krb5_conf_for_domain; (bso#10073).- Fix variable list in man vfs_crossrename; (bso#10076).- MacOSX 10.9 will not follow path-based DFS referrals handed out by Samba; (bso#10097).- Honour output buffer length set by the client for SMB2 GetInfo requests; (bso#10106).- Handle Dropbox (write-only-directory) case correctly in pathname lookup; (bso#10114).- Fix \'smbstatus\' as non-root user; (bso#10127).- The preceding bugs are tracked by (bnc#849226) too.
* Tue Oct 15 2013 lmuelleAATTsuse.com- Windows 8 Roaming profiles fail; (bso#9678).- Linux kernel oplock breaks can miss signals; (bso#10064).- The preceding bugs are tracked by (bnc#849226) too.
* Sun Sep 22 2013 ddissAATTsuse.com- Store and return the correct spoolss jobid in notifications; (bnc#838472).
* Mon Jul 29 2013 lmuelleAATTsuse.com- The pam_winbind require_membership_of option allows for a list of SID, but currently only provides buffer space for ~20; (bnc#806501).
* Thu Jul 25 2013 lmuelleAATTsuse.com- Samba 3.0.x to 4.0.7 are affected by a denial of service attack on authenticated or guest connections; CVE-2013-4124; (bnc#829969).
* Wed Jul 24 2013 lmuelleAATTsuse.com- PIDL: fix parsing linemarkers in preprocessor output; (bso#9636).- build:autoconf: fix output of syslog-facility check; (bso#9983).- libreplace: add a missing \"eval\" to the AC_VERIFY_C_PROTOTYPE macro.
* Tue Jun 25 2013 lmuelleAATTsuse.com- Don\'t bzip2 the main tar ball, use the upstream gziped one instead.
* Fri Jun 21 2013 lmuelleAATTsuse.com- Fix crash bug during Win8 sync; (bso#9822).- Check for system libtevent and link dbwrap_tool and dbwrap_torture against it; (bso#9881).- errno gets overwritten in call to check_parent_exists(); (bso#9927).- Fix a bug of drvupgrade of smbcontrol; (bso#9941).
* Tue Jun 18 2013 ddissAATTsuse.com- Document idmap_ad rfc2307 attribute requirements; (bso#9880); (bnc#820531).
* Wed Jun 05 2013 ddissAATTsuse.com- Fix libreplace license ambiguity; (bso#8997); (bnc#765270).
* Tue May 28 2013 lmuelleAATTsuse.com- s3-docs: Remove \"experimental\" label on \"max protocol=SMB2\" parameter; (bso#9688).- Remove the compound_related_in_progress state from the smb2 global state; (bso#9722).- Makefile: Don\'t know how to make LIBNDR_PREG_OBJ; (bso#9868).
* Thu May 23 2013 ddissAATTsuse.com- Fix is_printer_published GUID retrieval; (bso#9900); (bnc#798856).
* Wed May 08 2013 lmuelleAATTsuse.com- Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382).- Fix \"guest ok\", \"force user\" and \"force group\" for guest users; (bso#9746).- Fix \'map untrusted to domain\' with NTLMv2; (bso#9817); (bnc#817919).- Fix crash bug in Winbind; (bso#9854).
* Wed May 08 2013 ddissAATTsuse.com- Fix panic in nt_printer_publish_ads; (bso#9830).
* Fri Apr 26 2013 lmuelleAATTsuse.com- Remove disabled and anyhow obsoleted net-report and net_rpc_migrate patches.
* Fri Apr 26 2013 lmuelleAATTsuse.com- wbinfo: fix segfault in wbinfo_pam_logon; (bso#9807).- docs: Fix missing entry in specfile; (bso#9809).- Old DOS SMB CTEMP request uses a non-VFS function to access the filesystem; (bso#9811).
* Thu Apr 18 2013 lmuelleAATTsuse.com- Certain xattrs cause Windows error 0x800700FF; (bso#9130).- Fix the username map optimization; (bso#9139); (bnc#815994).- Fix adding case sensitive spn; (bso#9699).- Add a tool to migrate latin1 printing tdb\'s to registry; (bso#9723).- is_encrypted_packet() function incorrectly used inside server; (bso#9724).- wkssvc: Fix NULL pointer dereference; (bso#9727).- smbcontrol close-share is not working; (bso#9733).- Fix winbind seperator in upn to username conversion; (bso#9735).- Change to smbd/dir.c code gives significant performance increases on large directory listings; (bso#9736).- When creating a directory Samba allows inherited bit to slip through; (bso#9747).- Remove unneeded fstat system call from hot read path; (bso#9748).- Cache name_to_sid/sid_to_name correctly; (bso#9766).- vfs_fake_perms: Fix segfault for \"artificial\" conn_structs; (bso#9775).
* Mon Apr 15 2013 ddissAATTsuse.com- Don\'t modify the pidfile name when a custom config file path is used; (bnc#812929).
* Wed Apr 03 2013 lmuelleAATTsuse.com- Fix GNU ld version detection with old gcc releases; (bso#7825).- \'map untrusted to domain\' treats WORKSTATION as bogus domain; (bso#9039).- Add extra attributes for AD printer publishing; (bso#9378); (bnc#798856).- Downgrade v4 printer driver requests to v3; (bso#9474).- Samba returns unexpected error on SMB posix open; (bso#9519).- Add support for posix_openpt; (bso#9541).- Add dbwrap_tool.1 manual page; (bso#9568).- Unlink after open causes smbd to panic; (bso#9571).- Fix a possible null pointer dereference in spoolss; (bso#9574).- Samba 3.6.x not correctly signing any but the last response in a compound request/response; (bso#9585).- \"smbd[pid]: disk_free: sys_popen() failed\" message logged in /var/log/messages many times; (bso#9586).- Archive flag is always set on directories; (bso#9587).- ACLs are not inherited to directories for DFS shares; (bso#9588).- wbcAuthenticateEx gives unix times; (bso#9625).- Renaming directories as guest user in security share mode doesn\'t work; (bso#9637).- Make SMB2_GETINFO multi-volume aware; (bso#9646).- Fix initial large PAC sess setup response; (bso#9658).- Fix two resource leaks in winbindd; (bso#9684).- Fix a possible buffer overrun in pdb_smbpasswd; (bso#9686).- Fix vfs_catia module; (bso#9701); (bnc#824833).
* Thu Mar 14 2013 ddissAATTsuse.com- Fix periodic printcap cache reloads; (bso#9650); (bnc#807334).
* Mon Feb 25 2013 lmuelleAATTsuse.com- Shift the smbfs init script nfs dependency from Required to Should.
* Mon Feb 11 2013 ddissAATTsuse.com- Fix SMB1 Session Setup AndX handling with a large krb PAC; (bso#9658); (bnc#802031).
* Fri Feb 08 2013 lmuelleAATTsuse.com- Point LD_LIBRARY_PATH to the just-built libraries while calling testparm to generate the default share snippets on pre-12.2 systems.
* Thu Feb 07 2013 ddissAATTsuse.com- Fix smbclient recursive mget EPERM handling; (bso#9633); (bnc#786350).
* Wed Feb 06 2013 sjayaramanAATTsuse.de- Do not restart the smbfs service on pre-11.3 systems during dhcp lease renewal when the IP address remains the same; (bnc#800782).
* Thu Jan 31 2013 lmuelleAATTsuse.com- Drop separate build-source-timestamp file as it led to a second, incorrect Source Timestamp line.
* Tue Jan 29 2013 lmuelleAATTsuse.com- The Samba Web Administration Tool (SWAT) in Samba versions 3.0.x to 4.0.1 are affected by a cross-site request forgery; CVE-2013-0214; (bnc#799641).
* Tue Jan 29 2013 lmuelleAATTsuse.com- The Samba Web Administration Tool (SWAT) in Samba versions 3.0.x to 4.0.1 could possibly be used in clickjacking attacks; CVE-2013-0213; (bnc#800982).
* Wed Jan 23 2013 lmuelleAATTsuse.com- defer_open is triggered multiple times on the same request; (bso#9196).- Fix SEGV when using second vfs module; (bso#9471).- Correctly detect O_DIRECT; (bso#9548).- Mask off signals the correct way from the signal handler; (bso#9550).- ntlm_auth.1: Fix format and make examples visible; (bso#9569).
* Fri Jan 18 2013 lmuelleAATTsuse.com- Remove dangling references to Heimdal from the spec file.
* Thu Jan 17 2013 ddissAATTsuse.com- Fix AD printer publishing; (bso#9378); (bnc#798856).
* Sun Dec 23 2012 lmuelleAATTsuse.com- Use the version macro while definition of the branch macro.
* Sat Dec 08 2012 lmuelleAATTsuse.com- Fix MD5 detection in the autoconf build; (bso#9037); (bso#9086); (bso#9094); (bso#9418).- Use work around for \'winbind use default domain\' only if it is set; (bso#9367).- Allow smb2.acls torture test to pass against smbd with a POSIX ACLs backend; (bso#9374).- large read requests cause server to issue malformed reply; (bso#9422).- s3-rpc_client: lookup nametype 0x20 in rpc_pipe_open_tcp_port(); (bso#9426).- Fix ncacn_ip_tcp reconnection code for lsa lookups; (bso#9439).- Allow to force DNS updates using net; (bso#9451).- Respond correctly to FILE_STREAM_INFO requests; (bso#9460).
* Tue Dec 04 2012 lmuelleAATTsuse.com- On uninstall remove winbind from the pam configuration, invalidate the nscd passwd and group cache and only recommend the install of nscd; (bnc#792340).
* Mon Dec 03 2012 lmuelleAATTsuse.com- BuildRequire libnscd-devel once.
* Sun Dec 02 2012 lmuelleAATTsuse.com- Remove obsoleted references to pre-9.4 SUSE systems; (bnc#792294).- Add SUSE version depending pkg-config requires macro; (bnc#792294).
* Sun Dec 02 2012 lmuelleAATTsuse.com- Define library names and use it instead of libldb1, libnetapi0, libsmbclient0, libsmbsharemodes0, libtalloc2, libtdb1, libtevent0, and libwbclient0; (bnc#792294).- Provide and obsolete libsmbsharemodes for post-10.3 SUSE systems.
* Fri Nov 30 2012 lmuelleAATTsuse.com- Don\'t clutter the spec file diff view; (bnc#783384).
* Wed Nov 28 2012 jmcdonoughAATTsuse.com- Fix fd leak causing 100% CPU in winbind on certain dc connection failures; (bso#9436); (bnc#786677).
* Tue Nov 27 2012 ddissAATTsuse.com- Fix spoolss segfault when default devmode is disabled; (bso#9433); (bnc#791183).
* Fri Nov 16 2012 lmuelleAATTsuse.com- ACL masks incorrectly applied when setting ACLs; (bso#9236).- s3-kerberos: also try with AES keys, when decrypting tickets; (bso#9272).- lib/replace: replace all
*printf function if we replace snprintf; (bso#9390).- lib/addns: don\'t depend on the order in resp->answers[]; (bso#9402).
* Tue Nov 13 2012 lmuelleAATTsuse.com- s4:torture/smb2: improve the smb2.create.blob tes; (bso#9209).- lib/krb5_wrap: request enc_types in the correct order; (bso#9272).- Fix net ads join message for the dns domain; (bso#9326).- docs-xml: fix use of tag; (bso#9345).- s3-aio_pthread: Optimize aio_pthread_handle_completion; (bso#9359).- s3:winbind: Failover if netlogon pipe is not available; (bso#9386).
* Mon Oct 29 2012 lmuelleAATTsuse.com- Ensure adding the winbind group never can fail.
* Mon Oct 29 2012 lmuelleAATTsuse.com- Create ntadmin group only if it doesn\'t yet exist.
* Mon Oct 29 2012 lmuelleAATTsuse.com- quota: Don\'t force the block size to 512; (bso#3272).- Fix poll replacement to become a msleep replacement; (bso#8107).- Fix wrong test == syntax in configure; (bso#8146).- Fix --with(out)-sendfile-support option handling in autoconf; (bso#8344).- Fix builtin forms order to match Windows again; (bso#8632).- Fix RAW printing for normal users; (bso#8769); (bnc#790741).- Initialise ticket to ensure we do not invalid memory; (bso#8788).- Fix \'net rpc share allowedusers\' to work with 2008r2; (bso#8966).- Fix crash on null pam change pw response; (bso#9013).- Connection to outbound trusted domain goes offline; (bso#9016).- Increase debug level for info that the db is empty; (bso#9112).- \'smbclient\' can\'t connect to a Windows 7 server using NTLMv2; (bso#9117).- Winbind can\'t fetch user or group info from AD via LDAP; (bso#9147).- Open printers with the right access mask; (bso#9154).- Fix makerpms.sh on RHEL; (bso#9165).- Remove non-existent option \'-Y\' from winbindd manpage; (bso#9171).- Add quota support for gfs2; (bso#9172).- Make SMB2 compound request create/delete_on_close/close work as Windows; (bso#9173).- Empty SPNEGO packet can cause smbd to crash; (bso#9174).- pam_winbind: Match more return codes when wbcGetPwnam has failed; (bso#9177).- Fix crash bug in idmap_hash; (bso#9188); (bnc#788159).- SMB2 Create doesn\'t return correct MAX ACCESS access mask in blob; (bso#9189).- Fix service control for non-internal services; (bso#9192).- Don\'t take \'state->te\' as indication for \"was_deferred\"; (bso#9196).- Parse of invalid SMB2 create blob can cause smbd crash; (bso#9209).- Bad ASN.1 NegTokenInit packet can cause invalid free; (bso#9213).- Fix segfault in smbd if user specified ports out for range; (bso#9218).- Signing cannot be disabled for SMB2 by design, so fix the documentation instead; (bso#9222).- Fix NT_STATUS_IO_TIMEOUT during slow import of printers into registry; (bso#9231).- When setting a non-default ACL, don\'t forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236).- lib-addns: ensure that allocated buffer are pre set to 0; (bso#9259).- Make tdb robust against shrinking tdbs and improper CLEAR_IF_FIRST restart; (bso#9268).- Add support for reloading systemd services; (bso#9280).
* Fri Oct 26 2012 lmuelleAATTsuse.com- Warn via the smbd log if AppArmor and \"wide links\" are in use; (bnc#783719).
* Mon Sep 17 2012 lmuelleAATTsuse.com- Backport FSCTL codes and fix segfault in smbstatus from master; (bso#9058).- Fix bad call to memcpy source3/registry/regfio.c; (bso#9065).- \"Domain Users\" incorrectly added as additional group on domain members; (bso#9066).- Use correct RID for \"Domain Guests\" primary group; (bso#9067).- Fix crash bug in smbd caused by a blocking lock followed by close; (bso#9084).- Fix smbclient/tarmode panic when connecting to Windows 2000 clients; (bso#9088).- Fix refreshing of Kerberos tickets in Winbind; (bso#9098).- Fix identification of idle clients in Winbind to avoid crashes and NDR parsing errors; (bso#9104).- Fix compilation with newer MIT Kerberos which hides internal symbols; (bso#9111).- Fix flooding the logs with records we don\'t find in pcap; (bso#9112).- Initialize the print backend after we setup winreg; (bso#9122).- Fix lprng job tracking errors; (bso#9123).- Fix setting of \"inherited\" bit on inherited ACE\'s; (bso#9124).- Fix Winbind panic if we couldn\'t find the domain; (bso#9135).- Make \'smbclient allinfo\' show the snapshot list; (bso#9137).- Fix nfs quota support with Linux nfs4 mounts; (bso#9144).- Valid open requests can cause smbd assert due to incorrect oplock handling on delete requests; (bso#9150).
* Thu Sep 13 2012 shargaganAATTnovell.com- NMB registration for a duplicate workstation fails with registration refuse; (bso#9085); (bnc#770056).
* Mon Aug 06 2012 lmuelleAATTsuse.com- Correct documentation of \"case sensitive\"; (bso#8552).- Printing fails in function cups_job_submit; (bso#8719).- Fix kernel oplocks when uid(file) != uid(process); (bso#8974).- Send correct responses to NT Transact Secondary when no data and no params for the Trans2 calls are set; (bso#8989).- Fix build without ads support; (bso#8996).- Don\'t turn negative cache entries into valid idmappings; (bso#9002).- Fix posix acl on gpfs; (bso#9003).- Make vfs_gpfs less verbose in get/set_xattr functions; (bso#9022).- Fix migrating printers while upgrading from 3.5.x; (bso#9026).- Fix typo in set_re_uid() call when USE_SETRESUID selected in configure; (bso#9034).- Using asynchronous IO with SMB2 can return NT_STATUS_FILE_CLOSED in error instead ofNT_STATUS_FILE_LOCK_CONFLICT; (bso#9040).- Fix resolving our own \"Domain Local\" groups; (bso#9052); (bnc#779269).- Fix build against CUPS 1.6; (bso#9055).- Fix bugs in SMB2 credit handling code; (bso#9057).- rpcclient: Fix bad call to data_blob_const; (bso#9062).
* Mon Jul 16 2012 lmuelleAATTsuse.com- BuildRequire gcc, make, and patch; (bnc#771516).
* Wed Jul 11 2012 lmuelleAATTsuse.com- ndr: fix push/pull DATA_BLOB with NDR_NOALIGN; (bso#9026); (bnc#770262).
* Wed Jul 11 2012 lmuelleAATTsuse.com- Fix shell syntax in dhcpcd hook script; (bnc#769957).
* Thu Jun 21 2012 lmuelleAATTsuse.com- resolve_ads() code can return zero addresses and miss valid DC IP addresses; (bso#8910).- Can\'t join XP Pro workstations to 3.6.1 DC; (bso#8373); (bnc#787983).- winbind can hang as nbt_getdc() has no timeout; (bso#8953).- Fix crash bug in dns_create_probe when dns_create_update fails; (bso#8627)- s3-pid: Catch with pid filename\'s change when config file is not smb.conf; (bso#8714).- Possible memory leaks in the main Samba process; (bso#8970).- s3: Fix uninitialized memory read in talloc_free(); (bnc#764577).- Treat exit_server_cleanly() as a \"clean\" shutdown; (bso#8971).- Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute(); (bso#8988).- Winzip occasionally can not read files out of an open winzip dialog; (bso#8311).- s3-winbindd: call dump_core_setup after command line option has been parsed; (bso#8975).- Directory group write permission bit is set if unix extensions are enabled; (bso#8972).- s3: remove dependency on automake for \"make everything\"; (bso#8978).- sd_has_inheritable_components segfaults on an SD that se_access_check accepts; (bso#8811).- smbclient\'s tarmode insists on listing excluded directories; (bso#8922).- Notify code can miss a ChDir; (bso#8998).- s3:smbd: add a fsp_persistent_id() function; (bso#8995).
* Wed May 30 2012 lmuelleAATTsuse.com- s3: Fix a segfault with debug level 3 on Solaris; (bso#8861).- s3: wbinfo --lookup-sids \"\" crashes winbind; (bso#8904).- smbd crashes when deleting directory and veto files are enabled; (bso#8837).- winbind_krb5_locator only returns one IP address; (bso#8897).- Wrong assertion/comparison: Compare value not pointer; (bso#8859).- Inconsistent (with manpage) command-line switch for \"help\" in smbtree; (bso#8831).- Fix incorrect debug statement.- Setting traverse rights fails to enable directory traversal when acl_xattr in use; (bso#8857).- Syslog broken owing to mistyping of debug_settings.syslog; (bso#8877).- s3/ldap: remove outdated netscape ds 5 schema file; (bso#8869).- s3-docs: fixes several typos; (bso#7938).- s3-VFS: Fix building out-of-tree modules; (bso#8822).- s3-docs: Add hint that setting \"profile acls = yes\" on normal shares can cause trouble; (bso#7930).- s3-pam_winbind: Fix the build with a newer iniparser library; (bso#8915).- Avoid null dereference in initialize_password_db(); (bso#8920).- s3:registry: implement values_need_update and subkeys_need_update in the smbconf backend.- s3:registry:reg_api: fix reg_queryvalue to not fail when values are modified while it runs.- s4:torture:rpc:spoolss: also initialize driverName before checking it in test_PrinterData_DsSpooler().- s3:registry: multiple cleanups, fixes, and optimisations.- s3:auth/server_info: the primary rid should be in the groups rid array; (bso#8798).- s3-printing: Add new printers to registry; (bso#8554); (bso#8612); (bso#8748).- Fix the overwriting of errno before use in a DEBUG statement and use the return value from store_acl_blob_fsp rather than ignoring it; (bso#8945).- s3-auth: Don\'t lookup the system user in pdb; (bso#8944).- s3-passdb: Fix negative SID->uid/gid cache handling; (bso#8952).- Fix typo in pam_winbindd code; (bso#8957).- Fix remove_duplicate_addrs2 previously it could leave zero addresses in the list; (bso#8910).- Slow but responsive DC can lock up winbindd; (bso#8943).- Broken processing of %U with vfs_full_audit when force user is set; (bso#8882).
* Wed May 23 2012 ddissAATTsuse.de- Attempt to use samlogon validation level 6; (bso#7945); (bnc#741623).
* Wed May 02 2012 lmuelleAATTsuse.com- Add PreReq /etc/init.d/nscd to the winbind package; (bnc#759731).
* Wed Apr 25 2012 ddissAATTsuse.de- Recover from ncacn_ip_tcp ACCESS_DENIED/SEC_PKG_ERROR lsa errors; (bso#7944); (bnc#755663).- Fix lsa_LookupSids3 and lsa_LookupNames4 arguments.
* Sat Apr 21 2012 lmuelleAATTsuse.com- docs-xml: fix default name resolve order; (bso#7564).- s3-aio-fork: Fix a segfault in vfs_aio_fork; (bso#8836).- docs: remove whitespace in example samba.ldif; (bso#8789).- s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845); (bnc#730769).- s3-docs: Prepend \'/\' to filename argument; (bso#8826).
* Fri Apr 20 2012 lmuelleAATTsuse.com- Restrict self granting privileges where security=ads for Samba post-3.3.16; CVE-2012-2111; (bnc#757576).
* Fri Apr 13 2012 ddissAATTsuse.de- Remove all precompiled idl output to ensure any pidl changes take effect; (bnc#757080).
* Tue Apr 10 2012 lmuelleAATTsuse.com- Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe- cution as the \"root\" user; PIDL based autogenerated code allows overwriting beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797).
* Sun Mar 25 2012 lmuelleAATTsuse.de- s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys; (bso#8599).- Correctly handle DENY ACEs when privileges apply; (bso#8797).
* Fri Mar 16 2012 lmuelleAATTsuse.de- s3:smb2_server: fix a logic error, we should sign non guest sessions; (bso8749).- Allow vfs_aio_pthread to build as a static module; (bso#8723).- s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for persistent dbs; (#bso8527).- s3: segfault in dom_sid_compare(bso#8567).- Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER; (bso#8768).- s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771).- s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599).- Fix problem when calculating the share security mask, take priviliges into account for the connecting user; (bso#8784).
* Thu Mar 15 2012 ddissAATTsuse.de- Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups; (bso#8807); (bnc#751454).
* Wed Mar 14 2012 lmuelleAATTsuse.de- Remove obsoleted Authors lines from spec file for post-11.2 systems.
* Mon Feb 27 2012 lmuelleAATTsuse.de- Make ldapsmb build with Fedora 15 and 16; (bso#8783).- BuildRequire libuuid-devel for post-11.0 and other systems.- Define missing python macros for non SUSE systems.- PreReq to fillup_prereq and insserv_prereq only on SUSE systems.- Always use cifstab instead of smbfstab on non SUSE systems.
* Mon Feb 20 2012 lmuelleAATTsuse.de- Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions; CVE-2012-0870; (bnc#747934).
* Fri Feb 17 2012 ddissAATTsuse.de- Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY; (bso#8760); (bnc#741854).
* Thu Feb 16 2012 ddissAATTsuse.de- s3-printing: fix crash in printer_list_set_printer(); (bso#8762); (bnc#746825).
* Mon Feb 06 2012 lmuelleAATTsuse.de- s3:winbindd fix a return code check; (bso#8406).
* Mon Feb 06 2012 lmuelleAATTsuse.de- s3: Add rmdir operation to streams_depot; (bso#8733).
* Mon Feb 06 2012 lmuelleAATTsuse.de- s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used(); (bso#8738); CVE-2013-0454; (bnc#811975).
* Mon Feb 06 2012 lmuelleAATTsuse.de- s3:auth: fill the sids array of the info3 in wbcAuthUserInfo_to_netr_SamInfo3(); (bso#8739).
* Mon Feb 06 2012 lmuelleAATTsuse.de- s3:client: ignore SMBecho errors (the server may not support it); (bso#8139).
* Mon Feb 06 2012 lmuelleAATTsuse.de- Be more strict when using PAM_AUTH API from winbind if Kerberos auth is enabled and don\'t unintentionally use a bogus domain name; (bso#8734).
* Mon Feb 06 2012 lmuelleAATTsuse.de- smbclient fails with posix large reads; (bso#8727).
* Thu Feb 02 2012 lmuelleAATTsuse.de- Use the smbfs init script on versions pre-11.3, or cifs in later versions; (bnc#744614).
* Mon Jan 30 2012 lmuelleAATTsuse.de- s3: Compile IDL files in autogen, some configure tests need this.
* Mon Jan 30 2012 fcrozatAATTsuse.com- Fixes various deadlocks in if-up.d / if-down.d when running under systemd; (bnc#732395).
* Sun Jan 29 2012 lmuelleAATTsuse.de- Update to 3.6.3. + Fix memory leak in parent smbd on connection; CVE-2012-0817; (bso#8724); (bnc#743986).
* Thu Jan 26 2012 lmuelleAATTsuse.de- Use spdx.org compliant license names for all packages.
* Wed Jan 25 2012 lmuelleAATTsuse.de- Update to 3.6.2. + Make Winbind receive user/group information (bug #8371). + Several SMB2 fixes. + Fix a crash bug in the spoolss code. + Add new contributing FAQ announcing acceptance of corporate (C). + DeletePrinterDriverEx deletes files in use; (bso#4942); (bnc#742504). + Fix cli_write_and_x() against OS/2 print shares; (bso#5326). + Fix \'smbclient tar\' for files greater than 8GB on BE machines; (bso#563); (bnc#726145). + Remove pointless use_memory_krb5_ccache; (bso#7465). + Fix perl path; (bso#8176). + Grant credits in async interim responses (SMB2); (bso#8357). + Make Winbind receive user/group information; (bso#8371). + Fix Windows XP clients crashing smbd process every once in a while; (bso#8384); (bnc#731571). + Make VFS op \"streaminfo\" stackable; (bso#8419). + Add an allocation pool to idmap_autorid; (bso#8444). + Fix SEGFAULT from net registry export on not zero terminated REG_SZ values; (bso#8528). + Make DSO_EXPORTS_CMD more portable; (bso#8531). + readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541). + smbclient posix_open command fails to return correct info on open file; (bso#8542). + winbind_samlogon_retry_loop ignores logon_parameters flags; (bso#8548). + Fix setting the machine account password; (bso#8550). + Make SMB2 handle compound request headers in the same way as Windows; (bso#8560). + Password change settings not fully observed; (bso#8561). + Fix double free error in talloc; (bso#8562). + Fix alignment in the non-extended-security negprot; (bso#8573). + Add systemd service files; (bso#8575). + Add systemd service files; (bso#8575). + smb2_flush: Don\'t send uninitialized memory; (bso#8579). + Enable inotify if sys or kernel inotify is available; (bso#8580). + Increase a debug level; (bso#8585). + libsmb: Only align unicode pipe_name; (bso#8586). + Fix marshalling of samr_ChangePasswordUser3; (bso#8591). + Don\'t limit the number of open dptrs for SMB2; (bso#8592). + Fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). + Make cldap work over IPv6; (bso#8600). + Fix intermittent print job failures caused by character conversion errors; (bso#8606). + Improve configure.in so it can be used outside the Samba source tree; (bso#8607). + Winbind: Don\'t fail on users without a uid; (bso#8608). + Ensure we correctly calculate reply credits over all returned SMB2 replies; (bso#8614). + Fix migrate printer code; (bso#8618). + Fix crash bug when trying to browse Samba printers; (bso#8623). + libsmb: Don\'t duplicate Kerberos service tickets; (bso#8628). + POSIX ACE x permission becomes rx following mapping to and from a DACL; (bso#8631). + When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636). + Fix the vfs_commit module; (bso#8639). + Add an update function for Winbind cache; (bso#8643). + vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644). + Document the \"ignore system acls\" option of vfs_acl_xattr and vfs_acl_tdb vfs modules; (bso#8652). + Fix deleting a symlink if the symlink target is outside of the share; (bso#8663). + Fix renaming a symlink if the symlink target is outside of the share; (bso#8664). + Fix NT ACL issue; (bso#8673). + Fix buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674). + Fix Winbind segfault if we can\'t map the last user; (bso#8678). + recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679). + Try ctdbd_init_connection() as root; (bso#8684). + Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686). + Fix typo in \'net memberships\' usage; (bso#8687). + libads: Fix malloc/talloc mismatch in ads_keytab_verify_ticket(); (bso#8692). + Make DeletePrinterDriverEx remove printer driver files; (bso#8697) (bnc#740810). + Fix major leak with SMB2 in connections.tdb; (bso#8710).
* Wed Jan 25 2012 lmuelleAATTsuse.de- s3-spoolss: Pass the right pointer type; (bso#4942); (bnc#742504).
* Wed Jan 25 2012 ddissAATTsuse.de- Use simplified smb signing infrastructure; (bnc#741623).
* Wed Jan 25 2012 lmuelleAATTsuse.de- Use correct license, LGPLv3+ for libwbclient packages.
* Tue Jan 24 2012 lmuelleAATTsuse.de- When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636).
* Tue Jan 24 2012 ddissAATTsuse.de- Fix incorrect types in the full_audit VFS module. Add null terminators to audit log enums; (bnc#742885).
* Sun Jan 22 2012 ddissAATTsuse.de- Prefix print$ path on driver file deletion; (bso#8697); (bnc#740810).- Fix printer_driver_files_in_use() call ordering; (bso#4942); (bnc#742504).
* Sat Jan 21 2012 lmuelleAATTsuse.de- Buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674).- NT ACL issue; (bso#8673).- Deleting a symlink fails if the symlink target is outside of the share; (bso#8663).- connections.tdb - major leak with SMB2; (bso#8710).
* Wed Jan 18 2012 lmuelleAATTsuse.de- Renaming a symlink fails if the symlink target is outside of the share; (bso#8664).
* Tue Jan 17 2012 lmuelleAATTsuse.de- Intermittent print job failures caused by character conversion errors; (bso#8606).- ads_keytab_verify_ticket mixes talloc allocation with malloc free; (bso#8692).- libcli/cldap: fix a crash bug in cldap_socket_recv_dgram(); (bso#8593).- s3:lib/ctdbd_conn: try ctdbd_init_connection() as root; (bso#8684).- s3-printing: fix migrate printer code; (bso#8618).- Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686).
* Mon Jan 16 2012 lmuelleAATTsuse.de- net memberships usage info was wrong; (bso#8687).- s3-libsmb: Don\'t duplicate kerberos service tickets; (bso#8628).- Recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679).- s3-winbind: Fix segfault if we can\'t map the last user; (bso#8678).- vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644).- s3/doc: document the ignore system acls option of vfs_acl_xattr and vfs_acl_tdb; (bso#8652).- Winbind can\'t receive any user/group information; (bso#8371).- s3-winbind: Add an update function for winbind cache; (bso#8643).- s3: Attempt to fix the vfs_commit module.- POSIX ACE x permission becomes rx following mapping to and from a DACL; (#bso#8631).- s3:libsmb: only align unicode pipe_name; (bso#8586).- s3-winbind: Don\'t fail on users without a uid; (bso#8608).- Crash when trying to browse samba printers; (bso#8623).- talloc: double free error; (bso#8562).- cldap doesn\'t work over ipv6; (bso#8600).- s3:libsmb: fix cli_write_and_x() against OS/2 print shares; (bso#5326).- SMB2: not granting credits for all requests in a compound request; (bso#8614).- smb2_flush sends uninitialized memory; (bso#8579).- Password change settings not fully observed; (bso#8561).- s3:smb2_server: grant credits in async interim responses; (bso#8357).- s3:smbd: don\'t limit the number of open dptrs for smb2; (bso#8592).- samr_ChangePasswordUser3 IDL incorrect; (bso#8591).- idmap_autorid does not have allocation pool; (bso#8444).- Add systemd service files.- s3:libsmb: the workgroup in the non-extended-security negprot is not aligned; (bso#8573).- s3-build: Fix inotify detection; (bso#8580).- SMB2 doesn\'t handle compound request headers in the same way as Windows; (#bso8560).- Disconnecting clients swamp the logs; (bso#8585).- s3-netlogon: Fix setting the machinge account password; (bso#8550).- winbind_samlogon_retry_loop ignores logon_parameters flags; (#bso8548).- smbclient posix_open command fails to return correct info on open file; (bso#8542).- readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541).- s3-netapi: remove pointless use_memory_krb5_ccache; (bso#7465).- s3:Makefile: make DSO_EXPORTS_CMD more portable; (bso#8531).- s3:registry: fix the test for a REG_SZ blob possibly being a zero terminated ucs2 string; (bso#8528).- Make VFS op \"streaminfo\" stackable; (bso#8419).
* Tue Jan 03 2012 ddissAATTsuse.de- Fix incorrect perfcount array length calculations; (bnc#739258).
* Wed Dec 21 2011 cooloAATTsuse.com- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.
* Wed Dec 21 2011 cooloAATTsuse.com- Remove call to suse_update_config macro for post-11.4 systems.
* Mon Dec 19 2011 lmuelleAATTsuse.de- Use samba.org for the ldapsmb source location.
* Wed Dec 07 2011 shargaganAATTnovell.com- Fixing libsmbsharemode dependency on ldap and krb5 libs in Makefile; (bnc #729516).
* Fri Nov 25 2011 ddissAATTsuse.de- Do not map POSIX execute permission to Windows FILE_READ_ATTRIBUTES; (bso#8631); (bnc#732572).
* Fri Nov 25 2011 lmuelleAATTsuse.de- Add ldap to Should-Start and Stop of the smb init script; (bnc#730046).
* Sat Nov 19 2011 ddissAATTsuse.de- Fix smbd srv_spoolss_replycloseprinter() segfault; (bso#8384); (bnc#731571).
* Fri Nov 04 2011 ddissAATTsuse.de- Fix pam_winbind.so segfault in pam_sm_authenticate(); (bso#8564).
* Tue Nov 01 2011 ddissAATTsuse.de- Fix smbclient >8GB tars on big endian machines; (bso#563); (bnc#726145).
* Mon Oct 31 2011 ddissAATTsuse.de- Fix typo in net ads join output; (bnc#713135).
* Thu Oct 27 2011 lmuelleAATTsuse.de- Ignore a potentially missing AppArmor snippet helper script; (bnc#725256).
* Thu Oct 20 2011 lmuelleAATTsuse.de- Update to 3.6.1. + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Several SMB2 fixes. + The VFS ACL modules are no longer experimental but production-ready. + Fix \'net ads join -k\' when KRB5CCNAME is not set; (bso#7465). + smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509). + Return error of cli_push when \'put - /some/file\' is used; (bso#7551). + Fix usage of cli_errstr(); (bso#7864). + Fix \'widelinks\' regression; (bso#8229). + Empty notify servername; (bso#8236). + Add man vfs_aio_fork; (bso#8256). + smb2: smbd logs \"Invalid SMB packet: first request: 0x0008\" and crashes; (bso#8334). + Add a fallback for missing open&x support in MAC OS/X Lion; (bso#8338). + While migrating forms, don\'t fail if the form already exists; (bso#8351). + OS/2 sends an unexpected write&x/read&x chain; (bso#8360). + Fix build of vfs_prealloc on SLES8; (bso#8363). + Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4; (bso#8364). + Fix the fallback to the deprecated spelling idmap:script; (bso#8368). + Fix vfs_chown_fsp; (bso#8370). + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix smbclient access to NT4 shares; (bso#8385). + Optimize serverid_exists() for Solaris; (bso#8395). + registry/reg_format.c must include includes.h; (bso#8401). + SMB2 server can return requests out-of-order when processing a compound request; (bso#8407). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Fix \"saving as\" of MS Office 2007 (Word) documents on Samba shares with SMB2; (bso#8412). + Fix \'getent group\' if trusted domains are not reachable; (bso#8420). + Fix infinite loop in ACL module code; (bso#8422). + Fix wrong reply to DHnC (durable handle reconnect); (bso#8428). + Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429). + Fix segfault in iconv.c; (bso#8433). + NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442). + Be smarter about setting default permissions when a ACL_USER_OBJ isn\'t given; (bso#8443). + Check the wct of the incoming SMBnegprot responses; (bso#8452). + Fix smbclient segfaults when dialect option -m is used for legacy dialects; (bso#8453). + Fix uninitialized memory problem in group_sids_to_info3; (bso#8455). + Samba PDC is looking up only primary user group; (bso#8455). + IE9 on Windows 7 cannot download files to samba 3.5.11 share; (bso#8458). + smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473). + SMB2 create doesn\'t cope with an Apple client using NULL blob in create; (bso#8474). + Don\'t call smbd_terminate_connection in smb2_validate_message_id(); (bso#8476). + Samba asserts when SMB2 client breaks the crediting rules; (bso#8476). + Map to guest can return uninitialized blob of data; (bso#8477). + acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480). + DFS breaks zip file extracting unless \"follow symlinks = no\" set; (bso#8493). + Remove \"experimental\" label on VFS ACL modules; (bso#8494). + SMB2_OP_CANCEL requests don\'t have to be signed; (bso#8503). + smbd doesn\'t correctly honor the \"force create mode\" bits from a cifsfs create; (bso#8507). + Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509). + Disallow \".\" in can_set_delete_on_close(); (bso#8515). + SMB2 create call returns incorrect file allocation size; (bso#8518). + Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520). + Winbind cache timeout expiry test was reversed; (bso#8521).
* Tue Oct 18 2011 lmuelleAATTsuse.de- s3/doc: add man page for aio_fork vfs module.
* Tue Oct 18 2011 lmuelleAATTsuse.de- Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).
* Tue Oct 18 2011 lmuelleAATTsuse.de- s3: Samba PDC is looking up only primary user group; (bso#8455).
* Tue Oct 18 2011 lmuelleAATTsuse.de- Add script to create or update an AppArmor sniplet with permissions for all Samba shares; (bnc#688040).
* Tue Oct 18 2011 jmcdonoughAATTsuse.de- Add \"ldapsam:login cache\" parameter to allow explicit disabling of the login cache; (bnc#723261).
* Fri Oct 14 2011 ddissAATTsuse.de- Retain the smbd startproc return value for correct startup status reporting. unset was incorrectly being called prior to rc_status; (bnc#723724).
* Fri Oct 14 2011 ddissAATTsuse.de- Prevent deadlock in systemd triggered by if-down.d handler on shutdown; (bnc#721598).
* Thu Oct 13 2011 lmuelleAATTsuse.de- smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; changed defaults and documentation (bso8473).
* Thu Oct 13 2011 lmuelleAATTsuse.de- Empty CIFS share can be blocked for other clients by deleting it via empty path (DELETE_PENDING until the last client); (bso#8515).
* Wed Oct 12 2011 lmuelleAATTsuse.de- winbindd cache timeout expiry test was reversed; (bso#8521).
* Wed Oct 12 2011 lmuelleAATTsuse.de- Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520).
* Wed Oct 12 2011 lmuelleAATTsuse.de- s3:smb2_create: fix allocation size return value when opening existing files; (bso#8518).
* Wed Oct 12 2011 lmuelleAATTsuse.de- SMB2 create doesn\'t cope with an Apple client using NULL blob in create; (bso#8474).
* Wed Oct 12 2011 lmuelleAATTsuse.de- NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442).
* Wed Oct 12 2011 lmuelleAATTsuse.de- s3-docs: Fix bug (bso#7908) and typo.
* Mon Oct 10 2011 lmuelleAATTsuse.de- Return error of cli_push when \'put - /some/file\' is used; (bso#7551).
* Mon Oct 10 2011 lmuelleAATTsuse.de- Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509).
* Mon Oct 10 2011 lmuelleAATTsuse.de- smbd doesn\'t correctly honor the \"force create mode\" bits from a cifsfs create; (bso#8507).
* Mon Oct 10 2011 lmuelleAATTsuse.de- Default user entry is set to minimal permissions on incoming ACL change with no user specified; (bso#8443).
* Mon Oct 10 2011 lmuelleAATTsuse.de- smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).
* Mon Oct 10 2011 lmuelleAATTsuse.de- Handle the SECINFO_LABEL flag in the same was as Win2k3; enable Microsoft Internet Explorer 9 on Windows 7 to download files; (bso#8458).
* Mon Oct 10 2011 lmuelleAATTsuse.de- DFS breaks zip file extracting unless \"follow symlinks = no\" set; (bso#8493).
* Mon Oct 10 2011 lmuelleAATTsuse.de- s3-docs: Fix typos.
* Mon Oct 10 2011 lmuelleAATTsuse.de- s3:smb2_server: SMB2_OP_CANCEL requests don\'t have to be signed; (bso#8503).
* Mon Oct 10 2011 lmuelleAATTsuse.de- Remove \"experimental\" label on VFS ACL modules; (bso#8494).
* Mon Oct 10 2011 lmuelleAATTsuse.de- acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).
* Mon Oct 10 2011 lmuelleAATTsuse.de- s3-smbd: asserts when SMB2 client breaks the crediting rules; (bso#8476).
* Mon Oct 10 2011 lmuelleAATTsuse.de- s3-libnet: allow to use default krb5 ccache in libnet_Join/libnet_Unjoin; (bso#7465).
* Mon Oct 10 2011 lmuelleAATTsuse.de- smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473).
* Mon Oct 10 2011 lmuelleAATTsuse.de- s3-netapi: allow to use default krb5 credential cache for libnetapi users.
* Mon Oct 10 2011 lmuelleAATTsuse.de- s3-docs: document -k switch in net manpage.
* Mon Oct 10 2011 lmuelleAATTsuse.de- Map to guest can return uninitialized blob of data; (bso#8477).
* Mon Oct 10 2011 lmuelleAATTsuse.de- s3-registry: registry/reg_format.c must include includes.h; (bso#8401).
* Mon Oct 10 2011 lmuelleAATTsuse.de- smbclient segfaults when option -m is used for legacy dialects; (bso#8453).
* Mon Oct 10 2011 lmuelleAATTsuse.de- Fix \'widelinks\' regression intro\'d in 3.2; (bso#8229).
* Mon Oct 10 2011 lmuelleAATTsuse.de- Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429).
* Mon Oct 10 2011 lmuelleAATTsuse.de- s3-spoolss: Fix bug forms migration; (bso#8351).
* Mon Oct 10 2011 lmuelleAATTsuse.de- s3:libsmb: check the wct of the incoming SMBnegprot responses; (bso#8452).
* Mon Oct 10 2011 lmuelleAATTsuse.de- s3: Do not fork the echo handler for smb2; (bso#8334).
* Mon Oct 10 2011 lmuelleAATTsuse.de- s3-spoolss: Fix bug empty notify servername; (bso#8236).
* Mon Oct 10 2011 lmuelleAATTsuse.de- SMB2 server can return requests out-of-order when processing a compound request; (bso#8407).
* Fri Oct 07 2011 lmuelleAATTsuse.de- Remove smb child crash fix. The issue had been fixed upstream differently.
* Sun Oct 02 2011 lmuelleAATTsuse.de- BuildRequire ctdb-devel version greater than 1.0.105 for post-10.0 systems.
* Tue Sep 27 2011 hhetterAATTsuse.de- Fix samba duplicates file content on appending. Move posix case semantics out from under the VFS; (bso#6898); (bnc#681208).
* Wed Sep 21 2011 jmcdonoughAATTsuse.de- Make winbind child reconnect when remote end has closed, fix failing sudo; (bso#7295); (bnc#569721).
* Fri Sep 09 2011 lmuelleAATTsuse.de- Spec file cleanup as suggested by the spec-cleaner tool. + Make all BuildRequires, PreReq, and Provides a separate line. + Use %{buildroot} instead of ${RPM_BUILD_ROOT}. + Use straight commands instead of macros (make, install). + Use -p in post and postun if we only call one command. + Use %{_localstatedir} instead of %{_var} in the filelist. + Remove superfluous AutoReqProv on lines.
* Thu Sep 08 2011 lmuelleAATTsuse.de- Remove %release from all Provides.
* Thu Sep 01 2011 lmuelleAATTsuse.de- Fix segfault in iconv.c which caused a null pointer dereference; (bso#8433).
* Wed Aug 31 2011 lmuelleAATTsuse.de- Use /var/run for the cifs state file in the init script too; (bnc#710304).
* Tue Aug 30 2011 lmuelleAATTsuse.de- Microsoft Word from Microsoft Office 2007 fails to save as on a share with SMB2; (bso#8412).
* Tue Aug 30 2011 lmuelleAATTsuse.de- Use sys_write and sys_read in fork_domain_child to fix a winbind race leading to 100% CPU usage; (bso#8409).
* Tue Aug 30 2011 lmuelleAATTsuse.de- Fix wrong reply to smb2 durable handle reconnect (DHnC) request; (bso#8428).
* Tue Aug 30 2011 lmuelleAATTsuse.de- Fix infinite loop in ACL module code; (bso#8422).
* Mon Aug 29 2011 lmuelleAATTsuse.de- Fix getent group if trusted domains are not reachable; (bso#8420).
* Mon Aug 29 2011 lmuelleAATTsuse.de- smbclient can\'t access a NT4 share since 3.6.0; (bso#8385).
* Sat Aug 27 2011 lmuelleAATTsuse.de- Optimize serverid_exists() for Solaris; (bso#8395).
* Sat Aug 27 2011 lmuelleAATTsuse.de- talloc: + check block count after references test. + added test suite for talloc_free_children(). + license info erratum in the manpage. + fix typos and better differentiation between versions 1 and 2. + preserve context name on talloc_free_children(). + ensure the sibling linked list remains valid during a free.
* Sat Aug 27 2011 lmuelleAATTsuse.de- vfs_chown_fsp returned in the wrong directory; (bso#8370).
* Sat Aug 27 2011 lmuelleAATTsuse.de- Remove irritating \".\" targets when recent system libs exist; (bso#8369).
* Sat Aug 27 2011 lmuelleAATTsuse.de- Correctly initialize \"idmap config
* : script\" with NULL; (bso#8368).
* Sat Aug 27 2011 lmuelleAATTsuse.de- Add missing include to suppress compiler warnings; (bso#8365).
* Sat Aug 27 2011 lmuelleAATTsuse.de- Point the chain offset beyond the current request; (bso#8360).
* Sat Aug 27 2011 lmuelleAATTsuse.de- Fix gpfs vfs module build; (bso#8364).
* Sat Aug 27 2011 lmuelleAATTsuse.de- Make vfs_prealloc even build on older systems; (bso#8363).
* Sat Aug 27 2011 lmuelleAATTsuse.de- Do central cli_set_error and return the actual NTSTATUS; (bso#7864).
* Sat Aug 27 2011 lmuelleAATTsuse.de- Add a fallback for missing open&x support in OS/X Lion; (bso#8338).
* Tue Aug 09 2011 lmuelleAATTsuse.de- Update to 3.6.0. + BUG 7462: Make SA_RESETHAND conditional on its existance. + BUG 8303: db_ctdb_send_schedule_for_deletion() is not defined. + BUG 8324: smbclient cannot list directories from a big-endian machine. + BUG 8326: WinXP cannot join a Samba3 domain with a \'even\' hostname. + BUG 8327: Fix the reload of the configuration, also reload activated registry shares. + BUG 8328: Cleanup of idmap_tdb2 code. + BUG 8330: Fix NFSv4 ACL merging logic. + BUG 8335: File copy aborts with smb2_validate_message_id: bad message_id. + BUG 8341: Fix segfault in libsmbclient. + BUG 8343: Fix SMB2 crash reading with aio_fork beyond the end of file. + BUG 8347: Fix regression for HP-UX, AIX and OSF. + BUG 8357: Make sure we grant credits on async read/write operations. + BUG 8358: Fix a bug in run_poll_events(). + BUG 8362: Fix build issue on old glibc systems.
* Mon Aug 08 2011 lmuelleAATTsuse.de- Remove references to disabled vscan build.
* Thu Aug 04 2011 lmuelleAATTsuse.de- Add missing define, includes, and initialization to get_printing_ticket.
* Thu Aug 04 2011 lmuelleAATTsuse.de- Use /var/run for the cifs state file; (bnc#710304).
* Mon Aug 01 2011 lmuelleAATTsuse.de- Fix #ifdef CTDB_CONTROL_SCHEDULE_FOR_DELETION issue; (bso#8303).
* Mon Aug 01 2011 lmuelleAATTsuse.de- File copy aborts with smb2_validate_message_id: bad message_id; (bso#8335).
* Sun Jul 31 2011 lmuelleAATTsuse.de- Fix reload of the configuration and also reload activated registry shares; (bso#8327).
* Sun Jul 31 2011 lmuelleAATTsuse.de- WinXP cannot join a Samba3 domain with a \'even\' hostname; (bso#8326).
* Thu Jul 28 2011 lmuelleAATTsuse.de- smbclient cannot list directories from a big-endian machine; (bso#8324).
* Wed Jul 27 2011 lmuelleAATTsuse.de- Update to 3.6.0rc3. + BUG 7841: Explicitly pass domain_sid to wbint_LookupRids(). + BUG 7888: Deal with buggy 3.0 based PDCs. + BUG 8083: Fix \"inherit owner = yes\" with vfs_acl_xattr or vfs_acl_tdb module. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8193: Add new command \'enumerate_recursive\'. + BUG 8195: Make rpc client code working against NT4 servers. + BUG 8211: Fix \"inherit owner = yes\" when \"inherit permissions = yes\" is set. + BUG 8213: Fixes in idmap_autorid. + BUG 8214: Fix smbd crash on printer driver upgrade. + BUG 8215: Fix Winbind unix username lookup. + BUG 8216: Make Winbind returning correct results with \'sids2xids\'. + BUG 8217: Do not stat-check the share path in \'net conf addshare\'. + BUG 8219: Fix SMB Panic from Windows 7 client. + BUG 8224: Fix the build on FreeBSD. + BUG 8226: Use c99 initializers which are supported by old gcc 2.95 compilers. + BUG 8230: Move .nmbd socket directory to non-hidden name PREFIX/var/nmbd. + BUG 8231: Fix crash bug in \'net cache get\'. + BUG 8235: Fix smbd crash on startup caused by migrate_printer(). + BUG 8240: Fix Valgrind warnings in winreg/spoolss code. + BUG 8244: Fix copying files larger than 2 GB to a Samba share. + BUG 8247: Fix Coverity ID 2582: FORWARD_NULL. + BUG 8253: Fix Winbind panic if verify_idpool() fails. + BUG 8254: Fix \"acl check permissions = no\". + BUG 8260: Fix DCERPC responses with fragments larger than 1024 bytes. + BUG 8262: Fix build of vfs_commit. + BUG 8263: Fix build with --with-fake-kaserver or --with-vfs-afsacl. + BUG 8264: Fix Valgrind bugs in svcctl. + BUG 8276: Close all sockets attached to a subnet in close_subnet(). + BUG 8278: Fix smbd panic when CTDB is unhealthy. + BUG 8281: Fix build of examples/VFS/
*. + BUG 8286: Fix smbd crash on premature end of smb2 conn. + BUG 8292: Fix a major architectural flaw in the SMB2 server code. + BUG 8293: Fix log file rotating in SMB2. + BUG 8304: Fix uninitialized variable in error path. + BUG 8305: Fix segfault in nmbd when using \'smbtree ...\'.. + BUG 8307: brl_close_fnum does not call SMB_VFS_BRL_UNLOCK_WINDOWS on all locks. + BUG 8310: toupper_ascii() is broken on big-endian systems. + BUG 8314: Fix smbd crash with unknown user. + Mark \'time offset\' parameter as deprecated.
* Tue Jul 26 2011 lmuelleAATTsuse.de- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site scripting vulnerability; CVE-2011-2694; (bso#8289); (bnc#708503).
* Tue Jul 26 2011 lmuelleAATTsuse.de- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site request forgery; CVE-2011-2522; (bso#8290); (bnc#705241).
* Mon Jul 25 2011 shargaganAATTnovell.com- Fixed the DFS referral response for msdfs root; (bnc#703655).
* Wed Jul 20 2011 ddissAATTsuse.de- Fix CUPS print job IDs; (bso#7288); (bnc#701257).
* Thu Jul 14 2011 lmuelleAATTsuse.de- Make use of the actual library version as part of the package name on post-11.3 systems only.
* Mon Jul 11 2011 jmcdonoughAATTsuse.de- Fix winbind internal error; (bso#7636); (bnc#659424).
* Mon Jul 11 2011 ddissAATTsuse.de- Improve ctdb vacuuming performance with use of SCHEDULE_FOR_DELETION; (bnc#705170).
* Mon Jun 20 2011 ddissAATTsuse.de- Specify nmbdsocketdir at configure time; (bnc#700953).
* Thu Jun 09 2011 lmuelleAATTsuse.de- Build the tdb, talloc, and tevent libraries ahead of anything else.
* Tue Jun 07 2011 jmcdonoughAATTsuse.de- Update to 3.6.0rc2. + BUG 6911: Fix Kerberos authentication from Vista to Samba. + BUG 8166: Don\'t lockout users when offline. + BUG 8200: Add support for multiple writeable ldap idmap domains. + BUG 8148: Default to protocol version 2 for SMB Traffic Analyzer. + BUG 7054: Fix X account flag when \"pwdlastset\" is \"0\". + BUG 8144: Fix setting timestamp when touching files with CIFS clients. + BUG 8153: Fix setting up getaddrinfo on IPv6-only machines. + BUG 8156: Fix \'net ads join\' using the user\'s Kerberos ticket. + BUG 8157: Fix parsing a cups printcap file. + BUG 8175: Fix smbd deadlock. + BUG 8189: Support shadow copy display over SMB2. + BUG 8197: Winbind does not properly detect when a DC connection is dead. + BUG 8203: Winbind needs to reset the DC connection if an RPC times out.
* Mon Jun 06 2011 mrsbAATTnovell.com- Make cupsaddsmb fill printers location; (bso#8132); (bnc#698209).
* Fri Jun 03 2011 lpechacekAATTsuse.cz- Add \"winbind max clients\" parameter to remove 200-client limit; (bnc#697461).
* Fri Jun 03 2011 jmcdonoughAATTsuse.de- Disable logon cache for password lockout consistency when running in a cluster; (bnc#694836).
* Fri May 27 2011 jmcdonoughAATTsuse.de- Fix logon of AD users with many group memberships; (bso#6911); (bnc#657026).
* Wed May 25 2011 jmcdonoughAATTsuse.de- Don\'t lockout users while offline; (bso#8166); (bnc#692607).
* Mon May 23 2011 lmuelleAATTsuse.de- Update to 3.6.0rc1. + BUG 8111: CIFS VFS: Fix unexpected error on SMB posix open. + BUG 8112: POSIX extension opens of a directory are denied with EISDIR. + BUG 8132: Fix filling printers location field when using cups. + Remove fstrings from client struct. + BUGFIX when converting from safe_strcpy to strlcpy. + Fix off-by-one calculations with strlcpy. + Ensure we always write the correct incoming mid into the share mode table entries. + Fix the SMB2 oplock showstopper. + Convert user-specified domain to uppercase in libsmb. + Fix Coverity CID #2302: FORWARD_NULL. + Fix cups_pull_comment_location(). + Fix double free of cups request. + Make cups_pull_comment_location() work again. + Fix potential crash bug in display_print_driver3(). + Properly clean up in pthreadpool_init in case of failure. + Make plaintext session setup async. + Reduce fd load in Winbind children. + Avoid a potential 100% CPU loop in Winbind. + Tune broadcast namequeries for unique names. + Properly deal with exited winbind children. + Fix dup_smb2_vec3. + Fix return check in nss_wins.
* Tue May 17 2011 shargaganAATTnovell.com- Fix to renew the kerberos ticket in samba after expiry; (bnc#669949).
* Mon May 16 2011 ddissAATTsuse.de- Fix a 100% CPU loop when ctdbd dies during a traverse; (bnc#693945).
* Thu May 05 2011 lmuelleAATTsuse.de- Make dhcpcd hook BOOTPROTO check cover dhcp6 too; (bnc#691969).
* Thu May 05 2011 shargaganAATTnovell.com- Handling of large (> 256 bytes) ntlmv2 blobs in winbind; (bnc#529946).
* Sat Apr 30 2011 lmuelleAATTsuse.de- Package static libraries with 0644 permissions.
* Sat Apr 30 2011 lmuelleAATTsuse.de- Add Requires libtalloc-devel to libldb-devel and libtevent-devel.
* Sat Apr 30 2011 lmuelleAATTsuse.de- Rename libldb0 to libldb1 as 1 is the current major version of the library.- Add libldb1 and libtevent0 to baselibs.conf.
* Fri Apr 29 2011 lmuelleAATTsuse.de- Don\'t call the suse_update_config macro before building lib ldb and tevent.
* Fri Apr 29 2011 lmuelleAATTsuse.de- Update to 3.6.0pre3. + Listen on IPv6 addresses with IPV6_ONLY; (bso#7383). + Fix wrong output in \'smbget\'; (bso#8066). + \"inherit owner = yes\" doesn\'t interact correctly with vfs_acl_xattr or vfs_acl_tdb module; (bso#8083). + rpccli_samr_chng_pswd_auth_crap segfaults if any input blobs are null; (bso#8088). + setpwent() actually does endpwent() and vice versa on FreeBSD; (bso#8099). + Fix the build of \'smbget\' on HP NonStop; (bso#8106). + Fix build of tdb2. + Correctly detect and deny symlinks anywhere in a path (not just the last component) if \"follow symlinks = no\". + Fix timeout in rpc_pipe_open_tcp_port(). + Fix the build of \"--with-profiling-data\". + Fix Coverity IDs 986, 1340, 2047, 2299, 2307, 2325, 2335, 2336, 2470, 2471, 2478. + nsswitch: Add \'wbinfo --lookup-sids\'. + nsswitch: Add \'wbinfo --sids-to-unix-ids\'. + Fix smbd with the async echo responder. + Fix the build of vfs_gpfs.c. + Add a 10-second timeout for the 445 or netbios connection to a DC. + Many pthreadpool fixes. + Fix transaction recovery area for converted tdbs.
* Thu Apr 28 2011 lmuelleAATTsuse.de- Add PreReq permissions to the krb-printing package.
* Thu Apr 28 2011 lmuelleAATTsuse.de- Remove _libdir ldb and tevent from file list.- Explicitly state not to bundle talloc or tdb while ldb and tevent build.
* Thu Apr 21 2011 lmuelleAATTsuse.de- Always use the actual library version as part of the package name.- Exclude shared python modules.
* Thu Apr 21 2011 ddissAATTsuse.de- Fix printing from Windows 7 clients; (bso#7567); (bnc#687535).
* Thu Apr 21 2011 ddissAATTsuse.de- Update pidl and always compile IDL at build time; (bnc#688810).
* Thu Apr 14 2011 lmuelleAATTsuse.de- Update to 3.6.0pre2. + ID Mapping changes. + Implement SMB2 support. + Add an Endpoint Mapper daemon. + Make \"rlimit_max below minimum Windows limit\" notification less scary; (bso#6837). + Quota only shown when logged as root; (bso#7080). + Fix printing from Windows 7; (bso#7567). + Retry DNS updates when connection to one nameserver has failed; (bso#7690). + Unlink may unlink wrong file when hardlinks are involved; (bso#7863). + Fix \'nmbd --port\'; (bso#7875). + cmd_spoolss_deletedriver() returned without checking all architectures; (bso#7880). + Don\'t return \"-1\" on success in \'net rpc vampire keytab\'; (bso#7899). + Fix cups pcap reload with no printers; (bso#7915). + Fix bug in chain_reply; (bso#7917). + Fix problems with \"kernel oplocks\" option set to \"no\"; (bso#7928). + Fall back for utimes calls; (bso#7940). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let winbind try to use samlogon validation level 6; (bso#7945). + Sgid bit lost on folder rename; (bso#7996). + Fix getting username in \'net rap session\'; (bso#8009). + Fix inode generation so nautilus can count total dir size correctly; (bso#8010). + Use jenkins hash for str_checksum; (bso#8010). + Add explicit configure option whether or not to enable dmapi support; (bso#8033). + Fix smbclient segfault with Cyrillic netbios names; (bso#8040). + Fix file creation on OS/X; (bso#8042). + Add \"--option\" to \'testparm\'. + Fix crash bug on smbd shutdown when using FOPENDIR(). + Ensure we don\'t return an incorrect access mask. + Fix bug against the new Mac client. + Fix leak in error path. + Fix error where Windows client spoolss returns WERR_INVALID_DATA. + Fix a segfault in the krb5 locator plugin. + Enable sharesec for registry shares. + Fix memory leak in \"security=share\" and \"force user\". + Add \"net idmap check\", a check and repair tool for the id mapping database. + Add new \'net idmap delete\' command. + Fix segfault on missing input file in \'net idmap restore\'. + Fix \'net usersidlist\' not to skip every other user. + Fix potential crash bug in spoolss_PrinterEnumValues push path. + Internal restructuring. + Don\'t wipe out all printer drivers when only one should be deleted. + Fix winbindd_dual_pam_auth_samlogon() for NT4 domains. + Fix memory leak in print_cups.c. + Remove duplicate cups response processing code. + Follow force user/group for driver IO. + Initiate pcap reload from parent smbd. + Reload shares after pcap cache fill. + Fix numerous Coverity IDs (2041 and others). + Fix a memory leak in check_sam_security_info3. + Fix a segfault in the nss wrapper when libnss_winbind.so is not loadable. + Make \"net sam list [users|workstations]\" list only the right things. + Fix a potential memleak in secrets_fetch_trusted_domain_password. + Use the right credentials in check_netlogond_security. + Add support for AF_NETLINK addr notifications. + Fork multiple Winbind children per domain. + Fix a deadlock between smbd and ctdbd. + Add \'wbinfo --dc-info\'. + Make \"nmbd socket dir\" configurable. + Fixed valgrind errors. + Fix a memleak in receive_getdc_response. + Don\'t grant SEC_STD_DELETE always to the owner of a file. + Fix segfaults on addrchange errors in Winbind. + Allow machine accounts as members in groupdb. + Add IPv6 support for the endpoint mapper. + Free unused memory in the rpc server. + Fix possible segfaults in svcctl server. + Fix possible segfault with client_id in rpc server. + Add a \'svcctl shutdown\' function to rpc server. + Fix a resource leak in net_afs. + Fix a resource leak in smbta-util. + Fix possible resource leak in net_usershare. + Fix possible resource leak in \'smbget\'. + Fix possible resource leak in \'smbfilter\'. + Fix a possible null pointer dereference in smbd. + Ensure we send the direct levelII oplock break to the correct fid. + Fix private libdir and codepages paths.- Add RFC 3454 to the vendor files.
* Thu Apr 07 2011 jmcdonoughAATTsuse.de- Fix idmap_tdb for big-endian systems such as ppc and s390; (bso#6901); (bnc#675978).
* Thu Mar 24 2011 ddissAATTsuse.de- Fix smbclient -M NT_STATUS_PIPE_BROKEN failure; (bso#7635); (bnc#681913).
* Fri Mar 18 2011 lmuelleAATTsuse.de- Replace jobs by _smp_mflags macro while calling make on post-11.4 systems.
* Thu Mar 17 2011 ddissAATTsuse.de- Don\'t crash when publishing a single printer; (bnc#643119).
* Wed Mar 09 2011 ddissAATTsuse.de- Carry error status in printer list IPC message, do not refresh printers if cups is unavailable; (bso#7994); (bnc#675478).
* Wed Mar 09 2011 lmuelleAATTsuse.de- Define the libwbclient packages ahead of packages with a different version.
* Wed Mar 09 2011 jengelhAATTmedozas.de- Use %_smp_mflags for parallel building.
* Mon Mar 07 2011 lmuelleAATTsuse.de- Update to 3.5.8. + Fix Winbind crash bug when no DC is available; (bso#7730). + Fix finding users on domain members; (bso#7743). + Fix memory leaks in Winbind; (bso#7879). + Fix printing with Windows 7 clients; (bso#7567). + Fix \'testparm\' return code when EOF in encountered in param name; (bso#3185). + Make \"rlimit_max below minimum Windows limit\" notification less scary; (bso#6837). + Fix \"Your Password expires today\" message for users of trusted domains; (bso#7066). + Fix maintaining of users\' groups via UsrMgr; (bso#7262). + Fix \'net ads dns register\' in Windows 2008 R2 domains; (bso#7356). + Raise debug level for \"reduce_name: couldn\'t get realpath\" messages; (bso#7409). + Fix updating the time on close in vfs_gpfs; (bso#7498). + Fix \"log=>ndr_pull_error\" in \'wbinfo -u\' and \'wbinfo -g\'; (bso#7594). + Handle Windows 9x adddriver calls without config file; (bso#7641). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix memory leak in the netapi routines; (bso#7665). + Store unmodified copies of security descriptors in acl_xattr and acl_tdb modules; (bso#7716). + Fix incorrect unix mode_t caused by invalid client DOS attributes on create; (bso#7733). + Apply appropriate create masks when creating files with \"inherit ACLs\" set to true; (bso#7734). + Fix \"dfree cache time\" parameter; (bso#7744). + Fix a getgrent crash with many groups; (bso#7774). + Fix requesting lookups for BUILTIN sids; (bso#7777). + Fix smbd crash caused by expand_msdfs; (bso#7779). + Fix atime limit; (bso#7785). + vfs_scannedonly: Switch from mtime to ctime which is more reliable; (bso#7789). + Fix copying files from a SMB share using Gnome vfs and SMB signing; (bso#7791). + Make Winbind recover from a signing error; (bso#7800). + ACL inheritance cannot be disabled in vfs_acl_xattr/vfs_acl_tdb; (bso#7812). + Fix \"force group\" with ntlmssp guest session setup; (bso#7817). + vfs_fill_sparse() doesn\'t use posix_fallocate when strict allocate is on; (bso#7835). + Make WINBINDD_LOOKUPRIDS asking the right domain; (bso#7841). + Make WINBINDD_LOOKUPRIDS returning the domain name; (bso#7842). + Expand the local SAMs aliases; (bso#7843). + ntlm_auth: Support clients which offer a spnego mechs we don\'t support; (bso#7855). + Fix \'net ads dns register\' in cluster setups; (bso#7871). + Fix \'nmbd --port\'; (bso#7875). + Make \'rpcclient deldriver\' delete drivers for all architectures; (bso#7880). + Fix flaky Winbind against Windows 2008; (bso#7881). + Fix SMB session setups with Kerberos against some closed source SMB servers; (bso#7883). + Fix stale lock in open_file_fchmod(); (bso#7892). + Fix sporadic Winbind panic in rpc query_user_list; (bso#7894). + Don\'t set SAMR_FIELD_FULL_NAME if we just want to set the account name; (bso#7896). + Don\'t return \"-1\" on success in \'net rpc vampire keytab\'; (bso#7899). + Fix connections from WinCE; (bso#7917). + Fix opening MS Powerpoint files; (bso#7940). + Fix endless loops caused by inotify; (bso#7942). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let Winbind try to use samlogon validation level 6; (bso#7945). + Revalidate the pathname once re-constructed from a root fsp; (bso#7950).
* Fri Mar 04 2011 lmuelleAATTsuse.de- Require a particular library version even if the major version is part of the package name. Using the same major version does not guarantee forward compatibility.
* Fri Mar 04 2011 ddissAATTsuse.de- Fix a fd-leak in libwbclient at dlclose-time; (bso#7684); (bnc#668773).
* Mon Feb 28 2011 lmuelleAATTsuse.de- Update to 3.5.7 + Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).
* Wed Feb 23 2011 lmuelleAATTsuse.de- Disable separate build of samba-doc for post-11.1 systems.
* Tue Feb 22 2011 lmuelleAATTsuse.de- Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).
* Thu Feb 17 2011 ddissAATTsuse.de- Increase the log level for missing PIDs on SIGCHLD, printcap child processes are not added to the children PID list; (bnc#666460).
* Thu Feb 10 2011 lmuelleAATTsuse.de- Do not require a particular library version if the major version is part of the package name.
* Wed Feb 09 2011 lmuelleAATTsuse.de- Use the actual version numbers of the ldb, talloc, tdb, and tevent libraries on post-11.3 systems.
* Sun Jan 23 2011 ddissAATTsuse.de- Abide by print$ share \'force user\' & \'force group\' settings when handling AddprinterDriver and DeletePrinterDriver requests; (bso#7921); (bnc#653353).
* Tue Jan 18 2011 ddissAATTsuse.de- Remove pcap_cache_loaded asserts from (re)load_printers. pcap_cache_loaded() returns false if the pcap cache contains no printer entries. correct call ordering is already enforced. (bso#7836); (bnc#625936).
* Fri Jan 14 2011 lmuelleAATTsuse.de- No longer force activation of the cifs service on post-11.3 systems.- Add X-UnitedLinux-Default-Enabled to the cifs init script on pre-11.4 systems.- Move the cifs init script nfs dependencies from Required to Should.
* Tue Jan 04 2011 lmuelleAATTsuse.de- Recommend to install samba-krb-printing from samba-winbind on post-10.3 systems; (bnc#661845).
* Thu Dec 30 2010 ddissAATTsuse.de- Fix error paths in cups_async_callback(), an empty cups printer list should not be treated as an error; (bnc#661842).
* Tue Dec 21 2010 ddissAATTsuse.de- Abide by printcap cache time, reload parent smbd pcap cache on expiry; (bso#7836); (bnc#625936).
* Fri Dec 17 2010 ddissAATTsuse.de- Fix race in cups async printer services reload; (bso#7836); (bnc#625936).
* Sun Dec 12 2010 roAATTsuse.de- Don\'t tweak with baselibs.conf during %post if not present; (bnc#652620).
* Thu Dec 09 2010 lmuelleAATTsuse.de- Don\'t make use of baselibs.conf on SUSE Linux Enterprise 10; (bnc#652620).
* Tue Dec 07 2010 lmuelleAATTsuse.de- Don\'t use --tmpdir as this option isn\'t known by mktemp of SUSE Linux Enterprise 10; (bnc#652620).
* Sun Dec 05 2010 larsAATTsamba.org- vfs_fill_sparse() doesn\'t use posix_fallocate when strict allocate is on; (bso#7835).
* Fri Dec 03 2010 lmuelleAATTsuse.de- Replace Requires samba-client by samba-gplv3-client in the gplv3 packages; (bnc#652620).
* Tue Nov 30 2010 ddissAATTsuse.de- Fix Dolphin SMB share IO with SMB signing enabled; (bso#7791); (bnc#656112).
* Tue Nov 30 2010 lmuelleAATTsuse.de- Add Conflicts to the samba-gplv3 main, client, doc, krb-printing, winbind, client-gplv2, and doc-gplv2 packages; (bnc#652620).
* Fri Nov 26 2010 lmuelleAATTsuse.de- Add Provides samba-client-gplv2 and samba-doc-gplv2 to pre-3.2 versions; (bnc#652620).
* Fri Nov 26 2010 lmuelleAATTsuse.de- Obsolete samba-client-gplv2 and samba-doc-gplv2; (bnc#652620).
* Thu Nov 25 2010 lmuelleAATTsuse.de- Remove Provides samba-client:/usr/sbin/winbindd from the samba-gplv3-winbind package to avoide an accidental install trigger; (bnc#652620).
* Thu Nov 25 2010 lmuelleAATTsuse.de- Add Provides samba-client to the samba-gplv3-client package; (bnc#652620).
* Wed Nov 24 2010 lmuelleAATTsuse.de- Remove all Obsoletes from the samba-gplv3 packages and only keep the Provides samba; (bnc#652620).
* Sat Nov 20 2010 lmuelleAATTsuse.de- Add fitting Conflicts to all samba-gplv3 packages; (bnc#652620).
* Fri Nov 19 2010 jmcdonoughAATTsuse.de- Reduce unnecessary ldap round trips and eliminate invalid DN messages; (bnc#654719).
* Fri Nov 12 2010 lmuelleAATTsuse.de- Exclude cifs-mount and ldapsmb from the samba-gplv3 build of SUSE Linux Enterprise 10 SP 3 and 4.
* Thu Nov 11 2010 lmuelleAATTsuse.de- Add the _build_arch at the end of the vendor version suffix.
* Thu Oct 28 2010 lmuelleAATTsuse.de- Provide and Obsolete samba-gplv3 to replace potentially installed packages.
* Fri Oct 15 2010 lmuelleAATTsuse.de- Change package base name to samba-gplv3 for SUSE Linux Enterprise 10 SP 4.- Do not package libsmbclient and libsmbsharemodes.
* Sun Oct 10 2010 jmcdonoughAATTsuse.de- Update to 3.5.6 + Fix auto printers with registry config; (bso#7280); (bnc#617153). + Fix SPNEGO auth when contacting Win7 system using Microsoft Live Sign-in Assistant; (bso#7577). + Fix \'net idmap restore\' setting HWM to avoid duplicates; (bso#7578). + Fix \"admin users\" when using vfs_acl_xattr; (bso#7581). + Fix using cached credentials in ntlm_auth; (bso#7589). + Fix Winbind offline login; (bso#7590). + Fix Winbind internal error; (bso#7636). + Fix mknod/mkfifo failing with \"No such file or directory\"; (bso#7651). + Fix smbd changing mode of files on rename; (bso#7693). + Fix crash bug with invalid SPNEGO token; (bso#7694). + Fix smbd panic on invalid NetBIOS session request; (bso#7698). + Fix smbd crash caused by \"%D\" in \"printer admin\"; (bso#7541). + Fix \'smbclient -M\'; (bso#7635). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix crash bug in rpcclient; (bso#7688). + Fix file corruption when setting Samba \"write wache wize\"; (bso#7715).
* Thu Oct 07 2010 lmuelleAATTsuse.de- Let startproc wait for nmb, smb and winbind pid files getting created on post-11.1 systems; (bnc#520036).
* Thu Oct 07 2010 hhetterAATTsuse.de- Include the reviewed french translation for pam_winbind; (bnc#499233).
* Thu Sep 23 2010 ddissAATTsuse.de- Fix smbd crash with CUPS printers and no [printers] share defined; (bso#7297); (bnc#637755).
* Mon Sep 20 2010 jmcdonoughAATTsuse.de- Fix printing from 64-bit windows clients; (bso#6888); (bnc#640870).
* Sun Sep 12 2010 cooloAATTnovell.com- Fix baselibs.conf for libtalloc.
* Wed Sep 08 2010 lmuelleAATTsuse.de- Fix buffer overflow in sid_parse() to correctly check the input lengths when reading a binary representation of a Windows Security ID (SID); CVE-2010-3069; (bso#7669); (bnc#637218).
* Mon Aug 30 2010 jmcdonoughAATTsuse.de- Use cached ntlm password in libsmbclient. Prevent lockouts when kerberos tickets are lost; (bnc#602418); (bnc#606304).
* Thu Aug 26 2010 gberAATTopensuse.org- Add a dependency on nfs to the smbfs/ cifs init scripts as they require the en_US locale and /usr might be on NFS.
* Mon Aug 23 2010 jmcdonoughAATTsuse.de- Complete fix for trusts with Windows 2008R2 DCs.
* Fri Aug 20 2010 jmcdonoughAATTsuse.de- Fix authentication dialogs when connecting to older systems; (bnc#632055).
* Thu Aug 19 2010 lmuelleAATTsuse.de- Adjust position of conditional ldapsmb %package and %files definition.
* Thu Aug 19 2010 lmuelleAATTsuse.de- Create the /var/run/samba directory on the fly and package it as %ghost.
* Thu Aug 19 2010 jmcdonoughAATTsuse.de- Fix preexec scripts; (bso#7104); (bnc#632852).
* Thu Aug 19 2010 lmuelleAATTsuse.de- Add missing netapi, smbclient, smbsharemodes, talloc, tevent, and wbclient pkgconfig files and BuildRequire pkgconfig; (bnc#632770).
* Tue Aug 17 2010 lmuelleAATTsuse.de- BuildRequire python-devel for post-9.3 systems.
* Tue Aug 17 2010 lmuelleAATTsuse.de- Only create precompiled headers for post-10.2 systems.- Remove mkinitrd scriptlets.
* Tue Aug 17 2010 lmuelleAATTsuse.de- Add vfs_crossrename man page.- Call make basic and remove conditional proto target.- Increase libtevent version to 0.9.9.- Remove wbc_async header from the file list.- Remove remaining cifs-mount pieces from the spec file.
* Mon Aug 16 2010 jmcdonoughAATTsuse.de- Fix printers not auto loading with registry config; (bso#7280); (bnc#617153).
* Sun Aug 15 2010 lmuelleAATTsuse.de- Update to 3.6.0pre1. + SMB2 support is fully functional despite managing quota using the Microsoft management tools. + Internal Winbind passdb changes to use samr and lsa rpc pipe to get local user and group information. + The spoolss and the old RAP printing code have been completely overhauled and refactored. + The SMB Traffic Analyzer (SMBTA) VFS module got added.
* Sun Aug 15 2010 lmuelleAATTsuse.de- Intilize workgroup of nmblookup as empty string.
* Thu Aug 12 2010 jmcdonoughAATTsuse.de- Fix net ads join when using parent domain users; (bso#6364); (bnc#630812).
* Wed Jul 28 2010 sjayaramanAATTsuse.de- cifs: do not restart during dhcp lease renewal when IPaddress remains the same; (bnc#573246).
* Mon Jul 05 2010 lmuelleAATTsuse.de- Fix \"Too many open files\" when trying to access large number of files; (bso#6837); (bnc#619787).
* Wed Jun 23 2010 lmuelleAATTsuse.de- Update to 3.5.4. + Fix smbd crash when sambaLMPassword and sambaNTPassword entries missing from ldap (bug #7448). + Fix init_sam_from_ldap storing group in sid2uid cache (bug #7507). + Allow previous password to be stored and use it to check tickets; (bso#7099). + Make ea data checks identical for trans2open and trans2mkdir; (bso#7188). + Fix editing users\' groups via UsrMgr; (bso#7262). + Fix Winbind over IPv6; (bso#7341). + Samba sends \"raw\" inode number as uniqueid with unix extensions; (bso#7410). + Fix printing large formats; (bso#7423). + Fix spnego returning incorrect mechListMIC string; (bso#7449). + Fix some crash bugs and missing error codes in AddDriver paths; (bso#7459). + Fix crash bug in _samr_QueryUserInfo{2} level 18; (bso#7479). + Fix \'not a string literal\' warning in netdomjoin-gui; (bso#7500). + Fix calculation of st_blocks in vfs_streams_xattr; (bso#7503). + Fix numerous build issues; (bso#7504). + Fix session setup from linux kernel cifs clients with \"sec=ntlmv2\"; (bso#7517).
* Mon Jun 21 2010 lmuelleAATTsuse.de- Remove all provides and obsoletes samba3 from the spec file. Packages with this base name have not been offered as part of a product.
* Fri Jun 11 2010 lmuelleAATTsuse.de- Fix a NULL pointer dereference in smbd of the 3.4 code base; CVE-2010-1635; (bso#7229); (bnc#605935).
* Tue Jun 08 2010 lmuelleAATTsuse.de- Address possible buffer overrun in chain_reply code of pre-3.4 versions; CVE-2010-2063; (bso#7494); (bnc#611927).
* Mon Jun 07 2010 hhetterAATTsuse.de- Update of the SMB Traffic Analyzer v2 VFS module
* Fri May 28 2010 jmcdonoughAATTsuse.de- Fix trusts with Windows 2008R2 DCs; (bnc#613459); (bnc#599873); (bnc#592198); (bso#6697).
* Wed May 19 2010 lmuelleAATTsuse.de- Update to 3.5.3. + Fix MS-DFS functionality; (bso#7339). + Fix a Winbind crash when scanning trusts; (bso#7389). + Fix problems with SIGCHLD handling in Winbind; (bso#7317). + Add replacement for IPV6_V6ONLY on linux systems with broken headers; (bso#7196). + Fix cups encryption setting; (bso#7263). + Fix exporting printers via \'cupsaddsmb\' command; (bso#7277). + Fix SMB job IDs in CUPS job names; (bso#7288). + Fix segfault in mount.cifs; (bso#7315). + Make TIME_T_MAX defines consistent; (bso#7352). + Re-fix a bug with smbd serving a windows terminal server; (bso#7357). + Display an error on \'net conf import\' failures; (bso#7378). + Fix bitmap leak in dptr_Close; (bso#7384). + Fix rename problems with full_audit VFS module; (bso#7398). + Fix setting of passwords via \'net rpc user password\' command; (bso#7417). + Fix \'net rpc printer list\' command; (bso#7418). + Rename mod_name to module_name; (bso#7421).- Fix unnecessary traversing winbindd_cache.tdb in SIGHUP handler.- Added EN ISO 216, A0 and A1 to builtin forms; (bso#7423).- Winbind not working over IPv6; (bso#7341).
* Tue May 18 2010 jmcdonoughAATTsuse.de- Honor \"interfaces\" list in net ad dns register; (bnc#606947).
* Tue May 18 2010 lmuelleAATTsuse.de- Exclude the RPM release from the vendor tag for openSUSE Factory; (bnc#604049).
* Thu Apr 29 2010 lmuelleAATTsuse.de- Enable the build of the idmap tdb2 module; (bnc#600822).
* Sun Apr 25 2010 larsAATTsamba.org- BuildRequire keyutils-libs-devel for Fedora and post-RHEL4.
* Sun Apr 25 2010 larsAATTsamba.org- BuildRequire pkg-config for post-10.2 systems and else pkgconfig.
* Wed Apr 21 2010 jmcdonoughAATTsuse.de- Add \"net conf import\" error messages; (bso#7378, bnc#598189).
* Wed Apr 21 2010 jsmeixAATTsuse.de- Define cups_lib_dir %{_prefix}/lib/cups for post-11.2 systems; (bnc#575544).
* Wed Apr 07 2010 lmuelleAATTsuse.de- Update to 3.5.2. + Fix smbd segfaults in _netr_SamLogon for clients sending null domain; (bso#7237). + Fix smbd segfaults in \"waiting for connections\" message; (bso#7251). + Fix an uninitialized variable read in smbd; (bso#7254); (bnc#605935); CVE-2010-1642. + Fix a memleak in Winbind; (bso#7278). + Fix Winbind reconnection to it\'s own domain; (bso#7295). + Fix segfault if hide files or veto files has no \".AppleDouble\"; (bso#1206). + Fix parsing of the gecos field; (bso#5198). + Fix several printing issues; (bso#6727). + Fix valgrind warning; (bso#6814). + Fix race condition in mount.cifs that allows user to replace mountpoint with a symlink; (bso#6853). + Fix bug in vfs_scannedonly rmdir implementation; (bso#7075). + Fix handling of bad server data returns in client rpc_transport; (bso#7159). + Never mark external domains as internal in Winbind; (bso#7170). + Fix access by multi-threaded applications; (bso#7202). + Fix \'net share\' command; (bso#7203). + Fix DN parsing name was always null; (bso#7204). + Signals are processed twice in child; (bso#7206). + Fix returning of group members with \'getent group\'; (bso#7212). + Fix the build of net_afs.c with --fake-kaserver=yes; (bso#7216). + Make Winbind logs more verbose for troubleshooting; (bso#7225). + Fix a NULL pointer dereference in smbd; CVE-2010-1635; (bso#7229); (bnc#605935). + Fix automatic building of vfs_tsmsm if gpfs and dmapi are present; (bso#7231). + Fix race conditions in CTDB persistent transactions; (bso#7232). + Symlink delete fails but incorrectly reports success to client; (bso#7234). + Fix \"printer admin\" functionality; (bso#7255). + Fix value-needed calculation in_spoolss_EnumPrinterData(); (bso#7256). + Fix _winreg_QueryValue crash bugs and implement Windows behavior; (bso#7258). + Fix job management commands for CUPS queues; (bso#7269). + Fix smbd segfault if using vfs_acl_tdb; (bso#7283). + Fix core dump in \'ntlm_auth\' with \"gss-spnego\" helper; (bso#7290). + Fix smbd crashes with CUPS printers and no [printers] share defined; (bso#7297). + Fix DOS attribute inconsistency with MS Office; (bso#7310). + Many disconnecting clients render clustered Samba unusuable for some time; (bso#7312). + Make \'net conf addshare\' atomic; (bso#7313). + Eliminate race condition in creating/scanning sorted subkeys in the registry backend; (bso#7314). + Winbind possibly segfaults when trying a trusted domain without inbound trust; (bso#7316).
* Tue Apr 06 2010 hhetterAATTsuse.de- Add SMB Traffic Analyzer v2 VFS module.
* Tue Mar 30 2010 lmuelleAATTsuse.de- Document \"wide links\" defaults to \"no\" in the smb.conf man page for versions pre-3.4.6; (bnc#577868).
* Fri Mar 26 2010 jmcdonoughAATTsuse.de- Fix workgroup enumeration, for client printer and file share selection; (bso#6880); (bnc#586215).
* Tue Mar 23 2010 jmcdonoughAATTsuse.de- Fix tdb validation for offline auth; (bnc#587014).
* Mon Mar 22 2010 lmuelleAATTsuse.de- Fix \"printer admin\" functionality; (bso#7255).
* Mon Mar 22 2010 lmuelleAATTsuse.de- An uninitialized variable read could cause an smbd crash; (bso#7254); (bnc#605935); CVE-2010-1642.
* Mon Mar 22 2010 lmuelleAATTsuse.de- Ensure to have a valid talloc stackframe; (bso#7251).
* Mon Mar 22 2010 lmuelleAATTsuse.de- _netr_SamLogon segfaults for clients sending NULL domain; (bso#7237).
* Thu Mar 18 2010 lmuelleAATTsuse.de- Merge missing pam_winbind message translations; (bnc#499233).
* Sun Mar 14 2010 lmuelleAATTsuse.de- Remove cifs-mount subpackage for post-11.2 systems as the tools are now part of the independent cifs-utils package.
* Thu Mar 11 2010 jmcdonoughAATTsuse.de- Fix join of Windows 2008 domains; (bnc#567013).
* Mon Mar 08 2010 lmuelleAATTsuse.de- Update to 3.5.1 and 3.4.7. + Fix security flaw on Linux platforms if built with libcap support allowing file system access even when permissions should have denied it; CVE-2010-0728; (bso#7222); (bnc#586683).
* Mon Mar 08 2010 rhaferAATTnovell.com- Fixed libldb.so link in libldb-devel.
* Fri Mar 05 2010 hhetterAATTnovell.com- Fix argc handling in net_share, making the command \"net share\" work again; (bso#7203); (bnc#584253).
* Mon Mar 01 2010 lmuelleAATTsuse.de- Update to 3.5.0. + Fix duplicate sam and unix accounts; (bso#7145). + Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160). + Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166). + Fix \'net ads dns\' usage calls; (bso#7181). + Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182).
* Wed Feb 24 2010 lmuelleAATTsuse.de- Update to 3.4.6. + Change parameter \"wide links\" to default to \"no\"; it\'s also incompatible with \"unix extensions\"; (bso#7104); (bnc#577868). + Fix printing with 64 bit clients (bso#6888). + Fix core dump on 64 bit Linux (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio) (bso#7067). + Fix string buffer overflow causing heap corruption in smbd (bso#7096). + Fix bogus ip address in SWAT; (bso#5885). + Fix vfs_full_audit; (bso#6557). + Use the first \"uid\" value; (bso#6157). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix crash bug in \'cifs.upcall\'; (bso#6868). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix DFS on AIX (maybe others); (bso#7052). + Fix pdb_search crash as non-root user; (bso#7068). + Fix unlocking of accounts from ldap; (bso#7072). + Fix vfs_expand_msdfs; (bso#7081). + Fix results of \'smbclient -L\' with a large browse list; (bso#7098). + Normalize \"Changing password for\" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Fix reading of large browselist; (bso#7122). + \"mangling method = hash\" can crash storing a name containing a \'.\'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when \"mangling method = hash\"; (bso#7155). + Fix listing of printjobs in Windows 7; (bso#7130). + Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136). + Make idmap cache persistent for \"ldapsam:trusted\". + Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not only the persistent idmap cache. + Shortcut uid_to_sid when \"ldapsam:trusted = yes\". + Make pdb_copy_sam_account also copy the group sid. + Shortcut gid_to_sid when \"ldapsam:trusted = yes\". + Speed up pdb_get_group_sid(). + Try to build the full unix_pw structure with ldapsam:trusted support. + Optimize ldapsam_alias_memberships() and cache ldap searches.
* Fri Feb 19 2010 lmuelleAATTsuse.de- Update to 3.5.0rc3. + Change parameter \"wide links\" to default to \"no\"; it\'s also incompatible with \"unix extensions\"; (bso#7104); (bnc#577868). + Fix vfs_full_audit; (bso#6557). + Fix crash bug in \'cifs.upcall\'; (bso#6868). + Fix duplicate initializer in the rmdir module; (bso#6876). + Fix printing with 64 bit clients; (bso#6888). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix core dump on Ubuntu 8.04 64 bit; (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio); (bso#7067). + Fix \'smbget\' error status; (bso#7069). + Fix build of \'smbfilter\'; (bso#7071). + Fix unlocking of accounts from ldap; (bso#7072). + Cliconnect gets realm wrong with trusted domains; (bso#7079). + Fix vfs_expand_msdfs; (bso#7081). + Fix storing of create time on directories in an EA in new create time code; (bso#7084). + Fix an early release of the global lock that can cause data corruption in libtdb; (bso#7085). + Fix string buffer overflow causing heap corruption in smbd; (bso#7096). + Fix results of \'smbclient -L\' with a large browse list; (bso#7098). + Normalize \"Changing password for\" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Add pdb_ldap performance fixes; (bso#7116). + Change ldap filter to what really was intended; (bso#7116). + Add new \"nmbd bind explicit broadcast\" parameter; (bso#7118). + Fix nmbd problems with socket address; (bso#7118). + Support large browselist; (bso#7119). + Fix reading of large browselist; (bso#7122). + Fix listing of printjobs in Windows 7; (bso#7130). + Owner of file not available with Kerberos; (bso#7139). + Fix IPv4/IPv6 problems; (bso#7140). + Fix get_acl_blob in the acl_tdb VFS module; (bso#7148). + \"mangling method = hash\" can crash storing a name containing a \'.\'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when \"mangling method = hash\"; (bso#7155). + Fix some wrong newlines in de translation strings.
* Tue Feb 09 2010 lmuelleAATTsuse.de- Take extra care that a mount point of mount.cifs isn\'t changed during mount and don\'t allow it to be run as setuid root program; CVE-2010-0787; (bso#6853); (bnc#550002).
* Tue Feb 09 2010 lmuelleAATTsuse.de- Check in mount.cifs for invalid characters in device name and mountpoint; CVE-2010-0547; (brc#562156); (bnc#577925).
* Tue Feb 09 2010 boyangAATTsuse.de- Don\'t invalidate cache for uninitialized domains; (bnc#538923).
* Tue Feb 09 2010 boyangAATTsuse.de- Signals are processed twice in child; (bnc#538923).
* Mon Feb 08 2010 jmcdonoughAATTsuse.de- Allow forced pw change even with min pw age; (bnc#561894).
* Mon Feb 08 2010 lmuelleAATTsuse.de- Change parameter \"wide links\" to default to \"no\"; it\'s also incompatible with \"unix extensions\"; CVE-2010-0926; (bso#7104); (bnc#577868).
* Sun Feb 07 2010 boyangAATTsuse.de- Fix enumerate domain local groups for primary domain; (bnc#573813).
* Sun Feb 07 2010 boyangAATTsuse.de- Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106).
* Fri Feb 05 2010 lmuelleAATTsuse.de- Normalize \"Changing password for\" msg IDs and STRs; (bnc#499233).
* Thu Feb 04 2010 rhaferAATTnovell.com- Build libtevent and libldb and put them into separate subpackages.
* Tue Jan 26 2010 lmuelleAATTsuse.de- Update to 3.5.0rc2. + The Using Samba HTML book has been removed. + \'net\', \'smbclient\' and libsmbclient can use logon credentials cached by Winbind; (bso#7062). + New vfs_scannedonly module has been added; (bso#7028). + Check password history before increasing \"badPasswordCount\"; (bso#4347). + Fix changing of ACLs on writable file with \"dos filemode=yes\"; (bso#5202). + Restore Samba 3.0.x behavior and use the first \"uid\" value in pdb_ldap; (bso#6157). + Fix deletion of an object whose parent folder does not have delete rights fails even if the delete right is set on the object in vfs_acl_xattr and vfs_acl_tdb; (bso#6876). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027). + Disable sanity check in NetShareEnum for better compatibility with Windows; (bso#7029). + Fix SMBrmdir error message when deleting a directory fails; (bso#7033). + Fix segfault in vfs_cap; (bso#7034). + Fix \'net rpc getsid\' in hardened Windows environments; (bso#7036). + Fix a Winbind segfault in \"trusted_domains\"; (bso#7037). + Complete and improve some German translation of \'net\'; (bso#7039). + Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039). + Fix crash bug in libsmbclient; (bso#7043). + Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045). + Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046). + Lock down some srvsvc calls according to what w2k3 seems to do.
* Tue Jan 19 2010 lmuelleAATTsuse.de- Update to 3.4.5. + Fix memory leak in smbd (bug #7020). + Fix changing of ACLs on writable files with \"dos filemode=yes\" (bug #5202). + BUG 6642: Fix opening the quota magic file. + BUG 6919: Fix remote quota management. + BUG 7034: Fix internal error caused by vfs_cap. + BUG 7036: Fix \'net rpc getsid\' in hardened Windows environments. + BUG 7043: Fix crash bug in \"SMBC_parse_path\". + BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls. + BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS server.
* Tue Jan 12 2010 lmuelleAATTsuse.de- Free unused memory after a packet got processed; (bso#7020).
* Fri Jan 08 2010 boyangAATTsuse.de- Add timeout to rpc call to prevent infinite loop when network is down; (bnc#538923).
* Thu Jan 07 2010 lmuelleAATTsuse.de- Update to 3.5.0rc1. + BUG 6837: Fix \"Too many open files\" when trying to access large number of files with Windows 7; (bnc#619787). + BUG 6939: Fix long filenames when \"mangling method\" is set to \"hash\". + BUG 6991: Create symbol links to shared libraries. + BUG 6992: make test for getgrouplist cacheable. + BUG 7014: Fix Winbind crash when retrieving empty group members. + BUG 7020: Fix smbd using 2G memory. + Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned attributes by protocol level. + Vector correctly through reply_openerror() (which uses the same logic). + Fix bugs with the full Windows ACL support. + Add a few missing gettext calls to the \'net\' command. + Fix up a share type translation and translate some more strings in \'net\'. + Allow to call \"pdbedit -N description -u user\" without specifiyng \"-r\". + Add spoolss_DriverInfo7. + Fix rpcclient after setprinter IDL fixes. + Use generated krb5.conf in \'net ads testjoin\'. + Add some German translations for the \'net\' command. + Update mount.cifs man page with nounix option. + Fix _samr_GetAliasMembership for results with 0 rids. + Fix an error case in cli_negprot. + Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc. + Restore correct timeouts for SMB requests. + Fix a 64-bit error in libsmb. + Replace IS_DOMAIN_OFFLINE by a function in Winbind. + Simplify/cleanup Winbind code. + Fix write behind memory block in libtalloc. + Fix result check for getaddrinfo(). + Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr() to tsocket. + Always set tdb->tracefd to -1 to be safe on goto fail in libtdb. + Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior. + Fix standalone \'make installdocs\'. + Output %p as unsigned in snprintf replacement. + New attempt at TDB transaction nesting allow/disallow. + Remove swig stuff from libtdb. + Reset tdb->fd to -1 in tdb_close() in libtdb. + Change the way mksysms work in libtalloc. + Also build and install tdb manpages from standalone tdb. + Fix infinite loop in NCACN_IP_TCP as there is no timeout. + Make winbindd_cache.c aware of domain offline to avoid unnecessary backend query. + List trusted domains from wcache when domain is offline.
* Thu Jan 07 2010 lmuelleAATTsuse.de- Update to 3.4.4. + Fix interdomain trust relationships with Win2008R2 (bug #6697). + Fix Winbind crashes when queried from nss (bug #6889). + Fix Winbind crash when retrieving empty group members (bug #7014). + Fix \"UID range full\" error in Winbind (bug #6901). + Fix multiple LDAP servers in \"idmap backend\" and \"idmap alloc backend\" (bug #6910). + BUG 4832: Fix iconv checks. + BUG 6338: Do not always display \"none\" in \'net rpc trustdom list\'. + BUG 6851: Add pdbedit --kickoff-time/-K to set the user\'s kickoff time. + BUG 6828: Fix infinite timeout when byte lock held outside of samba. + BUG 6837: Fix \"Too many open files\" message when trying to access a large number of files with Windows 7; (bnc#619787). + BUG 6841: Fix \"map acl inherit = yes\". + BUG 6850: Fix shadow copy display on Windows 7. + BUG 6867: Fix listing of directories with a lot of files. + BUG 6868: Support building with Heimdal we well as with MIT. + BUG 6875: Fix DOS attributes on OS/2 clients. + BUG 6880: Fix listing of workgroup servers in libsmbclient. + BUG 6898: Samba duplicates file content on appending. + BUG 6918: Fix krb5 build problem on Ubuntu karmic. + BUG 6929: Fix build with recent heimdal. + BUG 6939: Fix long filenames with \"mangling method = hash\". + BUG 6967: Fix \'net ads join\' with OU. + BUG 6981: Fix paged search with DirX LDAP server. + BUG 6982: Remove erroneous out of memory error path in lookup_sid. + BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids. + BUG 7005: Fix \"mangle method = hash\" truncates files with dot \".\" character. + Fix the build of the winbind krb5 locator plugin. + Fix enumprinter key client and server.
* Wed Jan 06 2010 lmuelleAATTsuse.de- Readjust the _libdir/cups/backend/smb sym link only on uninstall of the samba-krb-printing package; (bnc#568603).
* Fri Jan 01 2010 larsAATTsamba.org- Add BuildRequires to fam-devel; (bnc#564260).
* Wed Dec 30 2009 jmcdonoughAATTsuse.de- Prevent winbind crash; (bso#7014); (bnc#566119).
* Mon Dec 21 2009 sjayaramanAATTsuse.de- Fix processing of open modes in POSIX open; (bnc#530683).
* Thu Dec 17 2009 jengelhAATTmedozas.de- Add baselibs.conf as a source.
* Tue Dec 15 2009 lmuelleAATTsuse.de- Update to 3.5.0pre2. + BUG 2350: Add LDAP Alias Dereferencing support. + BUG 6288: SWAT adds a second share when changing parameters of an existing share. + BUG 6435: Fix minor memory corruption. + BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was set while configure. + BUG 6802: A created folder does not properly inherit permissions from parent in vfs_acl_xattr. + BUG 6837: \"Too many open files\" when trying to access large number of files from Windows 7; (bnc#619787). + BUG 6860: Fix shared library build on QNX. + BUG 6879: Fix crash in Winbind. + BUG 6929: Fix build with recent heimdal. + BUG 6938 : No hook exists to check creation rights when using acl_xattr module. + BUG 6967: Prevent glibc error on \'net ads join\'. + Fix vfs_acl_xattr which was failing to call the NEXT connect function. + Restructure the ACL code. + Refactor reply_rmdir to use handle based code. + Fix the build when no external talloc and tdb are installed. + Fix detection of CTDB headers on systems without system-libtalloc. + Fix several printing issues. + Fix the build on Mac OS X 10.6.2. + Fix net and rpcclient after setprinterdataex changes. + Add full support for level 8 printer drivers. + Add more spoolss architectures to IDL. + Fix enumprinter key client and server. + Fix crash in EnumPrinterDataEx. + Prefer posix_fallocate for doing \"strict allocate\". + Restore \"fake directory create times\" as a share parameter. + Fix explicit stat64 support. + Add support for NetWkstaGetInfo 101 and 102. + Add rpcclient wkssvc_enumerateusers. + De-deprecate \"write cache size\" to prevent its removal without a proper alternative. + Allow more than 1000 users in BUILTIN\\Users. + Complete support for NetWkstaGetInfo/NetWkstaEnumUsers. + Fix the build of the example VFS modules. + Fix crash in free_file_list(). + Give the user a chance to change password when password will expire soon.
* Wed Dec 09 2009 lmuelleAATTsuse.de- Store the smbfs service state if enabled and restore it for cifs while upgrade on post-11.2 systems.
* Wed Dec 09 2009 lmuelleAATTsuse.de- Prevent cifstab from being overwritten while upgrade on post-11.2 systems.
* Wed Dec 09 2009 boyangAATTsuse.de- Give the user a chance to change password when password will expire soon; (FATE#302414).
* Tue Dec 08 2009 lmuelleAATTsuse.de- Rename smbfs init script to cifs for post-11.2 systems.
* Tue Dec 08 2009 jmcdonoughAATTsuse.de- Allow Windows 7 to connection to samba domain controllers and member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680).
* Fri Dec 04 2009 jmcdonoughAATTsuse.de- Error on joining windows domain (invalid pointer); (bso#6967); (bnc#553622).
* Thu Dec 03 2009 lmuelleAATTsuse.de- Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165).- Simplify the winbind package %pre script and suppress stdout only.
* Thu Nov 26 2009 lmuelleAATTsuse.de- Update to 3.5.0pre1 + Add support for full Windows timestamp resolution. + Experimental implementation of SMB2. + Add encryption support for connections to a CUPS server. + Major windbind asynchronous refactoring.- Remove using_samba from the doc package.- Increase major version of libtalloc to 2.
* Thu Nov 19 2009 boyangAATTsuse.de- Fix kerberos refresh chain; (bnc#546162); (bso#6872).
* Fri Nov 06 2009 lmuelleAATTsuse.de- Hardlink duplicate files on post-11.1 systems.
* Fri Nov 06 2009 lmuelleAATTsuse.de- Add BuildArch noarch to samba-doc on post-11.1 systems.
* Tue Nov 03 2009 boyangAATTsuse.de- Use full 16byte session key in make_user_info_netlogon_interactive(); (bnc#551811).
* Thu Oct 29 2009 lmuelleAATTsuse.de- Update to 3.4.3. + Fix trust relationships to windows 2008 (2008 r2) (bug #6711). + Fix file corruption using smbclient with NT4 server (bug #6606). + Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680). + BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a symbolic link. + BUG 6529: Offline files conflict with Vista and Office 2003. + BUG 6532: Fix domain enumeration if master browser has space in name. + BUG 6606: Fix file corruption using smbclient with NT4 server. + BUG 6690: Fix wrong error check in profile. + BUG 6703: Allow smbstatus as non-root. + BUG 6704: Fix syntax error in avahi configure test. + BUG 6707: Fix an occasional segfault in config file parsing. + BUG 6710: Adjust regex to match variable names including underscores. + BUG 6711: Fix trust relationships to windows 2008 (2008 r2). + BUG 6726: SIVAL should have been an SVAL. + BUG 6728: BSD needs sys/sysctl.h included to build properly. + BUG 6731: Fix reading beyond the end of a named stream in xattr_streams. + BUG 6735: Don\'t overwrite password in pam_winbind, subsequent pam modules might use the old password and new password. + BUG 6764: Fix timeval calculation. + BUG 6765: Add a \"hidden\" parameter \"share:fake_fscaps\". + BUG 6769: Fix symlink unlink. + BUG 6772: Allow outstanding_aio_calls to be decremented. + BUG 6774: smbd crashes if \"aio write behind\" is set. + BUG 6776: Fix core dump caused by running overlapping Byte Lock test. + BUG 6781: Fix renaming subfolders in Explorer view. + BUG 6791: Fix linking order in cifs.upcall. + BUG 6793: Fix Winbind crash with \"INTERNAL ERROR: Signal 6\". + BUG 6793: Fix segfault in winbindd_pam_auth. + BUG 6796: Deleting an event context on shutdown can cause smbd to crash. + BUG 6797: Fix a memleak in libwbclient. + BUG 6804: Fix hpux compiler issue. + BUG 6805: Correctly handle aio_error() and errno. + BUG 6807: Fix a segfault in \"net rpc trustdom list\" for long domain names. + BUG 6810: Add support for finding alternate credcaches to cifs.upcall. + BUG 6811: Fix reference to freed memory in pam_winbind. + BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure. + BUG 6824: Fix avahi activation. + BUG 6826: Don\'t fail authentication when one or some group of require-membership-of is invalid. + BUG 6828: Fix infinite timeout when byte lock held outside of Samba. + BUG 6829: Fix displaying of multibyte characters in smbclient. + BUG 6840: Fix crash in pam_winbind. + Fix an uninitialized variable. + Only ever handle one event after a select call. + Conditional install of the cifs.upcall man page. + Fix warning occuring when building the manpages.
* Fri Oct 23 2009 lmuelleAATTsuse.de- Let smbclient show special characters properly; (bso#6829); (bnc#544204).
* Fri Oct 23 2009 boyangAATTsuse.de- Don\'t fail authentication when one or some group of require-membership-of is invalid; (bnc#525123); (bso#6826).
* Fri Oct 16 2009 jmcdonoughAATTsuse.de- Allow winbind to ignore certain domains; (bnc#539506).
* Thu Oct 08 2009 lmuelleAATTsuse.de- Update to 3.4.2. + Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517). + Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115). + Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).
* Wed Sep 30 2009 jmcdonoughAATTsuse.de- Fix potential denial of service; CVE-2009-2906; (bnc#543115).
* Fri Sep 25 2009 jmcdonoughAATTsuse.de- Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).
* Wed Sep 23 2009 jmcdonoughAATTsuse.de- Fix unresolved home path; CVE-2009-2813; (bnc#539517).
* Mon Sep 21 2009 boyangAATTsuse.de- Don\'t overwrite password in pam_winbind; (bnc#515444).
* Mon Sep 14 2009 chrisAATTcomputersalat.de- mods for winbind (when used with squid - ntlm_auth) o winbind adds group \'winbind\' o permission 0750,root,winbind LOCKDIR/winbindd_privileged
* Thu Sep 10 2009 lmuelleAATTsuse.de- Merge two fixes from 3.2.8 and 3.3.1. + Adjust regex to match variable names including underscores. + Conditional install of the cifs.upcall man page.
* Wed Sep 09 2009 lmuelleAATTsuse.de- Remove supplements from baselibs.conf while %clean for pre-11.1 systems; (bnc#520579).
* Wed Sep 09 2009 lmuelleAATTsuse.de- Update to 3.4.1. + Fix authentication on member servers without Winbind (bug #6650). + Nautilus fails to copy files from an SMB share (bug #6649). + Fix connections of Win98 clients (bug #6551). + Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697). + Fix Winbind authentication issue (bug #6646). + BUG 5879: Update LDAP schema for Netscape DS 5. + BUG 5886: Fix password change propagation with ldapsam. + BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe. + BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab. + BUG 6437: Make open_udp_socket() IPv6 clean. + BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient. + BUG 6506: Smbd server doesn\'t set EAs when a file is overwritten in NT_TRANSACT_CREATE. + BUG 6532: Fix the build with external talloc. + BUG 6538: Cancel all locks that are made before the first failure. + BUG 6560: Fix lookupname. + BUG 6564: SetPrinter fails (panics) as non root. + BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation. + BUG 6585: Fix unqualified \"net join\". + BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo. + BUG 6601: Avoid global fd limits. + BUG 6607: Fix crash bug in spoolss_addprinterex_level_2. + BUG 6611: Fix a valgrind error in chain_reply. + BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient. + BUG 6627: Raise the timeout for lsa_Lookup
*() calls from 10 to 35 seconds. + BUG 6650: Fix authentication on member servers without Winbind. + BUG 6651: Fix smbd SIGSEGV when breaking oplocks. + BUG 6655: Fix \'smbcontrol smbd ping\'. + BUG 6620: Fix a bug in renames of directories. + BUG 6664: Fix truncation of the session key. + BUG 6673: Fix \'smbpasswd\' with \"unix password sync = yes\". + BUG 6680: Fix authentication failure from Windows 7 when domain joined. + BUG 6688: Fix crash in \'net usershare list\'. + BUG 6693: Check we read off the complete event from inotify. + BUG 6700: Use dns domain name when needing to guess server principal.
* Thu Aug 13 2009 boyangAATTsuse.de- Update to 3.2.14. + Fix SAMR access checks (e.g. bugs #6089 and #6112). + Fix \'force user\' (bug #6291). + Improve Win7 support (bug #6099). + Fix posix ACLs when setting an ACL without explicit ACE for the owner (bug #2346). + BUG 6387: Fix Winbind crash when multiple IDmappings exist in the LDAP directory. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6089: Fix SAMR access checks. + BUG 6112: Fix SAMR access checks. + BUG 6279: Fix Winbind crash. + BUG 6291: Fix \'force user\'. + BUG 6099: Try to fix domain join of Win7 Beta. + BUG 6386: Groupdb mapping fix. + BUG 6421: Fix POSIX read-only open on read-only shares. + BUG 6476: Fix more smbd-zombies in memory. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + BUG 6504: Fix SAMR server for Winbind access. + BUG 6520: Fix time stamps. + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6340: Don\'t segfault when cleartext trustdom pwd could not be retrieved. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6465: Fix enum_aliasmem in ldb branch. + BUG 6484: Fix searching for users while adding them to groups via Windows usermanager. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 6526: Let parent_dirname() correctly return toplevel filenames. + BUG 6627: Raise the timeout for lsa_Lookup
*() calls from 10 to 35 seconds. + BUG 5798: Preserve CFLAGS info in configure. + BUG 6382: Case insensitive access to DFS links broken. + BUG 6481: Don\'t require \"Modify property\" perms to unjoin. + BUG 6628: \'smbpasswd -a\' uses algorithmic rid base with \'passdb backend = tdbsam\'. + BUG 6560: Lookupname failed, cannot find domain when attempt to change password. + Prevent creation of keys containing the \'/\' character. + Fix join of Windows 7 RC to a Samba3 DC. + Fix bug in processing of open modes in POSIX open. + Fix the negotiate flags. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a crash bug if we timeout in net rpc trustdom list. + Add \'--request-timeout\' option to \'net\'. + Fix a race condition in Winbind leading to a panic. + Add workaround for MS KB932762. + 5945: Fix out of memory error with Winbind idmap. + Avoid duplicate ACEs. + Fix profile ACLs in some corner cases. + Zero an uninitialized array.
* Wed Aug 12 2009 boyangAATTsuse.de- Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271); (bso#6615).
* Mon Aug 10 2009 boyangAATTsuse.de- check in .po files for pam_winbind; (bnc#499233); (bso#6602).
* Thu Aug 06 2009 hhetterAATTsuse.de- Add ntp and network-remotefs as Should-Start dependency to the winbind init script; (bnc#515629).
* Thu Aug 06 2009 lmuelleAATTsuse.de- Update to 3.0.36. + Fix Winbind crash on \'getent group\' (bug #5906). + Excel save operation corrupts file ACLs (bug #4308). + Prevent segmentation fault on joining a very long domain name. + BUG 4308: Excel save operation corrupts file ACLs. + BUG 4370: Clean-up entries in /etc/mtab after unmount. + BUG 4640: Fix guest mounts in mount-cifs. + BUG 5906: Fix Winbind crash on \'getent group\'. + BUG 6066: netinet/ip.h present but cannot be compiled on Solaris. + BUG 6099: In order to allow Win7 to connect to a Samba NT style. + BUG 6279: Fix Winbind crash. PDC we set the flags before we know if it\'s an error or not. + BUG 6085: Fix build of vfs_default. + BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work correctly. + Fix logic error in try_chown. + Correctly use chroot(). + Fix bug in processing of open modes in POSIX open. + Don\'t install the cifs.upcall binary twice. + Fix mount.cifs handling of -V option. + Prevent segmentation fault on joining a very long domain name. + Don\'t try and delete a default ACL from a file. + Add workaround for MS KB932762. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Fix a crash during name resolution when log level >= 10 and libc segfaults if printf is passed NULL for a \"%s\" arg.
* Sat Aug 01 2009 lmuelleAATTsuse.de- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.
* Mon Jul 27 2009 boyangAATTsuse.de- lookupname failed, cannot find domain when attempt to change password; (bnc#520645); (bso#6560).
* Thu Jul 16 2009 lmuelleAATTsuse.de- Don\'t link with --as-needed flag on post-11.1 systems.
* Tue Jul 14 2009 lmuelleAATTsuse.de- Stop the smbfs service if an interface goes down; (bnc#517768).
* Wed Jul 08 2009 lmuelleAATTsuse.de- Disable build of static libraries on post-11.1 systems; (bnc#509945).
* Wed Jul 08 2009 jmcdonoughAATTsuse.de- Fix missing zlibs for cifs.upcall and test_shlibs.
* Fri Jul 03 2009 lmuelleAATTsuse.de- Update to 3.4.0. + BUG 6431: Local groups from 3.0 setups no longer found. + BUG 6459: Fix build of pam_smbpass on some distributions. + BUG 6481: \'net ads leave\' needs to try account deletion, NetUnjoinDomain not. + BUG 6497: Fix calling of \'test\' in configure. + BUG 6498: Add workaround for MS KB932762. + BUG 6499: Fix building of pam_smbpass. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6512: Fix support for enumerating user forms. + BUG 6514: Improve error message in \'net\' when smb.conf is not available. + BUG 6520: Fix time stamps when \"unix extensions = yes\". + BUG 6521: Fix building tevent_ntstatus without config.h. + BUG 6526: Fix notifies in the share root directory. + BUG 6531: Fix pid file name.
* Thu Jul 02 2009 lmuelleAATTsuse.de- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.
* Tue Jun 30 2009 jmcdonoughAATTsuse.de- Fix net ads leave; (bnc#511695).
* Thu Jun 25 2009 sbrabecAATTsuse.cz- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).- Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).
* Wed Jun 24 2009 lmuelleAATTsuse.de- Update to 3.2.13, 3.3.6. + In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with file names treat user input as a format string to asprintf. With a maliciously crafted file name smbclient can be made to execute code triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).
* Wed Jun 24 2009 lmuelleAATTsuse.de- Update to 3.0.35. + In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a data value can potentially affect access control when \"dos filemode\" is set to \"yes\"; CVE-2009-1888; (bnc#515479).
* Tue Jun 23 2009 jmcdonoughAATTsuse.de- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).
* Fri Jun 19 2009 lmuelleAATTsuse.de- Update to 3.4.0rc1. + BUG 4699: Remove pidfile on clean shutdown. + BUG 5456: Fix \"net ads testjoin\". + BUG 6081: Make it possible to change machine account sids. + BUG 6253: Use correct value for password expiry calculation in pam_winbind. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6305: Correctly prompt for a password when a username was given. + BUG 6328: Add support for multiple rights to \"net sam rights grant/revoke\". + BUG 6333: Consolidate create/delete account paths in pdbedit. + BUG 6449: \'net rap user add\' crashes without -C option. + BUG 6451: net/libnetapi user rename using wrong access bits. + BUG 6458: Fix uninitialized variable in local_password_change(). + BUG 6465: Fix enumeration of empty aliases. + BUG 6476: Fix smbd-zombies in memory when using [x]inetd. + BUG 6487: Add missing DFS call in trans2 mkdir call. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + Improve pam_winbind documentation.- Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.
* Thu Jun 18 2009 boyangAATTsuse.de- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user input as a format string to asprintf; CVE-2009-1886; (bnc#513360).
* Wed Jun 17 2009 boyangAATTsuse.de- Fix a bad memleak in vfs_full_audit; (bnc#510035).
* Tue Jun 16 2009 lmuelleAATTsuse.de- Update to 3.3.5. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix joining of Win7 into Samba domain (bug #6099). + Fix joining of Win2000 SP4 clients (bug #6301). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5853: Add keyutils-devel to build requires to fix build on RHEL. + BUG 5897: Fix shutdown script example in the smb.conf manpage. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6157: Fix handling of multi-value attribute \"uid\". + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6301: Fix joining of Win2000 SP4 clients. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix \'net groupmap set\' segfault. + BUG 6361: Make --rcfile work in smbget. + BUG 6365: Re-Add the \"dropbox\" functionality with -wx rights on a directory. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6415: Filter out of range mappings in default idmap config in idmap_tdb. + BUG 6416: Filter out of range mappings in default idmap config in idmap_tdb2. + BUG 6417: Filter out of range mappings in default idmap config in idmap_ldap. + BUG 6441: Fix the compile with --enable-dnssd. + BUG 6449: \'net rap user add\' crashes without -C option. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent infinite include nesting. + Mark registry shares without path unavailable. + Also handle DirX return codes. + Fix Coverity ID 897. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix a race condition in winbind leading to a panic. + Some man pam_winbind improvements. + Zero an uninitialized array.
* Tue Jun 16 2009 lmuelleAATTsuse.de- Update to 3.2.12. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix \"force user\" (bug #6291). + Fix Winbind crash (bug #6279). + Fix joining of Win7 into Samba domain (bug #6099). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5798: CFLAGS info lost in configure. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5835: Add keyutils-devel to build requires. + BUG 5945: Fix out of memory error with Winbind idmap. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6279: Fix Winbind crash. + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6291: Fix \"force user\". + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6386: Groupdb mapping fix. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent creation of keys containing the \'/\' character. + Fix bug in processing of open modes in POSIX open. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a race condition in winbind leading to a panic. + Fix a crash bug if we timeout in net rpc trustdom list. + Fix profile acls in some corner cases.
* Fri Jun 12 2009 lmuelleAATTsuse.de- Default with passdb backend to smbpasswd for SUSE products older than 11.2.
* Fri Jun 12 2009 lmuelleAATTsuse.de- Explicitly use \'tdbsam\' as passdb backend in the default smb.conf file.
* Mon Jun 08 2009 lmuelleAATTsuse.de- Update to 3.4.0pre2. + The default passdb backend has been changed to \'tdbsam\'! + Samba4 and Samba3 sources are included in the tarball. + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Made parameter syntax of the net command more consistent. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 4271: testparm should not print includes. + BUG 4831: Don\'t call openlog() or closelog() from pam_smbpass. + BUG 5681: Do not limit the number of network interfaces. + BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo access checks. + BUG 6099: Fix NETLOGON credential chain. + BUG 6136: New AFS syscall conventions. + BUG 6157: Fix handling of multi-value attribute \"uid\". + BUG 6253: Use correct value for password expiry calculation. + BUG 6291: Fix \'force user\'. + BUG 6292: Update config.guess from gnu.org. + BUG 6302: Give the VFS a chance to read from 0-byte files. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on malloced memory. + BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix segfault in \'net groupmap set\'. + BUG 6340: Don\'t segfault when cleartext trustdom pwd could not be retrieved. + BUG 6357: Use Samba default command line arguments in \'net\'. + BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4 and IPv6 addresses + BUG 6361: Make --rcfile work in smbget. + BUG 6371: Unsuccessful \'net conf setparm\' leaves empty share. + BUG 6372: usermanager only displaying 1024 groups and aliases. + BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids. + BUG 6415: Filter out of range mappings in default idmap config (idmap_tdb). + BUG 6416: Filter out of range mappings in default idmap config (idmap_tdb2). + BUG 6417: Filter out of range mappings in default idmap config (idmap_ldap). + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add \'net eventlog\'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add \'net rpc service\' subcommands \'create\' and \'delete\'. + Fix the core of the SAMR access functions. + Fix SAMR server for winbindd access. + Add dbwrap_tool - a tdb tool that is CTDB-aware. + Hide \"config backend\" from swat. + Fix linking with --disable-shared-libs. + Fix issue with missing entries when enumerating directories. + Map NULL domains to our global sam name. + Fix driver upload for Xerox 4110 PS printer driver. + Add \"net dom renamecomputer\" to rename machines in a domain. + Inspect the correct computername string before enabling/disabling the change button in netdomjoin-gui. + Fix join prompt dialog test in netdomjoin-gui. + Only gray out labels when not root and not connecting to remote machines (netdomjoin-gui). + Allow to switch between workgroups/domains with the same name (netdomjoin-gui). + Add NetShutdownInit and NetShutdownAbort. + Fix samr access checks. + Add a security model to LSA. + Also handle DirX return codes. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix Coverity ID 897. + Fix a race condition in vfs_aio_fork with gpfs share modes. + Fix bug disclosed by lock8 torture test. + Fix a race condition in winbind leading to a panic. + Detect tight loop in tdb_find(). + Fix chained sesssetupAndX/tconn messages. + Fix strict locking with chained reads. + Fix two bugs in sendfile. + Fix memory leak. + Fix file descriptor leak. + Fallback to the legacy sid_to_(uid|gid) instead of returning NULL. + Always allocate memory in dptr_ReadDirName. + Fix \'net\' crash during domain join. + Zero an uninitialized array. + Allow child processes to exit gracefully if we are out of fds.
* Thu Jun 04 2009 sjayaramanAATTsuse.de- Enable cifs.upcall on versions newer than SUSE 10.0.
* Thu Jun 04 2009 sjayaramanAATTsuse.de- Add BuildRequires to keyutils-devel.
* Thu Jun 04 2009 sjayaramanAATTsuse.de- Remove redundant Requires to keyutils-libs for cifs-mount.
* Wed May 27 2009 jmcdonoughAATTsuse.de- Detect tight loop in tdb_find(); (bnc#450974).
* Mon May 18 2009 jmcdonoughAATTsuse.de- Fix lp printing with kerberos; (bnc#476913).
* Sat May 09 2009 lmuelleAATTsuse.de- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all other build targets.
* Thu Apr 30 2009 lmuelleAATTsuse.de- Update to 3.4.0pre1. + Samba4 and Samba3 sources are included in the tarball + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add \'net eventlog\'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add \'net rpc service\' subcommands \'create\' and \'delete\'. + Make merged build possible. + Move common libraries to the shared lib/ directory.
* Thu Apr 30 2009 lmuelleAATTsuse.de- Update to 3.3.4. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix usrmgr.exe creating a user (bug #6243). + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with \"msdfs root\" set to \"yes\". + BUG 6279: Fix Winbind crash. + BUG 5329: Add \"net rpc service delete/create\". + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before freed. + BUG 6263: Fix domain logins for WinXP clients pre SP3. + BUG 6286: Call init function for builtin idmap modules before probing for them as shared modules. + BUG 6243: Fix usrmgr.exe creating a user. + net conf: Save share name as given, not as lower case only. + Prevent creation of registry keys containing the \'/\' character. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don\'t invalidate the cnum, invalidate the vuid. + Don\'t access a freed structure when logging off and re-using a vuid. + Try to to fix password_expired flag handling. + Make sure to grey out change fields in the netdomjoin-gui when not running as root. + Don\'t look up local user for remote changes, even when root. + Use procid_str in debug messages for better cluster-debuggability. + Use cluster-aware procid_is_me instead of comparing pids. + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Do not use the file system GET_REAL_FILENAME for mangled names. + Fix a crash bug if we timeout in net rpc trustdom list. + Add \'--request-timeout\' option to net. + In net_conf_import, start a transaction when importing a single share. + Fix writing of roaming profiles with \"profile acls\" set to \"yes\".
* Fri Apr 17 2009 lmuelleAATTsuse.de- Update to 3.2.11. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix smbd crash for close_on_completion. + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6205: Correct sample smb.conf share configuration. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with \"msdfs root\" set to \"yes\". + BUG 6263: Fix domain logins for WinXP clients pre SP3. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don\'t invalidate the cnum, invalidate the vuid. + Fix resume command typo for \"printing = vlp\". + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Don\'t look up local user for remote changes, even when root.
* Fri Apr 17 2009 jmcdonoughAATTsuse.de- Don\'t lookup local user for remote password changes; (bnc#493507).
* Thu Apr 02 2009 lmuelleAATTsuse.de- Update to 3.3.3. + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb correctly (bug #6195). + Fix serving of files with colons to CIFS/VFS client (bug #6196). + Fix \"map readonly\" (bug #6186). + BUG 6195: Don\'t let smbd child processes panic. + Add backend_requires_messaging() method to libsmbconf. + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf. + Fall back to file backend when no valid backend was found. + Fix a memleak in dbwrap_rbt. + Provide transaction_start|commit|cancel fns for the registry tdb. + Speed up \"net conf drop\". + Speed up \"net conf import\". + Add transactions to the libsmbconf API. + Reduce memory usage of \"net conf import\". + Registry cleanup. + Fix handling of SAMBA_VERSION_VENDOR_PATCH. + Fix build of pam_winbind.so with static linking. + Tidy up some convert_string_internal error cases. + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to run elections. + Allow DFS client paths to work when POSIX pathnames have been selected. + Try and fix the build farm RAW-STREAMS errors. + Ensure files starting with multiple dots are hidden. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta(). + Fix notify_printer_status_byname. + Fix Coverity IDs 722, 762, 774, 775, 776. + Fix build on old Heimdal based systems. + Fix compile warning. + Use parentheses in if condition to make negation clear. + Add dirsort module. + BUG 6147: Fix detection of the GNU ld version. + BUG 6097: Fix smbd segfault. + BUG 6130: Don\'t crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6139: Add missing whitespace in mount.cifs error message. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix a valgrind error. + Speed up \"net conf list\". + Add sorted subkey cache. + Use StrCaseCmp in the dirsort module. + Document the dirsort module. + Disable dns_sd by default. + Add avahi detection to configure. + Add event avahi binding. + Use avahi to register _smb._tcp in smbd. + Fix two memleaks in the encryption code. + Fix a scary \"fill_share_mode_lock failed\" message. + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn\'t set errno. + Don\'t use reserved words in smbconftort. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Parse_packet can return NULL which is then dereferenced in match_mailslot_name. + Format the header check for netinet/ip.h more nicely. + Missing break in conversion function prevents tdb password database update.
* Wed Apr 01 2009 jmcdonoughAATTsuse.de- Update to 3.2.10. + BUG #6195: Don\'t let smbd child processes panic.
* Wed Apr 01 2009 jmcdonoughAATTsuse.de- BUG 6195: Fix crash on passdb conversion.
* Tue Mar 31 2009 jmcdonoughAATTsuse.de- Update to 3.2.9. + BUG 5920: The length of the memcpy was calculated wrong. + BUG 6097: Fix smbd segfault. + BUG 6098: Fix ads_find_dc() with \"security = domain\" when the DNS server is invalid. + BUG 6099: Samba returns incurrate capabilities list. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem. + BUG 6161: smbclient corrupts source path in tar mode. + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + BUG 6224: nmbd waits 5 minutes before checking to run elections. + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn\'t set errno. + Numerous Coverity fixes + Fix double free caused by incorrect talloc_steal usage. + Backport delete semantics of alternate data streams on a file truncate. + Allow set attributes on a stream fnum to redirect to the base filename. + Fix use of streams modules with CIFSFS client. + Fix more POSIX path lstat calls. + Allow DFS client paths to work with POSIX pathnames. + Ensure files starting with multiple dots are hidden. + Fix guest auth when Winbind is running. + Fix memleak in get_remote_printer_publishing_data(). + cifs mount fix for handling -V parameter. + Fix guest mounts. + Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Enable total anonymization in vfs_smb_traffic_analyzer. + Don\'t try and delete a default ACL from a file. + Fix remotely adding a share via MMC. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Fix a valgrind error / segfault in dns_register_smbd(). + Don\'t log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix two memleaks in the encryption code. + Fix \"fill_share_mode_lock failed\" message. + Add S-1-22-X-Y sids to the local token. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Don\'t miss an absolute pathname as a kerberos keytab path. + Have nmbd check all available interfaces for WINS before failing. + Initialize the id_map status in idmap_ldap to avoid surprise.
* Sun Mar 15 2009 lmuelleAATTsuse.de- Obsolete change from 2008-03-05 by removing the needless examples cleanup.
* Sat Mar 14 2009 lmuelleAATTsuse.de- Update to 3.3.2. + Fix \"force group\" (bug #6155). + Fix saving of files on Samba share using MS Office 2007 (bug #6160). + Fix guest authentication in setups with \"security = share\" and \"guest ok = yes\" when Winbind is running. + Fix corruptions of source path in tar mode of smbclient (bug #6161). + BUG 6082: Fix renaming and deleting of directories using Windows clients. + BUG 6154: Make ZFS honor admin users. + BUG 6155: Fix \"force group\". + BUG 6160: Fix saving of files on Samba share using MS Office 2007. + BUG 6161: Fix corruptions of source path in tar mode of smbclient. + Fix some NetBSD warnings. + Fix bug in processing of open modes in POSIX open. + Fix use of streams modules with CIFSFS client. + Ensure ACL modules work with POSIX paths. + Use fsp->posix_open in preference if we have it. + Fix more POSIX path lstat calls. + Fix a bug in message handling for the change notify code. + Fix guest authentication in setups with \"security = share\" and \"guest ok = yes\" when Winbind is running. + BUG 4640: Fix guest mounts in mount.cifs. + Fix displaying the version string properly when no other parameters passed in in mount.cifs. + Prefer gssapi header files from subdirectory. + BUG 6176: winbindd -n should disable the winbind idmap cache. + Add a vfs_preopen module to hide fs latencies. + Don\'t log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a valgrind error / segfault in dns_register_smbd(). + Fix build on SLES8. + Decremented by 1 for ntcancel requests. + Fix creation of core files. + Fix first mapping of uids/gids in Winbind. + Initialize the id_map status in idmap_ldap to avoid surprise. + Fix initialization of idmap status.
* Tue Mar 10 2009 lmuelleAATTsuse.de- Only call \'%find_lang pam_winbind\' in the samba spec file, not samba-doc.
* Thu Mar 05 2009 roAATTsuse.de- Ignore return value from subshell to fix build.