SEARCH
NEW RPMS
DIRECTORIES
ABOUT
FAQ
VARIOUS
BLOG
DONATE


YUM REPOSITORY

 
 
Changelog for libldb1-3.6.3-77.1.x86_64.rpm :
Mon Jul 29 14:00:00 2013 lmuelleAATTsuse.com
- The pam_winbind require_membership_of option allows for a list of SID,
but currently only provides buffer space for ~20; (bnc#806501).

Wed Jul 24 14:00:00 2013 lmuelleAATTsuse.com
- PIDL: fix parsing linemarkers in preprocessor output; (bso#9636).
- build:autoconf: fix output of syslog-facility check; (bso#9983).
- libreplace: add a missing \"eval\" to the AC_VERIFY_C_PROTOTYPE macro.

Fri Jun 28 14:00:00 2013 lmuelleAATTsuse.com
- Remove ldapsmb from the main spec file.

Tue Jun 25 14:00:00 2013 lmuelleAATTsuse.com
- Don\'t bzip2 the main tar ball, use the upstream gziped one instead.

Fri Jun 21 14:00:00 2013 lmuelleAATTsuse.com
- Fix crash bug during Win8 sync; (bso#9822).
- Check for system libtevent and link dbwrap_tool and dbwrap_torture against
it; (bso#9881).
- errno gets overwritten in call to check_parent_exists(); (bso#9927).
- Fix a bug of drvupgrade of smbcontrol; (bso#9941).

Tue Jun 18 14:00:00 2013 ddissAATTsuse.com
- Document idmap_ad rfc2307 attribute requirements; (bso#9880); (bnc#820531).

Wed Jun 5 14:00:00 2013 ddissAATTsuse.com
- Fix libreplace license ambiguity; (bso#8997); (bnc#765270).

Tue May 28 14:00:00 2013 lmuelleAATTsuse.com
- s3-docs: Remove \"experimental\" label on \"max protocol=SMB2\" parameter;
(bso#9688).
- Remove the compound_related_in_progress state from the smb2 global state;
(bso#9722).
- Makefile: Don\'t know how to make LIBNDR_PREG_OBJ; (bso#9868).

Thu May 23 14:00:00 2013 ddissAATTsuse.com
- Fix is_printer_published GUID retrieval; (bso#9900); (bnc#798856).

Wed May 8 14:00:00 2013 lmuelleAATTsuse.com
- Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382).
- Fix \"guest ok\", \"force user\" and \"force group\" for guest users; (bso#9746).
- Fix \'map untrusted to domain\' with NTLMv2; (bso#9817); (bnc#817919).
- Fix crash bug in Winbind; (bso#9854).

Wed May 8 14:00:00 2013 ddissAATTsuse.com
- Fix panic in nt_printer_publish_ads; (bso#9830).

Fri Apr 26 14:00:00 2013 lmuelleAATTsuse.com
- Remove disabled and anyhow obsoleted net-report and net_rpc_migrate patches.

Fri Apr 26 14:00:00 2013 lmuelleAATTsuse.com
- wbinfo: fix segfault in wbinfo_pam_logon; (bso#9807).
- docs: Fix missing entry in specfile; (bso#9809).
- Old DOS SMB CTEMP request uses a non-VFS function to access the filesystem;
(bso#9811).

Wed Apr 24 14:00:00 2013 ddissAATTsuse.com
- Add \"publish\" parameter for printer shares; (bnc#798856).

Thu Apr 18 14:00:00 2013 lmuelleAATTsuse.com
- Certain xattrs cause Windows error 0x800700FF; (bso#9130).
- Fix the username map optimization; (bso#9139); (bnc#815994).
- Fix adding case sensitive spn; (bso#9699).
- Add a tool to migrate latin1 printing tdb\'s to registry; (bso#9723).
- is_encrypted_packet() function incorrectly used inside server; (bso#9724).
- wkssvc: Fix NULL pointer dereference; (bso#9727).
- smbcontrol close-share is not working; (bso#9733).
- Fix winbind seperator in upn to username conversion; (bso#9735).
- Change to smbd/dir.c code gives significant performance increases on large directory listings; (bso#9736).
- When creating a directory Samba allows inherited bit to slip through; (bso#9747).
- Remove unneeded fstat system call from hot read path; (bso#9748).
- Cache name_to_sid/sid_to_name correctly; (bso#9766).
- vfs_fake_perms: Fix segfault for \"artificial\" conn_structs; (bso#9775).

Mon Apr 15 14:00:00 2013 ddissAATTsuse.com
- Don\'t modify the pidfile name when a custom config file path is used;
(bnc#812929).

Wed Apr 3 14:00:00 2013 lmuelleAATTsuse.com
- Fix GNU ld version detection with old gcc releases; (bso#7825).
- \'map untrusted to domain\' treats WORKSTATION as bogus domain; (bso#9039).
- Add extra attributes for AD printer publishing; (bso#9378); (bnc#798856).
- Downgrade v4 printer driver requests to v3; (bso#9474).
- Samba returns unexpected error on SMB posix open; (bso#9519).
- Add support for posix_openpt; (bso#9541).
- Add dbwrap_tool.1 manual page; (bso#9568).
- Unlink after open causes smbd to panic; (bso#9571).
- Fix a possible null pointer dereference in spoolss; (bso#9574).
- Samba 3.6.x not correctly signing any but the last response in a compound
request/response; (bso#9585).
- \"smbd[pid]: disk_free: sys_popen() failed\" message logged in
/var/log/messages many times; (bso#9586).
- Archive flag is always set on directories; (bso#9587).
- ACLs are not inherited to directories for DFS shares; (bso#9588).
- wbcAuthenticateEx gives unix times; (bso#9625).
- Renaming directories as guest user in security share mode doesn\'t work;
(bso#9637).
- Make SMB2_GETINFO multi-volume aware; (bso#9646).
- Fix initial large PAC sess setup response; (bso#9658).
- Fix two resource leaks in winbindd; (bso#9684).
- Fix a possible buffer overrun in pdb_smbpasswd; (bso#9686).
- Fix vfs_catia module; (bso#9701); (bnc#824833).

Thu Mar 21 13:00:00 2013 jmcdonoughAATTsuse.com
- Ignore duplicate winbind child dlinklist adds; (bnc#786677).

Thu Mar 14 13:00:00 2013 ddissAATTsuse.com
- Fix periodic printcap cache reloads; (bso#9650); (bnc#807334).

Mon Feb 25 13:00:00 2013 lmuelleAATTsuse.com
- Shift the smbfs init script nfs dependency from Required to Should.

Mon Feb 11 13:00:00 2013 ddissAATTsuse.com
- Fix SMB1 Session Setup AndX handling with a large krb PAC;
(bso#9658); (bnc#802031).

Fri Feb 8 13:00:00 2013 lmuelleAATTsuse.com
- Point LD_LIBRARY_PATH to the just-built libraries while calling testparm to
generate the default share snippets on pre-12.2 systems.

Thu Feb 7 13:00:00 2013 ddissAATTsuse.com
- Fix smbclient recursive mget EPERM handling; (bso#9633); (bnc#786350).

Wed Feb 6 13:00:00 2013 sjayaramanAATTsuse.de
- Do not restart the smbfs service on pre-11.3 systems during dhcp lease
renewal when the IP address remains the same; (bnc#800782).

Thu Jan 31 13:00:00 2013 lmuelleAATTsuse.com
- Drop separate build-source-timestamp file as it led to a second, incorrect
Source Timestamp line.

Tue Jan 29 13:00:00 2013 lmuelleAATTsuse.com
- The Samba Web Administration Tool (SWAT) in Samba versions 3.0.x to 4.0.1
are affected by a cross-site request forgery; CVE-2013-0214; (bnc#799641).

Tue Jan 29 13:00:00 2013 lmuelleAATTsuse.com
- The Samba Web Administration Tool (SWAT) in Samba versions 3.0.x to 4.0.1
could possibly be used in clickjacking attacks; CVE-2013-0213; (bnc#800982).

Wed Jan 23 13:00:00 2013 lmuelleAATTsuse.com
- defer_open is triggered multiple times on the same request; (bso#9196).
- Fix SEGV when using second vfs module; (bso#9471).
- Correctly detect O_DIRECT; (bso#9548).
- Mask off signals the correct way from the signal handler; (bso#9550).
- ntlm_auth.1: Fix format and make examples visible; (bso#9569).

Fri Jan 18 13:00:00 2013 lmuelleAATTsuse.com
- Remove dangling references to Heimdal from the spec file.

Thu Jan 17 13:00:00 2013 ddissAATTsuse.com
- Fix AD printer publishing; (bso#9378); (bnc#798856).

Sun Dec 23 13:00:00 2012 lmuelleAATTsuse.com
- Use the version macro while definition of the branch macro.

Sat Dec 8 13:00:00 2012 lmuelleAATTsuse.com
- Fix MD5 detection in the autoconf build; (bso#9037); (bso#9086); (bso#9094);
(bso#9418).
- Use work around for \'winbind use default domain\' only if it is set;
(bso#9367).
- Allow smb2.acls torture test to pass against smbd with a POSIX ACLs backend;
(bso#9374).
- large read requests cause server to issue malformed reply; (bso#9422).
- s3-rpc_client: lookup nametype 0x20 in rpc_pipe_open_tcp_port(); (bso#9426).
- Fix ncacn_ip_tcp reconnection code for lsa lookups; (bso#9439).
- Allow to force DNS updates using net; (bso#9451).
- Respond correctly to FILE_STREAM_INFO requests; (bso#9460).

Tue Dec 4 13:00:00 2012 lmuelleAATTsuse.com
- On uninstall remove winbind from the pam configuration, invalidate the nscd
passwd and group cache and only recommend the install of nscd; (bnc#792340).

Mon Dec 3 13:00:00 2012 lmuelleAATTsuse.com
- BuildRequire libnscd-devel once.

Sun Dec 2 13:00:00 2012 lmuelleAATTsuse.com
- Remove obsoleted references to pre-9.4 SUSE systems; (bnc#792294).
- Add SUSE version depending pkg-config requires macro; (bnc#792294).

Sun Dec 2 13:00:00 2012 lmuelleAATTsuse.com
- Define library names and use it instead of libldb1, libnetapi0,
libsmbclient0, libsmbsharemodes0, libtalloc2, libtdb1, libtevent0, and
libwbclient0; (bnc#792294).
- Provide and obsolete libsmbsharemodes for post-10.3 SUSE systems.

Fri Nov 30 13:00:00 2012 lmuelleAATTsuse.com
- Don\'t clutter the spec file diff view; (bnc#783384).

Wed Nov 28 13:00:00 2012 jmcdonoughAATTsuse.com
- Fix fd leak causing 100% CPU in winbind on certain dc connection
failures; (bso#9436); (bnc#786677).

Tue Nov 27 13:00:00 2012 ddissAATTsuse.com
- Fix spoolss segfault when default devmode is disabled; (bso#9433);
(bnc#791183).

Fri Nov 16 13:00:00 2012 lmuelleAATTsuse.com
- ACL masks incorrectly applied when setting ACLs; (bso#9236).
- s3-kerberos: also try with AES keys, when decrypting tickets; (bso#9272).
- lib/replace: replace all
*printf function if we replace snprintf; (bso#9390).
- lib/addns: don\'t depend on the order in resp->answers[]; (bso#9402).

Tue Nov 13 13:00:00 2012 lmuelleAATTsuse.com
- s4:torture/smb2: improve the smb2.create.blob tes; (bso#9209).
- lib/krb5_wrap: request enc_types in the correct order; (bso#9272).
- Fix net ads join message for the dns domain; (bso#9326).
- docs-xml: fix use of tag; (bso#9345).
- s3-aio_pthread: Optimize aio_pthread_handle_completion; (bso#9359).
- s3:winbind: Failover if netlogon pipe is not available; (bso#9386).

Mon Oct 29 13:00:00 2012 lmuelleAATTsuse.com
- Ensure adding the winbind group never can fail.

Mon Oct 29 13:00:00 2012 lmuelleAATTsuse.com
- Create ntadmin group only if it doesn\'t yet exist.

Mon Oct 29 13:00:00 2012 lmuelleAATTsuse.com
- quota: Don\'t force the block size to 512; (bso#3272).
- Fix poll replacement to become a msleep replacement; (bso#8107).
- Fix wrong test == syntax in configure; (bso#8146).
- Fix --with(out)-sendfile-support option handling in autoconf; (bso#8344).
- Fix builtin forms order to match Windows again; (bso#8632).
- Fix RAW printing for normal users; (bso#8769); (bnc#790741).
- Initialise ticket to ensure we do not invalid memory; (bso#8788).
- Fix \'net rpc share allowedusers\' to work with 2008r2; (bso#8966).
- Fix crash on null pam change pw response; (bso#9013).
- Connection to outbound trusted domain goes offline; (bso#9016).
- Increase debug level for info that the db is empty; (bso#9112).
- \'smbclient\' can\'t connect to a Windows 7 server using NTLMv2; (bso#9117).
- Winbind can\'t fetch user or group info from AD via LDAP; (bso#9147).
- Open printers with the right access mask; (bso#9154).
- Fix makerpms.sh on RHEL; (bso#9165).
- Remove non-existent option \'-Y\' from winbindd manpage; (bso#9171).
- Add quota support for gfs2; (bso#9172).
- Make SMB2 compound request create/delete_on_close/close work as Windows;
(bso#9173).
- Empty SPNEGO packet can cause smbd to crash; (bso#9174).
- pam_winbind: Match more return codes when wbcGetPwnam has failed;
(bso#9177).
- Fix crash bug in idmap_hash; (bso#9188); (bnc#788159).
- SMB2 Create doesn\'t return correct MAX ACCESS access mask in blob;
(bso#9189).
- Fix service control for non-internal services; (bso#9192).
- Don\'t take \'state->te\' as indication for \"was_deferred\"; (bso#9196).
- Parse of invalid SMB2 create blob can cause smbd crash; (bso#9209).
- Bad ASN.1 NegTokenInit packet can cause invalid free; (bso#9213).
- Fix segfault in smbd if user specified ports out for range; (bso#9218).
- Signing cannot be disabled for SMB2 by design, so fix the documentation
instead; (bso#9222).
- Fix NT_STATUS_IO_TIMEOUT during slow import of printers into registry;
(bso#9231).
- When setting a non-default ACL, don\'t forget to apply masks to SMB_ACL_USER
and SMB_ACL_GROUP entries; (bso#9236).
- lib-addns: ensure that allocated buffer are pre set to 0; (bso#9259).
- Make tdb robust against shrinking tdbs and improper CLEAR_IF_FIRST restart;
(bso#9268).
- Add support for reloading systemd services; (bso#9280).

Fri Oct 26 14:00:00 2012 lmuelleAATTsuse.com
- Warn via the smbd log if AppArmor and \"wide links\" are in use; (bnc#783719).

Mon Sep 17 14:00:00 2012 lmuelleAATTsuse.com
- Backport FSCTL codes and fix segfault in smbstatus from master; (bso#9058).
- Fix bad call to memcpy source3/registry/regfio.c; (bso#9065).
- \"Domain Users\" incorrectly added as additional group on domain members;
(bso#9066).
- Use correct RID for \"Domain Guests\" primary group; (bso#9067).
- Fix crash bug in smbd caused by a blocking lock followed by close;
(bso#9084).
- Fix smbclient/tarmode panic when connecting to Windows 2000 clients;
(bso#9088).
- Fix refreshing of Kerberos tickets in Winbind; (bso#9098).
- Fix identification of idle clients in Winbind to avoid crashes and NDR
parsing errors; (bso#9104).
- Fix compilation with newer MIT Kerberos which hides internal symbols;
(bso#9111).
- Fix flooding the logs with records we don\'t find in pcap; (bso#9112).
- Initialize the print backend after we setup winreg; (bso#9122).
- Fix lprng job tracking errors; (bso#9123).
- Fix setting of \"inherited\" bit on inherited ACE\'s; (bso#9124).
- Fix Winbind panic if we couldn\'t find the domain; (bso#9135).
- Make \'smbclient allinfo\' show the snapshot list; (bso#9137).
- Fix nfs quota support with Linux nfs4 mounts; (bso#9144).
- Valid open requests can cause smbd assert due to incorrect oplock handling
on delete requests; (bso#9150).

Thu Sep 13 14:00:00 2012 shargaganAATTnovell.com
- NMB registration for a duplicate workstation fails with registration
refuse; (bso#9085); (bnc#770056).

Mon Aug 6 14:00:00 2012 lmuelleAATTsuse.com
- Correct documentation of \"case sensitive\"; (bso#8552).
- Printing fails in function cups_job_submit; (bso#8719).
- Fix kernel oplocks when uid(file) != uid(process); (bso#8974).
- Send correct responses to NT Transact Secondary when no data and no params
for the Trans2 calls are set; (bso#8989).
- Fix build without ads support; (bso#8996).
- Don\'t turn negative cache entries into valid idmappings; (bso#9002).
- Fix posix acl on gpfs; (bso#9003).
- Make vfs_gpfs less verbose in get/set_xattr functions; (bso#9022).
- Fix migrating printers while upgrading from 3.5.x; (bso#9026).
- Fix typo in set_re_uid() call when USE_SETRESUID selected in configure;
(bso#9034).
- Using asynchronous IO with SMB2 can return NT_STATUS_FILE_CLOSED in error
instead ofNT_STATUS_FILE_LOCK_CONFLICT; (bso#9040).
- Fix resolving our own \"Domain Local\" groups; (bso#9052); (bnc#779269).
- Fix build against CUPS 1.6; (bso#9055).
- Fix bugs in SMB2 credit handling code; (bso#9057).
- rpcclient: Fix bad call to data_blob_const; (bso#9062).

Mon Jul 16 14:00:00 2012 lmuelleAATTsuse.com
- BuildRequire gcc, make, and patch; (bnc#771516).

Wed Jul 11 14:00:00 2012 lmuelleAATTsuse.com
- ndr: fix push/pull DATA_BLOB with NDR_NOALIGN; (bso#9026); (bnc#770262).

Wed Jul 11 14:00:00 2012 lmuelleAATTsuse.com
- Fix shell syntax in dhcpcd hook script; (bnc#769957).

Thu Jun 21 14:00:00 2012 lmuelleAATTsuse.com
- resolve_ads() code can return zero addresses and miss valid DC IP addresses;
(bso#8910).
- Can\'t join XP Pro workstations to 3.6.1 DC; (bso#8373); (bnc#787983).
- winbind can hang as nbt_getdc() has no timeout; (bso#8953).
- Fix crash bug in dns_create_probe when dns_create_update fails; (bso#8627)
- s3-pid: Catch with pid filename\'s change when config file is not smb.conf;
(bso#8714).
- Possible memory leaks in the main Samba process; (bso#8970).
- s3: Fix uninitialized memory read in talloc_free(); (bnc#764577).
- Treat exit_server_cleanly() as a \"clean\" shutdown; (bso#8971).
- Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute(); (bso#8988).
- Winzip occasionally can not read files out of an open winzip dialog;
(bso#8311).
- s3-winbindd: call dump_core_setup after command line option has been parsed;
(bso#8975).
- Directory group write permission bit is set if unix extensions are enabled;
(bso#8972).
- s3: remove dependency on automake for \"make everything\"; (bso#8978).
- sd_has_inheritable_components segfaults on an SD that se_access_check
accepts; (bso#8811).
- smbclient\'s tarmode insists on listing excluded directories; (bso#8922).
- Notify code can miss a ChDir; (bso#8998).
- s3:smbd: add a fsp_persistent_id() function; (bso#8995).

Wed May 30 14:00:00 2012 lmuelleAATTsuse.com
- s3: Fix a segfault with debug level 3 on Solaris; (bso#8861).
- s3: wbinfo --lookup-sids \"\" crashes winbind; (bso#8904).
- smbd crashes when deleting directory and veto files are enabled; (bso#8837).
- winbind_krb5_locator only returns one IP address; (bso#8897).
- Wrong assertion/comparison: Compare value not pointer; (bso#8859).
- Inconsistent (with manpage) command-line switch for \"help\" in smbtree;
(bso#8831).
- Fix incorrect debug statement.
- Setting traverse rights fails to enable directory traversal when acl_xattr
in use; (bso#8857).
- Syslog broken owing to mistyping of debug_settings.syslog; (bso#8877).
- s3/ldap: remove outdated netscape ds 5 schema file; (bso#8869).
- s3-docs: fixes several typos; (bso#7938).
- s3-VFS: Fix building out-of-tree modules; (bso#8822).
- s3-docs: Add hint that setting \"profile acls = yes\" on normal shares can
cause trouble; (bso#7930).
- s3-pam_winbind: Fix the build with a newer iniparser library; (bso#8915).
- Avoid null dereference in initialize_password_db(); (bso#8920).
- s3:registry: implement values_need_update and subkeys_need_update in the
smbconf backend.
- s3:registry:reg_api: fix reg_queryvalue to not fail when values are
modified while it runs.
- s4:torture:rpc:spoolss: also initialize driverName before checking it in
test_PrinterData_DsSpooler().
- s3:registry: multiple cleanups, fixes, and optimisations.
- s3:auth/server_info: the primary rid should be in the groups rid array;
(bso#8798).
- s3-printing: Add new printers to registry; (bso#8554); (bso#8612);
(bso#8748).
- Fix the overwriting of errno before use in a DEBUG statement and use the
return value from store_acl_blob_fsp rather than ignoring it; (bso#8945).
- s3-auth: Don\'t lookup the system user in pdb; (bso#8944).
- s3-passdb: Fix negative SID->uid/gid cache handling; (bso#8952).
- Fix typo in pam_winbindd code; (bso#8957).
- Fix remove_duplicate_addrs2 previously it could leave zero addresses in the
list; (bso#8910).
- Slow but responsive DC can lock up winbindd; (bso#8943).
- Broken processing of %U with vfs_full_audit when force user is set;
(bso#8882).

Wed May 23 14:00:00 2012 ddissAATTsuse.de
- Attempt to use samlogon validation level 6; (bso#7945); (bnc#741623).

Wed May 2 14:00:00 2012 lmuelleAATTsuse.com
- Add PreReq /etc/init.d/nscd to the winbind package; (bnc#759731).

Wed Apr 25 14:00:00 2012 ddissAATTsuse.de
- Recover from ncacn_ip_tcp ACCESS_DENIED/SEC_PKG_ERROR lsa errors;
(bso#7944); (bnc#755663).
- Fix lsa_LookupSids3 and lsa_LookupNames4 arguments.

Sat Apr 21 14:00:00 2012 lmuelleAATTsuse.com
- docs-xml: fix default name resolve order; (bso#7564).
- s3-aio-fork: Fix a segfault in vfs_aio_fork; (bso#8836).
- docs: remove whitespace in example samba.ldif; (bso#8789).
- s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845);
(bnc#730769).
- s3-docs: Prepend \'/\' to filename argument; (bso#8826).

Fri Apr 20 14:00:00 2012 lmuelleAATTsuse.com
- Restrict self granting privileges where security=ads for Samba post-3.3.16;
CVE-2012-2111; (bnc#757576).

Fri Apr 13 14:00:00 2012 ddissAATTsuse.de
- Remove all precompiled idl output to ensure any pidl changes take effect;
(bnc#757080).

Tue Apr 10 14:00:00 2012 lmuelleAATTsuse.com
- Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe-
cution as the \"root\" user; PIDL based autogenerated code allows overwriting
beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797).

Sun Mar 25 14:00:00 2012 lmuelleAATTsuse.de
- s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys;
(bso#8599).
- Correctly handle DENY ACEs when privileges apply; (bso#8797).

Fri Mar 16 13:00:00 2012 lmuelleAATTsuse.de
- s3:smb2_server: fix a logic error, we should sign non guest sessions;
(bso8749).
- Allow vfs_aio_pthread to build as a static module; (bso#8723).
- s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for
persistent dbs; (#bso8527).
- s3: segfault in dom_sid_compare(bso#8567).
- Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER;
(bso#8768).
- s3-winbindd: Close netlogon connection if the status returned by the
NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771).
- s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599).
- Fix problem when calculating the share security mask, take priviliges into
account for the connecting user; (bso#8784).

Thu Mar 15 13:00:00 2012 ddissAATTsuse.de
- Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups;
(bso#8807); (bnc#751454).

Wed Mar 14 13:00:00 2012 lmuelleAATTsuse.de
- Remove obsoleted Authors lines from spec file for post-11.2 systems.

Mon Feb 27 13:00:00 2012 lmuelleAATTsuse.de
- Make ldapsmb build with Fedora 15 and 16; (bso#8783).
- BuildRequire libuuid-devel for post-11.0 and other systems.
- Define missing python macros for non SUSE systems.
- PreReq to fillup_prereq and insserv_prereq only on SUSE systems.
- Always use cifstab instead of smbfstab on non SUSE systems.

Mon Feb 20 13:00:00 2012 lmuelleAATTsuse.de
- Ensure AndX offsets are increasing strictly monotonically in pre-3.4
versions; CVE-2012-0870; (bnc#747934).

Fri Feb 17 13:00:00 2012 ddissAATTsuse.de
- Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY; (bso#8760); (bnc#741854).

Thu Feb 16 13:00:00 2012 ddissAATTsuse.de
- s3-printing: fix crash in printer_list_set_printer(); (bso#8762);
(bnc#746825).

Mon Feb 6 13:00:00 2012 lmuelleAATTsuse.de
- s3:winbindd fix a return code check; (bso#8406).

Mon Feb 6 13:00:00 2012 lmuelleAATTsuse.de
- s3: Add rmdir operation to streams_depot; (bso#8733).

Mon Feb 6 13:00:00 2012 lmuelleAATTsuse.de
- s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used();
(bso#8738); CVE-2013-0454; (bnc#811975).

Mon Feb 6 13:00:00 2012 lmuelleAATTsuse.de
- s3:auth: fill the sids array of the info3 in
wbcAuthUserInfo_to_netr_SamInfo3(); (bso#8739).

Mon Feb 6 13:00:00 2012 lmuelleAATTsuse.de
- s3:client: ignore SMBecho errors (the server may not support it);
(bso#8139).

Mon Feb 6 13:00:00 2012 lmuelleAATTsuse.de
- Be more strict when using PAM_AUTH API from winbind if Kerberos auth is
enabled and don\'t unintentionally use a bogus domain name; (bso#8734).

Mon Feb 6 13:00:00 2012 lmuelleAATTsuse.de
- smbclient fails with posix large reads; (bso#8727).

Thu Feb 2 13:00:00 2012 lmuelleAATTsuse.de
- Use the smbfs init script on versions pre-11.3, or cifs in later versions;
(bnc#744614).

Mon Jan 30 13:00:00 2012 lmuelleAATTsuse.de
- s3: Compile IDL files in autogen, some configure tests need this.

Mon Jan 30 13:00:00 2012 fcrozatAATTsuse.com
- Fixes various deadlocks in if-up.d / if-down.d when running under
systemd; (bnc#732395).

Sun Jan 29 13:00:00 2012 lmuelleAATTsuse.de
- Update to 3.6.3.
+ Fix memory leak in parent smbd on connection; CVE-2012-0817; (bso#8724);
(bnc#743986).

Thu Jan 26 13:00:00 2012 lmuelleAATTsuse.de
- Use spdx.org compliant license names for all packages.

Wed Jan 25 13:00:00 2012 lmuelleAATTsuse.de
- Update to 3.6.2.
+ Make Winbind receive user/group information (bug #8371).
+ Several SMB2 fixes.
+ Fix a crash bug in the spoolss code.
+ Add new contributing FAQ announcing acceptance of corporate (C).
+ DeletePrinterDriverEx deletes files in use; (bso#4942); (bnc#742504).
+ Fix cli_write_and_x() against OS/2 print shares; (bso#5326).
+ Fix \'smbclient tar\' for files greater than 8GB on BE machines; (bso#563);
(bnc#726145).
+ Remove pointless use_memory_krb5_ccache; (bso#7465).
+ Fix perl path; (bso#8176).
+ Grant credits in async interim responses (SMB2); (bso#8357).
+ Make Winbind receive user/group information; (bso#8371).
+ Fix Windows XP clients crashing smbd process every once in a while;
(bso#8384); (bnc#731571).
+ Make VFS op \"streaminfo\" stackable; (bso#8419).
+ Add an allocation pool to idmap_autorid; (bso#8444).
+ Fix SEGFAULT from net registry export on not zero terminated REG_SZ
values; (bso#8528).
+ Make DSO_EXPORTS_CMD more portable; (bso#8531).
+ readlink() on Linux clients fails if the symlink target is outside of the
share; (bso#8541).
+ smbclient posix_open command fails to return correct info on open file;
(bso#8542).
+ winbind_samlogon_retry_loop ignores logon_parameters flags; (bso#8548).
+ Fix setting the machine account password; (bso#8550).
+ Make SMB2 handle compound request headers in the same way as Windows;
(bso#8560).
+ Password change settings not fully observed; (bso#8561).
+ Fix double free error in talloc; (bso#8562).
+ Fix alignment in the non-extended-security negprot; (bso#8573).
+ Add systemd service files; (bso#8575).
+ Add systemd service files; (bso#8575).
+ smb2_flush: Don\'t send uninitialized memory; (bso#8579).
+ Enable inotify if sys or kernel inotify is available; (bso#8580).
+ Increase a debug level; (bso#8585).
+ libsmb: Only align unicode pipe_name; (bso#8586).
+ Fix marshalling of samr_ChangePasswordUser3; (bso#8591).
+ Don\'t limit the number of open dptrs for SMB2; (bso#8592).
+ Fix a crash bug in cldap_socket_recv_dgram(); (bso#8593).
+ Make cldap work over IPv6; (bso#8600).
+ Fix intermittent print job failures caused by character conversion errors;
(bso#8606).
+ Improve configure.in so it can be used outside the Samba source tree;
(bso#8607).
+ Winbind: Don\'t fail on users without a uid; (bso#8608).
+ Ensure we correctly calculate reply credits over all returned SMB2
replies; (bso#8614).
+ Fix migrate printer code; (bso#8618).
+ Fix crash bug when trying to browse Samba printers; (bso#8623).
+ libsmb: Don\'t duplicate Kerberos service tickets; (bso#8628).
+ POSIX ACE x permission becomes rx following mapping to and from a DACL;
(bso#8631).
+ When returning an ACL without SECINFO_DACL requested, we still set
SEC_DESC_DACL_PRESENT in the type field; (bso#8636).
+ Fix the vfs_commit module; (bso#8639).
+ Add an update function for Winbind cache; (bso#8643).
+ vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries
on a directory with no stored ACL; (bso#8644).
+ Document the \"ignore system acls\" option of vfs_acl_xattr and vfs_acl_tdb
vfs modules; (bso#8652).
+ Fix deleting a symlink if the symlink target is outside of the share;
(bso#8663).
+ Fix renaming a symlink if the symlink target is outside of the share;
(bso#8664).
+ Fix NT ACL issue; (bso#8673).
+ Fix buffer overflow issue with AES encryption in samba traffic analyzer;
(bso#8674).
+ Fix Winbind segfault if we can\'t map the last user; (bso#8678).
+ recvfile code path using splice() on Linux leaves data in the pipe on
short write; (bso#8679).
+ Try ctdbd_init_connection() as root; (bso#8684).
+ Packet validation checks can be done before length validation causing
uninitialized memory read; (bso#8686).
+ Fix typo in \'net memberships\' usage; (bso#8687).
+ libads: Fix malloc/talloc mismatch in ads_keytab_verify_ticket();
(bso#8692).
+ Make DeletePrinterDriverEx remove printer driver files; (bso#8697)
(bnc#740810).
+ Fix major leak with SMB2 in connections.tdb; (bso#8710).

Wed Jan 25 13:00:00 2012 lmuelleAATTsuse.de
- s3-spoolss: Pass the right pointer type; (bso#4942); (bnc#742504).

Wed Jan 25 13:00:00 2012 ddissAATTsuse.de
- Use simplified smb signing infrastructure; (bnc#741623).

Wed Jan 25 13:00:00 2012 lmuelleAATTsuse.de
- Use correct license, LGPLv3+ for libwbclient packages.

Tue Jan 24 13:00:00 2012 lmuelleAATTsuse.de
- When returning an ACL without SECINFO_DACL requested, we still set
SEC_DESC_DACL_PRESENT in the type field; (bso#8636).

Tue Jan 24 13:00:00 2012 ddissAATTsuse.de
- Fix incorrect types in the full_audit VFS module. Add null terminators to
audit log enums; (bnc#742885).

Sun Jan 22 13:00:00 2012 ddissAATTsuse.de
- Prefix print$ path on driver file deletion; (bso#8697); (bnc#740810).
- Fix printer_driver_files_in_use() call ordering; (bso#4942); (bnc#742504).

Sat Jan 21 13:00:00 2012 lmuelleAATTsuse.de
- Buffer overflow issue with AES encryption in samba traffic analyzer;
(bso#8674).
- NT ACL issue; (bso#8673).
- Deleting a symlink fails if the symlink target is outside of the share;
(bso#8663).
- connections.tdb - major leak with SMB2; (bso#8710).

Wed Jan 18 13:00:00 2012 lmuelleAATTsuse.de
- Renaming a symlink fails if the symlink target is outside of the share;
(bso#8664).

Tue Jan 17 13:00:00 2012 lmuelleAATTsuse.de
- Intermittent print job failures caused by character conversion errors;
(bso#8606).
- ads_keytab_verify_ticket mixes talloc allocation with malloc free;
(bso#8692).
- libcli/cldap: fix a crash bug in cldap_socket_recv_dgram(); (bso#8593).
- s3:lib/ctdbd_conn: try ctdbd_init_connection() as root; (bso#8684).
- s3-printing: fix migrate printer code; (bso#8618).
- Packet validation checks can be done before length validation causing
uninitialized memory read; (bso#8686).

Mon Jan 16 13:00:00 2012 lmuelleAATTsuse.de
- net memberships usage info was wrong; (bso#8687).
- s3-libsmb: Don\'t duplicate kerberos service tickets; (bso#8628).
- Recvfile code path using splice() on Linux leaves data in the pipe on short
write; (bso#8679).
- s3-winbind: Fix segfault if we can\'t map the last user; (bso#8678).
- vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on
a directory with no stored ACL; (bso#8644).
- s3/doc: document the ignore system acls option of vfs_acl_xattr and
vfs_acl_tdb; (bso#8652).
- Winbind can\'t receive any user/group information; (bso#8371).
- s3-winbind: Add an update function for winbind cache; (bso#8643).
- s3: Attempt to fix the vfs_commit module.
- POSIX ACE x permission becomes rx following mapping to and from a DACL;
(#bso#8631).
- s3:libsmb: only align unicode pipe_name; (bso#8586).
- s3-winbind: Don\'t fail on users without a uid; (bso#8608).
- Crash when trying to browse samba printers; (bso#8623).
- talloc: double free error; (bso#8562).
- cldap doesn\'t work over ipv6; (bso#8600).
- s3:libsmb: fix cli_write_and_x() against OS/2 print shares; (bso#5326).
- SMB2: not granting credits for all requests in a compound request;
(bso#8614).
- smb2_flush sends uninitialized memory; (bso#8579).
- Password change settings not fully observed; (bso#8561).
- s3:smb2_server: grant credits in async interim responses; (bso#8357).
- s3:smbd: don\'t limit the number of open dptrs for smb2; (bso#8592).
- samr_ChangePasswordUser3 IDL incorrect; (bso#8591).
- idmap_autorid does not have allocation pool; (bso#8444).
- Add systemd service files.
- s3:libsmb: the workgroup in the non-extended-security negprot is not
aligned; (bso#8573).
- s3-build: Fix inotify detection; (bso#8580).
- SMB2 doesn\'t handle compound request headers in the same way as Windows;
(#bso8560).
- Disconnecting clients swamp the logs; (bso#8585).
- s3-netlogon: Fix setting the machinge account password; (bso#8550).
- winbind_samlogon_retry_loop ignores logon_parameters flags; (#bso8548).
- smbclient posix_open command fails to return correct info on open file;
(bso#8542).
- readlink() on Linux clients fails if the symlink target is outside of the
share; (bso#8541).
- s3-netapi: remove pointless use_memory_krb5_ccache; (bso#7465).
- s3:Makefile: make DSO_EXPORTS_CMD more portable; (bso#8531).
- s3:registry: fix the test for a REG_SZ blob possibly being a zero terminated
ucs2 string; (bso#8528).
- Make VFS op \"streaminfo\" stackable; (bso#8419).

Tue Jan 3 13:00:00 2012 ddissAATTsuse.de
- Fix incorrect perfcount array length calculations; (bnc#739258).

Wed Dec 21 13:00:00 2011 cooloAATTsuse.com
- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.

Wed Dec 21 13:00:00 2011 cooloAATTsuse.com
- Remove call to suse_update_config macro for post-11.4 systems.

Mon Dec 19 13:00:00 2011 lmuelleAATTsuse.de
- Use samba.org for the ldapsmb source location.

Wed Dec 7 13:00:00 2011 shargaganAATTnovell.com
- Fixing libsmbsharemode dependency on ldap and krb5 libs in Makefile;
(bnc #729516).

Fri Nov 25 13:00:00 2011 ddissAATTsuse.de
- Do not map POSIX execute permission to Windows FILE_READ_ATTRIBUTES;
(bso#8631); (bnc#732572).

Fri Nov 25 13:00:00 2011 lmuelleAATTsuse.de
- Add ldap to Should-Start and Stop of the smb init script; (bnc#730046).

Sat Nov 19 13:00:00 2011 ddissAATTsuse.de
- Fix smbd srv_spoolss_replycloseprinter() segfault; (bso#8384); (bnc#731571).

Fri Nov 4 13:00:00 2011 ddissAATTsuse.de
- Fix pam_winbind.so segfault in pam_sm_authenticate(); (bso#8564).

Tue Nov 1 13:00:00 2011 ddissAATTsuse.de
- Fix smbclient >8GB tars on big endian machines; (bso#563); (bnc#726145).

Mon Oct 31 13:00:00 2011 ddissAATTsuse.de
- Fix typo in net ads join output; (bnc#713135).

Thu Oct 27 14:00:00 2011 lmuelleAATTsuse.de
- Ignore a potentially missing AppArmor snippet helper script; (bnc#725256).

Thu Oct 20 14:00:00 2011 lmuelleAATTsuse.de
- Update to 3.6.1.
+ Fix smbd crashes triggered by Windows XP clients; (bso#8384).
+ Fix a Winbind race leading to 100% CPU load; (bso#8409).
+ Several SMB2 fixes.
+ The VFS ACL modules are no longer experimental but production-ready.
+ Fix \'net ads join -k\' when KRB5CCNAME is not set; (bso#7465).
+ smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).
+ Return error of cli_push when \'put - /some/file\' is used; (bso#7551).
+ Fix usage of cli_errstr(); (bso#7864).
+ Fix \'widelinks\' regression; (bso#8229).
+ Empty notify servername; (bso#8236).
+ Add man vfs_aio_fork; (bso#8256).
+ smb2: smbd logs \"Invalid SMB packet: first request: 0x0008\" and crashes;
(bso#8334).
+ Add a fallback for missing open&x support in MAC OS/X Lion; (bso#8338).
+ While migrating forms, don\'t fail if the form already exists; (bso#8351).
+ OS/2 sends an unexpected write&x/read&x chain; (bso#8360).
+ Fix build of vfs_prealloc on SLES8; (bso#8363).
+ Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4; (bso#8364).
+ Fix the fallback to the deprecated spelling idmap:script; (bso#8368).
+ Fix vfs_chown_fsp; (bso#8370).
+ Fix smbd crashes triggered by Windows XP clients; (bso#8384).
+ Fix smbclient access to NT4 shares; (bso#8385).
+ Optimize serverid_exists() for Solaris; (bso#8395).
+ registry/reg_format.c must include includes.h; (bso#8401).
+ SMB2 server can return requests out-of-order when processing a compound
request; (bso#8407).
+ Fix a Winbind race leading to 100% CPU load; (bso#8409).
+ Fix \"saving as\" of MS Office 2007 (Word) documents on Samba shares with
SMB2; (bso#8412).
+ Fix \'getent group\' if trusted domains are not reachable; (bso#8420).
+ Fix infinite loop in ACL module code; (bso#8422).
+ Fix wrong reply to DHnC (durable handle reconnect); (bso#8428).
+ Compound SMB2 requests on an IPC connection can corrupt the reply stream;
(bso#8429).
+ Fix segfault in iconv.c; (bso#8433).
+ NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames;
(bso#8442).
+ Be smarter about setting default permissions when a ACL_USER_OBJ isn\'t
given; (bso#8443).
+ Check the wct of the incoming SMBnegprot responses; (bso#8452).
+ Fix smbclient segfaults when dialect option -m is used for legacy
dialects; (bso#8453).
+ Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).
+ Samba PDC is looking up only primary user group; (bso#8455).
+ IE9 on Windows 7 cannot download files to samba 3.5.11 share; (bso#8458).
+ smb2_find uses a hard coded max reply size of 0x10000 instead of
smb2_max_trans; (bso#8473).
+ SMB2 create doesn\'t cope with an Apple client using NULL blob in create;
(bso#8474).
+ Don\'t call smbd_terminate_connection in smb2_validate_message_id();
(bso#8476).
+ Samba asserts when SMB2 client breaks the crediting rules; (bso#8476).
+ Map to guest can return uninitialized blob of data; (bso#8477).
+ acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).
+ DFS breaks zip file extracting unless \"follow symlinks = no\" set;
(bso#8493).
+ Remove \"experimental\" label on VFS ACL modules; (bso#8494).
+ SMB2_OP_CANCEL requests don\'t have to be signed; (bso#8503).
+ smbd doesn\'t correctly honor the \"force create mode\" bits from a cifsfs
create; (bso#8507).
+ Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER;
(bso#8509).
+ Disallow \".\" in can_set_delete_on_close(); (bso#8515).
+ SMB2 create call returns incorrect file allocation size; (bso#8518).
+ Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements;
(bso#8520).
+ Winbind cache timeout expiry test was reversed; (bso#8521).

Tue Oct 18 14:00:00 2011 lmuelleAATTsuse.de
- s3/doc: add man page for aio_fork vfs module.

Tue Oct 18 14:00:00 2011 lmuelleAATTsuse.de
- Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).

Tue Oct 18 14:00:00 2011 lmuelleAATTsuse.de
- s3: Samba PDC is looking up only primary user group; (bso#8455).

Tue Oct 18 14:00:00 2011 lmuelleAATTsuse.de
- Add script to create or update an AppArmor sniplet with permissions for all
Samba shares; (bnc#688040).

Tue Oct 18 14:00:00 2011 jmcdonoughAATTsuse.de
- Add \"ldapsam:login cache\" parameter to allow explicit disabling
of the login cache; (bnc#723261).

Fri Oct 14 14:00:00 2011 ddissAATTsuse.de
- Retain the smbd startproc return value for correct startup status reporting.
unset was incorrectly being called prior to rc_status; (bnc#723724).

Fri Oct 14 14:00:00 2011 ddissAATTsuse.de
- Prevent deadlock in systemd triggered by if-down.d handler on shutdown;
(bnc#721598).

Thu Oct 13 14:00:00 2011 lmuelleAATTsuse.de
- smb2_find uses a hard coded max reply size of 0x10000 instead of
smb2_max_trans; changed defaults and documentation (bso8473).

Thu Oct 13 14:00:00 2011 lmuelleAATTsuse.de
- Empty CIFS share can be blocked for other clients by deleting it via empty
path (DELETE_PENDING until the last client); (bso#8515).

Wed Oct 12 14:00:00 2011 lmuelleAATTsuse.de
- winbindd cache timeout expiry test was reversed; (bso#8521).

Wed Oct 12 14:00:00 2011 lmuelleAATTsuse.de
- Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520).

Wed Oct 12 14:00:00 2011 lmuelleAATTsuse.de
- s3:smb2_create: fix allocation size return value when opening existing
files; (bso#8518).

Wed Oct 12 14:00:00 2011 lmuelleAATTsuse.de
- SMB2 create doesn\'t cope with an Apple client using NULL blob in create;
(bso#8474).

Wed Oct 12 14:00:00 2011 lmuelleAATTsuse.de
- NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames;
(bso#8442).

Wed Oct 12 14:00:00 2011 lmuelleAATTsuse.de
- s3-docs: Fix bug (bso#7908) and typo.

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- Return error of cli_push when \'put - /some/file\' is used; (bso#7551).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- smbd doesn\'t correctly honor the \"force create mode\" bits from a cifsfs
create; (bso#8507).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- Default user entry is set to minimal permissions on incoming ACL change with
no user specified; (bso#8443).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- Handle the SECINFO_LABEL flag in the same was as Win2k3; enable Microsoft
Internet Explorer 9 on Windows 7 to download files; (bso#8458).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- DFS breaks zip file extracting unless \"follow symlinks = no\" set;
(bso#8493).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- s3-docs: Fix typos.

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- s3:smb2_server: SMB2_OP_CANCEL requests don\'t have to be signed; (bso#8503).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- Remove \"experimental\" label on VFS ACL modules; (bso#8494).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- s3-smbd: asserts when SMB2 client breaks the crediting rules; (bso#8476).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- s3-libnet: allow to use default krb5 ccache in libnet_Join/libnet_Unjoin;
(bso#7465).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- smb2_find uses a hard coded max reply size of 0x10000 instead of
smb2_max_trans; (bso#8473).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- s3-netapi: allow to use default krb5 credential cache for libnetapi users.

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- s3-docs: document -k switch in net manpage.

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- Map to guest can return uninitialized blob of data; (bso#8477).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- s3-registry: registry/reg_format.c must include includes.h; (bso#8401).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- smbclient segfaults when option -m is used for legacy dialects; (bso#8453).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- Fix \'widelinks\' regression intro\'d in 3.2; (bso#8229).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- Compound SMB2 requests on an IPC connection can corrupt the reply stream;
(bso#8429).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- s3-spoolss: Fix bug forms migration; (bso#8351).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- s3:libsmb: check the wct of the incoming SMBnegprot responses; (bso#8452).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- s3: Do not fork the echo handler for smb2; (bso#8334).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- s3-spoolss: Fix bug empty notify servername; (bso#8236).

Mon Oct 10 14:00:00 2011 lmuelleAATTsuse.de
- SMB2 server can return requests out-of-order when processing a compound
request; (bso#8407).

Fri Oct 7 14:00:00 2011 lmuelleAATTsuse.de
- Remove smb child crash fix. The issue had been fixed upstream differently.

Sun Oct 2 14:00:00 2011 lmuelleAATTsuse.de
- BuildRequire ctdb-devel version greater than 1.0.105 for post-10.0 systems.

Tue Sep 27 14:00:00 2011 hhetterAATTsuse.de
- Fix samba duplicates file content on appending. Move posix case semantics
out from under the VFS; (bso#6898); (bnc#681208).

Wed Sep 21 14:00:00 2011 jmcdonoughAATTsuse.de
- Make winbind child reconnect when remote end has closed, fix
failing sudo; (bso#7295); (bnc#569721).

Fri Sep 9 14:00:00 2011 lmuelleAATTsuse.de
- Spec file cleanup as suggested by the spec-cleaner tool.
+ Make all BuildRequires, PreReq, and Provides a separate line.
+ Use %{buildroot} instead of ${RPM_BUILD_ROOT}.
+ Use straight commands instead of macros (make, install).
+ Use -p in post and postun if we only call one command.
+ Use %{_localstatedir} instead of %{_var} in the filelist.
+ Remove superfluous AutoReqProv on lines.

Thu Sep 8 14:00:00 2011 lmuelleAATTsuse.de
- Remove %release from all Provides.

Thu Sep 1 14:00:00 2011 lmuelleAATTsuse.de
- Fix segfault in iconv.c which caused a null pointer dereference; (bso#8433).

Wed Aug 31 14:00:00 2011 lmuelleAATTsuse.de
- Use /var/run for the cifs state file in the init script too; (bnc#710304).

Tue Aug 30 14:00:00 2011 lmuelleAATTsuse.de
- Microsoft Word from Microsoft Office 2007 fails to save as on a share with
SMB2; (bso#8412).

Tue Aug 30 14:00:00 2011 lmuelleAATTsuse.de
- Use sys_write and sys_read in fork_domain_child to fix a winbind race
leading to 100% CPU usage; (bso#8409).

Tue Aug 30 14:00:00 2011 lmuelleAATTsuse.de
- Fix wrong reply to smb2 durable handle reconnect (DHnC) request; (bso#8428).

Tue Aug 30 14:00:00 2011 lmuelleAATTsuse.de
- Fix infinite loop in ACL module code; (bso#8422).

Mon Aug 29 14:00:00 2011 lmuelleAATTsuse.de
- Fix getent group if trusted domains are not reachable; (bso#8420).

Mon Aug 29 14:00:00 2011 lmuelleAATTsuse.de
- smbclient can\'t access a NT4 share since 3.6.0; (bso#8385).

Sat Aug 27 14:00:00 2011 lmuelleAATTsuse.de
- Optimize serverid_exists() for Solaris; (bso#8395).

Sat Aug 27 14:00:00 2011 lmuelleAATTsuse.de
- talloc:
+ check block count after references test.
+ added test suite for talloc_free_children().
+ license info erratum in the manpage.
+ fix typos and better differentiation between versions 1 and 2.
+ preserve context name on talloc_free_children().
+ ensure the sibling linked list remains valid during a free.

Sat Aug 27 14:00:00 2011 lmuelleAATTsuse.de
- vfs_chown_fsp returned in the wrong directory; (bso#8370).

Sat Aug 27 14:00:00 2011 lmuelleAATTsuse.de
- Remove irritating \".\" targets when recent system libs exist; (bso#8369).

Sat Aug 27 14:00:00 2011 lmuelleAATTsuse.de
- Correctly initialize \"idmap config
* : script\" with NULL; (bso#8368).

Sat Aug 27 14:00:00 2011 lmuelleAATTsuse.de
- Add missing include to suppress compiler warnings; (bso#8365).

Sat Aug 27 14:00:00 2011 lmuelleAATTsuse.de
- Point the chain offset beyond the current request; (bso#8360).

Sat Aug 27 14:00:00 2011 lmuelleAATTsuse.de
- Fix gpfs vfs module build; (bso#8364).

Sat Aug 27 14:00:00 2011 lmuelleAATTsuse.de
- Make vfs_prealloc even build on older systems; (bso#8363).

Sat Aug 27 14:00:00 2011 lmuelleAATTsuse.de
- Do central cli_set_error and return the actual NTSTATUS; (bso#7864).

Sat Aug 27 14:00:00 2011 lmuelleAATTsuse.de
- Add a fallback for missing open&x support in OS/X Lion; (bso#8338).

Tue Aug 9 14:00:00 2011 lmuelleAATTsuse.de
- Update to 3.6.0.
+ BUG 7462: Make SA_RESETHAND conditional on its existance.
+ BUG 8303: db_ctdb_send_schedule_for_deletion() is not defined.
+ BUG 8324: smbclient cannot list directories from a big-endian machine.
+ BUG 8326: WinXP cannot join a Samba3 domain with a \'even\' hostname.
+ BUG 8327: Fix the reload of the configuration, also reload activated
registry shares.
+ BUG 8328: Cleanup of idmap_tdb2 code.
+ BUG 8330: Fix NFSv4 ACL merging logic.
+ BUG 8335: File copy aborts with smb2_validate_message_id: bad message_id.
+ BUG 8341: Fix segfault in libsmbclient.
+ BUG 8343: Fix SMB2 crash reading with aio_fork beyond the end of file.
+ BUG 8347: Fix regression for HP-UX, AIX and OSF.
+ BUG 8357: Make sure we grant credits on async read/write operations.
+ BUG 8358: Fix a bug in run_poll_events().
+ BUG 8362: Fix build issue on old glibc systems.

Mon Aug 8 14:00:00 2011 lmuelleAATTsuse.de
- Remove references to disabled vscan build.

Thu Aug 4 14:00:00 2011 lmuelleAATTsuse.de
- Add missing define, includes, and initialization to get_printing_ticket.

Thu Aug 4 14:00:00 2011 lmuelleAATTsuse.de
- Use /var/run for the cifs state file; (bnc#710304).

Mon Aug 1 14:00:00 2011 lmuelleAATTsuse.de
- Fix #ifdef CTDB_CONTROL_SCHEDULE_FOR_DELETION issue; (bso#8303).

Mon Aug 1 14:00:00 2011 lmuelleAATTsuse.de
- File copy aborts with smb2_validate_message_id: bad message_id; (bso#8335).

Sun Jul 31 14:00:00 2011 lmuelleAATTsuse.de
- Fix reload of the configuration and also reload activated registry shares;
(bso#8327).

Sun Jul 31 14:00:00 2011 lmuelleAATTsuse.de
- WinXP cannot join a Samba3 domain with a \'even\' hostname; (bso#8326).

Thu Jul 28 14:00:00 2011 lmuelleAATTsuse.de
- smbclient cannot list directories from a big-endian machine; (bso#8324).

Wed Jul 27 14:00:00 2011 lmuelleAATTsuse.de
- Update to 3.6.0rc3.
+ BUG 7841: Explicitly pass domain_sid to wbint_LookupRids().
+ BUG 7888: Deal with buggy 3.0 based PDCs.
+ BUG 8083: Fix \"inherit owner = yes\" with vfs_acl_xattr or vfs_acl_tdb
module.
+ BUG 8102: Do not allow to change file ACLs from normal domusers.
+ BUG 8102: Do not allow to change file ACLs from normal domusers.
+ BUG 8193: Add new command \'enumerate_recursive\'.
+ BUG 8195: Make rpc client code working against NT4 servers.
+ BUG 8211: Fix \"inherit owner = yes\" when \"inherit permissions = yes\" is
set.
+ BUG 8213: Fixes in idmap_autorid.
+ BUG 8214: Fix smbd crash on printer driver upgrade.
+ BUG 8215: Fix Winbind unix username lookup.
+ BUG 8216: Make Winbind returning correct results with \'sids2xids\'.
+ BUG 8217: Do not stat-check the share path in \'net conf addshare\'.
+ BUG 8219: Fix SMB Panic from Windows 7 client.
+ BUG 8224: Fix the build on FreeBSD.
+ BUG 8226: Use c99 initializers which are supported by old gcc 2.95
compilers.
+ BUG 8230: Move .nmbd socket directory to non-hidden name PREFIX/var/nmbd.
+ BUG 8231: Fix crash bug in \'net cache get\'.
+ BUG 8235: Fix smbd crash on startup caused by migrate_printer().
+ BUG 8240: Fix Valgrind warnings in winreg/spoolss code.
+ BUG 8244: Fix copying files larger than 2 GB to a Samba share.
+ BUG 8247: Fix Coverity ID 2582: FORWARD_NULL.
+ BUG 8253: Fix Winbind panic if verify_idpool() fails.
+ BUG 8254: Fix \"acl check permissions = no\".
+ BUG 8260: Fix DCERPC responses with fragments larger than 1024 bytes.
+ BUG 8262: Fix build of vfs_commit.
+ BUG 8263: Fix build with --with-fake-kaserver or --with-vfs-afsacl.
+ BUG 8264: Fix Valgrind bugs in svcctl.
+ BUG 8276: Close all sockets attached to a subnet in close_subnet().
+ BUG 8278: Fix smbd panic when CTDB is unhealthy.
+ BUG 8281: Fix build of examples/VFS/
*.
+ BUG 8286: Fix smbd crash on premature end of smb2 conn.
+ BUG 8292: Fix a major architectural flaw in the SMB2 server code.
+ BUG 8293: Fix log file rotating in SMB2.
+ BUG 8304: Fix uninitialized variable in error path.
+ BUG 8305: Fix segfault in nmbd when using \'smbtree ...\'..
+ BUG 8307: brl_close_fnum does not call SMB_VFS_BRL_UNLOCK_WINDOWS on all
locks.
+ BUG 8310: toupper_ascii() is broken on big-endian systems.
+ BUG 8314: Fix smbd crash with unknown user.
+ Mark \'time offset\' parameter as deprecated.

Tue Jul 26 14:00:00 2011 lmuelleAATTsuse.de
- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are
affected by a cross-site scripting vulnerability; CVE-2011-2694; (bso#8289);
(bnc#708503).

Tue Jul 26 14:00:00 2011 lmuelleAATTsuse.de
- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are
affected by a cross-site request forgery; CVE-2011-2522; (bso#8290);
(bnc#705241).

Mon Jul 25 14:00:00 2011 shargaganAATTnovell.com
- Fixed the DFS referral response for msdfs root; (bnc#703655).

Wed Jul 20 14:00:00 2011 ddissAATTsuse.de
- Fix CUPS print job IDs; (bso#7288); (bnc#701257).

Thu Jul 14 14:00:00 2011 lmuelleAATTsuse.de
- Make use of the actual library version as part of the package name on
post-11.3 systems only.

Mon Jul 11 14:00:00 2011 jmcdonoughAATTsuse.de
- Fix winbind internal error; (bso#7636); (bnc#659424).

Mon Jul 11 14:00:00 2011 ddissAATTsuse.de
- Improve ctdb vacuuming performance with use of SCHEDULE_FOR_DELETION;
(bnc#705170).

Mon Jun 20 14:00:00 2011 ddissAATTsuse.de
- Specify nmbdsocketdir at configure time; (bnc#700953).

Thu Jun 9 14:00:00 2011 lmuelleAATTsuse.de
- Build the tdb, talloc, and tevent libraries ahead of anything else.

Tue Jun 7 14:00:00 2011 jmcdonoughAATTsuse.de
- Update to 3.6.0rc2.
+ BUG 6911: Fix Kerberos authentication from Vista to Samba.
+ BUG 8166: Don\'t lockout users when offline.
+ BUG 8200: Add support for multiple writeable ldap idmap domains.
+ BUG 8148: Default to protocol version 2 for SMB Traffic Analyzer.
+ BUG 7054: Fix X account flag when \"pwdlastset\" is \"0\".
+ BUG 8144: Fix setting timestamp when touching files with CIFS clients.
+ BUG 8153: Fix setting up getaddrinfo on IPv6-only machines.
+ BUG 8156: Fix \'net ads join\' using the user\'s Kerberos ticket.
+ BUG 8157: Fix parsing a cups printcap file.
+ BUG 8175: Fix smbd deadlock.
+ BUG 8189: Support shadow copy display over SMB2.
+ BUG 8197: Winbind does not properly detect when a DC connection is dead.
+ BUG 8203: Winbind needs to reset the DC connection if an RPC times out.

Mon Jun 6 14:00:00 2011 mrsbAATTnovell.com
- Make cupsaddsmb fill printers location; (bso#8132); (bnc#698209).

Fri Jun 3 14:00:00 2011 lpechacekAATTsuse.cz
- Add \"winbind max clients\" parameter to remove 200-client
limit; (bnc#697461).

Fri Jun 3 14:00:00 2011 jmcdonoughAATTsuse.de
- Disable logon cache for password lockout consistency when
running in a cluster; (bnc#694836).

Fri May 27 14:00:00 2011 jmcdonoughAATTsuse.de
- Fix logon of AD users with many group memberships; (bso#6911);
(bnc#657026).

Wed May 25 14:00:00 2011 jmcdonoughAATTsuse.de
- Don\'t lockout users while offline; (bso#8166); (bnc#692607).

Mon May 23 14:00:00 2011 lmuelleAATTsuse.de
- Update to 3.6.0rc1.
+ BUG 8111: CIFS VFS: Fix unexpected error on SMB posix open.
+ BUG 8112: POSIX extension opens of a directory are denied with EISDIR.
+ BUG 8132: Fix filling printers location field when using cups.
+ Remove fstrings from client struct.
+ BUGFIX when converting from safe_strcpy to strlcpy.
+ Fix off-by-one calculations with strlcpy.
+ Ensure we always write the correct incoming mid into the share mode table
entries.
+ Fix the SMB2 oplock showstopper.
+ Convert user-specified domain to uppercase in libsmb.
+ Fix Coverity CID #2302: FORWARD_NULL.
+ Fix cups_pull_comment_location().
+ Fix double free of cups request.
+ Make cups_pull_comment_location() work again.
+ Fix potential crash bug in display_print_driver3().
+ Properly clean up in pthreadpool_init in case of failure.
+ Make plaintext session setup async.
+ Reduce fd load in Winbind children.
+ Avoid a potential 100% CPU loop in Winbind.
+ Tune broadcast namequeries for unique names.
+ Properly deal with exited winbind children.
+ Fix dup_smb2_vec3.
+ Fix return check in nss_wins.

Tue May 17 14:00:00 2011 shargaganAATTnovell.com
- Fix to renew the kerberos ticket in samba after expiry; (bnc#669949).

Mon May 16 14:00:00 2011 ddissAATTsuse.de
- Fix a 100% CPU loop when ctdbd dies during a traverse; (bnc#693945).

Thu May 5 14:00:00 2011 lmuelleAATTsuse.de
- Make dhcpcd hook BOOTPROTO check cover dhcp6 too; (bnc#691969).

Thu May 5 14:00:00 2011 shargaganAATTnovell.com
- Handling of large (> 256 bytes) ntlmv2 blobs in winbind; (bnc#529946).

Sat Apr 30 14:00:00 2011 lmuelleAATTsuse.de
- Package static libraries with 0644 permissions.

Sat Apr 30 14:00:00 2011 lmuelleAATTsuse.de
- Add Requires libtalloc-devel to libldb-devel and libtevent-devel.

Sat Apr 30 14:00:00 2011 lmuelleAATTsuse.de
- Rename libldb0 to libldb1 as 1 is the current major version of the library.
- Add libldb1 and libtevent0 to baselibs.conf.

Fri Apr 29 14:00:00 2011 lmuelleAATTsuse.de
- Don\'t call the suse_update_config macro before building lib ldb and tevent.

Fri Apr 29 14:00:00 2011 lmuelleAATTsuse.de
- Update to 3.6.0pre3.
+ Listen on IPv6 addresses with IPV6_ONLY; (bso#7383).
+ Fix wrong output in \'smbget\'; (bso#8066).
+ \"inherit owner = yes\" doesn\'t interact correctly with vfs_acl_xattr or
vfs_acl_tdb module; (bso#8083).
+ rpccli_samr_chng_pswd_auth_crap segfaults if any input blobs are null;
(bso#8088).
+ setpwent() actually does endpwent() and vice versa on FreeBSD; (bso#8099).
+ Fix the build of \'smbget\' on HP NonStop; (bso#8106).
+ Fix build of tdb2.
+ Correctly detect and deny symlinks anywhere in a path (not just the last
component) if \"follow symlinks = no\".
+ Fix timeout in rpc_pipe_open_tcp_port().
+ Fix the build of \"--with-profiling-data\".
+ Fix Coverity IDs 986, 1340, 2047, 2299, 2307, 2325, 2335, 2336, 2470,
2471, 2478.
+ nsswitch: Add \'wbinfo --lookup-sids\'.
+ nsswitch: Add \'wbinfo --sids-to-unix-ids\'.
+ Fix smbd with the async echo responder.
+ Fix the build of vfs_gpfs.c.
+ Add a 10-second timeout for the 445 or netbios connection to a DC.
+ Many pthreadpool fixes.
+ Fix transaction recovery area for converted tdbs.

Thu Apr 28 14:00:00 2011 lmuelleAATTsuse.de
- Add PreReq permissions to the krb-printing package.

Thu Apr 28 14:00:00 2011 lmuelleAATTsuse.de
- Remove _libdir ldb and tevent from file list.
- Explicitly state not to bundle talloc or tdb while ldb and tevent build.

Thu Apr 21 14:00:00 2011 lmuelleAATTsuse.de
- Always use the actual library version as part of the package name.
- Exclude shared python modules.

Thu Apr 21 14:00:00 2011 ddissAATTsuse.de
- Fix printing from Windows 7 clients; (bso#7567); (bnc#687535).

Thu Apr 21 14:00:00 2011 ddissAATTsuse.de
- Update pidl and always compile IDL at build time; (bnc#688810).

Thu Apr 14 14:00:00 2011 lmuelleAATTsuse.de
- Update to 3.6.0pre2.
+ ID Mapping changes.
+ Implement SMB2 support.
+ Add an Endpoint Mapper daemon.
+ Make \"rlimit_max below minimum Windows limit\" notification less scary;
(bso#6837).
+ Quota only shown when logged as root; (bso#7080).
+ Fix printing from Windows 7; (bso#7567).
+ Retry DNS updates when connection to one nameserver has failed; (bso#7690).
+ Unlink may unlink wrong file when hardlinks are involved; (bso#7863).
+ Fix \'nmbd --port\'; (bso#7875).
+ cmd_spoolss_deletedriver() returned without checking all architectures;
(bso#7880).
+ Don\'t return \"-1\" on success in \'net rpc vampire keytab\'; (bso#7899).
+ Fix cups pcap reload with no printers; (bso#7915).
+ Fix bug in chain_reply; (bso#7917).
+ Fix problems with \"kernel oplocks\" option set to \"no\"; (bso#7928).
+ Fall back for utimes calls; (bso#7940).
+ Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944).
+ Let winbind try to use samlogon validation level 6; (bso#7945).
+ Sgid bit lost on folder rename; (bso#7996).
+ Fix getting username in \'net rap session\'; (bso#8009).
+ Fix inode generation so nautilus can count total dir size correctly;
(bso#8010).
+ Use jenkins hash for str_checksum; (bso#8010).
+ Add explicit configure option whether or not to enable dmapi support;
(bso#8033).
+ Fix smbclient segfault with Cyrillic netbios names; (bso#8040).
+ Fix file creation on OS/X; (bso#8042).
+ Add \"--option\" to \'testparm\'.
+ Fix crash bug on smbd shutdown when using FOPENDIR().
+ Ensure we don\'t return an incorrect access mask.
+ Fix bug against the new Mac client.
+ Fix leak in error path.
+ Fix error where Windows client spoolss returns WERR_INVALID_DATA.
+ Fix a segfault in the krb5 locator plugin.
+ Enable sharesec for registry shares.
+ Fix memory leak in \"security=share\" and \"force user\".
+ Add \"net idmap check\", a check and repair tool for the
id mapping database.
+ Add new \'net idmap delete\' command.
+ Fix segfault on missing input file in \'net idmap restore\'.
+ Fix \'net usersidlist\' not to skip every other user.
+ Fix potential crash bug in spoolss_PrinterEnumValues push path.
+ Internal restructuring.
+ Don\'t wipe out all printer drivers when only one should be deleted.
+ Fix winbindd_dual_pam_auth_samlogon() for NT4 domains.
+ Fix memory leak in print_cups.c.
+ Remove duplicate cups response processing code.
+ Follow force user/group for driver IO.
+ Initiate pcap reload from parent smbd.
+ Reload shares after pcap cache fill.
+ Fix numerous Coverity IDs (2041 and others).
+ Fix a memory leak in check_sam_security_info3.
+ Fix a segfault in the nss wrapper when libnss_winbind.so is not loadable.
+ Make \"net sam list [users|workstations]\" list only the right things.
+ Fix a potential memleak in secrets_fetch_trusted_domain_password.
+ Use the right credentials in check_netlogond_security.
+ Add support for AF_NETLINK addr notifications.
+ Fork multiple Winbind children per domain.
+ Fix a deadlock between smbd and ctdbd.
+ Add \'wbinfo --dc-info\'.
+ Make \"nmbd socket dir\" configurable.
+ Fixed valgrind errors.
+ Fix a memleak in receive_getdc_response.
+ Don\'t grant SEC_STD_DELETE always to the owner of a file.
+ Fix segfaults on addrchange errors in Winbind.
+ Allow machine accounts as members in groupdb.
+ Add IPv6 support for the endpoint mapper.
+ Free unused memory in the rpc server.
+ Fix possible segfaults in svcctl server.
+ Fix possible segfault with client_id in rpc server.
+ Add a \'svcctl shutdown\' function to rpc server.
+ Fix a resource leak in net_afs.
+ Fix a resource leak in smbta-util.
+ Fix possible resource leak in net_usershare.
+ Fix possible resource leak in \'smbget\'.
+ Fix possible resource leak in \'smbfilter\'.
+ Fix a possible null pointer dereference in smbd.
+ Ensure we send the direct levelII oplock break to the correct fid.
+ Fix private libdir and codepages paths.
- Add RFC 3454 to the vendor files.

Thu Apr 7 14:00:00 2011 jmcdonoughAATTsuse.de
- Fix idmap_tdb for big-endian systems such as ppc and s390;
(bso#6901); (bnc#675978).

Thu Mar 24 13:00:00 2011 ddissAATTsuse.de
- Fix smbclient -M NT_STATUS_PIPE_BROKEN failure; (bso#7635); (bnc#681913).

Fri Mar 18 13:00:00 2011 lmuelleAATTsuse.de
- Replace jobs by _smp_mflags macro while calling make on post-11.4 systems.

Thu Mar 17 13:00:00 2011 ddissAATTsuse.de
- Don\'t crash when publishing a single printer; (bnc#643119).

Wed Mar 9 13:00:00 2011 ddissAATTsuse.de
- Carry error status in printer list IPC message, do not refresh printers if
cups is unavailable; (bso#7994); (bnc#675478).

Wed Mar 9 13:00:00 2011 lmuelleAATTsuse.de
- Define the libwbclient packages ahead of packages with a different version.

Wed Mar 9 13:00:00 2011 jengelhAATTmedozas.de
- Use %_smp_mflags for parallel building.

Mon Mar 7 13:00:00 2011 lmuelleAATTsuse.de
- Update to 3.5.8.
+ Fix Winbind crash bug when no DC is available; (bso#7730).
+ Fix finding users on domain members; (bso#7743).
+ Fix memory leaks in Winbind; (bso#7879).
+ Fix printing with Windows 7 clients; (bso#7567).
+ Fix \'testparm\' return code when EOF in encountered in param name;
(bso#3185).
+ Make \"rlimit_max below minimum Windows limit\" notification less scary;
(bso#6837).
+ Fix \"Your Password expires today\" message for users of trusted domains;
(bso#7066).
+ Fix maintaining of users\' groups via UsrMgr; (bso#7262).
+ Fix \'net ads dns register\' in Windows 2008 R2 domains; (bso#7356).
+ Raise debug level for \"reduce_name: couldn\'t get realpath\" messages;
(bso#7409).
+ Fix updating the time on close in vfs_gpfs; (bso#7498).
+ Fix \"log=>ndr_pull_error\" in \'wbinfo -u\' and \'wbinfo -g\'; (bso#7594).
+ Handle Windows 9x adddriver calls without config file; (bso#7641).
+ Fix scalability problem with hundreds of printers; (bso#7656).
+ Fix memory leak in the netapi routines; (bso#7665).
+ Store unmodified copies of security descriptors in acl_xattr and acl_tdb
modules; (bso#7716).
+ Fix incorrect unix mode_t caused by invalid client DOS attributes on
create; (bso#7733).
+ Apply appropriate create masks when creating files with \"inherit ACLs\" set
to true; (bso#7734).
+ Fix \"dfree cache time\" parameter; (bso#7744).
+ Fix a getgrent crash with many groups; (bso#7774).
+ Fix requesting lookups for BUILTIN sids; (bso#7777).
+ Fix smbd crash caused by expand_msdfs; (bso#7779).
+ Fix atime limit; (bso#7785).
+ vfs_scannedonly: Switch from mtime to ctime which is more reliable;
(bso#7789).
+ Fix copying files from a SMB share using Gnome vfs and SMB signing;
(bso#7791).
+ Make Winbind recover from a signing error; (bso#7800).
+ ACL inheritance cannot be disabled in vfs_acl_xattr/vfs_acl_tdb;
(bso#7812).
+ Fix \"force group\" with ntlmssp guest session setup; (bso#7817).
+ vfs_fill_sparse() doesn\'t use posix_fallocate when strict allocate is on;
(bso#7835).
+ Make WINBINDD_LOOKUPRIDS asking the right domain; (bso#7841).
+ Make WINBINDD_LOOKUPRIDS returning the domain name; (bso#7842).
+ Expand the local SAMs aliases; (bso#7843).
+ ntlm_auth: Support clients which offer a spnego mechs we don\'t support;
(bso#7855).
+ Fix \'net ads dns register\' in cluster setups; (bso#7871).
+ Fix \'nmbd --port\'; (bso#7875).
+ Make \'rpcclient deldriver\' delete drivers for all architectures;
(bso#7880).
+ Fix flaky Winbind against Windows 2008; (bso#7881).
+ Fix SMB session setups with Kerberos against some closed source SMB
servers; (bso#7883).
+ Fix stale lock in open_file_fchmod(); (bso#7892).
+ Fix sporadic Winbind panic in rpc query_user_list; (bso#7894).
+ Don\'t set SAMR_FIELD_FULL_NAME if we just want to set the account name;
(bso#7896).
+ Don\'t return \"-1\" on success in \'net rpc vampire keytab\'; (bso#7899).
+ Fix connections from WinCE; (bso#7917).
+ Fix opening MS Powerpoint files; (bso#7940).
+ Fix endless loops caused by inotify; (bso#7942).
+ Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944).
+ Let Winbind try to use samlogon validation level 6; (bso#7945).
+ Revalidate the pathname once re-constructed from a root fsp; (bso#7950).

Fri Mar 4 13:00:00 2011 lmuelleAATTsuse.de
- Require a particular library version even if the major version is part of
the package name. Using the same major version does not guarantee forward
compatibility.

Fri Mar 4 13:00:00 2011 ddissAATTsuse.de
- Fix a fd-leak in libwbclient at dlclose-time; (bso#7684); (bnc#668773).

Mon Feb 28 13:00:00 2011 lmuelleAATTsuse.de
- Update to 3.5.7
+ Protect against possible denial of service caused by memory corruption;
CVE-2011-0719; (bso#7949); (bnc#670431).

Wed Feb 23 13:00:00 2011 lmuelleAATTsuse.de
- Disable separate build of samba-doc for post-11.1 systems.

Tue Feb 22 13:00:00 2011 lmuelleAATTsuse.de
- Protect against possible denial of service caused by memory corruption;
CVE-2011-0719; (bso#7949); (bnc#670431).

Thu Feb 17 13:00:00 2011 ddissAATTsuse.de
- Increase the log level for missing PIDs on SIGCHLD, printcap child processes
are not added to the children PID list; (bnc#666460).

Thu Feb 10 13:00:00 2011 lmuelleAATTsuse.de
- Do not require a particular library version if the major version is part of
the package name.

Wed Feb 9 13:00:00 2011 lmuelleAATTsuse.de
- Use the actual version numbers of the ldb, talloc, tdb, and tevent libraries
on post-11.3 systems.

Sun Jan 23 13:00:00 2011 ddissAATTsuse.de
- Abide by print$ share \'force user\' & \'force group\' settings when handling
AddprinterDriver and DeletePrinterDriver requests; (bso#7921); (bnc#653353).

Tue Jan 18 13:00:00 2011 ddissAATTsuse.de
- Remove pcap_cache_loaded asserts from (re)load_printers. pcap_cache_loaded()
returns false if the pcap cache contains no printer entries. correct call
ordering is already enforced. (bso#7836); (bnc#625936).

Fri Jan 14 13:00:00 2011 lmuelleAATTsuse.de
- No longer force activation of the cifs service on post-11.3 systems.
- Add X-UnitedLinux-Default-Enabled to the cifs init script on pre-11.4
systems.
- Move the cifs init script nfs dependencies from Required to Should.

Tue Jan 4 13:00:00 2011 lmuelleAATTsuse.de
- Recommend to install samba-krb-printing from samba-winbind on post-10.3
systems; (bnc#661845).

Thu Dec 30 13:00:00 2010 ddissAATTsuse.de
- Fix error paths in cups_async_callback(), an empty cups printer list should
not be treated as an error; (bnc#661842).

Tue Dec 21 13:00:00 2010 ddissAATTsuse.de
- Abide by printcap cache time, reload parent smbd pcap cache on expiry;
(bso#7836); (bnc#625936).

Fri Dec 17 13:00:00 2010 ddissAATTsuse.de
- Fix race in cups async printer services reload; (bso#7836); (bnc#625936).

Sun Dec 12 13:00:00 2010 roAATTsuse.de
- Don\'t tweak with baselibs.conf during %post if not present; (bnc#652620).

Thu Dec 9 13:00:00 2010 lmuelleAATTsuse.de
- Don\'t make use of baselibs.conf on SUSE Linux Enterprise 10; (bnc#652620).

Tue Dec 7 13:00:00 2010 lmuelleAATTsuse.de
- Don\'t use --tmpdir as this option isn\'t known by mktemp of SUSE Linux
Enterprise 10; (bnc#652620).

Sun Dec 5 13:00:00 2010 larsAATTsamba.org
- vfs_fill_sparse() doesn\'t use posix_fallocate when strict allocate is on;
(bso#7835).

Fri Dec 3 13:00:00 2010 lmuelleAATTsuse.de
- Replace Requires samba-client by samba-gplv3-client in the gplv3 packages;
(bnc#652620).

Tue Nov 30 13:00:00 2010 ddissAATTsuse.de
- Fix Dolphin SMB share IO with SMB signing enabled; (bso#7791); (bnc#656112).

Tue Nov 30 13:00:00 2010 lmuelleAATTsuse.de
- Add Conflicts to the samba-gplv3 main, client, doc, krb-printing, winbind,
client-gplv2, and doc-gplv2 packages; (bnc#652620).

Fri Nov 26 13:00:00 2010 lmuelleAATTsuse.de
- Add Provides samba-client-gplv2 and samba-doc-gplv2 to pre-3.2 versions;
(bnc#652620).

Fri Nov 26 13:00:00 2010 lmuelleAATTsuse.de
- Obsolete samba-client-gplv2 and samba-doc-gplv2; (bnc#652620).

Thu Nov 25 13:00:00 2010 lmuelleAATTsuse.de
- Remove Provides samba-client:/usr/sbin/winbindd from the samba-gplv3-winbind
package to avoide an accidental install trigger; (bnc#652620).

Thu Nov 25 13:00:00 2010 lmuelleAATTsuse.de
- Add Provides samba-client to the samba-gplv3-client package; (bnc#652620).

Wed Nov 24 13:00:00 2010 lmuelleAATTsuse.de
- Remove all Obsoletes from the samba-gplv3 packages and only keep the
Provides samba; (bnc#652620).

Sat Nov 20 13:00:00 2010 lmuelleAATTsuse.de
- Add fitting Conflicts to all samba-gplv3 packages; (bnc#652620).

Fri Nov 19 13:00:00 2010 jmcdonoughAATTsuse.de
- Reduce unnecessary ldap round trips and eliminate invalid DN
messages; (bnc#654719).

Fri Nov 12 13:00:00 2010 lmuelleAATTsuse.de
- Exclude cifs-mount and ldapsmb from the samba-gplv3 build of SUSE Linux
Enterprise 10 SP 3 and 4.

Thu Nov 11 13:00:00 2010 lmuelleAATTsuse.de
- Add the _build_arch at the end of the vendor version suffix.

Thu Oct 28 14:00:00 2010 lmuelleAATTsuse.de
- Provide and Obsolete samba-gplv3 to replace potentially installed packages.

Fri Oct 15 14:00:00 2010 lmuelleAATTsuse.de
- Change package base name to samba-gplv3 for SUSE Linux Enterprise 10 SP 4.
- Do not package libsmbclient and libsmbsharemodes.

Sun Oct 10 14:00:00 2010 jmcdonoughAATTsuse.de
- Update to 3.5.6
+ Fix auto printers with registry config; (bso#7280); (bnc#617153).
+ Fix SPNEGO auth when contacting Win7 system using Microsoft Live
Sign-in Assistant; (bso#7577).
+ Fix \'net idmap restore\' setting HWM to avoid duplicates; (bso#7578).
+ Fix \"admin users\" when using vfs_acl_xattr; (bso#7581).
+ Fix using cached credentials in ntlm_auth; (bso#7589).
+ Fix Winbind offline login; (bso#7590).
+ Fix Winbind internal error; (bso#7636).
+ Fix mknod/mkfifo failing with \"No such file or directory\"; (bso#7651).
+ Fix smbd changing mode of files on rename; (bso#7693).
+ Fix crash bug with invalid SPNEGO token; (bso#7694).
+ Fix smbd panic on invalid NetBIOS session request; (bso#7698).
+ Fix smbd crash caused by \"%D\" in \"printer admin\"; (bso#7541).
+ Fix \'smbclient -M\'; (bso#7635).
+ Fix scalability problem with hundreds of printers; (bso#7656).
+ Fix crash bug in rpcclient; (bso#7688).
+ Fix file corruption when setting Samba \"write wache wize\"; (bso#7715).

Thu Oct 7 14:00:00 2010 lmuelleAATTsuse.de
- Let startproc wait for nmb, smb and winbind pid files getting created on
post-11.1 systems; (bnc#520036).

Thu Oct 7 14:00:00 2010 hhetterAATTsuse.de
- Include the reviewed french translation for pam_winbind; (bnc#499233).

Thu Sep 23 14:00:00 2010 ddissAATTsuse.de
- Fix smbd crash with CUPS printers and no [printers] share defined;
(bso#7297); (bnc#637755).

Mon Sep 20 14:00:00 2010 jmcdonoughAATTsuse.de
- Fix printing from 64-bit windows clients; (bso#6888); (bnc#640870).

Sun Sep 12 14:00:00 2010 cooloAATTnovell.com
- Fix baselibs.conf for libtalloc.

Wed Sep 8 14:00:00 2010 lmuelleAATTsuse.de
- Fix buffer overflow in sid_parse() to correctly check the input lengths when
reading a binary representation of a Windows Security ID (SID);
CVE-2010-3069; (bso#7669); (bnc#637218).

Mon Aug 30 14:00:00 2010 jmcdonoughAATTsuse.de
- Use cached ntlm password in libsmbclient. Prevent lockouts
when kerberos tickets are lost; (bnc#602418); (bnc#606304).

Thu Aug 26 14:00:00 2010 gberAATTopensuse.org
- Add a dependency on nfs to the smbfs/ cifs init scripts as they require the
en_US locale and /usr might be on NFS.

Mon Aug 23 14:00:00 2010 jmcdonoughAATTsuse.de
- Complete fix for trusts with Windows 2008R2 DCs.

Fri Aug 20 14:00:00 2010 jmcdonoughAATTsuse.de
- Fix authentication dialogs when connecting to older systems;
(bnc#632055).

Thu Aug 19 14:00:00 2010 lmuelleAATTsuse.de
- Adjust position of conditional ldapsmb %package and %files definition.

Thu Aug 19 14:00:00 2010 lmuelleAATTsuse.de
- Create the /var/run/samba directory on the fly and package it as %ghost.

Thu Aug 19 14:00:00 2010 jmcdonoughAATTsuse.de
- Fix preexec scripts; (bso#7104); (bnc#632852).

Thu Aug 19 14:00:00 2010 lmuelleAATTsuse.de
- Add missing netapi, smbclient, smbsharemodes, talloc, tevent, and wbclient
pkgconfig files and BuildRequire pkgconfig; (bnc#632770).

Tue Aug 17 14:00:00 2010 lmuelleAATTsuse.de
- BuildRequire python-devel for post-9.3 systems.

Tue Aug 17 14:00:00 2010 lmuelleAATTsuse.de
- Only create precompiled headers for post-10.2 systems.
- Remove mkinitrd scriptlets.

Tue Aug 17 14:00:00 2010 lmuelleAATTsuse.de
- Add vfs_crossrename man page.
- Call make basic and remove conditional proto target.
- Increase libtevent version to 0.9.9.
- Remove wbc_async header from the file list.
- Remove remaining cifs-mount pieces from the spec file.

Mon Aug 16 14:00:00 2010 jmcdonoughAATTsuse.de
- Fix printers not auto loading with registry config; (bso#7280);
(bnc#617153).

Sun Aug 15 14:00:00 2010 lmuelleAATTsuse.de
- Update to 3.6.0pre1.
+ SMB2 support is fully functional despite managing quota using the
Microsoft management tools.
+ Internal Winbind passdb changes to use samr and lsa rpc pipe to get local
user and group information.
+ The spoolss and the old RAP printing code have been completely overhauled
and refactored.
+ The SMB Traffic Analyzer (SMBTA) VFS module got added.

Sun Aug 15 14:00:00 2010 lmuelleAATTsuse.de
- Intilize workgroup of nmblookup as empty string.

Thu Aug 12 14:00:00 2010 jmcdonoughAATTsuse.de
- Fix net ads join when using parent domain users; (bso#6364);
(bnc#630812).

Wed Jul 28 14:00:00 2010 sjayaramanAATTsuse.de
- cifs: do not restart during dhcp lease renewal when IPaddress remains
the same; (bnc#573246).

Mon Jul 5 14:00:00 2010 lmuelleAATTsuse.de
- Fix \"Too many open files\" when trying to access large number of files;
(bso#6837); (bnc#619787).

Wed Jun 23 14:00:00 2010 lmuelleAATTsuse.de
- Update to 3.5.4.
+ Fix smbd crash when sambaLMPassword and sambaNTPassword entries missing
from ldap (bug #7448).
+ Fix init_sam_from_ldap storing group in sid2uid cache (bug #7507).
+ Allow previous password to be stored and use it to check tickets;
(bso#7099).
+ Make ea data checks identical for trans2open and trans2mkdir; (bso#7188).
+ Fix editing users\' groups via UsrMgr; (bso#7262).
+ Fix Winbind over IPv6; (bso#7341).
+ Samba sends \"raw\" inode number as uniqueid with unix extensions;
(bso#7410).
+ Fix printing large formats; (bso#7423).
+ Fix spnego returning incorrect mechListMIC string; (bso#7449).
+ Fix some crash bugs and missing error codes in AddDriver paths;
(bso#7459).
+ Fix crash bug in _samr_QueryUserInfo{2} level 18; (bso#7479).
+ Fix \'not a string literal\' warning in netdomjoin-gui; (bso#7500).
+ Fix calculation of st_blocks in vfs_streams_xattr; (bso#7503).
+ Fix numerous build issues; (bso#7504).
+ Fix session setup from linux kernel cifs clients with \"sec=ntlmv2\";
(bso#7517).

Mon Jun 21 14:00:00 2010 lmuelleAATTsuse.de
- Remove all provides and obsoletes samba3 from the spec file. Packages with
this base name have not been offered as part of a product.

Fri Jun 11 14:00:00 2010 lmuelleAATTsuse.de
- Fix a NULL pointer dereference in smbd of the 3.4 code base;
CVE-2010-1635; (bso#7229); (bnc#605935).

Tue Jun 8 14:00:00 2010 lmuelleAATTsuse.de
- Address possible buffer overrun in chain_reply code of pre-3.4 versions;
CVE-2010-2063; (bso#7494); (bnc#611927).

Mon Jun 7 14:00:00 2010 hhetterAATTsuse.de
- Update of the SMB Traffic Analyzer v2 VFS module

Fri May 28 14:00:00 2010 jmcdonoughAATTsuse.de
- Fix trusts with Windows 2008R2 DCs; (bnc#613459); (bnc#599873);
(bnc#592198); (bso#6697).

Wed May 19 14:00:00 2010 lmuelleAATTsuse.de
- Update to 3.5.3.
+ Fix MS-DFS functionality; (bso#7339).
+ Fix a Winbind crash when scanning trusts; (bso#7389).
+ Fix problems with SIGCHLD handling in Winbind; (bso#7317).
+ Add replacement for IPV6_V6ONLY on linux systems with broken headers;
(bso#7196).
+ Fix cups encryption setting; (bso#7263).
+ Fix exporting printers via \'cupsaddsmb\' command; (bso#7277).
+ Fix SMB job IDs in CUPS job names; (bso#7288).
+ Fix segfault in mount.cifs; (bso#7315).
+ Make TIME_T_MAX defines consistent; (bso#7352).
+ Re-fix a bug with smbd serving a windows terminal server; (bso#7357).
+ Display an error on \'net conf import\' failures; (bso#7378).
+ Fix bitmap leak in dptr_Close; (bso#7384).
+ Fix rename problems with full_audit VFS module; (bso#7398).
+ Fix setting of passwords via \'net rpc user password\' command; (bso#7417).
+ Fix \'net rpc printer list\' command; (bso#7418).
+ Rename mod_name to module_name; (bso#7421).
- Fix unnecessary traversing winbindd_cache.tdb in SIGHUP handler.
- Added EN ISO 216, A0 and A1 to builtin forms; (bso#7423).
- Winbind not working over IPv6; (bso#7341).

Tue May 18 14:00:00 2010 jmcdonoughAATTsuse.de
- Honor \"interfaces\" list in net ad dns register; (bnc#606947).

Tue May 18 14:00:00 2010 lmuelleAATTsuse.de
- Exclude the RPM release from the vendor tag for openSUSE Factory;
(bnc#604049).

Thu Apr 29 14:00:00 2010 lmuelleAATTsuse.de
- Enable the build of the idmap tdb2 module; (bnc#600822).

Sun Apr 25 14:00:00 2010 larsAATTsamba.org
- BuildRequire keyutils-libs-devel for Fedora and post-RHEL4.

Sun Apr 25 14:00:00 2010 larsAATTsamba.org
- BuildRequire pkg-config for post-10.2 systems and else pkgconfig.

Wed Apr 21 14:00:00 2010 jmcdonoughAATTsuse.de
- Add \"net conf import\" error messages; (bso#7378, bnc#598189).

Wed Apr 21 14:00:00 2010 jsmeixAATTsuse.de
- Define cups_lib_dir %{_prefix}/lib/cups for post-11.2 systems; (bnc#575544).

Wed Apr 7 14:00:00 2010 lmuelleAATTsuse.de
- Update to 3.5.2.
+ Fix smbd segfaults in _netr_SamLogon for clients sending null domain;
(bso#7237).
+ Fix smbd segfaults in \"waiting for connections\" message; (bso#7251).
+ Fix an uninitialized variable read in smbd; (bso#7254); (bnc#605935);
CVE-2010-1642.
+ Fix a memleak in Winbind; (bso#7278).
+ Fix Winbind reconnection to it\'s own domain; (bso#7295).
+ Fix segfault if hide files or veto files has no \".AppleDouble\";
(bso#1206).
+ Fix parsing of the gecos field; (bso#5198).
+ Fix several printing issues; (bso#6727).
+ Fix valgrind warning; (bso#6814).
+ Fix race condition in mount.cifs that allows user to replace mountpoint
with a symlink; (bso#6853).
+ Fix bug in vfs_scannedonly rmdir implementation; (bso#7075).
+ Fix handling of bad server data returns in client rpc_transport;
(bso#7159).
+ Never mark external domains as internal in Winbind; (bso#7170).
+ Fix access by multi-threaded applications; (bso#7202).
+ Fix \'net share\' command; (bso#7203).
+ Fix DN parsing name was always null; (bso#7204).
+ Signals are processed twice in child; (bso#7206).
+ Fix returning of group members with \'getent group\'; (bso#7212).
+ Fix the build of net_afs.c with --fake-kaserver=yes; (bso#7216).
+ Make Winbind logs more verbose for troubleshooting; (bso#7225).
+ Fix a NULL pointer dereference in smbd; CVE-2010-1635; (bso#7229);
(bnc#605935).
+ Fix automatic building of vfs_tsmsm if gpfs and dmapi are present;
(bso#7231).
+ Fix race conditions in CTDB persistent transactions; (bso#7232).
+ Symlink delete fails but incorrectly reports success to client;
(bso#7234).
+ Fix \"printer admin\" functionality; (bso#7255).
+ Fix value-needed calculation in_spoolss_EnumPrinterData(); (bso#7256).
+ Fix _winreg_QueryValue crash bugs and implement Windows behavior;
(bso#7258).
+ Fix job management commands for CUPS queues; (bso#7269).
+ Fix smbd segfault if using vfs_acl_tdb; (bso#7283).
+ Fix core dump in \'ntlm_auth\' with \"gss-spnego\" helper; (bso#7290).
+ Fix smbd crashes with CUPS printers and no [printers] share defined;
(bso#7297).
+ Fix DOS attribute inconsistency with MS Office; (bso#7310).
+ Many disconnecting clients render clustered Samba unusuable for some time;
(bso#7312).
+ Make \'net conf addshare\' atomic; (bso#7313).
+ Eliminate race condition in creating/scanning sorted subkeys in the
registry backend; (bso#7314).
+ Winbind possibly segfaults when trying a trusted domain without inbound
trust; (bso#7316).

Tue Apr 6 14:00:00 2010 hhetterAATTsuse.de
- Add SMB Traffic Analyzer v2 VFS module.

Tue Mar 30 14:00:00 2010 lmuelleAATTsuse.de
- Document \"wide links\" defaults to \"no\" in the smb.conf man page for versions
pre-3.4.6; (bnc#577868).

Fri Mar 26 13:00:00 2010 jmcdonoughAATTsuse.de
- Fix workgroup enumeration, for client printer and file share
selection; (bso#6880); (bnc#586215).

Tue Mar 23 13:00:00 2010 jmcdonoughAATTsuse.de
- Fix tdb validation for offline auth; (bnc#587014).

Mon Mar 22 13:00:00 2010 lmuelleAATTsuse.de
- Fix \"printer admin\" functionality; (bso#7255).

Mon Mar 22 13:00:00 2010 lmuelleAATTsuse.de
- An uninitialized variable read could cause an smbd crash; (bso#7254);
(bnc#605935); CVE-2010-1642.

Mon Mar 22 13:00:00 2010 lmuelleAATTsuse.de
- Ensure to have a valid talloc stackframe; (bso#7251).

Mon Mar 22 13:00:00 2010 lmuelleAATTsuse.de
- _netr_SamLogon segfaults for clients sending NULL domain; (bso#7237).

Thu Mar 18 13:00:00 2010 lmuelleAATTsuse.de
- Merge missing pam_winbind message translations; (bnc#499233).

Sun Mar 14 13:00:00 2010 lmuelleAATTsuse.de
- Remove cifs-mount subpackage for post-11.2 systems as the tools are now part
of the independent cifs-utils package.

Thu Mar 11 13:00:00 2010 jmcdonoughAATTsuse.de
- Fix join of Windows 2008 domains; (bnc#567013).

Mon Mar 8 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.5.1 and 3.4.7.
+ Fix security flaw on Linux platforms if built with libcap support allowing
file system access even when permissions should have denied it;
CVE-2010-0728; (bso#7222); (bnc#586683).

Mon Mar 8 13:00:00 2010 rhaferAATTnovell.com
- Fixed libldb.so link in libldb-devel.

Fri Mar 5 13:00:00 2010 hhetterAATTnovell.com
- Fix argc handling in net_share, making the command \"net share\"
work again; (bso#7203); (bnc#584253).

Mon Mar 1 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.5.0.
+ Fix duplicate sam and unix accounts; (bso#7145).
+ Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160).
+ Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166).
+ Fix \'net ads dns\' usage calls; (bso#7181).
+ Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182).

Wed Feb 24 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.4.6.
+ Change parameter \"wide links\" to default to \"no\"; it\'s also incompatible
with \"unix extensions\"; (bso#7104); (bnc#577868).
+ Fix printing with 64 bit clients (bso#6888).
+ Fix core dump on 64 bit Linux (bso#7063).
+ Fix failing of smbd to respond to a read or a write caused by Linux
asynchronous IO (aio) (bso#7067).
+ Fix string buffer overflow causing heap corruption in smbd (bso#7096).
+ Fix bogus ip address in SWAT; (bso#5885).
+ Fix vfs_full_audit; (bso#6557).
+ Use the first \"uid\" value; (bso#6157).
+ Fix large paged search with DirX LDAP servers; (bso#6981).
+ Fix crash bug in \'cifs.upcall\'; (bso#6868).
+ Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047).
+ Fix DFS on AIX (maybe others); (bso#7052).
+ Fix pdb_search crash as non-root user; (bso#7068).
+ Fix unlocking of accounts from ldap; (bso#7072).
+ Fix vfs_expand_msdfs; (bso#7081).
+ Fix results of \'smbclient -L\' with a large browse list; (bso#7098).
+ Normalize \"Changing password for\" msg IDs and STRs; (bso#7102).
+ Fix malformed require_membership_of_sid; (bso#7106).
+ Fix reading of large browselist; (bso#7122).
+ \"mangling method = hash\" can crash storing a name containing a \'.\';
(bso#7154).
+ Valgrind Conditional jump or move depends on uninitialised value(s) error
when \"mangling method = hash\"; (bso#7155).
+ Fix listing of printjobs in Windows 7; (bso#7130).
+ Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136).
+ Make idmap cache persistent for \"ldapsam:trusted\".
+ Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not
only the persistent idmap cache.
+ Shortcut uid_to_sid when \"ldapsam:trusted = yes\".
+ Make pdb_copy_sam_account also copy the group sid.
+ Shortcut gid_to_sid when \"ldapsam:trusted = yes\".
+ Speed up pdb_get_group_sid().
+ Try to build the full unix_pw structure with ldapsam:trusted support.
+ Optimize ldapsam_alias_memberships() and cache ldap searches.

Fri Feb 19 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.5.0rc3.
+ Change parameter \"wide links\" to default to \"no\"; it\'s also incompatible
with \"unix extensions\"; (bso#7104); (bnc#577868).
+ Fix vfs_full_audit; (bso#6557).
+ Fix crash bug in \'cifs.upcall\'; (bso#6868).
+ Fix duplicate initializer in the rmdir module; (bso#6876).
+ Fix printing with 64 bit clients; (bso#6888).
+ Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047).
+ Fix core dump on Ubuntu 8.04 64 bit; (bso#7063).
+ Fix failing of smbd to respond to a read or a write caused by Linux
asynchronous IO (aio); (bso#7067).
+ Fix \'smbget\' error status; (bso#7069).
+ Fix build of \'smbfilter\'; (bso#7071).
+ Fix unlocking of accounts from ldap; (bso#7072).
+ Cliconnect gets realm wrong with trusted domains; (bso#7079).
+ Fix vfs_expand_msdfs; (bso#7081).
+ Fix storing of create time on directories in an EA in new create time
code; (bso#7084).
+ Fix an early release of the global lock that can cause data corruption in
libtdb; (bso#7085).
+ Fix string buffer overflow causing heap corruption in smbd; (bso#7096).
+ Fix results of \'smbclient -L\' with a large browse list; (bso#7098).
+ Normalize \"Changing password for\" msg IDs and STRs; (bso#7102).
+ Fix malformed require_membership_of_sid; (bso#7106).
+ Add pdb_ldap performance fixes; (bso#7116).
+ Change ldap filter to what really was intended; (bso#7116).
+ Add new \"nmbd bind explicit broadcast\" parameter; (bso#7118).
+ Fix nmbd problems with socket address; (bso#7118).
+ Support large browselist; (bso#7119).
+ Fix reading of large browselist; (bso#7122).
+ Fix listing of printjobs in Windows 7; (bso#7130).
+ Owner of file not available with Kerberos; (bso#7139).
+ Fix IPv4/IPv6 problems; (bso#7140).
+ Fix get_acl_blob in the acl_tdb VFS module; (bso#7148).
+ \"mangling method = hash\" can crash storing a name containing a \'.\';
(bso#7154).
+ Valgrind Conditional jump or move depends on uninitialised value(s) error
when \"mangling method = hash\"; (bso#7155).
+ Fix some wrong newlines in de translation strings.

Tue Feb 9 13:00:00 2010 lmuelleAATTsuse.de
- Take extra care that a mount point of mount.cifs isn\'t changed during mount
and don\'t allow it to be run as setuid root program; CVE-2010-0787;
(bso#6853); (bnc#550002).

Tue Feb 9 13:00:00 2010 lmuelleAATTsuse.de
- Check in mount.cifs for invalid characters in device name and mountpoint;
CVE-2010-0547; (brc#562156); (bnc#577925).

Tue Feb 9 13:00:00 2010 boyangAATTsuse.de
- Don\'t invalidate cache for uninitialized domains; (bnc#538923).

Tue Feb 9 13:00:00 2010 boyangAATTsuse.de
- Signals are processed twice in child; (bnc#538923).

Mon Feb 8 13:00:00 2010 jmcdonoughAATTsuse.de
- Allow forced pw change even with min pw age; (bnc#561894).

Mon Feb 8 13:00:00 2010 lmuelleAATTsuse.de
- Change parameter \"wide links\" to default to \"no\"; it\'s also incompatible
with \"unix extensions\"; CVE-2010-0926; (bso#7104); (bnc#577868).

Sun Feb 7 13:00:00 2010 boyangAATTsuse.de
- Fix enumerate domain local groups for primary domain; (bnc#573813).

Sun Feb 7 13:00:00 2010 boyangAATTsuse.de
- Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106).

Fri Feb 5 13:00:00 2010 lmuelleAATTsuse.de
- Normalize \"Changing password for\" msg IDs and STRs; (bnc#499233).

Thu Feb 4 13:00:00 2010 rhaferAATTnovell.com
- Build libtevent and libldb and put them into separate subpackages.

Tue Jan 26 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.5.0rc2.
+ The Using Samba HTML book has been removed.
+ \'net\', \'smbclient\' and libsmbclient can use logon credentials cached by
Winbind; (bso#7062).
+ New vfs_scannedonly module has been added; (bso#7028).
+ Check password history before increasing \"badPasswordCount\"; (bso#4347).
+ Fix changing of ACLs on writable file with \"dos filemode=yes\"; (bso#5202).
+ Restore Samba 3.0.x behavior and use the first \"uid\" value in pdb_ldap;
(bso#6157).
+ Fix deletion of an object whose parent folder does not have delete rights
fails even if the delete right is set on the object in vfs_acl_xattr and
vfs_acl_tdb; (bso#6876).
+ Fix large paged search with DirX LDAP servers; (bso#6981).
+ Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027).
+ Disable sanity check in NetShareEnum for better compatibility with
Windows; (bso#7029).
+ Fix SMBrmdir error message when deleting a directory fails; (bso#7033).
+ Fix segfault in vfs_cap; (bso#7034).
+ Fix \'net rpc getsid\' in hardened Windows environments; (bso#7036).
+ Fix a Winbind segfault in \"trusted_domains\"; (bso#7037).
+ Complete and improve some German translation of \'net\'; (bso#7039).
+ Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039).
+ Fix crash bug in libsmbclient; (bso#7043).
+ Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045).
+ Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046).
+ Lock down some srvsvc calls according to what w2k3 seems to do.

Tue Jan 19 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.4.5.
+ Fix memory leak in smbd (bug #7020).
+ Fix changing of ACLs on writable files with \"dos filemode=yes\"
(bug #5202).
+ BUG 6642: Fix opening the quota magic file.
+ BUG 6919: Fix remote quota management.
+ BUG 7034: Fix internal error caused by vfs_cap.
+ BUG 7036: Fix \'net rpc getsid\' in hardened Windows environments.
+ BUG 7043: Fix crash bug in \"SMBC_parse_path\".
+ BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls.
+ BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS
server.

Tue Jan 12 13:00:00 2010 lmuelleAATTsuse.de
- Free unused memory after a packet got processed; (bso#7020).

Fri Jan 8 13:00:00 2010 boyangAATTsuse.de
- Add timeout to rpc call to prevent infinite loop when network is
down; (bnc#538923).

Thu Jan 7 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.5.0rc1.
+ BUG 6837: Fix \"Too many open files\" when trying to access large number of
files with Windows 7; (bnc#619787).
+ BUG 6939: Fix long filenames when \"mangling method\" is set to \"hash\".
+ BUG 6991: Create symbol links to shared libraries.
+ BUG 6992: make test for getgrouplist cacheable.
+ BUG 7014: Fix Winbind crash when retrieving empty group members.
+ BUG 7020: Fix smbd using 2G memory.
+ Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned
attributes by protocol level.
+ Vector correctly through reply_openerror() (which uses the same logic).
+ Fix bugs with the full Windows ACL support.
+ Add a few missing gettext calls to the \'net\' command.
+ Fix up a share type translation and translate some more strings in \'net\'.
+ Allow to call \"pdbedit -N description -u user\" without specifiyng \"-r\".
+ Add spoolss_DriverInfo7.
+ Fix rpcclient after setprinter IDL fixes.
+ Use generated krb5.conf in \'net ads testjoin\'.
+ Add some German translations for the \'net\' command.
+ Update mount.cifs man page with nounix option.
+ Fix _samr_GetAliasMembership for results with 0 rids.
+ Fix an error case in cli_negprot.
+ Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc.
+ Restore correct timeouts for SMB requests.
+ Fix a 64-bit error in libsmb.
+ Replace IS_DOMAIN_OFFLINE by a function in Winbind.
+ Simplify/cleanup Winbind code.
+ Fix write behind memory block in libtalloc.
+ Fix result check for getaddrinfo().
+ Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr()
to tsocket.
+ Always set tdb->tracefd to -1 to be safe on goto fail in libtdb.
+ Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior.
+ Fix standalone \'make installdocs\'.
+ Output %p as unsigned in snprintf replacement.
+ New attempt at TDB transaction nesting allow/disallow.
+ Remove swig stuff from libtdb.
+ Reset tdb->fd to -1 in tdb_close() in libtdb.
+ Change the way mksysms work in libtalloc.
+ Also build and install tdb manpages from standalone tdb.
+ Fix infinite loop in NCACN_IP_TCP as there is no timeout.
+ Make winbindd_cache.c aware of domain offline to avoid unnecessary backend
query.
+ List trusted domains from wcache when domain is offline.

Thu Jan 7 13:00:00 2010 lmuelleAATTsuse.de
- Update to 3.4.4.
+ Fix interdomain trust relationships with Win2008R2 (bug #6697).
+ Fix Winbind crashes when queried from nss (bug #6889).
+ Fix Winbind crash when retrieving empty group members (bug #7014).
+ Fix \"UID range full\" error in Winbind (bug #6901).
+ Fix multiple LDAP servers in \"idmap backend\" and \"idmap alloc
backend\" (bug #6910).
+ BUG 4832: Fix iconv checks.
+ BUG 6338: Do not always display \"none\" in \'net rpc trustdom list\'.
+ BUG 6851: Add pdbedit --kickoff-time/-K to set the user\'s kickoff time.
+ BUG 6828: Fix infinite timeout when byte lock held outside of samba.
+ BUG 6837: Fix \"Too many open files\" message when trying to access a large
number of files with Windows 7; (bnc#619787).
+ BUG 6841: Fix \"map acl inherit = yes\".
+ BUG 6850: Fix shadow copy display on Windows 7.
+ BUG 6867: Fix listing of directories with a lot of files.
+ BUG 6868: Support building with Heimdal we well as with MIT.
+ BUG 6875: Fix DOS attributes on OS/2 clients.
+ BUG 6880: Fix listing of workgroup servers in libsmbclient.
+ BUG 6898: Samba duplicates file content on appending.
+ BUG 6918: Fix krb5 build problem on Ubuntu karmic.
+ BUG 6929: Fix build with recent heimdal.
+ BUG 6939: Fix long filenames with \"mangling method = hash\".
+ BUG 6967: Fix \'net ads join\' with OU.
+ BUG 6981: Fix paged search with DirX LDAP server.
+ BUG 6982: Remove erroneous out of memory error path in lookup_sid.
+ BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids.
+ BUG 7005: Fix \"mangle method = hash\" truncates files with dot \".\"
character.
+ Fix the build of the winbind krb5 locator plugin.
+ Fix enumprinter key client and server.

Wed Jan 6 13:00:00 2010 lmuelleAATTsuse.de
- Readjust the _libdir/cups/backend/smb sym link only on uninstall of the
samba-krb-printing package; (bnc#568603).

Fri Jan 1 13:00:00 2010 larsAATTsamba.org
- Add BuildRequires to fam-devel; (bnc#564260).

Wed Dec 30 13:00:00 2009 jmcdonoughAATTsuse.de
- Prevent winbind crash; (bso#7014); (bnc#566119).

Mon Dec 21 13:00:00 2009 sjayaramanAATTsuse.de
- Fix processing of open modes in POSIX open; (bnc#530683).

Thu Dec 17 13:00:00 2009 jengelhAATTmedozas.de
- Add baselibs.conf as a source.

Tue Dec 15 13:00:00 2009 lmuelleAATTsuse.de
- Update to 3.5.0pre2.
+ BUG 2350: Add LDAP Alias Dereferencing support.
+ BUG 6288: SWAT adds a second share when changing parameters of an existing
share.
+ BUG 6435: Fix minor memory corruption.
+ BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was
set while configure.
+ BUG 6802: A created folder does not properly inherit permissions from
parent in vfs_acl_xattr.
+ BUG 6837: \"Too many open files\" when trying to access large number of
files from Windows 7; (bnc#619787).
+ BUG 6860: Fix shared library build on QNX.
+ BUG 6879: Fix crash in Winbind.
+ BUG 6929: Fix build with recent heimdal.
+ BUG 6938 : No hook exists to check creation rights when using acl_xattr
module.
+ BUG 6967: Prevent glibc error on \'net ads join\'.
+ Fix vfs_acl_xattr which was failing to call the NEXT connect function.
+ Restructure the ACL code.
+ Refactor reply_rmdir to use handle based code.
+ Fix the build when no external talloc and tdb are installed.
+ Fix detection of CTDB headers on systems without system-libtalloc.
+ Fix several printing issues.
+ Fix the build on Mac OS X 10.6.2.
+ Fix net and rpcclient after setprinterdataex changes.
+ Add full support for level 8 printer drivers.
+ Add more spoolss architectures to IDL.
+ Fix enumprinter key client and server.
+ Fix crash in EnumPrinterDataEx.
+ Prefer posix_fallocate for doing \"strict allocate\".
+ Restore \"fake directory create times\" as a share parameter.
+ Fix explicit stat64 support.
+ Add support for NetWkstaGetInfo 101 and 102.
+ Add rpcclient wkssvc_enumerateusers.
+ De-deprecate \"write cache size\" to prevent its removal without a proper
alternative.
+ Allow more than 1000 users in BUILTIN\\Users.
+ Complete support for NetWkstaGetInfo/NetWkstaEnumUsers.
+ Fix the build of the example VFS modules.
+ Fix crash in free_file_list().
+ Give the user a chance to change password when password will expire soon.

Wed Dec 9 13:00:00 2009 lmuelleAATTsuse.de
- Store the smbfs service state if enabled and restore it for cifs while
upgrade on post-11.2 systems.

Wed Dec 9 13:00:00 2009 lmuelleAATTsuse.de
- Prevent cifstab from being overwritten while upgrade on post-11.2 systems.

Wed Dec 9 13:00:00 2009 boyangAATTsuse.de
- Give the user a chance to change password when password will expire soon;
(FATE#302414).

Tue Dec 8 13:00:00 2009 lmuelleAATTsuse.de
- Rename smbfs init script to cifs for post-11.2 systems.

Tue Dec 8 13:00:00 2009 jmcdonoughAATTsuse.de
- Allow Windows 7 to connection to samba domain controllers and
member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680).

Fri Dec 4 13:00:00 2009 jmcdonoughAATTsuse.de
- Error on joining windows domain (invalid pointer); (bso#6967);
(bnc#553622).

Thu Dec 3 13:00:00 2009 lmuelleAATTsuse.de
- Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165).
- Simplify the winbind package %pre script and suppress stdout only.

Thu Nov 26 13:00:00 2009 lmuelleAATTsuse.de
- Update to 3.5.0pre1
+ Add support for full Windows timestamp resolution.
+ Experimental implementation of SMB2.
+ Add encryption support for connections to a CUPS server.
+ Major windbind asynchronous refactoring.
- Remove using_samba from the doc package.
- Increase major version of libtalloc to 2.

Thu Nov 19 13:00:00 2009 boyangAATTsuse.de
- Fix kerberos refresh chain; (bnc#546162); (bso#6872).

Fri Nov 6 13:00:00 2009 lmuelleAATTsuse.de
- Hardlink duplicate files on post-11.1 systems.

Fri Nov 6 13:00:00 2009 lmuelleAATTsuse.de
- Add BuildArch noarch to samba-doc on post-11.1 systems.

Tue Nov 3 13:00:00 2009 boyangAATTsuse.de
- Use full 16byte session key in make_user_info_netlogon_interactive();
(bnc#551811).

Thu Oct 29 13:00:00 2009 lmuelleAATTsuse.de
- Update to 3.4.3.
+ Fix trust relationships to windows 2008 (2008 r2) (bug #6711).
+ Fix file corruption using smbclient with NT4 server (bug #6606).
+ Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680).
+ BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a
symbolic link.
+ BUG 6529: Offline files conflict with Vista and Office 2003.
+ BUG 6532: Fix domain enumeration if master browser has space in name.
+ BUG 6606: Fix file corruption using smbclient with NT4 server.
+ BUG 6690: Fix wrong error check in profile.
+ BUG 6703: Allow smbstatus as non-root.
+ BUG 6704: Fix syntax error in avahi configure test.
+ BUG 6707: Fix an occasional segfault in config file parsing.
+ BUG 6710: Adjust regex to match variable names including underscores.
+ BUG 6711: Fix trust relationships to windows 2008 (2008 r2).
+ BUG 6726: SIVAL should have been an SVAL.
+ BUG 6728: BSD needs sys/sysctl.h included to build properly.
+ BUG 6731: Fix reading beyond the end of a named stream in xattr_streams.
+ BUG 6735: Don\'t overwrite password in pam_winbind, subsequent pam modules
might use the old password and new password.
+ BUG 6764: Fix timeval calculation.
+ BUG 6765: Add a \"hidden\" parameter \"share:fake_fscaps\".
+ BUG 6769: Fix symlink unlink.
+ BUG 6772: Allow outstanding_aio_calls to be decremented.
+ BUG 6774: smbd crashes if \"aio write behind\" is set.
+ BUG 6776: Fix core dump caused by running overlapping Byte Lock test.
+ BUG 6781: Fix renaming subfolders in Explorer view.
+ BUG 6791: Fix linking order in cifs.upcall.
+ BUG 6793: Fix Winbind crash with \"INTERNAL ERROR: Signal 6\".
+ BUG 6793: Fix segfault in winbindd_pam_auth.
+ BUG 6796: Deleting an event context on shutdown can cause smbd to crash.
+ BUG 6797: Fix a memleak in libwbclient.
+ BUG 6804: Fix hpux compiler issue.
+ BUG 6805: Correctly handle aio_error() and errno.
+ BUG 6807: Fix a segfault in \"net rpc trustdom list\" for long domain names.
+ BUG 6810: Add support for finding alternate credcaches to cifs.upcall.
+ BUG 6811: Fix reference to freed memory in pam_winbind.
+ BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure.
+ BUG 6824: Fix avahi activation.
+ BUG 6826: Don\'t fail authentication when one or some group of
require-membership-of is invalid.
+ BUG 6828: Fix infinite timeout when byte lock held outside of Samba.
+ BUG 6829: Fix displaying of multibyte characters in smbclient.
+ BUG 6840: Fix crash in pam_winbind.
+ Fix an uninitialized variable.
+ Only ever handle one event after a select call.
+ Conditional install of the cifs.upcall man page.
+ Fix warning occuring when building the manpages.

Fri Oct 23 14:00:00 2009 lmuelleAATTsuse.de
- Let smbclient show special characters properly; (bso#6829); (bnc#544204).

Fri Oct 23 14:00:00 2009 boyangAATTsuse.de
- Don\'t fail authentication when one or some group of require-membership-of
is invalid; (bnc#525123); (bso#6826).

Fri Oct 16 14:00:00 2009 jmcdonoughAATTsuse.de
- Allow winbind to ignore certain domains; (bnc#539506).

Thu Oct 8 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.4.2.
+ Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517).
+ Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115).
+ Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).

Wed Sep 30 14:00:00 2009 jmcdonoughAATTsuse.de
- Fix potential denial of service; CVE-2009-2906; (bnc#543115).

Fri Sep 25 14:00:00 2009 jmcdonoughAATTsuse.de
- Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).

Wed Sep 23 14:00:00 2009 jmcdonoughAATTsuse.de
- Fix unresolved home path; CVE-2009-2813; (bnc#539517).

Mon Sep 21 14:00:00 2009 boyangAATTsuse.de
- Don\'t overwrite password in pam_winbind; (bnc#515444).

Mon Sep 14 14:00:00 2009 chrisAATTcomputersalat.de
- mods for winbind (when used with squid - ntlm_auth)
o winbind adds group \'winbind\'
o permission 0750,root,winbind LOCKDIR/winbindd_privileged

Thu Sep 10 14:00:00 2009 lmuelleAATTsuse.de
- Merge two fixes from 3.2.8 and 3.3.1.
+ Adjust regex to match variable names including underscores.
+ Conditional install of the cifs.upcall man page.

Wed Sep 9 14:00:00 2009 lmuelleAATTsuse.de
- Remove supplements from baselibs.conf while %clean for pre-11.1 systems;
(bnc#520579).

Wed Sep 9 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.4.1.
+ Fix authentication on member servers without Winbind (bug #6650).
+ Nautilus fails to copy files from an SMB share (bug #6649).
+ Fix connections of Win98 clients (bug #6551).
+ Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697).
+ Fix Winbind authentication issue (bug #6646).
+ BUG 5879: Update LDAP schema for Netscape DS 5.
+ BUG 5886: Fix password change propagation with ldapsam.
+ BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe.
+ BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab.
+ BUG 6437: Make open_udp_socket() IPv6 clean.
+ BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient.
+ BUG 6506: Smbd server doesn\'t set EAs when a file is overwritten in
NT_TRANSACT_CREATE.
+ BUG 6532: Fix the build with external talloc.
+ BUG 6538: Cancel all locks that are made before the first failure.
+ BUG 6560: Fix lookupname.
+ BUG 6564: SetPrinter fails (panics) as non root.
+ BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation.
+ BUG 6585: Fix unqualified \"net join\".
+ BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo.
+ BUG 6601: Avoid global fd limits.
+ BUG 6607: Fix crash bug in spoolss_addprinterex_level_2.
+ BUG 6611: Fix a valgrind error in chain_reply.
+ BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient.
+ BUG 6627: Raise the timeout for lsa_Lookup
*() calls from 10 to 35 seconds.
+ BUG 6650: Fix authentication on member servers without Winbind.
+ BUG 6651: Fix smbd SIGSEGV when breaking oplocks.
+ BUG 6655: Fix \'smbcontrol smbd ping\'.
+ BUG 6620: Fix a bug in renames of directories.
+ BUG 6664: Fix truncation of the session key.
+ BUG 6673: Fix \'smbpasswd\' with \"unix password sync = yes\".
+ BUG 6680: Fix authentication failure from Windows 7 when domain joined.
+ BUG 6688: Fix crash in \'net usershare list\'.
+ BUG 6693: Check we read off the complete event from inotify.
+ BUG 6700: Use dns domain name when needing to guess server principal.

Thu Aug 13 14:00:00 2009 boyangAATTsuse.de
- Update to 3.2.14.
+ Fix SAMR access checks (e.g. bugs #6089 and #6112).
+ Fix \'force user\' (bug #6291).
+ Improve Win7 support (bug #6099).
+ Fix posix ACLs when setting an ACL without explicit ACE for the
owner (bug #2346).
+ BUG 6387: Fix Winbind crash when multiple IDmappings exist in the
LDAP directory.
+ BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache().
+ BUG 6089: Fix SAMR access checks.
+ BUG 6112: Fix SAMR access checks.
+ BUG 6279: Fix Winbind crash.
+ BUG 6291: Fix \'force user\'.
+ BUG 6099: Try to fix domain join of Win7 Beta.
+ BUG 6386: Groupdb mapping fix.
+ BUG 6421: Fix POSIX read-only open on read-only shares.
+ BUG 6476: Fix more smbd-zombies in memory.
+ BUG 6488: acl_group_override() call in posix acls references an
uninitialized variable.
+ BUG 6504: Fix SAMR server for Winbind access.
+ BUG 6520: Fix time stamps.
+ BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit.
+ BUG 6340: Don\'t segfault when cleartext trustdom pwd could not be
retrieved.
+ BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
+ BUG 6465: Fix enum_aliasmem in ldb branch.
+ BUG 6484: Fix searching for users while adding them to groups via
Windows usermanager.
+ BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the
owner.
+ BUG 6526: Let parent_dirname() correctly return toplevel filenames.
+ BUG 6627: Raise the timeout for lsa_Lookup
*() calls from 10 to 35 seconds.
+ BUG 5798: Preserve CFLAGS info in configure.
+ BUG 6382: Case insensitive access to DFS links broken.
+ BUG 6481: Don\'t require \"Modify property\" perms to unjoin.
+ BUG 6628: \'smbpasswd -a\' uses algorithmic rid base with
\'passdb backend = tdbsam\'.
+ BUG 6560: Lookupname failed, cannot find domain when attempt to change
password.
+ Prevent creation of keys containing the \'/\' character.
+ Fix join of Windows 7 RC to a Samba3 DC.
+ Fix bug in processing of open modes in POSIX open.
+ Fix the negotiate flags.
+ Protect netlogon_creds_server_step() against NULL creds.
+ Also handle DirX return codes.
+ Fix a crash bug if we timeout in net rpc trustdom list.
+ Add \'--request-timeout\' option to \'net\'.
+ Fix a race condition in Winbind leading to a panic.
+ Add workaround for MS KB932762.
+ 5945: Fix out of memory error with Winbind idmap.
+ Avoid duplicate ACEs.
+ Fix profile ACLs in some corner cases.
+ Zero an uninitialized array.

Wed Aug 12 14:00:00 2009 boyangAATTsuse.de
- Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271);
(bso#6615).

Mon Aug 10 14:00:00 2009 boyangAATTsuse.de
- check in .po files for pam_winbind; (bnc#499233); (bso#6602).

Thu Aug 6 14:00:00 2009 hhetterAATTsuse.de
- Add ntp and network-remotefs as Should-Start dependency to the winbind init
script; (bnc#515629).

Thu Aug 6 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.0.36.
+ Fix Winbind crash on \'getent group\' (bug #5906).
+ Excel save operation corrupts file ACLs (bug #4308).
+ Prevent segmentation fault on joining a very long domain name.
+ BUG 4308: Excel save operation corrupts file ACLs.
+ BUG 4370: Clean-up entries in /etc/mtab after unmount.
+ BUG 4640: Fix guest mounts in mount-cifs.
+ BUG 5906: Fix Winbind crash on \'getent group\'.
+ BUG 6066: netinet/ip.h present but cannot be compiled on Solaris.
+ BUG 6099: In order to allow Win7 to connect to a Samba NT style.
+ BUG 6279: Fix Winbind crash.
PDC we set the flags before we know if it\'s an error or not.
+ BUG 6085: Fix build of vfs_default.
+ BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work
correctly.
+ Fix logic error in try_chown.
+ Correctly use chroot().
+ Fix bug in processing of open modes in POSIX open.
+ Don\'t install the cifs.upcall binary twice.
+ Fix mount.cifs handling of -V option.
+ Prevent segmentation fault on joining a very long domain name.
+ Don\'t try and delete a default ACL from a file.
+ Add workaround for MS KB932762.
+ Add fakemount (-f) and nomtab (-n) flags to mount.cifs.
+ Fix a crash during name resolution when log level >= 10
and libc segfaults if printf is passed NULL for a \"%s\" arg.

Sat Aug 1 14:00:00 2009 lmuelleAATTsuse.de
- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.

Mon Jul 27 14:00:00 2009 boyangAATTsuse.de
- lookupname failed, cannot find domain when attempt to change password;
(bnc#520645); (bso#6560).

Thu Jul 16 14:00:00 2009 lmuelleAATTsuse.de
- Don\'t link with --as-needed flag on post-11.1 systems.

Tue Jul 14 14:00:00 2009 lmuelleAATTsuse.de
- Stop the smbfs service if an interface goes down; (bnc#517768).

Wed Jul 8 14:00:00 2009 lmuelleAATTsuse.de
- Disable build of static libraries on post-11.1 systems; (bnc#509945).

Wed Jul 8 14:00:00 2009 jmcdonoughAATTsuse.de
- Fix missing zlibs for cifs.upcall and test_shlibs.

Fri Jul 3 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.4.0.
+ BUG 6431: Local groups from 3.0 setups no longer found.
+ BUG 6459: Fix build of pam_smbpass on some distributions.
+ BUG 6481: \'net ads leave\' needs to try account deletion, NetUnjoinDomain
not.
+ BUG 6497: Fix calling of \'test\' in configure.
+ BUG 6498: Add workaround for MS KB932762.
+ BUG 6499: Fix building of pam_smbpass.
+ BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache().
+ BUG 6512: Fix support for enumerating user forms.
+ BUG 6514: Improve error message in \'net\' when smb.conf is not available.
+ BUG 6520: Fix time stamps when \"unix extensions = yes\".
+ BUG 6521: Fix building tevent_ntstatus without config.h.
+ BUG 6526: Fix notifies in the share root directory.
+ BUG 6531: Fix pid file name.

Thu Jul 2 14:00:00 2009 lmuelleAATTsuse.de
- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.

Tue Jun 30 14:00:00 2009 jmcdonoughAATTsuse.de
- Fix net ads leave; (bnc#511695).

Thu Jun 25 14:00:00 2009 sbrabecAATTsuse.cz
- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).
- Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).

Wed Jun 24 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.2.13, 3.3.6.
+ In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with
file names treat user input as a format string to asprintf. With a
maliciously crafted file name smbclient can be made to execute code
triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).

Wed Jun 24 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.0.35.
+ In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a
data value can potentially affect access control when \"dos filemode\"
is set to \"yes\"; CVE-2009-1888; (bnc#515479).

Tue Jun 23 14:00:00 2009 jmcdonoughAATTsuse.de
- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).

Fri Jun 19 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.4.0rc1.
+ BUG 4699: Remove pidfile on clean shutdown.
+ BUG 5456: Fix \"net ads testjoin\".
+ BUG 6081: Make it possible to change machine account sids.
+ BUG 6253: Use correct value for password expiry calculation in
pam_winbind.
+ BUG 6297: Owner of sticky directory cannot delete files created by others.
+ BUG 6305: Correctly prompt for a password when a username was given.
+ BUG 6328: Add support for multiple rights to
\"net sam rights grant/revoke\".
+ BUG 6333: Consolidate create/delete account paths in pdbedit.
+ BUG 6449: \'net rap user add\' crashes without -C option.
+ BUG 6451: net/libnetapi user rename using wrong access bits.
+ BUG 6458: Fix uninitialized variable in local_password_change().
+ BUG 6465: Fix enumeration of empty aliases.
+ BUG 6476: Fix smbd-zombies in memory when using [x]inetd.
+ BUG 6487: Add missing DFS call in trans2 mkdir call.
+ BUG 6488: acl_group_override() call in posix acls references an
uninitialized variable.
+ Improve pam_winbind documentation.
- Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.

Thu Jun 18 14:00:00 2009 boyangAATTsuse.de
- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user
input as a format string to asprintf; CVE-2009-1886; (bnc#513360).

Wed Jun 17 14:00:00 2009 boyangAATTsuse.de
- Fix a bad memleak in vfs_full_audit; (bnc#510035).

Tue Jun 16 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.3.5.
+ Fix SAMR and LSA checks (bug #6089, #6289)
+ Fix posix acls when setting an ACL without explicit ACE for the
owner (bug #2346).
+ Fix joining of Win7 into Samba domain (bug #6099).
+ Fix joining of Win2000 SP4 clients (bug #6301).
+ BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the
owner.
+ BUG 5832: Fix build on RHEL when ccache is not available.
+ BUG 5853: Add keyutils-devel to build requires to fix build on RHEL.
+ BUG 5897: Fix shutdown script example in the smb.conf manpage.
+ BUG 6089: Revert the extra SAMR and LSA checks.
+ BUG 6099: Fix joining of Win7 into Samba domain.
+ BUG 6157: Fix handling of multi-value attribute \"uid\".
+ BUG 6289: Revert the extra SAMR and LSA checks.
+ BUG 6297: Owner of sticky directory cannot delete files created by others.
+ BUG 6301: Fix joining of Win2000 SP4 clients.
+ BUG 6309: Support remote unjoining of Windows 2003 or greater.
+ BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event.
+ BUG 6320: Handle registry config source in file_list.
+ BUG 6330: Fix DFS on AIX.
+ BUG 6336: Fix \'net groupmap set\' segfault.
+ BUG 6361: Make --rcfile work in smbget.
+ BUG 6365: Re-Add the \"dropbox\" functionality with -wx rights on a
directory.
+ BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
+ BUG 6382: Fix case insensitive access to DFS links.
+ BUG 6415: Filter out of range mappings in default idmap config in
idmap_tdb.
+ BUG 6416: Filter out of range mappings in default idmap config in
idmap_tdb2.
+ BUG 6417: Filter out of range mappings in default idmap config in
idmap_ldap.
+ BUG 6441: Fix the compile with --enable-dnssd.
+ BUG 6449: \'net rap user add\' crashes without -C option.
+ BUG 6465: Fix enumeration of empty aliases (ldb backend).
+ Prevent infinite include nesting.
+ Mark registry shares without path unavailable.
+ Also handle DirX return codes.
+ Fix Coverity ID 897.
+ Do not crash in ctdbd_traverse if ctdbd is not around.
+ Fix a race condition in winbind leading to a panic.
+ Some man pam_winbind improvements.
+ Zero an uninitialized array.

Tue Jun 16 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.2.12.
+ Fix SAMR and LSA checks (bug #6089, #6289)
+ Fix posix acls when setting an ACL without explicit ACE for the
owner (bug #2346).
+ Fix \"force user\" (bug #6291).
+ Fix Winbind crash (bug #6279).
+ Fix joining of Win7 into Samba domain (bug #6099).
+ BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the
owner.
+ BUG 5798: CFLAGS info lost in configure.
+ BUG 5832: Fix build on RHEL when ccache is not available.
+ BUG 5835: Add keyutils-devel to build requires.
+ BUG 5945: Fix out of memory error with Winbind idmap.
+ BUG 6089: Revert the extra SAMR and LSA checks.
+ BUG 6099: Fix joining of Win7 into Samba domain.
+ BUG 6279: Fix Winbind crash.
+ BUG 6289: Revert the extra SAMR and LSA checks.
+ BUG 6291: Fix \"force user\".
+ BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit.
+ BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
+ BUG 6386: Groupdb mapping fix.
+ BUG 6382: Fix case insensitive access to DFS links.
+ BUG 6465: Fix enumeration of empty aliases (ldb backend).
+ Prevent creation of keys containing the \'/\' character.
+ Fix bug in processing of open modes in POSIX open.
+ Protect netlogon_creds_server_step() against NULL creds.
+ Also handle DirX return codes.
+ Fix a race condition in winbind leading to a panic.
+ Fix a crash bug if we timeout in net rpc trustdom list.
+ Fix profile acls in some corner cases.

Fri Jun 12 14:00:00 2009 lmuelleAATTsuse.de
- Default with passdb backend to smbpasswd for SUSE products older than 11.2.

Fri Jun 12 14:00:00 2009 lmuelleAATTsuse.de
- Explicitly use \'tdbsam\' as passdb backend in the default smb.conf file.

Mon Jun 8 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.4.0pre2.
+ The default passdb backend has been changed to \'tdbsam\'!
+ Samba4 and Samba3 sources are included in the tarball.
+ Changed the way smbd handles untrusted domain names given during user
authentication.
+ Various fixes including printer change notificiation for Samba spoolss
print servers.
+ The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog
and spoolss) were replaced by autogenerated code based on PIDL.
+ Samba3 and Samba4 do now share a common tevent library.
+ The code has been cleaned up and the major basic interfaces are shared
with Samba4 now.
+ An asynchronous API has been added.
+ Made parameter syntax of the net command more consistent.
+ BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the
owner.
+ BUG 4271: testparm should not print includes.
+ BUG 4831: Don\'t call openlog() or closelog() from pam_smbpass.
+ BUG 5681: Do not limit the number of network interfaces.
+ BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo
access checks.
+ BUG 6099: Fix NETLOGON credential chain.
+ BUG 6136: New AFS syscall conventions.
+ BUG 6157: Fix handling of multi-value attribute \"uid\".
+ BUG 6253: Use correct value for password expiry calculation.
+ BUG 6291: Fix \'force user\'.
+ BUG 6292: Update config.guess from gnu.org.
+ BUG 6302: Give the VFS a chance to read from 0-byte files.
+ BUG 6309: Support remote unjoining of Windows 2003 or greater.
+ BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on
malloced memory.
+ BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event.
+ BUG 6320: Handle registry config source in file_list.
+ BUG 6330: Fix DFS on AIX.
+ BUG 6336: Fix segfault in \'net groupmap set\'.
+ BUG 6340: Don\'t segfault when cleartext trustdom pwd could not be
retrieved.
+ BUG 6357: Use Samba default command line arguments in \'net\'.
+ BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4
and IPv6 addresses
+ BUG 6361: Make --rcfile work in smbget.
+ BUG 6371: Unsuccessful \'net conf setparm\' leaves empty share.
+ BUG 6372: usermanager only displaying 1024 groups and aliases.
+ BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids.
+ BUG 6415: Filter out of range mappings in default idmap config
(idmap_tdb).
+ BUG 6416: Filter out of range mappings in default idmap config
(idmap_tdb2).
+ BUG 6417: Filter out of range mappings in default idmap config
(idmap_ldap).
+ Change the way smbd handles untrusted domain names given during user
authentication.
+ Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and
spoolss by autogenerated code based on PIDL.
+ Fix several printing issues and improve support for printer change
notificiations.
+ Add \'net eventlog\'.
+ Add asynchronous API.
+ Make Samba3 and Samba4 share a tevent library.
+ Add two new parameters to control how we verify kerberos tickets.
+ Add \'net rpc service\' subcommands \'create\' and \'delete\'.
+ Fix the core of the SAMR access functions.
+ Fix SAMR server for winbindd access.
+ Add dbwrap_tool - a tdb tool that is CTDB-aware.
+ Hide \"config backend\" from swat.
+ Fix linking with --disable-shared-libs.
+ Fix issue with missing entries when enumerating directories.
+ Map NULL domains to our global sam name.
+ Fix driver upload for Xerox 4110 PS printer driver.
+ Add \"net dom renamecomputer\" to rename machines in a domain.
+ Inspect the correct computername string before enabling/disabling the
change button in netdomjoin-gui.
+ Fix join prompt dialog test in netdomjoin-gui.
+ Only gray out labels when not root and not connecting to remote
machines (netdomjoin-gui).
+ Allow to switch between workgroups/domains with the same name
(netdomjoin-gui).
+ Add NetShutdownInit and NetShutdownAbort.
+ Fix samr access checks.
+ Add a security model to LSA.
+ Also handle DirX return codes.
+ Do not crash in ctdbd_traverse if ctdbd is not around.
+ Fix Coverity ID 897.
+ Fix a race condition in vfs_aio_fork with gpfs share modes.
+ Fix bug disclosed by lock8 torture test.
+ Fix a race condition in winbind leading to a panic.
+ Detect tight loop in tdb_find().
+ Fix chained sesssetupAndX/tconn messages.
+ Fix strict locking with chained reads.
+ Fix two bugs in sendfile.
+ Fix memory leak.
+ Fix file descriptor leak.
+ Fallback to the legacy sid_to_(uid|gid) instead of returning NULL.
+ Always allocate memory in dptr_ReadDirName.
+ Fix \'net\' crash during domain join.
+ Zero an uninitialized array.
+ Allow child processes to exit gracefully if we are out of fds.

Thu Jun 4 14:00:00 2009 sjayaramanAATTsuse.de
- Enable cifs.upcall on versions newer than SUSE 10.0.

Thu Jun 4 14:00:00 2009 sjayaramanAATTsuse.de
- Add BuildRequires to keyutils-devel.

Thu Jun 4 14:00:00 2009 sjayaramanAATTsuse.de
- Remove redundant Requires to keyutils-libs for cifs-mount.

Wed May 27 14:00:00 2009 jmcdonoughAATTsuse.de
- Detect tight loop in tdb_find(); (bnc#450974).

Mon May 18 14:00:00 2009 jmcdonoughAATTsuse.de
- Fix lp printing with kerberos; (bnc#476913).

Sat May 9 14:00:00 2009 lmuelleAATTsuse.de
- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all
other build targets.

Thu Apr 30 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.4.0pre1.
+ Samba4 and Samba3 sources are included in the tarball
+ Changed the way smbd handles untrusted domain names given during user
authentication.
+ Various fixes including printer change notificiation for Samba spoolss
print servers.
+ The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog
and spoolss) were replaced by autogenerated code based on PIDL.
+ Samba3 and Samba4 do now share a common tevent library.
+ The code has been cleaned up and the major basic interfaces are shared
with Samba4 now.
+ An asynchronous API has been added.
+ Change the way smbd handles untrusted domain names given during user
authentication.
+ Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and
spoolss by autogenerated code based on PIDL.
+ Fix several printing issues and improve support for printer change
notificiations.
+ Add \'net eventlog\'.
+ Add asynchronous API.
+ Make Samba3 and Samba4 share a tevent library.
+ Add two new parameters to control how we verify kerberos tickets.
+ Add \'net rpc service\' subcommands \'create\' and \'delete\'.
+ Make merged build possible.
+ Move common libraries to the shared lib/ directory.

Thu Apr 30 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.3.4.
+ Fix domain logins for WinXP clients pre SP3 (bug #6263).
+ Fix samr_OpenDomain access checks (bug #6089).
+ Fix usrmgr.exe creating a user (bug #6243).
+ BUG 6089: Fix samr_OpenDomain access checks.
+ BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with
\"msdfs root\" set to \"yes\".
+ BUG 6279: Fix Winbind crash.
+ BUG 5329: Add \"net rpc service delete/create\".
+ BUG 6238: Make sure wbcLogoffUserParams are properly initialized before
freed.
+ BUG 6263: Fix domain logins for WinXP clients pre SP3.
+ BUG 6286: Call init function for builtin idmap modules before probing for
them as shared modules.
+ BUG 6243: Fix usrmgr.exe creating a user.
+ net conf: Save share name as given, not as lower case only.
+ Prevent creation of registry keys containing the \'/\' character.
+ Allow pdbedit to change a user rid/sid.
+ When doing a cli_ulogoff don\'t invalidate the cnum, invalidate the vuid.
+ Don\'t access a freed structure when logging off and re-using a vuid.
+ Try to to fix password_expired flag handling.
+ Make sure to grey out change fields in the netdomjoin-gui when not
running as root.
+ Don\'t look up local user for remote changes, even when root.
+ Use procid_str in debug messages for better cluster-debuggability.
+ Use cluster-aware procid_is_me instead of comparing pids.
+ Fix smbd crash for close_on_completion.
+ Fix a memleak in an unlikely error path in change_notify_create().
+ Do not use the file system GET_REAL_FILENAME for mangled names.
+ Fix a crash bug if we timeout in net rpc trustdom list.
+ Add \'--request-timeout\' option to net.
+ In net_conf_import, start a transaction when importing a single share.
+ Fix writing of roaming profiles with \"profile acls\" set to \"yes\".

Fri Apr 17 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.2.11.
+ Fix domain logins for WinXP clients pre SP3 (bug #6263).
+ Fix samr_OpenDomain access checks (bug #6089).
+ Fix smbd crash for close_on_completion.
+ BUG 6089: Fix samr_OpenDomain access checks.
+ BUG 6205: Correct sample smb.conf share configuration.
+ BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with
\"msdfs root\" set to \"yes\".
+ BUG 6263: Fix domain logins for WinXP clients pre SP3.
+ Allow pdbedit to change a user rid/sid.
+ When doing a cli_ulogoff don\'t invalidate the cnum, invalidate the vuid.
+ Fix resume command typo for \"printing = vlp\".
+ Fix smbd crash for close_on_completion.
+ Fix a memleak in an unlikely error path in change_notify_create().
+ Don\'t look up local user for remote changes, even when root.

Fri Apr 17 14:00:00 2009 jmcdonoughAATTsuse.de
- Don\'t lookup local user for remote password changes; (bnc#493507).

Thu Apr 2 14:00:00 2009 lmuelleAATTsuse.de
- Update to 3.3.3.
+ Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb
correctly (bug #6195).
+ Fix serving of files with colons to CIFS/VFS client (bug #6196).
+ Fix \"map readonly\" (bug #6186).
+ BUG 6195: Don\'t let smbd child processes panic.
+ Add backend_requires_messaging() method to libsmbconf.
+ Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf.
+ Fall back to file backend when no valid backend was found.
+ Fix a memleak in dbwrap_rbt.
+ Provide transaction_start|commit|cancel fns for the registry tdb.
+ Speed up \"net conf drop\".
+ Speed up \"net conf import\".
+ Add transactions to the libsmbconf API.
+ Reduce memory usage of \"net conf import\".
+ Registry cleanup.
+ Fix handling of SAMBA_VERSION_VENDOR_PATCH.
+ Fix build of pam_winbind.so with static linking.
+ Tidy up some convert_string_internal error cases.
+ BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to
run elections.
+ Allow DFS client paths to work when POSIX pathnames have been selected.
+ Try and fix the build farm RAW-STREAMS errors.
+ Ensure files starting with multiple dots are hidden.
+ BUG 6102: NetQueryDisplayInformation could return wrong information.
+ BUG 6193: Avoid messing with sync_context in libnet_samsync_delta().
+ Fix notify_printer_status_byname.
+ Fix Coverity IDs 722, 762, 774, 775, 776.
+ Fix build on old Heimdal based systems.
+ Fix compile warning.
+ Use parentheses in if condition to make negation clear.
+ Add dirsort module.
+ BUG 6147: Fix detection of the GNU ld version.
+ BUG 6097: Fix smbd segfault.
+ BUG 6130: Don\'t crash in winbindd_rpc lookup_groupmem() on unmapped
members.
+ BUG 6139: Add missing whitespace in mount.cifs error message.
+ Fix a malloc/talloc mismatch when cli_initialise() fails.
+ Fix a valgrind error.
+ Speed up \"net conf list\".
+ Add sorted subkey cache.
+ Use StrCaseCmp in the dirsort module.
+ Document the dirsort module.
+ Disable dns_sd by default.
+ Add avahi detection to configure.
+ Add event avahi binding.
+ Use avahi to register _smb._tcp in smbd.
+ Fix two memleaks in the encryption code.
+ Fix a scary \"fill_share_mode_lock failed\" message.
+ BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn\'t set
errno.
+ Don\'t use reserved words in smbconftort.
+ Fix smb signing for fragmented trans/trans2/nttrans requests.
+ Parse_packet can return NULL which is then dereferenced in
match_mailslot_name.
+ Format the header check for netinet/ip.h more nicely.
+ Missing break in conversion function prevents tdb password database
update.

Wed Apr 1 14:00:00 2009 jmcdonoughAATTsuse.de
- Update to 3.2.10.
+ BUG #6195: Don\'t let smbd child processes panic.

Wed Apr 1 14:00:00 2009 jmcdonoughAATTsuse.de
- BUG 6195: Fix crash on passdb conversion.

Tue Mar 31 14:00:00 2009 jmcdonoughAATTsuse.de
- Update to 3.2.9.
+ BUG 5920: The length of the memcpy was calculated wrong.
+ BUG 6097: Fix smbd segfault.
+ BUG 6098: Fix ads_find_dc() with \"security = domain\" when the DNS
server is invalid.
+ BUG 6099: Samba returns incurrate capabilities list.
+ BUG 6100: Implement _netr_LogonGetCapabilities() with
NT_STATUS_NOT_IMPLEMENTED.
+ BUG 6102: NetQueryDisplayInformation could return wrong information.
+ BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped
members.
+ BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem.
+ BUG 6161: smbclient corrupts source path in tar mode.
+ BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif().
+ BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client.
+ BUG 6224: nmbd waits 5 minutes before checking to run elections.
+ BUG 6228: Fix SMBC_open_ctx failure when path failure doesn\'t set errno.
+ Numerous Coverity fixes
+ Fix double free caused by incorrect talloc_steal usage.
+ Backport delete semantics of alternate data streams on a file truncate.
+ Allow set attributes on a stream fnum to redirect to the base filename.
+ Fix use of streams modules with CIFSFS client.
+ Fix more POSIX path lstat calls.
+ Allow DFS client paths to work with POSIX pathnames.
+ Ensure files starting with multiple dots are hidden.
+ Fix guest auth when Winbind is running.
+ Fix memleak in get_remote_printer_publishing_data().
+ cifs mount fix for handling -V parameter.
+ Fix guest mounts.
+ Clean-up entries in /etc/mtab after unmount.
+ Add fakemount (-f) and nomtab (-n) flags to mount.cifs.
+ Enable total anonymization in vfs_smb_traffic_analyzer.
+ Don\'t try and delete a default ACL from a file.
+ Fix remotely adding a share via MMC.
+ Fix resume handle for _samr_EnumDomainGroups.
+ Fix a buffer handling bug when adding lots of registry keys.
+ Fix a O(n^2) algorithm in regdb_fetch_keys().
+ Fix a valgrind error / segfault in dns_register_smbd().
+ Don\'t log NDR_PRINT_DEBUG at level 0, this always ends up in syslog.
+ Fix a malloc/talloc mismatch when cli_initialise() fails.
+ Fix two memleaks in the encryption code.
+ Fix \"fill_share_mode_lock failed\" message.
+ Add S-1-22-X-Y sids to the local token.
+ Fix smb signing for fragmented trans/trans2/nttrans requests.
+ Don\'t miss an absolute pathname as a kerberos keytab path.
+ Have nmbd check all available interfaces for WINS before failing.
+ Initialize the id_map status in idmap_ldap to avoid surprise.

Sun Mar 15 13:00:00 2009 lmuelleAATTsuse.de
- Obsolete change from 2008-03-05 by removing the needless examples cleanup.

Sat Mar 14 13:00:00 2009 lmuelleAATTsuse.de
- Update to 3.3.2.
+ Fix \"force group\" (bug #6155).
+ Fix saving of files on Samba share using MS Office 2007 (bug #6160).
+ Fix guest authentication in setups with \"security = share\" and \"guest ok =
yes\" when Winbind is running.
+ Fix corruptions of source path in tar mode of smbclient (bug #6161).
+ BUG 6082: Fix renaming and deleting of directories using Windows clients.
+ BUG 6154: Make ZFS honor admin users.
+ BUG 6155: Fix \"force group\".
+ BUG 6160: Fix saving of files on Samba share using MS Office 2007.
+ BUG 6161: Fix corruptions of source path in tar mode of smbclient.
+ Fix some NetBSD warnings.
+ Fix bug in processing of open modes in POSIX open.
+ Fix use of streams modules with CIFSFS client.
+ Ensure ACL modules work with POSIX paths.
+ Use fsp->posix_open in preference if we have it.
+ Fix more POSIX path lstat calls.
+ Fix a bug in message handling for the change notify code.
+ Fix guest authentication in setups with \"security = share\" and \"guest ok =
yes\" when Winbind is running.
+ BUG 4640: Fix guest mounts in mount.cifs.
+ Fix displaying the version string properly when no other parameters passed
in in mount.cifs.
+ Prefer gssapi header files from subdirectory.
+ BUG 6176: winbindd -n should disable the winbind idmap cache.
+ Add a vfs_preopen module to hide fs latencies.
+ Don\'t log NDR_PRINT_DEBUG at level 0, this always ends up in syslog.
+ Fix a valgrind error / segfault in dns_register_smbd().
+ Fix build on SLES8.
+ Decremented by 1 for ntcancel requests.
+ Fix creation of core files.
+ Fix first mapping of uids/gids in Winbind.
+ Initialize the id_map status in idmap_ldap to avoid surprise.
+ Fix initialization of idmap status.

Tue Mar 10 13:00:00 2009 lmuelleAATTsuse.de
- Only call \'%find_lang pam_winbind\' in the samba spec file, not samba-doc.

Thu Mar 5 13:00:00 2009 roAATTsuse.de
- Ignore return value from subshell to fix build.

Wed Feb 25 13:00:00 2009 boyangAATTsuse.de
- Make libsmbclient work with DFS, backported from 3.3; (bnc#475995).

Tue Feb 24 13:00:00 2009 lmuelleAATTsuse.de
- Update to 3.3.1.
+ Fix net ads join when \"ldap ssl = start tls\" (bug #6073).
+ Fix renaming/deleting of files using Windows clients (bug #6082).
+ Fix renaming/deleting a \"not matching/resolving\" symlink (bug #6090).
+ Fix remotely adding a share via the Windows MMC.
+ BUG 6082: Fix renaming/deleting of files using Windows clients.
+ BUG 6069: Fix build with too many arguments.
+ BUG 6090: Fix renaming/deleting a \"not matching/resolving\" symlink.
+ BUG 6099: Try to fix domain join of Win7 Beta.
+ BUG 6117: Fix core dump of pdbedit -a.
+ BUG 6133: Fix deletion of non-ACL files on Solaris/ZFS/NFSv4 ACL
filesystem.
+ Fix Coverity IDs 115, 116, 117, 602.
+ Fix warning (bad handler prototype).
+ Unify the detection of the timespec code in configure.in, and the
application of it in time.c.
+ Correctly use chroot().
+ Parameterize in local.h the MAX_RPC_DATA_SIZE, and ensure that \"offered\"
read from the rpc packet in spoolss is under that size.
+ Backport the semantics of when to delete alternate data streams on a file
truncate.
+ Fix printf warnings.
+ BUG 6073: Prevent ads_connect() from using SSL unless explicitly
requested.
+ Fix \'getent passwd\' to allocate new uids.
+ Fix \'getent group\' to allocate new gids.
+ Remove check for sharename being a username in \'net conf addshare\'.
+ Fix Coverity ID 848.
+ Remove unused ENUM_HND from \'net\'.
+ Fix getform command asprintf return code in rpcclient.
+ Fix memleak in get_remote_printer_publishing_data().
+ Remove duplicate prototypes for generated rpc server functions.
+ Enable total anonymization in vfs_smb_traffic_analyzer.
+ Fix build with external dns_sd libraries.
+ Fix configure check \"sub-second timestamps without struct timespec\".
+ Use correct BSD evironment variable.
+ Don\'t try and delete a default ACL from a file.
+ BUG 5798: CFLAGS info lost in configure.
+ Fix Coverity IDs 740, 742, 744, 745, 876, 879, 880.
+ Fix remotely adding a share via the Windows MMC.
+ Avoid valgrind errors.
+ Fix \'net rpc join\' for users with the SeMachineAccountPrivilege.
+ Fix resume handle for _samr_EnumDomainGroups.
+ Fix a buffer handling bug when adding lots of registry keys.
+ Fix a O(n^2) algorithm in regdb_fetch_keys().
+ Initialize rc to 0 in main in mount.cifs.
+ BUG 6069: Add a fstatvfs function for libsmbclient.
+ Eliminate compiler warnings.
+ Don\'t miss an absolute pathname as a kerberos keytab path.
+ BUG 6100: Implement _netr_LogonGetCapabilities() with
NT_STATUS_NOT_IMPLEMENTED.
+ Make Samba work with older ctdb versions.
+ Add S-1-22-X-Y sids to the local token.
+ Conditional install of the cifs.upcall man page.
+ Adjust regex to match variable names including underscores.
+ BUG 4370: Clean-up entries in /etc/mtab after unmount.
+ Add fakemount (-f) and nomtab (-n) flags to mount.cifs.
+ Fix a crash during name resolution.
+ Fix \"assignment discards qualifiers from pointer target type\" warnings.
+ Fix SMB_VFS_RECVFILE/SENDFILE macros.
+ Change \"ldap ssl:ads\" parameter to \"ldap ssl ads\".
+ Add manpages for vfs_acl_xattr and vfs_acl_tdb.
+ Fix double free caused by incorrect talloc_steal usage.
+ Build ldbrename.
+ Make nmbd check all available interfaces for WINS before failing.
+ Fix compilation of vfs_default on systems that do not support utimes().
+ BUG 5920: Fix the calculation of the memcpy length.
+ BUG 6098: Fix ads_find_dc() in setups with \"security = domain\".
+ Make libsmbclient work with DFS.

Mon Feb 23 13:00:00 2009 hhetterAATTsuse.de
- Define init_samba_module in all samba-vscan modules; (bnc#469218).

Sat Feb 21 13:00:00 2009 lmuelleAATTsuse.de
- Add GPLv3 header to all init scripts; (bnc#459766).

Tue Feb 10 13:00:00 2009 boyangAATTsuse.de
- Backport of the clean event context after fork and krb5 refresh chain
fixes; (bnc#415026).

Mon Feb 9 13:00:00 2009 jmcdonoughAATTsuse.de
- Revert accidental partial strict allocate upstream commit

Sun Feb 8 13:00:00 2009 jmcdonoughAATTsuse.de
- Update to 3.2.8.
+ Fix and streamline join and DC detection
+ BUG 4308: Excel save operation corrupts file ACLs.
+ BUG 5933: Fix incrementing/decrementing num_validated_vuids.
+ BUG 5953: Fix smbclient crashes.
+ BUG 5953: Make cli_send_smb_direct_writeX use writev.
+ BUG 5965: Fix creation of the first share using SWAT.
+ BUG 5969: Optimize smbclient put command.
+ BUG 5979: Fix level 2 oplocks.
+ BUG 5980: Fix race condition when granting level2 oplocks
+ BUG 5986: Fix renaming of streams.
+ BUG 5990: Strict allocate should be checked before ftruncate.
+ BUG 6000: Avoid bashism in perfcount.init.
+ BUG 6009: Setting \"min receivefile size = 1\" breaks writes.
+ BUG 6014: mget shouldn\'t segfault without arguments.
+ BUG 6016: Alternate Data Streams / Extended Attributes seem to conflict.
+ BUG 6017: Fix magic scripts.
+ BUG 6021: smbclient du command does not recuse properly.
+ BUG 6030: Add missing
header in Status page.
+ BUG 6035: Fix possible race between fcntl F_SETLKW and alarm delivery.
+ BUG 6040: Calling Samba print server with an aliased DNS-name fails.
+ BUG 6058: Use \'make distclean\' instead of \'make clean\' in build_docs.
+ Fix \"allow trusted domain\" so it disables trusted domains.
+ Fix error code when smbclient puts a file over an existing directory.
+ Don\'t return 0 on error in smbcacls - bad for scripts.
+ Determine case sensitivity based on file system attributes.
+ Add vfs_fileid manpage.
+ Adjust regex to match variable names including underscores.
+ Fix stream marshalling to return the correct streaminfo status.
+ Fix a delete on close divergence from Windows.
+ Allow renames of streams via NTRENAME and fix stream error codes.
+ Fix a segfault if ? is there but the options are NULL.
+ Avoid flooding of syslog with failing pam_putenv messages.
+ Document default of the printing config variable.
+ Change default value for \"ldap ssl\" to \"start tls\".
+ Check if Unix account exists before asking for the password in smbpasswd.
+ Add manpage for vfs_shadow_copy2.
+ Clean event context after child is forked.
+ Refresh sequence number as soon as possible.
+ Don\'t set child->requests to NULL in parent after fork.
+ Clean event context after fork and fix krb5 refresh chain.
+ Fix null pointer refrence in event context.
+ Don\'t send message to any other child in child process.
+ Fix bug in get_dc_name_via_netlogon(), null pointer refrence.

Tue Feb 3 13:00:00 2009 jmcdonoughAATTsuse.de
- Backport 3.2.8 fixes.
+ cups leaks and crashes
+ various winbind child handling fixes
+ join fixes
+ ACL fixes for Excel
+ allow usrmgr with non-root

Mon Feb 2 13:00:00 2009 lmuelleAATTsuse.de
- Replace cifs.upcall Makefile patches by the upstream version.

Wed Jan 28 13:00:00 2009 lmuelleAATTsuse.de
- Only add ccache to BuildRequires if it is used.

Tue Jan 27 13:00:00 2009 lmuelleAATTsuse.de
- Update to 3.3.0.
+ The passdb tdbsam version has been raised.
+ Splitting of library directory into library directory and separate modules
directory.
+ The default value of \"ldap ssl\" has been changed to \"start tls\".
+ Extended Cluster support.
+ New experimental VFS modules \"vfs_acl_xattr\" and \"vfs_acl_tdb\" to store
NTFS ACLs on Samba file servers.
+ Simplified idmap configuration.
+ New idmap backends \"adex\" and \"hash\".
+ Added new parameter \"winbind reconnect delay\".
+ Added support for user and group aliasing.
+ Added support for multiple domains to idmap_ad.
+ The destination \"all\" of smbcontrol does now affect all running daemons
including nmbd and winbindd.
+ New \'net rpc vampire keytab\' and \'net rpc vampire ldif\' commands.
+ The \'net\' utility can now use kerberos for joining and authentication.
+ The \'wbinfo\' utility can now add, modify and remove identity mapping
entries.
+ NetApi library implements various new calls for User- and Group Account
Management.
+ libsmbclient does now determine case sensitivity based on file system
attributes.

Fri Jan 23 13:00:00 2009 anschneiderAATTsuse.de
- Replace all chkconfig calls with rc_active calls to improve performance
during boot.

Fri Jan 23 13:00:00 2009 anschneiderAATTsuse.de
- Add SuSEfirewall2 service config file to allow samba browsing on
post-10.2 systems; (bnc#460902).

Tue Jan 20 13:00:00 2009 lmuelleAATTsuse.de
- Update to 3.0.34.
+ Fix update of machine account passwords.
+ Fix SMB signing issue on Windows Vista with MS Hotfix KB955302.
+ Fix Winbind crashes.
+ Correctly detect if the current dc is the closest one.
+ Add saf_join_store() function to memorize the dc used at join time. This
avoids problems caused by replication delays shortly after domain joins.
+ Fix write list in setups using \"security = share\".

Wed Jan 7 13:00:00 2009 olhAATTsuse.de
- Obsolete old -XXbit packages; (bnc#437293).

Mon Jan 5 13:00:00 2009 lmuelleAATTsuse.de
- Update to 3.2.7.
+ Samba 3.2.0 to 3.2.6 can potentially give root filesystem access
to older versions of smbclient; CVE-2009-0022; (bnc#460764).

Sat Dec 27 13:00:00 2008 jmcdonoughAATTsuse.de
- Samba 3.2.0 to 3.2.6 can potentially give root filesystem access
to older versions of smbclient; CVE-2009-0022; (bnc#460764).

Thu Dec 25 13:00:00 2008 boyangAATTsuse.de
- Fix nmbstatus dipslay when workgroup parameter is given; (bnc#459785).

Thu Dec 25 13:00:00 2008 boyangAATTsuse.de
- Fix Mounting failure when there is white spaces in service; (bnc#460793).

Mon Dec 15 13:00:00 2008 anschneiderAATTsuse.de
- Update to 3.3.0rc2.
+ Splitting of library directory into library directory and separate
modules directory.
+ Extended Cluster support.
+ Simplified idmap configuration.
+ New idmap backends \"adex\" and \"hash\".
+ Added new parameter \"winbind reconnect delay\".
+ Added support for user and group aliasing.
+ Added support for multiple domains to idmap_ad.
+ The destination \"all\" of smbcontrol does now affect all running
daemons including nmbd and winbindd.
+ New \'net rpc vampire keytab\' and \'net rpc vampire ldif\' commands.
+ The \'net\' utility can now use kerberos for joining and authentication.
+ The \'wbinfo\' utility can now add, modify and remove identity mapping entries.
+ NetApi library implements various new calls for User- and Group
Account Management.

Fri Dec 12 13:00:00 2008 lmuelleAATTsuse.de
- Fix all remaining conditional macro calls; (bnc#456469).

Fri Dec 12 13:00:00 2008 anschneiderAATTsuse.de
- Add IPv6 support for mount.cifs.

Wed Dec 10 13:00:00 2008 lmuelleAATTsuse.de
- Update to 3.2.6.
+ Fix potential segfault in vfs_tsmsm.
+ Don\'t list the domain twice when expanding internal aliases.
+ Fix the output of \"getent group\" when \"winbind use default domain = yes\"
with \"security = ads\".
+ Add domain prefix to username in lookup_groupmem().
+ Prevent negative GM/ cache entries due to broken connections.
+ Fix crash in sync_eventlog_params().
+ Fix timeouts when calling \'getgrent\'.
+ BUG 1254: Fix \"write list\" in setups using \"security = share\".
+ BUG 5080: Fix access to cups-printers with cups 1.3.4.
+ BUG 5737: Fix Winbind crash in an unusual failure mode; (bnc#416598).
+ BUG 5783: Fix FindFirst where search pattern equals the mangled filename.
+ BUG 5790: Fix returning of STATUS_OBJECT_NAME_NOT_FOUND on set file
disposition.
+ BUG 5797: Fix moving of readonly files.
+ BUG 5814: Fix Winbind crash bug while doing \"rescan_trusted_domain\".
+ BUG 5818: Sort ACEs in smbcacl output properly and honor inheritance.
+ BUG 5825: Fix account locking with LDAP backend.
+ BUG 5826: Fix truncated filenames when accessing old servers.
+ BUG 5889: Fix \"delete veto files = no\".
+ BUG 5891: Fix smbd crash when viewing the eventlog exported by \"eventlog
list\".
+ BUG 5900: Fix vfs_readonly.
+ BUG 5903: Fix vfs_streams_xattr breaking contents of files.
+ BUG 5904: Fix libnss_wins causing SIGABRT while servicing getaddrinfo()
request.
+ BUG 5914: Fix build failure: redefinition of struct name_list.
+ BUG 5937: Fix filenames with \"
*\" char hiding other files.
+ BUG 5953: Fix smbclient crashes.
+ Fix rename_open_files.
+ Restructure VFS SMB traffic analyzer VFS module.
+ Correctly fix smbclient to terminate on eof from server.
+ Unify access checks for lsa server functions.
+ Remove the requirement for ldap call made as root.
+ Cope with MAXIMUM_ALLOWED_ACCESS requests when opening handles.
+ Fix net rpc vampire, based on an
*amazing
* piece of debugging work by
\"Cooper S. Blake\" .
+ Fix Coverity IDs 456, 574, 592, 606 and 607.
+ Fix net rpc vampire.
+ Use the same prerequisite for DDNS update as Windows XP.
+ Make \"lwinet ads dns register\" honor the \"interfaces\" parameter.
+ Fix extended DN parse error when AD object does not have a SID.
+ BUG 5888: Fix PNP_GetHwProfInfo().
+ BUG 5957: Do not abort rename process on valid rename script.
+ BUG 5898: Fix \'net rpc shutdown\'.
+ Fix duplicate installation of cifs.upcall.
+ Fix _srvsvc_NetShareAdd segfault.
+ Ensure consistency when reporting password complexity.
+ Fix _lsa_GetUserName.
+ Fix access check in _samr_QuerySecurity().
+ _samr_DeleteUser needs to wipe out the user_handle on success.
+ NetGroupEnum_r needs to handle servers with no groups.
+ Search for gpfs functions in both libgpfs_gpl.so an libgpfs.so.
+ BUG 5908: Fix internal change notify on shared directory.
+ BUG 5135 and 5446: Prevent calling POSIX ACL vfs methods on zfs share.
+ BUG 5929: Fix building of vfs_prealloc with option --with-cluster-support
and GPFS.
+ Add new VFS module to analyze SMB traffic
+ BUG 5928: Fix \'testparm --version\'.
+ Have uppercase_string return success on NULL pointer in mount.cifs.
+ Make mount.cifs return codes match the return codes for /bin/mount.
+ Use lock/unlock_mtab scheme from util-linux-ng mount prog in mount.cifs.
+ BUG 5778: Check if strlcpy and strlcat are already defined.
+ BUG 5840: Fix segfault in \"rpcclient lsaaddacctrights\".
+ BUG 5860: Fix nasty error message for overlong strings in safe_strcpy.
+ Fix a potential NULL deref in found by the IBM Checker.
+ Fix an uninitialized variable found by the IBM Checker.
+ Fix an unlikely memleak found by the IBM Checker.
+ Fix some missing error handlings.
+ Add workaround for domain joins using a netbios name which is different
from the hostname.
+ Fix crash bug when freeing a non-malloc\'ed buffer if the client sends a
non-encrypted packet with the crypto state set.
+ Fix trans2findfirst for the large directory optimization.
+ Fix checking for presence of cups-devel and correct cups-devel test for
HAVE_IPRINT.
+ BUG 5805: Don\'t close stdout when calling setup_logging multiple times.
+ Fix setting of trust password using \'net rpc trustdom add\'.
+ Fix several issues in vfs_streams_xattr and vfs_stream_depot.
+ Return an error instead of crashing when no realm is given (trigerred by
\"net ads info -S 127.8.7.6\" (where 127.8.7.6 doesn\'t exist) and
\"disable netbios = yes\").
+ Fix the new vfs_smb_traffic_analyzer build for static links.
+ BUG 5901: Fix default for streams_depot location.
+ Fix several build warnings.
+ Delete the krb5 ccname variable from the PAM environment if set.
+ Fix circular dependency error with autoconf 2.6.3.
+ Add AATTCIFSUPCALL_PROGSAATT to \"all\" target so cifs.upcall gets built at
compile time rather than install time.
+ BUG 5906: Fix Winbind crash when calling \'getent group\'.
+ Fix logging to syslog.
+ Allow SYSLOG_FACILITY to be modified with a new configure option called
- -with-syslog-facility.
+ BUG 5909: Fix MS-DFS on Vista clients.
+ BUG 5944: Fix starting of nmbd with \"socket address\" set to \"\".
+ Fix segfault on startup with trusted domains.
+ Re-add \"winbind:ignore domains\" parameter.
+ Avoid freeing fsp twice when opening new_file fails (Debian #431696).

Wed Dec 10 13:00:00 2008 anschneiderAATTsuse.de
- Fix the conditional macro to start smbfs by default; (bnc#456469).

Wed Dec 3 13:00:00 2008 anschneiderAATTsuse.de
- Readd libsmbclient to baselibs.conf for pre 11.0 distributions.

Wed Dec 3 13:00:00 2008 anschneiderAATTsuse.de
- Use %__install macro to install files with the right permissions
instead of cp.

Mon Dec 1 13:00:00 2008 anschneiderAATTsuse.de
- Update to 3.3.0rc1.
+ Splitting of library directory into library directory and separate
modules directory.
+ Extended Cluster support.
+ Simplified idmap configuration.
+ New idmap backends \"adex\" and \"hash\".
+ Added new parameter \"winbind reconnect delay\".
+ Added support for user and group aliasing.
+ The destination \"all\" of smbcontrol does now affect all running
daemons including nmbd and winbindd.
+ New \'net rpc vampire keytab\' and \'net rpc vampire ldif\' commands.
+ The \'net\' utility can now use kerberos for joining and authentication.
+ The \'wbinfo\' utility can now add, modify and remove identity mapping
entries.
+ NetApi library implements various new calls for User- and Group
Account Management.
- Added German translation for pam_winbind.

Mon Dec 1 13:00:00 2008 boyangAATTsuse.de
- Remove patch for bnc#336854, which doesn\'t exist in 3.2.x or higher.

Sun Nov 30 13:00:00 2008 lmuelleAATTsuse.de
- Use %{NET_CFGDIR} define instead of a fixed path to the network conf.

Sat Nov 29 13:00:00 2008 lmuelleAATTsuse.de
- Update to 3.2.5.
+ Samba 3.0.29 to 3.2.4 can potentially leak arbitrary memory contents to
malicious clients; CVE-2008-4314; (bnc#446971).

Thu Nov 27 13:00:00 2008 roAATTsuse.de
- Update baselibs.conf.

Thu Nov 27 13:00:00 2008 anschneiderAATTsuse.de
- Fix circular dependency error with autoconf 2.6.3.

Thu Nov 27 13:00:00 2008 anschneiderAATTsuse.de
- Fix the dhcp hook script and support CODE11; (bnc#442335).

Thu Nov 27 13:00:00 2008 anschneiderAATTsuse.de
- Fix perl v5.10 warnings in nmbstatus; (bnc#448225).

Wed Nov 26 13:00:00 2008 sjayaramanAATTsuse.de
- Include the missing spec file change mentioned the previous commit.

Tue Nov 25 13:00:00 2008 sjayaramanAATTsuse.de
- Make cifs-mount depend on keyutils, keyutils-libs packages as they
are required to support dfs and kerberos; (bnc#432494).

Thu Nov 20 13:00:00 2008 lmuelleAATTsuse.de
- Fix the offset checks in the trans routines; CVE-2008-4314; (bnc#446971).

Thu Nov 20 13:00:00 2008 hhetterAATTsuse.de
- Change the runlevel description for winbindd to use
\"Microsoft Windows\" instead of \"NT\"; (bnc#446154).

Tue Nov 11 13:00:00 2008 boyangAATTsuse.de
- Directory/Filenames get truncated when 3.2.0 client acesses old server;
(bnc#432471).

Thu Nov 6 13:00:00 2008 anschneiderAATTsuse.de
- Add SuSEfirewall2 services config file to open Netbios and Samba ports on
post-10.2 systems; (bnc#247344).

Wed Oct 29 13:00:00 2008 anschneiderAATTsuse.de
- Remove unrecognized configure options.

Fri Oct 24 14:00:00 2008 anschneiderAATTsuse.de
- Fix the pam_winbind build.

Tue Oct 21 14:00:00 2008 anschneiderAATTsuse.de
- Delete the krb5 ccname variable from the PAM environment if set.

Thu Oct 16 14:00:00 2008 anschneiderAATTsuse.de
- Move the nss_info modules to the samba-winbind package.

Thu Oct 16 14:00:00 2008 anschneiderAATTsuse.de
- Activate the idmap backends \"adex\" and \"hash\".

Thu Oct 16 14:00:00 2008 anschneiderAATTsuse.de
- Add version branding for CODE 11.

Wed Oct 15 14:00:00 2008 anschneiderAATTsuse.de
- Restart smbfs even with the traditional network setup; (bnc#425058).

Fri Oct 3 14:00:00 2008 lmuelleAATTsuse.de
- Only call the stop_on_removal, restart_on_update, or insserv_cleanup macro
if available.

Fri Oct 3 14:00:00 2008 lmuelleAATTsuse.de
- Only call the fillup_and_insserv or fillup_only macro if available.

Fri Oct 3 14:00:00 2008 lmuelleAATTsuse.de
- Use package names instead of macros for cp, mkdir, mv, rm, and grep or
instead of the full path to the binary for ln, find and xargs.

Thu Oct 2 14:00:00 2008 lmuelleAATTsuse.de
- Introduce NET_CFGDIR to fit the needs for a differing location of the
network configuration per vendor.

Thu Oct 2 14:00:00 2008 lmuelleAATTsuse.de
- Use path macros for cp, mkdir, mv, rm, and grep.

Thu Oct 2 14:00:00 2008 lmuelleAATTsuse.de
- Only use SUSE rpm macros and SuSEconfig.permissions if available.

Thu Oct 2 14:00:00 2008 lmuelleAATTsuse.de
- Update to 3.3.0pre2.
+ BUG 5729: Explicitly allow \"-valid\".
+ BUG 5737: Fix winbindd crash in an unusual failure mode; (bnc#416598).
+ BUG 5751: Fix showing of ACLs on DFS in (lib)smbclient.
+ BUG 5762: Fix opening of mangled directory name (resulted \'is a stream
name\').
+ BUG 5783: Fix FindFirst where search pattern == mangled filename.
+ BUG 5790: Fix returning of STATUS_OBJECT_NAME_NOT_FOUND on set file
disposition.
+ BUG 5797: Fix moving of readonly files.
+ Fix crashes when looking up a non-existant uid.
+ Fix getting/setting of NT ACLs on a file.
+ Fix the wcache_invalidate_samlogon calls.
+ Clarify usage of \"force create mode\".
+ Get smbd to look (read-only) into the winbindd cache for uid/gid <--> sid
mappings.
+ Write times code update.
+ Add experimental version of VFS module acl_xattr.
+ Fix rename_open_files.
+ Make SMB traffic analyzer VFS module more efficient.
+ Fix segfault when calling nss_get_info() with a NULL ads structure.
+ Add support for name aliasing in Winbind.
+ Add the idmap/nss-info provider from Likewise Open.
+ Allow an admin to define the \"uid\" attribute for a RFC2307 user object in
AD to be the username alias.
+ Add new idmap backend \"adex\" to support RFC2307 enabled AD forests.
+ Add new idmap backend \"hash\".
+ Fix build warnings.
+ Cleanup of DC enumeration in get_dcs().
+ BUG 5710: Fix changing of machine account passwords.
+ BUG 5784: Fix pam_winbind build issue on Solaris.
+ Fix invalid sid copy (hit when enumerating sibling domains) in Winbind.
+ Fix double installation of cifs.upcall.
+ Add change-user-password command to wbinfo.
+ Fix segfault in _srvsvc_NetShareAdd.
+ BUG 5736: Fix Winbind crash bug with trusted domains.
+ Correct the netsamlogon_clear_cached_user function.
+ Add new VFS module to analyze SMB traffic to record write and read
operations on the Samba server.
+ Fix build warnings in cifs.upcall.
+ BUG 5707: Do proper error handling if the socket is closed.
+ BUG 5778: Don\'t define \'strlcat\' and \'strlcpy\' if it\'s already defined.
+ Fix Coverity IDs 587 and 589.
+ Increase the default positive idmap cache time to a week.
+ Fix calculation of useable_space for trans2 and nttrans replies.
+ Add mapping of generic bits when setting an NFSv4 ACL.
+ Some write time fixes.
+ Add new parameter \"cups connection timeout\".
+ Fix enumeration of nested group memberships in Winbind. This affected
only setups using \"security = ads\".
+ Fix cut and paste error in quota code.
+ Fix display of POSIX ACLs.
+ Fix permissions of group_mapping.ldb (CVE-2008-3789); (bnc#420634).
+ Avoid a race condition in glibc between AIO and setresuid().
+ Add missing become root for AIO operations.
+ Fix an errno handling bug that could lead to an infinite loop.
+ Fix logic of tsmsm_sendfile().
+ Fix handling of arbitrary new PAC types.
+ Fix segfault on startup with trusted domains.
+ Fix segfault on the CTDB destructor code.
+ Re-add \"winbind:ignore domains\".
+ BUG 5609: Remove configure option \"--with-libdir\" and add
\"--with-modulesdir\".
+ Extend \"net rpc vampire keytab\" to support differential replication and
storing of kerberos keys.
+ Rework internal logic of registry tdb code.
+ Freeze autogenerated prototype headers (good bye \"make proto\").
+ Add new \"winbind reconnect delay\" parameter.
+ Make the change to smbcontrol for \"all\" to mean broadcast, and \"smbd\" to
mean the main smb daemon.
+ Allow an admin to define the \"uid\" attribute for a RFC2307 user object in
AD to be the username alias.
+ Add \"net rpc vampire keytab\" and \"net rpc vampire ldif\".
+ Rework of the Winbind idmap backend.

Wed Oct 1 14:00:00 2008 lmuelleAATTsuse.de
- Define PAM_AUTHTOK_RECOVERY_ERR when not available on older Linux products.

Mon Sep 29 14:00:00 2008 lmuelleAATTsuse.de
- Adopt samba-vscan to build after the change to the bool type define.

Mon Sep 22 14:00:00 2008 lmuelleAATTsuse.de
- Build cifs.upcall for CentOS 5, Fedora 8 and RHEL 5 and newer too.

Sat Sep 20 14:00:00 2008 lmuelleAATTsuse.de
- Call mkinitrd_setup during %post and %postun for post-9.2 systems only.

Thu Sep 18 14:00:00 2008 anschneiderAATTsuse.de
- Create a link to the html manpages so that they can be accesses in swat;
(bnc#426182).

Tue Sep 9 14:00:00 2008 jmcdonoughAATTsuse.de
- \"Password last set\" timestamp update from admin pw change; (bnc#420407).

Wed Sep 3 14:00:00 2008 hareAATTsuse.de
- Call mkinitrd_setup during %post and %postun for package cifs-mount;
(bnc#413709).

Wed Aug 27 14:00:00 2008 lmuelleAATTsuse.de
- Update to 3.3.0pre1.
+ Splitting of library directory into library directory and separate modules
directory.
+ Extended Cluster support.
+ Simplyfied idmap configuration.
+ Added new parameter \"winbind reconnect delay\".
+ The destination \"all\" of smbcontrol does now affect all running daemons
including nmbd and winbindd.
+ New \'net rpc vampire keytab\' and \'net rpc vampire ldif\' commands.

Wed Aug 27 14:00:00 2008 lmuelleAATTsuse.de
- Update to 3.2.3.
+ Force the permissions on group_mapping.ldb to 0600; CVE-2008-3789;
(bnc#420634).

Tue Aug 19 14:00:00 2008 lmuelleAATTsuse.de
- Update to 3.2.2.
+ BUG 5592: Fix creation and installation of shared libraries.
+ Fix replacement of random seed generator.
+ Fix a race condition in idmap_tdb2_allocate_id().
+ Fix unix_convert() for \"
*\" after changing map_nt_error_from_unix().
+ Make sure to always set errno on error path in OpenDir.
+ BUG 5675: Fix smbspool program assuming Kerberos authentication by
mistake.
+ BUG 5686: Fix segfaults in libsmbclient.
+ BUG 5692: Fix coredump in full_audit.so.
+ BUG 5696: Fix \"force group\" in setups using Winbind.
+ Rename cifs.spnego to cifs.upcall.
+ Fix segfault in cifs.upcall when it is called without any arguments.
+ Fix coverity ID 594 (resource leak on error path).
+ Fix assigning of primary group memberships when authenticating via
Winbind.
+ BUG #5617: Fix freezing Windows Explorer on WinXP while browsing Samba
shares.
+ Include stdlib.h to get a prototype for free().
+ Solve an IBM XL C/C++ compiler error encountered in get_exit_code()
auth_errors array initialization in client/smbspool.c.
+ Use NGROUPS_MAX instead of 32 for the max group value in
rep_initgroups().
+ Add add c++ guard to netapi.
+ Fix compile warning in cifs.upcall.
+ Add \"dns_resolver\" key type to cifs.upcall.
+ BUG 5688: Fix orphaned LPQ processes if socket address is invalid.
+ BUG 5684: Fix removal of dead records in tdb files.
+ Fix coverity IDs 595, 596.
+ Fix smb_len calculation for chained requests.
+ Fix output of test status.
+ Fix smbclient connections to older servers.
+ Fix a fd leak when trying to regain contact to a domain controller in
Winbind.
+ Fix permissions on ctdb databases.
+ Fix passing back success when a function had in fact failed in two
places.
- Add --enable-static to the configure options to get the statical libraries
installed by the install Makefile target.
- Add --with-cifsupcall to build the cifs.upcall binary for post 10.2 systems.

Thu Aug 14 14:00:00 2008 lmuelleAATTsuse.de
- Set Required- and Should-Stop in the init info part of all init scripts.

Thu Aug 14 14:00:00 2008 jmcdonoughAATTsuse.de
- Fix libsmbclient to older servers; (bnc#402776).

Tue Aug 5 14:00:00 2008 lmuelleAATTsuse.de
- Update to 3.2.1.
+ BUG 5594: Fix \"make test\" by adding and using a new testparm switch
\"--skip-logic-checks\".
+ Fix creation of libaddns.a, libsmbclient.a and libsharemodes.a.
+ Update the section about net conf in the net(8) manpage.
+ Improve processing of registry shares.
+ Fix listing of registry shares with testparm.
+ Fix several build issues.
+ BUG 5578: Fix error from strlcat.
+ BUG 5613: Fix flushing of smb.conf when creating a new share using SWAT.
+ Ensure consistent use of pdb_get_nt_passwd instead of
pdb_get_lanman_passwd.
+ Remove worrying warning message when safe_strcpy tries to copy a pseaudo
interface name that\'s too long.
+ Canonicalize servername in the printer functions to remove leading \'\\\\\'
characters.
+ Fix option processing in smbcacls - add POPT_COMMON_CONNECTION.
+ Fix bug creating files using DOS clients with mixed case files.
+ Fix uninitialized variable.
+ BUG 5616: Fix session keys also in rpccli_netr_LogonSamLogonEx wrapper.
+ BUG 5570: Fix bogus error message during AD domain join.
+ Fix trusted domain handling in Winbindd.
+ Fix build warning.
+ BUG 5202: Fix setting of ACEs for users/groups with write access in setups
with \'dos filemode = yes\'.
+ Re-activate \'acl group control\' parameter and make it only apply to owning
group.
+ Make ntimes function more like POSIX and allow NULL arg.
+ BUG 5512: Fix alignment problems on sparc.
+ BUG 5616: Fix share connections in setups with
\"server signing = mandatory\" or SMB signing set on the client side.
+ Fix a race condition in Winbind leading to a crash.
+ Fix a segfault in base64_encode_data_blob.
+ Fix some uninitialized variable references via ndr_print.
+ Fix error message if trying to join with a non-privileged user.
+ Fix setups using \"include = registry\" without [global] settings in the
registry.
+ Fix \"net sam rights\" on domain member servers.
+ Add documentation for the vfs streams modules.
+ Cleanup some duplicate code by passing the password to the wbinfo_auth
*
functions.
+ Allow SID with 0 in subauthority to be converted properly.
+ Set sin[6]_family instead of ss_family in in[6]_addr_to_sockaddr_storage.
+ Fix realpath() check so that it doesn\'t generate a core() when it fails.
+ Fix overwriting of winbind logfiles.
+ Fix \"vfs_full_audit.c: name table not in sync with vfs.h\" panic.
+ Add broadcasting of the debug message to all winbindd children.
+ BUG 5635: Fix updating of printer queues.
+ Release still reachable memory if the smbclient context is freed.
+ Remove trailing withespace from wbinfo -m which breaks gdm auth.
+ BUG 5540: Fix \"set primary group script\" user option substitution.
+ Fix regression in Winbindd offline mode.
+ Allow authentication and memory credential refresh after password
change from gdm/xdm.
+ Allow %u parameters for print job username.

Tue Jul 29 14:00:00 2008 anschneiderAATTsuse.de
- Fix a race condition in winbind leading to a crash; (bnc#406623).

Mon Jul 28 14:00:00 2008 anschneiderAATTsuse.de
- Use the configure option to enable debugging. This fixes the creation
of the debuginfo and debugsource package.

Sun Jul 27 14:00:00 2008 anschneiderAATTsuse.de
- Fix emptying the printing queue; (bnc#411493).

Fri Jul 25 14:00:00 2008 anschneiderAATTsuse.de
- Remove trailing withespace from wbinfo -m which breaks gdm auth.

Thu Jul 24 14:00:00 2008 anschneiderAATTsuse.de
- Add a recommendation to the samba and samba-winbind package to install
logrotate for openSUSE 11.0 and later.

Wed Jul 23 14:00:00 2008 hareAATTsuse.de
- Include mkinitrd scriptlets.

Mon Jul 21 14:00:00 2008 boyangAATTsuse.de
- Allow %u parameters for print job username - use advanced sub; (bnc#374389).

Thu Jul 17 14:00:00 2008 lmuelleAATTsuse.de
- Update to 3.0.31.
+ BUG 5504: Fix SIGTERM handling in Winbind children so that they do not
remove the unix domain socket used to field client requests.
+ Split the winbindd_passdb backend into a \'builtin\' and a \'sam\' backend.
+ When allocating client buffers for large read/write - make sure we take
account of the large read/write SMB headers as well as the buffer space.
+ Memory leak fixes in DC location code.
+ BUG 5533: Winbindd fails to cope correctly with a workgroup name
containing a \'.\'
+ BUG 5555: Don\'t return NT_STATUS_PASSWORD_MUST_CHANGE error on machine
account logon.
+ BUG 5551: smbd recursing back into winbindd from a winbindd call.
+ Fix usage message for \"net rpc trustdom add\".
+ Ensure consistent use of pdb_get_nt_passwd instead of pdb_get_lanman_passwd.
+ BUG 5578: Bad (non-Samba) use of strlcat gives error.
+ Canonicalize servername in the printer functions to remove leading \'\\\\\'
characters.
+ Documentation build fixes.
+ [DOCS] Fix use of smbconfoption in samba.entities.
+ Return NULL in sitename_fetch() if gencache_init() fails.
+ Use machine account and machine password from our domain when contacting
trusted domains.
+ SPNEGO SPN fix when contacting trusted domains.
+ BUG 5285: Fix libcap header mismatch.
+ Fix joining NT4 domains.
+ Don\'t let winbind getgroups crash when we have no gids in the token.
+ Fallback to level 24 pwd set while joining.
+ Fix joining w2k domains in \"security = ads\".
+ Fix pam_sm_chauthtok for storing modified cached creds.
+ BUG 5202: Re-activate \"acl group control\" parameter and make it only apply
to owning group.
+ BUG 5531: Fix conversion of ns units when converting from nttime to
timespec.
+ BUG 4974: Map NT_STATUS_OBJECT_PATH_NOT_FOUND to ENOENT in libsmbclient.
+ Fix a segfault in base64_encode_data_blob.
+ AIX build fixes.
+ ENODATA is not defined in freeBSD 4.6.2.
+ Don\'t reset password last set time just because the expired flag is set to
0.
+ Fix usage message for \'net idmap dump\'.
+ Miscellaneous man page fixes.
+ BUG 4203: Samba3-HOWTO: Add improvements/fixes submitted by Pete Boyd.
+ Fixes to man pages.
+ Add tdb file documentation.
+ Ensure that winbindd trusted domain children keep primary domain online
status up to date.
+ Update cached creds during password change.
+ Ensure that Winbind always uses set_domain_offline() to mark a domain
offline.
+ Allow authentication and memory credential refresh after password change
from gdm/xdm.
+ Memory leak fixes.

Tue Jul 8 14:00:00 2008 boyangAATTsuse.de
- Allow authentication and memory credential refresh after password change
from gdm/xdm; [bnc#395578].

Fri Jul 4 14:00:00 2008 lmuelleAATTsuse.de
- Add SMB_VFS_OP_RECVFILE to vfs_op_names to get it in sync with vfs.h.

Wed Jul 2 14:00:00 2008 lmuelleAATTsuse.de
- Call the libsmbclient testsuite from the %check instead of the %build
script.

Wed Jul 2 14:00:00 2008 boyangAATTsuse.de
- Use machine account and machine password from our domain when
contacting trusted domains; [bnc#404667].

Tue Jul 1 14:00:00 2008 anschneiderAATTsuse.de
- Add a %check section move the test of the PAM modules to this section
and add more tests.

Tue Jul 1 14:00:00 2008 anschneiderAATTsuse.de
- Add a recommendation to the samba and samba-winbind package to install
cron for openSUSE 11.0 and later.

Tue Jul 1 14:00:00 2008 anschneiderAATTsuse.de
- Use a variable for syslog and add missing $remote_fs dependency for
Require-Start in the init information of the init scripts.

Tue Jul 1 14:00:00 2008 lmuelleAATTsuse.de
- Update to 3.2.0.
+ Support for establishing interdomain trust relationships with Windows
2008.
+ All changes from the pre and rc releases as noted in here earlier.

Tue Jul 1 14:00:00 2008 lmuelleAATTsuse.de
- Move header files from the devel sub package to lib
*-devel.

Mon Jun 30 14:00:00 2008 schwabAATTsuse.de
- Work around bad use of autoconf interna.

Mon Jun 30 14:00:00 2008 anschneiderAATTsuse.de
- Build Samba with debug symbols to get working debuginfo packages.

Thu Jun 26 14:00:00 2008 lmuelleAATTsuse.de
- Add /etc/openldap to the file list and not only the schema directory.

Wed Jun 25 14:00:00 2008 anschneiderAATTsuse.de
- Improve samba-winbindd and dhcpcd-hook-samba interface scripts for faster
booting; [fate#304967], [fate#304965].

Wed Jun 18 14:00:00 2008 anschneiderAATTsuse.de
- Move sysconfig variable DHCLIENT_MODIFY_SMB_CONF from Other to
\'Network/DHCP/DHCP client\'; [bnc#400467].

Wed Jun 11 14:00:00 2008 boyangAATTsuse.de
- pam_winbind: Update cached creds during password change; [bnc#395578].

Tue Jun 10 14:00:00 2008 lmuelleAATTsuse.de
- Update to 3.2.0rc2.
+ BUG 5504: Fix behaviour of winbindd children receiving a SIGTERM.
+ BUG 5489: Split the winbindd_passdb backend into a \'builtin\' and a \'sam\'.
+ Make sure we take account of the large read/write SMB headers as well as
the buffer space when allocating cli buffers for large read/write.
+ Fix tag as a goto target we were not reinitializing the array counts.
+ BUG 5451: Fix for using the correct machine domain when looking up trust
credentials in our tdb.
+ Fix spnego SPN when contacting trusted domains.
+ BUG 5285: Fix libcap header mismatch.
+ Fix pam_sm_chauthtok for storing modified cached creds.
+ Fix joining issue in setups with \"config backend = registry\".
+ BUG 4544: Add new parameter \'ldap connection timeout\' to prevent waiting
for TCP connection timeouts if no LDAP server is available.
+ BUG 5502: Fix security=server.
+ Fix coverity IDs 552, 553, 570, 571, 572.
+ Shrink ldbtools.
+ Fix reset of password last set time just because the expired flag is set
to 0.
+ Remove support for symbol versioning in shared libraries.
+ Fix autogen for autoconf 2.62.
+ BUG 5515: Fix empty input fields in SWAT.
+ BUG 5516: Fix saving of the config file in SWAT.
+ Fix winbindd trusted domain child not keeping primary domain online status
up to date.

Tue Jun 10 14:00:00 2008 boyangAATTsuse.de
- pam_winbind: fix pam_sm_chauthtok for storing modified cached creds;
[bnc#395578].

Mon Jun 9 14:00:00 2008 jmcdonoughAATTsuse.de
- Don\'t reset \"password last set time\" when unlocking an autolocked
account; [bnc#382111].

Fri Jun 6 14:00:00 2008 jmcdonoughAATTsuse.de
- Fix winbind sigterm handling and make init script send sighup to
all child winbind processes; [bnc#382027].

Thu Jun 5 14:00:00 2008 boyangAATTsuse.de
- Fix bug with winbindd trusted domain child not keeping primary domain
online status up to date, merge to trunk from reversion 1801; [bnc#373560].

Fri May 30 14:00:00 2008 jmcdonoughAATTsuse.de
- Make winbind children reopen logs on SIGHUP; [bnc#382027].

Fri May 30 14:00:00 2008 lmuelleAATTsuse.de
- Set only CONFIGDIR and LIBDIR while make everything and install. No longer
set CONFIGFILE, DRIVERFILE, LMHOSTSFILE, and SMB_PASSWD_FILE; [bnc#395877].

Wed May 28 14:00:00 2008 lmuelleAATTsuse.de
- Update to 3.0.30.
+ Fix for CVE-2008-1105.
+ Remove man pages for ldb tools not included in Samba 3.0.

Wed May 28 14:00:00 2008 lmuelleAATTsuse.de
- Fix vulnerability that allows for the execution of arbitrary code in smbd;
CVE-2008-1105; SA30228; [#391168].

Tue May 27 14:00:00 2008 cooloAATTsuse.de
- Follow the rename of libtdb0 in baselibs.conf.

Fri May 23 14:00:00 2008 lmuelleAATTsuse.de
- Rename sub package libtdb0 to libtdb1.

Fri May 23 14:00:00 2008 lmuelleAATTsuse.de
- Update to 3.2.0rc1.
+ Move the posix pending close functionality down into the VFS layer.
+ Fix activation of registry globals in loadparm.
+ BUG 5452: Fix smbclient put.
+ BUG 5434: Ensure the loaded password doesn\'t contain the \'\
\' at the end.
+ BUG 5456: Fix missing echo if we ^C at the prompt.
+ BUG 5464: Fix timeout in winbindd.
+ Fix returning a directory value for a QPATHINFO on a msdfs link with a
non-dfs path.
+ Use more error-prone form of testing dm_destroy_session() return code.
+ BUG 5453: Fix winbindd and smbd crash when dsgetdcname is used.
+ BUG 5465: Fix joining with createcomputer=ou1/ou2/ou3.
+ BUG 5461: Fix issue with Citrix on Samba DCs with more than 900 groups.
+ Fix wins null pointer crash in nss_wins module.
+ Fix lm session key length in _netr_LogonSamLogon.
+ Add -f switch for DsGetDCName() example and be more verbose on output.
+ BUG 5429: Clarify log msgs re: failure to create
BUILTIN\\{Administrators,Users}
+ Fix the DNS Update option of \"net ads join\".
+ BUG 5184: Add Missing HAVE_UPDWTMPX check before using updwtmpx().
+ Recognize and allow longer UA keys in winbindd_cache.
+ BUG 5436: Fix signing problem in the client with transs requests.
+ Fix a valgrind bug in the new [ug]id2sid cache.
+ Fix Coverity IDs 565 and 222.
+ Fix dfs_Enum: In form_junctions, correctly check for malloc failure.
+ Add support for symbol versioning in shared libraries (can be disabled with
- -disable-sysmbol-versioning).
+ Add new function wbcLibraryDetails() to libwbclient.
+ Cleanup size_t return values in convert_string_allocate.
+ Fix Kerberos support for CUPS 1.3 in smbspool.
+ Fix printing with Vista.
+ Fix deletion of files when they\'re in use by other drivers.

Fri May 23 14:00:00 2008 lmuelleAATTsuse.de
- Update to 3.0.29.
+ Fix a crash in tdb_wrap_log().
+ BUG 5267: Fix for nmbd termination problems when no interfaces found.
+ BUG 5326: OS/2 servers give strange \"high word\" replies for print jobs.
+ Remove MS-DFS check that required the target host be ourself.
+ BUG 5372: Fix high CPU usage of cupsd on large print servers by using more
efficient CUPS queries in smbd.
+ BUG 5095: Fix the enforcement of the \"Manage Documents\" access right.
+ BUG 5460: Fix MS-DFS referral problem in server code.
+ Fix bug in Winbind that caused the parent to ignore dead children.
+ BUG 4235: Improve compliance to the Squid helper protocol. Original patch
from Pawel Worach .
+ Prevent cycle in Wibind\'s list of children when reaping dead processes.
+ BUG 5419: Fix memory leak in ads_do_search_all_args() (merge from v3-2).
+ Fix winbind NETLOGON credential chain on a samba dc for w2k8 trusts.
+ Fix client connections and negotiation with Windows 2008 DCs in member
server code.
+ Add NT_STATUS_DOWNGRADE_DETECTED error code (merge from v3-2).
+ BUG 5430: Fix pam_winbind.so on Solaris (requires -lsocket).
+ Re-add samr getdispinfoindex parsing which got lost in the glue commit.
+ BUG 5461: Implement a very basic _samr_GetDisplayEnumerationIndex().
Corrects interop problem between Citrix PM and a Samba DC.
+ BUG 3840: Fix smbclient connecting to NetApp filers when using whitespace
in the user\'s password.
+ BUG 4901: Fix behavior of \"ldap passwd sync = only\".
+ BUG 5317: Fix debug output from domain_client_validate().
+ BUG 5338: Fix format string bug in rpcclient.
+ Ensure that \"wbinfo -a trusted\\\\user%password\" works correctly on a Samba
DC with trusts.
+ BUG 5336: Fix SetUsetrInfo(level 25) to update the pwdLastSet attribute.
+ BUG 5350: Fallback to anonymous sessions if not trust password could be
obtained on Samba DCs and member servers.
+ Fix signing problem in the client with trans requests.
+ Enable winbind child processes to do something with signals, in particular
closing and reopening logs on SIGHUP.
+ Add implementation of machine-authenticated connection to netlogon pipe
used when connecting to win2k and newer domain controllers.
+ Fix trusted users on a DC that uses the old idmap syntax.
+ Only have Winbind cache domain password policies that were successfully
retrieved.
+ Fix alignment bug when marshalling printer data replies.
+ Fix DeleteDriverDriverEx() checks to prevent removing in use files.

Sat May 17 14:00:00 2008 lmuelleAATTsuse.de
- Expand baselibs.conf to match pre SUSE 11.0 products.

Fri May 16 14:00:00 2008 lmuelleAATTsuse.de
- Remove obsoletes and provides 3 for all packages and systems.

Fri May 16 14:00:00 2008 lmuelleAATTsuse.de
- Cleanup the use of the suse_version macro to achieve consistent defaults.

Fri May 16 14:00:00 2008 lmuelleAATTsuse.de
- Set CODEPAGEDIR while make to fit the install location.

Fri May 16 14:00:00 2008 hhetterAATTsuse.de
- Prevent errors during the cache validation when ua keys reach a size larger
than 1024; [bnc#372558].

Wed May 14 14:00:00 2008 lmuelleAATTsuse.de
- Package man page files independent of the used compression method (gz,lzma).

Wed May 14 14:00:00 2008 lmuelleAATTsuse.de
- Rewrite spec file to build packages for Fedora, Redhat, CentOS, and Mandriva
in the OBS too.

Wed May 14 14:00:00 2008 anschneiderAATTsuse.de
- Add a script to restart smbfs if NetworkMangaer gets an IP address;
[bnc#373075].

Tue May 13 14:00:00 2008 lmuelleAATTsuse.de
- Remove all references to the obsoleted samba-pdb package.

Fri May 9 14:00:00 2008 lmuelleAATTsuse.de
- Compose the BuildRequires in a more flexible way to fit the openSUSE build
service (OBS) requirements to support different operating system targets.

Mon Apr 28 14:00:00 2008 lmuelleAATTsuse.de
- Use _libdir macro instead of a local define of LIBDIR.

Mon Apr 28 14:00:00 2008 lmuelleAATTsuse.de
- Remove PreReq /sbin/ldconfig from the libtdb-devel package.

Sat Apr 26 14:00:00 2008 lmuelleAATTsuse.de
- Install the shared libraries with the same name as used as soname.

Fri Apr 25 14:00:00 2008 lmuelleAATTsuse.de
- Update to 3.2.0pre3.
+ Use of IDL generated parsing layer for several DCE/RPC interfaces.
+ Removal of the 1024 byte limit on pathnames and 256 byte limit on filename
components to honor the MAX_PATH setting from the host OS.
+ Introduction of a registry based configuration system.
+ Improved CIFS Unix Extensions support.
+ Experimental support for file serving clusters.
+ Support for IPv6 in the server, and client tools and libraries.
+ Support for storing alternate data streams in xattrs.
+ Encrypted SMB transport in client tools and libraries, and server.
+ Support for Vista clients authenticating via Kerberos.
+ Full support for Windows 2003 cross-forest, transitive trusts and one-way
domain trusts.
+ Support for userPrincipalName logons via pam_winbind and NSS lookups.
+ Expansion of nested domain groups via NSS calls.
+ Support for Active Directory LDAP Signing policy.
+ New LGPL Winbind client library (libwbclient.so).
+ New NetApi library for domain join related queries (libnetapi.so) and
example GTK+ Domain join gui.
+ New client and server support for remotely joining and unjoining Domains.
+ Support for joining into Windows 2008 domains.
+ New ldb backend for local group mapping tables
+ Raised level of security defaults for authentication operations.
+ Inclusion of an HTML version of the 3rd edition of \"Using Samba\" from
O\'Reilly Publishing.

Fri Apr 25 14:00:00 2008 lmuelleAATTsuse.de
- Add libtalloc1, libtdb0, and libwbclient0 to baselibs.conf.

Fri Apr 25 14:00:00 2008 lmuelleAATTsuse.de
- Remove obsoletes and provides samba3 for post 10.3 systems.

Fri Apr 25 14:00:00 2008 lmuelleAATTsuse.de
- Let libsmbsharemodes-devel require libsmbsharemodes0 for post 10.3 systems.

Wed Apr 23 14:00:00 2008 lmuelleAATTsuse.de
- Rename the libsmbsharemodes package to libsmbsharemodes0 to follow the
shared library packaging policy for post 10.3 systems.

Tue Apr 22 14:00:00 2008 jmcdonoughAATTsuse.de
- Update kdc dns-only lookup patch to IPv6.

Thu Apr 17 14:00:00 2008 lmuelleAATTsuse.de
- Move mount.cifs and umount.cifs from /sbin/ to /usr/sbin/ and create sym
links in /sbin/; [bnc#380693].

Thu Apr 17 14:00:00 2008 anschneiderAATTsuse.de
- Enable the build of vfs_cacheprime and vfs_readahead modules.

Mon Apr 14 14:00:00 2008 lmuelleAATTsuse.de
- Update to 3.2.0pre2.
+ Add library for access to the registry configuration data.
+ BUG 5023: Separate NFS4 and POSIX ACL code in file access checks.
+ BUG 4308: Fix Excel save operation ACL bug.
+ BUG 4801: Correctly implement LSA lookup levels for LookupNames.
+ Add new option \"debug class\" to control printing of the debug class.
+ Enable building of the zfsacl and notify_fam vfs modules.
+ BUG 5083: Fix memleak in solarisacl module.
+ BUG 5063: Fix build on RHEL5.
+ New smb.conf parameter \"config backend = registry\" to enable registry only
configuration.
+ Added support for IPv6 client and server connections.
+ Remove unused utilities: smbctool and rpctorture.
+ Fix service principal detection to match Windows Vista
(based on work from Andreas Schneider).
+ Encrypted SMB transport in client tools and libraries, and server.
+ Added support for an SMB_CONF_PATH environment variable containing the
path to smb.conf.
+ Various fixes to ntlm_auth.
+ Correctly handle mixed-case hostnames in NTLMv2 authentication.
+ Add Winbind client library.
+ Enhance client and server remote registry access.
+ Add client calls for remotely joining a computer to a domain (including
calls from \"net dom\" command).
+ Add libnetapi.so library for joining domains including sample GTK+ app.
+ Fixes for Vista SP1 Kerberos authdata handling to only pickup the PAC.
+ Various fixes for DsGetDcName and conversion to IDL based structures.
+ Add ads_get_joinable_ous() to libads to get list of joinable ous.
+ Add get_logon_hours_from_pdb() to comply with new IDL based structures.
+ Migration of the entire client and server DCE/RPC code to IDL based
structures and autogenerated code for DSSETUP, LSA, SAMR and NETLOGON.
+ Started migration of client and server DCE/RPC code to IDL based
structures and autogenerated code for NTSSVC, SVCCTL and EVENTLOG.
+ Use IDL and autogenerated code for samlogoncache and Kerberos PAC
handling.
+ Add remote join/unjoin server-side implementation.
+ Import the Linux red-black tree implementation.
+ Support for storing xattrs in tdb files.
+ Support for storing alternate data streams in xattrs.
+ Implement a generic in-memory cache based on rb-trees.
+ Speed up the smbclient \"get\" command.
+ Add the aio_fork module.
+ Modified libsmbclient API for more easily maintaining ABI compatibility
while adding new features to libsmbclient.
+ Refactor Winbind internal parent-child interface tables to achieve better
unit testing support.
+ Networking fixes to the libreplace library.
+ Add support for DNS Service Discovery. Based on work from Rishi
Srivatsavai .
+ Don\'t restart winbind if a corrupted tdb is found during initialization.
+ Add share parameter \"administrative share\".
+ Improve error messages of net subcommands.
+ Add \'net rap file user\'.
+ Change LDAP search filter to find machine accounts which are not located
in the user suffix.
+ Remove smbmount.
+ BUG 5073: Allow \"delete readonly = yes\" to correctly override deletion of
a file.
+ Register the smb service with mDNS if mDNS is supported.
+ Add smbclient support for basic mDNS browsing.
+ Fix padding between Winbind 32bit/64bit client library in the request/
response structures.
+ Added a syncops VFS module for file systems which do not guarantee
meta-data operations are immediately committed to disk in stable form.
+ Additional portability support for building shared libraries.
+ Get Samba version or capability information from Windows user space.
- Add new sub packages libnetapi0, libnetapi-devel, libtalloc1,
libtalloc-devel, libtdb0, libtdb-devel, libwbclient0, libwbclient-devel.

Mon Apr 14 14:00:00 2008 anschneiderAATTsuse.de
- Fix build with glibc 2.8.

Thu Apr 10 14:00:00 2008 roAATTsuse.de
- Added baselibs.conf file to build xxbit packages for multilib support for
post 10.3 systems.

Thu Apr 10 14:00:00 2008 boyangAATTsuse.de
- Only cache password policy results that worked, otherwise we cannot login
until the cache expires even if a connection to a DC has been restored;
[bnc#373552].

Tue Apr 1 14:00:00 2008 mkoenigAATTsuse.de
- Remove dir /usr/share/omc/svcinfo.d as it is provided now by filesystem.

Tue Mar 11 13:00:00 2008 lmuelleAATTsuse.de
- Prevent tdb lock call getting interrupted by sig alarm; [bnc#364200].

Mon Mar 10 13:00:00 2008 lmuelleAATTsuse.de
- Update to 3.0.28a.
+ Failure to join Windows 2008 domains.
+ Windows Vista (including SP1 RC) interop issues.

Tue Mar 4 13:00:00 2008 lmuelleAATTsuse.de
- Rename the libsmbclient package to libsmbclient0 to follow the shared
library packaging policy and remove provides libsmbclient3 for post 10.3
systems.

Fri Feb 22 13:00:00 2008 anschneiderAATTsuse.de
- Add variable to define if a share should be an administrative share;
[bnc#358841].

Mon Feb 18 13:00:00 2008 jjaimonAATTnovell.com
- Fix patch errors with dcerpc and idmap_global; [bnc#280452].

Thu Feb 7 13:00:00 2008 jmcdAATTsuse.de
- Fix safe_strcpy error caused by duplicate domain name fix;
[bnc#356025].

Thu Feb 7 13:00:00 2008 anschneiderAATTsuse.de
- Fix two memleaks if num_validated_vuids exceeds its maximum;
[bnc#349581].

Fri Jan 25 13:00:00 2008 jmcdonoughAATTsuse.de
- Fix ACL inheritance; [bnc#351570].

Wed Jan 23 13:00:00 2008 anschneiderAATTsuse.de
- Fix a gcc 4.3 buffer overflow warning.

Wed Jan 9 13:00:00 2008 boyangAATTnovell.com
- Remove duplicate domain name prepend when user SID is in winbindd cache;
[#336854].

Tue Jan 8 13:00:00 2008 anschneiderAATTsuse.de
- Prevent winbindd from segfaulting due to corrupted cache tdb on flushing
caches; [#340332].

Thu Dec 20 13:00:00 2007 anschneiderAATTsuse.de
- Fix kerberos authentication with Vista; [#350032].

Wed Dec 12 13:00:00 2007 jmcdonoughAATTsuse.de
- Update to 3.0.28.
+ Fix send_mailslot overflow: CVE-2007-6015; [#343702].

Wed Nov 28 13:00:00 2007 jmcdonoughAATTsuse.de
- Additional cases and problems caused by fix for CVE-2007-4572;
[#337823].

Mon Nov 26 13:00:00 2007 jmcdonoughAATTsuse.de
- Fix send_mailslot overflow: CVE-2007-6015; [#343702].

Fri Nov 23 13:00:00 2007 hhetterAATTsuse.de
- Added default printing system information to README.vendor;
[#113759].

Fri Nov 16 13:00:00 2007 lmuelleAATTsuse.de
- Add missing define of AI_ADDRCONFIG for systems with older glibc versions.

Thu Nov 15 13:00:00 2007 lmuelleAATTsuse.de
- Update to 3.0.27.
+ Stack buffer overflow in nmbd\'s logon request processing; CVE-2007-4572;
[#326261].
+ Remote code execution in Samba\'s WINS server daemon (nmbd) whe
processing name registration followed name query requests; CVE-2007-5398;
[#337823].

Thu Nov 15 13:00:00 2007 anschneiderAATTsuse.de
- Change the spec file to get debug packages again.

Wed Nov 14 13:00:00 2007 jmcdonoughAATTsuse.de
- Additional case for overflow: CVE-2007-4572; [#326261].

Thu Nov 8 13:00:00 2007 jmcdonoughAATTsuse.de
- Fix process_logon_packet overflow; CVE-2007-4572; [#326261].

Wed Nov 7 13:00:00 2007 jmcdonoughAATTsuse.de
- Fix reply_netbios_packet vulnerability; CVE-2007-5398; [#337823].

Tue Oct 30 13:00:00 2007 jmcdonoughAATTsuse.de
- Fix missing getpwent mutex unlock; [#329796], [#331754], [#336854].

Tue Oct 30 13:00:00 2007 jmcdonoughAATTsuse.de
- Fix the alignment of 32 and 64-bit winbind requests; [#331754].

Fri Oct 12 14:00:00 2007 lmuelleAATTsuse.de
- Add dmapi-devel and xfsprogs-devel to the BuildRequires for post 10.0
systems; [#289599], fate [#302668].

Tue Oct 9 14:00:00 2007 anschneiderAATTsuse.de
- Fix possible segfault in winbind which could be caused by uninitialized
variables; [#253862c223].

Fri Oct 5 14:00:00 2007 jmcdonoughAATTsuse.de
- Use FQDN in KDC DNS lookup; [#295284].

Wed Oct 3 14:00:00 2007 lmuelleAATTsuse.de
- Update to 3.2.0pre1.
+ Use of IDL generated parsing layer for several DCE/RPC interfaces.
+ Removal of the 1024 byte limit on pathnames and 256 byte limit on filename
components to honor the MAX_PATH setting from the host OS.
+ Introduction of a registry based configuration system.
+ Improved CIFS Unix Extensions support.
+ Experimental support for file serving clusters.
+ Full support for Windows 2003 cross-forest, transitive trusts and one-way
domain trusts
+ Support for userPrincipalName logons via pam_winbind and NSS lookups.
+ Support in pam_winbind for logging on using the userPrincipalName.
+ Expansion of nested domain groups via NSS calls.
+ Support for Active Directory LDAP Signing policy.
+ New ldb backend for local group mapping tables
+ Raised level of security defaults for authentication operations.
+ Inclusion of an HTLM version of the 3rd edition of \"Using Samba\" from
O\'Reilly Publishing.
- Update samba-vscan to 0.3.6c-beta5.
- Disable dcerpc-funnel and idmap_ad-Global_Catalog as both currently don\'t
apply to Samba 3.2.

Wed Oct 3 14:00:00 2007 jmcdonoughAATTsuse.de
- Make nss_winbind thread-safe; [#293907, #329796].

Wed Oct 3 14:00:00 2007 jmcdonoughAATTsuse.de
- Perform KDC lookup using DNS only; [#295284].

Wed Sep 26 14:00:00 2007 anschneiderAATTsuse.de
- Handle smb child crash; [#294895].

Tue Sep 25 14:00:00 2007 lmuelleAATTsuse.de
- Add a global lock inside nss_winbind as workaround; [#293907].

Thu Sep 20 14:00:00 2007 lmuelleAATTsuse.de
- Merge ranged retrieval optimization to winbindd.

Wed Sep 19 14:00:00 2007 lmuelleAATTsuse.de
- Update to 3.0.26a.
+ Memory leaks in Winbind\'s IDMap manager.
- Update to 3.0.26.
+ Incorrect primary group assignment for domain users using the rfc2307 or
sfu winbind nss info plugin; CVE-2007-4138; [#307623].

Fri Sep 7 14:00:00 2007 lmuelleAATTsuse.de
- Fix two memleaks in idmap_cache.c; bso [#4917].
- Correct failure of libsmbclient against a version of Windows.
- Make read_sock return the total number of bytes read instead.
- Fix error in enum_dom_groups.
- Fix logic error in timeout of blocking lock processing.
- Add parameter \"directory name cache size\".
- Fix use of pwrite in tdb code.

Thu Aug 30 14:00:00 2007 lmuelleAATTsuse.de
- Also ensure to initialize ip_srv_site and count_site even if we are not on
site; [#230963#c124].
- Use an off site DC if we\'re not online and talking to the KDC of our domain;
[#230963#c106].

Wed Aug 22 14:00:00 2007 anschneiderAATTsuse.de
- Fix a bug where samba writes the wrong default value of max_passwd_expire to
an LDAP server; [#298469].

Tue Aug 21 14:00:00 2007 lmuelleAATTsuse.de
- Fix if statements where we still expected cli_connect() to return BOOL.

Tue Aug 21 14:00:00 2007 lmuelleAATTsuse.de
- Update to 3.0.25c.
+ File sharing with Widows 9x clients.
+ Winbind running out of file descriptors due to stalled child processes.
+ MS-DFS inter-operability issues.

Tue Jul 24 14:00:00 2007 anschneiderAATTsuse.de
- Update the cache tdb validation patch which improves the backup handling
trying to end up with a useable cache tdb. This applies mostly to the
situation that disk space is short; [#256166c82].

Thu Jul 19 14:00:00 2007 anschneiderAATTsuse.de
- Update the cache tdb validation patch to support backup and corrupted
file handling; [#256166c77].

Wed Jul 11 14:00:00 2007 anschneiderAATTsuse.de
- Fix a bug that causes smbd to \'hang\' intermittently; [#289599].

Tue Jul 10 14:00:00 2007 lmuelleAATTsuse.de
- Fix event based krb5 ticket refreshing in winbindd.

Fri Jul 6 14:00:00 2007 lmuelleAATTsuse.de
- Limit the LDAP expression in lookup_usergroups_member() to security groups;
[253862c209].

Fri Jul 6 14:00:00 2007 lmuelleAATTsuse.de
- Don\'t reset the num_names counter in lookup_groupmem(); [253862c198].

Wed Jul 4 14:00:00 2007 anschneiderAATTsuse.de
- Make the days before the password expiry warning appears configurable in
pam_winbind.conf; [#287871].

Tue Jul 3 14:00:00 2007 schwabAATTsuse.de
- Don\'t link shared libraries of vscan with -pie.

Fri Jun 29 14:00:00 2007 lmuelleAATTsuse.de
- Increase LOOKUP_SIDS_HUNK_SIZE for rpccli_lsa_lookup_sids_all() from 1000 to
20480; [#253862c175].

Wed Jun 27 14:00:00 2007 lmuelleAATTsuse.de
- Update to 3.0.25b.
+ Offline caching of files with Windows XP/Vista clients.
+ Improper cleanup of expired or invalid byte range locks on files.
+ Crashes is idmap_ldap and idmap_rid.

Sat Jun 23 14:00:00 2007 lmuelleAATTsuse.de
- Fix reply when no dfs share is configured.
- Fix the DFS code to work with Vista clients; [#286937].

Fri Jun 22 14:00:00 2007 lmuelleAATTsuse.de
- Migrate old if-up/down scripts to new names on update; [#283706, #285187].

Tue Jun 19 14:00:00 2007 anschneiderAATTsuse.de
- Introduced prefix numbering of if-up/down scripts that they get executed in
the right order; [#283706, #285187].

Tue Jun 19 14:00:00 2007 anschneiderAATTsuse.de
- Restart nscd on winbind update to load the new libnss_winbind.so.2 library.
This will not resolve every problem with nss modules; [#174589c88].

Mon Jun 18 14:00:00 2007 anschneiderAATTsuse.de
- Fix winbind segfaults with idmap_rid; bso [#4624].

Thu Jun 7 14:00:00 2007 lmuelleAATTsuse.de
- Add missed \'c\' character to the list of valid ones in escape_shell_string();
[#273611].

Fri Jun 1 14:00:00 2007 lmuelleAATTsuse.de
- Let lookup_groupmem() only resolve not yet cached SIDs; [#253862c106].

Thu May 31 14:00:00 2007 lmuelleAATTsuse.de
- Remove superfluous requires to samba from the devel package.

Wed May 30 14:00:00 2007 lmuelleAATTsuse.de
- Ensure the returned structure size from _samr_query_dispinfo() is smaller
than the total size; [#203833].

Sat May 26 14:00:00 2007 lmuelleAATTsuse.de
- Remove \'unset CONFIGURE_OPTIONS\' in front of the configure call to vscan.
- Install header files with 0644 instead of 0755 permissions.
- Enable build of the python package.

Fri May 25 14:00:00 2007 anschneiderAATTsuse.de
- Branch a samba-devel package for post 10.2 systems.
- Install .a library files with 0644 instead of 0755 permissions.

Fri May 25 14:00:00 2007 lmuelleAATTsuse.de
- Update to 3.0.25a.
+ Missing supplementary Unix group membership when using \"force·group\".
+ Premature expiration of domain user passwords when using a·Samba domain
controller.
+ Failure to open the Windows object picker against a server configured to
use \"security = domain\".
+ Authentication failures when using security = server.

Thu May 24 14:00:00 2007 lmuelleAATTsuse.de
- Add %dir /usr/share/samba to the client package.
- Remove samba-classic{,-client}, samba-ldap{,-client}, sambaxp{,-client}, and
smbclnt from Provides and Obsoletes of the main or client package.

Thu May 24 14:00:00 2007 stbinnerAATTsuse.de
- Add /sbin/ldconfig to %post and %postun of libsmbsharemode.

Wed May 23 14:00:00 2007 lmuelleAATTsuse.de
- Update samba-vscan to 0.3.6c-beta4.

Wed May 23 14:00:00 2007 anschneiderAATTsuse.de
- In some cases PRS_ALLOC_MEM was called with zero count; [#273613];
bso [#4637].

Wed May 23 14:00:00 2007 hhetterAATTsuse.de
- Enhance the patch to the ads version of lookup_groupmem(); [#253862c89].

Mon May 21 14:00:00 2007 lmuelleAATTsuse.de
- Don\'t use current_user to prep the security ctx in change_to_user();
[#273613].

Mon May 21 14:00:00 2007 lmuelleAATTsuse.de
- Prevent winbindd segfaulting due to corrupted cache tdb; [#256166].

Sat May 19 14:00:00 2007 lmuelleAATTsuse.de
- Use WORKGROUP instead of TUX-NET as default workgroup setting in smb.conf.

Fri May 18 14:00:00 2007 lmuelleAATTsuse.de
- No longer check in the pre package scripts if swat or winbindd of version
2.2 are updated; [#273160].

Mon May 14 14:00:00 2007 lmuelleAATTsuse.de
- Update to 3.0.25.
+ Significant improvements in the winbind off-line logon support.
+ Support for secure DDNS updates as part of the \'net ads join\'·process.
+ Rewritten IdMap interface which allows for TTL based caching and·per
domain backends.
+ New plug-in interface for the \"winbind nss info\" parameter.
+ New file change notify subsystem which is able to make use of·inotify on
Linux.
+ Support for passing Windows security descriptors to a VFS·plug-in allowing
for multiple Unix ACL implements to running side·by side on the Same
server.
+ Improved compatibility with Windows Vista clients including·improved read
performance with Linux servers.
+ Man pages for IdMap and VFS plug-ins.
+ Security Fixes CVE-2007-2444, CVE-2007-2446, and CVE-2007-2447.
- Disable build of the python package.

Fri May 11 14:00:00 2007 lmuelleAATTsuse.de
- Fix heap overflows to prevent remote code execution; CVE-2007-2446;
[#273613].
- Fix remote command injection vulnerability; CVE-2007-2447; [#273611].

Tue May 8 14:00:00 2007 lmuelleAATTsuse.de
- Remove obsolete samba-pdb package and required packages from BuildRequires
for post 10.2 systems.

Mon May 7 14:00:00 2007 lmuelleAATTsuse.de
- Remove X-UnitedLinux- prefix from init scripts for post 9.0 systems.

Mon May 7 14:00:00 2007 lmuelleAATTsuse.de
- Remove requires on release from devel packages.

Thu May 3 14:00:00 2007 lmuelleAATTsuse.de
- Reduces the number of queries made to the DC in the ads version of
lookup_groupmem(); [#253862].

Thu May 3 14:00:00 2007 lmuelleAATTsuse.de
- Allow winbindd to take local shortcut on secondary DCs in case dce funnel
directory is set; [#266853].

Wed May 2 14:00:00 2007 lmuelleAATTsuse.de
- Really remove Should-Start smb in smbfs init script; [#242918].

Wed Apr 25 14:00:00 2007 lmuelleAATTsuse.de
- Disable \'msdfs root\' by default again; [#268004].

Fri Apr 20 14:00:00 2007 lmuelleAATTsuse.de
- Build libsmbsharemodes and create libsmbsharemodes and corresponding devel
package; [#264623].

Fri Apr 20 14:00:00 2007 lmuelleAATTsuse.de
- Let idmap_ad search in the Global Catalog in case dce funnel directory is
set; [#266049].

Tue Apr 17 14:00:00 2007 lmuelleAATTsuse.de
- Allow share names with a lengths greater than 32 chars; bso [#4512].

Tue Apr 17 14:00:00 2007 lmuelleAATTsuse.de
- Check the euid and call become_root() to get write access to dump a core.

Tue Apr 17 14:00:00 2007 lmuelleAATTsuse.de
- Add pwdutils BuildRequires for post 10.2 systems.

Mon Apr 16 14:00:00 2007 lmuelleAATTsuse.de
- Do not restart winbindd under any if-up circumstances; [#227942].

Fri Apr 13 14:00:00 2007 lmuelleAATTsuse.de
- Replace unneeded become_root_uid_only() by refactored become_root();
CVE-2007-2444; [#262090].

Tue Apr 3 14:00:00 2007 lmuelleAATTsuse.de
- Add repository version and branch to the spec file via
build-source-timestamp mechanism.

Tue Apr 3 14:00:00 2007 lmuelleAATTsuse.de
- Allow applications to set the share mode while opening a file using
libsmbclient; bso [#3684]; [#203737].

Thu Mar 29 14:00:00 2007 lmuelleAATTsuse.de
- Fix for fd leak on error path in winbindd; bso [#3204], [#258737].

Mon Mar 26 14:00:00 2007 rguentherAATTsuse.de
- Add gdbm-devel BuildRequires for post 10.2 systems.

Mon Mar 26 14:00:00 2007 lmuelleAATTsuse.de
- Remove setlocale(LC_ALL, \"C\") calls; bso [#2926], [#247728].

Sat Mar 17 13:00:00 2007 lmuelleAATTsuse.de
- Fix segfault and memleak in wb_lookup_rids(); bso [#4434].

Mon Mar 5 13:00:00 2007 lmuelleAATTsuse.de
- Fixes a known bottleneck under very high load situations; [#247984].

Mon Feb 26 13:00:00 2007 gdAATTsuse.de
- Avoid passdb builtin group membership calls in the DCERPC funnel patch;
[#248556].

Fri Feb 23 13:00:00 2007 lmuelleAATTsuse.de
- Allow pre 3.0.23 multi passdb backend configurations to work with
post 3.0.22 by using the first backend only; [#245167].

Thu Feb 22 13:00:00 2007 gdAATTsuse.de
- Prevent nscd crash in NSS winbind initgroups(); [#237719].
- Fix pam_winbind cached login for samba/NT4 domains; bso [#4225].
- Various pam_winbind fixes; bso [#4094, #4288].
- Fix DCERPC funnel patch; [#245278].
- Fix vista and share level security.
- Fix vista variable expansion; bso [#4093].
- Fix vista DFS support; bso [#4356].
- Fix vista backup tool; bso [#4361].
- Fix vista deletion on shares; bso [#4188].
- Fix vista spoolss problems.

Tue Feb 13 13:00:00 2007 gdAATTsuse.de
- Fix crash bug in rpc_pipe_bind(); [#244892].

Fri Feb 9 13:00:00 2007 lmuelleAATTsuse.de
- Enable DCERPC funnel patch.

Fri Feb 9 13:00:00 2007 gdAATTsuse.de
- Fix accumulation of expired LDAP connections when winbind in ads mode;
bso [#4009].

Wed Feb 7 13:00:00 2007 gdAATTsuse.de
- Fix all lp_dce_funnel_directory() callers; [#242833].

Wed Feb 7 13:00:00 2007 lmuelleAATTsuse.de
- Disable broken DCERPC funnel patch; [#242833].

Mon Feb 5 13:00:00 2007 lmuelleAATTsuse.de
- Update to 3.0.24.
+ Potential Denial of Service bug in smbd; CVE-2007-0452; [#240265].

Thu Feb 1 13:00:00 2007 lmuelleAATTsuse.de
- Fix logic error in the deferred open code; CVE-2007-0452; [#240265].

Thu Feb 1 13:00:00 2007 gdAATTsuse.de
- Avoid winbind event handler for internal domains.

Tue Jan 30 13:00:00 2007 gdAATTsuse.de
- Fix smbcontrol winbind offline; [#223418].
- Fail on offline pwd change attempts; [#223501].
- Register check_dom_handler when coming from offline mode.
- Fix pam_winbind passwd changes in online mode.
- Call set_domain_online in init_domain_list().
- Winbind cleanup after failure and fix crash bug.
- Don\'t register check domain handler for all trusts.
- Add separate logfile for dc-connect wb child.
- Only write custom krb5 conf for own domain.
- Move check domain handler to fork_domain_child.

Fri Jan 26 13:00:00 2007 gdAATTsuse.de
- Fix pam_winbind text string typo; [#238496].
- Support sites without DCs (automatic site coverage); [#219793].
- Fix invalid krb5 cred cache deletion; [#227782].
- Fix invalid warning in the PAM session close;
- Fix DC queries for all DCs; [#230963].
- Fix sitename usage depending on realm; [#195354].

Wed Jan 24 13:00:00 2007 gdAATTsuse.de
- Add DCERPC funnel patch; fate [#300768].

Mon Jan 22 13:00:00 2007 gdAATTsuse.de
- Fix pam password change with w2k DCs; [#237281].

Thu Jan 18 13:00:00 2007 lmuelleAATTsuse.de
- Check from the init script for SAMBA__ENV variable expected to
be set in /etc/sysconfig/samba to export a particular environment variable
before starting a daemon. See section \'Setup a particular environment for
a Samba daemon\' from the README file how this feature is to use.

Mon Jan 15 13:00:00 2007 lmuelleAATTsuse.de
- Remove %config tag from /usr/share/omc/svcinfo.d/
*.xml files.

Thu Jan 11 13:00:00 2007 gdAATTsuse.de
- Fix pam_winbind grace offline logins; [#223501].
- Fix password expiry message; [#231583].

Thu Jan 11 13:00:00 2007 lmuelleAATTsuse.de
- Move XML service description documents; fate [#301712].

Wed Jan 10 13:00:00 2007 lmuelleAATTsuse.de
- Disable smbmnt, smbmount, and smbumount for systems newer than 10.1.

Tue Jan 9 13:00:00 2007 lmuelleAATTsuse.de
- Add XML service description documents; fate [#301712].

Thu Jan 4 13:00:00 2007 lmuelleAATTsuse.de
- Move tdb utils to the client package.

Thu Dec 14 13:00:00 2006 jeallisonAATTnovell.com
- Fix crash caused by deleting a message dispatch
handler from inside the handler itself; [#221709].

Fri Dec 8 13:00:00 2006 jeallisonAATTnovell.com
- Fix delays in winbindd access when on a non-home
network; [#222595].

Wed Nov 22 13:00:00 2006 jeallisonAATTnovell.com
- Fix client-side smb signing; [#222951].
- Fix imcomplete merge for firefox NTLM handling; [#198255].

Mon Nov 20 13:00:00 2006 lmuelleAATTsuse.de
- Add IA64 and x64 printer drivers directory.

Thu Nov 16 13:00:00 2006 lmuelleAATTsuse.de
- Update to 3.0.23d.
+ Stability fixes for winbindd.

Fri Nov 3 13:00:00 2006 gdAATTsuse.de
- Fix ldapsmb group and unicode issues; [#143417, #216606].
- Fix net ads account management; [#217046].
- Fix libnscd usage in passdb; [#217363].
- Add the \"mega patch\"
+ Add site support for winbind; [#195354], fate [#300909].
+ Add site support for net; [#211281], fate [#300909].
+ Fix winbind krb5 ticket handling from offline; [#178028].
+ Fix \"net ads leave\"; [#196771].
+ Fix winbind username case handling; [#184902].
+ Fix winbind name canonicalisation; [#210174].
+ Fix winbind online/offline handling; [#196859].
+ Add NTLM cached credential handling for firefox; [#198255],
fate [#300973].
+ Fix winbind groupmembership handling; [#211324].
+ Fix winbind site-support handling on reconnect; [#195354].
+ Fix winbind child initialization and online/offline handling;
[#196859].
+ Fix winbind cached credential storage; [#185053].
+ Fix winbind long login delays; [#184450].
+ Fix winbind crash for new AD user; [#208454].

Thu Oct 26 14:00:00 2006 gdAATTsuse.de
- Fix pam_winbind overriding syslog settings; [#201756].
- Fix profilepath pam_set_data for other PAM modules; [#215707].

Mon Oct 23 14:00:00 2006 gdAATTsuse.de
- Fix timeout handling for winbindd (samr, netlogon).
- Fix gencache access; [#209409, #211281].
- Fix libsmbclient accessing NetApp; bso [#4018].
- Fix error handling in ads printer code; [#209409].
- Fix passwd pam segfault; [#211719].
- Fix crash in winbind async child.
- Fix winbind failure mode for trusted domains.

Fri Oct 20 14:00:00 2006 jeallisonAATTnovell.com
- Add realm to username if missing in net ads join; [#211706].

Thu Oct 19 14:00:00 2006 lmuelleAATTsuse.de
- Move the LOCKDIR to the client sub package.

Thu Oct 12 14:00:00 2006 lmuelleAATTsuse.de
- Activate the libaddns.

Thu Sep 28 14:00:00 2006 lmuelleAATTsuse.de
- Add version of the package subversion to Samba vendor version suffix.

Fri Sep 1 14:00:00 2006 lmuelleAATTsuse.de
- Update to 3.0.23c.
+ Authentication failures in pam_winbind when the AD domain
policy is set to not expire passwords.
+ Authorization failures when using smb.conf options such
as \"valid users\" with the smbpasswd passdb backend.

Thu Aug 24 14:00:00 2006 jeallisonAATTnovell.com
- Fix time value reporting in libsmbclient; [#195285].

Tue Aug 15 14:00:00 2006 roAATTsuse.de
- Remove update-messages.

Tue Aug 8 14:00:00 2006 jeallisonAATTnovell.com
- Store and restore NT hashes as string compatible values; [#185053].

Tue Aug 8 14:00:00 2006 jeallisonAATTnovell.com
- Added winbindd null sid fix; [#185053].

Tue Aug 8 14:00:00 2006 lmuelleAATTsuse.de
- Update to 3.0.23b.
+ Ambiguity with unqualified names in smb.conf parameters
such as \"force user\" and \"valid users\".
+ Errors in \'net ads join\' caused by bad IP address in the list
of domain controllers.
+ SMB signing errors in the client and server code.
+ Domain join failures when using smbpasswd on a Samba PDC.

Wed Jul 26 14:00:00 2006 lmuelleAATTsuse.de
- Fix from Alison Winters of SGI to build even if make_vscan is 0.

Sat Jul 22 14:00:00 2006 lmuelleAATTsuse.de
- Update to 3.0.23a.
+ Failure to strip the domain name from groups when \'winbind
use default domain = yes\'
+ Bad token creation of local users on member servers not
running winbindd.
+ Failure to add users or groups to ACLs using the Windows
object picker.
+ Failure in file serving code when \'kernel oplocks = yes\'.
+ New \"createupn\" option to \"net ads join\"
+ Rewritten Kerberos keytab generation when \'use kerberos
keytab = yes\'

Tue Jul 18 14:00:00 2006 lmuelleAATTsuse.de
- Replace vendor-files/tools/dlopen.sh by test_pam_modules make rule.

Tue Jul 18 14:00:00 2006 lmuelleAATTsuse.de
- Fix pam config file parsing in pam_winbind; bso [#3916].

Mon Jul 10 14:00:00 2006 lmuelleAATTsuse.de
- Update to 3.0.23.
+ Improved \'make test\'
+ New offline mode in winbindd.
+ New Kerberos support for pam_winbind.so.
+ New handling of unmapped users and groups.
+ New non-root share management tools.
+ Improved support for local and BUILTIN groups.

Fri Jul 7 14:00:00 2006 gdAATTsuse.de
- Prevent potential crash in winbindd\'s credential cache handling;
[#184450].

Thu Jul 6 14:00:00 2006 lmuelleAATTsuse.de
- Fix memory exhaustion DoS; CVE-2006-3403; [#190468].

Sun Jul 2 14:00:00 2006 jeallisonAATTnovell.com
- Fix the munlock call, samba.org svn rev r16755 from Volker.