Andrew Bartlett [Mon, 4 Apr 2016 20:03:20 +0000 (08:03 +1200)]
Add bug number for samba/talloc breakage and fix
Andrew Bartlett [Mon, 4 Apr 2016 07:37:35 +0000 (19:37 +1200)]
Own the changelog entry so I can build the package
Stefan Metzmacher [Tue, 15 Mar 2016 15:59:51 +0000 (16:59 +0100)]
s3:wscript: pylibsmb depends on pycredentials
The need for pytalloc-util was based on the fact that
pycredentials depends on pytalloc-util.
As pylibsmb only used pycredentials and not pytalloc-util directly,
we should depend on pycredentials.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11789
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
(cherry picked from commit
74ca470739e0128556d8d20010464df07f2f0ac8)
Günther Deschner [Mon, 1 Feb 2016 22:11:13 +0000 (23:11 +0100)]
libsmb/pysmb: add pytalloc-util dependency to fix the build.
Guenther
Signed-off-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Autobuild-User(master): Günther Deschner <gd@samba.org>
Autobuild-Date(master): Tue Feb 2 15:49:14 CET 2016 on sn-devel-144
(cherry picked from commit
943e69ca8fd4491004eafbf29ed2ca748b0b7480)
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11789
Garming Sam [Tue, 15 Mar 2016 00:29:54 +0000 (13:29 +1300)]
build: mark explicit dependencies on pytalloc-util
All subsystems that include pytalloc.h need to link against
pytalloc-util.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11789
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User(master): Garming Sam <garming@samba.org>
Autobuild-Date(master): Tue Mar 15 07:08:16 CET 2016 on sn-devel-144
(similar to commit
7b431eba22444d2e0d872de781a8193dcfa6d252)
Backported to 4.3 by Andrew Bartlett
Andrew Bartlett [Tue, 16 Feb 2016 02:15:44 +0000 (15:15 +1300)]
pydsdb: Fix returning of ldb.MessageElement.
This object is not based on pytalloc_Object and so this causes
a segfault (later a failure) when the struct definitions diverge.
We must also not reuse the incoming ldb_message_element as a talloc
context and overwrite the values, instead we should create a new
object and return that.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
(cherry picked from commit
b96b1e88f760c92c7d9bb7e732f72d7e73a68907)
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11789
Andrew Bartlett [Tue, 22 Sep 2015 03:25:30 +0000 (15:25 +1200)]
pydsdb: Also accept ldb.MessageElement values to dsdb routines
This shows the correct way to accept a value that may be a list of strings
or a proper ldb.MessageElement.
Andrew Bartlett
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
(cherry picked from commit
b48776d78b446ad4abd4a6bc2ba6b488a29b11d2)
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11789
Andrew Bartlett [Mon, 4 Apr 2016 07:13:24 +0000 (19:13 +1200)]
Merge tag 'upstream/4.3.6+dfsg'
Upstream version 4.3.6+dfsg
Andrew Bartlett [Mon, 4 Apr 2016 07:13:18 +0000 (19:13 +1200)]
Imported Upstream version 4.3.6+dfsg
Andrew Bartlett [Mon, 4 Apr 2016 07:11:44 +0000 (19:11 +1200)]
Merge tag 'upstream/4.3.6'
Upstream version 4.3.6
Andrew Bartlett [Mon, 4 Apr 2016 07:11:37 +0000 (19:11 +1200)]
Imported Upstream version 4.3.6
Andrew Bartlett [Mon, 4 Apr 2016 07:04:55 +0000 (19:04 +1200)]
Imported Upstream version 4.3.6
Andrew Bartlett [Mon, 4 Apr 2016 06:06:58 +0000 (18:06 +1200)]
Add patches from Samba bug #11789 to work with talloc 2.1.6
Jelmer Vernooij [Sun, 3 Apr 2016 18:37:52 +0000 (18:37 +0000)]
Add no_build_options.patch: make package more reproducible by disabling build options output.
Mathieu Parent [Sun, 3 Apr 2016 12:26:24 +0000 (14:26 +0200)]
Changelog for previous commits
Steven Chamberlain [Thu, 11 Feb 2016 02:27:29 +0000 (02:27 +0000)]
ctdb: Fix detection of gnukfreebsd (Closes: #802621)
GNU/kFreeBSD's platform name is 'gnukfreebsd', not just 'kfreebsd'.
Mathieu Parent [Sun, 3 Apr 2016 05:34:17 +0000 (07:34 +0200)]
Add ufw integration
Cherry-picked from Ubuntu:
- Created debian/samba.ufw.profile:
- debian/rules, debian/samba.install: install profile
- debian/control: suggest ufw
Mathieu Parent [Fri, 1 Apr 2016 19:43:10 +0000 (21:43 +0200)]
Add an override to script-not-executable etc/ctdb/events.d/10.external
Mathieu Parent [Fri, 1 Apr 2016 15:56:34 +0000 (17:56 +0200)]
Changelog for previous commit
Mathieu Parent [Fri, 1 Apr 2016 10:47:55 +0000 (12:47 +0200)]
Drop samba from winbind depends and use samba-common* instead (Closes: #732604)
samba-common has smb.conf creation which is mandatory.
samba-common-bin has the net command which may be used to join a domain.
Andrew Bartlett [Fri, 1 Apr 2016 02:12:47 +0000 (15:12 +1300)]
Imported Upstream version 4.4.0
Mathieu Parent [Thu, 31 Mar 2016 20:29:06 +0000 (22:29 +0200)]
Changelog for previous commit
Mathieu Parent [Thu, 31 Mar 2016 20:25:29 +0000 (22:25 +0200)]
Fix FTBFS when built with dpkg-buildpackage -A (Closes: #818146)
Jelmer Vernooij [Wed, 9 Mar 2016 03:58:24 +0000 (03:58 +0000)]
Merge branch 'unstable' of https://jelmer.uk/code/samba into unstable
Jelmer Vernooij [Wed, 9 Mar 2016 02:58:06 +0000 (02:58 +0000)]
releasing package samba version 2:4.3.6+dfsg-1
Jelmer Vernooij [Tue, 8 Mar 2016 00:46:23 +0000 (00:46 +0000)]
releasing package samba version 2:4.3.5+dfsg-3
Jelmer Vernooij [Tue, 8 Mar 2016 00:28:36 +0000 (00:28 +0000)]
Ignore debhelper build stamp.
Jelmer Vernooij [Tue, 8 Mar 2016 00:28:06 +0000 (00:28 +0000)]
Rebuild against current version of ldb in the archive. Closes: #817036
Jelmer Vernooij [Tue, 8 Mar 2016 00:24:13 +0000 (00:24 +0000)]
Fix dhclient hook if samba is not installed. Thanks, Jan Braun. Closes: #801976
Jelmer Vernooij [Sun, 6 Mar 2016 22:52:46 +0000 (22:52 +0000)]
releasing package samba version 2:4.3.5+dfsg-2
Jelmer Vernooij [Sun, 6 Mar 2016 22:52:14 +0000 (22:52 +0000)]
Move strict ldb dependency to samba-dsdb-modules package, which actually contains the modules. Closes: #816210
Jelmer Vernooij [Sat, 27 Feb 2016 23:36:56 +0000 (23:36 +0000)]
New upstream release.
Jelmer Vernooij [Sun, 6 Mar 2016 19:31:16 +0000 (19:31 +0000)]
Merge tag 'upstream/4.3.6+orig' into unstable
Upstream version 4.3.6+orig
Jelmer Vernooij [Sun, 6 Mar 2016 19:30:59 +0000 (19:30 +0000)]
Imported Upstream version 4.3.6+orig
Jelmer Vernooij [Sun, 6 Mar 2016 19:30:36 +0000 (19:30 +0000)]
Ignore debhelper-build-stamp.
Jelmer Vernooij [Sat, 5 Mar 2016 17:14:02 +0000 (17:14 +0000)]
releasing package samba version 2:4.3.5+dfsg-1
Jelmer Vernooij [Sun, 28 Feb 2016 03:17:37 +0000 (03:17 +0000)]
Bump standards version to 3.9.7 (no changes).
Jelmer Vernooij [Sun, 28 Feb 2016 02:52:53 +0000 (02:52 +0000)]
Add smbclient_krb5_wrapper.
Jelmer Vernooij [Sun, 28 Feb 2016 02:32:26 +0000 (02:32 +0000)]
Ignore debian build stamp files.
Jelmer Vernooij [Sat, 27 Feb 2016 23:52:53 +0000 (23:52 +0000)]
Ignore backup files.
Jelmer Vernooij [Sat, 27 Feb 2016 23:52:36 +0000 (23:52 +0000)]
Drop patch sockets-with-htons.patch: applied upstream.
Jelmer Vernooij [Sat, 27 Feb 2016 23:48:46 +0000 (23:48 +0000)]
Update usershare patch after upstream changes.
Jelmer Vernooij [Sat, 27 Feb 2016 23:44:38 +0000 (23:44 +0000)]
Loosen dependencies on ldb to ldb >= 1.1.21, per upstream.
Jelmer Vernooij [Sat, 27 Feb 2016 23:38:57 +0000 (23:38 +0000)]
Wrap and sort.
Jelmer Vernooij [Sat, 5 Mar 2016 15:56:45 +0000 (15:56 +0000)]
New upstream release.
Jelmer Vernooij [Sat, 5 Mar 2016 17:42:59 +0000 (17:42 +0000)]
Merge tag 'upstream/4.3.5+dfsg' into unstable
Jelmer Vernooij [Sat, 5 Mar 2016 17:42:09 +0000 (17:42 +0000)]
Imported Upstream version 4.3.5+dfsg
Karolin Seeger [Mon, 22 Feb 2016 09:32:56 +0000 (10:32 +0100)]
VERSION: Disable git snapshots for the 4.3.5 release.
Signed-off-by: Karolin Seeger <kseeger@samba.org>
Karolin Seeger [Mon, 22 Feb 2016 09:32:08 +0000 (10:32 +0100)]
WHATSNEW: Add release notes for Samba 4.3.5.
Signed-off-by: Karolin Seeger <kseeger@samba.org>
Martin Schwenke [Mon, 8 Feb 2016 04:55:17 +0000 (15:55 +1100)]
ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."
This is unnecessary in Samba >= 4.0 because winbindd monitors IP
address itself and no longer needs to be told when they are dropped.
The smbcontrol commands can hang if a node has recovery mode active
because smbcontrol is unable to connect to the registry. Therefore,
the smbcontrol commands should be removed.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11719
Signed-off-by: Martin Schwenke <martin@meltin.net>
Reviewed-by: Ralph Boehme <slow@samba.org>
Autobuild-User(master): Ralph Böhme <slow@samba.org>
Autobuild-Date(master): Wed Feb 10 14:08:17 CET 2016 on sn-devel-144
(cherry picked from commit
519564bb35a0f840bc4d7c8c5a92441c97b49791)
Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Tue Feb 16 12:13:06 CET 2016 on sn-devel-104
Ralph Boehme [Thu, 4 Feb 2016 14:35:06 +0000 (15:35 +0100)]
lib/tsocket: workaround sockets not supporting FIONREAD
Netlink sockets don't support querying pending bytes with ioctl(fd,
FIONREAD, ...) and would return EOPNOTSUPP, so use recvmsg() with
MSG_PEEK|MSG_TRUNC as a fallback.
The MSG_TRUNC flag to recvmsg() is Linux only, but netlink is as well,
so we're safe for now.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=11714
Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Amitay Isaacs <amitay@gmail.com>
Reviewed-by: Martin Schwenke <martin@meltin.net>
Autobuild-User(master): Ralph Böhme <slow@samba.org>
Autobuild-Date(master): Wed Feb 10 10:30:24 CET 2016 on sn-devel-144
(cherry picked from commit
574313a1e11d521ba3f7232ff0b4186b49658199)
Volker Lendecke [Thu, 11 Feb 2016 12:11:46 +0000 (13:11 +0100)]
param: Fix str_list_v3 to accept ; again
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Thu Feb 11 19:19:55 CET 2016 on sn-devel-144
https://bugzilla.samba.org/show_bug.cgi?id=11732
Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Mon Feb 15 14:36:43 CET 2016 on sn-devel-104
Hemanth Thummala [Tue, 2 Feb 2016 18:33:20 +0000 (10:33 -0800)]
loadparm: Fix memory leak issue.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11708
Signed-off-by: Hemanth Thummala <hemanth.thummala@nutanix.com>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Thu Feb 4 12:39:14 CET 2016 on sn-devel-144
(cherry picked from commit
8247d93701ed838190fe74044a63a56d63d37bf5)
Jeremy Allison [Tue, 9 Feb 2016 20:47:43 +0000 (12:47 -0800)]
s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support.
Since 4.0.x we add 2 additional ACE entries, one SMB_ACL_USER
and SMB_ACL_GROUP to match the existing SMB_ACL_USER_OBJ and
SMB_ACL_GROUP_OBJ entries. The two additional entries break
the simple "must have 3 entries" check done inside convert_canon_ace_to_posix_perms().
Replace this with a more complete test.
Problem and initial fix provided by <tcleamy@ucdavis.edu>
BUG: https://bugzilla.samba.org/show_bug.cgi?id=10489
Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Uri Simchoni <uri@samba.org>
Autobuild-User(master): Uri Simchoni <uri@samba.org>
Autobuild-Date(master): Thu Feb 11 11:14:53 CET 2016 on sn-devel-144
(cherry picked from commit
5172bf0c5b0672c1479c2ad776460956aa469bca)
Jose A. Rivera [Thu, 4 Feb 2016 02:58:19 +0000 (20:58 -0600)]
s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11727
Signed-off-by: Jose A. Rivera <jarrpa@samba.org>
Pair-programmed-with: Ira Cooper <ira@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Fri Feb 5 04:37:43 CET 2016 on sn-devel-144
(cherry picked from commit
aec07b8b60ff9589a3c84eef6adeca464e6c01f6)
Günther Deschner [Wed, 3 Feb 2016 23:00:46 +0000 (00:00 +0100)]
docs-xml: fix typo in smbspool_krb5_wrapper manpage.
Guenther
Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
(cherry picked from commit
109164ed63ee76c4088f5df7ffb66740cac629c1)
Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Tue Feb 9 12:03:49 CET 2016 on sn-devel-104
Andreas Schneider [Wed, 3 Feb 2016 08:20:27 +0000 (09:20 +0100)]
docs: Add smbspool_krb5_wrapper manpage
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11690
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Karolin Seeger <kseeger@samba.org>
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Wed Feb 3 21:25:54 CET 2016 on sn-devel-144
(cherry picked from commit
4c54901102440ba9cbd96b349e95e3127415614a)
Stefan Metzmacher [Thu, 28 Jan 2016 14:10:00 +0000 (15:10 +0100)]
python:tests/core: add tests for arcfour_encrypt() and string_to_byte_array()
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11699
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Wed Feb 3 11:42:29 CET 2016 on sn-devel-144
(cherry picked from commit
915185aa585a622d338698f847171972d1a15a21)
Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Fri Feb 5 13:10:00 CET 2016 on sn-devel-104
Stefan Metzmacher [Thu, 28 Jan 2016 13:00:38 +0000 (14:00 +0100)]
s4:scripting/devel: make use of the generic arcfour_encrypt() and string_to_byte_array() functions
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11699
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
(cherry picked from commit
8841b1e641e1b950c2f36b26db982473b73b9d3b)
Stefan Metzmacher [Thu, 28 Jan 2016 13:00:38 +0000 (14:00 +0100)]
python:samba/netcmd/domain: make use of the generic arcfour_encrypt() and string_to_byte_array() functions
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11699
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
(cherry picked from commit
452234b7bcdee2e0e3df6e0500ff798062bc5b9e)
Stefan Metzmacher [Thu, 28 Jan 2016 13:00:38 +0000 (14:00 +0100)]
python:samba/join.py: make use of the generic arcfour_encrypt() and string_to_byte_array() functions
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11699
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
(cherry picked from commit
d5423feb4b3d388d2de8e1745a8f1138b42b64f5)
Stefan Metzmacher [Thu, 28 Jan 2016 12:52:44 +0000 (13:52 +0100)]
python:samba: add a generic arcfour_encrypt() helper function
This works with Crypto.Cipher.ARC4 (from python*-crypto) and
fallback to M2Crypto.RC4.RC4 (from [python*-]m2crypto).
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11699
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
(cherry picked from commit
078a7ae71081c24991bb34c818cc2c763eefad99)
Stefan Metzmacher [Thu, 28 Jan 2016 12:44:33 +0000 (13:44 +0100)]
python:samba: add a generic string_to_byte_array() helper function
We should avoid implementing this again and again.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11699
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
(cherry picked from commit
65127d16744763d0865ca9ce4d039866785e3fc7)
Amitay Isaacs [Thu, 28 Jan 2016 13:06:18 +0000 (00:06 +1100)]
ctdb-common: Use documented names for protocol family in socket()
Instead of using PF_*, use AF_*.
https://bugzilla.samba.org/show_bug.cgi?id=11705
Signed-off-by: Amitay Isaacs <amitay@gmail.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit
9f94620a308a3b17c1886c2c4807b34b8d5edacb)
Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Thu Feb 4 14:29:13 CET 2016 on sn-devel-104
Mathieu Parent [Thu, 4 Feb 2016 12:25:16 +0000 (13:25 +0100)]
Release 2:4.3.3+dfsg-2
Amitay Isaacs [Thu, 28 Jan 2016 13:05:26 +0000 (00:05 +1100)]
ctdb-common: Protocol argument must be in host order for socket() call
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11705
Signed-off-by: Amitay Isaacs <amitay@gmail.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit
9f8395cb7d49b63a82f75bf504f5f83920102b29)
Mathieu Parent [Wed, 3 Feb 2016 21:25:34 +0000 (22:25 +0100)]
Fix CTDB behavior since CVE-2015-8543 (Closes: #813406)
Jeremy Allison [Fri, 29 Jan 2016 00:35:13 +0000 (16:35 -0800)]
s3: smbd: Fix timestamp rounding inside SMB2 create.
Setting "dos filetime resolution = yes" should round
to 2 second increments. Fix missing path inside smbd.
Fix confirmed by reporter Hubert Gilch <hg@sepag.de>.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11703
Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Fri Jan 29 10:41:01 CET 2016 on sn-devel-144
(cherry picked from commit
8024f532e6bcb6cbd8179817fafdd0f12929d629)
Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Tue Feb 2 15:33:08 CET 2016 on sn-devel-104
Uri Simchoni [Tue, 19 Jan 2016 12:57:16 +0000 (14:57 +0200)]
smbd: show correct disk size for different quota and dfree block sizes
When file system stats (VFS disk_free_fn) and quota (VFS get_quota_fn)
return different block sizes, normalize values before comparing.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11681
Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit
67c89715d00abc588239d8220f09cf51a58db05a)
Christian Ambach [Wed, 30 Dec 2015 20:25:13 +0000 (21:25 +0100)]
s3:utils/smbget fix recursive download
get_auth_data is called multiple times (once for the directory listing and then
for every file to be downloaded). Save the obtained values across multiple calls
to make smbclient use the correct username for each download.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=6482
Signed-off-by: Christian Ambach <ambi@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
(cherry picked from commit
ec802d27ce4dc6dd9b5e5ebd6992f90364d855a2)
Andreas Schneider [Tue, 26 Jan 2016 10:28:50 +0000 (11:28 +0100)]
waf: Only build smb_krb5_wrapper if we have CUPS
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit
192f1516c378ae942d14921bfcc1e11173da36e6)
Andreas Schneider [Tue, 12 Jan 2016 14:17:22 +0000 (15:17 +0100)]
s3-client: Add a KRB5 wrapper for smbspool
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11690
We need a wrapper for smbspool to be able to authenticate with Kerberos.
This needs to replace the cups smb backend. The permission need to be
0700 and the owner root.
Note that Kerberos support is broken in CUPS 2.1.2 maybe earlier
versions. It works with 1.6.3.
Signed-off-by: Andreas Schneider <asn@cryptomilk.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Mon Jan 25 19:58:46 CET 2016 on sn-devel-144
(cherry picked from commit
62c68bd8c8f7a7e057e38a461707f1c195e62df0)
Alexander Bokovoy [Fri, 22 Jan 2016 09:44:03 +0000 (11:44 +0200)]
s3-parm: clean up defaults when removing global parameters
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11693
When globals are re-initialized, they are cleared and globals' talloc
context is freed. However, parm_table still contains a reference to the
global value in the defaults. This confuses lpcfg_string_free() after
commit
795c543d858b2452f062a02846c2f908fe4cffe4 because it tries to
free already freed pointer which is passed by lp_save_defaults():
....
case P_STRING:
case P_USTRING:
lpcfg_string_set(Globals.ctx,
&parm_table[i].def.svalue,
*(char **)lp_parm_ptr(NULL, &parm_table[i]));
....
here &parm_table[i].def.svalue is passed to lpcfg_string_free() but it
is a pointer to a value allocated with previous Globals.ctx which
already was freed.
This specifically affects registry backend of smb.conf in lp_load_ex()
where init_globals() called explicitly to re-init globals after
lp_save_defaults() if we have registry backend defined.
Reviewed-by: Uri Simchoni <uri@samba.org>
Signed-off-by: Alexander Bokovoy <ab@samba.org>
Autobuild-User(master): Uri Simchoni <uri@samba.org>
Autobuild-Date(master): Mon Jan 25 23:58:42 CET 2016 on sn-devel-144
(cherry picked from commit
500bc01478881cab89f0e691427e34a405bb0003)
Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Tue Jan 26 12:58:53 CET 2016 on sn-devel-104
Ralph Boehme [Wed, 20 Jan 2016 16:46:38 +0000 (17:46 +0100)]
s4:torture: add SMB2 test for directory creation initial allocation size
Test that directory creation with an initial allocation size > 0
succeeds.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=11684
Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Ralph Böhme <slow@samba.org>
Autobuild-Date(master): Sun Jan 24 01:20:52 CET 2016 on sn-devel-144
(cherry picked from commit
cd86f20e245cc1b0cb3be5d6cb1b45c45e2a45a8)
Ralph Boehme [Wed, 25 Nov 2015 14:23:26 +0000 (15:23 +0100)]
s3:smbd: Ignore initial allocation size for directory creation
We reject directory creation with an initial allocation size > 0 with
NT_STATUS_ACCESS_DENIED. Windows servers ignore the initial allocation
size on directories.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=11684
Pair-Programmed-With: Volker Lendecke <vl@samba.org>
Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit
78ccbb07170c3e49a084d31434310f973e3d6158)
Uri Simchoni [Wed, 20 Jan 2016 07:34:26 +0000 (09:34 +0200)]
smbcacls: fix uninitialized variable
An uninitialized variable causes "numeric" mode to be
used without the -n option.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11682
Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
Autobuild-User(master): Ralph Böhme <slow@samba.org>
Autobuild-Date(master): Wed Jan 20 12:12:12 CET 2016 on sn-devel-144
(cherry picked from commit
6cff00954763a7b266db5bab229b989e89abcee0)
Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Thu Jan 21 13:01:16 CET 2016 on sn-devel-104
Christof Schmitt [Thu, 7 Jan 2016 20:27:49 +0000 (13:27 -0700)]
Revert "winbind: Retry after SESSION_EXPIRED error in ping-dc"
This reverts commit
a2670f15dea27c10e3827216adf572f9c3894f85.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11670
cm_connect_netlogon now handles the retry for an expired session.
Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Jan 13 03:35:57 CET 2016 on sn-devel-144
(cherry picked from commit
6f3656c47d8ae6a3ac10591ffd7a60797775b469)
Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Thu Jan 14 13:21:52 CET 2016 on sn-devel-104
Christof Schmitt [Tue, 5 Jan 2016 22:10:45 +0000 (15:10 -0700)]
winbindd: Retry on expired session in cm_connect_netlogon
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11670
Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit
aa3883eae6e7891efb1e6f9ec74e6073bee43250)
Christof Schmitt [Thu, 7 Jan 2016 22:03:22 +0000 (15:03 -0700)]
winbindd: Retry on expired session in cm_connect_sam
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11670
Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit
276d604aa5ccc32d18b69c04ae13e2dc7c21f3ee)
Christof Schmitt [Wed, 6 Jan 2016 21:15:30 +0000 (14:15 -0700)]
winbindd: Retry on expired session in cm_connect_lsa
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11670
Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit
3b6b5456424be6997b32c23b7c149c8060c3102d)
Christof Schmitt [Tue, 5 Jan 2016 21:42:09 +0000 (14:42 -0700)]
winbindd: Remove double retry from some ADS methods
The retry through the new reconnect_ads layer is enough. This structure
also makes the distinction between retry layer and actual methods call a
bit clearer.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11670
Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit
4c6804e414087fb61e66133cefbe5590d1d9b283)
Christof Schmitt [Tue, 5 Jan 2016 21:37:30 +0000 (14:37 -0700)]
winbindd: Add retry also for ADS method calls
RPC calls can return IO_DEVICE_ERROR on expired SMB2 sessions. Retrying
on a new connection avoids surfacing this error to winbindd clients.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11670
Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit
e4adf55e242aa5f000570bf554fcd15d7e86c126)
Christof Schmitt [Tue, 5 Jan 2016 20:39:25 +0000 (13:39 -0700)]
winbindd: Reset connection for expired session before reconnecting
A RPC call on a expired SMB2 session returns IO_DEVICE_ERROR. In this
case, reset the connection before issuing the same call
again.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11670
Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit
fb5b0cec3c0c2e0cf9cb04f8b52ee910ac245aeb)
Uri Simchoni [Thu, 29 Oct 2015 20:24:30 +0000 (22:24 +0200)]
vfs_shadow_copy2: add a blackbox test suite
Add a blackbox test suite for vfs_shadow_copy2, testing
parameters mountpoint, basedir, snapdir, snapdirseverywhere,
and testing correct wide-link processing.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11580
Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Autobuild-User(master): Michael Adam <obnox@samba.org>
Autobuild-Date(master): Wed Jan 13 17:11:38 CET 2016 on sn-devel-144
(cherry picked from commit
7362c27a62e3802fc8df975ce50115b683811f4a)
Uri Simchoni [Mon, 2 Nov 2015 07:08:53 +0000 (09:08 +0200)]
vfs_shadow_copy2: fix case where snapshots are outside the share
Adjust the connect path to the root of the share in the snapshot,
or to the root of the snapshot if the snapshot is "inside" the
share.
This way snapshot symlink regarded as "wide links" if and only if
they point outside the snapshot or they were wide links when
the snapshot was taken.
This allows mounting the snapshots outside the share's root.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11580
Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
(cherry picked from commit
8a49a63a5a5d8014d32179df1789186223443b35)
Uri Simchoni [Sun, 1 Nov 2015 20:28:46 +0000 (22:28 +0200)]
vfs_shadow_copy2: add shadow_copy2_do_convert()
Add a new routine shadow_copy2_do_convert() which is
like shadow_copy2_convert(), but beside calculating the
path of the snapshot file, it also returns the minimum length
of the subpath which is both inside the share and inside the
same snapshot as the file in question, i.e. (at least in the
classical case) the subdirectory of the the snapshot file's
snapshot directory that corresponds to the file's share root.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11580
Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
(cherry picked from commit
3703bca4d9e494aec0b40243add3e076cf353601)
Christian Ambach [Mon, 4 Jan 2016 22:12:25 +0000 (23:12 +0100)]
s3:smbd/oplock obey kernel oplock setting when releasing oplocks
otherwise smbd asks the kernel to release an oplock that was never requested
Bug: https://bugzilla.samba.org/show_bug.cgi?id=11400
Signed-off-by: Christian Ambach <ambi@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Jan 6 08:58:56 CET 2016 on sn-devel-144
(cherry picked from commit
eda6aaf1533b69d093ba67ff5e22fcda0073dd3f)
Uri Simchoni [Tue, 5 Jan 2016 22:12:36 +0000 (00:12 +0200)]
selftest: more dfree command and smbclient disk usage tests
Add tests that cover disk usage printing by smbclient, as well
as passing directory info to the "dfree command" script.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11662
Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Jan 6 03:58:59 CET 2016 on sn-devel-144
(cherry picked from commit
3e1b26bd6d0998c3af3d77f94eaac469434389be)
Uri Simchoni [Tue, 5 Jan 2016 22:08:25 +0000 (00:08 +0200)]
smbclient: query disk usage relative to current directory
When querying disk usage in the "dir" and "du" commands,
use the current directory. This behavior is compatible
with Windows command shell "dir" command.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11662
Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit
275da6c5c7e7c5dd0581e919912eb82102903a46)
Karolin Seeger [Mon, 11 Jan 2016 09:59:43 +0000 (10:59 +0100)]
VERSION: Bump version up to 4.3.5...
and re-enable git snapshots.
Signed-off-by: Karolin Seeger <kseeger@samba.org>
Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Mon Jan 11 14:23:41 CET 2016 on sn-devel-104
Karolin Seeger [Mon, 11 Jan 2016 09:59:07 +0000 (10:59 +0100)]
VERSION: Disable git snapshots for the 4.3.4 release.
Signed-off-by: Karolin Seeger <kseeger@samba.org>
Karolin Seeger [Mon, 11 Jan 2016 09:57:06 +0000 (10:57 +0100)]
WHATSNEW: Add release notes for Samba 4.3.4.
Signed-off-by: Karolin Seeger <kseeger@samba.org>
Stefan Metzmacher [Tue, 24 Nov 2015 23:13:17 +0000 (00:13 +0100)]
s3:torture: add traverse testing to LOCAL-RBTREE
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11375
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11394
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Fri Nov 27 13:16:59 CET 2015 on sn-devel-104
(cherry picked from commit
bb9f13ab4165f150e01a88ddcc51605a7c176f5d)
Stefan Metzmacher [Wed, 25 Nov 2015 08:22:08 +0000 (09:22 +0100)]
dbwrap_rbt: fix modifying the db during traverse
We delete and add of records rebalace the tree, but our
traverse code doesn't handle that and skips records
randomly.
We maintain records in a linked list for now
in addition to the rbtree and use that list during
traverse.
This add a bit overhead, but at least it works reliable.
If someone finds a way to do reliable traverse with the
rebalanced tree, we can replace this commit.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11375
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11394
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit
0f46da08e160e6712e5282af14e1ec4012614fc7)
Stefan Metzmacher [Wed, 25 Nov 2015 08:22:08 +0000 (09:22 +0100)]
dbwrap_rbt: add nested traverse protection
Multiple dbwrap_traverse_read() calls are possible.
store() and delete() on a fetch locked record
are rejected during dbwrap_traverse_read().
A dbwrap_traverse() within a dbwrap_traverse_read()
behaves like a dbwrap_traverse_read().
Nested dbwrap_traverse() calls are not possible.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11375
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11394
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit
590507951fc514a679f44b8bfdd03c721189c3fa)
Stefan Metzmacher [Wed, 25 Nov 2015 09:17:34 +0000 (10:17 +0100)]
dbwrap_rbt: use talloc_zero_size() instead of a partial ZERO_STRUCT()
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11375
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11394
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit
f3d1fc1d06822a951a2a3eeb5aa53748b9b5b299)
Karolin Seeger [Mon, 11 Jan 2016 10:15:19 +0000 (11:15 +0100)]
Revert "Fix bug #11394 - Crash: Bad talloc magic value - access after free"
This reverts commit
569ce95de57511d6082196ca4cc0938d78700351.
This has been committed by accident. Right patchset, but wrong authorship.
Patchset with correct authorship to follow.
Jelmer Vernooij [Sat, 9 Jan 2016 20:20:06 +0000 (20:20 +0000)]
Add dependency on libtevent-dev in samba-dev.
Douglas Bagnall [Tue, 1 Dec 2015 00:48:59 +0000 (13:48 +1300)]
password_lockout: test creds.get_kerberos_state()
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
Reviewed-by: Ralph Boehme <slow@samba.org>
Autobuild-User(master): Garming Sam <garming@samba.org>
Autobuild-Date(master): Tue Dec 15 03:17:52 CET 2015 on sn-devel-104
(cherry picked from commit
ab1ebb1d1c650396841e4ba4a18b3c08689d4f52)
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11659
lastLogon and lastLogonTimestamp are not updated
Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Wed Jan 6 13:14:21 CET 2016 on sn-devel-104
Douglas Bagnall [Fri, 23 Oct 2015 03:57:56 +0000 (16:57 +1300)]
auth: keep track of lastLogon and lastLogonTimestamp
lastLogon is supposed to be updated for every interactive or kerberos
login, and (according to testing against Windows2012r2) when the bad
password count is non-zero but the lockout time is zero. It is not
replicated.
lastLogonTimestamp is updated if the old value is more than 14 -
random.choice([0, 1, 2, 3, 4, 5]) days old, and it is replicated. The
14 in this calculation is the default, stored as
"msDS-LogonTimeSyncInterval", which we offer no interface for
changing.
The authsam_zero_bad_pwd_count() function is a convenient place to
update these values, as it is called upon a successful logon however
that logon is performed. That makes the function's name inaccurate, so
we rename it authsam_logon_success_accounting(). It also needs to be
told whet5her the login is interactive.
The password_lockout tests are extended to test lastLogon and
lasLogonTimestamp.
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit
795f4729ca94029fcee750fbebbe9bc3ea43a214)
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11659
lastLogon and lastLogonTimestamp are not updated