- =================================
- Release Notes for Samba 3.2.0rc1
- May 23, 2008
- =================================
-
-This is the first release candidate of Samba 3.2.0. This is *not*
-intended for production environments and is designed for testing
-purposes only. Please report any defects via the Samba bug reporting
-system at https://bugzilla.samba.org/.
-
-Please be aware that Samba is now distributed under the version 3
-of the new GNU General Public License. You may refer to the COPYING
-file that accompanies these release notes for further licensing details.
-
-Major enhancements in Samba 3.2.0 include:
-
- File Serving:
- o Use of IDL generated parsing layer for several DCE/RPC
- interfaces.
- o Removal of the 1024 byte limit on pathnames and 256 byte limit on
- filename components to honor the MAX_PATH setting from the host OS.
- o Introduction of a registry based configuration system.
- o Improved CIFS Unix Extensions support.
- o Experimental support for file serving clusters.
- o Support for IPv6 in the server, and client tools and libraries.
- o Support for storing alternate data streams in xattrs.
- o Encrypted SMB transport in client tools and libraries, and server.
- o Support for Vista clients authenticating via Kerberos.
-
- Winbind and Active Directory Integration:
- o Full support for Windows 2003 cross-forest, transitive trusts
- and one-way domain trusts.
- o Support for userPrincipalName logons via pam_winbind and NSS
- lookups.
- o Expansion of nested domain groups via NSS calls.
- o Support for Active Directory LDAP Signing policy.
- o New LGPL Winbind client library (libwbclient.so).
- o Support for establishing interdomain trust relationships with
- Windows 2008.
-
- Joining:
- o New NetApi library for domain join related queries (libnetapi.so)
- and example GTK+ Domain join gui.
- o New client and server support for remotely joining and unjoining
- Domains.
- o Support for joining into Windows 2008 domains.
-
- Users & Groups:
- o New ldb backend for local group mapping tables
- o Raised level of security defaults for authentication operations.
- o New NetApi library for user account related queries.
-
-
- Documentation:
- o Inclusion of an HTML version of the 3rd edition of "Using Samba"
- from O'Reilly Publishing.
-
-
-Now Licensed under the GNU GPLv3
-================================
-
-The Samba Team has adopted the Version 3 of the GNU General Public
-License for the 3.2 and later releases. The GPLv3 is the updated
-version of the GPLv2 license under which Samba is currently
-distributed. It has been updated to improve compatibility with other
-licenses and to make it easier to adopt internationally, and is an
-improved version of the license to better suit the needs of Free
-Software in the 21st Century.
-
-The original announcement is available on-line at
-
- http://news.samba.org/announcements/samba_gplv3/
-
-
-New Security Defaults for Authentication
-========================================
-
-Support for LanMan passwords is now disabled in both client and server
-applications. Additionally, clear text authentication requests are
-disabled by default in client utilities such as smbclient and all
-libsmbclient based applications. This will affect connection both
-to and from hosts running DOS, Windows 9x/ME, and OS/2. Please refer
-to the "Changes" section for details on the exact parameters that were
-updated.
-
-
-Registry Configuration Backend
-==============================
-
-Samba is now able to use a registry based configuration backed to
-supplement smb.conf settings. This feature may be enabled by setting
-"config backend = registry" in the [global] section of smb.conf for a
-registry only configuration, or by specifying "include = registry" to
-include global options from registry for a mixed setup.
-
-The new parameter "registry shares = yes" in the [global] section of
-smb.conf can be used to activate share definitions from registry.
-These shares are loaded on demand by the server. Registry shares are
-automatically activated by the global registry options above.
-
-The configuration stored in registry can be conveniently managed using
-the "net conf" command.
-
-More information may be obtained from the smb.conf(5) and net(8) man
-pages.
-
-
-Removed Features
-================
-
-Both the Python bindings and the libmsrpc shared library have been
-removed from the tree due to lack of an official maintainer.
-
-As smbfs is no longer supported in current kernel versions, smbmount has
-been removed in this Samba version. Please use cifs (mount.cifs) instead.
-See examples/scripts/mount/mount.smbfs as an example for a wrapper which
-calls mount.cifs instead of smbmount/mount.smbfs.
-
-
-Modified API for libsmbclient
-==============================================================================
-
-Maintaining ABI compatibility for libsmbclient has become increasingly
-difficult to accomplish, while also keeping the code organization such that it
-is easily readable. Towards the goal of maintaining ABI compatibility and
-also keeping the code easy to maintain and enhance, the API has been enhanced.
-In particular, the fields in the SMBCCTX context structure are no longer
-intended to be read/write by the user, and are marked as deprecated. An
-application that previously accessed the members of the SMBCCTX context
-structure will now encounter warnings if recompiled. This is intentional, to
-encourage implementation of the small changes required for the new interface.
-The number of changes is expected to be quite small for the vast majority of
-applications, and no changes need be made for many applications. The changes
-required for KDE (konqueror) to conform to the new interface, for example, are
-only four lines in only one file.
+ ==============================
+ Release Notes for Samba 3.2.6
+ December 10, 2008
+ ==============================
-Instead of the application manually changing or reading values in the context
-structure, there are now setter and getter functions for each configurable
-member in that structure. Similarly, the smbc_option_get() and
-smbc_option_set() functions are deprecated in favor of the setter/getter
-interface. The setters and getters are all documented in libsmbclient.h
-under these comment blocks:
- Getters and setters for CONFIGURATION
- Getters and setters for OPTIONS
- Getters and setters for FUNCTIONS
- Callable functions for files
- Callable functions for directories
- Callable functions applicable to both files and directories
-
-Example changes that may be required to eliminate "deprecated" warnings:
-
- /* Set the debug level */
- context->debug = 99;
-changes to:
- smbc_setDebug(context, 99);
-
- /* Specify the authentication callback function */
- context->callbacks.auth_fn = auth_smbc_get_data;
-changes to:
- smbc_setFunctionAuthData(context, auth_smbc_get_data);
-
- /* Specify the new-style authentication callback with context parameter */
- smbc_option_set("auth_function", auth_smbc_get_data_with_ctx);
-changes to:
- smbc_setFunctionAuthDataWithContext(context, auth_smbc_get_data_with_ctx);
-
- /* Set kerberos flags */
- context->flags = (SMB_CTX_FLAG_USE_KERBEROS |
- SMB_CTX_FLAG_FALLBACK_AFTER_KERBEROS);
-changes to:
- smbc_setOptionUseKerberos(context, 1);
- smbc_setOptionFallbackAfterKerberos(context, 1);
+This is a bug fix release of the Samba 3.2 series.
+Major enhancements included in Samba 3.2.6 are:
+ o Fix Winbind crash bugs.
+ o Fix moving of readonly files.
+ o Fix "write list" in setups using "security = share".
+ o Fix access to cups-printers with cups 1.3.4.
+ o Fix timeouts in setups with large groups.
+ o Fix several bugs concerning Alternate Data Streams.
+ o Add new SMB traffic analyzer VFS module.
######################################################################
Changes
#######
-smb.conf changes
-----------------
-
- Parameter Name Description Default
- -------------- ----------- -------
- administrative share New No
- client lanman auth Changed Default No
- client ldap sasl wrapping New plain
- client plaintext auth Changed Default No
- clustering New No
- cluster addresses New ""
- config backend New file
- ctdb socket New ""
- debug class New No
- lanman auth Changed Default No
- ldap debug level New 0
- ldap debug threshold New 10
- mangled map Removed
- min receive file size New 0
- open files database hashsize Removed
- read bmpx Removed
- registry shares New No
- smb encrypt New Auto
- winbind expand groups New 1
- winbind rpc only New No
-
- New special meaning of "include = registry".
-
-
-Changes since 3.2.0pre3:
------------------------
+Changes since 3.2.5
+-------------------
o Michael Adam <obnox@samba.org>
- * Move the posix pending close functionality down into the VFS layer.
- * Fix activation of registry globals in loadparm.
+ * BUG 5677: Fix test_{shlibs,nss_modules,pam_modules} on Solaris.
+ * BUG 5765: Fix installlibs on solaris by using portable "test -r".
+ * Fix potential segfault in vfs_tsmsm.
+ * Don't list the domain twice when expanding internal aliases.
+ * Fix the output of "getent group" when "winbind use default domain = yes"
+ with "security = ads".
+ * Add domain prefix to username in lookup_groupmem().
+ * Prevent negative GM/ cache entries due to broken connections.
+ * Fix crash in sync_eventlog_params().
+ * Fix timeouts when calling 'getgrent'.
+ * Fix smbd hanging on Solaris when winbindd closes socket.
o Jeremy Allison <jra@samba.org>
- * BUG 5452: Fix smbclient put.
- * BUG 5095: Fix Manage Documents privilege.
- * BUG 5434: Ensure the loaded password doesn't contain the '\n' at the end.
- * BUG 5456: Fix missing echo if we ^C at the prompt.
- * BUG 5460: Fix DFS referrals.
- * BUG 5464: Fix timeout in winbindd.
- * Fix returning a directory value for a QPATHINFO on a msdfs link
- with a non-dfs path.
-
-
-o Alexander Bokovoy <ab@samba.org>
- * Use more error-prone form of testing dm_destroy_session() return code.
-
-
-o Günther Deschner <gd@samba.org>
- * BUG 5465: Fix joining with createcomputer=ou1/ou2/ou3.
- * Fix wins null pointer crash in nss_wins module.
- * Fix lm session key length in _netr_LogonSamLogon.
- * Add -f switch for DsGetDCName() example and be more verbose on output.
+ * BUG 1254: Fix "write list" in setups using "security = share".
+ * BUG 5080: Fix access to cups-printers with cups 1.3.4.
+ * BUG 5737: Fix Winbind crash in an unusual failure mode.
+ * BUG 5783: Fix FindFirst where search pattern equals the mangled filename.
+ * BUG 5790: Fix returning of STATUS_OBJECT_NAME_NOT_FOUND on set file
+ disposition.
+ * BUG 5797: Fix moving of readonly files.
+ * BUG 5814: Fix Winbind crash bug while doing "rescan_trusted_domain".
+ * BUG 5818: Sort ACEs in smbcacl output properly and honor inheritance.
+ * BUG 5825: Fix account locking with LDAP backend.
+ * BUG 5826: Fix truncated filenames when accessing old servers.
+ * BUG 5889: Fix "delete veto files = no".
+ * BUG 5891: Fix smbd crash when viewing the eventlog exported by "eventlog
+ list".
+ * BUG 5900: Fix vfs_readonly.
+ * BUG 5903: Fix vfs_streams_xattr breaking contents of files.
+ * BUG 5904: Fix libnss_wins causing SIGABRT while servicing getaddrinfo()
+ request.
+ * BUG 5914: Fix build failure: redefinition of struct name_list.
+ * BUG 5937: Fix filenames with "*" char hiding other files.
+ * BUG 5953: Fix smbclient crashes.
+ * Fix rename_open_files.
+ * Restructure VFS SMB traffic analyzer VFS module.
+ * Correctly fix smbclient to terminate on eof from server.
+ * Unify access checks for lsa server functions.
+ * Remove the requirement for ldap call made as root.
+ * Cope with MAXIMUM_ALLOWED_ACCESS requests when opening handles.
+ * Fix net rpc vampire, based on an *amazing* piece of debugging work by
+ "Cooper S. Blake" <the_analogkid@yahoo.com>.
+ * Fix Coverity IDs 456, 574, 592, 606 and 607.
+ * Fix net rpc vampire.
o Gerald (Jerry) Carter <jerry@samba.org>
- * Prevent Winbind cycle in children list when reaping dead child processes.
- * BUG 5107: Fix handling of large DNS replies on AIX and Solaris.
- * BUG 5429: Clarify log msgs re: failure to create
- BUILTIN\{Administrators,Users}
- * Fix the DNS Update option of "net ads join".
-
-
-o Eric Cronin <ecronin@gizmolabs.org>
- * BUG 5184: Add Missing HAVE_UPDWTMPX check before using updwtmpx().
-
-
-o Steven Danneman <sdanneman@sd-ubuntu.(none)>
- * Bug 5419: Fix memory leak in ads_do_search_all_args() when enumerating
- 1000s of entries
-
-
-o Holger Hetterich <hhetter@novell.com>
- * Recognize and allow longer UA keys in winbindd_cache.
-
-
-o Björn Jacke <bj@sernet.de>
- * Fix compile warnings.
- * Increase log level for failed setsockopt call.
-
-
-o Volker Lendecke <vl@samba.org>
- * BUG 5420: Fix build on IRIX.
- * BUG 5398: Fix compiler warning.
- * BUG 5399: Fix compiler warning.
- * BUG 5400: Fix compiler warning.
- * BUG 5436: Fix signing problem in the client with transs requests.
- * Fix a valgrind bug in the new [ug]id2sid cache.
- * Fix Coverity IDs 565 and 222.
- * Fix dfs_Enum: In form_junctions, correctly check for malloc failure.
-
-
-o Tim Prouty <tim.prouty@isilon.com>
- * Cleanup size_t return values in convert_string_allocate.
+ * Use the same prerequisite for DDNS update as Windows XP.
+ * Make "lwinet ads dns register" honor the "interfaces" parameter.
-o Mike Sweet <msweet@apple.com>
- * Fix Kerberos support for CUPS 1.3 in smbspool.
-
-
-o Martin Zielinski <mz@seh.de>
- * Fix printing with Vista.
- * Fix deletion of files when they're in use by other drivers.
-
-
-Changes since 3.2.0pre2:
------------------------
-
-
-o Michael Adam <obnox@samba.org>
- * Fix session setup with security = share.
- * Fix segfault in testparm.
- * Fix several Makefile issues.
- * Fix build of bin/net on Solaris.
- * Reformat the parm table of loadparm to use named initializers.
- * Fix %I macro expansion for IPv4 mapped IPv6 addresses.
- * Convert registry.tdb to use dbwrap and fix memleaks.
- * Several make test fixes and improvements.
- * Several libreplace extensions and fixes (portet from v4-0-test).
- * Rename libnet_conf to libsmbconf and introduce backend abstraction layer.
- * Add text backend to libsmbconf, based on params.c.
- * Fix handling of includes in registry libsmbconf backend.
- * Fix net conf import by reading from text backend.
- * Add a "net registry" command to locally access the registry.
- * Add getvalue subcommand to "net rpc registry".
- * Add testsuites for libsmbconf and "net registry".
- * Fix Coverity IDs 517, 536, 545.
- * Remove unneeded REGISTRY_HOOKS layer from reghook cache
- to allow plugging one backend to multiple keys more easily.
- * Add smbconf_init dispatcher taking source strings like "backend:path"
- * Fix handling of dangling parameters (without share) in libsmbconf.
- * Introduce special meaning of "include = registry" to complement
- the registry-only configuration of "config backend = registry".
- * Enhance error propagation by making several registry functions
- return WERROR.
- * Fix loading of registry shares in smbd by fixing the token.
- * Fix a segfault in tdb_wrap_log().
-
-
-o Jeremy Allison <jra@samba.org>
- * BUG 5311: Fix IPv6 issue with hosts allow/deny settings.
- * BUG 5372: Fix client timeouts in large CUPS installations.
- * Fix problem with nmbd not waiting until interfaces come up.
- * Fix S3 to pass the test_raw_oplock_exclusive3 test.
- * Fix MSDFS bug breaking MS clients in some cases by ensuring
- the target host is ourselves.
- * Rewrite the wrap checks to deal with gcc 4.x optimisations.
-
-
-o Kai Blin <kai@samba.org>
- * BUG 4235: Prevent ntlm_auth from sending BH responses without a message.
- * Fix one BH message.
-
-
-o Gerald (Jerry) Carter <jerry@samba.org>
- * Fix libtdb some to move back towards allowing out of tree builds.
- * Ignore port when pulling IP addr from struct sockaddr_storage..
+o Steven Danneman <steven.danneman@isilon.com>
+ * Fix extended DN parse error when AD object does not have a SID.
o Guenther Deschner <gd@samba.org>
- * Fix build of pam_smbpass.
- * Fix lp_load with an empty registry and "config backend = registry".
- * Fix build targets for bin/net.
- * Fix _dssetup_DsRoleGetPrimaryDomainInformation().
- * Fix the build of cifs.spnego.
- * Migration of the SRVSVC client and server DCE/RPC code to IDL
- based structures and autogenerated code
- * Fix Kerberos session setup with Vista SP1 (ignore PAC type 12)
- * Fix support for vampire of lockout policies and
- for storing dialin/terminal server settings.
- * Fix remote join/unjoin server implementation.
- * BUG 5328: Fix netlogon credential chain with Windows 2008
- (this also fixes joining Windows 2008 with rpc methods).
- * Various fixes for establishing and validating interdomain trust
- relationships with Windows 2008.
- * Use IDL for storing domain controller information in dsgetdcname.
- * Re-arranged internal structure of libnetapi.
- * Add support for domain\dcname syntax in libnetjoin.
- * Add support for browsing/joining OUs in netdomjoin-gui.
- * Add various new calls to libnetapi.
-
-
-o Björn Jacke <bj@sernet.de>
- * Add AC_TRY_RUN_STRICT support for Sun Studio compiler.
+ * BUG 5888: Fix PNP_GetHwProfInfo().
+ * BUG 5957: Do not abort rename process on valid rename script.
+ * BUG 5898: Fix 'net rpc shutdown'.
+ * Fix duplicate installation of cifs.upcall.
+ * Fix _srvsvc_NetShareAdd segfault.
+ * Ensure consistency when reporting password complexity.
+ * Fix _lsa_GetUserName.
+ * Fix access check in _samr_QuerySecurity().
+ * _samr_DeleteUser needs to wipe out the user_handle on success.
+ * NetGroupEnum_r needs to handle servers with no groups.
-o Volker Lendecke <vl@samba.org>
- * Add support for async SMB requests.
- * Add transactions to the dbwrap API.
- * Add "net idmap aclmapset".
- * Change default bufsize to 512k.
- * Fix Coverity IDs 473, 481, 506, 507, 525, 526, 527, 528, 529, 530, 537,
- 538, 547, 548, 551, 552, 553, 554, 555, 557, 558, 559, 563, 564, 567.
- ... and half a ton more
- * Fix some warnings in the tsmsm module.
- * Fix warnings.
- * BUG 4901: Fix "ldap passwd sync = only".
- * BUG 5334: Fix download of empty files using smbclient.
- * BUG 5307: Fix notify changes.
- * BUG 5317: Fix debug output in domain_client_validate.
- * BUG 5338: Fix format string issue in rpcclient.
- * Convert account_pol.tdb and share_info.tdb to dbwrap.
- * Protect group_mapping.tdb ops with transactions.
- * BUG 5366: "passwd program" should work on Solaris 10 again now.
- * A level 25 setuserinfo does change the pwdlastset, fixes XP joins.
- * BUG 5350: A Samba DC trusting NT4 should do an anon session setup.
- * BUG 5375: Fix a segfault with "security=share" and [in]valid users.
- * Fix printing from DOS clients -- introduced by inbuf/outbuf rewrite.
- * Fix wbinfo -a trusted\\user%password on a Samba DC with trusts.
- * BUG 5341: Fix async smbclient get command on Solaris.
- * Make winbind use NetSamLogonEx when possible.
- * Merge fixes in the 3-0-ctdb cluster code.
- * Fix a segfault in snprintf replacement code.
- * Fix a regression for wbinfo --group-info if winbind separator is set
-
-
-o Derrell Lipman <derrell@samba.org>
- * Check for NULL pointers before dereferencing them.
- * Fix use of AuthDataWithContext capability.
+o Mathias Dietz <MDIETZ@de.ibm.com>
+ * Search for gpfs functions in both libgpfs_gpl.so an libgpfs.so.
-o Stefan Metzmacher <metze@samba.org>
- * Add dbwrap_tdb2 backend, useful for cluster setups.
- * Add more functions to libwbclient:
- - wbcGetGroups()
- - wbcInterfaceDetails()
- - wbcListUsers()
- - wbcListGroups()
- - wbcLookupUserSids()
- - wbcSetUidMapping()
- - wbcSetGidMapping()
- - wbcSetUidHwm()
- - wbcSetGidHwm()
- - wbcResolveWinsByName()
- - wbcResolveWinsByIP()
- - wbcCheckTrustCredentials()
- * Let wbinfo use libwbclient where possible.
- * Let net use only libwbclient to access winbindd.
- * Make socket wrapper pcap support more portable.
- * Some libreplace backports from v4-0-test.
- * Store the write time in the locking.tdb,
- so that smbd passes the BASE-DELAYWRITE test.
- * Run RAW-SEARCH and BASE-DELAYWRITE by 'make test'.
- * Let each process use its own connection to ctdb
- in cluster mode.
- * Add a reinit_after_fork() helper function to correct
- reinitialize the same things in all cases.
- * Fix a chicken and egg problem with "include = registry".
-
-
-o Karolin Seeger <kseeger@samba.org>
- * Fix usage message for "net idmap dump".
+o Dina Fine <dina@exanet.com>
+ * BUG 5908: Fix internal change notify on shared directory.
-o Andrew Tridgell <tridge@samba.org>
- * Suppress superfluous message.
+o Nils Goroll <nils.goroll@hamburg.de>
+ * BUG 5135 and 5446: Prevent calling POSIX ACL vfs methods on zfs share.
-o Marc VanHeyningen <marc.vanheyningen@isilon.com>
- * Coverity fixes.
+o Henning Henkel <henning.henkel@fh-furtwangen.de>
+ * BUG 5929: Fix building of vfs_prealloc with option --with-cluster-support
+ and GPFS.
-Changes since 3.2.0pre1:
------------------------
-
-o Michael Adam <obnox@samba.org>
- * Add library for access to the registry configuration data.
- * BUG 5023: Separate NFS4 and POSIX ACL code in file access checks.
- * BUG 4308: Fix Excel save operation ACL bug.
- * Refactor and consolidate logic for retrieving the machine
- trust password information.
- * VFS API cleanup (remove redundant parameter).
- * BUG 4801: Correctly implement LSA lookup levels for LookupNames.
- * Add new option "debug class" to control printing of the debug class.
- in debug headers.
- * Enable building of the zfsacl and notify_fam vfs modules.
- * BUG 5083: Fix memleak in solarisacl module.
- * BUG 5063: Fix build on RHEL5.
- * New smb.conf parameter "config backend = registry" to enable registry
- only configuration.
- * Move "net conf" functionality into a separate module libnet_conf.c
- * Restructure registry code, eliminating the dynamic overlay.
- Make use of reg_api instead of backend code in most places.
- * Add support for intercepting LDAP libraries' debug output and print
- it in Samba's debugging system.
- * Libreplace fixes.
- * Build fixes.
- * Initial support for using subsystems as shared libraries.
- Use talloc, tdb, and libnetapi as shared libraries internally.
-
-
-o Jeremy Allison <jra@samba.org>
- * Added support for IPv6 client and server connections.
- * Add in the recvfile entry to the VFS layer.
- * Removal of pstring data type.
- * Remove unused utilities: smbctool and rpctorture.
- * Fix service principal detection to match Windows Vista
- (based on work from Andreas Schneider).
- * Encrypted SMB transport in client tools and libraries, and server.
-
-
-o Kai Blin <kai@samba.org>
- * Added support for an SMB_CONF_PATH environment variable
- containing the path to smb.conf.
- * Various fixes to ntlm_auth.
- * make test now supports more extensive SPOOLSS testing using vlp.
- * Correctly handle mixed-case hostnames in NTLMv2 authentication.
+o Holger Hetterich <hhetter@novell.com>
+ * Add new VFS module to analyze SMB traffic
-o Gerald (Jerry) Carter <jerry@samba.org>
- * Add Winbind client library.
- * Decouple static linking between smbd and winbindd's client
- interface.
+o Tomasz Krasuski <kr0tki@poczta.onet.pl>
+ * BUG 5928: Fix 'testparm --version'.
-o Guenther Deschner <gd@samba.org>
- * Enhance client and server remote registry access.
- * Add client calls for remotely joining a computer to a domain
- (including calls from "net dom" command).
- * Add libnetapi.so library for joining domains including
- sample GTK+ app.
- * Fixes for Vista SP1 Kerberos authdata handling to only pickup
- the PAC.
- * Various error code and error message fixes.
- * Add initial draft of libnetconf to allow programmatic
- configuration changes.
- * Add libnet_join internal library for programmatically joining
- and unjoining Domains.
- * Add various fixes and new calls to libnetapi.so library.
- * Various fixes for DsGetDcName and conversion to IDL based
- structures.
- * Fixes for pidl to correctly generate WERROR based client calls.
- * Fixes for pidl to generate output that complies to coding
- conventions.
- * Various IDL fixes.
- * Add ads_get_joinable_ous() to libads to get list of joinable ous.
- * Add get_logon_hours_from_pdb() to comply with new IDL based
- structures.
- * Add debugging capabilities to dump AD connections to libads
- (using ndr_print).
- * Add "dump-domain-list" command for smbcontrol to retrieve better
- debugging information out of winbindd.
- * Migration of the entire client and server DCE/RPC code to IDL
- based structures and autogenerated code for DSSETUP, LSA, SAMR
- and NETLOGON.
- * Started migration of client and server DCE/RPC code to IDL based
- structures and autogenerated code for NTSSVC, SVCCTL and
- EVENTLOG.
- * Use IDL and autogenerated code for samlogoncache and Kerberos
- PAC handling.
- * Various fixes and cleanup of Kerberos PAC handling.
- * Fix segfault in _srv_net_file_enum.
- * Conversion of client join and unjoin code to libnet_join.
- * Add remote join/unjoin server-side implementation.
- * Removed a lot of code which has become obsolete.
-
-
-o Steve Langasek <vorlon@debian.org>
- * Integrate 2 out of 3 --with-fhs patches from Debian packaging
- for better adherence to the FHS standard.
+o Jeff Layton <jlayton@redhat.com>
+ * Have uppercase_string return success on NULL pointer in mount.cifs.
+ * Make mount.cifs return codes match the return codes for /bin/mount.
+ * Use lock/unlock_mtab scheme from util-linux-ng mount prog in mount.cifs.
o Volker Lendecke <vl@samba.org>
- * Add talloc_stackframe() and talloc_pool() features.
- * Removal of pstring data type.
- * Add generic a in-memory cache.
- * Import the Linux red-black tree implementation.
- * Remove large amount of global variables.
- * Support for storing xattrs in tdb files.
- * Support for storing alternate data streams in xattrs.
- * Implement a generic in-memory cache based on rb-trees.
- * Add implicit temporary talloc contexts via talloc_stack().
- * Speed up the smbclient "get" command
- * Add the aio_fork module
- * Fix bug 4901
-
-o Derrell Lipman <derrell@samba.org>
- * Modified libsmbclient API for more easily maintaining ABI compatibility
- while adding new features to libsmbclient.
-
-o Stefan Metzmacher <metze@samba.org>
- * Refactor Winbind internal parent-child interface tables
- to achieve better unit testing support.
- * Add nss_wrapper API for local Winbind unit tests.
- * Networking fixes to the libreplace library.
- * Pidl fixes.
- * Remove unused Winbind pipe calls.
- * Build fixes.
- * Fix for a crash bug in pidl generated client code.
- This could have happend with [in,out,unique] pointers
- when the client sends a valid pointer, but the server
- responds with a NULL pointer (as samba-3.0.26a does for some calls).
- * Change NTSTATUS into enum ndr_err_code in librpc/ndr.
- * Remove unused calls in the struct based winbindd protocol.
- * Add --configfile option to wbinfo.
- * Convert winbind_env_set(), winbind_on() and winbind_off() into macros.
- * Return rids and other_sids arrays in WBFLAG_PAM_INFO3_TEXT mode.
- * Implement wbcErrorString() and wbcAuthenticateUserEx().
- * Convert auth_winbind to use wbcAuthenticateUserEx().
-
-
-o James Peach <jpeach@samba.org>
- * Add support for DNS Service Discovery. Based on work from
- Rishi Srivatsavai <rishisv@gmail.com>.
-
-
-o Andreas Schneider <anschneider@suse.de>
- * Don't restart winbind if a corrupted tdb is found during
- initialization.
- * Fix Windows 2008 (Longhorn) join.
- * Fix crashbug in winbindd.
- * Add share parameter "administrative share".
-
-
-o Karolin Seeger <ks@sernet.de>
- * Improve error messages of net subcommands.
- * Add 'net rap file user'.
- * Change LDAP search filter to find machine accounts which
- are not located in the user suffix.
- * Remove smbmount.
-
-
-o David Shaw <dshaw@jabberwocky.com>
- * BUG 5073: Allow "delete readonly = yes" to correctly override
- deletion of a file.
-
-
-o Rishi Srivatsavai <rishisv@gmail.com>
- * Register the smb service with mDNS if mDNS is supported.
- * Add smbclient support for basic mDNS browsing.
-
-
-o Andrew Tridgell <tridge@samba.org>
- * Fix padding between Winbind 32bit/64bit client library in
- the request/response structures.
- * Added a syncops VFS module for file systems which do not
- guarantee meta-data operations are immediately committed to
- disk in stable form.
-
-
-o Jelmer Vernooij <jelmer@samba.org>
- * Additional portability support for building shared libraries.
+ * BUG 5691: Fig smbd panic on Solaris.
+ * BUG 5778: Check if strlcpy and strlcat are already defined.
+ * BUG 5840: Fix segfault in "rpcclient lsaaddacctrights".
+ * BUG 5860: Fix nasty error message for overlong strings in safe_strcpy.
+ * Fix a potential NULL deref in found by the IBM Checker.
+ * Fix an uninitialized variable found by the IBM Checker.
+ * Fix an unlikely memleak found by the IBM Checker.
+ * Fix some missing error handlings.
+ * Add workaround for domain joins using a netbios name which is different
+ from the hostname.
+ * Fix crash bug when freeing a non-malloc'ed buffer if the client sends a
+ non-encrypted packet with the crypto state set.
+ * Fix trans2findfirst for the large directory optimization.
+ * Fix checking for presence of cups-devel and correct cups-devel test for
+ HAVE_IPRINT.
+
+
+o Derrell Lipman <derrell.lipman@unwireduniverse.com>
+ * BUG 5805: Don't close stdout when calling setup_logging multiple times.
-o Corinna Vinschen <corinna@vinschen.de>
- * Get Samba version or capability information from Windows user space.
-
-
-Original 3.2.0pre1 commits:
----------------------------
-o Michael Adam <obnox@samba.org>
- * Unified POSIX ACL detection including support for FreeBSD and
- HP-UX.
- * Performance improvements for Winbind's lookup functions (names,
- SIDs, and group membership) when joined to an AD domain.
- * Winbind cache validation support.
- * Store domain trust passwords for Samba domain controller's in
- the domain's passdb backend.
- * Merged \winreg server code from the SAMBA_3_2 development branch.
- * Fixes for libreplace.
- * Implement new registry configuration backend.
-
-
-o Jeremy Allison <jra@samba.org>
- * Add support for file system objectIDs.
- * Winbind cache validation support.
- * Add in the UNIX capability for 24-bit readX.
- * Improve Delete-on-Close semantics.
- * Removal of static file and path name buffers in SMB file serving
- code.
-
-
-o Danilo Almeida <dalmeida@centeris.com>
- * Move the machine account to the OU specified when running "net
- ads join".
-
-
-o Andrew Bartlett <abartlet@samba.org>
- * Tighten authentication protocol defaults in client tools and
- servers.
-
-
-o Gerald (Jerry) Carter <jerry@samba.org>
- * Implement support for one-way trusts and two-way cross-forest
- transitive trust in winbindd.
- * Fixes for Winbind's offline/disconnected logon support when
- using remote idmap backends.
- * Fix LookupNames and LookupSids to use the same resolution
- heuristics as Windows XP.
- * Fix lockups in Winbind when running nscd.
- * UPN logon support in pam_winbind.
- * Add support for GNU linker scripts when build shared libraries
- (based on work by Julien Cristau <jcristau@debian.org> and James
- Peach).
-
-
-o Guenther Deschner <gd@samba.org>
- * Additional support for decoding and downloading group policy
- objects from Active Directory.
- * Improvements to "net ads keytab" command.
- * Fixes for linking against Heimdal Kerberos client libs.
- * Support LDAP range retrieval searches.
- * Fixes for failure to refresh user ticket caches in Winbind.
- * UPN logon support in pam_winbind.
- * Add KDC locator plugin for MIT kerberos 1.6 or later.
-
-
-o Steve Langasek <vorlon@debian.org>
- * Allow SIGTERM to cause nmbd to exit while awaiting a interface
- to come up.
+o Stefan Metzmacher <metze@samba.org>
+ * Fix setting of trust password using 'net rpc trustdom add'.
+ * Fix several issues in vfs_streams_xattr and vfs_stream_depot.
+ * Return an error instead of crashing when no realm is given (trigerred by
+ "net ads info -S 127.8.7.6" (where 127.8.7.6 doesn't exist)
+ and "disable netbios = yes").
-o Volker Lendecke <vl@samba.org>
- * Merge experimental cluster support patches from the ctdb branch.
- * Add tdb storage abstraction for ctdb.
- * Use IDL for internal message passing system.
- * Add client support for the SamLogonEx() authentication request.
- * Implement RPC proxy stubs in the Samba server code to allow
- replacing implementation functions one by one.
- * Remove static incoming and outgoing buffers from core server SMB
- packet processing code.
- * Add "net sam rights" command.
+o Jim McDonough <jmcd@samba.org>
+ * Fix the new vfs_smb_traffic_analyzer build for static links.
-o Steve French <sfrench@samba.org>
- * Fixes for mount.cifs Linux utility.
+o TAKAHASHI Motonobu <monyo@samba.gr.jp>
+ * BUG 5901: Fix default for streams_depot location.
-o Stefan Metzmacher <metze@samba.org>
- * Fixes for libreplace.
- * Add support for LDAP digital signing policy.
- * Experimental clustered file system support.
+o Tim Prouty <tim.prouty@isilon.com>
+ * Fix several build warnings.
-o Lars Mueller <lars@samba.org>
- * Makefile and build fixes.
- * Add pam_pwd_expire for pam_winbind (original patch from Andreas
- Schneider).
+o Andreas Schneider <mail@cynapses.org>
+ * Delete the krb5 ccname variable from the PAM environment if set.
+ * Fix circular dependency error with autoconf 2.6.3.
-o James Peach <jpeach@apple.com>
- * Fixes for setgroups() and *BSD and Darwin.
- * Support membership of >16 groups on Darwin.
+o Martin Schwenke <martin@meltin.net>
+ * Add @CIFSUPCALL_PROGS@ to "all" target so cifs.upcall gets built at
+ compile time rather than install time.
-o Jiri Sasek <Jiri.Sasek@Sun.COM>
- * Added vfs_zfsacl module.
+o Davide Sfriso <sfriso@virgilio.it>
+ * BUG 5906: Fix Winbind crash when calling 'getent group'.
-o Karolin Seeger <ks@sernet.de>
- * Add deletelocalgroup and unmapunixgroup subcommand to "net sam".
- * Cleanup internal passdb functions.
+o Dan Sledz <dsledz@isilon.com>
+ * Add FreeBSD configure check for backtrace_symbols.
+ * Fix logging to syslog.
+ * Allow SYSLOG_FACILITY to be modified with a new configure option called
+ --with-syslog-facility.
-o Simo Sorce <idra@samba.org>
- * Fixes for IDmap and Passdb backends.
+o Yasuma Takeda <yasuma@osstech.co.jp>
+ * BUG 5909: Fix MS-DFS on Vista clients.
+ * BUG 5944: Fix starting of nmbd with "socket address" set to "".
o Andrew Tridgell <tridge@samba.org>
- * Port ldb from the Samba 4 tree and add ldb group mapping plugin.
- * Move several file serving related tdb files to use the dbwrap
- API internally.
- * Cleanup the GPFS VFS plugin.
- * Experimental clustered file system support.
+ * Fix segfault on startup with trusted domains.
+ * Re-add "winbind:ignore domains" parameter.
o Jelmer Vernooij <jelmer@samba.org>
- * Implement NDR basic to support utilizing IDL files from Samba 4
- tree for general DCE/RPC parsing stubs.
-
+ * Avoid freeing fsp twice when opening new_file fails (Debian #431696).
######################################################################