Skip to content
Snippets Groups Projects

Compare revisions

Changes are shown as if the source revision was being merged into the target revision. Learn more about comparing revisions.

Source

Select target project
No results found

Target

Select target project
  • lts-team/packages/samba
  • thctlo/samba-lintianfix
  • arnaudr/samba
  • jrwren/samba
  • paride/samba
  • athos/samba
  • henrich/samba
  • cnotin/samba
  • mimi89999/samba
  • samba-team/samba
  • ahasenack/samba
  • jrtc27/samba
  • noel/samba
13 results
Show changes
Commits on Source (47)
Showing
with 217 additions and 69 deletions
......@@ -25,7 +25,7 @@
########################################################
SAMBA_VERSION_MAJOR=4
SAMBA_VERSION_MINOR=18
SAMBA_VERSION_RELEASE=1
SAMBA_VERSION_RELEASE=2
########################################################
# If a official release has a serious bug #
......
==============================
Release Notes for Samba 4.18.2
April 19, 2023
==============================
This is the latest stable release of the Samba 4.18 release series.
Changes since 4.18.1
--------------------
o Jeremy Allison <jra@samba.org>
* BUG 15302: Log flood: smbd_calculate_access_mask_fsp: Access denied:
message level should be lower.
* BUG 15306: Floating point exception (FPE) via cli_pull_send at
source3/libsmb/clireadwrite.c.
o Andrew Bartlett <abartlet@samba.org>
* BUG 15328: test_tstream_more_tcp_user_timeout_spin fails intermittently on
Rackspace GitLab runners.
* BUG 15329: Reduce flapping of ridalloc test.
* BUG 15351: large_ldap test is unreliable.
o Ralph Boehme <slow@samba.org>
* BUG 15143: New filename parser doesn't check veto files smb.conf parameter.
* BUG 15354: mdssvc may crash when initializing.
o Volker Lendecke <vl@samba.org>
* BUG 15313: large directory optimization broken for non-lcomp path elements.
* BUG 15357: streams_depot fails to create streams.
* BUG 15358: shadow_copy2 and streams_depot don't play well together.
o Rob van der Linde <rob@catalyst.net.nz>
* BUG 15316: Flapping tests in samba_tool_drs_show_repl.py.
o Stefan Metzmacher <metze@samba.org>
* BUG 15317: winbindd idmap child contacts the domain controller without a
need.
* BUG 15318: idmap_autorid may fail to map sids of trusted domains for the
first time.
* BUG 15319: idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings.
* BUG 15323: net ads search -P doesn't work against servers in other domains.
* BUG 15353: Temporary smbXsrv_tcon_global.tdb can't be parsed.
o Joseph Sutton <josephsutton@catalyst.net.nz>
* BUG 15316: Flapping tests in samba_tool_drs_show_repl.py.
* BUG 15343: Tests use depricated and removed methods like
assertRegexpMatches.
#######################################
Reporting bugs & Development Discussion
#######################################
Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical:matrix.org matrix room, or
#samba-technical IRC channel on irc.libera.chat.
If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored. All bug reports should
be filed under the Samba 4.1 and newer product in the project's Bugzilla
database (https://bugzilla.samba.org/).
======================================================================
== Our Code, Our Bugs, Our Responsibility.
== The Samba Team
======================================================================
Release notes for older releases follow:
----------------------------------------
==============================
Release Notes for Samba 4.18.1
March 29, 2023
......@@ -65,8 +139,7 @@ database (https://bugzilla.samba.org/).
======================================================================
Release notes for older releases follow:
----------------------------------------
----------------------------------------------------------------------
==============================
Release Notes for Samba 4.18.0
March 08, 2023
......
......@@ -2,12 +2,12 @@
.\" Title: ctdb-etcd
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\" Date: 03/29/2023
.\" Date: 04/19/2023
.\" Manual: CTDB - clustered TDB database
.\" Source: ctdb
.\" Language: English
.\"
.TH "CTDB\-ETCD" "7" "03/29/2023" "ctdb" "CTDB \- clustered TDB database"
.TH "CTDB\-ETCD" "7" "04/19/2023" "ctdb" "CTDB \- clustered TDB database"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
......
......@@ -2,12 +2,12 @@
.\" Title: ctdb-script.options
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\" Date: 03/29/2023
.\" Date: 04/19/2023
.\" Manual: CTDB - clustered TDB database
.\" Source: ctdb
.\" Language: English
.\"
.TH "CTDB\-SCRIPT\&.OPTIO" "5" "03/29/2023" "ctdb" "CTDB \- clustered TDB database"
.TH "CTDB\-SCRIPT\&.OPTIO" "5" "04/19/2023" "ctdb" "CTDB \- clustered TDB database"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
......
......@@ -2,12 +2,12 @@
.\" Title: ctdb-statistics
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\" Date: 03/29/2023
.\" Date: 04/19/2023
.\" Manual: CTDB - clustered TDB database
.\" Source: ctdb
.\" Language: English
.\"
.TH "CTDB\-STATISTICS" "7" "03/29/2023" "ctdb" "CTDB \- clustered TDB database"
.TH "CTDB\-STATISTICS" "7" "04/19/2023" "ctdb" "CTDB \- clustered TDB database"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
......
......@@ -2,12 +2,12 @@
.\" Title: ctdb-tunables
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\" Date: 03/29/2023
.\" Date: 04/19/2023
.\" Manual: CTDB - clustered TDB database
.\" Source: ctdb
.\" Language: English
.\"
.TH "CTDB\-TUNABLES" "7" "03/29/2023" "ctdb" "CTDB \- clustered TDB database"
.TH "CTDB\-TUNABLES" "7" "04/19/2023" "ctdb" "CTDB \- clustered TDB database"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
......
......@@ -2,12 +2,12 @@
.\" Title: ctdb
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\" Date: 03/29/2023
.\" Date: 04/19/2023
.\" Manual: CTDB - clustered TDB database
.\" Source: ctdb
.\" Language: English
.\"
.TH "CTDB" "1" "03/29/2023" "ctdb" "CTDB \- clustered TDB database"
.TH "CTDB" "1" "04/19/2023" "ctdb" "CTDB \- clustered TDB database"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
......
......@@ -2,12 +2,12 @@
.\" Title: ctdb
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\" Date: 03/29/2023
.\" Date: 04/19/2023
.\" Manual: CTDB - clustered TDB database
.\" Source: ctdb
.\" Language: English
.\"
.TH "CTDB" "7" "03/29/2023" "ctdb" "CTDB \- clustered TDB database"
.TH "CTDB" "7" "04/19/2023" "ctdb" "CTDB \- clustered TDB database"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
......
......@@ -2,12 +2,12 @@
.\" Title: ctdb.conf
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\" Date: 03/29/2023
.\" Date: 04/19/2023
.\" Manual: CTDB - clustered TDB database
.\" Source: ctdb
.\" Language: English
.\"
.TH "CTDB\&.CONF" "5" "03/29/2023" "ctdb" "CTDB \- clustered TDB database"
.TH "CTDB\&.CONF" "5" "04/19/2023" "ctdb" "CTDB \- clustered TDB database"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
......
......@@ -2,12 +2,12 @@
.\" Title: ctdb.sysconfig
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\" Date: 03/29/2023
.\" Date: 04/19/2023
.\" Manual: CTDB - clustered TDB database
.\" Source: ctdb
.\" Language: English
.\"
.TH "CTDB\&.SYSCONFIG" "5" "03/29/2023" "ctdb" "CTDB \- clustered TDB database"
.TH "CTDB\&.SYSCONFIG" "5" "04/19/2023" "ctdb" "CTDB \- clustered TDB database"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
......
......@@ -2,12 +2,12 @@
.\" Title: ctdb_diagnostics
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\" Date: 03/29/2023
.\" Date: 04/19/2023
.\" Manual: CTDB - clustered TDB database
.\" Source: ctdb
.\" Language: English
.\"
.TH "CTDB_DIAGNOSTICS" "1" "03/29/2023" "ctdb" "CTDB \- clustered TDB database"
.TH "CTDB_DIAGNOSTICS" "1" "04/19/2023" "ctdb" "CTDB \- clustered TDB database"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
......
......@@ -2,12 +2,12 @@
.\" Title: Ceph RADOS Mutex
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\" Date: 03/29/2023
.\" Date: 04/19/2023
.\" Manual: CTDB - clustered TDB database
.\" Source: ctdb
.\" Language: English
.\"
.TH "CEPH RADOS MUTEX" "7" "03/29/2023" "ctdb" "CTDB \- clustered TDB database"
.TH "CEPH RADOS MUTEX" "7" "04/19/2023" "ctdb" "CTDB \- clustered TDB database"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
......
......@@ -2,12 +2,12 @@
.\" Title: ctdbd
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\" Date: 03/29/2023
.\" Date: 04/19/2023
.\" Manual: CTDB - clustered TDB database
.\" Source: ctdb
.\" Language: English
.\"
.TH "CTDBD" "1" "03/29/2023" "ctdb" "CTDB \- clustered TDB database"
.TH "CTDBD" "1" "04/19/2023" "ctdb" "CTDB \- clustered TDB database"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
......
......@@ -2,12 +2,12 @@
.\" Title: ltdbtool
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\" Date: 03/29/2023
.\" Date: 04/19/2023
.\" Manual: CTDB - clustered TDB database
.\" Source: ctdb
.\" Language: English
.\"
.TH "LTDBTOOL" "1" "03/29/2023" "ctdb" "CTDB \- clustered TDB database"
.TH "LTDBTOOL" "1" "04/19/2023" "ctdb" "CTDB \- clustered TDB database"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
......
......@@ -2,12 +2,12 @@
.\" Title: onnode
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\" Date: 03/29/2023
.\" Date: 04/19/2023
.\" Manual: CTDB - clustered TDB database
.\" Source: ctdb
.\" Language: English
.\"
.TH "ONNODE" "1" "03/29/2023" "ctdb" "CTDB \- clustered TDB database"
.TH "ONNODE" "1" "04/19/2023" "ctdb" "CTDB \- clustered TDB database"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
......
......@@ -2,12 +2,12 @@
.\" Title: ping_pong
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\" Date: 03/29/2023
.\" Date: 04/19/2023
.\" Manual: CTDB - clustered TDB database
.\" Source: ctdb
.\" Language: English
.\"
.TH "PING_PONG" "1" "03/29/2023" "ctdb" "CTDB \- clustered TDB database"
.TH "PING_PONG" "1" "04/19/2023" "ctdb" "CTDB \- clustered TDB database"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
......
samba (2:4.18.2+dfsg-1) experimental; urgency=medium
* new upstream stable/bugfix release:
- https://bugzilla.samba.org/show_bug.cgi?id=15302
Log flood: smbd_calculate_access_mask_fsp: Access denied:
message level should be lower.
- https://bugzilla.samba.org/show_bug.cgi?id=15306
Floating point exception (FPE) via cli_pull_send
at source3/libsmb/clireadwrite.c.
- https://bugzilla.samba.org/show_bug.cgi?id=15328
test_tstream_more_tcp_user_timeout_spin fails intermittently
on Rackspace GitLab runners.
- https://bugzilla.samba.org/show_bug.cgi?id=15329
Reduce flapping of ridalloc test.
- https://bugzilla.samba.org/show_bug.cgi?id=15351
large_ldap test is unreliable.
- https://bugzilla.samba.org/show_bug.cgi?id=15143
New filename parser doesn't check veto files smb.conf parameter.
- https://bugzilla.samba.org/show_bug.cgi?id=15354
mdssvc may crash when initializing.
- https://bugzilla.samba.org/show_bug.cgi?id=15313
large directory optimization broken for non-lcomp path elements.
- https://bugzilla.samba.org/show_bug.cgi?id=15357
streams_depot fails to create streams.
- https://bugzilla.samba.org/show_bug.cgi?id=15358
shadow_copy2 and streams_depot don't play well together.
- https://bugzilla.samba.org/show_bug.cgi?id=15316
Flapping tests in samba_tool_drs_show_repl.py.
- https://bugzilla.samba.org/show_bug.cgi?id=15317
winbindd idmap child contacts the domain controller without a need.
- https://bugzilla.samba.org/show_bug.cgi?id=15318
idmap_autorid may fail to map sids of trusted domains for the first time.
- https://bugzilla.samba.org/show_bug.cgi?id=15319
idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings.
- https://bugzilla.samba.org/show_bug.cgi?id=15323
net ads search -P doesn't work against servers in other domains.
- https://bugzilla.samba.org/show_bug.cgi?id=15353
Temporary smbXsrv_tcon_global.tdb can't be parsed.
- https://bugzilla.samba.org/show_bug.cgi?id=15316
Flapping tests in samba_tool_drs_show_repl.py.
- https://bugzilla.samba.org/show_bug.cgi?id=15343
Tests use depricated and removed methods like assertRegexpMatches.
* d/rules, d/libldb2.symbols; add ldb 2.6.2 version
* heimdal-to-support-KEYRING-ccache.patch: enable KEYRING in heimdal
(Closes: #1023609)
* d/control: build-depend on libkeyutils-dev
(it is pulled by some other dep, but better to be safe)
* -s3-smbd-open.c-smbd_calculate_access_mask_fsp-lower-.patch
(the change has been applied upstream)
-- Michael Tokarev <mjt@tls.msk.ru> Wed, 19 Apr 2023 14:02:49 +0300
samba (2:4.18.1+dfsg-1~exp1) experimental; urgency=high
* upstream stable/security/bugfix release, fixing the following issues:
......
......@@ -45,6 +45,7 @@ Build-Depends-Arch:
libicu-dev,
libjansson-dev,
libjson-perl,
libkeyutils-dev,
libkrb5-dev (>= 1.19.0~) <pkg.samba.mitkrb5>,
libldap2-dev,
liblmdb-dev,
......
From d76344ee0cefcf8adb42928537ba031dd585f797 Mon Sep 17 00:00:00 2001
From: Łukasz Stelmach <l.stelmach@samsung.com>
Date: Mon, 3 Apr 2023 10:07:30 +0200
Subject: Configure builtin heimdal to support KEYRING ccache
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Organization: Samsung R&D Institute Poland
Signed-off-by: Łukasz Stelmach <l.stelmach@samsung.com>
---
third_party/heimdal_build/wscript_build | 8 ++++++--
third_party/heimdal_build/wscript_configure | 2 ++
2 files changed, 8 insertions(+), 2 deletions(-)
diff --git a/third_party/heimdal_build/wscript_build b/third_party/heimdal_build/wscript_build
index 1518afe9ef4..8aea52b55f5 100644
--- a/third_party/heimdal_build/wscript_build
+++ b/third_party/heimdal_build/wscript_build
@@ -710,7 +710,7 @@ if not bld.CONFIG_SET("USING_SYSTEM_KRB5"):
get_port.c init_creds.c init_creds_pw.c
kcm.c keyblock.c keytab.c keytab_any.c
keytab_file.c keytab_memory.c
- keytab_keyfile.c krbhst.c log.c
+ keytab_keyfile.c krbhst.c krcache.c log.c
mcache.c misc.c mk_error.c mk_priv.c
mk_rep.c mk_req.c mk_req_ext.c
mit_glue.c net_read.c net_write.c n-fold.c padata.c pkinit.c pkinit-ec.c
@@ -726,10 +726,14 @@ if not bld.CONFIG_SET("USING_SYSTEM_KRB5"):
mk_cred.c kx509_err.c
k524_err.c krb_err.c k5e1_err.c''')] + ["../heimdal_build/krb5-glue.c"]
+ krb5_keyutils_dep = ''
+ if bld.CONFIG_SET('HAVE_KEYCTL_GET_PERSISTENT'):
+ krb5_keyutils_dep = ' keyutils'
+
HEIMDAL_LIBRARY('krb5', KRB5_SOURCE,
version_script='lib/krb5/version-script.map',
includes='../heimdal/lib/krb5 ../heimdal/lib/asn1 ../heimdal/include',
- deps='roken wind asn1 hx509 HEIMDAL_KX509_ASN1 hcrypto com_err HEIMDAL_CONFIG heimbase execinfo samba_intl HEIMDAL_IPC_CLIENT KRB5_CRYPTO',
+ deps='roken wind asn1 hx509 HEIMDAL_KX509_ASN1 hcrypto com_err HEIMDAL_CONFIG heimbase execinfo samba_intl HEIMDAL_IPC_CLIENT KRB5_CRYPTO' + krb5_keyutils_dep,
cflags=['-DLOCALSTATEDIR="/2"'] + bld.dynconfig_cflags(),
)
KRB5_PROTO_SOURCE = KRB5_SOURCE + ['lib/krb5/expand_path.c', 'lib/krb5/plugin.c', 'lib/krb5/context.c', 'lib/krb5/crypto.c']
diff --git a/third_party/heimdal_build/wscript_configure b/third_party/heimdal_build/wscript_configure
index a97a1b9baa8..36ba02d25ad 100644
--- a/third_party/heimdal_build/wscript_configure
+++ b/third_party/heimdal_build/wscript_configure
@@ -65,6 +65,8 @@ conf.DEFINE('HAVE_KRB5',1)
conf.CHECK_FUNCS('dirfd', headers='dirent.h')
conf.CHECK_DECLS('dirfd', reverse=True, headers='dirent.h')
conf.CHECK_STRUCTURE_MEMBER('DIR', 'dd_fd', define='HAVE_DIR_DD_FD', headers='dirent.h')
+conf.CHECK_FUNCS_IN('add_key keyctl_get_persistent', 'keyutils', headers='keyutils.h')
+conf.CHECK_SIZEOF('key_serial_t', headers='keyutils.h')
heimdal_no_error_flags = ['-Wno-error=discarded-qualifiers',
'-Wno-error=cast-qual',
--
2.30.2
From d1cfe6d143c5d6776cfa55efcd643c139b3a165f Mon Sep 17 00:00:00 2001
From: Michael Tokarev <mjt@tls.msk.ru>
Date: Wed, 8 Feb 2023 00:02:44 +0300
Subject: s3/smbd/open.c:smbd_calculate_access_mask_fsp: lower "rejected by share acces" message from ERR to DEBUG
Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
---
source3/smbd/open.c | 14 +++++++-------
1 file changed, 7 insertions(+), 7 deletions(-)
diff --git a/source3/smbd/open.c b/source3/smbd/open.c
index c24c55d6a76..73a087f94c3 100644
--- a/source3/smbd/open.c
+++ b/source3/smbd/open.c
@@ -3389,13 +3389,13 @@ NTSTATUS smbd_calculate_access_mask_fsp(struct files_struct *dirfsp,
rejected_share_access = access_mask & ~(fsp->conn->share_access);
if (rejected_share_access) {
- DBG_ERR("Access denied on file %s: "
- "rejected by share access mask[0x%08X] "
- "orig[0x%08X] mapped[0x%08X] reject[0x%08X]\n",
- fsp_str_dbg(fsp),
- fsp->conn->share_access,
- orig_access_mask, access_mask,
- rejected_share_access);
+ DBG_DEBUG("Access denied on file %s: "
+ "rejected by share access mask[0x%08X] "
+ "orig[0x%08X] mapped[0x%08X] reject[0x%08X]\n",
+ fsp_str_dbg(fsp),
+ fsp->conn->share_access,
+ orig_access_mask, access_mask,
+ rejected_share_access);
return NT_STATUS_ACCESS_DENIED;
}
--
2.30.2