9014cb5484b9fe550ce6547e05135626fbd5d179 to 871bd98faa07a1c6cf8615e8504f9287d6f4932d · Debian Samba Team / samba · GitLab

Commits on Source 151

3de773ef VERSION: Bump version up to 4.5.13...
Jul 12, 2017
911e3abd s3/smbd: let non_widelink_open() chdir() to directories directly
Jul 13, 2017
2cae38b0 selftest: add a test for accessing previous version of directories with snapdirseverywhere
Jul 13, 2017
82f9cbab s3:smbd: consistently use talloc_tos() memory for rpc_pipe_open_interface()
Jul 13, 2017
3a491cd6 krb5_wrap: add smb_krb5_free_data_contents() compat define (for v4-5)
Jul 13, 2017
941aaa99 werror: replace WERR_SETUP_NOT_JOINED with WERR_NERR_SETUPNOTJOINED in source3/libnet/libnet_join.c
Jul 13, 2017
0c8ae836 pidl:NDR/Parser: add missing {start,end}_flags() to ParseElementPrint()
Jul 13, 2017
7b3bfd5d librpc/ndr: align the definition of LIBNDR_STRING_FLAGS with currently defined flags
Jul 13, 2017
9bbacf57 librpc/ndr: add LIBNDR_FLAG_IS_SECRET handling
Jul 13, 2017
899c0d5e idl_types.h: add NDR_SECRET shortcut
Jul 13, 2017
208c7719 s3:librpc: let NDR_SECRETS depend on NDR_SECURITY
Jul 13, 2017
88abba9f s3:libads: remove unused kerberos_secrets_store_salting_principal()
Jul 13, 2017
5b962527 krb5_wrap: add smb_krb5_salt_principal()
Jul 13, 2017
cef8c677 krb5_wrap: add smb_krb5_salt_principal2data()
Jul 13, 2017
77980add s3:libnet_join: remove dead code from libnet_join_connect_ads()
Jul 13, 2017
35b6d50c s3:libnet_join: calculate r->out.account_name in libnet_join_pre_processing()
Jul 13, 2017
d68b34ba s3:libnet_join.idl: return the domain_guid in libnet_JoinCtx
Jul 13, 2017
f18c0caf s3:libnet_join: remember the domain_guid for AD domains
Jul 13, 2017
18cd9780 s3:libnet_join.idl: add krb5_salt to libnet_JoinCtx
Jul 13, 2017
9d818ce2 s3:libnet_join: remember r->out.krb5_salt in libnet_join_derive_salting_principal()
Jul 13, 2017
4765cb4c s3:libnet_join: move kerberos_secrets_store_des_salt() out of...
Jul 13, 2017
7110ea36 s3:libnet_join: split libnet_join_post_processing_ads() into modify/sync
Jul 13, 2017
a2102896 s3:libnet_join: call do_JoinConfig() after we did remote changes on the server
Jul 13, 2017
00a2ce6f s3:libnet_join: move libnet_join_joindomain_store_secrets() to libnet_join_post_processing()
Jul 13, 2017
87b27a5b s3:libnet_join: move kerberos_secrets_store_des_salt() to libnet_join_joindomain_store_secrets()
Jul 13, 2017
0f4d1818 s3:libads: remove kerberos_secrets_fetch_salting_principal() fallback
Jul 13, 2017
2ef7d5ab s3:libads: provide a simpler kerberos_fetch_salt_princ() function
Jul 13, 2017
0aa6bfde s3:gse_krb5: simplify fill_keytab_from_password() by using kerberos_fetch_salt_princ()
Jul 13, 2017
aa2f79be s3:libnet: make use of kerberos_secrets_fetch_salt_princ()
Jul 13, 2017
24478a55 s3:libads: make use of kerberos_secrets_fetch_salt_princ() in ads_keytab_add_entry()
Jul 13, 2017
701361c6 s3:libads: remove unused kerberos_fetch_salt_princ_for_host_princ()
Jul 13, 2017
fd161f15 s3:secrets: move kerberos_secrets_*salt related functions to machine_account_secrets.c
Jul 13, 2017
de0f7301 s3:secrets: rework des_salt_key() to take the realm as argument
Jul 13, 2017
ec6b9392 s3:secrets: split out a domain_guid_keystr() function
Jul 13, 2017
0a363257 s3:secrets: add some const to secrets_store_domain_guid()
Jul 13, 2017
f30adda2 s3:secrets: make use of des_salt_key() in secrets_store_machine_pw_sync()
Jul 13, 2017
f5dc61c9 s3:secrets: rename secrets_delete() to secrets_delete_entry()
Jul 13, 2017
1bbefc1c s3:secrets: re-add secrets_delete() helper to simplify deleting optional keys
Jul 13, 2017
96319f6d s3:secrets: make use of secrets_delete() in secrets_store_machine_pw_sync()
Jul 13, 2017
fdbf0dee s3:secrets: let secrets_store_machine_pw_sync() delete the des_salt_key when there's no value
Jul 13, 2017
a920733c s3:secrets: replace secrets_delete_prev_machine_password() by secrets_delete()
Jul 13, 2017
04384a47 s3:secrets: rewrite secrets_delete_machine_password_ex() using helper variables
Jul 13, 2017
64b39196 s3:secrets: let secrets_delete_machine_password_ex() remove SID and GUID too
Jul 13, 2017
3c3765fb s3:secrets: let secrets_delete_machine_password_ex() also remove the des_salt key
Jul 13, 2017
9afd00e7 s3:secrets: use secrets_delete for all keys in secrets_delete_machine_password_ex()
Jul 13, 2017
c1d6f18d s3:trusts_util: pass dcname to trust_pw_change()
Jul 13, 2017
09461fe4 libcli/auth: pass an array of nt_hashes to netlogon_creds_cli_auth*()
Jul 13, 2017
0c7de3ca libcli/auth: add const to set_pw_in_buffer()
Jul 13, 2017
399945b4 libcli/auth: pass the cleartext blob to netlogon_creds_cli_ServerPasswordSet*()
Jul 13, 2017
1e5489d9 s3:trusts_util: also pass the previous_nt_hash to netlogon_creds_cli_auth()
Jul 13, 2017
e635a4fb lsa.idl: make lsa_DnsDomainInfo [public]
Jul 13, 2017
19addd11 netlogon.idl: make netr_TrustFlags [public]
Jul 13, 2017
4d666520 netlogon.idl: use lsa_TrustType and lsa_TrustAttributes in netr_trust_extension
Jul 13, 2017
97b72e3f secrets.idl: add secrets_domain_info that will be used in secrets.tdb for machine account trusts
Jul 13, 2017
f3da2954 s3:secrets: add infrastructure to use secrets_domain_infoB to store credentials
Jul 13, 2017
d9a23941 net: add "net primarytrust dumpinfo" command that dumps the details of the workstation trust
Jul 13, 2017
75a05ad5 s3:libnet: make use of secrets_store_JoinCtx()
Jul 13, 2017
ab5109fd s3:trusts_util: make use the workstation password change more robust
Jul 13, 2017
7d86014e net: make use of secrets_*_password_change() for "net changesecretpw"
Jul 13, 2017
ad1e456f s3:libads: make use of secrets_*_password_change() in ads_change_trust_account_password()
Jul 13, 2017
6c728cc3 s3:secrets: remove unused secrets_store_[prev_]machine_password()
Jul 13, 2017
65120599 selftest:Samba3: call "net primarytrust dumpinfo" setup_nt4_member() after the join
Jul 13, 2017
35cba471 vfs_fruit: add fruit:model = <modelname> parametric option
Jul 24, 2017
dbb28145 vfs_fruit: don't use MS NFS ACEs with Windows clients
Jul 24, 2017
56593285 s3/notifyd: ensure notifyd doesn't return from smbd_notifyd_init
Jul 24, 2017
5d740e45 s3: libsmb: Fix use-after-free when accessing pointer *p.
Jul 24, 2017
cfa8c189 s3: smbd: Fix a read after free if a chained SMB1 call goes async.
Jul 25, 2017
3475d11f vfs_ceph: fix cephwrap_chdir()
Jul 25, 2017
9792ec26 s3: libsmb: Reverse sense of 'clear all attributes', ignore attribute change in SMB2 to match SMB1.
Aug 14, 2017
5b3f0317 s3/smbd: handling of failed DOS attributes reading
Aug 14, 2017
c493d8e6 s3/smbd: handle EACCES when fetching DOS attributes from xattr
Aug 14, 2017
ad113e07 vfs_gpfs: handle EACCES when fetching DOS attributes from xattr
Aug 14, 2017
bfa7ac0a s3: libsmbclient: Fix cli_setpathinfo_basic() to treat mode == -1 as no change.
Aug 14, 2017
a6f4924b s3: libsmb: Add cli_smb2_setpathinfo(), to be called by cli_setpathinfo_basic().
Aug 14, 2017
57f129b4 s3: libsmb: Implement cli_smb2_setatr() by calling cli_smb2_setpathinfo().
Aug 14, 2017
715e1c91 s3: torture: Add a test for cli_setpathinfo_basic() to smbtorture3.
Aug 14, 2017
da22be91 vfs_streams_xattr: invalidate stat info if xattr was not found
Aug 14, 2017
c6422830 vfs_streams_xattr: remove all uses of fd, use name based functions
Aug 14, 2017
10b04e9b vfs_streams_xattr: remove fsp argument from get_xattr_size()
Aug 14, 2017
62c97196 vfs_streams_xattr: always pass NULL as fsp arg to get_ea_value()
Aug 14, 2017
f7e96aed vfs_streams_xattr: implement all missing handle based VFS functions
Aug 14, 2017
38d8b62d vfs_streams_xattr: return a fake fd in streams_xattr_open()
Aug 14, 2017
c03af9fc s4/torture: reproducer for kernel oplocks issue with streams
Aug 14, 2017
12c818b6 s4/torture: additional tests for kernel-oplocks
Aug 14, 2017
d6c99162 vfs_fruit: use path based setxattr call in ad_fset()
Aug 14, 2017
379dbb5f vfs_fruit: don't open basefile in ad_open() and simplify API
Aug 14, 2017
b559efc4 vfs_fruit: return fake pipe fd in fruit_open_meta_netatalk()
Aug 14, 2017
2339d4bc vfs_fruit: factor out common code from ad_get() and ad_fget()
Aug 14, 2017
0247ece5 WHATSNEW: Add release notes for Samba 4.5.13.
Aug 30, 2017
3c9bc040 VERSION: Disable GIT_SNAPSHOTS for the 4.5.13 release.
Aug 30, 2017
5c645ed6 VERSION: Bump version up to 4.5.14...
Aug 30, 2017
f14a94b5 CVE-2017-12150: s3:lib: get_cmdline_auth_info_signing_state smb_encrypt SMB_SIGNING_REQUIRED
Sep 04, 2017
f82c2354 CVE-2017-12150: s3:pylibsmb: make use of SMB_SIGNING_DEFAULT for...
Sep 04, 2017
5d296e6e CVE-2017-12150: libgpo: make use of SMB_SIGNING_REQUIRED in gpo_connect_server()
Sep 04, 2017
dc24ef0f CVE-2017-12150: auth/credentials: cli_credentials_authentication_requested()...
Sep 04, 2017
f30ea844 CVE-2017-12150: libcli/smb: add smbXcli_conn_signing_mandatory()
Sep 04, 2017
609e6b09 CVE-2017-12150: s3:libsmb: only fallback to anonymous if authentication was not requested
Sep 04, 2017
282a1d12 CVE-2017-12151: s3:libsmb: add cli_state_is_encryption_on() helper function
Sep 04, 2017
157f2a70 CVE-2017-12151: s3:libsmb: make use of cli_state_is_encryption_on()
Sep 04, 2017
a43b36f5 CVE-2017-12163: s3:smbd: Prevent client short SMB1 write from writing server memory to file.
Sep 12, 2017

51 additional commits have been omitted to prevent performance issues.