[Pkg-samba-maint] r1255 - branches/etch/debian

[Christian Perrier]

Author: bubulle
Date: 2007-03-02 19:56:33 +0000 (Fri, 02 Mar 2007)
New Revision: 1255

Modified:
   branches/etch/debian/changelog
   branches/etch/debian/smb.conf
Log:
Commit in the etch branch


Modified: branches/etch/debian/changelog
===================================================================
--- branches/etch/debian/changelog	2007-03-02 19:56:06 UTC (rev 1254)
+++ branches/etch/debian/changelog	2007-03-02 19:56:33 UTC (rev 1255)
@@ -1,3 +1,11 @@
+samba (3.0.24-3) unstable; urgency=low
+
+  * Add commented "winbind enum*" settings in smb.conf
+    This will point users to these important settings which changed
+    their default behaviour between sarge and etch. Closes: #368251
+
+ -- Steve Langasek <vorlon at debian.org>  Mon,  5 Feb 2007 19:55:34 -0800
+
 samba (3.0.24-2) unstable; urgency=low
 
   * Re-upload with a proper .orig.tar.gz.

Modified: branches/etch/debian/smb.conf
===================================================================
--- branches/etch/debian/smb.conf	2007-03-02 19:56:06 UTC (rev 1254)
+++ branches/etch/debian/smb.conf	2007-03-02 19:56:33 UTC (rev 1255)
@@ -24,10 +24,10 @@
 ## Browsing/Identification ###
 
 # Change this to the workgroup/NT-domain name your Samba server will part of
-   workgroup = DEBIAN_FANS
+   workgroup = WORKGROUP
 
 # server string is the equivalent of the NT Description field
-   server string = %h server (Samba %v)
+   server string = %h server
 
 # Windows Internet Name Serving Support Section:
 # WINS Support - Tells the NMBD component of Samba to enable its WINS Server
@@ -204,6 +204,15 @@
 ;   idmap uid = 10000-20000
 ;   idmap gid = 10000-20000
 ;   template shell = /bin/bash
+;
+; The following was the default behaviour in sarge
+; but samba upstream reverted the default because it might induce
+; performance issues in large organizations
+; See #368251 for some of the consequences of *not* having
+; this setting and smb.conf(5) for all details
+;
+;   winbind enum groups = yes
+;   winbind enum users = yes
 
 #======================= Share Definitions =======================
 
@@ -223,6 +232,11 @@
 # create dirs. with group=rw permissions, set next parameter to 0775.
    directory mask = 0700
 
+# Restrict access to home directories 
+# to the one of the authenticated user
+# This might need tweaking when using external authentication schemes
+   valid users = %S
+
 # Un-comment the following and create the netlogon directory for Domain Logons
 # (you need to configure Samba to act as a domain controller too.)
 ;[netlogon]