[Pkg-samba-maint] [samba] branch upstream_4.5 updated (45f27f4 -> c97dcb7)
Mathieu Parent
sathieu at moszumanska.debian.org
Fri Mar 10 08:01:38 UTC 2017
This is an automated email from the git hooks/post-receive script.
sathieu pushed a change to branch upstream_4.5
in repository samba.
from 45f27f4 New upstream version 4.5.5+dfsg
new e8c06cb VERSION: Bump version up to 4.5.6...
new d760f75 s4:repl_meta_data: normalize rdn attribute name via the schema
new d9bad78 s3/rpc_server: shared rpc modules loading
new 98060ed s3/smbd: ensure global "smb encrypt = off" is effective for SMB 1 clients
new c2abca6 s3/smbd: ensure global "smb encrypt = off" is effective for SMB 3.1.1 clients
new ef266af s3/smbd: ensure global "smb encrypt = off" is effective for share with "smb encrypt = desired"
new 170cc06 docs: impact of a global "smb encrypt=off" on a share with "smb encrypt=required"
new 26ff06c selftest: disable SMB encryption in simpleserver environment
new ab6d010 selftest: add test for global "smb encrypt=off"
new 1eb3f3d s3/rpc_server: move rpc_modules.c to its own subsystem
new 2e7c776 s3:smbd: allow "server min protocol = SMB3_00" to go via "SMB 2.???" negprot
new 778d14c selftest/Samba3: use "server min protocol = SMB3_00" for "ktest"
new d5f233e vfs_fruit: checks wrong AAPL config state and so always uses readdirattr
new 44244bf s3: vfs: dirsort doesn't handle opendir of "." correctly.
new 5410367 smbd: Fix "map acl inherit" = yes
new 5f84242 s3: VFS: vfs_streams_xattr.c: Make streams_xattr_open() store the same path as streams_xattr_recheck().
new 78e4f07 ctdb-tests: Do not build mutex test if robust mutexes are not supported
new f4219b7 ctdb-tests: Use replace headers instead of system headers
new 1f29fb6 samba_dsdb: Use and maintain compatibleFeatures and requiredFeatures in @SAMBA_DSDB
new e91260c dbcheck: Do not regard old one-way-links as errors
new 93c86be dbcheck-links: Test that dbcheck against one-way links does not error
new 7b190e1 waf: backport finding of pkg-config
new 179e537 s3: smbd: Correctly canonicalize any incoming shadow copy path.
new 74af6ae s3: lib: Add canonicalize_absolute_path().
new ed1d7cb s3: lib: Fix two old, old bugs in set_conn_connectpath(), now in canonicalize_absolute_path().
new 7128ea6 s3: smbtorture: Add new local test LOCAL-CANONICALIZE-PATH
new 4c81c9b s3: smbd: Make set_conn_connectpath() call canonicalize_absolute_path().
new 9067d6b s3: VFS: shadow_copy2: Correctly initialize timestamp and stripped variables.
new aa3365b s3: VFS: shadow_copy2: Ensure pathnames for parameters are correctly relative and terminated.
new 254eb16 s3: VFS: shadow_copy2: Fix length comparison to ensure we don't overstep a length.
new 08ae59c s3: VFS: shadow_copy2: Add two new variables to the private data. Not yet used.
new 501ff03 s3: VFS: shadow_copy2: Add a wrapper function to call the original shadow_copy2_strip_snapshot().
new f87a8a8 s3: VFS: shadow_copy2: Change a parameter name.
new 21e16d7 s3: VFS: shadow_copy2: Add two currently unused functions to make pathnames absolute or relative to $cwd.
new 28a4f56 s3: VFS: shadow_copy2: Fix chdir to store off the needed private variables.
new f3b5b4c s3: VFS: Allow shadow_copy2_connectpath() to return the cached path derived from $cwd.
new 4bf9875 s3: VFS: Ensure shadow:format cannot contain a / path separator.
new debe3a3 s3: VFS: Add utility function check_for_converted_path().
new d417f2a s3: VFS: shadow_copy2: Fix module to work with variable current working directory.
new 5c21667 s3: VFS: shadow_copy2: Fix a memory leak in the connectpath function.
new f7c5f02 s3: VFS: shadow_copy2: Fix usage of saved_errno to only set errno on error.
new cef9a9b s3: VFS: Don't allow symlink, link or rename on already converted paths.
new ed83c31 ctdb-build: Install CTDB tests correctly from toplevel
new 1a73c19 s3:librpc: remove bigendian argument from dcerpc_pull_ncacn_packet()
new 7da2473 selftest: also run test base.createx_access against ad_dc
new 12dc552 s3/smbd: check for invalid access_mask smbd_calculate_access_mask()
new 8f60339 s3/rpc_server/mdssvc: add attribute "kMDItemContentType"
new fe31f48 s3-vfs: Only walk the directory once in open_and_sort_dir()
new e6eb880 s3: smbd: Don't loop infinitely on bad-symlink resolution.
new 23d35b6 s3: torture: Regression test for smbd trying to open an invalid symlink.
new 90a1908 ctdb-common: Fix use-after-free error in comm_fd_handler()
new e7856f0 ctdb-tests: Add more comm tests
new 4b3bda7 ctdb-scripts: Initialise CTDB_NFS_CALLOUT in statd-callout
new ce18ad3 libcli/auth: check E_md4hash() result in netlogon_creds_cli_ServerPasswordSet_send()
new aa4de8a libcli/auth: add netlogon_creds_cli_debug_string()
new b329412 lib/util: add generate_random_machine_password() function
new 70b7aca s3:libsmb: let trust_pw_change() debug more verbose information
new d17a9eb s3:libsmb: let trust_pw_change() verify the new password at the end.
new 0a76aed s3:libsmb: add trust_pw_new_value() helper function
new a9c7e6b s3:libsmb: use trust_pw_new_value() in trust_pw_change()
new c1f53ad s3:libads: use trust_pw_new_value() for krb5 machine passwords
new 7d8f679 s3:libnet_join: make use of trust_pw_new_value()
new 57c8e45 s3:net_rpc_trust: make use of trust_pw_new_value()
new e12b368 s3:include: remove unused DEFAULT_TRUST_ACCOUNT_PASSWORD_LENGTH
new f3f6dd6 s4:libcli/raw: remove unused DEFAULT_TRUST_ACCOUNT_PASSWORD_LENGTH
new df8d03f s4:libnet: make use of generate_random_machine_password()
new bdcda22 s4:dsdb: autogenerate a random utf16 buffer for krbtgt password resets.
new 8f437c6 python/samba: provision_dns_add_samba.ldif expects utf-16-le passwords
new f9effa5 python/samba: use an explicit .encode('utf-8') where we expect utf8 passwords
new 2599936 pyglue: add generate_random_machine_password() wrapper
new 7d35bd7 samba-tool:domain: use generate_random_machine_password() for trusted domains
new f5e4a09 samba-tool:domain: use generate_random_machine_password() for machine passwords
new 5934cda samba-tool:provision: use generate_random_machine_password() for machine passwords
new d394bf0 s4:scripting: use generate_random_machine_password() for machine passwords
new 7ad4e82 krb5_wrap: use our own code to calculate the ENCTYPE_ARCFOUR_HMAC key
new d64d185 librpc/rpc: fix regression in NT_STATUS_RPC_ENUM_VALUE_OUT_OF_RANGE error mapping
new cf37b8a libcli/auth: use the correct creds value against servers without LogonSamLogonEx
new 81613c1 vfs_streams_xattr: use fsp, not base_fsp
new 2158bad s3:winbindd: make sure cm_prepare_connection() only returns OK with a valid tree connect
new abb51ac Revert "s3-winbind: Fix schannel connections against trusted domain DCs"
new 41a4da3 s3:winbindd: try a NETLOGON connection with noauth over NCACN_NP against trusted domains.
new b241315 auth/credentials: try to use kerberos with the machine account unless we're in an AD domain
new 18c1e21 s3:winbindd: fix the valid usage anonymous smb authentication
new 3b423b0 s3:passdb: use cli_credentials_set_kerberos_state() for trusts in pdb_get_trust_credentials()
new 2b55ed3 s3:winbindd: add more debugging to cm_prepare_connection()
new f6eb2a7 s3:winbindd: rely on the kerberos_state from pdb_get_trust_credentials()
new 3c1073e s3:libads: add more debugging to ads_sasl_spnego_bind()
new de16359 s3:winbindd: allow a fallback to NTLMSSP for LDAP connections
new 4f3f492 s3:idmap_ad: make use of pdb_get_trust_credentials() to get the machine account creds
new b13e9a9 tests/dbcheck: Add a test for two live objects, with a dangling backlink
new 9f5b85e tests/dbcheck: Add a test for two live objects, with a dangling forward link
new c479054 dbchecker: Stop ignoring linked cases where both objects are alive
new 6f742ed selftest: don't run vfs_fruit tests against ad_dc env
new 6e77927 s3/includes: add FinderInfo offset define to MacExtensions.h
new 5c1d645 vfs_streams_xattr: call SMB_VFS_OPEN with smb_fname_base
new 3ad2b22 vfs_streams_xattr: use SMB_VFS_NEXT_OPEN and CLOSE
new 142b11f vfs_catia: run translation on all handle based VFS functions
new 8374fde vfs_catia: add catia_readdir_attr
new 8385932 vfs_catia: add catia_(g|s)et_dos_attributes
new dd990c3 vfs_fruit: fix fruit_pread with metadata=stream
new 74c6b42 vfs_fruit: fix fruit_ftruncate with metadata=stream
new 8ac4a90 vfs_fruit: rename empty_finderinfo() and make it more robust
new 55897bb vfs_fruit: fix fruit_pwrite() with metadata=stream
new 1e26b65 vfs_fruit: replace unsafe ad_entry macro with a function
new 20acbbf vfs_fruit: refactor fruit_open_meta()
new 5ec96fb vfs_fruit: correct fruit_open_meta_stream() implementation
new eee258a vfs_fruit: refactor fruit_stat_meta()
new 36f814b vfs_fruit: correct fruit_stat_meta_stream() implementation
new f9cffd2 vfs_fruit: update_btime() is only needed for metadata=netatalk
new 2b0d683 vfs_fruit: refactor readdir_attr_meta()
new edb25c5 vfs_fruit: correct readdir_attr_meta_finderi_stream() implementation
new e271fd9 vfs_fruit: fix fruit_rename() for the fruit:resource!=file case
new 62ce4a1 vfs_fruit: refactor fruit_unlink()
new 6f92b8d vfs_fruit: fix fruit_chmod() for the fruit:resource!=file case
new a79800d vfs_fruit: fix fruit_chown() for the fruit:resource!=file case
new c7fdc90 vfs_fruit: fix fruit_rmdir() for the fruit:resource!=file case
new e19b247 vfs_fruit: in fruit_rmdir() check ._ files before deleting them
new 3142a7c vfs_fruit: refactor fruit_open_rsrc()
new b68ee54 vfs_fruit: refactor fruit_stat_rsrc()
new e1fb128 vfs_fruit: add fruit_stat_rsrc_stream() implementation
new 949b8cb vfs_fruit: add fruit_stat_rsrc_xattr() implementation
new a964f03 vfs_fruit: refactor fruit_streaminfo()
new 296cb1e vfs_fruit: fix fruit_ntimes() for the fruit:metadata!=netatalk case
new c8fdd5f vfs_fruit: refactor fruit_ftruncate() and fix stream case
new eb2ee5b vfs_fruit: refactor readdir_attr_macmeta() resource fork size
new ad0ff00 vfs_fruit: use SMB_VFS_NEXT_OPEN in two places
new 5452d23 vfs_fruit: remove base_fsp name translation
new bc54aa8 vfs_fruit: fix fruit_check_access()
new f087204 selftest: disable vfs_fruit tests
new 6254902 vfs_fruit: rework struct adouble API
new e7701ed vfs_fruit: refactor fruit_open and use new adouble API
new 93815fe vfs_fruit: refactor fruit_pread and fruit_pwrite and use new adouble API
new 1bfb932 vfs_fruit: refactor fruit_fstat and use new adouble API
new 61147af vfs_fruit: use fio in fruit_fallocate
new abfcab1 vfs_fruit: refactor fruit_ftruncate and use new adouble API
new 17c7872 selftest: reenable vfs_fruit tests
new ef95fde selftest: move vfs_fruit tests that require "fruit:metadata=netatalk" to vfs.fruit_netatalk
new 47c0e32 selftest: run vfs_fruit tests against share with fruit:metadata=stream
new 9fec738 selftest: also run vfs_fruit tests with streams_depot
new 44cf7cc selftest: add description to vfs_fruit testsuites
new 8795723 s4/torture: vfs_fruit: add test_null_afpinfo test
new f5d8f58 s4/torture: vfs_fruit: test deleting a file with resource fork
new 66ff93b s4/torture: add a vfs_fruit renaming test with open rsrc fork
new 22e8146 lib/torture: add torture_assert_mem_equal_goto
new 9b7b2c2 s4/torture: add test for AAPL find with name with illegal NTFS characters
new 5b18aea docs/vfs_fruit: document known limitations with fruit:encoding=native
new af6a0f8 s4/torture: change shares in used torture_suite_add_2ns_smb2_test()
new a01b976 selftest: add shares without vfs_fruit for the vfs_fruit tests
new 39c71b8 vfs_fruit: ignore or delete invalid AFP_AfpInfo streams
new 49e8aa8 s4/torture: vfs_fruit: test invalid AFPINFO_STREAM_NAME
new 161974b vfs_fruit: use stat info from base_fsp
new 8d04b53 s4/torture: vfs_fruit: add stream with illegal ntfs characters to copyile test
new 9a6a9d1 vfs_fruit: only veto AppleDouble files with fruit:resource=file
new 72da210 vfs_fruit: enabling AAPL extensions must be a global switch
new fb15055 s3:winbindd: fix endless forest trust scan
new f599b6f s3: smbd: Restart reading the incoming SMB2 fd when the send queue is drained.
new 4f1ad9a ldb-samba: remember the error string of a failing bind in ildb_connect()
new 89f2fd3 s4:ldap_server: match windows in the error messages of failing LDAP Bind requests
new 61ecd4e WHATSNEW: Clarify entry.
new 4f40c35 WHATSNEW: Add release notes for Samba 4.5.6.
new 4a7d548 VERSION: Disable GIT_SNAPSHOTS for the 4.5.6 release.
new c97dcb7 New upstream version 4.5.6+dfsg
The 162 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.
Summary of changes:
VERSION | 2 +-
WHATSNEW.txt | 113 +-
auth/credentials/credentials_secrets.c | 17 +-
ctdb/common/comm.c | 46 +-
ctdb/config/statd-callout | 1 +
ctdb/tests/cunit/comm_test_001.sh | 10 +-
ctdb/tests/src/comm_test.c | 309 +-
ctdb/tests/src/test_mutex_raw.c | 24 +-
ctdb/wscript | 16 +-
docs-xml/manpages/vfs_fruit.8.xml | 20 +-
docs-xml/smbdotconf/security/smbencrypt.xml | 6 +-
docs/manpages/cifsdd.8 | 4 +-
docs/manpages/dbwrap_tool.1 | 4 +-
docs/manpages/eventlogadm.8 | 4 +-
docs/manpages/findsmb.1 | 4 +-
docs/manpages/idmap_ad.8 | 4 +-
docs/manpages/idmap_autorid.8 | 4 +-
docs/manpages/idmap_hash.8 | 4 +-
docs/manpages/idmap_ldap.8 | 4 +-
docs/manpages/idmap_nss.8 | 4 +-
docs/manpages/idmap_rfc2307.8 | 4 +-
docs/manpages/idmap_rid.8 | 4 +-
docs/manpages/idmap_script.8 | 4 +-
docs/manpages/idmap_tdb.8 | 4 +-
docs/manpages/idmap_tdb2.8 | 4 +-
docs/manpages/libsmbclient.7 | 4 +-
docs/manpages/lmhosts.5 | 4 +-
docs/manpages/log2pcap.1 | 4 +-
docs/manpages/net.8 | 4 +-
docs/manpages/nmbd.8 | 4 +-
docs/manpages/nmblookup.1 | 4 +-
docs/manpages/ntlm_auth.1 | 4 +-
docs/manpages/pam_winbind.8 | 4 +-
docs/manpages/pam_winbind.conf.5 | 4 +-
docs/manpages/pdbedit.8 | 4 +-
docs/manpages/profiles.1 | 4 +-
docs/manpages/rpcclient.1 | 4 +-
docs/manpages/samba-regedit.8 | 4 +-
docs/manpages/samba-tool.8 | 4 +-
docs/manpages/samba.7 | 4 +-
docs/manpages/samba.8 | 4 +-
docs/manpages/sharesec.1 | 4 +-
docs/manpages/smb.conf.5 | 8 +-
docs/manpages/smbcacls.1 | 4 +-
docs/manpages/smbclient.1 | 4 +-
docs/manpages/smbcontrol.1 | 4 +-
docs/manpages/smbcquotas.1 | 4 +-
docs/manpages/smbd.8 | 4 +-
docs/manpages/smbget.1 | 4 +-
docs/manpages/smbgetrc.5 | 4 +-
docs/manpages/smbpasswd.5 | 4 +-
docs/manpages/smbpasswd.8 | 4 +-
docs/manpages/smbspool.8 | 4 +-
docs/manpages/smbspool_krb5_wrapper.8 | 4 +-
docs/manpages/smbstatus.1 | 4 +-
docs/manpages/smbtar.1 | 4 +-
docs/manpages/smbtree.1 | 4 +-
docs/manpages/testparm.1 | 4 +-
docs/manpages/vfs_acl_tdb.8 | 4 +-
docs/manpages/vfs_acl_xattr.8 | 4 +-
docs/manpages/vfs_aio_fork.8 | 4 +-
docs/manpages/vfs_aio_linux.8 | 4 +-
docs/manpages/vfs_aio_pthread.8 | 4 +-
docs/manpages/vfs_audit.8 | 4 +-
docs/manpages/vfs_btrfs.8 | 4 +-
docs/manpages/vfs_cacheprime.8 | 4 +-
docs/manpages/vfs_cap.8 | 4 +-
docs/manpages/vfs_catia.8 | 4 +-
docs/manpages/vfs_ceph.8 | 4 +-
docs/manpages/vfs_commit.8 | 4 +-
docs/manpages/vfs_crossrename.8 | 4 +-
docs/manpages/vfs_default_quota.8 | 4 +-
docs/manpages/vfs_dirsort.8 | 4 +-
docs/manpages/vfs_extd_audit.8 | 4 +-
docs/manpages/vfs_fake_perms.8 | 4 +-
docs/manpages/vfs_fileid.8 | 4 +-
docs/manpages/vfs_fruit.8 | 24 +-
docs/manpages/vfs_full_audit.8 | 4 +-
docs/manpages/vfs_glusterfs.8 | 4 +-
docs/manpages/vfs_gpfs.8 | 4 +-
docs/manpages/vfs_linux_xfs_sgid.8 | 4 +-
docs/manpages/vfs_media_harmony.8 | 4 +-
docs/manpages/vfs_netatalk.8 | 4 +-
docs/manpages/vfs_offline.8 | 4 +-
docs/manpages/vfs_prealloc.8 | 4 +-
docs/manpages/vfs_preopen.8 | 4 +-
docs/manpages/vfs_readahead.8 | 4 +-
docs/manpages/vfs_readonly.8 | 4 +-
docs/manpages/vfs_recycle.8 | 4 +-
docs/manpages/vfs_shadow_copy.8 | 4 +-
docs/manpages/vfs_shadow_copy2.8 | 4 +-
docs/manpages/vfs_shell_snap.8 | 4 +-
docs/manpages/vfs_snapper.8 | 4 +-
docs/manpages/vfs_streams_depot.8 | 4 +-
docs/manpages/vfs_streams_xattr.8 | 4 +-
docs/manpages/vfs_syncops.8 | 4 +-
docs/manpages/vfs_time_audit.8 | 4 +-
docs/manpages/vfs_tsmsm.8 | 4 +-
docs/manpages/vfs_unityed_media.8 | 4 +-
docs/manpages/vfs_worm.8 | 4 +-
docs/manpages/vfs_xattr_tdb.8 | 4 +-
docs/manpages/vfs_zfsacl.8 | 4 +-
docs/manpages/vfstest.1 | 4 +-
docs/manpages/wbinfo.1 | 4 +-
docs/manpages/winbind_krb5_locator.7 | 4 +-
docs/manpages/winbindd.8 | 4 +-
lib/krb5_wrap/krb5_samba.c | 37 +
lib/ldb-samba/ldb_ildap.c | 1 +
lib/torture/torture.h | 10 +
lib/util/genrand_util.c | 168 +-
lib/util/samba_util.h | 32 +-
libcli/auth/netlogon_creds_cli.c | 33 +-
libcli/auth/netlogon_creds_cli.h | 4 +
librpc/rpc/dcerpc_error.c | 8 +-
python/pyglue.c | 26 +-
python/samba/__init__.py | 1 +
python/samba/dbchecker.py | 70 +-
python/samba/join.py | 11 +-
python/samba/netcmd/domain.py | 29 +-
python/samba/netcmd/user.py | 2 +-
python/samba/provision/__init__.py | 6 +-
python/samba/provision/sambadns.py | 2 +-
python/samba/samdb.py | 2 +-
python/samba/upgradehelpers.py | 4 +-
selftest/skip | 1 +
selftest/target/Samba3.pm | 32 +
source3/include/MacExtensions.h | 3 +
source3/include/proto.h | 3 +
source3/include/smb.h | 6 -
source3/lib/util_path.c | 139 +
source3/lib/util_path.h | 1 +
source3/libads/sasl.c | 25 +-
source3/libads/util.c | 9 +-
source3/libnet/libnet_join.c | 16 +-
source3/librpc/rpc/dcerpc.h | 3 +-
source3/librpc/rpc/dcerpc_helpers.c | 9 +-
source3/libsmb/trusts_util.c | 143 +-
source3/modules/vfs_catia.c | 1355 +++++++-
source3/modules/vfs_dirsort.c | 67 +-
source3/modules/vfs_fruit.c | 3525 ++++++++++++++------
source3/modules/vfs_shadow_copy2.c | 909 +++--
source3/modules/vfs_streams_xattr.c | 64 +-
source3/passdb/passdb.c | 17 +
source3/rpc_client/cli_pipe.c | 3 +-
source3/rpc_server/mdssvc/sparql_mapping.c | 5 +
source3/rpc_server/rpc_service_setup.c | 21 +-
source3/rpc_server/wscript_build | 11 +-
.../script/tests/test_smbclient_encryption_off.sh | 65 +
source3/selftest/tests.py | 25 +-
source3/smbd/filename.c | 150 +
source3/smbd/negprot.c | 23 +-
source3/smbd/open.c | 110 +-
source3/smbd/posix_acls.c | 4 +-
source3/smbd/service.c | 115 +-
source3/smbd/smb2_negprot.c | 2 +-
source3/smbd/smb2_server.c | 14 +-
source3/smbd/smb2_tcon.c | 3 +-
source3/torture/torture.c | 145 +
source3/utils/net_rpc_trust.c | 6 +-
source3/winbindd/idmap_ad.c | 36 +-
source3/winbindd/winbindd_ads.c | 10 +
source3/winbindd/winbindd_cm.c | 115 +-
source3/winbindd/winbindd_util.c | 22 +
source3/wscript_build | 2 +-
source4/dsdb/samdb/ldb_modules/password_hash.c | 84 +
source4/dsdb/samdb/ldb_modules/repl_meta_data.c | 10 +-
source4/dsdb/samdb/ldb_modules/samba_dsdb.c | 78 +-
source4/dsdb/samdb/ldb_modules/samldb.c | 25 +-
source4/dsdb/samdb/samdb.h | 2 +
source4/ldap_server/ldap_bind.c | 37 +-
source4/libcli/raw/smb.h | 7 -
source4/libnet/libnet_vampire.c | 2 +-
source4/scripting/bin/renamedc | 2 +-
source4/selftest/tests.py | 5 +
source4/setup/tests/blackbox_supported_features.sh | 86 +
source4/torture/vfs/fruit.c | 409 ++-
source4/torture/vfs/vfs.c | 37 +-
testprogs/blackbox/dbcheck-links.sh | 47 +
testprogs/blackbox/renamedc.sh | 6 +-
third_party/waf/wafadmin/Tools/config_c.py | 4 +-
180 files changed, 7412 insertions(+), 2057 deletions(-)
create mode 100755 source3/script/tests/test_smbclient_encryption_off.sh
create mode 100755 source4/setup/tests/blackbox_supported_features.sh
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-samba/samba.git
More information about the Pkg-samba-maint
mailing list