mirror of
https://github.com/samba-team/samba.git
synced 2024-12-24 21:34:56 +03:00
working on new format for relerase notes in 3.0.2pre1
This commit is contained in:
Gerald Carter
parent
ba33f1e0d5
commit
6770f32c0e
536
WHATSNEW.txt
536
WHATSNEW.txt
@ -1,12 +1,12 @@
|
|||||||
WHATS NEW IN Samba 3.0.1pre3
|
WHATS NEW IN Samba 3.0.2pre1
|
||||||
November 14, 2003
|
January XX, 2004
|
||||||
==============================
|
===============================
|
||||||
|
|
||||||
This is a preview release of the Samba 3.0.1 code base and is
|
This is a preview release of the Samba 3.0.2 code base and is
|
||||||
provided for testing only. This release is *not* intended for
|
provided for testing only. This release is *not* intended for
|
||||||
production servers. Use at your own risk.
|
production servers. Use at your own risk.
|
||||||
|
|
||||||
There have been several bug fixes since the 3.0.0 release that
|
There have been several bug fixes since the 3.0.1 release that
|
||||||
we feel are important to make available to the Samba community
|
we feel are important to make available to the Samba community
|
||||||
for wider testings. See the "Changes" section for details on
|
for wider testings. See the "Changes" section for details on
|
||||||
exact updates.
|
exact updates.
|
||||||
@ -15,200 +15,402 @@ exact updates.
|
|||||||
######################################################################
|
######################################################################
|
||||||
Changes
|
Changes
|
||||||
#######
|
#######
|
||||||
Changes since 3.0.1pre2
|
Changes since 3.0.1
|
||||||
-----------------------
|
----------------------
|
||||||
|
|
||||||
Please refer to the CVS log for the SAMBA_3_0 branch for complete
|
Please refer to the CVS log for the SAMBA_3_0 branch for complete
|
||||||
details:
|
details. The list of changes per contributor are as follows:
|
||||||
|
|
||||||
1) Skip over the winbind separator when looking up a user.
|
Parameter Name Action
|
||||||
This fixes the bug that prevented local users from
|
-------------- ------
|
||||||
matching an AD user when not running winbindd (bug 698).
|
ldap replication sleep New
|
||||||
2) Fix a problem with configure on *BSD systems. Make sure
|
|
||||||
we add -liconv etc to LDFLAGS.
|
|
||||||
3) Fix core dump bug when "security = server" and the authentication
|
|
||||||
server goes away.
|
|
||||||
4) Correct crash bug due to an empty munged dial string.
|
|
||||||
5) Show files locked by a specific user (smbstatus -u 'user')
|
|
||||||
(bug 590).
|
|
||||||
6) Fix bug preventing print jobs from display in the queue
|
|
||||||
monitor used by Windows NT and later clients (bug 660).
|
|
||||||
7) Fix several reported problems with point-n-print from
|
|
||||||
Windows 2000/XP clients due to a bug in the EnumPrinterDataEx()
|
|
||||||
reply (bug 338, 527 & 643).
|
|
||||||
8) Fix a handful of potential memory leaks in the LDAP code used
|
|
||||||
by ldapsam[_compat] and the LDAP idmap backend.
|
|
||||||
|
|
||||||
|
|
||||||
Changes since 3.0.1pre1
|
Commits
|
||||||
-----------------------
|
-------
|
||||||
|
|
||||||
1) Match Samba 2.2 behavior; make ACB_NORMAL the default ACB value.
|
|
||||||
2) Updated Japanese welcome file in SWAT.
|
|
||||||
3) Fix to nt-time <-> unix-time functions reversible.
|
|
||||||
4) Ensure that winbindd uses the the escaped DN when querying
|
|
||||||
an AD ldap server.
|
|
||||||
5) Fix portability issues when compiling (bug 505, 550)
|
|
||||||
6) Compile fix for tdbbackup when Samba needs to override
|
|
||||||
non-C99 compliant implementations of snprintf().
|
|
||||||
7) Use @PICSUFFIX@ instead of .po in Makefile.in (bug 574).
|
|
||||||
8) Make sure we break out of samsync loop on error.
|
|
||||||
9) Ensure error code path doesn't free unmalloc()'d memory
|
|
||||||
(bug 628).
|
|
||||||
10) Add configure test for krb5_keytab_entry keyblock vs key
|
|
||||||
member (bug 636).
|
|
||||||
11) Fixed spinlocks.
|
|
||||||
12) Modified testparm so that all output so all debug output goes
|
|
||||||
to stderr, and all file processing goes to stdout.
|
|
||||||
13) Fix error return code for BUFFER_TOO_SMALL in smbcacls
|
|
||||||
and smbcquotas.
|
|
||||||
14) Fix "NULL dest in safe_strcpy()" log message by ensuring that
|
|
||||||
we have a devmode before copying a string to the devicename.
|
|
||||||
15) Support mapping REALM.COM\user to a local user account (without
|
|
||||||
running winbindd) for compatibility with 2.2.x release.
|
|
||||||
16) Ensure we don't use mmap() on blacklisted systems.
|
|
||||||
17) fixed a number of bugs and memory leaks in the AIX
|
|
||||||
winbindd shim
|
|
||||||
18) Call initgroups() in SWAT before becomming the user so that
|
|
||||||
secondary group permissions can be used when writing to
|
|
||||||
smb.conf.
|
|
||||||
19) Fix signing problems when reverse connecting back to a
|
|
||||||
client for printer notify
|
|
||||||
20) Fix signing problems caused by a miss-sequence bug.
|
|
||||||
21) Missing map in errormap for ERROR_MORE_DATA -> ERRDOS, ERRmoredata.
|
|
||||||
Fixes NEXUS tools running on Win9x clients (bug 64).
|
|
||||||
22) Don't leave the domain field uninitialized in cli_lsa.c if some
|
|
||||||
SID could not be mapped.
|
|
||||||
23) Fix segfault in mount.cifs helper when there is no options
|
|
||||||
specified during mount.
|
|
||||||
24) Change the \n after the password prompt to go to tty instead
|
|
||||||
of stdout (bug 668).
|
|
||||||
25) Stop net -P from prompting for machine account password (bug 451).
|
|
||||||
26) Change in behavior to Not only change the effective uid but also
|
|
||||||
the real uid when becoming unprivileged.
|
|
||||||
27) Cope with Exchange 5.5 cleartext pop password auth.
|
|
||||||
28) New files for support of initshutdown pipe. Win2k doesn't
|
|
||||||
respond properly to all requests on the winreg pipe, so we need
|
|
||||||
to handle this new pipe (bug 534).
|
|
||||||
29) Added more va_copy() checks in configure.in.
|
|
||||||
30) Include fixes for libsmbclient build problems.
|
|
||||||
31) Missing UNIX -> DOS codepage conversion in lanman.c.
|
|
||||||
32) Allow DFMS-S filenames can now have arbitrary case (bug 667).
|
|
||||||
33) Parameterize the listen backlog in smbd and make it larger by
|
|
||||||
default. A backlog of 5 is way too small these days.
|
|
||||||
34) Check for an invalid fid before dereferencing the fsp pointer
|
|
||||||
(bug 696).
|
|
||||||
35) Remove invalid memory frees and return codes in pdb_ldap.c.
|
|
||||||
36) Prompt for password when invoking --set-auth-user and no
|
|
||||||
password is given.
|
|
||||||
37) Bind the nmbd sending socket to the 'socket address'.
|
|
||||||
38) Re-order link command for smbd, rpcclient and smbpasswd to ensure
|
|
||||||
$LDFLAGS occurs before any library specification (bug 661).
|
|
||||||
39) Fix large number of printf() calls for 64-bit size_t.
|
|
||||||
40) Fix AC_CHECK_MEMBER so that SLES8 does correctly finds the
|
|
||||||
keyblock in the krb5 structs.
|
|
||||||
41) Remove #include <compat.h> in hopes to avoid problems with
|
|
||||||
apache header files.
|
|
||||||
42) COrrect winbindd build problems on HP-UX 11
|
|
||||||
43) Lowercase netgroups lookups (bug 703).
|
|
||||||
44) Use the actual size of the buffer in strftime instead of a made
|
|
||||||
up value which just happens to be less than sizeof(fstring).
|
|
||||||
(bug 713).
|
|
||||||
45) Add ldaplibs to pdbedit link line (bug 651).
|
|
||||||
46) Fix crash bug in smbclient completion (bug 659).
|
|
||||||
47) Fix packet length for browse list reply (bug 771).
|
|
||||||
48) Fix coredump in cli_get_backup_list().
|
|
||||||
49) Make sure that we expand %N (bug 612).
|
|
||||||
50) Allow rpcclient adddriver command to specify printer driver
|
|
||||||
version (bug 514).
|
|
||||||
51) Compile tdbdump by default.
|
|
||||||
52) Apply patches to fix iconv detection for FreeBSD.
|
|
||||||
53) Do not allow the 'guest account' to be added to a passdb backend
|
|
||||||
using smbpasswd or pdbedit (bug 624).
|
|
||||||
54) Save LDFLAGS during iconv detection (bug 57).
|
|
||||||
55) Run krb5 logins through the username map if the winbindd
|
|
||||||
lookup fails (bug 698).
|
|
||||||
56) Add const for lp_set_name_resolve_order() to avoid compiler
|
|
||||||
warnings (bug 471).
|
|
||||||
57) Add support for the %i macro in smb.conf to stand in for the for
|
|
||||||
the local IP address to which a client connected.
|
|
||||||
58) Allow winbindd to match local accounts to domain SID when
|
|
||||||
'winbind trusted domains only = yes' (bug 680).
|
|
||||||
59) Remove code in idmap_ldap that searches the user suffix and group
|
|
||||||
suffix. It's not needed and provides inconsistent functionality
|
|
||||||
from the tdb backend.
|
|
||||||
60) Patch to handle munged dial string for Windows 200 TSE.
|
|
||||||
61) Correct the "smbldap_open: cannot access when not root error"
|
|
||||||
messages when looking up group information (bug 281).
|
|
||||||
|
|
||||||
|
o Jeremy Allison <jra@samba.org>
|
||||||
|
* Tidy up of NTLMSSP code.
|
||||||
|
* Fixes for SMB signing errors
|
||||||
|
|
||||||
|
|
||||||
|
o Petri Asikainen <paca@sci.fi>
|
||||||
|
* BUG 330, 387:Fix single valued attribute updates when
|
||||||
|
working with Novell NDS.
|
||||||
|
|
||||||
|
|
||||||
|
o Andrew Bartlet <abartlet@samba.org>
|
||||||
|
* Correctly handle per-pipe NTLMSSP inside a NULL session.
|
||||||
|
* Fix segfault in gencache
|
||||||
|
* Fix early free() of encrypted_session_key.
|
||||||
|
* Change DC lookup routines to more carefully separate
|
||||||
|
DNS names (realms) from NetBIOS domain names.
|
||||||
|
* Add new sid_to_dn() utility function for internal winbindd use.
|
||||||
|
* Refactor cli_ds_enum_domain_trusts().
|
||||||
|
* BUG 707: Implement range retrieval of ADS attributes (based on
|
||||||
|
work from Volker <vl@samba.org> and Guenther Deschner
|
||||||
|
<gd@suse.com>).
|
||||||
|
* Automatically initialize the signing engine if a session key is
|
||||||
|
available.
|
||||||
|
* BUG 916: Do not perform a + -> ' ' substitution for squid URL
|
||||||
|
encoded strings, only form input in SWAT.
|
||||||
|
* Ensure Samba resets the NTLMSSP state for new negotiate packets.
|
||||||
|
* Add 2-byte alignments in net_samlogon() queries to parse odd-length
|
||||||
|
plain text passwords.
|
||||||
|
* Allow Windows groups with no members in winbindd.
|
||||||
|
* Allow normal authentication in the absence of a server
|
||||||
|
generated session key.
|
||||||
|
* More optimizations for looking up UNIX group lists.
|
||||||
|
* Clean up error codes and return values for pam_winbindd
|
||||||
|
and winbindd PAM interface.
|
||||||
|
* Fix restring return values in ntlm_auth tool.
|
||||||
|
|
||||||
|
|
||||||
|
o Dmitry Butskoj <buc@odusz.elektra.ru>
|
||||||
|
* Fix for special files being hidden from admins.
|
||||||
|
|
||||||
|
|
||||||
|
o Gerald (Jerry) Carter <jerry@samba.org>
|
||||||
|
* Fix bug in the lanman session key generation. Caused
|
||||||
|
"decode_pw: incorrect password length" error messages.
|
||||||
|
* Save the right case for the located user name in
|
||||||
|
fill_sam_account(). Fixes %U/%u expansion for win9x clients.
|
||||||
|
* BUG 897: Add well known rid for pre win2k compatible access
|
||||||
|
group.
|
||||||
|
* BUG 887: Correct typo in delete user script example.
|
||||||
|
* Use short lived TALLOC_CTX* for allocating printer objects
|
||||||
|
from the print handle cache.
|
||||||
|
|
||||||
|
|
||||||
|
o Guenther Deschner <gd@suse.com>
|
||||||
|
* Install smbwrapper.so should be put into the $(libdir)
|
||||||
|
and not $(bindir).
|
||||||
|
* Add the capability to specify the new user password
|
||||||
|
for 'net ads password' on the command line.
|
||||||
|
|
||||||
|
o James Flemer <jflemer@uvm.edu>
|
||||||
|
* Fix AIX compile bug by linking HAVE_ATTR_LIST to HAVE_SYS_ATTRIBUTES_H.
|
||||||
|
|
||||||
|
|
||||||
|
o Volker Lendecke <vl@samba.org>
|
||||||
|
* BUG 583: Ensure that user names always contain the short version
|
||||||
|
of the domain name.
|
||||||
|
* Fix our parsing of the LDAP uri.
|
||||||
|
* Don't show the 'afs username map' in the SWAT basic view.
|
||||||
|
* Fix SMB signing issues in relation to failed NTLMSSP logins.
|
||||||
|
* BUG 924: Fix return codes in smbtorture harness.
|
||||||
|
* Don't lower-case usernames before handing it to AFS code.
|
||||||
|
|
||||||
|
|
||||||
|
o Jianliang Lu <j.lu@tiesse.com>
|
||||||
|
* Ensure we delete the group mapping before calling the delete
|
||||||
|
group script.
|
||||||
|
* Define well known RID for managing the "Power Users" group.
|
||||||
|
|
||||||
|
|
||||||
|
o Stefan Metzmacher <metze@metzemix.de>
|
||||||
|
* Implement LDAP rebind sleep patch.
|
||||||
|
* Revert to 2.2 quota code because of so many broken quota files
|
||||||
|
out there.
|
||||||
|
|
||||||
|
o Tim Potter <tpot@samba.org>
|
||||||
|
* BUG 924: Fix typo in RW2 torture test.
|
||||||
|
|
||||||
|
o Richard Sharpe <shape@samba.org>
|
||||||
|
* Small fixes to torture.c to cleanup the error handling
|
||||||
|
and prevent crashes.
|
||||||
|
|
||||||
|
|
||||||
|
o J. Tournier <jerome.tournier@IDEALX.com>
|
||||||
|
* Small fixes for the smbldap-tool scripts.
|
||||||
|
|
||||||
|
|
||||||
|
o Jelmer Vernooij <jelmer@samba.org>
|
||||||
|
* Put functions for generating SQL queries in pdb_sql.c
|
||||||
|
* Add pgSQL backend (based on patch by Hamish Friedlander)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
Changes since 3.0.0
|
Changes since 3.0.0
|
||||||
-------------------
|
----------------------
|
||||||
|
|
||||||
Modified parameters
|
Parameter Name Action
|
||||||
* mangled map (deprecated)
|
-------------- ------
|
||||||
|
hide local users Removed
|
||||||
Removed Parameters
|
mangled map Deprecated
|
||||||
* mangled stack (unused)
|
mangled stack Removed
|
||||||
|
passwd chat timeout New
|
||||||
|
|
||||||
|
commits
|
||||||
|
-------
|
||||||
|
|
||||||
1) Change the interface for init_unistr2 to not take a length
|
o Change the interface for init_unistr2 to not take a length
|
||||||
but a flags field. We were assuming that
|
but a flags field. We were assuming that
|
||||||
2*strlen(mb_string) == length of ucs2-le string. (bug 480).
|
2*strlen(mb_string) == length of ucs2-le string. (bug 480).
|
||||||
2) Allow d_printf() to handle strings with escaped quotation
|
o Allow d_printf() to handle strings with escaped quotation
|
||||||
marks since the msg file includes the escape character (bug 489).
|
marks since the msg file includes the escape character (bug 489).
|
||||||
3) Fix bad html table row termination in SWAT wizard code (bug 413).
|
o Fix bad html table row termination in SWAT wizard code (bug 413).
|
||||||
4) Fix to parse the level-2 strings.
|
o Fix to parse the level-2 strings.
|
||||||
5) Fix for "valid users = %S" in [homes]. Fix read/write
|
o Fix for "valid users = %S" in [homes]. Fix read/write
|
||||||
list as well.
|
list as well.
|
||||||
6) Change AC_CHECK_LIB_EXT to prepend libraries instead of append.
|
o Change AC_CHECK_LIB_EXT to prepend libraries instead of append.
|
||||||
This is the same way AC_CHECK_LIB works (bug 508).
|
This is the same way AC_CHECK_LIB works (bug 508).
|
||||||
7) Testparm output fixes for clarity.
|
o Testparm output fixes for clarity.
|
||||||
8) Fix broken wins hook functionality -- i18n bug (bug 528).
|
o Fix broken wins hook functionality -- i18n bug (bug 528).
|
||||||
9) Take care of condition where DOS and NT error codes must differ.
|
o Take care of condition where DOS and NT error codes must differ.
|
||||||
10) Default to using only built-in charsets when a working iconv
|
o Default to using only built-in charsets when a working iconv
|
||||||
implementation cannot be located.
|
implementation cannot be located.
|
||||||
11) Wrap internals of sys_setgroups() so the sys_XX() call can
|
o Wrap internals of sys_setgroups() so the sys_XX() call can
|
||||||
be done unconditionally (bug 550).
|
be done unconditionally (bug 550).
|
||||||
12) Remove duplicate smbspool link on SWAT's front page (bug 541).
|
o Remove duplicate smbspool link on SWAT's front page (bug 541).
|
||||||
13) Save and restore CFLAGS before/after AC_PROG_CC. Ensures that
|
o Save and restore CFLAGS before/after AC_PROG_CC. Ensures that
|
||||||
--enable-debug=[yes|no] works correctly.
|
--enable-debug=[yes|no] works correctly.
|
||||||
14) Allow ^C to interrupt smbpasswd if using our getpass
|
o Allow ^C to interrupt smbpasswd if using our getpass
|
||||||
(e.g. smbpasswd command).
|
(e.g. smbpasswd command).
|
||||||
15) Support signing only on RPC's (bug 167).
|
o Support signing only on RPC's (bug 167).
|
||||||
16) Correct bug that prevented Excel 2000 clients from opening
|
o Correct bug that prevented Excel 2000 clients from opening
|
||||||
files marked as read-only.
|
files marked as read-only.
|
||||||
17) Portability fix bugs 546 - 549).
|
o Portability fix bugs 546 - 549).
|
||||||
18) Explicitly initialize the value of AR for vendor makes that don't
|
o Explicitly initialize the value of AR for vendor makes that don't
|
||||||
do this (e.g. HPUX 11). (bug 552).
|
do this (e.g. HPUX 11). (bug 552).
|
||||||
19) More i18n fixes for SWAT (bug 413).
|
o More i18n fixes for SWAT (bug 413).
|
||||||
20) Change the cwd before the postexec script to ensure that a
|
o Change the cwd before the postexec script to ensure that a
|
||||||
umount will succeed.
|
umount will succeed.
|
||||||
21) Correct double free that caused winbindd to crash when a DC
|
o Correct double free that caused winbindd to crash when a DC
|
||||||
is rebooted (bug 437).
|
is rebooted (bug 437).
|
||||||
22) Fix incorrect mode sum (bug 562).
|
o Fix incorrect mode sum (bug 562).
|
||||||
23) Canonicalize SMB_INFO_ALLOCATION in the same was as
|
o Canonicalize SMB_INFO_ALLOCATION in the same was as
|
||||||
SMB_FS_FULL_SIZE_INFORMATION (bug 564).
|
SMB_FS_FULL_SIZE_INFORMATION (bug 564).
|
||||||
24) Add script to generate *msg files.
|
o Add script to generate *msg files.
|
||||||
25) Add Dutch SWAT translation file.
|
o Add Dutch SWAT translation file.
|
||||||
26) Make sure to call get_user_groups() with the full winbindd
|
o Make sure to call get_user_groups() with the full winbindd
|
||||||
name for a user if he/she has one (bug 406).
|
name for a user if he/she has one (bug 406).
|
||||||
27) Fix up error code returns from Samba4 tester. Ensure invalid
|
o Fix up error code returns from Samba4 tester. Ensure invalid
|
||||||
paths are validated the same way.
|
paths are validated the same way.
|
||||||
28) Allow Samba3 to pass the Samba4 RAW-READ tests.
|
o Allow Samba3 to pass the Samba4 RAW-READ tests.
|
||||||
29) Refuse to configure if --with-expsam=$BACKEND was used but no
|
o Refuse to configure if --with-expsam=$BACKEND was used but no
|
||||||
libraries were found for $BACKEND.
|
libraries were found for $BACKEND.
|
||||||
30) Move sysquotas autoconf tests to a separate file.
|
o Move sysquotas autoconf tests to a separate file.
|
||||||
31) Match W2K w.r.t. writelock and writeclose. Samba4 torture
|
o Match W2K w.r.t. writelock and writeclose. Samba4 torture
|
||||||
tester
|
tester
|
||||||
32) Make sure that the files that contain the static_init_$subsystem;
|
o Make sure that the files that contain the static_init_$subsystem;
|
||||||
macro get recompiled after configure by removing the object
|
macro get recompiled after configure by removing the object
|
||||||
files.
|
files.
|
||||||
33) Ensure canceling a blocking lock returns the correct error
|
o Ensure canceling a blocking lock returns the correct error
|
||||||
message.
|
message.
|
||||||
34) Match Samba 2.2, and make ACB_NORMAL the default ACB value.
|
o Match Samba 2.2 behavior; make ACB_NORMAL the default ACB value.
|
||||||
|
o Updated Japanese welcome file in SWAT.
|
||||||
|
o Fix to nt-time <-> unix-time functions reversible.
|
||||||
|
o Ensure that winbindd uses the the escaped DN when querying
|
||||||
|
an AD ldap server.
|
||||||
|
o Fix portability issues when compiling (bug 505, 550)
|
||||||
|
o Compile fix for tdbbackup when Samba needs to override
|
||||||
|
non-C99 compliant implementations of snprintf().
|
||||||
|
o Use @PICSUFFIX@ instead of .po in Makefile.in (bug 574).
|
||||||
|
o Make sure we break out of samsync loop on error.
|
||||||
|
o Ensure error code path doesn't free unmalloc()'d memory
|
||||||
|
(bug 628).
|
||||||
|
o Add configure test for krb5_keytab_entry keyblock vs key
|
||||||
|
member (bug 636).
|
||||||
|
o Fixed spinlocks.
|
||||||
|
o Modified testparm so that all output so all debug output goes
|
||||||
|
to stderr, and all file processing goes to stdout.
|
||||||
|
o Fix error return code for BUFFER_TOO_SMALL in smbcacls
|
||||||
|
and smbcquotas.
|
||||||
|
o Fix "NULL dest in safe_strcpy()" log message by ensuring that
|
||||||
|
we have a devmode before copying a string to the devicename.
|
||||||
|
o Support mapping REALM.COM\user to a local user account (without
|
||||||
|
running winbindd) for compatibility with 2.2.x release.
|
||||||
|
o Ensure we don't use mmap() on blacklisted systems.
|
||||||
|
o fixed a number of bugs and memory leaks in the AIX
|
||||||
|
winbindd shim
|
||||||
|
o Call initgroups() in SWAT before becomming the user so that
|
||||||
|
secondary group permissions can be used when writing to
|
||||||
|
smb.conf.
|
||||||
|
o Fix signing problems when reverse connecting back to a
|
||||||
|
client for printer notify
|
||||||
|
o Fix signing problems caused by a miss-sequence bug.
|
||||||
|
o Missing map in errormap for ERROR_MORE_DATA -> ERRDOS, ERRmoredata.
|
||||||
|
Fixes NEXUS tools running on Win9x clients (bug 64).
|
||||||
|
o Don't leave the domain field uninitialized in cli_lsa.c if some
|
||||||
|
SID could not be mapped.
|
||||||
|
o Fix segfault in mount.cifs helper when there is no options
|
||||||
|
specified during mount.
|
||||||
|
o Change the \n after the password prompt to go to tty instead
|
||||||
|
of stdout (bug 668).
|
||||||
|
o Stop net -P from prompting for machine account password (bug 451).
|
||||||
|
o Change in behavior to Not only change the effective uid but also
|
||||||
|
the real uid when becoming unprivileged.
|
||||||
|
o Cope with Exchange 5.5 cleartext pop password auth.
|
||||||
|
o New files for support of initshutdown pipe. Win2k doesn't
|
||||||
|
respond properly to all requests on the winreg pipe, so we need
|
||||||
|
to handle this new pipe (bug 534).
|
||||||
|
o Added more va_copy() checks in configure.in.
|
||||||
|
o Include fixes for libsmbclient build problems.
|
||||||
|
o Missing UNIX -> DOS codepage conversion in lanman.c.
|
||||||
|
o Allow DFMS-S filenames can now have arbitrary case (bug 667).
|
||||||
|
o Parameterize the listen backlog in smbd and make it larger by
|
||||||
|
default. A backlog of 5 is way too small these days.
|
||||||
|
o Check for an invalid fid before dereferencing the fsp pointer
|
||||||
|
(bug 696).
|
||||||
|
o Remove invalid memory frees and return codes in pdb_ldap.c.
|
||||||
|
o Prompt for password when invoking --set-auth-user and no
|
||||||
|
password is given.
|
||||||
|
o Bind the nmbd sending socket to the 'socket address'.
|
||||||
|
o Re-order link command for smbd, rpcclient and smbpasswd to ensure
|
||||||
|
$LDFLAGS occurs before any library specification (bug 661).
|
||||||
|
o Fix large number of printf() calls for 64-bit size_t.
|
||||||
|
o Fix AC_CHECK_MEMBER so that SLES8 does correctly finds the
|
||||||
|
keyblock in the krb5 structs.
|
||||||
|
o Remove #include <compat.h> in hopes to avoid problems with
|
||||||
|
apache header files.
|
||||||
|
o Correct winbindd build problems on HP-UX 11.
|
||||||
|
o Lowercase netgroups lookups (bug 703).
|
||||||
|
o Use the actual size of the buffer in strftime instead of a made
|
||||||
|
up value which just happens to be less than sizeof(fstring).
|
||||||
|
(bug 713).
|
||||||
|
o Add ldaplibs to pdbedit link line (bug 651).
|
||||||
|
o Fix crash bug in smbclient completion (bug 659).
|
||||||
|
o Fix packet length for browse list reply (bug 771).
|
||||||
|
o Fix coredump in cli_get_backup_list().
|
||||||
|
o Make sure that we expand %N (bug 612).
|
||||||
|
o Allow rpcclient adddriver command to specify printer driver
|
||||||
|
version (bug 514).
|
||||||
|
o Compile tdbdump by default.
|
||||||
|
o Apply patches to fix iconv detection for FreeBSD.
|
||||||
|
o Do not allow the 'guest account' to be added to a passdb backend
|
||||||
|
using smbpasswd or pdbedit (bug 624).
|
||||||
|
o Save LDFLAGS during iconv detection (bug 57).
|
||||||
|
o Run krb5 logins through the username map if the winbindd
|
||||||
|
lookup fails (bug 698).
|
||||||
|
o Add const for lp_set_name_resolve_order() to avoid compiler
|
||||||
|
warnings (bug 471).
|
||||||
|
o Add support for the %i macro in smb.conf to stand in for the for
|
||||||
|
the local IP address to which a client connected.
|
||||||
|
o Allow winbindd to match local accounts to domain SID when
|
||||||
|
'winbind trusted domains only = yes' (bug 680).
|
||||||
|
o Remove code in idmap_ldap that searches the user suffix and group
|
||||||
|
suffix. It's not needed and provides inconsistent functionality
|
||||||
|
from the tdb backend.
|
||||||
|
o Patch to handle munged dial string for Windows 200 TSE.
|
||||||
|
o Correct the "smbldap_open: cannot access when not root error"
|
||||||
|
messages when looking up group information (bug 281).
|
||||||
|
o Skip over the winbind separator when looking up a user.
|
||||||
|
This fixes the bug that prevented local users from
|
||||||
|
matching an AD user when not running winbindd (bug 698).
|
||||||
|
o Fix a problem with configure on *BSD systems. Make sure
|
||||||
|
we add -liconv etc to LDFLAGS.
|
||||||
|
o Fix core dump bug when "security = server" and the authentication
|
||||||
|
server goes away.
|
||||||
|
o Correct crash bug due to an empty munged dial string.
|
||||||
|
o Show files locked by a specific user (smbstatus -u 'user')
|
||||||
|
(bug 590).
|
||||||
|
o Fix bug preventing print jobs from display in the queue
|
||||||
|
monitor used by Windows NT and later clients (bug 660).
|
||||||
|
o Fix several reported problems with point-n-print from
|
||||||
|
Windows 2000/XP clients due to a bug in the EnumPrinterDataEx()
|
||||||
|
reply (bug 338, 527 & 643).
|
||||||
|
o Fix a handful of potential memory leaks in the LDAP code used
|
||||||
|
by ldapsam[_compat] and the LDAP idmap backend.
|
||||||
|
o Fix for pdbedit error code returns (bug 763).
|
||||||
|
o Make sure we only enumerate group mapping entries (not
|
||||||
|
/etc/group) even when doing local aliases.
|
||||||
|
o Relax check on the pipe name in a dce/rpc bind response to work
|
||||||
|
around issues with establishing trusts to a Windows 2003 domain.
|
||||||
|
o Ensure we mangle names ending in '.' in hash2 mangling method.
|
||||||
|
o Correct parsing issues with munged dial string.
|
||||||
|
o Fix bugs in quota support for XFS.
|
||||||
|
o Add a cleaner method for applications that need to provide name->SID
|
||||||
|
mappings to do this via NSS rather than having to know the
|
||||||
|
winbindd pipe protocol.
|
||||||
|
o Adds a variant of the winbindd_getgroups() call called
|
||||||
|
winbindd_getusersids() that provides direct SID->SIDs listing of a
|
||||||
|
users supplementary groups. This is enough to allow non-Samba
|
||||||
|
applications to do ACL checking.
|
||||||
|
o Make sure we don't append the 'ldap suffix' when writing out the
|
||||||
|
'ldap XXX suffix' values in SWAT (bug 328).
|
||||||
|
o Fix renames across file systems.
|
||||||
|
o Ensure that items in a list of strings containing whitespace are
|
||||||
|
written out surrounded by single quotes. This means that both
|
||||||
|
double and single quotes are now used to surround strings in
|
||||||
|
smb.conf (bug 481).
|
||||||
|
o Enable SWAT to correctly determine if winbindd is running (bug
|
||||||
|
398).
|
||||||
|
o Include WWW-Authenticate field in 401 response for bad auth
|
||||||
|
attempt (bug 629).
|
||||||
|
o Add support for NTLM2 (NTLMv2 session security).
|
||||||
|
o Add support for variable-length session keys.
|
||||||
|
o More privilege fixes for group enumeration in LDAP (bug 281).
|
||||||
|
o Use the dns name (or IP) as the originating client name when
|
||||||
|
using CUPS (bug 467).
|
||||||
|
o Fix various SMB signing bugs.
|
||||||
|
o Fix ACL propagation on a DFS root (bug 263).
|
||||||
|
o Disable NTLM2 for RPC pipes.
|
||||||
|
o Allow the client to specify the NTLM2 flags got NTLMSSP
|
||||||
|
authentication.
|
||||||
|
o Change the name of the job passed off to cups from "Test Page" to
|
||||||
|
"smbprn.00000033 Test Page" so that we can get the smb jobid back.
|
||||||
|
This allow users to delete jobs with cups printing backend (partial
|
||||||
|
work on bug 770).
|
||||||
|
o Fix build of winbindd with static pdb modules.
|
||||||
|
o Retrieve the correct ACL group bits if the file has an ACL
|
||||||
|
(bug 802).
|
||||||
|
o Implement "net rpc group members": Get members of a domain group
|
||||||
|
in human-readable format.
|
||||||
|
o Add MacOSX (Darwin) specific charset module code.
|
||||||
|
o Use samr_dispinfo(level == 1) for enumerating domain users so we
|
||||||
|
can include the full name in gecos field (bug 587).
|
||||||
|
o Add support for winbind's NSS library on FeeeBSD 5.1 (bug 797).
|
||||||
|
o Implement 'net rpc group list [global|local|builtin]*' for a
|
||||||
|
select listing of the respective user databases.
|
||||||
|
o Don't automatically set NT status code flag unless client tells
|
||||||
|
us it can cope.
|
||||||
|
o Add 'net status [sessions|shares] [parseable]'.
|
||||||
|
o Don't mistake pre-existing UNIX jobs for smb jobs (remainder of
|
||||||
|
bug 770).
|
||||||
|
o Add 'Replicator' and 'RAS Servers' to list of builtin SIDs
|
||||||
|
(bug 608).
|
||||||
|
o Fix inverted logic in hosts allow/deny checks caused by s/strcmp/strequal/
|
||||||
|
(bug 846).
|
||||||
|
o Implement correct version SamrRemoveSidForeignDomain() (bug 252).
|
||||||
|
o Fix typo in 'hash' mangling algorithm.
|
||||||
|
o Support munged dial for ldapsam (bug 800).
|
||||||
|
o Fix process_incoming_data() to return the number of bytes handled this
|
||||||
|
call whether we have a complete PDU or not; fixes bug with multiple
|
||||||
|
PDU request rpc's broken over SMBwriteX calls each.
|
||||||
|
o Fix incorrect smb flags2 for connections to pre-NT servers (causes
|
||||||
|
smbclient to fail to OS2 for example) (bug 821).
|
||||||
|
o Update version string in smbldap-tools Makefile to 0.8.2.
|
||||||
|
o Correct a problem with "net rpc vampire" mis-parsing the
|
||||||
|
alias member info reply.
|
||||||
|
o Ensure the ${libdir} is created by the installclientlib script.
|
||||||
|
o Fix detection of Windows 2003 client architecture in the smb.conf
|
||||||
|
%a variable.
|
||||||
|
o Ensure that smbd calls the add user script for a missing UNIX
|
||||||
|
user on kerberos auth call (bug 445).
|
||||||
|
o Fix bugs in hosts allow/deny when using a mismatched
|
||||||
|
network/netmask pair.
|
||||||
|
o Protect alloc_sub_basic() from crashing when the source string
|
||||||
|
is NULL (partial work on bug 687).
|
||||||
|
o Fix spinlocks on IRIX.
|
||||||
|
o Corrected some bad destination paths when running "configure
|
||||||
|
--with-fhs".
|
||||||
|
o Add packaging files for Fedora Core 1.
|
||||||
|
o Correct bug in SWAT install script for non-english languages.
|
||||||
|
o Support character set ISO-8859-1 internally (bug 558).
|
||||||
|
o Fixed more LDAP access errors when looking up group mappings
|
||||||
|
(bug 281).
|
||||||
|
o Fix UNISTR2 length bug in LsaQueryInfo(3) that caused SID
|
||||||
|
resolution to fail on local files on on domain members
|
||||||
|
(bug 875).
|
||||||
|
o Fix uninitialized variable in passdb.c.
|
||||||
|
o Fix formal parameter type in get_static() in nsswitch/wins.c.
|
||||||
|
o Fix problem mounting directories when mount.cifs is installed
|
||||||
|
with the setuid bit on.
|
||||||
|
o Fix bug that prevent --mandir from overriding the defaults
|
||||||
|
given in the --with-fhs macro.
|
||||||
|
o Fix bug in in-memory Kerberos keytab detection routines
|
||||||
|
in configure.in
|
||||||
|
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
@ -386,6 +588,7 @@ Removed Parameters (order alphabetically):
|
|||||||
* domain admin group
|
* domain admin group
|
||||||
* domain guest group
|
* domain guest group
|
||||||
* force unknown acl user
|
* force unknown acl user
|
||||||
|
* hide local users
|
||||||
* nt smb support
|
* nt smb support
|
||||||
* postscript
|
* postscript
|
||||||
* printer driver
|
* printer driver
|
||||||
@ -420,6 +623,7 @@ New Parameters (new parameters have been grouped by function):
|
|||||||
--------------
|
--------------
|
||||||
* auth methods
|
* auth methods
|
||||||
* realm
|
* realm
|
||||||
|
* passwd chat timeout
|
||||||
|
|
||||||
Protocol Options
|
Protocol Options
|
||||||
----------------
|
----------------
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user