summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2015-03-17samba (2:4.1.17+dfsg-2+dyson1) unstable; urgency=mediumHEADdyson/4.1.17+dfsg-2+dyson1masterIgor Pashev2-1/+16
* Package for Dyson * Updated debian/patches/dyson-nsswitch.patch
2015-03-17Merge branch 'master' of git://anonscm.debian.org/pkg-samba/sambaIgor Pashev192-786/+2661
Conflicts: debian/changelog debian/patches/series
2015-03-07release samba 2:4.1.17+dfsg-2 to unstabledebian/2%4.1.17+dfsg-2Ivo De Decker1-2/+3
2015-03-07Add samba.preinst to temporarily deactivate the old qtsmbstatusd initscriptIvo De Decker2-0/+27
2015-02-23release samba 2:4.1.17+dfsg-1 to unstabledebian/2%4.1.17+dfsg-1Ivo De Decker1-2/+2
2015-02-23Build-depend on reverted ldb version (with increased epoch)Ivo De Decker3-4/+6
2015-02-23Add breaks on qtsmbstatus-server (<< 2.2.1-3~).Ivo De Decker2-0/+2
Closes: #775041
2015-02-23backport torture test for CVE-2015-0240Ivo De Decker3-0/+262
2015-02-23update changelog for upstream version 4.1.17Ivo De Decker1-2/+3
- security release for CVE-2015-0240 - add bug numbers for security issues
2015-02-23Merge tag 'upstream/4.1.17+dfsg'Ivo De Decker91-182/+247
Upstream version 4.1.17+dfsg
2015-02-23Imported Upstream version 4.1.17+dfsgupstream/4.1.17+dfsgupstream_4.1Ivo De Decker91-182/+247
2015-02-22Fix installation of bind modules.Ivo De Decker1-1/+1
2015-02-22Refresh patch add-so-version-to-private-librariesIvo De Decker2-5/+8
2015-02-22start changelog for 2:4.1.16+dfsg-1Ivo De Decker1-0/+8
fix for CVE-2014-8143
2015-02-22Merge tag 'upstream/4.1.16+dfsg'Ivo De Decker184-774/+2278
Upstream version 4.1.16+dfsg
2015-02-22Imported Upstream version 4.1.16+dfsgupstream/4.1.16+dfsgIvo De Decker184-774/+2278
2015-02-21VERSION: Disable git snapshots for the 4.1.17 release.Karolin Seeger1-1/+1
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11077 CVE-2015-0240: talloc free on uninitialized stack pointer in netlogon server could lead to security vulnerability. Signed-off-by: Karolin Seeger <kseeger@samba.org>
2015-02-21WHATSNEW: Add release notes for Samba 4.1.17.Karolin Seeger1-3/+59
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11077 CVE-2015-0240: talloc free on uninitialized stack pointer in netlogon server could lead to security vulnerability. Signed-off-by: Karolin Seeger <kseeger@samba.org>
2015-02-21s3-netlogon: Make sure we do not deference a NULL pointer.Andreas Schneider1-1/+6
This is an additional patch for CVE-2015-0240. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11077#c32 Pair-Programmed-With: Michael Adam <obnox@samba.org> Pair-Programmed-With: Andreas Schneider <asn@samba.org> Signed-off-by: Michael Adam <obnox@samba.org> Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org>
2015-02-21CVE-2015-0240: s3: netlogon: Ensure we don't call talloc_free on an ↵Jeremy Allison1-1/+5
uninitialized pointer. Bug: https://bugzilla.samba.org/show_bug.cgi?id=11077 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2015-02-10VERSION: Re-enable git snapshots.Karolin Seeger1-1/+1
Signed-off-by: Karolin Seeger <kseeger@samba.org>
2015-02-10VERSION: Bump version up to 4.1.17.Karolin Seeger1-1/+1
Signed-off-by: Karolin Seeger <kseeger@samba.org> (cherry picked from commit c4e46cd4e32ef5bf25f3a21f74bb40dfb1dd3c0d)
2015-01-12VERSION: Disable git snapshots for the 4.1.16 release.Karolin Seeger1-1/+1
Signed-off-by: Karolin Seeger <kseeger@samba.org>
2015-01-12WHATSNEW: Add release notes for Samba 4.1.16.Karolin Seeger1-3/+52
Signed-off-by: Karolin Seeger <kseeger@samba.org>
2015-01-12CVE-2014-8143:dsdb-samldb: Check for extended access rights before we allow ↵Andrew Bartlett5-6/+221
changes to userAccountControl This requires an additional control to be used in the LSA server to add domain trust account objects. Bug: https://bugzilla.samba.org/show_bug.cgi?id=10993 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2015-01-12CVE-2014-8143:dsdb: Allow use of dsdb_autotransaction_request outside util.cAndrew Bartlett1-2/+2
Bug: https://bugzilla.samba.org/show_bug.cgi?id=10993 Change-Id: If6bc90305a1e9a5a92562a01ba7e44330de91cc1 Pair-programmed-with: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2015-01-12CVE-2014-8143:pydsdb: Pull in UF_USE_AES_KEYS flagAndrew Bartlett1-0/+1
Bug: https://bugzilla.samba.org/show_bug.cgi?id=10993 Change-Id: I36ad5ebc5d8a4811c41b59af90a3add4ae5fd857 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2015-01-12CVE-2014-8143:auth: Force talloc type of session_info pointer to matchAndrew Bartlett1-0/+5
This helps us keep things safe in LDB where we put this in a opaque pointer. Bug: https://bugzilla.samba.org/show_bug.cgi?id=10993 Andrew Bartlett Change-Id: I46fe53ba655ca0810c276b72fbca524884cdf22d Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2015-01-12VERSION: Bump version up to 4.1.16...Karolin Seeger1-2/+2
and re-enable git snapshots. Signed-off-by: Karolin Seeger <kseeger@samba.org> (cherry picked from commit 9f52de75088380915835e815217bdcd0afa8dc85)
2015-01-11VERSION: Disable git snapshots for the 4.1.15 release.Karolin Seeger1-1/+1
Signed-off-by: Karolin Seeger <kseeger@samba.org>
2015-01-11WHATSNEW: Add release notes for Samba 4.1.15.Karolin Seeger1-3/+86
Signed-off-by: Karolin Seeger <kseeger@samba.org>
2015-01-11nsswitch: fix soname of linux nss_*.so.2 modulesStefan Metzmacher2-13/+18
Bug: https://bugzilla.samba.org/show_bug.cgi?id=9299 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> (similar to commit 575b093dac3c509b1bfaab0b4ad29b9b4214e487) Autobuild-User(v4-1-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-1-test): Sun Jan 11 16:15:06 CET 2015 on sn-devel-104
2015-01-11selftest: use shared/libnss_wrapper_winbind.so.2Stefan Metzmacher2-2/+2
This library is always available in make test. nss-wrapper strictly requires the linux nss api. Bug: https://bugzilla.samba.org/show_bug.cgi?id=9299 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (similar to commit 4eb24fa545234be506eb1330ccbbfd5c2b9e0d82)
2015-01-11wafsamba: add optional keep_underscore=True to SAMBA_LIBRARY()Stefan Metzmacher1-1/+5
Bug: https://bugzilla.samba.org/show_bug.cgi?id=9299 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (similar to commit 82e583b04b04e560c121163850d70c52d2fce78d)
2015-01-11winbind: Retry after SESSION_EXPIRED error in ping-dcChristof Schmitt1-0/+8
Trying to establish a netlogon connection when the service ticket expires might fail with NT_STATUS_NETWORK_SESSION_EXPIRED. The underlying client code already marks the session as invalid, so retry the netlogon connect in this case. Signed-off-by: Christof Schmit <cs@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Jan 6 02:58:57 CET 2015 on sn-devel-104 (cherry picked from commit a2670f15dea27c10e3827216adf572f9c3894f85) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11034
2015-01-11winbind: Retry LogonControl RPC in ping-dc after session expirationChristof Schmitt1-0/+10
When the underlying session expires, the LogonControl RPC call used in ping-dc returns NT_STATUS_IO_DEVICE_ERROR. Retry once in this case, instead of returning the error to the caller. Signed-off-by: Christof Schmitt <cs@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Dec 23 02:46:34 CET 2014 on sn-devel-104 (cherry picked from commit 2fdc55160309cec89aeb88243cb18d058c67e918) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11034
2015-01-11librpc/ndr_drsuapi: Allow ndrdump to dump dsinfo52 blobsMatthieu Patou1-0/+34
Change-Id: I6968b25c67587296b928b2193a9d48093c69c01a Signed-off-by: Matthieu Patou <mat@matws.net> Reviewed-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 1ac96a416d7d6db2476f56129166fd9e018e7306) The last 6 patches address BUG: https://bugzilla.samba.org/show_bug.cgi?id=11006 'domain join' fails - 'drsuapi.DsBindInfoFallBack' has no attribute 'supported_extensions'.
2015-01-11idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfoSamuel Cabrero9-7/+179
Signed-off-by: Samuel Cabrero <scabrero@zentyal.com> Reviewed-by: Kamen Mazdrashki <kamenim@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Kamen Mazdrashki <kamenim@samba.org> (cherry picked from commit d747372d28273542298f86530e715e8faaf907f2)
2015-01-11librpc-idl: change the drsuapi_DsBindInfoCtr so that it match what is on the ↵Matthieu Patou2-9/+204
wire both in NDR32 and NDR64. Previous implementation had a problem with NDR64 with uint32 and uint3264 being in the wrong order Signed-off-by: Matthieu Patou <mat@matws.net> Reviewed-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Wed Oct 30 10:16:02 CET 2013 on sn-devel-104 (cherry picked from commit 8dc931bafca00c1c61a4366ffb6cfa72a98bb412)
2015-01-11librpc-idl: replace int32 by uint32 as the values are always > 0Stefan Metzmacher1-2/+2
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 1e2e421632c275f8cf7529935f72ef3639ddea14)
2015-01-11librpc-idl: replace int32 by the enumeration as it's the type that we use in ↵Matthieu Patou1-10/+10
union's switch drsuapi_DsGetDCInfoCtrLevels Signed-off-by: Matthieu Patou <mat@matws.net> Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 568bf16dfadb4bd3003ed18b19098a3d1473f2fe)
2015-01-11drsuapi.idl: change the range for attribute values to 26214400 bytes.Stefan Metzmacher1-1/+1
This matches the IDL from [MS-DRSR]. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Matthieu Patou <mat@matws.net> (cherry picked from commit 51d8eba8417c58c2ade30d58a838441008209542)
2014-12-24samba (2:4.1.13+dfsg-4+dyson2) unstable; urgency=mediumdyson/4.1.13+dfsg-4+dyson2Igor Pashev1-0/+6
* Fixed SMF manifests
2014-12-24Fixed SMF manifestsIgor Pashev2-2/+6
2014-12-24samba (2:4.1.13+dfsg-4+dyson1) unstable; urgency=mediumdyson/4.1.13+dfsg-4+dyson1Igor Pashev1-0/+10
* Package for Dyson * No ctdb at illumos yet * Define __EXTENSIONS__ instead of _XOPEN_SOURCE_EXTENDED (dyson-cflags.patch) * Fixed nss_winbind for Dyson (dyson-nsswitch.patch) * Added SMF services
2014-12-24Added SMF servicesIgor Pashev2-0/+95
2014-12-24Require dh-smf on illumosIgor Pashev1-0/+1
2014-12-24Fixed nss_winbind for DysonIgor Pashev2-0/+17
2014-12-24Define __EXTENSIONS__ instead of _XOPEN_SOURCE_EXTENDEDIgor Pashev2-0/+14
2014-12-24No ctdb at illumos yetIgor Pashev1-1/+9